webmedium

websrv1_cve1

web-kids20

Task: Exploit CVE-2019-11043 in PHP-FPM behind nginx. Solution: Use phuip-fpizdam tool to automatically find QSL/PISOS parameters and achieve RCE via PATH_INFO manipulation.

$ ls tags/ techniques/
rcephpnginxcvephp-fpm
cve_2019_11043php_fpm_path_info_exploitphuip_fpizdam
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]