fedorachina社区被黑了,汗哦(有图有真相)

最新ubuntu/linux/开源新闻或者其它IT相关资讯
回复
头像
mickeywaley
帖子: 1427
注册时间: 2009-03-19 9:19
系统: ubuntu
来自: 江苏
联系:

fedorachina社区被黑了,汗哦(有图有真相)

#1

帖子 mickeywaley » 2009-08-15 10:45

http://www.fedorachina.cn/forum/index.php

印尼黑客所为,kill-9 Hacked By arianom
Hacked By arianom
GOOGLE快照:2009年8月14日 02:00:38 GMT 的快照

http://203.208.37.132/search?q=cache:Lz ... I1qIDj9nMw
:: arianom ::

:: was fucked your system::

kill-9 crew : best indonesian hacker :d::

Thanks to all kill-9 crew: arianom, kaMtiEz, Contrex, Pathloader, Tiwol
注意看,国旗飘飘。。。
2.gif

黑页源码如下

代码: 全选

<html><head><title>Pathloader Was Here</title><link REL="SHORTCUT ICON" HREF="http://swararakyat.files.wordpress.com/2007/06/indonesia_flag.gif"></head>

<body bgcolor=red><embed src="http://www.dajeon.es.kr/data/class1/box.mp3" autostart="true" hidden="true"><style>

#theDiv {

 POSITION : relative;  Z-INDEX : 8; VISIBILITY : visible; ALIGN : center;

 }

</style></HEAD>

<BODY BGCOLOR="red" TEXT="red" onload="doWave(0)">

<div ID="theDiv" align="center"></div>

<SCRIPT LANGUAGE="JavaScript">

function nextSize(i,incMethod,textLength)

{

if (incMethod == 1) { return (22*Math.abs(Math.sin(i/(textLength/3.14))) );

}

if (incMethod == 2) { return (255*Math.abs(Math.cos(i/(textLength/3.14))));

}

return(0)

}

function sizeCycle(text,method,dis)

{

var output = "";

for (i = 0; i < text.length; i++) {

size = parseInt(nextSize(i +dis,method,text.length));

output += "<font style='font-size: "+ size +"pt'>" +text.substring(i,i+1)+ "</font>";

}

if (document.all)

theDiv.innerHTML = output;

else if (document.getElementById){

rng = document.createRange();

el = document.getElementById('theDiv');

rng.setStartBefore(el);

htmlFrag = rng.createContextualFragment(output);

while (el.hasChildNodes()) el.removeChild(el.lastChild);

el.appendChild(htmlFrag);}

else if (document.layers){

document.theDiv.document.write("<font face='verdana'point-size=16>"+output+"</font>");

document.theDiv.document.close();}

}

function doWave(n) {

var theText = 'PleAse CheCK YoUr SySteM ScuRiTY';



sizeCycle(theText,1,n);

if (n > theText.length) {

n=0

}

setTimeout("doWave(" + (n+1) + ")", 50);

}



</script><center><img src="http://www.geocities.com/kpdprovinsijambi/black.jpg"></center>

<P><center><h1><script language="JavaScript1.2"> 



var message="ThE nEWbie HaCKer"

var neonbasecolor="FFFFFF"

var neontextcolor="00ff00"

var neontextcolor2="red"

var neontextcolor3="yellow"

var flashspeed=100						// speed of flashing in milliseconds

var flashingletters=3						// number of letters flashing in neontextcolor

var flashingletters2=1						// number of letters flashing in neontextcolor2 (0 to disable)

var flashpause=0						// the pause between flash-cycles in milliseconds



///No need to edit below this line/////



var n=0

if (document.all||document.getElementById){

document.write('<font color="'+neonbasecolor+'">')

for (m=0;m<message.length;m++)

document.write('<span id="neonlight'+m+'">'+message.charAt(m)+'</span>')

document.write('</font>')

}

else

document.write(message)



function crossref(number){

var crossobj=document.all? eval("document.all.neonlight"+number) : document.getElementById("neonlight"+number)

return crossobj

}



function neon(){



//Change all letters to base color

if (n==0){

for (m=0;m<message.length;m++)

crossref(m).style.color=neonbasecolor

}



//cycle through and change individual letters to neon color

crossref(n).style.color=neontextcolor



if (n>flashingletters-1) crossref(n-flashingletters).style.color=neontextcolor2 

if (n>(flashingletters+flashingletters2)-1) crossref(n-flashingletters-flashingletters2).style.color=neonbasecolor





if (n<message.length-1)

n++

else{

n=0

clearInterval(flashing)

setTimeout("beginneon()",flashpause)

return

}

}



function beginneon(){

if (document.all||document.getElementById)

flashing=setInterval("neon()",flashspeed)

}

beginneon()





</script></h1><SCRIPT>

/*

An object-oriented Typing Text script, to allow for multiple instances.

