Tutorial How to get SQA rights on TeamSpeak Server (not yours :)

[Supervisor]

OK, so basically.. this is about getting SQA (Server Query Admin) on a rented server.

Required:

• YATQA

What to do:

1. Create your own server, copy all SQA permissions to your client
2. create a snapshot of that server with YATQA
3. now tell your serveradmin of your targetserver you made a misstake and you want to have your backup imported to the server
4. if successfull..-> you are able to edit the SQA servergroup and do everything you want to on your server

-> its a little bit of social engineering, too..

Next:

• trying to do a SQL injection with the database backup

/edit: It's a lot easier than I thought.. If you don't change anything in the snapshot, you don't need to do anything.
I'll try to make a group with instance rights though

 

[Zajao]

So, if I understood it correctly:
If I make my ATHP hoster to upload this "reimported" snapshot - I can get access not only to my virtual server - but to all of the virtual servers hosted on the machine?
Cause the full SQA grants access to all the virtual servers.

 

[Supervisor]

Nope- that is the problem- it is like.. I'd add the SAQ group to your client- you still only have those rights on this virtual server, not on the whole instance..
BUT: you can edit the real SAQ group and any other Query groups etc

 

[Supervisor]

Asphyxia is trying to do a sql injection with that backup- pretending that would work... you could do basically everything..

 

[ehthe]

I may not have fully understood the goal of you post, but if you just want to be serverquery admin you can do so just by adding yourself to the group with yaqta.

 

[Supervisor]

xD- I'm talking about getting server admin query on a server which is not yours..^^

 

[ehthe]

OK, so basically.. this is about getting SAQ (Server Admin Query) on your server

Sorry I'm tired x)

 

[Supervisor]

yeah, I changed that.

 

[Zajao]

I tried this metod in my servers - and I got SQA rights to all virtual machines.

1. I followed the steps in the article
2. Then created a SQ-user from the existing client
3. Then logged in to Yatqa with new credentials
4. First it showed standard error message "If you are not serveradmin this is a normal restricrion by the server"
5. Then I switched to my server (the big button)
6. And from that point I was able to swicth back to serverlist and it worked

 

[Zajao]

Will buy some TS server and test it =)

 

[Asphyxia]

Will buy some TS server and test it =)

No need to buy a TeamSpeak 3 server, just setup two different server installs locally, free.

 

[Zajao]

No need to buy a TeamSpeak 3 server, just setup two different server installs locally, free.

Already done it, even on own remote VPS - but I think it must be tested on 3-d party service.

 

[Zajao]

I has been able to get:

• the VirtualServer List (IP : Port : MaxClients : ClientsOnline ) - but can't modify permissions on others servers
• All the stats of the main TS server
• A token to SQA group - but even with it - I can't reach other servers permissions

I didn't test switching on\off virtual servers on 3-d party server, but on mine I was able to do it

 

[Supervisor]

I has been able to get:

• the VirtualServer List (IP : Port : MaxClients : ClientsOnline ) - but can't modify permissions on others servers
• All the stats of the main TS server
• A token to SQA group - but even with it - I can't reach other servers permissions

I didn't test switching on\off virtual servers on 3-d party server, but on mine I was able to do it

I told you
You do have SQA-Access, but it is only valid for your server. So you cannot change any other servers
In order to do that you'd need to do SQL injection. Asphyxia wanted to try it.- If that works.. you could do everything

 

[Zajao]

It worth a try

Waiting for the SQL injection to work