hacking contest

hacking exploits security forum
hacking
compliance articles
upgrade backup exec
information security consultant

extreme
I have found a perfect (and only one that is) webserver which has PHP support, doesn't need installations, etc. Perfect for your boxes, or other uses..
BUT...
It has some some features that needs to be removed or added, in order for it to become a valuable tool in in your hacking collection...
It was done in Delphi, so if anyone who knows Delphi can modify these things, it would be perfect...

1. To remove all GUI stuff.. Startup screen, configuration interface, and tray icon.. So the tool can be run silently and only place where it would be visible would be in Task Manager..
2. This program reads it's configuration from config.ini file... But what I would like to implement is support for %windir% variable.. So, I can write something like this in config.ini:
web_root_location: "%windir%\system32\"

Something like that..
inferno-gwc
lets check this out, i don't know anything about Delphi but i can ask a friend to do it.
winxpdll
Try Abyss web server. Abyss webserver has PHP support, CGI support, doesn't need installation (if you dont`t want this smile.gif ), etc...
I cracked (partially) the exe, don`t show tray icon. Started with hidden32.exe is invisible.
I can`t post the exe file, so...
Some lines from config file:
CODE

ServerRoot C:\Windows\System32\
Port 80
Path htdocs
..................
Version 1.1.6
login none
password none
cgiinterpreter "c:\php4\php.exe" php
cgipath /
cgienv REDIRECT_STATUS=200
indexfile index.php
cgiinterpreter "c:\perl\bin\perl.exe" pl cgi
indexfile index.pl
indexfile index.cgi
zola
I download your work but hadn't the time to look at it. Could you elaborate more about its features? Just ask.
da_cash
here's the other webserver (in VB) which supports PHP and some other scripting languages..


CODE
Several webservers here support CGI. but this is the ONLY one that supports FORM POSTING (get/POST), REDIRECTION!, FILE UPLOADING!, COOKIES!, RESUME DOWNLOADS!, STREAMING SUPPORT! SERVER SIDE INCLUDES! SENDMAIL! PERL! PHP! ASP!. Plus the usual webserver features (multiple silmultanious connections, images, flash, pdf, audio, movies, directory browsing (with simple filters), html files, 404 pages, pause feature, javascript!, etc) If a website works on apache (or anything less), 95% of the time it'll work on this without any modifications! (no .htaccess, sendmail in diff place, diff filesystem, some ASP missing) OVER 200kb OF CODE (ASP, PHP, PERL, HTML, SSI, JS, VB6, C++) is included. and things like mx lookup (email without smtp server) are included. (a vote would be nice...) NOTE: set runperl = false if you dont have perl! (same for php)



CODE
hxxp://www.planet-source-code.com/vb/scripts/ShowCode.asp?txtCodeId=34274&lngWId=1
extreme
I have tryed about 30 minimum of these installation-free webservers, and none of them was appropriate for hacking biz.. Among them, I remember I tryed Abyss as well, but I cannot remember why I didn't fancy it.. I will try one more time though..
With this webserver I posted, advantages are:
I tested compiled version and it works great.. (some webserver just don't interpratate PHP well, dunno why).. Then, it is easy to configure.. Reading settings frmo one file.. Small in size... And it has IP Ban mechanisam, so you can probably ban local IPs from seeing your webpage, and therefore knowing it is there. You can custoomise port as well..
..BUt the best thing is that is the only open source program of this kind I as able to find. There are other sources, but don't support PHP..
I see one member has posted some new VB webserver source which I haven't seen before, so I will check this one too..
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

 
Invision Power Board © 2001-2005 Invision Power Services, Inc.