添加phpshe1.1环境

0xs1riu5 · Nov 1, 2018 · 6265ef3 · 6265ef3
1 parent bdcf2ac
commit 6265ef3
Show file tree

Hide file tree

Showing 450 changed files with 30,798 additions and 0 deletions.
diff --git a/phpshe/.DS_Store b/phpshe/.DS_Store
diff --git a/phpshe/1.1/.DS_Store b/phpshe/1.1/.DS_Store
diff --git a/phpshe/1.1/README.md b/phpshe/1.1/README.md
@@ -0,0 +1,23 @@
+## 启动环境
+
+```
+docker-compose build
+docker-compose up -d
+```
+
+phpshe v1.1系统重装漏洞
+
+## 0x01 getshell
+直接访问http://127.0.0.1/install
+
+在安装时，在数据表前缀写入：');phpinfo();
+![](README/5C9E7C83-C177-411D-AAAA-3523AC17B55E.png)
+
+
+看一下config.php
+
+![](README/4D7D62E2-B41D-489C-97FB-A04DFF70C545.png)
+
+![](README/495F968C-5003-488D-9B8C-47C4B5557C35.png)
+
+
diff --git a/phpshe/1.1/README/495F968C-5003-488D-9B8C-47C4B5557C35.png b/phpshe/1.1/README/495F968C-5003-488D-9B8C-47C4B5557C35.png
diff --git a/phpshe/1.1/README/4D7D62E2-B41D-489C-97FB-A04DFF70C545.png b/phpshe/1.1/README/4D7D62E2-B41D-489C-97FB-A04DFF70C545.png
diff --git a/phpshe/1.1/README/5C9E7C83-C177-411D-AAAA-3523AC17B55E.png b/phpshe/1.1/README/5C9E7C83-C177-411D-AAAA-3523AC17B55E.png
diff --git a/phpshe/1.1/docker-compose.yml b/phpshe/1.1/docker-compose.yml
@@ -0,0 +1,20 @@
+version: '2'
+services:
+  php5-app:
+    build: ./php-fpm
+    image: s1r1u5/phpshe:1.1
+    restart: always
+    links: 
+        - mysql_phpshe:db
+    ports:
+        - 80:80
+
+    depends_on:
+        - mysql_phpshe
+
+  mysql_phpshe:
+    build: ./mysql
+    image: s1r1u5/mysql_phpshe:1.1
+    environment:
+      MYSQL_ROOT_PASSWORD: "shadow"
+
diff --git a/phpshe/1.1/mysql/Dockerfile b/phpshe/1.1/mysql/Dockerfile
@@ -0,0 +1,11 @@
+FROM mysql:5.7
+
+MAINTAINER s1riu5 <[email protected]> 
+
+ENV AUTO_RUN_DIR /docker-entrypoint-initdb.d
+
+ENV INSTALL_DB_SQL schema.sql
+
+COPY ./$INSTALL_DB_SQL $AUTO_RUN_DIR/
+
+RUN chmod a+x $AUTO_RUN_DIR/$INSTALL_DB_SQL
diff --git a/phpshe/1.1/mysql/schema.sql b/phpshe/1.1/mysql/schema.sql
diff --git a/phpshe/1.1/php-fpm/.DS_Store b/phpshe/1.1/php-fpm/.DS_Store
diff --git a/phpshe/1.1/php-fpm/Dockerfile b/phpshe/1.1/php-fpm/Dockerfile
@@ -0,0 +1,13 @@
+FROM php:5.6-apache
+
+MAINTAINER s1riu5<[email protected]>
+
+
+
+COPY src/ /var/www/html
+
+
+RUN set -x \ 
+    && chmod -R 777 /var/www/html \
+    && a2enmod rewrite \
+    && docker-php-ext-install mysql mysqli 
diff --git a/phpshe/1.1/php-fpm/src/.DS_Store b/phpshe/1.1/php-fpm/src/.DS_Store
diff --git a/phpshe/1.1/php-fpm/src/.htaccess b/phpshe/1.1/php-fpm/src/.htaccess
@@ -0,0 +1,7 @@
+<IfModule mod_rewrite.c>
+RewriteEngine on
+RewriteCond %{REQUEST_FILENAME} !-f
+RewriteCond %{REQUEST_FILENAME} !-d
+RewriteCond $1 !^(.*\.php|data|hook|include|template|module)
