exploit.py

Forked from @worawit, shorter&optimized. Only works for sudo=1.8.23 on Centos7 Works on both the web server and linux machines

backdoor.php

php backdoor generated through weevely, password: "H@rmW#sH4rE!". Gives access to an ssh session as Apache if sucessfully uploaded to the server

shell.php%00.jpg

Null-Byte php file sanitization bypass