-
Notifications
You must be signed in to change notification settings - Fork 61
/
Copy pathindex.php
188 lines (185 loc) · 14.7 KB
/
index.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1">
<meta name="description" content="">
<meta name="author" content="">
<title>Commix testbed - Command injection test environment</title>
<!-- Bootstrap Core CSS -->
<link href="css/bootstrap.min.css" rel="stylesheet">
<!-- font-awesome Core CSS -->
<link href="css/font-awesome.css" rel="stylesheet">
<!-- Custom CSS -->
<link href="css/heroic-features.css" rel="stylesheet">
<link rel="stylesheet" href="css/bootstrap-submenu.css">
<script src="js/bootstrap-submenu.js" defer></script>
<!-- HTML5 Shim and Respond.js IE8 support of HTML5 elements and media queries -->
<!-- WARNING: Respond.js doesn't work if you view the page via file:// -->
<!--[if lt IE 9]>
<script src="https://oss.maxcdn.com/libs/html5shiv/3.7.0/html5shiv.js"></script>
<script src="https://oss.maxcdn.com/libs/respond.js/1.4.2/respond.min.js"></script>
<![endif]-->
</head>
<body>
<!-- Navigation -->
<nav class="navbar navbar-inverse navbar-fixed-top" role="navigation">
<div class="container">
<!-- Brand and toggle get grouped for better mobile display -->
<div class="navbar-header">
<button type="button" class="navbar-toggle" data-toggle="collapse" data-target="#bs-example-navbar-collapse-1">
<span class="sr-only">Toggle navigation</span>
<span class="icon-bar"></span>
<span class="icon-bar"></span>
<span class="icon-bar"></span>
</button>
<a class="navbar-brand">
<img style="max-width:43px; margin-top: -11px;"
src="/img/logo.png">
</a>
<a class="navbar-brand" href="index.php">commix-testbed (v0.1)</a>
</div>
<!-- /.navbar-collapse -->
</div>
<!-- /.container -->
</nav>
<!-- Page Content -->
<div class="container">
<!-- Jumbotron Header -->
<header class="jumbotron hero-spacer">
<h2><b>Commix testbed - A command injection test environment!</b></h2>
<p>A collection of web pages, vulnerable to <b><a href="https://www.owasp.org/index.php/Command_Injection">command injection flaws</a></b>, used to test <b><a href="https://github.com/commixproject/commix">commix</a></b>'s vulnerability <b>detection</b> and <b>exploitation</b> features.</p>
<p>
<a href="https://twitter.com/commixproject" class="twitter-follow-button" data-show-count="false">Follow @commixproject</a><script>!function(d,s,id){var js,fjs=d.getElementsByTagName(s)[0],p=/^http:/.test(d.location)?'http':'https';if(!d.getElementById(id)){js=d.createElement(s);js.id=id;js.src=p+'://platform.twitter.com/widgets.js';fjs.parentNode.insertBefore(js,fjs);}}(document, 'script', 'twitter-wjs');</script>
<iframe src="https://ghbtns.com/github-btn.html?user=commixproject&repo=commix&type=star&count=true" frameborder="0" scrolling="0" width="170px" height="20px"></iframe>
<div class="text-center"><!--You can add col-lg-12 if you want -->
</div>
</header>
<!-- Title -->
<div class="row">
<div class="col-lg-12 text-center">
<h3>Command injection scenarios categories</h3>
<br><br>
</div>
</div>
<!-- /.row -->
<!-- Page Features -->
<div class="container">
<div class="row ">
<div class="col-md-3 col-sm-6 hero-feature">
<div class="panel panel-info">
<div class="panel-heading">
<h4>1. Regular (GET / POST) </h4>
</div>
<ul class="list-group">
<li class="list-group-item">Classic regular example<br>(<a href="scenarios/regular/GET/classic.php">GET</a> | <a href="scenarios/regular/POST/classic.php"> POST</a>)</li>
<li class="list-group-item">Classic (Base64) regular example<br>(<a href="scenarios/regular/GET/classic_b64.php">GET</a> | <a href="scenarios/regular/POST/classic_b64.php"> POST</a>)</li>
<li class="list-group-item">Classic (Hex) regular example<br>(<a href="scenarios/regular/GET/classic_hex.php">GET</a> | <a href="scenarios/regular/POST/classic_hex.php"> POST</a>)</li>
<li class="list-group-item">Classic single-quote example<br>(<a href="scenarios/regular/GET/classic_quote.php">GET</a> | <a href="scenarios/regular/POST/classic_quote.php"> POST</a>)</li>
