Conditions:
————–
777 Directory
What Is This:
————–
You Uploaded Shell With With “NoBody” Permission
Let’s Say You Browse To Another Folder Which Is 777 But All Files Are 755 And Belongs To Some User There
To Change Those Files We Do Like This
How To Do It:
—————
Upload Your Own File/Index To That Folder Let’s Say Your Page Called
Evil.php
And The File You Want To Change Is
Index.html
So Execute This:
MV Evil.php Index.html
PlanetCreator had informed OUM’s XSS Vulnerability CODE http://www.planetcreator.net/2009/11/critical-xss-vulnerability-on-open-university-malaysia/ But nobody cares , How come they all wana do like this so shit! Where is OUM’s Wemaster? Sleeping @ Camp? Yeah,
A new rootkit can either be one that has never been seen before, or one that uses new technologies or previously unused methods of attack. Or both. Andthat is where
Gathering information: (set) http://www.subnetonline.com/ (set) http://ping.eu/ (ping, dns_tools, traceroute, web_tools) http://serversniff.net/ (DIG / nslookup, whois, traceroute) http://networking.ringofsaturn.com/Tools/ (whois, dns_tools, service_scan, traceroute) http://centralops.net/co/DomainDossier.aspx (whois, dns_tools, domain_search) http://www.whois.ws/ (whois, dns_tools) http://www.robtex.com/ (whois)