PHP IRC Bot pbot eval() Remote Code Execution

Diskutiere PHP IRC Bot pbot eval() Remote Code Execution im Security News Forum im Bereich Security Talk; This Metasploit module allows remote command execution on the PHP IRC bot pbot by abusing the usage of eval() in the implementation of the .php...

  1. #1 newsbot, 08.08.2012
    newsbot

    newsbot Foren Gott

    Dabei seit:
    26.11.2007
    Beiträge:
    9.920
    Zustimmungen:
    1
    This Metasploit module allows remote command execution on the PHP IRC bot pbot by abusing the usage of eval() in the implementation of the .php command. In order to work, the data to connect to the IRC server and channel where find pbot must be provided. The module has been successfully tested on the version of pbot analyzed by Jay Turla, and published on Infosec Institute, running over Ubuntu 10.04 and Windows XP SP3.

    Weiterlesen...
     
Thema:

PHP IRC Bot pbot eval() Remote Code Execution