From 6ba729e1deb08a3b24e7ce93e869ba496eefa5fd Mon Sep 17 00:00:00 2001
From: LinuxSploit <68427058+LinuxSploit@users.noreply.github.com>
Date: Sun, 11 Apr 2021 04:55:59 -0400
Subject: [PATCH] Update php.md

FILE READ & FILE WRITE ADDED
---
 _gtfobins/php.md | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/_gtfobins/php.md b/_gtfobins/php.md
index 4502d43..f494b3e 100644
--- a/_gtfobins/php.md
+++ b/_gtfobins/php.md
@@ -50,4 +50,12 @@ functions:
     - code: |
         CMD="/bin/sh"
         ./php -r "posix_setuid(0); system('$CMD');"
+  file-read:
+    - description: read file and output it on screen.
+      code: |
+        php -r 'readfile("/etc/passwd");'
+  file-write:
+    - description: write data to a file, filename should be absolute.
+      code: |
+        php -r '$write = fopen("/home/FILE-TO-WRITE.txt", "w");$input = "  DATA TO WRITE (Plzsub)  ";fwrite($write, $input);fclose($write);'
 ---