HALEN666 Posted August 3, 2007 Share Posted August 3, 2007 hey guys i have a really important question, how can i create an admin shell in a server that can be access through port 80. you know there are some websites in which you can access the server through port 80 by going to a page such as admin.php or login.asp, and have admin access to check files from the drives of the server and stuff like that. is there a program to create a shell or if i had to program a script for that how could i do it, sorry programming is not something i really like. if you could help me i would really thank you. bye Quote Link to comment Share on other sites More sharing options...
Sparda Posted August 3, 2007 Share Posted August 3, 2007 I think this thread needs locking. Quote Link to comment Share on other sites More sharing options...
VaKo Posted August 4, 2007 Share Posted August 4, 2007 You install Webmin. Quote Link to comment Share on other sites More sharing options...
SomeoneE1se Posted August 4, 2007 Share Posted August 4, 2007 I think this thread needs locking.why it's a valid question vote++ webmin Quote Link to comment Share on other sites More sharing options...
Sparda Posted August 4, 2007 Share Posted August 4, 2007 The way the question was phrased implied that op wanted to get root access to any web server. Quote Link to comment Share on other sites More sharing options...
VaKo Posted August 4, 2007 Share Posted August 4, 2007 Well thats unpossible, anyone with half a brain will know that. Quote Link to comment Share on other sites More sharing options...
Sparda Posted August 4, 2007 Share Posted August 4, 2007 Well thats unpossible, anyone with half a brain will know that. May be I'm a cynical paranoid delusional. I wouldn't put it past some people to think other wise. (been completely serious of course). On a slightly related related note, I once had a guy ask me (at work) how he can hide his bandwidth usage from his ISP, and insisted it was possible. Quote Link to comment Share on other sites More sharing options...
VaKo Posted August 4, 2007 Share Posted August 4, 2007 I may have this all mixed up, but if you comprise apache I'm pretty sure you only comprise the www user, which shouldn't be in the wheel anyway. You might be able to do something funky with suexec if you re-jangled it to run stuff as root but you would need to be root to do that in the first place. Quote Link to comment Share on other sites More sharing options...
Sparda Posted August 4, 2007 Share Posted August 4, 2007 Webmin will give you unauthorized root access if the server admin is lazy. But it has to be installed in the first place. Quote Link to comment Share on other sites More sharing options...
VaKo Posted August 4, 2007 Share Posted August 4, 2007 Does it? When you install it, it will ask you to set a root username & password, port and if you want to use SSL. Pretty damn hard to miss. Throw in some firewalling and limit the connecting IP's and your kosher. Quote Link to comment Share on other sites More sharing options...
Sparda Posted August 4, 2007 Share Posted August 4, 2007 I mean when a webmin vulnerability is found and the admin is lazy and doesn't update webmin. Quote Link to comment Share on other sites More sharing options...
VaKo Posted August 4, 2007 Share Posted August 4, 2007 And thats why god made cronjobs. Quote Link to comment Share on other sites More sharing options...
SomeoneE1se Posted August 5, 2007 Share Posted August 5, 2007 And thats why god made cronjobs.and your cron job to update webmin would be? Quote Link to comment Share on other sites More sharing options...
VaKo Posted August 5, 2007 Share Posted August 5, 2007 Adding the following line to /etc/crontab will cause portsnap to update its compressed snapshot and the INDEX files in /usr/ports/, and will send an email if any installed ports are out of date: 0 3 * * * root portsnap -I cron update && pkg_version -vIL= Quote Link to comment Share on other sites More sharing options...
HALEN666 Posted August 6, 2007 Author Share Posted August 6, 2007 you know i feel like i should ask again.. basically what i wanna do is to be able to set up a page in a webserver to be able to use tools such as netcat in that server from the net, there is a video in milw0rm in which the guy set up a page in a server and just by typing in YOUR browser www.blahblahblah.com/pagewithnetcat.asp you can have access to the server through port 80, you can check files in the server an stuff like that. it is nice for serrvers in which the damn router doesnt forward any other port but port 80 Quote Link to comment Share on other sites More sharing options...
SomeoneE1se Posted August 7, 2007 Share Posted August 7, 2007 you know i feel like i should ask again.. basically what i wanna do is to be able to set up a page in a webserver to be able to use tools such as netcat in that server from the net, there is a video in milw0rm in which the guy set up a page in a server and just by typing in YOUR browser www.blahblahblah.com/pagewithnetcat.asp you can have access to the server through port 80, you can check files in the server an stuff like that. it is nice for serrvers in which the damn router doesnt forward any other port but port 80 your options a) set webmin to run on port 80 b) get a better router c) tell us exactly what you're trying to do so we can tell you how it's done Quote Link to comment Share on other sites More sharing options...
VaKo Posted August 7, 2007 Share Posted August 7, 2007 you know i feel like i should ask again.. basically what i wanna do is to be able to set up a page in a webserver to be able to use tools such as netcat in that server from the net, there is a video in milw0rm in which the guy set up a page in a server and just by typing in YOUR browser www.blahblahblah.com/pagewithnetcat.asp you can have access to the server through port 80, you can check files in the server an stuff like that. it is nice for serrvers in which the damn router doesnt forward any other port but port 80 A link to the video might help us here, but it doesn't sound to far fetched. Windows or *nix? (the asp bit suggests windows but its detail, lots of detail is going to be the key here). Quote Link to comment Share on other sites More sharing options...
HALEN666 Posted August 9, 2007 Author Share Posted August 9, 2007 how can i install that webadmin that you said, it is a 2003 server Quote Link to comment Share on other sites More sharing options...
VaKo Posted August 9, 2007 Share Posted August 9, 2007 You don't, webmin on windows is "extreme alpha" still. Quote Link to comment Share on other sites More sharing options...
SomeoneE1se Posted August 9, 2007 Share Posted August 9, 2007 You don't, webmin on windows is "extreme alpha" still.why would you want webmin on windows? Quote Link to comment Share on other sites More sharing options...
Sparda Posted August 9, 2007 Share Posted August 9, 2007 To get your server owned. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.