From b2e351ffd1e072c5952091c34dd6ab83fd620622 Mon Sep 17 00:00:00 2001 From: Jason Haddix Date: Tue, 3 Nov 2015 15:48:12 -0800 Subject: [PATCH] img phpinfo file iadding mg php info file --- Payloads/POC_img_phpinfo.gif | Bin 0 -> 7420 bytes Payloads/README.md | 6 +++++- 2 files changed, 5 insertions(+), 1 deletion(-) create mode 100644 Payloads/POC_img_phpinfo.gif diff --git a/Payloads/POC_img_phpinfo.gif b/Payloads/POC_img_phpinfo.gif new file mode 100644 index 0000000000000000000000000000000000000000..67f5d453f425901f92a6cc56e6cb2d5eef220ebb GIT binary patch literal 7420 zcmZ?wbhEHbyv`89@clo-pTGZ}z5X(%Qu@`qZ%GkSU;gCf=d){Lvs%0F9ICjsGw0u@lfQobeR!hr_}X;;wA>G$e@>oW zaqmctPg2IU!|gZs6b9CGK6>%-_n*HXZqDAYdF%HdfBrt2{Nl~m51)QKI99iARolyp zJ^y~ad33V*%J$4pUw)q1n7MgY)W0tm|9!jh?A4b=vkD@MssgIo|Ni^eIj!ZzovpX_ zm0Z}EczIXJ@m;M;o7BI&JahX%*~%`n_^PIl_m+MB`pYIYt%%HFE)FZZ0ic>Vvs-#^}-xpe)(vy*jy|Ni^&^Ur}LF?$alzq-oTzoPZ^ z`)@~<1U-KF`QoPJcb~q$e)r|_r4u*zSA2VQc(6%|f4q5qF}9-q`_JDm4(HxJRNK{+zoFOY-N)~VHBJA%-+O(!%RM^b>Vbv_ zhl)=f-Sp~I)sK&N&#n!f-{$<_>HCz1_VB`r51+n2KHVCXo)}lzIB!8yNN!0?MZ^6A z*^%{aH+C1)PiT5}swud(BdVnO`?HPrPImnI{Wq?#@bB+$-@m?lc&7X9hp(}vHJ7)h zM;BH8`}hCLw_pGM{rmar&yQb!zJCAx?>`89{r>CQ_upT>|Ni;=@7s^x!wbs4eE$`a zQ~dMS-+%u>@c;jRzkdJu@$2uCmtVeo`~Cmlzqg;hfBp9B{Dy?LpMHG(_B*k*_5AvH zi@3xK+Y6swoca9C*KgndoLCY5{l$*2AD@QTw#V1DZEaEc_u=5(z3IOg3{3Z^8f$;EB<6*WMKHupu@nxzyQh<3>^O%u5!wFY}Xwq%@`!7hAk&&e&Bmm8Osz5Qcwb$MuyWTVvGQ(LnGmoO_m_b8>p|Yd1;brl6)d z|JnG?F0+vKKcW1+0(0?QX?A*ES{}O8UMkcXs-&4E|%x;_%!G23~cXi9KZ!`kQfs^6<#^yZR{ z_!Lviek1*U$%0`%#h1u6wmtBz&v@Pqh|UP-Au8^K0LQ3srGp?F#GU+Oug~A_7daD`SnW6Rz8~* zW75UMwQ$LXC0)f~ULkXn?`BRbsJhj$c)sZsh8_*umYom#Q@LiUal4zndbPMe?|*?O z|K0=etDe~rnLi2Aw(^s6%*q~g}GRZToU9rm}Wme8UuGef=!mL-bm8vXS z%Uc>V_4Rf&!6VsIU&MMYULMUC-K?