Tutorial Compromising plasma botnets

robin_hood · 03-28-2014, 08:17 PM

Nice man! good post. Will try this out now.

Hellborn · 03-31-2014, 03:36 AM

http://www.sandboxed.info/login.php
Username: dick
Password: dick
You're welcome. Wink

Reiko · 03-31-2014, 02:28 PM

Uhh... there's a guy logging into the UK Ministry of Defense from one of those bots... as root, no less.
I'd be careful

Code:
% Abuse contact for '25.0.0.0 - 25.255.255.255' is 'hostmaster@mod.uk'

inetnum:        25.0.0.0 - 25.255.255.255
netname:        UK-MOD-19850128
descr:          DINSA, Ministry of Defence
country:        GB
org:            ORG-DMoD1-RIPE
admin-c:        MN1891-RIPE
tech-c:         MN1891-RIPE
status:         ALLOCATED PA
mnt-by:         RIPE-NCC-HM-MNT
mnt-lower:      UK-MOD-MNT
mnt-domains:    UK-MOD-MNT
mnt-routes:     UK-MOD-MNT
source:         RIPE # Filtered

person:         Mathew Newton
address:        Network Technical Authority
address:        UK Ministry of Defence
phone:          +44 (0)30 677 00816
abuse-mailbox:  hostmaster@mod.uk
nic-hdl:        MN1891-RIPE
source:         RIPE # Filtered
mnt-by:         UK-MOD-MNT

Cake · 04-01-2014, 12:26 AM

I'm sure that 99% of people chmod the files correctly after installing to avoid this. But hey you never know I guess.

Adorapuff · 04-01-2014, 12:45 AM

(04-01-2014, 12:26 AM)Kodo Wrote: I'm sure that 99% of people chmod the files correctly after installing to avoid this. But hey you never know I guess.

You'd be surprised how stupid "leet heckers" who own boatnets can be.

Cake · 04-01-2014, 12:50 AM

(04-01-2014, 12:45 AM)Adorapuff Wrote: You'd be surprised how stupid "leet heckers" who own boatnets can be.

But they're leet haxxors and thats why they leave open the backdoor.

Bannedshee · 04-01-2014, 03:11 AM

(03-31-2014, 02:28 PM)Starfall Wrote: Uhh... there's a guy logging into the UK Ministry of Defense from one of those bots... as root, no less.
I'd be careful

Code:
% Abuse contact for '25.0.0.0 - 25.255.255.255' is 'hostmaster@mod.uk' inetnum: 25.0.0.0 - 25.255.255.255 netname: UK-MOD-19850128 descr: DINSA, Ministry of Defence country: GB org: ORG-DMoD1-RIPE admin-c: MN1891-RIPE tech-c: MN1891-RIPE status: ALLOCATED PA mnt-by: RIPE-NCC-HM-MNT mnt-lower: UK-MOD-MNT mnt-domains: UK-MOD-MNT mnt-routes: UK-MOD-MNT source: RIPE # Filtered person: Mathew Newton address: Network Technical Authority address: UK Ministry of Defence phone: +44 (0)30 677 00816 abuse-mailbox: hostmaster@mod.uk nic-hdl: MN1891-RIPE source: RIPE # Filtered mnt-by: UK-MOD-MNT

Hmm which one was that?

Thank you for the info, ill be careful.

xornull · 04-14-2014, 10:52 AM

(03-31-2014, 03:36 AM)Hellborn Wrote: http://www.sandboxed.info/login.php
Username: dick
Password: dick
You're welcome.

logged in and holy shit lol.

this was a bad idea because if one of those guys have cops on their asses they might think im the bad guy and raid my house xD