Advertisement
Guest User

Untitled

a guest
May 10th, 2016
117
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 8.31 KB | None | 0 0
  1. Last login: Tue May 10 10:14:40 on console
  2. MacLab206-03:~ rquaranta$ ssh rquaranta@10.18.1.50
  3. rquaranta@10.18.1.50's password:
  4. Welcome to Ubuntu 14.04.4 LTS (GNU/Linux 3.19.0-58-generic x86_64)
  5.  
  6. * Documentation: https://help.ubuntu.com/
  7.  
  8. System information as of Tue May 10 10:14:39 EDT 2016
  9.  
  10. System load: 0.0 Processes: 130
  11. Usage of /: 13.9% of 290.12GB Users logged in: 5
  12. Memory usage: 8% IP address for eth0: 10.18.1.50
  13. Swap usage: 0%
  14.  
  15. Graph this data and manage this system at:
  16. https://landscape.canonical.com/
  17.  
  18. 0 packages can be updated.
  19. 0 updates are security updates.
  20.  
  21. *** System restart required ***
  22. Last login: Mon May 9 10:41:13 2016 from 10.18.1.76
  23. rquaranta@pj-linux01:~$ ls
  24. dev
  25. rquaranta@pj-linux01:~$ clear
  26.  
  27. rquaranta@pj-linux01:~$ cd /var/www/html
  28. rquaranta@pj-linux01:/var/www/html$ ls
  29. 4.jpg crovatsos kfrey service
  30. academiccamps cs kschwind SetupVirtualCloneDrive.exe
  31. age.c csbad ktang sign
  32. amahon css linux splokhoy
  33. amichlin ctf loop.c sportcamps
  34. ap dtarrats makeweb summer
  35. aptest1.docx ebooks MarchImport.zip survey
  36. aptest1.pdf etighe metasploit sweeney
  37. arrayfun.c example minecraft temp
  38. baseball foo.html movies tester.txt
  39. bdauer gleo nhs track
  40. boat.jpg grade.php nhs-lit track.jpg
  41. bootstrap hsilvernail php twang
  42. bwarsh images pjid twolfe
  43. cakeday index.default.html pjidbeta updater.php
  44. cal.php index.php polympics video
  45. camps it pride web
  46. cena.jpg jbrown putty.exe web.php
  47. chorus.mp4 jen qa wordpress
  48. clock jpatel rquaranta yearbook
  49. clock.php jquery sampsched youtube.php
  50. comments js sched zelda
  51. cpp jscott sec.html
  52. rquaranta@pj-linux01:/var/www/html$ cd rquarnata
  53. -bash: cd: rquarnata: No such file or directory
  54. rquaranta@pj-linux01:/var/www/html$ cd rquaranta
  55. rquaranta@pj-linux01:/var/www/html/rquaranta$ ls
  56. backups comments html passStore php
  57. rquaranta@pj-linux01:/var/www/html/rquaranta$ cloear
  58. No command 'cloear' found, did you mean:
  59. Command 'clear' from package 'ncurses-bin' (main)
  60. cloear: command not found
  61. rquaranta@pj-linux01:/var/www/html/rquaranta$ lc
  62. The program 'lc' is currently not installed. To run 'lc' please ask your administrator to install the package 'mono-devel'
  63. rquaranta@pj-linux01:/var/www/html/rquaranta$ ls
  64. backups comments html passStore php
  65. rquaranta@pj-linux01:/var/www/html/rquaranta$ clear
  66.  
  67. rquaranta@pj-linux01:/var/www/html/rquaranta$ ls
  68. backups comments html passStore php
  69. rquaranta@pj-linux01:/var/www/html/rquaranta$ cd passStore
  70. rquaranta@pj-linux01:/var/www/html/rquaranta/passStore$ ls
  71. index.php search.php secretpwd.txt
  72. rquaranta@pj-linux01:/var/www/html/rquaranta/passStore$ vi index.php
  73.  
  74.  
  75.  
  76.  
  77.  
  78.  
  79.  
  80.  
  81.  
  82.  
  83.  
  84.  
  85.  
  86.  
  87.  
  88.  
  89.  
  90.  
  91.  
  92.  
  93. <?php
  94.  
  95. ini_set('display_errors','On');
  96. error_reporting(E_ALL);
  97.  
  98. if ($_POST)
  99. {
  100. session_start();
  101. $username = $_POST['username'];
  102. $password = $_POST['password'];
  103.  
  104. $userlist = './secretpwd.txt';
  105. $redirect = 'http://10.18.1.50/pjid'; // original login page
  106.  
  107. $password = sha1($password);
  108.  
  109. if (!file_exists($userlist) || !is_readable($userlist))
  110. {
  111. $error = 'Login is currently unavailable. Please try again later';
  112. }
  113. else
  114. {
  115. //read the file into an array called $users
  116. $users = file($userlist);
  117.  
  118. "index.php" 74L, 1615C 1,1 Top
  119.  
  120.  
  121.  
  122.  
  123.  
  124.  
  125.  
  126.  
