Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Upload php shell using Tamper Data :)
- While hacking u must have come along some sites or pages where they ask you to upload shells in just .jpg or some image format and i dont think you must be having any image shell :p . Anyways lets begin. You must have heard of data tampering or Tamper Data? No? Well, i will tell you...
- Tamper Data is a firefox addon which is used to view and modify HTTP/HTTPS headers and post parameters.
- Trace and time http response/requests.
- Security test web applications by modifying POST parameters.
- First of all
- - download tamper data from here: https://addons.mozilla.org/en-us/firefox/addon/tamper-data/ (remember to use Firefox)
- - Install it and restart firefox. (It works with almost all the versions of firefox).
- - Rename your .php shell to .jpg shell. e.g. : if the name of your shell is shell.php, make it shel.php.jpg or shell.php;.jpg shell.php;.jpg%00 (To bypass website's security).
- - find website to upload images
- 1- Locate your shell and place it in the upload box.
- http://tinypic.com/view.php?pic=294gupt&s=6
- 2- Click on tools in firefox menu and select Tamper Data.
- http://tinypic.com/view.php?pic=33p4jt4&s=6
- 3- Wait...Dont click on upload/save button , instead click on Start Tamper in tamper data addon and remember dont open any extra tabs except the uploading page.
- http://i45.tinypic.com/300ds76.jpg
- 4- Now hit the upload button.
- 5- After clicking on upload a window will appear, click on Tamper button.
- http://tinypic.com/view.php?pic=o7vre9&s=6
- 6- Then you will see a tamper popup, copy all of the text of POST_DATA in a notepad. press ctrl+f in notepad and find shell.php.jpg or shell.php;.jpg and delete .jpg :) shell.php
- http://tinypic.com/view.php?pic=2u97bbr&s=6
- http://tinypic.com/view.php?pic=35mie08&s=6
- http://tinypic.com/view.php?pic=sc9oup&s=6
- http://tinypic.com/view.php?pic=ehjjfp&s=6
- 7- Now again copy all the things in notepad and paste it in POST_DATA field and click ok
- http://tinypic.com/view.php?pic=1zv95rs&s=6
- http://tinypic.com/view.php?pic=1iig4w&s=6
- 8- Locate ur pic/shell, What? You are done. your shell will be uploaded in the .php format...Destr0y the website :)
- My fav. php shell :) b374k-2.2.php
- https://anonfiles.com/file/b305605c6c0efc387d723a34c33dc5b9
- Hope you Like it :)
- Please like my page
- https://www.facebook.com/Str1.k3r.gov
Add Comment
Please, Sign In to add comment
