[x]
We are happy to see you on AH
AH - AndhraHackers is a place to entertain as well to spread knowledge around.
One of the most exciting Indian Community over Internet.

We would like you to Join AH Forum Today.

Why to JOIN AH forum ?
+  Andhra Hackers , Indian Hackers , Indian Cyber Warriors , Ethical Hackers Forum
|-+  °l||l° HacKing/Exploits Zone °l||l°» HacKing Tut.» How to root a linux php-shelled box?
Username:
Password:
Home Help Search Terms of Service Login Register
Pages: 1 [2] 3   Go Down
« previous next »
  Print  
Author Topic: How to root a linux php-shelled box?  (Read 993 times)
0 Members and 2 Guests are viewing this topic.
Mr.XXXX
ICW Team Leader
Full Member
*******

Karma: +8/-0
Online Online

Posts: 108
« Reply #15 on: October 03, 2009, 07:37:25 AM »
For Lynx box:


Code:
http://milw0rm.com/video/watch.php?id=92


Windows box:


Code:
http://milw0rm.com/video/watch.php?id=88
Logged
Andhra Hackers , Indian Hackers , Indian Cyber Warriors , Ethical Hackers Forum
« Reply #15 on: October 03, 2009, 07:37:25 AM »
 Logged
Sm4rt_Hax0r
Global Moderator
Full Member
*

Karma: +4/-1
Offline Offline

Posts: 193



WWW
« Reply #16 on: October 04, 2009, 03:53:13 PM »
y0! they are cool!
Logged
tango_charlie
n00b
*

Karma: +1/-0
Offline Offline

Posts: 30
« Reply #17 on: October 06, 2009, 01:01:34 PM »
ehh thanx much bro u rocks 
Logged
D4rk357
ICW Team Member
Jr. Member
*****

Karma: +3/-0
Offline Offline

Posts: 69



WWW
« Reply #18 on: October 06, 2009, 10:54:05 PM »
thanks man.....butstill way to long to go for me before i am ablee to root one Embarrassed
Logged
Sm4rt_Hax0r
Global Moderator
Full Member
*

Karma: +4/-1
Offline Offline

Posts: 193



WWW
« Reply #19 on: October 07, 2009, 10:51:21 AM »
Quote from: darken on October 06, 2009, 10:54:05 PM
thanks man.....butstill way to long to go for me before i am ablee to root one Embarrassed


rooting server is an art... this is BASIC trick! MOST BASIC!!! but understand this -> God is found in small details!


look for small details and fetch a big picture! Best of luck dude! 
Logged
Mr.XXXX
ICW Team Leader
Full Member
*******

Karma: +8/-0
Online Online

Posts: 108
« Reply #20 on: October 07, 2009, 11:12:52 AM »
Quote from: Sm4rt_Hax0r on October 07, 2009, 10:51:21 AM
Quote from: darken on October 06, 2009, 10:54:05 PM
thanks man.....butstill way to long to go for me before i am ablee to root one Embarrassed


rooting server is an art... this is BASIC trick! MOST BASIC!!! but understand this -> God is found in small details!


look for small details and fetch a big picture! Best of luck dude! 


If it is basic method ,then wat r advanced ? N wat r other ways to root servers...
Logged
D4rk357
ICW Team Member
Jr. Member
*****

Karma: +3/-0
Offline Offline

Posts: 69



WWW
« Reply #21 on: October 10, 2009, 04:04:41 AM »
Quote from: Sm4rt_Hax0r on October 07, 2009, 10:51:21 AM
Quote from: darken on October 06, 2009, 10:54:05 PM
thanks man.....butstill way to long to go for me before i am ablee to root one Embarrassed


rooting server is an art... this is BASIC trick! MOST BASIC!!! but understand this -> God is found in small details!


look for small details and fetch a big picture! Best of luck dude! 
your first step>..

