# feihong-cs/Java-Rce-Echo

Java RCE 回显测试代码

Repository: https://github.com/feihong-cs/Java-Rce-Echo
Canonical: https://ross.abutalabs.com/products/java-rce-echo
Language: Java
License Family: other
Topics: echo, rce-echo, deseriazaiton-echo, tomcat-echo, jetty-echo, spring-echo, websphere-echo, weblogic-echo, jboss-echo, wildfly-echo, linux-echo, resin-echo
Last push: 2020-10-15T03:24:13+00:00

## Health v2 (maintenance only)
Score: 32/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 0, release rhythm 35, longevity 100
- inputs: {"age_days": 2264, "days_push": 2148, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases, no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1008, forks 173 (observed 2026-08-28T04:03:12.710660+00:00)

## What it is
A collection of Java test code for achieving command output echo after remote code execution (RCE) across common application servers and platforms. It provides ready-made snippets for Tomcat, Weblogic, WebSphere, JBoss, Jetty, Resin, Spring, and generic Linux/Windows echo techniques.

## Use cases
- get command output back after java rce exploitation
- test deserialization rce echo on tomcat
- echo command results through weblogic exploit
- find request echo automatically in java web server
- test rce output retrieval on jetty or jboss

## When to choose
- you need reference implementations of RCE echo techniques for major Java application servers
- you are researching or testing deserialization-based RCE output channels
- you want cross-platform (Linux/Windows) echo test code

## When to avoid
- you need a production security tool or scanner rather than test snippets
- you require a maintained project with a license and active releases
- you are not working with Java application server exploitation

## Facets
- artifact type: library
- maturity: maintenance
- function: security, penetration-testing, reverse-engineering
- domain: security, penetration-testing, developer-tools
- platform: jvm, windows, cross-platform
- tags: rce-echo, deserialization, java-security, exploit-testing, command-output-echo, tomcat, weblogic, jetty, jboss, websphere, spring, linux

## Member repositories
- feihong-cs/Java-Rce-Echo (main) score 32

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:03:12.710660+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T07:12:09.064085+00:00, confidence not recorded.
  - readme: https://github.com/feihong-cs/Java-Rce-Echo (fetched 2026-08-28T04:03:12.710660+00:00, sha 93602c598383)
- Data as of 2026-08-30T08:39:29.467469+00:00.