[HeXagone]

Hello HF.

I'm really disappointed to see a lack of tutorial these days, and on the other hand a group

of noobs enthusiasm to unnecessary subjects. It drives me today to put this simple tutorial

that shows the second phase of symlinking. In short pass to serious things.

TUTORIAL :


1/ It does not bother to repeat the steps to symlink I'll just give you links to some

tutorials 🎉 :

https://hackforums.net/showthread.php?tid=2408125
https://hackforums.net/showthread.php?tid=2395936

Credits : BeggFoMercy
m0bil3_xT

2/ Having succeeded in doing all the steps. You will be able to proceed to the next step :

Defacing .


When symlinking you'll face on of those CMS :

- Joomla
- Wordpress
- Vbulletin
- PHPBB
- WHMCS
- and more

[img]http://img444.imageshack.us/img444/9417/98430935.jpg[/img]

--

Defacing JOOMLA :


1/ Open the txt file and search for the Databse name, username, and password :

[img]http://img710.imageshack.us/img710/4043/98005309.jpg[/img]

2/ Open your Mysql interface and fill with the appropriate data the connect :
Search for the jos_users and click Data.

[img]http://img15.imageshack.us/img15/9942/33281563.jpg[/img]

3/ Look for A "Super Administrator" Then click edit and change his password
with your own :
Note: You need to use MD5 hash

4/ Follow this tut to deface the website :

https://hackforums.net/showthread.php?tid=2319021
https://hackforums.net/showthread.php?tid=2417535
https://hackforums.net/showthread.php?tid=2404357

Credits : Zer0Freak
๖ۣۜΗ α x O r ♥


--
Defacing wordpress :


1/ Open the txt file and search for the Databse name, username, and password :


[img]http://img204.imageshack.us/img204/2757/26700807.jpg[/img]

2/ Open your Mysql interface and fill with the appropriate data the connect :
Search for the wp_users and click Data.


[img]http://img10.imageshack.us/img10/9554/58128723.jpg[/img]

3/ Look for Admin user Then click edit and change his password
with your own :
Note: You need to use wordpress hash or md5

4/ Follow this tut to deface the website :

https://hackforums.net/showthread.php?tid=2312449

Credits : m0bil3_xT

--
Defacing Vbulletin :

1/ Open the txt file and search for the Databse name, username, and password :

[img]http://img831.imageshack.us/img831/4136/20578002.png[/img]

2/ Open your Mysql interface and fill with the appropriate data the connect :
Search for the users and click Data.

[img]http://img213.imageshack.us/img213/9743/81554041.png[/img]

3/ This is may take a little time but its ok !
Register in the forum using what ever information you want.
Then use Go to the databse and change your role ! Then you'll have all the privilege :)

3/ Follow this tut to deface the website :

https://hackforums.net/showthread.php?tid=2206440

Credits : -DownFall

--
Defacing PHPBB :

1/ Open the txt file and search for the Databse name, username, and password :

[img]http://img834.imageshack.us/img834/9601/47866266.jpg[/img]

2/ Open your Mysql interface and fill with the appropriate data the connect :
Search for the users and click Data.

[img]http://img840.imageshack.us/img840/4708/68972968.png[/img]

3/ Change the admin password and login:

4/ Follow this tut to deface the website :

https://hackforums.net/showthread.php?tid=2087563

Credits : -DownFall

--

Last The WHMCS :

Regarding WHMCS, I'll explain how to exploit it.

Instead of defacing it and lose some good information ! Better use this little script that

allow you to have more !

All you have to do is copy the data logins in the txt file
and put them in the right case :

db_host :
db_username:
db_password:
db_name :
cc_encryption_hash:

This script is named : WHMCS KILLER "Coded by RAB3OUN".

Spoiler (Click to View)[img]http://img580.imageshack.us/img580/5426/wh1pz.jpg[/img]

--
| Features : |
| |
| |
|H0st r00ts |
|Domains Resellers |
|Clients r00ts |
|Clients Hosting Accounts |
|Clients CC |
|Clients Tickets |
|FTP and SMTP password |
|Tools |
|SQL Query |
|Show clients |
|BackUp |
|Eval PHP |
| |
--

This script is simple to use and give you the possibility to connect to a Cpanel, Webhoster and more ....

Screenshot :

Spoiler (Click to View)
[img]http://img848.imageshack.us/img848/9972/haxor.jpg[/img]

I almost forgot the script :
Spoiler (Click to View)
username : root
password : 123456

http://pastebin.com/xxZfDDPK

I hope you enjoyed my tutorial, thank you for reading.

[joomlafkr]

Finally you made it !
Good to see a tutorial of yours :p , and yeah HF is lacking of new tutorials...
i just wanna add that they could make something more interesting than defacing those symlinked portals !
and maybe if they find the whmcs in the /root/public_html they could do magic things with it !

[HeXagone]

thanks for the positive feedbacks guys

HeXagone

[Sw1x]

Nice tutorial, keep it up, this is helpful!

[HeXagone]

thank hope you find this tut useful

[inurl]

thx a lor man , now just need to make it work :)

Thx

[HeXagone]

Thanks you guys ! glad to do anything to help the community

[einbrettholz]

sweet! very comprehensive.. will try this on my homeserver for funnzies.

[HeXagone]

sweet! very comprehensive.. will try this on my homeserver for funnzies.

Thanks hope you succeed :)

HeXagone

[noober1001]

Thank you so much for sharing this.
I liked whcms part specially.
Thanks again.

[HeXagone]

No problem mate hope you enjoy the reading

[Th3PonyWizard]

Question. Is symliking possible on Windows based boxes?

[joomlafkr]

Response : Yep it is possible with one command :) , but it's not very common since if you can symlink in windows it means that you can run cmd commands==>you can escalate privileges and be the admin !

[HeXagone]

Hope that will help you HF Members :p

[kabir_crack]

GREAT TUTORIAL DUDE.. EXCELLENT JOB..