Hack Forums
why i am receiving this shell error? - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: why i am receiving this shell error? (/showthread.php?tid=4124521)

Pages: Pages 1 2


why i am receiving this shell error? - moe00 - Mar 19, 2014

the thing is the token when i upload shell.php in previous version
they used to put the token in url in the shell file " shell.php.(token in url) and upload it.

but in v. 1.5.5.1.1 u can't name the shell.php.(token) the file can not be uploaded on shell.php


when i uploaded the shell, in upload box a new token appears "shell.php.(token different from link up) so what i am doing is saving it.

next --> copy past the link in image and this is what i get how i can fix this?

[img]http://s10.postimg.org/tmg01y0d5/1111111111111111111.png[/img]
sube fotos


* - Entropyon - Mar 19, 2014

It looks like your shell file is broken. It's outputing php code as html...


* - moe00 - Mar 19, 2014

actually not, i uploaded another shell and same error appear why ?

[img]http://s27.postimg.org/i4h5yc1r7/222222.jpg[/img]
subirimagenes


* - FFHE - Mar 19, 2014

The server isn't executing your php. It's simply treating the file as if it were pure html.


* - SohnGottes - Mar 20, 2014

because it is not saved as php you fucktard. Therefore the server is not executing it as php....
If you had followed my steps from yesterday, you might already have a shell up.....

Is it possible that someone bans this shitface? Every day he opens 3 threads asking for help but doesn't accept any....


* - ℛℛℛoooℛℛℛ - Mar 20, 2014

Lmao ^^ man chillllll

@OP, bro, that ending is screwing your shell up. Try to upload it but include a nullbyte in its extension. Its either that or the server doesnt have PHP installed, which is highly unlikely lol

-Chosen-


* - moe00 - Mar 20, 2014

(Mar 20, 2014 02:30 AM)SohnGottes Wrote:  because it is not saved as php you fucktard. Therefore the server is not executing it as php....
If you had followed my steps from yesterday, you might already have a shell up.....

Is it possible that someone bans this shitface? Every day he opens 3 threads asking for help but doesn't accept any....

you smartass i am uploading it as php but when its uploaded it shows in box shell.php."token appear itself" though i am uploading it as shell.php from desktop

(Mar 19, 2014 08:28 PM)FFHE Wrote:  The server isn't executing your php. It's simply treating the file as if it were pure html.

100% tha's what happening cause all steps done as it should be


* - d1str1ct_9 - Mar 20, 2014

It may be a problem with short tags (<?) not supported...
Try uploading a shell with standard tags only, <?php.


* - moe00 - Mar 20, 2014

(Mar 20, 2014 09:40 AM)d1str1ct_9 Wrote:  It may be a problem with short tags (<?=) not supported...
Try uploading a shell with "normal" tags only, <?php.

well it might be so ,
can you help me finding it bro?


* - d1str1ct_9 - Mar 20, 2014

Try this http://files.xakep.biz/shells/PHP/wso.txt
I didn't check if it's backdoored though...


* - moe00 - Mar 20, 2014

(Mar 20, 2014 09:51 AM)d1str1ct_9 Wrote:  mmm no, i've checked the source code of the wso2.6 shell, and there's just one short tag in the login page, that should not cause any problem, even if the server doesn't support them...
Short tags are not the problem so...

EDIT
Or maybe here <?=$_SERVER['HTTP_HOST']?> php doesn't recognize the first tag and reads the second as a closure tag for the entire script, thus displaying the rest of the code in the html page...
Try this http://files.xakep.biz/shells/PHP/wso.txt
I didn't check if it's backdoored though...

and how i know if its backdoored!
and are you familiar with opencart brother? i mean any way i can upload a shell in other way if u know in opencart


* - d1str1ct_9 - Mar 20, 2014

OK, the problem is not short tags!
Before <?=code?> there's another php tag that closes part of the script, so even if the server did not recognize <?, it would just print <?=$_SERVER['HTTP_HOST']?> on the login page and nothing else...
Can't help you more now! I'm not familiar with opencart.


* - SohnGottes - Mar 20, 2014

(Mar 20, 2014 10:02 AM)moe00 Wrote:  and how i know if its backdoored!
and are you familiar with opencart brother? i mean any way i can upload a shell in other way if u know in opencart

I told you another way..... 😅


* - moe00 - Mar 20, 2014

guys? anyone can update me with something useful please?!


* - SohnGottes - Mar 21, 2014

yes we did, but you don't listen. So go hang yourself or jump out of a window, thank you.