Waraxe IT Security Portal  
  Login or Register
::  Home  ::  Search  ::  Your Account  ::  Forums  ::   Waraxe Advisories  ::  Tools  ::
May 19, 2024
 Members List
 IRC chat
 Base64 coder
 MD5 hash
 CRC32 checksum
 ROT13 coder
 SHA-1 hash
 Sql Char Encoder
 y3dips ITsec
 Md5 Cracker
 User Manuals
 Recommend Us
 Your Account

User Info
Welcome, Anonymous

Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9145

People Online:
Visitors: 277
Members: 0
Total: 277
PacketStorm News
·301 Moved Permanently

Log in Register Forum FAQ Memberlist Search
IT Security and Insecurity Portal

www.waraxe.us Forum Index -> PhpNuke -> www.Nuke100.com sploited
Post new topic  Reply to topic View previous topic :: View next topic 
www.Nuke100.com sploited
PostPosted: Fri Aug 27, 2004 12:46 pm Reply with quote
Regular user
Regular user
Joined: May 20, 2004
Posts: 14

www.nuke100.com was exploited by someone yesterday, it wasnt any of the exploits listed here....anyone aware of the new exploit?
View user's profile Send private message Visit poster's website
PostPosted: Fri Sep 03, 2004 11:08 am Reply with quote
Joined: Sep 03, 2004
Posts: 1


reet, well guys, nuke100 is my site.

when i first iinstalled it using nuke 7.3 i did have it checked out for sql injections etc by a few of the guys from nukecops, and got the green light saying that everthingwas kool.

but last week i was defaced on the front page.. no biggie, i can handle that, i even admire the cheek of a hacker sometimes, because the message said, that they could have done more if they had wanted.

the problem is... they sent a newsletter to each and everyone of members asking them to "download a freesms.exe" file. which i would be presuming would end up being a trojan or even worse a possible premium rate dialler software.

which has opened my eyes, because i always assumed the hacking was for a little fun by script kiddies.. obviously its a multi million pound industry for scammers with the ?1.50 per minute diallers nowadays.. scary.

but that aside.. what the hell can i do to protect myself ??

i have removed the admin.php file now (not renamed, but deleted all together until i need it, when i then upload it again) i have also done the same with all my admin modules, is this enough?

any ideas appreciated.


View user's profile Send private message
PostPosted: Sat Sep 04, 2004 2:50 am Reply with quote
Regular user
Regular user
Joined: May 20, 2004
Posts: 14

Deleting admin.php is fine...I would rather password protect my admin.php using a .htaccess.... you got a cool site.... theres one flaw on ur site tho..anyone can cheat by voting multiple times frm same ip within 24 hrs....you need to care of tht Wink
View user's profile Send private message Visit poster's website
PostPosted: Fri Dec 24, 2004 10:18 pm Reply with quote
Joined: Sep 24, 2004
Posts: 4

Hellow, remove admin.php isn`t necesary, with the .htaccess and .htpasswd files you can restrict access to any file with password or generating 403 error.

in http://slp.cl you can find manual for htaccess and htpasswd uses on apache servers, or you can read the apache manual, downolad from http://apache.org.

Sorry for mu bad English, but my language es the Spanish and the English language education in the Estatal Schools are Bad, i'm learning speak "This is a Window, this is a door, this is a pencil" jaajj the education of english language is very bad.

the hack is for construct no for destruct, sorry mi english is bad.
View user's profile Send private message MSN Messenger
www.Nuke100.com sploited
  www.waraxe.us Forum Index -> PhpNuke
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

 Post new topic  Reply to topic  

Powered by phpBB 2001-2008 phpBB Group

Space Raider game for Android, free download - Space Raider gameplay video - Zone Raider mobile games
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2020 Janek Vind "waraxe"
Page Generation: 0.116 Seconds