ANTICHAT — форум по информационной безопасности, OSINT и технологиям

есть сервак:

__________________________________________________ __________________________

__________________________________________________ __________________________

uname -a

Linux 2.6.9-89.0.9.ELsmp #1 SMP Mon Aug 24 01:51:10 EDT 2009 i686

__________________________________________________ __________________________

ls -la /boot

total 26163

drwxr-xr-x 5 root root 3072 Aug 26 2009 .

drwxr-xr-x 23 root root 4096 Oct 2 08:46 ..

-rw-r--r-- 1 root root 750652 Jan 30 2007 System.map-2.6.9-42.0.8.EL

-rw-r--r-- 1 root root 767450 Jan 30 2007 System.map-2.6.9-42.0.8.ELsmp

-rw-r--r-- 1 root root 749462 Aug 12 2006 System.map-2.6.9-42.EL

-rw-r--r-- 1 root root 766260 Aug 12 2006 System.map-2.6.9-42.ELsmp

-rw-r--r-- 1 root root 760532 May 8 2008 System.map-2.6.9-67.0.15.EL

-rw-r--r-- 1 root root 780162 Jan 14 2009 System.map-2.6.9-78.0.13.EL

-rw-r--r-- 1 root root 797154 Jan 14 2009 System.map-2.6.9-78.0.13.ELsmp

-rw-r--r-- 1 root root 768504 Aug 24 2009 System.map-2.6.9-89.0.9.EL

-rw-r--r-- 1 root root 785498 Aug 24 2009 System.map-2.6.9-89.0.9.ELsmp

-rw-r--r-- 1 root root 50337 Jan 30 2007 config-2.6.9-42.0.8.EL

-rw-r--r-- 1 root root 49930 Jan 30 2007 config-2.6.9-42.0.8.ELsmp

-rw-r--r-- 1 root root 50333 Aug 12 2006 config-2.6.9-42.EL

-rw-r--r-- 1 root root 49926 Aug 12 2006 config-2.6.9-42.ELsmp

-rw-r--r-- 1 root root 50925 May 8 2008 config-2.6.9-67.0.15.EL

-rw-r--r-- 1 root root 51502 Jan 14 2009 config-2.6.9-78.0.13.EL

-rw-r--r-- 1 root root 51127 Jan 14 2009 config-2.6.9-78.0.13.ELsmp

-rw-r--r-- 1 root root 51613 Aug 24 2009 config-2.6.9-89.0.9.EL

-rw-r--r-- 1 root root 51238 Aug 24 2009 config-2.6.9-89.0.9.ELsmp

drwxr-xr-x 2 root root 1024 Aug 26 2009 extlinux

drwxr-xr-x 2 root root 1024 Aug 26 2009 grub

-rw-r--r-- 1 root root 505489 Feb 9 2007 initrd-2.6.9-42.0.8.EL.img

-rw-r--r-- 1 root root 495995 Feb 9 2007 initrd-2.6.9-42.0.8.ELsmp.img

-rw-r--r-- 1 root root 505219 Feb 9 2007 initrd-2.6.9-42.EL.img

-rw-r--r-- 1 root root 495765 Feb 9 2007 initrd-2.6.9-42.ELsmp.img

-rw-r--r-- 1 root root 528439 Jun 5 2008 initrd-2.6.9-67.0.15.EL.img

-rw-r--r-- 1 root root 721334 Mar 3 2009 initrd-2.6.9-78.0.13.EL.img

-rw-r--r-- 1 root root 710086 Mar 3 2009 initrd-2.6.9-78.0.13.ELsmp.img

-rw-r--r-- 1 root root 722546 Aug 26 2009 initrd-2.6.9-89.0.9.EL.img

-rw-r--r-- 1 root root 710930 Aug 26 2009 initrd-2.6.9-89.0.9.ELsmp.img

drwx------ 2 root root 12288 Feb 9 2007 lost+found

-rw-r--r-- 1 root root 9371 Aug 12 2006 message

-rw-r--r-- 1 root root 9371 Aug 12 2006 message.ja

-rw-r--r-- 1 root root 64329 May 8 2008 symvers-2.6.9-67.0.15.EL.gz

-rw-r--r-- 1 root root 66235 Jan 14 2009 symvers-2.6.9-78.0.13.EL.gz

-rw-r--r-- 1 root root 67032 Jan 14 2009 symvers-2.6.9-78.0.13.ELsmp.gz

-rw-r--r-- 1 root root 67596 Aug 24 2009 symvers-2.6.9-89.0.9.EL.gz

-rw-r--r-- 1 root root 68382 Aug 24 2009 symvers-2.6.9-89.0.9.ELsmp.gz

-rw-r--r-- 1 root root 1504589 Jan 30 2007 vmlinuz-2.6.9-42.0.8.EL

-rw-r--r-- 1 root root 1444726 Jan 30 2007 vmlinuz-2.6.9-42.0.8.ELsmp

-rw-r--r-- 1 root root 1504101 Aug 12 2006 vmlinuz-2.6.9-42.EL

-rw-r--r-- 1 root root 1444405 Aug 12 2006 vmlinuz-2.6.9-42.ELsmp

-rw-r--r-- 1 root root 1519376 May 8 2008 vmlinuz-2.6.9-67.0.15.EL

-rw-r--r-- 1 root root 1545561 Jan 14 2009 vmlinuz-2.6.9-78.0.13.EL

-rw-r--r-- 1 root root 1483646 Jan 14 2009 vmlinuz-2.6.9-78.0.13.ELsmp

