Private Crypter - Unique Private Stubs ◆ Cheap KYC Verifications & Openups ◆ Traffic service & campaign optimization ◆ Spoof Call and Spoof SMS set any caller ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Grayhat • Purple Team • Hybrid Security Website Hacking › question about /home , etc/passwd ( advanced )

New Reply 

question about /home , etc/passwd ( advanced )
WPA2
WPA2 Offline
[n00b@HF:]
*
Registered
Posts:
70
Threads:
9
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Nov 9, 2017 03:20 AM
Hey you guys many of you will think this is a very noob question or skid question. Anyways I decided to post it and see how many of you had faced the problem. To explain this quick I will explain this better by the following



mainTargetSite.com < this is our target

server ip: 104.20.209.21 < server for the target site

so after we did reverse look up, we found 3 more sites hosted in the same targeted server.


one of those sites was vulnerable. We uploaded a backdoor, phpshell , or ever perl shell. Anyways everything works fine but when ever you look for the target site under /home or etc/passwd

its not  showing. Its in the same server though with the same iP. Some might say the permissions but its not. Since its not even showing or accessible or symlink-able. Some might say the server is partitioned or something like that. Well I have seen servers before and trust me its nothing like this.

I study IT networking and Linux systems at the same time. So anyone who got experience with Linux let me know what you think.


by the way the server is using Apache, & everything seems very normal not much security but that one confused me. Ch33rs
Sexual Predator
Sexual Predator Offline
[closed@HF:]
Posts:
145
Threads:
27
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Nov 10, 2017 04:16 PM
You're all over the place, nothing you say makes sense.

If you tried symlinking and/or have any idea about what you're talking about as you claim to study this shit, you would know Servers aren't "partitioned" for hosting.

If you have a backdoor on there, try gaining root access. there's tons of scripts / exploits to do this.

If you can run commands, thats all you need to start. It's especially easier if it's an older server with outdated plugins ect.
Phire
Phire Offline
[user@HF:]
**
HF l33t
Posts:
341
Threads:
5
Credibility:
100
Popularity:
36
βytes:
β 0
Game XP:
10
Nov 10, 2017 04:32 PM
That's not their IP, they are using Cloudflare.
phire@phire:~# sudo apt-get install life
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Unable to locate package life
phire@phire:~# [Image: D7CMWR2.gif]
Hooded Robin
Hooded Robin Offline
[email protected]
***
HF Ub3r
Posts:
2,272
Threads:
104
Credibility:
000
Popularity:
77
βytes:
β 0
Game XP:
0
Nov 11, 2017 06:53 AM
If you have a shell, why don't you try to read the Apache configuration files out of /etc and then you can see if any vhost definitions are in there for additional sites hosted on the same server. If so, should define where they are located on the server if not using /home directory.

WPA2
WPA2 Offline
[n00b@HF:]
*
Registered
Posts:
70
Threads:
9
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Nov 28, 2017 10:51 PM
its CloudLinux with CageFS, I got a phpshell in the server , I see many bypasses in Youtube. Let me try,

Thanks Mr.Robin and .Phire
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by selfhateMar 31, 2017 04:33 AM 8 714 Mar 31, 2017 04:33 AM
Last Post: slayconsole
by VanderbiltJan 26, 2017 10:31 PM 5 180 Jan 26, 2017 10:31 PM
Last Post: •^v^–[ bLacKn3x ]–^v^•
by GDFolksBos6Aug 24, 2016 01:45 PM 7 281 Aug 24, 2016 01:45 PM
Last Post: GDFolksBos6