LFI Image Helper: infect images with PHP Backdoors for local file inclusion attacks

LFI Image Helper

 

This is a simple script to infect images with PHP Backdoors for local file inclusion attacks.

The script has the following options:

  • List all Image Tags with content
  • List the Tags only
  • Read the value of a certain Tag
  • Create a new Tag
  • Edit Tag
  • Delete a tag
  • Infecting an image with a known backdoor in PHP

Download

Usage

perl image.pl <option> <value>

Options :

-dump_all <image> : Get all information of a image
-dump_tags <image> : Get all tags of a image
-read_tag <image> -tag <tag> : Read value tags of a image
-make_tag <image> -tag <tag> -value <value> : Make a new tag
-update_tag <image> -tag <tag> -value <value> : Update tag
-delete_tag <image> -tag <tag> : Delete tag
-backdoor <image> -file <name> : Insert backdoor in a image
-bypass <php shell> -file <name> : Rename extension of a image to bypass

Example : perl image.pl -dump_all test.jpg