li8u99/command.php

Last active August 19, 2019 07:40

Star () You must be signed in to star a gist
Fork () You must be signed in to fork a gist

Learn more about clone URLs
Clone this repository at <script src="https://gist.github.com/li8u99/587d27efc2f3def68668e0127aea6966.js"></script>
Save li8u99/587d27efc2f3def68668e0127aea6966 to your computer and use it in GitHub Desktop.

Download ZIP

cobre代码审计测试

Raw

command.php

	<?
	a='ls'
	eval('a')
	?>

Raw

include.php

	<?php
	include'include2.php';
	?>

Raw

include2.php

	<?php
	require ($_GET['a']);
	include($a.'.1.php');
	?>

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment