siguen estando, tiene las direcciones web funcionando y te devuelve los datos correctos... si no ni me molestaria en reabrir un post con el mismo tema... ya tenemos algo que sabemos... 
- Bienvenido a Test Foro de elhacker.net SMF 2.1.
Esta sección te permite ver todos los mensajes escritos por este usuario. Ten en cuenta que sólo puedes ver los mensajes escritos en zonas a las que tienes acceso en este momento.
#22
Programación Visual Basic / Re: No-Ip ayuda porfa
5 Abril 2015, 00:30 AM
sii, la vi... pero hay gente fiel que aun sigue en el foro... aun veo sus post.
#23
Programación Visual Basic / No-Ip ayuda porfa
4 Abril 2015, 23:37 PM
Hola gente, perdon que vuelva a mencionar un tema viejo, pero hay una cosa que quedo inconclusa y no puedo encontrar la soluciion...
en este post hicieron un su propio noip...
http://foro.elhacker.net/analisis_y_diseno_de_malware/emulando_noipduc_conexiones_directas_con_noip-t112960.0.html
y en la versión del VB lo hicieron con un modulo que contiene:
y en el form seria esto:
lleva el componente de Winsock , 3 CommandButton y 1 TextBox...
pero en el text box no me marca nada, por que podria ser?
si me podrian ayudar seria genial... porfa...
en este post hicieron un su propio noip...
http://foro.elhacker.net/analisis_y_diseno_de_malware/emulando_noipduc_conexiones_directas_con_noip-t112960.0.html
y en la versión del VB lo hicieron con un modulo que contiene:
Código (vb) [Seleccionar]
'Opcion=0 --> Consulta la ip pública
'Opcion=1 --> Consulta la lista de dominios de la cuenta no-ip
'Opcion=2 --> Actualiza el dominio a la ip
'-1 se ha producido un error de usuario
'-2 no se ha podido conectar con el host
' 1 se ha realizado la consulta correctamente
Public Function NoIpMD(ByRef wSck As Winsock, ByVal Opcion As Byte, Optional Usuario As String, Optional Password As String, Optional Dominio As String, Optional UpIp As String) As Integer
Dim Consulta As String
Dim rHost As String
Select Case Opcion
Case 0
rHost = "ip1.dynupdate.no-ip.com"
Consulta = "GET"
Case 1
If IsMissing(Usuario) Or IsMissing(Password) Then
NoIpMD = -1
Exit Function
End If
rHost = "dynupdate.no-ip.com"
Consulta = "GET /list-hosts.php?email=" & Usuario & "&pass=" & Password
Case 2
If IsMissing(Usuario) Or IsMissing(Password) Or IsMissing(Dominio) Or IsMissing(UpIp) Then
NoIpMD = -1
Exit Function
End If
rHost = "dynupdate.no-ip.com"
Consulta = "GET /ducupdate.php?username=" & Usuario & "&pass=" & Password & "&h[]=" _
& Dominio & "&ip=" & UpIp
Case Else
NoIpMD = -1
Exit Function
Consulta = Consulta & " HTTP/1.0" & vbCrLf & "Accept: */*" & vbCrLf & "User-Agent: DUC v2.2.1" _
& vbCrLf & "Host: " & rHost & vbCrLf & "Pragma: no-cache" & vbCrLf & vbCrLf
End Select
If wSck.State <> sckClosed Then wSck.Close
wSck.Connect rHost, 8245
While wSck.State <> sckConnected And wSck.State <> sckError
DoEvents
Wend
If wSck.State = sckError Then
NoIpMD = -2
Exit Function
End If
wSck.SendData Consulta
NoIpMD = 1
End Function
Public Function ExtraerSalida(ByVal buffer As String) As String
Dim pos As Long
pos = InStr(buffer, vbCrLf & vbCrLf)
If pos = 0 Then
ExtraerSalida = ""
Else
ExtraerSalida = Mid$(buffer, pos + 2, Len(buffer) - pos + 1)
End If
End Function
y en el form seria esto:
Código (vb) [Seleccionar]
Private Sub Command1_Click()
NoIpMD Winsock1, 0
End Sub
Private Sub Command2_Click()
NoIpMD Winsock1, 1, "ACA EL USUARIO", "ACA LA CONTRASEÑA"
End Sub
Private Sub Command3_Click()
NoIpMD Winsock1, 2, "ACA EL USUARIO", "ACA LA CONTRASEÑA", "ACA EL DNS", "66.66.66.66"
End Sub
End Sub
Private Sub Winsock1_DataArrival(ByVal bytesTotal As Long)
Dim buffer As String
Winsock1.GetData buffer
Text1.Text = Text1.Text & buffer
End Sub
lleva el componente de Winsock , 3 CommandButton y 1 TextBox...
