• 0

[Apache, EXE] How to run EXE through APACHE using alias! HELP

Asked by TrickierStinky,

 Share

Question

Proficient

TrickierStinky

Posted
Posted

Hey guys can I ask for some good old help please?

What it is I want to be able to run say a console application, through my webserver on apache.

I know it a secruity hole so I ask how do I first of all set up apache to allow .EXE to run, and then how to do it so say a .EXE will disgause(sorry for spelling) itself as say a .SOB. So I call something like blah.com/send.SOB.

this is currently the code i have For a test console app(written in delphi)

program Project2;

{$APPTYPE CONSOLE}

uses
  SysUtils,
  ShellAPI,
  windows;

var
  S: array[0..255] of char;
begin

  windows.GetEnvironmentVariable('QUERY_STRING',@S[0], 255);

  writeln('<html><body>');
  writeln('Query=');
  writeln(s);
  Writeln('</ br>Executed</body></html>');
  shellexecute(0,'open','notepad', nil, nil, SW_SHOWNORMAL);
end.

I've Tried this on a mate custom built server application, and all he dose is a simple config edit such as this

[.exe]
CodeBase=

[.snd]
CodeBase=c:\www\localhost\Project2.exe

So all that basically does is will run the .exe on the server but if a .snd is called it will run the code above.

I know this is not as easy on apache thats is where i ask you for help how do i achive this?

thanks Matt

4 answers to this question

Recommended Posts

  • 0
Rising Star

HeyRatFans

Posted
Posted

Not sure you can disguise the executables as .sob files unless, as Antaris also suggested, you make a wrapper script. The script would actually be written in Perl or PHP (or any other server-side scripting language) and that would be responsible for executing the .exe file and capturing the output from it.

If you just want to have .exe files run and the STDOUT returned to Apache this should do what you want. Note I've made this only work in the named directory to give you a little bit of security. At least then you can specify which .exe files should be run by putting them in the specified folder.

ScriptAlias /path/in/browser "C:/path/to/executables/"

<Directory "C:/path/to/executables/">
	AllowOverride None
	Options ExecCGI
	AddHandler cgi-script .exe
</Directory>

Note that any .exe file you start this way will run as the user that Apache also runs as. If you have Apache installed as a system service on windows, the .exe files and any processes they start will run as SYSTEM and will not by default be able to interact with the current user session unless you change the Apache service to allow interaction with the desktop.

  • 0
Proficient

TrickierStinky

Posted
  • Author
Posted

sorry only just read this i tried that and i now get this error

  Quote
Internal Server Error

The server encountered an internal error or misconfiguration and was unable to complete your request.

Please contact the server administrator,_________ and inform them of the time the error occurred, and anything you might have done that may have caused the error.

More information about this error may be available in the server error log.

from just running this peice of delphi code

program Project2;

{$APPTYPE CONSOLE}

uses
  SysUtils, ShellAPI, windows;

begin
  ShellExecute(0, nil, 'c:\windows\notepad.exe', 'c:\windows\general.txt', nil, SW_SHOWMAXIMIZED);

end.

any idea?

This topic is now closed to further replies.
 Share
Go to question listing

  • Recently Browsing   0 members

    • No registered users viewing this page.

  • Posts

    • Microsoft locks Windows 11 user out, shows how easy losing data from forced encryption is

      By adrynalyne · Posted

      Pete Hegseth would like a word. I doubt that fiasco stops at Signal.
    • Minecraft's big graphics overhaul is now available

      By TarasBuria · Posted

      Minecraft's big graphics overhaul is now available by Taras Buria It is a big day for Minecraft fans. Mojang has released the long-anticipated graphics overhaul and a new content drop. The Chase the Skies update is now available in Minecraft on all supported platforms, while the Vibrant Visuals overhaul is currently available in Minecraft Bedrock Edition only (it is coming to Java Edition later). Mojang planned a visual update for Minecraft eight years ago, but the Super-Duper Graphics project was cancelled due to performance and other issues. Now, Mojang is ready to try again. This time, however, the update has been successfully delivered to gamers. The reworked graphics in Minecraft include directional lighting, volumetric fog, improved shadows, reflections, godrays, and a lot more. Previously, stuff like this required Minecraft RTX or third-party shaders, but now, the game has improved graphics natively. The update is available across many devices, and you do not need a high-end PC to run it. The upgrade is available on the following systems: Android with Adreno 640, Mali-G68, Mali-G77, Xclipse 530, and higher. iPhones and iPads with the A12 or M1 processor and higher. Any PC with DirectX 12 support. PlayStation 4 and PlayStation 5. Xbox One and Xbox Series X|S. You can enable Vibrant Visuals in display settings. Note that while the upgrade is compatible with many devices, performance still takes a hit. However, you can improve your experience by tweaking different parts of the visual overhaul in graphics settings. Another thing worth noting is that splitscreen multiplayer does not currently support Vibrant Visuals, just like worlds and texture packs. As for the Chase the Skies update, it introduces happy ghasts, new music disks, locator bar for players, environmental fog in the overworld, new background music, and all sorts of small gameplay changes, such as the ability to craft a saddle and a leade, horse taming with carrots, and more. You can read more about the latest Minecraft update in a post on the official website.
    • President Trump says TikTok deadline will ‘probably' be extended again

      By WinMacLin Guy · Posted

      “We know Biden and Hunter and many in that administration profited tremendously from the support of Ukraine. Nobody talks about that.” Every single right wing talking head has been talking about that and Hunter’s laptop since 2022. Republicans could not even make the case that involved Joe through congressional oversight . ”We do not know what his true motives are other than what we see.” Maybe the way he behaves and talks should show you his true motives (not everything is hidden or a conspiracy). He is a lying bigot who cares about money and power.
    • The official Funny Pictures thread

      By Steffan · Posted

    • Microsoft locks Windows 11 user out, shows how easy losing data from forced encryption is

      By Brony · Posted

      Libertarian here, I am not following you. What is the difference between the current politics and a bunch of monkeys throwing poop each other?.

  • Recent Achievements

    • Reacting Well
      Cole Multipass earned a badge
      Reacting Well
    • Reacting Well
      JLP earned a badge
      Reacting Well
    • Week One Done
      Rhydderch earned a badge
      Week One Done
    • Experienced
      dismuter went up a rank
      Experienced
    • One Month Later
      mevinyavin earned a badge
      One Month Later

  • Popular Contributors

    1. 1
      +primortal
      693
    2. 2
      ATLien_0
      274
    3. 3
      Michael Scrip
      216
    4. 4
      +FloatingFatMan
      189
    5. 5
      Steven P.
      146
    Show More

  • Tell a friend

    Love Neowin? Tell a friend!