+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.ly/Forum-Tutorials)
+--- Thread: [tut] how to setup an xss shell (/Thread-tut-how-to-setup-an-xss-shell)
[tut] how to setup an xss shell - numan_malik999 - 08-05-2011
First Download XSS TUNNEL AND SHELL....
Download XSS TUNNEL AND SHELL from :XSS SHELL & Tunnel....
As it is in rar format so first extract it....
Now we have to upload this shell to a website....
I perfer a free hosting website.....
As the shell is written in ASP so make sure the free hosting website support ASP.....
But before we upload it we have to change a certain things......
So go to the directory where u have extracted the XSS TUNNEL AND SHELL....
Open it.....
Then open the directory named as "XSSShell - v0.6.2"
There is a file named "xssshell.asp"
Open "xssshell.asp" in notepad or wordpad.....
Then go to server config....
Now look for
Code:
http://www.xssshelltest.com:60000/
And replace it with ur own free hosting address.....
It would be like
Code:
http://www.freehostingxxxx.com/[user]/
Done.....
Then open directory named as "admin"....
Then open the file named as "db.asp" in notepad.....
NOw find database config.....
and look for
Code:
C:\XSS Shell\XSSShell-060\db\shell.mdb
And replace
Code:
C:\XSS Shell\XSSShell-060\
with server path.....
To find the server path u have to upload a small asp file(code given below) to ur free hosting website.....
Code:
<%
Response.Write Server.MapPAth(".")
%>
Save this file as whatever.asp and then upload it to the free hosting site.....
Now open the browser and go to up freehosting website and open whatever.asp
The URL will be like
Code:
http://www.freehostingxxxx.com/[user]/whatever.asp
server path will apperar on the screen...
It will look like
Code:
X:\[path]\[user]\
This is the server path replace "C:\XSS Shell\XSSShell-060\" in db.asp with it....
it would be like this
Code:
X:\[path]\[user]\db\shell.mdb
Now the shell is fully configured.....
Bofore we upload it there is a small change yet to be made......
Open the folder "sample_victim"
Look for default.asp and open it in Notepad and search for "http://www.xssshelltest.com:60000/xssshell.asp"
And replace it with ur own free hosting address.....
It would be like
Code:
"http://www.freehostingxxxx.com/[user]/xssshell.asp"
Now open any ftp client and upload every thing from the directory "XSSShell - v0.6.2" to the freehosting website......
Now go to ur free hosting website and open admin
URL will be like
Code:
http://www.freehostingxxxx.com/[user]/admin
It will ask for password....
By default password is "w00t".....
U can change the password.....
the eassiest way to do it is to open "db.asp" in notepad and find(ctrl + F) "w00t".....
Replace it with ur own password......
After entering the password the shell will appear on the screen......
Now for checking that the shell is working correctly or not...
open a new tab and enter the following URL
Code:
http://www.freehostingxxxx.com/[user]/sample_victim
Without closing the tab went back to the tab in which u heve opened the shell....
U will see an ip adress is appeard in the victim table....
If it is so then the shell is working properly....
To cofirm it u can also try the options given on the left side of the shell page....
Bingo u have successfully configured a xssshell......
[NOTE:
This tutorial is written by PCA.
This tutorial is written assuming that u already know about XSS.
This tutorial is written assuming that u have downloaded the XSS TUNNEL AND SHELL 4m the link i have given.
DOWNLOAD SHELL FROM HERE