Login or Register :: Home :: Search :: Your Account :: Forums :: Waraxe Advisories :: Tools :: September 8, 2024 Menu Home Logout Discussions Forums Members List IRC chat Tools Base64 coder MD5 hash CRC32 checksum ROT13 coder SHA-1 hash URL-decoder Sql Char Encoder Affiliates y3dips ITsec Md5 Cracker User Manuals AlbumNow Content Content Sections FAQ Top Info Feedback Recommend Us Search Journal Your Account User Info Welcome, Anonymous Nickname Password (Register) Membership: Latest: MichaelSnaRe New Today: 0 New Yesterday: 0 Overall: 9144 People Online: Visitors: 83 Members: 0 Total: 83 Full disclosure [SYSS-2024-030]: C-MOR Video Surveillance - OS Command Injection (CWE-78) [SYSS-2024-029]: C-MOR Video Surveillance - Dependency on Vulnerable Third-Party Component (CWE-1395) [SYSS-2024-028]: C-MOR Video Surveillance - Cleartext Storage of Sensitive Information (CWE-312) [SYSS-2024-027]: C-MOR Video Surveillance - Improper Privilege Management (CWE-269) [SYSS-2024-026]: C-MOR Video Surveillance - Unrestricted Upload of File with Dangerous Type (CWE-434) [SYSS-2024-025]: C-MOR Video Surveillance - Relative Path Traversal (CWE-23) Backdoor.Win32.Symmi.qua / Remote Stack Buffer Overflow (SEH) HackTool.Win32.Freezer.br (WinSpy) / Insecure CredentialStorage Backdoor.Win32.Optix.02.b / Weak Hardcoded Credentials Backdoor.Win32.JustJoke.2 1 (BackDoor Pro) / Unauthenticated Remote Command Execution Backdoor.Win32.PoisonIvy. ymw / Insecure Credential Storage [SYSS-2024-024]: C-MOR Video Surveillance - Improper Access Control (CWE-284) [SYSS-2024-023]: C-MOR Video Surveillance - SQL Injection(CWE-89) [SYSS-2024-022]: C-MOR Video Surveillance - Cross-Site Request Forgery (CWE-352) [SYSS-2024-021]: C-MOR Video Surveillance - Persistent Cross-Site Scripting (CWE-79) IT Security and Insecurity Portal www.waraxe.us Forum Index -> How to fix -> Can you help me? my forum has been hacked View previous topic :: View next topic Can you help me? my forum has been hacked Posted: Fri Mar 04, 2005 5:40 pm theavenger Regular user Joined: Mar 04, 2005 Posts: 5 Hello, I'm just looking for help, I had a forum with more than 100 people signed. This morning somebody has changed everything and erased most of the posts and topics, he has erased some login nicks and the admin. I know who has done it because when we banned him and changed his profile, we changed his language in that forum, and now the forum is in that language. Please, if you can help me, just write something here, i will answer immediately. Our forum was:hxxp://www.elforo.de/xenafansclub/index.php and now it appears like Attack to hacker by speaker. Sorry for the mistakes in english, i'm spanish Last edited by theavenger on Wed Mar 09, 2005 11:01 pm; edited 1 time in total A simple guide to secure a forum Posted: Fri Mar 04, 2005 6:20 pm Zeelock Active user Joined: Jan 27, 2005 Posts: 29 Location: Where stars come out at night - First use .htaccess for protection admin directory and admin files - Second use only one admin - Disable System() and any other dangerous function (if not used) - Third For forums only use (if possible) a low privileged user with no union support. And install forum for mysql 3.x. - 4 backup database files regularly If you can change .php settings disable functions like system etc.. _________________ If it seems to be impossible, just step up your level! Posted: Fri Mar 04, 2005 7:02 pm mateusz Regular user Joined: Dec 05, 2004 Posts: 17 Location: Poland yes, and you should up to date your forum simply Posted: Fri Mar 04, 2005 7:07 pm Injector Active user Joined: Dec 29, 2004 Posts: 49 http://www.google.co.uk/search?q=site:www.elforo.de+AND+phpbb+2.0.&hl=en&lr=&client=firefox-a&rls=org.mozilla:en-US:official_s&start=0&sa=N According to google your phpbb host gives out version "2.0.3" That is way out of date and theres nothing you can do really cause I think your on a free host right? (correct me if im wrong) Anyways go to another host instead there are tons of others out there Posted: Fri Mar 04, 2005 8:30 pm theavenger Regular user Joined: Mar 04, 2005 Posts: 5 thanks, so I assume there's no way to get my forum back Thank you for your help Posted: Fri Mar 04, 2005 8:33 pm theavenger Regular user Joined: Mar 04, 2005 Posts: 5 one more thing, would you be so kind of explaining the way they did that with the forum? is there any way that we can get our admin back? thanks Posted: Fri Mar 04, 2005 9:15 pm Injector Active user Joined: Dec 29, 2004 Posts: 49 login as: user: kane password: iamgod Posted: Sat Mar 05, 2005 12:53 am theavenger Regular user Joined: Mar 04, 2005 Posts: 5 Last edited by theavenger on Wed Mar 09, 2005 10:59 pm; edited 1 time in total Posted: Sun Mar 06, 2005 5:23 pm theavenger Regular user Joined: Mar 04, 2005 Posts: 5 And yesterday he came back and got the forum again, but we caught his IP and we know who he was. The forum is gone, he has erased everything, but we can make another one, that's no problem... i just would like to do the same to him thank you for your help, that was very nice from all of you Posted: Wed Apr 16, 2008 12:23 pm Urb4n Advanced user Joined: Apr 16, 2008 Posts: 55 well that is similiar to something kane on voide.org would do so go bitch at him Posted: Wed Apr 16, 2008 7:17 pm pexli Valuable expert Joined: May 24, 2007 Posts: 665 Location: Bulgaria Code: Posted: 2005-03-04, 20:40:46 Can you help me? my forum has been hacked www.waraxe.us Forum Index -> How to fix You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum All times are GMT Page 1 of 1 All Posts1 Day7 Days2 Weeks1 Month3 Months6 Months1 YearOldest FirstNewest First Select a forumSecurity Research by waraxe----------------General discussionHow to fixMetasploit relatedHash cracking requests----------------MD5 hashesAll other hashesHash related informationhttp://www.waraxe.us portal----------------SuggestionsCooperation proposalsSecurity bugs and issues in general----------------Newbies cornerSql injectionCross-site scripting aka XSSRemote file inclusionFull path disclosureShell commands injectionPhishing and Social EngineeringAll other security holesVarious software----------------PhpNukePostNukePhpBBXMB forumvBulletin BoardInvision Power Boarde107MamboJoomlaXOOPSM$ WindowsLinux worldAll other softwareCoppermine Photo GalleryProgramming languages----------------PhpMySqlPerlJavaJavascriptC and C++Visual BasicBorland Delphi and PascalPythonHTML and XMLAssemblerReverse engineering----------------Newbies cornerDisassemblingPHP script decode requestsMiscellaneous stuff----------------Future of the ITNanotechnologyFun cornerLinksTry2hack sitesProxy databaseDirect Downloads----------------ToolsTutorialsWordlistsRecycle Bin----------------Removed messagesOutdated posts Powered by phpBB © 2001-2008 phpBB Group

Space Raider game for Android, free download - Space Raider gameplay video - Zone Raider mobile games
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.094 Seconds