7-e1even/memshellparty

MemShellParty is a security testing tool that quickly generates "memory shells", hidden code injections that run inside Java web servers without touching the filesystem. It's built for security researchers and red team members who test how vulnerable Java applications are to attack. In a typical Java web application attack, an attacker exploits a vulnerability (like a deserialization flaw or template injection) to sneak code into the server's running memory. That hidden code becomes a backdoor the attacker can use to control the server. MemShellParty automates the creation of these payloads, supporting major Java web servers like Tomcat, Jetty, and GlassFish across a wide range of Java versions (JDK 6 through 21). You pick the target server type and the kind of exploit you're working with, and the tool generates the appropriate injection payload. The tool emphasizes non-intrusive operation, meaning even if multiple memory shells are injected simultaneously, they don't interfere with the server's normal traffic. It also supports integration with popular post-exploitation tools like Godzilla, Behinder, and AntSword, which security teams commonly use during authorized penetration tests. There's an online demo for quick experimentation, but the project recommends running it locally via Docker for real work. The notable engineering tradeoff here is on payload size. The project uses bytecode optimization techniques to shrink memory shells significantly compared to older tools, roughly 30% smaller for standard shells and 80% smaller for "Agent" shells that hook into the Java runtime itself. Smaller payloads matter because they're less likely to trigger detection or fail due to size limits in the vulnerability being exploited. The project also runs an automated test matrix across all supported server frameworks to make sure each generated payload actually works, reducing trial-and-error during security assessments. The tool is explicitly intended for authorized security testing, vulnerability assessment, and audit work. The project warns that unauthorized use is illegal and the user bears full legal responsibility.