Filename | Bypass Symlink with .htaccess Team Arizona |
Permission | rw-r--r-- |
Author | Unknown |
Date and Time | 2/04/2014 |
Label | Penetration |
Action |
Ethical Hacking Institute in Pune
./Arizona Team
While Doing CEH LAB's one of our student got stuck in .htaccess security format. While digging deep into the code found a very simple method through which a Symbolic link can be bypassed. So thought to share the method to all rest of you.
Our CEH Labs are becoming more and more intense now. Students are getting the hard core concept of securing a website, and iam happy about that been an Instructor.
So here is the solution.
Code:
OPTIONS Indexes Includes ExecCGI FollowSymLinks
AddHandler txt .php
AddHandler cgi-script .cgi
AddHandler cgi-script .pl
OPTIONS Indexes Includes ExecCGI FollowSymLinks
Options Indexes FollowSymLinks
AddType txt .php
AddType text/html .shtml
Options All
Options All
This setting will help you bypass Symlink with .htaccess file.
Enjoy Learning..
www.arizonainfotech.com
CEH CHFI ECSA ENSA CCNA CCNA SECURITY MCITP RHCE CLOUD ANDROID IPHONE NETWORKING HARDWARE TRAINING INSTITUTE IN PUNE, Certified Ethical Hacking, IT Security Training Information Security Traning Courses in Pune, ceh certification in pune, Ethical Hacking Course in Pune
./Arizona Team
While Doing CEH LAB's one of our student got stuck in .htaccess security format. While digging deep into the code found a very simple method through which a Symbolic link can be bypassed. So thought to share the method to all rest of you.
Our CEH Labs are becoming more and more intense now. Students are getting the hard core concept of securing a website, and iam happy about that been an Instructor.
So here is the solution.
Code:
OPTIONS Indexes Includes ExecCGI FollowSymLinks
AddHandler txt .php
AddHandler cgi-script .cgi
AddHandler cgi-script .pl
OPTIONS Indexes Includes ExecCGI FollowSymLinks
Options Indexes FollowSymLinks
AddType txt .php
AddType text/html .shtml
Options All
Options All
This setting will help you bypass Symlink with .htaccess file.
Enjoy Learning..
www.arizonainfotech.com
CEH CHFI ECSA ENSA CCNA CCNA SECURITY MCITP RHCE CLOUD ANDROID IPHONE NETWORKING HARDWARE TRAINING INSTITUTE IN PUNE, Certified Ethical Hacking, IT Security Training Information Security Traning Courses in Pune, ceh certification in pune, Ethical Hacking Course in Pune