API tools faq
paste
Advertisement
Guest User

Linux mint forum db + I explain the hack

a guest
Feb 25th, 2016
409
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 12.50 KB | None | 0 0
raw download clone embed print report
  1. So, to expalin everyone (me) Kuroi'SH, got access to linux mint website since already a lot of time ago, but of course, some guys hacked it after me (I didn't backdoor the ISO but i'm laughing: all the hacking magazines are covering this and believe me this is not an event).
  2. Indeed! When we run a phpbb3 version without the default prosilver style, we can upload a shell on the board by allowing php in templates and editing style files.
  3.  
  4.  
  5.  
  6. ...
  7.  
  8. Guess what ?! linuxmint runs with 7-8 admins, here is the flaw!! Nothing new some people are stupid, thats why I release the 1 month old forum db with password hashed using phpbb alg (so still crackable by bruteforcing)
  9. Enjoy & follow @sh_kuroi on twitter
  10. https://twitter.com/sh_kuroi
  11. The head -n 20 of mint database (the ful db & the 156k users at th3 bottom):
  12. [kuroi@localhost ~]$ cat Téléchargements/dump.sql | grep '@' | head -n 20
  13. ,(28, 0, 13, NULL, 0, NULL, 1163651466, 'bgryderclock', 'bgryderclock', '$H$94RWG5Ww6AMHjmG/S14azBHwGarcMZ0', 0, 0, 'bgryderclock@gmail.com', 332900333222, ' 0- 0- 0', 1245470079, 1163653245, 0, 'ucp.php?i=pm&folder=inbox', NULL, 0, 0, 0, 0, 0, 0, 2, 'en', 0.00, 0, 'D M d, Y g:i a', 7, 0, NULL, 2, 4, 1415018913, 0, -3, 0, 0, 't', 'd', 0, 't', 'a', 0, 1, 0, 1, 1, 1, 1, 231231, 'http://www.ubuntuforums.org/customavatars/avatar17975_1.gif', 2, 120, 120, '[b:31ddu8zx]Linux verses Sleep! - Fight! [/b:31ddu8zx]', '31ddu8zx', 'QA==', 'Charlotte NC USA', NULL, NULL, NULL, NULL, NULL, 'http://www.morningface.com', NULL, NULL, NULL, NULL, 'be3cef6f64029743', 0, 0, 0, 0, 1)
  14. ,(27, 0, 13, NULL, 0, NULL, 1163651162, 'Crashmaxx', 'crashmaxx', '$H$9NZnFg2DkbzjTedfRy34H6rZa.iyOq/', 0, 0, 'tamarac@comcast.net', 192773830019, ' 0- 0- 0', 1393295741, 1168224618, 1386381316, 'viewtopic.php?f=206&t=93867', NULL, 1341178826, 0, 0, 0, 0, 0, 14, 'en', 0.00, 0, 'D M d, Y g:i a', 7, 0, NULL, 0, 0, 1451738472, 0, -3, 0, 0, 't', 'd', 0, 't', 'a', 0, 1, 0, 1, 1, 1, 1, 231231, NULL, 0, 0, 0, NULL, '1c5cs1yn', 0, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, 'eb1d2bae620def7e', 0, 0, 0, 0, 1)
