domains / families / security / phpinfo-to-rce

phpinfo-to-rce

separate

Chain phpinfo to RCE via exec check when info.php exposed.

When to use

• `source-leak-hunt` flags a target with `info.php` or `phpinfo.php` exposed.
• You need to confirm whether RCE is possible before investing in upload vectors.
• Building an attack chain that requires code execution.
• Target has a file upload path (open registration + XMLRPC, contact form, profile image, etc.).

When not to use

• Tasks where exec functions are disabled without bypass techniques

Skill page

Source