  127. Last login: Tue May 10 10:14:40 on console
  128. MacLab206-03:~ rquaranta$ ssh rquaranta@10.18.1.50
  129. rquaranta@10.18.1.50's password:
  130. Welcome to Ubuntu 14.04.4 LTS (GNU/Linux 3.19.0-58-generic x86_64)
  131.  
  132. * Documentation: https://help.ubuntu.com/
  133.  
  134. System information as of Tue May 10 10:14:39 EDT 2016
  135.  
  136. System load: 0.0 Processes: 130
  137. Usage of /: 13.9% of 290.12GB Users logged in: 5
  138. Memory usage: 8% IP address for eth0: 10.18.1.50
  139. Swap usage: 0%
  140.  
  141. Graph this data and manage this system at:
  142. https://landscape.canonical.com/
  143.  
  144. 0 packages can be updated.
  145. 0 updates are security updates.
  146.  
  147. *** System restart required ***
  148. Last login: Mon May 9 10:41:13 2016 from 10.18.1.76
  149. rquaranta@pj-linux01:~$ ls
  150. dev
  151. rquaranta@pj-linux01:~$ clear
  152.  
  153. rquaranta@pj-linux01:~$ cd /var/www/html
  154. rquaranta@pj-linux01:/var/www/html$ ls
  155. 4.jpg crovatsos kfrey service
  156. academiccamps cs kschwind SetupVirtualCloneDrive.exe
  157. age.c csbad ktang sign
  158. amahon css linux splokhoy
  159. amichlin ctf loop.c sportcamps
  160. ap dtarrats makeweb summer
  161. aptest1.docx ebooks MarchImport.zip survey
  162. aptest1.pdf etighe metasploit sweeney
  163. arrayfun.c example minecraft temp
  164. baseball foo.html movies tester.txt
  165. bdauer gleo nhs track
  166. boat.jpg grade.php nhs-lit track.jpg
  167. bootstrap hsilvernail php twang
  168. bwarsh images pjid twolfe
  169. cakeday index.default.html pjidbeta updater.php
  170. cal.php index.php polympics video
  171. camps it pride web
  172. cena.jpg jbrown putty.exe web.php
  173. chorus.mp4 jen qa wordpress
  174. clock jpatel rquaranta yearbook
  175. clock.php jquery sampsched youtube.php
  176. comments js sched zelda
  177. cpp jscott sec.html
  178. rquaranta@pj-linux01:/var/www/html$ cd rquarnata
  179. -bash: cd: rquarnata: No such file or directory
  180. rquaranta@pj-linux01:/var/www/html$ cd rquaranta
  181. rquaranta@pj-linux01:/var/www/html/rquaranta$ ls
  182. backups comments html passStore php
  183. rquaranta@pj-linux01:/var/www/html/rquaranta$ cloear
  184. No command 'cloear' found, did you mean:
  185. Command 'clear' from package 'ncurses-bin' (main)
  186. cloear: command not found
  187. rquaranta@pj-linux01:/var/www/html/rquaranta$ lc
  188. The program 'lc' is currently not installed. To run 'lc' please ask your administrator to install the package 'mono-devel'
  189. rquaranta@pj-linux01:/var/www/html/rquaranta$ ls
  190. backups comments html passStore php
  191. rquaranta@pj-linux01:/var/www/html/rquaranta$ clear
  192.  
  193. rquaranta@pj-linux01:/var/www/html/rquaranta$ ls
  194. backups comments html passStore php
  195. rquaranta@pj-linux01:/var/www/html/rquaranta$ cd passStore
  196. rquaranta@pj-linux01:/var/www/html/rquaranta/passStore$ ls
  197. index.php search.php secretpwd.txt
  198. rquaranta@pj-linux01:/var/www/html/rquaranta/passStore$ vi index.php
  199. rquaranta@pj-linux01:/var/www/html/rquaranta/passStore$ ls
  200. index.php search.php secretpwd.txt
  201. rquaranta@pj-linux01:/var/www/html/rquaranta/passStore$ vi search.php
  202.  
  203.  
  204.  
  205.  
  206.  
  207.  
  208.  
  209.  
  210.  
  211.  
  212.  
  213.  
  214.  
  215.  
  216.  
  217.  
  218.  
  219. <?php
  220.  
  221. if (!isset($_SESSION['authenticated']))
  222. {
  223. header('Location: http://10.18.1.50/rquaranta/comments');
  224. // echo 'not authenticated...';
  225. exit;
  226. }
  227. if (isset($_POST['logout']))
  228. {
  229. $_SESSION = array();
  230.  
  231. if (isset($_COOKIE[session_name()]))
  232. {
  233. setcookie(session_name(), '', time()-86400, '/');
  234. }
  235.  
  236. // end session and redirect
  237. session_destroy();
  238. header('Location: http://10.18.1.50/rquaranta/passStore');
  239. exit;
  240. }
  241. ?>
  242. ~
  243. ~
  244. "search.php" 23L, 435C 1,1 All
  245.  
  246.  
  247.  
  248.  
  249.  
  250. admin,5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement