A3q.Armin Posted April 8, 2011 Share Posted April 8, 2011 I'm A3q . Johnny is not Safe ! it's the list of users : root bin daemon adm lp sync shutdown halt mail news uucp operator games gopher ftp nobody nscd vcsa pcap rpc dbus avahi sshd haldaemon named xfs rpcuser nfsnobody avahi-autoipd exim cpanel cpanelhorde cpanelphpmyadmin cpanelphppgadmin cpanelroundcube mysql mailman mailnull cpaneleximfilter tomcat postgres djbob munin imatest3 jora srspock lichdr mahir akshay23 kostys al073457 bovan sapiens o60982 doorknob hero26 grossini raptor djreza tsachse pelican demood vbenk tarequer saudiexp thesis tacos912 maxy911 ktmd frogs projeto gersonjo asifkhan spencer1 filehost batshi birdbook bl4st3r jannes01 unkind37 kaashvic befbaf69 saherge kryune nspro snake vethek pennektj luizcorp bundyr onegirl extayt myiso chowgach guykun noavaran benihari elcosmos nkklein drino neverpen shan123 magu19 eqaruste ahmedv uksufi imad607 jgirard8 onel0ve jh210009 sven2010 renekb ellenoh2 alexdu iigx aldocr questdb vajcsi superior rdvg01 unionp fahm189 kontol rsousa team1599 srinix07 zyazid habbo123 aromero kare simbaa fg196702 leoajv awarkops pirate88 sankalp9 emma17 tychstef fabr91 piratar vicodin xitonic symprec cynaese tenne vu0tran harrison megharaj vashulin brunoo1 blogzomb tenb dudizada mweef abrahamh logobuzz andy1972 accels brunoite kingwood babu26 odracir chetanov hsongur yjchun alpinist anovos66 snashyle sinasina tonypaul csp jameshug cdn n00bf0r poopsen sapman tunchaka learneng erickemi hasnat omnimoto beatme slawomir mordidom mcometa xxtoo vimal000 onheiron teio bruinbro agscmo abshekkk post yision painbra carbon12 rhiasuxx desiree daya143 gery sardest mfcallda whycats jacobly chaminda ckshk aziender tzutzu mehmet19 iwantada geraf tigerss austin13 szsjc lfpghwx ilangel holdem12 osam kodsim bistro v3n0m awesome clickite habbomo thanh911 recursiv deathmax nikeix hike100 grimedia deadhp1 crane shilab rodrigom vlad3 rhamley pavanpav kod tftoffic orgonio sierra leonamgt fargeliu putweb wmhint mar1usxd karamba andybish rye fritex swagger cpa2 uclmbenz yongtest nobushk vishnu snayak hukka mafianoo unpasoh1 karellou amtata weasels danny234 fabricio learnece dzyrexl farmer proffcom news2 thebeno tt kevindix joseacco believe sifa leomb kilogame ashok eaalbers filz alterna reckst4r resharp dorsafil hejula web001 pixel soundeng lore zzzzzzzz jiji luizgst mush4444 mike2000 lordwile kovel aaetker falkonuz erjkjlk modnet alirezas mikero log22 smolk mansvi sk3tch nebunell yuri289 sharonla orgsyne mabsurd dusica info3230 danyal visitme newyear madhouse cairo omarko harveli anznaz mark sukualam pinvig autobiz mshoaib8 epuls port21 blueice actech ferlayar fourzero bism2011 smailey1 anupsing fjuba47a rbarbosa husnalch foxbat mylene arminvpn j2jt apjpphp stevenm thatonea longfu morleon maackyyy osmanli paduan18 shertech soorena herpderp worgle mo0nuh freaking blacha zedelaaa phpbb2sm rajan133 prtal redfever theswede suppakul reeboko dimon phpssh mcalati vigo9 zgreene myaxes isaibed agaia demonar koheli alanfrs ccc atslic raki tayf easyforo fibrasek dmovie dave1337 morooooo mingabar jmacedoj jcsw betimkov atul xaav daron95 ecce poland74 danjoh zixma mickur aixa djbosma alexbian sai001 zshred falsh789 atle pw2011 russiand dav2005 haohmaru emumford taiman joshgb tstr5457 megabeat mcboy eshwar hudelson mcn41r gazmeas classic acc1444 demon88 timmy94 realesj edmazing liveboar alfcl dalai bk4life nikolis jorgemar jassad30 bolspoa pleguin nekronz kiss contasys aamunx russo stalkerh wesley11 redman imagine raproduc robsonli c0r3yz iig ron975 borraren chinastr steles ewatkins noitome abhi923 ngsoftwa density gaol revoltee rovinet dotmeth emanuele sha2nkg sanspa ethan pyreen archi63 solar77 q7eb2a nsacda ika fotoport luciuk dtrollin antondk academos reisuke eksan07 vendidos ahmedooo dime11 divpreet s1mpsons hidauto deimos jsabina buyun9 kiyyou imtoo232 