feat: support simple obfuscation (#13)

bom/build.gradle

@@ -6,6 +6,7 @@ dependencies {
     constraints {
         api 'net.bytebuddy:byte-buddy:1.+'
         api 'org.ow2.asm:asm-commons:9.7.1'
+        api 'com.github.jar-analyzer:class-obf:1.5.0'
 
         api 'javax.servlet:javax.servlet-api:3.0.1'
         api 'jakarta.servlet:jakarta.servlet-api:6.0.0'

build.gradle

@@ -12,10 +12,6 @@ allprojects {
             implementation platform(project(':bom'))
         }
     }
-
-    repositories {
-        mavenCentral()
-    }
 }
 
 idea {

generator/build.gradle

@@ -39,6 +39,7 @@ dependencies {
     implementation project(":memshell-java8")
     implementation 'net.bytebuddy:byte-buddy'
     implementation 'org.ow2.asm:asm-commons'
+    implementation 'com.github.jar-analyzer:class-obf'
 
     implementation 'javax.servlet:javax.servlet-api'
     implementation 'javax.websocket:javax.websocket-api'

generator/src/main/java/com/reajason/javaweb/memshell/MemShellGenerator.java

@@ -4,6 +4,8 @@ import com.reajason.javaweb.memshell.config.*;
 import com.reajason.javaweb.memshell.generator.*;
 import com.reajason.javaweb.memshell.server.AbstractShell;
 import com.reajason.javaweb.memshell.utils.CommonUtil;
+import me.n1ar4.clazz.obfuscator.api.ClassObf;
+import me.n1ar4.clazz.obfuscator.config.BaseConfig;
 import org.apache.commons.lang3.StringUtils;
 import org.apache.commons.lang3.tuple.Pair;
 
@@ -46,12 +48,39 @@ public class MemShellGenerator {
 
         byte[] shellBytes = generateShellBytes(shellConfig, shellToolConfig);
 
+        if (shellConfig.isObfuscate()) {
+            BaseConfig config = BaseConfig.Default();
+            config.setIgnorePublic(true);
+            config.setEnableMethodName(false);
+            config.setEnableFieldName(false);
+            config.setEnableAES(false);
+            config.setEnableAdvanceString(false);
+            config.setQuiet(true);
+
+            ClassObf classObf = new ClassObf(config);
+            shellBytes = classObf.run(shellBytes).getData();
+        }
+
         injectorConfig.setInjectorClass(injectorClass);
         injectorConfig.setShellClassName(shellToolConfig.getShellClassName());
         injectorConfig.setShellClassBytes(shellBytes);
 
         InjectorGenerator injectorGenerator = new InjectorGenerator(shellConfig, injectorConfig);
         byte[] injectorBytes = injectorGenerator.generate();
+
+        if (shellConfig.isObfuscate()) {
+            BaseConfig config = BaseConfig.Default();
+            config.setIgnorePublic(true);
+            config.setEnableMethodName(false);
+            config.setEnableFieldName(false);
+            config.setEnableAES(false);
+            config.setEnableAdvanceString(false);
+            config.setQuiet(true);
+
+            ClassObf classObf = new ClassObf(config);
+            injectorBytes = classObf.run(injectorBytes).getData();
+        }
+
         Map<String, byte[]> innerClassBytes = injectorGenerator.getInnerClassBytes();
 
         return GenerateResult.builder()

integration-test/src/test/java/com/reajason/javaweb/integration/ShellAssertionTool.java

@@ -232,8 +232,13 @@ public class ShellAssertionTool {
                 .targetJreVersion(targetJdkVersion)
                 .debug(true)
                 .shrink(true)
+                .obfuscate(true)
                 .build();
 
+        if (ShellTool.NeoreGeorg.equals(shellTool)) {
+            shellConfig.setObfuscate(false);
+        }
+
         ShellToolConfig shellToolConfig = null;
         String uniqueName = shellTool + RandomStringUtils.randomAlphabetic(5) + shellType + RandomStringUtils.randomAlphabetic(5) + packer.name();
         switch (shellTool) {

memshell-agent/memshell-agent-asm/build.gradle

@@ -6,10 +6,6 @@ plugins {
 group = 'com.reajason.javaweb'
 version = '1.0.0'
 
-repositories {
-    mavenCentral()
-}
-
 java {
     toolchain {
         languageVersion = JavaLanguageVersion.of(8)

memshell-agent/memshell-agent-bytebuddy/build.gradle

@@ -5,9 +5,6 @@ plugins {
 group = 'com.reajason.javaweb'
 version = '1.0.0'
 
-repositories {
-    mavenCentral()
-}
 
 dependencies {
     testImplementation platform('org.junit:junit-bom:5.10.0')

memshell-agent/memshell-agent-javassist/build.gradle

@@ -5,10 +5,6 @@ plugins {
 group = 'com.reajason.javaweb'
 version = '1.0.0'
 
-repositories {
-    mavenCentral()
-}
-
 dependencies {
     testImplementation platform('org.junit:junit-bom:5.10.0')
     testImplementation 'org.junit.jupiter:junit-jupiter'

settings.gradle

@@ -2,6 +2,14 @@ plugins {
     id 'org.gradle.toolchains.foojay-resolver-convention' version '0.9.0'
 }
 
