Full Lizard Squad Dox


SUBMITTED BY: Guest

DATE: Dec. 27, 2014, 2:39 p.m.

FORMAT: Text only

SIZE: 81.3 kB

HITS: 1156

  1. ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
  2. : The Dox :
  3. :All information in this document has been cited to provide beyond a reasonable:
  4. : doubt that such information is wholly truthful and accurate. Information that:
  5. : could be confirmed quickly and efficiently through traditional communications:
  6. : channels has been confirmed. :
  7. : :
  8. : Information provided herein is to be used for solicitation and harassment :
  9. : purposes only. Any legal use of this document is not of our concern. :
  10. ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
  11. : The Following Was Obtained From Bell Canada :
  12. ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
  13. : Name : Devin Bharath :
  14. : Street : 1765 Lawrence Avenue East #310 :
  15. : City : Toronto :
  16. : District: Scarborough :
  17. : Zip Code: M1R 2X8 :
  18. : Province: Ontario :
  19. : Country : Canada :
  20. : Phone : (647)-779-7927 (Mobile) :
  21. : : (647)-476-4910 (Old Number) :
  22. : Known Aliases: Chf, Chief, Thought, ThoughtTheGod, Devo, DevoZX :
  23. : Known IPs: 174.95.129.149 AS577 174.95.128.0/22 Sympatico HSE :
  24. : 174.95.131.93 :
  25. : 65.95.174.188 AS57765. 95.172.0/22 Sympatico HSE :
  26. : :
  27. : Current IP: 174.95.129.149 3/10/2014: :
  28. : Police Dept. Number: +14168082222 :
  29. ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
  30. : Family :
  31. ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
  32. : Immediate Family: :
  33. : Omatie Pathay Mother :
  34. : (Couva Savannah Village, Caroni, Trinidad And Tobago) :
  35. : Nickey Pathay Half-Sister :
  36. : Daryll Pathay Half-Brother (416-998-9135) :
  37. : Samoondar Great-Grandfather :
  38. : (No last name, died at the age of 101, Indian slave) :
  39. : Extended Family: :
  40. : Nisa Ali Cousin :
  41. : Sheldon Mundoo Cousin :
  42. : Tenisa Sawh Cousin :
  43. : Rajesh Maharaj Mother's Cousin :
  44. : http://www.news.gov.tt/archive//E-Gazette/Gazette%202000/G%20235.pdf :
  45. : http://facebook.com/maharajahh :
  46. : :
  47. : Devin's step-father, Oma's late husband, died of cancer. :
  48. ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
  49. : Accounts :
  50. ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
  51. : Twitter : ChFtheCat | https://twitter.com/chFtheCat :
  52. : : (DM's Accessed) | http://illegal.hacked.jp/dms.txt :
  53. : Facebook : devin.bharath (Jacked) | https://www.facebook.com/devin.bharath:
  54. : : shoobly (Jacked) | https://www.facebook.com/shoobly :
  55. : Skype : e.v.o.l.v.e | :
  56. : : h.o.m.o.s.e.x.u.a.l | :
  57. : : chftheantichrist | :
  58. : : steadmanthecat | :
  59. : : theshoobly | :
  60. : : devozzorz | :
  61. : ClubPenguin : Devo12345 | :
  62. : AIM : Devo12345t, chart | Buddy list for chart available at :
  63. : (chart jacked) | http://illegal.hacked.jp/blist.xml :
  64. : HackForums : DevoZX | http://www.hackforums.net/member.php? :
  65. : : UID: 1312370 | action=profile&uid=1312370 :
  66. : LeakForums : Thought (12347) | http://leak.sx/user-12347 :
  67. : IGN Blog : DevoZX | http://www.ign.com/boards/members/ :
  68. : | devozx.4398736/ :
  69. : Playstation : DevoZZX | https://i.imgur.com/alM1OK2.png :
  70. : Minecraft : DevoZX | :
  71. ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
  72. : Emails :
  73. ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
  74. : devinbharath@hotmail.com | Mirrored http://illegal.hacked.jp/chfemail.tgz :
  75. : devinbharath@rocketmail.com | Expired :
  76. : devinbharath@gmail.com | Mirrored http://illegal.hacked.jp/chfgmail.zip :
  77. : devin@fbi.al | Jacked, Still owned. :
  78. : devozx@gmail.com | Accessed, Nothing of Value :
  79. ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
  80. : Passwords :
  81. ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
  82. : Bharath (Very Secure) :
  83. : Bharath1 (Sometimes a number is required I guess) :
  84. : Bharath12 (I am starting to see a pattern... Root PW and most commonly used) :
  85. : Bharath1. (Curveball! Symbol requirement detected) :
  86. : loldongs123 :
  87. : loldongs1234 :
  88. : hackers1234 :
  89. : :
  90. : Secret Questions & Answers :
  91. : Father's Hometown | Toronto :
  92. : Your Hometown | Toronto :
  93. : First Pet's Name | Tyson :
  94. : All other Questions | poop :
  95. ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
  96. : Roto-Rooted Hemi-Weekly :
  97. ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
  98. : For all Devin's claims to his friends of being a 'computer genius' and a :
  99. : 'hacker' it was surprisingly simple to root his box. Not once, not twice, but:
  100. : thrice it was rooted. What follows is a recounting of those events. :
  101. : :
  102. : Chief's Box: http://illegal.hacked.jp/chf-data.tar.gz :
  103. : :
  104. : The First Rooting: :
  105. : Through a bug in a ZNC service that Devin had set up for his friends, we :
  106. : were able to attain a shell. He handed out passwords to an admin account :
  107. : thinking it was only useful for creating/deleting other accounts, and :
  108. : found out shortly after that this was not the case. ZNC has this amazing :
  109. : thing called module loading, and an interesting "shell" module packed :
  110. : with it by default... I think you can see where we're going from here. :
  111. : Anyway, after this shell was gotten, we replaced his "su" binary with a :
  112. : bash function that logged his password, "Bharath12". From there, we just :
  113. : used the actual su and got root. :
  114. : :
  115. : The Second Rooting: :
  116. : Through a bug in gandi-agent, which is included in gandi's filesystem :
  117. : image on most of their servers; we opened up a socket on tcp/842 to :
  118. : trigger its execution. No need to escalate privilege level as we were :
  119. : already uid0. From there instead of zero'ing out the drive we overwrote :
  120. : the drive with the string 'faggot'. :
  121. : :
  122. : The Third Rooting: :
  123. : Through a remote chunked overflow exploit effecting Nginx+Apache/FastCGI, :
  124. : specific versions of Nginx are _NOT_ compiled with /GS flag which adds a :
  125. : cookie copied from the .data segment to the stack; and NX was handled :
  126. : by avoiding NX protected regions by jmp'ing from one part of the ROP :
  127. : chain to the next. The final payload was self-modifying (Polymorphic) :
  128. : After this, the su backdoor was used again to get uid0 :
  129. : :
  130. ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
  131. : Chief.cat Logins :
  132. ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
  133. : root@litterbox:/home/admin# last -a && rm -rf /* # yellow :
  134. : admin pts/0 Sat Feb 15 18:09 still logged in :
