more c00l wayz to upload ur shell

[c0rrupter]

Here we will be using Tiny MCE Ajax File Manager to upload our shell.

TinyMCE AjaxFileManager Shell Upload is a vulnerability in TinyMCE which allows simple upload of .txt .jpg .png .jpeg .bmp and in some cases even allows us to upload PHP shell or a deface page.

The Dork: inurl:/tiny_mce/plugins/filemanager/
The dork will bring up this image.

This is the exploit

http://[localhost]/[path]/jscripts/tiny_mce/plugins/ajaxfilemanager/ajaxfilemanager.php

http://[localhost]/jscripts/tiny_mce/plugins/ajaxfilemanager/ajaxfilemanager.php


Navigate to any of the above links (any one of them will be present) and check the top right corner, you will see a upload option there. Click on it, select your file and click on upload.


To view your uploaded file visit

Please, Log in or Register to view URLs content!

Good luck. Have fun. Make babies.

 

[M33]

does it upload .php files?

 

[Vardur]

great bro

 

[GunPh@ne]

Tanx man

 

[maxwatz]

This is nice bro!

 

[I-NeedMoney]

big leak

 

[glc0000]

Great job.

 

[Wowza]

thanks for sharing

 

[Crackhead]

the best!

 

[xhrmpv]

ty dude!