Remote Command Execution (RCE) For Newbies

[lucifer]

:: Intro ::

Prerequisites: PHP Coding
Impact: High
Popularity: Medium
Protect: Input Validate, Something like Magic_quote <_<


[hide=15]RCE, It&#39;s possible to execute (malicious) PHP Code on a website. Hackers able to read sensitive files, spawn shells, delete files, defacing ,blah blah blah... (Up to you)

:: Commonly PHP function for RCE ::

fwrite()
eval()

:: fwrite() ::

[code]$file = &#39;file.php&#39;;