HOTMAIL.COM
8 отговора
623 прегледа
HOTMAIL.COM
--------------------------<[ * report for host lc1.law13.hotmail.com *
<[ tcp port: 80 (www) ]> <[ tcp port: 23 (telnet) ]>
Hmm. Unknown symb0lz on l1ne 15 !
Hmm. Unknown symb0lz on l1ne 19 !
--<[ *VULN*: lc1.law13.hotmail.com: /cgi-bin/phf here.. shell escape?
--<[ *VULN*: lc1.law13.hotmail.com: /cgi-bin/Count.cgi remote overflow?
--<[ *VULN*: lc1.law13.hotmail.com: /cgi-bin/test-cgi here.
--<[ *VULN*: lc1.law13.hotmail.com: /cgi-bin/php.cgi here.
--<[ *VULN*: lc1.law13.hotmail.com: /cgi-bin/handler (shell escape..?)
--<[ *VULN*: lc1.law13.hotmail.com: /cgi-bin/webgais is here.
--<[ *VULN*: lc1.law13.hotmail.com: /cgi-bin/websendmail is here.
--<[ *VULN*: lc1.law13.hotmail.com: /cgi-bin/webdist.cgi is here.D
--<[ *VULN*: lc1.law13.hotmail.com: /cgi-bin/faxsurvery is here.UUUUUUUU
--<[ *VULN*: lc1.law13.hotmail.com: /cgi-bin/htmlscript is here.UUUUUUUU
--<[ *VULN*: lc1.law13.hotmail.com: /cgi-bin/pfdisplay.cgi is here.UUUUU
--<[ *VULN*: lc1.law13.hotmail.com: /cgi-bin/perl.exe is here.UU
--<[ *VULN*: lc1.law13.hotmail.com: /cgi-bin/wwwboard.pl is here.UUUUUUU)
---------------------------<[ * scan of lc1.law13.hotmail.com completed *
<[ tcp port: 80 (www) ]> <[ tcp port: 23 (telnet) ]>
Hmm. Unknown symb0lz on l1ne 15 !
Hmm. Unknown symb0lz on l1ne 19 !
--<[ *VULN*: lc1.law13.hotmail.com: /cgi-bin/phf here.. shell escape?
--<[ *VULN*: lc1.law13.hotmail.com: /cgi-bin/Count.cgi remote overflow?
--<[ *VULN*: lc1.law13.hotmail.com: /cgi-bin/test-cgi here.
--<[ *VULN*: lc1.law13.hotmail.com: /cgi-bin/php.cgi here.
--<[ *VULN*: lc1.law13.hotmail.com: /cgi-bin/handler (shell escape..?)
--<[ *VULN*: lc1.law13.hotmail.com: /cgi-bin/webgais is here.
--<[ *VULN*: lc1.law13.hotmail.com: /cgi-bin/websendmail is here.
