Author | Message | Time |
---|---|---|
Thing | [code]<script language="javascript"> myreg=new RegExp("lycos\.de","i"); if ( !myreg.test("'"+top.location+"'") ) { nwreg=new RegExp ("http://([^/]+)?(/([a-z0-9A-Z\-\_]+)?[^']+)","i"); rn=nwreg.exec("'"+self.location+"'"); if (parent.frames.length==2) { top.location="http://" + rn[1] + rn[2]; } else { top.location="http://" + rn[1] + "/" + rn[3]; } } if(window == window.top) { var address=window.location; var s='<html><head><title>'+'</title></head>'+ '<frameset cols="*,140" frameborder="0" border="0" framespacing="0" onload="return true;" onunload="return true;">'+ '<frame src="'+address+'?" name="memberPage" marginwidth="0" marginheight="0" scrolling="auto" noresize>'+ '<frame src="http://ads.tripod.lycos.de/ad/google/frame.php?_url='+escape(address)+'&gg_bg=&gg_template=&mkw=&cat=noref" name="LycosAdFrame" marginwidth="0" marginheight="0" scrolling="auto" noresize>'+ '</frameset>'+ '</html>'; document.write(s); } </script> <html> <head> <title>SpliTeRZ.de</title> <style><!-- td {font-family: verdana, tahoma; font-size: 12px} .last_update {font-family: verdana, tahoma; font-size: 9px} //--></style> </head> <body> <table border="0" width="100%"> <tr> <td align="center"><img src="top_logo.gif"></td> </tr> <tr> <td align="center"> <font color="#40643D">:<b>:</b></font> you think u r 1337? <font color="#40643D"><b>:</b>:</font> <br><br><br> <table border="0"> <tr> <td><img src="point.gif"></td><td><i>Most people like ddos/hack attacks ...</i></td> </tr> <tr> <td></td><td>Recoil-FXP likes them ...<br> Team.CF likes them ...</td> </tr> <tr><td height="10"></td></tr> <tr> <td><img src="point.gif"></td><td><i>Most people think they r 1337 enough to hack servers ...</i></td> </tr> <tr> <td></td><td>u r right Evanes, goto www.serv-u.com <br>and read the help file.<br> Desperados169 u r very "1337" goto <br>gaylord24.de and suck my dick.</td> </tr> <tr><td height="10"></td></tr> <tr> <td><img src="point.gif"></td><td><i>Think about the others .. ?</i></td> </tr> <tr> <td></td><td>And the others fucking fxp groups <br>and public hax0rs boards GO OFFLINE AND DIE ... <br>We will find YOU and KILL YOU .... Biatch!</td> </tr> <tr><td height="10"></td></tr> <tr> <td><img src="point.gif"></td><td><i>Visit ...</i></td> </tr> <tr> <td></td><td><a href="hall.html">Hall OF Fame</a></td> </tr> <tr><td height="10"></td></tr> <tr> <td><img src="point.gif"></td><td><i>gR³³tz flyin' out to ...</i></td> </tr> <tr> <td></td><td>sirius_, A1[B457],OvErRUN, ACiDRAiN, htp, Ronin </td> </tr> </table> </td> </tr> <tr> <td height="20"></td> </tr> <tr> <td align="center"> <font color="#40643D">:<b>:</b></font> bY CyberDead <font color="#40643D"><b>:</b>:</font> </td> </tr> </table> </body> </html> </pre></xmp></noscript> <!-- SZM VERSION="1.3" --> <script language="JavaScript" type="text/javascript"> <!-- var IVW="http://lycos.ivwbox.de/cgi-bin/ivw/CP/2B04APBA0000;"; document.write("<img src=\""+IVW+"?r="+escape(document.referrer)+"\" width=\"1\" height=\"1\" />"); // --> </script> <noscript> <img src="http://lycos.ivwbox.de/cgi-bin/ivw/CP/2B04APBA0000;" width="1" height="1" /> </noscript> <!-- /SZM --> <!-- SZMFRABO VERSION="1.1" --> <script language="JavaScript" type="text/javascript"> var szmvars="lycos//CP//2B04APBA0000"; </script> <script src="http://lycos.ivwbox.de/2004/01/survey.js" language="JavaScript" type="text/javascript"> </script> <!-- /SZMFRABO --> <script language="javascript" src="http://ads.tripod.lycos.de/ad/test_frame_size.js"></script> <script language="javascript"> if (!AD_clientWindowSize()) { document.write("<NOSC"+"RIPT>"); } </script> <script type="text/javascript"> function setCookie(name, value, expires, path, domain, secure) { var curCookie = name + "=" + escape(value) + ((expires) ? "; expires=" + expires.toGMTString() : "") + ((path) ? "; path=" + path : "") + ((domain) ? "; domain=" + domain : "") + ((secure) ? "; secure" : ""); document.cookie = curCookie; } var ad_url = "http://ads.tripod.lycos.de/ad/google/frame.php?