what do you think of the shell i modded

rhysh · Post by **rhysh** » 04 Jan 2008, 06:55

tell me what you think of the shell i modded

http://shellcode.freehostia.com/shell.php

dont fuck around with c.php etc
that aint modded by me
but feel free to ripit and view it
also those logs arent real
view them with c.php if you dont believe me,and dont delete files
also if you have some files you think i should include to turn up in the info part list them
eg logfiles etc
enjoy

DarkMindZ · Post by **DarkMindZ** » 04 Jan 2008, 08:35

just a defacer shell, how lame can you be?

rhysh · Post by **rhysh** » 04 Jan 2008, 08:53

lol i was bored.meh i just wanted something todo
and some people use them
i prefer things like r57 and c99/100 but some people lite to deface rather than anything else
but i dont just deface
i find sql config files for forums etc
lol tho thanks for your feedback

n3rd · Post by **n3rd** » 04 Jan 2008, 09:18

DarkMindZ wrote:just a defacer shell, how lame can you be?

we need Rhysh for the balance between good and evi*kuch*kuch*l

rhysh · Post by **rhysh** » 04 Jan 2008, 09:43

wat u mean good and evil

n3rd · Post by **n3rd** » 04 Jan 2008, 10:29

rhysh wrote:wat u mean good and evil

well its kinda boring if every1 is a saint dont you think

rhysh · Post by **rhysh** » 04 Jan 2008, 12:06

lol yeah

DarkMindZ · Post by **DarkMindZ** » 04 Jan 2008, 18:55

making a shell that has one reason and one reason only that is to deface, is not evil its as i said, lame.

you are just giving every skid on there, another tool to add his HTML sig on sites he uses other peoples tools to get in.

I will tell you whats evil, and whats saint.

evil scenario:

I have been working for days, auditing this forum code to get access on this server..

once I find my vul, code my exploit, test it locally, bam works.. i get in, gain root or as high privs as i can get.. and rm -rf / everything i can get my hands on..

probably leave a logger on there login.php and get them all pwned.

saint:

Same thing, working for days auditing code..

but once i find the vul, I make a nice report, about it, and give it to the developers to fix it, and get my name on every whitepaper out there.

but eh maybe this is just me

rhysh · Post by **rhysh** » 04 Jan 2008, 20:04

DarkMindZ wrote:making a shell that has one reason and one reason only that is to deface, is not evil its as i said, lame.

you are just giving every skid on there, another tool to add his HTML sig on sites he uses other peoples tools to get in.

I will tell you whats evil, and whats saint.

evil scenario:

I have been working for days, auditing this forum code to get access on this server..

once I find my vul, code my exploit, test it locally, bam works.. i get in, gain root or as high privs as i can get.. and rm -rf / everything i can get my hands on..

probably leave a logger on there login.php and get them all pwned.

saint:

Same thing, working for days auditing code..

but once i find the vul, I make a nice report, about it, and give it to the developers to fix it, and get my name on every whitepaper out there.

but eh maybe this is just me

i have only defaced 4 times
otherthan that i just have shells on about 15 servers providing the admin aint found them
mostly c99
some r57

but other than that i just tested the original shell and it sucked!!!
thats why i changed it

Post by **Gogeta70** » 04 Jan 2008, 22:29

I agree with n3rd on this one, rhysh is decently skilled, thus not classified as a script kiddie. Rhysh is a good example of the balance of "white hat" and "black hat" in the hacker community. As for script kiddies, nobody starts as a pro, the less mature of the beginners generally become skiddies, while the more mature become respectable newbs.

Any tool that you develop could really be considered another tool for the arsenal of a script kiddie, so modding a shell isn't much different in my opinion.

Edit: I just thought of a good way to say what i was trying to..

To be able to make a tool, you have to know how it works. That generally means you have to use a tool to know how to make it. So even script kiddies can become decent coders.

rhysh · Post by **rhysh** » 04 Jan 2008, 23:19

i tell u wat
ill upload thcks
e original shell and you can c how much it sucks
also i made to detect sensitive files etc for noobs to get an understanding of covering their tracks,finding passwords,sql dumps etc
look at the original shell and youll c this one is better than orig

shellcode.freehostia.com/Defacer.php

rhysh · Post by **rhysh** » 04 Jan 2008, 23:25

and how lame,someone defaced the shell
but its back up

Lyecdevf · Post by **Lyecdevf** » 05 Jan 2008, 04:12

DarkMindZ wrote:making a shell that has one reason and one reason only that is to deface, is not evil its as i said, lame.

I have to agree with this newcomer here. He is clearly well experienced in the field of info/security and he knows what he is talking about.