Homeland Security Leak

                 Cyph3rCr3w©, the trending troubles of the Interwebz at your security's expense
                               We are: Cyph3rL3kk3n Cypher LulzCyph3r Cyph3rV0id
                                       Target: Homeland Security
                                 (dhs.gov) (studyinthestates.dhs.gov)

                  @Cyph3rCr3w
    __________uu$$$$$$$$$$$$$$$$$uu__________
    _________u$$$$$$$$$$$$$$$$$$$$$u________
    ________u$$$$$$$$$$$$$$$$$$$$$$$u_______
    _______u$$$$$$$$$$$$$$$$$$$$$$$$$u______
    _______u$$$$$$$$$$$$$$$$$$$$$$$$$u______
    _______u$$$$$$”___”$$$”___”$$$$$$u_______
    _______”$$$$”______u$u_______$$$$”_______
    ________$$$————u$u________u$$$_______
    ________$$$u______u$$$u______u$$$_______
    _________”$$$$uu$$$___$$$uu$$$$”________
    __________”$$$$$$$”___”$$$$$$$”__________
    ____________u$$$$$$$u$$$$$$$u___________
    _____________u$”$”$”$”$”$”$u______________
    __uuu________$$u$_$_$_$_$u$$_______uuu__
    _u$$$$________$$$$$u$u$u$$$_______u$$$$_
    __$$$$$uu______”$$$$$$$$$”_____uu$$$$$$__
    u$$$$$$$$$$$uu____”"”"”____uuuu$$$$$$$$$$
    $$$$”"”$$$$$$$$$$uuu___uu$$$$$$$$$”"”$$$”_
    _”"”______”"$$$$$$$$$$$uu_”"$”"”___________
    ___________uuuu_”"$$$$$$$$$$uuu__________
    __u$$$uuu$$$$$$$$$uu_”"$$$$$$$$$$$uuu$$$_
    __$$$$$$$$$$”"”"___________”"$$$$$$$$$$$”_
    ___”$$$$$”______________________”"$$$$”"__
-------------------------------------------------------------------------------------------------------------------
-------------------------------------------------------------------------------------------------------------------

su -
su -
groups
exit
ls
mv .htaccess htaccess.txt
cd /var/www
cd logs/
touch a
rm a
exit
ls
ls -la
chown -R developers *
chown -R igandy *
ls -la
ls -la
chown -R :developers *
ls -la
cd ..
ls -la
su -
whoami
chown -R developers html/
chgrp -Rv developers html/
ls -la
cd html/
ls
ls -la
chown -Rv igandy *
su -
su -
cd ../..
ls
pwd
cd ../home/
ls
cd ..
ls
cd usr/
ls
cd ../..
ls
pwd
cd dev/
ls
cd ..
ls
pwd
cd etc/group
ls
pwd
cd var/www/html/
ls
chown :developers *
ls
ls -la
groups
groups user-id
groups list
groups man
groups developers
pwd
cd /
pwd
egrep -i "^groupname" /etc/group
ls
cd etc/
ls
vim group
cd /var/www/html/
ls
cd ..
chown -R apache html/*
su -
ls
cd html/
ls
ls
ls -la
ls -la
ls -la
vim wp-config.php
cat wp-config.php
vi wp-config.php
cat wp-config.php
history
pwd
id
exit
cat wp-content/themes/studyinthestates/inc/database_connect.php
ls -la wp-content/themes/studyinthestates/inc/
ls -la
chmod -R 755 *
ls -la
chmod 755 *
ls -l
chmod -R 755 *
ls -la
vi wp-config.php
cat .htaccess
vi .htaccess
ls -la
vim wp-config.php
vim wp-config.php
ls
vim wp-config.php
vim wp-config.php
ls
sudo su - root
ls
vim test.php
ls
sudo su - root
exit
ls
cd scripts
ls
rsync.bash
/var/www/html/scripts/rsync.bash
ls
passwd
passwd
/var/www/html/scripts/rsync.bash
ls
ls -la
vim school-search.php
whoami
/var/www/html/scripts/rsync.bash
ls
whoami
ls -la
cd assets/css/
pwd
cd ../..
/var/www/html/scripts/rsync.bash
pwd
cd /etc/httpd/conf/httpd.conf
cd /etc/httpd/conf/
ls
vim httpd.conf
cd /var/www/html/
ls
cd wp-admin/
ls
ls -la
/var/www/html/scripts/rsync.bash

whoami
/var/www/html/scripts/rsync.bash
/var/www/html/scripts/rsync.bash
ls
mkdir ci
ls -la
vim tester.html
ls -la
cd wp-content/
ls
vim tester.html
ls -la
rm tester.html
ls -la
vim tester.html
mv tester.html ../.
rm tester.html
ls -la
cd ..
ls -la
pwd
vim /etc/httpd/conf/httpd.conf
ls -la
ls -la /etc/httpd/conf/
/var/www/html/scripts/rsync.bash
pwd
mkdir ci
ls
vim tester.html
exit
ls
vim tester.php
cd assets/ci/
ls
ls
ls -la
ls
cd ci/
ls
cd import_schools/
ls
vim import-test.php
ls -la
cd ..
ls -la
cd ..
ls -la
chmod 775 ci/
cd ci/import_schools/
vim tester.html
rm tester.html
ls -la
ls
ls -la
chown apache ci/
sudo su - root
exit
ls
cd ci/
ls -la
cd application/
ls -la
ls -la
sudo su - root
ls
cd ci/
ls -la
chown apache .htaccess
sudo su - root
whoami
sudo su - root
exit
ls
cd ci/

ls -la
sudo su - root
sudo su - root
ls -la
cd ..
pwd
ls -la
vim /etc/httpd/conf/httpd.conf
/var/www/html/scripts/rsync.bash
vim /etc/httpd/conf/httpd.conf
/var/www/html/scripts/rsync.bash
ls
cd /etc/httpd/conf/httpd.conf
cd /etc/httpd/conf/
vim httpd.conf
cd ~
ls
cd ci/
;s
ls
ls -la
vim .htaccess
sudo su - root
/var/www/html/scripts/rsync.bash
/var/www/html/scripts/rsync.bash
/var/www/html/scripts/rsync.bash
/var/www/html/scripts/rsync.bash
ls
cd ci/
ls -la
cd ..
ls
/var/www/html/scripts/rsync.bash
/var/www/html/scripts/rsync.bash
/var/www/html/scripts/rsync.bash
/var/www/html/scripts/rsync.bash
/var/www/html/scripts/rsync.bash
sudo su - root
ls
cd ci/
ls -la
sudo su - root
cd ci/
ls -la
/var/www/html/scripts/rsync.bash
/var/www/html/scripts/rsync.bash
sudo su - root
/var/www/html/scripts/rsync.bash
ls
/var/www/html/scripts/rsync.bash
/var/www/html/scripts/rsync.bash
/var/www/html/scripts/rsync.bash
/var/www/html/scripts/rsync.bash
/var/www/html/scripts/rsync.bash
ls
cd ../../git-repos/
ls
ls -la
ls
cd ../../git-repos/
ls -la
sudo su - root
ls
cd ..
ls
cd ..
ls
cd git-repos/
ls
ls -la
cd ..
cd ..
ls
cd /etc/httpd/conf
ls
vim httpd.conf
/var/www/html/scripts/rsync.bash
vim httpd.conf
/var/www/html/scripts/rsync.bash
vim httpd.conf
vim httpd.conf
/var/www/html/scripts/rsync.bash
/var/www/html/scripts/rsync.bash
vim httpd.conf
/var/www/html/scripts/rsync.bash
vim httpd.conf
cd /var/www/html/
/var/www/html/scripts/rsync.bash
ls
ls -la
cd ../
ls
cd logs/
ls
vim error_log.txt
ls
git status
cd ../../git-repos/
ls
cd sits.git/
ls
git status
git status
ls
cd ../../git-repos/
git status
cd sits.git/
git status
pwd
cd ../../www/html/
ls
cd ..
