[Ralkage]

Yeah, I'm being totally serious. I did a reverse lookup on the IP address and it showed something quite shocking. Apparently someone tried to brute force into my groups gaming ftp server and failed miserably as they tried to use the username "FTP" with no password. Is this how they conduct classes at the CUIT department or something? I feel the need to dig deeper but I don't know where to start, so far I found out that the server or machine that the IP traces back to is using XAMPP and anonymous ftp is open as well as phpMyadmin. Tried the default values but no luck with root and no password lol.

Any guidance to where I need to start is helpful, or am I in the wrong place or something?

Oh wise potato chip users....guide me...

P.S. I don't want to DDOS, I just want to get into the hidden places where the cool kids hang out in the server room there.

Edit: Found this error from the root directory....

Code

Warning: require_once(C:\xampp\htdocs/includes/errors.inc): failed to open stream: No such file or directory in C:\xampp\htdocs\opa\includes\bootstrap.inc on line 2237 Fatal error: require_once(): Failed opening required 'C:\xampp\htdocs/includes/errors.inc' (include_path='.;C:\xampp\php\PEAR') in C:\xampp\htdocs\opa\includes\bootstrap.inc on line 2237

Network ID exposed, hosts listed and half of them using XAMPP and wordpress lol

Edit 2: I know that no one will read this bit I got access into phpMyadmin....wat do?

[Coftek]

I would think that someone could just be using their servers as a proxy, not necessarily someone at the school trying to bruteforce a game server.

[Ralkage]

I would think that someone could just be using their servers as a proxy, not necessarily someone at the school trying to bruteforce a game server.

This could be true, but one random host out of probably 500+? And when I got into phpmyadmin and guessed the credentials in 5 tries I was like really? That easy? lol

I kept the same Network ID and changed the host number and I've found some pretty weird stuff. Even found a jenkins page filled with CUIT private projects. 👹

[Coftek]

This could be true, but one random host out of probably 500+? And when I got into phpmyadmin and guessed the credentials in 5 tries I was like really? That easy? lol

I kept the same Network ID and changed the host number and I've found some pretty weird stuff. Even found a jenkins page filled with CUIT private projects. 👹

More often then not, it's someone that either doesn't like someone on the server, or just downloaded loic and wants to try out his hacker skills.

Either way, that sounds pretty interesting. Mind sharing something cool?

[Ralkage]

More often then not, it's someone that either doesn't like someone on the server, or just downloaded loic and wants to try out his hacker skills.

Either way, that sounds pretty interesting. Mind sharing something cool?

I have no problem with that 😎 First I wanna keep searching, see if there are any vulnerabilities and then you'll be the first person I'll share my findings with over PM.

Maybe we can discuss? I'm afraid that one of the script kiddies on here might ruin the fun....

[sluggerz]

This could be true, but one random host out of probably 500+? And when I got into phpmyadmin and guessed the credentials in 5 tries I was like really? That easy? lol

I kept the same Network ID and changed the host number and I've found some pretty weird stuff. Even found a jenkins page filled with CUIT private projects. 👹

Interesting, I wonder what they are up to.

[Ralkage]

Interesting, I wonder what they are up to.

I'll keep poking around and post some screenshots of my findings. 😏

[FadedCow]

I'll keep poking around and post some screenshots of my findings. 😏

When I get home I'll see if I can try and help you out. Just pm your skype to me and I'll hit you up in a few hours.

[The_J0k3r]

Upload shell through phpMyAdmin + Add user with administrator rights and enable Remote Desktop = Profit? :3

[Ralkage]

When I get home I'll see if I can try and help you out. Just pm your skype to me and I'll hit you up in a few hours.

Ralkage, I'm on once in a while.

Upload shell through phpMyAdmin + Add user with administrator rights and enable Remote Desktop = Profit? :3

Root looks to either be disabled or has a custom password. Though I found two users with no passwords, just no rights to add databases lol. I can add tables to the test database this person has up but I can't import anything until I get root. It's probably a simple password. How does one start his journey into uploading shell?

[Ralkage]

Can anyone help me out? I have access to the PMA user, no password.

[EXPLICIT CONTENT]

Do you got FILE Privilege under that username ? You could try to shell it with a INTO OUTFILE statement

[Ralkage]

Do you got FILE Privilege under that username ? You could try to shell it with a INTO OUTFILE statement

Tried SELECT * INTO OUTFILE "C:\xampp\htdocs\shell.php" in the SQL Query tab but it just loads and does nothing, even checked for the file.

The reason how I found the directory because the index showed:

Code

Warning: require_once(C:\xampp\htdocs/includes/errors.inc): failed to open stream: No such file or directory in C:\xampp\htdocs\opa\includes\bootstrap.inc on line 2237 Fatal error: require_once(): Failed opening required 'C:\xampp\htdocs/includes/errors.inc' (include_path='.;C:\xampp\php\PEAR') in C:\xampp\htdocs\opa\includes\bootstrap.inc on line 2237

[cla55ified]

try this see if the root password is located in the config file...
LOAD DATA LOCAL INFILE 'C:/xampp/phpmyadmin/config.inc.php' INTO TABLE pma_bookmark (dbase)
If its not in C:/ use the variables page in phpmyadmin to see what drive its installed on.
Try 'C://xampp/filezillaftp/filezilla server.xml' to get the filezilla passwords.
Also if you dont have access to pma_bookmark just use another table you have access to. I'm gussing you will have the pma user though.

[Ralkage]

try this see if the root password is located in the config file...
LOAD DATA LOCAL INFILE 'C:/xampp/phpmyadmin/config.inc.php' INTO TABLE pma_bookmark (dbase)
If its not in C:/ use the variables page in phpmyadmin to see what drive its installed on.
Try 'C://xampp/filezillaftp/filezilla server.xml' to get the filezilla passwords.
Also if you dont have access to pma_bookmark just use another table you have access to. I'm gussing you will have the pma user though.

The thing is that I run any SQL and it just shows the yellow loading box and fades away :(

I have access to this though through pma:

Code

pma_bookmark
pma_column_info
pma_designer_coords
pma_history
pma_pdf_pages
pma_relation
pma_table_coords
pma_table_info
pma_tracking
pma_userconfig

I can edit these btw

and pma_userconfig shows me the lists of users and something called blob.