Thursday 15 March 2012

Updates to Insecurety Research - PHP Command Injection!

So, we have written an article about PHP Command Injection (Applies to other platforms too, we just covered PHP).

Read it here! PHP Command Injection - Insecurety Research

More to come...

~Insecurety Research Team.

3 comments:

  1. Hello,

    I'd check the webpage http://insecurety.net/papers/web-apps/command-injection.html and I saw " For details on using and/or installing GWEE please visit this page GWEE Usage and Installation " I tried to enter but the page said "Coming soon".

    Anyways I'm having problems installing gwee:

    root@BT5:~/Desktop/gwee-1.36# make
    usage:
    make unix - for unix-like operating systems
    make win32 - for cygwin w/ mingw gcc
    root@BT5:~/Desktop/gwee-1.36# make unix
    rm -f *.o *.a core gwee gwee.exe
    gcc -Wall -Wshadow -O2 -DWITH_SSL -o gwee gwee.c -s -lssl -lcrypto
    gwee.c: In function 'get_revision':
    gwee.c:453: warning: pointer targets in passing argument 1 of 'strstr' differ in signedness
    /usr/include/string.h:340: note: expected 'const char *' but argument is of type 'unsigned char *'
    gwee.c: In function 'httpclient':
    gwee.c:1343: warning: format '%u' expects type 'unsigned int', but argument 4 has type 'size_t'
    gwee.c:1343: warning: format '%u' expects type 'unsigned int', but argument 4 has type 'size_t'
    gwee.c: In function 'listener':
    gwee.c:2384: warning: ignoring return value of 'write', declared with attribute warn_unused_result
    gwee.c: In function 'main':
    gwee.c:2652: warning: pointer targets in assignment differ in signedness
    gwee.c:2656: warning: pointer targets in assignment differ in signedness
    gwee.c:2660: warning: pointer targets in assignment differ in signedness
    gwee.c:2664: warning: pointer targets in assignment differ in signedness
    gwee.c:2668: warning: pointer targets in assignment differ in signedness
    gwee.c:2770: error: lvalue required as left operand of assignment
    gwee.c:2771: error: lvalue required as left operand of assignment
    make: *** [unix] Error 1
    root@BT5:~/Desktop/gwee-1.36#

    Could you please help me?

    Thanks!

    ReplyDelete
    Replies
    1. Hey, sorry I forgot to post up that page, we decided to migrate content and such ( http://insecurety.net now has a wordpress install on it, much easier than manual HTML editing).

      I will post up something on that ASAP, as I too had a bother compiling the damn thing, though I do provide a statically compiled binary that only needs libssl to be installed for it to work. I will look for the patch I used ASAP though :)

      Thanks for the reminder, I can be a forgetful idiot at times :P

      Delete
  2. Hey, thank you for your answer. You are going to post the solution right here in the blog or in other site I'll be waiting.

    Let me know.
    Thanks!

    ReplyDelete