Jump to content

operat0r_001

Active Members
  • Posts

    327
  • Joined

  • Last visited

  • Days Won

    1

Posts posted by operat0r_001

  1. my uber USB flash drive

    E:CuteHTML.exe
    E:nmap.exe
    E:SysRun.exe
    E:Regmon.exe
    E:autoruns.exe
    E:babyftp.exe
    E:procexp.exe
    E:vncviewer.exe
    E:windows-hider.exe
    E:winscp376.exe
    E:i_view32.exe
    E:utorrent.exe
    E:Glass2k.exe
    E:SC.EXE
    E:svchost.exe
    E:Cax.exe
    E:Foxit Reader.exe
    E:SWFDecompiler.exe
    E:UltraISO.exe
    E:PStart.exe
    E:egrep.exe
    E:sed.exe
    E:drawballTools.exe
    E:sbagen-win-1.4.3.exe
    E:wc.exe
    E:tail.exe
    E:pdftext.exe
    E:QRes.exe
    E:TreeSizeFree.exe
    E:7zip7z.exe
    E:7zip7zFM.exe
    E:7zip7zG.exe
    E:7zipUninstall.exe
    E:GIMPPortableGIMPPortable.exe
    E:ffxprc2FlashFXP.exe
    E:toolsRegCleanr.exe
    E:toolswikito.exe
    E:toolsAbsintheAbsinthe.exe
    E:toolsAbsintheUninstaller.exe
    E:toolsSQLPowerInjectorSQLPowerInjector.exe
    E:toolsExploitTreeExploitTree.exe
    E:toolsExploitTreebincp.exe
    E:toolsExploitTreebincvs.exe
    E:toolsExploitTreebingrep.exe
    E:toolsExploitTreebinls.exe
    E:toolsExploitTreebinwc.exe
    E:toolsParosIEEmbed.exe
    E:toolsParosMozEmbed.exe
    E:toolsParosunins000.exe
    E:toolsCopy of punins000.exe
    E:toolsCopy of pPRIAMOS.exe
    E:VLCPortableVLCPortable.exe
    E:VLCPortableAppvlcvlc.exe
    E:macmacexp.EXE
    E:Audacityaudacity.exe
    E:FirefoxPortableFirefoxPortable.exe
    E:SkypePhoneSkype.exe
    E:PortableDIAPortableDIA.exe
    E:Chaoscopechaoscope.exe
    E:cdrtfe_portablecdrtfe.exe
    E:cdrtfe_portablevcdimager.exe
    E:winrarRar.exe
    E:winrarRarExtLoader.exe
    E:winrarUnRAR.exe
    E:winrarWinRAR.exe
    E:puttyputty.exe
    E:pluginsSlideshow.exe
    E:PidginPortablePidginPortable.exe
    agrep.exe
    ansi2knr.exe
    basename.exe
    bc.exe
    bison.exe
    bunzip2.exe
    bzip2.exe
    bzip2recover.exe
    cat.exe
    chgrp.exe
    chmod.exe
    chown.exe
    cksum.exe
    cmp.exe
    comm.exe
    compress.exe
    cp.exe
    csplit.exe
    cut.exe
    date.exe
    dc.exe
    dd.exe
    df.exe
    diff.exe
    diff3.exe
    dircolors.exe
    dirname.exe
    du.exe
    echo.exe
    egrep.exe
    env.exe
    expand.exe
    expr.exe
    factor.exe
    fgrep.exe
    find.exe
    flex.exe
    fmt.exe
    fold.exe
    fsplit.exe
    gawk.exe
    gclip.exe
    gplay.exe
    grep.exe
    gsar.exe
    gunzip.exe
    gzip.exe
    head.exe
    id.exe
    indent.exe
    install.exe
    join.exe
    jwhois.exe
    less.exe
    lesskey.exe
    ln.exe
    logname.exe
    ls.exe
    m4.exe
    make.exe
    makedepend.exe
    makemsg.exe
    man.exe
    md5sum.exe
    mkdir.exe
    mkfifo.exe
    mknod.exe
    mv.exe
    mvdir.exe
    nl.exe
    od.exe
    paste.exe
    patch.exe
    pathchk.exe
    pclip.exe
    pr.exe
    printenv.exe
    printf.exe
    pwd.exe
    recode.exe
    rm.exe
    rman.exe
    rmdir.exe
    sdiff.exe
    sed.exe
    seq.exe
    shar.exe
    sleep.exe
    sort.exe
    split.exe
    stego.exe
    su.exe
    sum.exe
    sync.exe
    tac.exe
    tail.exe
    tar.exe
    tee.exe
    test.exe
    touch.exe
    tr.exe
    type.exe
    uname.exe
    unexpand.exe
    uniq.exe
    unrar.exe
    unshar.exe
    unzip.exe
    uudecode.exe
    uuencode.exe
    wc.exe
    wget.exe
    which.exe
    whoami.exe
    xargs.exe
    yes.exe
    zcat.exe
    zip.exe
    E:gizmoGizmo.exe