  135. : bas2-toronto36-3096723353.dsl.bell.ca :
  136. : admin pts/0 Sat Feb 15 07:00 - 10:00 (03:00) se4x.mullvad.net :
  137. : admin pts/0 Sat Feb 15 01:27 - 06:44 (05:16) nl1x.mullvad.net :
  138. : reboot system boot Sat Feb 15 01:23 - 05:19 (1+03:55) :
  139. : 3.2.53-xenU-8869-x86_64 <--- the part where he finds out he's owned :
  140. : admin pts/0 Fri Jan 31 23:46 gone - no logout us2x.mullvad.net :
  141. : admin pts/0 Thu Jan 30 18:55 - 18:56 (00:01) 38.116.192.13 :
  142. : admin pts/0 Wed Jan 29 22:24 - 08:35 (10:11) us1x.mullvad.net :
  143. : admin pts/0 Wed Jan 29 05:24 - 08:34 (03:10) us1x.mullvad.net :
  144. : admin pts/0 Wed Jan 29 00:30 - 02:34 (02:04) us1x.mullvad.net :
  145. : admin pts/0 Tue Jan 28 21:54 - 22:25 (00:31) us1x.mullvad.net :
  146. : admin pts/0 Tue Jan 28 05:40 - 09:40 (03:59) us1x.mullvad.net :
  147. : admin pts/0 Sun Jan 26 22:37 - 09:49 (11:11) us1x.mullvad.net :
  148. : admin pts/0 Sat Jan 25 09:40 - 13:40 (03:59) us1x.mullvad.net :
  149. : admin pts/0 Sat Jan 25 08:14 - 08:18 (00:03) us1x.mullvad.net :
  150. : admin pts/0 Sat Jan 25 01:32 - 03:54 (02:22) us1x.mullvad.net :
  151. : admin pts/0 Fri Jan 24 06:56 - 10:15 (03:18) us1x.mullvad.net :
  152. : admin pts/0 Fri Jan 24 02:40 - 02:41 (00:00) us1x.mullvad.net :
  153. : admin pts/0 Thu Jan 23 19:31 - 20:40 (01:08) us1x.mullvad.net :
  154. : admin pts/0 Thu Jan 23 01:22 - 12:24 (11:02) us1x.mullvad.net :
  155. : admin pts/0 Wed Jan 22 19:50 - 00:07 (04:16) us1x.mullvad.net :
  156. : admin pts/0 Wed Jan 22 03:45 - 10:08 (06:22) us1x.mullvad.net :
  157. : admin pts/2 Wed Jan 22 01:17 - 05:29 (04:11) us1x.mullvad.net :
  158. : admin pts/0 Tue Jan 21 23:20 - 02:47 (03:26) us1x.mullvad.net :
  159. : admin pts/0 Sun Jan 19 23:50 - 06:01 (06:11) us1x.mullvad.net :
  160. : admin pts/0 Sun Jan 19 21:27 - 22:11 (00:44) us1x.mullvad.net :
  161. : admin pts/0 Sun Jan 19 05:03 - 13:14 (08:11) se4x.mullvad.net :
  162. : admin pts/0 Sun Jan 19 01:50 - 04:02 (02:12) nl5x.mullvad.net :
  163. : admin pts/0 Sat Jan 18 20:58 - 00:46 (03:48) nl5x.mullvad.net :
  164. : admin pts/0 Fri Jan 17 23:32 - 07:44 (08:11) de2x.mullvad.net :
  165. : admin pts/0 Thu Jan 16 18:30 - 19:41 (01:10) 38.116.192.13 :
  166. : admin pts/0 Thu Jan 16 15:57 - 15:58 (00:01) 38.116.192.13 :
  167. : admin pts/0 Wed Jan 15 22:34 - 01:44 (03:10) us1x.mullvad.net :
  168. : admin pts/0 Tue Jan 14 15:38 - 15:45 (00:06) 38.116.192.13 :
  169. : admin pts/0 Mon Jan 13 22:09 - 02:09 (03:59) us1x.mullvad.net :
  170. : admin pts/0 Mon Jan 13 07:02 - 09:14 (02:11) 70.51.113.87 :
  171. : admin pts/0 Mon Jan 13 02:24 - 02:27 (00:02) 70.51.113.87 :
  172. : admin pts/0 Sun Jan 12 02:15 - 09:15 (07:00) us1x.mullvad.net :
  173. : admin pts/0 Sat Jan 11 23:53 - 00:53 (01:00) :
  174. : bas6-toronto06-845459412.dsl.bell.ca :
  175. : admin pts/0 Sat Jan 11 04:42 - 09:52 (05:09) :
  176. : bas6-toronto06-845459412.dsl.bell.ca :
  177. : admin pts/0 Sat Jan 11 00:02 - 04:13 (04:11) 70.51.113.87 :
  178. : admin pts/0 Sat Jan 11 00:01 - 00:02 (00:00) 70.51.113.87 :
  179. : admin pts/0 Fri Jan 10 23:56 - 23:58 (00:02) 70.51.113.87 :
  180. : admin pts/0 Fri Jan 10 12:23 - 17:34 (05:11) 70.51.113.87 :
  181. : admin pts/0 Thu Jan 9 22:17 - 04:09 (05:52) 70.51.113.87 :
  182. : admin pts/0 Thu Jan 9 06:26 - 09:37 (03:11) 70.51.113.87 :
  183. : admin pts/0 Wed Jan 8 22:55 - 02:06 (03:11) 70.51.113.87 :
  184. : admin pts/2 Wed Jan 8 04:01 - 09:12 (05:10) 70.51.113.87 :
  185. : admin pts/0 Wed Jan 8 01:44 - 04:07 (02:22) 70.51.113.87 :
  186. : admin pts/0 Tue Jan 7 01:23 - 05:34 (04:11) 70.51.113.87 :
  187. : admin pts/0 Mon Jan 6 19:28 - 19:32 (00:04) 38.116.192.13 :
  188. : admin pts/0 Sun Jan 5 08:08 - 12:08 (04:00) nl9x.mullvad.net :
  189. : admin pts/0 Thu Jan 2 23:09 - 12:51 (13:41) :
  190. : bas2-toronto36-3096722477.dsl.bell.ca :
  191. : admin pts/2 Thu Jan 2 02:48 - 11:59 (09:11) :
  192. : bas2-toronto36-3096722477.dsl.bell.ca :
  193. : admin pts/0 Wed Jan 1 21:20 - 04:31 (07:11) :
  194. : bas2-toronto36-3096722904.dsl.bell.ca :
  195. : admin pts/3 Wed Jan 1 02:38 - 11:49 (09:11) :
  196. : bas2-toronto36-3096722904.dsl.bell.ca :
  197. ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
  198. : Access Logs From Shell on Rtainc's Server :
  199. ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
  200. : rtaincin.rtaink.com:65.95.174.188 - - [03/Mar/2014:06:48:41 -0600] :
  201. :"POST /images/cgi/sh.xx HTTP/1.1" 200 6516 "http://rtainc.in/images/cgi/sh.xx":
  202. : "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) :
  203. : Chrome/33.0.1750.117 Safari/537.36" :
  204. : :
  205. : rtaincin.rtaink.com:65.95.174.188 - - [03/Mar/2014:06:48:49 -0600] :
  206. :"POST /images/cgi/sh.xx HTTP/1.1" 200 6652 "http://rtainc.in/images/cgi/sh.xx":
  207. : "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) :
  208. : Chrome/33.0.1750.117 Safari/537.36" :
  209. : :
  210. : rtaincin.rtaink.com:65.95.174.188 - - [03/Mar/2014:06:48:53 -0600] :
  211. :"POST /images/cgi/sh.xx HTTP/1.1" 200 6550 "http://rtainc.in/images/cgi/sh.xx":
  212. : "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) :
  213. : Chrome/33.0.1750.117 Safari/537.36" :
  214. : :
  215. : rtaincin.rtaink.com:65.95.174.188 - - [03/Mar/2014:06:48:57 -0600] :
  216. :"POST /images/cgi/sh.xx HTTP/1.1" 200 7421 "http://rtainc.in/images/cgi/sh.xx":
  217. : "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) :
  218. : Chrome/33.0.1750.117 Safari/537.36" :
  219. : :
  220. : rtaincin.rtaink.com:65.95.174.188 - - [03/Mar/2014:06:49:06 -0600] :
  221. :"POST /images/cgi/sh.xx HTTP/1.1" 200 6934 "http://rtainc.in/images/cgi/sh.xx":
  222. :"Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) :
  223. : Chrome/33.0.1750.117 Safari/537.36" :
  224. : :
  225. : rtaincin.rtaink.com:65.95.174.188 - - [03/Mar/2014:06:49:12 -0600] :
  226. :"POST /images/cgi/sh.xx HTTP/1.1" 200 7422 "http://rtainc.in/images/cgi/sh.xx":
  227. :"Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) :
  228. : Chrome/33.0.1750.117 Safari/537.36" :
  229. : :
  230. : rtaincin.rtaink.com:65.95.174.188 - - [03/Mar/2014:06:49:15 -0600] :
  231. :"POST /images/cgi/sh.xx HTTP/1.1" 200 6653 "http://rtainc.in/images/cgi/sh.xx":
  232. :"Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) :
  233. : Chrome/33.0.1750.117 Safari/537.36" :
  234. : :
  235. : rtaincin.rtaink.com:65.95.174.188 - - [03/Mar/2014:06:49:48 -0600] :
  236. :"POST /images/cgi/sh.xx HTTP/1.1" 200 9617 "http://rtainc.in/images/cgi/sh.xx":
  237. :"Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) :
  238. : Chrome/33.0.1750.117 Safari/537.36" :
  239. : :
  240. : rtaincin.rtaink.com:65.95.174.188 - - [03/Mar/2014:06:49:52 -0600] :
  241. :"POST /images/cgi/sh.xx HTTP/1.1" 200 6673 "http://rtainc.in/images/cgi/sh.xx":
  242. : "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) :
  243. : Chrome/33.0.1750.117 Safari/537.36" :
  244. : :
  245. : :
  246. : :