_url="+escape(self.location)+"&gg_bg=&gg_template=&mkw=&cat=noref"; var ref=window.document.referrer; if(parent.LycosAdFrame) { if(parent.memberPage && parent.memberPage.document.title ) { parent.document.title=parent.memberPage.document.title; } if(parent.LycosAdFrame && parent.LycosAdFrame.location && (ref != "" && (ref+"?" != window.location) && (ref.substr(ref.length-1,1) != "/")) ) { parent.LycosAdFrame.location.replace(ad_url); } setCookie("adFrameForcePHP",0,0," "); parent.document.body.cols = "*,140"; } else if(top.LycosAdFrame && top.LycosAdFrame.location) { if ((ref != "" && (ref+"?" != top.window.location) && (ref.substr(ref.length-1,1) != "?"))) { top.LycosAdFrame.location.replace(ad_url); } setCookie("adFrameForcePHP",0,0," "); top.document.body.cols = "*,140"; } else { if (!window.opener) { setCookie("adFrameForcePHP",1,0," "); } else { setCookie("adFrameForcePHP",0,0," "); } } if (window.top.location.href.indexOf("http://mitglied.lycos.de")!=-1) { ad_frame = 1 ; window.top.document.body.cols="*,140" ; } function resizeGoogleAdFrame() { window.top.document.body.cols = "*,140"; } if (ad_frame == 1 && AD_clientWindowSize()) { setInterval("resizeGoogleAdFrame()", 30); } </script> <script language="javascript" src="http://ads.tripod.lycos.de/ad/popunder_lycos_update.php?CC=de"></script> <script type="text/javascript" src="http://ads.tripod.lycos.de/ad/ad.php?cat=noref&mkw=&CC=de&ord=315eb88c&adpref="></script> <!-- START RedSheriff Measurement V5.01 --> <!-- COPYRIGHT 2002 RedSheriff Limited --> <script language="JavaScript" type="text/javascript"><!-- var _rsCI='lycos-de'; var _rsCG='noref'; var _rsDT=1; var _rsSI=escape(window.location); var _rsLP=location.protocol.indexOf('https')>-1?'https:':'http:'; var _rsRP=escape(document.referrer); var _rsND=_rsLP+'//secure-uk.imrworldwide.com/'; if (parseInt(navigator.appVersion)>=4) { var _rsRD=(new Date()).getTime(); var _rsSE=0; var _rsSV=''; var _rsSM=0; _rsCL='<scr'+'ipt language="JavaScript" type="text/javascript" src="'+_rsND+'v5.js"><\/scr'+'ipt>'; } else { _rsCL='<img src="'+_rsND+'cgi-bin/m?ci='+_rsCI+'&cg='+_rsCG+'&si='+_rsSI+'&rp='+_rsRP+'">'; } document.write(_rsCL); //--></script> <noscript> <img src="//secure-uk.imrworldwide.com/cgi-bin/m?ci=lycos-de&cg=noref" alt=""> </noscript> <!-- END RedSheriff Measurement V5 -->[/code] | December 31, 2004, 12:17 AM |
UserLoser. | [code] <html> <head> <title>Junior English Vocabular Answers</title> <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1" /> <link rel="stylesheet" type="text/css" href="vocab/include/styles.css" /> <link rel="shortcut icon" href="favicon.ico" /> </head> <body> <div class="body"> <div class="menu"> - [ <a href="index.html">main</a> ] [ <b><a href="vocab">Vocabulary Answers</a></b> ] [ <b><a href="files">files</a></b> ] [ <b><a href="images">images</a></b> ] - </div> <hr /> <h1>UserLoser.net</h1><hr /> <p><b>Select a link at the top-middle of this page to get started...</b></p> <<a href="http://www.userloser.net/">userloser.net</a>><br /> </div> </body> </html> [/code] | December 31, 2004, 1:04 AM |
KkBlazekK | [code]<html> <head> <TiTlE>Go Away!</title> </head> <Body> <center><br> <br> <br> <br> <br> <b>Go Away!</b> </body> </html> [/code] Thing, your site owns mine. ;) Edit: Forgot Capital | December 31, 2004, 4:16 AM |
peofeoknight | Guys guys guys... without a doc type your pages are in quirks mode! Also, tables are teh suck, its all about css [code] <%@ Page enableViewState="False" Language="VB" debug="true"%> <%@ Import Namespace="System.Data" %> <%@ Import Namespace="System.Data.OLEDB" %> <%@ Import Namespace="System.Data.SqlClient" %> <%@ Import Namespace="System.Configuration" %> <%@ Import Namespace="System.Data.OLEDB" %> <script runat="server"> Sub Page_Load(Src As Object, E As EventArgs) 'populate the menu with db secondary pages menuconn = new OleDbConnection("Provider=sqloledb;Server=<removed>") Dim menufillcommand As oledbdataadapter dim menuitems as new dataset menufillcommand = new oledbdataadapter ("Select id, name from pages order by id desc", menuconn) menufillcommand.fill(menuitems, "thepages") pagelst.datasource=menuitems.tables("thepages").defaultview pagelst.databind() 'populate the blog Dim blogconn as OleDbConnection blogconn = new OleDbConnection("Provider=sqloledb;Server=<removed>") Dim blogfillcommand As oledbdataadapter dim blogposts as new dataset blogfillcommand = new oledbdataadapter ("Select title, postedby, posttime, comments, id, posts from tblposts order by id desc", blogconn) blogfillcommand.fill(blogposts, "theposts") newscol.datasource=blogposts.tables("theposts").defaultview newscol.databind() End Sub </script> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd"> <html> <head> <title>Right align</title> <style type="text/css" media="screen">@import "layout.css";</style> </head> <body> <div id="Header"><img src="banner.gif" alt="welcome!"