to tiger.
Yeah, we were hacked. They replaced the index.php file with another one, bringing the board down. No SQL data was compromised or deleted.
It's kinda sad that Muslim hackers are hacking another Muslim's site.
P.S. Please message me if anything is quirky or doesn't work.
Toggle shoutbox Shoutbox
|
|||||||||||||||||||||||||||||||||||||||||
0
We Were Hacked
Started by Cricket, Feb 21 2007 01:17 AM
-
This topic is locked
10 replies to this topic
#1
-
- Admin
-
- 1,023 posts
Owner Of Romsource
- Gender:Male
- Location:Dallas, Tx USA
Posted 21 February 2007 - 01:17 AM
#2
-
- Sub-Admin
-
- 1,434 posts
Dark Side Incarnate
- Gender:Male
- Location:A place known as Australia
Posted 21 February 2007 - 04:14 AM
All seems ok here. Except for the moderator ability to change a person's member group in their edit options (I.E, when placing someone in the banned group).
Other than that, seems all good.
Other than that, seems all good.
*Watch this space* Your Emperor Judza has trained the army of the most powerful servants of the dark side. Now, let the leeches feel their power
Don't question me or I'll send my two leech repellers...Baron and Jody over to randomise your topics
If you see the light at the end of a tunnel, it is usually a freight train
#3
-
- Admin
-
- 704 posts
Owner of Rom-Source
- Gender:Male
Posted 21 February 2007 - 06:56 AM
QUOTE(Judza @ Feb 21 2007, 04:08 AM) 
All seems ok here. Except for the moderator ability to change a person's member group in their edit options (I.E, when placing someone in the banned group).
Other than that, seems all good.
Other than that, seems all good.
FIXED!
˙ǝןƃuɐ ʇuǝɹǝɟɟıp ɐ ɯoɹɟ pןɹoʍ ǝɥʇ ʇɐ ʞooן ɐ ƃuıʞɐʇ sı
#7
-
- Elite
-
- 1,250 posts
R-S Knight
- Gender:Male
- Location:Queens, NY
-
Favorite Games: Pimps at Sea
Posted 21 February 2007 - 08:56 PM
Same thing happened over at my site the other day (Index.php replaced). I checked my access logs and they got it with a DataChaOs (exploit) bot.
I quickly updated my .htacces and blocked a Poopy load of other bots, Leme know if you want to take a look at it.
I quickly updated my .htacces and blocked a Poopy load of other bots, Leme know if you want to take a look at it.
Edited by BurnerAzR.EXE, 21 February 2007 - 08:57 PM.
BurnerAzR... and thehitman1901:
The R-S Patrol...BIATCH
#8
-
- Elite
-
- 142 posts
Demoted AGAIN!!!
- Gender:Male
- Location:Kentucky
- Interests:Street Racing fools!
-
Favorite Games: Counter-Strike
Posted 22 February 2007 - 05:40 PM
Hey Flea?, Why dont you install a White Rabbit on the server? If you have a mobile phone or a regular phone.. If at anytime someone accesses the DB with a illegal Program or if they just are stupid and try to guess the Pass and etc. It will contact you Instantly VIA Text Msg.. That way you can be at least one step ahead of them.. If you want I can get the program and send ya. It cost my arse 300 bucks so I know its a good program used it before
#9
-
- Admin
-
- 178 posts
Don't fear the Raeper...err- REAPER.
- Gender:Male
- Location:Here
- Interests:Wouldn't you like to know....
-
Favorite Games: Everything Rockman
Posted 22 February 2007 - 07:58 PM
good thing nothing really serious occurred...
but how'd this all happen? when? why?!
DAMN YOU EBIL HACKERS!!!!
but how'd this all happen? when? why?!
DAMN YOU EBIL HACKERS!!!!
#10
-
- Elite
-
- 1,250 posts
R-S Knight
- Gender:Male
- Location:Queens, NY
-
Favorite Games: Pimps at Sea
Posted 25 February 2007 - 12:08 AM
@Gundam Fury
That would be useless in these cases. The MySQL database doesn't get touched in this particular hack.
They use PHP actions along with security holes in the software to change the index.php.
No pass or user name needed as long as the hole is there and not blocked.
The good thing about this is that its mostly done with bots and all they can do is change the index.php.
That would be useless in these cases. The MySQL database doesn't get touched in this particular hack.
They use PHP actions along with security holes in the software to change the index.php.
No pass or user name needed as long as the hole is there and not blocked.
The good thing about this is that its mostly done with bots and all they can do is change the index.php.
Edited by BurnerAzR.EXE, 25 February 2007 - 12:11 AM.
BurnerAzR... and thehitman1901:
The R-S Patrol...BIATCH
#11
-
- Elite
-
- 142 posts
Demoted AGAIN!!!
- Gender:Male
- Location:Kentucky
- Interests:Street Racing fools!
-
Favorite Games: Counter-Strike
Posted 05 March 2007 - 09:13 AM
QUOTE(BurnerAzR.EXE @ Feb 25 2007, 01:02 AM)
@Gundam Fury
That would be useless in these cases. The MySQL database doesn't get touched in this particular hack.
They use PHP actions along with security holes in the software to change the index.php.
No pass or user name needed as long as the hole is there and not blocked.
The good thing about this is that its mostly done with bots and all they can do is change the index.php.
That would be useless in these cases. The MySQL database doesn't get touched in this particular hack.
They use PHP actions along with security holes in the software to change the index.php.
No pass or user name needed as long as the hole is there and not blocked.
The good thing about this is that its mostly done with bots and all they can do is change the index.php.
Accually this program is basicly for everything included trojan backdoors.. WhiteRabbit software is what most big corperate suites use to protect their systems from things like that.. its a interesting program
1 user(s) are reading this topic
0 members, 1 guests, 0 anonymous users
