1
0
mirror of https://github.com/GTFOBins/GTFOBins.github.io.git synced 2024-09-07 20:50:38 +02:00

Polish and simplify php file-read/write

This commit is contained in:
Andrea Cardaci 2021-04-11 12:11:44 +02:00
parent 6ba729e1de
commit 7e1ac22fa0

View File

@ -51,11 +51,12 @@ functions:
CMD="/bin/sh"
./php -r "posix_setuid(0); system('$CMD');"
file-read:
- description: read file and output it on screen.
code: |
php -r 'readfile("/etc/passwd");'
- code: |
export LFILE=file_to_read
php -r 'readfile(getenv("LFILE"));'
file-write:
- description: write data to a file, filename should be absolute.
code: |
php -r '$write = fopen("/home/FILE-TO-WRITE.txt", "w");$input = " DATA TO WRITE (Plzsub) ";fwrite($write, $input);fclose($write);'
export LFILE=file_to_write
php -r 'file_put_contents(getenv("LFILE"), "DATA");'
---