From b2e351ffd1e072c5952091c34dd6ab83fd620622 Mon Sep 17 00:00:00 2001 From: Jason Haddix Date: Tue, 3 Nov 2015 15:48:12 -0800 Subject: [PATCH] img phpinfo file iadding mg php info file --- Payloads/POC_img_phpinfo.gif | Bin 0 -> 7420 bytes Payloads/README.md | 6 +++++- 2 files changed, 5 insertions(+), 1 deletion(-) create mode 100644 Payloads/POC_img_phpinfo.gif diff --git a/Payloads/POC_img_phpinfo.gif b/Payloads/POC_img_phpinfo.gif new file mode 100644 index 0000000000000000000000000000000000000000..67f5d453f425901f92a6cc56e6cb2d5eef220ebb GIT binary patch literal 7420 zcmV-3y?8|v=%m;5 zw`ub9`OL9tvzl7|^wIwI*yif=qMC47a(YmDhyDKkiI#-u+_l=ibkMP3)4FuWx`m~J zC-mve+rW0IiZ)+*g7My_^Y!{XWoX#kj7^>`7i^ zTy}o(;j#1f`uq3n{{Hv=`Q-8C#L~27tCLo`nnS#wReXVN;KzX3w^-=z_Gxoy`}O19 z;_2eGQ|#iybcurT*O2S*_VeVqy7^@$~th zf;Q&Qi`~O|U4ezhs9o{q$ny31?(z8S=h0nwfA{(O=)-N>!hMR0Z?KIr?(z3we1iV> z-s{VXM_XXkz<}VwbIQfC>dJcf@!id>RiB1K;N|aRfQMIcc<}P~fu5j( zRBd!zc!1x)YgvDW*t>9lkb>sQf>V8nT6BB&=CR(%i2D2eUU6~#`}X(s?%~Xf?eO(o zb$rvcXIpZ4{{H{;_WJ(*{`va+`1<_y_xt|;|NsC0_4oSr_xtqs`}zC*?eX_laCh|g z`c!Ol`TG6-|Nj5}|NsB~`uqI&`u*hT^z`=o|Nj2%^7r-j`p>Xn?eh5b_WNOdh0m{F zI9_4Uw{hjsndj{F_V@hAs8{#sxb^YnSABwQh-Mwe$>+oNDg1@bE>Bx9l zaCKF0cmMzYA^8LW00930EC2ui0M`Ii000R80M!W`NU-3*SP={=T*$DYL3$q|N}Ncs zqQ!|eKG?AFucOD0AVZ2ANwTELlPFV)bZ8J^ECehEBA7|Drp=oR>;1aOv*$&QDuW6g zO0;Omm#Mc3R^|6Luhx&!c!iX#sX@Lc)+!6s~w$at% zlUyx?&~NI6J^N>rU=-D#F^dfJGipEc9~ zj3_;Xx#5px3YjJgM>gu}qmOR?a7honz-g7GxT;jpUIJO!;Bhzh`DduhXs{!6gpx^S zharkcWSVTg3hM^cRy(T(btIy#4Ru_V>$fHm#A}u4T}h*-TMk=;EV3+fOKM`G%4~nm zuDYnBu%b{cwU=BX!6iK00?|g=7Mw^%6@jbpN@3YaE}onM8zHFcW|K`nx1fQnyg}BB zrjf1UJMF%g$m*{I67+EklQtM!