Command Injection Projekt
Installation
- sudo apt update
- sudo apt install apache2 php libapache2-mod-php
- sudo systemctl restart apache2
Test
- echo "<?php phpinfo(); ?>" | sudo tee /var/www/html/info.php
- curl https://SEITENNAME/info.php
Beispiele=
ping.php
<!DOCTYPE html> <html> <body>
PING
<form method="post"> <label for="fname">IP</label>
<input type="text" name="ip">
<input type="submit" name="submit" value="submit"> </form>
<?php if(isset($_POST['submit'])){ $ip = $_POST['ip']; $cmd = 'ping -c 4 ' . $ip; $output = shell_exec($cmd);
echo "
$output
";
} ?> </body> </html>