Godzilla插件|内存马|Suo5内存代理|jmg for Godzilla
得益于pen4uin
的jmg项目开源,可以把payload生成功能集成到插件中了,相比复制过来执行简化了操作
jMG: https://github.com/pen4uin/java-memshell-generator-release
支持注入工具:"Behinder", "Godzilla", "AntSword", "Suo5", "NeoreGeorg"
支持中间件:"Tomcat", "SpringMVC", "Weblogic", "Websphere", "Resin", "Undertow", "Jetty", "JBoss", "Glassfish"
支持注入类型:"Listener", "Filter", "Interceptor"
部分测试:
中间件:Jetty
注入工具:Godzilla 内存马
注入类型:Filter
![image](https://private-user-images.githubusercontent.com/145323730/337066379-7a898df8-29f9-498b-8035-2a98bc7e5efa.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmF3LmdpdGh1YnVzZXJjb250ZW50LmNvbSIsImtleSI6ImtleTUiLCJleHAiOjE3MTkyNTU0MjQsIm5iZiI6MTcxOTI1NTEyNCwicGF0aCI6Ii8xNDUzMjM3MzAvMzM3MDY2Mzc5LTdhODk4ZGY4LTI5ZjktNDk4Yi04MDM1LTJhOThiYzdlNWVmYS5wbmc_WC1BbXotQWxnb3JpdGhtPUFXUzQtSE1BQy1TSEEyNTYmWC1BbXotQ3JlZGVudGlhbD1BS0lBVkNPRFlMU0E1M1BRSzRaQSUyRjIwMjQwNjI0JTJGdXMtZWFzdC0xJTJGczMlMkZhd3M0X3JlcXVlc3QmWC1BbXotRGF0ZT0yMDI0MDYyNFQxODUyMDRaJlgtQW16LUV4cGlyZXM9MzAwJlgtQW16LVNpZ25hdHVyZT0xZjY5NDU4NTI4OTM4YmVlMWMyZjc0ZjU1ZGVhMTY5Y2NjZTIzNzY0ZWJjZTk2ZDUyOGE3ZjU5YjMxZTNlYmFlJlgtQW16LVNpZ25lZEhlYWRlcnM9aG9zdCZhY3Rvcl9pZD0wJmtleV9pZD0wJnJlcG9faWQ9MCJ9.4ZlJStFT21hNRCQGCuwtkXVeIqZfJc0Bc3_J0OHTQok)
中间件:Jetty
注入工具:Suo5 内存代理
注入类型:Filter
![image](https://private-user-images.githubusercontent.com/145323730/337067180-cec48da0-db3f-41dc-a78f-e536eb93c331.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmF3LmdpdGh1YnVzZXJjb250ZW50LmNvbSIsImtleSI6ImtleTUiLCJleHAiOjE3MTkyNTU0MjQsIm5iZiI6MTcxOTI1NTEyNCwicGF0aCI6Ii8xNDUzMjM3MzAvMzM3MDY3MTgwLWNlYzQ4ZGEwLWRiM2YtNDFkYy1hNzhmLWU1MzZlYjkzYzMzMS5wbmc_WC1BbXotQWxnb3JpdGhtPUFXUzQtSE1BQy1TSEEyNTYmWC1BbXotQ3JlZGVudGlhbD1BS0lBVkNPRFlMU0E1M1BRSzRaQSUyRjIwMjQwNjI0JTJGdXMtZWFzdC0xJTJGczMlMkZhd3M0X3JlcXVlc3QmWC1BbXotRGF0ZT0yMDI0MDYyNFQxODUyMDRaJlgtQW16LUV4cGlyZXM9MzAwJlgtQW16LVNpZ25hdHVyZT0zNDc4ZDgzM2YyNzBmMzA2MzNlZDVjZDcxNDY0ZWY2MDk5ZmI2NWM1MGQzODFhOThiOWU1NzBiOTg5NTlkZmRiJlgtQW16LVNpZ25lZEhlYWRlcnM9aG9zdCZhY3Rvcl9pZD0wJmtleV9pZD0wJnJlcG9faWQ9MCJ9.yGZgA6UD1IAJQa5badwXIblZp3_PAW4Cs8JU2cK5nvs)
