| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-Id: <20110724002225.C369EA6E3F@smtp.hushmail.com>
Date: Sat, 23 Jul 2011 20:22:25 -0400
From: antiseccl@...hmail.com
To: full-disclosure@...ts.grok.org.uk
Cc: submit@...sec.com, mr.inj3ct0r@...il.com, root@...loit-id.com
Subject: Universidad Santiago de Chile - PWNED by AntisecCL
[+] T4rg3t: USACH
[+] URI: www.usach.cl
[+] Vulnz: 0day SQL 1nj3ct10n
[+] 4uth0r: Antisec CL - Rodriguez MC
1ntr0:
Una universidad es una organización viva, un todo coherente, donde
cada una de sus partes es vital, ya que de esta integridad surge su
fuerza y su capacidad de trascender. Esta ha sido la principal
convicción de quienes han guiado el destino de la Universidad de
Santiago de Chile. De ahí que en cada una de las etapas, que marcan
sus 161 años de historia, su aporte constituya un legado
indiscutido al desarrollo del país y de su gente.
Pr3v13w of c0nt3nt:
www-data$ ls -la /etc/apache2/sites-enabled
total 556
drwxr-xr-x 2 root root 4096 Jul 11 17:46 .
drwxr-xr-x 9 root root 4096 Jan 14 2011 ..
-rw-r--r-- 1 root root 12288 Aug 30 2010 .usach.swp
-rw-r--r-- 1 root root 354 Apr 24 2009 acreditacion
-rw-r--r-- 1 root root 334 Jan 8 2011 activofijo
-rw-r--r-- 1 root root 390 Jan 6 2011 admision
-rw-r--r-- 1 root root 289 Jun 22 2010 adp
-rw-r--r-- 1 root root 352 Jul 21 2010 adultomayor
-rw-r--r-- 1 root root 375 Jul 1 2009 agendaactividades
-rw-r--r-- 1 root root 330 May 4 2009 alumni
-rw-r--r-- 1 root root 304 Aug 11 2010 arasec
-rw-r--r-- 1 root root 313 Jan 8 2011 becas
-rw-r--r-- 1 root root 346 Apr 24 2009 biblioteca
-rw-r--r-- 1 root root 376 Jan 14 2010 bienestardelpersonal
-rw-r--r-- 1 root root 332 Sep 7 2010 blacpma
-rw-r--r-- 1 root root 314 Jan 8 2011 boletas
-rw-r--r-- 1 root root 428 Mar 17 16:55 cachorreoenbuena
-rw-r--r-- 1 root root 358 Aug 5 2009 capacitacion
-rw-r--r-- 1 root root 298 Sep 29 2009 cecta
-rw-r--r-- 1 root root 386 Nov 20 2009 centrodenegocios
-rw-r--r-- 1 root root 345 Jun 1 18:10 ceusllanquihue
-rw-r--r-- 1 root root 308 Nov 18 2009 cices
-rw-r--r-- 1 root root 310 Mar 14 08:30 cide
-rw-r--r-- 1 root root 295 May 10 2010 ciis
-rw-r--r-- 1 root root 324 Sep 24 2009 colegios
-rw-r--r-- 1 root root 322 Apr 24 2009 com_par
-rw-r--r-- 1 root root 335 Mar 29 2010 congreso
-rw-r--r-- 1 root root 323 Mar 18 2010 consejo
-rw-r--r-- 1 root root 356 Jan 8 2011 consulta_deuda
-rw-r--r-- 1 root root 476 Apr 5 17:27 contraloria
-rw-r--r-- 1 root root 346 Apr 24 2009 credencial
-rw-r--r-- 1 root root 327 Apr 24 2009 csalud
-rw-r--r-- 1 root root 339 Jul 31 2009 cursogestion
-rw-r--r-- 1 root root 308 Aug 19 2010 dae
