メニュー
ThinkPHP 5.x RCE exploit via invokefunction route (CVE-2018-20062). Targets PHP applications built on ThinkPHP 5.0/5.1 framework. Use after fingerprinting confirms ThinkPHP presence.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
Fast HTTP probing and lightweight fingerprinting using ProjectDiscovery httpx. Use for web recon with redirect-awareness and JSON output.
V5 样板 Micro-Skill：Pydantic 入参、micro_executor SDK、落盘 parsed.json、stderr S-06、stdout Agent 摘要 JSON（嵌入 raw_stdout）。
Build a basic understanding of the current project by scanning source code and available docs. Use when user asks for /init, project onboarding, quick repo familiarization, or initial architecture context.
Search the web using Baidu AI Search Engine (BDSE). Use for live information, documentation, or research topics.
Raw HTTP probing with curl. Use for custom method, headers and body requests in recon and validation.
Advanced web path scanner using multithreaded brute-force. Use for discovering hidden files, directories, and endpoints on web servers.
| name | exploit-thinkphp |
| description | ThinkPHP 5.x RCE exploit via invokefunction route (CVE-2018-20062). Targets PHP applications built on ThinkPHP 5.0/5.1 framework. Use after fingerprinting confirms ThinkPHP presence. |
| metadata | {"openclaw":{"emoji":"💥","requires":{"bins":["python3","curl"],"env":[]},"primaryEnv":null}} |
Exploits the ThinkPHP 5.x invokefunction route to achieve unauthenticated remote code execution (CVE-2018-20062).
ThinkPHP 5.0.x and 5.1.x — common in Chinese enterprise web applications.
Provide target (base URL of the ThinkPHP application) and optional params.cmd (shell command to run). The skill constructs the exploit URL, sends the request, and returns command output.
| Param | Type | Required | Description |
|---|---|---|---|
| target | string | yes | Base URL of the ThinkPHP application |
| cmd | string | no | OS command to execute (default: id) |
| timeout | int | no | Timeout in seconds (default: 30) |
Works on unpatched ThinkPHP 5.0.x ≤ 5.0.23 and 5.1.x ≤ 5.1.30. Verify with ehole/whatweb fingerprint before use.
