Symlink Baypass Private 2013 by Mauritania Attacker
Make Symlink Work 100% By Mauritania Attacker Privte !
You can Bypass any server with this method you just need to do some little changes in the following file :
* php.ini
* and bypass suEXEC
For example i have this simple "php.ini" safe_mode = Off
disable_functions =
safe_mode_gid = Off
open_basedir = Off
register_globals = on
exec = On
shell_exec = On
Just add these to "disable_functions =""ln,
cat, popen, pclose, posix_getpwuid, posix_getgrgid, posix_kill,
parse_perms, system, dl, passthru, exec, shell_exec, popen, proc_close,
proc_get_status, proc_nice, proc_open, escapeshellcmd, escapeshellarg,
show_source, posix_mkfifo, mysql_list_dbs, get_current_user, getmyuid,
pconnect, link, symlink, pcntl_exec, ini_alter, pfsockopen, leak,
apache_child_terminate, posix_kill, posix_setpgid, posix_setsid,
posix_setuid, proc_terminate, syslog, fpassthru, stream_select,
socket_select, socket_create, socket_create_listen, socket_create_pair,
socket_listen, socket_accept, socket_bind, socket_strerror, pcntl_fork,
pcntl_signal, pcntl_waitpid, pcntl_wexitstatus, pcntl_wifexited,
pcntl_wifsignaled, pcntl_wifstopped, pcntl_wstopsig, pcntl_wtermsig,
openlog, apache_get_modules, apache_get_version, apache_getenv,
apache_note, apache_setenv, virtual, chmod, file_upload, delete,
deleted, edit, fwrite, cmd, rename, unlink, mkdir, mv, touch, cp, cd,
pico"
So our "php.ini" will be like this :
safe_mode = Off
disable_functions
= "ln, cat, popen, pclose, posix_getpwuid, posix_getgrgid, posix_kill,
parse_perms, system, dl, passthru, exec, shell_exec, popen, proc_close,
proc_get_status, proc_nice, proc_open, escapeshellcmd, escapeshellarg,
show_source, posix_mkfifo, mysql_list_dbs, get_current_user, getmyuid,
pconnect, link, symlink, pcntl_exec, ini_alter, pfsockopen, leak,
apache_child_terminate, posix_kill, posix_setpgid, posix_setsid,
posix_setuid, proc_terminate, syslog, fpassthru, stream_select,
socket_select, socket_create, socket_create_listen, socket_create_pair,
socket_listen, socket_accept, socket_bind, socket_strerror, pcntl_fork,
pcntl_signal, pcntl_waitpid, pcntl_wexitstatus, pcntl_wifexited,
pcntl_wifsignaled, pcntl_wifstopped, pcntl_wstopsig, pcntl_wtermsig,
openlog, apache_get_modules, apache_get_version, apache_getenv,
apache_note, apache_setenv, virtual, chmod, file_upload, delete,
deleted, edit, fwrite, cmd, rename, unlink, mkdir, mv, touch, cp, cd,
pico"
safe_mode_gid = Off
open_basedir = Off
register_globals = on
exec = On
shell_exec = On
