sB

nslxlxsqfe/rce-lxlxsqfe.git/out2277a

@@ -0,0 +1,90 @@
+=== round2277a Fri Oct  9 14:36:19 UTC 2026 ===
+--- id ---
+--- tools ---
+apk: /sbin/apk
+wget: /usr/bin/wget
+curl: /usr/bin/curl
+nc: /usr/bin/nc
+socat: /usr/bin/socat
+ssh: /usr/bin/ssh
+tar: /bin/tar
+gzip: /bin/gzip
+timeout: /usr/bin/timeout
+nslookup: /usr/bin/nslookup
+getent: /usr/bin/getent
+--- os/tmp ---
+--- dns ---
+dns gogs-db => 172.20.0.2        gogs-db  gogs-db
+dns gogs => 172.20.0.3        gogs  gogs
+dns internal => ** server can't find internal: NXDOMAIN,,
+dns mysql => ** server can't find mysql: NXDOMAIN,,
+dns mariadb => ** server can't find mariadb: NXDOMAIN,,
+dns db => ** server can't find db: NXDOMAIN,,
+dns redis => ** server can't find redis: NXDOMAIN,,
+dns cache => ** server can't find cache: NXDOMAIN,,
+dns new-api => ** server can't find new-api: NXDOMAIN,,
+dns newapi => ** server can't find newapi: NXDOMAIN,,
+dns nebula => ** server can't find nebula: NXDOMAIN,,
+dns one-api => ** server can't find one-api: NXDOMAIN,,
+dns oneapi => ** server can't find oneapi: NXDOMAIN,,
+dns api => ** server can't find api: NXDOMAIN,,
+dns app => Non-authoritative answer:,,
+dns web => 127.0.53.53       web  web
+dns caddy => ** server can't find caddy: NXDOMAIN,,
+dns traefik => ** server can't find traefik: NXDOMAIN,,
+dns nginx => ** server can't find nginx: NXDOMAIN,,
+dns admin => ** server can't find admin: NXDOMAIN,,
+dns console => ** server can't find console: NXDOMAIN,,
+dns sub2api => ** server can't find sub2api: NXDOMAIN,,
+dns xygpt => ** server can't find xygpt: NXDOMAIN,,
+--- /data tree ---
+--- local-r ids ---
+LR /data/gogs/data/tmp/local-r/104/ => .git README.md symlink symlink1 symlink10 symlink11 symlink12 symlink13 symlink14 symlink15 symlink16 symlink2 symlink3 symlink4 symlink5 symlink6 symlink7 symlink8 symlink9 
+LR /data/gogs/data/tmp/local-r/113/ => .git README.md symlink symlink1 symlink10 symlink11 symlink12 symlink13 symlink14 symlink15 symlink16 symlink2 symlink3 symlink4 symlink5 symlink6 symlink7 symlink8 symlink9 
+LR /data/gogs/data/tmp/local-r/114/ => .git README.md symlink symlink1 symlink10 symlink11 symlink12 symlink13 symlink14 symlink15 symlink16 symlink2 symlink3 symlink4 symlink5 symlink6 symlink7 symlink8 symlink9 
+LR /data/gogs/data/tmp/local-r/115/ => .git README.md symlink symlink1 symlink10 symlink11 symlink12 symlink13 symlink14 symlink15 symlink16 symlink2 symlink3 symlink4 symlink5 symlink6 symlink7 symlink8 symlink9 
+LR /data/gogs/data/tmp/local-r/116/ => .git README.md dummy.txt nslxits0yu sync1.txt sync1b.txt sync1c.txt sync1e.txt sync1f.txt sync2.txt sync2b.txt sync2c.txt sync2d.txt sync2e.txt sync2f.txt sync3a.txt sync3b.txt 
+LR /data/gogs/data/tmp/local-r/117/ => .git README.md trigger8.txt 
+LR /data/gogs/data/tmp/local-r/118/ => .git README.md dummy.txt nslxlxsqfe sync1.txt sync1_2277a.txt sync2.txt sync2138a.txt sync2138b.txt sync2138c.txt sync2138d.txt sync2138e.txt sync2138f.txt sync2138g.txt sync2277a.txt sync2277b.txt sync2_2277a.txt sync3_2277a_0.txt sync3_2277a_1.txt sync3_2277a_2.txt sync3_2277a_3.txt sync3_2277a_4.txt sync3_2277a_5.txt sync3_2277a_6.txt sync3_2277a_7.txt syncA_2277a.txt sync_poll0.txt sync_poll1.txt sync_poll10.txt sync_poll11.txt sync_poll12.txt sync_poll13.txt sync_poll14.txt sync_poll15.txt sync_poll2.txt sync_poll3.txt sync_poll4.txt sync_poll5.txt sync_poll6.txt sync_poll7.txt sync_poll8.txt sync_poll9.txt 
+LR /data/gogs/data/tmp/local-r/119/ => .git README.md trigB_2277a.txt 
+LR /data/gogs/data/tmp/local-r/120/ => .git README.md dummy.txt nslxsbzru1 sync1.txt 
+LR /data/gogs/data/tmp/local-r/121/ => .git README.md trigger2.txt 
