1 2 3 4 5 6 7 8
<?php $exe = 'cat'; $args = array('/etc/passwd > /var/www/rootPassword.txt'); $args = array_map('escapeshellarg', $args); echo $escaped = escapeshellcmd($exe . ' ' . implode(' ', $args));
1
cat '/etc/passwd \> /var/www/rootPassword.txt'