how to get a shell in phpbb?

ttfct · Post by **ttfct** » 19 May 2007, 07:45

i have got the admin rights of a phpbb forum(versin:phpBB 2.0.22 )

but i do not know how to get a webshell

is there anyone who knows?

ebrizzlez · Post by **ebrizzlez** » 19 May 2007, 07:50

I really have no idea what your talking bout, but a simple google 'webshell' resulted in this:

Code: Select all

http://www.mozilla.org/projects/webshell/design.html

Post by **bad_brain** » 19 May 2007, 12:01

admin access has nothing to do with spawning a shell....the site has to be vulnerable for remote file inclusions. but that's all info you will get, too much of those compromised servers on the net already anyway...

ttfct · Post by **ttfct** » 20 May 2007, 07:18

i have seen the code of phpbb for 5 days(versin:phpBB 2.0.22)

but i still could not find a way to get a shell on the admin panel

Post by **bad_brain** » 20 May 2007, 08:26

http://en.wikipedia.org/wiki/Remote_File_Inclusion

but you will have no luck because there is no known exploit for phpBB 2.0.22 yet....

ttfct · Post by **ttfct** » 20 May 2007, 21:10

bad_brain thanks

but there is no longer RFi ON PHPBB 2.022

i have asked the same question at http://forum.milw0rm.com/

a person said:

z0mgl4w1 I know it:

uppload ur .html in admin ????!???11

i do not know how to get a shell,if upoad .html file?

Post by **bad_brain** » 21 May 2007, 05:48

no shell = no file upload = no shell......

see what I mean? so forget it....