Hack Forums
Index of / - .php files when saved don't show - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Index of / - .php files when saved don't show (/showthread.php?tid=5126296)



Index of / - .php files when saved don't show - Skidy - Jan 8, 2016

I found a websites wp-include's directory and they hav't hidden parent directories. Meaning I can view files like this:

[Image: 29e14b4397a54cfb44c3ce342109408e.png]

However, everytime I right click and save link as for a .php file. It saves and nothing is in the file. How can I download these files to see the php code? They can't just be empty documents.


* - Exodi - Jan 8, 2016

It's impossible. Otherwise you could download the config.php and just hack it actually.


* - Delevingne - Jan 8, 2016

Are you serious? Are you 100% serious? Or just a bad troll?


* - Mr.0_0 - Jan 8, 2016

You cant download them via a browser or using the CLI. For one, you can use a browser because you dont have read access to the files and you cant use the command line because PHP is server-side. Unless you can change the privileges on the server itself pertaining these files, thats all youre going to get: a directory listing. If someone tells you otherwise, theyre bullshitting.

EDIT: Holy crap lol i seen all these replies when I submitted my response. I stand corrected.


* - ProblemSolva - Jan 9, 2016

Try to find a other vulnerability, since php is a server sided language you wont see a thing, however if you find a LFD, or an lfi where you can use the base64 encode, then you can get the php code


* - #Skyline - Jan 9, 2016

I laugh at the php file part.

And you cannot see anything as PHP is server sided.
Try finding a vuln, as stated above.