Showing posts with label shell. Show all posts

Friday, May 15, 2015

CoderXshell

404 Not Found Private Shell

when we got the admin access we need to upload shell. After uploading shell we can index deface of a website, server rooting, cpanel cracking etc. There are many php shell like C99, R57 etc. One of the best and secure shell is 404 not found private shell. Without password you can't open it. So if you upload shell in a server without you none can use it.

So what is it?

After uploading shell when you open the shell link you can find a page like this:

After move your mouse cursor and fix it when it get a box for giving a password.

Password for shell -> abc

Download

click to begin

1.7MB .txt

0 comments

CoderXshell

Injector Team Shell

password for injector team shell -> inj3ct0r

Download

click to begin

1.5MB .txt

Thursday, February 26, 2015

0 comments

CoderXLinux, shell, tutorials

Must Known Commands About System Information(Linux Host)

OS Version

cat /etc/issue
cat /etc/*-release
cat /etc/lsb-release
cat /etc/redhat-release

Kernel Version

cat /proc/version uname -a uname -mrs rpm -q kernel dmesg | grep Linux ls /boot | grep vmlinuz

Environment Variable

cat /etc/profile cat /etc/bashrc cat ~/.bash_profile cat ~/.bashrc cat ~/.bash_logout env set

Software & Service

ps aux ps -ef top cat /etc/service

Which Service has r00t privilege? For further exploitation of vulnerable service

ps aux | grep root ps -ef | grep root

Installed Software & their version & running?

ls -alh /usr/bin/ ls -alh /sbin/ dpkg -l rpm -qa ls -alh /var/cache/apt/archivesO ls -alh /var/cache/yum/
Service configuration
cat /etc/syslog.conf cat /etc/chttp.conf cat /etc/lighttpd.conf cat /etc/cups/cupsd.conf cat /etc/inetd.conf cat /etc/apache2/apache2.conf cat /etc/my.conf cat /etc/httpd/conf/httpd.conf cat /opt/lampp/etc/httpd.conf ls -aRl /etc/ | awk ‘$1 ~ /^.*r.*/

Appending Tasks?

crontab -l ls -alh /var/spool/cron ls -al /etc/ | grep cron ls -al /etc/cron* cat /etc/cron* cat /etc/at.allow cat /etc/at.deny cat /etc/cron.allow cat /etc/cron.deny cat /etc/crontab cat /etc/anacrontab cat /var/spool/cron/crontabs/root

Plain Text Password files?

grep -i user [filename] grep -i pass [filename] grep -C 5 "password" [filename] find . -name "*.php" -print0 | xargs -0 grep -i -n "var $password" # Joomla

0 comments

CoderXshell, Web Hacking

b374k shell v2.8 Decode Version

b374k shell 2.8

This PHP Shell is a useful tool for system or web administrator to do remote management without using cpanel, connecting using ssh, ftp etc. All actions take place within a web browser
Features :

File manager (view, edit, rename, delete, upload, download, archiver, etc)
Search file, file content, folder (also using regex)
Command execution
Script execution (php, perl, python, ruby, java, node.js, c)
Give you shell via bind/reverse shell connect
Simple packet crafter
Connect to DBMS (mysql, mssql, oracle, sqlite, postgresql, and many more using ODBC or PDO)
SQL Explorer
Process list/Task manager
Send mail with attachment (you can attach local file on server)
String conversion
All of that only in 1 file, no installation needed
Support PHP > 4.3.3 and PHP 5

Requirements :

PHP version > 4.3.3 and PHP 5
As it using zepto.js v1.1.2, you need modern browser to use b374k shell. See browser support on zepto.js website http://zeptojs.com/
Responsibility of what you do with this shell

Password-> b374k

Download

click to begin

0.7MB .zip