[Gee4rce]

changing the extension like shell.php.jpg but aint working..

My question is what should i do x) in order to upload the shell as an image.
Thnx for u time.

- Are you shure you have tried all the different kinds of Syntax? (Like: sh.php%00.jpg, sh.php#.jpg, sh.php;.jpg, etc.)
- Also tried adding Nullbytes?
- sometimes changing the data "type" value (...while intercepting http Requests) from 'image/jpg' to 'text/html' could do the trick,
well atleast this worked for me in a 2 cases, but seems to be rare out there...

Also... are you atleast able to locate the path and can you browse to your uploaded stuff directly (full/real- path)?
If so, you could try out what other stuff may slip through onto the server, it could offer you some other, new possibilites!
And another chance could be by adding php commands into the Imagebody or the EXIF Data fields for example,
but this is rather rare and mostly limited to specific circumstances which need to be "True" for that to work.

EDIT: i seem to have overseen a few posts here lol, didn't see Page 2 and that people replied allready on that so sorry guys 🤝

Greets, Gee.

[Cathal]

Check number 3:
http://hackers2devnull.blogspot.co.uk/20...d.html?m=1 (credits to cheatson)

Of course you'll need to bypass file extensions as well if applicable.

You always seem to have a good link handy, thanks. I believe I've read this before, but forgot (evidently).

[marymae]

I am trying to gain access to a site by getting into another site on the same server then rooting
But, the site is protected by cloudflare so I can't see its real server ip so I can't look at the real sites on the server
I've dried many cloudflare resolvers, none of them are giving me it's ip
Any ideas?
all hypothetical of course

[BeggFoMercy]

I am trying to gain access to a site by getting into another site on the same server then rooting
But, the site is protected by cloudflare so I can't see its real server ip so I can't look at the real sites on the server
I've dried many cloudflare resolvers, none of them are giving me it's ip
Any ideas?
all hypothetical of course

I'm sure this would be able to help you .
Note: You have to signup to see the page content .
http://balcan-underground.net/security-t...-t230.html

[Mx.]

Or search from a signup page, that would send you an email / like a newletter, checkup the ip they send the mail from.

[marymae]

I'll try it out, hopefully it will work
thanks

[Ginster]

Man you guys are ancient now! Hope this all works out.

[Th3PonyWizard]

Yeah, stuff is working out slowly. Still trying to get our challenge website's up and running.

[sasha95]

does it seem a good job you hold me adjourned please??

[No‌‌‌‌‌‌]

Hope this thread breaks the last thread's record...

[Anli]

Well here is my problem, with direct download vulnerability i just dumped configuration file where was stored, mysql information (username/password/database), than i tried to access phpmyadmin but here is a problem, there are using cookie authentication if someone don't know about it ( http://wiki.phpmyadmin.net/pma/Auth_types ) Well my question is that, if someone know any way to bypass it.

http://s27.postimg.org/cvy7yriwz/phpmyadmin.png

p.s. of course, i tried google, used even all browser, but still the same.

[hoer-]

Well here is my problem, with direct download vulnerability i just dumped configuration file where was stored, mysql information (username/password/database), than i tried to access phpmyadmin but here is a problem, there are using cookie authentication if someone don't know about it ( http://wiki.phpmyadmin.net/pma/Auth_types ) Well my question is that, if someone know any way to bypass it.

http://s27.postimg.org/cvy7yriwz/phpmyadmin.png

p.s. of course, i tried google, used even all browser, but still the same.

If port 3306 you can connect via cli

Code

mysql --host=site.com  --password=pass

[Anli]

If port 3306 you can connect via cli

Code

mysql --host=site.com  --password=pass

tried that but server does not accepting connection from my IP! even it's not accepting connection from same ip, just with another range.

[Th3PonyWizard]

Ain't no bump bucking harder than mine.

[hoer-]

tried that but server does not accepting connection from my IP! even it's not accepting connection from same ip, just with another range.

Then it might only accept connections locally, can you 'into outfile' ? if you can and have some path disclosure you can shell it that way. 👹