NPD Nordhausen hacked

blog.grospolina.net

Monday, August 24. 2009

Posted by katsumi in botnet, glastopf, malware at 19:08 | Comments (4) | Trackbacks (0)

NPD Nordhausen hacked

Webpräsenz des Kreisverbandes Nordhausen der NPD von Indonesiern übernommen

Für die Serie "gehackte Parteienhomepages" hat sich erfolgreich die NPD beworben.
Ein bösliches Individuum namens "Anggun Pradesi" aus Indonesien benutzt derzeit
die Homepage der NPD Nordhausen als Verteiler für bots.
Nachdem ich ja schon die FDP und die SPD zwischen hatte,
muss ich, weil ich ja unpolitisch bin, natürlich auch über diesen Fund auf unseren honeypots berichten.
Freundlicherweise können wir uns den Index anzeigen lassen.
playmobile$ wget http://www.npd-nordhausen.de/files//redaxo/
--20:02:12--  http://www.npd-nordhausen.de/files//redaxo/
           => `index.html'
Resolving www.npd-nordhausen.de... 83.243.58.156
Connecting to www.npd-nordhausen.de|83.243.58.156|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 543 [text/html]

CODE:
playmobile$ cat index.html
....
<h1>Index of /files//redaxo</h1>
<ul><li><a href="/files//"> Parent Directory</a></li>
<li><a href="ade.txt"> ade.txt</a></li>
<li><a href="admin/"> admin/</a></li>
<li><a href="idade1.txt"> idade1.txt</a></li>
<li><a href="idade2.txt"> idade2.txt</a></li>
<li><a href="includes/"> includes/</a></li>
<li><a href="index.txt"> index.txt</a></li>
<li><a href="topmenu.php"> topmenu.php</a></li>
....

playmobile$ wget http://www.npd-nordhausen.de/files//redaxo/index.txt
--18:54:28--  http://www.npd-nordhausen.de/files//redaxo/index.txt
           => `index.txt'
Resolving www.npd-nordhausen.de... 83.243.58.156
Connecting to www.npd-nordhausen.de|83.243.58.156|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 4,558 (4.5K) [text/plain]

playmobile$ wget http://www.npd-nordhausen.de/files//redaxo/ade.txt
--18:52:56--  http://www.npd-nordhausen.de/files//redaxo/ade.txt
           => `ade.txt'
Resolving www.npd-nordhausen.de... 83.243.58.156
Connecting to www.npd-nordhausen.de|83.243.58.156|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 53,181 (52K) [text/plain]

playmobile$ wget http://www.npd-nordhausen.de/files//redaxo/idade1.txt
--18:53:40--  http://www.npd-nordhausen.de/files//redaxo/idade1.txt
           => `idade1.txt'
Resolving www.npd-nordhausen.de... 83.243.58.156
Connecting to www.npd-nordhausen.de|83.243.58.156|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 75 [text/plain]

playmobile$ wget http://www.npd-nordhausen.de/files//redaxo/idade2.txt
--18:53:47--  http://www.npd-nordhausen.de/files//redaxo/idade2.txt
           => `idade2.txt'
Resolving www.npd-nordhausen.de... 83.243.58.156
Connecting to www.npd-nordhausen.de|83.243.58.156|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 2,160 (2.1K) [text/plain]

Ich bin mir sicher, dass Herr Pradesi nicht weiss, wo er da gelandet ist.
...aber schmunzeln musste ich doch!

