Video - Owning pBot - Server

Some kids run pBot and Unrealircd on some vuln/hijacked server :P

Owned - Malware - www.bravo-archiv.de

http://pedump.me/dcc343d52fe7a8fa6ce44b0a56d5481d/#info

Malware hosted on FlinkISO server - www.flinkiso.com

// Link 
http://www.flinkiso.com/
http://www.flinkiso.com/phpinfo.php
// Admins
Super User - flinkadmin - administrator@flinkiso.com - 
7bea0b406bc7d4fdca4dcdbfcb1f5eb2:H5BibKf5lSMWLu1K6FHVwIqvVGEwhUFE
Super User - admin - mayureshvaidya@gmail.com - 4df7fd11965981a9d5589689327313da:2Ey844V7o28nTgqTvFo1o23QohMOhiGl
// Admin Path
http://www.flinkiso.com/administrator/
// Configuration.php
class JConfig {
 public $offline = '0';
 public $offline_message = 'This site is down for maintenance.
 We are working on further enhancing your experience. Please check back again soon.';
 public $display_offline_message = '1';
 public $offline_image = '';
 public $sitename = 'www.flinkiso.com';
 public $editor = 'none';
 public $captcha = '0';
 public $list_limit = '20';
 public $access = '4';
 public $debug = '0';
 public $debug_lang = '0';
 public $dbtype = 'mysql';
 public $host = 'localhost';
 public $user = 'root';
 public $password = '';
 public $db = 'flinkisobeta';
 public $dbprefix = 'm5b0z_';
 public $live_site = '';
 public $secret = '0gAFlfZPMYlfMfEQ';
 public $gzip = '1';
 public $error_reporting = 'none';
 public $helpurl = 'http://help.joomla.org/proxy/index.php?option=com_help&keyref=Help{major}{minor}:{keyref}';
 public $ftp_host = '127.0.0.1';
 public $ftp_port = '21';
 public $ftp_user = '';
 public $ftp_pass = '';
 public $ftp_root = '';
 public $ftp_enable = '0';
 public $offset = 'Asia/Kolkata';
 public $mailer = 'mail';
 public $mailfrom = 'contact@flinkiso.com';
 public $fromname = 'www.flinkiso.com';
 public $sendmail = '/usr/sbin/sendmail';
 public $smtpauth = '0';
 public $smtpuser = 'contact@flinkiso.com';
 public $smtppass = 'Flinkiso@004';
 public $smtphost = 'flinkiso.com';
 public $smtpsecure = 'none';
 public $smtpport = '25';
 public $caching = '0';
 public $cache_handler = 'file';
 public $cachetime = '15';
 public $MetaDesc = '';
 public $MetaKeys = '';

Hacked - 120.63.157.195 - Zeus Bot

 

 

// Zeus Malware 
hxxps://zeustracker.abuse.ch/monitor.php?host=120.63.157.195
// Control Panel 
http://120.63.157.195:8080/webalizer/lampp/papaclick.php
user: admin
pass: admin88

Sorry was off long time !!

Reason is work and real life shit well be back soon !! Hope we have better big bots to own :D and clear some good sites :)