pinky - The PHP mini RAT (Remote Administration Tool)
Uploading a webshell is almost always the next step after exploiting a web vulnerability, but services like Cloudflare and the new generation of firewalls do a really good job preventing attackers to run commands in the target via HTTP or HTTPS. On the other hand, text content filtering and whitelisting applications policies can be easily exploited with a minimum effort and pinky is a PoC of that.
How is pinky different?
First, pinky tries to find which function is enabled to run system commands; after finding which php function is the best, all communication is encrypted, so even if the Firewall is enabled to read the traffic, it won't be able to determine whether the activity is malicious or not. Also, pinky is able to communicate through any kind of proxy. In addition to this, we need to send a Basic Authentication (completely insecure, I know!) to avoid others to communicate with the pinky's agent.
https://github.com/davidtavarez/pinky
pinky - The PHP mini RAT (Remote Administration Tool)
Forum untuk membahas semua tentang web hacking mulai dari footprint, scanning, gain access, escalate previlege, exploit,cover track, backdoors sampai mengamankan web
Moderators: Paman, Xshadow, indounderground, NeOS-01
Forum rules
Membahas bugs,penetrasi, eksploitasi dan teknik mengamankan website - websrver. Sertakan POC disini agar member dapat mempelajarinya
Membahas bugs,penetrasi, eksploitasi dan teknik mengamankan website - websrver. Sertakan POC disini agar member dapat mempelajarinya
- familycode
- Posts: 848
- Joined: Thu Oct 13, 2005 4:06 pm
- Location: Yogyakarta
- Contact:
Jump to
- Yogya Family Code
- ↳ Forum Perkenalan
- ↳ Berita dan Informasi Terbaru
- ↳ X-Code koleksi
- ↳ CD Yogyafree Support
- ↳ Peraturan Forum
- Interaksi Forum Pilihan
- ↳ Forum Membahas Semua Jenis Hacking
- ↳ Newbie's Corner
- ↳ Web Hacking
- ↳ Tools For Hacking - Security & Computer Forensic
- ↳ Network & Wireless Hacking
- ↳ Google Hacking
- ↳ 1337 Zone
- ↳ Hacking Umum
- ↳ Diskusi Kali-linux
- ↳ Pengembangan Exploit
- ↳ Forum Membahas Semua Jenis Programming
- ↳ Logika , Algoritma dan pemrograman terstruktur
- ↳ C++ & Visual C
- ↳ Visual Basic
- ↳ Java
- ↳ Delphi - Pascal
- ↳ Perl
- ↳ Ruby & Python
- ↳ Assembly - Reverse Engineering
- ↳ Pemrograman Lainnya
- ↳ Exploits | vulnerability | 0day Archives
- ↳ remote exploits
- ↳ local expoits
- ↳ website application exploits
- ↳ miscellaneous POC-DOS-Crash-Buffer Overflow Exploits
- ↳ Operating System - Software & Support
- ↳ GNU/Linux & Opensource
- ↳ XCode Linux
- ↳ Linux Umum
- ↳ Windows & Warez
- ↳ Mac OS
- ↳ Cisco
- ↳ Mikrotik
- ↳ Oracle Solaris
- ↳ BSD
- ↳ Lainnya
- ↳ Forum membahas Web Development
- ↳ PHP
- ↳ C# & VB.NET
- ↳ Website Templates ( CMS, CSS,HTML,PSD,FLA, etc)
- ↳ Ajax
- ↳ Forum membahas malware (Virus, Spyware, Hijack, dll)
- ↳ Forum Jaringan Komputer / Computer Networking
- ↳ Forum Phreaking - Ponsel - Software
- ↳ Phreaking, Hacking, Pembahasan Ponsel
- ↳ Symbian OS - Software
- ↳ Windows Mobile - Software
- ↳ Google Android - Software
- ↳ Aplikasi - Software pendukung Ponsel - PDA lainnya
- ↳ Forum Filsafat Ilmu Komputer
- Interaksi Komputer Umum
- ↳ Forum Membahas Semua Jenis Perbaikan Komputer
- ↳ Forum Graphics & Animation
- ↳ Ebook - Berita & Artikel teknologi informasi
- ↳ Forum Link-Link Serbaguna
- ↳ Forum membahas semua hal tentang warnet / ISP
- YogyaFree Supports Community
- ↳ Komunitas Pendukung YogyaFree
- ↳ Jawa
- ↳ YogyaFree Bandung
- ↳ Yogyafree Bogor
- ↳ Yogyafree Jakarta
- ↳ Yogyafree Malang
- ↳ Yogyafree Probolinggo
- ↳ Yogyafree Semarang
- ↳ Yogyafree Solo
- ↳ Yogyafree Surabaya
- ↳ Yogyafree Tegal
- ↳ Yogyafree Yogyakarta
- ↳ Yogyafree Sidoarjo
- ↳ Sumatera
- ↳ Yogyafree Aceh
- ↳ Yogyafree Bengkulu
- ↳ Yogyafree Lampung
- ↳ Yogyafree Medan
- ↳ Yogyafree Palembang
- ↳ Yogyafree Padang
- ↳ Yogyafree Pekanbaru
- ↳ Kalimantan
- ↳ Yogyafree Pontianak
- ↳ Yogyafree Samarinda & Balikpapan
- ↳ Yogyafree Banjarmasin
- ↳ Sulawesi
- ↳ Yogyafree Makasar
- ↳ Yogyafree Manado
- ↳ Papua
- ↳ Yogyafree Papua
- ↳ Yogyafree Bali
- ↳ Maluku
- ↳ Yogyafree Ambon
- ↳ Yogyafree Ternate - Tidore
- Lainnya
- ↳ Forum Jual Beli
- ↳ Kontes
- ↳ XCode Web Patching Contest
- ↳ XCode Blog Contest
- ↳ Ngobrol Bebas Asal Sopan
- ↳ Polling, Pendapat, Kritik dan Saran
- ↳ Lowongan Pekerjaan
- ↳ Promosi Website, Homepage, Blog dan lainnya