(11-25-2016, 12:44 PM)TechSaavy Wrote: Anti-malware on the server? Are you sure the shell is actually being uploaded? Tried a different shell? Tried at a different time, maybe the admin is on, deleting it? These are some of the things I can think of from the top of my head.

(11-25-2016, 01:27 PM)Mr.Kurd Wrote:

(11-25-2016, 12:44 PM)TechSaavy Wrote: Anti-malware on the server? Are you sure the shell is actually being uploaded? Tried a different shell? Tried at a different time, maybe the admin is on, deleting it? These are some of the things I can think of from the top of my head.

Yes I have weevely back door on the server >>>> All time I upload Local root the server will delete it >>> So What I do??

(11-25-2016, 05:32 PM)meow Wrote:

(11-25-2016, 01:27 PM)Mr.Kurd Wrote:

(11-25-2016, 12:44 PM)TechSaavy Wrote: Anti-malware on the server? Are you sure the shell is actually being uploaded? Tried a different shell? Tried at a different time, maybe the admin is on, deleting it? These are some of the things I can think of from the top of my head.

Yes I have weevely back door on the server >>>> All time I upload Local root the server will delete it >>> So What I do??

1. if you're getting your local root exploit from a public source, remove things like comments and modify the code to get rid of any obvious signs that it's a local root exploit
2a. if PHP sessions are being stored in /tmp, upload it in whatever folder that is and name it something like "sess_kdkou4r5blub4f1sti2kelpcss"
2b. if PHP sessions aren't being stored in /tmp, upload it to somewhere in /tmp anyways and name it something like "fs01" or "bash"
3. if neither of step 2 worked, repeat step 1 and find any home directory you can write to and upload it there, again giving it a name like fs01 or bash or .bashrc
4. If none of this worked, repeat step 1, obfuscate the file (via a tool or doing it yourself), then repeat steps 2 and if 2 doesn't work with obfuscation try 3 with obfuscation

This is just something I thought of off the top of my head. There are probably plenty of ways to get around whatever's deleting your file.

(11-25-2016, 07:06 PM)Mr.Kurd Wrote: thank you...
I didn't understand first step?
After doing local root explit I have to do another step?
If yes , so what I do if I couldn't upload local root, because the server deleting it...
And second you means shell?

(11-26-2016, 01:55 AM)TechSaavy Wrote: Not to look negative or something, but I would recommend on reading up on obfuscation a bit. What he meat is to remove comments and modify the source code a bit, so the file signature changes, and Anti-Viruses won't be able to spot them as easily.

(11-26-2016, 03:33 AM)meow Wrote:

(11-25-2016, 07:06 PM)Mr.Kurd Wrote: thank you...
I didn't understand first step?
After doing local root explit I have to do another step?
If yes , so what I do if I couldn't upload local root, because the server deleting it...
And second you means shell?

Please just use google translate or whatever to translate what I said to your language so that I don't have to repeat myself 8 times.

(11-26-2016, 01:55 AM)TechSaavy Wrote: Not to look negative or something, but I would recommend on reading up on obfuscation a bit. What he meat is to remove comments and modify the source code a bit, so the file signature changes, and Anti-Viruses won't be able to spot them as easily.

Obfuscation and what I mentioned in the first step are two different things. I'm pretty sure he's just confused because English is far from his first language.