+dependencyResolutionManagement {
+    repositoriesMode.set(RepositoriesMode.FAIL_ON_PROJECT_REPOS)
+    repositories {
+        mavenCentral()
+        maven { url 'https://jitpack.io' }
+    }
+}
+
 rootProject.name = 'MemShellParty'
 
 include 'bom'

vul/vul-springboot1/build.gradle

@@ -8,10 +8,6 @@ java {
     sourceCompatibility = JavaVersion.VERSION_1_8
 }
 
-repositories {
-    mavenCentral()
-}
-
 configurations {
     providedRuntime
 }

vul/vul-springboot2/build.gradle

@@ -9,10 +9,6 @@ java {
     sourceCompatibility = JavaVersion.VERSION_1_8
 }
 
-repositories {
-    mavenCentral()
-}
-
 dependencies {
     implementation 'org.springframework.boot:spring-boot-starter-web'
     implementation 'commons-io:commons-io:2.+'

web/package.json

@@ -15,7 +15,7 @@
   },
   "devDependencies": {
     "@biomejs/biome": "1.9.4",
-    "@tanstack/router-plugin": "^1.114.29",
+    "@tanstack/router-plugin": "^1.114.30",
     "@types/node": "^22.13.14",
     "@types/react": "^19.0.12",
     "@types/react-copy-to-clipboard": "^5.0.7",
@@ -42,22 +42,22 @@
     "@radix-ui/react-tabs": "^1.1.3",
     "@radix-ui/react-tooltip": "^1.1.8",
     "@tailwindcss/vite": "^4.0.17",
-    "@tanstack/react-query": "^5.69.0",
+    "@tanstack/react-query": "^5.70.0",
     "@tanstack/react-router": "^1.114.29",
     "@tanstack/router-devtools": "^1.114.29",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "i18next": "^24.2.3",
-    "lucide-react": "^0.484.0",
-    "react": "^19.0.0",
+    "lucide-react": "^0.485.0",
+    "react": "^19.1.0",
     "react-copy-to-clipboard": "^5.1.0",
-    "react-dom": "^19.0.0",
-    "react-hook-form": "^7.54.2",
+    "react-dom": "^19.1.0",
+    "react-hook-form": "^7.55.0",
     "react-i18next": "^15.4.1",
     "react-syntax-highlighter": "^15.6.1",
     "sonner": "^2.0.2",
     "tailwind-merge": "^3.0.2",
-    "tailwind-scrollbar": "^4.0.1",
+    "tailwind-scrollbar": "^4.0.2",
     "tailwindcss-animate": "^1.0.7",
     "zod": "^3.24.2"
   },

web/src/components/main-config-card.tsx

@@ -287,6 +287,18 @@ export function MainConfigCard({
                 </FormItem>
               )}
             />
+            <FormField
+              control={form.control}
+              name="obfuscate"
+              render={({ field }) => (
+                <FormItem className="flex items-center space-x-2 space-y-0">
+                  <FormControl>
+                    <Switch id="obfuscate" checked={field.value} onCheckedChange={field.onChange} />
+                  </FormControl>
+                  <Label htmlFor="obfuscate">{t("mainConfig.obfuscate")}</Label>
+                </FormItem>
+              )}
+            />
           </div>
         </CardContent>
       </Card>

web/src/i18n/en.json

@@ -37,7 +37,8 @@
     "shellMountType": "Shell Mount Type",
     "shellTool": "Shell Tool",
     "shrink": "Shrink Bytecode",
-    "urlPattern": "URL Pattern"
+    "urlPattern": "URL Pattern",
+    "obfuscate": "Obfuscate"
   },
   "optional": "(Optional)",
   "packageConfig": {
@@ -130,7 +131,8 @@
     "targetServerRequest": "Request",
     "try-to-use-shell": "Try to use the memory shell",
     "waitingForGeneration": "// Waiting for generation...",
-    "customShellClass": "Custom shell class is required, base64 or classfile"
+    "customShellClass": "Custom shell class is required, base64 or classfile",
+    "neoreGeorgObfuscate": "Do not support obfuscate for NeoreGeorg"
   },
   "version": {
     "updateAvailable": "Update Available",

web/src/i18n/zh-CN.json

@@ -37,7 +37,8 @@
     "shellMountType": "内存马挂载类型",
     "shellTool": "内存马功能",
     "shrink": "缩小字节码",
-    "urlPattern": "请求路径"
+    "urlPattern": "请求路径",
+    "obfuscate": "代码混淆"
   },
   "optional": "(可选)",
   "packageConfig": {
@@ -130,7 +131,8 @@
     "targetServerRequest": "请求适配",
     "try-to-use-shell": "尝试利用内存马",
     "waitingForGeneration": "// 等待填写参数生成中...",
-    "customShellClass": "请输入自定义内存马类，base64 或类文件"
+    "customShellClass": "请输入自定义内存马类，base64 或类文件",
+    "neoreGeorgObfuscate": "NeoreGeorg 目前不支持代码混淆"
   },
   "version": {
     "updateAvailable": "有可用升级",

web/src/routes/index.tsx

@@ -87,6 +87,11 @@ function IndexComponent() {
       toast.warning(t("tips.customShellClass"));
       return false;
     }
+
+    if (values.obfuscate && values.shellTool === ShellToolType.NeoreGeorg) {
+      toast.warning(t("tips.neoreGeorgObfuscate"));
+      return false;
+    }
     return true;
   }
 

web/src/types/schema.ts

@@ -19,6 +19,7 @@ export const formSchema = z.object({
   injectorClassName: z.optional(z.string()),
   packingMethod: z.string().min(1),
   shrink: z.optional(z.boolean()),
+  obfuscate: z.optional(z.boolean()),
   shellClassBase64: z.optional(z.string()),
 });
 

web/src/utils/transformer.ts

@@ -10,6 +10,7 @@ export function transformToPostData(formValue: FormSchema) {
     targetJreVersion: formValue.targetJdkVersion,
     byPassJavaModule: formValue.bypassJavaModule,
     shrink: formValue.shrink,
+    obfuscate: formValue.obfuscate,
   };
   const shellToolConfig: ShellToolConfig = {
     shellClassName: formValue.shellClassName,