<li class="list-group-item">Classic double-quote example<br>(<a href="scenarios/regular/GET/classic_double_quote.php">GET</a> | <a href="scenarios/regular/POST/classic_double_quote.php"> POST</a>)</li>
<li class="list-group-item">Classic non-space example<br>(<a href="scenarios/regular/GET/classic_non_space.php">GET</a> | <a href="scenarios/regular/POST/classic_non_space.php"> POST</a>)</li>
<li class="list-group-item">Classic blacklisting example<br>(<a href="scenarios/regular/GET/classic_blacklisting.php">GET</a> | <a href="scenarios/regular/POST/classic_blacklisting.php"> POST</a>)</li>
<li class="list-group-item">Classic hashing example<br>(<a href="scenarios/regular/GET/classic_hash.php">GET</a> | <a href="scenarios/regular/POST/classic_hash.php"> POST</a>)</li>
<li class="list-group-item">Classic example & Basic HTTP Authentication<br>(<a href="scenarios/regular/GET/classic_basic_auth.php">GET</a> | <a href="scenarios/regular/POST/classic_basic_auth.php"> POST</a>)</li>
<li class="list-group-item">Classic example & Digest HTTP Authentication<br>(<a href="scenarios/regular/GET/classic_digest_auth.php">GET</a> | <a href="scenarios/regular/POST/classic_digest_auth.php"> POST</a>)</li>
<li class="list-group-item">Blind regular example<br>(<a href="scenarios/regular/GET/blind.php">GET</a> | <a href="scenarios/regular/POST/blind.php"> POST</a>)</li>
<li class="list-group-item">Double Blind regular example<br>(<a href="scenarios/regular/GET/double_blind.php">GET</a> | <a href="scenarios/regular/POST/double_blind.php"> POST</a>)</li>
<li class="list-group-item">Eval regular example<br>(<a href="scenarios/regular/GET/eval.php">GET</a> | <a href="scenarios/regular/POST/eval.php"> POST </a>)</li>
<li class="list-group-item">Eval (Base64) regular example<br>(<a href="scenarios/regular/GET/eval_b64.php">GET</a> | <a href="scenarios/regular/POST/eval_b64.php"> POST </a>)</li>
<li class="list-group-item">Classic (SOAP/XML) regular example<br>(<a href="scenarios/regular/POST/classic_xml.php">POST</a>)</li>
<li class="list-group-item">Blind (SOAP/XML) regular example<br>(<a href="scenarios/regular/POST/blind_xml.php">POST</a>)</li>
<li class="list-group-item">Classic (JSON) regular example<br>(<a href="scenarios/regular/POST/classic_json.php">POST</a>)</li>
<li class="list-group-item">Blind (JSON) regular example<br>(<a href="scenarios/regular/POST/blind_json.php">POST</a>)</li>
<li class="list-group-item">Eval (JSON) regular example<br>(<a href="scenarios/regular/POST/eval_json.php">POST</a>)</li>
<li class="list-group-item">Preg_match() regular example<br>(<a href="scenarios/regular/GET/preg_match.php">GET</a> | <a href="scenarios/regular/POST/preg_match.php"> POST</a>)</li>
<li class="list-group-item">Preg_match() blind example<br>(<a href="scenarios/regular/GET/preg_match_blind.php">GET</a> | <a href="scenarios/regular/POST/preg_match_blind.php"> POST </a>)</li>
<li class="list-group-item">Preg_Replace() regular example<br>(<a href="scenarios/regular/GET/preg_replace.php?replace=/Hello/&with=Bye">GET</a>)</li>
<li class="list-group-item">Assert() regular example<br>(<a href="scenarios/regular/GET/assert.php">GET</a>)</li>
<li class="list-group-item">Str_Replace() regular example<br>(<a href="scenarios/regular/GET/str_replace.php">GET</a> | <a href="scenarios/regular/POST/str_replace.php"> POST </a>)</li>
<li class="list-group-item">Create_Function() regular example<br>(<a href="scenarios/regular/GET/create_function.php">GET</a> | <a href="scenarios/regular/POST/create_function.php"> POST </a>)</li>
</ul>
</div>
</div>
<!-- Shity filters -->
<div class="col-md-3 col-sm-6 hero-feature">
<div class="panel panel-info">
<div class="panel-heading">
<h4>2. Regex Filters </h4>
</div>
<ul class="list-group">
<li class="list-group-item"><a href="scenarios/filters/lax_domain_name.php">Regex for domain name validation</a></li>
<li class="list-group-item"><a href="scenarios/filters/nested_quotes.php">Nested quotes</a></li>