--<[ *VULN*: lc1.law13.hotmail.com: /cgi-bin/webdist.cgi is here.D
--<[ *VULN*: lc1.law13.hotmail.com: /cgi-bin/faxsurvery is here.UUUUUUUU
--<[ *VULN*: lc1.law13.hotmail.com: /cgi-bin/htmlscript is here.UUUUUUUU
--<[ *VULN*: lc1.law13.hotmail.com: /cgi-bin/pfdisplay.cgi is here.UUUUU
--<[ *VULN*: lc1.law13.hotmail.com: /cgi-bin/perl.exe is here.UU
--<[ *VULN*: lc1.law13.hotmail.com: /cgi-bin/wwwboard.pl is here.UUUUUUU)
---------------------------<[ * scan of lc1.law13.hotmail.com completed *
malko uti4nenie
date of scanning: 14.04.2001, time of scanning: 17:35
DATE of HACKING: ... to be continued:P
DATE of HACKING: ... to be continued:P
Re: HOTMAIL.COM
kat stana vypros za hackvane
vie chuvali li ste za Malevskata Hacking Group(MHG) deto hackna prezident.bg
i drugi izvestni BG sites
eto gi i tiah:
[линк]
nasladete im se:)))
vie chuvali li ste za Malevskata Hacking Group(MHG) deto hackna prezident.bg
i drugi izvestni BG sites
eto gi i tiah:
[линк]
nasladete im se:)))
Re: malko uti4nenie
kogasto hacknesh hotmail.com prez phf ili niakoi drug lame script kiddie web script mi se obadi
za spravka:
dva varianta
1. ima falshivi scriptove koito logvat takiva kato teb
2. servera vrushta greshka, razlichna ot Not Found /404/ (tova se sluchva na niakoi IIS serveri, ne znam tochno koga), i tui kato scriptchencenceto ti lovi samo not found, kazva che e namereno - koeto ama hich ne e i taka
aide sega pusni edin telnet do tam na port 80 i napishi GET /nekuf/si/script i mi kaji kakvo vijdash .. blah
P.S. begai na [линк] i proveri kakvo runvat
The site lc1.law13.hotmail.com is running Microsoft-IIS/5.0 on Windows 2000
sigurno smiatash che na IIS/5 ima phf i prochie? xuxuxuxu .. aman ot wanna-be xaxa0rz
za spravka:
dva varianta
1. ima falshivi scriptove koito logvat takiva kato teb
2. servera vrushta greshka, razlichna ot Not Found /404/ (tova se sluchva na niakoi IIS serveri, ne znam tochno koga), i tui kato scriptchencenceto ti lovi samo not found, kazva che e namereno - koeto ama hich ne e i taka
aide sega pusni edin telnet do tam na port 80 i napishi GET /nekuf/si/script i mi kaji kakvo vijdash .. blah
P.S. begai na [линк] i proveri kakvo runvat
The site lc1.law13.hotmail.com is running Microsoft-IIS/5.0 on Windows 2000
sigurno smiatash che na IIS/5 ima phf i prochie? xuxuxuxu .. aman ot wanna-be xaxa0rz
Абсолютно вярно
administrator@petko ~
$ nc -v -v -t lc1.law13.hotmail.com 80 -o TEST
lc1.law13.hotmail.com [64.4.43.7] 80 (?) open
GET /cgi-bin/perl.exe
administrator@petko ~
$ vi TEST
< 00000000 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d # HTTP/1.1 200 OK.
< 00000010 0a 53 65 72 76 65 72 3a 20 4d 69 63 72 6f 73 6f # .Server: Microso
< 00000020 66 74 2d 49 49 53 2f 35 2e 30 0d 0a 44 61 74 65 # ft-IIS/5.0..Date
< 00000030 3a 20 54 68 75 2c 20 31 39 20 41 70 72 20 32 30 # : Thu, 19 Apr 20
< 00000040 30 31 20 31 30 3a 30 39 3a 32 32 20 47 4d 54 0d # 01 10:09:22 GMT.
< 00000050 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 # .Content-Type: t
< 00000060 65 78 74 2f 68 74 6d 6c 0d 0a 48 4d 53 65 72 76 # ext/html..HMServ
< 00000070 65 72 3a 20 48 3a 20 4c 43 31 2d 4c 46 44 31 38 # er: H: LC1-LFD18
< 00000080 34 2e 6c 61 77 31 33 2e 69 6e 74 65 72 6e 61 6c # 4.law13.internal
< 00000090 2e 68 6f 74 6d 61 69 6c 2e 63 6f 6d 20 20 56 3a # .hotmail.com V:
< 000000a0 20 57 49 4e 32 4b 20 30 39 2e 30 32 2e 34 37 2e # WIN2K 09.02.47.
< 000000b0 30 30 30 32 20 69 20 20 44 3a 20 4d 61 72 20 20 # 0002 i D: Mar
< 000000c0 31 20 32 30 30 31 20 31 38 3a 32 34 3a 35 37 0d # 1 2001 18:24:57.
< 000000d0 0a 0d 0a # ...