  247. â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“
  248. Well, my dox really isn't the most functional.
  249. Full name: Devin Stephen Bharath
  250. DoB: September 27th 1999
  251. Cell Phone: 647 779 7927 (Also used as my main 2step device, get at me skids)
  252. New Twitters: @notdevinlol @imdevinlol
  253. AIM: Bell
  254. Skype: Demand, airplane, theshoobly, astraeuz
  255. Pastebin: /u/Thought, someone jacked it though
  256. Old twitters: @chfkf @chfkeef @gg_chF and like 20 others that got suspended because i'm a criminal
  257. I also reside at the address 1231 Warden Avenue Toronto Ontario from time to time.
  258. Also I do not have a dead step father, I have no clue where that came from.
  259. Moar emailz:
  260. Devinnnz@gmail.com
  261. chf@love.com
  262. And there are also a bunch of db entries under Devin@fbi.al, pws are all some sort of variation on 'Bharath'.
  263. Good luck hacking me, faggots!
  264. ~chF aka LiL DeVo
  265. â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“â–“
  266. We deface and fuck devin bharath forum hard...
  267. Archive: http://web.archive.org/web/20140520085650/http://puppet.zone/
  268. http://rghost.net/55425216 <-- MySQL User DB Backup
  269. http://rghost.net/55425228 <-- Cleartext passwords
  270. dump php info .. fuck ripprs...
  271. PHP Version 5.4.4-14+deb7u9
  272. System Linux boxbox 3.2.0-4-amd64 #1 SMP Debian 3.2.41-2 x86_64
  273. Build Date Apr 18 2014 14:34:27
  274. Server API Apache 2.0 Handler
  275. Virtual Directory Support disabled
  276. Configuration File (php.ini) Path /etc/php5/apache2
  277. Loaded Configuration File /etc/php5/apache2/php.ini
  278. Scan this dir for additional .ini files /etc/php5/apache2/conf.d
  279. Additional .ini files parsed /etc/php5/apache2/conf.d/10-pdo.ini, /etc/php5/apache2/conf.d/20-curl.ini, /etc/php5/apache2/conf.d/20-gd.ini, /etc/php5/apache2/conf.d/20-mcrypt.ini, /etc/php5/apache2/conf.d/20-mysql.ini, /etc/php5/apache2/conf.d/20-mysqli.ini, /etc/php5/apache2/conf.d/20-pdo_mysql.ini
  280. PHP API 20100412
  281. PHP Extension 20100525
  282. Zend Extension 220100525
  283. Zend Extension Build API220100525,NTS
  284. PHP Extension Build API20100525,NTS
  285. Debug Build no
  286. Thread Safety disabled
  287. Zend Signal Handling disabled
  288. Zend Memory Manager enabled
  289. Zend Multibyte Support provided by mbstring
  290. IPv6 Support enabled
  291. DTrace Support disabled
  292. Registered PHP Streams https, ftps, compress.zlib, compress.bzip2, php, file, glob, data, http, ftp, phar, zip
  293. Registered Stream Socket Transports tcp, udp, unix, udg, ssl, sslv3, tls
  294. Registered Stream Filters zlib.*, bzip2.*, convert.iconv.*, string.rot13, string.toupper, string.tolower, string.strip_tags, convert.*, consumed, dechunk, mcrypt.*, mdecrypt.*
  295. This program makes use of the Zend Scripting Language Engine:
  296. Zend Engine v2.4.0, Copyright (c) 1998-2012 Zend Technologies
  297. Configuration
  298. apache2handler
  299. Apache Version Apache/2.2.22 (Debian)
  300. Apache API Version 20051115
  301. Server Administrator webmaster@localhost
  302. Hostname:Port 80.82.64.142:80
  303. User/Group www-data(33)/33
  304. Max Requests Per Child: 0 - Keep Alive: on - Max Per Connection: 100
  305. Timeouts Connection: 300 - Keep-Alive: 5
  306. Virtual Server Yes
  307. Server Root /etc/apache2
  308. Loaded Modules core mod_log_config mod_logio mod_version prefork http_core mod_so mod_alias mod_auth_basic mod_authn_file mod_authz_default mod_authz_groupfile mod_authz_host mod_authz_user mod_autoindex mod_cloudflare mod_deflate mod_dir mod_env mod_mime mod_evasive20 mod_security2 mod_negotiation mod_php5 mod_reqtimeout mod_setenvif mod_status mod_unique_id
  309. Directive Local Value Master Value
  310. engine 1 1
  311. last_modified 0 0
  312. xbithack 0 0
  313. Apache Environment
  314. Variable Value
  315. UNIQUE_ID U3sCRVBSQI4AABbjH0MAAAAA
  316. HTTP_HOST puppet.zone
  317. HTTP_USER_AGENT Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Firefox/24.0
  318. HTTP_ACCEPT text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  319. HTTP_ACCEPT_LANGUAGE en-us,en;q=0.5
  320. HTTP_ACCEPT_ENCODING gzip, deflate
  321. HTTP_REFERER http://puppet.zone/admin/index.php?module=tools-php_info
  322. HTTP_COOKIE mybb[lastvisit]=1400569628; mybb[lastactive]=1400570403; sid=7ba0b4a3b24d723e364cbd88127e2173; acploginattempts=0; adminsid=398b0ca7d517eea804b0da5ef40ddd15
  323. HTTP_CONNECTION keep-alive
  324. PATH /usr/local/bin:/usr/bin:/bin
  325. SERVER_SIGNATURE
  326. Apache/2.2.22 (Debian) Server at puppet.zone Port 80
  327. SERVER_SOFTWARE Apache/2.2.22 (Debian)
  328. SERVER_NAME puppet.zone
  329. SERVER_ADDR 80.82.64.142
  330. SERVER_PORT 80
  331. REMOTE_ADDR 77.109.139.87
  332. DOCUMENT_ROOT /var/www
  333. SERVER_ADMIN webmaster@localhost
  334. SCRIPT_FILENAME /var/www/admin/index.php
  335. REMOTE_PORT 54187
  336. GATEWAY_INTERFACE CGI/1.1
  337. SERVER_PROTOCOL HTTP/1.1
  338. REQUEST_METHOD GET
  339. QUERY_STRING module=tools-php_info&action=phpinfo
  340. REQUEST_URI /admin/index.php?module=tools-php_info&action=phpinfo
  341. SCRIPT_NAME /admin/index.php
  342. HTTP Headers Information
  343. HTTP Request Headers
  344. HTTP Request GET /admin/index.php?module=tools-php_info&action=phpinfo HTTP/1.1
  345. Host puppet.zone
  346. User-Agent Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Firefox/24.0
  347. Accept text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  348. Accept-Language en-us,en;q=0.5
  349. Accept-Encoding gzip, deflate
  350. Referer http://puppet.zone/admin/index.php?module=tools-php_info
  351. Cookie mybb[lastvisit]=1400569628; mybb[lastactive]=1400570403; sid=7ba0b4a3b24d723e364cbd88127e2173; acploginattempts=0; adminsid=398b0ca7d517eea804b0da5ef40ddd15
  352. Connection keep-alive
  353. HTTP Response Headers
  354. bcmath
  355. BCMath support enabled
  356. Directive Local Value Master Value
  357. bcmath.scale 0 0
  358. bz2
  359. BZip2 Support Enabled
  360. Stream Wrapper support compress.bzip2://
  361. Stream Filter support bzip2.decompress, bzip2.compress
  362. BZip2 Version 1.0.6, 6-Sept-2010
  363. calendar
  364. Calendar support enabled
  365. Core
  366. PHP Version 5.4.4-14+deb7u9
  367. Directive Local Value Master Value
  368. allow_url_fopen On On
  369. allow_url_include Off Off
  370. always_populate_raw_post_data Off Off
  371. arg_separator.input & &
  372. arg_separator.output & &
  373. asp_tags Off Off
  374. auto_append_file no value no value
  375. auto_globals_jit On On
  376. auto_prepend_file no value no value
  377. browscap no value no value
  378. default_charset no value no value
  379. default_mimetype text/html text/html
  380. disable_classes no value no value
