From 35c280ac1b68bdf72fa9f7181321254db531b2fe Mon Sep 17 00:00:00 2001 From: z0noxz Date: Thu, 12 Jan 2017 23:07:07 +0100 Subject: [PATCH] Update README.md --- README.md | 21 ++++++++++++++++++++- 1 file changed, 20 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index dfdce51..6f67cd7 100644 --- a/README.md +++ b/README.md @@ -1,2 +1,21 @@ +> Moved to https://github.com/z0noxz/mando.me + +*** + # smplshllctrlr -Moved to https://github.com/z0noxz/mando.me +PHP Command Injection exploitation tool + +1. Exploit web page and upload simple-shell.php (or simply find an existing exploitable command injection). +2. Execute the controller to exploit the command injection vulnerability. + The controller is simply a command injection exploitation tool, and can therefore with a few adjustments be rewritten to exploit allready existing vulnerabilities without the need for uploading the 'simple-shell.php'. + +### Featuers (so far) +1. File upload +2. File download +3. Normal terminal commands (excluding prompts e.g. password) +4. Meterpreter reverse shell injection + +### DISCLAIMER: +You shall not misuse this tool to gain unauthorized access. +This tool should only be used to expand knowledge, and not for causing malicious or damaging attacks. +Performing any attacks without written permission from the owner of the system is illegal.