+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: Remote Shell has been uploaded, but can't run (403 Forbidden) (/showthread.php?tid=5574319)
Remote Shell has been uploaded, but can't run (403 Forbidden) - SIM-3498275 - Mar 13, 2017
Through password cracking, I got this website admin user/password. I have uploaded remote shell by using upload file in Posting a new thread feature.
However, under mod_security and/or .htaccess file, the shells could not be run. It shows 403 Forbidden when I try to access the shells.
What I have tried:
1/ Uploaded shell
2/ Uploaded modified .htaccess
.....
so much more, but still could not get it worked.
May you want to take a look at it? Would you have any ideas about getting shell run on it?
anhasaigon[dot]com/admin
admin|123456
Thank you!
* - Meterpreter - Mar 13, 2017
I'd say its the permissions of the shell file on the server. You need to change it to allow public view I believe.
* - SIM-3498275 - Mar 13, 2017
(Mar 13, 2017 04:06 PM)Dafty™ Wrote: I'd say its the permissions of the shell file on the server. You need to change it to allow public view I believe.
Thank you for your reply. However, I don't think I can get to the upper folder on the website. I can't also change folder permission.
The only thing I am able to do on this website is uploading shell files.
* - alqtri - Mar 16, 2017
password is change :(
.
.