{"id":5,"date":"2015-05-09T01:23:10","date_gmt":"2015-05-08T16:23:10","guid":{"rendered":"http:\/\/blog.4star.link\/?p=5"},"modified":"2015-05-10T10:57:42","modified_gmt":"2015-05-10T01:57:42","slug":"%e8%ac%8e%e3%81%ae%e3%80%8cghostsec-team%e3%80%8d%e3%81%ab%e3%80%81wordpress%e3%82%92%e3%83%8f%e3%83%83%e3%82%ad%e3%83%b3%e3%82%b0%e3%81%95%e3%82%8c%e3%81%a6%e3%81%97%e3%81%be%e3%81%a3%e3%81%9f","status":"publish","type":"post","link":"https:\/\/blog.4star.link\/?p=5","title":{"rendered":"\u8b0e\u306e\u300cGHOSTSEC-TEAM\u300d\u306b\u3001wordpress\u3092\u30cf\u30c3\u30ad\u30f3\u30b0\u3055\u308c\u3066\u3057\u307e\u3063\u305f\u3002\u3002"},"content":{"rendered":"

wordpress\u3092\u30bb\u30c3\u30c8\u30a2\u30c3\u30d7\u9014\u4e2d\u3067\u3001\u534a\u65e5\u653e\u7f6e\u3057\u305f\u3089\u3001\u3001<\/h4>\n

\u81ea\u5206\u306e\u30b5\u30a4\u30c8\u304c\u3053\u3093\u306a\u30b5\u30a4\u30c8\u306b\u3002\u3002\uff01<\/h4>\n

\"hacked_theme\"<\/a><\/p>\n

\u307e\u3058\u3073\u3073\u308a\u307e\u3057\u305f\uff08\u7b11\uff09<\/p>\n

\u3057\u304b\u3082\u6700\u521d\u306f\u30de\u30c8\u30ea\u30c3\u30af\u30b9\u306e\u30b3\u30f3\u30bd\u30fc\u30eb\u753b\u9762\u307f\u305f\u3044\u306a\u753b\u9762\u3067\u308b\u306a\u3069\u3001
\n\u3068\u3066\u3082\u52d5\u304d\u304c\u3042\u308aHTML\uff15\u3092\u30d0\u30ea\u30d0\u30ea\u3064\u304b\u3063\u305f\u3068\u3066\u3082\u51dd\u3063\u305f\u30b5\u30a4\u30c8\u306b\u306a\u3063\u3066\u3044\u305f\u306e\u3067\u307e\u3055\u304b\u81ea\u5206\u306e\u30b5\u30a4\u30c8\u3068\u306f
\n\u601d\u308f\u305a\u898b\u3066\u3057\u307e\u3044\u307e\u3057\u305f\u3002<\/p>\n

\u3042\u307e\u308a\u306b\u3082\u3073\u3073\u308a\u3059\u304e\u3066\u3001\u901f\u653b\u3067\u3001wordpress\u3092\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u3054\u3068\u524a\u9664\u3057\u3066\u3057\u307e\u3044\u307e\u3057\u305f\u3002\u3002<\/h3>\n

\u3044\u307e\u8003\u3048\u308c\u3070\u3001\u3068\u3063\u3066\u304a\u3044\u3066\u3069\u3046\u3084\u3063\u3066\u30cf\u30c3\u30ad\u30f3\u30b0\u3055\u308c\u304b\u3092\u89e3\u6790\u3067\u304d\u308b\u3088\u3046\u306b\u3057\u3066\u304a\u304f\u3079\u304d\u3067\u3057\u305f\u3002<\/p>\n

wordpress\u306e\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u4ee5\u5916\u306f\u3001\u524a\u9664\u3059\u308b\u524d\u306b\u6c17\u3065\u3051\u305f\u306e\u3067\u4e00\u65e6\u3001DB\u3068\u30a2\u30af\u30bb\u30b9\u30ed\u30b0\u3068\u3082\u306b\u4fdd\u5b58\u3057\u3001
\n\u3044\u308d\u3044\u308d\u3092\u8997\u3044\u3066\u307f\u307e\u3057\u305f\u3002<\/p>\n

\u307e\u305anginx\u306e\u30a2\u30af\u30bb\u30b9\u30ed\u30b0\u3092\u307f\u305f\u3068\u3053\u308d\u3001\u30cf\u30c3\u30ad\u30f3\u30b0\u3057\u305f\u65b9\u306f\u3001\u5f53\u305f\u308a\u524d\u3063\u3061\u3083\u3042\u305f\u308a\u307e\u3048\u3067\u3059\u304c\u3001
\n\u591a\u6bb5\u306e\u30d7\u30ed\u30ad\u30b7\u30b5\u30fc\u30d0\u30fc\u3092\u4ecb\u3057\u3066\u3044\u308b\u3088\u3046\u3067\u3001<\/p>\n