/var/www/html/scripts/rsync.bash
ls
cd html/
ls
cd ..
ls
/var/www/scripts/rsync.bash
/var/www/scripts/rsync.bash
sudo su -root
su -root
sudo su
ls
cd /etc/httpd/conf
ls
vim httpd.conf
ls -la
ls
/var/www/scripts/rsync.bash
cd /etc/httpd/conf
vim httpd.conf
ls -la
vim httpd.conf
/var/www/scripts/rsync.bash
ls
vim httpd.conf
/var/www/scripts/rsync.bash
/var/www/scripts/rsync.bash
/var/www/scripts/rsync.bash
ls -la
vim .htaccess
ls
ls -la
vim .htaccess
vim /etc/httpd/conf/httpd.conf
ls -la /etc/httpd/conf/
ls
ls -la wp-content/
ls
vim .gitignore
vim .htaccess
vim wp-content/.htaccess
/var/www/scripts/rsync.bash
vim error_log.txt
ls
/var/www/scripts/rsync.bash
/var/www/scripts/rsync.bash
exit
/var/www/scripts/rsync.bash
/var/www/scripts/rsync.bash
ls
/var/www/scripts/rsync.bash
/var/www/scripts/rsync.bash
ls
vim /etc/httpd/conf/httpd.conf
exit
ls
/var/www/scripts/rsync.bash
/var/www/scripts/rsync.bash
/var/www/scripts/rsync.bash
/var/www/scripts/rsync.bash
cd ci/sql/
ls -la
ls
/var/www/scripts/rsync.bash
/var/www/scripts/rsync.bash
ls
git status
ls -la
/var/www/scripts/rsync.bash
ls
/var/www/scripts/rsync.bash
/var/www/scripts/rsync.bash
/var/www/scripts/rsync.bash
vim error_log.txt
/var/www/scripts/rsync.bash
/var/www/scripts/rsync.bash
/var/www/scripts/rsync.bash
vim wp-content/themes/studyinthestates/pt-latest.php
ls
cd wp-content/plugins/wp-dbmanager/
ls -la
vim htaccess.txt
exit
/var/www/scripts/rsync.bash
ls
cd wp-content/
ls
ls -la
cd ..
;s
ls
pwd
/var/www/scripts/rsync.bash
pwd
ls
cd wp-content/backup-db/
ls
ls -la
pwd
exiy
exit
ls
cd /var/www/scripts/
ls
cd ~
ls
ls
git status
vi wp-admin/.htaccess
cd /etc/httpd/conf
ls
vim httpd.conf
ls -la
sudo su - root
exit
ls
git status
pwd
cd ..
ls
cd scripts/
ls
cd ..
cd /var/git-repos/sits.git/
ls
git status
pwd
ls -la
cd wp-admin/
ls -la
vim .htaccess
cd /var/git-repos/sits.git/
git status
cd ~
ls
pwd
vim wp-admin/.htaccess
cd /var/git-repos/sits.git/
git status
cd ~
ls
vim wp-content/themes/studyinthestates/pt-schools.php
exit
cd /var/git-repos/sits.git/
git status
/var/www/html/script/rsync.bash
pwd
ls
cd ..
ls
cd scripts/
ls
rsync.bash
pwd
/var/www/scripts/rsync.bash
cd ..
ls
cd html
ls
cd assets/images/
ls
cd content
ls
cd ..
ls
cd sitewide/
ls
cd ..
ls
cd content
ls
/var/www/scripts/rsync.bash
ls
ls -la assets/images/content/
vim wp-content/themes/studyinthestates/pt-latest.php
cd /var/git-repos/sits.git/
git status
vim wp-config.php
ls
/var/www/scripts/rsync.bash
/var/www/scripts/rsync.bash
git status
ls
git status
cd ..
