Hack Forums
XSS in SWF UPLOAD: How to use it to upload shell? please help! - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: XSS in SWF UPLOAD: How to use it to upload shell? please help! (/showthread.php?tid=3318878)



XSS in SWF UPLOAD: How to use it to upload shell? please help! - wh1t3ang3l - Mar 10, 2013

hello. As this guy wrote in this article https://nealpoole.com/blog/2012/05/xss-and-csrf-via-swf-applets-swfupload-plupload/

is it possible to hack into the wordpress site? I setup a local wordpress installation and I want to start practicing hacking, how can I perform hack?

Some how I managed to create an environment like this demo:
http://demo.swfupload.org/v220/swfupload/swfupload.swf?movieName=%22]%29;}catch%28e%29{}if%28!self.a%29self.a=!alert%281%29;//

when clicked on any part of the page, a new popup appears to select the file. I selected the shell.php file but it's not uploading! What's wrong? help me with this, I'm new at hacking and I want to learn more. 🤩


Anyone? please reply me, this community is great and I want to learn more.


* - II WoWoX II - Aug 14, 2013

as I am also looking for a solution to this