Simular una fuerza bruta mediante peticiones HTTP desde PowerShell utilizando el método GET | Scripting and security

cd C:\xampp\php

'<?PHP
$usuario = "pedro";
$pass= "123456";
if(! (htmlspecialchars($_GET["username"]) == $usuario && htmlspecialchars($_GET["password"]) == $pass) ){
    echo "<html>";
    echo "<title>MUY mal</title>";
    echo "<b>Acceso denegado</b>";        
    return false;
}
else {
    echo "<html>";
    echo "<title>MUY bien</title>";
    echo "<b>Acceso concedido</b>";
    return true;
}
?>'| out-file scriptphp.php -Encoding utf8

.\php-cgi.exe -f .\scriptphp.php username=pepito password=1234
.\php-cgi.exe -f .\scriptphp.php username=pedro password=123456

cd C:\xampp\php

'<?PHP

$usuario = "pedro";

$pass= "123456";

if(! (htmlspecialchars($_GET["username"]) == $usuario && htmlspecialchars($_GET["password"]) == $pass) ){

echo "<html>";

echo "<title>MUY mal</title>";

echo "<b>Acceso denegado</b>";

return false;

}

else {

echo "<html>";

echo "<title>MUY bien</title>";

echo "<b>Acceso concedido</b>";

return true;

}

?>'| out-file scriptphp.php -Encoding utf8

.\php-cgi.exe -f .\scriptphp.php username=pepito password=1234

.\php-cgi.exe -f .\scriptphp.php username=pedro password=123456

676000000 676000001 676000002 676000003 676000004 676000005 676000006 676000007 676000008 676000009 676000010 676000011 676000012 676000013 676000014 676000015 676000016 676000017 676000018 676000019 676000020 676000021 676000022 676000023 676000024 676000025 676000026 676000027 676000028 676000029 676000030 676000031 676000032 676000033 676000034 676000035 676000036 676000037 676000038 676000039 676000040 676000041 676000042 676000043 676000044 676000045 676000046 676000047 676000048 676000049 676000050 676000051 676000052 676000053 676000054 676000055 676000056 676000057 676000058 676000059 676000060 676000061 676000062 676000063 676000064 676000065 676000066 676000067 676000068 676000069 676000070 676000071 676000072 676000073 676000074 676000075 676000076 676000077 676000078 676000079 676000080 676000081 676000082 676000083 676000084 676000085 676000086 676000087 676000088 676000089 676000090 676000091 676000092 676000093 676000094 676000095 676000096 676000097 676000098 676000099 676000100 676000101 676000102 676000103 676000104 676000105 676000106 676000107 676000108 676000109 676000110 676000111 676000112 676000113 676000114 676000115 676000116 676000117 676000118 676000119 676000120 676000121 676000122 676000123 676000124 676000125 676000126 676000127 676000128 676000129 676000130 676000131 676000132 676000133 676000134 676000135 676000136 676000138 Jesús

Automation screen

Scanner RFI en Perl

Formas de utilizar el Invoke en PowerShell