Sinisterly
Symlink-With Picture TuT ! - Printable Version

+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.li/Forum-Tutorials)
+--- Thread: Symlink-With Picture TuT ! (/Thread-Symlink-With-Picture-TuT)

Symlink-With Picture TuT ! - coolisa - 04-28-2012

Hey ISA MEMBERS , Today ill be showing u how to symlink a hacked web site/server !

WhySymlinking ?
Some times, After hacking a web site , We find that the kernel of the server is 2011,2012 , So its gonna be hard or impossible to exploit/root it and gain the other web sites hosted on that server , So Our PlanB Is to symlink it - Gain access to all web sites on that server without gaining root access..
Requirements:
1-Hacked (web site - shell -)
2-Some scripts will be posted at the end of the Tutorial
3-A hacker's brain
First step" Uploading Tools":
First of all we will need to make a new folder on a hacked web server To start symlinking in a clean Enviroment
[Image: 8noF8.png]
Now after entering our Folder name And click forward , We will see a new folder made , Now we will head up to open it and upload:
1-.htaccess - Lists the folder as List
2- Perl Script , That will config the /etc/passwd/ Into the web sites
configuration
3-Mysql Connector - Connects to the Mysql DB on the localhost.
Just like that
[Image: 7ztrG.png]
Now we will need to chmod Our Perl Script To "0755" So we can view/edit/rename it Other wise we will be forbidden
Just click on the

Code:

Quote: -rw-r--r--



At the same line of allsoft.pl
Then chmod to 0755 As in the pic
[Image: GGmFF.png]
Now lets click on the Sec.Info For the /etc/passwd/ Infoz
[Image: lnHOt.png]
Now for the view of the /etc/passwd/ We click on View Beside it
Now copy all the Daemons And head over to ur pl script Like that
And then it will look like that
[Image: Jydvm.png]
Paste the codes u got from /etc/passwd viewing And Click Get Config
It will start loading then It will tell you Done!
Now this is the most loved part ever Viewing the gathered sites on the directory
Now head over to ur directory that contains the .htaccess
Example:


Code:

Quote: www.site.com/logs/testfolder/

The testfolder Should be the folder that contains our scripts including .htaccess
It will load for some secs , Then it will open like a list
[Image: L9DhK.png]
The shaded things are The web sites configuration
Now open a specific one ... Open ur mysql.php Connector that is uploaded on the same folde

Connect to the mysql / Shell it
I will not be showing u how to do that because most of u Know how to do it

Download scripts: Click Here

Enjoy Symlink !

Symlink-With Picture TuT ! - coolisa - 04-28-2012

Hey ISA MEMBERS , Today ill be showing u how to symlink a hacked web site/server !

WhySymlinking ?
Some times, After hacking a web site , We find that the kernel of the server is 2011,2012 , So its gonna be hard or impossible to exploit/root it and gain the other web sites hosted on that server , So Our PlanB Is to symlink it - Gain access to all web sites on that server without gaining root access..
Requirements:
1-Hacked (web site - shell -)
2-Some scripts will be posted at the end of the Tutorial
3-A hacker's brain
First step" Uploading Tools":
First of all we will need to make a new folder on a hacked web server To start symlinking in a clean Enviroment
[Image: 8noF8.png]
Now after entering our Folder name And click forward , We will see a new folder made , Now we will head up to open it and upload:
1-.htaccess - Lists the folder as List
2- Perl Script , That will config the /etc/passwd/ Into the web sites
configuration
3-Mysql Connector - Connects to the Mysql DB on the localhost.
Just like that
[Image: 7ztrG.png]
Now we will need to chmod Our Perl Script To "0755" So we can view/edit/rename it Other wise we will be forbidden
Just click on the

Code:

Quote: -rw-r--r--



At the same line of allsoft.pl
Then chmod to 0755 As in the pic
[Image: GGmFF.png]
Now lets click on the Sec.Info For the /etc/passwd/ Infoz
[Image: lnHOt.png]
Now for the view of the /etc/passwd/ We click on View Beside it
Now copy all the Daemons And head over to ur pl script Like that
And then it will look like that
[Image: Jydvm.png]
Paste the codes u got from /etc/passwd viewing And Click Get Config
It will start loading then It will tell you Done!
Now this is the most loved part ever Viewing the gathered sites on the directory
Now head over to ur directory that contains the .htaccess
Example:


Code:

Quote: www.site.com/logs/testfolder/

The testfolder Should be the folder that contains our scripts including .htaccess
It will load for some secs , Then it will open like a list
[Image: L9DhK.png]
The shaded things are The web sites configuration
Now open a specific one ... Open ur mysql.php Connector that is uploaded on the same folde

Connect to the mysql / Shell it
I will not be showing u how to do that because most of u Know how to do it

Download scripts: Click Here

Enjoy Symlink !