printf(1) via PHP magic_quotes Utility Command Encoder | Metasploit Exploit Database (DB)

printf(1) via PHP magic_quotes Utility Command Encoder

This encoder uses the printf(1) utility to avoid restricted characters. Some shell variable substituion may also be used if needed symbols are blacklisted. Some characters are intentionally left unescaped since it is assummed that PHP with magic_quotes_gpc enabled will escape them during request handling.

Search Other Modules


Rank

  • Manual

Authors

  • jduck < jduck [at] metasploit.com >

Development


Similar Modules


Usage Information

$ msfconsole

                ##                          ###           ##    ##
 ##  ##  #### ###### ####  #####   #####    ##    ####        ######
####### ##  ##  ##  ##         ## ##  ##    ##   ##  ##   ###   ##
####### ######  ##  #####   ####  ##  ##    ##   ##  ##   ##    ##
## # ##     ##  ##  ##  ## ##      #####    ##   ##  ##   ##    ##
##   ##  #### ###   #####   #####     ##   ####   ####   #### ###
                                      ##

msf > use encoder/cmd/printf_php_mq


Module Options

VERBOSE Enable detailed status messages
WORKSPACE Specify the workspace for this module