  15. ,(26, 0, 13, NULL, 0, NULL, 1163646918, 'Aero', 'aero', '$H$95mf1/jUzAmZoZlnzVh7DNkmJuQLl90', 0, 0, 'avif37@gmail.com', 365714132516, ' 0- 0- 0', 1165116961, 1165116961, 0, NULL, NULL, 0, 0, 0, 3, 0, 0, 5, 'en', 0.00, 0, 'D M d, Y g:i a', 7, 0, NULL, 2, 2, 1451738493, 0, -3, 0, 0, 't', 'd', 0, 't', 'a', 0, 1, 0, 1, 1, 1, 1, 231231, 'http://linuxmint.com/forum/templates/subSilver/images/logo_phpBB.gif', 2, 120, 120, 'Ubuntu + Freespire = What\'s not to like <!-- s8) --><img src=\"{SMILIES_PATH}/icon_cool.gif\" alt=\"8)\" title=\"Cool\" /><!-- s8) -->\r\n\r\nUserbar coming soon... <!-- s:D --><img src=\"{SMILIES_PATH}/icon_biggrin.gif\" alt=\":D\" title=\"Very Happy\" /><!-- s:D -->', '10ldb57l', 'CA==', 'New York, USA', NULL, 'AviF37', 'AviF37', NULL, NULL, 'http://avif.50webs.com', 'Student', 'Tech, Animation, Drawing, Graphics, Tinkering, Inventing...', NULL, NULL, NULL, 0, 0, 0, 0, 1)
  16. ,(25721, 0, 13, NULL, 0, '84.195.171.235', 1245142433, 'wimo', 'wimo', '$H$97kpTtStWm4uWtzhUcBpqcUulROUYP1', 1245142433, 0, 'wim.ooghe@telenet.be', 424585203720, NULL, 1256140850, 1245142433, 0, 'search.php', NULL, 1245606402, 0, 0, 0, 0, 0, 0, 'en', 1.00, 0, 'D M d, Y g:i a', 7, 0, NULL, 0, 0, 0, 0, -3, 0, 0, 't', 'd', 0, 't', 'a', 0, 1, 0, 1, 1, 1, 1, 230271, NULL, 0, 0, 0, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, 'fbce137f3af8491e', 0, 0, 0, 0, 1)
  17. ,(23, 0, 13, NULL, 0, NULL, 1163640412, 'JimC', 'jimc', '$H$98kk2hEJnEsXaP.vEITuE9dQj6xqBe.', 0, 0, 'jcockfield@comcast.net', 10299994822, ' 0- 0- 0', 1446000389, 1168309896, 1261162343, 'search.php?author_id=44907&sr=posts', '3UG7ZSFDTE', 1446000389, 0, 0, 0, 0, 0, 13, 'en', 0.00, 0, 'D M d, Y g:i a', 7, 0, NULL, 1, 2, 1451738514, 0, -3, 0, 0, 't', 'd', 0, 't', 'a', 0, 1, 0, 1, 1, 1, 1, 231231, NULL, 0, 0, 0, NULL, '1buofcdj', 0, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, '40ab32a7d33232a6', 0, 0, 0, 0, 1)
  18. ,(21, 0, 13, NULL, 0, NULL, 1163617231, 'wendyalison', 'wendyalison', '$H$9ovA84dZEhsbp9q05K819M3LMK21hp.', 0, 0, 'wendyalison@gmail.com', 254535395421, ' 0- 0- 0', 1245220349, 1163732366, 0, 'viewtopic.php?f=0&t=27262', NULL, 1245220088, 0, 0, 0, 0, 0, 1, 'en', 0.00, 0, 'D M d, Y g:i a', 7, 0, NULL, 1, 1, 1451738534, 0, -3, 0, 0, 't', 'd', 0, 't', 'a', 0, 1, 0, 1, 1, 1, 1, 231231, NULL, 0, 0, 0, NULL, '3hrt4ctm', 0, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, '072957b1b0939a4f', 0, 0, 0, 0, 1)
  19. ,(20, 0, 13, NULL, 0, NULL, 1163616096, 'Jarek_Z', 'jarek_z', '$H$9w75wlTtHrGZ/a7uwJxukPW0W1BlJ5/', 0, 0, 'jarekzalecki@gmail.com', 290024892222, ' 0- 0- 0', 1245521864, 1164317177, 0, 'ucp.php?i=pm&mode=view&f=0&p=10902', NULL, 0, 0, 0, 0, 0, 0, 0, 'en', 0.00, 0, 'D M d, Y g:i a', 7, 0, NULL, 0, 0, 1451738555, 0, -3, 0, 0, 't', 'd', 0, 't', 'a', 0, 1, 0, 1, 1, 1, 1, 231231, '20.png', 1, 90, 54, '[img:2a2bqwfu]http&#58;//jarekz&#46;no-ip&#46;org/userbar/userbars&#46;gif[/img:2a2bqwfu]', '2a2bqwfu', 'CA==', NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, '0aeeee0704ab137d', 0, 0, 0, 0, 1)