  2. her ya go ! wait screen shot ...

    ... i dont run X ..

    %uname -a
    FreeBSD rmccurdy.com 6.2-RELEASE-p4 FreeBSD 6.2-RELEASE-p4 #0: Thu Apr 26 17:40:53 UTC 2007     root@i386-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC  i386
    %top -b
    last pid:  3436;  load averages:  0.00,  0.00,  0.00  up 0+03:16:33    04:03:22
    45 processes:  1 running, 43 sleeping, 1 zombie
    
    Mem: 71M Active, 88M Inact, 50M Wired, 13M Cache, 34M Buf, 12M Free
    Swap: 471M Total, 12K Used, 471M Free
    
    
      PID USERNAME  THR PRI NICE   SIZE    RES STATE    TIME   WCPU COMMAND
      749 root        1   8    0 21412K 10808K nanslp   0:09  0.00% httpd
      746 mysql       5  20    0 55240K 26236K kserel   0:05  0.00% mysqld
      957 operat0r    1  96    0  8244K  5480K select   0:03  0.00% irssi
     3398 root        1   8    0  1712K  1072K nanslp   0:00  0.00% snortsam
      955 operat0r    1  96    0  2204K  1572K select   0:00  0.00% screen
     1491 www         1  20    0 21524K 11148K lockf    0:00  0.00% httpd
     1494 www         1  20    0 21540K 11016K lockf    0:00  0.00% httpd
      706 root        1  96    0  2928K  1524K select   0:00  0.00% master
     1642 www         1   4    0 21552K 11204K kqread   0:00  0.00% httpd
     1690 www         1  20    0 21508K 11064K lockf    0:00  0.00% httpd
     1492 www         1  20    0 21532K 11048K lockf    0:00  0.00% httpd
     3262 operat0r    1  96    0  6284K  2852K select   0:00  0.00% sshd
      517 root        1  96    0  1376K   828K select   0:00  0.00% syslogd
     1495 www         1  20    0 21532K 11048K lockf    0:00  0.00% httpd
     1507 www         1  20    0 21528K 11044K lockf    0:00  0.00% httpd
     3260 root        1   4    0  6272K  2808K sbwait   0:00  0.00% sshd
     1750 www         1  20    0 21536K 11028K lockf    0:00  0.00% httpd
     1493 www         1  20    0 21508K 11036K lockf    0:00  0.00% httpd

  3. use cax.exe or vbs to hide it

    do not scan the %userprofile%  temp internet settings ( too much crap )

    stick to desktop and maybe setup the script to have a blacklist fro folders like %temp% etc ..

    use some kind of CLI undelete app and recycle bin restore util ( people  often delete c:recyle with porn in it etc..

    http://rmccurdy.com/scripts/quickclean.txt ( ya i suck at bat too ) see ./ fro the EXE

  4. :: Fixed the code ::

    Example cURL ( libcurl) code with debug option.

    <?php
    /* change the LOGINEMALHERE%40yahoo.com 
    /* change the PASSWORDHERE 
    /* then run it ! php snort.php > snortrules-snapshot-2.4.tar.gz
    /* set both DEBUG_ options  to true to debug ...
    
    define(DEBUG_PRINT, FALSE);
    define(DEBUG_MODE, FALSE);
    error_reporting(E_ALL | E_STRICT);
    
    
    $my_mundo_travian = 'http://www.snort.org';
    $my_login_url = "$my_mundo_travian/login/";
    
    /* below the original test page has a string with valid header data copied as
        shown in the tutorial using live http headers */
    $my_login_data = "destination=https%3A%2F%2Fwww.snort.org%2Freg-bin%2Fuserprefs.cgi&credential_0=LOGINEMALHERE%40yahoo.com&credential_1=PASSWORDHERE&Submit=login+to+snort.org";
    $my_proxy = '';
    $my_proxy_status = 'off';
    
