CODEWITHSUNDEEP
phpsecuritygifexploit
Chris
Chris

Reputation: 2344

PHP code in .gif exploit

I need to know how to generate a GIF with php code inside, or how to modify a gif to add this so that I can perform a test on our avatar upload plugin in wordpress - I just want to ensure it is secure. Or if someone has a test image already, which I can open to see the code or modify?

Upvotes: 3

Views: 4203

Answers (1)

rook
rook

Reputation: 67039

In an LFI to RCE exploit you add a meta tag that contains you're php code. When the binary is included PHP will look for <?php ?> and execute the code inside of it.

Upvotes: 1

Related Questions