-rw-r--r-- 1 root root 1533159 Aug 24 2009 vmlinuz-2.6.9-89.0.9.EL

-rw-r--r-- 1 root root 1472450 Aug 24 2009 vmlinuz-2.6.9-89.0.9.ELsmp

__________________________________________________ __________________________

$ ls -la --full-time /lib/libc*

-rwxr-xr-x 1 root root 1530808 2009-06-01 09:13:15.000000000 -0400 /lib/libc-2.3.4.so

lrwxrwxrwx 1 root root 13 2009-08-26 11:25:42.000000000 -0400 /lib/libc.so.6 -> libc-2.3.4.so

lrwxrwxrwx 1 root root 11 2008-06-05 12:40:20.000000000 -0400 /lib/libcap.so -> libcap.so.1

lrwxrwxrwx 1 root root 14 2007-02-09 18:55:46.000000000 -0500 /lib/libcap.so.1 -> libcap.so.1.10

-rwxr-xr-x 1 root root 11776 2005-02-21 15:08:41.000000000 -0500 /lib/libcap.so.1.10

-rwxr-xr-x 1 root root 192392 2009-06-01 09:13:15.000000000 -0400 /lib/libcidn-2.3.4.so

lrwxrwxrwx 1 root root 16 2009-08-26 11:25:42.000000000 -0400 /lib/libcidn.so.1 -> libcidn-2.3.4.so

lrwxrwxrwx 1 root root 17 2009-08-26 11:25:55.000000000 -0400 /lib/libcom_err.so.2 -> libcom_err.so.2.1

-rwxr-xr-x 1 root root 7004 2009-06-01 13:09:40.000000000 -0400 /lib/libcom_err.so.2.1

-rwxr-xr-x 1 root root 41956 2009-06-01 09:13:15.000000000 -0400 /lib/libcrypt-2.3.4.so

lrwxrwxrwx 1 root root 17 2009-08-26 11:25:42.000000000 -0400 /lib/libcrypt.so.1 -> libcrypt-2.3.4.so

-rwxr-xr-x 1 root root 945120 2009-01-15 09:05:29.000000000 -0500 /lib/libcrypto.so.0.9.7a

lrwxrwxrwx 1 root root 19 2007-02-09 18:56:23.000000000 -0500 /lib/libcrypto.so.4 -> libcrypto.so.0.9.7a

__________________________________________________ __________________________

$ mount

/dev/sda2 on / type ext3 (rw,noatime,nodiratime)

none on /proc type proc (rw)

none on /sys type sysfs (rw)

none on /dev/pts type devpts (rw,gid=5,mode=620)

usbfs on /proc/bus/usb type usbfs (rw)

/dev/sda1 on /boot type ext3 (rw)

none on /dev/shm type tmpfs (rw)

/dev/sda5 on /tmp type ext3 (rw,noexec,nosuid)

none on /proc/sys/fs/binfmt_misc type binfmt_misc (rw)

__________________________________________________ __________________________

$ df -h

Filesystem Size Used Avail Use% Mounted on

/dev/sda2 142G 71G 70G 51% /

/dev/sda1 99M 32M 62M 34% /boot

none 2.0G 0 2.0G 0% /dev/shm

/dev/sda5 981M 18M 914M 2% /tmp

__________________________________________________ __________________________

$ cat /etc/issue

CentOS release 4.8 (Final)

Kernel \r on an \m

__________________________________________________ __________________________

$ cat /etc/crontab

SHELL=/bin/bash

PATH=/sbin:/bin:/usr/sbin:/usr/bin

MAILTO=root

HOME=/

# run-parts

01 * * * * root run-parts /etc/cron.hourly

02 4 * * * root run-parts /etc/cron.daily

22 4 * * 0 root run-parts /etc/cron.weekly

42 4 1 * * root run-parts /etc/cron.monthly

*/45 * * * * root /usr/local/bin/php /usr/home/sites/aaaaaa.??????.com/xxxxxx.php

__________________________________________________ __________________________

$ cat /proc/version

Linux version 2.6.9-89.0.9.ELsmp (mockbuild@builder10.centos.org) (gcc version 3.4.6 20060404 (Red Hat 3.4.6-11)) #1 SMP Mon Aug 24 01:51:10 EDT 2009

__________________________________________________ __________________________

$ pwd

/home/??????/sites/www.??????.com/

__________________________________________________ __________________________

__________________________________________________ __________________________

Пробовал enlightenment, два из эксплоитов весят сервак: первый раз - в ребут, второй раз уснул часа на 1,5...

Glibc тоже не подходит...

много че пробовал, но чую : истина где-то рядом))