|
teamer
|
 |
« Reply #15 on: August 13, 2008, 10:41:03 AM » |
|
hahaha , lol , thanks for all your replies guys , acually my first question was , "is that ethical" well it turned to be not , acually i got get an FTP access to thier webserver which turned to be windows XP !!! , they had FTP ,SMPT , MSSQL and IIS running on the same server (or a pc) , these open ports were routed to a one windows XP server , not to bother my self , i went to the university with an old laptop of mine , i have made a small application on VB6 (really silly huh ? but it saves time alot) to connect to the 21 port it send generated password "0-9 a-z A-Z" , acually i just guessed the username because most of the people just love how "ADMIN" sounds , so it was admin ... i didn't find any difiiculty in blugging the laptop in elec. and hiding it to the following day hoping thier FTP server won't crash down or just block the 21 port ... well , it didn't , and the second day i went early in the morning to the university to find that the password was "ADMIN2008" <<< pretty tough !!! i could try it without this generator stuff !!! , i connected to the FTP server , after cheking the admins room is empty -as always- (acually i was sitting in the library infront of a doo which was labeled 'network administration') which turned to be the everything in the university . s after i connected to the FTP , there were asp files and other stuff , which was the universities web site !!!! , i tried to make a small PH file with an echo command , it worked and the server had a PHP extention , so i uploaded a folder which contained a script to manage the database (like phpmyadmin , but i was who made that one) , and acually could connect to thier database (after i got all information i needed from a config.asp file 'silly admins') , after little browsing for the database , i found that i could do what ever i wated , but acually i just was wondering if i could do that , and changed nothing because i already told that guy "i wont risk" . then i deleted the folder with the scripts , the test file "echo" and made a small txt file with "you have been hacked , change ur FTP password" .
later i printed a small paper with "you have been hacked , check hacked.txt on webserver root" and sticked that paper on the "network administration" door when the library became embty . they don't have srcurity cams there also so don't worry .
i just wanted to learn , and maybe to avoid a mistake later on .
now i have installed linux ubuntu as a virtual OS guest on my vista laptop ... i made 3 clones and i have 3 linuxes running , every linux has an apachi server running on port 80 ... how can i route connections coming frm the internet to my router to each apachi ??
i have 3 domains
domain 1 > connects to my wireless router port 80 domain 2 > connects to my wireless router port 81 domain 3 > connects to my wireless router port 82
how can i make port the router route port 80 to port 80 on the 1st linux
how can i make port the router route port 81 to port 80 on the 2nd linux
how can i make port the router route port 82 to port 80 on the 3rd linux
i want to learn this virtual server hosting stuff , do they work like this anyway ?
thank you all in advance
|