JSP Web Shell

[snapter]

http://p.blog.csdn.net/images/p_blog_csdn_net/kj021320/302272/o_jspshell1.jpg

http://p.blog.csdn.net/images/p_blog_csdn_net/kj021320/302272/o_jspshell2.jpg

http://p.blog.csdn.net/images/p_blog_csdn_net/kj021320/302272/o_jspshell3.jpg

Functions:

file: copy move delete down upload edit modifydate
folder: zip copy move new modifydate
SYS: system information , environment variable ,container information
database : view database information, view all db-functions/db-procdures,run statement
others: run system statement, API reflect , scanner remote-server port,http proxy(has some bug to can't used in ICQ)


test it in - tomcat weblogic websphare jboss

**Hidden Content: Check the thread to see hidden data.**

[testman]

good shell useful for html injection on remote with vulnerables servers.