[Mr.Kurd]

In The Name Of Allah
Al-Salam Alekum
I have a server While I uploading shell or localroot the server will delete it..
I just have a weevely backdoor on the server , I don't know how I can get a root ...
I hope you help me...

[Mr.Kurd]

Guys there aren't solution for this problem?

[TechSaavy]

Anti-malware on the server? Are you sure the shell is actually being uploaded? Tried a different shell? Tried at a different time, maybe the admin is on, deleting it? These are some of the things I can think of from the top of my head.

[Mr.Kurd]

Anti-malware on the server? Are you sure the shell is actually being uploaded? Tried a different shell? Tried at a different time, maybe the admin is on, deleting it? These are some of the things I can think of from the top of my head.

Yes I have weevely back door on the server >>>> All time I upload Local root the server will delete it >>> So What I do??

[Mr.Kurd]

I have a weevely backdoor on the server, While I uploading shell or localroot the server will delete it.

[meow]

Anti-malware on the server? Are you sure the shell is actually being uploaded? Tried a different shell? Tried at a different time, maybe the admin is on, deleting it? These are some of the things I can think of from the top of my head.

Yes I have weevely back door on the server >>>> All time I upload Local root the server will delete it >>> So What I do??

1. if you're getting your local root exploit from a public source, remove things like comments and modify the code to get rid of any obvious signs that it's a local root exploit
2a. if PHP sessions are being stored in /tmp, upload it in whatever folder that is and name it something like "sess_kdkou4r5blub4f1sti2kelpcss"
2b. if PHP sessions aren't being stored in /tmp, upload it to somewhere in /tmp anyways and name it something like "fs01" or "bash"
3. if neither of step 2 worked, repeat step 1 and find any home directory you can write to and upload it there, again giving it a name like fs01 or bash or .bashrc
4. If none of this worked, repeat step 1, obfuscate the file (via a tool or doing it yourself), then repeat steps 2 and if 2 doesn't work with obfuscation try 3 with obfuscation

This is just something I thought of off the top of my head. There are probably plenty of ways to get around whatever's deleting your file.

[Mr.Kurd]

Anti-malware on the server? Are you sure the shell is actually being uploaded? Tried a different shell? Tried at a different time, maybe the admin is on, deleting it? These are some of the things I can think of from the top of my head.

Yes I have weevely back door on the server >>>> All time I upload Local root the server will delete it >>> So What I do??

1. if you're getting your local root exploit from a public source, remove things like comments and modify the code to get rid of any obvious signs that it's a local root exploit
2a. if PHP sessions are being stored in /tmp, upload it in whatever folder that is and name it something like "sess_kdkou4r5blub4f1sti2kelpcss"
2b. if PHP sessions aren't being stored in /tmp, upload it to somewhere in /tmp anyways and name it something like "fs01" or "bash"
3. if neither of step 2 worked, repeat step 1 and find any home directory you can write to and upload it there, again giving it a name like fs01 or bash or .bashrc
4. If none of this worked, repeat step 1, obfuscate the file (via a tool or doing it yourself), then repeat steps 2 and if 2 doesn't work with obfuscation try 3 with obfuscation

This is just something I thought of off the top of my head. There are probably plenty of ways to get around whatever's deleting your file.

thank you...
I didn't understand first step?
After doing local root explit I have to do another step?
If yes , so what I do if I couldn't upload local root, because the server deleting it...
And second you means shell?

[TechSaavy]

Not to look negative or something, but I would recommend on reading up on obfuscation a bit. What he meat is to remove comments and modify the source code a bit, so the file signature changes, and Anti-Viruses won't be able to spot them as easily.

[meow]

thank you...
I didn't understand first step?
After doing local root explit I have to do another step?
If yes , so what I do if I couldn't upload local root, because the server deleting it...
And second you means shell?

Please just use google translate or whatever to translate what I said to your language so that I don't have to repeat myself 8 times.

Not to look negative or something, but I would recommend on reading up on obfuscation a bit. What he meat is to remove comments and modify the source code a bit, so the file signature changes, and Anti-Viruses won't be able to spot them as easily.

Obfuscation and what I mentioned in the first step are two different things. I'm pretty sure he's just confused because English is far from his first language.

[Mr.Kurd]

thank you...
I didn't understand first step?
After doing local root explit I have to do another step?
If yes , so what I do if I couldn't upload local root, because the server deleting it...
And second you means shell?

Please just use google translate or whatever to translate what I said to your language so that I don't have to repeat myself 8 times.

Not to look negative or something, but I would recommend on reading up on obfuscation a bit. What he meat is to remove comments and modify the source code a bit, so the file signature changes, and Anti-Viruses won't be able to spot them as easily.

Obfuscation and what I mentioned in the first step are two different things. I'm pretty sure he's just confused because English is far from his first language.

Thank you I bothered you.
I upload it inside /tmp folder and complied it ...
But I can't run it it gave me Permission denied
even I gave it ``` chmod 777 a.out ``` .....