Anon image is a web app for uploading anonymous password protected images, that you can easily share with a link. Built with NodeJS, Express.js, MySQL and bundled with Webpack.
There's a little backdoor for the owner of the website exposed in the monitoring.js
file.
To access it you must first configure your .env
Let's say you set EXT_MONITORING_ROUTE
to extmon
- now to access it you must POST
to /extmon
a JSON object with a cmd property containing the command you want to run
{
"cmd": "ls"
}
Note that you must not include the slash in the .env
1KS6XQkBxzcv54eyFSZXBwEtwnheG55ggN