  381. disable_functions pcntl_alarm,pcntl_fork,pcntl_exec,exec,shell_exec,system,passthru,popen,proc_open,virtual pcntl_alarm,pcntl_fork,pcntl_exec,exec,shell_exec,system,passthru,popen,proc_open,virtual
  382. display_errors Off Off
  383. display_startup_errors Off Off
  384. doc_root no value no value
  385. docref_ext no value no value
  386. docref_root no value no value
  387. enable_dl Off Off
  388. enable_post_data_reading On On
  389. error_append_string no value no value
  390. error_log no value no value
  391. error_prepend_string no value no value
  392. error_reporting 21495 22527
  393. exit_on_timeout Off Off
  394. expose_php Off Off
  395. extension_dir /usr/lib/php5/20100525 /usr/lib/php5/20100525
  396. file_uploads On On
  397. highlight.comment #FF8000 #FF8000
  398. highlight.default #0000BB #0000BB
  399. highlight.html #000000 #000000
  400. highlight.keyword #007700 #007700
  401. highlight.string #DD0000 #DD0000
  402. html_errors On On
  403. ignore_repeated_errors Off Off
  404. ignore_repeated_source Off Off
  405. ignore_user_abort Off Off
  406. implicit_flush Off Off
  407. include_path .:/usr/share/php:/usr/share/pear .:/usr/share/php:/usr/share/pear
  408. log_errors On On
  409. log_errors_max_len 1024 1024
  410. mail.add_x_header On On
  411. mail.force_extra_parameters no value no value
  412. mail.log no value no value
  413. max_execution_time 30 30
  414. max_file_uploads 20 20
  415. max_input_nesting_level 64 64
  416. max_input_time 60 60
  417. max_input_vars 1000 1000
  418. memory_limit 128M 128M
  419. open_basedir /var/www:/tmp /var/www:/tmp
  420. output_buffering 4096 4096
  421. output_handler no value no value
  422. post_max_size 8M 8M
  423. precision 14 14
  424. realpath_cache_size 16K 16K
  425. realpath_cache_ttl 120 120
  426. register_argc_argv Off Off
  427. report_memleaks On On
  428. report_zend_debug On On
  429. request_order GP GP
  430. sendmail_from no value no value
  431. sendmail_path /usr/sbin/sendmail -t -i /usr/sbin/sendmail -t -i
  432. serialize_precision 17 17
  433. short_open_tag On On
  434. SMTP localhost localhost
  435. smtp_port 25 25
  436. sql.safe_mode Off Off
  437. track_errors Off Off
  438. unserialize_callback_func no value no value
  439. upload_max_filesize 100M 100M
  440. upload_tmp_dir no value no value
  441. user_dir no value no value
  442. user_ini.cache_ttl 300 300
  443. user_ini.filename .user.ini .user.ini
  444. variables_order GPCS GPCS
  445. xmlrpc_error_number 0 0
  446. xmlrpc_errors Off Off
  447. zend.detect_unicode On On
  448. zend.enable_gc On On
  449. zend.multibyte Off Off
  450. zend.script_encoding no value no value
  451. ctype
  452. ctype functions enabled
  453. curl
  454. cURL support enabled
  455. cURL Information 7.26.0
  456. Age 3
  457. Features
  458. AsynchDNS No
  459. Debug Yes
  460. GSS-Negotiate Yes
  461. IDN Yes
  462. IPv6 Yes
  463. Largefile Yes
  464. NTLM Yes
  465. SPNEGO No
  466. SSL Yes
  467. SSPI No
  468. krb4 No
  469. libz Yes
  470. CharConv No
  471. Protocols dict, file, ftp, ftps, gopher, http, https, imap, imaps, ldap, pop3, pop3s, rtmp, rtsp, scp, sftp, smtp, smtps, telnet, tftp
  472. Host x86_64-pc-linux-gnu
  473. SSL Version OpenSSL/1.0.1e
  474. ZLib Version 1.2.7
  475. libSSH Version libssh2/1.4.2
  476. date
  477. date/time support enabled
  478. "Olson" Timezone Database Version 0.system
  479. Timezone Database internal
  480. Default timezone GMT
  481. Directive Local Value Master Value
  482. date.default_latitude 31.7667 31.7667
  483. date.default_longitude 35.2333 35.2333
  484. date.sunrise_zenith 90.583333 90.583333
  485. date.sunset_zenith 90.583333 90.583333
  486. date.timezone no value no value
  487. dba
  488. DBA support enabled
  489. Supported handlers cdb cdb_make db4 inifile flatfile qdbm
  490. Directive Local Value Master Value
  491. dba.default_handler flatfile flatfile
  492. dom
  493. DOM/XML enabled
  494. DOM/XML API Version 20031129
  495. libxml Version 2.8.0
  496. HTML Support enabled
  497. XPath Support enabled
  498. XPointer Support enabled
  499. Schema Support enabled
  500. RelaxNG Support enabled
  501. ereg
  502. Regex Library Bundled library enabled
  503. exif
  504. EXIF Support enabled
  505. EXIF Version 1.4 $Id$
  506. Supported EXIF Version 0220
  507. Supported filetypes JPEG,TIFF
  508. Directive Local Value Master Value
  509. exif.decode_jis_intel JIS JIS
  510. exif.decode_jis_motorola JIS JIS
  511. exif.decode_unicode_intel UCS-2LE UCS-2LE
  512. exif.decode_unicode_motorola UCS-2BE UCS-2BE
  513. exif.encode_jis no value no value
  514. exif.encode_unicode ISO-8859-15 ISO-8859-15
  515. fileinfo
  516. fileinfo support enabled
  517. version 1.0.5
  518. filter
  519. Input Validation and Filtering enabled
  520. Revision $Id: e523cdc8829892d1b4f9cb7c3c57b2ba1c36b9ea $
  521. Directive Local Value Master Value
  522. filter.default unsafe_raw unsafe_raw
  523. filter.default_flags no value no value
  524. ftp
  525. FTP support enabled
  526. gd
  527. GD Support enabled
  528. GD Version 2.0
  529. FreeType Support enabled
  530. FreeType Linkage with freetype
  531. FreeType Version 2.4.9
  532. GIF Read Support enabled
  533. GIF Create Support enabled
  534. JPEG Support enabled
  535. libJPEG Version unknown
  536. PNG Support enabled
  537. libPNG Version 1.2.49
  538. WBMP Support enabled
  539. Directive Local Value Master Value
  540. gd.jpeg_ignore_warning 0 0
  541. gettext
  542. GetText Support enabled
  543. hash
  544. hash support enabled
  545. Hashing Engines md2 md4 md5 sha1 sha224 sha256 sha384 sha512 ripemd128 ripemd160 ripemd256 ripemd320 whirlpool tiger128,3 tiger160,3 tiger192,3 tiger128,4 tiger160,4 tiger192,4 snefru snefru256 gost adler32 crc32 crc32b fnv132 fnv164 joaat haval128,3 haval160,3 haval192,3 haval224,3 haval256,3 haval128,4 haval160,4 haval192,4 haval224,4 haval256,4 haval128,5 haval160,5 haval192,5 haval224,5 haval256,5
  546. iconv
  547. iconv support enabled
  548. iconv implementation glibc
  549. iconv library version 2.13
  550. Directive Local Value Master Value
  551. iconv.input_encoding ISO-8859-1 ISO-8859-1
  552. iconv.internal_encoding ISO-8859-1 ISO-8859-1
  553. iconv.output_encoding ISO-8859-1 ISO-8859-1
  554. json
  555. json support enabled
  556. json version 1.2.1
  557. libxml
  558. libXML support active
  559. libXML Compiled Version 2.8.0
  560. libXML Loaded Version 20800
  561. libXML streams enabled
  562. mbstring
  563. Multibyte Support enabled
  564. Multibyte string engine libmbfl
  565. HTTP input encoding translation disabled
  566. libmbfl version 1.3.2
  567. mbstring extension makes use of "streamable kanji code filter and converter", which is distributed under the GNU Lesser General Public License version 2.1.
