gnh1201/Vulnerable-Web-Application
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update CommandExec-4.php

Browse Source
This commit is contained in:
OguzTozkoparan 2018-12-01 00:11:58 +03:00 committed by GitHub
parent 832c0018a3
commit 7931adf3f9
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 13 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
CommandExecution/CommandExec-4.php
View File

@ -27,7 +27,19 @@
} }
if(isset($_GET["typeBox"])){ if(isset($_GET["typeBox"])){
$target =$_GET["typeBox"]; $target =$_GET["typeBox"];
$substitutions = array('&&' => '',';' => ''); $substitutions = array(
'&&'=>'',
'& ' => '',
'&& ' => '',
';' => '',
'|' => '',
'-' => '',
'$' => '',
'(' => '',
')' => '',
'`' => '',
'||' => ''
);
$target = str_replace(array_keys($substitutions),$substitutions,$target); $target = str_replace(array_keys($substitutions),$substitutions,$target);
echo shell_exec($target); echo shell_exec($target);
if($_GET["typeBox"] == "secret") if($_GET["typeBox"] == "secret")