Beefy Boxes and Bandwidth Generously Provided by pair Networks
There's more than one way to do things
 
PerlMonks  

Re: Run arbitrary UNIX commands on webserver without telnet

by DrManhattan (Chaplain)
on Nov 12, 2001 at 20:02 UTC ( #124851=note: print w/replies, xml ) Need Help??


in reply to Run arbitrary UNIX commands on webserver without telnet

Here's a script I use. It adds a password check.
#!/usr/bin/perl use strict; use CGI qw(header param); $| = 1; print header(); # Crypted password my $HASH = "azEehXEsKGpt6"; # Fetch CGI input my $password = param('password'); my $command = param('command'); # Output HTML print << "END"; <form method="post"> <input type="password" name="password" value="$password"><br> <input type="text" name="command"><br> <input type="submit"> </form> <pre> END # If the password is correct, execute the command if (crypt($password, $HASH) eq $HASH) { system($command); }
Caveats: <list>
  • You'll have to generate the crypted password using the same crypt() routine as the system to which you're uploading the CGI script.
  • The clear text of the password is left in the HTML source of the output page, so don't leave browser windows open to it.
  • </list>

    -Matt

    Log In?
    Username:
    Password:

    What's my password?
    Create A New User
    Node Status?
    node history
    Node Type: note [id://124851]
    help
    Chatterbox?
    [Your Mother]: I like Manu Chao.
    [Your Mother]: I like this one quite well, https://www. youtube.com/watch? v=rSEUH4KRfN8
    [choroba]: Půlnoční Marie (which means Midnight Mary)
    [choroba]: but the band is practically dead. We rehearse once in a year, and perform with the same frequency
    [ambrus]: `quote
    [ambrus]: sorry, typed in the wrong box
    [LanX]: Your mother: je ne t'aime plus! ;)
    [choroba]: seems lispy
    [Your Mother]: Be nice! I speak that much French. Though I also like that song.
    [choroba]: So, I joined Pod Černý Vrch some months ago to still have the fun. But I wouldn't call it "punk" anymore...

    How do I use this? | Other CB clients
    Other Users?
    Others taking refuge in the Monastery: (14)
    As of 2017-03-24 12:26 GMT
    Sections?
    Information?
    Find Nodes?
    Leftovers?
      Voting Booth?
      Should Pluto Get Its Planethood Back?



      Results (301 votes). Check out past polls.