jdock1 Posted May 20, 2009 Share Posted May 20, 2009 I thought it was a neat idea, & thanks for all the help by the phpfreaks members, I was able to code this simple application. As you all may know, you can pretty much use any extension for PHP instead of the old .php or .phtml, you can use pretty much anything, such as .lol , .lookatthisextension im using, etc. With this very simple script, you enter what extensions you want to use, and it generates a file that you upload to the directory you want to use those extensions with. This isnt something im looking into making a site for, just a little hobby thing and for personal use. Try it out; http://phpdomain.co.cc/x/index.php Im using a testing .co.cc domain with free hosting for all my php projects Link to comment Share on other sites More sharing options...
legohalflife2man Posted June 6, 2009 Share Posted June 6, 2009 I've tried it and it's a very useful tool. I enjoyed it. Works well! Link to comment Share on other sites More sharing options...
darkfreaks Posted June 6, 2009 Share Posted June 6, 2009 Access Me String Test Results http://phpdomain.co.cc/x/index.php :: Http Method Attack Details: * HTTP Method: SECCOMP The attacked page is dangerously similar to the original page. It is 100% similar. Got access to a resource that should be protected. Server response code: 200 OK. http://phpdomain.co.cc/x/index.php :: Http Method Attack Details: * HTTP Method: HEAD Got access to a resource that should be protected. Server response code: 200 OK. The attacked page is not very similar to the original page. It is 2.247% similar. Link to comment Share on other sites More sharing options...
jdock1 Posted June 6, 2009 Author Share Posted June 6, 2009 Wow what was that all about? Link to comment Share on other sites More sharing options...
darkfreaks Posted June 6, 2009 Share Posted June 6, 2009 i used security compass's ACCESS ME tool to verify the cache headers. there is some bad stuff in there. you can download this tool in firefox and scan yourself Link to comment Share on other sites More sharing options...
jdock1 Posted June 7, 2009 Author Share Posted June 7, 2009 Whats the definition of "bad stuff" , im still new to php n would like to know all this security bullshit damn, php is complicated Link to comment Share on other sites More sharing options...
jdock1 Posted June 7, 2009 Author Share Posted June 7, 2009 I added the access me toolbar n got pretty much the same result with ebay "http://ebay.com/ :: Cookie + Http Method Attack Details: * Input Parameter: nonsession * HTTP Method: HEAD The attacked page is dangerously similar to the original page. It is 96.225% similar. Did not access protected resource. Server response code: 301 Moved Permanently. " This toolbar seems to assume bad html or invalid xhtml as an attack of some sort this shits bogus Link to comment Share on other sites More sharing options...
darkfreaks Posted June 7, 2009 Share Posted June 7, 2009 no not really it is testing server software security cant really do anything about it unless your the server admin. Link to comment Share on other sites More sharing options...
darkfreaks Posted June 9, 2009 Share Posted June 9, 2009 1.) It is the Access me Firefox Add on by Security Compass. 2.) Explanation of HTTP Methods Link to comment Share on other sites More sharing options...
Recommended Posts