Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Shell not found 404

I upload an uploader but when I try to upload shell
upload shell successfully but when I want to show I face not found 404

any solution to bypass
Well you would first need to know where it's getting uploaded...
(May 6, 2021 11:29 AM)Th3Gh0st_Ma Wrote:  I upload an uploader but when I try to upload shell
upload shell successfully but when I want to show I face not found 404

any solution to bypass

Do you know the directory it’s uploading into? If you’re uploading to an image directory using a null byte just open an image on the site using the direct link and replace the filename and extension with your shell.
I know that you are forever my brother
(May 6, 2021 01:31 PM)Stetsed Wrote:  Well you would first need to know where it's getting uploaded...

do you mean the path?

(May 6, 2021 01:57 PM)Tjm Wrote:  Do you know the directory it’s uploading into? If you’re uploading to an image directory using a null byte just open an image on the site using the direct link and replace the filename and extension with your shell.

I already upload a PHP uploader it works successfully
I upload the uploader using tamper data
but the uploader is for upload security bypass because it contains a Gif; in the header
(May 6, 2021 11:29 AM)Th3Gh0st_Ma Wrote:  I upload an uploader but when I try to upload shell
upload shell successfully but when I want to show I face not found 404

any solution to bypass

Most of decent webhost detect webshell by detecting the shellExec() commands, the files is instantly deleted on their server once uploaded.
For instance namecheap therefore I suggest you to use encrypted hand-made shell (avoir c99, Xai Syndacte or whatever is already blacklisted) or tools such as adminer.
An other information, if you try to upload a webshell on your own server, it'll also be auto*deleted.

xx
Don't hesitate to reach out for security services
(May 14, 2021 07:06 PM)Dolla$ Wrote:  Most of decent webhost detect webshell by detecting the shellExec() commands, the files is instantly deleted on their server once uploaded.
For instance namecheap therefore I suggest you to use encrypted hand-made shell (avoir c99, Xai Syndacte or whatever is already blacklisted) or tools such as adminer.
An other information, if you try to upload a webshell on your own server, it'll also be auto*deleted.

xx

okay thanks for your valuable info I will try to encrypt the shell
maybe you are getting blocked by the firewall so the script you are using doesnt handle it.
FooF on the RooF


Possibly Related Threads...
Thread / Author Replies Views Last Post
by 0-DayzAug 16, 2018 03:12 AM 6 194 Aug 16, 2018 03:12 AM
Last Post: Mr_knowledge
by ptlsolarcompanyJul 18, 2018 08:31 PM 2 123 Jul 18, 2018 08:31 PM
Last Post: ptlsolarcompany
by poision-v1p3RApr 18, 2017 12:35 AM 37 2,388 Apr 18, 2017 12:35 AM
Last Post: Malicious Intent