< 000000d3 0d 0a 0d 0a 3c 21 2d 2d 20 46 49 4c 45 3a 20 66 # ....<!-- FILE: f
< 000000e3 6d 68 65 61 64 2e 61 73 70 20 2d 2d 3e 0d 0a 3c # mhead.asp -->..<
< 000000f3 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c # html>..<head>..<
< 00000103 74 69 74 6c 65 3e 48 6f 74 6d 61 69 6c 20 48 6f # title>Hotmail Ho
< 00000113 74 6d 61 69 6c 20 2d 20 50 61 67 65 20 4e 6f 74 # tmail - Page Not
< 00000123 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a # Found</title>..
<cut>
Забелязваш Microsoft IIS 5.0 горе, както и Page Not Found
айде стига глупости
bofh
Успех
bofh
$ nc -v -v -t lc1.law13.hotmail.com 80 -o TEST
lc1.law13.hotmail.com [64.4.43.7] 80 (?) open
GET /cgi-bin/perl.exe
administrator@petko ~
$ vi TEST
< 00000000 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d # HTTP/1.1 200 OK.
< 00000010 0a 53 65 72 76 65 72 3a 20 4d 69 63 72 6f 73 6f # .Server: Microso
< 00000020 66 74 2d 49 49 53 2f 35 2e 30 0d 0a 44 61 74 65 # ft-IIS/5.0..Date
< 00000030 3a 20 54 68 75 2c 20 31 39 20 41 70 72 20 32 30 # : Thu, 19 Apr 20
< 00000040 30 31 20 31 30 3a 30 39 3a 32 32 20 47 4d 54 0d # 01 10:09:22 GMT.
< 00000050 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 # .Content-Type: t
< 00000060 65 78 74 2f 68 74 6d 6c 0d 0a 48 4d 53 65 72 76 # ext/html..HMServ
< 00000070 65 72 3a 20 48 3a 20 4c 43 31 2d 4c 46 44 31 38 # er: H: LC1-LFD18
< 00000080 34 2e 6c 61 77 31 33 2e 69 6e 74 65 72 6e 61 6c # 4.law13.internal
< 00000090 2e 68 6f 74 6d 61 69 6c 2e 63 6f 6d 20 20 56 3a # .hotmail.com V:
< 000000a0 20 57 49 4e 32 4b 20 30 39 2e 30 32 2e 34 37 2e # WIN2K 09.02.47.
< 000000b0 30 30 30 32 20 69 20 20 44 3a 20 4d 61 72 20 20 # 0002 i D: Mar
< 000000c0 31 20 32 30 30 31 20 31 38 3a 32 34 3a 35 37 0d # 1 2001 18:24:57.
< 000000d0 0a 0d 0a # ...
< 000000d3 0d 0a 0d 0a 3c 21 2d 2d 20 46 49 4c 45 3a 20 66 # ....<!-- FILE: f
< 000000e3 6d 68 65 61 64 2e 61 73 70 20 2d 2d 3e 0d 0a 3c # mhead.asp -->..<
< 000000f3 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c # html>..<head>..<
< 00000103 74 69 74 6c 65 3e 48 6f 74 6d 61 69 6c 20 48 6f # title>Hotmail Ho
< 00000113 74 6d 61 69 6c 20 2d 20 50 61 67 65 20 4e 6f 74 # tmail - Page Not
< 00000123 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a # Found</title>..
<cut>
Забелязваш Microsoft IIS 5.0 горе, както и Page Not Found
айде стига глупости
bofh
Успех
bofh
Re: HOTMAIL.COM
XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT XaTck Txe n/\aHeT
Xa Xa Xa Xa Xa Xa Xa Xa Xa Xa Xa Xa Xa Xa Xa Xa Xa Xa Xa Xa Xa Xa Xa Xa Xa Xa .....
Xa Xa Xa Xa Xa Xa Xa Xa Xa Xa Xa Xa Xa Xa Xa Xa Xa Xa Xa Xa Xa Xa Xa Xa Xa Xa .....