Abstract: Fileless WebShells have emerged as a significant threat to J ava-based web applications by executing malicious code entirely in memory, thereby evading traditional detection mechanisms.