+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: question about /home , etc/passwd ( advanced ) (/showthread.php?tid=5750103)
question about /home , etc/passwd ( advanced ) - WPA2 - Nov 9, 2017
Hey you guys many of you will think this is a very noob question or skid question. Anyways I decided to post it and see how many of you had faced the problem. To explain this quick I will explain this better by the following
mainTargetSite.com < this is our target
server ip: 104.20.209.21 < server for the target site
so after we did reverse look up, we found 3 more sites hosted in the same targeted server.
one of those sites was vulnerable. We uploaded a backdoor, phpshell , or ever perl shell. Anyways everything works fine but when ever you look for the target site under /home or etc/passwd
its not showing. Its in the same server though with the same iP. Some might say the permissions but its not. Since its not even showing or accessible or symlink-able. Some might say the server is partitioned or something like that. Well I have seen servers before and trust me its nothing like this.
I study IT networking and Linux systems at the same time. So anyone who got experience with Linux let me know what you think.
by the way the server is using Apache, & everything seems very normal not much security but that one confused me. Ch33rs
RE: question about /home , etc/passwd ( advanced ) - Sexual Predator - Nov 10, 2017
You're all over the place, nothing you say makes sense.
If you tried symlinking and/or have any idea about what you're talking about as you claim to study this shit, you would know Servers aren't "partitioned" for hosting.
If you have a backdoor on there, try gaining root access. there's tons of scripts / exploits to do this.
If you can run commands, thats all you need to start. It's especially easier if it's an older server with outdated plugins ect.
RE: question about /home , etc/passwd ( advanced ) - Phire - Nov 10, 2017
That's not their IP, they are using Cloudflare.
RE: question about /home , etc/passwd ( advanced ) - Hooded Robin - Nov 11, 2017
If you have a shell, why don't you try to read the Apache configuration files out of /etc and then you can see if any vhost definitions are in there for additional sites hosted on the same server. If so, should define where they are located on the server if not using /home directory.
RE: question about /home , etc/passwd ( advanced ) - WPA2 - Nov 28, 2017
its CloudLinux with CageFS, I got a phpshell in the server , I see many bypasses in Youtube. Let me try,
Thanks Mr.Robin and .Phire