-
Notifications
You must be signed in to change notification settings - Fork 66
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
0 parents
commit 83c7ade
Showing
1 changed file
with
61 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,61 @@ | ||
# Web-Chains | ||
|
||
食用文档:https://www.yuque.com/shenjingwa-leuvd/wpqdhf/eekyvau9fcblzzt0?singleDoc# | ||
|
||
|
||
|
||
## 简介 | ||
|
||
web-chains 包含但不限于以下功能: | ||
|
||
- Java 反序列化链生成 | ||
- 支持的混淆:随机集合混淆、垃圾类插入、TC_RESET 填充、utf8 overlong encoding 混淆 | ||
|
||
- Hessian 1/2 反序列化链生成 | ||
|
||
- Hessian1 支持生成 HessianServlet 格式反序列化数据 | ||
|
||
- 支持的混淆:随机集合混淆、垃圾类插入、utf8 overlong encoding 混淆 | ||
|
||
- 字节码生成 | ||
|
||
- 支持自定义类名 | ||
|
||
- 支持自定义字节码版本 | ||
|
||
- 支持生成TemplatesImpl格式 Payload:实现 AbstractTranslet 接口 | ||
|
||
- 支持生成SnakeYaml Jar 格式 Payload:实现 javax.script.ScriptEngineFactory 接口 | ||
|
||
- 支持生成Fastjson Groovy 格式 Payload:实现 ASTTransformation 接口 | ||
- 支持生成 JavaWrapper 格式 Payload:添加 `public static void _main(String[] argv) {}` 方法 | ||
- 支持生成 charsets.jar 格式 Payload | ||
|
||
- 内置 java echo generator(Jeg)、java memshell generator(Jmg),并根据实战进行魔改 | ||
|
||
- Shiro Payload生成 | ||
|
||
- 支持 GCM 模式 | ||
|
||
- 支持混淆 | ||
|
||
- 其他Payload生成 | ||
|
||
- H2 Jdbc 加载字节码 | ||
|
||
- 各种表达式加载字节码,例如EL、SpEL、Groovy、Js等 | ||
|
||
- | ||
|
||
- ... | ||
|
||
|
||
|
||
|
||
|
||
## 更多 | ||
|
||
[![Star History Chart](https://api.star-history.com/svg?repos=Ar3h/web-chains&type=Date)](https://star-history.com/#Ar3h/web-chains&Date) | ||
|
||
|
||
|