Cute php shell

The problem i faced
- I have a wordpress backend web-site hosted on shared hosting
- I have no root access on the server but a limited user with access to mysql database
- I had to clean junk files on uploads directory which was owned by www-data user
- But as i was no super user i can't delete the file owned by other user, neither can i change ownership of the file owned by other user.

My temporary solution
- wrote a php which could delete a file/directory passed through GET request

Then out of box i just googled "php shell single file" http://lmgtfy.com/?q=php+shell+single+file and the first entry of the result was https://github.com/b374k/b374k.
And ya thats what i wanted.
I could simply clone this code into webservers document root directory. Give the ownership of the directory to apache user. While accessing the code from browser, i could configure the application to my requirement like password, module required and then after it will generate single-file php shell for me with various features






You could not run command ther requires super user access. You can't even run `sudo -s` or `su` cause there will be no real tty access. You could run apache server from root user but which is risky alternatives.

Hummm there must be `setuid` alternative.. Lets c



Comments

Post a Comment

Popular posts from this blog

Hacking with CashOnAd

"Cash on ad" was a new an innovative technique on the advertising industry. After installing an app on your android phone you will be paid for watching ads. That app will play an advertisement each time u receive a call. And the company behind will pay you few cents for viewing the ad. F1 soft had released such app and I was curious to try it. Installed it and it works well. But the sad fact is that I rarely receive call and hence the earning is negligible. Taking advantage of my rooted Galaxy Pop GT-S5570, I explored the internal database of this app. I was amazed to see that all the records are on plain text. Few records are on XML file and few records are on sqlite database and all are readable. Then after I started writing an app for android to exploit this app's record keeping. I wrote an app which will modify the target app's XML and database. I named it <a href="https://github.com/scvishnu7/CashOnClick" > CashOnClick. </a>  Which basically...
Read more

First solo overnight cycling experience part-2

Image
Day 2 It was hard for me to woke up this day. It was around 8:00 am when I finally got out of bed. The due were frozen on the grass tip and hence it looked pretty white outside. But the sun had already up on the sky to make the environment warm again. Packed the bag again and had noodles as breakfast as there was no alternative this early. The National Park office was nearby the hotel and the officer came to me to ask about the ticket. But as there were no National park office from where I entered, I had to buy the ticket there. I was shocked to know that I had to pay double of my ticket for my bike. NRs 56 for me and NRs 100 for my bike. I was shocked more to know that few month ago the ticket for mountain bike was NRs 1000 ($10). :( Anyway paid that and on the way at 8:50 am. Route that day was mostly unknown. 90% of the route was complete inside the national park. But as I got enough rest that night I could paddle easily. And another good news was that the path was expected to be do...
Read more