archive/java-memshell-generator
1
0
Fork 0
mirror of https://github.com/pen4uin/java-memshell-generator.git synced 2026-09-22 01:30:43 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

add: 添加对命令行的支持

Browse Source
This commit is contained in:
pen4uin
2024-08-25 08:04:02 +08:00
parent 5a2b4e62ad
commit eb32f32c1b
3 changed files with 307 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
jmg-cli/pom.xml
+64
View File
@@ -0,0 +1,64 @@
<?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
<modelVersion>4.0.0</modelVersion>
<parent>
<groupId>jmg</groupId>
<artifactId>java-memshell-generator</artifactId>
<version>1.0.8</version>
</parent>
<artifactId>jmg-cli</artifactId>
<properties>
<maven.compiler.source>8</maven.compiler.source>
<maven.compiler.target>8</maven.compiler.target>
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
</properties>
<dependencies>
<!-- https://mvnrepository.com/artifact/org.jline/jline -->
<dependency>
<groupId>org.jline</groupId>
<artifactId>jline</artifactId>
<version>3.21.0</version>
</dependency>
<dependency>
<groupId>jmg</groupId>
<artifactId>jmg-sdk</artifactId>
<version>${parent.version}</version>
</dependency>
</dependencies>
<build>
<plugins>
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-assembly-plugin</artifactId>
<version>3.6.0</version>
<configuration>
<descriptorRefs>
<descriptorRef>jar-with-dependencies</descriptorRef>
</descriptorRefs>
<archive>
<manifest>
<mainClass>jmg.cli.CLIApp</mainClass>
</manifest>
</archive>
<appendAssemblyId>false</appendAssemblyId>
<outputDirectory>../releases</outputDirectory>
</configuration>
<executions>
<execution>
<id>make-assembly</id>
<phase>package</phase>
<goals>
<goal>single</goal>
</goals>
</execution>
</executions>
</plugin>
</plugins>
</build>
</project>
jmg-cli/src/main/java/jmg/cli/CLIApp.java
+9
View File
@@ -0,0 +1,9 @@
package jmg.cli;
public class CLIApp {
public static void main(String[] args) throws Throwable {
Console console = new Console();
console.init();
console.run();
}
}
jmg-cli/src/main/java/jmg/cli/Console.java
+234
View File
@@ -0,0 +1,234 @@
package jmg.cli;
import jmg.core.config.AbstractConfig;
import jmg.core.config.Constants;
import jmg.sdk.jMGenerator;
import jmg.sdk.util.SDKResultUtil;
import org.jline.reader.LineReader;
import org.jline.reader.LineReaderBuilder;
import org.jline.reader.impl.completer.StringsCompleter;
import org.jline.terminal.Terminal;
import org.jline.terminal.TerminalBuilder;
import java.lang.reflect.InvocationTargetException;
import java.lang.reflect.Method;
import java.util.Arrays;
import java.util.List;
public class Console {
private static AbstractConfig config = new AbstractConfig();
private static final List<String> SERVER_TYPES = Arrays.asList(
Constants.SERVER_TOMCAT,
Constants.SERVER_SPRING_MVC,
Constants.SERVER_JETTY,
Constants.SERVER_RESIN,
Constants.SERVER_WEBLOGIC,
Constants.SERVER_WEBSPHERE,
Constants.SERVER_UNDERTOW,
Constants.SERVER_GLASSFISH,
Constants.SERVER_JBOSS);
private static final List<String> TOOL_TYPES = Arrays.asList(
Constants.TOOL_GODZILLA,
Constants.TOOL_BEHINDER,
Constants.TOOL_ANTSWORD,
Constants.TOOL_SUO5,
Constants.TOOL_NEOREGEORG);
private static final List<String> SHELL_TYPES = Arrays.asList(
Constants.SHELL_LISTENER,
Constants.SHELL_FILTER,
Constants.SHELL_INTERCEPTOR);
private static final List<String> FORMAT_TYPES = Arrays.asList(
Constants.FORMAT_BASE64,
Constants.FORMAT_BCEL,
Constants.FORMAT_BIGINTEGER,
Constants.FORMAT_CLASS,
Constants.FORMAT_JAR,
Constants.FORMAT_JAR_AGENT,
Constants.FORMAT_JSP);
private static final List<String> GADGET_TYPES = Arrays.asList(
Constants.GADGET_NONE,
Constants.GADGET_JDK_TRANSLET,
Constants.GADGET_XALAN_TRANSLET,
Constants.GADGET_FJ_GROOVY,
Constants.GADGET_SNAKEYAML);
public void init() {
System.out.println(String.format("Welcome to jMG %s !", Constants.JMG_VERSION));
config = new AbstractConfig() {{
// 设置工具类型
setToolType(Constants.TOOL_GODZILLA);
// 设置中间件 or 框架
setServerType(Constants.SERVER_TOMCAT);
// 设置内存马类型
setShellType(Constants.SHELL_LISTENER);
// 设置输出格式为 BASE64
setOutputFormat(Constants.FORMAT_BASE64);
// 设置漏洞利用封装，默认不启用
setGadgetType(Constants.GADGET_NONE);
// 初始化基础配置
build();
}};
}
public void run() throws Throwable {
List<String> commands = Arrays.asList("help", "list", "use", "set", "show", "generate", "info", "exit");
Terminal terminal = TerminalBuilder.builder().build();
LineReader lineReader = LineReaderBuilder.builder()