pero en el text box no me marca nada, por que podria ser?
si me podrian ayudar seria genial... porfa...
#25
Foro Libre / Re: poner vbs en msconfig?
3 Abril 2015, 19:22 PM
Muchisimas gracias 
.... para hacer otra pregunta tengo que hacer otro tema? soy nuevo en esto de foros... es sobre el mismo trabajo igual... Hay alguna shell ejecutable que me recomiendes? es para pasar datos de una pc a otra en internet...
.... para hacer otra pregunta tengo que hacer otro tema? soy nuevo en esto de foros... es sobre el mismo trabajo igual... Hay alguna shell ejecutable que me recomiendes? es para pasar datos de una pc a otra en internet...
#26
Foro Libre / poner vbs en msconfig?
3 Abril 2015, 17:25 PM
hola gente... queria saber la forma de colocar un archivo.vbs en el msconfig para que se autoejecute cada vez que enciendo la pc... se puede hacer desde un archivo.cmd o un archivo.bat?
desde ya gracias
desde ya gracias
#27
Hacking / Re: Ayuda con shell para server :(
2 Abril 2015, 17:48 PM
Gracias, ahi trato de hacerme uno ya empece.
ya empece.
#28
Hacking / Re: Ayuda con shell para server :(
2 Abril 2015, 16:05 PM
Perdon, me referia a que chusmee sobre las inyecciones... es un servidor, tiene su pagina web, su base de datos... y encontre un descuido, por el cual se su usuario interno de base de datos... pero la parte dificil es entrar para usarlo, tengo permiso para encontrar las vulnerabilidades e ingresar (si es que puedo) no es nada ilegal... no se los datos por el tema de que tiene q ser externo, de ahi el consentimiento, sin ayuda de nadie que sepa sobre que hay en su pc, mas de lo que uno puede "suponer desde afuera"
#29
Hacking / Re: Ayuda con shell para server :(
2 Abril 2015, 10:55 AM
C:\nmap>nmap -sV -O -A -v -T4 213.149.XXXXXX
Starting Nmap 6.47 ( http://nmap.org ) at 2015-04-02 05:23 Hora estßndar de Arge
ntina
NSE: Loaded 118 scripts for scanning.
NSE: Script Pre-scanning.
Initiating Ping Scan at 05:23
Scanning 213.149.XXXXXX [4 ports]
Completed Ping Scan at 05:23, 1.15s elapsed (1 total hosts)
Initiating Parallel DNS resolution of 1 host. at 05:23
Completed Parallel DNS resolution of 1 host. at 05:24, 7.05s elapsed
Initiating SYN Stealth Scan at 05:24
Scanning 213.149.XXXXXX [1000 ports]
Discovered open port 80/tcp on 213.149.XXXXXX
Discovered open port 3389/tcp on 213.149.XXXXXX
Discovered open port 445/tcp on 213.149.XXXXXX
Discovered open port 135/tcp on 213.149.XXXXXX
Discovered open port 21/tcp on 213.149.XXXXXX
Discovered open port 110/tcp on 213.149.XXXXXX
Discovered open port 443/tcp on 213.149.XXXXXX
Discovered open port 8080/tcp on 213.149.XXXXXX
Discovered open port 990/tcp on 213.149.XXXXXX
Discovered open port 7777/tcp on 213.149.XXXXXX
Discovered open port 1234/tcp on 213.149.XXXXXX
Discovered open port 2366/tcp on 213.149.XXXXXX
Discovered open port 1048/tcp on 213.149.XXXXXX
Discovered open port 1079/tcp on 213.149.XXXXXX
Discovered open port 843/tcp on 213.149.XXXXXX
Discovered open port 7201/tcp on 213.149.XXXXXX
Discovered open port 1076/tcp on 213.149.XXXXXX
Discovered open port 1044/tcp on 213.149.XXXXXX
Discovered open port 8654/tcp on 213.149.XXXXXX
Discovered open port 5910/tcp on 213.149.XXXXXX
Discovered open port 32777/tcp on 213.149.XXXXXX
Discovered open port 2323/tcp on 213.149.XXXXXX
Discovered open port 27353/tcp on 213.149.XXXXXX
Discovered open port 16080/tcp on 213.149.XXXXXX
Discovered open port 2144/tcp on 213.149.XXXXXX
Discovered open port 2717/tcp on 213.149.XXXXXX
Discovered open port 5087/tcp on 213.149.XXXXXX
Discovered open port 8649/tcp on 213.149.XXXXXX
Discovered open port 783/tcp on 213.149.XXXXXX
Discovered open port 1023/tcp on 213.149.XXXXXX
Discovered open port 5226/tcp on 213.149.XXXXXX
Discovered open port 1974/tcp on 213.149.XXXXXX
Discovered open port 2401/tcp on 213.149.XXXXXX
Discovered open port 8291/tcp on 213.149.XXXXXX
Discovered open port 2170/tcp on 213.149.XXXXXX
Discovered open port 50636/tcp on 213.149.XXXXXX
Discovered open port 2049/tcp on 213.149.XXXXXX
Discovered open port 2394/tcp on 213.149.XXXXXX
Discovered open port 8180/tcp on 213.149.XXXXXX
Discovered open port 541/tcp on 213.149.XXXXXX
Discovered open port 1521/tcp on 213.149.XXXXXX
Discovered open port 49154/tcp on 213.149.XXXXXX
Discovered open port 2106/tcp on 213.149.XXXXXX
Discovered open port 1043/tcp on 213.149.XXXXXX
Discovered open port 1042/tcp on 213.149.XXXXXX
Discovered open port 6/tcp on 213.149.XXXXXX
Discovered open port 10243/tcp on 213.149.XXXXXX
Discovered open port 60443/tcp on 213.149.XXXXXX
Completed SYN Stealth Scan at 05:24, 23.02s elapsed (1000 total ports)
Initiating Service scan at 05:24
Scanning 48 services on 213.149.XXXXXX
Completed Service scan at 05:26, 102.24s elapsed (48 services on 1 host)
Initiating OS detection (try #1) against 213.149.XXXXXX
Initiating Traceroute at 05:26
Completed Traceroute at 05:26, 3.08s elapsed
Initiating Parallel DNS resolution of 17 hosts. at 05:26
Completed Parallel DNS resolution of 17 hosts. at 05:26, 11.66s elapsed
NSE: Script scanning 213.149.XXXXXX.
Initiating NSE at 05:26
NSE Timing: About 25.44% done; ETC: 05:28 (0:01:31 remaining)
NSE Timing: About 27.19% done; ETC: 05:30 (0:02:43 remaining)
NSE Timing: About 27.19% done; ETC: 05:32 (0:04:04 remaining)
NSE Timing: About 27.19% done; ETC: 05:33 (0:05:24 remaining)
NSE Timing: About 28.07% done; ETC: 05:35 (0:06:27 remaining)
NSE Timing: About 28.95% done; ETC: 05:36 (0:07:24 remaining)
NSE Timing: About 37.72% done; ETC: 05:35 (0:05:48 remaining)
NSE Timing: About 64.91% done; ETC: 05:32 (0:02:10 remaining)
NSE Timing: About 73.68% done; ETC: 05:32 (0:01:37 remaining)
NSE Timing: About 79.82% done; ETC: 05:32 (0:01:16 remaining)
NSE Timing: About 85.09% done; ETC: 05:33 (0:01:06 remaining)
NSE Timing: About 91.23% done; ETC: 05:34 (0:00:41 remaining)
Completed NSE at 05:34, 488.12s elapsed
Nmap scan report for 213.149.XXXXXX
Host is up (0.32s latency).