/></div> <div id="frame"> <asp:repeater id="newscol" runat="server" EnableViewState="false"> <itemtemplate> <div class="Content2" > <h5 class="heading"> <%# DataBinder.Eval(Container.DataItem, "title") %> </h5> <p> <%# DataBinder.Eval(Container.DataItem, "posts") %> </p> <h5 class="footer"> posted by: <%# DataBinder.Eval(Container.DataItem, "postedby") %> at: <%# DataBinder.Eval(Container.DataItem, "posttime") %> <a href="/blog/comments.aspx?id=<%# DataBinder.Eval(Container.DataItem, "id") %>"> comments: <%# DataBinder.Eval(Container.DataItem, "comments") %> </a> </h5> </div> </itemtemplate> <alternatingitemtemplate> <div class="Content" > <h5 class="heading"> <%# DataBinder.Eval(Container.DataItem, "title") %> </h5> <p> <%# DataBinder.Eval(Container.DataItem, "posts") %> </p> <h5 class="footer"> posted by: <%# DataBinder.Eval(Container.DataItem, "postedby") %> at: <%# DataBinder.Eval(Container.DataItem, "posttime") %> <a href="/blog/comments.aspx?id=<%# DataBinder.Eval(Container.DataItem, "id") %>"> comments: <%# DataBinder.Eval(Container.DataItem, "comments") %> </a> </h5> </div> </alternatingitemtemplate> </asp:repeater> <div id="Menu"> <ul id="linklst"> <li><a href="/design/index.aspx">Main</a></li> <asp:repeater id="pagelst" runat="server" EnableViewState="false"> <itemtemplate> <li><a href="/design/secondary.aspx?pageid=<%# DataBinder.Eval(Container.DataItem, "id") %>"> <%# DataBinder.Eval(Container.DataItem, "name") %> </a></li> </itemtemplate> </asp:repeater> </ul> </div> <div id="footer">(c) + footer </div> </div> </body> </html> [/code] and here is the css [code] a:link {color:#000000;text-decoration:none;} a:visited {color:#000000;text-decoration:none;} a:hover {color:#788282;text-decoration:none;} a:active {color:#000000;text-decoration:none;} body { margin:0px; padding:0px; font-family:verdana, arial, helvetica, sans-serif; color:#333; background: url("side.gif") right top; background-attachment:fixed; background-repeat: no-repeat; background-color:#ffffff; } #Header { position:absolute; border:1px solid #000000; border-bottom:0px; margin-right:40px; right:0px; margin-top:1px; text-align: right; width:571px; height:180px; background-color:#C0C0C0; } #frame { position:absolute; border:1px solid #000000; border-left:1px solid #000000; margin-right:40px; margin-top:181px; right:0px; padding-left:10px; background-color:#ffffff; } #Menu { position:absolute; margin-right:10px; right:0px; top:0px; width:150px; } .Content { margin-right:150px; width:390px; border-left:1px solid #000000; border-top:1px solid #000000; text-align: left; padding-left:10px; padding-right:10px; margin-top:10px; margin-bottom:10px; } .Content2 { margin-right:150px; width:390px; border-right:1px solid #000000; border-top:1px solid #000000; text-align: left; padding-right:10px; padding-left:10px; margin-top:10px; margin-bottom:10px; } #footer { position:absolute; border:1px solid #000000; left:0px; margin-left:-1px; margin-top:10px; bottom:-20px; text-align: right; width:571px; background-color:#C0C0C0; } #linklst{ list-style-type: none; margin-top:10px; } h5.heading { margin-bottom: -10px; margin-top:0px; } h5.footer { margin-bottom:0px; margin-top:0px; } p { margin-bottom:5px; } [/code] | December 31, 2004, 5:44 AM |
Thing | I didn't write the code that I posted above. A local webhosting company had one of their servers compromised last Tuesday and the owner asked me to investigate. I found this page in one of the site files. The kids brute forced a weak ftp password and uploded that page. Amateurs. | December 31, 2004, 1:39 PM |
peofeoknight | Well all of the text on that page did look very insulting.... What kind of auth was the ftp server using? I bet the password was something obvious and stupid. So thing, one of the lycos subsidiaries is a local hosting company where you are? I did not think they even used ftp :-X | December 31, 2004, 4:27 PM |