.terminal(terminal)
.completer(new StringsCompleter(commands))
.build();
String prompt = "jmg > ";
String line;
while (true) {
line = lineReader.readLine(prompt);
String[] parts = line.trim().split("\\s+");
String command = parts[0];
String argument1 = parts.length > 1 ? parts[1] : null;
String argument2 = parts.length > 2 ? parts[2] : null;
switch (command) {
case "help":
help();
break;
case "list":
list(argument1);
break;
case "use":
use(argument1, argument2);
break;
case "set":
set(argument1, argument2);
break;
case "get":
get(argument1);
break;
case "generate":
generate();
break;
case "info":
info();
break;
case "exit":
System.out.println("Bye!");
return;
default:
System.out.println("Unknown command: " + line);
}
}
}
public static void help() {
String[][] helpMessages = {
{"help", "help message", "帮助信息"},
{"list [type]", "list toolTypes/serverTypes/formatTypes/shellTypes", "支持的工具类型/中间件|框架/组件类型/输出格式"},
{"use <type> <name>", "choose toolType/serverType/formatType/shellType", "选择工具类型/中间件|框架/组件类型/输出格式"},
{"set <key> <value>", "set pass/key/headerName/headerValue/urlPattern/...", "设置密码/密钥/请求头名称/请求头值/请求路径[/*]/..."},
{"get <type>", "get <type> or <key>", "查看配置"},
{"generate", "generate payload", "生成载荷"},
{"info", "connect info", "连接信息"},
{"exit", "exit jmg", "退出"}
};
for (String[] message : helpMessages) {
System.out.println(String.format("%-20s %-50s %-40s", message[0], message[1], message[2]));
}
}
public static void list(String argument1) {
if ("serverTypes".equalsIgnoreCase(argument1)) {
System.out.println("Servers: " + SERVER_TYPES);
} else if ("toolTypes".equalsIgnoreCase(argument1)) {
System.out.println("Tools: " + TOOL_TYPES);
} else if ("shellTypes".equalsIgnoreCase(argument1)) {
System.out.println("Shells: " + SHELL_TYPES);
} else if ("formatTypes".equalsIgnoreCase(argument1)) {
System.out.println("Formats: " + FORMAT_TYPES);
} else if ("gadgetTypes".equalsIgnoreCase(argument1)) {
System.out.println("Gadgets: " + GADGET_TYPES);
} else {
System.out.println("Unknown type: " + argument1);
}
}
public static void get(String argument1) {
try {
String methodName = "get" + argument1.substring(0, 1).toUpperCase() + argument1.substring(1);
Method method = config.getClass().getMethod(methodName);
System.out.println(argument1 + " : " + method.invoke(config));
} catch (NoSuchMethodException e) {
System.out.println("Unknown type: " + argument1);
} catch (IllegalAccessException | InvocationTargetException e) {
System.out.println("Error getting value for type: " + argument1);
}
}
public static void use(String argument1, String argument2) {
if ("serverType".equalsIgnoreCase(argument1)) {
if (!SERVER_TYPES.contains(argument2)) {
System.out.println("Unsupported server type: " + argument2);
return;
}
set("serverType", argument2);
} else if ("toolType".equalsIgnoreCase(argument1)) {
if (!TOOL_TYPES.contains(argument2)) {
System.out.println("Unsupported tool type: " + argument2);
return;
}
set("toolType", argument2);
} else if ("shellType".equalsIgnoreCase(argument1)) {
if (!SHELL_TYPES.contains(argument2)) {
System.out.println("Unsupported shell type: " + argument2);
return;
}
set("shellType", argument2);
} else if ("formatType".equalsIgnoreCase(argument1)) {
if (!FORMAT_TYPES.contains(argument2)) {
System.out.println("Unsupported format type: " + argument2);
return;
}
set("outputFormat", argument2);
} else if ("gadgetType".equalsIgnoreCase(argument1)) {
if (!GADGET_TYPES.contains(argument2)) {
System.out.println("Unsupported gadget type: " + argument2);
return;
}
set("gadgetType", argument2);
} else {
System.out.println("Unknown type: " + argument1);
}
}
public static void set(String argument1, String argument2) {
try {
String methodName = "set" + argument1.substring(0, 1).toUpperCase() + argument1.substring(1);
Method method = config.getClass().getMethod(methodName, String.class);
method.invoke(config, argument2);
System.out.println(argument1 + " : " + argument2);
} catch (NoSuchMethodException e) {
System.out.println("Unknown key: " + argument1);
} catch (IllegalAccessException | InvocationTargetException e) {
System.out.println("Error setting value for key: " + argument1);
}
}
public static void generate() throws Throwable {
// 更新配置
config.build();
jMGenerator generator = new jMGenerator(config);
generator.genPayload();
generator.printPayload();
}
public static void info() throws Throwable {
// 连接信息
SDKResultUtil.printBasicInfo(config);
SDKResultUtil.printDebugInfo(config);
}
}