Not shown: 952 filtered ports
PORT STATE SERVICE VERSION
6/tcp open unknown
21/tcp open ftp FileZilla ftpd
| ssl-cert: Subject: commonName=www.XXXXX.es/organizationName=XXXXX.ES/sta
teOrProvinceName=Madrid/countryName=34
| Issuer: commonName=www.XXXXX.es/organizationName=XXXXX.ES/stateOrProvinc
eName=Madrid/countryName=34
| Public Key type: rsa
| Public Key bits: 4096
| Not valid before: 2015-03-31T22:59:38+00:00
| Not valid after: 2016-03-30T22:59:38+00:00
| MD5: a2f0 a7bb 1267 defe b15c 12fe f4b7 81c0
|_SHA-1: a02d 9411 d751 7a39 ed53 18c2 76b8 bb26 ebdd 03d2
80/tcp open http Apache httpd
|_http-generator: ERROR: Script execution failed (use -d to debug)
|_http-methods: No Allow or Public header in OPTIONS response (status code 301)
|_http-title: Did not follow redirect to http://www.xxxxx.es/index.php
110/tcp open pop3 MailEnable POP3 Server
|_pop3-capabilities: USER TOP UIDL
135/tcp open msrpc Microsoft Windows RPC
443/tcp open ssh OpenSSH 6.6 (protocol 2.0)
| ssh-hostkey:
| 1024 a5:0a:ef:1f:10:d8:f0:a8:9e:ad:99:0e:2d:26:1b:69 (DSA)
| 2048 a5:1b:2a:d2:15:16:fe:be:3a:b1:7c:69:43:3f:b2:42 (RSA)
|_ 256 26:d4:c8:34:1b:bf:52:28:e0:fb:27:e5:b5:7d:b7:53 (ECDSA)
445/tcp open netbios-ssn
541/tcp open uucp-rlogin?
783/tcp open spamassassin?
843/tcp open unknown
990/tcp open ssl/ftp FileZilla ftpd
|_ftp-bounce: no banner
| ssl-cert: Subject: commonName=www.XXXXX.es/organizationName=XXXXX.ES/sta
teOrProvinceName=Madrid/countryName=34
| Issuer: commonName=www.XXXXX.es/organizationName=XXXXX.ES/stateOrProvinc
eName=Madrid/countryName=34
| Public Key type: rsa
| Public Key bits: 4096
| Not valid before: 2015-03-31T22:59:38+00:00
| Not valid after: 2016-03-30T22:59:38+00:00
| MD5: a2f0 a7bb 1267 defe b15c 12fe f4b7 81c0
|_SHA-1: a02d 9411 d751 7a39 ed53 18c2 76b8 bb26 ebdd 03d2
1023/tcp open netvenuechat?
1042/tcp open afrog?
1043/tcp open boinc?
1044/tcp open dcutility?
1048/tcp open neod2?
1076/tcp open sns_credit?
1079/tcp open asprovatalk?
1234/tcp open hotline?
1521/tcp open oracle?
1974/tcp open drp?
2049/tcp open nfs?
2106/tcp open loginserver L2J loginserver
2144/tcp open lv-ffx?
2170/tcp open eyetv?
2323/tcp open 3d-nfsd?
2366/tcp open qip-login?
2394/tcp open ms-olap2?
2401/tcp open cvspserver?
2717/tcp open pn-requester?
3389/tcp open ms-wbt-server Microsoft Terminal Service
5087/tcp open unknown
5226/tcp open hp-status?
5910/tcp open cm?
7201/tcp open dlip?
7777/tcp open cbt?
8080/tcp open http Apache httpd
|_http-generator: ERROR: Script execution failed (use -d to debug)
|_http-methods: No Allow or Public header in OPTIONS response (status code 301)
|_http-open-proxy: Proxy might be redirecting requests
|_http-title: Did not follow redirect to http://www.xxxxx.es/index.php
8180/tcp open unknown
8291/tcp open unknown
8649/tcp open unknown
8654/tcp open unknown
10243/tcp open unknown
16080/tcp open osxwebadmin?
27353/tcp open unknown
32777/tcp open sometimes-rpc17?