\u30a2\u30af\u30bb\u30b9\u30ed\u30b0\u3092\u307f\u308b\u3068\u3053\u3093\u306a\u611f\u3058<\/p>\n

66.85.148.52 - - [08\/May\/2015:17:04:42 +0900] \"POST \/wp-admin\/install.php?step=2 HTTP\/1.1\" 200 3009 \"http:\/\/\u653b\u6483\u5bfe\u8c61\u30b5\u30fc\u30d0\u30fcIP\/wp-admin\/install.php\" \"Mozilla\/5.0 (X11; Linux x86_64; rv:31.0) Gecko\/20100101 Firefox\/31.0 Iceweasel\/31.5.0\"\n66.85.148.52 - - [08\/May\/2015:17:04:45 +0900] \"GET \/wp-login.php HTTP\/1.1\" 200 2723 \"http:\/\/\u653b\u6483\u5bfe\u8c61\u30b5\u30fc\u30d0\u30fcIP\/wp-admin\/install.php?step=2\" \"Mozilla\/5.0 (X11; Linux x86_64; rv:31.0) Gecko\/20100101 Firefox\/31.0 Iceweasel\/31.5.0\"\n66.85.148.52 - - [08\/May\/2015:17:04:50 +0900] \"POST \/wp-login.php HTTP\/1.1\" 200 3745 \"http:\/\/\u653b\u6483\u5bfe\u8c61\u30b5\u30fc\u30d0\u30fcIP\/wp-login.php\" \"Mozilla\/5.0 (X11; Linux x86_64; rv:31.0) Gecko\/20100101 Firefox\/31.0 Iceweasel\/31.5.0\"\n66.85.148.52 - - [08\/May\/2015:17:04:54 +0900] \"POST \/wp-login.php HTTP\/1.1\" 302 5 \"http:\/\/\u653b\u6483\u5bfe\u8c61\u30b5\u30fc\u30d0\u30fcIP\/wp-login.php\" \"Mozilla\/5.0 (X11; Linux x86_64; rv:31.0) Gecko\/20100101 Firefox\/31.0 Iceweasel\/31.5.0\"\n66.85.148.52 - - [08\/May\/2015:17:04:55 +0900] \"GET \/wp-admin\/ HTTP\/1.1\" 302 5 \"http:\/\/\u653b\u6483\u5bfe\u8c61\u30b5\u30fc\u30d0\u30fcIP\/wp-login.php\" \"Mozilla\/5.0 (X11; Linux x86_64; rv:31.0) Gecko\/20100101 Firefox\/31.0 Iceweasel\/31.5.0\"\n66.85.148.52 - - [08\/May\/2015:17:04:55 +0900] \"GET \/wp-admin\/upgrade.php?_wp_http_referer=%2Fwp-admin%2F HTTP\/1.1\" 200 1278 \"http:\/\/\u653b\u6483\u5bfe\u8c61\u30b5\u30fc\u30d0\u30fcIP\/wp-login.php\" \"Mozilla\/5.0 (X11; Linux x86_64; rv:31.0) Gecko\/20100101 Firefox\/31.0 Iceweasel\/31.5.0\"\n66.85.148.52 - - [08\/May\/2015:17:04:58 +0900] \"GET \/ HTTP\/1.1\" 200 16656 \"http:\/\/\u653b\u6483\u5bfe\u8c61\u30b5\u30fc\u30d0\u30fcIP\/wp-admin\/upgrade.php?_wp_http_referer=%2Fwp-admin%2F\" \"Mozilla\/5.0 (X11; Linux x86_64; rv:31.0) Gecko\/20100101 Firefox\/31.0 Iceweasel\/31.5.0\"\n66.85.148.52 - - [08\/May\/2015:17:04:58 +0900] \"GET \/ HTTP\/1.1\" 200 17546 \"http:\/\/\u653b\u6483\u5bfe\u8c61\u30b5\u30fc\u30d0\u30fcIP\/wp-admin\/upgrade.php?_wp_http_referer=%2Fwp-admin%2F\" \"Mozilla\/5.0 (X11; Linux x86_64; rv:31.0) Gecko\/20100101 Firefox\/31.0 Iceweasel\/31.5.0\"\n66.85.148.52 - - [08\/May\/2015:17:05:05 +0900] \"GET \/ HTTP\/1.1\" 200 17546 \"http:\/\/\u653b\u6483\u5bfe\u8c61\u30b5\u30fc\u30d0\u30fcIP\/wp-admin\/upgrade.php?_wp_http_referer=%2Fwp-admin%2F\" \"Mozilla\/5.0 (X11; Linux x86_64; rv:31.0) Gecko\/20100101 Firefox\/31.0 Iceweasel\/31.5.0\"\n66.85.148.52 - - [08\/May\/2015:17:05:11 +0900] \"GET \/wp-admin\/about.php HTTP\/1.1\" 200 32252 \"http:\/\/\u653b\u6483\u5bfe\u8c61\u30b5\u30fc\u30d0\u30fcIP\/\" \"Mozilla\/5.0 (X11; Linux x86_64; rv:31.0) Gecko\/20100101 Firefox\/31.0 Iceweasel\/31.5.0\"\n66.85.148.52 - - [08\/May\/2015:17:05:12 +0900] \"GET \/wp-admin\/load-scripts.php?c=0&load%5B%5D=jquery-core,jquery-migrate,utils&ver=4.2.2 