How to upload your PHP shell through Tamper Data an Firefox Add-on

How to upload your PHP shell through Tamper Data an Firefox Add-on - Printable Version

+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.ly/Forum-Website-Server-Hacking)
+--- Thread: How to upload your PHP shell through Tamper Data an Firefox Add-on (/Thread-How-to-upload-your-PHP-shell-through-Tamper-Data-an-Firefox-Add-on)

Pages: 1 2 3 4 5

How to upload your PHP shell through Tamper Data an Firefox Add-on - Shad0w Warr10r - 02-15-2013

Many times you get login of a website, but you are unable to upload your PHP shell !
Today i'll show you how to upload your PHP shell through Tamper Data an Firefox Add-on

Install Tamper Data firefox add-on:
Download Tamper Data here
Now Install it and Restart Firefox

Rename shell:
Note: You have to rename you .php shell to .jpg to bypass the website's security
To upload a shell, of-course you needed a upload option in login page or anywhere !

Demo:
As an example i'll take - http://freead1.net/post-free-ad-to-USA-42

It is a free classified ads posting website, so i got a upload option there !
Find your upload option click on browse, locate you .jpg shell and select it !

[Image: 43506463.png]

Now click on Tools in Firefox Menu bar and Select Tamper Data, Tamper Data plugin will open in a new window !

[Image: 53666832.png]

Before Clicking on Upload button click on "Start Tamper" in Tamper Data window..
Note: Before Clicking on "Start Tamper" close every extra tab you have opened.. If you want this tutorial to be open... Just open it in another browser

Now click on upload button !

After clicking on upload button "Tamper with request?" window will appear !
Click on "Tamper" button

[Image: 57130154.png]

After a click on "Tamper" you will see "Tamper Popup"
In Tamper Popup Window, Copy "POST_DATA" text in Notepad

[Image: 22787820.jpg]

After Copying it to Notepad... "Find yourshell.jpg" and rename it to .php.

[Image: 36323600.png]

Now copy Notepad's text back to "POST_DATA" field..and click OK
It will Upload the shell as .php and you can execute it easily !
Find your .php shell & do whatever you wanted with that website
that's all !

Thank you for reading..
Note: Website Taken as example is patched by the webmaster !

RE: How to upload your PHP shell through Tamper Data an Firefox Add-on - Ex094 - 02-15-2013

Now that's a tutorial, Nice share

RE: How to upload your PHP shell through Tamper Data an Firefox Add-on - The Alchemist - 02-15-2013

Nice!! You might wanna add the cause of this vulnerability.

RE: How to upload your PHP shell through Tamper Data an Firefox Add-on - soldi3r - 02-16-2013

hey man... i tried it 2 websites but it didn't work for me. when i paste notepad's text back and hit Ok button same error comes up as we upload directly.. Sad

RE: How to upload your PHP shell through Tamper Data an Firefox Add-on - Shad0w Warr10r - 02-16-2013

(02-16-2013, 10:40 AM)soldi3r Wrote: hey man... i tried it 2 websites but it didn't work for me. when i paste notepad's text back and hit Ok button same error comes up as we upload directly..

i think you have not read the Tut. carefully

RE: How to upload your PHP shell through Tamper Data an Firefox Add-on - soldi3r - 02-16-2013

(02-16-2013, 12:18 PM)Wild Hacker Wrote:
(02-16-2013, 10:40 AM)soldi3r Wrote: hey man... i tried it 2 websites but it didn't work for me. when i paste notepad's text back and hit Ok button same error comes up as we upload directly..

i think you have not read the Tut. carefully

man i don't think that i missed something. I read it again but didn't find anything that i skipped 1st time. But it's not working on the website login.. Sad

RE: How to upload your PHP shell through Tamper Data an Firefox Add-on - crazydude - 04-12-2013

Nice tutorial man... i have uploaded shell to some website, but its name is changed and it's extension is converted to .jpg is their any trick to execute this script...

RE: How to upload your PHP shell through Tamper Data an Firefox Add-on - MrGeek - 05-09-2013

They are not so working nowadays Smile

Thanks