OMG MY Directory Hacked...

Discussion in 'Directories' started by dreamsubmitting, Dec 19, 2007.

  1. #1
    Guys today i check that our main Directory www.dreamsubmitting.info is hacked by any turkhacking named hacker!

    Can anybody tell me where we can complain about all this hacker or how take it out from there access..?

    Dilpreet:(
     
    dreamsubmitting, Dec 19, 2007 IP
  2. infogle

    infogle Prominent Member

    Messages:
    2,732
    Likes Received:
    128
    Best Answers:
    1
    Trophy Points:
    300
    #2
    just contact your hosting provider they will block the website... and reset the password do this immediately so that... your site could be protected...
     
    infogle, Dec 19, 2007 IP
  3. dreamsubmitting

    dreamsubmitting Well-Known Member

    Messages:
    1,279
    Likes Received:
    44
    Best Answers:
    0
    Trophy Points:
    160
    #3
    i changed its cpanel password...but still its redirecting to there site

    Dilpreet
     
    dreamsubmitting, Dec 19, 2007 IP
  4. infogle

    infogle Prominent Member

    Messages:
    2,732
    Likes Received:
    128
    Best Answers:
    1
    Trophy Points:
    300
    #4
    just see your index... file... they have made some changes in that... try to edit that...
     
    infogle, Dec 19, 2007 IP
  5. DnHype

    DnHype Active Member

    Messages:
    1,011
    Likes Received:
    24
    Best Answers:
    0
    Trophy Points:
    80
    #5
    Look into your index.php if there is no Redirection script using java or php.
    Look in your cpanel redirection if there is some made.
    check out your script version is there is any exploit made on, and if some patch version as to be done or not.
    any backdoor on your computer ? that could tell yor ftp login when you do upload or again a keyloger that send your password ? so scan your computer and make update, turn on firewall if not done already. Change all password creat new ftp user with same directory then your with restricted permision and Different password then cpanel on and mysql.
    Hope it help
     
    DnHype, Dec 19, 2007 IP
  6. dreamsubmitting

    dreamsubmitting Well-Known Member

    Messages:
    1,279
    Likes Received:
    44
    Best Answers:
    0
    Trophy Points:
    160
    #6
    i am not sure about that...but i think they edit some in cpanel its redirecting from all path of this directory even from my directory's admin panel too

    Dilpreet
     
    dreamsubmitting, Dec 19, 2007 IP
  7. Think411

    Think411 Well-Known Member

    Messages:
    867
    Likes Received:
    31
    Best Answers:
    0
    Trophy Points:
    145
    #7
    haha, seems like good link bait to me ;) good job on getting hits, got me!
     
    Think411, Dec 19, 2007 IP
  8. WatchOut

    WatchOut Guest

    Messages:
    1,359
    Likes Received:
    65
    Best Answers:
    0
    Trophy Points:
    0
    #8
    Replace your existing index.php file with a fresh one, should do the trick.

    Meti
     
    WatchOut, Dec 19, 2007 IP
  9. smoke2k

    smoke2k Guest

    Messages:
    141
    Likes Received:
    4
    Best Answers:
    0
    Trophy Points:
    0
    #9
    onces they hacked mine index.html

    while i also had index.php


    idiots +p
     
    smoke2k, Dec 19, 2007 IP
  10. DnHype

    DnHype Active Member

    Messages:
    1,011
    Likes Received:
    24
    Best Answers:
    0
    Trophy Points:
    80
    #10
    Ok HERE IS THE SOLUTION
    Open PHPMYADMIN (if data are saved into database)
    Search for entry like
    <option label="|___&lt;META HTTP-EQUIV=&quot;Refresh&quot; CONTENT=&quot;1;URL=http://www.turkhacking.phpnet.us&quot;&gt;" value="1">|___&lt;META HTTP-EQUIV=&quot;Refresh&quot; CONTENT=&quot;1;URL=http://www.turkhacking.phpnet.us&quot;&gt;</option>

    Then remove them, i fund 2 entry like that
    They used a simple technique that everyone can do
    You will need to path or fix your page where we can submit new url It's How they do, xlm exploit.

    Search for new version of your script if not you will need to fix manualy or change whole script.

    Cheer
     
    DnHype, Dec 19, 2007 IP
  11. dreamsubmitting

    dreamsubmitting Well-Known Member

    Messages:
    1,279
    Likes Received:
    44
    Best Answers:
    0
    Trophy Points:
    160
    #11
    dreamsubmitting, Dec 19, 2007 IP
  12. WatchOut

    WatchOut Guest

    Messages:
    1,359
    Likes Received:
    65
    Best Answers:
    0
    Trophy Points:
    0
    #12
    .tpl file, I assume?

    Meti
     
    WatchOut, Dec 19, 2007 IP
  13. ListedHosting

    ListedHosting Banned

    Messages:
    606
    Likes Received:
    7
    Best Answers:
    0
    Trophy Points:
    0
    #13
    Why is this group targeting you?
     
    ListedHosting, Dec 19, 2007 IP
  14. dreamsubmitting

    dreamsubmitting Well-Known Member

    Messages:
    1,279
    Likes Received:
    44
    Best Answers:
    0
    Trophy Points:
    160
    #14
    dreamsubmitting, Dec 19, 2007 IP
  15. WatchOut

    WatchOut Guest

    Messages:
    1,359
    Likes Received:
    65
    Best Answers:
    0
    Trophy Points:
    0
    #15
    WatchOut, Dec 19, 2007 IP
  16. dreamsubmitting

    dreamsubmitting Well-Known Member

    Messages:
    1,279
    Likes Received:
    44
    Best Answers:
    0
    Trophy Points:
    160
    #16
    Just i delete arts category....

    Dilpreet
     
    dreamsubmitting, Dec 19, 2007 IP
  17. dreamsubmitting

    dreamsubmitting Well-Known Member

    Messages:
    1,279
    Likes Received:
    44
    Best Answers:
    0
    Trophy Points:
    160
    #17
    Well this hacker delete my whole site...

    Anybody know where we can reports about this..
    Dilpreet
     
    dreamsubmitting, Dec 19, 2007 IP
  18. malcolm1

    malcolm1 Prominent Member

    Messages:
    7,148
    Likes Received:
    758
    Best Answers:
    0
    Trophy Points:
    310
    #18
    Well i hope you have fixed problem...

    thx
    malcolm
     
    malcolm1, Dec 19, 2007 IP
  19. Agent_Dweeb

    Agent_Dweeb Peon

    Messages:
    5,607
    Likes Received:
    384
    Best Answers:
    0
    Trophy Points:
    0
    #19
    Make backups now!

    Contact your host to see if they have got any recent backups.
     
    Agent_Dweeb, Dec 19, 2007 IP
  20. mikey1090

    mikey1090 Moderator Staff

    Messages:
    15,869
    Likes Received:
    1,055
    Best Answers:
    0
    Trophy Points:
    445
    Digital Goods:
    2
    #20
    yes, they add a meta redirect into your database.

    The same happened to my zorg links in august.
     
    mikey1090, Dec 19, 2007 IP