Hack Forums
What to do with access to server panel? - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: What to do with access to server panel? (/showthread.php?tid=3602730)



What to do with access to server panel? - Hackinator - Jul 6, 2013

Hello good people,
some weeks ago I have acquired access to a parallels panel from a webdesign company. Now I dumped all the databases and cracked the passwords from the sites that were hosted on there (around 50), but I am running out of ideas now. What would be the best way to use this server? I was thinking if I install a jdb, they will realize that something is wrong and just change the password or whatever on the server.
So yeah... anyone could help me out a bit here? I need to do something "silent" or at least do it somehow that they don't directly think I have access to the whole server. I was thinking on putting a JDB just on one site maybe.... but i'm open for other, better ideas :P


* - ZombiedaysHF - Jul 6, 2013

(Jul 6, 2013 04:12 PM)Hackinator Wrote:  Hello good people,
some weeks ago I have acquired access to a parallels panel from a webdesign company. Now I dumped all the databases and cracked the passwords from the sites that were hosted on there (around 50), but I am running out of ideas now. What would be the best way to use this server? I was thinking if I install a jdb, they will realize that something is wrong and just change the password or whatever on the server.
So yeah... anyone could help me out a bit here? I need to do something "silent" or at least do it somehow that they don't directly think I have access to the whole server. I was thinking on putting a JDB just on one site maybe.... but i'm open for other, better ideas :P

set up ssh access so you could always have access to it... or shell it and root server and mass deface the server 👍


* - Hackinator - Jul 7, 2013

hmm I don't really want to deface everything, because after all quite a few people make a living with the company so I don't want to fuck them up completely (besides there is not much gained with defacing a page).
But thanks for the other suggestions :)


* - whyitell - Jul 7, 2013

Do what I do, remane the index and replace it. But put in the deface page that You didn't deleate anything and that all there files are safe.