[HaxOr❤]

Hello Hackforums.
Since lot of you are new to this section i'm gonna show you how to hack your targeted website.
This is not easy to do but i will try to explain as much as i can.

Things we will need:

1) Target website
2) PHP shell (I use WSO)
3) Symlink script (I will provide that at the end)
4) MySQL manager

Chapter I

Now, when you checked your site and it has no vulnerable points you are pretty much screwed, right?

There is one thing left.
We can hack into the same website on the same server (I know that this sounds wierd to you but you will see why in a minute)

So we have our target website URL and now we must find out the IP.
We go to the Start -> CMD and type:

Code

ping www.target.com

[img]http://img805.imageshack.us/img805/4355/regionxw.png[/img]
[img]http://img138.imageshack.us/img138/6647/regionsh.png[/img]

Spoiler (Click to View)
Replace the www.target.com with your site.


Now when we have our servers IP it's time to find vulnerable websites.

Go to http://bing.com and enter:

Code

IP:IPyougotbypingingthesite ".php?*="

[img]http://img99.imageshack.us/img99/3843/regionhe.png[/img]

Now let's search for an website vulnerable to SQLi. (It can be any site, any vulnerability)

After few minutes i have found my vulnerable website.
I have admin info and i shelled it.

(You can find that here https://hackforums.net/showthread.php?tid=2615672 )

So i'm in my shell now and it's time to access our target site.

Chapter II

First thing you need to find is a full path of your website.
It is usually like:

Code

/home/username/public_html/

Now go to your shell and execute this command:

Code

cat /etc/passwd

[img]http://img228.imageshack.us/img228/47/regioni.png[/img]
[img]http://img715.imageshack.us/img715/1792/regionkn.png[/img]

Now copy all text you got and paste it into your notepad.
That file contains all users that use that server so your target will be there.

My target has "cube" in it's URL so i will search for "cube" in the notepad.
You got the point, right?

[img]http://img341.imageshack.us/img341/2795/regiongd.png[/img]

Now i know my targets full path:

Code

/home/softcube/public_html/

Chapter III

When you have full path it should be easy from now.
My website is Joomla and i know where is the file that contains MySQL connection info.

Code

/home/softcube/public_html/configuration.php

Just browse around your site and you will figure out what software it runs.
For wordpress is

Code

/home/softcube/public_html/wp-config.php

So upload our symlink file and mysql editor file.
Open symlink file and enter your websites path and file you want to view.
In my case it's:

Code

/home/softcube/public_html/configuration.php

[img]http://img35.imageshack.us/img35/2513/regioncn.png[/img]
[img]http://img585.imageshack.us/img585/4794/regiontf.png[/img]

Now click on the "symlink" and now we have our targets mysql info.

[img]http://img651.imageshack.us/img651/1213/mozillafirefoxr.png[/img]

Copy all that in a Notepad++
(It's better because you can easily find password and username)
Find username and password and open mysql.php file.
Enter the credentials and now we can edit the database.

[img]http://img824.imageshack.us/img824/8474/regionvw.png[/img]
[img]http://img845.imageshack.us/img845/9578/regionpw.png[/img]
[img]http://img38.imageshack.us/img38/711/regionfv.png[/img]

Now click "Tables" and find admin table.
It can be users, staff and replace admin hash.
(Remember to note down original hash so that way your hack stays undetected if you want access)

[img]http://img853.imageshack.us/img853/8381/regionsc.png[/img]

Now, i've changed the hash and logged into the Joomla panel.

[img]http://img600.imageshack.us/img600/2779/wholescreenh.png[/img]

And now i just have to shell it.

That's all for now.
I know i did bad on explanation but if you want you can PM me or post here and i will awswer all of your questions. ;)

1) Symlink script -> http://pastebin.com/yYJ4Urhr
2) MySQL script -> http://pastebin.com/wBg5qeMX
3) WSO shell -> http://pastebin.com/M8b2t3BD (Change the hash! Default password is 123)

[CyberSyringe]

Hacking the unhackable 😁

Great HQ tutorial, will add this to my collection.

[Hayley]

Amazing! All of your tutorials are just awesome. I'll be bookmarking this for later use.
Jesi zvijer. :D

[Bacardi]

Really good as always. Got it bookmarked.

[ĦĒČŦØŔ]

Great tutorial mate I would try that now.
Thank you.

[MagicMushroom™]

Wow...amazing!
I realy need this!
Bookmarked for testing it later...

[Light Yagami.]

best tut i ever seen thanks for posting this i well use this for sure

[soeasy]

Freaking awesome tutorial one more time.
You are great.🙂

[root.localhost]

Meh this is kinda miss leading in a way because real hacking takes time to plan out however sometimes you might be able to find a backdoor to get in and i dont mean a trojan back door i mean like finding a website that is hosted on the same server and that website might be vulnerable which could then let you hack the site your mainly trying to target....

I made a video that talks about using Symlinks bypassing it is a nice way to hack shared servers without needing to get r00t on them...

[Dyme]

Another great tutorial. Thanks for contributing!

[HaxOr❤]

Thanks for the support guys! :)       

[RUMBLE]

Great tutorial, bookmarked 😁
Thanks

[wraithcranzz]

Wow amazing Tutorial mate! Im Gonna Try this method now ;)
Thanks 👍

[Desmolicious]

lol xD I searched on bing and got "No results found for IP:85.xx.xxx.xxx".php?*=". " (lol I fail xD)

[king225]

Great tutorial man,,, always tutorial have more knowledge