Upload shell with Tamper Data

How to upload your PHP shell through Tamper Data

Many times you get login of a website, but you are unable to upload your PHP shell !

Today i'll show you how to upload your PHP shell through Tamper Data an Firefox Add-on Install Tamper Data firefox add-on: Download Tamper Data here Now Install it and Restart Firefox Rename shell: Note: You have to rename you .php shell to .jpg to bypass the website's security To upload a shell, of-course you needed a upload option in login page or anywhere ! Demo: As an example i'll take - http://freead1.net/post-free-ad-to-USA-42

It is a free classified ads posting website, so i got a upload option there ! Find your upload option click on browse, locate you .jpg shell and select it !
Download Tamper Data here

https://addons.mozilla.org/en-US/firefox...mper-data/

Now Install it and Restart Firefox

It is an ad posting website so it has an upload option. Find your .jpg shell and upload it. Don't hit submit though.



Now click on Tools in Firefox Menu bar and Select Tamper Data, Tamper Data will open in a new window.



Before Clicking on Upload button click on "Start Tamper" in Tamper Data window.
Note: Before Clicking on "Start Tamper" close every extra tab you have opened.

After clicking on upload button "Tamper with request?" window will appear on tamper data.

[b]Click on "Tamper" button[b/]



After clicking on "Tamper" you will see "Tamper Popup"
In Tamper Popup Window, Copy "POST_DATA" text in Notepad



After Copying it to Notepad, "Find yourshell.jpg" and rename it to .php.



Now copy the text from Notepad back to "POST_DATA" field and click OK
It will Upload the shell as .php and you can now execute it

Find your .php shell and do whatever you want with that website.     

Video demo: 
http://www.youtube.com/watch?v=imp1oe54JeQ