(Jan 25, 2010 06:47 AM)chroniccommand Wrote: thanks for all of these even though i can never find sites vulnerable to shells anymore lol
actually you dont have to use it with RFI exploits only, you can SQL inject in to the website then upload a shell using admin credentials, SQL injection is for knowing user/pass...and knowing user/pass can give you access to upload files to the server...thats how it goes :D



