API tools faq
paste
ulzr1z

Jaguar China #Hacked #Leak #Ulzr1z

ulzr1z
Jan 4th, 2015
1,038
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 9.72 KB | None | 0 0
raw download clone embed print report
  1. __ ___
  2. __ __/ /___ ____< /___
  3. / / / / /_ / / ___/ /_ /
  4. / /_/ / / / /_/ / / / / /_
  5. \__,_/_/ /___/_/ /_/ /___/
  6. #Jaguar #Pwned @ulzr1z
  7. ##################################################
  8.  
  9.  
  10.  
  11. Follow me @ulzr1z
  12.  
  13. #Leak #Databases #Hacked
  14.  
  15.  
  16. Target : dealer.jaguar.com.cn
  17. jdxforms.jaguar.com.cn
  18.  
  19. Proof : http://img4.hostingpics.net/pics/442973proofjaguar.png
  20.  
  21. Kernel : Linux jdxforms.jaguar.com.cn 2.6.32-358.14.1.el6.x86_64 #1 SMP Mon Jun 17 15:54:20 EDT 2013 x86_64
  22.  
  23. Home Path : /var/www/dealer.jaguar.com.cn
  24.  
  25. PHP version : 5.5.19
  26.  
  27. Server software: nginx/1.4.3
  28.  
  29. uid=498(nginx) groups=498(nginx)
  30.  
  31. available databases :
  32. [*] jdxforms_jaguar_com_cn
  33. [*] jaguar_xe
  34. [*] jaguar_xe_slave
  35. [*] mysql
  36. [*] test
  37.  
  38.  
  39. ##################################################
  40.  
  41.  
  42. Database: jdxforms_jaguar_com_cn
  43.  
  44. [193 tables]
  45.  
  46. block (88)
  47. block_custom (0)
  48. block_node_type (0)
  49. block_role (0)
  50. blocked_ips (0)
  51. cache (20)
  52. cache_block (0)
  53. cache_bootstrap (6)
  54. cache_field (1087)
  55. cache_filter (0)
  56. cache_form (892)
  57. cache_image (0)
  58. cache_libraries (2)
  59. cache_menu (45)
  60. cache_page (0)
  61. cache_path (8)
  62. cache_rules (2)
  63. cache_shorten (0)
  64. cache_update (48)
  65. cache_views (10)
  66. cache_views_data (0)
  67. china_address (3412)
  68. comment (0)
  69. ctools_css_cache (0)
  70. ctools_object_cache (0)
  71. data_table_node (0)
  72. data_tables (2)
  73. date_format_locale (0)
  74. date_format_type (4)
  75. date_formats (35)
  76. field_config (47)
  77. field_config_instance (112)
  78. field_data_body (571)
  79. field_data_comment_body (0)
  80. field_data_field__dian_zi_ban (43960)
  81. field_data_field__gou_che_yu_suan (63311)
  82. field_data_field_address (282)
  83. field_data_field_adm_cookie_id (15194)
  84. field_data_field_baidu_di_zhi (99)
  85. field_data_field_cheng_hu (0)
  86. field_data_field_cheng_wei (67770)
  87. field_data_field_configurator_link (69)
  88. field_data_field_di_zhi (493)
  89. field_data_field_dian_hua (281)
  90. field_data_field_dian_zi_you_xiang (67778)
  91. field_data_field_dms (282)
  92. field_data_field_event (5)
  93. field_data_field_excel (3)
  94. field_data_field_f_type_coupe_models (86)
  95. field_data_field_f_type_models (6089)
  96. field_data_field_gou_mai_shi_jian (65631)
  97. field_data_field_guan_zhu_wei_bo (281)
  98. field_data_field_huo_dong (16536)
  99. field_data_field_image (282)
  100. field_data_field_jian_cheng (282)
  101. field_data_field_lai_yuan (13077)
  102. field_data_field_latitude (280)
  103. field_data_field_lead_id (67254)
  104. field_data_field_lei_xing (197)
  105. field_data_field_longitude (280)
  106. field_data_field_media_data_file (86)
  107. field_data_field_ming_chen_pin_yin (282)
  108. field_data_field_shen_qing_shi_jia_che_xing (66750)
  109. field_data_field_shou_ji (67595)
  110. field_data_field_suo_zai_sheng_shi (67204)
  111. field_data_field_tags (0)
  112. field_data_field_tong_yi_shen_qing_shi_jia (232)
  113. field_data_field_tong_yi_shou_quan (57824)
  114. field_data_field_wang_zhi (246)
  115. field_data_field_wei_bo_tou_xiang (282)
  116. field_data_field_wei_xin_zhang_hu (195)
  117. field_data_field_wen_ti_lei_xing (569)
  118. field_data_field_xe_models (3145)
  119. field_data_field_xf_models (21567)
  120. field_data_field_xing_ming (0)
  121. field_data_field_xj_models (9645)
  122. field_data_field_yi_yong_you_che (27970)
  123. field_data_field_you_bian (493)
  124. field_data_field_yu_ji_gou_che_shi_jian (50665)
  125. field_group (14)
  126. field_revision_body (571)
  127. field_revision_comment_body (0)
  128. field_revision_field__dian_zi_ban (43961)
  129. field_revision_field__gou_che_yu_suan (63312)
  130. field_revision_field_address (282)
  131. field_revision_field_adm_cookie_id (15194)
  132. field_revision_field_baidu_di_zhi (99)
  133. field_revision_field_cheng_hu (0)
  134. field_revision_field_cheng_wei (67771)
  135. field_revision_field_configurator_link (69)
  136. field_revision_field_di_zhi (493)
  137. field_revision_field_dian_hua (281)
  138. field_revision_field_dian_zi_you_xiang (67779)
  139. field_revision_field_dms (282)
  140. field_revision_field_event (5)
  141. field_revision_field_excel (3)
  142. field_revision_field_f_type_coupe_models (86)
  143. field_revision_field_f_type_models (6089)
  144. field_revision_field_gou_mai_shi_jian (65632)
  145. field_revision_field_guan_zhu_wei_bo (281)
  146. field_revision_field_huo_dong (16536)
  147. field_revision_field_image (282)
  148. field_revision_field_jian_cheng (282)
  149. field_revision_field_lai_yuan (13077)
  150. field_revision_field_latitude (280)
  151. field_revision_field_lead_id (67255)
  152. field_revision_field_lei_xing (197)
  153. field_revision_field_longitude (280)
  154. field_revision_field_media_data_file (86)
  155. field_revision_field_ming_chen_pin_yin (282)
  156. field_revision_field_shen_qing_shi_jia_che_xing (66751)
  157. field_revision_field_shou_ji (67596)
  158. field_revision_field_suo_zai_sheng_shi (67205)
  159. field_revision_field_tags (0)
  160. field_revision_field_tong_yi_shen_qing_shi_jia (232)
  161. field_revision_field_tong_yi_shou_quan (57825)
  162. field_revision_field_wang_zhi (246)
  163. field_revision_field_wei_bo_tou_xiang (282)
  164. field_revision_field_wei_xin_zhang_hu (195)
  165. field_revision_field_wen_ti_lei_xing (569)
  166. field_revision_field_xe_models (3145)
  167. field_revision_field_xf_models (21568)
  168. field_revision_field_xing_ming (0)
  169. field_revision_field_xj_models (9645)
  170. field_revision_field_yi_yong_you_che (27971)
  171. field_revision_field_you_bian (493)
  172. field_revision_field_yu_ji_gou_che_shi_jian (50666)
  173. file_managed (656)
  174. file_usage (653)
  175. filter (28)
  176. filter_format (5)
  177. flood (0)
  178. form_data_relation (1780)
  179. forms_records (67584)
  180. history (16)
  181. image_effects (1)
  182. image_styles (1)
  183. jb_users (2245)
  184. languages (2)
  185. locales_source (8795)
  186. locales_target (4597)
  187. matched_forms (8553)
  188. menu_custom (6)
  189. menu_links (472)
  190. menu_router (589)
  191. node (68157)
  192. node_access (1)
  193. node_comment_statistics (68157)
  194. node_revision (68158)
  195. node_type (13)
  196. oauth_common_consumer (3)
  197. oauth_common_context (1)
  198. oauth_common_nonce (10)
  199. oauth_common_provider_consumer (3)
  200. oauth_common_provider_token (22635)
  201. oauth_common_token (22635)
  202. queue (126)
  203. rdf_mapping (2)
  204. record_shorten (0)
  205. registry (941)
  206. registry_file (573)
  207. role (7)
  208. role_permission (149)
  209. rules_config (4)
  210. rules_dependencies (4)
  211. rules_tags (0)
  212. rules_trigger (4)
  213. search_dataset (68154)
  214. search_index (3072132)
  215. search_node_links (0)
  216. search_total (190907)
  217. semaphore (0)
  218. sequences (1)
  219. services_endpoint (1)
  220. sessions (72)
  221. shortcut_set (1)
  222. shortcut_set_users (0)
  223. shorten_cs (1)
  224. system (211)
  225. taxonomy_index (0)
  226. taxonomy_term_data (0)
  227. taxonomy_term_hierarchy (0)
  228. taxonomy_vocabulary (1)
  229. to_match_data (8644)
  230. url_alias (16)
  231. users (7)
  232. users_roles (6)
  233. variable (454)
  234. views_data_export (0)
  235. views_data_export_object_cache (0)
  236. views_display (30)
  237. views_view (9)
  238. watchdog (2763)
  239.  
  240.  
  241. ##################################################
  242.  