49154/tcp open msrpc Microsoft Windows RPC
50636/tcp open unknown
60443/tcp open unknown
Warning: OSScan results may be unreliable because we could not find at least 1 o
pen and 1 closed port
Device type: specialized|WAP|phone
Running: iPXE 1.X, Linksys Linux 2.4.X, Linux 2.6.X, Sony Ericsson embedded
OS CPE: cpe:/o:ipxe:ipxe:1.0.0%2b cpe:/o:linksys:linux_kernel:2.4 cpe:/o:linux:l
inux_kernel:2.6 cpe:/h:sonyericsson:u8i_vivaz
OS details: iPXE 1.0.0+, Tomato 1.28 (Linux 2.4.20), Tomato firmware (Linux 2.6.
22), Sony Ericsson U8i Vivaz mobile phone
Network Distance: 18 hops
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows
Host script results:
| smb-os-discovery:
| OS: Windows Server 2008 R2 Enterprise 7601 Service Pack 1 (Windows Server 20
08 R2 Enterprise 6.1)
| OS CPE: cpe:/o:microsoft:windows_server_2008::sp1
| Computer name: Valakas2
| NetBIOS computer name: VALAKAS2
| Workgroup: LINEAGE2
|_ System time: 2015-04-02T10:26:41+02:00
| smb-security-mode:
| Account that was used for smb scripts: guest
| User-level authentication
| SMB Security: Challenge/response passwords supported
|_ Message signing disabled (dangerous, but default)
|_smbv2-enabled: Server supports SMBv2 protocol
TRACEROUTE (using port 443/tcp)
HOP RTT ADDRESS
1 0.00 ms 192.168.1.1
2 56.00 ms host70.200-3-60.telecom.net.ar (200.3.60.XX)
3 56.00 ms host61.186-153-152.telecom.net.ar (186.153.152.XX)
4 57.00 ms host110.190-224-165.telecom.net.ar (190.224.165.XXX)
5 49.00 ms xe-0-0-2.baires5.bai.seabone.net (195.22.220.XX)
6 169.00 ms xe-1-1-1.miami15.mia.seabone.net (195.22.199.XX)
7 168.00 ms xe-0-0-1.miami15.mia.seabone.net (195.22.199.XXX)
8 169.00 ms telefonica-data.miami15.mia.seabone.net (195.22.199.XX)
9 156.00 ms Et-3-0-0-0-grtmiana2.red.telefonica-wholesale.net (84.16.12.XXX)
10 202.00 ms Xe7-0-0-0-grtwaseq6.red.telefonica-wholesale.net (94.142.121.XXX)
11 298.00 ms Xe6-0-0-0-grtloneq1.red.telefonica-wholesale.net (94.142.119.XX)
12 300.00 ms Xe0-1-1-0-grtmadde2.red.telefonica-wholesale.net (213.140.37.XXX)
13 302.00 ms 216.184.113.119.nuevatel.com (216.184.113.XXX)
14 308.00 ms 216.184.113.111.nuevatel.com (216.184.113.XXX)
15 ...
16 303.00 ms 217-116-31-62.redes.acens.net (217.116.XXXX)
17 293.00 ms virtual5-isg3.acens.net (213.149.XXXXX)
18 316.00 ms 213.149.XXXXXX
Starting Nmap 6.47 ( http://nmap.org ) at 2015-04-02 05:23 Hora estßndar de Arge
ntina
NSE: Loaded 118 scripts for scanning.
NSE: Script Pre-scanning.
