mirror of
https://github.com/ReaJason/MemShellParty.git
synced 2026-09-22 07:00:43 +08:00
docs: update
This commit is contained in:
@@ -8,6 +8,20 @@ All notable changes to this project will be documented in this file.
|
||||
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
|
||||
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
|
||||
|
||||
## [v2.7.1](https://github.com/ReaJason/MemShellParty/releases/tag/v2.7.1) - 2026-05-24
|
||||
|
||||
### Fixed
|
||||
|
||||
1. 修复 SpELSpringGzipJDK17 高版本 org.springframework.util.Base64Utils 类被删除导致无法使用
|
||||
2. 修复 TongWeb 7.0.4.9、BES 11.0.0 回显失效
|
||||
3. 修复命名错误 struct2 -> struts2
|
||||
|
||||
### Changed
|
||||
|
||||
1. 依赖更新、文档更新
|
||||
|
||||
**Full Changelog:** [v2.7.0...v2.7.1](https://github.com/ReaJason/MemShellParty/compare/v2.7.0...v2.7.1)
|
||||
|
||||
## [v2.7.0](https://github.com/ReaJason/MemShellParty/releases/tag/v2.7.0) - 2026-04-26
|
||||
|
||||
### Added
|
||||
|
||||
@@ -41,7 +41,7 @@ icon: Album
|
||||
| Listener | Listener |
|
||||
| FilterManager - Agent | ServletContext - Agent |
|
||||
|
||||
| [BES (9.5.x)](/docs/server-intro#bes) | [TongWeb(6 ~ 8)](/docs/server-intro#tongweb) | [InforSuite AS (9 ~ 10)](/docs/server-intro#inforsuite) |
|
||||
| [BES (9.5.x ~ 11.0.0)](/docs/server-intro#bes) | [TongWeb(6 ~ 8)](/docs/server-intro#tongweb) | [InforSuite AS (9 ~ 10)](/docs/server-intro#inforsuite) |
|
||||
| ------------------------------------- | ---------------------------------------------- | ------------------------------------------------------- |
|
||||
| Filter | Filter | Filter |
|
||||
| Listener | Listener | Listener |
|
||||
@@ -49,13 +49,13 @@ icon: Album
|
||||
| FilterChain - Agent | FilterChain - Agent | FilterChain - Agent |
|
||||
| ContextValve - Agent | ContextValve - Agent | ContextValve - Agent |
|
||||
|
||||
| [Apusic AS (9 ~ 10)](/docs/server-intro#apusic) | [Primeton (6.5)](/docs/server-intro#primeton) |
|
||||
| ----------------------------------------------- | --------------------------------------------- |
|
||||
| Servlet | Filter |
|
||||
| Filter | Listener |
|
||||
| Listener | Valve |
|
||||
| FilterChain - Agent | FilterChain - Agent |
|
||||
| | ContextValve - Agent |
|
||||
| [Apusic AS (9 ~ 10)](/docs/server-intro#apusic) | [Primeton (6.5)](/docs/server-intro#primeton) | [Dubbo Provider](/docs/server-intro#dubbo) |
|
||||
| ----------------------------------------------- | --------------------------------------------- | --------------------------------------------- |
|
||||
| Servlet | Filter | DubboService |
|
||||
| Filter | Listener | |
|
||||
| Listener | Valve | |
|
||||
| FilterChain - Agent | FilterChain - Agent | |
|
||||
| | ContextValve - Agent | |
|
||||
|
||||
### 内存马功能
|
||||
|
||||
|
||||
@@ -10,6 +10,8 @@ import { Tab, Tabs } from "fumadocs-ui/components/tabs";
|
||||
|
||||
### 添加依赖
|
||||
|
||||
1. 如果仅需要生成内存马 Base64 格式,仅添加 generator 模块即可
|
||||
|
||||
<Tabs items={["Maven", "Gradle"]}>
|
||||
<Tab>
|
||||
```xml
|
||||
@@ -23,6 +25,31 @@ import { Tab, Tabs } from "fumadocs-ui/components/tabs";
|
||||
<Tab>```groovy implementation 'io.github.reajason:generator:2.2.0' ```</Tab>
|
||||
</Tabs>
|
||||
|
||||
2. 如果需要使用自带的丰富打包方式,需要额外添加 packer 模块
|
||||
|
||||
<Tabs items={["Maven", "Gradle"]}>
|
||||
<Tab>
|
||||
```xml
|
||||
<dependency>
|
||||
<groupId>io.github.reajason</groupId>
|
||||
<artifactId>generator</artifactId>
|
||||
<version>2.2.0</version>
|
||||
</dependency>
|
||||
<dependency>
|
||||
<groupId>io.github.reajason</groupId>
|
||||
<artifactId>packer</artifactId>
|
||||
<version>2.2.0</version>
|
||||
</dependency>
|
||||
```
|
||||
</Tab>
|
||||
<Tab>
|
||||
```groovy
|
||||
implementation 'io.github.reajason:generator:2.2.0'
|
||||
implementation 'io.github.reajason:packer:2.2.0'
|
||||
```
|
||||
</Tab>
|
||||
</Tabs>
|
||||
|
||||
### 生成 Tomcat Godzilla Filter 内存马示例
|
||||
|
||||
```java
|
||||
|
||||
@@ -365,3 +365,9 @@ SpringWebFlux 进行内存马生成。
|
||||
|
||||
XXL-JOB 是一个分布式任务调度平台,由于 executor 出现过反序列化漏洞,并且弱密码情况下可在 admin 前台下发任务,在 executor 执行任意代码,因此在 MemShellParty 中也提供了 XXL-JOB 内存马的生成,服务类型选择 XXL-JOB 进行内存马生成。
|
||||
executor 仅支持 Netty Handler 内存马注入。
|
||||
|
||||
## Dubbo
|
||||
|
||||
> 官网:https://dubbo.apache.org/en/
|
||||
|
||||
Dubbo 分为低版本 2.6x Alibaba Dubbo,包名为 `com.alibaba.dubbo.`,后来合并到 Apache 改为了 Apache Dubbo 2.7x 版本和 3.x 版本,包名为 `org.apache.dubbo.`,当前 Dubbo 内存马只针对 Dubbo Provider,对于 Dubbo Consumer 来说直接打对应的内存马即可比如 Spring 框架马。
|
||||
|
||||
Reference in New Issue
Block a user