Waraxe IT Security Portal  
  Login or Register
::  Home  ::  Search  ::  Your Account  ::  Forums  ::   Waraxe Advisories  ::  Tools  ::
March 29, 2024
Menu
 Home
 Logout
 Discussions
 Forums
 Members List
 IRC chat
 Tools
 Base64 coder
 MD5 hash
 CRC32 checksum
 ROT13 coder
 SHA-1 hash
 URL-decoder
 Sql Char Encoder
 Affiliates
 y3dips ITsec
 Md5 Cracker
 User Manuals
 AlbumNow
 Content
 Content
 Sections
 FAQ
 Top
 Info
 Feedback
 Recommend Us
 Search
 Journal
 Your Account



User Info
Welcome, Anonymous
Nickname
Password
(Register)

Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9145

People Online:
Visitors: 951
Members: 0
Total: 951
PacketStorm News
·301 Moved Permanently

read more...
Log in Register Forum FAQ Memberlist Search
IT Security and Insecurity Portal

www.waraxe.us Forum Index -> General discussion -> Hackers/Crackers Mentality
Post new topic  Reply to topic View previous topic :: View next topic 
Hackers/Crackers Mentality
PostPosted: Tue May 25, 2004 2:29 pm Reply with quote
ravaneli
Regular user
Regular user
 
Joined: May 24, 2004
Posts: 6




Hey peeps, how's everyone doin'? I hope everyone's fine... I'm building a site and would like to make sure that it's as secure as possible. Aside from making it secure, I would like to write an algorithm to detect hackers/crackers activity.

So, I would like to propose this topic to anyone who might want to discuss things like what a hacker/cracker would do once they gain access of your site (be it through cracking techniques, social engineering or whatever). This will hopefully help me and others to create algorithms that would be useful in detecting this kind of thing.

I don't know if this topic is interesting to everyone, but I gave that idea a good amout of thought and hopefully I'd get good input from all the people here.

Thanks in advance to everyone that will contiribute.
View user's profile Send private message
PostPosted: Tue May 25, 2004 3:42 pm Reply with quote
waraxe
Site admin
Site admin
 
Joined: May 11, 2004
Posts: 2407
Location: Estonia, Tartu




Can you give me more of the background details - will you use a particular CMS or write your own custom code and which language will you use (php, perl, mysql,etc)? What operating system - linux or wind0ws? Will you be using your own server or will it be virtually hosted from a hosting server, etc...?
View user's profile Send private message Send e-mail Visit poster's website
PostPosted: Tue May 25, 2004 4:21 pm Reply with quote
ravaneli
Regular user
Regular user
 
Joined: May 24, 2004
Posts: 6




Well, I kinda wanted to keep this a general topic so everyone can just dish out what they have... this way, there will be as much information as possible and it's just limited to one thing. So if someone knows something about hackers and CMS's, then they would talk about that for example.

But if you really want to be specific, I was looking more towards CMS.

Wink

If you think I should be more specific than that, let me know.
View user's profile Send private message
PostPosted: Tue May 25, 2004 4:22 pm Reply with quote
ravaneli
Regular user
Regular user
 
Joined: May 24, 2004
Posts: 6




Oh, and PHP is the language I'll be using, with custom code...
View user's profile Send private message
PostPosted: Tue May 25, 2004 8:42 pm Reply with quote
waraxe
Site admin
Site admin
 
Joined: May 11, 2004
Posts: 2407
Location: Estonia, Tartu




One thing is for sure - hackers will first attempt to get admin status at scripting level. They can steal cookies or inject sql queries to gather admins username and password hash. Next they will try to log in as admin/moderater or authenticate through faked cookies.
So here is my suggestion - you can write a script, which checks ip addresses of all admin/moderator login attempts and any administration/moderation operations. Of course, if admins/moderators have dynamical ip addresses, then it is not such an effective measure
because full ip ranges must be allowed, but anyway - you can
1. restrict admin/mode level access by unknown ip ranges
2. log it to intrusion detection system, you are talking about
3. ban ip addresses/ranges for those attempts automatically
View user's profile Send private message Send e-mail Visit poster's website
PostPosted: Mon May 31, 2004 4:35 am Reply with quote
b0ilz
Regular user
Regular user
 
Joined: May 31, 2004
Posts: 10




I think most hackers care more for shell access than admin access. Once they have this they might touch files which hold login, network, and command logs. They will probably also try to download exploits or echo/cat exploits into a file. then they will use an interpreter or compiler to get the exploit to work. And finally they will download and setup their rootkit/backdoor.

this is generic in no perticular order. You can find things like this on the honeynet page.
View user's profile Send private message
Hackers/Crackers Mentality
  www.waraxe.us Forum Index -> General discussion
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Post new topic  Reply to topic  




Powered by phpBB © 2001-2008 phpBB Group






Space Raider game for Android, free download - Space Raider gameplay video - Zone Raider mobile games
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2020 Janek Vind "waraxe"
Page Generation: 0.170 Seconds