Using a Shell to deface a Website.
Requirments:
Basic Knowledge of Web-Development.
And an average intelligence.
Tutorial Difficulty rating:Normal.
Ok so,Using a Shell to deface a Website is really easy, We just need to upload a Shell(A PHP File) to a server.
So lets start.
First download the Shell:c99 Shell
Password:zonta
*Your Anti Virus will say its a Virus but its not. But anyways USE AT YOUR OWN RISK*
Now lets find a victim. Go to google and search(Without the qoutes):"inurl:upload.php".
You will see now some Website,select one.
Now after we've found our victim we can try uploading our shell.
But the problem is that most of the Websites will let you upload images only. So what we do is renaming the shell to "c99.php.gif".
Now try to upload it, and after you uploaded it, go to it(Most of the websites will lead you to it automatically).
Now if you see the Shell page you can start messing aroud with it,You can Delete/Edit Files.
But if you see the PHP Script it means that it didnt work.
You can try another thing and it is to rename c99.php to "c99.php%00.gif"
And when you will upload it the server will ignore the ".gif" because %00 = null. But i am not sure it will work.
If the both things didn't work,it means that it can't work on this server. So the only thing you can do is to find another victim.
I hope this tutorial helpd you. :]
If you need help you can contact me anytime PM/MSN(orik990@hotmail.com).
-Zebra
Basic Knowledge of Web-Development.
And an average intelligence.
Tutorial Difficulty rating:Normal.
Ok so,Using a Shell to deface a Website is really easy, We just need to upload a Shell(A PHP File) to a server.
So lets start.
First download the Shell:c99 Shell
Password:zonta
*Your Anti Virus will say its a Virus but its not. But anyways USE AT YOUR OWN RISK*
Now lets find a victim. Go to google and search(Without the qoutes):"inurl:upload.php".
You will see now some Website,select one.
Now after we've found our victim we can try uploading our shell.
But the problem is that most of the Websites will let you upload images only. So what we do is renaming the shell to "c99.php.gif".
Now try to upload it, and after you uploaded it, go to it(Most of the websites will lead you to it automatically).
Now if you see the Shell page you can start messing aroud with it,You can Delete/Edit Files.
But if you see the PHP Script it means that it didnt work.
You can try another thing and it is to rename c99.php to "c99.php%00.gif"
And when you will upload it the server will ignore the ".gif" because %00 = null. But i am not sure it will work.
If the both things didn't work,it means that it can't work on this server. So the only thing you can do is to find another victim.
I hope this tutorial helpd you. :]
If you need help you can contact me anytime PM/MSN(orik990@hotmail.com).
-Zebra
Originally Posted by PoP_KiLLaH
