veo/wsMemShell

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1490 stars · 228 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Java-based WebSocket memory webshell (memshell) tool that injects WebSocket endpoints into running application servers like Tomcat, Spring, Jetty, WebSphere, WebLogic, and Resin for covert command execution and proxying. It also includes variants that bypass Nginx/CDN WebSocket restrictions via JSP-based connections.

Use cases

• inject a websocket memshell into tomcat
• bypass nginx websocket proxy restrictions
• establish covert c2 channel via websocket
• red team persistence in java application servers
• test memshell detection tools
• proxy traffic through websocket shell

When to choose

• conducting authorized red team exercises against Java application servers
• researching memshell techniques and defenses
• testing detection coverage for WebSocket-based memory webshells

When to avoid

• production systems without explicit authorization
• non-Java environments other than the tested servers
• projects requiring a maintained, licensed dependency

Facets

library · maturity maintenance

security websocket proxy penetration-testing security penetration-testing web-development jvm memshell webshell red-team java tomcat spring jetty weblogic nodejs

Member repositories

For agents

markdown · JSON · MCP: product_card(name="veo/wsMemShell")