`or`S6yY0;^i`g7}ctysKaQGo8&=`l(NRc-Dt zU39x8HpjzFv~l$Zuf&_4dh_NmNh_{+oi^Fme*1#PHG3SdbuXK^_L245ebZ08TF)Z% zrI35FnMBO-6nPz;;<#5TD>S2c7u`-@u_D61+ z=J#x3arm;Zajn$WJ#Wt#`>#|u^6b{5m*-x8dvo5*w?oNi)2XJ6lD#oG0;gD+I1CyW z$Jp%6zw+Pjzptr4!}mt!L$-ydx1Qnq&h>5QJfAbgW;+rZ7}=vsCg^NdxaPftb>Wwb zef&`|0xtWiKi^(|rJk8@2cOlJ$&0qPYtMOk_LlN&N8z3nmGFKx9ZJab=+;y z1$H3=4hDB-rZ)?=Z~gnLchjp?o6r5Sn{hzy_x5;ao*8csoME$esyZEc;>(#!x8lAtFU3>S{Z#&B8`96JPdmz9`*dW2KUgKd+rty^9 zFTU!8wdOD%pWVXnO#b^6%&SdaW-E`W20~^Y;j}b$yolm0$YFR-J;zZmEKo{?AmP%Z7hEl@aA?jiMdVm z70H`Cn=3WLS$b7thu4%j_k^2{Ogdo9?i5fYvEr!Rlat5H`qo5g?soX}%pp{CP9oRQ z3QeEI3Je?$AD6AaveGZw;hLC8g7~99D;qODiI?8fo8&%MhJBv`&v(VomCL$Y)N2L! zpHErX9P!tYugIXyaL)mDtBj}GyMOw&P5Zi0zasX~m0ODzc;!S$9Zh_%a=h`}r2|ch z#ZfPP*jiE#9bo6xI4s*P(7__&EX-HHkhoT%q2m9YDI0rbUnfT|=(+c;#C1yQL^0{_ zVT<#oZI%gGWpG0yYLadslhubM48Ihb6eGU#tkpOslAwLttYi^0(*;H+R?EgadL`Ra z-{$6@=eqMi%tJoyr(B`p%wG0Mf;;^y)NNnS-2Z%=A2$<+lR=xoS>rzpJRvg@`FHxAB?aN;>|I-F~<`QBG&H%yAWk;vcN&Rf4TNB?|# zjEKD>v!CwW;+0~YvM~yW^gl4OCM9%9cqj=hp3`J3v>~BfVB3FDqX~|^@d^!ra~2;G z+qYqo@tqF0Khu=_#P~(lU0L}kOKgUE9TR(oLC2quxmmG!?k!sdda8RO*_N$v5{(i( z%fg_vy7}xu8x!4ht~<&S3~|oNWvkOu-^@H;yNof4Q8wd)O7n%!XIIn;-o2@A>3fxKohXpkp7=6MMSveyZCBg!D(nS`FCZ9Mcv?!J}c*-xiECEL`mIYa< zAH)u?t1F#Et*z__g{#d54V!djnI&zk8ABE@ z9a`zYr*>ws@MjG-rX7FZDz7-mu+N}Otm1c8#QNQW))_9lXY=Hr)_H8K^#5E&=ju1F z%Mkux&huGqWrhuY<-2FsNv-hT`_k9HT+74erO^V12i_05tkzq9w2s*G?)<@r zYn<;rd9yP%?Rfh8X^R($`H19OyQnvaOC;Pp7st3|;oJtzi2uKWXZ%>M-uL%S`2Js) z{Hy-YJQ&NwapkAXj`M%tUB6gy;?KP&d8%6P_T~MYmb|a?YIGW7!h-f)8)cv8yE8U6 zq}c~F*e~D=OJJR4zBXnYSUwdbU!KCe@hQVv1`b}1Xx)F5K(x0(`TYQ%unP=A3QE!kn8Y?ku?4U_4&!Xg;OKbKacBphKtPYcfw+G6&KO3X z=^fTHXJjOuXktBJB{v~LtAzdSgtp(?+e}uJO-ajKb)svTL7{_q_pA#H(;N89EI7^< zx<685n99)F9?