+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: symlink problem "can't read /etc/named.conf" (/showthread.php?tid=2804047)
symlink problem "can't read /etc/named.conf" - Jon Snow - Aug 23, 2012
When I try to use symlinking I get this error:
"can't read /etc/named.conf"
How can I bypass this?
The PHP disabled functions are
"show_source, system, shell_exec, passthru, exec, popen, proc_open"
Thanks!
* - rvltr - Aug 23, 2012
are you even sure /etc/named.conf exists on the server youre trying on.. not all servers have or use /etc/named.conf
* - Jon Snow - Aug 23, 2012
(Aug 23, 2012 12:33 PM)rvltr Wrote: are you even sure /etc/named.conf exists on the server youre trying on.. not all servers have or use /etc/named.conf
Well, how can I be sure? I don't think anyone can.
* - HaxOr❤ - Aug 23, 2012
(Aug 23, 2012 12:37 PM)Jon Snow Wrote: Well, how can I be sure? I don't think anyone can.
Navigate to the etc folder and then search? 🤫
* - kingkaustubh - Aug 24, 2012
Try the path /var/named/chroot/etc/named.conf
* - Jon Snow - Aug 24, 2012
(Aug 24, 2012 10:21 AM)kingkaustubh Wrote: Try the path /var/named/chroot/etc/named.conf
I have no idea where I should check this path...
I don't have access to /home/
* - deadmans96 - Aug 24, 2012
Bybass first PHP disabled functions and it will work with you
shell_exec this is a problem
first upload php.ini and htaccess and symlink
or you can use CGI Perl to excute commands . :)
* - th3.g4m3_0v3r - Aug 24, 2012
popen is disable
You can't execute any command :P if you want to get etc/passwd try open base dir
and post here php version or uname -a info
* - Jon Snow - Aug 24, 2012
(Aug 24, 2012 11:31 AM)th3.g4m3_0v3r Wrote: popen is disable
You can't execute any command :P if you want to get etc/passwd try open base dir
and post here php version or uname -a info
The passwd is 0 bytes in the etc folder...
(Aug 24, 2012 10:21 AM)kingkaustubh Wrote: Try the path /var/named/chroot/etc/named.conf
There is no var in the base dir... also, there is no named.conf in /etc/
* - deadmans96 - Aug 24, 2012
(Aug 24, 2012 11:42 AM)Jon Snow Wrote: The passwd is 0 bytes in the etc folder...
There is no var in the base dir... also, there is no named.conf in /etc/
because of this permission is denied for you
What's the type of server ? Hostgator ? bluegator ? What ?
* - Jon Snow - Aug 24, 2012
(Aug 24, 2012 11:45 AM)deadmans96 Wrote: because of this permission is denied for you
What's the type of server ? Hostgator ? bluegator ? What ?
Linux ro1.vmbox.co 2.6.32
Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_bwlimited/1.4. PHP/5.3.14
* - th3.g4m3_0v3r - Aug 24, 2012
you even can't do anything with this version PHP/5.3.14 :)) try cgi shell :)
* - deadmans96 - Aug 24, 2012
We have tool Called Web Root try to get it from here it's fantastic with CGI Awesome chell
* - alex809 - Mar 16, 2013
Hey i am using the I-47 shell and the Symlink Sa 3.0 bypass but its not working.
On the Symlink Sa 3.0 bypass i go to Symlink bypass and above the text box is "read /etc/passwd"
But the text box contains nothing.
My host has the option to switch between PHP 5.2, 5.3 and 5.4 but currently im using 5.3
Code
Disable functions : system, show_source, exec, shell_exec, proc_open, passthru, set_time_limit, ini_restore, mysql_list_dbs, ini_alter, dl, pfsockopen, openlog, syslog, symlink, link, chgrp, leak, popen, escapeshellcmd, apache_child_terminate, apache_get_modules, apache_get_version, apache_getenv, apache_note, apache_setenv, virtual, mb_send_mail
Safe Mode : OFFIs what the I-47 shell says.
Code
System Info : Linux srv3.main-hosting.com 2.6.32-279.19.1.el6.x86_64 #1 SMP Wed Dec 19 07:05:20 UTC 2012 x86_64
Software : ApacheSo is it possible to use the I-47 shell with this or do i need to get a CGI Shell? If i need a CGI Shell where can i get one from and can you link me to one?
HAHA i used the I-47 shell and an offshore webhost and just got 3 databases and dropped them after i downloaded them.
Via Symlink so i see some webhosts have this issue where others dont.