+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.ly/Forum-Website-Server-Hacking)
+--- Thread: I UPLOADED A SHELL AND I CANT USE IT (/Thread-I-UPLOADED-A-SHELL-AND-I-CANT-USE-IT)
I UPLOADED A SHELL AND I CANT USE IT - indiaboy - 11-11-2016
please sinisters , i am able to upload my shell in.php.jpg but while trying to use it the server is not allowing me and giving file not found error....
please how can i use d shell...
RE: I UPLOADED A SHELL AND I CANT USE IT - D@rk TruTH - 11-11-2016
use live http headers or tamper data to edit the name of file.....
RE: I UPLOADED A SHELL AND I CANT USE IT - Null() - 11-11-2016
(11-11-2016, 12:33 PM)indiaboy Wrote: please sinisters , i am able to upload my shell in.php.jpg but while trying to use it the server is not allowing me and giving file not found error....
please how can i use d shell...
First things first, uploading a shell is not considered much of an achievement and are skiddy as fuck. Secondly, there's plenty of tutorials online on how to achieve it, so I don't see the point of this thread.
RE: I UPLOADED A SHELL AND I CANT USE IT - alatif - 12-10-2016
seems like the server does not allow jpg extensions, try to upload is as php.pjpeg or jpg.php
otherwise use Tamper data or burpsuite to rename it.
RE: I UPLOADED A SHELL AND I CANT USE IT - phyrrus9 - 12-10-2016
Also remember that the shell may not actually be stored as a file. An extremely common way to avoid this vulnerability is to just use blob storage (a "database" for files). The file is not actually stored on the filesystem of the server (and in the case of businesses, isnt even all in one place), so you're not able to navigate to it. This patches any vulnerabilities in the server backend that would lead to execution, at the cost of speed on retrieval.
When blob storage is not used (and most of the time when it is as well), files aren't stored under the same name you uploaded. The cheap way to do this is to use a SHA512 hash of the file as the name, then track the names in a database, or just use tempnam().
Either way, the only time your uploaded shell is going to work is if the server administrators are completely retarded, or you're trying to pwn some middle schooler's web server.