[Niggz]

[img]http://i.minus.com/ieq6viOQ6szdE.gif[/img]

Step 1:
Start off by selecting one of the following dorks and entering it into google or any other web browser.

Code

inurl:upload.php?file= ext:php
inurl:upload?filename= ext:php
inurl:upload.aspx?file= ext:php
inurl:action=upload?file= ext:php

Step 2:
Once you find a website you will see something like this:
Spoiler (Click to View)[img]http://s21.postimg.org/dfnzxxqzr/image.jpg[/img]
You should then upload either a shell or an image to the website by selecting it, then pressing the upload button.

Step 3:
Once you have uploaded your file (shell) the site should be defaced and to your liking.

Credits to Keeper for the dorks.

[Ascendon]

What if the website has a filter?

You didn't explain how to bypass it.

[Legеnd]

What if the website has a filter?

You didn't explain how to bypass it.

Because he doesn't know how to bypass it.
He steals threads and posts them as his own.
inb4googleshowtobypassandupdatesthreadwithoutcredits

[Sʜᴀᴅᴏᴡ Rᴇᴀʟᴍ]

This is the dumbest thread I have ever read. I have seen 1000000's of dorks like this and you just say put in your shell

[outlaw]

There's a lot wrong with this thread.

First of all, you aren't even describe why this works, I doubt you even know yourself. Secondly, what if the upload file has filters? Which most do. Thirdly, your dorks make no sense, especially this one:

Code

inurl:upload.aspx?file= ext:php

Here you're telling Google to basically search for the file "upload.aspx" with the extention .php - How the fuck do you expect that to work? This entire thread is a fail. Start reading OP, don't make tutorials on something you don't know!

EDIT: That dork managed to find a shell that someone has uploaded and I'll explain why:

Here is the FULL URL that was found:

Code

http://www.ghfour.com/admin/app/webroot/img/product/Jawa.php?jiko=chmodjiko=shell&action=edit&chdir=/var/www/vhosts/ghfour.com/httpdocs/admin/app/webroot/js/fckeditor/editor/filemanager/connectors/aspx/&file=upload.aspx

See, if you look here. It found the "Jawa.php" file due to your ext:php and then managed to execute the shells file editor on the file "upload.aspx".

[Sʜᴀᴅᴏᴡ Rᴇᴀʟᴍ]

There's a lot wrong with this thread.

First of all, you aren't even describe why this works, I doubt you even know yourself. Secondly, what if the upload file has filters? Which most do. Thirdly, your dorks make no sense, especially this one:

Code

inurl:upload.aspx?file= ext:php

Here you're telling Google to basically search for the file "upload.aspx" with the extention .php - How the fuck do you expect that to work? This entire thread is a fail. Start reading OP, don't make tutorials on something you don't know!

EDIT: That dork managed to find a shell that someone has uploaded and I'll explain why:

Here is the FULL URL that was found:

Code

http://www.ghfour.com/admin/app/webroot/img/product/Jawa.php?jiko=chmodjiko=shell&action=edit&chdir=/var/www/vhosts/ghfour.com/httpdocs/admin/app/webroot/js/fckeditor/editor/filemanager/connectors/aspx/&file=upload.aspx

See, if you look here. It found the "Jawa.php" file due to your ext:php and then managed to execute the shells file editor on the file "upload.aspx".

That asp with php extension reminded me where he got it from

https://hackforums.net/showthread.php?tid=3184197

[outlaw]

That asp with php extension reminded me where he got it from

https://hackforums.net/showthread.php?tid=3184197

Haha, great, so not only he doesn't have a clue what he's talking about, he practically stole the thread from someone who does.

[Sʜᴀᴅᴏᴡ Rᴇᴀʟᴍ]

Haha, great, so not only he doesn't have a clue what he's talking about, he practically stole the thread from someone who does.

He also did the same thing for his deletion one lol

inurl:"delete.php?file=" ext:php
inurl:"delete?filename=" ext:php
inurl:"delete.aspx?file=" ext:php
inurl:"action=delete?file=" ext:php

[outlaw]

He also did the same thing for his deletion one lol

inurl:"delete.php?file=" ext:php
inurl:"delete?filename=" ext:php
inurl:"delete.aspx?file=" ext:php
inurl:"action=delete?file=" ext:php

Yeah I saw. The dork will NOT work though. It's a useless dork.

[Ascendon]

He just basically told us how to upload a file..

We aren't as useless as you are sl0w..

[Sʜᴀᴅᴏᴡ Rᴇᴀʟᴍ]

Seriously, Legion need to step up their shit before they keep having retards like this idiot and others putting random shit that nobody cares about up here

[outlaw]

Seriously, Legion need to step up their shit before they keep having retards like this idiot and others putting random shit that nobody cares about up here

Right? Like when Starfall was in Legion. Now it's just full of idiots wanting to be anonmus.

[Sʜᴀᴅᴏᴡ Rᴇᴀʟᴍ]

Right? Like when Starfall was in Legion. Now it's just full of idiots wanting to be anonmus.

Starfall got closed with all that root stuff. I remember the legion skype chat when I was in it and the Skype SE thing was going around and starfall used to either get hacked and then have his whole contact list added to the chat or he just did it for lulz

Long live aush0k

[Legеnd]

Starfall got closed with all that root stuff. I remember the legion skype chat when I was in it and the Skype SE thing was going around and starfall used to either get hacked and then have his whole contact list added to the chat or he just did it for lulz

Long live aush0k

Aush0k is a jew, get over it.
long live yolo

[Niggz]

What if the website has a filter?

You didn't explain how to bypass it.

Because I haven't looked into bypassing the filters. I rarely use this because there are a lot of other things you can use to deface a website.

---

There's a lot wrong with this thread.

First of all, you aren't even describe why this works, I doubt you even know yourself. Secondly, what if the upload file has filters? Which most do. Thirdly, your dorks make no sense, especially this one:

Code

inurl:upload.aspx?file= ext:php

Here you're telling Google to basically search for the file "upload.aspx" with the extention .php - How the fuck do you expect that to work? This entire thread is a fail. Start reading OP, don't make tutorials on something you don't know!

EDIT: That dork managed to find a shell that someone has uploaded and I'll explain why:

Here is the FULL URL that was found:

Code

http://www.ghfour.com/admin/app/webroot/img/product/Jawa.php?jiko=chmodjiko=shell&action=edit&chdir=/var/www/vhosts/ghfour.com/httpdocs/admin/app/webroot/js/fckeditor/editor/filemanager/connectors/aspx/&file=upload.aspx

See, if you look here. It found the "Jawa.php" file due to your ext:php and then managed to execute the shells file editor on the file "upload.aspx".

If I didn't understand it, than how could I find a website not used in other tutorials?
I don't need to explain how dorks work. But I will.
Google searches the web for the specific text that you put. So if you put "inurl:Pro Skid Down" then google would find all websites who's url matches the criteria.
Works for a lot more browsers than google.

---

Right? Like when Starfall was in Legion. Now it's just full of idiots wanting to be anonmus.

Way to spell anonymous correctly.
Calling me an idiot?