[getvoucher]

PHP code injection to shell

This tut is about how to upload shell with php

[daniterrer]

nice one, thanks you for this video

[Phizo]

Honestly, this is a terrible and misleading example of PHP code injection. Login credentials would never be passed to eval() in such a manner. If you don't know how even simple authentication works, you shouldn't use it in your demonstration. Frankly, it's a bad tutorial all around. It's obvious you don't even understand how or why this works, only that you can do it. That's not a tutorial. If you want to know how this works, as well as how to write or even partially simulate an actual login, read the PHP documentation. The former, i.e. Complex (curly) syntax ({${expression}}), can be read about here: http://php.net/manual/en/language.types....ng.complex. Learn to make before you break.

[M L T]

Honestly, this is a terrible and misleading example of PHP code injection. Login credentials would never be passed to eval() in such a manner. If you don't know how even simple authentication works, you shouldn't use it in your demonstration. Frankly, it's a bad tutorial all around. It's obvious you don't even understand how or why this works, only that you can do it. That's not a tutorial. If you want to know how this works, as well as how to write or even partially simulate an actual login, read the PHP documentation. The former, i.e. Complex (curly) syntax ({${expression}}), can be read about here: Learn to make before you break.

Phizo? Still around? Damn, now that's a name I haven't seen in a long time. Unsure if you even remember me.

[Phizo]

Phizo? Still around? Damn, now that's a name I haven't seen in a long time. Unsure if you even remember me.

I don't really come on here much anymore, but still around. :~)
Met up with K4Fr a few months ago when he was down here for work.