News for hackers. Stuff that matters.

A comment on Exec($_GET. Parent comment

Re:Exec($_GET by catkin on Tuesday April 29, 2014 @02:50AM (#7665403)
Not actually so surprising considering `$_GET` is a PHP superglobal.
[ Parent | on HN ]
Re:Exec($_GET by sprobertson on Tuesday April 29, 2014 @03:39AM (#7665540)
Though I'm surprised how many aren't PHP, for example all the Ruby repos...

Edit: ah, most of those are Metasploit scripts.

[ Parent | on HN ]
Re:Exec($_GET by devsmt on Tuesday April 29, 2014 @04:01AM (#7665618)
try "exec params" and "call request" for shooting your foot in other languages
[ Parent | on HN ]