Initiating Ping Scan at 05:23
Scanning 213.149.XXXXXX [4 ports]
Completed Ping Scan at 05:23, 1.15s elapsed (1 total hosts)
Initiating Parallel DNS resolution of 1 host. at 05:23
Completed Parallel DNS resolution of 1 host. at 05:24, 7.05s elapsed
Initiating SYN Stealth Scan at 05:24
Scanning 213.149.XXXXXX [1000 ports]
Discovered open port 80/tcp on 213.149.XXXXXX
Discovered open port 3389/tcp on 213.149.XXXXXX
Discovered open port 445/tcp on 213.149.XXXXXX
Discovered open port 135/tcp on 213.149.XXXXXX
Discovered open port 21/tcp on 213.149.XXXXXX
Discovered open port 110/tcp on 213.149.XXXXXX
Discovered open port 443/tcp on 213.149.XXXXXX
Discovered open port 8080/tcp on 213.149.XXXXXX
Discovered open port 990/tcp on 213.149.XXXXXX
Discovered open port 7777/tcp on 213.149.XXXXXX
Discovered open port 1234/tcp on 213.149.XXXXXX
Discovered open port 2366/tcp on 213.149.XXXXXX
Discovered open port 1048/tcp on 213.149.XXXXXX
Discovered open port 1079/tcp on 213.149.XXXXXX
Discovered open port 843/tcp on 213.149.XXXXXX
Discovered open port 7201/tcp on 213.149.XXXXXX
Discovered open port 1076/tcp on 213.149.XXXXXX
Discovered open port 1044/tcp on 213.149.XXXXXX
Discovered open port 8654/tcp on 213.149.XXXXXX
Discovered open port 5910/tcp on 213.149.XXXXXX
Discovered open port 32777/tcp on 213.149.XXXXXX
Discovered open port 2323/tcp on 213.149.XXXXXX
Discovered open port 27353/tcp on 213.149.XXXXXX
Discovered open port 16080/tcp on 213.149.XXXXXX
Discovered open port 2144/tcp on 213.149.XXXXXX
Discovered open port 2717/tcp on 213.149.XXXXXX
Discovered open port 5087/tcp on 213.149.XXXXXX
Discovered open port 8649/tcp on 213.149.XXXXXX
Discovered open port 783/tcp on 213.149.XXXXXX
Discovered open port 1023/tcp on 213.149.XXXXXX
Discovered open port 5226/tcp on 213.149.XXXXXX
Discovered open port 1974/tcp on 213.149.XXXXXX
Discovered open port 2401/tcp on 213.149.XXXXXX
Discovered open port 8291/tcp on 213.149.XXXXXX
Discovered open port 2170/tcp on 213.149.XXXXXX
Discovered open port 50636/tcp on 213.149.XXXXXX
Discovered open port 2049/tcp on 213.149.XXXXXX
Discovered open port 2394/tcp on 213.149.XXXXXX
Discovered open port 8180/tcp on 213.149.XXXXXX
Discovered open port 541/tcp on 213.149.XXXXXX
Discovered open port 1521/tcp on 213.149.XXXXXX
Discovered open port 49154/tcp on 213.149.XXXXXX
Discovered open port 2106/tcp on 213.149.XXXXXX
Discovered open port 1043/tcp on 213.149.XXXXXX
Discovered open port 1042/tcp on 213.149.XXXXXX
Discovered open port 6/tcp on 213.149.XXXXXX
Discovered open port 10243/tcp on 213.149.XXXXXX
Discovered open port 60443/tcp on 213.149.XXXXXX
Completed SYN Stealth Scan at 05:24, 23.02s elapsed (1000 total ports)
Initiating Service scan at 05:24
Scanning 48 services on 213.149.XXXXXX
Completed Service scan at 05:26, 102.24s elapsed (48 services on 1 host)
Initiating OS detection (try #1) against 213.149.XXXXXX
Initiating Traceroute at 05:26
Completed Traceroute at 05:26, 3.08s elapsed
Initiating Parallel DNS resolution of 17 hosts. at 05:26
Completed Parallel DNS resolution of 17 hosts. at 05:26, 11.66s elapsed
NSE: Script scanning 213.149.XXXXXX.
Initiating NSE at 05:26
NSE Timing: About 25.44% done; ETC: 05:28 (0:01:31 remaining)
NSE Timing: About 27.19% done; ETC: 05:30 (0:02:43 remaining)
NSE Timing: About 27.19% done; ETC: 05:32 (0:04:04 remaining)
NSE Timing: About 27.19% done; ETC: 05:33 (0:05:24 remaining)
NSE Timing: About 28.07% done; ETC: 05:35 (0:06:27 remaining)
NSE Timing: About 28.95% done; ETC: 05:36 (0:07:24 remaining)
NSE Timing: About 37.72% done; ETC: 05:35 (0:05:48 remaining)
NSE Timing: About 64.91% done; ETC: 05:32 (0:02:10 remaining)
NSE Timing: About 73.68% done; ETC: 05:32 (0:01:37 remaining)
NSE Timing: About 79.82% done; ETC: 05:32 (0:01:16 remaining)
NSE Timing: About 85.09% done; ETC: 05:33 (0:01:06 remaining)
NSE Timing: About 91.23% done; ETC: 05:34 (0:00:41 remaining)
Completed NSE at 05:34, 488.12s elapsed
Nmap scan report for 213.149.XXXXXX
Host is up (0.32s latency).