+LR /data/gogs/data/tmp/local-r/122/ => .git README.md dummy.txt nslxyanj8t sync1.txt sync_poll0.txt sync_poll1.txt sync_poll10.txt sync_poll11.txt sync_poll12.txt sync_poll13.txt sync_poll14.txt sync_poll15.txt sync_poll2.txt sync_poll3.txt sync_poll4.txt sync_poll5.txt sync_poll6.txt sync_poll7.txt sync_poll8.txt sync_poll9.txt 
+LR /data/gogs/data/tmp/local-r/123/ => .git README.md trigger.txt 
+LR /data/gogs/data/tmp/local-r/82/ => .git README.md symlink symlink1 symlink10 symlink11 symlink12 symlink13 symlink14 symlink15 symlink16 symlink2 symlink3 symlink4 symlink5 symlink6 symlink7 symlink8 symlink9 
+LR /data/gogs/data/tmp/local-r/83/ => .git README.md symlink symlink1 symlink10 symlink11 symlink12 symlink13 symlink14 symlink15 symlink16 symlink2 symlink3 symlink4 symlink5 symlink6 symlink7 symlink8 symlink9 
+LR /data/gogs/data/tmp/local-r/84/ => .git README.md symlink symlink1 symlink10 symlink11 symlink12 symlink13 symlink14 symlink15 symlink16 symlink2 symlink3 symlink4 symlink5 symlink6 symlink7 symlink8 symlink9 
+LR /data/gogs/data/tmp/local-r/85/ => .git README.md symlink symlink1 symlink10 symlink11 symlink12 symlink13 symlink14 symlink15 symlink16 symlink2 symlink3 symlink4 symlink5 symlink6 symlink7 symlink8 symlink9 
+LR /data/gogs/data/tmp/local-r/86/ => .git README.md symlink symlink1 symlink10 symlink11 symlink12 symlink13 symlink14 symlink15 symlink16 symlink2 symlink3 symlink4 symlink5 symlink6 symlink7 symlink8 symlink9 
+LR /data/gogs/data/tmp/local-r/87/ => .git README.md symlink symlink1 symlink10 symlink11 symlink12 symlink13 symlink14 symlink15 symlink16 symlink2 symlink3 symlink4 symlink5 symlink6 symlink7 symlink8 symlink9 
+LR /data/gogs/data/tmp/local-r/89/ => .git README.md symlink symlink1 symlink10 symlink11 symlink12 symlink13 symlink14 symlink15 symlink16 symlink2 symlink3 symlink4 symlink5 symlink6 symlink7 symlink8 symlink9 
+LR /data/gogs/data/tmp/local-r/90/ => .git README.md symlink symlink1 symlink10 symlink11 symlink12 symlink13 symlink14 symlink15 symlink16 symlink2 symlink3 symlink4 symlink5 symlink6 symlink7 symlink8 symlink9 
+LR /data/gogs/data/tmp/local-r/91/ => .git README.md symlink symlink1 symlink10 symlink11 symlink12 symlink13 symlink14 symlink15 symlink16 symlink2 symlink3 symlink4 symlink5 symlink6 symlink7 symlink8 symlink9 
+LR /data/gogs/data/tmp/local-r/92/ => .git README.md symlink symlink1 symlink10 symlink11 symlink12 symlink13 symlink14 symlink15 symlink16 symlink2 symlink3 symlink4 symlink5 symlink6 symlink7 symlink8 symlink9 
+LR /data/gogs/data/tmp/local-r/93/ => .git README.md symlink symlink1 symlink10 symlink11 symlink12 symlink13 symlink14 symlink15 symlink16 symlink2 symlink3 symlink4 symlink5 symlink6 symlink7 symlink8 symlink9 
+LR /data/gogs/data/tmp/local-r/94/ => .git README.md symlink symlink1 symlink10 symlink11 symlink12 symlink13 symlink14 symlink15 symlink16 symlink2 symlink3 symlink4 symlink5 symlink6 symlink7 symlink8 symlink9 
+LR /data/gogs/data/tmp/local-r/97/ => .git README.md symlink symlink1 symlink10 symlink11 symlink12 symlink13 symlink14 symlink15 symlink16 symlink2 symlink3 symlink4 symlink5 symlink6 symlink7 symlink8 symlink9 
+LR /data/gogs/data/tmp/local-r/98/ => .git README.md symlink symlink1 symlink10 symlink11 symlink12 symlink13 symlink14 symlink15 symlink16 symlink2 symlink3 symlink4 symlink5 symlink6 symlink7 symlink8 symlink9 
+LR /data/gogs/data/tmp/local-r/99/ => .git README.md symlink symlink1 symlink10 symlink11 symlink12 symlink13 symlink14 symlink15 symlink16 symlink2 symlink3 symlink4 symlink5 symlink6 symlink7 symlink8 symlink9 
+--- old local-r loot files ---
+--- /app/gogs listing ---
+--- crontabs ---
+--- fs private key hunt (targeted) ---