$7CNYEOTD!B&aD`4Wip;sIpkBgc2G1h##3B@<%TV zuCB4hnvCWftF zqy?e$(T)#VTo6RQd-L0`)PDmGxDGnBlcKkWE1c=g=1QDy4cVa00R~MpK}-*YE}N>y zMxxLM5-AR+6DbrrFMo+D zx@IWt>?431rv&4Q4||_3ed^U)Z@mXAyVdr%cb-k<>^;CxLK84xK7T0Td}%Y3+vxQy zR)uT>$D4!z~l)(p!FdgcqMm-$>!G9h|p$dCJI06kYR|Vu$j9&hACJf3OR6x09w#TZ35Djyy)fx7CM0zAR!h!8K*620t{Q63xT1^hA!JV zISpje0&CnP>G&1IefS^?{NM*Gh5&{H{GbhOh=LYIkxdkClbZ@2SQMC7^uZQ|EE88}7q5}fZ0YU{if!r>1w`J{ZZ_f(c;1)<9X89g*A(@Q_k`cL2cqcvUnZM_@ zP74AELNJCf%`^M}3{;rH7#!dZ2Y7c0qo^%o#d==!s<*dSxWWY>I$8IMM+j{t?#^Vf z(c^ZO15en3)A;LLsYSvAhVX$8IuL_AoZ$?Tki-(E00@6F*ukAxLJYvmR|=yyz3R=d zl3Cbc4}*sdf4OWg&xc$TKS2XdE!}ge76~0(Ai^*30|jDWiWo>D5Tl%eGZL_1cM!J! z6*7=Pjb9*uQJkZ~7QV2OGu((q{FWk477rAz)T!cX7MLe~0taX?i2U(wYF%zegtZWi zdyH8Irl>*{S`p0z03xe{&A~i0EoTbcBNzZ)LnC&pXJzb}&wZu=S^*ts@FauK^UbJz z5#8A*JVB`~)*qKW(2g|-APXW;!x1Pz0Zdn61qoOI7*cO z5J46MplW6C7Q?Q7b)VN=fb7w_*1AcCd<}hHxmvjvNYGcwggreS@F3NLFo3cx9RnFW zI{{Rn0>Y_44kpZ_6Z0rW0=WI{BdEauzA$zcc>8Ktue%XDXhgf43~$RU<1-@v&S;6N z?CW1gVu?(Q1TPFB03Yb01O^cJ5$;j&gD0E{fC&0Gm|zTJ{9NHHs6weNp7RpuLdJ_w z_s2uNgQ{P^-4iLfZcgr2`aaOaz4mo2WVJsaM1lvI@PPojP=dBAd(4@JcEW=Wh;P_^ z8iXjuH|P!sq?6jzM`(Hpx={0Yd>rIePy9K~v5v>QTkDlMIj}}tVqRPM*ZYfv%q1-V zSKyrInuc~UfKGS2n|>OoPrd0)Pj@OvJn1r^K;TQ@iaM`5@jF<&?$5#DtV7=9?73ZL z$7k=BqoNi}6mL63Cx90iVA;-I0kol=fGJr2`cs(rrzej6>{q|~(ocH-nZaEG2-Nu; zxX=CW*U@;${NChlB`WT|ZuypDzKPXaW&vQJhq|#H=Wj;=fq-T|P=G(6307bQnlJ^^ zkW~nnfSM421vr3tkOzTh0BuKjAhZsRuzR|<4vcpWuF!iD@qUrlbyEg*R)z}4$45Xw zY!|S9SfB^5P;)nzbINuE@^E9*lmoHl0IdKB4G3Ee&|nP^Th?V=!60xL_;dm=30eRF z=%;=k$bRex0hr)^CU_UifPy4;XvODiELaQeP*6H>2QLtVFn|R!SP69&a091<)8qgm z;12E(2txN-MHn|MpfL@wT1#jEgJ5hy00UZ(2@tRjI{<==XN6b)2mzUZbtSlkcCieT z2T3azhEFht``|~sFagV#2{Nb$dfiCh5;mxw!