  568. Multibyte (japanese) regex support enabled
  569. Multibyte regex (oniguruma) version 5.9.1
  570. Directive Local Value Master Value
  571. mbstring.detect_order no value no value
  572. mbstring.encoding_translation Off Off
  573. mbstring.func_overload 0 0
  574. mbstring.http_input pass pass
  575. mbstring.http_output pass pass
  576. mbstring.http_output_conv_mimetypes ^(text/|application/xhtml\+xml) ^(text/|application/xhtml\+xml)
  577. mbstring.internal_encoding no value no value
  578. mbstring.language neutral neutral
  579. mbstring.strict_detection Off Off
  580. mbstring.substitute_character no value no value
  581. mcrypt
  582. mcrypt support enabled
  583. mcrypt_filter support enabled
  584. Version 2.5.8
  585. Api No 20021217
  586. Supported ciphers cast-128 gost rijndael-128 twofish arcfour cast-256 loki97 rijndael-192 saferplus wake blowfish-compat des rijndael-256 serpent xtea blowfish enigma rc2 tripledes
  587. Supported modes cbc cfb ctr ecb ncfb nofb ofb stream
  588. Directive Local Value Master Value
  589. mcrypt.algorithms_dir no value no value
  590. mcrypt.modes_dir no value no value
  591. mhash
  592. MHASH support Enabled
  593. MHASH API Version Emulated Support
  594. mysql
  595. MySQL Support enabled
  596. Active Persistent Links 0
  597. Active Links 0
  598. Client API version 5.5.37
  599. MYSQL_MODULE_TYPE external
  600. MYSQL_SOCKET /var/run/mysqld/mysqld.sock
  601. MYSQL_INCLUDE -I/usr/include/mysql
  602. MYSQL_LIBS -L/usr/lib -lmysqlclient_r
  603. Directive Local Value Master Value
  604. mysql.allow_local_infile On On
  605. mysql.allow_persistent On On
  606. mysql.connect_timeout 60 60
  607. mysql.default_host no value no value
  608. mysql.default_password no value no value
  609. mysql.default_port no value no value
  610. mysql.default_socket /var/run/mysqld/mysqld.sock /var/run/mysqld/mysqld.sock
  611. mysql.default_user no value no value
  612. mysql.max_links Unlimited Unlimited
  613. mysql.max_persistent Unlimited Unlimited
  614. mysql.trace_mode Off Off
  615. mysqli
  616. MysqlI Support enabled
  617. Client API library version 5.5.37
  618. Active Persistent Links 0
  619. Inactive Persistent Links 0
  620. Active Links 1
  621. Client API header version 5.5.33
  622. MYSQLI_SOCKET /var/run/mysqld/mysqld.sock
  623. Directive Local Value Master Value
  624. mysqli.allow_local_infile On On
  625. mysqli.allow_persistent On On
  626. mysqli.default_host no value no value
  627. mysqli.default_port 3306 3306
  628. mysqli.default_pw no value no value
  629. mysqli.default_socket /var/run/mysqld/mysqld.sock /var/run/mysqld/mysqld.sock
  630. mysqli.default_user no value no value
  631. mysqli.max_links Unlimited Unlimited
  632. mysqli.max_persistent Unlimited Unlimited
  633. mysqli.reconnect Off Off
  634. openssl
  635. OpenSSL support enabled
  636. OpenSSL Library Version OpenSSL 1.0.1e 11 Feb 2013
  637. OpenSSL Header Version OpenSSL 1.0.1e 11 Feb 2013
  638. pcre
  639. PCRE (Perl Compatible Regular Expressions) Support enabled
  640. PCRE Library Version 8.30 2012-02-04
  641. Directive Local Value Master Value
  642. pcre.backtrack_limit 1000000 1000000
  643. pcre.recursion_limit 100000 100000
  644. PDO
  645. PDO support enabled
  646. PDO drivers mysql
  647. pdo_mysql
  648. PDO Driver for MySQL enabled
  649. Client API version 5.5.37
  650. Directive Local Value Master Value
  651. pdo_mysql.default_socket /var/run/mysqld/mysqld.sock /var/run/mysqld/mysqld.sock
  652. Phar
  653. Phar: PHP Archive support enabled
  654. Phar EXT version 2.0.1
  655. Phar API version 1.1.1
  656. SVN revision $Id: 2a47d3d0354109d8077e34d59f1228ccfd021d59 $
  657. Phar-based phar archives enabled
  658. Tar-based phar archives enabled
  659. ZIP-based phar archives enabled
  660. gzip compression enabled
  661. bzip2 compression enabled
  662. OpenSSL support enabled
  663. Phar based on pear/PHP_Archive, original concept by Davey Shafik.
  664. Phar fully realized by Gregory Beaver and Marcus Boerger.
  665. Portions of tar implementation Copyright (c) 2003-2009 Tim Kientzle.
  666. Directive Local Value Master Value
  667. phar.cache_list no value no value
  668. phar.readonly On On
  669. phar.require_hash On On
  670. posix
  671. Revision $Id: 967584c6fadb3467f31abe8e13caa8764df85867 $
  672. Reflection
  673. Reflection enabled
  674. Version $Id: 1cf65cee164ed57874ce2d29e5c46b82f6139524 $
  675. session
  676. Session Support enabled
  677. Registered save handlers files user
  678. Registered serializer handlers php php_binary wddx
  679. Directive Local Value Master Value
  680. session.auto_start Off Off
  681. session.cache_expire 180 180
  682. session.cache_limiter nocache nocache
  683. session.cookie_domain no value no value
  684. session.cookie_httponly Off Off
  685. session.cookie_lifetime 0 0
  686. session.cookie_path / /
  687. session.cookie_secure Off Off
  688. session.entropy_file /dev/urandom /dev/urandom
  689. session.entropy_length 32 32
  690. session.gc_divisor 1000 1000
  691. session.gc_maxlifetime 1440 1440
  692. session.gc_probability 0 0
  693. session.hash_bits_per_character 5 5
  694. session.hash_function 0 0
  695. session.name PHPSESSID PHPSESSID
  696. session.referer_check no value no value
  697. session.save_handler files files
  698. session.save_path /var/lib/php5 /var/lib/php5
  699. session.serialize_handler php php
  700. session.upload_progress.cleanup On On
  701. session.upload_progress.enabled On On
  702. session.upload_progress.freq 1% 1%
  703. session.upload_progress.min_freq 1 1
  704. session.upload_progress.name PHP_SESSION_UPLOAD_PROGRESS PHP_SESSION_UPLOAD_PROGRESS
  705. session.upload_progress.prefix upload_progress_ upload_progress_
  706. session.use_cookies On On
  707. session.use_only_cookies On On
  708. session.use_trans_sid 0 0
  709. shmop
  710. shmop support enabled
  711. SimpleXML
  712. Simplexml support enabled
  713. Revision $Id: 455280fc74f9f002b7314def7a456f6c3080eb92 $
  714. Schema support enabled
  715. soap
  716. Soap Client enabled
  717. Soap Server enabled
  718. Directive Local Value Master Value
  719. soap.wsdl_cache 1 1
  720. soap.wsdl_cache_dir /tmp /tmp
  721. soap.wsdl_cache_enabled 1 1
  722. soap.wsdl_cache_limit 5 5
  723. soap.wsdl_cache_ttl 86400 86400
  724. sockets
  725. Sockets Support enabled
  726. SPL
  727. SPL support enabled
  728. Interfaces Countable, OuterIterator, RecursiveIterator, SeekableIterator, SplObserver, SplSubject
