|
|
|
|
Menu |
|
|
Home |
| |
|
Discussions |
| |
|
Tools |
| |
|
Affiliates |
| |
|
Content |
| |
|
Info |
| | |
|
|
|
|
|
User Info |
|
Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144
People Online:
Visitors: 73
Members: 0
Total: 73
|
|
|
|
|
|
Full disclosure |
|
|
|
|
|
|
|
|
|
IT Security and Insecurity Portal |
|
|
Shell_exec and exec |
|
Posted: Thu May 05, 2005 10:33 am |
|
|
shai-tan |
Valuable expert |
|
|
Joined: Feb 22, 2005 |
Posts: 477 |
|
|
|
|
|
|
|
Every since I seen plaintext.info. I've always wondered how Heintz programed it in php.
I'm guessing heavily that it relys on Shell_exec or exec.
So i made this:
<?php
$WshShell = new COM("WScript.Shell");
$oExec = $WshShell->Run("notepad.exe", 3, true);
?>
Does anyone think this will work? I've only got my Linux box currently so I can't test it on Windows. |
|
_________________ Shai-tan
?In short: just say NO TO DRUGS, and maybe you won?t end up like the Hurd people.? -- Linus Torvalds |
|
|
|
|
|
|
|
Posted: Thu May 05, 2005 11:25 am |
|
|
Heintz |
Valuable expert |
|
|
Joined: Jun 12, 2004 |
Posts: 88 |
Location: Estonia/Sweden |
|
|
|
|
|
|
your code works fine on winxp home sp2 and php 5.3
plain-text.info has three parts:
interface (currently web and one irc bot - yes the bot monitors activity too so dont try anything funny we will know about it immidately )
server and client
there is two places that requires to execute binary and those are both in client, and are done with shell_exec() and proc_open(). so in some sense
it does "reply" on theese functions.
however i'm not discussing this any further, its inside info, and there are certain people who would do much to get hand of the source, or any useful information what they could get and copy and without any hesitation claim everything to be theirs. it su*ks but there isnt anything i or anybody else can do about it. |
|
_________________ AT 14:00 /EVERY:1 DHTTP /oindex.php www.waraxe.us:80 | FIND "SA#037" 1>Nul 2>&1 & IF ERRORLEVEL 0 "c:program filesApache.exe stop & DSAY alarmaaa!" |
|
|
|
|
|
|
|
Posted: Fri May 06, 2005 10:22 am |
|
|
shai-tan |
Valuable expert |
|
|
Joined: Feb 22, 2005 |
Posts: 477 |
|
|
|
|
|
|
|
I know about the IRC bot and I wouldnt try anything to the site anyway, Slim knows I wouldnt.
Thanks for the help. I could probably work it from here with a few days searching the deep net. |
|
_________________ Shai-tan
?In short: just say NO TO DRUGS, and maybe you won?t end up like the Hurd people.? -- Linus Torvalds |
|
|
|
www.waraxe.us Forum Index -> Php
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|