[Hacking Tutorial] How To Upload Shells Successfully

Hello all

This post is for people who fail to upload shell onto websites

Try these methods below

Method 1:
we all know that uploading scripts accepts JPG or GIF or both etc..
so its possible some times to bypass it by
renaming the file to
" shell.jpg.php "

---

Method 2:
Sometimes we can upload PHP file by editing the parameters with tools such as
Tamper Data ( Firefox Addon )
Download Here:
Code:
https://addons.mozilla.org/en-US/fir...n/tamper-data/
Change the

application/octet-stream
to
image/gif
or
image/jpg


Video tuorial:
http://www.youtube.com/watch?v=OB5iQI5SkTw
However, that works on some scripts...

---

Method 3:
We can also upload shell by adding
to the file name

%_00
shell.jpg%00php

shell.jpg%.php

or

shell.jpg;php (works alot specially on Win box'z )

---

Method 4:
Another way is by tricking Apache
by adding PHP languages
For Example:
file.php.en
the Apache will read the file.php.en
as a normal php file
cause .en refers to English
another example:
file.php.ar
.ar refers to Arabic and so on....
that helps when we find an uploading center that
denies PHP extinsions and allows any other unknown extionsion.

Well that's pretty much it

Good luck!