How to upload Shell in Joomla via Admin Panel?

How to upload Shell in Joomla via Admin Panel? - Printable Version

+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.ly/Forum-Website-Server-Hacking)
+--- Thread: How to upload Shell in Joomla via Admin Panel? (/Thread-How-to-upload-Shell-in-Joomla-via-Admin-Panel)

Pages: 1 2 3

RE: How to upload Shell in Joomla via Admin Panel? - h3r0 - 08-20-2014

(08-20-2014, 04:02 PM)Wild Hacker Wrote:
(08-20-2014, 03:57 PM)Singularity Wrote: So you already have access to the panel, or are you trying to use some vulnerability to upload the shell?
I'm trying to understand your situation more so that I could possibly help. It sounds to me like you already have access to the server?

Im in the admin panel ..
i have admin login details..

Admin panel is very vague...

Are you in...
- Joomla's site admin panel
- Host admin panel (Like dreamhost's domain manager or godaddy's)
- Site admin panel (Like cPanel)

RE: How to upload Shell in Joomla via Admin Panel? - h3r0 - 08-20-2014

(08-20-2014, 04:02 PM)Wild Hacker Wrote:
(08-20-2014, 03:57 PM)Singularity Wrote: So you already have access to the panel, or are you trying to use some vulnerability to upload the shell?
I'm trying to understand your situation more so that I could possibly help. It sounds to me like you already have access to the server?

Im in the admin panel ..
i have admin login details..

Admin panel is very vague...

Are you in...
- Joomla's site admin panel
- Host admin panel (Like dreamhost's domain manager or godaddy's)
- Site admin panel (Like cPanel)

RE: How to upload Shell in Joomla via Admin Panel? - Shad0w Warr10r - 08-21-2014

(08-20-2014, 08:06 PM)h3r0 Wrote:
(08-20-2014, 04:02 PM)Wild Hacker Wrote:
(08-20-2014, 03:57 PM)Singularity Wrote: So you already have access to the panel, or are you trying to use some vulnerability to upload the shell?
I'm trying to understand your situation more so that I could possibly help. It sounds to me like you already have access to the server?

Im in the admin panel ..
i have admin login details..

Admin panel is very vague...

Are you in...
- Joomla's site admin panel
- Host admin panel (Like dreamhost's domain manager or godaddy's)
- Site admin panel (Like cPanel)

Im in this joomla admin panel :Confused:

[Image: image17.jpg]

RE: How to upload Shell in Joomla via Admin Panel? - Shad0w Warr10r - 08-21-2014

(08-20-2014, 08:06 PM)h3r0 Wrote:
(08-20-2014, 04:02 PM)Wild Hacker Wrote:
(08-20-2014, 03:57 PM)Singularity Wrote: So you already have access to the panel, or are you trying to use some vulnerability to upload the shell?
I'm trying to understand your situation more so that I could possibly help. It sounds to me like you already have access to the server?

Im in the admin panel ..
i have admin login details..

Admin panel is very vague...

Are you in...
- Joomla's site admin panel
- Host admin panel (Like dreamhost's domain manager or godaddy's)
- Site admin panel (Like cPanel)

Im in this joomla admin panel :Confused:

[Image: image17.jpg]

RE: How to upload Shell in Joomla via Admin Panel? - h3r0 - 08-21-2014

(08-21-2014, 04:26 AM)Wild Hacker Wrote:
(08-20-2014, 08:06 PM)h3r0 Wrote:
(08-20-2014, 04:02 PM)Wild Hacker Wrote:
(08-20-2014, 03:57 PM)Singularity Wrote: So you already have access to the panel, or are you trying to use some vulnerability to upload the shell?
I'm trying to understand your situation more so that I could possibly help. It sounds to me like you already have access to the server?

Im in the admin panel ..
i have admin login details..

Admin panel is very vague...

Are you in...
- Joomla's site admin panel
- Host admin panel (Like dreamhost's domain manager or godaddy's)
- Site admin panel (Like cPanel)

Im in this joomla admin panel :Confused:

Go through the template manager and edit a template's php file to download a PHPShell.

