Our community has moved to Discord. Join us there!
Cybr.com/Discord
These forums are still up for historical purposes.

Home Page Forums Course Discussions Introduction to OS Command Injections Commix file upload empty file

  • Commix file upload empty file

    Posted by Christophe on February 7, 2022 at 6:12 pm

    A friend of mine was going through this project lab when they ran into issues with the weevely backdoor file. After walking through it myself, I ran into the exact same issue. I even tried reverting back to an older version of Commix that had worked just fine in the past, but I kept running into the exact same problem: the weevely.php backdoor file would upload, but the uploaded file would be 0 bytes of data. So even though commix thought it had successfully uploaded the file with –file-upload, it had uploaded an empty file.

    The solution turned out to be super simple: use python2 instead of python3.

    If you don’t have python2 installed on your system, unfortunately it means you’ll have to install it until an update is pushed to commix to fix the issue. If you do already have it installed, you can usually access it with:

    python2 commix.py ...
    Christophe replied 2 years, 8 months ago 1 Member · 0 Replies
  • 0 Replies

Sorry, there were no replies found.

Log in to reply.