EvilZone

Sounds fair. Inexperienced people use unneeded code indeed.


Sometimes I'd like my code to be maintainable and extendable. argparse gives me a nice api to handle long and complicated command line options. sys does not.


For this short example sys.argv works fine, but learning something which is maintainable in the future when your projects get bigger could be useful.


Jay

As someone being half Chinese:
eviloctal.com


Any other Chinese in here? PM me and we can start a small group .


xie xie

Apart from using the internet connection, you could research MitM topics. Just google around a bit to get a feel for the concept and then try something out. If you need some help just pm me.


Have fun!

Secondly, you know that you should use POST instead of GET so why not research on it? Its just like changing exec($_GET['cmd']); to exec($_POST['cmd']); (again refactoring can be employed here as well). Of course, you have to work on giving easier interface to process POST forms.

Yes, I have done that, thank you for the suggestion.

One idea is to use the php://input, which you can execute using the include() function. The data can be passed as POST data (check http://php.net/manual/en/wrappers.php.php ). From the PHP manual, php://input is a read-only stream that allows you to read raw data from the request body. In the case of POST requests, it is preferable to use php://input instead of $HTTP_RAW_POST_DATA as it does not depend on special php.ini directives. Hence you could exploit this feature to create undetectable web shells.

Great, that sounds like a very good idea. Could you give a small example on how to use the php://input with the include function?

Yet other possibility is to hex edit some unsuspicious binary/image/mp3/etc file and insert the PHP backdoor in there. Your PHP script could then read the particular bytes from the binary file on the fly and execute them.

That sounds like a good idea as well. I will implement that too.

Thanks for your input, I will send you a pm when I have some code so you can look at it if you want?