aindovin mustika squad penry dabby mioppenh prisoner ahmedics thebedjo truffy salfig crack007 michael1 cotalika expleyt egd1 darshman urooj gr84plus freetudo godzilla umporo beng vit monsterm jordanc payam mcxiaoke jakyl2 gangbang rafaelca zeno mappy ciel vespers realjobs nunoduk librava pedrohgf raja99 cheibbb juespark treatme antony corneli8 tonyfars skrati ktemplin astegi ferdas adam100 teamaego pastinho ogunduny ski77les kyoushu rasousa behrooz1 xboxkung conchuir theninja sabinah chippara nwsoil merodeal heliem zero1 artista ditarjay ppm tolejnic crooda kirk8314 armyhop leozao hossein irankoop biggs shaiis michel ordprov snash davro calitri nosocial gothichr sinffred ebiba catronic maikwout mohammed nakedbks vlad107 sydney18 stifu90 gemalto sam5991 benfica1 pruebass leathen rideshar westmere tefahey gurkan vanfleet asibii share578 laydas offlife jjhost timrabin kanoprof voronezh aj82 notricks sigornjw brett11 risultat jpraulji lionbell jie952 sedhai vitter dbcgames ilya hlobaza co123cc andytree seacio egyfox smrl lumen hankb webnexts aceiste liondog ralequi felix peeters yellows oketao apomoux mission guguis crisis10 stbellia nwamama srazzz jensen87 sorena89 contoh cscience bowls paleloon srw davidb thhadmin nanosoft lunatic moverman amalgs donabent rhanshop mpadair boen747 fameofl1 patrickm parn retouw achoxz xstore gybacsi cadman nagylaci rks g0dzg1ft webtrick pes6 ekimas vtin atlascad seewoolf biouade pla123 achinda basmet deemoney molzar viabella irodrigo homeaspx richardo tillpro fcbc maarcio podhal jakespp rico40 cariad58 zaragoza mustafat rdx32 freshbla crazy783 shadoz clickis pwx jesufer yarone soulkept vico mysuse sinaga mkr pduran chiamh showeb lpenov trevlord drupal aleks doscapte multig fainho newsclic atassh bugsie jawfin topmobi flylipe cloud13 shabusen caesar76 augustor darjan9 raskal mayned36 medi dalaw nexster johnmoor swelp jmkokott gfst monitor2 serged tongguo icecube bevguru yy1984 bwfblog ntupt sgsparas mario kahane88 network atlante agramit amin0411 saamir mango jbmack lauralm csffsb joesting fmaura pinklady adnane17 sb24sama versago megadeal esprofit edg emad14 rinka thenac stlex77 sed lucarell winfab ekki galofabi airceint joposopo falves nizadmin petgio altanak mawlani dr55 mohammad tsusla mg20 inderdaa newurl garethr andylihk firefly mo3020 seslak rajatk48 timecall shokzi spapp gluk72 kamell tkalaw dabomb09 kis gdub420 katekarv coonz zharskiy kuyoing yoville kikim thesatan lace snorkerz idgb pedropq xszybki jameshai hostnoup sergio61 pedrommc cansiano fordef fleming rezalaei tayfas typhon allan123 euquem harnes8 gerardje mtennis rebellis paulocba alireza puzzler9 santschi ryanbnm qazxsd daniel marin hafadoff jeanscln teixeira alentsov cbowring asa4ever makarios piotrb ostost tomigo ildrago pf3882 bopnib goup7 wchill mc1497 zephirot dansmith eraklis eharriso houziwan mctechs xgurgel kelle20 sediport speed sampbr p4radigm solq4 atikgame didileee papahits prezzima ihelpweb jvaughn ddodgers tolis72 skdonka pablors gabrielv ftong studio3d shoeme kosap eagled2 octane siyamala chess jin1125 finder86 jeffpk bulktuna sai002 loading bucko jameskan cucuradu kowalski bobyman kdgsync uskyrt nazby21 vpod loldude darna llch bwlogo kosten74 mehmetag bamoneh fadyshs extra secreto shoogler gc fnasserd angstr0m xamin salek jcbrown4 spadh demichel niyat djdanjaz bman jenkin92 alexsro cybermod poepjes larenim xeocommu dariush sitak hosting1 kapu fishhead account buscomm gamav serverma tmth fvera jacmol7 deathnot matrixh atkhenz geniusm topatch jack2ac caustik dinamo aprime tylatiri kntmr kingibo3 black99 david74 ptct2011 mcole123 rhysgt joeyp mohasin3 emily123 lagrange mrdl2008 taad r86 xsstest patrizki redx igor00 zaasaa sycom hyperadm kos1574 aryaa litha luizkkk salihsiv ateich mcgregor szymonst elizagil thuynh moussa innerg music471 crazy666 djouli1 jordanco haleyblg taik adamxp12 calidril adnanca