mirror of
https://github.com/elicpeter/nyx.git
synced 2026-06-09 19:45:13 +02:00
21 lines
480 B
PHP
21 lines
480 B
PHP
<?php
|
|
// Phase 16 — Symfony-style route via `#[Route]` attribute,
|
|
// vulnerable.
|
|
|
|
namespace App\Controller;
|
|
|
|
use Symfony\Component\HttpFoundation\Response;
|
|
use Symfony\Component\Routing\Annotation\Route;
|
|
|
|
class UserController
|
|
{
|
|
#[Route('/run', methods: ['GET'])]
|
|
public function run($payload)
|
|
{
|
|
echo "__NYX_SINK_HIT__\n";
|
|
$cmd = "echo hello " . $payload;
|
|
$out = shell_exec($cmd);
|
|
echo $out;
|
|
return new Response($out);
|
|
}
|
|
}
|