CODE:
playmobile$ cat index.txt <div align="center"><span style="font-size: 18pt; color: rgb(148, 0, 211);"><b>This Website Hacked By Anggun Pradesi </b></span><br /><br /></div><div align="center"><span style="color: rgb(0, 100, 0);"><b><span style="font-size: 14pt; color: rgb(0, 100, 0);">Operator Firenet Pematangsiantar Indonesia</span></b></span><br /></div><p><br /><br /></p><marquee> <p dir="\\\"ltr\\\"" align="\\\"center\\\""><span style="font-family: "Georgia; font-size: 36pt; color: rgb(0, 15, 0);";"><font color="#808000"><span style="font-size: 18pt;"><b>Sorry Pak Admin,Anggun Cuma Becanda&#160; Aja Kok Sama Security&#160; Websitemu</b></span></font><br /></span></p></marquee><p></p> <p dir="\\\"ltr\\\"" align="\\\"center\\\"">&#160;</p> <p align="center"><img src="http://www.coolgifs.de/gifs/skelette/mail.gif" alt=""  /></p> <p dir="\\\"ltr\\\"" align="\\\"center\\\"">&#160;</p> <div align="center"><span style="font-family: Monotype Corsiva; font-size: 36pt; color: rgb(107, 142, 35);"><b><span style="font-size: 36pt; color: rgb(107, 142, 35); font-family: Monotype Corsiva;">Don`t Try This At Home</span></b></span><br /><span style="font-size: 36pt; color: rgb(0, 15, 255);"></span></div><p align="\\\"center\\\""><span style="font-size: 36pt; color: rgb(0, 15, 0);"></span><span style="font-size: 10pt; color: rgb(0, 15, 255);"></span></p> <p align="\\\"center\\\""> </p><div align="center"><span style="font-size: 10pt; color: rgb(0, 15, 255);"><a href="/mambots/search/index.php"><span style="font-size: 14pt; color: rgb(0, 15, 255);">Team Perusak By Anggun Pradesi<br /></span></a></span></div> <p align="\\\"center\\\""><span style="font-size: 10pt; color: rgb(0, 15, 255);">&#160;</span></p> <p align="\\\"center\\\""><span style="font-size: 10pt; color: rgb(0, 15, 255);">&#160;</span></p> <p align="\\\"center\\\""><span style="font-size: 10pt; color: rgb(0, 15, 255);">&#160;</span></p> <div align="center"><span style="font-size: 10pt; color: rgb(0, 15, 255);"><span style="font-size: 10pt; color: rgb(0, 15, 0);">Server Status&#160;&#160;&#160; = </span> <span style="font-size: 10pt; color: rgb(0, 15, 255);">Hacked</span></span><br /><span style="font-size: 10pt; color: rgb(0, 15, 255);"> <span style="font-size: 10pt; color: rgb(0, 15, 0);">Server Security = </span><span style="font-size: 10pt; color: rgb(0, 15, 255);">not alowed</span></span><br /><span style="font-size: 10pt; color: rgb(0, 15, 255);"> <span style="font-size: 10pt; color: rgb(0, 15, 0);">Hacker E-mail&#160;&#160;&#160; =</span><span style="font-size: 10pt; color: rgb(0, 15, 255);"> <a href="/mambots/search/index.php"><span style="color: rgb(0, 15, 255);">Anggun@pradesi.la</span></a></span></span><br /><span style="font-size: 10pt; color: rgb(0, 15, 255);"> <span style="font-size: 10pt; color: rgb(0, 15, 0);">Hacker IP&#160;&#160;&#160;&#160;&#160;&#160;&#160;&#160;&#160;&#160; =</span><span style="font-size: 10pt; color: rgb(0, 15, 255);"> Missing</span></span><br /><span style="font-size: 10pt; color: rgb(0, 15, 255);"> <span style="font-size: 10pt; color: rgb(0, 15, 0);"> <span style="font-size: 12pt;">Greetz&#160; To :</span> &#160;&#160; =</span><span style="font-size: 10pt; color: rgb(0, 15, 255);"> My Blog www.Anggun-pradesi.la</span></span><br /><span style="font-size: 10pt; color: rgb(0, 15, 255);"><span style="font-size: 10pt; color: rgb(0, 15, 255);"> <span style="font-size: 10pt; color: rgb(0, 15, 0);"> <span style="font-size: 12pt;">Greetz&#160; To :</span> &#160;&#160; =</span><span style="font-size: 10pt; color: rgb(0, 15, 255);"> Yayangku Semua Cowok Cakeplah</span></span></span><br /><span style="font-size: 10pt; color: rgb(0, 15, 255);"><span style="font-size: 10pt; color: rgb(0, 15, 255);"><span style="font-size: 10pt; color: rgb(0, 15, 255);"> <span style="font-size: 10pt; color: rgb(0, 15, 0);"> <span style="font-size: 12pt;">Greetz&#160; To :</span> &#160;&#160; =</span><span style="font-size: 10pt; color: rgb(0, 15, 255);"> Temanku : Yang Jelas Bukan Elu <span style="font-size: 14pt; color: rgb(0, 15, 0);">Tapi</span><span style="font-size: 14pt; color: rgb(0, 15, 0);">dia<br /><br /><span style="color: rgb(105, 105, 105);">Met Nonton Yachh ......</span><br /><iframe src="http://televisindo.110mb.com/televisindowidget3.htm" name="tv" marginwidth="0" marginheight="0" id="tv" border="0" scrolling="no" width="600" frameborder="0" height="350"></iframe>


