攻击反动网站！！！

B

B老大

2001-04-15 13:12

米特尼客给我留了一条qq留言，告知一个反华网站，我看后真是这个气啊，不过看了上面有的丑闻的确不是造谣，我想我们很有必要先肃清国家内部的腐败分子，当然这个网站居然公开搜罗XXXX，我灭！！！

先把一些简单的信息给大家，是用web security扫描的，
这上面的漏洞你可以到一些漏洞网站（www.nsfocus.com)去看如何使用，比如msadac.dll，unicode,你可以直接攻击或者升为管理员，然后………………
由于时间关系，我不能去亲自上，如果大家有不懂可以给我写信，或者发帖子俱乐部，还有最近大家尽量不要用邮件列表，cn99有个漏洞，害得我好惨！

目标: www.zhina.cool168.com

----

扫描结果：

Scan Result:

Starting Check httpd edition

HTTP/1.1 200 OK

Date: Sun, 15 Apr 2001 11:40:49 GMT

Server: Apache/1.3.12 (Unix) PHP/4.0.2

Connection: close

Content-Type: text/html

httpd check over

Starting CGi Check...

Find: UnlG - backd00r @ /cgi-bin/unlg1.1

Find: glimpse @ /cgi-bin/glimpse

Find: htmlscript?../../../../etc/passwd@ /cgi-bin/htmlscript

Find: UnlG - backd00r II hahahahaahah@ /cgi-bin/unlg1.2

Find: visadmin.exe --> OmniHTTPD@ /cgi-bin/visadmin.exe

Find: gH -- backd00r @ /cgi-bin/gH.cgi

Find: man.sh @ /cgi-bin/man.sh

Find: AT-admin.cgi @ /cgi-bin/AT-admin.cgi

Find: THC - backd00r @ /cgi-bin/rwwwshell.pl

Find: MachineInfo -> irix@ /cgi-bin/MachineInfo

Find: phf..classic@ /cgi-bin/phf

Find: filemail.pl @ /cgi-bin/filemail.pl

Find: flexform@ /cgi-bin/flexform

Find: nph-publish Cgi@ /cgi-bin/nph-publish

Find: maillist.pl @ /cgi-bin/maillist.pl

Find: flexform@ /cgi-bin/flexform.cgi

Find: Count.cgi @ /cgi-bin/Count.cgi

Find: jj @ /cgi-bin/jj

Find: LWGate@ /cgi-bin/LWGate

Find: count.cgi@ /cgi-bin/count.cgi

Find: info2www @ /cgi-bin/info2www

Find: LWGate@ /cgi-bin/LWGate.cgi

Find: bb-hist.sh@ /cgi-bin/bb-hist.sh

Find: LWGate@ /cgi-bin/lwgate

Find: files.pl @ /cgi-bin/files.pl

Find: test-cgi @ /cgi-bin/test-cgi

Find: LWGate@ /cgi-bin/lwgate.cgi

Find: finger @ /cgi-bin/finger

Find: download.cgi@ /cgi-bin/download.cgi

Find: nlog-smb.pl@ /cgi-bin/nlog-smb.pl

Find: finger @ /cgi-bin/finger.pl

Find: nph-test-cgi @ /cgi-bin/nph-test-cgi

Find: webmap@ /cgi-bin/webmap.cgi

Find: php.cgi@ /cgi-bin/php.cgi

Find: test-cgi.tcl@ /cgi-bin/test-cgi.tcl

Find: archie@ /cgi-bin/archie

Find: day5datacopier.cgi@ /cgi-bin/day5datacopier.cgi

Find: finger @ /cgi-bin/finger.cgi

Find: php.cgi @ /cgi-bin/php

Find: calendar@ /cgi-bin/calendar

Find: day5datanotifier.cgi@ /cgi-bin/day5datanotifier.cgi

Find: phf.cgi@ /cgi-bin/phf.pp

Find: bnbform.cgi @ /cgi-bin/bnbform.cgi

Find: wais.pl@ /cgi-bin/wais.pl

Find: handler @ /cgi-bin/handler

Find: bnbform@ /cgi-bin/bnbform

Find: passwd@ /cgi-bin/passwd

Find: fortune@ /cgi-bin/fortune

Find: webgais @ /cgi-bin/webgais

Find: survey.cgi @ /cgi-bin/survey.cgi

Find: script.bat -> run a dos cmd@ /cgi-bin/script.bat?&dir

Find: passwd@ /cgi-bin/passwd.txt

Find: PageServices@ /?PageServices

Find: websendmail @ /cgi-bin/websendmail

Find: survey@ /cgi-bin/survey

Find: guestbook @ /cgi-bin/guestbook

Find: AnyForm2 @ /cgi-bin/AnyForm2

Find: webdist.cgi @ /cgi-bin/webdist.cgi

Find: faxsurvey @ /cgi-bin/faxsurvey

Find: snorkerz@ /cgi-bin/snorkerz.bat