A script that causes any text inside any text element to be "typed out", one letter at a time. Note that any HTML tags will not be included in the typed output, to prevent them from causing problems. Tested in Firefox v1.5.0.1, Opera v8.52, Konqueror v3.5.1, and IE v6.

Browsers that do not support this script will simply see the text fully displayed from the start, including any HTML tags.



Functions defined:

  TypingText(element, [interval = 100,] [cursor = "",] [finishedCallback = function(){return}]):

    Create a new TypingText object around the given element.  Optionally

    specify a delay between characters of interval milliseconds.

    cursor allows users to specify some HTML to be appended to the end of

    the string whilst typing.  Optionally, can also be a function which

    accepts the current text as an argument.  This allows the user to

    create a "dynamic cursor" which changes depending on the latest character

    or the current length of the string.

    finishedCallback allows advanced scripters to supply a function

    to be executed on finishing.  The function must accept no arguments.



  TypingText.run():

    Run the effect.



  static TypingText.runAll():

    Run all TypingText-enabled objects on the page.

*/



TypingText = function(element, interval, cursor, finishedCallback) {

  if((typeof document.getElementById == "undefined") || (typeof element.innerHTML == "undefined")) {

    this.running = true;	// Never run.

    return;

  }

  this.element = element;

  this.finishedCallback = (finishedCallback ? finishedCallback : function() { return; });

  this.interval = (typeof interval == "undefined" ? 20 : interval);

  this.origText = this.element.innerHTML;

  this.unparsedOrigText = this.origText;

  this.cursor = (cursor ? cursor : "");

  this.currentText = "";

  this.currentChar = 0;

  this.element.typingText = this;

  if(this.element.id == "") this.element.id = "typingtext" + TypingText.currentIndex++;

  TypingText.all.push(this);

  this.running = false;

  this.inTag = false;

  this.tagBuffer = "";

  this.inHTMLEntity = false;

  this.HTMLEntityBuffer = "";

}

TypingText.all = new Array();

TypingText.currentIndex = 0;

TypingText.runAll = function() {

  for(var i = 0; i < TypingText.all.length; i++) TypingText.all[i].run();

}

TypingText.prototype.run = function() {

  if(this.running) return;

  if(typeof this.origText == "undefined") {

    setTimeout("document.getElementById('" + this.element.id + "').typingText.run()", this.interval);	// We haven't finished loading yet.  Have patience.

    return;

  }

  if(this.currentText == "") this.element.innerHTML = "";

//  this.origText = this.origText.replace(/<([^<])*>/, "");     // Strip HTML from text.

  if(this.currentChar < this.origText.length) {

    if(this.origText.charAt(this.currentChar) == "<" && !this.inTag) {

      this.tagBuffer = "<";

      this.inTag = true;

      this.currentChar++;

      this.run();

      return;

    } else if(this.origText.charAt(this.currentChar) == ">" && this.inTag) {

      this.tagBuffer += ">";

      this.inTag = false;

      this.currentText += this.tagBuffer;

      this.currentChar++;

      this.run();

      return;

    } else if(this.inTag) {

      this.tagBuffer += this.origText.charAt(this.currentChar);

      this.currentChar++;

      this.run();

      return;

    } else if(this.origText.charAt(this.currentChar) == "&" && !this.inHTMLEntity) {

      this.HTMLEntityBuffer = "&";

      this.inHTMLEntity = true;

      this.currentChar++;

      this.run();

      return;

    } else if(this.origText.charAt(this.currentChar) == ";" && this.inHTMLEntity) {

      this.HTMLEntityBuffer += ";";

      this.inHTMLEntity = false;

      this.currentText += this.HTMLEntityBuffer;

      this.currentChar++;

      this.run();

      return;

    } else if(this.inHTMLEntity) {

      this.HTMLEntityBuffer += this.origText.charAt(this.currentChar);

      this.currentChar++;

      this.run();

      return;

    } else {

      this.currentText += this.origText.charAt(this.currentChar);

