A_single_file_wiki_wifky2.png

[hack] ʪǡ¤

[Add this entry to hatena bookmark]

ǥ쥯ȥ

ǥ쥯ȥϡץȥեΥեѥγĥҤ

  • UTF-8 Ѥξϡ.dס
  • EUC-JP Ѥξϡ.dat

ѤȤΤʤ롣 ǥ쥯ȥ CGI ˤơ¹Ԥκݡư롣

̺︺ΰ١ץȤϥǥ쥯ȥ chdir ư롣

ץȤΥѥ UTF-8 EUC-JP
/foo/bar/wifky.pl /foo/bar/wifky.d/ /foo/bar/wifky.dat/
/var/www/cgi-bin/index.cgi /var/www/cgi-bin/index.d/ /var/www/cgi-bin/index.dat/

ե

̾
ڡե CGI 桼פڡƤ򤽤Τޤݻƥ
źեե CGI źեե롣ե̾ʳ̵ù
ե CGI źեեΰηǺ
ե CGI 1ĤΤߡѿ:ͷǡƤݻ
ץ饰 FTP 桼ˤǥ쥯ȥ()
Υץ FTP 桼ˤꡢǤդ CGI ¹Բǽǥ쥯ȥ֤롣

ΥץȤơǥ쥯ȥ֤롣 ޤʳΥեϡ§ʤ

ץ饰Ѥե⡢ڡե롢뤤źեեηǺ ֥饦ͳǥ桼ѹǤ뤳Ȥݾڤ롣

ڡե

ե̾hhhhhhh

hhhhhhh
16 ASCII ڡ̾perl unpack('h*','ڡ̾) 롣

桼Ϥ̤Ƥ̵ùǥե벽Ρ ùϸ§ɽ˹Ԥ

ϡʸեν񤭹߲ǽ°ե饰ȤƤ롣줬

  • 0666 λ(-w
  • 0444 λ(! -w

Ȥߤʤ롣

źեե

ե̾hhhhhhh__aaaaaa

hhhhhhh
16 ASCII ڡ̾perl unpack('h*',ڡ̾) 롣
aaaaaaa
16 ASCII źեե̾perl unpack('h*',ե̾) 롣

ȥեźեեΰ֡

comment.0 Ȥ̾źեե밷Ȥʤ롣 ((comment)) ˰硢0ʬ֤롣 ȤϼιԤη֤

 YYYY/MM/DD hh:mm:ss(TAB)̾(TAB)

ȤʸϥեǼΤ褦˥󥳡ɤ롣

ʸ ե
ԥ(LF) ^n
(CR) ^r
֥ ^t
å(^) ^y
<,>,& Τޤ

󥳡ɤ &::yen() , ǥɤ &::deyen() ǹԤ

ե̾hhhhhhh__00aaaaaa

hhhhhhh
16 ASCII ڡ̾perl unpack('h*',ڡ̾) 롣
aaaaaaa
16 ASCII perl unpack('h*',̾) 롣

ե뼫Τ 0 Х

ե

ǰĤΤ¸ߤ 1.0.1 ޤǤΥե̾ ֥ǥ쥯ȥ/__0716373777f62746 ʸ츻 '__' . unpack('h*','password') η̡ˡ 1.0.2 ʹߤϡ֥ǥ쥯ȥ/index.cgiפѤäƤ롣

(ե)
= { (ѿ̾) + (TAB) + () + (ԥ) }η֤ + EOF
(ѿ̾)
= { (ʸ) } η֤
()
ͤξ ̤0סNGפʳϿ
ƥȤξ ƥȤΤޤޡ å(^) ^y , ԥ(LF) ^n , (CR) ^r , ֥(TAB) ^t ִƤ롣
  • ܥեΤߡѡߥå(ƥ)θɬ
  • ԤνϲǤ褷
  • ̤βϡƤȤ˲
  • ѿ̾ˤϡ֤̾äߤƤʤ
  • ѤƤѿȤƤϲ(ƤǤϤʤ)
ѿ̾
crypt ƥ crypt(,'wk') ǰŹ沽ѥ
sitename ƥ ̾(EUC)
locallink file:// Υ󥯤ͭˤ뤫
CSS ƥ CSS Υڡ̾
sectionmark ƥ ɸƬΥޡ
target ƥ 󥯤ؤ target °

0.53 ޤǤε

  • 1 沽줿ѥ
  • 2 ̾

0.99 ʹߤǤϥݡȤƤޤ

ץ饰ե

  • ĥ .pl or .plg
  • ץ饰ե̵ͭϴʤ ǥ쥯ȥ֤ǡ¨ͭˤʤ롣

ץȥե

  • ɤ̾˥桼 rename Ƥ褤
    • $0 򸵤˥ץȥե̾ǥ쥯ȥ̾롣
    • ץȥե̾ľ񤭤Τϡ̾Τ

|

Designed for @nifty.