+RewriteRule ^(.*)$ index.php/$1 [L]
+</IfModule>
diff --git a/phpshe/1.1/php-fpm/src/.idea/misc.xml b/phpshe/1.1/php-fpm/src/.idea/misc.xml
diff --git a/phpshe/1.1/php-fpm/src/.idea/modules.xml b/phpshe/1.1/php-fpm/src/.idea/modules.xml
diff --git a/phpshe/1.1/php-fpm/src/.idea/src.iml b/phpshe/1.1/php-fpm/src/.idea/src.iml
diff --git a/phpshe/1.1/php-fpm/src/.idea/vcs.xml b/phpshe/1.1/php-fpm/src/.idea/vcs.xml
diff --git a/phpshe/1.1/php-fpm/src/.idea/workspace.xml b/phpshe/1.1/php-fpm/src/.idea/workspace.xml
diff --git a/phpshe/1.1/php-fpm/src/admin.php b/phpshe/1.1/php-fpm/src/admin.php
@@ -0,0 +1,52 @@
+<?php
+/**
+ * @copyright   2008-2012 简好技术 <http://www.phpshe.com>
+ * @creatdate   2012-0501 koyshe <[email protected]>
+ */
+include('common.php');
+$adminmenu[] = array(
+	'headnav' => '商品管理',
+	'subnav' => array(
+		array('name' => '商品分类', 'menumark' => 'category', 'url' => 'admin.php?mod=category'),
+		array('name' => '商品列表', 'menumark' => 'product', 'url' => 'admin.php?mod=product&state=1'),
+		array('name' => '商品咨询', 'menumark' => 'ask', 'url' => 'admin.php?mod=ask'),
+		array('name' => '商品评价', 'menumark' => 'comment', 'url' => 'admin.php?mod=comment'),
+		array('name' => '订单列表', 'menumark' => 'order', 'url' => 'admin.php?mod=order')
+	)
+);
+$adminmenu[] = array(
+	'headnav' => '信息管理',
+	'subnav' => array(
+		array('name' => '文章分类', 'menumark' => 'class', 'url' => 'admin.php?mod=class'),
+		array('name' => '文章列表', 'menumark' => 'article', 'url' => 'admin.php?mod=article'),
+		array('name' => '单页列表', 'menumark' => 'page', 'url' => 'admin.php?mod=page')
+	)
+);
+$adminmenu[] = array(
+	'headnav' => '用户管理',
+	'subnav' => array(
+		array('name' => '会员列表', 'menumark' => 'user', 'url' => 'admin.php?mod=user'),
+		array('name' => '管理列表', 'menumark' => 'admin', 'url' => 'admin.php?mod=admin')
+	)
+);
+$adminmenu[] = array(
+	'headnav' => '控制面板',
+	'subnav' => array(
+		array('name' => '基本信息', 'menumark' => 'setting_base', 'url' => 'admin.php?mod=setting&act=base'),
+		array('name' => '支付方式', 'menumark' => 'payway', 'url' => 'admin.php?mod=payway'),
+		array('name' => '缓存管理', 'menumark' => 'cache', 'url' => 'admin.php?mod=cache'),
+		array('name' => '数据安全', 'menumark' => 'db', 'url' => 'admin.php?mod=db'),
+		array('name' => '友情链接', 'menumark' => 'link', 'url' => 'admin.php?mod=link'),
+		array('name' => '广告列表', 'menumark' => 'ad', 'url' => 'admin.php?mod=ad')
+	)
+);
+
+if (!pe_login('admin') && $act != 'login') {
+	pe_goto('admin.php?mod=do&act=login');
+}
+if (pe_login('admin') && ($act == 'login' or $mod == 'index')) {
+	pe_goto('admin.php?mod=order&act=list');
+}
+include("{$pe['path_root']}module/{$module}/{$mod}.php");
+pe_result();
+?>