How to Upload a Shell Using Admin Panel

I explain how to upload a Shell to the Admin Panel of a website and bypassing file types. Shell can be downloaded from www.zarabyte.com if you need it along with the backdoor I used to upload my shell.

Category:

Howto & Style

Tags:

• shell
• c99
• hacking
• root
• sql injection
• hacker
• admin
• zarabyte
• phiberoptics

[baznian]

Why would you need shell when you have admin panel access in the first place ? :/

[PhiberOptics]

@baznian If you have no clue then I think you need to learn more about hacking then because you have limited access in a admin control panel with a Shell you got full access to everything on the server you can basically "root" most servers which is called "owning the box" Once you have "Owned the box" its like having a Dedicated server pretty much.

[PhiberOptics]

@baznian Just depends on the site some websites that can be SQL Injected normally have a Admin Panel that allows uploading of images and other files. You just have to take your time and go through the admin area looking for a place to upload it at some websites have a file ext limit for the formats of images only you have to rename the file till it works some websites now days if there smart the script that uploads the files checks and makes sure that the file doesn't have a *.php in it.

[zlatariu485]

@PhiberOptics please, give me a website for upload shell

[HabSource]

Is it possible I can get the file uploading scripts? Thank you.

[baznian]

@PhiberOptics Yeah i know that, but to "own" some site , you need admin panel access first, and where to get that ?? Is there a way to find vulnerable image uploaders by google dorks or something like that?

[Andymanse8]

CCBluster CC.

No U, U lil Bluster!