upload a shell..
i know about shells a bit..r57 and c99 and even chakravyuh  Smiley i guess..
but how to upload it??
Logged
D4rk357
ICW Team Member
Jr. Member
*****

Karma: +3/-0
Offline Offline

Posts: 69



WWW
« Reply #22 on: October 10, 2009, 04:06:32 AM »
Requirements: system,passthru, NOT disabled, so it is always a good idea to check phpinfo() before proceeding. Site admin MAY get to know about intrusion if system is disabled or SELinux is activated. You will need netcat (nc) for back connection. I prefer using my favourite Locus or C99 shells.
^^^^^^^^^
system , passthry , NOT DISABLED..are they option in shells..

sorry for my ignorance!!
Logged
Sm4rt_Hax0r
Global Moderator
Full Member
*

Karma: +4/-1
Offline Offline

Posts: 193



WWW
« Reply #23 on: October 13, 2009, 11:33:32 PM »
Quote from: darken on October 10, 2009, 04:06:32 AM
Requirements: system,passthru, NOT disabled, so it is always a good idea to check phpinfo() before proceeding. Site admin MAY get to know about intrusion if system is disabled or SELinux is activated. You will need netcat (nc) for back connection. I prefer using my favourite Locus or C99 shells.
^^^^^^^^^
system , passthry , NOT DISABLED..are they option in shells..

sorry for my ignorance!!

No, they are PHP configurations, check the images, I have also shown if it would look in phpinfo()
Logged
Sm4rt_Hax0r
Global Moderator
Full Member
*

Karma: +4/-1
Offline Offline

Posts: 193



WWW
« Reply #24 on: October 13, 2009, 11:41:52 PM »
Quote from: darken on October 10, 2009, 04:04:41 AM
Quote from: Sm4rt_Hax0r on October 07, 2009, 10:51:21 AM
Quote from: darken on October 06, 2009, 10:54:05 PM
thanks man.....butstill way to long to go for me before i am ablee to root one Embarrassed


rooting server is an art... this is BASIC trick! MOST BASIC!!! but understand this -> God is found in small details!


look for small details and fetch a big picture! Best of luck dude! 
your first step>..

upload a shell..
i know about shells a bit..r57 and c99 and even chakravyuh  Smiley i guess..
but how to upload it??


There are MANY methods to upload shell. For example when Zombie or his troupes attacked ICW server, they found a loop in signature, yes, you upload images in signature, I did not sanitize it.. However, since my SELinux was "well configured", it caught the port opening and blocked the execution, right there! now, you are getting confused my friend, Chakraviewh is asp shell and NOT php shell... If you find Linux box with php and apache on it, you can follow this method! else, you cannot, I have heard of python shell but, haven't seen it yet so if I get a server that runs ONLY python script like django framework project dpaste is... so php/asp shells wont work there.. I would suggest that you seek basic web knowledge then proceed with rooting a box  Wink
Logged
Sm4rt_Hax0r
Global Moderator
Full Member
*

Karma: +4/-1
Offline Offline

Posts: 193



WWW
« Reply #25 on: October 13, 2009, 11:43:25 PM »
Quote from: Mr.XXXX on October 07, 2009, 11:12:52 AM
Quote from: Sm4rt_Hax0r on October 07, 2009, 10:51:21 AM
Quote from: darken on October 06, 2009, 10:54:05 PM
thanks man.....butstill way to long to go for me before i am ablee to root one Embarrassed


rooting server is an art... this is BASIC trick! MOST BASIC!!! but understand this -> God is found in small details!


look for small details and fetch a big picture! Best of luck dude! 


If it is basic method ,then wat r advanced ? N wat r other ways to root servers...

