Simple Machines Community Forum

Archived Boards and Threads... => Archived Boards => SMF Feedback and Discussion => Aiheen aloitti: TicklyTigger - toukokuu 03, 2006, 05:43:32 AP

Otsikko: have I been hacked? Taroq
Kirjoitti: TicklyTigger - toukokuu 03, 2006, 05:43:32 AP
Hi,

I'm running an SMF forum on my website and when accessing it this morning it only displayed the word "Taroq"

check here:

http://www.londonsalsa.co.uk/forum/

Has anyone else come across this?  I checked my database and the the it seems to be complete. 

Can anyone help?

thanks,

TT
Otsikko: Re: have I been hacked? Taroq
Kirjoitti: TicklyTigger - toukokuu 03, 2006, 05:48:19 AP
ok, ok ...

silly me ... it was just some joker who put an index.html file on my server ... still weird though ...

thanks,

TT
Otsikko: Re: have I been hacked? Taroq
Kirjoitti: SEO - toukokuu 03, 2006, 06:59:46 AP
Yes you have been hacked!

Its called a defacement
http://www.zone-h.net/defacements/view/id=3735799 (http://www.zone-h.net/defacements/view/id=3735799)

You have been hacked and there is probably still a hole somewhere in your software or server.
Otsikko: Re: have I been hacked? Taroq
Kirjoitti: H - toukokuu 03, 2006, 12:11:53 IP
Lainaus käyttäjältä: micksawyer - toukokuu 03, 2006, 06:59:46 AP
Yes you have been hacked!

Its called a defacement
http://www.zone-h.net/defacements/view/id=3735799 (http://www.zone-h.net/defacements/view/id=3735799)

You have been hacked and there is probably still a hole somewhere in your software or server.

/me wonders how zone-h keeps track of all the defacements

I would urge you to check your server permissions
Otsikko: Re: have I been hacked? Taroq
Kirjoitti: SEO - toukokuu 03, 2006, 01:41:25 IP
/me wonders how zone-h keeps track of all the defacements
[/quote]

You submit it when you have defaced the site and they check it and do a automatic screenshot.

I knew the site had been defaced because i had seen is spin past in my rss reader earler in the day.

I had a mass defacement on a server once and i have been watching the rss feeds since.

Its scary stuff man.

http://www.zone-h.org/defacements/onhold

wait 30 seconds and refresh the page  :o
Its a constant stream