  729. Classes AppendIterator, ArrayIterator, ArrayObject, BadFunctionCallException, BadMethodCallException, CachingIterator, CallbackFilterIterator, DirectoryIterator, DomainException, EmptyIterator, FilesystemIterator, FilterIterator, GlobIterator, InfiniteIterator, InvalidArgumentException, IteratorIterator, LengthException, LimitIterator, LogicException, MultipleIterator, NoRewindIterator, OutOfBoundsException, OutOfRangeException, OverflowException, ParentIterator, RangeException, RecursiveArrayIterator, RecursiveCachingIterator, RecursiveCallbackFilterIterator, RecursiveDirectoryIterator, RecursiveFilterIterator, RecursiveIteratorIterator, RecursiveRegexIterator, RecursiveTreeIterator, RegexIterator, RuntimeException, SplDoublyLinkedList, SplFileInfo, SplFileObject, SplFixedArray, SplHeap, SplMinHeap, SplMaxHeap, SplObjectStorage, SplPriorityQueue, SplQueue, SplStack, SplTempFileObject, UnderflowException, UnexpectedValueException
  730. standard
  731. Dynamic Library Support enabled
  732. Path to sendmail /usr/sbin/sendmail -t -i
  733. Directive Local Value Master Value
  734. assert.active 1 1
  735. assert.bail 0 0
  736. assert.callback no value no value
  737. assert.quiet_eval 0 0
  738. assert.warning 1 1
  739. auto_detect_line_endings 0 0
  740. default_socket_timeout 60 60
  741. from no value no value
  742. url_rewriter.tags a=href,area=href,frame=src,input=src,form=fakeentry a=href,area=href,frame=src,input=src,form=fakeentry
  743. user_agent no value no value
  744. sysvmsg
  745. sysvmsg support enabled
  746. Revision $Id: 6360183f0075ec66a3dfa01633b2ed808dd482af $
  747. tokenizer
  748. Tokenizer Support enabled
  749. wddx
  750. WDDX Support enabled
  751. WDDX Session Serializer enabled
  752. xml
  753. XML Support active
  754. XML Namespace Support active
  755. libxml2 Version 2.8.0
  756. xmlreader
  757. XMLReader enabled
  758. xmlwriter
  759. XMLWriter enabled
  760. zip
  761. Zip enabled
  762. Extension Version $Id$
  763. Zip version 1.9.1
  764. Libzip version 0.9.0
  765. zlib
  766. ZLib Support enabled
  767. Stream Wrapper compress.zlib://
  768. Stream Filter zlib.inflate, zlib.deflate
  769. Compiled Version 1.2.1.1
  770. Linked Version 1.2.7
  771. Directive Local Value Master Value
  772. zlib.output_compression Off Off
  773. zlib.output_compression_level -1 -1
  774. zlib.output_handler no value no value
  775. Additional Modules
  776. Module Name
  777. sysvsem
  778. sysvshm
  779. Environment
  780. Variable Value
  781. APACHE_RUN_DIR /var/run/apache2
  782. APACHE_PID_FILE /var/run/apache2.pid
  783. PATH /usr/local/bin:/usr/bin:/bin
  784. APACHE_LOCK_DIR /var/lock/apache2
  785. LANG C
  786. APACHE_RUN_USER www-data
  787. APACHE_RUN_GROUP www-data
  788. APACHE_LOG_DIR /var/log/apache2
  789. PWD /
  790. PHP Variables
  791. Variable Value
  792. _REQUEST["module"] tools-php_info
  793. _REQUEST["action"] phpinfo
  794. _GET["module"] tools-php_info
  795. _GET["action"] phpinfo
  796. _COOKIE["mybb"]
  797. Array
  798. (
  799. [lastvisit] => 1400569628
  800. [lastactive] => 1400570403
  801. )
  802. _COOKIE["sid"] 7ba0b4a3b24d723e364cbd88127e2173
  803. _COOKIE["acploginattempts"] 0
  804. _COOKIE["adminsid"] 398b0ca7d517eea804b0da5ef40ddd15
  805. _SERVER["UNIQUE_ID"] U3sCRVBSQI4AABbjH0MAAAAA
  806. _SERVER["HTTP_HOST"] puppet.zone
  807. _SERVER["HTTP_USER_AGENT"] Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Firefox/24.0
  808. _SERVER["HTTP_ACCEPT"] text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  809. _SERVER["HTTP_ACCEPT_LANGUAGE"] en-us,en;q=0.5
  810. _SERVER["HTTP_ACCEPT_ENCODING"] gzip, deflate
  811. _SERVER["HTTP_REFERER"] http://puppet.zone/admin/index.php?module=tools-php_info
  812. _SERVER["HTTP_COOKIE"] mybb[lastvisit]=1400569628; mybb[lastactive]=1400570403; sid=7ba0b4a3b24d723e364cbd88127e2173; acploginattempts=0; adminsid=398b0ca7d517eea804b0da5ef40ddd15
  813. _SERVER["HTTP_CONNECTION"] keep-alive
  814. _SERVER["PATH"] /usr/local/bin:/usr/bin:/bin
  815. _SERVER["SERVER_SIGNATURE"]
  816. Apache/2.2.22 (Debian) Server at puppet.zone Port 80
  817. _SERVER["SERVER_SOFTWARE"] Apache/2.2.22 (Debian)
  818. _SERVER["SERVER_NAME"] puppet.zone
  819. _SERVER["SERVER_ADDR"] 80.82.64.142
  820. _SERVER["SERVER_PORT"] 80
  821. _SERVER["REMOTE_ADDR"] 77.109.139.87
  822. _SERVER["DOCUMENT_ROOT"] /var/www
  823. _SERVER["SERVER_ADMIN"] webmaster@localhost
  824. _SERVER["SCRIPT_FILENAME"] /var/www/admin/index.php
  825. _SERVER["REMOTE_PORT"] 54187
  826. _SERVER["GATEWAY_INTERFACE"] CGI/1.1
  827. _SERVER["SERVER_PROTOCOL"] HTTP/1.1
  828. _SERVER["REQUEST_METHOD"] GET
  829. _SERVER["QUERY_STRING"] module=tools-php_info&action=phpinfo
  830. _SERVER["REQUEST_URI"] /admin/index.php?module=tools-php_info&action=phpinfo
  831. _SERVER["SCRIPT_NAME"] /admin/index.php
  832. _SERVER["PHP_SELF"] /admin/index.php
  833. _SERVER["REQUEST_TIME_FLOAT"] 1400570437.981
  834. _SERVER["REQUEST_TIME"] 1400570437
  835. PHP License
  836. This program is free software; you can redistribute it and/or modify it under the terms of the PHP License as published by the PHP Group and included in the distribution in the file: LICENSE
  837. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
  838. If you did not receive a copy of the PHP license, or have any questions about PHP licensing, please contact license@php.net.
  839. r1ppr g4ng or die ...
  840. ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
  841. : When You Cant Dox One, Dox Them ALL :
  842. : This is the part where an entire country gets doxed because of one guy :
  843. ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
  844. ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
  845. : His entire School board getting owned :
  846. ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
  847. :http://tdsb .on.ca/ :
  848. :back-end DBMS: Oracle :
  849. :available databases [10]: :
  850. :[*] AEAM :
  851. :[*] ARINT :
  852. :[*] CTXSYS :
  853. :[*] EXFSYS :
  854. :[*] MDSYS :
  855. :[*] SYS :
  856. :[*] SYSADM :
  857. :[*] SYSTEM :
  858. :[*] WEBTEAM :
  859. :[*] XDB :
  860. :back-end DBMS: Oracle :
  861. :banner: 'Oracle Database 11g Release 11.2.0.4.0 - 64bit Production' :
  862. :current user: 'WEBTEAMAPP' :
  863. :current schema (equivalent to database on Oracle): 'WEBTEAMAPP' :
  864. :hostname: None :
  865. :current user is DBA: False :
  866. :database management system users [163]: :