=taqvM!I|Irs*o7{>{Wr%oQ==tiJns}l~$Ah_E#kJ9dQGY>iwnek) zjhdus?2{CjFKsV)c7s7<0oSSz?HLbbW(E{bPUz^+Xzlgr>8$A2@MPYP-k*yPdZJPM$0CVYNwl)d=gBCp+ zl2Zi~xO7DXb#IE!JHRF=G+9fcSLX+-u!1Yc%7FVvqBAo%Y%H7YBw0iyI7BwEEIW|Q zY0$mKh(qH5zoP|LBp8yL9V6gcV~*b5Dqwm)EI5#u>nz~+5nCa(cIy8(N%0)w&w zhueqQ3I}H2+Bx^m&AIn}&V3*`@6mtDd3PdNHe1$z4`pF-VBr72&~soO%K;94f%)%G z&ikx6|BL4Q&yw@^XR_26a2)-~B@hsMO_bwiIooGL_U;L6ZUSry6Xw3#Iq%2KdEY(f zKXRDQU$9WHYT>8K*+O3PKT0lo{c_&toAciPocBF)zF^nFo`Qu+vlf1}T=d&=@oULN zYPS~ZYAqCZj((W-b0&Is4hlsnJfeU%gypyKA1$ttCcY3{qB$dKl*X z&zxhofGKrBRJbW?dH~xwLw2SOTpI)yn`SMuowd-PYyNM`MVVYngSeLF?pl^}Ye_EG z(vqmfdR5D9wfH{oTwWlx{KLy7jaAEoPtDVdVsW}^@#(+#gxO2yu?R3Q3ap&WwR9@i z^2u5&ZMnFc64;NfWRDC8)lv10KGki&!2P;%f)N99nNy#*6IUR%u}LPPg=ERb<|2m2ByRh^N(sW>^i`; zCV=gt2}`uq+zAX!r*Ey9bZQNw0rO+6bsS)jz4Kc6 zZPu!%S?fRETK{s@n&(pMCZ1Zqn``ZBt~G~Gt(dVQa%<(f_X;cdt=9|8UMCp6aWdDO zc~(qS23)^P*u4W-??ka>2QX|9U=YmSB=CEK`s__=)tj`lH|qZ8GqT?Jc-1DI|J|E( zyEmJx-ejh|*-Uz~@axUmuQ!=f^T{rv1ES9nY4rK@CZwBt^3~agPT)z{x zbw%%}Sg>OO_m1{#ruP?iHk{ru|Mm7Z=^b6GcP)Osv&DMHvg{p8e(&67y<=PVj+L`_ zZ&%Gxk6e>j-Wa7f|JLA97eiZX}fWDZp*ti4jjEnUL(J%GvX0yDqCUX?wEl>Z#m z*mGEU%^|Hfhc)*ca^^W=FLT5u=aABxBd%)>tIs)PyXUZD&k?UZM^xV&wy8N9A#*h1 z&tcaB)w4fZrPpw%tl>z@Ii}!qEPcPSXu(xI-b+(-yGxKa4OAa-(g91%>!Fi4VKmM zobEC>U9WR`h0mFTXHFf|Iep;FsjX{Ht(tS@;GI*a&zxFSbL#AzGaGcyrq`TWzvt9? zoim%}oI0&@=JuL1Yv-J~XLI_d&zZY(PHla2>d~Gv%VkbIf4O2=5AW7F=eZls|L!^e zXU+NlJQx1XInT_%G=Y1;)C7M032Z+bcz()U__gP}An(PkXU^YnxF{HVQE2W(nc9mC zxfdmDFG%NJl=^$&U(H4JzvutyT#&Q9$Upa@w(Nx)4(Aj9?+J8mxFjCSr}37%FJG;htmxlllb4Lv!!Fczf?-FHgxI_WA@CUfuhzYVUoJ zz5gZl{=dKXUhcj3Huk}nyZ7Gt-hU>0pGV=rzubG@Y#*@tJ^cUn!GGC@pL!qi+dX)F z_kobyqxZTG+2=iA`1e3Cj^$%$#uWE^Qye%Y1s=cfeQc!n*m&M!E4jz!=N^C2ee9jf z;`V^0-+qi+hhf^`5%#d*Zk5iTS=KFJ+&G z={>cIdmMA`sejzF0J*0+a!C@V^{yK@r#xVqt?*p$0h3|h^NP6VvmKrn{d-;__hL%G z^X7Zc+w8de|4-om8Std0?