File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -8,6 +8,20 @@ All notable changes to this project will be documented in this file.
88The format is based on [ Keep a Changelog] ( https://keepachangelog.com/en/1.1.0/ ) ,
99and this project adheres to [ Semantic Versioning] ( https://semver.org/spec/v2.0.0.html ) .
1010
11+ ## [ v2.7.1] ( https://github.com/ReaJason/MemShellParty/releases/tag/v2.7.1 ) - 2026-05-24
12+
13+ ### Fixed
14+
15+ 1 . 修复 SpELSpringGzipJDK17 高版本 org.springframework.util.Base64Utils 类被删除导致无法使用
16+ 2 . 修复 TongWeb 7.0.4.9、BES 11.0.0 回显失效
17+ 3 . 修复命名错误 struct2 -> struts2
18+
19+ ### Changed
20+
21+ 1 . 依赖更新、文档更新
22+
23+ ** Full Changelog:** [ v2.7.0...v2.7.1] ( https://github.com/ReaJason/MemShellParty/compare/v2.7.0...v2.7.1 )
24+
1125## [ v2.7.0] ( https://github.com/ReaJason/MemShellParty/releases/tag/v2.7.0 ) - 2026-04-26
1226
1327### Added
Original file line number Diff line number Diff line change @@ -41,21 +41,21 @@ icon: Album
4141| Listener | Listener |
4242| FilterManager - Agent | ServletContext - Agent |
4343
44- | [ BES (9.5.x)] ( /docs/server-intro#bes ) | [ TongWeb(6 ~ 8)] ( /docs/server-intro#tongweb ) | [ InforSuite AS (9 ~ 10)] ( /docs/server-intro#inforsuite ) |
44+ | [ BES (9.5.x ~ 11.0.0 )] ( /docs/server-intro#bes ) | [ TongWeb(6 ~ 8)] ( /docs/server-intro#tongweb ) | [ InforSuite AS (9 ~ 10)] ( /docs/server-intro#inforsuite ) |
4545| ------------------------------------- | ---------------------------------------------- | ------------------------------------------------------- |
4646| Filter | Filter | Filter |
4747| Listener | Listener | Listener |
4848| Valve | Valve | Valve |
4949| FilterChain - Agent | FilterChain - Agent | FilterChain - Agent |
5050| ContextValve - Agent | ContextValve - Agent | ContextValve - Agent |
5151
52- | [ Apusic AS (9 ~ 10)] ( /docs/server-intro#apusic ) | [ Primeton (6.5)] ( /docs/server-intro#primeton ) |
53- | ----------------------------------------------- | --------------------------------------------- |
54- | Servlet | Filter |
55- | Filter | Listener |
56- | Listener | Valve |
57- | FilterChain - Agent | FilterChain - Agent |
58- | | ContextValve - Agent |
52+ | [ Apusic AS (9 ~ 10)] ( /docs/server-intro#apusic ) | [ Primeton (6.5)] ( /docs/server-intro#primeton ) | [ Dubbo Provider ] ( /docs/server-intro#dubbo ) |
53+ | ----------------------------------------------- | --------------------------------------------- | --------------------------------------------- |
54+ | Servlet | Filter | DubboService |
55+ | Filter | Listener | |
56+ | Listener | Valve | |
57+ | FilterChain - Agent | FilterChain - Agent | |
58+ | | ContextValve - Agent | |
5959
6060### 内存马功能
6161
Original file line number Diff line number Diff line change @@ -10,6 +10,8 @@ import { Tab, Tabs } from "fumadocs-ui/components/tabs";
1010
1111### 添加依赖
1212
13+ 1 . 如果仅需要生成内存马 Base64 格式,仅添加 generator 模块即可
14+
1315<Tabs items = { [" Maven" , " Gradle" ]} >
1416 <Tab >
1517 ``` xml
@@ -23,6 +25,31 @@ import { Tab, Tabs } from "fumadocs-ui/components/tabs";
2325 <Tab >``` groovy implementation 'io.github.reajason:generator:2.2.0' ``` </Tab >
2426</Tabs >
2527
28+ 2 . 如果需要使用自带的丰富打包方式,需要额外添加 packer 模块
29+
30+ <Tabs items = { [" Maven" , " Gradle" ]} >
31+ <Tab >
32+ ``` xml
33+ <dependency >
34+ <groupId >io.github.reajason</groupId >
35+ <artifactId >generator</artifactId >
36+ <version >2.2.0</version >
37+ </dependency >
38+ <dependency >
39+ <groupId >io.github.reajason</groupId >
40+ <artifactId >packer</artifactId >
41+ <version >2.2.0</version >
42+ </dependency >
43+ ```
44+ </Tab >
45+ <Tab >
46+ ``` groovy
47+ implementation 'io.github.reajason:generator:2.2.0'
48+ implementation 'io.github.reajason:packer:2.2.0'
49+ ```
50+ </Tab >
51+ </Tabs >
52+
2653### 生成 Tomcat Godzilla Filter 内存马示例
2754
2855``` java
Original file line number Diff line number Diff line change @@ -365,3 +365,9 @@ SpringWebFlux 进行内存马生成。
365365
366366XXL-JOB 是一个分布式任务调度平台,由于 executor 出现过反序列化漏洞,并且弱密码情况下可在 admin 前台下发任务,在 executor 执行任意代码,因此在 MemShellParty 中也提供了 XXL-JOB 内存马的生成,服务类型选择 XXL-JOB 进行内存马生成。
367367executor 仅支持 Netty Handler 内存马注入。
368+
369+ ## Dubbo
370+
371+ > 官网:https://dubbo.apache.org/en/
372+
373+ Dubbo 分为低版本 2.6x Alibaba Dubbo,包名为 ` com.alibaba.dubbo. ` ,后来合并到 Apache 改为了 Apache Dubbo 2.7x 版本和 3.x 版本,包名为 ` org.apache.dubbo. ` ,当前 Dubbo 内存马只针对 Dubbo Provider,对于 Dubbo Consumer 来说直接打对应的内存马即可比如 Spring 框架马。
You can’t perform that action at this time.
0 commit comments