![]() |
|
Index of / - .php files when saved don't show - Printable Version +- Hack Forums (https://hackforums.net) +-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45) +--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449) +---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43) +---- Thread: Index of / - .php files when saved don't show (/showthread.php?tid=5126296) |
Index of / - .php files when saved don't show - Skidy - Jan 8, 2016 I found a websites wp-include's directory and they hav't hidden parent directories. Meaning I can view files like this: ![]() However, everytime I right click and save link as for a .php file. It saves and nothing is in the file. How can I download these files to see the php code? They can't just be empty documents. * - Exodi - Jan 8, 2016 It's impossible. Otherwise you could download the config.php and just hack it actually. * - Delevingne - Jan 8, 2016 Are you serious? Are you 100% serious? Or just a bad troll? * - Mr.0_0 - Jan 8, 2016 You cant download them via a browser or using the CLI. For one, you can use a browser because you dont have read access to the files and you cant use the command line because PHP is server-side. Unless you can change the privileges on the server itself pertaining these files, thats all youre going to get: a directory listing. If someone tells you otherwise, theyre bullshitting. EDIT: Holy crap lol i seen all these replies when I submitted my response. I stand corrected. * - ProblemSolva - Jan 9, 2016 Try to find a other vulnerability, since php is a server sided language you wont see a thing, however if you find a LFD, or an lfi where you can use the base64 encode, then you can get the php code * - #Skyline - Jan 9, 2016 I laugh at the php file part. And you cannot see anything as PHP is server sided. Try finding a vuln, as stated above. |