pen4uin/java-memshell-generator

Health v2 · maintenance only

Adoption not part of the score

2230 stars · 232 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A highly customizable Java in-memory webshell (memshell) generator supporting multiple middleware servers, frameworks, shell types, and output formats, with both GUI and command-line interfaces. It is intended for security research and penetration testing, with integration support for tools like AntSword, Behinder, Godzilla, Neo-reGeorg, and Suo5.

Use cases

• generate java memshell payloads for tomcat or weblogic
• create in-memory webshells for penetration testing engagements
• generate listener or filter memshells compatible with antsword or behinder
• customize memshell payloads for spring webflux or undertow
• produce bcel or base64 encoded payload output for security research
• test web application defenses against in-memory webshell attacks

When to choose

• you need a customizable memshell generator covering many Java middleware and frameworks
• you want payload output in multiple formats (BASE64, BCEL, CLASS, JAR, JSP) for different post-exploitation tools
• you prefer both GUI and CLI usage in red team or security research workflows

When to avoid

• you need a defensive detection tool rather than an offensive payload generator
• your target stack is not Java-based
• you cannot legally or ethically use offensive security tooling in your jurisdiction

Facets

cli-tool · maturity active

penetration-testing security cli gui security penetration-testing developer-tools jvm cross-platform cli memshell webshell java-security red-team payload-generation offensive-security desktop

Member repositories

For agents

markdown · JSON · MCP: product_card(name="pen4uin/java-memshell-generator")