Friday, 31 May 2013

How To Upload Your PHP Shell Through Tamper Data On Firefox Add-on Free 100% Working Trick

Upload Your PHP Shell Through Tamper Data


Hi Guys.Today i tell you How to upload php shell via using Temper Data.First i tell you what is Temper Data. we use Temper Data when we have access to the admin panel. Then we try to upload our shell but it doesn't allow it to upload the shell as extension .php or .asp Then we are not able to deface it. In that case we use Data Tampering to upload our shell and make it perfectly executable. By Data Tampering we can change the file extension by the Add on of the Firefox called ” Data Tamper ".Most website hackers use this tool For uploading shell.It's very simple and easy.
1. Download Mozilla Firefox From Here.

2. Download Temper Data From Here.

3. Now Install Temper Data and Restart Mozilla Firefox.

4. You have to rename your .php shell to .jpg to bypass the website's security
To upload a shell, of-course you needed a upload option in login page or anywhere !

5. Then login to the site where you want to upload shell.
Go to the place where you can upload the image. In my case it is in the product category>edit product.

6. Now click on Tools in Firefox Menu bar and Select Tamper Data, Tamper Data plugin will open in a new window Like shown Below




Note: Before Clicking on "Start Tamper" close every extra tab you have opened.. If you want this tutorial to be open... Just open it in another browser

7. Now click on Browse > select your shell location ( Must be in .jpg, .png, .gif ) like anything.jpg before clicking the upload button open the Data Tamper and click on start tamper then click on upload the image. You will get the pop up click on Tamper.


8. After a click on "Temper" you will see "Tamper Popup"
                                                    In Tamper Popup Window, Copy "POST_DATA" text in Notepad


9. After Copying it to Notepad... "Find yourshell.jpg" and rename it to .php.


10. Now copy Notepad's text back to "POST_DATA" field..and click OK
It will Upload the shell as .php and you can execute it easily !
Find your .php shell & Deface This Site





0 comments: