+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: website blind sql (/showthread.php?tid=5786577)
website blind sql - blackcoder00 - Jan 18, 2018
i was into a site vulnerable sql Blind i have dump the User name and the Password then i have find the CP i wanna know how i can upload my shell if the uploader don't support php file ? only JPG,PNG extention is there a solution i can bypass this problem?
RE: website blind sql - [BLANK] - Jan 19, 2018
This can normally be done by modifying the name of the shell name. For instance if I was going to generate a new weevely shell but I know .php would be flagged I would save the file as "backdoor.jpg.php" because a lot of filters will just see the .jpg and let it upload.
RE: website blind sql - blackcoder00 - Jan 20, 2018
(Jan 19, 2018 02:10 PM)EasyGhost Wrote: This can normally be done by modifying the name of the shell name. For instance if I was going to generate a new weevely shell but I know .php would be flagged I would save the file as "backdoor.jpg.php" because a lot of filters will just see the .jpg and let it upload.
yeah i know Ghost but the really problem is in this threads can you read it for me pls : https://hackforums.net/showthread.php?tid=5787564
RE: website blind sql - SnoWHAX - Jan 21, 2018
Pm me user I can help you bypass the upload restrictions 🤝