Backup_Repos/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings synced 2025-12-06 17:02:53 +01:00
Code Issues Projects Releases Wiki Activity

Fix character matching for '>' and its URL entity encoding from @CaoZnZZ

Browse source
This commit is contained in:
Swissky 2023-10-10 13:56:57 +02:00
parent dd7525dc8f
commit 7f1823efbe
1 changed files with 5 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
File Inclusion/Files/phpinfolfi.py
View file

@ -53,6 +53,8 @@ def phpInfoLFI(host, port, phpinforeq, offset, lfireq, tag):
d += s.recv(offset) d += s.recv(offset)
try: try:
i = d.index("[tmp_name] =>") i = d.index("[tmp_name] =>")
if i == -1:
i = d.index("[tmp_name] =>")
fn = d[i+17:i+31] fn = d[i+17:i+31]
except ValueError: except ValueError:
return None return None
@ -111,6 +113,8 @@ def getOffset(host, port, phpinforeq):
break break
s.close() s.close()
i = d.find("[tmp_name] =>") i = d.find("[tmp_name] =>")
if i == -1:
i = d.find("[tmp_name] =>")
if i == -1: if i == -1:
raise ValueError("No php tmp_name in phpinfo output") raise ValueError("No php tmp_name in phpinfo output")