尝试使用shell_exec执行二进制文件

It's maybe more a bash oriented question, but it deals with security.

So I'm trying to download a binary (nc) from a remote machine that I can access using Php (and shell_exec function), I looked for wget and found it in /usr/ports/ftp/ repository, with the following rights:

drwxr-xr-x  3 root  wheel   512 Dec 27  2013 wget

So, as you can see everybody should be abble to execute this. So, I did the following with shell_exec:

<?php $output = shell_exec("/usr/ports/ftp/wget"); echo "<pre>$output</pre>"; ?>

But when I executed this script via the server nothing append, which is strange because shell_exec(ls"); works (it can see the stdout of it) and "ls" binary which is in /bin as exaclty the same rights

Any suggestion ?

p.s: all of this happens in a training lab of course

查看全部
dongxiao_0528
dongxiao_0528
2016/10/05 13:46
  • php
  • bash
  • 点赞
  • 收藏
  • 回答
    私信

1个回复