Hack Forums
[Tutorial] Symlinked Shell Tutorial | Login to WordPress | NOOB FRIENDLY [Tutorial] - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [Tutorial] Symlinked Shell Tutorial | Login to WordPress | NOOB FRIENDLY [Tutorial] (/showthread.php?tid=2695015)

Pages: Pages 1 2


[Tutorial] Symlinked Shell Tutorial | Login to WordPress | NOOB FRIENDLY [Tutorial] - imafaggotk - Jul 19, 2012

First off I noticed that mobile_xt made a similar tutorial. I have a similar way of doing it but not quite. My way will get you logged into wordpress admin guaranteed ;)
What you will need:
Symlink Shell; We'll be using Mobile's ;)
get it here

Also will be needing a msql login shell: http://pastebin.com/KYxuS8qP

Alright so assuming you have a shell on a website proceed to upload the symlink shell that you got earlier from mobile.

Now navigate to it and open it and you should see this:

[IMG]http://my.jetscreenshot.com/12807/m_20120720-7xwh-58kb.jpg[/IMG]

Click the "Symlink File"
It should look like this:
[IMG]http://my.jetscreenshot.com/12807/m_20120720-vcqc-18kb.jpg[/IMG]

Now put the directory of your symlink file in the first box
and name the .txt whatever you want in the second box.

So it should look like this depending on your directory:
Code
/home/user/public_html/symlink.php
symlink.txt

Here is a picture:
[IMG]http://my.jetscreenshot.com/12807/m_20120720-k35t-17kb.jpg[/IMG]

Now press "Symlink"

Now go back to your shell and look for a sym folder in public_html or wherever you uploaded your shell. If you find it that means it was successfully symlinked :D

--

Ok now to upload mysql.php
You're going to want to upload mysql at the same spot where you uploaded symlink.php [This is important & And on the same website]

Once uploaded you're ready to go :)

--

Now open up symlink.php again and go to "Domains/Symlink"

It should look like this:

[IMG]http://my.jetscreenshot.com/12807/m_20120720-1sse-159kb.jpg[/IMG]

Yours might be different compared to mine as they are different servers :p

Now click "Symlink" next to the site of your choosing like so:

[IMG]http://my.jetscreenshot.com/12807/m_20120720-0afp-152kb.jpg[/IMG]

Now you should see something like this:

[IMG]http://my.jetscreenshot.com/12807/m_20120720-0afp-152kb.jpg[/IMG]

If you don't see any wp-config.php or anything of that sort choose a different site :)

Now click on wp-config.php

[IMG]http://my.jetscreenshot.com/12807/m_20120720-vgje-5kb.jpg[/IMG]

And you should see the database login :D

[IMG]http://my.jetscreenshot.com/12807/m_20120720-vgje-5kb.jpg[/IMG]

Awesome! Now go to the dir of where you upload mysql.php and open it up in your browser.
You should see something like this:

[IMG]http://my.jetscreenshot.com/12807/m_20120720-guyd-25kb.jpg[/IMG]

Now refer to this next picture on what to do :)

[IMG]http://my.jetscreenshot.com/12807/m_20120720-j8lt-99kb.jpg[/IMG]

So now you should have the mysql.php all filled out. Now press "Login":

[IMG]http://my.jetscreenshot.com/12807/m_20120720-y8gg-26kb.jpg[/IMG]

Now go back to the wp-config.php and find the database name like so:

[IMG]http://my.jetscreenshot.com/12807/m_20120720-dodz-10kb.jpg[/IMG]

And whatever the name the database is in there you should pick in the mysql.php and click "Tables"

Here is a reference:

[IMG]http://my.jetscreenshot.com/12807/m_20120720-w0v8-105kb.jpg[/IMG]

Now find wp_users and click "Data"

[IMG]http://my.jetscreenshot.com/12807/m_20120720-v7yu-2kb.jpg[/IMG]

Hooray we got admin login :D

[IMG]http://my.jetscreenshot.com/12807/m_20120720-ksna-18kb.jpg[/IMG]

Now edit the admin row and make sure you put a wordpress hash that you know what it is decrypted. I do not have one at the moment but I will update this thread with one later. Once you have changed the admin hash. Go to

http://www.yousite.com/wp-admin

and login :)

If you enjoyed this tutorial please leave a comment and say thanks-I spent well over an hour making this :p! If you have any problems don't hesitate to contact me :)




* - iFr0zen - Jul 20, 2012

Nice tutorial Strick3n! Really liked it..