    /* after a successful login, this url shows the initial game control panel.
        If login fails, it shows the login page */
    $my_grab_page = 'http://www.snort.org/pub-bin/downloads.cgi/Download/vrt_os/snortrules-snapshot-2.4.tar.gz';
    
    $fp_err = fopen("curl_errors.txt", "w");
    curl_login($my_login_url, $my_login_data, $my_proxy, $my_proxy_status);
    echo curl_grab_page($my_grab_page, $my_proxy, $my_proxy_status);
    fclose($fp_err);
    
    
    /* login functions by Chad from http://codersshack.com/forums/php_11/tutorial-curl-login_44.html */
    /* functions are slightly modified in order to send curl verbose report to a file */
    
    function curl_login($url,$data,$proxy,$proxystatus){
        global $fp_err;
    
        $fp = fopen("cookie_travian.txt", "w");
        fclose($fp);
        $login = curl_init();
        if (DEBUG_MODE) {
          curl_setopt($login, CURLOPT_VERBOSE, TRUE);
          curl_setopt($login, CURLOPT_STDERR, $fp_err);
        }
        curl_setopt($login, CURLOPT_COOKIEJAR, "cookie_travian.txt");
        curl_setopt($login, CURLOPT_COOKIEFILE, "cookie_travian.txt");
        curl_setopt($login, CURLOPT_USERAGENT, "rmccurdy");
        curl_setopt($login, CURLOPT_REFERER, "http://www.snort.org/pub-bin/downloads.cgi/Download/vrt_os/");
        curl_setopt($login, CURLOPT_TIMEOUT, 30);
        curl_setopt($login, CURLOPT_RETURNTRANSFER, TRUE);
        if ($proxystatus == 'on') {
            curl_setopt($login, CURLOPT_SSL_VERIFYHOST, FALSE);
            curl_setopt($login, CURLOPT_HTTPPROXYTUNNEL, TRUE);
            curl_setopt($login, CURLOPT_PROXY, $proxy);
        }
        curl_setopt($login, CURLOPT_URL, $url);
        curl_setopt($login, CURLOPT_HEADER, TRUE);
        curl_setopt($login, CURLOPT_USERAGENT, "rmccurdy");
        curl_setopt($login, CURLOPT_FOLLOWLOCATION, TRUE);
        curl_setopt($login, CURLOPT_POST, TRUE);
        curl_setopt($login, CURLOPT_POSTFIELDS, $data);
        ob_start();      // prevent any output
        return curl_exec ($login); // execute the curl command
        ob_end_clean();  // stop preventing output
        curl_close ($login);
        unset($login);    
    }                  
    
    function curl_grab_page($site,$proxy,$proxystatus){
        global $fp_err;
    
        $ch = curl_init();
        if (DEBUG_MODE) {
          curl_setopt($ch, CURLOPT_VERBOSE, TRUE);
          curl_setopt($ch, CURLOPT_STDERR, $fp_err);
        }
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, TRUE);
        if ($proxystatus == 'on') {
            curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, FALSE);
            curl_setopt($ch, CURLOPT_HTTPPROXYTUNNEL, TRUE);
            curl_setopt($ch, CURLOPT_PROXY, $proxy);
        }
        curl_setopt($ch, CURLOPT_COOKIEFILE, "cookie_travian.txt");
        curl_setopt($ch, CURLOPT_URL, $site);
        ob_start();      // prevent any output
        return curl_exec ($ch); // execute the curl command
        ob_end_clean();  // stop preventing output
        curl_close ($ch);
    }
    
    
    if (DEBUG_PRINT) {
    echo "<br>COOKIE<br>";
    $file = file_get_contents ('cookie_travian.txt');
    Echo $file;
    echo "<br>ERR<br>";
    $file = file_get_contents ('curl_errors.txt');
    Echo $file;
    }
    
    ?>

  5. * installed libcurl support under phpextensions

    * used firefox LiveHTTPHeaders plugin to get  data

    #!/usr/local/bin/bash
    export varcingular=`php /bin/CINGULAR.PHP | grep Used | awk '{print $2}'`
    if [[ "$varcingular" -gt "400" ]]
    then
    echo WARNING  $varcingular minutes |mailx ##########@cingularme.com
    fi

