Live: https://asciinema.org/a/8rttvu7cq0mjgi89fmgpqqgci

README.md

WIP

remote-shell.sh

#!/bin/bash

cmd=$1
dir=$2

curl -d "cmd=${cmd}&dir=${dir}&key=SuperSecretKEY" -X POST http://papan-tulis.xyz/api/exec.php?$3

shell.php

<?php
if (isset($_POST['cmd']) && $_POST['key']=="SuperSecretKEY") {
    $encoded = (isset($_GET['encoded'])) ? true : false ;
    $cmd = ($encoded) ? urldecode($_POST['cmd']) : $_POST['cmd'];
    $opt_path = '/home/papantul/api/output.txt';
    $home = '/home/papantul/';

    if (isset($_POST['dir']) && !empty($_POST['dir'])) {
        $dir = ($encoded) ? urldecode($_POST['dir']) : $_POST['dir'];
    } else {
        $dir = "~";
    }

    $dir = str_replace("~",$home,$dir);

    chdir($dir);
    // echo $dir;

    if (isset($_GET['shell'])) {
        shell_exec("$cmd > $opt_path");
    } else {
        exec("$cmd > $opt_path");
    }
    if (file_exists($opt_path)) {
        echo file_get_contents($opt_path);    
        exec("rm $opt_path");
    }

    //var_dump($outputAndErrors);
    //var_dump($return_value);    
} else {
    echo "Nyaa~";
}