Msmapis an HTML WebShell Generator. Compatible with many Containers, Components and Encoders.
Funktion
- Dynamic Menu
- Automated Compilation
- Create a script
- Lite Mode
- Graphical Interface
Container
-
Java
- Tomcat7
- Tomcat8
- Tomcat9
- Tomcat10
- Resin3
- Resin4
- WebSphere
- GlassFish
- WebLogic
- JBoss
- Spring*
- Netty
- JVM*
- .NET
- PHP
- Python
* SpringHandler supports JDK8+ only
*: Default support Linux Tomcat8/9
. Additional versions are possible according to the advanced guidance.
WebShell/ Proxy/Killer
-
WebShell
- CMD/SH
- AntSword
- JSPJS
- Hinterer
- Godzilla
- Modularity is not necessary
Proxy: NeoreGeorg and wsproxy
Killer: java-memshell-scanner, ASP.NET-Memshell-Scanner
Decoder/Decryptor/Hasher
-
Decoder
- Base64
- Hex
-
Encryptor
- XOR
- RC4
- AES128
- AES256
- RSA
-
Hasher
- MD5
- SHA128
- SHA256
Use
git clone [email protected]:hosch3n/msmap.git cd msmap python generator.py
[Warning] MUST set a unique password, Options are case sensitive.
Advance
Edit config/environment.py
# Auto Compile auto_build = True # Base64 Encode Class File b64_class = True # Generate Script File generate_script = True # Compiler Absolute Path java_compiler_path = r"~/jdk1.6.0_04/bin/javac" dotnet_compiler_path = r"C:WindowsMicrosoft.NETFrameworkv2.0.50727csc.exe"
Edit gist/java/container/tomcat/servlet.py
// Servlet Path pattern private static String = "*.xml".
WsFilter can use an encryption encoder. The password must match the path, eg /passwd
.
gist/java/container/jdk/javax.py
with lib/servlet-api.jar
can be replaced depending on the target container.
Pip3 Install pyperclip
To Support Automatic Copying to Clipboard
Exemple
CMD/SH
AntSword
Hinterer
Godzilla