#DOWNLOAD SHELL FOR CPANEL HOW TO#
#DOWNLOAD SHELL FOR CPANEL MOD#
#DOWNLOAD SHELL FOR CPANEL ARCHIVE#

Versions 3.6.8 and older can be downloaded from the Source Forge archive

The archive also contains the PDB files for people who need help debugging the code.

Versions 4.0.0 and newer can be downloaded from the Mediafire archive The latest version is also available on the mirror.

#DOWNLOAD SHELL FOR CPANEL MOD#

this mod must be used only for debugging.The latest stable version 4.3.1 can be downloaded from here:Ĭlassic Shell 4.3.1 (Traditional Chinese) In some cases its necessary to use mod DumpIO for Apache to log every single post value from clients to the server and then check them! for example if there is some sql injection or some other injections to your normal scripts to find out that what causes the hack you require to use this module! using this module needs attention because this module will generate large log files. I suggest you to have some monitoring system with daemon services that check every new file uploaded on the server! so you will be notified by email and you can go for your search in the log file! it’s kind of impossible to monitor all the files manually! com extensions will be executed through CMD! to open the file in text editor just right click on the file and choose your desired text editor from Open With Option! This file does not have a proper extension that can be opened by windows! Basically the extension is the domain TLD of the Account.

Select the domain that you want to see the logs for.

#DOWNLOAD SHELL FOR CPANEL HOW TO#

Well always remember! you can find many things by checking your log files! a quick tip for how to get a website apache log file in cPanel/WHM : So now I can consider this component as a vulnerable and I can force the customer to do something to maintain security for this matter! well either removing the whole component or fixing the bug by updating it or changing the configuration will be the solution. I’ve found a interesting URL that he accessed firstly which belongs to the “com_fabrik” and allows him to upload a CSV file into the server! Gotcha! there is the thing! He uploaded his very first PHP sheller through this! Well of course there are tones of requests by this IP to the website since there are thousands of CSS, JS and other static files on the Joomla site! But the next step is to look for the first requests of him by searching his IP address instead in the Apache LOG File. What I did here was to download the Apache RAW of the account and look for the PHP Shell file that he uploaded! well it is obvious that he is the one who uses this shell right? so by searching for the shell name and address I’ve got his IP ! mmm Brazil. Well seems the attacker is using our server to send spam mails to his haters! I’ve found all the Shellers, and phpmailers he uploaded to the server and waited for him to come back for like 3 days and seems I got him today! He successfully uploaded a PHP Sheller into the media directory of the Joomla. There is a bug somewhere in all these components and plugins which allows the hacker to upload his malicious files into our server. Well there is this client of mine using Joomla with thousands of plug-ins and components is being hacked continuously! well the thing is creating a website is always easy! there are thousands of mods, components and other stuff available for open source content management systems like Joomla! but to keep it safe and patched of security holes that are being find everyday! well that is a challenge not everyone can take!

Download shell for cpanel