Zain Khan On Friday, 14 August 2015

  1.   _____                   
  2.       ________.__                    __  
  3.   /  _  \   ____   ____   ____  /  _____/|  |__   ____  _______/  |_
  4.  /  /_\  \ /    \ /  _ \ /    \/   \  ___|  |  \ /  _ \/  ___/\   __\
  5. /    |    \   |  (  <_> )   |  \    \_\  \   Y  (  <_> )___ \  |  |   #RedBull
  6. \____|__  /___|  /\____/|___|  /\______  /___|  /\____/____  > |__|  
  7.         \/     \/            \/        \/     \/           \/        
  8.  This is not DNS hijacking #leets xd this is old school hacking ;)
  9. +------------------------------------------------------------------------------------+
  10. SuuuuuuuuuuuuP all ! This is a great day because we got w000t :D
  11. #RedBull #owned :D
  12. +------------------------------------------------------------------------------------+
  13. Some infos you need to know :
  14. Uname -a : Linux rbxwp02.ibmintern 2.6.18-348.3.1.el5 #1 SMP Tue Mar 5 13:19:32 EST 2013 x86_64
  15. HDD : 2078.02 GB Free: 148.29 GB (7%)
  16. Distribution name : Red Hat Enterprise Linux Server release 5.9 (Tikanga)
  17. +------------------------------------------------------------------------------------+
  18. A part of /etc/passwd :
  19.  
  20. cat /etc/passwd
  21. root:x:0:0:root:/root:/bin/bash
  22. bin:x:1:1:bin:/bin:/sbin/nologin
  23. daemon:x:2:2:daemon:/sbin:/sbin/nologin
  24. adm:x:3:4:adm:/var/adm:/sbin/nologin
  25. lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin
  26. sync:x:5:0:sync:/sbin:/bin/sync
  27. shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown
  28. halt:x:7:0:halt:/sbin:/sbin/halt
  29. mail:x:8:12:mail:/var/spool/mail:/sbin/nologin
  30. news:x:9:13:news:/etc/news:
  31. uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin
  32. operator:x:11:0:operator:/root:/sbin/nologin
  33. games:x:12:100:games:/usr/games:/sbin/nologin
  34. gopher:x:13:30:gopher:/var/gopher:/sbin/nologin
  35. ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin
  36. nobody:x:99:99:Nobody:/:/sbin/nologin
  37. nscd:x:28:28:NSCD Daemon:/:/sbin/nologin
  38. vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin
  39. pcap:x:77:77::/var/arpwatch:/sbin/nologin
  40. rpc:x:32:32:Portmapper RPC user:/:/sbin/nologin
  41. mailnull:x:47:47::/var/spool/mqueue:/sbin/nologin
  42. smmsp:x:51:51::/var/spool/mqueue:/sbin/nologin
  43. ntp:x:38:38::/etc/ntp:/sbin/nologin
  44. sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin
  45. rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin
  46. nfsnobody:x:65534:65534:Anonymous NFS User:/var/lib/nfs:/sbin/nologin
  47. dbus:x:81:81:System message bus:/:/sbin/nologin
  48. haldaemon:x:68:68:HAL daemon:/:/sbin/nologin
  49. avahi:x:70:70:Avahi daemon:/:/sbin/nologin
  50. avahi-autoipd:x:100:101:avahi-autoipd:/var/lib/avahi-autoipd:/sbin/nologin
  51. xfs:x:43:43:X Font Server:/etc/X11/fs:/sbin/nologin
  52. gdm:x:42:42::/var/gdm:/sbin/nologin
  53. sabayon:x:86:86:Sabayon user:/home/sabayon:/sbin/nologin
  54. at006602:x:99007:99007:IBM/Wilhelm Koestinger:/home/at006602:/bin/bash
  55. ost:x:990010:990010:IBM/Stephan Enders:/home/ost:/bin/bash
  56. at022840:x:990011:990011:IBM/Karl Schabus:/home/at022840:/bin/bash
  57. nrpe:x:450:450::/home/nrpe:/bin/bash
  58. nagios:x:451:451:nagios:/var/log/nagios:/bin/sh
  59. munin:x:452:452:Munin user:/var/lib/munin:/sbin/nologin
  60. apache:x:48:48:Apache:/var/www:/sbin/nologin
  61. rbx00001:x:110001:110001::/mnt/microsites/vhosts.d/rbx00001:/sbin/nologin
  62. rbxu00002:x:110002:110002::/mnt/microsites/vhosts.d/rbx00002:/sbin/nologin
  63. webdev:x:1101:1101::/mnt/microsites/vhosts.d/rbx00002/prod/www:/sbin/nologin
  64. rbxu00003:x:110003:110003::/mnt/microsites/vhosts.d/rbx00003:/sbin/nologin
  65. bestad:x:1092:1094::/mnt/microsites/vhosts.d/rbx00003/prod/www:/sbin/nologin
  66.  
  67. +------------------------------------------------------------------------------------+
  68. Defaces & leak :
  69.  
  70. # Official Redbull Website , injected malware :
  71. http://fanzone.infiniti-redbullracing.com/
  72. https://www.facebook.com/redbullracing
  73. Mirror: http://aljyyosh.org/mirror.php?id=139998
  74.  
  75. #Redbull India Users Leaked By AnonGhost Team
  76. http://pastebin.com/mrf2v2Nz
  77.  
  78. #Subdomain of official Redbull.com domains pwnzz :)
  79. http://flugtag.redbull.com/sites/
  80. http://zone-h.org/mirror/id/22407760
  81.  
  82. #Redbull World Hacked by AnonGhost
  83. ‪http://www.redbullworld.at/fb-channel.php
  84. http://aljyyosh.org/mirror.php?id=140015
  85.  
  86. #Official Redbull South Africa Hacked By AnonGhost Team
  87. Deface url : http://www.redbull.co.za/cs/Satellite/en_ZA/Red-Bull-Stash/001243253899682#/stash.php?sid=35539
  88. Mirror: http://aljyyosh.org/mirror.php?id=140063
  89. Admin logins leaked : http://pastebin.com/DEw7eWYZ
  90.  
  91. +------------------------------------------------------------------------------------+
  92. Thanks guys ;) Follow us @An0nGh0st & remember that we are everywhere.

Leave a Reply

Subscribe to Posts | Subscribe to Comments