Threaded Mode | Linear Mode WHM/cPanel Access Hash Key - Adding Domains - Viewing Clients - RootkIt

Welcome To This Lesson ,, It's New And It was Private For Long Time =)

Our Focus is On cPanel/WHM

 

We Often Hack Sites That Installed WHMCS As Hosting Manager

And We Don't See Password OF Root ,,, Or We See Unknown Password

Some OF These Problems Can Be Solved ,, But What About if we can't find password ?!!

may be we see Remote Access Hash Key

What Is Remote Access Hash Key ?!

It's Code That We Can Connect To Server And Manager Accounts 

Add Account - Suspend Account - Edit Password - Play 

It's Not Normal MD5 Code In The Same Line 

I'm talking About Great Hash 

It Like This ..

Code:

767b2858b1a897b86ae1c3764937412b
59522de4e947c607022c223a76003518
2bd5beecffbf55f5c469a3eabed339ac
d9b6d6f97e04895d573be9f7864b5baa
547fd4bf3979f9b369855db746214904
6c47f85e76ed4efd330e1c2534fac7bb
101b83264ed58c129e9aa739aadc8bf9
bf4192e90cb6d035f0b5514efd23dcae
e98796a55082ea4f8329cc2bfa96a85e
a2233e3145f0033dd2dea96c10d88b1f
cea203d7fac890e59828e2a9f4b831dc
c5bfc593c18aa448117bfe590ae1618c
e47391302a073ea6cdd5e45b5fe386c6
23ec1fa296a4c3b0b20388c43ab19cd4
1e9b45b7795f15d599b89a1418c43019
d7b1554a9f89640c0a0ae3ac4b40045b
4f497ce4eb46f3a7b3c90f1a27ec9431
ca792e7992018f8a343326fe8e9fc2f3
315dd1272b5ee62269350c7bc75e35da
4851ec310e0dcb2c5644afb72f84aeb3
5239c8816a696435e8b4e7718e18fef6
a3a1041dc800cfa9abce8c830358762f
b0347197fe578ebabd75a9f9fa793852
f351cd781811bb55b86f8a8cfa796315
256cb3f59f6d8e6d3f61c37f4e848743
e9e7cc2dd8172dbe095cfb57b764d5fe
f0ca63276b708f3e42eca0f1d553ddef
9ceef46b40dd1c826ceb42fde190e9fb
00fbdd4d320d1a5bdb2747d67ef957f6

So ,, We'll Use It To Add Account Or To Suspend 

But First ,, How To Generate This Code From cPanel ?!

It's Too Easy Just Go 2 WHM / 2086

 

Then Setup Remote Access Key

After This You'll Generate a Code From a Picture

 
Note : This Access Key For User "root"

Note 2 : If The root changed password of itself ,,, you would use the code normally

but if the root generated new key ,, the last key will be invalid 

==========

Okey Let's Return To WHMCS

I Hacked WHMCS But I Saw This

 

You See No Password ,, Just Username And Access Hash 

For Example IP Address OF This Server is : 123.123.123.123

Now I Want To Play With Accounts 

I'll Use CP_Creator Script OR Any Script Supports API/Access Key

Okay Let's Install it

 

Now Select Fresh Install For New Setup

 

Put The MysQL Settings 

HOST,USER,PASSWD,DATABASE

Now Put New Admin information

 

I Put it admin:admin you can put it anything u want 

 

hehe Done 

Now We've To Go Administrator Panel

http://madleets.com/cp_/admincp.php

Then Go To Servers

 

And Select Add Server

 

Here We're ,, Put The Correct Information 

 

Don't Forget Access Key 

Note : I Put Hostname As IP Address Of Server To Do No Problem With Connection 

Now We Save It  Let's Play

Go To

 

And Now

 

Start Importing Accounts 

 

hahaha 32 Accounts  In This Server 

Now To Play With These ACcounts Go TO

 

You'll See Accounts ..

 

This is Picture That You Can Play With Accounts

 

No Make Domain Suspended  Do That 

 lool ;P Suspended 

Now We've To Add Accounts On cPanel Remotly 

Just Check Your Script's Settings

 
And Create New Package 

 

No Go to Index OF Script

 

Order Now 

 

Accept This And To Next Step

 

Check These Information ,,, I Want U to Put Script on Your localhost 

It's Better Than Any Server 

Now You've To Chose Domain or SubDomain

Then Type it

 


Put Here The Password Of Your cPanel

 

hahaha

Now Your Account Has Added Successfully 

For Checking

 



Another Photo





===========

Root-Kit

I Named it Reseller-kit 

if you want to be smart don't take Access Key For Root 

Take The Reseller's Key 

 

And Plaaaaay  And Have Fuuuuun 


To Download CP_CREATOR