Skillnad mellan versioner av "Harctf"

Wiki
Hoppa till navigering Hoppa till sök
(min mamma suger dig bättre än din)
 
 
(13 mellanliggande versioner av 3 användare visas inte)
Rad 15: Rad 15:
 
=FÖRLORAT=
 
=FÖRLORAT=
  
 +
 +
=ATT PATCHA=
 +
 +
*MYSQL:
 +
The default password is (user:pass):
 +
root:blafa
 +
www-data:blafa
 +
<br>
 +
debian-sys-maint user password known:  http://status.harctf.hcesperer.org/score/adv/a_36.html
 +
<br>
 +
http://status.harctf.hcesperer.org/score/adv/a_37.html
 +
 +
*core-system
 +
users:  abashe (govmhttpd)
 +
<br>
 +
govmvote runs with root privileges<br>
 +
govmvote(http) runs with root privileges
 +
<br>
 +
*HTTP:
 +
perlhttpd  http://status.harctf.hcesperer.org/score/adv/a_30.html  http://status.harctf.hcesperer.org/score/adv/a_42.html 
 +
lighttp/foo.php    http://status.harctf.hcesperer.org/score/adv/a_31.html  http://status.harctf.hcesperer.org/score/adv/a_33.html
 +
lighttpd  http://status.harctf.hcesperer.org/score/adv/a_35.html
 +
Information leak via http://10.x.1.3/mwys/version.php  ,  fix:  rm /var/www/mwys/version.php
 +
 +
=PATCHAT=
 +
* http://status.harctf.hcesperer.org/score/adv/a_25.html Alla lösenord byta på användare
 +
 +
* http://status.harctf.hcesperer.org/score/adv/a_28.html root mysql ändrat till Clovarj5
 +
 +
* http://status.harctf.hcesperer.org/score/adv/a_31.html rm fil
 +
 +
* http://status.harctf.hcesperer.org/score/adv/a_35.html rm fil
 +
 +
* http://status.harctf.hcesperer.org/score/adv/a_40.html rm fil
 +
 +
* http://status.harctf.hcesperer.org/score/adv/a_44.html pw bytt till Faschirvarj6
 +
 +
* http://status.harctf.hcesperer.org/score/adv/a_53.html pw bytt
 +
 +
* http://status.harctf.hcesperer.org/score/adv/a_74.html mod satt till 755
  
 
=RANDOM=
 
=RANDOM=

Nuvarande version från 14 augusti 2009 kl. 23.19

Hej fitta

TJÄNSTER[edit]

HÅL[edit]

MÅL[edit]

ERÖVRAT[edit]

FÖRLORAT[edit]

ATT PATCHA[edit]

  • MYSQL:

The default password is (user:pass): root:blafa www-data:blafa
debian-sys-maint user password known: http://status.harctf.hcesperer.org/score/adv/a_36.html
http://status.harctf.hcesperer.org/score/adv/a_37.html

  • core-system

users: abashe (govmhttpd)
govmvote runs with root privileges
govmvote(http) runs with root privileges

  • HTTP:

perlhttpd http://status.harctf.hcesperer.org/score/adv/a_30.html http://status.harctf.hcesperer.org/score/adv/a_42.html lighttp/foo.php http://status.harctf.hcesperer.org/score/adv/a_31.html http://status.harctf.hcesperer.org/score/adv/a_33.html lighttpd http://status.harctf.hcesperer.org/score/adv/a_35.html Information leak via http://10.x.1.3/mwys/version.php , fix: rm /var/www/mwys/version.php

PATCHAT[edit]

RANDOM[edit]