[SIM-3498275]

Through password cracking, I got this website admin user/password. I have uploaded remote shell by using upload file in Posting a new thread feature.
However, under mod_security and/or .htaccess file, the shells could not be run. It shows 403 Forbidden when I try to access the shells.

What I have tried:
1/ Uploaded shell
2/ Uploaded modified .htaccess
.....
so much more, but still could not get it worked.

May you want to take a look at it? Would you have any ideas about getting shell run on it?

anhasaigon[dot]com/admin

admin|123456

Thank you!

[Meterpreter]

I'd say its the permissions of the shell file on the server. You need to change it to allow public view I believe.

[SIM-3498275]

I'd say its the permissions of the shell file on the server. You need to change it to allow public view I believe.

Thank you for your reply. However, I don't think I can get to the upper folder on the website. I can't also change folder permission.
The only thing I am able to do on this website is uploading shell files.

[alqtri]

password is change :(



.

.