apptest aaqil opgamez isley holly267 uogamer micro11 brettmm slitz lkaiser edessa uberiss duy123 yjf4114 eecs341 yozha spinlock thealex eric ecoloco samplete pipesman arminbar hasznosp evydder mkstudio zedyll rudie newbi homa2305 zaphreux sqk5348 cyj0912 silver40 betax9 jianyuan nemutlu anmilmb cedric21 edrotman tverlind teachman phili008 wisdom00 floda61 thienha3 armin recuru markatia smjkps sscouts joshihar firstphp ptpin drshark macrogam demiurgo cdfe3 spectrum jaydkay raymo666 caiolmf pedram svlaxos pokenerd lordmono orknnet aaron88 linehost flashlig ptempo syserr howled ellelars bossman hunterho tavuk szlwlmq smpt36 gurjaspa automan cristal saikot annuaire inetpays cocahote redbear ashleyh aloyahjr zlaja16 isakinge mahanaim fedexxx smcevoy6 updatedo fmello2 bionets toh ricvlozo ravenngo vstock revenge sexgorge phung17 habbinck bethann2 eslamovi jasperx7 ka200 tribout sephira sensei28 araksys t1t0 rezkycar skycity ylmz gurkan55 rpn saall pac5 phpadmin sethati sanders9 gee22 diihmelo benvegnu weaver15 pismaker maulem facebook jelena1 rrflashe habbinx isyiwang qinxh evenlee jadul deflect chrislol ocone fcourses keith919 ohoodmh it4y vitao009 gabriel jboy alexstr farido saulomen ivanfr iscream romeo123 beroo heiren ithbu hery1 scynge zlkn jengel11 xteam pepeleme genxspr8 hanklede gagnabil argonaut bolantoy roby exhost helio myne sagiftw ekhraji jardent bryllup wokka simpsom2 grablev running aboutkz forrozao habbydy ianerfer ayian begi kennefu t27o varava solarnz rencsuu deni90 rhapsody isoylmz iwebset iamhydro zanpuska s1mplyv oguzhan farebord libstud housemuz mugonix snmprod mniaga kevdixon framerag tvindoor redesign rfz777 nation dardari salmanal hoshokai rezflash piotr5e3 area51 fsnow55 kimichi userabc noffa viarapid rajesh82 leonchat azumih klito diklooc ufon webcage hateme yassonee apache redeguy etinos rekeos debian jd3d arie gamefeed aremania sasori uvora junin4k kitlob centre b01g vudung saptadew aamirj ken4life allarab tailwagg sohaib62 soma pdcclan semnickc morkeleb josiel mryasen cwmedia alienx2 blkvenom nagarajn easyhot franger hdwall mikaelpm toto mash shigmiya amaligo kisllaan magical natedogg dualmx kenwoo77 love8 mrpbueno rsanchez balazs87 lukeeu jandrewd idairei sknightz indomito tvelarde eroknot damper20 sesmc jacdesa srismani nhatly mahdi62 tfilmes komse hutch15 spadovan phudang czb reecedog student1 rambotan phoenix xuanson6 potent geniusev ntmthx eldute soulmate digiadmi akis maxhome msoam ameyaror kraken bouet wenmi01 dyro koerel ace24 cmarian6 anphu sanket hdbehbah abdar bova92 smartyey arminarm dodo999o hmasn lirockst trent albayan iansempe shst jseifert someshyt saxelioo kristian lgvictor siddhant santina plovinda chrislak ask imatest5 mrifai kipock obisax razbot fluhxy dinholof lineker anton44 envy786 dallas jacky22 arabsgat lum wbother moyratos geoffish sk3tche carlosb bflight grey1469 downbot asanny mkieres jagzjagz tito1111 s3310385 ejtrac tdl1616 tedj lgbt shane282 hhabblut cdallen imherry susanita kiomio ybd1f06j clandrg dtadtadt ray81 thewolf cirkef cninfo sinars bobbalod b2k googlepl ramainet jury09 mikehill zarkiel gonas lav0949 palmfine azsoft alanc blackice Link to comment Share on other sites More sharing options...
Ashoat Posted April 8, 2011 Share Posted April 8, 2011 All you're doing right now is reading a publicly readable file. /etc/passwd is CHMOD'd to 644. If somebody really cared to, they could add "cat /etc/passwd" as a cron job and get that list, plus some more stuff. It's possible to prevent this in PHP with difficulty, but it will always be possible with CGI and cronjobs. Do you have any better exploits you can identify? Link to comment Share on other sites More sharing options...
Guest Geoff Posted April 8, 2011 Share Posted April 8, 2011 [Moving thread since this relates to heliohost] Link to comment Share on other sites More sharing options...
Recommended Posts