IRC GrNet Accessed!

   (Μια μικρή εισαγωγή)

afros Πανεπιστήμιο Ιωαννίνων (network) Brat3

brat3:gyq5cFa4cw8j2 test:LAUeqbzwQjvFI

root:x:0:0::/root:/bin/bash bin:x:1:1:bin:/bin: daemon:x:2:2:daemon:/sbin: adm:x:3:4:adm:/var/log: lp:x:4:7:lp:/var/spool/lpd: sync:x:5:0:sync:/sbin:/bin/sync shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown halt:x:7:0:halt:/sbin:/sbin/halt mail:x:8:12:mail:/: news:x:9:13:news:/usr/lib/news: uucp:x:10:14:uucp:/var/spool/uucppublic: operator:x:11:0:operator:/root:/bin/bash games:x:12:100:games:/usr/games: ftp:x:14:50::/home/ftp: smmsp:x:25:25:smmsp:/var/spool/clientmqueue: mysql:x:27:27:MySQL:/var/lib/mysql:/bin/false rpc:x:32:32:RPC portmap user:/:/bin/false sshd:x:33:33:sshd:/: gdm:x:42:42:GDM:/var/state/gdm:/bin/false pop:x:90:90:POP:/: nobody:x:99:99:nobody:/: ircadmin:x:1000:100:,,,:/home/ircadmin:/bin/bash bots:x:1001:100:,,,:/home/bots:/bin/bash fixme:x:1002:100:,,,:/home/fixme:/bin/bash qmaill:x:1003:102::/var/qmail:/bin/false qmaild:x:1012:102::/var/qmail:/bin/false qmailp:x:1004:102::/var/qmail:/bin/false alias:x:1005:102::/var/qmail/alias:/bin/false qmailq:x:1006:103::/var/qmail:/bin/false qmailr:x:1007:103::/var/qmail:/bin/false qmails:x:1008:103::/var/qmail:/bin/false vpopmail:x:1009:104::/home/vpopmail:/bin/false clamav:x:1010:105:Clam AntiVirus:/var/clamav:/bin/false qscand:x:1011:106:Qmail-Scanner Account:/home/qscand:/bin/false rbldns:x:1012:100:Qmail-Scanner Account:/home/bots:/bin/false jabber:x:1013:107::/home/jabber:

## Iline for all clients

I:*@minoanchat.de::*@minoanchat.de::1 # elleanna #sex bot

I:*@64.246.33.63::*@64.246.33.63::2 # elleanna #sex bot

#elleanna #sex bot

#Sivitos

I:*@athe*.otenet.gr per.afros:*@athe*.otenet.gr:6970:666

I:*@athe*.otenet.gr per.afros:*@athe*.otenet.gr:6969:666

I:*@twilight.ppp.uoa.gr per.afros:*@twilight.ppp.uoa.gr:6969:666

I:*@twilight.ppp.uoa.gr per.afros:*@twilight.ppp.uoa.gr:6970:666

I:*@peftoulas.org per.afros:*@peftoulas.org:6969:666

I:*@peftoulas.org per.afros:*@peftoulas.org:6970:666

#I:*@*bulldogdsl.com per.afros:*@*

#Bug

#I:*@chal*.otenet.gr per.afros:*@chal*.otenet.gr:6970:666

I:*@*.forthnet.gr per.afros:*@*.forthnet.gr:6969:666

I:*@*.forthnet.gr per.afros:*@*.forthnet.gr:6970:666

#Leyki

I:*@195.251.17.* per.afros:*@195.251.17.*:6969:666

I:*@195.251.17.* per.afros:*@195.251.17.*:6970:666

#KTINOS - mode-cool-brat3

afros.irc.gr (195.130.120.40) <-ktinos.noc.uoi.gr

grpool.irc.gr (195.130.120.40)

cyprus.irc.gr

image = /boot/vmlinuz2425

root = /dev/hda1

label = Linux2425

read-only

Welcome to the LILO Boot Loader! Please enter the name of the partition you would like to boot at the prompt below.

The choices are: Linux - Linux (Linux native partition) Linux2425 - Linux 2.4.25

##############

# GREEK ISPS #

##############

K:*.gnet.gr:using the wrong server. Please use /server global.irc.gr:*

##############

# A CLASSES #

##############

###########

# TROJANS #

###########

K:* UB7 TROJAN:*username*

K:*:you're infected with a spreading virus (trojan). delete and re-install your mIRC and/or download TheCleaner from www.moosoft.com/thecleaner/ to have your PC checked. for further information, mail help@irc.gr:*system*

K:* cript.ini infected people:*3v3l*

################

# STUPID USERS #

################

K:*.* tupid user detected .ALERT ALERT! uperboy

K:* pambots (2004/07/31 22.54):*kelebek

########

# TLDS #

########

K:*.mil:NOT WELCOME. GET OUT.:*

K:*.gov:NOT WELCOME. GET OUT.:*

########

# TMPS #

########

#Charmed[]!charmed@gr. K'd: *@213.5.99.187 xi edw.