  20. ,(19, 0, 13, NULL, 0, NULL, 1163615515, 'Warchilde', 'warchilde', 'b08fc3fd4ea65d81c9a2479b77fe16fc', 0, 0, 'cr_conway@hotmail.com', 335901310021, ' 0- 0- 0', 0, 0, 0, NULL, NULL, 0, 0, 0, 0, 0, 0, 0, 'en', 0.00, 0, 'D M d, Y g:i a', 7, 0, NULL, 1, 1, 1451738575, 0, -3, 0, 0, 't', 'd', 0, 't', 'a', 0, 1, 0, 1, 1, 1, 1, 231231, NULL, 0, 0, 0, NULL, '3bdd4ml7', 0, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, 0, 0, 0, 0, 1)
  21. ,(18, 0, 18, NULL, 0, NULL, 1163615350, 'd00p', 'd00p', '$H$7IybhBuEf5SfPANZXKzl468bL.5Ipr/', 0, 0, 'mk@lintelligence.de', 178441004819, ' 0- 0- 0', 1400048466, 1195022468, 1400048466, 'ucp.php?i=pm&mode=compose&action=reply&p=28718', '26QCZQA3WK', 1197476979, 0, 0, 0, 0, 0, 27, 'en', 0.00, 0, 'D M d, Y g:i a', 7, 0, '33CC00', 2, 2, 1451738596, 0, -3, 0, 0, 't', 'd', 0, 't', 'a', 0, 1, 0, 1, 1, 1, 1, 231295, 'http://www.lintelligence.de/usr/avatars/1.png', 2, 120, 120, '[b:399zdvmp]visit [url=http&#58;//www&#46;lintelligence&#46;de/:399zdvmp]LinTelligence.de[/url:399zdvmp][/b:399zdvmp] - [b:399zdvmp][url=http&#58;//linuxmint&#46;de/downloads&#46;html:399zdvmp]Download[/url:399zdvmp] LinuxMint[/b:399zdvmp]', '399zdvmp', 'UA==', 'Frankfurt/Germany', 100732011, NULL, NULL, 'd00p@live.com', NULL, 'http://www.lintelligence.de', NULL, NULL, NULL, NULL, 'f00dd6346a877d4f', 0, 0, 0, 0, 1)
  22. ,(173186, 0, 21, NULL, 0, '108.168.239.131', 1443752614, 'Wailly85', 'wailly85', '$H$95WBliVQhFMGq10RlMs7gosLhnAcpC0', 1443752614, 0, 'peggyvhutchinson@gmail.com', 313725426, NULL, 1443753311, 1443752614, 0, NULL, NULL, 0, 0, 0, 0, 0, 0, 0, 'en', -5.00, 1, 'D M d, Y g:i a', 7, 0, NULL, 0, 0, 0, 0, -3, 0, 0, 't', 'd', 0, 't', 'a', 0, 1, 0, 1, 1, 1, 1, 164735, NULL, 0, 0, 0, '[url=http&#58;//stevebarbarichdonations&#46;org/:2qhalljz]steve barbarich[/url:2qhalljz]', '2qhalljz', 'EA==', NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, '4c326e7493c289dd', 1, 0, 0, 0, 1)
  23. ,(17, 0, 13, NULL, 0, NULL, 1163612891, 'wbmj', 'wbmj', '$H$91checYcLNoK4fFV8w8t3/4uEKTlsH.', 0, 0, 'wbmcgannon@ct.metrocast.net', 385627921427, ' 0- 0- 0', 1395438332, 1163613181, 1268024772, 'search.php?st=0&sk=t&sd=d&sr=posts&keywords=disable+beep&start=40', NULL, 1395438236, 0, 0, 0, 0, 0, 1, 'en', 0.00, 0, 'D M d, Y g:i a', 7, 0, NULL, 0, 0, 1451738616, 0, -3, 0, 0, 't', 'd', 0, 't', 'a', 0, 1, 0, 1, 1, 1, 1, 231231, NULL, 0, 0, 0, NULL, '3kocc3lf', 0, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, '57d77d588d693b3d', 0, 0, 0, 0, 1)
