Skip to content

Commit

Permalink
Release 1.1.0
Browse files Browse the repository at this point in the history
  • Loading branch information
p0dalirius committed May 21, 2022
1 parent 88812b7 commit e3c89f7
Show file tree
Hide file tree
Showing 4 changed files with 9 additions and 4 deletions.
Binary file added .github/download_file_web.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
8 changes: 5 additions & 3 deletions Makefile
Original file line number Diff line number Diff line change
@@ -1,9 +1,11 @@
.PHONY: all build

VERSION := 1.1.0

all: build

build:
@if [ -f ./dist/limesurvey-webshell-plugin.zip ]; then rm ./dist/limesurvey-webshell-plugin.zip; fi
@if [ -f ./dist/limesurvey-webshell-plugin-${VERSION}.zip ]; then rm ./dist/limesurvey-webshell-plugin-${VERSION}.zip; fi
@if [ ! -d ./dist/ ]; then mkdir ./dist/; fi
@cd plugin; zip -r ../dist/limesurvey-webshell-plugin.zip config.xml webshell.php
@echo "[+] Saved to ./dist/limesurvey-webshell-plugin.zip"
@cd plugin; zip -r ../dist/limesurvey-webshell-plugin-${VERSION}.zip ./config.xml ./webshell.php
@echo "[+] Saved to ./dist/limesurvey-webshell-plugin-${VERSION}.zip"
5 changes: 4 additions & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@

- [x] Webshell plugin for LimeSurvey.
- [x] Execute system commands via an API with `?action=exec`.
- [x] Download files from the remote system to your attacking machine `?action=download`.
- [x] Download files from the remote system to your attacking machine with `?action=download`.

## Usage

Expand Down Expand Up @@ -66,6 +66,9 @@ _apt:x:100:65534::/nonexistent:/usr/sbin/nologin
mysql:x:101:101:MySQL Server,,,:/nonexistent:/bin/false
```

You can also download a remote file from a browser with a GET request :

![](./.github/download_file_web.png)

### Step 3: The interactive console

Expand Down
Binary file not shown.

0 comments on commit e3c89f7

Please sign in to comment.