+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Hacking Tools (https://sinister.li/Forum-Hacking-Tools)
+--- Thread: 3 Free web Shells (/Thread-3-Free-web-Shells)
3 Free web Shells - The_Joker - 03-26-2013
Here's some goodies for today: shelled websites.
http://dev4.hcsdesignit.com/dunsboroughducks/images/sop.php
http://e-okeana.ru/sop.php
http://peerscommunication.com/sop.php
Please leave the shells open for others to use, and if you root one of these servers and pm the credentials to me I can give you 2 more shells.
Have fun guys!
RE: 3 Free web Shells - Charon - 03-26-2013
None of these works, I think they've got deleted.
RE: 3 Free web Shells - The_Joker - 03-27-2013
Ones I posted got deleted: here's three more:
http://jminsurancebrokers.za.net//sop.php
http://www.bobsburgersweb.com/cacheds/sop.php
http://costabrava.deimand.com/images/sop.php
Same reward in effect.
RE: 3 Free web Shells - Nefarious - 03-27-2013
(03-27-2013, 02:00 PM)The_Joker Wrote: http://www.bobsburgersweb.com/cacheds/sop.phpI feel like I've heard this name before, what was the site before it went under maintenance?
RE: 3 Free web Shells - Sabu - 03-31-2013
(03-27-2013, 02:00 PM)The_Joker Wrote: Ones I posted got deleted: here's three more:
http://jminsurancebrokers.za.net//sop.php
http://www.bobsburgersweb.com/cacheds/sop.php
http://costabrava.deimand.com/images/sop.php
Same reward in effect.
This is the problem with posting things on a public forum where any skid can register.
Just don't do it at all, you gain nothing from it.
If you need help rooting feel free to PM me and I'll do my best to help you out.
RE: 3 Free web Shells - amus3d - 04-02-2013
You should have made the password an auto-decrementing/exscaling AES-256 bit encryption (that rotates every 60 seconds or so) - keeping up with the rotations via a Python script or whatever writing the passwords to a file in /tmp or whatever.
Or, in your web shell script, you should have made it only accessable via Tor. You could do this by resolving the $_SERVER['REMOTE_ADDR'] to a host name and preg_match'ing for 'tor' or just checking the IP with some place that stores Tor's known nodes.
RE: 3 Free web Shells - w00t - 04-03-2013
That's exactly what RSA does for commercial passkeys, assuming you meant rotating passwords and not rotating encryption, as the latter makes no sense.
RE: 3 Free web Shells - amus3d - 04-03-2013
(04-03-2013, 05:50 AM)w00t Wrote: That's exactly what RSA does for commercial passkeys, assuming you meant rotating passwords and not rotating encryption, as the latter makes no sense.
you can use google.
i was not being serious, kid - learn to read please.