Cenzic 232 Patent
Paid Advertising
sla.ckers.org is
ha.ckers sla.cking
Sla.ckers.org
How do you completely compromise a machine given a text box or badly validated input box? This is a place to talk about code issues (PHP includes, null byte injection, backticks, pipe, etc...) as well as how to properly construct an SQL injection attack. 
Go to Topic: PreviousNext
Go to: Forum ListMessage ListNew TopicSearchLog In
LFI help
Posted by: Anarchy Angel
Date: October 26, 2011 10:09PM

i been trying to upload a shell to a few servers via the /proc/self/environ LFI method and just can not get it done. I have used temper data and other home brewed scripts with nothing. has anyone else had this issue with a known vector just stopped working out of the blue? ideas?

Options: ReplyQuote
Re: LFI help
Posted by: alexfoo
Date: November 28, 2011 04:40PM

I've been meaning to answer this thread for a while.

/proc/self/environ is no more.. I don't know if it's removed from the main line kernel but debian and ubuntu atleast don't have the file any more.

There's other ways to turn LFI to RCE. Try including the access_log after you've accessed any file with your user-agent spoofed to '<?php system($_GET[c]); ?>' or something. Be creative! There's tons of ways!

Options: ReplyQuote
Re: LFI help
Posted by: Reiners
Date: December 01, 2011 01:23PM

https://websec.wordpress.com/2010/02/22/exploiting-php-file-inclusion-overview/

Options: ReplyQuote
Re: LFI help
Posted by: _antivirus_
Date: December 03, 2011 03:15AM

Reiners,
What means ../../../../../../../../../ ??

Options: ReplyQuote
Re: LFI help
Posted by: Skyphire
Date: December 13, 2011 06:04AM

_antivirus_ Wrote:
-------------------------------------------------------
> Reiners,
> What means ../../../../../../../../../ ??

Are you serious?

Options: ReplyQuote
Re: LFI help
Posted by: _antivirus_
Date: December 13, 2011 11:47AM

Does it mean ?
/home/public_html/test ?

Options: ReplyQuote
Re: LFI help
Posted by: Reiners
Date: December 14, 2011 11:01AM

hm? it's a path traversal

Options: ReplyQuote
Re: LFI help
Posted by: johndoe
Date: January 14, 2012 06:01PM

i have a similar problem but i managed to upload shells in 2 or 3 serves but give me same errors, i did it through search box here is the post:

http://sla.ckers.org/forum/read.php?16,40512

i posted pics of how it was done.

Options: ReplyQuote


Sorry, only registered users may post in this forum.