  24. ,(15, 0, 13, NULL, 0, NULL, 1163611821, 'robio376', 'robio376', '$H$9lhsQ1j9Rt6gMSCYyK08aHzqPcMtRV0', 0, 0, 'robio376@gmail.com', 101169972618, ' 0- 0- 0', 1259689447, 1163611903, 0, 'viewtopic.php?f=58&t=5468&hilit=Dell+webcam&start=105', NULL, 1259689305, 0, 0, 0, 0, 0, 1, 'en', 0.00, 0, 'D M d, Y g:i a', 7, 0, NULL, 0, 1, 1451738637, 0, -3, 0, 0, 't', 'd', 0, 't', 'a', 0, 1, 0, 1, 1, 1, 1, 231231, NULL, 0, 0, 0, NULL, '2g9m0oik', 0, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, 'a74cc747999596ad', 0, 0, 0, 0, 1)
  25. ,(14, 0, 13, NULL, 0, NULL, 1163610106, 'trufflesdad', 'trufflesdad', '$H$9wQD0I4BXHngvTYYHIty/Ks6Jf1Eyy.', 0, 0, 'ted@trufflesdad.plus.com', 422015406724, ' 0- 0- 0', 1362210986, 1194451597, 1247303572, 'ucp.php?i=pm&p=25616', NULL, 1330157852, 0, 0, 0, 0, 0, 10, 'en', 0.00, 0, 'D M d, Y g:i a', 7, 0, NULL, 0, 0, 1451738658, 0, -3, 0, 0, 't', 'd', 0, 't', 'a', 0, 1, 0, 1, 1, 1, 1, 231231, NULL, 0, 0, 0, NULL, '1ol9po5w', 0, 'High Peak UK', NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, 'bd1ee4c46e843856', 0, 0, 0, 0, 1)
  26. ,(13, 0, 13, NULL, 0, NULL, 1163606054, 'gjtoth', 'gjtoth', '$H$9YBTJP/jfobjjzAgd/zmiv1MqlG2xC1', 0, 0, 'gjtoth@gmail.com', 192294969616, ' 0- 0- 0', 1451744612, 1163614341, 1259665374, 'report.php?f=0&p=0&pm=36945', '3NQEI8IA9X', 1284132685, 0, 0, 0, 0, 0, 8, 'en', 0.00, 0, 'D M d, Y g:i a', 7, 0, NULL, 0, 0, 1284132955, 0, -3, 0, 0, 't', 'd', 0, 't', 'a', 0, 1, 0, 1, 1, 1, 1, 231231, NULL, 0, 0, 0, NULL, '2kz8gx8z', 0, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, '04ab6ee91c6c0c7c', 0, 0, 0, 0, 1)
  27. ,(12, 0, 13, NULL, 0, NULL, 1163605990, 'RR1991', 'rr1991', 'e67506461115f42711032301ebd12dc5', 0, 0, 'rr1991@gmail.com', 275581915116, ' 0- 0- 0', 1163606043, 1163606043, 0, NULL, NULL, 0, 0, 0, 0, 0, 0, 0, 'en', 0.00, 0, 'D M d, Y g:i a', 7, 0, NULL, 1, 1, 1451738699, 0, -3, 0, 0, 't', 'd', 0, 't', 'a', 0, 1, 0, 1, 1, 1, 1, 231231, NULL, 0, 0, 0, NULL, '3ufbzais', 0, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, 0, 0, 0, 0, 1)
  28. ,(11, 0, 13, NULL, 0, NULL, 1163603131, 'Fragadelic', 'fragadelic', '$H$7p.zwh1d4fY.xrIEGhnuBvZ8eBYGFJ1', 0, 0, 'tb6517@gmail.com', 272624425816, ' 0- 0- 0', 1364043857, 1195195272, 1357535098, 'viewtopic.php?f=78&t=846&p=701582', NULL, 1356370569, 0, 0, 0, 0, 0, 454, 'en', -6.00, 0, 'D M d, Y g:i a', 7, 0, NULL, 0, 0, 1222162539, 0, -3, 1171816003, 0, 't', 'd', 0, 't', 'a', 1, 0, 0, 0, 1, 0, 1, 230271, 'Flags/ca-flag.gif', 3, 107, 54, NULL, '30wod4yw', 0, 'Canada', NULL, NULL, NULL, NULL, NULL, 'http://www.remastersys.klikit-linux.com', NULL, NULL, NULL, NULL, '8bf7959f1a433153', 0, 0, 0, 0, 1)
