+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Team Digi7al's Help Thread (/showthread.php?tid=2611056)
Team Digi7al's Help Thread - | Solo | - Jun 22, 2012
![[Image: YIrTK.png]](https://i.imgur.com/YIrTK.png)
* - spectrum10 - Jun 22, 2012
Nice work logic^^ Open for business!! rofl
* - HaxOr❤ - Jun 22, 2012
Do i count in? :3
I mean im online almost everyday..
* - | Solo | - Jun 22, 2012
Of course you can help :) I welcome anyone that wants to
* - spectrum10 - Jun 22, 2012
Glad to have you aboard Hax0r! Really HQ member that i know for sure likes to help others XD
* - Ichi - Jun 22, 2012
Anyone who has anything helpful to add, please do so. We'd love to see what you have to say and offer. Hopefully this takes off and helps plenty of members
* - dawnofwar - Jun 22, 2012
These guy's don't know shit.
I asked Sp3ctrum10 for help one time, and all he did was laugh at me and call me a n00b. Fucking pathetic, the only help you guys can offer is being dumb.
JK XD
But in all seriousness, nice of you to do this, good to see ya helpin' out the community. Will definitely post here if I have issues.
* - TheW3bster - Jun 22, 2012
I might have some stuff for you guys later. Trying to exploit this damn XSS!
* - | Solo | - Jun 22, 2012
(Jun 22, 2012 09:32 PM)TheW3bster Wrote: I might have some stuff for you guys later. Trying to exploit this damn XSS!
just let us know if you need help. We have very good xss skills haha
* - sl4sh3rz - Jun 22, 2012
the blackhat hacker ^_^,,...nice thread
* - spectrum10 - Jun 22, 2012
(Jun 22, 2012 08:45 PM)dawnofwar Wrote: These guy's don't know shit.
I asked Sp3ctrum10 for help one time, and all he did was laugh at me and call me a n00b. Fucking pathetic, the only help you guys can offer is being dumb.
JK XD
But in all seriousness, nice of you to do this, good to see ya helpin' out the community. Will definitely post here if I have issues.
Really now? I have helped you out numerous of times and thats what you say XD Thanks for the comment downofwar lol Made my night!
* - Th3PonyWizard - Jun 23, 2012
Yeah, I'm here to help as well. Don't worry guys, I don't bite :3
* - oH4i Hx0r - Jun 23, 2012
Hey there!
Problem: I cant upload a shell through a FI attack (I dunno if its RFI or LFI).
URL:http://www.inforlandia.pt/index.php?m=../../../../etc/passwd%00
Timeframe: 1 Week
Additional Info: This isnt actually very important, but i would like to know how to upload a shell in this website's case.
Thanks a lot!
* - | Solo | - Jun 23, 2012
(Jun 23, 2012 05:25 AM)oH4i Hx0r Wrote: Hey there!
Problem: I cant upload a shell through a FI attack (I dunno if its RFI or LFI).
URL:http://www.inforlandia.pt/index.php?m=../../../../etc/passwd%00
Timeframe: 1 Week
Additional Info: This isnt actually very important, but i would like to know how to upload a shell in this website's case.
Thanks a lot!
Ok so what you have is an LFI. What you need to do first is see if proc/self/environ is present. In this case its not. So using tamper data to wget a shell isnt possible.
* - oH4i Hx0r - Jun 23, 2012
(Jun 23, 2012 08:09 AM)iTz LOGIC Wrote: Ok so what you have is an LFI. What you need to do first is see if proc/self/environ is present. In this case its not. So using tamper data to wget a shell isnt possible.
So, there is no other way to put a shell on that server?