-rw-r--r-- 1 root root 304 Apr 24 2009 dcs
-rw-r--r-- 1 root root 310 Apr 24 2009 deai
-rw-r--r-- 1 root root 328 Apr 24 2009 decytal
-rw-r--r-- 1 root root 346 Apr 24 2009 dep_cda
-rw-r--r-- 1 root root 332 Aug 14 2009 dep_prosal
-rw-r--r-- 1 root root 339 Aug 19 2010 deportes
-rw-r--r-- 1 root root 307 Apr 24 2009 dga
-rw-r--r-- 1 root root 304 Apr 24 2009 die
-rw-r--r-- 1 root root 332 Apr 24 2009 digegra
-rw-r--r-- 1 root root 304 Jun 4 2009 digeo
-rw-r--r-- 1 root root 337 Aug 4 2009 dim
-rw-r--r-- 1 root root 289 Apr 30 2009 diq
-rw-r--r-- 1 root root 343 Jun 18 2009 dmcc
-rw-r--r-- 1 root root 322 Apr 24 2009 dpp
-rw-r--r-- 1 root root 295 Jan 8 2011 drii
-rw-r--r-- 1 root root 360 Aug 19 2010 dta
-rw-r--r-- 1 root root 320 Mar 16 2010 dtg
-rw-r--r-- 1 root root 311 Jun 29 2010 dti
-rw-r--r-- 1 root root 301 Jan 8 2011 ecamp
-rw-r--r-- 1 root root 302 Aug 3 2009 ecdp
-rw-r--r-- 1 root root 325 Mar 30 16:15 editorial
-rw-r--r-- 1 root root 410 Sep 28 2009 educa
-rw-r--r-- 1 root root 373 Jan 10 2011 educacioncontinua
-rw-r--r-- 1 root root 388 Apr 24 2009 educadoreslideres
-rw-r--r-- 1 root root 361 May 6 16:26 elapdis
-rw-r--r-- 1 root root 400 Jan 8 2011 encuesta_centro_salud
-rw-r--r-- 1 root root 387 Jan 10 2011 encuesta_universita
-rw-r--r-- 1 root root 391 Jan 10 2011 encuesta_universita2
-rw-r--r-- 1 root root 379 Jan 8 2011 encuestaegresados
-rw-r--r-- 1 root root 809 Jan 12 2011 enlinea
-rw-r--r-- 1 root root 333 Oct 20 2009 expertos
-rw-r--r-- 1 root root 374 Apr 24 2009 fac_arquitectura
-rw-r--r-- 1 root root 343 Apr 24 2009 fac_bachillerato
-rw-r--r-- 1 root root 368 Apr 24 2009 fac_cienciasmedicas
-rw-r--r-- 1 root root 336 Apr 24 2009 fac_tecnologica
-rw-r--r-- 1 root root 315 Nov 8 2010 factem
-rw-r--r-- 1 root root 337 Apr 24 2009 fciencia
-rw-r--r-- 1 root root 345 Apr 24 2009 fhumanidades
-rw-r--r-- 1 root root 335 Apr 1 2010 fjta
-rw-r--r-- 1 root root 313 Apr 6 2010 flagtec
-rw-r--r-- 1 root root 451 May 11 12:13 fondocredito
-rw-r--r-- 1 root root 360 Jan 8 2011 fondosolidario
-rw-r--r-- 1 root root 330 Apr 24 2009 froemel
-rw-r--r-- 1 root root 310 May 11 2010 fude
-rw-r--r-- 1 root root 316 Jan 8 2011 fudea
-rw-r--r-- 1 root root 321 Jan 8 2011 fudeasis
-rw-r--r-- 1 root root 375 Jul 11 17:48 fzanlungo
-rw-r--r-- 1 root root 356 Jan 8 2011 gestionagraria
-rw-r--r-- 1 root root 324 Apr 24 2009 getic
-rw-r--r-- 1 root root 346 Mar 15 2010 hazunpostgrado
-rw-r--r-- 1 root root 369 Jan 8 2011 helpdesk_fina
-rw-r--r-- 1 root root 361 Jan 8 2011 helpdesk_rrhh
-rw-r--r-- 1 root root 292 May 20 12:04 hosmet
