Thread: Finde The Shell ?

Please someone cane help me ..

So i have a site where i cane upload documents and the .php exstension is allowed and cane upload shell but the problem is that i cannot finde where is the shell uploaded . I have tried to finde with Tamper and LiveHttpHeaders but cannot finde it ..

http://support.microsoft.com/

http://support.microsoft.com/ ???????

Hard to give help when the information you give is very poor. I suggest that you maybe write a script that crawls the site for your shell, or you could do it your self.

1. try to upload legitimate content to the public part (like img on some page) and look at it source
2. figure out if cms is commercial product and try to get demo
3. or u can use web directory scanner

Thanks for the comments helped me allot ..

have you tryed the simplest thing.
look in the code to see if you can find the path in it.
(dont always work)

what page is it?

Originally Posted by Hardcore-Gabber

Please someone cane help me ..

So i have a site where i cane upload documents and the .php exstension is allowed and cane upload shell but the problem is that i cannot finde where is the shell uploaded . I have tried to finde with Tamper and LiveHttpHeaders but cannot finde it ..

try acutentix , maybe you can see directories...
How is possible you can find with Tamper , that show when file.php got uploaded.

use acuntix webscanner.
and find your shell

If you're going to use a directory scanner and your shell is not linked in the crawled files !! the directory scanners won't find it !!