* - poision-v1p3R - Jul 20, 2012

do manually.

manually symlink batter den symlinkshell....

any way nice tutorial.... k33p 17 uP


* - unkn0wn r00t3r - Jul 20, 2012

very detailed tutorial bro ..nice.. :)


* - imafaggotk - Jul 20, 2012

(Jul 20, 2012 12:10 AM)poision-v1p3R Wrote:  do manually.

manually symlink batter den symlinkshell....

any way nice tutorial.... k33p 17 uP
Yeah I know I plan on doing a manual one once I get a good example :)

(Jul 20, 2012 12:10 AM)unkn0wn r00t3r Wrote:  very detailed tutorial bro ..nice.. :)

Thanks for the comment <3
35 faggot characters on the wall!


* - poision-v1p3R - Jul 20, 2012

if you got any problem during manually symlink then just pm will help you.... :)
and i will also posting a tutorial of manual symlink in detail...


* - Th3PonyWizard - Jul 20, 2012

I hate seeing these kind of tutorials. Reminds me the those "How to use Havij" kind of tutorials that went around half a year ago at the SQLi section. Sorry, but you're aiming people to go at the skiddy way (Let alone that PHP script is completely obvious & you didn't go in actual details). Teaching how to use a tool is bad, you should teach about the method instead. I had in plan writing a real write up on that method, but Steam Sales stole my soul.
Overally, it's a nice tutorial, although that php script is rubbish, and manual symlink is better.
>create a dir
>chmod it, if possible
>get a symlinking .htaccess to there
>execute in dir: ln -s /*path for websites goes here, for example - /home/ */
>Browse through dir to the pathes listed at /etc/passwd

There you go, Symbolic linking tutorial in a nutshell.


* - imafaggotk - Jul 20, 2012

(Jul 20, 2012 12:57 AM)Th3PonyWizard Wrote:  I hate seeing these kind of tutorials. Reminds me the those "How to use Havij" kind of tutorials that went around half a year ago at the SQLi section. Sorry, but you're aiming people to go at the skiddy way (Let alone that PHP script is completely obvious & you didn't go in actual details). Teaching how to use a tool is bad, you should teach about the method instead. I had in plan writing a real write up on that method, but Steam Sales stole my soul.
Overally, it's a nice tutorial, although that php script is rubbish, and manual symlink is better.
>create a dir
>chmod it, if possible
>get a symlinking .htaccess to there
>execute in dir: ln -s /*path for websites goes here, for example - /home/ */
>Browse through dir to the pathes listed at /etc/passwd

There you go, Symbolic linking tutorial in a nutshell.
I just wanted to write a tutorial on something. I was bored and I didn't have an example to manually symlink. I put a lot of effort into this... whatevs..


* - N3p BoY - Jul 20, 2012

nice tutorial man ..
good one
keep up the good job


* - Data Center - Sep 21, 2012

nice tutorial man ..
good one
keep up the good job


* - Th3PonyWizard - Sep 21, 2012

(Jul 20, 2012 01:08 AM)Strick3n Wrote:  I just wanted to write a tutorial on something. I was bored and I didn't have an example to manually symlink. I put a lot of effort into this... whatevs..
Effort is good, but it's better to put it into the right-er ways, don't you think? Don't teach them how do to it, teach them what it is, they'll do the rest themselves.


* - HeXagone - Sep 22, 2012

i think a made a tutorial like this :p
https://hackforums.net/showthread.php?tid=2448880


* - 93m1n1 - Sep 22, 2012

Nice one Bro just keep up the good work thanks alot but update your images pls

(Sep 21, 2012 10:58 PM)Th3PonyWizard Wrote:  Effort is good, but it's better to put it into the right-er ways, don't you think? Don't teach them how do to it, teach them what it is, they'll do the rest themselves.

Thanks Brodas you're a great leader


* - xBloodDevil - Sep 22, 2012

thanks a lot but you should update your pictures


* - samrokzz - Sep 22, 2012

Pics are expired or not found .
Symlink Shell's thread is closed .