-rw-r--r-- 1 root root 422 May 10 11:59 idea
-rw-r--r-- 1 root root 361 Nov 2 2009 igualdad
-rw-r--r-- 1 root root 405 Jul 23 2010 industrias
-rw-r--r-- 1 root root 337 Jan 8 2011 infoalumnos
-rw-r--r-- 1 root root 402 Jul 7 2009 informacioncorporativa
-rw-r--r-- 1 root root 358 Apr 24 2009 informaticos
-rw-r--r-- 1 root root 384 Jan 8 2011 informesfondocredito
-rw-r--r-- 1 root root 411 Dec 23 2010 integracion_ingenieria
-rw-r--r-- 1 root root 315 Jan 8 2011 intranet
-rw-r--r-- 1 root root 289 May 13 2009 iso
-rw-r--r-- 1 root root 289 Oct 29 2009 leo
-rw-r--r-- 1 root root 301 May 27 15:39 licaf
-rw-r--r-- 1 root root 396 Dec 11 2009 magistercomunicacion
-rw-r--r-- 1 root root 289 Jan 8 2011 mri
-rw-r--r-- 1 root root 341 Apr 24 2009 obras_civiles
-rw-r--r-- 1 root root 302 Apr 28 2009 oocc
-rw-r--r-- 1 root root 325 Jan 7 2010 padmision
-rw-r--r-- 1 root root 289 Jan 8 2011 pei
-rw-r--r-- 1 root root 399 Jan 8 2011 postergacionmatricula
-rw-r--r-- 1 root root 346 Apr 24 2009 psicologia
-rw-r--r-- 1 root root 346 Apr 24 2009 publicidad
-rw-r--r-- 1 root root 395 Apr 29 2009 quimicaybiologia
-rw-r--r-- 1 root root 334 Jan 12 2011 radiof5
-rw-r--r-- 1 root root 319 Apr 24 2009 radiousach
-rw-r--r-- 1 root root 319 Jan 8 2011 redireccion_wifi
-rw-r--r-- 1 root root 365 Jan 8 2011 rendicion_santander
-rw-r--r-- 1 root root 385 Jan 8 2011 renovacionbeneficio
-rw-r--r-- 1 root root 396 Apr 24 2009 responsabilidadsocial
-rw-r--r-- 1 root root 296 Oct 1 2009 rrhh
-rw-r--r-- 1 root root 304 Apr 24 2009 rsu
-rw-r--r-- 1 root root 350 Apr 24 2009 salaprensa
-rw-r--r-- 1 root root 312 Apr 13 2010 sdt
-rw-r--r-- 1 root root 321 Jan 8 2011 sisoocc
-rw-r--r-- 1 root root 389 Apr 24 2009 sistemacomprassdt
-rw-r--r-- 1 root root 313 Aug 14 2009 sonaples
-rw-r--r-- 1 root root 322 Jan 8 2011 tomahora
-rw-r--r-- 1 root root 351 Jan 8 2011 transparencia
-rw-r--r-- 1 root root 293 Nov 22 2010 unie
-rw-r--r-- 1 root root 352 Apr 27 2009 universidaddesantiago
-rw-r--r-- 1 root root 981 Mar 8 17:52 usach
-rw-r--r-- 1 root root 315 Sep 3 2009 usachaldia
-rw-r--r-- 1 root root 352 Mar 5 2010 usachayudaachile
-rw-r--r-- 1 root root 358 Jan 8 2011 usuariocorreo
-rw-r--r-- 1 root root 359 Jan 8 2011 utilidadcorreo
-rw-r--r-- 1 root root 341 Jan 8 2011 utilidades
-rw-r--r-- 1 root root 310 Jan 8 2011 vaea
-rw-r--r-- 1 root root 289 Dec 20 2010 vra
-rw-r--r-- 1 root root 319 Aug 19 2010 vrgde
-rw-r--r-- 1 root root 311 Apr 4 11:46 vrid
-rw-r--r-- 1 root root 328 Apr 24 2009 vridinv
www-data$ ls -lash /home/developer
total 3.1G
4.0K drwxr-xr-x 7 developer developer 4.0K Jul 8 09:04 .
