Follow us on Twitter!
Capitalism is an Island of wealth in a sea of poverty
Thursday, April 24, 2014
Navigation
Home
HellBoundHackers Main:
HellBoundHackers Find:
HellBoundHackers Information:
Learn
Communicate
Submit
Shop
Challenges
HellBoundHackers Exploit:
HellBoundHackers Programming:
HellBoundHackers Think:
HellBoundHackers Track:
HellBoundHackers Patch:
HellBoundHackers Other:
HellBoundHackers Need Help?
Other
Members Online
Total Online: 36
Guests Online: 29
Members Online: 7

Registered Members: 82903
Newest Member: Piriformis
Latest Articles
View Thread

HellBound Hackers | Computer General | Hacking in general

Author

No Input File Specified error

Mtutnid
Member

Your avatar

Posts: 102
Location: HELL
Joined: 22.09.10
Rank:
Newbie
Posted on 29-03-12 11:28
Hi all,
One of my friends created a website and we check each other's work by pentesting (in order to learn it and learn to prevent it)

He has set up very basic directories. What I found strange:

first I saw that
page.com/index
had no extension adding .html makes it open normally, any other gives a 404 error.
But when I replaced it with .php I got a blank page with the words
No input file specified
I thought he might have created two files index.html and index.php, but it seems that I can write anything with .php (f. egz. fhlkgjha.php, and I don't think they have a page for that) and still get the same response:
No input file specified

Does it have anything to do with the .htaccess file, some default response page?

I'm trying to learn so I want to know if this could pose a weakness or am I just stupid?



Carve me up, slice me apart
Suck my guts and lick my heart
Chop me up, I like to be hurt
Drink my marrow and blood for dessert

My one desire, my only wish is to be-
EATEN...
Author

RE: No Input File Specified error

elmiguel
Member



Posts: 161
Location: Your Computer
Joined: 12.12.07
Rank:
God
Posted on 29-03-12 18:29
You are correct with the .htaccess

quick google search: http://jenseng.co. . .00035.html



The philosophy of one century is the common sense of the next. -Fortune Cookie

I would like to thank a few friends that I have made here that helped me and deserve to be mentioned:
System_Meltdown, Futility, nvrlivenvrdie, Mastergamer, TrueHacker, S1L3NTKn1GhT, Reelix, ynori7, Demons Halo, kryptor

www.hellboundhackers.org/sig/r/24963.png

www.hellboundhackers.org/sig/hbh2.png
<script>alert('XSS');</script>
Author

RE: No Input File Specified error

elmiguel
Member



Posts: 161
Location: Your Computer
Joined: 12.12.07
Rank:
God
Posted on 29-03-12 18:36
Also,

If your friend is doing redirects on a IIS website, this could cause an issue as well if your are trying to run HTTP and HTTPS on the same site.

In this case it would be the something in the page that would look like this:

PHP:
Code


// Set the home URL -> NOT THE SAME AS: http://site.com/index.php, we are checking the home service!
  $home = 'https://site.com/index.php';
   
  // Check the URI on first load and make sure it goes to ./index.php - fixes the backlinks.
  $url = (!empty($_SERVER['HTTPS'])) ? "https://".$_SERVER['SERVER_NAME'].$_SERVER['REQUEST_URI'] : "http://".$_SERVER['SERVER_NAME'].$_SERVER['REQUEST_URI'];
 
  // Check to see if the index.php is in the request; if not, redirect - fixes the "No File Specified!"
  if (!strpos($url, 'index.php')){header('Location: http://site.com/index.php');}





This is a piece of code I wrote for just that. ;)

hope that helps alittle.


The philosophy of one century is the common sense of the next. -Fortune Cookie

I would like to thank a few friends that I have made here that helped me and deserve to be mentioned:
System_Meltdown, Futility, nvrlivenvrdie, Mastergamer, TrueHacker, S1L3NTKn1GhT, Reelix, ynori7, Demons Halo, kryptor

www.hellboundhackers.org/sig/r/24963.png

www.hellboundhackers.org/sig/hbh2.png
<script>alert('XSS');</script>