Port Poisoning
Server-side exploits
and
Social engineering  Grin
Logged
D4rk357
ICW Team Member
Jr. Member
*****

Karma: +3/-0
Offline Offline

Posts: 69



WWW
« Reply #26 on: October 15, 2009, 10:35:35 PM »
Quote from: Sm4rt_Hax0r on October 13, 2009, 11:41:52 PM
Quote from: darken on October 10, 2009, 04:04:41 AM
Quote from: Sm4rt_Hax0r on October 07, 2009, 10:51:21 AM
Quote from: darken on October 06, 2009, 10:54:05 PM
thanks man.....butstill way to long to go for me before i am ablee to root one Embarrassed


rooting server is an art... this is BASIC trick! MOST BASIC!!! but understand this -> God is found in small details!


look for small details and fetch a big picture! Best of luck dude! 
your first step>..

upload a shell..
i know about shells a bit..r57 and c99 and even chakravyuh  Smiley i guess..
but how to upload it??


There are MANY methods to upload shell. For example when Zombie or his troupes attacked ICW server, they found a loop in signature, yes, you upload images in signature, I did not sanitize it.. However, since my SELinux was "well configured", it caught the port opening and blocked the execution, right there! now, you are getting confused my friend, Chakraviewh is asp shell and NOT php shell... If you find Linux box with php and apache on it, you can follow this method! else, you cannot, I have heard of python shell but, haven't seen it yet so if I get a server that runs ONLY python script like django framework project dpaste is... so php/asp shells wont work there.. I would suggest that you seek basic web knowledge then proceed with rooting a box  Wink

yeah...you are righto...
Logged
d4rk-blu™®
ICW Team Leader
Sr. Member
*******

Karma: +9/-0
Offline Offline

Posts: 350


N!9h7_M4R3


WWW
« Reply #27 on: October 17, 2009, 01:20:02 AM »
Quote from: Sm4rt_Hax0r on October 13, 2009, 11:43:25 PM
Quote from: Mr.XXXX on October 07, 2009, 11:12:52 AM
Quote from: Sm4rt_Hax0r on October 07, 2009, 10:51:21 AM
Quote from: darken on October 06, 2009, 10:54:05 PM
thanks man.....butstill way to long to go for me before i am ablee to root one Embarrassed


rooting server is an art... this is BASIC trick! MOST BASIC!!! but understand this -> God is found in small details!


look for small details and fetch a big picture! Best of luck dude! 


If it is basic method ,then wat r advanced ? N wat r other ways to root servers...

Port Poisoning
Server-side exploits
and
Social engineering  Grin

Lolz sm4rt is 100% vul to social engineering Grin
Logged
Signed by d4rk-blu™® Cool

My tutorials of C Programming Smiley

http://www.andhrahackers.com/forum/index.php/topic,1691.0.html

NOTE :: I don't take any responsibility of the softwares posted here on AndhraHackers.com by me as they aren't uploaded by me so they may have virus therefore use a good anti virus Smiley
silent123
ICW Team Member
n00b
*****

Karma: +4/-0
Offline Offline

Posts: 38


Sp1r!tUaL!Ty i5 LuBrIcat!0n f0r StAbl3 MiNd
« Reply #28 on: October 18, 2009, 05:02:32 AM »
  \m/KewLL.......

awesome Smiley Smiley
Logged
Evil-Reddy
Jr. Member
**

Karma: +1/-0
Offline Offline

Posts: 75
« Reply #29 on: November 24, 2009, 06:50:34 AM »
thanxxxxxxxxx
Logged
Andhra Hackers , Indian Hackers , Indian Cyber Warriors , Ethical Hackers Forum
   
 Logged
Pages: 1 [2] 3   Go Up
  Print  
« previous next »
 
Jump to:  


whitec0de.com | Techian.com | GfxLovers.com | CDN Pic | Inj3ct0r Exploit DB | Garage4Hackers
Theme by Indian Servers. Powered by SMF 1.1.11 | SMF © 2006-2009, Simple Machines LLC MySQL | PHP | XHTML | CSS
Page created in 0.134 seconds with 26 queries.