[code] 10:00p ([R|fT]) so i found a hole in the server that allows me to view any file on the server and execute server commands
10:00p ([R|fT]) lol so there it is for tomorrow
10:00p (dren) well <img src=\'http://www.killanet.net/forum3/public/style_emoticons/<#EMO_DIR#>/censored.gif\' class=\'bbc_emoticon\' alt=\'(cens)\' /> that's not good lmao
10:00p ([R|fT]) yeah
10:00p • dren rests uneasy about that tonight
10:00p ([R|fT]) someone could delete the server in a single line:P
10:00p ([R|fT]) heheh well, as long as no one else finds it we'll be fine
10:02p (dren) can we fix it?
10:02p ([R|fT]) yeah..
10:02p ([R|fT]) but i want to wait to tell tami
10:03p (dren) why's that
10:03p ([R|fT]) im not sure if she'd like freak and somepeople may decide that, that was just too bad and like try to get me in trouble or ban me or something
10:03p ([R|fT]) i dunno why, it just has me feeling funny
10:03p ([R|fT]) having the server in my palm like that
10:03p ([R|fT]) i dont want them to freak out :S
10:03p (dren) no one's going to freak
10:03p (dren) lol
10:03p ([R|fT]) i hope not lol
10:04p (dren) I'll just rest uneasy about it tonight;P
10:04p ([R|fT]) lol[/code]
I have no idea on specifics. You can find him through irc tho. He doesn't use his messenger anymore. PM's also work on here for this too ;P *giggles* He's real worried that we're mad at him for some reason.
Server hole that rift found. It's quite a big one :S
Moderators: Moderator, Global Moderator
Server hole that rift found. It's quite a big one :S
[align=center]
“If you stop learning, you stop living.” ~Tami Quiring
“It's the rare man who understands the value of a single perfect rose.”
[/align]
“If you stop learning, you stop living.” ~Tami Quiring
“It's the rare man who understands the value of a single perfect rose.”
[/align]
Server hole that rift found. It's quite a big one :S
[code][20:09] <[R|fT]> do you know when nightstorm is going to be back on?
[20:10] <Adaera> when he gets internet lol
[20:11] <[R|fT]> oh
[20:11] <[R|fT]> well i found a really really bad thing in the server.. but im afraid to tell anyone about it
[20:12] <Adaera> what is it?
[20:12] <Adaera> I can always phone him lol
[20:12] <[R|fT]> well, i accessed it through killablogs.. but it could be done anywhere on the server where you can inject php
[20:12] <Adaera> I see
[20:12] <Adaera> so another hole for kb
[20:12] <[R|fT]> well no
[20:12] <[R|fT]> i could delete the server right now
[20:13] <[R|fT]> ill show you what im talking about
[20:13] <Adaera> no no lol
[20:13] <[R|fT]> no i wont delete it
[20:13] <[R|fT]> http://killablogs.com/images/kb_user-148-sw.php
[20:13] <Adaera> can you explain to me what it is? I can call scott tonight and maybe he can use a friend's computer to fix it
[20:13] <[R|fT]> go there
[20:14] <Adaera> I don't understand what that means
[20:14] <[R|fT]> well the biggest hole is the uploader... i can manipulate the headers to upload any file type
[20:14] <[R|fT]> okay
[20:14] <[R|fT]> in the box type this
[20:14] <[R|fT]> ls -a ../../../../../../
[20:14] <[R|fT]> and hit enter, that's a unix command
[20:14] <Adaera> I'm not typing anything in there lol
[20:14] <[R|fT]> it lists directories
[20:14] <[R|fT]> it's going to show you the root
[20:14] <Adaera> which uploader
[20:15] <[R|fT]> on killablogs, for images
[20:15] <Adaera> okay, so that needs to be removed then
[20:15] <[R|fT]> yeah or blocked till he fixes it
[20:15] <Adaera> I don't know how to block it
[20:15] <Adaera> and I don't know how to remove it lol
[20:15] <[R|fT]> well
[20:15] <[R|fT]> i could right now
[20:15] <[R|fT]> i could just move it
[20:16] <[R|fT]> but it would mean KB would not be fully functional until he moved it back
[20:16] <[R|fT]> like i said, i can do anything on the server right now
[20:16] <Adaera> so be it, I would rather that it's moved
[20:16] <[R|fT]> okay, ill go into his upload page and move as few things as possible into a new directory on his webspace for KB
[20:16] <[R|fT]> and ill give you all of the data if you wish
[20:17] <Adaera> please...then I can send it all to the buzzard
[20:17] <[R|fT]> okay..