中间件:Tomcat
注入工具:Godzilla 内存马
注入类型:Listener
![image](https://private-user-images.githubusercontent.com/145323730/337068403-ea7911bc-591a-4fec-8ea5-d9d95c4db198.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmF3LmdpdGh1YnVzZXJjb250ZW50LmNvbSIsImtleSI6ImtleTUiLCJleHAiOjE3MTkyNTU0MjQsIm5iZiI6MTcxOTI1NTEyNCwicGF0aCI6Ii8xNDUzMjM3MzAvMzM3MDY4NDAzLWVhNzkxMWJjLTU5MWEtNGZlYy04ZWE1LWQ5ZDk1YzRkYjE5OC5wbmc_WC1BbXotQWxnb3JpdGhtPUFXUzQtSE1BQy1TSEEyNTYmWC1BbXotQ3JlZGVudGlhbD1BS0lBVkNPRFlMU0E1M1BRSzRaQSUyRjIwMjQwNjI0JTJGdXMtZWFzdC0xJTJGczMlMkZhd3M0X3JlcXVlc3QmWC1BbXotRGF0ZT0yMDI0MDYyNFQxODUyMDRaJlgtQW16LUV4cGlyZXM9MzAwJlgtQW16LVNpZ25hdHVyZT0xOTg3MDg0YTNmODUwMjhkNDQ1OGU1ZmNjMjIyZTA1ZDhlNTZlYmQwMThmZTljZjAwNzQ5MDFhNmE0OTA4MTE3JlgtQW16LVNpZ25lZEhlYWRlcnM9aG9zdCZhY3Rvcl9pZD0wJmtleV9pZD0wJnJlcG9faWQ9MCJ9.mj1LFJhSJJldUNSwg-2AQ0Lf1aoD6yH1w11K8OlNVEg)
中间件:Tomcat
注入工具:Godzilla 内存马
注入类型:Filter
![image](https://private-user-images.githubusercontent.com/145323730/337071058-7dc9efcb-4686-47cd-aec0-0527ee52e3d7.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmF3LmdpdGh1YnVzZXJjb250ZW50LmNvbSIsImtleSI6ImtleTUiLCJleHAiOjE3MTkyNTU0MjQsIm5iZiI6MTcxOTI1NTEyNCwicGF0aCI6Ii8xNDUzMjM3MzAvMzM3MDcxMDU4LTdkYzllZmNiLTQ2ODYtNDdjZC1hZWMwLTA1MjdlZTUyZTNkNy5wbmc_WC1BbXotQWxnb3JpdGhtPUFXUzQtSE1BQy1TSEEyNTYmWC1BbXotQ3JlZGVudGlhbD1BS0lBVkNPRFlMU0E1M1BRSzRaQSUyRjIwMjQwNjI0JTJGdXMtZWFzdC0xJTJGczMlMkZhd3M0X3JlcXVlc3QmWC1BbXotRGF0ZT0yMDI0MDYyNFQxODUyMDRaJlgtQW16LUV4cGlyZXM9MzAwJlgtQW16LVNpZ25hdHVyZT0wN2NmMjYxZTUyYWIwYzUxZjQxYTgwNjczOGNkYzliOTk4NzVjNGIwNjFiMWIyMjRlYzQ0Mjc4ODA5OWVlMzQ1JlgtQW16LVNpZ25lZEhlYWRlcnM9aG9zdCZhY3Rvcl9pZD0wJmtleV9pZD0wJnJlcG9faWQ9MCJ9.wZOeAGmMJZsZGhTDY1KjUQOwDqG_NByJUNbxeieIXi4)
作者是懒b,简单测试了一下,插件本身就是jmg做了一下适配,感谢pen4uin
师傅的开源
免责声明
该工具仅适用于在授权环境/测试环境进行使用,请勿用于生产环境。