Wednesday, August 3, 2016

TAMPER DATA SHELL UPLOADING TUTORIAL

Shell uploading is a Hell like thing for
beginners so here i m writing this tutorial
for beginners to upload shell through
Temper Data adon of Mozilla FireFox.


When to Use Temper Data:


Some websites don't allow uploading files other than images so in such a situation shell uploading is a problem because we can't upload any php or asp shell file.So we can upload shell by tempering HTTP headers.


Requirements:

Mozilla Firef0x

Tampe Data add-on


Temper Data: https://addons.mozilla.org/en-US/firefox/addon/tamper-data/

Mozilla FireFox: http://www.mozilla.org/en-US/firefox/new/


1. Open Website's Admin Panel...

2. Change Your Shell Extension to .jpeg or .jpg or .gif

3. Now open your Tamper Data And Click on Start Tampering..

4. Now goto Upload 0ption` and upload your Shell As shell.jpg

5. Windows Will Pop-UP. --- Tamper - Submit - Abort REQUEST Click on Tamper At Your Right Side Copy All Text from POST DATA BOX Paste All text in notepad..

6. Now Press CTRL + F, a search
Text field will appear in your firefox browser's lower left..

7. Search For Shell.jpg

8. Edit You Shell Extension to .php then copy it paste it on post data box And Click On Submit...

9. Congrats your shell has been uploaded succesfully.

10. Now in image gallery where you have uploaded shell, u will see many images.Right click on your shell image and click on "copy image location". Now paste this url in your browser bar.Your shell will open up for you.

Why do we need TamperData:


Tamper Data is used to view / modify HTTP/HTTPS headers and post parameters.So with this adon we will trick web application that we are uploading image file i.e. jpg, gif, png etc. but when file will be transferring through HTTP headers, we will change its extension to shell.php and our shell will be uploaded.This is called HTTP headers tempering..

No comments:

Post a Comment