[20:17] <[R|fT]> i was just worried you guys might freak out or something on me:S
[20:17] <Adaera> for doing what you're supposed to?
[20:18] <[R|fT]> yeah, i dunno.. it just seemed kinda drastic.. the hole, plus i dont know just how much im really allowed to do around the network
[20:18] <[R|fT]> anywho ill go move that stuff
[20:19] <Adaera> ok ty
[20:23] <Adaera> as long as you don't delete our sites or the server, and don't put any bad stuff on the server, you can do what's needed to keep it secure
[20:28] <[R|fT]> no, i wouldnt do that, if i were evergoing to, i would now because the only hope there would be, would be if you guys back up your servers, and then you'd have to figure out how it happened in your backups because i wouldnt say anything:P
[20:28] <Adaera> geeeeeeeeeeee thanks lol
[20:28] <[R|fT]> but im not out to get anyone here, im just usualy blamed when computers go poof:P... plus since i left for a while and went back to members, i still wasnt quite sure:P but i am now so i wont freak anymore
[20:29] <Adaera> I'm sure that will remedied soon, just too many other things on my mind these days
[20:30] <[R|fT]> dont worry about it, it's just some text on the forum really.. as long as i have your permission like you've said in this conversation that's all im worried about
[20:31] <[R|fT]> i know theres more important things, which is why i try not to bug you or most people, about the server related things.. i try to be as minimal as possible usualy, just not with this one
[20:31] <[R|fT]> i expect there to always be SOME doubt though.. there's always the worry im sure, that i may do something bad one day.. iknow i would worry, having someone doing that for me on my network
[20:32] <Adaera> I trust you
[20:32] <[R|fT]> that's why i like the group so much, it shows me people are willing to trust one another
[20:44] <Adaera> scott wasn't in, so I emailed him the info, left a message for him to check his email asap lol
[20:45] <[R|fT]> thank you, im working on the file moves right now
[20:46] <Adaera> ok ty
[20:46] <[R|fT]> im reanaming his functions.php to functionsb.php and replacing his original with my own version, my versino comments out his file upload function
[20:46] <Adaera> as long as it's safe lol
[20:48] <[R|fT]> heheh it will be[/code]
[20:10] <Adaera> when he gets internet lol
[20:11] <[R|fT]> oh
[20:11] <[R|fT]> well i found a really really bad thing in the server.. but im afraid to tell anyone about it
[20:12] <Adaera> what is it?
[20:12] <Adaera> I can always phone him lol
[20:12] <[R|fT]> well, i accessed it through killablogs.. but it could be done anywhere on the server where you can inject php
[20:12] <Adaera> I see
[20:12] <Adaera> so another hole for kb
[20:12] <[R|fT]> well no
[20:12] <[R|fT]> i could delete the server right now
[20:13] <[R|fT]> ill show you what im talking about
[20:13] <Adaera> no no lol
[20:13] <[R|fT]> no i wont delete it
[20:13] <[R|fT]> http://killablogs.com/images/kb_user-148-sw.php
[20:13] <Adaera> can you explain to me what it is? I can call scott tonight and maybe he can use a friend's computer to fix it
[20:13] <[R|fT]> go there
[20:14] <Adaera> I don't understand what that means
[20:14] <[R|fT]> well the biggest hole is the uploader... i can manipulate the headers to upload any file type
[20:14] <[R|fT]> okay
[20:14] <[R|fT]> in the box type this
[20:14] <[R|fT]> ls -a ../../../../../../
[20:14] <[R|fT]> and hit enter, that's a unix command
[20:14] <Adaera> I'm not typing anything in there lol
[20:14] <[R|fT]> it lists directories
[20:14] <[R|fT]> it's going to show you the root
[20:14] <Adaera> which uploader
[20:15] <[R|fT]> on killablogs, for images
[20:15] <Adaera> okay, so that needs to be removed then
[20:15] <[R|fT]> yeah or blocked till he fixes it
[20:15] <Adaera> I don't know how to block it
[20:15] <Adaera> and I don't know how to remove it lol
[20:15] <[R|fT]> well
[20:15] <[R|fT]> i could right now
[20:15] <[R|fT]> i could just move it
[20:16] <[R|fT]> but it would mean KB would not be fully functional until he moved it back
[20:16] <[R|fT]> like i said, i can do anything on the server right now
[20:16] <Adaera> so be it, I would rather that it's moved
[20:16] <[R|fT]> okay, ill go into his upload page and move as few things as possible into a new directory on his webspace for KB
[20:16] <[R|fT]> and ill give you all of the data if you wish
[20:17] <Adaera> please...then I can send it all to the buzzard
[20:17] <[R|fT]> okay..