  29. ,(26517, 0, 13, NULL, 0, '62.131.251.103', 1246953262, 'DrHorrible', 'drhorrible', '$H$9Yvj.G5X/A9wMsuTrY5mM2YU8dV2p3.', 1246953262, 0, 'vincent@vincentkriek.nl', 349196210623, NULL, 1246988877, 1246953262, 1246953498, 'viewtopic.php?f=147&t=28860&p=167264', NULL, 0, 0, 0, 0, 0, 0, 1, 'en', 1.00, 0, 'D M d, Y g:i a', 7, 0, NULL, 0, 0, 0, 0, -3, 0, 0, 't', 'd', 0, 't', 'a', 0, 1, 0, 1, 1, 1, 1, 230271, NULL, 0, 0, 0, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, '8d6c1830513a056f', 0, 0, 0, 0, 1)
  30. ,(26703, 0, 13, NULL, 0, '79.20.209.232', 1247362434, 'alex', 'alex', '$H$9lr/H.TE.vNRpI5sGQPZcIlpP/yMAK0', 1247362434, 0, 'ale.spitfire@gmail.com', 129150602222, NULL, 1247431702, 1247362434, 1247431351, 'viewtopic.php?f=47&t=29125&p=169094', NULL, 1247430884, 0, 0, 8, 0, 0, 2, 'en', 1.00, 0, 'D M d, Y g:i a', 7, 0, NULL, 0, 0, 0, 0, -3, 0, 0, 't', 'd', 0, 't', 'a', 0, 1, 0, 1, 1, 1, 1, 230271, NULL, 0, 0, 0, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, '4255df7ffa03a045', 0, 0, 0, 0, 1)
  31. ,(9, 0, 13, NULL, 0, NULL, 1163599078, 'MethodOne', 'methodone', '$H$9IvAE2ynbwK9f4u7riFXjXeWSyC4Zi/', 0, 0, 'methodone.hardcore@gmail.com', 115194349528, ' 0- 0- 0', 1245426773, 1166992817, 0, 'ucp.php?i=pm&mode=view&f=0&p=10902', NULL, 0, 0, 0, 0, 0, 0, 0, 'en', 0.00, 0, 'D M d, Y g:i a', 7, 0, NULL, 1, 1, 1451738740, 0, -3, 0, 0, 't', 'd', 0, 't', 'a', 0, 1, 0, 1, 1, 1, 1, 231231, NULL, 0, 0, 0, NULL, 'ynydzxq6', 0, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, '81217bb5c44e9154', 0, 0, 0, 0, 1)
  32. ,(8, 0, 13, NULL, 0, NULL, 1163595375, 'Yahoo! Slurp', 'yahoo? slurp', '3a6cadf5426e2453bb83e339a7d2f8e3', 0, 0, 'yahoo!_slurp@linuxmint.com', 189920181526, ' 0- 0- 0', 1193257523, 1193257523, 0, NULL, NULL, 0, 0, 0, 0, 0, 0, 0, 'en', 0.00, 0, 'D M d, Y g:i a', 7, 0, NULL, 0, 0, 0, 0, -3, 0, 0, 't', 'd', 0, 't', 'a', 0, 1, 0, 0, 1, 0, 1, 230207, NULL, 0, 0, 0, NULL, '3ve9413o', 0, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, 0, 0, 0, 0, 1)
  33. -------------------------------------------
  34.  
  35.  
  36. Full mint database:
  37. http://www.mediafire.com/download/a3x1qvnn6mxzbcu/dump.sql
  38. Dumped & hacked By Kuroi'SH Linux mint site on Feb, 2nd 2016
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!