Warned
#17
30 December, 2020 - 11:35 AM
(27 December, 2020 - 03:46 PM)nullptr_t Wrote: Show MoreHey,
I found a way to inject bash commands on realstresser.com. I used it to dump the website and the database.
They quickly removed my PHP backdoor that I put and "fixed" (disabled) the exploit.
Here's what the leak contains:
- realstresser.sql : the whole database, passwords are hashed with sha1(md5()) (not salted) Tables :Spoiler:
- website.zip : the source code of the website, it also contains their DDOS scripts (L4 and L7, with some BYPASSES) and some logs
- etc mdatax.zip : some random DDOS scripts that I've found, most likely tests
- mc_server.zip : a Minecraft server, probably to test their Minecraft Booter
- linpeas out.txt : the output of the linpeas script. Might contain some interesting stuff about the server. Read it with "less -r linpeas\ out.txt" to get the colored output.
- stuff.txt : some random stuffs (/etc/passwd, home ls)
Download :
qweqqwewq