+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.li/Forum-Tutorials)
+--- Thread: Tutorial Compromising plasma botnets (/Thread-Tutorial-Compromising-plasma-botnets)
Pages:
1
2
Compromising plasma botnets - Bannedshee - 03-28-2014
Special thanks to @Hellborn for providing some of this information.
Okay so this is more of admin stupidity then a vulnerability, like the merge dir for mybb or the install for vbulletin.
First, you're gonna need to find some plasma URLs, if you dont have one, try using a google dork like
"inurl:plasma/login.php"
or you can go to http://cybercrime-tracker.net/index.php?search=plasma where people report the login pages.
After you have a target website, simply replace login.php with install.php and create a new account, then go back to login.php and login.
This rarely works, but its pretty cool when it does.
So again thanks hellborn.
RE: Compromising plasma botnets - Blue - 03-28-2014
I am trying this now, Thank you a lot.
There are several way to hijack botnets, and I remember seeing a tutorial somewhere but I can't remember where.
EDIT; Doesn't seem like any of these works so guess I will have to wait and try some other time whenever the list is refreshed.
RE: Compromising plasma botnets - Skitstep - 03-28-2014
Google Dorks only came up with two results
I tried some of the sites on cybercrime tracker, but none of those worked. Seems like a cool method though if you could get it to work correctly.
RE: Compromising plasma botnets - Satan - 03-28-2014
(03-28-2014, 03:37 PM)Vipr Wrote: Google Dorks only came up with two results
Best bet is to find ones that aren't listed, but that takes time and effort.
Even then, this would require someone to be pretty stupid with their setup, which most aren't, but is still possible.
RE: Compromising plasma botnets - Bannedshee - 03-28-2014
(03-28-2014, 03:32 PM)Blue Wrote: I am trying this now, Thank you a lot.
There are several way to hijack botnets, and I remember seeing a tutorial somewhere but I can't remember where.
EDIT; Doesn't seem like any of these works so guess I will have to wait and try some other time whenever the list is refreshed.
Yeah, i usually check the list and the google dork every day and see if theres a new site.
(03-28-2014, 03:37 PM)Vipr Wrote: Google Dorks only came up with two results
It works, just really hard to find sites
(03-28-2014, 03:45 PM)Satan Wrote: Best bet is to find ones that aren't listed, but that takes time and effort.
Even then, this would require someone to be pretty stupid with their setup, which most aren't, but is still possible.
This.
RE: Compromising plasma botnets - Satan - 03-28-2014
(03-28-2014, 03:53 PM)Bannedshee Wrote: Yeah, i usually check the list and the google dork every day and see if theres a new site.
It works, just really hard to find sites
This.
What all can you do with it, I mean can you transfer them over to your own net?
RE: Compromising plasma botnets - Bannedshee - 03-28-2014
(03-28-2014, 03:55 PM)Satan Wrote: What all can you do with it, I mean can you transfer them over to your own net?
Yep, plasma has a built in function to update and install a new file using URL download, and it has a botkill.
RE: Compromising plasma botnets - Reiko - 03-28-2014
Hah. This is funnier than the booter thing.
RE: Compromising plasma botnets - Oni - 03-28-2014
You know, it is "vulnerabilities" like these that really entertain me. There's no worse vulnerability than a stupid administrator.
RE: Compromising plasma botnets - Bannedshee - 03-28-2014
(03-28-2014, 07:37 PM)Oni Wrote: You know, it is "vulnerabilities" like these that really entertain me. There's no worse vulnerability than a stupid administrator.
Its like leaving your front door open when you know theres a pack of wild dogs outside your house.