gan kok ane ga bisa upload shell make plugin ninja explorer

[cupu80]

error gan pas ane upload eh malah failed pdahal ane ud upload ke direktori yg perm 777 kok bisa error ya gan >??
ni htaccess na
##
# @version $Id: htaccess.txt 10492 2008-07-02 06:38:28Z ircmaxell $
# @package Joomla
# @copyright Copyright © 2005 - 2008 Open Source Matters. All rights reserved.
# @license http://www.gnu.org/copyleft/gpl.html GNU/GPL
# Joomla! is Free Software
##


#####################################################
# READ THIS COMPLETELY IF YOU CHOOSE TO USE THIS FILE
#
# The line just below this section: 'Options +FollowSymLinks' may cause problems
# with some server configurations. It is required for use of mod_rewrite, but may already
# be set by your server administrator in a way that dissallows changing it in
# your .htaccess file. If using it causes your server to error out, comment it out (add # to
# beginning of line), reload your site in your browser and test your sef url's. If they work,
# it has been set by your server administrator and you do not need it set here.
#
#####################################################

## Can be commented out if causes errors, see notes above.
#Options +FollowSymLinks

#
# mod_rewrite in use

RewriteEngine On

########## Begin - Rewrite rules to block out some common exploits
## If you experience problems on your site block out the operations listed below
## This attempts to block the most common type of exploit `attempts` to Joomla!
#
# Block out any script trying to set a mosConfig value through the URL
RewriteCond %{QUERY_STRING} mosConfig_[a-zA-Z_]{1,21}(=|\%3D) [OR]
# Block out any script trying to base64_encode crap to send via URL
RewriteCond %{QUERY_STRING} base64_encode.*\(.*\) [OR]
# Block out any script that includes a <script> tag in URL
RewriteCond %{QUERY_STRING} (\<|%3C).*script.*(\>|%3E) [NC,OR]
# Block out any script trying to set a PHP GLOBALS variable via URL
RewriteCond %{QUERY_STRING} GLOBALS(=|\[|\%[0-9A-Z]{0,2}) [OR]
# Block out any script trying to modify a _REQUEST variable via URL
RewriteCond %{QUERY_STRING} _REQUEST(=|\[|\%[0-9A-Z]{0,2})
# Send all blocked request to homepage with 403 Forbidden error!
RewriteRule ^(.*)$ index.php [F,L]
#
########## End - Rewrite rules to block out some common exploits

# Uncomment following line if your webserver's URL
# is not directly related to physical file paths.
# Update Your Joomla! Directory (just / for root)

RewriteBase /


########## Begin - Joomla! core SEF Section
#
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteCond %{REQUEST_URI} !^/index.php
RewriteCond %{REQUEST_URI} (/|\.php|\.html|\.htm|\.feed|\.pdf|\.raw|/[^.]*)$ [NC]
RewriteRule (.*) index.php
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization},L]
#
########## End - Joomla! core SEF Section



bantu pls om

[civo]

joomla versi berapa tuh omz ????
kalau sudah masuk adminnya ga harus pake ninja explorer upload shellnya...
langsung ke dir image nya

kata temen ane gitu omz..

[Reborn Of Code]

masuk ke template manager...
edit index.php di template nya...
tapi jangan edit default template
kalo pun hanya make satu template backup dulu index template nya.

Spoiler:

entar yang nongol shell ente di halaman depan web nya

[cupu80]

joomla Version 1.5.25
ane ud tambahin di global setting extensi php tetep ga masuk
hehehe ni lagi cari2 cara.
td ane coba masukin shellnya ke dalam plugin trus ane install tuh plugin eh mala nongo
Parse error: syntax error, unexpected ';'
jiah susah bener nih web mau di pasangin backdoor aja susah kowkwko

[Reborn Of Code]

(02-27-2012 12:56 AM)cupu80 Wrote:  joomla Version 1.5.25
ane ud tambahin di global setting extensi php tetep ga masuk
hehehe ni lagi cari2 cara.
td ane coba masukin shellnya ke dalam plugin trus ane install tuh plugin eh mala nongo
Parse error: syntax error, unexpected ';'
jiah susah bener nih web mau di pasangin backdoor aja susah kowkwko

share aja web nya...
entar ane bantu pasang kak...
hitung-hitung belajar bareng...
kalo ente butuh shell pm ane aja...

[cupu80]

yeeeeeeeeeeeeee berhasil gan hahahaha ty atas masukkannya

[tey]

pake ext explorer bro

[dhiguy123]

Jangan lupa sama tutornya

[nuxbie_cyber]

kalo upload langsung pakek Ninjaexplorer gak bisa, coba buka @NinjaExplorer di directory ../../tmp/ <-- coba upload di situ pasti bisa...
situs[dot]com/tmp/files.php <--- aplod

[fuxnbums]

sekalian POC nembusnya itu bijimane om