Shell Scripting [closed]

Question

I am trying to execute a PHP shell script on my friends mail server to show him the impact of such vulnerability. Vulnerable code but unfortunately it doesn't seem to be running.

This is the script I wrote:

echo shell_exec($_GET['cmd']);

Answer 1

Please provide more information about the method and the result as Husyn asked, it may be more suited to programming SO if it is PHP related. Anyway:

• <?php should be present at the start of any PHP script.
• If a PHP error occurs, you might not see it without error reporting enabled.
• If the actual shell command fails or outputs warnings, you won't see it with shell_exec unless you add the stderr to stdout redirection 2>& to the command, or use exec.