gnh1201/Vulnerable-Web-Application
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update CommandExec-2.php

Browse Source
This commit is contained in:
OguzTozkoparan 2018-11-30 02:46:54 +03:00 committed by GitHub
parent 195a5c818d
commit b719d8d814
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 8 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
CommandExecution/CommandExec-2.php
View File

@ -3,29 +3,30 @@
<link rel="shortcut icon" href="../Resources/hmbct.png" /> <link rel="shortcut icon" href="../Resources/hmbct.png" />
<title>CommandExec-2</title> <title>CommandExec-2</title>
</head> </head>
<body bgcolor="#FFFFD2"> <body>
<div style="background-color:#c9c9c9;padding:15px;"> <div style="background-color:#afafaf;padding:15px;border-radius:20px 20px 0px 0px">
<button type="button" name="homeButton" onclick="location.href='../homepage.html';">Home Page</button> <button type="button" name="homeButton" onclick="location.href='../homepage.html';">Home Page</button>
<button type="button" name="mainButton" onclick="location.href='commandexec.html';">Main Page</button> <button type="button" name="mainButton" onclick="location.href='commandexec.html';">Main Page</button>
</div> </div>
<div style="background-color:#FEFE9A;padding:20px;"> <div style="background-color:#c9c9c9;padding:20px;">
<h1 align="center">HELLO</h1> <h1 align="center">HELLO</h1>
<form align="center" action="CommandExec-2.php" method="$_GET"> <form align="center" action="CommandExec-2.php" method="$_GET">
Write Field:<input type="text" name="typeBox" value=""><br> Write Field:<input type="text" name="typeBox" value=""><br>
<input type="submit"> <input type="submit">
</form> </form>
</div> </div>
<div style="background-color:#ecf2d0;padding:20px" align="center"> <div style="background-color:#ecf2d0;padding:20px;border-radius:0px 0px 20px 20px" align="center">
<?php <?php
if(isset($_GET["typeBox"])){ if(isset($_GET["typeBox"])){
$target =$_GET["typeBox"]; $target =$_GET["typeBox"];
$substitutions = array('&&' => '',';' => '', ); $substitutions = array('&&' => '',';' => '','/' => '','\\' => '' );
$target = str_replace(array_keys($substitutions),$substitutions,$target); $target = str_replace(array_keys($substitutions),$substitutions,$target);
echo shell_exec($target); echo shell_exec($target);
if($_GET["typeBox"] == "flag2") if($_GET["typeBox"] == "Trochilidae")
echo "Welldone! You did great job."; echo "Welldone! You did great job.";
} }
?>
?>
</div> </div>
</body> </body>
</html> </html>