4.0K drwxr-xr-x 9 root root 4.0K Sep 7 2010 ..
12K -rw------- 1 developer developer 8.1K Jul 15 10:00
.bash_history
4.0K -rw-r--r-- 1 developer developer 220 Apr 21 2009
.bash_logout
4.0K -rw-r--r-- 1 developer developer 2.9K Apr 21 2009 .bashrc
4.0K drwx------ 2 developer developer 4.0K May 13 2009 .gnupg
4.0K -rw------- 1 developer developer 35 Jun 9 2009 .lesshst
4.0K -rw------- 1 developer developer 2.6K Jul 8 09:04
.mysql_history
4.0K -rw------- 1 developer developer 829 Jul 13 15:16
.nano_history
4.0K -rw-r--r-- 1 developer developer 586 Apr 21 2009 .profile
4.0K -rw------- 1 developer developer 404 Jan 8 2010
.psql_history
4.0K -rw------- 1 root root 1.0K Dec 28 2009 .rnd
4.0K drwx------ 2 developer developer 4.0K Jun 30 2009 .ssh
648M -rw-r--r-- 1 developer developer 647M May 25 2010 Debian
5.0.1 i38.iso
4.1M -rw-r--r-- 1 developer developer 4.1M Jan 3 2011
admision.sql
18M -rw-r--r-- 1 developer developer 18M Aug 18 2010
alumnos_ctacte_vig_v2.sql
156K -rw-r--r-- 1 developer developer 149K Aug 19 2010
alumnos_nuevos.sql
48K -rw-r--r-- 1 developer developer 48K Aug 19 2010
alumnos_nuevos_con_error.sql
6.4M -rwxrwxrwx 1 developer developer 6.4M Apr 13 2010 apache-
tomcat-5.5.28.tar.gz
8.0K -rw-r--r-- 1 root root 5.4K Apr 4 09:45 apache.txt
306M -rw-r--r-- 1 developer developer 305M Nov 19 2010
archivos_demre.sql
334M -rw-r--r-- 1 developer developer 334M Jan 3 2011
archivos_demre_2010_last.sql
20K -rw-r--r-- 1 developer developer 17K Jan 3 2011
archivos_demre_2010_structure.sql
4.0K drwxr-xr-x 2 root root 4.0K Jan 12 2011 cert
648K -rw-r--r-- 1 developer developer 642K May 4 16:25
data_idea.sql
4.0K -rw-r--r-- 1 developer developer 1.6K Jan 3 2011
degreemark.sql
203M -rw-r--r-- 1 root root 202M Jun 15 16:48
encuesta_universita2.sql
212M -rw-r--r-- 1 developer developer 211M Dec 27 2010
encuesta_universita2_1sem_2010.sql
38M -rw-r--r-- 1 developer developer 38M Jan 3 2011
f_archivo_puntaje_web_data.sql
228M -rwxrwxrwx 1 developer developer 228M Apr 13 2010
jasperserver-3.5.0-linux-installer.bin
4.0K drwxr-xr-x 5 developer developer 4.0K Jan 3 2010
matricula2010
40K -rwxr-xr-x 1 root root 39K Aug 17 2010
mysqltuner.pl
0 -rw-r--r-- 1 developer developer 0 Jan 8 2011
pago_en_linea.sql
284K -rwxrwxrwx 1 root root 278K Aug 18 2010 result.txt
79M -rw-r--r-- 1 root root 79M Jun 23 2010 rrhh.tar.gz
1.1M -rw-r--r-- 1 root root 1.1M Jun 23 2010
rrhh_data.sql
4.0K -rw-r--r-- 1 root root 892 Sep 23 2010
sent_hallazgos.log
4.0K -rw-r--r-- 1 root root 980 Sep 23 2010
sent_hallazgos2.log
1.1G -rw-r--r-- 1 developer developer 1.1G Jan 7 2011 usach.tar
4.0K drwxrwxrwx 13 developer developer 4.0K May 11 2010 zabbix-
1.8.2
www-data$ cat /etc/apache2/sites-enabled/* | grep ServerAlias