[20:17] <[R|fT]> i was just worried you guys might freak out or something on me:S
[20:17] <Adaera> for doing what you're supposed to?
[20:18] <[R|fT]> yeah, i dunno.. it just seemed kinda drastic.. the hole, plus i dont know just how much im really allowed to do around the network
[20:18] <[R|fT]> anywho ill go move that stuff
[20:19] <Adaera> ok ty
[20:23] <Adaera> as long as you don't delete our sites or the server, and don't put any bad stuff on the server, you can do what's needed to keep it secure
[20:28] <[R|fT]> no, i wouldnt do that, if i were evergoing to, i would now because the only hope there would be, would be if you guys back up your servers, and then you'd have to figure out how it happened in your backups because i wouldnt say anything:P
[20:28] <Adaera> geeeeeeeeeeee thanks lol
[20:28] <[R|fT]> but im not out to get anyone here, im just usualy blamed when computers go poof:P... plus since i left for a while and went back to members, i still wasnt quite sure:P but i am now so i wont freak anymore
[20:29] <Adaera> I'm sure that will remedied soon, just too many other things on my mind these days
[20:30] <[R|fT]> dont worry about it, it's just some text on the forum really.. as long as i have your permission like you've said in this conversation that's all im worried about
[20:31] <[R|fT]> i know theres more important things, which is why i try not to bug you or most people, about the server related things.. i try to be as minimal as possible usualy, just not with this one
[20:31] <[R|fT]> i expect there to always be SOME doubt though.. there's always the worry im sure, that i may do something bad one day.. iknow i would worry, having someone doing that for me on my network
[20:32] <Adaera> I trust you
[20:32] <[R|fT]> that's why i like the group so much, it shows me people are willing to trust one another
[20:44] <Adaera> scott wasn't in, so I emailed him the info, left a message for him to check his email asap lol
[20:45] <[R|fT]> thank you, im working on the file moves right now
[20:46] <Adaera> ok ty
[20:46] <[R|fT]> im reanaming his functions.php to functionsb.php and replacing his original with my own version, my versino comments out his file upload function
[20:46] <Adaera> as long as it's safe lol
[20:48] <[R|fT]> heheh it will be[/code]
Last edited by Tami on Sat Jun 30, 2007 3:50 am, edited 1 time in total.
[color=\"#41211C\"]It takes years to build up trust and only seconds to destroy it
[/color]
Server hole that rift found. It's quite a big one :S
[code][21:11] <[R|fT]> okay i was having trouble with moving the files, there is at least access protections on the folders, but those could still be changed, so, what i did was delete his functions.php file in 'httpdocs/lib/'
[21:12] <Adaera> okay
[21:12] <[R|fT]> but there is one under 'httpdocs/images/' called functionsa.php.. this is the back up of his file with the image upload function commented out
[21:12] <[R|fT]> so he still has all of his work, it's just moved and altered
[21:12] <Adaera> I'm sure he can figure it out, cuz I can't rofl
[21:12] <Adaera> thank you Sean :)
[21:13] <[R|fT]> yw... but
[21:13] <Adaera> but what
[21:13] <[R|fT]> this did bring down http://killablogs.com
[21:13] <Adaera> doh
[21:14] <Adaera> ok that's not good, going to have people bitching lol
[21:14] <[R|fT]> hmm... well the only other thing i could be able to do would be to ftp into the site
[21:14] <[R|fT]> and upload the functions.php file that i altered
[21:14] <[R|fT]> then it'd be fine, just the uploader wouldnt work yet.
[21:14] <Adaera> I'll have to get the password, one sec
[21:14] <[R|fT]> okay
[21:15] <[R|fT]> hmm i just found "localhost", "blogger", "bl00gy"
[21:15] <[R|fT]> but i think that's the DB
[21:16] <Adaera> bl0gs pw: d4mn1t
[21:17] <[R|fT]> alright, ill get on it and let you know when the site is back up
[21:17] <Adaera> ok ty
[21:17] <[R|fT]> or you might see it i dunno:P
[21:20] <[R|fT]> alright it's back up
[21:21] <Adaera> thank you lol
[21:21] <[R|fT]> yw
[21:21] <[R|fT]> =P
[21:25] <[R|fT]> oh, sorry but one other thing
[21:25] <Adaera> what lol
[21:25] <[R|fT]> in the php, server wide, we must must must disable the functions: system() and execute()
[21:25] <Adaera> ok
[21:25] <[R|fT]> that's the biggest problem with someone getting a page on our server
[21:26] <[R|fT]> no matter what site, if they can put up php.. those allow them to execute server commands, such as fdisk... rmdir... etc
[21:26] <[R|fT]> ping -f leethost if your greg
[21:26] <Adaera> :S
[21:26] <[R|fT]> scary huh?:P
[21:26] <Adaera> very lol
[21:28] <[R|fT]> well if anything i was able to generate a new site map:P so i dont miss a site.. if it dont have killa in it though, i leave it alone:P there's customer websites on there as well
[21:28] <[R|fT]> so it looked like anyhow
[21:29] <Adaera> yeah there are[/code]
[21:12] <Adaera> okay
[21:12] <[R|fT]> but there is one under 'httpdocs/images/' called functionsa.php.. this is the back up of his file with the image upload function commented out
[21:12] <[R|fT]> so he still has all of his work, it's just moved and altered
[21:12] <Adaera> I'm sure he can figure it out, cuz I can't rofl
[21:12] <Adaera> thank you Sean :)
[21:13] <[R|fT]> yw... but
[21:13] <Adaera> but what
[21:13] <[R|fT]> this did bring down http://killablogs.com
[21:13] <Adaera> doh
[21:14] <Adaera> ok that's not good, going to have people bitching lol
[21:14] <[R|fT]> hmm... well the only other thing i could be able to do would be to ftp into the site
[21:14] <[R|fT]> and upload the functions.php file that i altered
[21:14] <[R|fT]> then it'd be fine, just the uploader wouldnt work yet.
[21:14] <Adaera> I'll have to get the password, one sec
[21:14] <[R|fT]> okay
[21:15] <[R|fT]> hmm i just found "localhost", "blogger", "bl00gy"
[21:15] <[R|fT]> but i think that's the DB
[21:16] <Adaera> bl0gs pw: d4mn1t
[21:17] <[R|fT]> alright, ill get on it and let you know when the site is back up
[21:17] <Adaera> ok ty
[21:17] <[R|fT]> or you might see it i dunno:P
[21:20] <[R|fT]> alright it's back up
[21:21] <Adaera> thank you lol
[21:21] <[R|fT]> yw
[21:21] <[R|fT]> =P
[21:25] <[R|fT]> oh, sorry but one other thing
[21:25] <Adaera> what lol
[21:25] <[R|fT]> in the php, server wide, we must must must disable the functions: system() and execute()
[21:25] <Adaera> ok
[21:25] <[R|fT]> that's the biggest problem with someone getting a page on our server
[21:26] <[R|fT]> no matter what site, if they can put up php.. those allow them to execute server commands, such as fdisk... rmdir... etc
[21:26] <[R|fT]> ping -f leethost if your greg
[21:26] <Adaera> :S
[21:26] <[R|fT]> scary huh?:P
[21:26] <Adaera> very lol
[21:28] <[R|fT]> well if anything i was able to generate a new site map:P so i dont miss a site.. if it dont have killa in it though, i leave it alone:P there's customer websites on there as well
[21:28] <[R|fT]> so it looked like anyhow
[21:29] <Adaera> yeah there are[/code]
Last edited by Tami on Sat Jun 30, 2007 4:24 am, edited 1 time in total.
[color=\"#41211C\"]It takes years to build up trust and only seconds to destroy it
[/color]
Server hole that rift found. It's quite a big one :S
This wasn't quite as easy as rift was making it out to be - you'd need a fair bit of knowledge and a kb account to do any of this. Either way, the uploader has been improved quite abit and I'll get him to have a look over it again.
As for blocking php commands I'll leave that to NS, not sure whether something like account lab might need them or not.
As for blocking php commands I'll leave that to NS, not sure whether something like account lab might need them or not.