<li class="list-group-item"><a href="scenarios/filters/no_colon_no_pipe_no_ampersand_no_dollar.php">Regex filter for colon/pipe/ampersand/dollar</a></li>
<li class="list-group-item"><a href="scenarios/filters/no_space.php">Regex filter for spaces</a></li>
<li class="list-group-item"><a href="scenarios/filters/no_space_no_colon_no_pipe_no_ampersand.php">Regex filter for space/colon/pipe/ampersand</a></li>
<li class="list-group-item"><a href="scenarios/filters/no_space_no_colon_no_pipe_no_ampersand_no_dollar.php">Regex filter for space/colon/pipe/ampersand/dollar</a></li>
<li class="list-group-item"><a href="scenarios/filters/no_white_chars.php">Regex filter for white chars</a></li>
<li class="list-group-item"><a href="scenarios/filters/simple_stop_alphanum.php">Alphanum for input end</a></li>
<li class="list-group-item"><a href="scenarios/filters/no_white_chars_stop_alnum.php">Alphanum for input end (filter for white chars)</a></li>
<li class="list-group-item"><a href="scenarios/filters/simple_start_alphanum.php">Alphanum for input start</a></li>
<li class="list-group-item"><a href="scenarios/filters/no_white_chars_start_alphanum.php">Alphanum for input start (filter for white chars)</a></li>
<li class="list-group-item"><a href="scenarios/filters/multiple_os_commands_blacklisting.php"> Regex filter for OS commands (Windows / *nix)</a></li>
</ul>
</div>
</div>
<div class="col-md-3 col-sm-6 hero-feature">
<div class="panel panel-info">
<div class="panel-heading">
<h4>3. User-Agent HTTP Header </h4>
</div>
<ul class="list-group">
<li class="list-group-item"><a href="scenarios/user-agent/ua(classic).php">Classic user-agent-based example</a></li>
<li class="list-group-item"><a href="scenarios/user-agent/ua(blind).php">Blind user-agent-based example</a></li>
<li class="list-group-item"><a href="scenarios/user-agent/ua(eval).php">Eval user-agent-based example</a></li>
</ul>
</div>
</div>
<!-- Cookie Header HTTP Header -->
<div class="col-md-3 col-sm-6 hero-feature">
<div class="panel panel-info">
<div class="panel-heading">
<h4>4. Cookie HTTP Header</h4>
</div>
<ul class="list-group">
<li class="list-group-item"><a href="scenarios/cookie/cookie(classic).php">Classic cookie-based example</a></li>
<li class="list-group-item"><a href="scenarios/cookie/cookie(b64).php">Classic cookie-based (Base64) example</a></li>
<li class="list-group-item"><a href="scenarios/cookie/cookie(blind).php">Blind cookie-based example</a></li>
<li class="list-group-item"><a href="scenarios/cookie/cookie(eval).php">Eval cookie-based example</a></li>
</ul>
</div>
</div>
<!-- Referer HTTP Header -->
<div class="col-md-3 col-sm-6 hero-feature">
<div class="panel panel-info">
<div class="panel-heading">
<h4>5. Referer HTTP Header</h4>
</div>
<ul class="list-group">
<li class="list-group-item"><a href="scenarios/referer/referer(classic).php">Classic referer-based example</a></li>
<li class="list-group-item"><a href="scenarios/referer/referer(blind).php">Blind referer-based example</a></li>
<li class="list-group-item"><a href="scenarios/referer/referer(eval).php">Eval referer-based example</a></li>
</ul>
</div>
</div>
</div>
</div>
<!-- /.row -->
<hr>
<!-- Footer -->
<footer>
<div class="row text-center">
<div class="col-lg-12">
<p>Made in Greece with <font size="3" color="red"><b>♥</b></font> by <a href="https://github.com/stasinopoulos"> Anastasios Stasinopoulos</a>.</p>
<a href="https://twitter.com/ancst" class="twitter-follow-button" data-show-count="false">Follow @ancst</a><script>!function(d,s,id){var js,fjs=d.getElementsByTagName(s)[0],p=/^http:/.test(d.location)?'http':'https';if(!d.getElementById(id)){js=d.createElement(s);js.id=id;js.src=p+'://platform.twitter.com/widgets.js';fjs.parentNode.insertBefore(js,fjs);}}(document, 'script', 'twitter-wjs');</script>
</div>
</div>
</footer>
</div>
<!-- /.container -->
<!-- jQuery -->
<script src="js/jquery.js"></script>
<!-- Bootstrap Core JavaScript -->
<script src="js/bootstrap.min.js"></script>
</body>
</html>