Skip to content

Commit

Permalink
update readme
Browse files Browse the repository at this point in the history
  • Loading branch information
4ra1n committed Nov 15, 2024
1 parent bcb5276 commit 61f1f1f
Show file tree
Hide file tree
Showing 6 changed files with 52 additions and 5 deletions.
30 changes: 30 additions & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
@@ -1,3 +1,33 @@
## 1.2.0

更新内容:

- [重要] 新增预设链功能,常用链可实现一键勾选 @Ar3h
- [重要] 所有选项和配置添加详细的描述提示信息 @Ar3h
- [功能] 支持下载 `payload` 为文件功能 @Ar3h
- [功能] `OtherPayload` 新增 `JMG` 格式的 `JSP` @Ar3h
- [功能] `OtherPayload` 新增 `Java` 两种命令处理 @4ra1n
- [BUG] 修复前端 `gadget` 参数描述信息显示异常问题 @Ar3h
- [BUG] 修复前端部分 `payload` 传参错误搭导致无效生成 @Ar3h
- [BUG] 修复 `JSP` 模板无法正常使用的 `BUG` @Ar3h
- [BUG] 没有导入 `aspectj` 依赖导致部分 `gadget` 错误 @Ar3h
- [优化] 优化部分 `gadget` 的优先级排序 @Ar3h
- [优化] 支持展示 `jmg` 的提示输出信息 @Ar3h
- [优化] 登录用户名固定 `admin` 仅随机登陆密码 @4ra1n
- [优化] 安全方面删除 `security path` 功能 @4ra1n @ssrsec
- [优化] 前端默认使用更好看的黑色主题 @Ar3h
- [优化] 前端界面 `run``copy` 按钮位置优化 @Ar3h

感谢以下用户的贡献:

- Ar3h (https://github.com/Ar3h)
- 4ra1n (https://github.com/4ra1n)
- 说书人 (https://github.com/ssrsec)

使用 `java -jar java-chains.jar` 即可启动

推荐使用 `docker` 一键启动

## 1.1.0

更新内容:
Expand Down
27 changes: 22 additions & 5 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -11,8 +11,6 @@

我们站在巨人肩膀上,致力于打造最强的 `Java` 安全研究领域的瑞士军刀

交流群请加V备注项目名:`Y2VzaGkyMzQ1Njc=`

![](img/001.png)

## 介绍
Expand Down Expand Up @@ -81,21 +79,20 @@ docker run -d \
-p 3308:3308 \
-p 11527:11527 \
-p 50000:50000 \
javachains/webchains:1.1.0
javachains/webchains:1.2.0
```

生成功能仅使用 `8011` 端口即可,其他端口为 `exploit` 模块使用

请使用以下命令获得随机的强用户名密码

```shell
docker logs $(docker ps | grep javachains/webchains | awk '{print $1}') | grep -E 'username|password'
docker logs $(docker ps | grep javachains/webchains | awk '{print $1}') | grep -E 'password'
```

输出示例

```text
11-12 06:59:53.301 INFO [main] c.a.c.w.c.SecurityConfig | | generated random username: fBTWDfwlapmq
11-12 06:59:53.301 INFO [main] c.a.c.w.c.SecurityConfig | | generated random password: XSsWerJFGcCjB8FU
```

Expand All @@ -105,6 +102,16 @@ docker logs $(docker ps | grep javachains/webchains | awk '{print $1}') | grep -

**特别注意:我们只对 8011 端口进行了保护,需要登陆后访问,其他端口可能存在被反制的风险,请自行注意**

## 更新内容

`v1.2.0` 版本大幅改进了配置信息的描述

![](img/002.png)

`v1.2.0` 版本提供了内置的高质量常用组合链

![](img/003.png)

## 参考和致谢

仅支持个人研究学习,切勿用于非法犯罪活动。
Expand Down Expand Up @@ -134,6 +141,16 @@ docker logs $(docker ps | grep javachains/webchains | awk '{print $1}') | grep -
- https://xz.aliyun.com/t/5381
- http://rui0.cn/archives/1408

## 交流

交流群请扫码,如果失效可加V备注项目名:`Y2VzaGkyMzQ1Njc=`

![](img/02.jpg)

如果你觉得 `Java Chains / Web Chains` 项目对你有帮助,可以赞赏支持我们

![](img/01.jpg)

## Star History

[![Star History Chart](https://api.star-history.com/svg?repos=java-chains/web-chains&type=Date)](https://star-history.com/#java-chains/web-chains&Date)
Binary file added img/002.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added img/003.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added img/01.jpg
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added img/02.jpg
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.

0 comments on commit 61f1f1f

Please sign in to comment.