git status
ls
cd html
git status
/var/www/scripts/rsync.bash
/var/www/scripts/rsync.bash
ls
/var/www/scripts/rsync.bash
pwd
cd /var/git-repos/sits.git
ls
git status
ls
cd /var/www/html/
/var/www/scripts/rsync.bash
ls
vi wp-config.php
pwd
/var/www/scripts/rsync.bash
ls
git status
/var/www/scripts/rsync.bash
/var/www/scripts/rsync.bash
/var/www/scripts/rsync.bash
/var/www/scripts/rsync.bash
/var/www/scripts/rsync.bash
cd /var/git-repos/sits.git/
git status
/var/www/scripts/rsync.bash
/var/www/scripts/rsync.bash
/var/www/scripts/rsync.bash
exit
ls
ls
ls -la assets/images/content/
ls
git status
cd ..
ls
cd scripts/
ls
git status
cd html
ls ..
cd html
ls
cd ../html/
ls
git status
cd ..
ls
cd ..
ls
cd git-repos/
git stat
git status
ls
cd sits.git
ls
git status
pwd
ls
git php.ini
ls
vim php.ini
vim wp-admin/php.ini
pwd
cd wp-admin/
ls -la
vi .htaccess
cd ..
ls -la
chmod 775 wp-admin/
sudo su - root
ls
vi error_log
pwd
cd ../..
pwd
cd log/
vi lastlog
cat lastlog
pwd
ls -la
cd setroubleshoot/
ls -la
cd ..
pwd
pwd
cd ../www/html/
ls
vi error_log
vi error_log.txt
php -v
mysql -v
mysql5 -v
ls
exit
httpd restart
ls
apachetl -k restart
service httpd restart
/etc/init.d/httpd restart
sudo su - root
ls
pwd
vi error_log.txt
ls
ls -la
sudo chmod -R 755 wp-admin
ls -la wp-admin
pwd
vim wp-admin/php.ini
exit
ls
sudo chmod 755 wp-admin
sudo chmod 775 wp-admin/
ls -la
ls
exit
ls
cd wp-admin
ls -la
ls
pwd
ls -la
sudo su - root
cd ~
ls
ls -la
cd wp-admin
ls -la
vim .htaccess
ls
pwd
ls -la
cd ..
vim wp-admin_test/.htaccess
sudo su - root
pwd
sudo su - root
ls
vim error_log.txt
ls
cd assets/images/sitewide/
ls
cd ../content/
ls
ls
vi error_log.txt
vi error_log.txt
vi error_log.txt
ls
vi error_log.txt
ls
vi error_log.txt
ls
vim school-search.php
git status
ls -la school-search.php
git log school-search.php
vim school-search.php
cd ../
ls
cd scripts/
ls
cd ../
cd scripts/rsync.bash
cd scripts/
vim rsync.bash
cd ..
ls
cd ..
ls
git www/
ls
cd git-repos/
s
ls
cd sits.git/
ls
git status
git log school-search.php
ls
git status
git status
cd /var/git-repos/sits.git/
ls
cd hooks/
ls
cd ../logs/
ls
exit
ls
ls -la ci/
ls
git status
ls -la
cd /var/git-repos/
ls
ls
ls -la
exit
ls
cd /var/git-repos/sits.git/
ls
git status
exit
pwd
ls
cd assets
ls
mkdir inc
ls
cd inc/
touch email-form.php
vi email-form.php
ls
vi email-form.php
ls
cd .
ls
cd ..
ls -la
chmod 644 inc/
ls -la
chmod 775 inc
ls -la
cd in
cd inc
vi email-form.php
vi email-form.php
ls -la
chmod 755 email-form.php
ls -la
vi email-form.php
ls -la
cd ..
ls
cd .
cd ~
ls
cd ..
ls
cd error/
ls
cd ../logs/
ls
vi error_log.txt
vi error_log.txt
vi error_log.txt
vi error_log.txt
cd ...
cd ..
