veo / wsmemshell Goto Github PK

View Code? Open in Web Editor NEW

1.4K 23.0 228.0 756 KB

WebSocket 内存马/Webshell，一种新型内存马/WebShell技术

Home Page: https://veo.pub/2022/memshell/

Java 95.37% JavaScript 4.63%

memshell webshell websocket proxy

wsmemshell's People

Contributors

Stargazers

Watchers

Forkers

mk4t1xp j5s conanjun ffadd atlassion timeshu whoamiecho sv3nbeast chennqqi qianniaoge aqimmm 853866252 heyzm geekmc test1213145 sec-fork lay0us akunwin yzddmr6 steward007 cnmars laowang1026 zyylhn functfan ridter 0xfa-team y11en opensesamedoors zzhsec tuo4n8 fengjixuchui redamancy404 nkingpp lucifaer 0xa-cc bingpo whami-root selfevo mr-lit zhanggx96 libaizaishuijiao jasonlou guhu22 trganda c33dd hosch3n nuc-orz-lab one9t-xc ravensss vicl1fe asphalt415 sesyi h9dawn arryboom willshion dc3l1ne ttimochan syslaowang b1ngda0 istoliving listenquiet ir-st achuna33 y4tacker shuimuliu n0-traces whizsail crackercat meowwbox 7ten7 ccqtv123 l34rner yeshuibo m0ge h1d3r startagain2016 coolplay-1 savior-only f-feng lengxu sanchahua amjiyu wang0098 jinnywc cream-sec shinpachi8 askyeye st-lucifer ice-001 byaaronluo ddostest123 slowmistio wisdark endliang dk47os3r m0unta1ner times125 mstheholy liehu dawn0207

wsmemshell's Issues

tomcat9.0.64未成功

访问路径127.0.0.1:8080/examples/wscmd.jsp?path=/x 后未成功注入websocks服务，无法连接127.0.0.1:8080/examples/x。

websocket client

师傅打扰一下，请问师傅的websocket client是怎么下载的我在app store上下载不了，换了美区账号也是一样

Tomcat10版本中，jsp木马中的javax API需要转换

javax API需要转换到jakarta API

<%@ page import="jakarta.websocket.server.ServerEndpointConfig" %>
<%@ page import="jakarta.websocket.server.ServerContainer" %>
<%@ page import="jakarta.websocket." %>
<%@ page import="java.io." %>

Deserialization memory problem

Hello, the fifth point you mentioned is that the inverse sequence can be directly implemented in memory, but this proxy class will compile multiple class files, including internal classes. If you define directly, there is a problem with the processing logic. Do you have a landing implementation scheme

weblogic12.1.3 报错

TyrusServerContainer container = (TyrusServerContainer) servletContext.getAttribute(ServerContainer.class.getName());方法在JDK1.8 weblogic12.1.3环境下，wsAddAllContainer.jsp和wscmd.jsp脚本一直返回是空是什么原因？weblogic版本不对吗？

路径重复注册会导致404

测试环境：

5.15.49-1-MANJARO
Apache Tomcat/9.0.62

需要重启Tomcat才会恢复

javax.websocket.DeploymentException

http://test.com/1.jsp?path=/proxy

javax.websocket.DeploymentException: ??????????????WebSocket????????[{1}]????[]?Web????

环境
tomcat-7.0.72
java version "1.7.0_79"

# 环境异常

ws Client 连接时出现如下异常，通过Evaluate 查看时，container 中已经存在了相应的path。

请问有遇到过相关得异常情况吗？

报错问题 Tomcat8

HTTP状态 500 - 内部服务器错误
类型 异常报告

消息 无法为JSP编译类:

描述 服务器遇到一个意外的情况，阻止它完成请求。

例外情况

org.apache.jasper.JasperException: 无法为JSP编译类: 

JSP文件：[/wscmd.jsp] 的第 [29] 行发生了一个错误
Cannot refer to the non-final local variable session defined in an enclosing scope
26:                             out = e.toString();
27:                         }
28:                         try {
29:                             session.getBasicRemote().sendText(out);
30:                         } catch (IOException e) {
31:                             e.printStackTrace();
32:                         }


Stacktrace:
	org.apache.jasper.compiler.DefaultErrorHandler.javacError(DefaultErrorHandler.java:102)
	org.apache.jasper.compiler.ErrorDispatcher.javacError(ErrorDispatcher.java:213)
	org.apache.jasper.compiler.JDTCompiler.generateClass(JDTCompiler.java:580)
	org.apache.jasper.compiler.Compiler.compile(Compiler.java:380)
	org.apache.jasper.compiler.Compiler.compile(Compiler.java:350)
	org.apache.jasper.compiler.Compiler.compile(Compiler.java:334)
	org.apache.jasper.JspCompilationContext.compile(JspCompilationContext.java:597)
	org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:398)
	org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:383)
	org.apache.jasper.servlet.JspServlet.service(JspServlet.java:331)
	javax.servlet.http.HttpServlet.service(HttpServlet.java:764)
	org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)
	org.apache.catalina.filters.HttpHeaderSecurityFilter.doFilter(HttpHeaderSecurityFilter.java:126)
	org.apache.catalina.filters.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:109)
):注意 主要问题的全部 stack 信息可以在 server logs 里查看

请问一下这个报错正常吗？