HTTP\/1.1\" 200 105061 \"http:\/\/\u653b\u6483\u5bfe\u8c61\u30b5\u30fc\u30d0\u30fcIP\/wp-admin\/about.php\" \"Mozilla\/5.0 (X11; Linux x86_64; rv:31.0) Gecko\/20100101 Firefox\/31.0 Iceweasel\/31.5.0\"\n66.85.148.52 - - [08\/May\/2015:17:05:12 +0900] \"GET \/wp-admin\/load-styles.php?c=0&dir=ltr&load=dashicons,admin-bar,wp-admin,buttons,wp-auth-check&ver=4.2.2 HTTP\/1.1\" 200 292720 \"http:\/\/\u653b\u6483\u5bfe\u8c61\u30b5\u30fc\u30d0\u30fcIP\/wp-admin\/about.php\" \"Mozilla\/5.0 (X11; Linux x86_64; rv:31.0) Gecko\/20100101 Firefox\/31.0 Iceweasel\/31.5.0\"\n<\/code><\/pre>\n
\u203b\u653b\u6483\u5bfe\u8c61\u306e\u30b5\u30fc\u30d0\u30fcIP\u306f\u96a0\u3057\u3066\u304a\u308a\u307e\u3059\u3002<\/p>\n
\u4eca\u56de\u7a76\u6975\u306b\u30c0\u30e1\u30c0\u30e1\u3060\u3063\u305f\u306e\u304c\u3001
\n\u30bb\u30c3\u30c8\u30a2\u30c3\u30d7\u306e\u9014\u4e2d\u3067\u653e\u7f6e\u3057\u3066\u3057\u307e\u3063\u305f\u3053\u3068\u304c\u3001
\n\u3088\u304f\u306a\u304b\u3063\u305f\u3068\u53cd\u7701\u3057\u3066\u304a\u308a\u307e\u3059\u3002
\n\u653b\u6483\u8005\u3082install.php\u3084\u3001wp-admin\u301c\u306e\u30d5\u30a1\u30a4\u30eb\u3078\u30a2\u30af\u30bb\u30b9\u3057\u3066\u3044\u308b\u4e8b\u304c\u308f\u304b\u308a\u307e\u3057\u305f\u3002<\/p>\n
\u3055\u3089\u306b\u653b\u6483\u5bfe\u8c61\u306ewordpress\u306e\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u3082\u3001
\n\u66f8\u304d\u63db\u308f\u3063\u3066\u304a\u308a\u3001wordpress\u3078\u306e\u30ed\u30b0\u30a4\u30f3\u60c5\u5831\u307e\u3067\u3082\u304c\u66f8\u304d\u63db\u308f\u3063\u3066\u3044\u308b\u72b6\u6cc1\u3067\u3057\u305f\u3002<\/p>\n
*************************** 3. row ***************************\n   option_id: 3\n option_name: blogname\noption_value: hacked\n    autoload: yes\n*************************** 4. row ***************************\n   option_id: 4\n option_name: blogdescription\noption_value: Just another WordPress site\n    autoload: yes\n*************************** 5. row ***************************\n   option_id: 5\n option_name: users_can_register\noption_value: 0\n    autoload: yes\n*************************** 6. row ***************************\n   option_id: 6\n option_name: admin_email\noption_value: cyberlol\uff0a@\uff0a\uff0a.com\n    autoload: yes\n*************************** 7. row ***************************\n<\/code><\/pre>\n
\u30d6\u30ed\u30b0\u540d\u3082hacked\u3068\u3002\u3002\u3002\u5b8c\u5168\u306b\u3084\u3089\u308c\u305f\u611f\u3058\u3067\u3059\u3002<\/p>\n
FireWall\u306f80\u3068443\u30dd\u30fc\u30c8\u3057\u304b\u3042\u3051\u3066\u3044\u306a\u3044\u306e\u3067\u3001web\u4ee5\u5916\u306f\u554f\u984c\u306a\u3055\u305d\u3046\u3002
\nwordpress\u7528\u306eDB\u30e6\u30fc\u30b6\u30fc\u7b49\u306f\u3001\u5bfe\u8c61\u306eDB\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u5909\u66f4\u306a\u3069\u3092\u5b9f\u65bd\u3057\u3001
\n\u307e\u305f\u7ba1\u7406\u753b\u9762\u3078\u306eIP\u30a2\u30af\u30bb\u30b9\u5236\u9650\u3092\u304b\u3051\u307e\u3057\u305f\u3002\u3002
