New answers tagged file-inclusion
So, The issue was: I was running apache on my localhost to host the exploit and was trying to backconnect to myself. (I realized this after I shelled myself once.) After that, I hosted a one liner reverse shell (thanks to the comments by @Michael) on a different machine and spawned a shell on the target machine.
Start sending a simple PHP file with a command that does not require output, but allows you to determine whether it's been executed or not. Simply run twice the RFI and send from netcat: <?php /* do nothing */ ?> and <?php sleep(10); ?> If the second command has the web site returning the page in a time 10 seconds longer than with the ...
Top 50 recent answers are included