ReaJason/MemShellParty

Health v2 · maintenance only

Adoption not part of the score

1581 stars · 160 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

MemShellParty is a self-hosted, visual tool for rapidly generating Java memory shells (fileless webshells) for mainstream web middleware and frameworks like Tomcat, Spring, and GlassFish. It supports generating payloads for Godzilla, Behinder, AntSword, Suo5, and Neo-reGeorg, plus probe shells and exploit payloads for expression injection, deserialization, and SSTI vulnerabilities.

Use cases

• generate java memory shells for tomcat
• create fileless webshell payloads for red team engagements
• generate godzilla or behinder memshell payloads
• build java agent memshells with small bytecode size
• generate probe shells to detect middleware type
• create payloads for expression injection and deserialization exploits
• self-host a memshell generation platform for authorized testing

When to choose

• you are a security researcher or red teamer needing reliable, tested Java memshell payloads across many middleware versions
• you want a visual, one-click generator with a compatibility matrix and automated testing
• you need lightweight payloads compatible with JDK 6 through 21

When to avoid

• you need webshells for non-Java stacks like PHP or ASP
• you are looking for a defensive detection tool rather than an offensive payload generator
• unauthorized use - it is strictly for authorized security testing and research

Facets

application · maturity active

security developer-tools self-hosted gui testing security penetration-testing web-development developer-tools self-hosted self-hosted jvm cross-platform memshell webshell red-team java-agent payload-generation bytecode-generation asm bytebuddy offensive-security middleware docker web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="ReaJason/MemShellParty")