c0ny1/java-memshell-scanner

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1012 stars · 131 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A JSP-based scanner that detects and helps remove Java web memory shells (memshells) such as Filter, Servlet, and Listener types in middleware like Tomcat. It offers a gentler alternative to Java agent-based detection tools.

Use cases

• scan tomcat for memory shells
• detect filter servlet memshell in java web app
• find listener type memshell
• remove malicious in-memory webshell from middleware
• incident response for java memshell infection

When to choose

• you need to detect memshells without deploying a Java agent
• you want a lightweight JSP script you can drop onto a compromised Tomcat server
• you need to check Filter, Servlet, and Listener type memory shells

When to avoid

• you need to scan non-Java middleware or non-JVM applications
• you require ongoing automated monitoring rather than on-demand scanning
• you need a maintained tool with active releases and a license

Facets

cli-tool · maturity maintenance

security vulnerability-scanning reverse-engineering security penetration-testing jvm memshell jsp tomcat incident-response java-web java web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="c0ny1/java-memshell-scanner")