[Bikodino]

hello all

What is the way to bypass the control of extensions, for a shell in php?

I mean ...... the method .gif


thanks:wink:

[1llusion]

What do you mean?
You mean the method where you can upload a PHP file by changing its extension?

[Bikodino]

What do you mean?
You mean the method where you can upload a PHP file by changing its extension?

does not work as you say.

if you change the extension appears: "The image can not be displayed because it contains errors."

while using "tamperdata" does not allow you upload, because changing from. php.gif a. php system does not accept the extension.

works well for all sites.

there must be a way to bypass. help me!

[1llusion]

does not work as you say.

if you change the extension appears: "The image can not be displayed because it contains errors."

while using "tamperdata" does not allow you upload, because changing from. php.gif a. php system does not accept the extension.

works well for all sites.

there must be a way to bypass. help me!

I was asking, not telling.
Have you tried "binding" the php file to the end of the picture?

[Bikodino]

does not work as you say.

if you change the extension appears: "The image can not be displayed because it contains errors."

while using "tamperdata" does not allow you upload, because changing from. php.gif a. php system does not accept the extension.

works well for all sites.

there must be a way to bypass. help me!

I was asking, not telling.
Have you tried "binding" the php file to the end of the picture?

nothing.
does not work. He says: "The image can not be displayed because it contains errors."

Can anyone help me?

It does so with all sites.:headbash:

[1llusion]

does not work as you say.

if you change the extension appears: "The image can not be displayed because it contains errors."

while using "tamperdata" does not allow you upload, because changing from. php.gif a. php system does not accept the extension.

works well for all sites.

there must be a way to bypass. help me!

I was asking, not telling.
Have you tried "binding" the php file to the end of the picture?

nothing.
does not work. He says: "The image can not be displayed because it contains errors."

Can anyone help me?

It does so with all sites.:headbash:

Probably there is a protection against this kind attack? It is quite known and there are pretty simple ways of checking the files.

[Bikodino]

does not work as you say.

if you change the extension appears: "The image can not be displayed because it contains errors."

while using "tamperdata" does not allow you upload, because changing from. php.gif a. php system does not accept the extension.

works well for all sites.

there must be a way to bypass. help me!

you're right.
But the sites are defaced.
So a way to bypass it should be!
I was asking, not telling.
Have you tried "binding" the php file to the end of the picture?

nothing.
does not work. He says: "The image can not be displayed because it contains errors."

Can anyone help me?

It does so with all sites.:headbash:

Probably there is a protection against this kind attack? It is quite known and there are pretty simple ways of checking the files.

---

you're right.
But the sites are defaced.
So a way to bypass it should be!

[1llusion]

you're right.
But the sites are defaced.
So a way to bypass it should be!

You know there isn't just one hacking method. Think out of the box, that is the way to do it.

Go ahead and try my hacking challenge: http://www.hackcommunity.com/Thread-Cont...MeIfYouCan

and you will see what I mean

[Bikodino]

you're right.
But the sites are defaced.
So a way to bypass it should be!

You know there isn't just one hacking method. Think out of the box, that is the way to do it.

Go ahead and try my hacking challenge: http://www.hackcommunity.com/Thread-Cont...MeIfYouCan

and you will see what I mean

1llusion, if I do not learn the first to upload and bypass a shell in php, How can I participate in this challenge?
It 'possible that nobody knows?

[1llusion]

you're right.
But the sites are defaced.
So a way to bypass it should be!

You know there isn't just one hacking method. Think out of the box, that is the way to do it.

Go ahead and try my hacking challenge: http://www.hackcommunity.com/Thread-Cont...MeIfYouCan

and you will see what I mean

1llusion, if I do not learn the first to upload and bypass a shell in php, How can I participate in this challenge?
It 'possible that nobody knows?

Because this challenge is not about uploading. It doesn't require any technical skills.
2 members found the correct solution. As I say, it is just a matter of thinking out of the box.