Skip to main content

Perintah WebShell


Sudah pada punya web shell blm??? Pasti udah :D
sekedar berbagi beberapa command yang bisa dijalankan pada web shell

cat ./../mainfile.php = Config file.

ls -la = Lists directory's.

ifconfig {eth0 etc} = Ipconfig equiv.

ps aux - Show running proccess's.

gcc in_file -o out_file - Compile c file.

cat /etc/passwd - List's accounts.

sudo - Superuser Do run a command as root provided you have perms
in /etc/sudoers.

id - Tells you what user your logged in as.

which wget curl w3m lynx - Check's to see what downloaders are
present.

uname -r - Shows all release info (or) cat /etc/release.

uname -a - Shows all kernal info (or) cat /etc/issue

last -30 - Last logged 30 ip's can change to desired number.

useradd - Create new user account.

usermod - Modify user account.

w - See who is currently logged on.

locate password.txt - Locates password.txt in current dur can use *.

rm -rf / - Please be carefull with this command, i cannot stress this
enough.

arp -a - Lists other machines are on the same subnet.

lsattr -va - ls file attributes on linux second extended file system

find / -type f -perm -04000 -ls - Finds suid files.

find . -type f -perm -04000 -ls - Finds suid files in current dir.

find / -type f -perm -02000 -ls - Finds all sgid files.

find / -perm -2 -ls - Finds all writable files and folders.

find . -perm -2 -ls - Finds all writable files and folders in current dir.

find / -type f -name .bash_history - Finds bash history.

netstat -an | grep -i listen - shows open ports.

cut -d: -f1,2,3 /etc/passwd | grep :: - From memory creates a user
with no pass.

find /etc/ -type f -perm -o+w 2> /dev/null - Write in /etc/passwd?.

cat /proc/version /proc/cpuinfo - Cpu info.

locate gcc- Finds gcc if installed.

set - Display system variables.

echo $path- Echo current path.

lsmod- Dumps kernal modules.

mount/df- Check mounted file system.

rpm -qa- Check patch level for RedHat 7.0.

dmesg- Check hardware ino.

cat /etc/syslog.conf - Log file.

uptime - Uptime check.

cat /proc/meminfo - Memory check.

find / -type f -perm -4 -print 2> /dev/null- Find readble files.

find / -type f -perm -2 -print 2> /dev/null - Find writable files.

chmod ### $folder - Chmod folder.

ls -l -b - Verbosly list directory's

Silahkan ditambahkan sendiri ^:)^

Comments

Anonymous said…
Mdc59.blogspot.com Say = Terimah Kasih Mas Postingan Na.. Mantabz tenann... hee
Cruz3N said…
Keren banget Bro :D Mantap dah... Ane juga kadang bingung apa yang harus diketik :D
vYc0d said…
@Cruz3N
yg penting g' ngetik sembarangan.wekekeke :D
AaEzha said…
Ehm..kayaknya aa doang yang gak punya web shell :(
Anonymous said…
nice inpo master ...

bhierien
budisir said…
mantab bro inponya :)

Popular posts from this blog

How To Enable DNS over HTTPS

  DNS over HTTPS (DoH) is a protocol for performing remote Domain Name System (DNS) resolution via the HTTPS protocol. A goal of the method is to increase user privacy and security by preventing eavesdropping and manipulation of DNS data by man-in-the-middle attacks by using the HTTPS protocol to encrypt the data between the DoH client and the DoH-based DNS resolver. An alternative to DoH is the DNS over TLS (DoT) protocol, a similar standard for encrypting DNS queries, differing only in the methods used for encryption and delivery. On the basis of privacy and security, whether or not a superior protocol exists among the two is a matter of controversial debate, while others argue the merits of either depend on the specific use case. Benefits DoH improves privacy by hiding domain name lookups from someone lurking on public WiFi, your ISP, or anyone else on your local network. DoH, when enabled, ensures that your ISP cannot collect and sell personal information related to your br...

The Anti-Security Movement

Para maniak underground di Indonesia mungkin pernah ada yang mendengar tentang istilah Anti-Security Movement, atau pr0j3ct m4yh3m, dsb. Sebagian tahu mengenai masalah ini, namun sebagian lain belum tahu kejelasan nya dan penasaran tentang ‘apa itu project mayhem dan anti-sec movement?’. Berikut ini akan diberikan penjelasan singkat dari stryfe mengenai hal tersebut, penjelasan (they called it, speech) tersebut di record oleh salah seorang anggota underground juga pada site nya, versi asli bisa ditemukan disini . Dan sebagai informasi, stryfe merupakan salah satu anggota kelompok underground pendukung pr0j3ct m4yh3m.

The Five Eyes - Intelligence Alliance

 The Five Eyes intelligence alliance is a secretive coalition and surveillance arrangement of countries internationally which include the United States National Security Agency (NSA), Canada’s Communications Security Establishment Canada (CSEC), the United Kingdom’s Government Communications Headquarters (GCHQ), New Zealand’s Government Communications Security Bureau (GCSB) and the Australian Signals Directorate (ASD). A series of bilateral agreements were developed in the beginning of 1946 by an alliance of five English-speaking countries over a period of time and became to known as the UKUSA agreement. This agreement established the Five Eyes alliance to share intelligence especially signals intelligence (SIGINT). These five English-speaking countries for almost 70 years have been involved in the global surveillance spying on the communications all over the world and build an infrastructure to master the internet for surveillance.