We have been hacked

Off Topic Discussion - Chat about anything, just keep it fairly clean.

Moderator: snoopdog

User avatar
snoopdog
Yellow Tang
Posts: 4258
Joined: Mon Feb 17, 2003 7:37 pm
Are you a Bot ?: No
Location: Mobile, Al
Contact:

We have been hacked

Post by snoopdog »

We had a nice little hacker stop by this morning and exploit some script. I am still looking into the problem so all i can do until i get some time is back up everything. Time is a thing i do not have alot of.
"When they was no meat we ate fowl, when there was no fowl we ate crawdad. And when there was no crawdad to be found, we ate sand."--Cellmate
"You ate what?"--H.I.
"We ate sand."--Cellmate
"You ate sand?"--H.I.
"That's right."--Cellmate
User avatar
snoopdog
Yellow Tang
Posts: 4258
Joined: Mon Feb 17, 2003 7:37 pm
Are you a Bot ?: No
Location: Mobile, Al
Contact:

Post by snoopdog »

I am finally going to update to the newest version of the BB as soon as everything is backed up. I expect this to take less than an hour but giving it an hour as worse case scenerio. I know i said this would be done months ago but since the BB was working fine i never messed with it. Anyway away with the old, in with the new. I expect this upgrade to be done by 8:30pm. If the BB says it is down then you know what is going on.
"When they was no meat we ate fowl, when there was no fowl we ate crawdad. And when there was no crawdad to be found, we ate sand."--Cellmate
"You ate what?"--H.I.
"We ate sand."--Cellmate
"You ate sand?"--H.I.
"That's right."--Cellmate
User avatar
admin
Amoeba
Posts: 55
Joined: Mon Feb 17, 2003 7:22 pm
Location: Mobile, Al
Contact:

Post by admin »

We are up to 2.11 phpBB now, which is the current release. Tomorrow morning i will getting 'everything else' working. What is not working is.

1) Attachments
2) Chatbox
3) Gallery
4) Statistics
5) Webmail

Now I know for sure that everyone wants the Gallery and Attachment mod back operational. BUT if no one uses the Chatbox and Statistic I would strongly suggest us not putting them back in there. Excess scripts are just another way for a hacker to get back into our BBS. I will leave it to you guys though, give me some feedback. I will start again in the morning and get our Webmail, Attachments and Gallery operational.
"Look at all the pretty colors !! Is all that stuff in there alive ??"
User avatar
ShagMan
Goby
Posts: 2145
Joined: Fri Feb 21, 2003 3:41 pm
Location: Mobile, AL
Contact:

Post by ShagMan »

yeah, noticed the /index.php wasn't working... the subforums were working tho!
-Josh Murrah
User avatar
snoopdog
Yellow Tang
Posts: 4258
Joined: Mon Feb 17, 2003 7:37 pm
Are you a Bot ?: No
Location: Mobile, Al
Contact:

Post by snoopdog »

Yeah he was not worried about alot of stuff. I guess he was just making a point, which is fine. I needed updating anyway.
"When they was no meat we ate fowl, when there was no fowl we ate crawdad. And when there was no crawdad to be found, we ate sand."--Cellmate
"You ate what?"--H.I.
"We ate sand."--Cellmate
"You ate sand?"--H.I.
"That's right."--Cellmate
User avatar
snoopdog
Yellow Tang
Posts: 4258
Joined: Mon Feb 17, 2003 7:37 pm
Are you a Bot ?: No
Location: Mobile, Al
Contact:

Post by snoopdog »

Wow, i guess i am flattered. They have hacked over 6k web pages here is there website.

http://www.zone-h.com/en/defacements/fi ... r=un-root/

We are not on the cover yet but look at all of the ones that when you click still say un-root. I doubt anyone is fully protected against this guy. I can at least say i had ours back up and running in a few hours. The other hundred hacked today are still back up which leads me to believe they did not have a backup or did not make there pages themselves.
"When they was no meat we ate fowl, when there was no fowl we ate crawdad. And when there was no crawdad to be found, we ate sand."--Cellmate
"You ate what?"--H.I.
"We ate sand."--Cellmate
"You ate sand?"--H.I.
"That's right."--Cellmate
User avatar
snoopdog
Yellow Tang
Posts: 4258
Joined: Mon Feb 17, 2003 7:37 pm
Are you a Bot ?: No
Location: Mobile, Al
Contact:

Post by snoopdog »

BTW anyone having problems staying logged in do this.

