Skip to content

Instantly share code, notes, and snippets.

@alexs77

alexs77/shellshock-2.php

Created September 26, 2014 08:07
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save alexs77/b079cc80d30b7cd8c3ce to your computer and use it in GitHub Desktop.
Save alexs77/b079cc80d30b7cd8c3ce to your computer and use it in GitHub Desktop.
Download ZIP
Shellshock Exploitable (?) PHP script?
Raw
shellshock-2.php
<?php header("Content-Type: text/plain");?>
system("/usr/bin/id") => <?php system("/usr/bin/id"); ?>
shell_exec("/bin/hostname") => <?php echo shell_exec("/bin/hostname"); ?>
shell_exec("/bin/bash -c /bin/date") => <?php echo shell_exec("/bin/bash -c /bin/date"); ?>
exec("/usr/bin/whoami") => <?php echo exec("/usr/bin/whoami"); ?>
done;
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment