MSMAP - Memory WebShell Generator

Msmap is a Memory WebShell Generator. Compatible with various Containers, Components, Encoder, WebShell / Proxy / Killer and Management Clients. 简体中文The idea behind I, The idea behind II Function Dynamic Menu Automatic Compilation Generate Script Lite Mode Graphical InterfaceContainerJava Tomcat7 Tomcat8 Tomcat9 Tomcat10 Resin3 Resin4 WebSphere GlassFish WebLogic JBoss Spring Netty JVM*.NET IISPHPPython*: Default support for Linux Tomcat 8/9, more versions can be adapted according to the advanced guide.WebShell / Proxy / KillerWebShell CMD / SH AntSword JSPJS Behinder GodzillaNo need for modularityProxy: Neo-reGeorg, wsproxyKiller: java-memshell-scanner, ASP.NET-Memshell-ScannerDecoder / Decryptor / HasherDecoder Base64 HexDecryptor XOR RC4 AES128 AES256 RSAHasher MD5 SHA128 SHA256 Usagegit clone git@github.com:hosch3n/msmap.gitcd msmappython generator.py[Warning] MUST set a unique password, Options are case sensitive.AdvancedEdit config/environment.py# Auto Compileauto_build = True# Base64 Encode Class Fileb64_class = True# Generate Script Filegenerate_script = True# Compiler Absolute Pathjava_compiler_path = r"~/jdk1.6.0_04/bin/javac"dotnet_compiler_path = r"C:\Windows\Microsoft.NET\Framework\v2.0.50727\csc.exe"Edit gist/java/container/tomcat/servlet.py// Servlet Path Patternprivate static String pattern = "*.xml";If an encryption encoder is used in WsFilter, the password needs to be the same as the path (eg /passwd)gist/java/container/jdk/javax.py with lib/servlet-api.jar can be replaced depending on the target container.pip3 install pyperclip to support automatic copying to clipboard.Example CMD / SHCommand with Base64 Encoder | Inject Tomcat Valvepython generator.py Java Tomcat Valve Base64 CMD passwdAntSwordType JSP with default Encoder | Inject Tomcat Valvepython generator.py Java Tomcat Valve RAW AntSword passwdType JSP with aes_128_ecb_pkcs7_padding_md5 Encoder | Inject Tomcat Listenerpython generator.py Java Tomcat Listener AES128 AntSword passwdType JSP with rc_4_sha256 Encoder | Inject Tomcat Servletpython generator.py Java Tomcat Servlet RC4 AntSword passwdType JSP with xor_md5 Encoder | AgentFiless Inject HttpServletpython generator.py Java JDK JavaX XOR AntSword passwdType JSPJS with aes_128_ecb_pkcs7_padding_md5 Encoder | Inject Tomcat WsFilterpython generator.py Java Tomcat WsFilter AES128 JSPJS passwd BehinderType default_aes | Inject Tomcat Valvepython generator.py Java Tomcat Valve AES128 Behinder rebeyondType default_xor_base64 | Inject Spring Interceptorpython generator.py Java Spring Interceptor XOR Behinder rebeyond GodzillaType JAVA_AES_BASE64 | Inject Tomcat Valvepython generator.py Java Tomcat Valve AES128 Godzilla superidolType JAVA_AES_BASE64 | AgentFiless Inject HttpServletpython generator.py Java JDK JavaX AES128 Godzilla superidolKnown issue ReferenceGodzillaMemoryShellProjectAntSword-JSP-TemplateAs-Exploits memshell_manageBehinder | wsMemShell | ysomapDownload Msmap