Introduction
Cookie door is a php backdoor that allows you to execute remote shell command on the webserver. Commands are sent via cookie.
How to use
You can place the payload.php script code inside another existing script to hide it or just upload it creating a new file.
How does it work?
The webshell checks for 2 cookie valuse:
d(delimeter) that contains a random string, used to delimeter the content of output.c(command) that contains the command to be executed by the webshell.
Values will be encoded and decoded in the following way: base64 -> bzip -> base64.
The “delimeter” values are used (by the client/handler) to know where to search the output of the command.
If you place the script inside an existing page, it will look up for the delimetes and returns what’s between them. Easy.
Configure
The handler works with python3, so you need to install dependecies.
sudo apt install python3 sudo pip3 install requests
Usage
Just run the script and pass to it the url target.
Example:
./cookiedoor http://127.0.0.1:8080/payload.php
Download: https://github.com/jackrendor/cookiedoor
Please follow and like us:
