public-mirrors/GTFOBins.github.io
1
0
Fork 0
mirror of https://github.com/GTFOBins/GTFOBins.github.io synced 2024-12-25 22:40:10 +01:00
Code Issues Projects Releases Wiki Activity

Update php.md

Browse Source 
FILE READ & FILE WRITE ADDED
This commit is contained in:
LinuxSploit 2021-04-11 04:55:59 -04:00 committed by Andrea Cardaci
parent 41d9312c53
commit 6ba729e1de
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
_gtfobins/php.md
View File

@ -50,4 +50,12 @@ functions:
- code: | - code: |
CMD="/bin/sh" CMD="/bin/sh"
./php -r "posix_setuid(0); system('$CMD');" ./php -r "posix_setuid(0); system('$CMD');"
file-read:
- description: read file and output it on screen.
code: |
php -r 'readfile("/etc/passwd");'
file-write:
- description: write data to a file, filename should be absolute.
code: |
php -r '$write = fopen("/home/FILE-TO-WRITE.txt", "w");$input = " DATA TO WRITE (Plzsub) ";fwrite($write, $input);fclose($write);'
--- ---