BACKDOORING A WEBSITE BY UPLOADING SHELL (basic guide)

LIKE OUR FACEBOOK PAGE
https://www.facebook.com/techhackerz

HELLO FRIENDS ... today i am going to show you the complete basics of shell uploading..
I am going to perform it in dvwa
As i had showed you the full installation process in my previous video,
today i will show you shell uploading in a website ...
So what is shell???
Basically a shell is a backdoor that we once we can upload in a website we get a complete access of that server..
So today i am going to show you the complee basics of uploading shells...

This kind of shell uploading can be done only in very low security websites...
but there are many sites where i have found this type of vuln.
So lets not waste anymore time.. and do it live :P
My pc has become very slow :'(

Ytoo much problem with my pc :'(

So we will select the security as low
Now select file upload
So as you can see that here is a upload button.. and it says that only image files can be
uploaded... But what u see is not always what is applicable...
Here i will use a dhanush shell... i will try to upload it
directly in php format... if it doesnt gets uploaded then we will upload it in using tamper
data by changing the extension as .php.jpg
lets try with php first
WOW... got success in just one try..!!!
this occurs in many websites.. where even in places where it is written only image can be
uploaded... php files also gets directly uploaded... so lets see it now
lets open our shell

as you can see our shell got uploaded here in this directory /hackable/uploads/d2.php
the ../ are the back directories.. so or shell url would be

localhost/DVWA/hackable/uploads/d2.php

So as you can see our shell opens and we get full access of this server.. we can virtually
do what ever we want with this server...
Thanks for watching this video... Subscribe to my channel if you liked my video

Also like my page for more exploits
https://www.facebook.com/techhackerz

Thanks for watching this video of mine.. hope you liked it,..in my next videos i will
show other advanced ways of shell uploading :)
Till then bye