Here is a version 3 joomla guide.
http://docs.joomla.org/J3.x:Modifying_a_Joomla!_Template

It might help.

Here is an example of how to download a file using php.

http://www.binarytides.com/download-a-file-using-curl-in-php/

RE: How to upload Shell in Joomla via Admin Panel? - h3r0 - 08-21-2014

(08-21-2014, 04:26 AM)Wild Hacker Wrote:
(08-20-2014, 08:06 PM)h3r0 Wrote:
(08-20-2014, 04:02 PM)Wild Hacker Wrote:
(08-20-2014, 03:57 PM)Singularity Wrote: So you already have access to the panel, or are you trying to use some vulnerability to upload the shell?
I'm trying to understand your situation more so that I could possibly help. It sounds to me like you already have access to the server?

Im in the admin panel ..
i have admin login details..

Admin panel is very vague...

Are you in...
- Joomla's site admin panel
- Host admin panel (Like dreamhost's domain manager or godaddy's)
- Site admin panel (Like cPanel)

Im in this joomla admin panel :Confused:

RE: How to upload Shell in Joomla via Admin Panel? - Shad0w Warr10r - 08-21-2014

(08-21-2014, 04:33 AM)h3r0 Wrote:
(08-21-2014, 04:26 AM)Wild Hacker Wrote:
(08-20-2014, 08:06 PM)h3r0 Wrote:
(08-20-2014, 04:02 PM)Wild Hacker Wrote:
(08-20-2014, 03:57 PM)Singularity Wrote: So you already have access to the panel, or are you trying to use some vulnerability to upload the shell?
I'm trying to understand your situation more so that I could possibly help. It sounds to me like you already have access to the server?

Im in the admin panel ..
i have admin login details..

Admin panel is very vague...

Are you in...
- Joomla's site admin panel
- Host admin panel (Like dreamhost's domain manager or godaddy's)
- Site admin panel (Like cPanel)

Im in this joomla admin panel :Confused:

Go through the template manager and edit a template's php file to download a PHPShell.

Here is a version 3 joomla guide.
http://docs.joomla.org/J3.x:Modifying_a_Joomla!_Template

It might help.

Here is an example of how to download a file using php.

http://www.binarytides.com/download-a-file-using-curl-in-php/

see when i tried to edit template...
[Image: 10576861_692690384143092_1107240445_o.jp...3a491704a6]

RE: How to upload Shell in Joomla via Admin Panel? - Shad0w Warr10r - 08-21-2014

(08-21-2014, 04:33 AM)h3r0 Wrote:
(08-21-2014, 04:26 AM)Wild Hacker Wrote:
(08-20-2014, 08:06 PM)h3r0 Wrote:
(08-20-2014, 04:02 PM)Wild Hacker Wrote:
(08-20-2014, 03:57 PM)Singularity Wrote: So you already have access to the panel, or are you trying to use some vulnerability to upload the shell?
I'm trying to understand your situation more so that I could possibly help. It sounds to me like you already have access to the server?

Im in the admin panel ..
i have admin login details..

Admin panel is very vague...

Are you in...
- Joomla's site admin panel
- Host admin panel (Like dreamhost's domain manager or godaddy's)
- Site admin panel (Like cPanel)

Im in this joomla admin panel :Confused:

Go through the template manager and edit a template's php file to download a PHPShell.

Here is a version 3 joomla guide.
http://docs.joomla.org/J3.x:Modifying_a_Joomla!_Template

It might help.

Here is an example of how to download a file using php.

http://www.binarytides.com/download-a-file-using-curl-in-php/

see when i tried to edit template...
[Image: 10576861_692690384143092_1107240445_o.jp...3a491704a6]

RE: How to upload Shell in Joomla via Admin Panel? - Singularity_mybb_import13102 - 08-21-2014

What permissions does the file have? Try editing the file after changing the perms to 755 and then moving it to 655 if it's successful, if not, see if you can update the joomla version (assuming it's outdated)