gnh1201/Vulnerable-Web-Application
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update CommandExec-1.php

Browse Source
This commit is contained in:
OguzTozkoparan 2018-11-30 02:42:01 +03:00 committed by GitHub
parent d6e6f98d5e
commit 1a3a258843
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
CommandExecution/CommandExec-1.php
View File

@ -7,7 +7,6 @@
<div style="background-color:#c9c9c9;padding:15px;"> <div style="background-color:#c9c9c9;padding:15px;">
<button type="button" name="homeButton" onclick="location.href='../homepage.html';">Home Page</button> <button type="button" name="homeButton" onclick="location.href='../homepage.html';">Home Page</button>
<button type="button" name="mainButton" onclick="location.href='commandexec.html';">Main Page</button> <button type="button" name="mainButton" onclick="location.href='commandexec.html';">Main Page</button>
<button type="button" name="nextButton" onclick="location.href='CommandExec-2.php';">Next Level</button>
</div> </div>
<div style="background-color:#FEFE9A;padding:20px;"> <div style="background-color:#FEFE9A;padding:20px;">
<h1 align="center">LOGIN</h1> <h1 align="center">LOGIN</h1>
@ -24,9 +23,9 @@
<?php <?php
if(isset($_GET["username"])){ if(isset($_GET["username"])){
echo shell_exec( $_GET["username"]); echo shell_exec( $_GET["username"]);
} if($_GET["username"] == "Admin" && $_GET["password"] == "flag1")
if($_GET["username"] == "Admin" && $_GET["password"] == "flag1")
echo "WELLDONE"; echo "WELLDONE";
}
?> ?>
</div> </div>
</body> </body>