\n\u3053\u308c\u3067\u4e00\u65e6\u306f\u5927\u4e08\u592b\u304b\u306a\uff1f\u3002\u3002<\/p>\n
\uff0a\uff0a\u8ffd\u8a18\uff0a\uff0a
\nGHOSTSEC-TEAM\u3067\u8272\u3005\u30b0\u30b0\u3063\u3066\u307f\u308b\u3068\u3001
\n\u88ab\u5bb3\u3092\u3046\u3051\u305f\u307e\u307e\u653e\u7f6e\u3055\u308c\u3066\u3044\u308b\u30b5\u30a4\u30c8\u304c\u3061\u3089\u307b\u3089\u3002\u3002
\n\u82e5\u5e72\u7570\u306a\u3063\u305f\u30d1\u30bf\u30fc\u30f3\u306e\u30c7\u30b6\u30a4\u30f3\u3084\u30ae\u30df\u30c3\u30af\u306e\u3082\u306e\u304c\u3001\u4ed6\u306b\u3082\u3002\u3002<\/p>\n
wordpress\u306einstall\u4e2d\u306f\u3082\u3063\u3068\u3082\u8106\u5f31\u306b\u306a\u3063\u3066\u3044\u308b\u53ef\u80fd\u6027\u304c\u9ad8\u3044\u306e\u3067\u3001
\n\u662f\u975e\u304a\u6c17\u3092\u3064\u3051\u3092\uff01\uff01<\/p>\n","protected":false},"excerpt":{"rendered":"
wordpress\u3092\u30bb\u30c3\u30c8\u30a2\u30c3\u30d7\u9014\u4e2d\u3067\u3001\u534a\u65e5\u653e\u7f6e\u3057\u305f\u3089\u3001\u3001 \u81ea\u5206\u306e\u30b5\u30a4\u30c8\u304c\u3053\u3093\u306a\u30b5\u30a4\u30c8\u306b\u3002\u3002\uff01 \u307e\u3058\u3073\u3073\u308a\u307e\u3057\u305f\uff08\u7b11\uff09 \u3057\u304b\u3082\u6700\u521d\u306f\u30de\u30c8\u30ea\u30c3\u30af\u30b9\u306e\u30b3\u30f3\u30bd\u30fc\u30eb\u753b\u9762\u307f\u305f\u3044\u306a\u753b\u9762\u3067\u308b\u306a\u3069\u3001 \u3068\u3066\u3082\u52d5\u304d\u304c\u3042\u308aHTML\uff15\u3092\u30d0\u30ea\u30d0\u30ea … <\/p>\n
“\u8b0e\u306e\u300cGHOSTSEC-TEAM\u300d\u306b\u3001wordpress\u3092\u30cf\u30c3\u30ad\u30f3\u30b0\u3055\u308c\u3066\u3057\u307e\u3063\u305f\u3002\u3002” \u306e<\/span>\u7d9a\u304d\u3092\u8aad\u3080<\/a><\/p>\n","protected":false},"author":1,"featured_media":10,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[2,4,3,5],"class_list":["post-5","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-1","tag-hack","tag-wordpress","tag-3","tag-5"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/blog.4star.link\/index.php?rest_route=\/wp\/v2\/posts\/5"}],"collection":[{"href":"https:\/\/blog.4star.link\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.4star.link\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.4star.link\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.4star.link\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=5"}],"version-history":[{"count":13,"href":"https:\/\/blog.4star.link\/index.php?rest_route=\/wp\/v2\/posts\/5\/revisions"}],"predecessor-version":[{"id":23,"href":"https:\/\/blog.4star.link\/index.php?rest_route=\/wp\/v2\/posts\/5\/revisions\/23"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.4star.link\/index.php?rest_route=\/wp\/v2\/media\/10"}],"wp:attachment":[{"href":"https:\/\/blog.4star.link\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=5"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.4star.link\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=5"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.4star.link\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=5"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}