+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Php source code grab? (/showthread.php?tid=5236531)
Pages: Pages
1
2
Php source code grab? - Gmanthelearner - Apr 13, 2016
Is it possible to grab a webpages php source code? If you know how to please add me on skype as i would love to know more
skype: shadowcloak12
* - Vicci - Apr 13, 2016
It's not possible unless you get access to the server itself.
* - NobleSausage - Apr 13, 2016
its possible using LFI i think
* - Vicci - Apr 13, 2016
(Apr 13, 2016 03:37 PM)NobleSausage Wrote: its possible using LFI i think
No it's not and it's for the simple reason that PHP is a server-sided language.
* - NobleSausage - Apr 13, 2016
(Apr 13, 2016 03:40 PM)Vicci Wrote: No it's not and it's for the simple reason that PHP is a server-sided language.
well if u upload a shell its possible
Edit: there you go, told u there is a way
https://hackforums.net/showthread.php?tid=2388869
* - Vicci - Apr 13, 2016
(Apr 13, 2016 03:58 PM)NobleSausage Wrote: well if u upload a shell its possible
Edit: there you go, told u there is a way
https://hackforums.net/showthread.php?tid=2388869
That's exactly why I wrote
(Apr 13, 2016 02:00 PM)Vicci Wrote: It's not possible unless you get access to the server itself.
* - NobleSausage - Apr 13, 2016
(Apr 13, 2016 04:04 PM)Vicci Wrote: That's exactly why I wrote
did u look at the link ? -_-
* - Vicci - Apr 13, 2016
(Apr 13, 2016 04:08 PM)NobleSausage Wrote: did u look at the link ? -_-
Yes I did and you still need access to the server through a vuln in order to do that so stop playing smart and go to bed.
* - NobleSausage - Apr 13, 2016
(Apr 13, 2016 04:13 PM)Vicci Wrote: Yes I did and you still need access to the server through a vuln in order to do that so stop playing smart and go to bed.
lmao what do you think OP meant? Of course u need some kind of VULN to be able to access it do you think you can just magically download it?
(Apr 13, 2016 02:00 PM)Vicci Wrote: It's not possible unless you get access to the server itself.
I just showed u its possible if u find a vuln.. that doesnt mean i have access to the server
im not playing smart ur just dumb giving general replies
* - Vicci - Apr 13, 2016
(Apr 13, 2016 04:20 PM)NobleSausage Wrote: lmao what do you think OP meant? Of course u need some kind of VULN to be able to access it do you think you can just magically download it?
I just showed u its possible if u find a vuln.. that doesnt mean i have access to the server
im not playing smart ur just dumb giving general replies
I think that's what OP thought because he doesn't seem very experienced within this area.
If you find a vuln you have access to the server end of story.
* - •^v^–[ bLacKn3x ]–^v^• - Apr 13, 2016
@Vicci
You joined that forum on 04-07-2016..Whats wrong with u that you have over 380 posts?
Please stop LQ-spam posting thanks ;)
@0p
It's not possible without access to server :)
* - Gmanthelearner - Apr 14, 2016
Thanks for all your help guys! I knew it was server sided but I thought there might be an exploit for it, I'll have a look at actually gaining server access.
* - NobleSausage - Apr 15, 2016
(Apr 14, 2016 09:08 AM)Gmanthelearner Wrote: Thanks for all your help guys! I knew it was server sided but I thought there might be an exploit for it, I'll have a look at actually gaining server access.
php://filter using LFI is not an exploit? what do you call it then?
* - Veng_hung - Apr 15, 2016
(Apr 13, 2016 04:27 PM)Vicci Wrote: I think that's what OP thought because he doesn't seem very experienced within this area.
If you find a vuln you have access to the server end of story.
Stfu u wanna be hacker 🤣🤣
* - Mr. WAVES - Apr 15, 2016
OP, I suggest you to read about LFI Exploits. Start testing your target and if you're lucky it will be vulnerable. Execute the FLI and you'll have an access to the server by a webpage (called shell).
Good luck