Davidoff7776 Posted November 26, 2018 Report Posted November 26, 2018 (edited) Salutare! Am o problema cu un exploit cu care toti cred ca sunteti familiarizati: pma scanner. In primul rand execut acest cod: https://pastebin.com/0E2B31Sq . Exploitx.php: https://pastebin.com/0twa4JqZ . Iar rezultatul este acesta: https://pastebin.com/iRnDME1C . Care ar fi cauza, dar si solutia acestei probleme? Multumesc anticipat! Edited November 26, 2018 by Davidoff7776 Quote
Nytro Posted November 26, 2018 Report Posted November 26, 2018 De unde ai rulat acel script? Are un backdoor si cineva are acces acolo! Quote
Davidoff7776 Posted November 26, 2018 Author Report Posted November 26, 2018 3 minutes ago, Nytro said: De unde ai rulat acel script? Are un backdoor si cineva are acces acolo! De pe VPS (CentOs 7) . Care e backdoorul? Quote
iulik Posted November 26, 2018 Report Posted November 26, 2018 37 minutes ago, Davidoff7776 said: De pe VPS (CentOs 7) . Care e backdoorul? Vezi ca tipul care ti-a dat exploit-ul are access la tine in vps! Quote
Davidoff7776 Posted November 26, 2018 Author Report Posted November 26, 2018 2 minutes ago, iulik said: Vezi ca tipul care ti-a dat exploit-ul are access la tine in vps! Cum ti-ai dat seama? Quote
.zife Posted November 26, 2018 Report Posted November 26, 2018 (edited) Independendet face asta bre /* wtf zmeu was here haha,yeah me... found this shit bug on pmasux */ Edited November 26, 2018 by .zife Quote
Davidoff7776 Posted November 26, 2018 Author Report Posted November 26, 2018 5 minutes ago, .zife said: Independendet face asta bre /* wtf zmeu was here haha,yeah me... found this shit bug on pmasux */ Cine-i Independendet?? 1 Quote
Davidoff7776 Posted November 26, 2018 Author Report Posted November 26, 2018 1 minute ago, .zife said: m0227-ta Ce-ai frate? Quote
ARUBA Posted November 26, 2018 Report Posted November 26, 2018 Pai iti zice la fiecare Gogule. [root@VM_0_9_centos pma]# PHP Notice: Use of undefined constant a - assumed 'a' in /home/test/pma/exploitx.php on line 6 Vezi unde trebuie sa fie double quotes si unde single quotes. Ai cautat si tu erorile astea intai? La index iti trebuie isset() cred. RFI din 2010, da-i sa sara internetu' in aer, poate ne lasi si pe noi fara internet. Quote
ARUBA Posted November 26, 2018 Report Posted November 26, 2018 (edited) 15 hours ago, Davidoff7776 said: Ce-ai frate? Ti-a zis frumos in unicode ce trebuie sa faci 0227 Lasand gluma deoparte, e o regula "Nu postati si nu cereti root-uri, vpn-uri, smtp-uri etc. " (adica fara scannere d-astea) Cred ca si asta poate fi incadrat aici. Postul trebuia facut oricum la ajutor, nu la discutii incepatori. Edited November 27, 2018 by ARUBA Quote
