Waraxe IT Security Portal

noobie481 · Beginner

hello fellow waraxe members,

i have a webshell on an unprotected shared host at the moment, i would like to know the following commands if anyone could help me or point me in the right direction:

1. Command to search for writable directories in a specific folder

2. Once Found, a command to write shellcode, or remote upload a shell to that specific directory

once again i have a shell with executing access so i am just wanting to backdoor other sites on that box. Any help is appreciated

-thanks

Heintz · Valuable expert

You want to backdoor all other sites index files or all files?
Discression is always good and infecting every file on servers might not be very discrete.
/edit
allthough in some cases it could help to have all files haveing the same 'modified' date. but this is not so important anyways

In any case its best to write a small script to accomplish this imho.
bet you could probably come up with a long linux command also but i think it requires more skill then writing a script.

When writing the script i think you can even get away with not testing if a file is writable but just getting the error if the write operation was not successful and make a list based on that , what sites were affected.

promoting my own work http://www.plain-text.info/plainshell
if you want a 'not so obviouse' backdoor code.

noobie481 · Beginner

i would like to simply write shellcode like C99 to a current writable file or create my own file .php with the code

any ideas