LFI Exploitation with FImap
Hi GUYS
this is a video to show you how to gain access to a site who has a LFI vulnerability
this method require FImap
./MG
RDP access & Shell uploading trough SQLMAP
Hey Salam Guyz Today i'll tell y0uh Shell Uploading through SQLmap its very easy if you have few thing ;) -1st- Vulnerable website with full path -2nd- file write privilleges -3rd- sqlmap -4th- Me :D start it open your sqlmap i have sqlmap with its GUI so work becomes very easy :D you can also use sqlmap shell without its GUI just type this ./sqlmap.py -u http:www.site.in/index.php?id=1 --os-shell link to use sqlmap with GUI Here 1st tick on the url box now paste the vulnerable link in target box than click on Get Query and you'll see website appears on the "Query To Sqlmap box" like in picture Now 0pen "Access" tab in sqlmap than => operating System than => sqlshell and tick sqlshell then again click on Get query Than click on start button than windows will pop up after 1-2 minutes it will ask y0u f0r enter Web application Language like in this pic web server ...
Commentaires
Enregistrer un commentaire