- This topic has 34 odgovora, 8 glasova, and was last updated 19 years, 1 months ranije by
.
-
Članci
-
Sto me ova tema podseca na stare dane na [ES]:):) Elem, odoh ja da gledam CSI…to je daleko zabavnije od “hakerisanja” bilo cega.:)
@BB
Nisam bas razumeo tvoj post…ili sam samo premoren?:)
Pa pokazao sam vam kako da udjete na SSH…nista posebno. Zveknete server xploitom i dobijete root. Tamo slusa cak i sftp:
[code]moyra# sftp [email protected]
Connecting to 61.202.238.53…
[email protected]’s password:
[/code]Mislim da je sve jasno.:) Pocinje CSI…srecno “hakovnje”:) Mislio sam da su ove fore “hack my site” davno zaboravljene.:):)
e a koga ti to hakas lol to 61.202.238.53
to
Japan Network Information Center
PRIMUS TELECOMMUNICATIONS K.K.netnum: 61.200.0.0 – 61.215.255.255
netname: JPNIC-NET-JP
descr: Japan Network Information Center
country: JP
admin-c: JNIC1-AP
tech-c: JNIC1-AP
remarks: JPNIC Allocation Block
remarks: Authorative information regarding assignments and
remarks: allocations made from within this block can also be
remarks: queried at whois.nic.ad.jp. To obtain an English
remarks: output query whois -h whois.nic.ad.jp x.x.x.x/e
mnt-by: MAINT-JPNIC
mnt-lower: MAINT-JPNIC
changed: [email protected] 20010130
status: ALLOCATED PORTABLE
changed: [email protected] 20050617
source: APNICrole: Japan Network Information Center
address: Kokusai-Kougyou-Kanda Bldg 6F, 2-3-4 Uchi-Kanda
address: Chiyoda-ku, Tokyo 101-0047, Japan
country: JP
phone: +81-3-5297-2311
fax-no: +81-3-5297-2312
e-mail: [email protected]
admin-c: JI13-AP
tech-c: JE53-AP
nic-hdl: JNIC1-AP
mnt-by: MAINT-JPNIC
changed: [email protected] 20041222
changed: [email protected] 20050324
changed: [email protected] 20051027
source: APNICinetnum: 61.202.238.0 – 61.202.238.63
netname: PRIMUSTEL
descr: PRIMUS TELECOMMUNICATIONS K.K.
country: JP
admin-c: HS10809JP
tech-c: HS10809JP
remarks: This information has been partially mirrored by APNIC from
remarks: JPNIC. To obtain more specific information, please use the
remarks: JPNIC WHOIS Gateway at
remarks: http://www.nic.ad.jp/en/db/whois/en-gateway.html or
remarks: whois.nic.ad.jp for WHOIS client. (The WHOIS client
remarks: defaults to Japanese output, use the /e switch for English
remarks: output)
changed: [email protected] 20060802
source: JPNIChaha
Koga haka?
[code]
; <> DiG 9.3.2-P1 <> ps3.shimpinomori.net
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 27516
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0;; QUESTION SECTION:
;ps3.shimpinomori.net. IN A;; ANSWER SECTION:
ps3.shimpinomori.net. 72974 IN A 61.202.238.53;; AUTHORITY SECTION:
shimpinomori.net. 72974 IN NS ns2.shimpinomori.net.
shimpinomori.net. 72974 IN NS ns1.shimpinomori.net.;; Query time: 181 msec
;; SERVER: 212.62.45.76#53(212.62.45.76)
;; WHEN: Mon Nov 27 23:42:38 2006
;; MSG SIZE rcvd: 90
[/code]😀
koga ima s 212.62.45.76
JP PTT saobracaja Srbija
JP PTT Srbija
PTT Srbija Netinetnum: 212.62.32.0 – 212.62.63.255
org: ORG-JPsS1-RIPE
netname: YU-PTTSRBIJA-990301
descr: JP PTT saobracaja Srbija
country: CS
admin-c: DJP15-RIPE
tech-c: BP758-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-lower: PTTSRBIJANET-MNT
mnt-routes: PTTSRBIJANET-MNT
source: RIPE # Filteredorganisation: ORG-JPsS1-RIPE
org-name: JP PTT saobracaja Srbija
org-type: LIR
address: Katiceva 14-18
address: 11000
address: Beograd
address: Serbia and Montenegro
phone: +381 11 2351 028
fax-no: +381 11 634 893
e-mail: [email protected]
e-mail: [email protected]
admin-c: DJP15-RIPE
admin-c: BP758-RIPE
admin-c: JS953-RIPE
admin-c: JD1499-RIPE
admin-c: AB5620-RIPE
admin-c: NV775-RIPE
mnt-ref: PTTSRBIJANET-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filteredperson: Djordje Popovic
address: PTT SRBIJA NET
address: Informacioni Centar
address: Katiceva 14-18
address: 11000 Beograd
phone: +381 11 3619 410
e-mail: [email protected]
remarks: ———————————————————–
remarks: SPAM issues: [email protected]
remarks: ———————————————————–
nic-hdl: DJP15-RIPE
mnt-by: PTTSRBIJANET-MNT
source: RIPE # Filteredperson: Bosko Puric
address: JP PTT saobracaja Srbija
address: Informacioni centar
address: 11000 Beograd
address: Katiceva 14-18
address: Yugoslavia
phone: +381 11 2351 847
fax-no: +381 11 634 893
e-mail: [email protected]
remarks: ———————————————————–
remarks: SPAM issues: [email protected]
remarks: ———————————————————–
nic-hdl: BP758-RIPE
source: RIPE # Filtered% Information related to ‘212.62.32.0/20AS13091’
route: 212.62.32.0/20
descr: JP PTT Srbija
descr: PTT Srbija Net
origin: AS13091
mnt-by: PTTSRBIJANET-MNT
source: RIPE # FilteredSto je bila dobra epizoda CSI.:)
Ljudi, dajte ne punite temu rezultatima standardnih alatki za mrezu. Svi znamo sta ce nam dati whois, ping, traceroute, dig…bla bla…ja ovde nisam lepio sta su mi rekli nmap i nessus vec dao konkretan rezultat. Ako ce neko da “hakuje” ono cudo tamo eno mu SSH pa neka raspali..a ima i Apache…pa sta mu je lakse.
Ne propustas ama bas nista. Gomila nicega, pravo da ti kazem. Interesantne stvari su prestale na prvoj strani kada sam napisao info o SSH demonu.:) Da bi dobio IP onog sajta kucas ping adresa. Kada vidis IP kucas whois IP da vidis ovo sto MS lepi po temi ili dig IP da cekiras malo DNS. A da vidis ono sto sam ja kucao pokrenes recimo: nmap -sS -sV -F -O IP i dobijes jednu povecu listu portova koji kao rade na toj masini…zapravo malo zbunjivanje za potencijalne napadace. Medjutim videces da tamo sljaka OpenSSH 4.3. Pustis li taj IP u Nessus skener dobices jos korisnih informacija…jednog momenta ces shvatiti da tamo radi OpenSSH 4.3-p2…i onda odes na Google i trazis exploite za taj OpenSSH…izem ti posao.:) Nije ovo nikakvo strava znanje…to bi trebalo da zna svaki malo napredniji Linux korisnik.:)
EDIT: Broke, sto obrisa svoju poruku? 😮
Moraš biti prijavljen da bi postavio komentar u ovoj temi.