quaddicted.com hacked?

[Aquashark]

http://www.quaddicted.com/



is Spirit pulling a joke or is it for real?

[scar3crow]

Its real, around 9am -5GMT he made a comment about it in #qc

At the time it was just a text message (the one he put in the word bubble for the geek) and lots of errors. He has since customized his disdain for the hacker.

[Aquashark]

is the file archive damaged?

[Spirit]

Yes, it's real. A turkish script kiddie. I will investigate further when I have access to today's logfiles (on the next day).
I made a backup 2 days ago since I smelled it happen.

[Spirit]

is the file archive damaged?

As it seems to have been just some kind of defacement he didn't touch anything apart the cms. The file archive is not damaged at all except if someone worked on it during the last 2 days. Then those changes will be gone once I restore the backup.

No need to worry! :d

[Net-Tyme]

So if you need to pull from the backup then the server files were deleted? Mind sharing that ip?

[Spirit]

So if you need to pull from the backup then the server files were deleted? Mind sharing that ip?

The server files seem to be 100% there (except the one's from the cms maybe. gotta check that). It's the database I restore.

I'll definitely share the ip and all other information I find.

[Baker]

That's a shame.

Mambo gives me the impression of being very unsecure.

Solecord, Yellow and I looked at Mambo for QuakeOne.com back around August of last year. Some of the features were nice, the file download section came to mind, but the rest of it seemed very awkward to me and a lot of it did not give the impression of a "mature CMS".

Most CMS systems have something annoying about them. Fortunately, Solecord changes what he does not like :d :d

[Solecord]

That's a shame.

Mambo gives me the impression of being very unsecure.

Solecord, Yellow and I looked at Mambo for QuakeOne.com back around August of last year. Some of the features were nice, the file download section came to mind, but the rest of it seemed very awkward to me and a lot of it did not give the impression of a "mature CMS".

Most CMS systems have something annoying about them. Fortunately, Solecord changes what he does not like :d :d

On the contrary, Mambo is very secure and is very mature as a CMS. Perhaps there was a security flaw that Spirit didn't update??? It's a bit more advanced than other CMS's available which makes it a bit harder to learn properly or to learn how to take advantage of all of it's features. Other than that I would highly recommend Mambo or Joomla to anyone looking for a stable CMS. Not sure why or how Spirit got hacked...

[Magn3tar]

So someone spends all that time putting up a website and some dickshit goes and tries to ruin it

Get me an IP, I'll run it by the proper authorities, in which I'm very good friends with.

[Spirit]

I installed the latest update for Joomla (new Mambo) 1 or 2 days before that. I think he used an exploit for one of the used components though.

[Spirit]

Ok, here's all the info I could get.

The attackers IP was 85.102.110.226
That helps nothing though since according to http://whois.domaintools.com/85.102.110.226 it was just a dynamic IP.
Previously he visited the site with the IP 85.98.140.87
The faulty component was my forum (the image upload part of it).
This is the code that was inserted: http://www.coder Do not give them a referrer from quakeone.com, ie do not click this link but copy&paste it! -ukala.org/C99.txt
It was pretty much my fault not to update the forum component to the latest version...
This probably was the used exploit: http://milw0rm.com/ no referrer exploits/1994

I don't think investigating to the Turk Telekom would help anything. And thus I'll just continue to make fun of the idiot as long as I haven't the site back up

[foq]

We should send him an email with a porno attatchment that's a virus. lol

[Grim]

We should send him an email with a porno attatchment that's a virus. lol

Oh sure, that'll work.

[HERB]ED]

what the hell is that picture?!?1