mirror of
https://github.com/0dayCTF/reverse-shell-generator.git
synced 2024-12-29 16:05:26 +00:00
61 lines
1.6 KiB
JavaScript
61 lines
1.6 KiB
JavaScript
const { rsgData } = require("../js/data.js");
|
|
|
|
const insertParameters = function (command, params) {
|
|
// TODO: Extract the inlined JS from index.html into a new file,
|
|
// so the insertParameters + encoding logic can be reused
|
|
const encoder = (value) => value;
|
|
|
|
return command
|
|
.replace(encoder('{ip}'), encoder(params.ip))
|
|
.replace(encoder('{port}'), encoder(String(params.port)))
|
|
.replace(encoder('{shell}'), encoder(params.shell))
|
|
}
|
|
|
|
const generateCommand = function (event, _context) {
|
|
const { path, queryStringParameters } = event;
|
|
|
|
const requiredName = decodeURIComponent(path.substring(1));
|
|
const selectedItem = rsgData.reverseShellCommands.find(function ({ name }) {
|
|
return requiredName === name;
|
|
});
|
|
|
|
if (!selectedItem) {
|
|
return {
|
|
statusCode: 401,
|
|
body: `Command name '${requiredName}' not found`
|
|
}
|
|
}
|
|
|
|
const { command } = selectedItem;
|
|
const result = insertParameters(command, queryStringParameters);
|
|
|
|
return {
|
|
statusCode: 200,
|
|
body: result
|
|
}
|
|
}
|
|
|
|
const extractRawValue = function (event) {
|
|
const { queryStringParameters } = event;
|
|
|
|
return {
|
|
statusCode: 200,
|
|
body: queryStringParameters.value
|
|
}
|
|
}
|
|
|
|
exports.handler = async function (event, _context) {
|
|
const { queryStringParameters } = event;
|
|
const defaultHeaders = { headers: { 'Content-Type': "text/plain;charset=UTF-8" } };
|
|
if (queryStringParameters.value) {
|
|
return {
|
|
...defaultHeaders,
|
|
...extractRawValue(event)
|
|
}
|
|
}
|
|
return {
|
|
...defaultHeaders,
|
|
...generateCommand(event)
|
|
}
|
|
}
|