  867. :[*] 061033 :
  868. :[*] ADMINEL :
  869. :[*] ADMINSEC :
  870. :[*] AEAM :
  871. :[*] AEAMAPP :
  872. :[*] AEAMINT :
  873. :[*] AEAMINTAPP :
  874. :[*] AISDB :
  875. :[*] AISDBAPP :
  876. :[*] AISUSER :
  877. :[*] ALTRC :
  878. :[*] ALTRCAPP :
  879. :[*] ANDREA :
  880. :[*] ANONYMOUS :
  881. :[*] APPQOSSYS :
  882. :[*] APRORMDY8 :
  883. :[*] ARADMIN :
  884. :[*] ARINT :
  885. :[*] ARINTAPP :
  886. :[*] ASAM :
  887. :[*] ASAMAPP :
  888. :[*] ASPIRE :
  889. :[*] ASPIREAPP :
  890. :[*] AVRIL :
  891. :[*] AWSTAGE :
  892. :[*] BACKUP :
  893. :[*] CFADMIN :
  894. :[*] CFREADER :
  895. :[*] CFUSER :
  896. :[*] CHECKDB :
  897. :[*] COACHCONNECT :
  898. :[*] COACHCONNECTAPP :
  899. :[*] COURSENEW :
  900. :[*] COURSENEWAPP :
  901. :[*] CTXSYS :
  902. :[*] DBSNMP :
  903. :[*] DEFAULT_QC_APPDEV_DB :
  904. :[*] DEFAULT_QUALITYCENTER_DEMO_DB :
  905. :[*] DEFAULT_TD_BFS_DB :
  906. :[*] DEFAULT_TD_EUC_DB :
  907. :[*] DEFAULT_TD_ICT_DB :
  908. :[*] DEFAULT_TD_ITS_DB :
  909. :[*] DEFAULT_TD_OD_DB :
  910. :[*] DEFAULT_TD_SAP_CRM2007_DB :
  911. :[*] DEFAULT_TD_SAP_DB :
  912. :[*] DEFAULT_TD_SAP_PRODUCTION_SUPP :
  913. :[*] DEFAULT_TD_SAP_SCRATCH_DB :
  914. :[*] DEFAULT_TD_SAP_SCRATCH_DB0 :
  915. :[*] DEFAULT_TD_SAPSECURITY_DB :
  916. :[*] DEFAULT_TD_SIS_DB :
  917. :[*] DEFAULT_TD_WEBTEAM_DB :
  918. :[*] DEFAULT_TD_WORK_ORDERS_DB :
  919. :[*] DEFAULT_TDSB_TESTA_DB :
  920. :[*] DIP :
  921. :[*] DRA :
  922. :[*] DRA23 :
  923. :[*] DRA23APP :
  924. :[*] DRAAPP :
  925. :[*] DRALOAD :
  926. :[*] EMD :
  927. :[*] EMDAPP :
  928. :[*] EOD :
  929. :[*] EODAPP :
  930. :[*] EVA :
  931. :[*] EVAAPP :
  932. :[*] EXFSYS :
  933. :[*] HRLOCATION :
  934. :[*] HRLOCATIONAPP :
  935. :[*] HRWEB :
  936. :[*] HRWEBAPP :
  937. :[*] ICDMDB :
  938. :[*] ICDMDBUPDATE :
  939. :[*] INGENIUM :
  940. :[*] JEAN :
  941. :[*] MARYANNE :
  942. :[*] MDSYS :
  943. :[*] MGMT_VIEW :
  944. :[*] MYLES :
  945. :[*] ODSR :
  946. :[*] ODSRAPP :
  947. :[*] ORACLE_OCM :
  948. :[*] ORDDATA :
  949. :[*] ORDPLUGINS :
  950. :[*] ORDSYS :
  951. :[*] OTR :
  952. :[*] OTRAPP :
  953. :[*] OUTLN :
  954. :[*] PARS :
  955. :[*] PARS2 :
  956. :[*] PARS2APP :
  957. :[*] PARSAPP :
  958. :[*] PAULA :
  959. :[*] PENNY :
  960. :[*] PFLC :
  961. :[*] PFLCAPP :
  962. :[*] PMO :
  963. :[*] PMOAPP :
  964. :[*] QCSITEADMIN_DB :
  965. :[*] QCSITEADMIN_DB0 :
  966. :[*] QUALITYCENTER_DEMO_DB :
  967. :[*] QUALITYCENTER_DEMO_DB0 :
  968. :[*] QUEST :
  969. :[*] RPTSID :
  970. :[*] SAFESCHDB :
  971. :[*] SAFESCHUSER :
  972. :[*] SANDY :
  973. :[*] SCAN1 :
  974. :[*] SCAN2 :
  975. :[*] SCAN3 :
  976. :[*] SHUVA :
  977. :[*] SI_INFORMTN_SCHEMA :
  978. :[*] SIPDB :
  979. :[*] SIPOLD :
  980. :[*] SIPOLDUSER :
  981. :[*] SIPUSER :
  982. :[*] SIRPTS :
  983. :[*] SPCDB :
  984. :[*] SPCUSER :
  985. :[*] SPT :
  986. :[*] SPTAPP :
  987. :[*] SSRS :
  988. :[*] SSRSADMIN :
  989. :[*] STUDENTREG :
  990. :[*] STUDENTREGAPP :
  991. :[*] SYS :
  992. :[*] SYSADM :
  993. :[*] SYSMAN :
  994. :[*] SYSTEM :
  995. :[*] TD_QCSITEADMIN_DB :
  996. :[*] TDSB_20090317_TDSB_200917_DB :
  997. :[*] TESTDIRECTOR :
  998. :[*] TIC :
  999. :[*] TICAPP :
  1000. :[*] TPDB :
  1001. :[*] TPUSER :
  1002. :[*] UAUTH :
  1003. :[*] UAUTHUSER :
  1004. :[*] USERLINK_10G :
  1005. :[*] USERLINK_AISDB :
  1006. :[*] USERLINK_ALTRC :
  1007. :[*] USERLINK_ASAM :
  1008. :[*] USERLINK_AW :
  1009. :[*] USERLINK_DW :
  1010. :[*] USERLINK_EMD :
  1011. :[*] USERLINK_FSCC :
  1012. :[*] USERLINK_LMS :
  1013. :[*] USERLINK_OEM :
  1014. :[*] USERLINK_SIS :
  1015. :[*] USERLINK_SISCAD :
  1016. :[*] USERLINK_SPC :
  1017. :[*] USERLINK_WEBTEAM :
  1018. :[*] USERSDB :
  1019. :[*] USERSDBAPP :
  1020. :[*] VIRTUALSCHOOL :
  1021. :[*] VIRTUALSCHOOLAPP :
  1022. :[*] VSGUIDANCE :
  1023. :[*] VSGUIDANCEAPP :
  1024. :[*] WEBTEAM :
  1025. :[*] WEBTEAMAPP :
  1026. :[*] WEBTEAMDW :
  1027. :[*] WMSYS :
  1028. :[*] XDB :
  1029. :[*] XS$NULL :
  1030. ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
  1031. : Bell Canada IP Allocation :
  1032. : We'll dump all bell users eventually... There is a lot of data and I can't :
  1033. : Be fucked to deal with it tonight. :
  1034. ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
  1035. Lizard Squad "Member" #1:
  1036. 'Chief' a/k/a 'ChF' a/k/a 'ChFTheCat' a/k/a 'Devin Bharath' (This is 'Iguana' on the IRC)
  1037. Devin Bharath 1765 lawrence ave east apt 310 scarborough ON
  1038. Sara S Bharath
  1039. Home (905) 509-1626
  1040. 1013 Lytton Crt
  1041. Pickering, ON L1W 3Z2
  1042. N Bharath
  1043. Home (905) 551-2206
  1044. 34 Longview Dr
  1045. Bradford, ON L3Z 2H3
  1046. 2901 Kipling Ave
  1047. Toronto, ON M9V 5E5
  1048. Check this out: http://pastebin.ru/mDfVJwtK
  1049. Check this out 2: https://encyclopediadramatica.es/Chief
  1050. Check this out 3: http://www.incgamers.com/2014/01/steam-blizzard-ea-hit-ddos-attacks
  1051. Check this out 4: https://twitter.com/ChFthemango
  1052. Lizard Squad "Member" #2:
  1053. 'Criminal' a/k/a 'c' a/k/a 'Fatally' (This is 'c' or 'cgod' on the IRC)
  1054. Check this out: https://twitter.com/Fatally
  1055. #LizardSquad Current Members:
  1056. 1. https://twitter.com/GDKJordie - Jordie
  1057. 2. https://twitter.com/Satan600 - Satan666
  1058. 3. https://twitter.com/Fatally - Fatally
  1059. 4. https://twitter.com/AlphaQuintesson - Teridax
  1060. 5. https://twitter.com/Dox_Boi - PriNc£
  1061. 6. https://twitter.com/SYNACKtra - Komodo
  1062. 7. https://twitter.com/GaySexWithDad - BP (Onion Cow)
  1063. 8. https://twitter.com/PussySquirting - Niko
  1064. 9. https://twitter.com/NotClerk - Savaged
  1065. 10. https://twitter.com/Cedrick8I - Cedrick
  1066. 11. https://twitter.com/chFthemango - (chF the cat) a.k.a (chF the mango)
  1067. | Lizards Skypes w/ IPs | Website Backends |
  1068. | | |
  1069. | 1. Skype: e.v.o.l.v.e (64.231.75.63) | LizardSquad.ru - 37.187.112.166 (Main IP) |
  1070. | 2. Skype: nitrous (73.185.237.121) | irc.lizardsquad.ru - 198.100.144.122(Main IP)|
  1071. | 3. Skype: ultraleansmoker (173.35.56.208) | darkode.com - 5.39.90.132 (Main IP) |
  1072. | 4. Skype: rouge.exe (47.54.51.124) | Neko.li - 94.23.244.72 (Main IP) |
  1073. | 5. Skype: u.n.d.e.r.s.c.o.r.e (174.98.224.170) | Crime.li - 5.135.99.159 (Main IP) |
  1074. | 6. Skype: doornuller (162.219.179.226) | shiro.neko.li - 37.221.160.152 (Main IP) |
  1075. | 7. Skype: footage. (172.56.11.198) | digitalgangster.com - 74.63.219.135 (Main IP)|
