php_filter_chain_generator

php:// filter chains that turn an LFI into RCE with no file.

Generates PHP filter chains (php://filter) that turn an LFI into RCE without writing any file to disk: it chains encoding conversions until the payload materializes in the stream.

Family Web exploitation

Flags --chain

Concepts Arbitrary File Read

Cheatsheet LFI / traversal / RFI

Installation

git clone https://github.com/synacktiv/php_filter_chain_generator

Repositorygithub.com/synacktiv/php_filter_chain_generator

Useful commands1 commands

Reference tool: it does not yet appear in a published machine on the blog, but it is part of the arsenal for its everyday use.