    <?php
    # change ########## and password 
    
        $ch = curl_init(); 
        curl_setopt($ch, CURLOPT_URL,'https://www.snort.org/login/');
        curl_setopt($ch, CURLOPT_USERAGENT, 'rmccurdy_com');
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); 
        curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
        curl_setopt($ch, CURLOPT_COOKIEFILE, cookie);
        curl_setopt($ch, CURLOPT_COOKIEJAR,  cookie);
        $result = curl_exec ($ch);
        curl_close ($ch);
    
    
    
    
    
        $ch = curl_init(); 
        curl_setopt($ch, CURLOPT_URL,'https://www.wireless.att.com/olam/loginAction.doview');
        curl_setopt($ch, CURLOPT_USERAGENT, 'rmccurdy_com');
        curl_setopt($ch, CURLOPT_POST, 1); 
        curl_setopt($ch, CURLOPT_POSTFIELDS, 'actionEvent=loginInProgress&targetURL=&wireless_num=##########&pass=password&x=30&y=4&rememberCtn=on'); 
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); 
        curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
        curl_setopt($ch, CURLOPT_REFERER, 'https://www.wireless.att.com/olam/loginAction.doview');
        curl_setopt($ch, CURLOPT_COOKIEFILE, cookie);
        curl_setopt($ch, CURLOPT_COOKIEJAR, cookie);
        $result = curl_exec ($ch);
        curl_close ($ch);
    
    #    print     $result;    
    
            $ch = curl_init();
        curl_setopt($ch, CURLOPT_URL,'https://www.wireless.att.com/olam/loginAction.olamexecute');
            curl_setopt($ch, CURLOPT_USERAGENT, 'rmccurdy_com');
        curl_setopt($ch, CURLOPT_POST, 1);
        curl_setopt($ch, CURLOPT_POSTFIELDS, 'actionEvent=login&reportActionEvent=A_LGN_LOGIN_SUB&fromPage=');
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
            curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
            curl_setopt($ch, CURLOPT_REFERER, 'https://www.wireless.att.com/olam/loginAction.doview');
            curl_setopt($ch, CURLOPT_COOKIEFILE, cookie);
            curl_setopt($ch, CURLOPT_COOKIEJAR, cookie);
        $result = curl_exec ($ch);
        curl_close ($ch);
    
     #       print   $result;
    
        $ch = curl_init();
        curl_setopt($ch, CURLOPT_URL,'https://www.wireless.att.com/olam/dashboardAction.olamexecute');
            curl_setopt($ch, CURLOPT_USERAGENT, 'rmccurdy_com');
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
            curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
            curl_setopt($ch, CURLOPT_COOKIEFILE, cookie);
            curl_setopt($ch, CURLOPT_COOKIEJAR,  cookie);
        $result = curl_exec ($ch);
        curl_close ($ch);
    print   $result;
    ?>

    # +MobileNumber@alltelmessage.com Alltel

    # +MobileNumber@message.alltel.com Alltel (alternate)

    # +MobileNumber@mmode.com former AT&T users on Cingular

    # +MobileNumber@mobile.celloneusa.com Cellular One

    # +MobileNumber@mobile.mycingular.com Cingular

    # +MobileNumber@page.nextel.com Nextel

    # +MobileNumber@omnipointpcs.com OmnipointPCS

    # +MobileNumber@qwestmp.com Qwest

    # +MobileNumber@messaging.sprintpcs.com Sprint (US)

    # +MobileNumber@tmomail.com T-Mobile

    # +MobileNumber@vtext.com Verizon (incl. AirTouch)

    # +MobileNumber@vzwpix.com Verizon (incl. AirTouch) for pictures (MMS)

    # +MobileNumber@vmobl.com Virgin Mobile (US customers only)

    # +MobileNumber@teleflip.com All carriers

  6. at the time I riped him IRC@work was gone - the page had expired, leading me to believe the domain was not going to be renewed do to all the abuse , now that it is back up it is nice, but the fact is it is going to be abused still and so is any other free IRC thats a little more anyomus then a client, it sucks but short bus spaming pricks are ganna abuse every thing keeping free IRC's that get around blocks should stay under the radar till all the dumb asses just die.

    its a static list so go find your own and quit bitching ...or just a server

×
×
  • Create New...