Loans - Hen Night - Credit Cards - Pirate Costume - Web Advertising
PDA

View Full Version : D*mn it. My website got hacked

er1cw
Oct 21st 2006, 5:52 pm
My website got hacked this morning. I am running a rapidshare download service and all the account got their password and email changed.

What can i do to trace back the activity ?? How easy is it to decode an url like this ?

link=aHRodHRwOi8vcmFwaWRzaGFyZS5kZS9maWxlcy8zNTA1NjM5MC9CaWcuRmF0LkZBUS5ORVdTTEVU%0D%0AVEVSLnppcA%3D%3D&ref=
faraday911
Oct 22nd 2006, 2:34 am
your link is base64 encoded, it takes 1 click to decode it, here it is:
hthttp://rapidshare.de/files/35056390/Big.Fat.FAQ.NEWSLETŠ =TER.zip

guess you should contact your host and inform them of the fact, then analyze your server logs to see what exactly has been done (if they haven't erased them which they should have done), if you have no logs, try to get a backup, some info might have been saved before they have been deleted
er1cw
Oct 22nd 2006, 10:41 am
are there any encoding option that is not easy to be decode ? preferably custom encoding ?
sacx13
Oct 23rd 2006, 3:25 am
And to be understanded by your browser ? Nope !

Regards
thuonghieu
Nov 22nd 2006, 2:54 pm
aHRodHRwOi8vcmFwaWRzaGFyZS5kZS9maWxlcy8zNTA1NjM5MC9CaWcuRmF0LkZBUS5ORVdTTEVU%0D%0AVEVSLnppcA is not base64, I think that