Not shown: 952 filtered ports
PORT STATE SERVICE VERSION
6/tcp open unknown
21/tcp open ftp FileZilla ftpd
| ssl-cert: Subject: commonName=www.XXXXX.es/organizationName=XXXXX.ES/sta
teOrProvinceName=Madrid/countryName=34
| Issuer: commonName=www.XXXXX.es/organizationName=XXXXX.ES/stateOrProvinc
eName=Madrid/countryName=34
| Public Key type: rsa
| Public Key bits: 4096
| Not valid before: 2015-03-31T22:59:38+00:00
| Not valid after: 2016-03-30T22:59:38+00:00
| MD5: a2f0 a7bb 1267 defe b15c 12fe f4b7 81c0
|_SHA-1: a02d 9411 d751 7a39 ed53 18c2 76b8 bb26 ebdd 03d2
80/tcp open http Apache httpd
|_http-generator: ERROR: Script execution failed (use -d to debug)
|_http-methods: No Allow or Public header in OPTIONS response (status code 301)
|_http-title: Did not follow redirect to http://www.xxxxx.es/index.php
110/tcp open pop3 MailEnable POP3 Server
|_pop3-capabilities: USER TOP UIDL
135/tcp open msrpc Microsoft Windows RPC
443/tcp open ssh OpenSSH 6.6 (protocol 2.0)
| ssh-hostkey:
| 1024 a5:0a:ef:1f:10:d8:f0:a8:9e:ad:99:0e:2d:26:1b:69 (DSA)
| 2048 a5:1b:2a:d2:15:16:fe:be:3a:b1:7c:69:43:3f:b2:42 (RSA)
|_ 256 26:d4:c8:34:1b:bf:52:28:e0:fb:27:e5:b5:7d:b7:53 (ECDSA)
445/tcp open netbios-ssn
541/tcp open uucp-rlogin?
783/tcp open spamassassin?
843/tcp open unknown
990/tcp open ssl/ftp FileZilla ftpd
|_ftp-bounce: no banner
| ssl-cert: Subject: commonName=www.XXXXX.es/organizationName=XXXXX.ES/sta
teOrProvinceName=Madrid/countryName=34
| Issuer: commonName=www.XXXXX.es/organizationName=XXXXX.ES/stateOrProvinc
eName=Madrid/countryName=34
| Public Key type: rsa
| Public Key bits: 4096
| Not valid before: 2015-03-31T22:59:38+00:00
| Not valid after: 2016-03-30T22:59:38+00:00
| MD5: a2f0 a7bb 1267 defe b15c 12fe f4b7 81c0
|_SHA-1: a02d 9411 d751 7a39 ed53 18c2 76b8 bb26 ebdd 03d2
1023/tcp open netvenuechat?
1042/tcp open afrog?
1043/tcp open boinc?
1044/tcp open dcutility?
1048/tcp open neod2?
1076/tcp open sns_credit?
1079/tcp open asprovatalk?
1234/tcp open hotline?
1521/tcp open oracle?
1974/tcp open drp?
2049/tcp open nfs?
2106/tcp open loginserver L2J loginserver
2144/tcp open lv-ffx?
2170/tcp open eyetv?
2323/tcp open 3d-nfsd?
2366/tcp open qip-login?
2394/tcp open ms-olap2?
2401/tcp open cvspserver?
2717/tcp open pn-requester?
3389/tcp open ms-wbt-server Microsoft Terminal Service
5087/tcp open unknown
5226/tcp open hp-status?
5910/tcp open cm?
7201/tcp open dlip?
7777/tcp open cbt?
8080/tcp open http Apache httpd
|_http-generator: ERROR: Script execution failed (use -d to debug)
|_http-methods: No Allow or Public header in OPTIONS response (status code 301)
|_http-open-proxy: Proxy might be redirecting requests
|_http-title: Did not follow redirect to http://www.xxxxx.es/index.php
8180/tcp open unknown
8291/tcp open unknown
8649/tcp open unknown
8654/tcp open unknown
10243/tcp open unknown
16080/tcp open osxwebadmin?
