PHP Code

<!DOCTYPE html>
<html>
        <body>
                <h2>PING</h2>
                <form method="post">
                  <label for="fname">IP</label><br>
                  <input type="text" name="ip"><br>
                  <input type="submit" name="submit" value="submit">
                </form>
                <br>
<?php
  if(isset($_POST['submit'])){
    $ip = $_POST['ip'];
    $cmd = 'ping -c 4 ' . $ip;
    $output = shell_exec($cmd);
     echo "<pre> $output<nowiki>

</nowiki>";

?>

       </body>

</html>

Command Injection Proof of Concept

PHP Code

Navigationsmenü

Suche