Back before I wrote my crappy, outdated Metasploit tutorial, no one knew what Metasploit was. Now there is a tutroial being posted on it every other day. I hope the same thing happens with this tutorial. This tutorial explains, IN DEPTH, how to:
1. Set up an IRCd
2. Find VPSs to target
3. Exploit VPSs
4. Setup and use mIRC
5. Use knight.c
6. Rase a powerfull botnet armey from scratch
It's a bit of a read, but I hope you enjoy it! Thanks. 🤝
http://thebth.org/?p=345
Edit: Ok, this pdf is the entire text of the post. I'm having some server issues, and the site will be back up as soon as they are resolved.
http://www.4shared.com/document/ysPVhee1...oting.html?
Very nice Tutorial, Quality, keep it up.
Nice in depth tutorial :D Thanks for posting.
Thank you very much for this. Bookmarked , so I can read it later. :)
pls fixx this:This Account Has Been Suspended ;D
Error : This Account Has Been Suspended
Please fix that.
I'm very interested, please post a new link, thanks ;)
Ok, I fixed it (sort of). You can read about it in the pdf, which is the text of the post. :D
thanks for the tutorial and very interesting ;)
This looks really good, but could you please make it into a thread?
(Oct 22, 2011 10:03 PM)Frostbite™ Wrote: This looks really good, but could you please make it into a thread?
I did and it was 400 words to long, so there is now a part I and II floating around. :D
Oct 23, 2011 05:43 AM
(This post was last modified: Oct 23, 2011 05:49 AM by bluebknight.)
Well, isn't it more concentrated about how to make a DDOS system rather than how to root?
From my experience, Chances of Exploiting linux systems via remote exploits are extremely rare. For example, a nmap scan will show you lots of vulnerable ProFTPd server, for example, but chances of exploiting it is very rare. Hardly any server run as "root" and there's no way to get root via "get system" like in metasploit. You need a local root exploit at this point.
According to your topic, your post should have been something like, how to get a shell in a server via SQL injection/LFI/RFI and then rooting it via a local root exploit. And, then you could have had written about the DDOS setup. Btw, I haven't tried it but I don't think that your "knight.c" requires root permissions at all. r57 shell and most shells already can back-connect via irc.
You also wrote "Be a bawz and make your own exploit. This is VERY easy with the metasploit
framework," yeah, right... Have you ever written an exploit in your life? Forget about writing one, have you ever even found a heap/stack or a simple memory address to overflow? If it was "VERY easy" there would be tons of linux exploits. With the implementation of ASLR, it's near impossible to write a exploit cause it's extremely hard to find the exact point that you are overflowing with your fuzzer.
You think of yourself as someone in Stage 5 but you are in Stage 3/4. Other than RATting and DDOSing, there are lots of more stages to hacking, which includes reverse engineering, writing your own exploits, use JTAG/SPI to put exploits in the NAND/FLASH memory. etc...
P.S. I do not hate you or anything but I just think you should correct the name of your topic and you still have a loot more to learn. Take my criticize as a start to learn more and I liked the part about where you explained about how to setup the IRC server. There isn't a very well written tutorial about that anywhere. You should also write a tutorial about how to setup a channel on dalnet or any public channel like that so that people who has trouble port forwarding due to ISP restrictions etc. can use bots and also can have a shell backconnect to an IRC server.
(Oct 23, 2011 05:43 AM)bluebknight Wrote: Well, isn't it more concentrated about how to make a DDOS system rather than how to root?
From my experience, Chances of Exploiting linux systems via remote exploits are extremely rare. For example, a nmap scan will show you lots of vulnerable ProFTPd server, for example, but chances of exploiting it is very rare. Hardly any server run as "root" and there's no way to get root via "get system" like in metasploit. You need a local root exploit at this point.
According to your topic, your post should have been something like, how to get a shell in a server via SQL injection/LFI/RFI and then rooting it via a local root exploit. And, then you could have had written about the DDOS setup. Btw, I haven't tried it but I don't think that your "knight.c" requires root permissions at all. r57 shell and most shells already can back-connect via irc.
You also wrote "Be a bawz and make your own exploit. This is VERY easy with the metasploit
framework," yeah, right... Have you ever written an exploit in your life? Forget about writing one, have you ever even found a heap/stack or a simple memory address to overflow? If it was "VERY easy" there would be tons of linux exploits. With the implementation of ASLR, it's near impossible to write a exploit cause it's extremely hard to find the exact point that you are overflowing with your fuzzer.
You think of yourself as someone in Stage 5 but you are in Stage 3/4. Other than RATting and DDOSing, there are lots of more stages to hacking, which includes reverse engineering, writing your own exploits, use JTAG/SPI to put exploits in the NAND/FLASH memory. etc...
P.S. I do not hate you or anything but I just think you should correct the name of your topic and you still have a loot more to learn. Take my criticize as a start to learn more and I liked the part about where you explained about how to setup the IRC server. There isn't a very well written tutorial about that anywhere. You should also write a tutorial about how to setup a channel on dalnet or any public channel like that so that people who has trouble port forwarding due to ISP restrictions etc. can use bots and also can have a shell backconnect to an IRC server.
The bits of that I understand of that are very true and the bits I dont sound very legit as well. But yeah this guide is more focused on building a DDoS system, not rooting.
wow m8 , ive read it setup my IRC server thing and got 3 vps's things!!! Thanks m8! instead of using them with the irc thing though im using putty and making loads of putty booters to sell.
hey ... thanks for the tutorial mate...
|