ServerAlias www.acreditacion.usach.cl
ServerAlias www.activofijo.usach.cl
ServerAlias www.admision.usach.cl
# ServerAlias usach.cl
# ServerAlias www.usach.cl
ServerAlias www.adp.usach.cl
ServerAlias www.adultomayor.usach.cl
ServerAlias www.agendaactividades.usach.cl
ServerAlias www.alumni.usach.cl
ServerAlias www.arasec.usach.cl
ServerAlias www.becas.usach.cl
ServerAlias www.biblioteca.usach.cl
ServerAlias www.bienestardelpersonal.usach.cl
ServerAlias www.blacpma.usach.cl
ServerAlias www.boletas.usach.cl
ServerAlias www.encuestacachorros.usach.cl
# ServerAlias usach.cl
# ServerAlias www.usach.cl
ServerAlias www.capacitacion.usach.cl
ServerAlias www.cecta.usach.cl
ServerAlias www.centrodenegocios.usach.cl
ServerAlias www.ceusllanquihue.usach.cl
ServerAlias cices.usach.cl
ServerAlias www.cide.usach.cl
ServerAlias www.ciis.usach.cl
ServerAlias www.colegios.usach.cl
ServerAlias www.cphs.usach.cl
ServerAlias acca2010.usach.cl
ServerAlias www.consejo.usach.cl
ServerAlias www.consultadeuda.usach.cl
ServerAlias www.contraloria.usach.cl
ServerAlias www.contraloriausach.cl
ServerAlias contraloriausach.cl
ServerAlias www.credencial.usach.cl
ServerAlias www.csalud.usach.cl
ServerAlias www.cursogestion.usach.cl
ServerAlias www.dae.usach.cl
ServerAlias www.dcs.usach.cl
ServerAlias www.deai.usach.cl
ServerAlias www.decytal.usach.cl
ServerAlias www.cienciasambiente.usach.cl
ServerAlias www.dps.usach.cl
ServerAlias www.deportes.usach.cl
ServerAlias www.dga.usach.cl
ServerAlias www.die.usach.cl
ServerAlias www.postgrado.usach.cl
ServerAlias www.digeo.cl
ServerAlias dim.usach.cl
ServerAlias www.diq.usach.cl
ServerAlias www.dmcc.usach.cl
ServerAlias www.mat.usach.cl
ServerAlias www.dpp.usach.cl
ServerAlias www.drii.usach.cl
ServerAlias www.talentosartisticos.usach.cl
ServerAlias www.dtg.usach.cl
ServerAlias www.dti.usach.cl
ServerAlias www.ecamp.usach.cl
ServerAlias www.ecdp.die.usach.cl
ServerAlias www.editorial.usach.cl
ServerAlias www.educacioncontinuausach.cl
ServerAlias www.educacioncontinua.usach.cl
ServerAlias www.educacioncontinua.usach.cl
ServerAlias www.educadoreslideres.usach.cl
ServerAlias www.elapdis.usach.cl
ServerAlias www.encuesta_centro_salud.usach.cl
ServerAlias www.encuesta_universita.usach.cl
ServerAlias www.encuesta_universita2.usach.cl
ServerAlias www.encuestaegresados.usach.cl
ServerAlias www.enlinea.usach.cl
ServerAlias www.enlinea.usach.cl
ServerAlias www.expertos.usach.cl
ServerAlias www.arquitectura.usach.cl
ServerAlias www.bachillerato.cl
ServerAlias www.fcm.usach.cl
ServerAlias www.factec.usach.cl
# ServerAlias www.factem.usach.cl
ServerAlias www.fciencia.usach.cl
ServerAlias www.fahu.usach.cl
ServerAlias fjta.usach.cl
ServerAlias www.flagtec.usach.cl
