KO | EN

GitLite

Minimalist Open Source Repository Search Engine

gitlite — search

#dsh #dsh-plugin #developer-tools #ai-agent #claude-code #codex #typescript #ai-agents #deepseek-harness #mcp #cli #rust

memShell

★ 390 Open GitHub ↗

FilterBased/ServletBased in memory shell for Tomcat and some other middlewares

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Java memShell

### Supported Middleware
- [x] Tomcat 
 Tested on 7.0.34, 7.0.54, 7.0.70, 7.0.96, 7.0.104, 8.0.18, 8.0.32, 8.0.48, 8.5.12, 8.5.30, 8.5.56, 9.0.16, 9.0.33
- [x] Weblogic 
 Tested on 10.3.6.0, 12.1.3.0.0
- [x] JBoss/Wildfly 
 Tested on 8.0.0.Final, 18.0.0.Final, 21.0.0.Beta1
- [x] Jetty 
 Tested on 9.4.30.v20200611, 9.3.28.v20191105, 9.2.29.v20191105, 9.1.6.v20160112, failed on earlier versions
- [x] Websphere 
 Tested on Websphere Applicaton Server v8.5 and v9.0
- [x] Spring (not a middleware but a framework) 
 Tested on SpringMVC 5.2.10.RELEASE, 5.0.8.RELEASE, 4.3.28.RELEASE, 4.0.5.RELEASE, 3.2.3.RELEASE, 3.0.5.RELEASE

## Reference
[Tomcat源代码调试：看不见的Shell第一式](https://www.freebuf.com/articles/web/151431.html) 
[基于tomcat的内存 Webshell 无文件攻击技术](https://xz.aliyun.com/t/7388) 
[动态注册之Servlet+Filter+Listener](https://www.jianshu.com/p/cbe1c3174d41) 
[基于Tomcat无文件Webshell研究](https://mp.weixin.qq.com/s/whOYVsI-AkvUJTeeDWL5dA) 
[tomcat不出网回显连续剧第六集](https://xz.aliyun.com/t/7535) 
[tomcat结合shiro无文件webshell的技术研究以及检测方法](https://mp.weixin.qq.com/s/fFYTRrSMjHnPBPIaVn9qMg) 
[冰蝎改造之适配基于tomcat Filter的无文件webshell](https://mp.weixin.qq.com/s/n1wrjep4FVtBkOxLouAYfQ) 
 
If you hava any suggestions, feel free to open an ```issue``` or send me email at ```huangfeihong_cs@163.com```

memShell

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README