inurl:upload_image.php

Dork: inurl:upload_image.php




Its a false positive.No viruses exist in the form of .php or .txt .

Right click and click edit on the shell.

Find the lines ----> $login = "username here"; //login

On the next line, you must enter the password.
First go here and encrypt your password whatever it is.
On the place where it says "password here" , enter the original password.

And on the next line where it says md5 pass,enter the crypted password.

So basically what you do with shell is upload them to the website and get control over it.Since its a .php file,many sites block it .So click on File>>Save as and save it something like in this list :
Code:
shell.php;.jpg
c100.php%00.jpg
c100.php..jpg
c100.php.jpg%00
c100.php.jpg:;
c100.php.jpg%;
c100.php.jpg;
c100.php.jpg;%00
c100.php.jpg%00:;

So you need to find a place where you can upload an image in a website.It can be anywhere in a site.So do some surfing..


Open a website and you can upload images there..


So once you have entered the admin panel,upload the shell.

Now find the link to the shell.That means,the link that will take you to where the shell is uploaded.

Once you go to that link,a popup will appear asking for username and password.Use the username and password that you used while creating the shell.

CASE 2
Sometimes,simple extension change won't help you to upload the files.
So you need to use a tool called Live HTTP Headers
Install that addon to your firefox and go to the upload section.Upload the shell.Since uploading that file is not possible,you will get an error on trying to go to that page.

First find the line of code in Live Headers where it says,
Code:
filename="c100.php%00.php.jpg


Select this line and click the Button Replay.

Now you need to find the same line on the next coloumn where it shows code of uploaded file.
Find the line and delete the part "%00.jpg"
So now its only c100.php
Now go to shell page and it must take you to the shell screen where the entire files on the site will be listed.
Find main index.php and edit it with your deface page source code, and click save. Thats it