Showing posts with label upload shell. Show all posts
Showing posts with label upload shell. Show all posts

Dork : www.topronet.com ,All Rights Reserved.Any question, please email me cqq1978@Gmail.com
and 
JFoler 1.0 A jsp based web folder management tool by Steven Cee
(its not a Particular dork, please try to modify it and if you sucessfull modified then leave new dork in comment)
Just select any site from search results and now upload your deface page or shell
shell upload : for shell uploading rename your asp shell (shell.asp) to shell.jsp then upload it, you can try .php too, every Extension is allowed but in some sites you can't excute php and asp shell
Path : depends on website




Get access to all the readable directories on the server and their possible database.
Steps to get access.
Go to your shell
Upload this zip file "Jumping.zip"
Download it from here
After that just unzip our zip file by giving the following command
unzip jumping.zip
Once it done and unzip command is executed you will see like this
This show all the files included in our zip file
 Now go and open our jumping folder. if you have uploaded it in public_html 
then the link would be www.site.com/jumping and you would see the below image

 Now open barc0de mini.php its an shell. once you open it. it look like this


Enter pass hackers
Now open jump.php it will take some time to load as it scans for all readable sites on server.
Once it done it will come up will all readable sites on server like this

 All the above are directly readable. Now will run scanner.php
it will read for config file in those dir once done it shows us like this
Now lets take one of them and put it in our barc0de mini.php and see if it shows us the database
And boom we have the access to its database config
i have included two more files sql.php & domain.php. this will help you to get website name and get in to database..cracker.php tries to crack ftp+ cpanel...
Updated barc0de.php
This shell is the newer version of barc0de mini.php
it is all in one shell. it has jump, scanner, cracker, and checker included in one shell
Download it from here barc0de.php