=m}p|if(5`j9*|fnbO-H_hWodM zG^lozW@)O(il#7eKo^Ue&;XZ!4|X^R&2dNKCIFQHg@;&-R@jKfNRP$n3bICW%4ifx z(2Vs(WnsvIEJy=?Bt?NV0WYA9YdC{7*nDD^2a+HI(zkHt*Z?S?3aapjXy6=~P;--D zh=?eKjYy1%c#kMa1HYh!{m2ziFnPLGZ_r4Ps2~c86;>_(kcOF{1>8u3bwgt@P;hYv zbXkRw`m&Mozyo!Y28I|9!8nX48I=$q3M~{7E!h>Gzy=W#lPVaEEcgWzAVmnNP~XH` zX=n&MIfFhK1Qi$v6tD!Qz+(w8i>xvTD8LUvAOK9M1;9v;!YGweNd`Ls7gxy@W5bmT zR0N8-n2gz&j`^7E5Se>0nUg61sUQ!2kYj-W1`;=mzTgXkFbE&H2a(ARk9nG?nVPD( znylHHuKAj5t5jBuN{nVY(~o4N@CumB52AP9dz2XQb0x8MT=77W2~220SH z4KN1>Fb9Jm03#p>M(~>;z?<5+o!r@--ua#28J^<*IiB2E1hYAR_f-T0KmZT$0F1z% z1i%On5TEbKp7SZ6^eLb78K1vt1b=V{#rX;lP+is)2-$ZA^DzgDkOoE&1|X1~?zx`$ z*`D`FpW;BD4{)IodZF@pn-WT&@fo7)>7Mi1p6~gd_gSA2ilK~fp(2{0^*N&ZIiu?t zq9)p*Eh?cEnwvEWq8_@RC(523YNPdeo93yNTSA-a>7qTlo=n=LGD-j%I--mKod0Q@ zKA-|+pjuZo1!qtO&M^l9unMpcqcv)#J({6U3ZMHqqG<}HQVOMQx~6Q}q-_eNbXub> zdZ#@q4)eLEa2luZ>7;>rr&G$FE?NXa)j0D17m%B!o&*p80T8K^3Z<0_r;{qFJqing zU6EG11_%8M`n3+s8Qlp3g!%Brr~qpAw4uL`S~8mO^aqng^PsXD8zTC1~~ zskiE?iVBb`R|LS?tH3$~lv=Bjs;sM8sQ~~2Vep^DDFC{_3an5D(KG~GI-QUJ0?XR0 zlFFbkB3V6N^;srH(xT z3a#r3ti#Hvn5bE`d9LpusSi7^5Sy+MTd|W0oSr%YdN2z5GzUvi1>9N&Yfu2N5C9Qt zvJm^QC!4Y+d$KEQu`T-!GCQ&3s9>8?zJZvn%VcG`q7kE3rAN zt`%#s51X*`mY6~twNg8^RO_=35C(!koFgCrhyVwma9|}+2C5(cMgRg;8?`Zewrab! zGt0JaE469+wr`uWQyaHDi?)jDg~rtcMIf_yfCumJw}Jb&giE+40Jwj9xQQFMK8pv@ zY6Nz02qQoP_Ap0h00wP03j1KTid(pNptzt5xQA;3@6fq`%ebHGw}u$!wG zxTb5kr2DzHJGi!sxT%}Fu&cX1X)|HZXgB@5CbKE4?X}3;vl`?8^7Rdz4Yt3 z-P^m?3%}fZzuT+5gp0k@3%k-AzR~-?o(sR(o4*O{zuXJE`OCon+rRzWz~3vs)62YD ziJoXv1aHv69XtR7@WF2Y!XWIyCS1ZH9Ks$P!gwI9)OrgWbPD%S0zS|K4=}wXyuu^= z!6>}LBdo$I?87O%!b1$iKODq7Y{DX}#6_&bC!E4Pyu(3^#7exxCG5jIe8pHC#aR5q zMQ|m}_=Ov+2qdfsW^BeFOvY!t#%a99XFLFEtO$7E1V*5>K41@^a0FdY2@miNZXCyN z?8asM$A1jRfegonOvZ@+Ovq@g#)GWLjf}>FyvTuE$c!w=Z*0hIT*;3d$(g*yUyO1X zMPgr91Pidn3t$GRtO%!k#%5p!t_;hs?8XbQ%4R&i!x;xDz_leXrhW{|iZIK6EX$}& z%)!jc!7R(b%*wT_%Bq~q!Q9Hr%*v{K%FUe2uq@4Ie9Eu9%C9WUvYg7xEX>=i%&nZv z-aO0MOw8S!