[zer0pwn]

Hey there. This tutorial is pretty basic, and really short. I will explain it though.

Okay, so first off. People upload their shell to a site right? Maybe a c99 Shell, GNYShell, etc. Most people are stupid enough, to keep their shell's in plain-view. So we can use google, to search for them. Most of the shells aren't password protected either.

Ever used "inurl:" on google before? If you've used XSS or SQLi, you should know a lot about inurl.

Inurl searches for whatever you ask IN THE URL. Example:

inurl:LULZ

That will try to find all the URLs that have "LULZ" in them. So we are going to use Inurl, to find people's shells that have already been uploaded.

Simply put this in google:

Code

inurl:GNYShell.php

Code

inurl:shell.php

Code

inurl:c99.php

Code

inurl:c99shell.php

Code

c100.php

Code

c100shell.php

Code

jackall.php

You can use any of those dorks to find the shells. Once you're in the shell, you can upload your own Files, deface the index, or root the server. All shells are different.

Now, this method is very Skiddish. I've never personally used it, but this morning the idea came to my head so I tried it, and it worked. I don't reccomend using this method, but if you really feel like defacing, or letting out some personal anger on a site, go ahead.

Enjoy :)

[Jac0yyx]

It seems kinda obvious to me but this is indeed pretty useful when you want to hack a random site without spending any time finding a vulnerability, file upload, etc...

[TheLawy]

soo how would I use this? I want to take down some websties

[NarrowDioxin]

Google has always been a hacker's best friend always. Believe it or not

[Jac0yyx]

Google has always been a hacker's best friend always. Believe it or not

Agreed, dorks are SO useful.
Really, you can use them to automatically SQL inject websites(though that takes the fun out of it, right?)

[sn.root]

nice share , I've tried with these dorks , Google don't search the updated shells, all are just hackers' fake shell .

[Alienguy]

:Hehe:
lol
I never thought of this.
Nice share.
But many are password protected .

[HaxOr❤]

Yea well you will get sites 100 years old because they were raped via that shell so no use of them.

---

Better search for keywords in shell like GNY shell

intitle:Social working - Google Search

[Airon]

Dont find shelled site's ?
only shit about shell's .

---

Oke now i found some site's :D
thanks man!

[TheDuBsTepDealer]

Haha lol, me too i cant find a shelled page.