Hack Forums
[TUTORIAL:]►_After Symliking What Should I DO ?_[Noob friendly] - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [TUTORIAL:]►_After Symliking What Should I DO ?_[Noob friendly] (/showthread.php?tid=2448880)

Pages: Pages 1 2 3


[TUTORIAL:]►_After Symliking What Should I DO ?_[Noob friendly] - HeXagone - Apr 29, 2012


Hello HF.


I'm really disappointed to see a lack of tutorial these days, and on the other hand a group

of noobs enthusiasm to unnecessary subjects. It drives me today to put this simple tutorial

that shows the second phase of symlinking.
In short pass to serious things.

TUTORIAL :


1/ It does not bother to repeat the steps to symlink I'll just give you links to some

tutorials 🎉 :

Quote:https://hackforums.net/showthread.php?tid=2408125
https://hackforums.net/showthread.php?tid=2395936
Credits : BeggFoMercy
m0bil3_xT

2/ Having succeeded in doing all the steps. You will be able to proceed to the next step :

Defacing .


When symlinking you'll face on of those CMS :

- Joomla
- Wordpress
- Vbulletin
- PHPBB
- WHMCS
- and more


[img]http://img444.imageshack.us/img444/9417/98430935.jpg[/img]

--

Defacing JOOMLA :


1/ Open the txt file and search for the Databse name, username, and password :

[img]http://img710.imageshack.us/img710/4043/98005309.jpg[/img]

2/ Open your Mysql interface and fill with the appropriate data the connect :
Search for the jos_users and click Data.


[img]http://img15.imageshack.us/img15/9942/33281563.jpg[/img]

3/ Look for A "Super Administrator" Then click edit and change his password
with your own :
Note: You need to use MD5 hash


4/ Follow this tut to deface the website :

Quote:https://hackforums.net/showthread.php?tid=2319021
https://hackforums.net/showthread.php?tid=2417535
https://hackforums.net/showthread.php?tid=2404357
Credits : Zer0Freak
๖ۣۜΗ α x O r ♥


--
Defacing wordpress :


1/ Open the txt file and search for the Databse name, username, and password :


[img]http://img204.imageshack.us/img204/2757/26700807.jpg[/img]

2/ Open your Mysql interface and fill with the appropriate data the connect :
Search for the wp_users and click Data.


[img]http://img10.imageshack.us/img10/9554/58128723.jpg[/img]

3/ Look for Admin user Then click edit and change his password
with your own :

Note: You need to use wordpress hash or md5

4/ Follow this tut to deface the website :

Quote:https://hackforums.net/showthread.php?tid=2312449
Credits : m0bil3_xT

--
Defacing Vbulletin :

1/ Open the txt file and search for the Databse name, username, and password :

[img]http://img831.imageshack.us/img831/4136/20578002.png[/img]

2/ Open your Mysql interface and fill with the appropriate data the connect :
Search for the users and click Data.


[img]http://img213.imageshack.us/img213/9743/81554041.png[/img]

3/ This is may take a little time but its ok !
Register in the forum using what ever information you want.
Then use Go to the databse and change your role ! Then you'll have all the privilege :)


3/ Follow this tut to deface the website :
Quote:https://hackforums.net/showthread.php?tid=2206440
Credits : -DownFall

--
Defacing PHPBB :

1/ Open the txt file and search for the Databse name, username, and password :

[img]http://img834.imageshack.us/img834/9601/47866266.jpg[/img]

2/ Open your Mysql interface and fill with the appropriate data the connect :
Search for the users and click Data.


[img]http://img840.imageshack.us/img840/4708/68972968.png[/img]

3/ Change the admin password and login:

4/ Follow this tut to deface the website :

Quote:https://hackforums.net/showthread.php?tid=2087563
Credits : -DownFall

--

Last The WHMCS :

Regarding WHMCS, I'll explain how to exploit it.

Instead of defacing it and lose some good information ! Better use this little script that

allow you to have more !

All you have to do is copy the data logins in the txt file
and put them in the right case :
Quote:db_host :
db_username:
db_password:
db_name :
cc_encryption_hash:

This script is named : WHMCS KILLER "Coded by RAB3OUN".

Spoiler (Click to View)

--
| Features : |
| |
| |
|H0st r00ts |
|Domains Resellers |
|Clients r00ts |
|Clients Hosting Accounts |
|Clients CC |
|Clients Tickets |
|FTP and SMTP password |
|Tools |
|SQL Query |
|Show clients |
|BackUp |
|Eval PHP |
| |
--

This script is simple to use and give you the possibility to connect to a Cpanel, Webhoster and more ....

Screenshot :

Spoiler (Click to View)

I almost forgot the script :
Spoiler (Click to View)
Quote:http://pastebin.com/xxZfDDPK

I hope you enjoyed my tutorial, thank you for reading.



* - BeggFoMercy - Apr 29, 2012

Thats really awesome dude , Nice writtin tutorial :)


* - joomlafkr - Apr 29, 2012

Finally you made it !
Good to see a tutorial of yours :p , and yeah HF is lacking of new tutorials...
i just wanna add that they could make something more interesting than defacing those symlinked portals !
and maybe if they find the whmcs in the /root/public_html they could do magic things with it !


* - Phizo - Apr 29, 2012

Nice tutorial, keep up the good work.


* - Hooded Robin - Apr 29, 2012

This is like a mini-mega thread with a tutorial wrapped inside. Love it man!


* - HAMM01 - Apr 29, 2012

nice tutorial.. .. But use special color combinations that r easily readable.. :)


* - Professional Hacker - Apr 29, 2012

Haha, there is a simple script to change WP, Joomla whatver, admin pass.

All this is so much work ^^


* - HeXagone - Apr 30, 2012

thanks for the positive feedbacks guys

HeXagone


* - Mx. - Apr 30, 2012

Well done there, great explanation of what you did, gave the right credits to everyone, really input your time.


* - The Ion - Apr 30, 2012

really good dude i was thinking of doing it but you did it Keep it up


* - Sw1x - Apr 30, 2012

Nice tutorial, keep it up, this is helpful!


* - HeXagone - Apr 30, 2012

thank hope you find this tut useful


* - Kiev - Apr 30, 2012

Thank you very much, you've just allowed me to get access to 4 Webmin accounts. :D!


* - inurl - Apr 30, 2012

thx a lor man , now just need to make it work :)

Thx


* - Error667 - Apr 30, 2012

Wondering why i didn't +rep you before. Nice release, check your greens.