+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.li/Forum-Website-Server-Hacking)
+--- Thread: who can shell mybb admin cp (/Thread-who-can-shell-mybb-admin-cp)
Pages:
1
2
who can shell mybb admin cp - warstrike - 01-26-2015
looking for admin cp shelling guide for 1.6.16 - 1.8.3
RE: who can shell mybb admin cp - Oni - 01-26-2015
I am assuming you want to spawn a shell via the ACP? In which case, I do know a way. I am not sure if it's public knowledge yet, though. Contact me via PM if you're really interested.
RE: who can shell mybb admin cp - blackhatcat - 01-27-2015
It's really easy, why are you acting so special Oni..
RE: who can shell mybb admin cp - Oni - 01-27-2015
(01-27-2015, 01:52 AM)blackhatcat Wrote: It's really easy, why are you acting so special Oni..
Then help him out. The trick I know doesn't work for the site he has in mind. Nothing special.
RE: who can shell mybb admin cp - Yani - 01-27-2015
I think this can be done by editing template files, that's how I did it before.
RE: who can shell mybb admin cp - Eclipse - 01-27-2015
It doesn't sound too hard, but then again, I've never tried. I would presume that all you'd have to do is insert some PHP somewhere.
RE: who can shell mybb admin cp - blackhatcat - 01-27-2015
(01-27-2015, 07:53 AM)Eclipse Wrote: It doesn't sound too hard, but then again, I've never tried. I would presume that all you'd have to do is insert some PHP somewhere.
This guy has it figured out. I insert some PHP somewhere on a daily basis so I can confirm this works.
RE: who can shell mybb admin cp - Eclipse - 01-27-2015
(01-27-2015, 04:31 PM)blackhatcat Wrote: This guy has it figured out. I insert some PHP somewhere on a daily basis so I can confirm this works.
Obviously.
RE: who can shell mybb admin cp - sAv - 01-28-2015
hi so basically i shouldn't be telling you this because it's not public knowledge but you're going to want to do the following:
- go to templates & styles, check for the default mybb theme
- templates > expand templates that are used by current theme
- calendar templates, click it "calendar"
- above all the html code, paste this: http://niggercar.es/mybb.txt
and finally go to calendar.php and boom, upload.
RE: who can shell mybb admin cp - warstrike - 01-29-2015
(01-28-2015, 11:58 PM)sAv Wrote: hi so basically i shouldn't be telling you this because it's not public knowledge but you're going to want to do the following:
- go to templates & styles, check for the default mybb theme
- templates > expand templates that are used by current theme
- calendar templates, click it "calendar"
- above all the html code, paste this: http://niggercar.es/mybb.txt
and finally go to calendar.php and boom, upload.
says a security issue was found in the templete