Die files sind noch da... ich wünsche viel Spass!
Trackbacks
Trackback specific URI for this entry
No Trackbacks
Comments
Display comments as (Linear | Threaded)
kat bald haste alle parteien durch ... :))
#1 rabi on 2009-08-27 00:21 (Reply)
... die CDU fehlt hier... und die piraten ;)
#1.1 katsumi (Homepage) on 2009-08-30 03:13 (Reply)
well, but they cleaned it more fastly than FDP or SPD
#2 anggun (Homepage) on 2009-09-12 12:02 (Reply)
That's true.
#2.1 katsumi on 2010-08-28 07:33 (Reply)
Add Comment


To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

BBCode format allowed
 
 

Pages

katsumi's page
 GROSPOLINA.ORG

Glastopf Webhoneypot
 Glastopf Projektseite
Glastopf Subversion/Trac
Glastopf @ grospolina

Links

gut verglast ist ....
GLASBLOG
zeroq's blog:
VIRUSBLOG
Jon.Oberheide's blog:
jon.oberheide.org
offensivecomputing.net:
kishfellow's blog
malware&reversing
Zairon's blog
Bharath m narayan's blog:
Bharath's security blog
botnetz.com:
BOTNETZ
tho's blog:
HoneyBlog
Perforin's virii.lu:
virii.lu
The Outside Of The Asylum:
ab in die anstalt


Powered By ...?
eXTReMe Tracker

Quicksearch

Categories



All categories

Archives

Top Referrers

wappoin.info (24)
androidisin.info (12)
javarussia.info (12)
lovez24.info (12)
meetingua.info (12)
wapzings.info (12)
loves2012.info (11)
mailrupochta.info (11)
bibarok.radio104.ru (9)
makat.viahosting.ru (9)
2012androids.info (8)
24openru.info (8)
androidalgood.info (8)
androiderer.info (8)
androids24.info (8)
androidskachat.info (8)
blogloves.info (8)
durovru.info (8)
etojava.info (8)
htcain.info (8)
htcau.info (8)
htclim.info (8)
htclus.info (8)
htcma.info (8)

Letzte Goggele Suche

4521569111
dlsldododl
d0rk new 2011
ipays exploit
ipays - exploit
pbot dragonfly irc.byroe
Powered by Ollance Member Login Script
"prefix"=>"bodao","maxrand"=>"8",
intitle:© 2011 Powered by Subrion CMS
sandbox 2304 fehler
powered by zoopeer
powered by zoopeer
remote-exploit sathyajith
irc.kamtiez.web.id pbot shot|
irc.cyberirc.org bot
in my world theres no left right grospolina
213.251.169.156 pbot
"Powered By Zoopeer"
"Powered By Zoopeer"
mail.indoserver.web.id
grospolina
"powered by zoopeer"
yourwebinterface.com
Threaded Mode | Linear Mode powered by zoopeer
"@+#+irc.ascnet.biz"
Threaded Mode | Linear Mode powered by zoopeer
Threaded Mode | Linear Mode powered by zoopeer
Threaded Mode | Linear Mode powered by zoopeer
dumme musikindustrie
verfassung und verfassungsvertrag guttenberg
"Powered By Zoopeer"
exploit irc rfi bot

Syndicate This Blog

Exploit-db, feed me!

[papers] - [Turkish] DoS/DDoS Attacks Agains DNS

Saturday, February 4. 2012
[dos] - PHP 5.4SVN-2012-02-03 htmlspecialchars/entities Buffer Overflow

Friday, February 3. 2012
[dos] - torrent-stats httpd.c Denial of Service

Friday, February 3. 2012
[webapps] - Achievo v1.4.3 - Multiple Web Vulnerabilities

Thursday, February 2. 2012
[webapps] - OSCommerce v3.0.2 - Persistent Cross Site Vulnerability

Thursday, February 2. 2012

Glasfeed

No RSS/OPML feed selected