# ServerAlias www.fondocredito.usach.cl
ServerAlias www.fondosolidario.usach.cl
ServerAlias www.ffroemel.usach.cl
ServerAlias www.fude.usach.cl
ServerAlias www.fudea.usach.cl
ServerAlias www.fudeasis.usach.cl
ServerAlias www.fundacionzanlungo.usach.cl
ServerAlias www.gestionagraria.usach.cl
ServerAlias www.lab_getic.usach.cl
ServerAlias www.hazunpostgrado.cl
ServerAlias www.requerimientosfinanzas.usach.cl
ServerAlias www.requerimientosrrhh.usach.cl
ServerAlias www.hosmet.cl
ServerAlias www.idea.usach.cl
ServerAlias www.igualdadenladiferencia.usach.cl
ServerAlias www.industria.usach.cl www.ing-indus.usach.cl
www.ingenieriaindustrial.usach.cl industrias.usach.cl
ServerAlias www.infoalumnos.usach.cl
ServerAlias www.informacioncorporativa.usach.cl
ServerAlias www.informaticos.usach.cl
ServerAlias www.informesfondocredito.usach.cl
ServerAlias www.integracion-ingenieria.usach.cl
ServerAlias intranet.usach.cl
ServerAlias www.iso.segic.cl
ServerAlias www.leo.usach.cl
ServerAlias www.licaf.usach.cl
ServerAlias www.cscom.usach.cl
ServerAlias www.cscomusach.cl
ServerAlias www.mri.usach.cl
ServerAlias www.oocc.usach.cl
ServerAlias www.oocc.cl
ServerAlias admision.usach.cl
ServerAlias www.admision.usach.cl
ServerAlias www.pei.usach.cl
ServerAlias www.postergacionmatricula.usach.cl
ServerAlias www.psicologia.usach.cl
ServerAlias www.publicidad.usach.cl
ServerAlias www.quimicaybiologia.usach.cl diq.usach.cl
# ServerAlias www.radiof5.cl
ServerAlias www.radiousach.cl
ServerAlias www.wifi.usach.cl
ServerAlias www.rendicion.usach.cl
ServerAlias www.renovacionbeneficio.usach.cl
ServerAlias www.responsabilidadsocial.usach.cl
ServerAlias www.rrhh.usach.cl
ServerAlias www.rsu.usach.cl
ServerAlias www.saladeprensa.usach.cl
ServerAlias www.sdtusach.usach.cl
ServerAlias www.sisoocc.usach.cl
ServerAlias www.transparenciaadquisiciones.usach.cl
ServerAlias www.sonaples.cl
ServerAlias www.tomahora.usach.cl
ServerAlias www.transparencia.usach.cl
ServerAlias www.unie.usach.cl
ServerAlias www.universidaddesantiago.cl
# ServerAlias www.usach.cl
# ServerAlias www.portal.usach.cl
# ServerAlias www.usach.cl
# #ServerAlias www.portal.usach.cl
ServerAlias www.usachaldia.cl
ServerAlias www.usachayudaachile.usach.cl
ServerAlias www.usuariocorreo.usach.cl
ServerAlias www.utilidadcorreo.usach.cl
ServerAlias www.utilidades.usach.cl
ServerAlias www.vaea.usach.cl
ServerAlias www.vra.usach.cl
ServerAlias www.vrgde.usach.cl
ServerAlias www.vrid.usach.cl
ServerAlias www.vridinv.usach.cl
C0mpl3t3 Full D1scl0sur3
http://pastebay.com/133268
http://pastebay.com/133270
http://pastebay.com/133269
C0mpl3t3 Dump DB (size 1.4g)
http://www.pirateupload.com/files/Gc8q1311449161.html
EOF
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
Powered by blists - more mailing lists