Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

[TUT]-Symlink-[/TUT][Pics][Noob-Friendly]

Hey HF , Today ill be showing u how to symlink a hacked web site/server
WhySymlinking ?
Some times, After hacking a web site , We find that the kernel of the server is 2011,2012 , So its gonna be hard or impossible to exploit/root it and gain the other web sites hosted on that server , So Our PlanB Is to symlink it - Gain access to all web sites on that server without gaining root access..
Requirements:
1-Hacked (web site - shell -)
2-Some scripts will be posted at the end of the Tutorial
3-A hacker's brain

First step" Uploading Tools":
First of all we will need to make a new folder on a hacked web server To start symlinking in a clean Enviroment ;)
[Image: 8noF8.png]
Now after entering our Folder name And click forward , We will see a new folder made , Now we will head up to open it and upload:
1-.htaccess - Lists the folder as List
2- Perl Script , That will config the /etc/passwd/ Into the web sites
configuration
3-Mysql Connector - Connects to the Mysql DB on the localhost.
Just like that

[Image: 7ztrG.png]
Now we will need to chmod Our Perl Script To "0755" So we can view/edit/rename it Other wise we will be forbidden
Just click on the

Code
    -rw-r--r--
At the same line of allsoft.pl
Then chmod to 0755 As in the pic

[Image: GGmFF.png]
Now lets click on the Sec.Info For the /etc/passwd/ Infoz
[Image: lnHOt.png]
Now for the view of the /etc/passwd/ We click on View Beside it
Now copy all the Daemons And head over to ur pl script Like that
And then it will look like that

[Image: Jydvm.png]
Paste the codes u got from /etc/passwd viewing And Click Get Config
It will start loading then It will tell you Done!
Now this is the most loved part ever Viewing the gathered sites on the directory
Now head over to ur directory that contains the .htaccess
Example:

Code
www.site.com/logs/testfolder/
The testfolder Should be the folder that contains our scripts including .htaccess
It will load for some secs , Then it will open like a list

[Image: L9DhK.png]
The shaded things are The web sites configuration
Now open a specific one ... Open ur mysql.php Connector that is uploaded on the same folde

Connect to the mysql / Shell it
I will not be showing u how to do that because most of u Know how to do it

https://hackforums.net/showthread.php?tid=2404357

This is just for joomla provided sites , Ill be making another tutorial about how to shell wordpress Sites...
Shout outs :
1-Inj3ctors
2-INTRA
3-Zer0Freak
4-HaxOr <3
5-joomlafkr
Etc..


Download scripts: Click me

End of the Tutorial ;)
-BeggFoMercy
Team INTRA
Thank you for this, I was wondering when I would see when you make a tutorial. :)

Thanks this will be useful.
Nice tutorial man. Good to read about something not as frequently discussed on here.
(Apr 16, 2012 07:03 AM)VipVince Wrote:  Nice tutorial man. Good to read about something not as frequently discussed on here.
Thanks for the feed back brothaz , And yea that made me make the tutorial ...
Team INTRA
Good writeup BeggforMercy !

Now they don't have any excuse to not to symlink the whole server :p

I have a remark : sometimes your perl file won't be able to find config files ,some of them are hidden...!

the trick is to symlink to index.php,read the source code and follow the calls to other php files !
(Apr 16, 2012 07:27 AM)joomlafkr Wrote:  Good writeup BeggforMercy !

Now they don't have any excuse to not to symlink the whole server :p

I have a remark : sometimes your perl file won't be able to find config files ,some of them are hidden...!

the trick is to symlink to index.php,read the source code and follow the calls to other php files !

Yea i know that Thanks for the remark bruh , Forgot ur name though bruh mb ;D
Team INTRA
nice one BeggFoMercy . .
Keep it up .
[Image: YbnrlXn.gif]
Really nice tutorial. I tried it out right away and worked like a charm!
Nice tutorial always happy to see lot of files :)
Thanks for the feed back brutharz, That really made my day ;)
Team INTRA
Seems to be an HQ tutorial, thanks to share on HF.
Thanks for the feed back bruthah..xD
Team INTRA
Thank you for this bro. Nice tutorial!
Fuckin-A Bro! Nice tutorial and very easy to understand. 👍 Unfortunately only a handful of us here know this method. 😵 Maybe with this tutorial it will inspire more people to symlink while they have a website shelled. You'd be surprised how many high traffic websites that may be hosted on that server. 🎉
Thanks for the feed back bruthah ;) , And Yea im really surprised , Worth 10k web sites + :D
Team INTRA


Possibly Related Threads...
Thread / Author Replies Views Last Post
by spirited_wolf™Aug 8, 2021 12:47 AM 11 1,094 Aug 8, 2021 12:47 AM
Last Post: savetree
by selfhateMar 21, 2020 10:59 AM 0 125 Mar 21, 2020 10:59 AM
Last Post: selfhate
by giocoplusps4Mar 6, 2020 08:29 AM 0 114 Mar 6, 2020 08:29 AM
Last Post: giocoplusps4