+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: Wha tutorial should I follow if I'd like to get download PHP files from a website? (/showthread.php?tid=5687460)
Wha tutorial should I follow if I'd like to get download PHP files from a website? - xCaptainNutz - Aug 5, 2017
Wha tutorial should I follow if I'd like to get download PHP files from a website?
* - Charger - Aug 5, 2017
You can't unless you find an RFI vuln or login to the file manager.
* - xCaptainNutz - Aug 5, 2017
(Aug 5, 2017 04:19 PM)Charger Wrote: You can't unless you find an RFI vuln or login to the file manager.
Any tut?
* - webdev77 - Aug 5, 2017
(Aug 5, 2017 04:26 PM)xCaptainNutz Wrote: Any tut?
That's not something you can just follow a tutorial and guarantee results for. Take 2 minutes and google search it. You will find several thousand pages with helpful information on the topics mentioned.
* - xCaptainNutz - Aug 5, 2017
(Aug 5, 2017 04:28 PM)webdev77 Wrote: That's not something you can just follow a tutorial and guarantee results for. Take 2 minutes and google search it. You will find several thousand pages with helpful information on the topics mentioned.
I have googled a bit and understood it's an injection of a shell/php script into the url where the url expects a page.
I assume this isn't possible when for instance the page expects an ID
for example:
website.com/search?uid=837 right?
The ID is then forwarded to an SQL command.
* - webdev77 - Aug 5, 2017
(Aug 5, 2017 04:31 PM)xCaptainNutz Wrote: I have googled a bit and understood it's an injection of a shell/php script into the url where the url expects a page.
I assume this isn't possible when for instance the page expects an ID
for example:
website.com/search?uid=837 right?
The ID is then forwarded to an SQL command.
Get/post requests are generally filtered by the website backend to prevent malicious injections. Your goal is to find a mistake in the filtering process that allows a malicious request to get through and perform the intended command.
* - xCaptainNutz - Aug 5, 2017
(Aug 5, 2017 04:39 PM)webdev77 Wrote: Get/post requests are generally filtered by the website backend to prevent malicious injections. Your goal is to find a mistake in the filtering process that allows a malicious request to get through and perform the intended command.
What method would you prefer, hacking into the file manager or this?