27353/tcp open unknown
32777/tcp open sometimes-rpc17?
49154/tcp open msrpc Microsoft Windows RPC
50636/tcp open unknown
60443/tcp open unknown
Warning: OSScan results may be unreliable because we could not find at least 1 o
pen and 1 closed port
Device type: specialized|WAP|phone
Running: iPXE 1.X, Linksys Linux 2.4.X, Linux 2.6.X, Sony Ericsson embedded
OS CPE: cpe:/o:ipxe:ipxe:1.0.0%2b cpe:/o:linksys:linux_kernel:2.4 cpe:/o:linux:l
inux_kernel:2.6 cpe:/h:sonyericsson:u8i_vivaz
OS details: iPXE 1.0.0+, Tomato 1.28 (Linux 2.4.20), Tomato firmware (Linux 2.6.
22), Sony Ericsson U8i Vivaz mobile phone
Network Distance: 18 hops
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows
Host script results:
| smb-os-discovery:
| OS: Windows Server 2008 R2 Enterprise 7601 Service Pack 1 (Windows Server 20
08 R2 Enterprise 6.1)
| OS CPE: cpe:/o:microsoft:windows_server_2008::sp1
| Computer name: Valakas2
| NetBIOS computer name: VALAKAS2
| Workgroup: LINEAGE2
|_ System time: 2015-04-02T10:26:41+02:00
| smb-security-mode:
| Account that was used for smb scripts: guest
| User-level authentication
| SMB Security: Challenge/response passwords supported
|_ Message signing disabled (dangerous, but default)
|_smbv2-enabled: Server supports SMBv2 protocol
TRACEROUTE (using port 443/tcp)
HOP RTT ADDRESS
1 0.00 ms 192.168.1.1
2 56.00 ms host70.200-3-60.telecom.net.ar (200.3.60.XX)
3 56.00 ms host61.186-153-152.telecom.net.ar (186.153.152.XX)
4 57.00 ms host110.190-224-165.telecom.net.ar (190.224.165.XXX)
5 49.00 ms xe-0-0-2.baires5.bai.seabone.net (195.22.220.XX)
6 169.00 ms xe-1-1-1.miami15.mia.seabone.net (195.22.199.XX)
7 168.00 ms xe-0-0-1.miami15.mia.seabone.net (195.22.199.XXX)
8 169.00 ms telefonica-data.miami15.mia.seabone.net (195.22.199.XX)
9 156.00 ms Et-3-0-0-0-grtmiana2.red.telefonica-wholesale.net (84.16.12.XXX)
10 202.00 ms Xe7-0-0-0-grtwaseq6.red.telefonica-wholesale.net (94.142.121.XXX)
11 298.00 ms Xe6-0-0-0-grtloneq1.red.telefonica-wholesale.net (94.142.119.XX)
12 300.00 ms Xe0-1-1-0-grtmadde2.red.telefonica-wholesale.net (213.140.37.XXX)
13 302.00 ms 216.184.113.119.nuevatel.com (216.184.113.XXX)
14 308.00 ms 216.184.113.111.nuevatel.com (216.184.113.XXX)
15 ...
16 303.00 ms 217-116-31-62.redes.acens.net (217.116.XXXX)
17 293.00 ms virtual5-isg3.acens.net (213.149.XXXXX)
18 316.00 ms 213.149.XXXXXX
#30
Hacking / Ayuda con shell para server :(
2 Abril 2015, 03:01 AM
hola gente... tengo una pregunta... estoy con lo de inyeccion mysql, y me puse a chusmear un rato...
bueno, voy al grano.
tengo varios user y pass de servidores pero son internos localhost de las db... y soy inicial y todavia no se como obtener una shell, y todavia no pude acceder a ningun servidor por ese tema... lei varios tutos que hay aca sobre eso, pero todavia no encontre como hacerlo...
bueno, voy al grano.
tengo varios user y pass de servidores pero son internos localhost de las db... y soy inicial y todavia no se como obtener una shell, y todavia no pude acceder a ningun servidor por ese tema... lei varios tutos que hay aca sobre eso, pero todavia no encontre como hacerlo...