![]() |
|
[Python] REMOTE CODE EXECUTION - SIMPLE EXPLOITER - Printable Version +- Hack Forums (https://hackforums.net) +-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444) +--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151) +---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118) +---- Thread: [Python] REMOTE CODE EXECUTION - SIMPLE EXPLOITER (/showthread.php?tid=5744392) |
REMOTE CODE EXECUTION - SIMPLE EXPLOITER - I-GANK-I - Oct 28, 2017 Below is an easy to understand python code for how to make Exploiter's. i hope you guys can learn from this. Enjoy. Software used: JetBrains PyCharm Edu 4.0.2 Python interperter version: 2.7.11 Credits for code below goes to websec.nl , thanks for the share. Code import urllib2How to find RCE in PHP code? simple, download https://www.fileseek.ca/ and search the entire code for instance: RCE Vulnerable PHP code: PHP Code in the above demo the string will look like: .php?shell=system&exec=COMMAND HERE (for example: ls -lia) RCE Vulnerable PHP code 2: PHP Code in the above demo the string will look like: .php?vulnerable_var=COMMAND HERE (for example: ls -lia) now there are many more PHP codes that will do this kind of stuff, i think eval also executes (you can find them by googeling exploitable PHP functions) More info: https://stackoverflow.com/questions/3115559/exploitable-php-functions For now i hope to have helped you with this. Good luck 🤝 |