    }

    this.element.innerHTML = this.currentText;

    this.element.innerHTML += (this.currentChar < this.origText.length - 1 ? (typeof this.cursor == "function" ? this.cursor(this.currentText) : this.cursor) : "");

    this.currentChar++;

    setTimeout("document.getElementById('" + this.element.id + "').typingText.run()", this.interval);

  } else {

	this.currentText = "";

	this.currentChar = 0;

        this.running = false;

        this.finishedCallback();

  }

}

</script><style>

body {

	padding:0;

	margin:0;

	background-image:url(http://img130.imageshack.us/img130/2861/awaitmf8.gif);

	background-repeat: repeat;

	background-position:top;

background-color: black;

color: white;

font: normal 80% Verdana;

margin-top: 0px;

margin-left: 0px;

padding: 0;

margin-right: 0px;

}



td{font-family: verdana; font-size: 20pt; color: green}

a{font-family: verdana; font-size: 20pt; color: silver}

/* REMOVE HORIZONTAL SCROLLBAR*/ 					

   	body {								

	overflow-x: hidden;						

	}									

/* REMOVE VERTICAL SCROLLBAR*/					

	body {								

	overflow-y: hidden;							

	}	

</style><body bgcolor="green"><center>

<br/>

<BR><BR>

----====[ ThE nEWbiE HaCKer WaZ HeRe ]====-----

<br>Thanks to my teachers<br> -=- kaMtiEz -=- arianom -=- Contrex -=- abah_benu -=- tiw0L -=- 

<BR><br><br><br>HaCked By<BR><br><font face size="5" color="#00ff00">Pathloader</p>



<script type="text/javascript">

//Define first typing example:

new TypingText(document.getElementById("example1"));

//Define second typing example (use "slashing" cursor at the end):

new TypingText(document.getElementById("example2"), 70, function(i){

var ar = new Array("\\", "|", "/", "-"); return " " + ar[i.length %

ar.length]; });

//Type out examples:

TypingText.runAll();

</script></body></html>




上次由 mickeywaley 在 2009-08-15 20:09,总共编辑 4 次。
头像
mickeywaley
帖子: 1427
注册时间: 2009-03-19 9:19
系统: ubuntu
来自: 江苏
联系:

Re: fedorachina社区被黑了,汗哦(有图有真相)

#3

帖子 mickeywaley » 2009-08-15 10:49

http://www.fedorachina.cn/
3.gif

代码: 全选

<html dir="rtl">



<head>

<meta http-equiv="Content-Language" content="fr">

<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">

<title>Hacked by arianom</title>

</head>

<body bgcolor="#000000">


<p align="center"><font color="#FF0000" size="6">Hacked By arianom </font></p>

<p align="center"> 

<img border="0" src="http://img485.imageshack.us/img485/1011/hackednm5.jpg"></p>

<p style="text-align: center;"><strong><span style="color: red">:: 

<font size="4">arianom</font> ::</strong></span></p>

<p style="text-align: center;"><strong><span style="color: red">:: was fucked your system::</span></strong></p>

<p align="center"><font color="#00FF00" size="4">&nbsp;kill-9 crew : best indonesian hacker :</font><font size="5">d</font><font color="#00FF00" size="5">:: </font></p>

<p align="center">

<img border="0" src="http://i720.photobucket.com/albums/ww203/xt0bi/storm_9761679342144499258_heartbeat.gif" width="319" height="80"></p>

<p align="center"><font color="#99FF99" size="4">Thanks to all kill-9 crew: arianom, kaMtiEz, Contrex, Pathloader, Tiwol</font></p>

<p align="center"><font color="#FFFFFF" size="5"></font></p>



</body>

	<DIV align=center>

		<DIV align=center><CENTER><SPAN style="FONT-WEIGHT: 400"><NOBR><STRONG>

<SCRIPT language=JavaScript1.2>                        

//change 1 to another integer to alter the scroll speed. Greater is faster               

var speed=1               

var currentpos=0,alt=1,curpos1=0,curpos2=-1               

function initialize(){               

startit()               

}               

function scrollwindow(){               

if (document.all)               

temp=document.body.scrollTop               

else               

temp=window.pageYOffset               

if (alt==0)               

alt=1               

else               

alt=0               

if (alt==0)               

curpos1=temp               

else               

curpos2=temp               

if (curpos1!=curpos2){               

if (document.all)               

currentpos=document.body.scrollTop+speed               

else               

currentpos=window.pageYOffset+speed               

window.scroll(0,currentpos)               

