| <code><pre> | |
| <?php | |
| echo "__FILE__: ".__FILE__."\n"; | |
| echo "PHP_SELF: ".$_SERVER['PHP_SELF']."\n"; | |
| echo "SCRIPT_NAME: ".$_SERVER['SCRIPT_NAME']."\n"; | |
| echo "REQUEST_URI: ".$_SERVER['REQUEST_URI']."\n"; | |
| echo "parse_url(REQUEST_URI): ".parse_url($_SERVER['REQUEST_URI'],PHP_URL_PATH)."\n"; | |
| ?> |
| #!/usr/bin/env ruby | |
| # | |
| # Proof-of-Concept exploit for Rails Remote Code Execution (CVE-2013-0156) | |
| # | |
| # ## Advisory | |
| # | |
| # https://groups.google.com/forum/#!topic/rubyonrails-security/61bkgvnSGTQ/discussion | |
| # | |
| # ## Caveats | |
| # |
| ASA-5510-2# sh snmp-server oidlist | |
| ------------------------------------------------- | |
| [0] 1.3.6.1.2.1.1.1. sysDescr | |
| [1] 1.3.6.1.2.1.1.2. sysObjectID | |
| [2] 1.3.6.1.2.1.1.3. sysUpTime | |
| [3] 1.3.6.1.2.1.1.4. sysContact | |
| [4] 1.3.6.1.2.1.1.5. sysName | |
| [5] 1.3.6.1.2.1.1.6. sysLocation | |
| [6] 1.3.6.1.2.1.1.7. sysServices |
In one of my pet projects, I redirect all requests to index.php, which then decides what to do with it:
This snippet in your .htaccess will ensure that all requests for files and folders that does not exists will be redirected to index.php:
RewriteEngine on
RewriteCond %{REQUEST_FILENAME} !-d