+--- mysql 172.20.0.2:3306 handshake ---
+   J  \0  \0  \0  \n   8   .   0   .   4   6  \0   /   E 034  \0
+   %   m   [   F   N   b   [   !  \0 377 377   - 002  \0 377 337
+ 025  \0  \0  \0  \0  \0  \0  \0  \0  \0  \0   o   o   y   .   {
+   k   +   g   0   ^ 004 021  \0   c   a   c   h   i   n   g   _
+   s   h   a   2   _   p   a   s   s   w   o   r   d  \0   3  \0
+  \0 001 377 206 004   #   0   8   S   0   1   G   o   t       a
+   n       e   r   r   o   r       r   e   a   d   i   n   g    
+   c   o   m   m   u   n   i   c   a   t   i   o   n       p   a
+--- redis banner 172.20.0.1:16379 ---
+-NOAUTH Authentication required.
+--- ssh banners ---
+hp=10022 banner=[SSH-2.0-OpenSSH_9.9
]
+hp=25919 banner=[SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.17
]
+--- suid / passwd ---
+--- launched bg job ---
+bg pid: 3596895
+--- round2277a sync part done Fri Oct  9 14:36:23 UTC 2026 ---

nslxlxsqfe/rce-lxlxsqfe.git/scan2277a

@@ -0,0 +1,85 @@
+== bg start Fri Oct  9 14:36:21 UTC 2026 ==
+-- egress --
+https://github.com OK
+https://dl-cdn.alpinelinux.org OK
+https://pypi.org OK
+-- apk installs --
+ERROR: Unable to lock database: Permission denied
+ERROR: Failed to open apk database: Permission denied
+ERROR: Unable to lock database: Permission denied
+ERROR: Failed to open apk database: Permission denied
+ERROR: Unable to lock database: Permission denied
+ERROR: Failed to open apk database: Permission denied
+ERROR: Unable to lock database: Permission denied
+ERROR: Failed to open apk database: Permission denied
+ERROR: Unable to lock database: Permission denied
+ERROR: Failed to open apk database: Permission denied
+-- after installs --
+-- arp --
+IP address       HW type     Flags       HW address            Mask     Device
+172.20.0.1       0x1         0x2         52:57:b4:bc:9e:fd     *        eth0
+172.20.0.8       0x1         0x0         00:00:00:00:00:00     *        eth0
+172.20.0.9       0x1         0x0         00:00:00:00:00:00     *        eth0
+172.20.0.6       0x1         0x0         00:00:00:00:00:00     *        eth0
+172.20.0.7       0x1         0x0         00:00:00:00:00:00     *        eth0
+172.20.0.14      0x1         0x0         00:00:00:00:00:00     *        eth0
+172.20.0.4       0x1         0x0         00:00:00:00:00:00     *        eth0
+172.20.0.15      0x1         0x0         00:00:00:00:00:00     *        eth0
+172.20.0.5       0x1         0x0         00:00:00:00:00:00     *        eth0
+172.20.0.2       0x1         0x2         4e:2e:02:3e:26:b2     *        eth0
+172.20.0.12      0x1         0x0         00:00:00:00:00:00     *        eth0
+172.20.0.13      0x1         0x0         00:00:00:00:00:00     *        eth0
+172.20.0.10      0x1         0x0         00:00:00:00:00:00     *        eth0
+172.20.0.11      0x1         0x0         00:00:00:00:00:00     *        eth0
+-- route --
+Iface	Destination	Gateway 	Flags	RefCnt	Use	Metric	Mask		MTU	Window	IRTT                                                       
+eth0	00000000	010014AC	0003	0	0	0	00000000	0	0	0                                                                               
+eth0	000014AC	00000000	0001	0	0	0	0000FFFF	0	0	0                                                                               
+-- neighbors sweep 172.20.0.0/24 --
+-- other bridges --
+-- host targeted ports --
+OPEN host:80
+OPEN host:443
+OPEN host:6600
+OPEN host:8300
+OPEN host:10022
+OPEN host:20001
+OPEN host:25919
+OPEN host:16379
+-- host range scans --
+OPEN host:10022
+OPEN host:16379
+OPEN host:20001
+OPEN host:25919
+-- mysql login tests 172.20.0.2 --
+-- redis 16379 corpus --
+REDIS pw=ywf123456 => -WRONGPASS invalid username-password pair or user is disabled.
