Software: Apache. PHP/5.4.45 

uname -a: Linux webm056.cluster010.gra.hosting.ovh.net 5.15.167-ovh-vps-grsec-zfs-classid #1 SMP Tue
Sep 17 08:14:20 UTC 2024 x86_64
 

uid=243112(mycochar) gid=100(users) groups=100(users)  

Safe-mode: OFF (not secure)

/home/mycochar/www/image/photo/gcc-12.3.0/libphobos/testsuite/libphobos.shared/   drwxr-xr-x
Free 0 B of 0 B (0%)
Your ip: 216.73.216.77 - Server ip: 213.186.33.19
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    

[Enumerate]    [Encoder]    [Tools]    [Proc.]    [FTP Brute]    [Sec.]    [SQL]    [PHP-Code]    [Backdoor Host]    [Back-Connection]    [milw0rm it!]    [PHP-Proxy]    [Self remove]
    


Viewing file:     host.c (1.91 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
#include <stdlib.h>
#include <string.h>
#include <dlfcn.h>
#include <assert.h>

int main(int argc, char* argv[])
{
#if defined(__FreeBSD__)
    // workaround for Bugzilla 14824
    void *druntime = dlopen(argv[1], RTLD_LAZY); // load druntime
    assert(druntime);
#endif
#if defined(__DragonFly__)
    // workaround for Bugzilla 14824
    void *druntime = dlopen(argv[1], RTLD_LAZY); // load druntime
    assert(druntime);
#endif

    const size_t pathlen = strrchr(argv[0], '/') - argv[0] + 1;
    char *name = malloc(pathlen + sizeof("plugin1.so"));
    memcpy(name, argv[0], pathlen);
    memcpy(name+pathlen, "plugin1.so", sizeof("plugin1.so"));

    void* plugin1 = dlopen(name, RTLD_LAZY);
    name[pathlen + sizeof("plugin1.so") - 5] = '2';
    void* plugin2 = dlopen(name, RTLD_LAZY);

    int (*plugin1_init)() = dlsym(plugin1, "plugin_init");
    int (*plugin1_term)() = dlsym(plugin1, "plugin_term");
    int (*runTests1)() = dlsym(plugin1, "runTests");
    int (*plugin2_init)() = dlsym(plugin2, "plugin_init");
    int (*plugin2_term)() = dlsym(plugin2, "plugin_term");
    int (*runTests2)() = dlsym(plugin2, "runTests");
    assert(plugin1_init());
    assert(runTests1());
    assert(plugin2_init());
    assert(runTests2());

    assert(plugin1_term());
    assert(dlclose(plugin1) == 0);
    assert(runTests2());

    name[pathlen + sizeof("plugin1.so") - 5] = '1';
    plugin1 = dlopen(name, RTLD_LAZY);
    plugin1_init = dlsym(plugin1, "plugin_init");
    plugin1_term = dlsym(plugin1, "plugin_term");
    runTests1 = dlsym(plugin1, "runTests");
    assert(plugin1_init());
    assert(runTests1());
    assert(runTests2());

    assert(plugin2_term());
    assert(dlclose(plugin2) == 0);
    assert(runTests1());

    assert(plugin1_term());
    assert(dlclose(plugin1) == 0);

    free(name);

#if defined(__FreeBSD__)
    dlclose(druntime);
#endif
#if defined(__DragonFly__)
    dlclose(druntime);
#endif
    return EXIT_SUCCESS;
}

Enter:
 
Select:
 

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

Search
  - regexp 

Upload
 
[ ok ]

Make Dir
 
[ ok ]
Make File
 
[ ok ]

Go Dir
 
Go File
 

--[ x2300 Locus7Shell v. 1.0a beta Modded by #!physx^ | www.LOCUS7S.com | Generation time: 0.0058 ]--