Waraxe IT Security Portal
Login or Register
July 27, 2024
Menu
Home
Logout
Discussions
Forums
Members List
IRC chat
Tools
Base64 coder
MD5 hash
CRC32 checksum
ROT13 coder
SHA-1 hash
URL-decoder
Sql Char Encoder
Affiliates
y3dips ITsec
Md5 Cracker
User Manuals
AlbumNow
Content
Content
Sections
FAQ
Top
Info
Feedback
Recommend Us
Search
Journal
Your Account
User Info
Welcome, Anonymous
Nickname
Password
(Register)

Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144

People Online:
Visitors: 215
Members: 0
Total: 215
Full disclosure
CyberDanube Security Research 20240722-0 | Multiple Vulnerabilities in Perten/PerkinElmer ProcessPlus
[KIS-2024-06] XenForo <= 2.2.15 (Template System) Remote Code Execution Vulnerability
[KIS-2024-05] XenForo <= 2.2.15 (Widget::actionSave) Cross-Site Request Forgery Vulnerability
CVE-2024-33326
CVE-2024-33327
CVE-2024-33328
CVE-2024-33329
CyberDanube Security Research 20240703-0 | Authenticated Command Injection in Helmholz Industrial Router REX100
SEC Consult SA-20240627-0 :: Local Privilege Escalation via MSI installer in SoftMaker Office / FreeOffice
SEC Consult SA-20240626-0 :: Multiple Vulnerabilities in Siemens Power Automation Products
Novel DoS Vulnerability Affecting WebRTC Media Servers
APPLE-SA-06-25-2024-1 AirPods Firmware Update 6A326, AirPods Firmware Update 6F8, and Beats Firmware Update 6F8
40 vulnerabilities in Toshiba Multi-Function Printers
17 vulnerabilities in Sharp Multi-Function Printers
SEC Consult SA-20240624-0 :: Multiple Vulnerabilities allowing complete bypass in Faronics WINSelect (Standard + Enterprise)
Log in Register Forum FAQ Memberlist Search
IT Security and Insecurity Portal

www.waraxe.us Forum Index -> How to fix -> Can you help me? my forum has been hacked
Post new topicReply to topic View previous topic :: View next topic
Can you help me? my forum has been hacked
PostPosted: Fri Mar 04, 2005 5:40 pm Reply with quote
theavenger
Regular user
Regular user
Joined: Mar 04, 2005
Posts: 5




Hello, I'm just looking for help, I had a forum with more than 100 people signed. This morning somebody has changed everything and erased most of the posts and topics, he has erased some login nicks and the admin. I know who has done it because when we banned him and changed his profile, we changed his language in that forum, and now the forum is in that language.
Wink Please, if you can help me, just write something here, i will answer immediately.
Our forum was:hxxp://www.elforo.de/xenafansclub/index.php and now it appears like Attack to hacker by speaker.

Sorry for the mistakes in english, i'm spanish Wink


Last edited by theavenger on Wed Mar 09, 2005 11:01 pm; edited 1 time in total
View user's profile Send private message
A simple guide to secure a forum
PostPosted: Fri Mar 04, 2005 6:20 pm Reply with quote
Zeelock
Active user
Active user
Joined: Jan 27, 2005
Posts: 29
Location: Where stars come out at night




- First use .htaccess for protection admin directory and admin files

- Second use only one admin

- Disable System() and any other dangerous function (if not used)

- Third For forums only use (if possible) a low privileged user with no union support. And install forum for mysql 3.x.

- 4 backup database files regularly

If you can change .php settings disable functions like system etc..

_________________
If it seems to be impossible, just step up your level!
View user's profile Send private message
PostPosted: Fri Mar 04, 2005 7:02 pm Reply with quote
mateusz
Regular user
Regular user
Joined: Dec 05, 2004
Posts: 17
Location: Poland




yes, and you should up to date your forum simply
View user's profile Send private message
PostPosted: Fri Mar 04, 2005 7:07 pm Reply with quote
Injector
Active user
Active user
Joined: Dec 29, 2004
Posts: 49




http://www.google.co.uk/search?q=site:www.elforo.de+AND+phpbb+2.0.&hl=en&lr=&client=firefox-a&rls=org.mozilla:en-US:official_s&start=0&sa=N

According to google your phpbb host gives out version "2.0.3"

That is way out of date and theres nothing you can do really cause I think your on a free host right? (correct me if im wrong)

Anyways go to another host instead there are tons of others out there
View user's profile Send private message
PostPosted: Fri Mar 04, 2005 8:30 pm Reply with quote
theavenger
Regular user
Regular user
Joined: Mar 04, 2005
Posts: 5




thanks, so I assume there's no way to get my forum back Crying or Very sad
Thank you for your help
View user's profile Send private message
PostPosted: Fri Mar 04, 2005 8:33 pm Reply with quote
theavenger
Regular user
Regular user
Joined: Mar 04, 2005
Posts: 5




one more thing, would you be so kind of explaining the way they did that with the forum? is there any way that we can get our admin back?
thanks
View user's profile Send private message
PostPosted: Fri Mar 04, 2005 9:15 pm Reply with quote
Injector
Active user
Active user
Joined: Dec 29, 2004
Posts: 49




login as:

user: kane
password: iamgod
View user's profile Send private message
PostPosted: Sat Mar 05, 2005 12:53 am Reply with quote
theavenger
Regular user
Regular user
Joined: Mar 04, 2005
Posts: 5




Wink


Last edited by theavenger on Wed Mar 09, 2005 10:59 pm; edited 1 time in total
View user's profile Send private message
PostPosted: Sun Mar 06, 2005 5:23 pm Reply with quote
theavenger
Regular user
Regular user
Joined: Mar 04, 2005
Posts: 5




And yesterday he came back and got the forum again, but we caught his IP and we know who he was. The forum is gone, he has erased everything, but we can make another one, that's no problem... i just would like to do the same to him Evil or Very Mad

thank you for your help, that was very nice from all of you
View user's profile Send private message
PostPosted: Wed Apr 16, 2008 12:23 pm Reply with quote
Urb4n
Advanced user
Advanced user
Joined: Apr 16, 2008
Posts: 55




well that is similiar to something kane on voide.org would do so go bitch at him
View user's profile Send private message
PostPosted: Wed Apr 16, 2008 7:17 pm Reply with quote
pexli
Valuable expert
Valuable expert
Joined: May 24, 2007
Posts: 665
Location: Bulgaria




Code:
Posted: 2005-03-04, 20:40:46
View user's profile Send private message
Can you help me? my forum has been hacked
www.waraxe.us Forum Index -> How to fix
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT
Page 1 of 1

Post new topicReply to topic


Powered by phpBB © 2001-2008 phpBB Group



Space Raider game for Android, free download - Space Raider gameplay video - Zone Raider mobile games
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.206 Seconds