First off, this is completely possible using PHP itself.
Pretty sure it still bypasses the lame
http://www.cyberciti.biz/tips/php-script-downloaded-as-source-code.html issue.
PHP:
$url = _GET['url'];;
if(isset($url)){
if(!copy("http://www.weaktargetsite.com/targetScript.php", "nowMine.php"))
{
echo("failed to copy file");
}
}
The logic here is nice, that's all I can say.
Lets take a look:
1. Create a new file named
cross-domain-download.php in the place where you want downloads to end up on your PHP enabled web server (or other ...).
2.Get the url from a form or something and check if its set, if so,
3.if the file is not copied (which it should not be), display an error message.
4.But, the file DOES EXIST, so it is instead saved as
nowMine.php copied to the same location where you ran the script you just created named
cross-domain-download.php.
Why does this work, you ask?
Well we are not asking the server to copy it, but instead we're telling the system to just copy whatever $url is and if it cant just display fail message.
This solution may never set off the rule such as "# /etc/init.d/httpd stop" which could be added in server config that admins set for in order to prevent this sort of activity. However, I am
assuming this is easy to fix with similar settings.
Just try it, if it doesn't work then I guess I am just one LUCKY mother, because every time I needed it, it seems to have worked wonders. My targets were not huge franchises either though.
The only reason I had this little script was because I needed to add it to a CMS application I was developing for a firm I use to work at. Hope this does at least what you need for now. Sorry if not, long post.
-712011m4n
