epinna / tplmap

Server-Side Template Injection and Code Injection Detection and Exploitation Tool
GNU General Public License v3.0
3.75k stars 670 forks source link

false positives #74

Open r3dpars3c opened 3 years ago

r3dpars3c commented 3 years ago

TPLmap detects following.

Shell command execution: ok (blind) Bind and reverse shell: ok File write: ok (blind) File read: no Code evaluation: ok, php code (blind)

and i used --os-shell switch and it resulted into something like this.

(blind) $ whoami False (blind) $ ping example.com False

I dont why it gives false as output. please help me with this issue.

shelld3v commented 3 years ago

Try to increase the time_based_blind_delay in config.yml then try again!