Harctf: Skillnad mellan sidversioner
Hoppa till navigering
Hoppa till sök
Gea (diskussion | bidrag) |
Gea (diskussion | bidrag) |
||
| Rad 22: | Rad 22: | ||
root:blafa | root:blafa | ||
www-data:blafa | www-data:blafa | ||
<br> | |||
debian-sys-maint user password known: http://status.harctf.hcesperer.org/score/adv/a_36.html | |||
<br> | |||
http://status.harctf.hcesperer.org/score/adv/a_37.html | |||
*core-system | *core-system | ||
| Rad 28: | Rad 32: | ||
govmvote runs with root privileges<br> | govmvote runs with root privileges<br> | ||
govmvote(http) runs with root privileges | govmvote(http) runs with root privileges | ||
<br> | |||
*HTTP: | |||
perlhttpd http://status.harctf.hcesperer.org/score/adv/a_30.html http://status.harctf.hcesperer.org/score/adv/a_42.html | |||
lighttp/foo.php http://status.harctf.hcesperer.org/score/adv/a_31.html http://status.harctf.hcesperer.org/score/adv/a_33.html | |||
lighttpd http://status.harctf.hcesperer.org/score/adv/a_35.html | |||
Information leak via http://10.x.1.3/mwys/version.php , fix: rm /var/www/mwys/version.php | |||
=RANDOM= | =RANDOM= | ||
Versionen från 14 augusti 2009 kl. 23.29
Hej fitta
TJÄNSTER
HÅL
MÅL
ERÖVRAT
FÖRLORAT
ATT PATCHA
- MYSQL:
The default password is (user:pass):
root:blafa
www-data:blafa
debian-sys-maint user password known: http://status.harctf.hcesperer.org/score/adv/a_36.html
http://status.harctf.hcesperer.org/score/adv/a_37.html
- core-system
users: abashe (govmhttpd)
govmvote runs with root privileges
govmvote(http) runs with root privileges
- HTTP:
perlhttpd http://status.harctf.hcesperer.org/score/adv/a_30.html http://status.harctf.hcesperer.org/score/adv/a_42.html lighttp/foo.php http://status.harctf.hcesperer.org/score/adv/a_31.html http://status.harctf.hcesperer.org/score/adv/a_33.html lighttpd http://status.harctf.hcesperer.org/score/adv/a_35.html Information leak via http://10.x.1.3/mwys/version.php , fix: rm /var/www/mwys/version.php