i been trying to upload a shell to a few servers via the /proc/self/environ LFI method and just can not get it done. I have used temper data and other home brewed scripts with nothing. has anyone else had this issue with a known vector just stopped working out of the blue? ideas?

I've been meaning to answer this thread for a while.

/proc/self/environ is no more.. I don't know if it's removed from the main line kernel but debian and ubuntu atleast don't have the file any more.

There's other ways to turn LFI to RCE. Try including the access_log after you've accessed any file with your user-agent spoofed to '<?php system($_GET[c]); ?>' or something. Be creative! There's tons of ways!

https://websec.wordpress.com/2010/02/22/exploiting-php-file-inclusion-overview/

Reiners,
What means ../../../../../../../../../ ??

_antivirus_ Wrote:
-------------------------------------------------------
> Reiners,
> What means ../../../../../../../../../ ??

Are you serious?

Does it mean ?
/home/public_html/test ?

hm? it's a path traversal

i have a similar problem but i managed to upload shells in 2 or 3 serves but give me same errors, i did it through search box here is the post:

http://sla.ckers.org/forum/read.php?16,40512

i posted pics of how it was done.