HTTP POST PHP Command Injection Demo 2 - using BURP to inject the non editable forms
This is the third in a series of demos I am creating about Remote Command Injection vulnerabilities for my paper on them.
This demos POST injections by using BURP Proxy to tamper with the parameters/form input and shows the execution of several shell commands on the vulnerable server.
Check out our whitepaper on this HERE: http://insecurety.net/papers/web-apps...