I’ve created a tool to excploit command injection vulnerabilities. It consists of two parts:
1. A php file that can be uploaded through various exploits (that simply opens up a command injection vulnerability)
this could of course be skipped if such vulnerability allready exists.
2. The tool to exploit through.
I’m looking for feedback on this tool. To operate it some “basic” knowledge in command injection and metasploit is needed.
The tool: https://github.com/z0noxz/smplshllctrlr
Hehe, I actually have an old account here ‘c2VjcmV0’… But you are right, I’m not that interactive :P But my fingers were tingeling and I wanted response on my new tool :) Have you tried it out yet?