Joomla deserialization vulnerability getshell & amp; Command Execution

Joomla deserialization vulnerability getshell & Command Execution

Note:
1. Remember to add points after the command. The command is enclosed in single quotes.
2. It is only for learning php code.

Usage:

Php joomla. php http://xatusec.org getshell

Php joomla. php http://xatusec.org command 'phpinfo ();'
 
Download:
Https://github.com/whirlwind110/joomla-getshell-EXP

The update is written directly using $ _ SERVER [\ 'document _ ROOT \ '] instead of silly phpinfo match.
Send another test php joomla. php http://enoki.jp/getshell