Delete all of your browser cache, ALL of it.
Delete all of your cookies...ALL of it.

Close all of your browsers, log in and close you browser again.

Open your browser and you should be logged in with your credentials retained.
"When they was no meat we ate fowl, when there was no fowl we ate crawdad. And when there was no crawdad to be found, we ate sand."--Cellmate
"You ate what?"--H.I.
"We ate sand."--Cellmate
"You ate sand?"--H.I.
"That's right."--Cellmate
Jahdiel
Astrea snail
Posts: 1430
Joined: Sat Jun 12, 2004 7:59 pm
Location: Fairhope

Post by Jahdiel »

I for one don't mind if the chat is left out, tried it and it got frustrating that night anyways. Could be because the captain was by my side :? And as for the stats, sorry, but that does not teach me anything about reef keeping. Sorry if I offend anyone, just my personal opinion.
Karen
User avatar
snoopdog
Yellow Tang
Posts: 4258
Joined: Mon Feb 17, 2003 7:37 pm
Are you a Bot ?: No
Location: Mobile, Al
Contact:

Post by snoopdog »

Ahh Captains, woman after my own heart. I can say that stuff will be my downfall. On a good note our redirects are picking up, I guess the webcrawlers are finally finding us. While i was looking at the raw logs tonight i noticed that www.bet.com is even spidering to find stuff about snoopdog on our site.

Image
"When they was no meat we ate fowl, when there was no fowl we ate crawdad. And when there was no crawdad to be found, we ate sand."--Cellmate
"You ate what?"--H.I.
"We ate sand."--Cellmate
"You ate sand?"--H.I.
"That's right."--Cellmate
User avatar
KrazyPlace
Astrea snail
Posts: 1005
Joined: Sat Aug 30, 2003 4:25 pm
Location: Beaumont, TX

Post by KrazyPlace »

Snoop, wasn't BET your original goal anyways? :lol:

The chat isn't used by anyone... I think. The stats are intresting, but I agree with Karen... not really needed.

BTW... how do I get back into my gallery? My username and password quit working a few months back.
Wind me up!
User avatar
Phisher
Hermit Crab
Posts: 773
Joined: Sun Sep 28, 2003 8:10 pm
Location: Saucier

Post by Phisher »

Nice job rooting it out Snoop.

Joe
Image
User avatar
ShagMan
Goby
Posts: 2145
Joined: Fri Feb 21, 2003 3:41 pm
Location: Mobile, AL
Contact:

Post by ShagMan »

I personally enjoyed the stats page... but if it's a security hole, it's gotta go :)
-Josh Murrah
User avatar
snoopdog
Yellow Tang
Posts: 4258
Joined: Mon Feb 17, 2003 7:37 pm
Are you a Bot ?: No
Location: Mobile, Al
Contact:

Post by snoopdog »

You need to just PM me with what you want your password to be. When we upgraded Gallery, it did not retain some of the information.
"When they was no meat we ate fowl, when there was no fowl we ate crawdad. And when there was no crawdad to be found, we ate sand."--Cellmate
"You ate what?"--H.I.
"We ate sand."--Cellmate
"You ate sand?"--H.I.
"That's right."--Cellmate
User avatar
snoopdog
Yellow Tang
Posts: 4258
Joined: Mon Feb 17, 2003 7:37 pm
Are you a Bot ?: No
Location: Mobile, Al
Contact:

Post by snoopdog »

<------------------ Attachment mod test ------------------->
Attachments
mp3.gif
mp3.gif (253 Bytes) Viewed 2419 times
"When they was no meat we ate fowl, when there was no fowl we ate crawdad. And when there was no crawdad to be found, we ate sand."--Cellmate
"You ate what?"--H.I.
"We ate sand."--Cellmate
"You ate sand?"--H.I.
"That's right."--Cellmate
User avatar
snoopdog
Yellow Tang
Posts: 4258
Joined: Mon Feb 17, 2003 7:37 pm
Are you a Bot ?: No
Location: Mobile, Al
Contact:

Post by snoopdog »

Ok the webmail icon is back, remember the proper format is

Login: snoopdog@mbrk.com
Password: XXXXXX

The attachment mod is back kicking agagin. The gallery icon is back now.
"When they was no meat we ate fowl, when there was no fowl we ate crawdad. And when there was no crawdad to be found, we ate sand."--Cellmate
"You ate what?"--H.I.
"We ate sand."--Cellmate
"You ate sand?"--H.I.
"That's right."--Cellmate
Post Reply