Hack Forums
[TUT]-Symlink-[/TUT][Pics][Noob-Friendly] - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [TUT]-Symlink-[/TUT][Pics][Noob-Friendly] (/showthread.php?tid=2408125)

Pages: Pages 1 2 3

[TUT]-Symlink-[/TUT][Pics][Noob-Friendly] - BeggFoMercy - Apr 16, 2012

Hey HF , Today ill be showing u how to symlink a hacked web site/server
WhySymlinking ?
Some times, After hacking a web site , We find that the kernel of the server is 2011,2012 , So its gonna be hard or impossible to exploit/root it and gain the other web sites hosted on that server , So Our PlanB Is to symlink it - Gain access to all web sites on that server without gaining root access..
Requirements:
1-Hacked (web site - shell -)
2-Some scripts will be posted at the end of the Tutorial
3-A hacker's brain
First step" Uploading Tools":
First of all we will need to make a new folder on a hacked web server To start symlinking in a clean Enviroment ;)
[Image: 8noF8.png]
Now after entering our Folder name And click forward , We will see a new folder made , Now we will head up to open it and upload:
1-.htaccess - Lists the folder as List
2- Perl Script , That will config the /etc/passwd/ Into the web sites
configuration
3-Mysql Connector - Connects to the Mysql DB on the localhost.
Just like that
[Image: 7ztrG.png]
Now we will need to chmod Our Perl Script To "0755" So we can view/edit/rename it Other wise we will be forbidden
Just click on the
Code
    -rw-r--r--
At the same line of allsoft.pl
Then chmod to 0755 As in the pic
[Image: GGmFF.png]
Now lets click on the Sec.Info For the /etc/passwd/ Infoz
[Image: lnHOt.png]
Now for the view of the /etc/passwd/ We click on View Beside it
Now copy all the Daemons And head over to ur pl script Like that
And then it will look like that
[Image: Jydvm.png]
Paste the codes u got from /etc/passwd viewing And Click Get Config
It will start loading then It will tell you Done!
Now this is the most loved part ever Viewing the gathered sites on the directory
Now head over to ur directory that contains the .htaccess
Example:
Code
www.site.com/logs/testfolder/
The testfolder Should be the folder that contains our scripts including .htaccess
It will load for some secs , Then it will open like a list
[Image: L9DhK.png]
The shaded things are The web sites configuration
Now open a specific one ... Open ur mysql.php Connector that is uploaded on the same folde

Connect to the mysql / Shell it
I will not be showing u how to do that because most of u Know how to do it
https://hackforums.net/showthread.php?tid=2404357

This is just for joomla provided sites , Ill be making another tutorial about how to shell wordpress Sites...
Shout outs :
1-Inj3ctors
2-INTRA
3-Zer0Freak
4-HaxOr <3
5-joomlafkr
Etc..

Download scripts: Click me

End of the Tutorial ;)
-BeggFoMercy

* - Sw1x - Apr 16, 2012

Thank you for this, I was wondering when I would see when you make a tutorial. :)

Thanks this will be useful.

* - VipVince - Apr 16, 2012

Nice tutorial man. Good to read about something not as frequently discussed on here.

* - BeggFoMercy - Apr 16, 2012

(Apr 16, 2012 07:03 AM)VipVince Wrote:  Nice tutorial man. Good to read about something not as frequently discussed on here.
Thanks for the feed back brothaz , And yea that made me make the tutorial ...

* - joomlafkr - Apr 16, 2012

Good writeup BeggforMercy !

Now they don't have any excuse to not to symlink the whole server :p

I have a remark : sometimes your perl file won't be able to find config files ,some of them are hidden...!

the trick is to symlink to index.php,read the source code and follow the calls to other php files !

* - BeggFoMercy - Apr 16, 2012

(Apr 16, 2012 07:27 AM)joomlafkr Wrote:  Good writeup BeggforMercy !

Now they don't have any excuse to not to symlink the whole server :p

I have a remark : sometimes your perl file won't be able to find config files ,some of them are hidden...!

the trick is to symlink to index.php,read the source code and follow the calls to other php files !

Yea i know that Thanks for the remark bruh , Forgot ur name though bruh mb ;D

* - -zerocool - Apr 16, 2012

nice one BeggFoMercy . .
Keep it up .

* - Bacardi - Apr 16, 2012

Really nice tutorial. I tried it out right away and worked like a charm!

* - HeXagone - Apr 16, 2012

Nice tutorial always happy to see lot of files :)

* - BeggFoMercy - Apr 16, 2012

Thanks for the feed back brutharz, That really made my day ;)

* - Error667 - Apr 16, 2012

Seems to be an HQ tutorial, thanks to share on HF.

* - BeggFoMercy - Apr 16, 2012

Thanks for the feed back bruthah..xD

* - Delphi - Apr 16, 2012

Thank you for this bro. Nice tutorial!

* - ｍＯｂｉＩｅ - Apr 16, 2012

Fuckin-A Bro! Nice tutorial and very easy to understand. 👍 Unfortunately only a handful of us here know this method. 😵 Maybe with this tutorial it will inspire more people to symlink while they have a website shelled. You'd be surprised how many high traffic websites that may be hosted on that server. 🎉

* - BeggFoMercy - Apr 16, 2012

Thanks for the feed back bruthah ;) , And Yea im really surprised , Worth 10k web sites + :D