实验科学与技术2026，Vol.24Issue(3)：1-11,11.DOI:10.12179/1672-4550.20240461
Tomcat无文件Webshell攻击模型的设计与研究
Design and Research of a Fileless Webshell Attack Model for Tomcat
摘要
Abstract
As the field of web security continues to expand,the widespread use of the Java language on the server side has led to the emergence of Tomcat fileless WebShell attacks,extending the attack surface of web security to encompass the entire framework and components related to web services.This paper conducts an in-depth analysis of the attack principles of Tomcat fileless WebShell and proposes a traffic detection evasion model based on traffic encryption and built-in sink points.To validate the effectiveness of these attack methods in bypassing detection,an automated exploitation tool is designed,and experiments are conducted to verify the feasibility of the attack principles and the effectiveness of the traffic monitoring evasion model.These research findings not only raise the bar for defense techniques but also provide valuable insights and references for subsequent security protection efforts.关键词
无文件Webshell/网络安全/流量检测/Web安全Key words
fileless Webshell/network security/traffic detection/Web security分类
信息技术与安全科学引用本文复制引用
刘仁婷,郑雅洪,李晓冬,吴祖峰,阎玉丽..Tomcat无文件Webshell攻击模型的设计与研究[J].实验科学与技术,2026,24(3):1-11,11.基金项目
四川省科技计划项目(2024YFHZ0213). （2024YFHZ0213）