Find: htmlscript @ /cgi-bin/htmlscript

Find: photo_cfg.pl-->the newest cgi bug by JFS:)@ /cgi-bin/photo_cfg.pl

Find: AnyForm @ /cgi-bin/AnyForm

Find: pfdisplay @ /cgi-bin/pfdispaly.cgi

Find: textcounter.pl @ /cgi-bin/textcounter.pl

Find: snorkerz@ /cgi-bin/snorkerz.cmd

Find: perl --> f0r un1x @ /cgi-bin/perl

Find: classifields.cgi@ /cgi-bin/classifieds.cgi

Find: password --> I think it's maybe...:)@ /cgi-bin/password.log

Find: wwwboard.pl @ /cgi-bin/wwwboard.pl

Find: classified.cgi@ /cgi-bin/classified.cgi

Find: password --> I think it's maybe...:)@ /cgi-bin/password.dat

Find: shell -> CyberCop checks@ /cgi-bin/sh

Find: classified@ /cgi-bin/classifieds

Find: wwwboard@ /cgi-bin/wwwboard

Find: shell -> CyberCop checks@ /cgi-bin/csh

Find: environ.cgi @ /cgi-bin/environ.cgi

Find: shell -> CyberCop checks@ /cgi-bin/ash

Find: wwwboard.cgi @ /cgi-bin/wwwboard.cgi

Find: user -- I think it's Maybe...)@ /cgi-bin/user.log

Find: ax.cgi@ /cgi-bin/ax.cgi

Find: shell -> CyberCop checks@ /cgi-bin/tcsh

Find: ax-admin.cgi@ /cgi-bin/ax-admin.cgi

Find: user -- I think it's Maybe...)@ /cgi-bin/user.dat

Find: shell -> CyberCop checks@ /cgi-bin/ksh

Find: www-sql @ /cgi-bin/www-sql

Find: shell -> CyberCop checks@ /cgi-bin/csh

Find: fpcount.exe --> overfl0w bug@ /cgi-bin/fpcount.exe

Find: shell -> CyberCop checks@ /cgi-bin/rksh

Find: w3-msql@ /cgi-bin/w3-msql

Find: guestbook.cgi@ /cgi-bin/guestbook.cgi

Find: shell -> CyberCop checks@ /cgi-bin/rsh

Find: dumpenv.pl@ /cgi-bin/dumpenv.pl

Find: view-source @ /cgi-bin/view-source

Find: shell -> CyberCop checks@ /cgi-bin/zsh

Find: upload.pl@ /cgi-bin/upload.pl

Find: wwwadmin.pl@ /cgi-bin/wwwadmin.pl

Find: mlog.phtml@ /cgi-bin/php/mlog.phtml

Find: mylog.phtml@ /cgi-bin/php/mylog.phtml

Find: aglimpse -> a search script (perl);@ /cgi-bin/aglimpse

Find: formmail.pl@ /cgi-bin/formmail.pl

CGi Check over

Start ASP Check...

Find: sendform.cgi@ /cgi-bin/sendform.cgi

Find: wguest.exe@ /cgi-bin/wguest.exe

ASP Check over

Start DOT DOT Bug Check...

Checking... '../'

Bad Request
Your browser sent a request that this server could not understand.
Invalid URI in request GET /../ HTTP/1.0

--------------------------------------------------------------------------------

Apache/1.3.12 Server at www2.cool168.com Port 80

Checking... '../../'

Bad Request
Your browser sent a request that this server could not understand.
Invalid URI in request GET /../../ HTTP/1.0

--------------------------------------------------------------------------------

Apache/1.3.12 Server at www2.cool168.com Port 80

Checking... '../../../'

Bad Request
Your browser sent a request that this server could not understand.
Invalid URI in request GET /../../../ HTTP/1.0

--------------------------------------------------------------------------------

Apache/1.3.12 Server at www2.cool168.com Port 80

Checking... '../../../../'