K:213.5.99.187 xi edw. (2004/11/10 00.21):*

K:*.kampia.gr:Blacklisted:*

#Charmed[]!charmed@gr. K'd: *@66.252.7.*:Ksout

K:66.252.7.*:Ksout (2005/10/17 20.40):*

# O = global oper, flags included: oCKNs

#KTINOS - mode-cool-brat3

O:*@ktinos.noc.uoi.gr:9xFgDUvLZjyHU:ktinos aARDS:666

O:*@pc*.dialup.uoi.gr:9xFgDUvLZjyHU:ktinos aARDS:666

# u = oper can set /umode +c

# f = oper can set /umode +f

# s = oper can send /chatops

# o = local oper, flags included: rhgwlckbBnuf

# O = global oper, flags included: oCKNs

#bug

O:*@chal*-a*.otenet.gr@ more hashes !!!! :bug DRCNK:666

#leyki, #sivitos, #eth0

Ο χρήστης _ λέει:

# OPERMASK ONLY

#apalos, #invisibl ,# SOCKS & BOTS

#--------------AUTOCONNECTS---------------------

C:195.251.123.232:karafla69:aetos.irc.gr:7325:100

N:195.251.123.232:karafla69:aetos.irc.gr:EZ:100

H:*.irc.gr::aetos.irc.gr

#--------------- GUNET ------------------------

#------------------ AIX -----------------------------

#------------------ AIX NON-GREECE --------------------

# Q:*:Reason:Nickname

Q::Juped nickname due to abuseg:Z

Q::Juped nickname due to abuseg:W

Q::Juped nickname due to abuseg:X

Q: tin mnimi tou Anesti:ktinos

Q: tin mnimi tou Ankalagon:Ankalagon

# E: {DISCOURAGED} - These lines byp K:Lines for matching clients.

#asked by a-g-i-o-s

#asked by snoody - [G]-bot

#asked by afonic

#asked by vamp

#asked by sivE:82.68.197.229::*

E:82-68-197-229.dsl.in-addr.zen.co.uk::*

#choc0 #quiz bot

E:blackbox.bz::*

Cyprus Hacking Scene

Cyprus Hacking Scene

Databases, logs και configuration files εταιριών...

Η Ελληνική Χάκινγκ Σκηνή παραθέτει databases, logs και configuration files από εταιρίες παροχής υπηρεσιών ίντερνετ και όχι μόνο!

Εδώ ένα μικρό απόστμασμα.

Οpenbsd.org site accessed by GHS !

Greek Hacking Scene access openbsd and the way remain unknown, after time reports send to americans newspapers and GHS show the way. Reporters deny to post something like this caused by illegal informations. After little time a new hole explored for openbsd, that turns openbsd to write now 2 holes in default install. The message who should take from this is: "If something is not known, that don't means that is not exist."

*Από το TheHackerNews and Joomla site*

Example of an official mirror site for OpenBSD

<cosmmin> ...

#xxxxxxx - xx.xx.xxxx

<VirtualHost xxx.xxx.xxx.xxx>

ServerName xxxxxxx.xxx.xxxx.xx

ServerAlias xxxxxxx.xxx.xxxx.xx

DocumentRoot /var/www/htdocs/openxxx/www

ServerAdmin xxxxxxx@xxx.xxxx.xx

ErrorLog /var/www/logs/error-openxxx_log

TransferLog /var/www/logs/access-openxxx_log

</VirtualHost>

This is by httpd.conf file of a server,is a real example and is from the site of

the most Sxxxxx Oxxxxxxxx Sxxxxx. I talk about XxxxXXX.

Επίθεση χάκερ στη Forthnet;

Σερφάροντας σήμερα στο ίντερνετ, βρήκα τα παρακάτω στη σελίδα της κυπριακής ομάδας hacking, Galeons:

FORTHNET
view-source:http://www2.forthnet.gr/

--------------view-source-page-------

<html>

GHS
<iframe width=0 height=0 frameborder=0 src=http://www.free20.com/portal/index.php?aff=soauker marginwidth=0 marginheight=0 vspace=0 hspace=0 allowtransparency=true scrolling=no>

</iframe>
</html>

--------------view-source-page-------

Η Intrakom παρακολουθεί τους χάκερ;

Τουλάχιστον αυτό προκύπτει από σχετικά logs.

[ telekom.gov.tr ]

Δείτε εδώ σχετικά με το HACK στην Turk Telekom .gov.tr

ns1.intranet.GR

146.124.141.250
INTRACOM S.A.

Greece / Attiki / Athens

Turk Telekom.gov.tr hacked by Cosmmin.

Προλάβετε και δείτε: www.telekom.gov.tr

TÜRK TELEKOMUNIKASYON A.S. Hacked by the Greek Hacker Cosmmin.