OP 27 December, 2020 - 03:46 PM
(This post was last modified: 19 April, 2022 - 04:46 PM by nullptr_t. Edited 1 time in total.
Edit Reason: Updated dead link
)
Hey,
I found a way to inject bash commands on realstresser.com. I used it to dump the website and the database.
They quickly removed my PHP backdoor that I put and "fixed" (disabled) the exploit.
Here's what the leak contains:
- realstresser.sql : the whole database, passwords are hashed with sha1(md5()) (not salted) Tables :
- website.zip : the source code of the website, it also contains their DDOS scripts (L4 and L7, with some BYPASSES) and some logs
- etc mdatax.zip : some random DDOS scripts that I've found, most likely tests
- mc_server.zip : a Minecraft server, probably to test their Minecraft Booter
- linpeas out.txt : the output of the linpeas script. Might contain some interesting stuff about the server. Read it with "less -r linpeas\ out.txt" to get the colored output.
- stuff.txt : some random stuffs (etc/passwd, home ls)
Download :
I found a way to inject bash commands on realstresser.com. I used it to dump the website and the database.
They quickly removed my PHP backdoor that I put and "fixed" (disabled) the exploit.
Here's what the leak contains:
- realstresser.sql : the whole database, passwords are hashed with sha1(md5()) (not salted) Tables :
Spoiler:
- website.zip : the source code of the website, it also contains their DDOS scripts (L4 and L7, with some BYPASSES) and some logs
- etc mdatax.zip : some random DDOS scripts that I've found, most likely tests
- mc_server.zip : a Minecraft server, probably to test their Minecraft Booter
- linpeas out.txt : the output of the linpeas script. Might contain some interesting stuff about the server. Read it with "less -r linpeas\ out.txt" to get the colored output.
- stuff.txt : some random stuffs (etc/passwd, home ls)
Download :