Page 2 of 3
Re: [video] LFI Local Upload Form
Posted: Thu Apr 29, 2010 8:17 am
by 3xtr3m3b0y
Wew, makin mantep aja neh Paman :kaca:
But paman, I wanna ask U something, jika kt menemukan kondisi sprt ini pada LFI :
1. Gak ada izin utk mengakses /proc/self/environ
2. Gak ada izin utk mengakses semua Log Apache
3. Gak ada fasilitas Upload pada website utk pengguna umum yg bisa digunakan utk ngupload text or image yg bisa ditumpangi dgn PHP Code.
So, what should I do next Paman...??? Apa RCE gak bisa dilakukan kemudian...???
Sayangnya pada LFI file PHP langsung dijalankan, tdk sprt pada Load_File SQLi dimana file PHP tdk di interpretasikan sehingga kode-kode PHP dari file tsb akan diperlihatkan...
Mohon pencerahannya Paman...!!! :putusasa:
Re: [video] LFI Local Upload Form
Posted: Fri Apr 30, 2010 4:33 pm
by the_pheng
apik euy... scannernya. thank's for share..
Re: [video] LFI Local Upload Form
Posted: Sat May 01, 2010 2:36 am
by Paman
Forum rules
Sertakan POC disini agar member dapat mempelajarinya
^^v
Re: [video] LFI Local Upload Form
Posted: Sat May 01, 2010 7:16 pm
by .::Z10R::.
jack emang ngak ada matinya
kayaknya harus di rudal nih :kaca: :kaca:
Re: [video] LFI Local Upload Form
Posted: Sat May 01, 2010 8:48 pm
by Xshadow
sehingga kode-kode PHP dari file tsb akan diperlihatkan...
kalo diperlihatkan load aja confignya
Re: [video] LFI Local Upload Form
Posted: Sun May 02, 2010 9:16 am
by Xshadow
Paman wrote:
PS : dicomot abis dari evilc0.de
ketemu site .id PATCH!!!
ketemu site .my SIKAT!!!
ini yang gua seneng... :ngakak: :ngakak: :ngakak:
Re: [video] LFI Local Upload Form
Posted: Sun May 02, 2010 11:42 pm
by cyber_terror1st
kk gmana cara download tu filem?? :maaf:
Re: [video] LFI Local Upload Form
Posted: Sun May 02, 2010 11:58 pm
by Xshadow
cyber_terror1st wrote:kk gmana cara download tu filem?? :maaf:
pakai idm atau software download lain... trus masukkan link-nya
Re: [video] LFI Local Upload Form
Posted: Mon May 03, 2010 7:17 am
by 3xtr3m3b0y
Xshadow wrote:cyber_terror1st wrote:kk gmana cara download tu filem?? :maaf:
pakai idm atau software download lain... trus masukkan link-nya
cyber_terror1st << Waspada jgn2 anggotax NURDIN MANG TOP...!!! :marah2:
Skalian Nyong tambahin, sebelum beliau nanya gmn cara muterx tuh pilem.
Klo pengen muter pilemx pke BROWSER aja, caranya :
1. Klik kanan File pilemx
2. Pilih menu Open With
3. Pilih Mozilla Firefox or Internet Explorer
***************************************************
Btw ini video PoC LFI to RCE menggunakan File Gambar yg telah diinject dgn Kode PHP...
Code: Select all
http://milw0rm.com/video/store/57.swf
Re: [video] LFI Local Upload Form
Posted: Wed May 05, 2010 12:27 am
by Paman
3xtr3m3b0y wrote:Wew, makin mantep aja neh Paman :kaca:
But paman, I wanna ask U something, jika kt menemukan kondisi sprt ini pada LFI :
1. Gak ada izin utk mengakses /proc/self/environ
2. Gak ada izin utk mengakses semua Log Apache
3. Gak ada fasilitas Upload pada website utk pengguna umum yg bisa digunakan utk ngupload text or image yg bisa ditumpangi dgn PHP Code.
So, what should I do next Paman...??? Apa RCE gak bisa dilakukan kemudian...???
Sayangnya pada LFI file PHP langsung dijalankan, tdk sprt pada Load_File SQLi dimana file PHP tdk di interpretasikan sehingga kode-kode PHP dari file tsb akan diperlihatkan...
Mohon pencerahannya Paman...!!! :putusasa:
ini jawaban na....
[/quote]Btw ini video PoC LFI to RCE menggunakan File Gambar yg telah diinject dgn Kode PHP...
Code: Select all
http://milw0rm.com/video/store/57.swf
[/quote]
ha ha ha,,
kaboor~