|-NOAUTH Authentication required.
|+OK
|
+REDIS pw=ywf123456@! => -WRONGPASS invalid username-password pair or user is disabled.
|-NOAUTH Authentication required.
|+OK
|
+REDIS pw=app.ZxAris@169 => -WRONGPASS invalid username-password pair or user is disabled.
|-NOAUTH Authentication required.
|+OK
|
+REDIS pw=nf.video123456@@@ => -WRONGPASS invalid username-password pair or user is disabled.
|-NOAUTH Authentication required.
|+OK
|
+REDIS pw=95611Lvsinco => -WRONGPASS invalid username-password pair or user is disabled.
|-NOAUTH Authentication required.
|+OK
|
+REDIS pw=M3F1j9GyxIhKbN4 => -WRONGPASS invalid username-password pair or user is disabled.
|-NOAUTH Authentication required.
|+OK
|
+REDIS pw=netflix_123 => -WRONGPASS invalid username-password pair or user is disabled.
|-NOAUTH Authentication required.
|+OK
|
+REDIS pw=Dev.12345 => -WRONGPASS invalid username-password pair or user is disabled.
|-NOAUTH Authentication required.
|+OK
|
+REDIS pw=5nQqF1a&Yf1oig_T9k => -WRONGPASS invalid username-password pair or user is disabled.
|-NOAUTH Authentication required.
|+OK
|
+REDIS pw=ProbeLx1853!x => -WRONGPASS invalid username-password pair or user is disabled.
|-NOAUTH Authentication required.
|+OK
|
+REDIS pw=server-pull => -WRONGPASS invalid username-password pair or user is disabled.
|-NOAUTH Authentication required.
|+OK
|
+REDIS pw=qwer1234 => -WRONGPASS invalid username-password pair or user is disabled.
|-NOAUTH Authentication required.
|+OK
|
+REDIS pw=d8kBs6m3JGNctw8m => -WRONGPASS invalid username-password pair or user is disabled.
|-NOAUTH Authentication required.
|+OK
|
+REDIS pw=Yinhe./123 => -WRONGPASS invalid username-password pair or user is disabled.
|-NOAUTH Authentication required.
|+OK
|
+REDIS pw=yhlxj123 => -WRONGPASS invalid username-password pair or user is disabled.
|-NOAUTH Authentication required.
|+OK
|
+REDIS pw=redis123 => -WRONGPASS invalid username-password pair or user is disabled.
|-NOAUTH Authentication required.
|+OK
|
+REDIS pw=123456 => -WRONGPASS invalid username-password pair or user is disabled.
|-NOAUTH Authentication required.
|+OK
|
+REDIS pw=admin123 => -WRONGPASS invalid username-password pair or user is disabled.
|-NOAUTH Authentication required.
|+OK
|
+REDIS pw=root => -WRONGPASS invalid username-password pair or user is disabled.
|-NOAUTH Authentication required.
|+OK
|
+REDIS pw=nebula => -WRONGPASS invalid username-password pair or user is disabled.
|-NOAUTH Authentication required.
|+OK
|
+REDIS pw=apinebula => -WRONGPASS invalid username-password pair or user is disabled.
|-NOAUTH Authentication required.
|+OK
|
+-- repo key hunt --
+KEYBLOB /data/git/gogs-repositories/yhlxj/sub2api.git => HEAD:backend/internal/payment/provider/wxpay_test.go
+HEAD:backend/internal/service/batch_image_provider_vertex_test.go
+KEYBLOB /data/git/gogs-repositories/zoujiajian/nebula.git => HEAD:relay/channel/vertex/service_account.go
+KEYBLOB /data/git/gogs-repositories/zoujiajian/qychat.git => HEAD:src/main/java/com/yhlxj/qywx/utils/RSAUtils.java
+KEYBLOB /data/git/gogs-repositories/zoujiajian/yhlxj.git => HEAD:deploy/apiclient_key.pem
+KEYFILE /data/git/gogs-repositories/zoujiajian/yhlxj.git => deploy/apiclient_cert.pem
+deploy/apiclient_key.pem
+-- git creds hunt --

syncB_2277a.txt

@@ -0,0 +1 @@
+sB