D*mn it. My website got hacked

Discussion in 'Security' started by er1cw, Oct 21, 2006.

0
  1. #1
    My website got hacked this morning. I am running a rapidshare download service and all the account got their password and email changed.

    What can i do to trace back the activity ?? How easy is it to decode an url like this ?

     
    er1cw, Oct 21, 2006 IP
  2. faraday911

    faraday911 Peon

    Messages:
    26
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #2
    your link is base64 encoded, it takes 1 click to decode it, here it is:
    hthttp://rapidshare.de/files/35056390/Big.Fat.FAQ.NEWSLETР=TER.zip

    guess you should contact your host and inform them of the fact, then analyze your server logs to see what exactly has been done (if they haven't erased them which they should have done), if you have no logs, try to get a backup, some info might have been saved before they have been deleted
     
    faraday911, Oct 22, 2006 IP
  3. er1cw

    er1cw Peon

    Messages:
    114
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #3
    are there any encoding option that is not easy to be decode ? preferably custom encoding ?
     
    er1cw, Oct 22, 2006 IP
  4. sacx13

    sacx13 Active Member

    Messages:
    438
    Likes Received:
    10
    Best Answers:
    0
    Trophy Points:
    58
    #4
    And to be understanded by your browser ? Nope !

    Regards
     
    sacx13, Oct 23, 2006 IP
  5. thuonghieu

    thuonghieu Peon

    Messages:
    105
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #5
    aHRodHRwOi8vcmFwaWRzaGFyZS5kZS9maWxlcy8zNTA1NjM5MC9CaWcuRmF0LkZBUS5ORVdTTEVU%0D%0AVEVSLnppcA is not base64, I think that
     
    thuonghieu, Nov 22, 2006 IP