Find: cgiwrap@ /cgi-bin/cgiwrap

Bad Request
Your browser sent a request that this server could not understand.
Invalid URI in request GET /../../../../ HTTP/1.0

--------------------------------------------------------------------------------

Apache/1.3.12 Server at www2.cool168.com Port 80

Checking... '../../../../../'

Bad Request
Your browser sent a request that this server could not understand.
Invalid URI in request GET /../../../../../ HTTP/1.0

--------------------------------------------------------------------------------

Apache/1.3.12 Server at www2.cool168.com Port 80

Find: edit.pl @ /cgi-bin/edit.pl

Checking... '../../../../../../'

Bad Request
Your browser sent a request that this server could not understand.
Invalid URI in request GET /../../../../../../ HTTP/1.0

--------------------------------------------------------------------------------

Apache/1.3.12 Server at www2.cool168.com Port 80

DOT DOT Bug Check Over

Start Httpd Overflow Check...

Find: perlshop.cgi@ /cgi-bin/perlshop.cgi

Find: webbbs.cgi@ /cgi-bin/webbbs.cgi

Target Httpd still alive...

Find: whois_raw.cgi@ /cgi-bin/whois_raw.cgi

Target Httpd still alive...

Find: AnyBoard.cgi@ /cgi-bin/AnyBoard.cgi

Target Httpd still alive...

Find: rguest.exe@ /cgi-bin/rguest.exe

Find: campas @ /cgi-bin/campas

Target Httpd still alive...

Find: aglimpse @ /cgi-bin/aglimpse

Target Httpd still alive...

Target Httpd still alive...

httpd overflow check over.

Start Ms SQL Server DOS Check...

Target SQL Server still alive...

Ms SQL Server DOS Check over

Start IIsHack Overflow Check...

Target Httpd still alive...

IIsHack Overflow Check over

Scan ended

　

M

mitenike

2001-04-24 06:20

米特尼克

老大我告诉你的反华主页现在已经被我们的人改成了打倒日本军国主意打死小日本的标语了但是这个的反华主页我听说还有很多我希望我们能联合更多的力量一起消灭这些的反华势力再次我声明我的看法如果有谁见到这样的反华主页一定要为国人争光彻底消灭反华势力决不手软中国人没有孬种现在网络上一些做黑客软件知名的人都是我的网友如果友需要我会和他们联系一起铲除这些的反华势力

M

mitenike

2001-04-24 06:26

希望指教

老大我希望你可以指教我一些进攻网站或者是进攻主页的办法我现在一直在研究PING命令的进攻方法比较有效我想学一些进攻网站的方法可以消灭反华势力谢谢你了一定要教我啊

鹰

鹰仔

2001-06-22 05:54

我看不懂~！~！！~~~！~~！~

老大教我呀/~！~~！

鹰

鹰仔

2001-06-22 05:56

我看不懂~！~！！~~~！~~！~

希望老大教我~！~！

鹰

鹰仔

2001-06-22 05:56

我看不懂~！~！！~~~！~~！~

希望老大教我~！~！

情

情深深

2001-08-18 13:43

这么繁啊

你们去http://quarry.techclub.com.cn／看看

上

上帝也恋爱

2001-09-03 18:26

各位大虾。帮帮忙

我朋友的qq号码给人偷了，没申请密码保护。。密码找不到。
原来我也有一个破解qq密码的软件但发觉破解别人密码很不道德所以给我删除了，现在请各位高手帮帮忙好吗？谢谢了！
qq号：35784833、56928684、26189598

给我一个栖所，只要有梦可停泊，


在你留给我的天空，你可以永远有我。


给我一个渡口，只要有路可以走，


在你需要梦的时候，你可以随时有我。

B

B老大

2001-09-04 08:53

这是—

这是用cgi扫描器扫描的cgi漏洞，每一条就是一个漏洞，大家可以去一些漏洞网站去找资料，就是如何利用这些漏洞的方法，有的可以造成远程溢出，有的可以获得root，有的可以直接修改主页，因为太多了，所以不可能每条都说，所以大家自己去查，我也可以发个帖子说一下。

上

上帝也恋爱

2001-09-06 16:30

楼上的B老大帮帮忙啊！！！！！！

给我一个栖所，只要有梦可停泊，


在你留给我的天空，你可以永远有我。


给我一个渡口，只要有路可以走，


在你需要梦的时候，你可以随时有我。

黑客也是侠

攻击反动网站！！！