memory-shell

支持Tomcat内存马查杀的JSP脚本

内存马生成工具 Tomcat、Weblogic、CMD、Behinder、Godzilla、Suo5......

This repository is designed to automate the detection and cleanup of in-memory web shells using MCP in combination with the memory-shell-detector tool. / 本仓库旨在结合 MCP 与 memory-shell-detector 工具，实现对内存 WebShell（内存马）的自动化检测与清除。

Three .NET memory shells at three distinct insertion positions - HttpModule pipeline, WebSocket connection takeover, Remoting URI registration. Zero impact on unmarked traffic, no new port, no web.config change, no file drop. 三个插入位互不相同、业务无感的 .NET 内存马。

A robust, memory-safe Copilot chat extractor using Playwright + CDP chunked streaming.

Java memory-shell scanner / cleaner / verifier — detects Behinder, Godzilla, JSP webshells via runtime Agent attach

按 CVE 组织的真实目标靶场（upstream 项目 + 漏洞版本钉位）+ 内存马注入器，ShallowEnd 配套。仅限本地授权测试。