+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: I want to upload a shell to a XenForo site. If someone has detailed knowledge of this (/showthread.php?tid=6288123)
I want to upload a shell to a XenForo site. If someone has detailed knowledge of this - htmlsqlllllllj - Dec 26, 2024
I want to upload a shell to a XenForo site. If someone has detailed knowledge of this, can they explain?
RE: I want to upload a shell to a XenForo site. If someone has detailed knowledge of this - Money- - Dec 26, 2024
What's the attack vector first? You have file upload restrictions or what.
RE: I want to upload a shell to a XenForo site. If someone has detailed knowledge of this - DramaKing - Dec 26, 2024
(Dec 26, 2024 07:48 PM)htmlsqlllllllj Wrote: I want to upload a shell to a XenForo site. If someone has detailed knowledge of this, can they explain?
So like a forum? You can try uploading PHP as an avatar, but I'd consider it a waste of time. Encoding it and all won't help when sites know to only accept specific filetypes.
RE: I want to upload a shell to a XenForo site. If someone has detailed knowledge of this - Omniscient - Dec 28, 2024
You'd have to find a 0day or hope they used an older version that's not updated. You can always keep track of vulns and updates with XF and try to get one past them before they upgrade.
This site might help.
https://www.exploit-db.com/
And here: https://latesthackingnews.com/2024/07/22/multiple-vulnerabilities-found-in-xenforo-internet-forum-solution/
RE: I want to upload a shell to a XenForo site. If someone has detailed knowledge of this - SIM-5604220 - Jan 8, 2025
There is no way to upload php files to xenforo.
There are just another way , and you must have admin rights