Vypor/Vypors-Attack-API-System — pull request #1 by nopesled (2014-07-02 15:59:15+00:00)
Title: Update api.php

Exploit patched that allowed command injection.

C:\Users\aa>dir /o-d

02/07/2014 16:51 ..
02/07/2014 16:51 .
02/07/2014 16:27 577 api.php

C:\Users\aa>telnet 127.0.0.1 80
GET /api.php?user=hello&host=127.0.0.1&port=80&time=60&method=stop%22%3E%3Ebotnet HTTP/1.0

HTTP/1.1 200 OK
Date: Wed, 02 Jul 2014 15:46:01 GMT
Server: Apache/2.4.9 (Win32) OpenSSL/0.9.8y PHP/5.4.27
X-Powered-By: PHP/5.4.27
Content-Length: 24
Connection: close
Content-Type: text/html

Info Set
Sent; Ran ''

Connection to host lost.

C:\Users\aa>dir /o-d

02/07/2014 16:52 .
02/07/2014 16:52 ..
02/07/2014 16:52 0 botnet
02/07/2014 16:27 577 api.php