ls
cd ~
ls
cd assets/inc/
ls
cd email-form.php
vi email-form.php
vi email-form.php
cd ..
ls
ls -la
chmod 600 inc/
exit
ls
cd assets/inc/
cd assets
ls
chmod 644 inc/
ls
ls -la
cd inc/
chmod 755 inc/
ls
ls -la
cd inc/
vi email-form.php
vi email-form.php
vi email-form.php
vi email-form.php
cd ..
ls
chmod 600 inc
ls -la
cd inc
exti
exit
mysql
pwd
ls -la
exit
ls
ls -la
cd ..
ls -l
ls -la
cd logs/
ls
cd /var/log/
ls
ls -la
cat messages
vi messages
cat up2date
ls
cat mcelog
ls
cat faillog
exit
cd /etc/httpd/
ls
cd conf
ls
vim httpd.conf
vim httpd.conf
ls -la
exit
jobs
exit
ls -la
sudo su - root
pwd
sudo su - root
exit
ls -la
cd wp-content/themes/studyinthestates/
vim header.php
exit
ls
cd ..
ls
cd logs/
ls
vim error_log.txt
ls
cd ..
ls
cd ..
cd /etc/
ls
cd cd httpd/
ls
cd httpd/
ls
cd conf
ls
vim httpd.conf
cd ../
ls
cd logs/
vim error_log.txt
cd ..
ls
cd logs
ls
vim error_log.txt
exit
pwd
cd /
cd /var/log/messages
cd /var/lo
cd /var/log
ls
vim messages
sudo vim messages
sudo vim secure
ls
cd httpd/
ls
sudo httpd/error_log
sudo vim httpd/error_log
sudo vim httpd/access_log
sudo cat messages > messages_log_01172013.txt
sudo cat messages > vim messages_log_01172013.txt
vim messages_log_01172013.txt
ls
vim /var/www/message_log_01172013.txt
sudo vim /var/www/message_log_01172013.txt
sudo cat messages > /var/www/vim messages_log_01172013.txt
sudo cat messages > /var/www/messages_log_01172013.txt
ls
ls -la /var/www/
chown apache:apache /var/www/message_log_01172013.txt
ls -la /var/www/
sudo chown apache:apache /var/www/message_log_01172013.txt
ls -la /var/www/
sudo cat messages > /var/www/messages_log_01172013.txt
sudo cat messages > sudo /var/www/messages_log_01172013.txt
sudo cat messages > /var/www/messages_log_01172013.txt
mv /var/www/message_log_01172013.txt .
sudo mv /var/www/message_log_01172013.txt .
ls
sudo cat messages > messages_log_01172013.txt
ls -la
sudo chmod 777 message_log_01172013.txt
ls
ls -la
sudo cat messages > messages_log_01172013.txt
sudo cat message
sudo cat messages
sudo cat messages > messages_log_01172013.txt
ls -la
vim message_text.txt
sudo vim /var/log/message
sudo vim /var/log/messages
sudo vim /var/log/secure
cd /var
l
ls
cd log
ls
cd httpd/
sudo cd httpd/
exit
cd /etc/
ls
vim host
vim hosts
sudo su - root
exit
sudo su - root
exit
sudo su - root
sudo su - root
exit
sudo su - root
cd /etc/
vim hosts
sudo su - root
exit
sudo su - root
sudo su - root
exit
sudo su - root
sudo su - root
sudo su - root
exit
pwd
ls
pwd
ls -la
ls
cd wp-content/plugins/
ls
ls
ls -la
vim wp-config.php
cd assets/video/
ls
ls -la assets/video/
ls -la assets/video/
ls -la assets/video/
ls
ls -la
cd /etc/httpd/
ls
cd conf.d/
ls
cd ..
cd conf
ls
vim httpd.conf
exit
cd /var/log/message
vim /var/log/messages
sudo su - root
sudo su - root
sudo su - root
ls
pwd
whoam
whoami
sudo su - root
exit
exit
ls
ls -la