I found a way to inject bash commands on realstresser.com. I used it to dump the website and the database.
They quickly removed my PHP backdoor that I put and "fixed" (disabled) the exploit.
Here's what the leak contains:
- realstresser.sql : the whole database, passwords are hashed with sha1(md5()) (not salted) Tables
- website.zip : the source code of the website, it also contains their DDOS scripts (L4 and L7, with some BYPASSES) and some logs
- etc mdatax.zip : some random DDOS scripts that I've found, most likely tests
- mc_server.zip : a Minecraft server, probably to test their Minecraft Booter
- linpeas out.txt : the output of the
linpeas script. Might contain some interesting stuff about the server. Read it with "less -r linpeas\ out.txt" to get the colored output.
- stuff.txt : some random stuffs (etc/passwd, home ls)
Download :
*** Gizli metin: alıntı yapılamaz. ***