  243. Database: jdxforms_jaguar_com_cn
  244.  
  245. Table: users
  246. [17 columns]
  247. [8 entry]
  248.  
  249. uid name pass email
  250.  
  251. 1 bankokk $S$DyCHdU9.0mBMzN3DzxEG9ar.OF4gzCd7ot7TaE/HapZPDn.INTez [email protected]
  252. 8 wunderman $S$DjrJogT9LeXveyrO/Bl6F1TswLmHs88Y5oW8v7w8jckqXTXpIl42 [email protected]
  253. 9 Jaguar $S$DfiWAbcGQZGmsPVnt.TCAup27.W1s8P9q1VHDjQP.k2AD6yON1R. [email protected]
  254. 10 API_User $S$DXlm80gDw3kf6GRqc3E/NN40rEZh7NvTP0nvoWPt.ES3sk0TKC5O [email protected]
  255. 15 AdMaster $S$Dt6fAUjs8JgaSg1fieEK9i/2mBzzYxTR.7VGLLvFKxNMzLUzA6f7 [email protected] [email protected]
  256. 18 [email protected] $S$DJE2anmgz9k6r49zsZErCSzJfjXz5CGsfelm3Ml8vDtEmM2gy.BH [email protected]
  257.  
  258. ##################################################
  259.  
  260.  
  261. Config File : settings.php
  262.  
  263.  
  264. 'database' => 'jdxforms_jaguar_com_cn',
  265. 'username' => 'root',
  266. 'password' => '',
  267. 'host' => 'localhost',
  268. 'port' => '',
  269. 'driver' => 'mysql',
  270. 'prefix' => '',
  271.  
  272.  
  273.  
  274. File /etc/passwd :
  275.  
  276. root:x:0:0:root:/root:/bin/bash
  277. bin:x:1:1:bin:/bin:/sbin/nologin
  278. daemon:x:2:2:daemon:/sbin:/sbin/nologin
  279. adm:x:3:4:adm:/var/adm:/sbin/nologin
  280. lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin
  281. sync:x:5:0:sync:/sbin:/bin/sync
  282. shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown
  283. halt:x:7:0:halt:/sbin:/sbin/halt
  284. mail:x:8:12:mail:/var/spool/mail:/sbin/nologin
  285. uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin
  286. operator:x:11:0:operator:/root:/sbin/nologin
  287. games:x:12:100:games:/usr/games:/sbin/nologin
  288. gopher:x:13:30:gopher:/var/gopher:/sbin/nologin
  289. ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin
  290. nobody:x:99:99:Nobody:/:/sbin/nologin
  291. dbus:x:81:81:System message bus:/:/sbin/nologin
  292. vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin
  293. rpc:x:32:32:Rpcbind Daemon:/var/cache/rpcbind:/sbin/nologin
  294. abrt:x:173:173::/etc/abrt:/sbin/nologin
  295. rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin
  296. nfsnobody:x:65534:65534:Anonymous NFS User:/var/lib/nfs:/sbin/nologin
  297. haldaemon:x:68:68:HAL daemon:/:/sbin/nologin
  298. ntp:x:38:38::/etc/ntp:/sbin/nologin
  299. saslauth:x:499:76:"Saslauthd user":/var/empty/saslauth:/sbin/nologin
  300. postfix:x:89:89::/var/spool/postfix:/sbin/nologin
  301. sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin
  302. tcpdump:x:72:72::/:/sbin/nologin
  303. oprofile:x:16:16:Special user account to be used by OProfile:/home/oprofile:/sbin/nologin
  304. apache:x:48:48:Apache:/var/www:/sbin/nologin
  305. nginx:x:498:498:nginx user:/var/cache/nginx:/sbin/nologin
  306. mysql:x:27:27:MySQL Server:/var/lib/mysql:/bin/bash
  307.  
  308.  
  309.  
  310. Hosts:
  311.  
  312. 127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
  313. ::1 localhost localhost.localdomain localhost6 localhost6.localdomain6
  314. 127.0.0.1 jdxforms jdxforms.jaguar.com.cn gzas.campaign.jaguar.com.cn
  315. 210.14.71.153 dev-xfrange.jaguar.inzen.com.cn
  316. 10.0.1.231 wechat.campaign.jaguar.com.cn
  317. 101.226.90.58 api.weixin.qq.com
  318. 101.226.68.61 open.weixin.qq.com
  319.  
  320. Also Defaced:
  321. http://jdxforms.jaguar.com.cn/ulz.html
  322. http://dealer.jaguar.com.cn/ulz.html
  323. http://14myxjl.campaign.jaguar.com.cn/ulz.html
  324.  
  325.  
  326. http://zone-h.org/mirror/id/23354168
  327. http://zone-h.org/mirror/id/23354165
  328. http://zone-h.org/mirror/id/23354070
  329.  
  330. __END__
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!