pyDick

alarmingly simple python script to embed a PHP shell script in an image file.

The shell used in this example is https://code.google.com/p/b374k-shell but you can use any shell you would like by copying it to the pyDick directory and name the file shell.php

Download

git clone https://github.com/PoopBaron/pyDick.git && cd pyDick

...

Note that all paths are relative to the pyDick directory. If using other scripts/image make sure to update paths in pyhack.py & upload.perl

edit upload.perl to match your target http://whoeverscrewedyouover.com/*upload.php url. then run from terminal ./pyDick ** you may need to chmod +x ./pyDick

you can now navigate to http://whoeverscrewedyouover.com/some_upload_dir/shell.php to access your shell.

the default password is: b374k this can be changed in the shell.php source