1
#!/bin/bash
2

3
TARGET_IP="$1"
4
PORT_RULES="$2"
5

6
if [[ -z "$TARGET_IP" || -z "$PORT_RULES" ]]; then
7
  echo "usage: $0 <target_ip> \"<host_port:target_port> <host_port:target_port> ...\""
8
  exit 1
9
fi
10

11
if ! command -v socat >/dev/null 2>&1; then
12
  echo "[-] socat not found."
13
  exit 1
14
fi
15

16
echo "[*] Target IP: $TARGET_IP"
17
echo "[*] Rules: $PORT_RULES"
18
echo
19

20
for rule in $PORT_RULES; do
21
  HOST_PORT="${rule%%:*}"
22
  TARGET_PORT="${rule##*:}"
23

24
  echo "[+] Forwarding host: $HOST_PORT → $TARGET_IP:$TARGET_PORT"
25

26
  socat TCP-LISTEN:"$HOST_PORT",fork TCP:"$TARGET_IP":"$TARGET_PORT" &
27

28
  PID=$!
29
  echo "    Started (PID=$PID)"
30
done
31

32
echo
33
echo "[OK] All forwarding rules loaded."

19 collapsed lines
1
int __fastcall formSysCmd(int a1)
2
{
3
  int Var; // $s4
4
  const char *v3; // $s1
5
  _BYTE *v4; // $s5
6
  int v5; // $s6
7
  const char *p_writepath; // $s3
8
  _BYTE *v7; // $s7
9
  int v8; // $v0
10
  _DWORD *v9; // $s0
11
  int v10; // $a0
12
  const char *Var_1; // $a1
13
  int v12; // $v0
14
  int v13; // $s1
15
  void (__fastcall *p_fputc)(int, _DWORD *); // $t9
16
  _BYTE *v15; // $a0
17
  _BYTE *v16; // $a3
18
  int v17; // $a0
19
  int v18; // $v0
20
  char p_writepath_1[104]; // [sp+20h] [-68h] BYREF
21

22
  Var = websGetVar(a1, "submit-url", &dword_47F498);
23
  v3 = (const char *)websGetVar(a1, "sysCmd", &dword_47F498);
24
  v4 = (_BYTE *)websGetVar(a1, "writeData", &dword_47F498);
25
  v5 = websGetVar(a1, "filename", &dword_47F498);
26
  p_writepath = (const char *)websGetVar(a1, "fpath", &dword_47F498);
27
  v7 = (_BYTE *)websGetVar(a1, "readfile", &dword_47F498);
28
  if ( *v3 )
29
  {
30
    snprintf(p_writepath_1, 100, "%s 2>&1 > %s", v3, "/tmp/syscmd.log");
31
    system(p_writepath_1);
32
  }
33
  if ( *v4 )
34
  {
61 collapsed lines
35
    strcpy(p_writepath_1, p_writepath);
36
    strcat(p_writepath_1, v5);
37
    v8 = fopen(p_writepath_1, "w");
38
    v9 = (_DWORD *)v8;
39
    if ( !v8 )
40
    {
41
      printf("Open %s fail.\n", p_writepath_1);
42
      v10 = a1;
43
      Var_1 = (const char *)Var;
44
      return websRedirect(v10, Var_1);
45
    }
46
    v13 = 0;
47
    v12 = fileno(v8);
48
    fchmod(v12, 511);
49
    if ( *(int *)(a1 + 240) > 0 )
50
    {
51
      while ( 1 )
52
      {
53
        p_fputc = (void (__fastcall *)(int, _DWORD *))&fputc;
54
        if ( !v9[13] )
55
          break;
56
        v15 = (_BYTE *)v9[4];
57
        p_fputc = (void (__fastcall *)(int, _DWORD *))&_fputc_unlocked;
58
        v16 = (_BYTE *)(*(_DWORD *)(a1 + 204) + v13);
59
        if ( (unsigned int)v15 >= v9[7] )
60
        {
61
          v17 = (char)*v16;
62
LABEL_12:
63
          p_fputc(v17, v9);
64
          goto LABEL_13;
65
        }
66
        *v15 = *v16;
67
        v9[4] = v15 + 1;
68
LABEL_13:
69
        if ( ++v13 >= *(_DWORD *)(a1 + 240) )
70
          goto LABEL_14;
71
      }
72
      v17 = *(char *)(*(_DWORD *)(a1 + 204) + v13);
73
      goto LABEL_12;
74
    }
75
LABEL_14:
76
    fclose(v9);
77
    printf("Write to %s\n", p_writepath_1);
78
    strcpy(&writepath, p_writepath);
79
  }
80
  if ( *v7 && (v18 = fopen(p_writepath, "r")) != 0 )
81
  {
82
    fclose(v18);
83
    sprintf(p_writepath_1, "cat %s > /web/obama.dat", p_writepath);
84
    system(p_writepath_1);
85
    usleep(10000);
86
    v10 = a1;
87
    Var_1 = "/obama.dat";
88
  }
89
  else
90
  {
91
    v10 = a1;
92
    Var_1 = (const char *)Var;
93
  }
94
  return websRedirect(v10, Var_1);
95
}