[bckslsh]

You can use these for practicing, or writing guides.

To get a shell up, just wget the shellcode and make the output something such as "shell.txt".

http://www.cgibackgrounds.com/Dan.txt is an example. Not shellcode, though.

Code

http://www.glasshouseimages.com/user/login.shtml
http://www.wppionlinecontest.com/user/login.shtml
www.cgibackgrounds.com/user/login.shtml
www.getstock.com/user/login.shtml
www.estostock.com/user/login.shtml
http://www.blendimages.com/user/login.shtml
http://www.pdnthelook.com/user/login.shtml
http://iloveimages.com/user/login.shtml
http://www.win-initiative.com/user/login.shtml (view source to see output)
http://thegatheringsphotocontest.com/user/login.shtml

[RIPPER]

Great tut mate..Keep up the good work...will see how this shit works today

[sl4sh3rz]

i check this thread when im wake up later.xD

[bowhunter]

hey havent been anywhere the computer scene for many years and getting un-rusty since the past year, re-visiting programming knowlege and all. i was still on dial-up the last time i was really into it to give you an idea. im now amazed by the wealth of information/websites available nowadays.

Anyway going to the point. while reading the code is no problem, i have a few questions:

- Why use a php shell? I mean you can run the shell commands from the login/pass fields. is it only because its just easier to do so from the shell or are there additional advantages? (but thanks to ITsecTEam for having one readily available)

- was this vulnerability only available because of the "bin/Cklb"? are these login vulnerabilities still common?

[Suved]

Thanks ๖ۣۜDan for SSI Injection vulnerable sites.

[Phizo]

While this is nice and all; I don't see why this should be posted in the SQL Injection Attacks category as it is irrelevant to SQL injection.

[bckslsh]

While this is nice and all; I don't see why this should be posted in the SQL Injection Attacks category as it is irrelevant to SQL injection.

I know it is irrelevant. This was originally posted in the website and forum hacking section, but got moved..

[BlackRoas]

Thanks ๖ۣۜDan for SSI Injection vulnerable sites I like it

[Zixem]

Thank you ๖ۣۜDan !

~*Zixem 🤝

[fobber]

While this is nice and all; I don't see why this should be posted in the SQL Injection Attacks category as it is irrelevant to SQL injection.

Well. The description to this sub-forum is:
For help and tutorials on SQL injection attacks or other code injection techniques enter this forum.
So it really isn't that wrong, is it?

Thanks for the list, Dan. I'll go practice now! ^.^

[Phizo]

Well. The description to this sub-forum is:
For help and tutorials on SQL injection attacks or other code injection techniques enter this forum.
So it really isn't that wrong, is it?

Thanks for the list, Dan. I'll go practice now! ^.^

I suppose so, it got moved here for a reason after all.

[TheExclusive]

The most of the time <pre><!--#exec cmd="ls -a" --></pre><!--#exec cmd="ls -a" --></pre>
succeed but when i try to inject my shell i fails.

Do you know what i am doing wrong ?

[Th3PonyWizard]

The most of the time <pre><!--#exec cmd="ls -a" --></pre><!--#exec cmd="ls -a" --></pre>
succeed but when i try to inject my shell i fails.

Do you know what i am doing wrong ?

How would anyone know what's you're doing wrong without knowing what are you doing? :\
Syntax?

[P3rF3cT]

can we wget our shell.txt from dropbox also??
Because i am not able to download my shell.txt on any of these websites.

[DirgofCeberus]

Thanks a lot Ðan! .... I learned from your tutorial