Hack Forums
Ask about upshell admincp bypass waf firewall - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: Ask about upshell admincp bypass waf firewall (/showthread.php?tid=6055767)

Ask about upshell admincp bypass waf firewall - vira - Mar 9, 2020

Hello

sorry can i have questions ? i was hacked one website via sql injection and logined admincp

but i try upload backdoor there via burpsuite

upload : shell.php.jpg then use burpsuite edit to : shell.php
but i got message blocked like this picture

[Image: K3Y8XyA.png]

can you suggest me ,how to bypass this one ? thank you so much

RE: Ask about upshell admincp bypass waf firewall - Money- - Mar 10, 2020

The validation might be on on server-side. Its checking your file contents , the size instead. So yeah changing the extension won't work.

RE: Ask about upshell admincp bypass waf firewall - vira - Mar 11, 2020

(Mar 10, 2020 11:08 PM)Money- Wrote:  The validation might be on on server-side. Its checking your file contents , the size instead. So yeah changing the extension won't work.

hi

thank for your reply

yeath , i know like that

so can you suggest me ? some way to bypass this one ?

thank you

RE: Ask about upshell admincp bypass waf firewall - Money- - Mar 11, 2020

(Mar 11, 2020 10:18 AM)vira Wrote:  hi

thank for your reply

yeath , i know like that

so can you suggest me ? some way to bypass this one ?

thank you

Your php shell starts with <?php right?

try changing to this <?=

See if it works.

Its just a simple bypass to see whether the back-end checks for starting line with <?php

RE: Ask about upshell admincp bypass waf firewall - vira - Mar 12, 2020

(Mar 11, 2020 10:24 AM)Money- Wrote:  Your php shell starts with <?php right?

try changing to this <?=

See if it works.

Its just a simple bypass to see whether the back-end checks for starting line with <?php


hi bro

i just online today

thank for your suggest so much

but i try test, its still not work :( , the site victim show ip blocked :(

could you please instruction me , some way better ? :(
thank you