# MSMAP | Memory WebShell Generator

**URL:** <https://onehack.st/t/msmap-memory-webshell-generator/229038>\
**Category:** Tools & Scripts\
**Tags:** tools, programming, hosting\
**Created:** [November 28, 2022, 9:42pm UTC](https://onehack.st/t/msmap-memory-webshell-generator/229038 "2022-11-28T21:42:26Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Prometheus](https://onehack.st/user_avatar/onehack.st/prometheus/32/34950_2.png) [@Prometheus](https://onehack.st/u/Prometheus)\
**Post date:** [November 28, 2022, 9:42pm UTC](https://onehack.st/t/msmap-memory-webshell-generator/229038/1 "2022-11-28T21:42:27Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/3/9/39a3a42100dffaab37fb1421f9934a638c56b770.jpeg)

Msmap is a Memory WebShell Generator. Compatible with various Containers, Components, Encoder, _WebShell / Proxy / Killer_ and Management Clients. [简体中文](https://github.com/hosch3n/msmap/blob/main/README_CN.md)

[The idea behind I](https://hosch3n.github.io/2022/08/08/Msmap%E5%86%85%E5%AD%98%E9%A9%AC%E7%94%9F%E6%88%90%E6%A1%86%E6%9E%B6%EF%BC%88%E4%B8%80%EF%BC%89/), [The idea behind II](https://hosch3n.github.io/2022/08/09/Msmap%E5%86%85%E5%AD%98%E9%A9%AC%E7%94%9F%E6%88%90%E6%A1%86%E6%9E%B6%EF%BC%88%E4%BA%8C%EF%BC%89/), [The idea behind III](https://hosch3n.github.io/2022/10/29/Msmap%E5%86%85%E5%AD%98%E9%A9%AC%E7%94%9F%E6%88%90%E6%A1%86%E6%9E%B6%EF%BC%88%E4%B8%89%EF%BC%89/)

[![](https://github.com/hosch3n/msmap/raw/main/img/a.png)](https://github.com/hosch3n/msmap/blob/main/img/a.png)

[![](https://github.com/hosch3n/msmap/raw/main/img/b.png)](https://github.com/hosch3n/msmap/blob/main/img/b.png)

[![](https://github.com/hosch3n/msmap/raw/main/img/c.png)](https://github.com/hosch3n/msmap/blob/main/img/c.png)

Feature [WIP]

## Usage

```auto
git clone git@github.com:hosch3n/msmap.git
cd msmap
python generator.py

```

> [Warning] MUST set a unique password, Options are case sensitive.

### Advanced

Edit `config/environment.py`

```auto
# Auto Compile
auto_build = True

# Base64 Encode Class File
b64_class = True

# Generate Script File
generate_script = True

# Compiler Absolute Path
java_compiler_path = r"~/jdk1.6.0_04/bin/javac"
dotnet_compiler_path = r"C:\Windows\Microsoft.NET\Framework\v2.0.50727\csc.exe"

```

Edit `gist/java/container/tomcat/servlet.py`

// Servlet Path Pattern private static String pattern = “\*.xml”;

If an encryption encoder is used in WsFilter, the password needs to be the same as the path (eg `/passwd`)

`gist/java/container/jdk/javax.py` with `lib/servlet-api.jar` can be replaced depending on the target container.

`pip3 install pyperclip` to support automatic copying to clipboard.

## Example

CMD / SHAntSwordBehinderGodzilla

## Reference

[GodzillaMemoryShellProject](https://github.com/BeichenDream/GodzillaMemoryShellProject)

[AntSword-JSP-Template](https://github.com/AntSwordProject/AntSword-JSP-Template)

[As-Exploits memshell\_manage](https://github.com/yzddmr6/As-Exploits/tree/master/core/memshell_manage)

[Behinder](https://github.com/rebeyond/Behinder) | [wsMemShell](https://github.com/veo/wsMemShell) | [ysomap](https://github.com/wh1t3p1g/ysomap)

## GitHub:

> **[GitHub - hosch3n/msmap: Msmap is a Memory WebShell Generator.](https://github.com/hosch3n/msmap)**
>
> Msmap is a Memory WebShell Generator.
