Apr 16, 2012 06:57 AM
(This post was last modified: Apr 16, 2012 07:29 AM by BeggFoMercy.)
Hey HF , Today ill be showing u how to symlink a hacked web site/server
WhySymlinking ?
Some times, After hacking a web site , We find that the kernel of the server is 2011,2012 , So its gonna be hard or impossible to exploit/root it and gain the other web sites hosted on that server , So Our PlanB Is to symlink it - Gain access to all web sites on that server without gaining root access..
Requirements:
1-Hacked (web site - shell -)
2-Some scripts will be posted at the end of the Tutorial
3-A hacker's brain
First step" Uploading Tools":
First of all we will need to make a new folder on a hacked web server To start symlinking in a clean Enviroment ;)
![[Image: 8noF8.png]](https://i.imgur.com/8noF8.png)
Now after entering our Folder name And click forward , We will see a new folder made , Now we will head up to open it and upload:
1-.htaccess - Lists the folder as List
2- Perl Script , That will config the /etc/passwd/ Into the web sites
configuration
3-Mysql Connector - Connects to the Mysql DB on the localhost.
Just like that
![[Image: 7ztrG.png]](https://i.imgur.com/7ztrG.png)
Now we will need to chmod Our Perl Script To "0755" So we can view/edit/rename it Other wise we will be forbidden
Just click on the
At the same line of allsoft.pl
Then chmod to 0755 As in the pic
![[Image: GGmFF.png]](https://i.imgur.com/GGmFF.png)
Now lets click on the Sec.Info For the /etc/passwd/ Infoz
![[Image: lnHOt.png]](https://i.imgur.com/lnHOt.png)
Now for the view of the /etc/passwd/ We click on View Beside it
Now copy all the Daemons And head over to ur pl script Like that
And then it will look like that
![[Image: Jydvm.png]](https://i.imgur.com/Jydvm.png)
Paste the codes u got from /etc/passwd viewing And Click Get Config
It will start loading then It will tell you Done!
Now this is the most loved part ever Viewing the gathered sites on the directory
Now head over to ur directory that contains the .htaccess
Example:
The testfolder Should be the folder that contains our scripts including .htaccess
It will load for some secs , Then it will open like a list
![[Image: L9DhK.png]](https://i.imgur.com/L9DhK.png)
The shaded things are The web sites configuration
Now open a specific one ... Open ur mysql.php Connector that is uploaded on the same folde
Connect to the mysql / Shell it
I will not be showing u how to do that because most of u Know how to do it
https://hackforums.net/showthread.php?tid=2404357
This is just for joomla provided sites , Ill be making another tutorial about how to shell wordpress Sites...
Shout outs :
1-Inj3ctors
2-INTRA
3-Zer0Freak
4-HaxOr <3
5-joomlafkr
Etc..
Download scripts: Click me
End of the Tutorial ;)
-BeggFoMercy
WhySymlinking ?
Some times, After hacking a web site , We find that the kernel of the server is 2011,2012 , So its gonna be hard or impossible to exploit/root it and gain the other web sites hosted on that server , So Our PlanB Is to symlink it - Gain access to all web sites on that server without gaining root access..
Requirements:
1-Hacked (web site - shell -)
2-Some scripts will be posted at the end of the Tutorial
3-A hacker's brain
First step" Uploading Tools":
First of all we will need to make a new folder on a hacked web server To start symlinking in a clean Enviroment ;)
![[Image: 8noF8.png]](https://i.imgur.com/8noF8.png)
Now after entering our Folder name And click forward , We will see a new folder made , Now we will head up to open it and upload:
1-.htaccess - Lists the folder as List
2- Perl Script , That will config the /etc/passwd/ Into the web sites
configuration
3-Mysql Connector - Connects to the Mysql DB on the localhost.
Just like that
![[Image: 7ztrG.png]](https://i.imgur.com/7ztrG.png)
Now we will need to chmod Our Perl Script To "0755" So we can view/edit/rename it Other wise we will be forbidden
Just click on the
Code
-rw-r--r--Then chmod to 0755 As in the pic
![[Image: GGmFF.png]](https://i.imgur.com/GGmFF.png)
Now lets click on the Sec.Info For the /etc/passwd/ Infoz
![[Image: lnHOt.png]](https://i.imgur.com/lnHOt.png)
Now for the view of the /etc/passwd/ We click on View Beside it
Now copy all the Daemons And head over to ur pl script Like that
And then it will look like that
![[Image: Jydvm.png]](https://i.imgur.com/Jydvm.png)
Paste the codes u got from /etc/passwd viewing And Click Get Config
It will start loading then It will tell you Done!
Now this is the most loved part ever Viewing the gathered sites on the directory
Now head over to ur directory that contains the .htaccess
Example:
Code
www.site.com/logs/testfolder/It will load for some secs , Then it will open like a list
![[Image: L9DhK.png]](https://i.imgur.com/L9DhK.png)
The shaded things are The web sites configuration
Now open a specific one ... Open ur mysql.php Connector that is uploaded on the same folde
Connect to the mysql / Shell it
I will not be showing u how to do that because most of u Know how to do it
https://hackforums.net/showthread.php?tid=2404357
This is just for joomla provided sites , Ill be making another tutorial about how to shell wordpress Sites...
Shout outs :
1-Inj3ctors
2-INTRA
3-Zer0Freak
4-HaxOr <3
5-joomlafkr
Etc..
Download scripts: Click me
End of the Tutorial ;)
-BeggFoMercy
Team INTRA



![[Image: YbnrlXn.gif]](https://i.imgur.com/YbnrlXn.gif)
![[Image: LWpI0zO.png]](https://i.imgur.com/LWpI0zO.png)