|HM|^Wwbc&34br^`1}O_k2R#^Qv>tZO*-%>i4qx-OJK< z&s*zWww`;wnD50jzL(42J+Hg>+{W)!uiuNs>t3#~ds%Pydg8fPTkpLnzV~d$vJI~v z@fYsnbV+zKTY=TZf#p=)o6~x%rRUz9+xOy`}*J8tMlGI@q2%Y@7)Q#x7W@+KYQ=}rFHL*_q}<$ z?)}fYcPIPaKj!;zEbra*d2hMnpZ`7gTqn;V$i}`PqaZUcEnh>^-tMD>KI_>9yo&sv zr1(Fn{QoEu|LK|Br)vS9-Uj zK>oA7{YOQ$H=6=jt~l`C65xH7z<2G#w~H5eE(-8o6W}ee|Nhv4x5}UQ+J$e|Ch%3v z|DG$)nyx1#$z*Ajl*y729#z>oI) z?*;35m&pI9%>Oal{zt+3pH1&Szf9np`u=imyf`9FK=zi;dR zVfX&~{P-UY?|)6<|8e^K?=F8{Vfpy(SqEJgFkD=~z!kuI=l}Y@_xAt29nX8i{@)G# ze>d0veboQ&-u=I?_5Z#6|M&I!e;?-meSiPoEqUIr`Tw{W_#g5MaIx^IMEE+IwlMJu zg;Y#P+>*g3X(lsc!lOg2JcfKdHw=;w_VF2~^@On;^sN2WawF+6r z{!E$oLL4@ypPOTrS*H|rd6~l^`)sDQou8lkF7~b!lJyGJ2%Y0u>c`tPCG*-M$LVgp zU0ar4UTEI>E@k)UH~w?-j`GP!P1nA(*V(Qe`C=iXSBW}H}Vtv}EAx8eV1$LDC* zx6Qfr?d8>-+P}}q))>8iursik@9m6|{ERwA?leye&xz?bcRF&j>;5**xU<7ndjDVJ z?FA1E)4%)G)&5SudvLiwf86f!FR%6%_rI_E|NQ+8;q!YL-g>{c{d&l9!@eK4ZtEZT zcxSQx9)^d%d-gGZmFBnm{i{1*uhWTc1AE4siznEB-Sk>dX8%7YPt|A}#Wfw->sB_* z=34jg*{sC2hZ~!?YMunT7i8^uHZ!ryXVbC7rZpdD$~XFKIxc(AQ|MHB)0>aS6dTWc zoT;=kv&d5>_f6qR!)%>Pr<4zB7N1Hy&>|#be)EZ&r}pfSPbad!z4>@tvD?Jxw8d{0 z^%Gn#Z2lLWmTA9o@q`TjT82}OimFBdiVJfJt){XyGj%DoaV|U_=xSPeMIcDGG&CsE z*7$08VC~l{Vdv*ey%Jq$x-~4i`t8-w2-m5h5%HmWL$3w3#+u%Y$(5ZJnL77tX;etB z>@rtz=GR+P144NlIT`k(HgV?f7c~zpx~N+o6M8w+JhtLw>-Lz^^J~rTmA%Zp9$R+* zu6az|b<^$l@{g;EGgO{^Iz7IDolo&j)AOm@nrr z>d)`ZNpEAf`F4*toh^6Ebp5z*8|H7f{eC~ReO|@QNc-DmHzv-P`*=Fs{@%=|N8RP# zK3aU;w)RPOy4;5g#$rAlN)g-VmwtNx-c2ek;{CGvPZRs=|7pkl=gBz0@aeqdpWp>1 zOgDNTSw61+e>(oZ$c_V#919x%zCQL}X2#9^9AXoi*h&^K{%_yU#kZmPXS0H_hK8d! zmp}`D%mNd(9S3={F0`G|Nc<>~v0tEQLxY}35_@IEL7_IiXesR`^JO3R=T|hh|DDbD z`h=rvx<#SXy&r6^mt5@4ta&VLrgGopgko=|hjUk2$s+S_?Z-@v3VL!wl0}vl9yR%7 z&|5g?nB2t^J=#_m+G2ASn_qartNv|$w^_*}^Hm+k^vgDO_4_27A3NckKWCz3)SG1K z|JRS}e%mPhq~M9zOhGT_Nz6U7-#nJMSaHl|*T#PLC-L(9mJV)8lO$a^I2fz}