[Help] Http details - Web Host backdoor.

Well, this is probably the worst idea, but I have found the following;

[Only registered and activated users can see links. Click Here To Register...]

Ports 22, 25, 80, 110 show open

I have tried ftp anon login through port 80 and ssl anon login through port 22, however I'm no network guru.

I know these are file servers for the webhost but from this i have found;

The IP address of credit.91.com is 208.96.12.132
The IP address of co.91.com is 208.113.97.208
The IP address of vips.91.com is 208.96.12.132

[Only registered and activated users can see links. Click Here To Register...]


This last one will have all of the account logins.

The registered name for the servers is ; [Only registered and activated users can see links. Click Here To Register...]

the best i can get from a cgi test is;

#!/bin/sh

# disable filename globbing
set -f

echo "Content-type: text/plain; charset=iso-8859-1"
echo

echo CGI/1.0 test script report:
echo

echo argc is $#. argv is "$*".
echo

echo SERVER_SOFTWARE = $SERVER_SOFTWARE
echo SERVER_NAME = $SERVER_NAME
echo GATEWAY_INTERFACE = $GATEWAY_INTERFACE
echo SERVER_PROTOCOL = $SERVER_PROTOCOL
echo SERVER_PORT = $SERVER_PORT
echo REQUEST_METHOD = $REQUEST_METHOD
echo HTTP_ACCEPT = "$HTTP_ACCEPT"
echo PATH_INFO = "$PATH_INFO"
echo PATH_TRANSLATED = "$PATH_TRANSLATED"
echo SCRIPT_NAME = "$SCRIPT_NAME"
echo QUERY_STRING = "$QUERY_STRING"
echo REMOTE_HOST = $REMOTE_HOST
echo REMOTE_ADDR = $REMOTE_ADDR
echo REMOTE_USER = $REMOTE_USER
echo AUTH_TYPE = $AUTH_TYPE
echo CONTENT_TYPE = $CONTENT_TYPE
echo CONTENT_LENGTH = $CONTENT_LENGTH


If any one knows some exploit to hacking web servers please pm me as I would like to move this forward.

Edit* Tried to brute force ftp and http socks for username and password using hydra, but nothing came back.

Naddo1 :rolleyes:

__________________________________________________ _____________________

HIT THE THANKS BUTTON ----------------------------------|

If the police knocks on your door, you better be good at hiding :).

Quote:

Originally Posted by IAmHawtness If the police knocks on your door, you better be good at hiding :).

I did say at the top of the thread;

"this is probably the worst idea"

but hey, anyone worth a bit of salt should be able to re-direct their router and mask their own ip ;P

Thanks :P

Quote:

Originally Posted by naddo1 I did say at the top of the thread; "this is probably the worst idea" but hey, anyone worth a bit of salt should be able to re-direct their router and mask their own ip ;P

If you do succeed in forcing your way into the account server, which is highly doubtful. I would suggest getting a set up like this so when police come you may be able to escape a prison sentence.

U also may want to change your ip address and isp and use a proxy server for the Future. As by the looks of it they use china telecom system and those guys will hack u good :D. Also i know for a fact they use ip intrusion detection so u and your isp gets recorded. Id suggest u give up while your not in jail and buy 5bot.

or what you could do if i you manage to get through their auth shit just setup a proxy and have you backdoor send data to the proxy ip and rout it to yours then delete it after you get what you want.