Swarm of XeBees

Name: Jiten, aka "Jiten"

Email:

Posts by Jiten

Viewing the complete source code and stealing passwords from Websites with PHP-CGI based setups

Posted on May 4th, 2012 No Comments

Viewing the complete  source code and stealing passwords from  Websites   with PHP-CGI based  setups

Websites Running on PHP-CGI based setup are completely vulnerable to   Remote Code execution.While parsing query string Parameters from a php file, The PHP-CGI based setups are ending up executing command line switches on their servers.  An user can simply run a command line switch on PHP-CGI server using the flaw in query execution

If a website is running on a PHP-CGI based setup. Just simply pass a command line argument  along with the URL and see the fun.  ‘Show source’ Switch like “–s” passed via query string from a php page would result in displaying the entire code of the page to the attacker.This Vulnerability has also resulted in a warning being issued by Computer Emergency Response Team in US. The developers despite of working overtime are yet to find any fix for this mess till now.

The above vulnerability is a treat to all those who want to have some extra fun on any website built in PHP and running in CGI based setup.Here are few Quickies if want to have some fun too

• Google for hosting providers providing servers for PHP-CGI bases setups
• Run a Reverse IP lookup in BING search engine. (It’s the only lame search engine running reverse lookups) Use it J
• Now once the result are listed,  look for the ones in php-CGI based setups
• Choose a target. Navigate the site for some login pages or any search pages.
• Look at the Page source and find out the name of php scripts doing authentication or  making database  connections.
• Run the source code display  Switch –s passed via query string from a php page
• For example You could see the source of  the demo.php  on localhost via http:// localhost/demo.php?-s.
• This will display the complete source code in plain text.
• Once you see the scripts in the plain text. Take passwords, Upload shells, Do server rooting, deface.
• Do what ever you like till they fix this but be nice : )

Cheers !

SOPA in US and Censorship in India: A cocktail to destroy Internet Freedom !

Posted on January 19th, 2012 8 Comments

As US senators mull over the SOPA(Stopping Online Piracy Act) and PIPA(Protecting Intellectual Property Act) bills, the world stands witness to a historic moment. Almost all big IT companies like Google, Wikipedia, Facebook, Mozilla, Godaddy, etc are speaking in one unanimous voice against SOPA and Internet Censorship. The draconian provisions of SOPA/PIPA are bound to create the deathbed of internet freedom and free speech, and if a careful reading of the proposed legislation is done, one realizes that it is likely to have the same impact on India.
In the disguise of protecting copyrights and stopping piracy its completely clear that the US government is trying to assert its control over the free flow of information on internet  which is some time uncomfortable to them. Giving power to Attorney General to direct search engines like Google to filter particular search results, or asking an ISP to manipulate their DNS  to filter specific IP addresses just at whims and fancies of government all the threatening to accessing information. Read more »