%C+pu;=IhK9LneEsHTh!wVcljfY1Ak&-|><{|wOmoX-OQ0+0)!m0%Aq zkOujH4EY?;`n=B(4bipC&)7iG5na&|ozWb9(Ex4H7(LJ%ZP6P2(EfbUC;iXx8-k3hb}xyu3o z36B8Oq`(POjng?D)Ke|hL4DDr(A7M>)mDwwLVeLkz12ev)Q&LJr0~;H&DB#~4q2_$ zT+Insjn!wp)+nvhV2urDUDao;)95hNca77e;0Rxh4RB4^=+Mntj=q?Fg5h*__P@48Q<|J=%ti4f!ywhd>8d00Sm~44xg^Y0cTQ?b)3T z+L~?Iojuy1ZQ8PJ*|9y^rY+o^{oA6g+YBJu#ckNQz1f`Y+sjSc(w*C%UD?Ae+`nzz zw*B10ZQF+b{l&PJ!S#g;MZf?VaNg*B-sX+oC$QcbZ~`Zg0m7Z$=!qHE!cP?&D8>d-~us@=XhS{n?UDs{^xWa=#)_BgWl(c zJ`0ckkPrD#45=RD5ol}_nz=Y@Xhh0f=r z4(OH+>8I}Je%|LiPU?+L=%cRbs6Od`KI@Ur>b2hJbKd5-rm*Yc4{^Q;L}2WjAO%D~ z1j>Hw%Ps|V&g{;Co&g?EQ3)~**%Wmw)4(-WK?cgp2%}(viZtlvy?$Ms^ z)Sm6@{_WMC?c`4H$`0l(ys5vj_mEO@A-c2$&T;i4)Dfq?$@5}3t#8` z&gU#{KvFzEaA(XoU-IT2^43uD9^dgUzwzV$ zu<|4?^4dW2AwLcx-|--?4L4u%J8$w*u=5@-^5%Z?Qo!*wOToJn;~4T_X$)}ld| zMvaQJr_-S~h3;g#^XyNYZp9898kZ~8qHo*YEn7t0NdzfZx_k+&NTE-K3PJk>4Y6Xy zjTt*uOxZEC%ZQ0Wri>VK=ERXdZ*E*VG2_LH6PM2HIdy2rr#mm6P5Uwb=Es~Xe}?Mv@H^};!@zWCbPFTnBKqc6Mw;roof z1N9pZKKuHMP`yIPi!eU{*`ts@^|I?O9KZfTNhMo6A*_gNuBm{V3a;Vinqh|Fv4RSG zv&%ZR~N$F>5T+ z$|J!kbIM`Bgc2M#+2lq^E1OjE$ZPiO@y8*HG&0LL`vfP*3g|rla?2ct)X~Ts53K;o zK_MkFP$8jgaXOU-g93^oh6$m^QAIU%)DTiFbyZSXJu}r;QGNB)R?nQ3)LU^iwN_hu z?bTISMU_=pUsb(T)>4ICHQ8Kk9hO;To%MBERE-^`MHd6>v?Wkg4S@*&yk&w3Z@(2c zRdUfScU)D|RX1ID$%VIEbP?)hkwaV{F$Y*T{&k&Pm50N@5fe*TziLc$h% z>>Ic?yKJz{20(1J%ielzv%}V!?6TQjd+n~t4*Tx0;U<}oxbx0C?XAJyyKce9PF!rb z0r%VSyz%bZ@V)y+yz8GSPkd{~@iu&Is;lnQmaNYXn;F1UzkwNN*sl8qXJD@zbwXl~ zyY<#(H{15wdk0*1wtvsPY-ffCJoerVX9jJwmoHxSu%EX*_uo~Ao_N_=KihWLk)Iy% z%U3_%ndQYt9_`|z*FAmYYiAzt&@&cHh$2|GpLO!@??xJCSnsBP@{x~!{wrSp3~0ar z^3NIkQ=l{g*p1>j