}               

else{               

currentpos=20               

window.scroll(0,currentpos)               

}               

}               

function startit(){               

setInterval("scrollwindow()",20)               

}               

window.onload=initialize               

          </SCRIPT>                         

</html>
头像
tenzu
论坛版主
帖子: 36924
注册时间: 2008-11-21 20:26

Re: fedorachina社区被黑了,汗哦(有图有真相)

#4

帖子 tenzu » 2009-08-15 10:55

歌不错
头像
bbeikke
帖子: 880
注册时间: 2008-10-14 21:54

Re: fedorachina社区被黑了,汗哦(有图有真相)

#5

帖子 bbeikke » 2009-08-15 18:10

:em06
现在还没修复好!!!
地狱可以想象,天堂却无法描述。
头像
wangdu2002
帖子: 13284
注册时间: 2008-12-13 19:39
来自: 物华天宝人杰地灵

Re: fedorachina社区被黑了,汗哦(有图有真相)

#6

帖子 wangdu2002 » 2009-08-15 18:13

:em01 怎么个黑法?把源码编译,传到服务器上,取得root权限,再执行脚本? :em02
行到水穷处,坐看云起时。
海内生明月,天涯共此夕。
--------------------吾本独!
头像
mickeywaley
帖子: 1427
注册时间: 2009-03-19 9:19
系统: ubuntu
来自: 江苏
联系:

Re: fedorachina社区被黑了,汗哦(有图有真相)

#7

帖子 mickeywaley » 2009-08-15 20:06

网站论坛程序漏洞,

使用的这个论坛程序www.simplemachines.org 的
不用系统ROOT权限
拿到WEBSHELL就OK了
刚看了下,已经修复了
上次由 mickeywaley 在 2009-08-15 21:56,总共编辑 1 次。
头像
jandyzhu
帖子: 3331
注册时间: 2008-04-02 13:26
来自: 上海
联系:

Re: fedorachina社区被黑了,汗哦(有图有真相)

#8

帖子 jandyzhu » 2009-08-15 21:55

这个才是官方中文论坛:http://bbs.fedora-zh.org/index.php
头像
sammysun
帖子: 4088
注册时间: 2007-12-08 23:33
来自: SCUT-guangzhou

Re: fedorachina社区被黑了,汗哦(有图有真相)

#9

帖子 sammysun » 2009-08-16 8:33

:em11
头像
snowtown86
帖子: 1239
注册时间: 2009-06-13 16:01

Re: fedorachina社区被黑了,汗哦(有图有真相)

#11

帖子 snowtown86 » 2009-08-16 10:21

来晚了
头像
九天星
帖子: 1440
注册时间: 2007-07-14 20:45

Re: fedorachina社区被黑了,汗哦(有图有真相)

#12

帖子 九天星 » 2009-08-16 10:45

人家的素质还是蛮高的,提醒的是:请检查你的系统。

不像国内一些人,如果想要你硬盘上的资料就往某某帐号打多少钱。
头像
Angus_Yann
帖子: 1736
注册时间: 2008-03-20 23:29
来自: ZJU

Re: fedorachina社区被黑了,汗哦(有图有真相)

#13

帖子 Angus_Yann » 2009-08-17 15:44

晕,这论坛咋没聊天灌水版:em09
80后俊男一枚,Arch党,软件洁癖,标准果粉,萝莉控
欢迎Follow我的Twitter:@AngusYann <--点击前请自学[穿·墙·术]
头像
jioyo源
帖子: 3476
注册时间: 2008-10-08 13:48

Re: fedorachina社区被黑了,汗哦(有图有真相)

#14

帖子 jioyo源 » 2009-08-22 9:49

Angus_Yann 写了:晕,这论坛咋没聊天灌水版:em09
:em20 被一叶砍掉了……
--------------------------------------
论坛精华贴全集:http://forum.ubuntu.org.cn/viewtopic.php?f=48&t=199845
book:http://forum.ubuntu.org.cn/viewtopic.php?f=21&t=198286
phonology
帖子: 55
注册时间: 2007-05-08 0:24

Re: fedorachina社区被黑了,汗哦(有图有真相)

#15

帖子 phonology » 2009-08-23 18:05

哪个系统没漏洞,是人都要犯错的。
黑回来,大家友好地黑来黑去,互相学习,共同进步。
:em02
回复