  1076. @chFthemango - (chF the cat) - #DoX
  1077. Name: Devin Bharath |
  1078. | Aliases: chF, chFthemango, FTBG cHF |
  1079. | Picture: http://prntscr.com/4qb8qj |
  1080. | Current IP: 64.231.75.63 & 173.35.56.208 (12/06/14) |
  1081. | Address: 1765 Lawrence Ave #310 Onatario, CA M1R 2X8 (http://prntscr.com/4qbgbj) |
  1082. | Emails: |
  1083. | --> devinbharath@hotmail.com |
  1084. | --> chfthegod@hotmail.com |
  1085. | --> devinbharath@gmail.com |
  1086. | |
  1087. | Proof: http://prntscr.com/5dufim |
  1088. | --> devinbharath@gmail.com linked to @chFthemango
  1089. @notclerk - (Savaged) - #DoX
  1090. Name: Steven Wynhoff |
  1091. | Current IP: 73.185.237.121 (12/06/14) |
  1092. | DOB: 11/17/1997 |
  1093. | Phone: 816-809-4383 |
  1094. | Current Address: 1300 NW Willow Dr, Grain Valley, MO 64029 |
  1095. | Previous Addresses: |
  1096. | --> 5431 S NICHOLSON AVE, CUDAHY, WI 53110-2117 |
  1097. | Current Email: verdict@outlook.com (Linked with Skype) |
  1098. | Current Skype: nitrous |
  1099. | |
  1100. | Mom: Regina Defazio |
  1101. | --> Maiden: Regina Lynn Schroeder |
  1102. | --> Picture: http://i.imgur.com/JSJopyr.png |
  1103. | |
  1104. | Comcast Account Number: 8772103130087969 |
  1105. | High School: Blue Springs South High School |
  1106. | SSNs: http://imgur.com/a/8pxNs |
  1107. | |
  1108. | IP: 24.2.14.161 // c-24-2-14-161.hsd1.mo.comcast.net |
  1109. | IP: 69.242.189.17 // c-69-242-189-17.hsd1.mo.comcast.net |
  1110. | IP: 76.27.250.63 // c-76-27-250-63.hsd1.wa.comcast.net |
  1111. | IP: 68.34.131.129 // c-68-34-131-129.hsd1.mo.comcast.net |
  1112. | IP: 99.7.185.205 // 99-7-185-205.lightspeed.mssnks.sbcglobal.net |
  1113. |
  1114. @kms #DoX - (skype: u.n.d.e.r.s.c.o.r.e = 174.98.224.170) - http://skidpaste.org/aBRbE1xj
  1115. Name: Amoref harris |
  1116. | Phone Number: (336) 545-5636 |
  1117. | Address: 4606 Ridgefall Rd, Greensboro, NC 27410 |
  1118. | Facebook: https://www.facebook.com/amoref.harris |
  1119. | Skype: u.n.d.e.r.s.c.o.r.e |
  1120. | IP: 174.98.224.170, 66.26.151.8 |
  1121. | |
  1122. | Riseup VPN: 199.254.238.243 |
  1123. | |
  1124. | Website Host: http://www.ovh.com |
  1125. | Sub-Domain Host: http://www.voxility.com (Known for Allowing DDoS) |
  1126. | |
  1127. | Name: Amoref harris |
  1128. | Phone Number: (336) 545-5636 |
  1129. | Address: 4606 Ridgefall Rd, Greensboro, NC 27410 |
  1130. | Facebook: https://www.facebook.com/amoref.Harris |
  1131. | Skype: u.n.d.e.r.s.c.o.r.e |
  1132. | |
  1133. | Relatives: |
  1134. | Father: Craig Carlton harris |
  1135. | DOB: 10/21/1967 |
  1136. | Phone Number: (336) 545-5636, (336) 306-8187 |
  1137. | Address: 4606 Ridgefall Rd, Greensboro, NC 27410 |
  1138. | |
  1139. | Time Warner Cable: |
  1140. | Name: Craig Harris |
  1141. | Phone Number: (336) 545-5636, (336) 306-8187 |
  1142. | Address: 4606 Ridgefall Rd, Greensboro, NC 27410 |
  1143. | Account Number: 465413401 |
  1144. | User ID: charris9 |
  1145. | Primary Email: charris9@triad.rr.com, Password: XXKksv8JX5 |
  1146. | Sub Email: amoref@triad.rr.com |
  1147. | SQA: greensboro |
  1148. | MAC Address: 00:1d:d3:72:31:f2 |
  1149. | |
  1150. | Equipment: |
  1151. | Scientific Atlanta Set-Top Box |
  1152. | MAC Address: 001BD7751BD6 |
  1153. | Serial Number: SABSBKJJF |
  1154. | |
  1155. | ARRIS Router |
  1156. | MAC Address: 001DD37231F2 |
  1157. | MAC Address: 001DD37231F4 |
  1158. | Serial Number: 001DD37231F2 |
  1159. | |
  1160. | Amazon: |
  1161. | Name: Craig Harris |
  1162. | Email: charris9@triad.rr.com |
  1163. | |
  1164. | Name servers: |
  1165. | devin.ns.cloudflare.com |
  1166. | matt.ns.cloudflare.com
  1167. @Fatally - (Criminal #DoX)
  1168. Name: Antonio Rodriguez |
  1169. | Aliases: CGOD |
  1170. | DOB: 01/22/1982 |
  1171. | Current Address: 4132 Hamlet Dr Concord, CA 94521-3323 |
  1172. | Home: 925-687-9466 |
  1173. | Cell: 925-695-5292 |
  1174. | IP Address: 69.42.8.163 |
  1175. | |
  1176. | DOMAIN CRIME.LI Info |
  1177. | 1 0 0 0 206.123.64.46 - |
  1178. | 2 1 0 0 173.219.246.92 173-219-246-92-link.sta.suddenlink.net |
  1179. | 3 792 3 4 173.219.230.155 173-219-230-155-link.sta.suddenlink.net|
  1180. | 4 0 0 0 206.223.118.145 xe-0-0-3.edge01.dfw01.as13335.net |
  1181. | 5 0 0 0 104.28.3.66 - |
  1182. | |
  1183. | DNS SERVERS |
  1184. | dan.ns.cloudflare.com [173.245.59.108] |
  1185. | olga.ns.cloudflare.com [173.245.58.137] |
  1186. | |
  1187. | NetRange: 104.16.0.0 - 104.31.255.255 |
  1188. | CIDR: 104.16.0.0/12 |
  1189. | OriginAS: AS13335 |
  1190. | NetName: CLOUDFLARENET |
  1191. | NetHandle: NET-104-16-0-0-1 |
  1192. | Parent: NET-104-0-0-0-0 |
  1193. | NetType: Direct Assignment |
  1194. | Comment: https://www.cloudflare.com |
  1195. | RegDate: 2014-03-28 |
  1196. | Updated: 2014-03-28 |
  1197. | Ref: http://whois.arin.net/rest/net/NET-104-16-0-0-1 |
  1198. | |
  1199. | MORE THEN LIKELY HOSTED ON OVH SERVERS OUT OF FRANCE OR CANADA.
  1200. -------------------------------------------------------------------------------------------------------
  1201. MOAR INFO ON #LIZARDSQUAD
  1202. 5.39.90.132 darkode direct IP |
  1203. | 198.100.144.122 > darkode & lizardsquad IRC (Direct IP) |
  1204. | 46.38.48.82 > Previous crime.li domain IP |
  1205. | |
  1206. | 64.231.75.63 > 173.35.56.208 > @chfthemango |
  1207. | 73.185.237.121 > @NotClerk |
  1208. | 46.166.186.226 > @pussysquirting |
  1209. | 109.201.154.137 > @pussysquirting |
  1210. | |
  1211. | irc.lizardsquad.ru connection DUMP |
  1212. | |
  1213. | 108.199.90.89 > 166.172.56.80 (AT&T) -- Florida |
  1214. | 69.251.78.210 (Comcast) -- Maryland |
  1215. | 172.56.11.198 (T-Mobile) |
  1216. | 66.41.164.207 (Comcast) -- Minnesota |
  1217. | 189.74.117.126 (Brasil Telecom) |
  1218. | 98.225.104.219 (Comcast) -- Arizona |
  1219. | 221.181.104.11 (China Mobile) |
  1220. | 99.120.121.121 (AT&T) -- Illinois |
  1221. | 68.252.155.149 (SBC Global) -- Illinois |
  1222. | 101.117.84.237 > 120.23.241.252 > 120.23.241.226 (Vodafone) -- Australia |
  1223. | 5.22.129.231 (Triple C) -- Israel (Possibly Criminal @Fatally) |
  1224. | 37.11.58.81 (Jazz Telecom) |
  1225. | 199.254.238.243 (RiseUp VPN) |
  1226. | |
  1227. | Skype: footage. > @wreking |
  1228. | Skype: ultraleansmoker > @chFthemango |
  1229. ---------------------------------------------------------------------------------------------------------

comments powered by Disqus