php_filter_chain_generator

PHP filter chain generator PHPのrequireまたはincludeに渡すパラメータを完全に制御できる場合、ファイルをアップロードせずにRCEを取得できる、PHPフィルターチェーンを生成するCLIです。 使い方 ヘルプ root@kitploit: $ python3 phpfilterchaingenerator.py --help usage: phpfilterchaingenerator.py -h --chain CHAIN --rawbase64 RAWBASE64 PHP filter chain generator. optional...

SUSE CVE-2004-1020

The addslashes function in PHP 4.3.9 does not properly escape a NULL /0 character, which may allow remote attackers to read arbitrary files in PHP applications that contain a directory traversal vulnerability in require or include statements, but are otherwise protected by the magicquotesgpc...