PHPInfo → RCE Chain Skill

Evaluate exposed phpinfo() pages for configuration disclosure and the prerequisites of a separate execution path. Enabled process functions do not create RCE without an authorized code or file-execution primitive.

When to Use

• source-leak-hunt flags a target with info.php or phpinfo.php exposed.
• You need to confirm whether RCE is possible before investing in upload vectors.
• Building an attack chain that requires code execution.
• Target has a file upload path (open registration + XMLRPC, contact form, profile image, etc.).

Prerequisites

• terminal with curl.
• Confirmed exposed phpinfo page (HTTP 200, contains "PHP Version").
• For RCE: a file upload vector on the same host (XMLRPC with credentials, open registration, contact form, etc.).