mirror of
https://github.com/elicpeter/nyx.git
synced 2026-06-09 19:45:13 +02:00
17 lines
595 B
PHP
17 lines
595 B
PHP
<?php
|
|
// Phase 21 (Track M.3) — Laravel middleware vuln fixture.
|
|
//
|
|
// `Audit::handle($request, $next)` splices `$request->body` into a
|
|
// shell command via `shell_exec` — classic Laravel middleware cmdi.
|
|
|
|
// use Illuminate\\Http\\Request;
|
|
// function handle($request, Closure $next)
|
|
|
|
class Audit {
|
|
public function handle($request, $next) {
|
|
$body = is_object($request) && isset($request->body) ? (string)$request->body : (string)$request;
|
|
// SINK: tainted body concatenated into shell command.
|
|
shell_exec("echo " . $body);
|
|
return $next($request);
|
|
}
|
|
}
|