Spoof Call and Spoof SMS set any caller ◆ ZexoCard: no-KYC virtual crypto cards ◆ Traffic service & campaign optimization ◆ Private Crypter - Unique Private Stubs ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Grayhat • Purple Team • Hybrid Security Website Hacking › [Shelling] Joomla - Noob friendly

New Reply 

[Shelling] Joomla - Noob friendly
HaxOr❤
HaxOr❤ Offline
INTRA
***
HF Ub3r
Posts:
4,952
Threads:
209
Credibility:
000
Popularity:
955
βytes:
β 100.5
Game XP:
0
Apr 15, 2012 03:22 AM
Hi all!
Today i'm going to show you how to upload shell in Joomla software.

You will need:

1) Admin access to Joomla panel
2) Any php shell

Okay,so go to Extensions -> Template Manager

[img]http://img41.imageshack.us/img41/4539/regiondm.png[/img]

Once there you can edit any template as you wish.
Pick one by clicking the checkbox and then click on the name of the template.

[img]http://img28.imageshack.us/img28/3690/regionif.png[/img]

In there you can see if you can edit that template you choose.

[img]http://img803.imageshack.us/img803/3526/regioneg.png[/img]

If its writeable click "Edit HTML" if not choose another one.

[img]http://img688.imageshack.us/img688/4400/regionrb.png[/img]

As you can see,it's editable so paste your shell in there.

[img]http://img51.imageshack.us/img51/6673/regionyo.png[/img]

Now you just need to access your shell (You have path of the template)

[img]http://img194.imageshack.us/img194/3671/regionw.png[/img]

[img]http://img84.imageshack.us/img84/8726/regiono.png[/img]

That would conclude our short tutorial...
If you liked it i will make one for WordPress,just let me know.
o-cobra-o
o-cobra-o Offline
[user@HF:]
*
Registered
Posts:
155
Threads:
10
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Apr 15, 2012 03:38 AM
Wow
nice tutorial thank you for shearing
HaxOr❤
HaxOr❤ Offline
INTRA
***
HF Ub3r
Posts:
4,952
Threads:
209
Credibility:
000
Popularity:
955
βytes:
β 100.5
Game XP:
0
Apr 15, 2012 04:13 AM
Thanks for the support o-cobra-o! 🤝
Sw1x
Guest
 
Apr 15, 2012 04:15 AM
Nice neat little tutorial, the hard part is to get the admin access. ^^
The Ion
The Ion Away
[bin@HF:]
***
HF l33t
Posts:
1,074
Threads:
66
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Apr 15, 2012 04:21 AM
Now haxor Powers his shit once again with a Epic tutorial good job dude
RIPPER
RIPPER Offline
Hit me up for help with maths
Posts:
1,481
Threads:
116
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Apr 15, 2012 04:55 AM
Nice one...We'd surely be happy if u showed us the various joomla exploits here and made one abt wordpress too
turbofreak2010
turbofreak2010 Offline
[user@HF:]
*
Registered
Posts:
199
Threads:
30
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Apr 15, 2012 05:11 AM
Great tutorial, helped me a lot.
Thanks.
HeXagone
Guest
 
Apr 15, 2012 06:18 AM
Great work my friend :)

HeXagone

Spoiler (Click to View)
Николай
Николай Offline
французский чле
***
HF Ub3r
Posts:
578
Threads:
19
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Apr 15, 2012 08:35 AM (This post was last modified: Apr 15, 2012 08:36 AM by Николай.)
Great tutorial ;).

Some questions :

With this method you gain access at all of website hosted on Joomla server ? Or just server who host Joomla's website ?
HeXagone
Guest
 
Apr 15, 2012 08:36 AM
(Apr 15, 2012 08:35 AM)Николай Wrote:  Great tutorial ;).

Some questions :

With this method you gain access at all of website hosted on Joolma server ? Or just server who host Joomla's website ?

when you upload the shell you can Root the server or symlink that will help you access on all the websites hosted on the same server
Hooded Robin
Hooded Robin Offline
[email protected]
***
HF Ub3r
Posts:
2,272
Threads:
104
Credibility:
000
Popularity:
77
βytes:
β 0
Game XP:
0
Apr 15, 2012 09:01 AM
Nice write up Haxor, love the pretty pics :p

conan_1
Guest
 
Apr 15, 2012 09:15 AM
Always great shiit from Haxor.
I was asking myself if I we can still find a good members here in HF, but now I changed my mind. :D
Николай
Николай Offline
французский чле
***
HF Ub3r
Posts:
578
Threads:
19
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Apr 15, 2012 09:25 AM
(Apr 15, 2012 08:36 AM)HeXagone Wrote:  when you upload the shell you can Root the server or symlink that will help you access on all the websites hosted on the same server

Ok thanks for your answer I thought too symlinking.
HaxOr❤
HaxOr❤ Offline
INTRA
***
HF Ub3r
Posts:
4,952
Threads:
209
Credibility:
000
Popularity:
955
βytes:
β 100.5
Game XP:
0
Apr 18, 2012 06:13 AM
(Apr 15, 2012 09:15 AM)conan_1 Wrote:  Always great shiit from Haxor.
I was asking myself if I we can still find a good members here in HF, but now I changed my mind. :D

Thanks all.
And there is some good and HQ members around here... ;)
b001ean
b001ean Offline
Diffusion Expert
**
HF l33t
Posts:
429
Threads:
54
Credibility:
000
Popularity:
0
βytes:
β 16.5
Game XP:
0
Dec 16, 2012 03:41 AM
Very nice tut man! Your tutorials are always great!! Thanks for sharing.
Specialist in temporal coherence, visual permanence, synthetic authenticity. Character persistence, photorealistic synthesis, motion that defies its computational origin.
True/False logic evolved into something more... dimensional.
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by spirited_wolf™Aug 8, 2021 12:47 AM 11 1,094 Aug 8, 2021 12:47 AM
Last Post: savetree
by SeeUNov 26, 2020 05:28 PM 0 136 Nov 26, 2020 05:28 PM
Last Post: SeeU
by VipVinceApr 4, 2017 02:17 PM 32 3,506 Apr 4, 2017 02:17 PM
Last Post: Couldu