+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Anyway to locate your shell on the site? (/showthread.php?tid=2641364)
Anyway to locate your shell on the site? - mod_security - Jul 2, 2012
Any of you know of a way to locate where your shell or file has been uploaded to on the server if you don't see it in the source of the site.
Im having trouble trying to locate where my shell was uploaded to since they use a like file.php&test=1 to be able to download the file from there site.
* - Kurdistan007 - Jul 2, 2012
Please send me a private message including the link. I'll look at it for you.
* - Hooded Robin - Jul 2, 2012
I like to use Burp Suite to spider the site with special attention to any authentication forms (my shell has a login). I made a reference on the general process for spidering and mapping a site with Burp here: http://kaoticcreations.blogspot.com/2012/01/burp-suite-part-v-mapping-target.html Make a change to the authentication to prompt for user interaction and you will get a pop-up window for every authentication form that it comes across....
* - Osuka - Jul 2, 2012
i need to know this also, i uploaded the upload script file but when i upload my shell,
idk where it went lol, PM Me if you find out how to locate it, thanks
* - Hooded Robin - Jul 2, 2012
You were able to upload an uploader and find it but when you upload your shell through it, it disappears. Is that correct? if so what shell are you using? It is probably being snagged and deleted by AV of some type if you can find your uploader but not your shell. Advice would be to try another shell or encode your current one and give it another try. Also try uploading something normal like a photo or text file with regex in it you can search for and see if you have an easier time finding that way.
* - Osuka - Jul 2, 2012
(Jul 2, 2012 07:06 PM)Hooded Robin Wrote: You were able to upload an uploader and find it but when you upload your shell through it, it disappears. Is that correct? if so what shell are you using? It is probably being snagged and deleted by AV of some type if you can find your uploader but not your shell. Advice would be to try another shell or encode your current one and give it another try. Also try uploading something normal like a photo or text file with regex in it you can search for and see if you have an easier time finding that way.
Hey can you help me, yes i made the uploader on there but only
because its a "html" and not a "php", when i upload "php" files and
find the link, it just downloads the file lol
* - memory - Jul 3, 2012
I have the same exact problem too haha.
Interesting. Anyone know anything please PM me too.
* - mod_security - Jul 4, 2012
I was wondering if there is someone who could make a script that would like auto run its self and maybe like go to your website and then you could track from the like referrals links maybe you could track that wya but i wouldn't know how to do that but thats what i was thinking is make a script that will either email you where the file is or something.