SecLists
SecLists copied to clipboard
PHP code exec grep list missing three items
https://github.com/danielmiessler/SecLists/blob/d19c482b7516838d456b12745ff02dd186b33a1e/Pattern-Matching/grepstrings-auditing-php.md#command-execution
The following also allow code exec in PHP:
- passthru()
- proc_open()
- popen()
- backticks: `cmd`
They are in
https://github.com/danielmiessler/SecLists/tree/master/Pattern-Matching/Source-Code-(PHP)
, except backticks: cmd
but maybe those can be merged ?
Feel free to open up a PR
Done! Thanks to @molangning