[myronganes]

all of the tutorials on this site for defacement and shells, the shell files are all RAR, which I can't use;furthermore, I have searched google and can't find ones for mac. Is it possible to find tools and shells used for defacement on a mac?

[orestis]

Shells --> http://www.ismokeweed.info/shells/

On a MAC you can do manual SQL injection ;)

[myronganes]

Shells --> http://www.ismokeweed.info/shells/

On a MAC you can do manual SQL injection ;)

Thanks man, can you direct me to a guide or something for manual SQL injection? I'm pretty good with SQLI when it comes to extracting information from a site that I need, but dont know defacement commands or how to upload the shell. and then once shell is uploaded what to do from there.

[Bean Dip]

Thanks man, can you direct me to a guide or something for manual SQL injection? I'm pretty good with SQLI when it comes to extracting information from a site that I need, but dont know defacement commands or how to upload the shell. and then once shell is uploaded what to do from there.

Rar Client for mac

For you bra

[myronganes]

Rar Client for mac

For you bra

thanks ! Not sure why I wasn't able to find something like that.

[orestis]

Thanks man, can you direct me to a guide or something for manual SQL injection? I'm pretty good with SQLI when it comes to extracting information from a site that I need, but dont know defacement commands or how to upload the shell. and then once shell is uploaded what to do from there.

Mate, you need to sqli inject a website, get the database ADMIN username & password, login to admin panel and then upload the shell from there ;)

[myronganes]

Mate, you need to sqli inject a website, get the database ADMIN username & password, login to admin panel and then upload the shell from there ;)

can someone clarify exactly what a shell is doing>? I thought uploading a shell was the method when you didn't have admin access and then you would upload shell through site, and 'root' the server /find a backdoor. not exactly sure, im new to all this.

If you had admin access why would you need to upload a shell? is it so that you can access site anytime you want without login or something?

[orestis]

can someone clarify exactly what a shell is doing>? I thought uploading a shell was the method when you didn't have admin access and then you would upload shell through site, and 'root' the server /find a backdoor. not exactly sure, im new to all this.

If you had admin access why would you need to upload a shell? is it so that you can access site anytime you want without login or something?

A shell is something that executes commands and uploads files without any restrictions on a server. It can be used to do malicious jobs such as Root the server, back-connect and such ;)

You must upload the shell via the ADMIN Panel ;)

[Pun]

Check out this website I've defaced, take the deface page and then edit the information according to your needs. http://view-source:http://joomlachat.org if you need anymore help pop me a PM.