UCB Forums have been 'hacked'

iphitus · 2005-05-20 21:57:18

http://user-contributions.org/forums/userproject/

some sorry bastard has too much time on his hands.

http://www.google.com.au/search?q=Garzt … S:official
http://www.zone-h.org/en/defacements/fi … er=Garzt3/

googling shows that the sorry script kiddie has a fetish for phpbb's and needs to get a life......

i3839 · 2005-05-20 22:16:01

Better him than someone installing a proxy or doing other really nasty stuff it seems...

shadowhand · 2005-05-20 22:42:45

Bummer. Maybe it's time to use something other than phpBB, like Simpleboard or ... well, I dunno what the other options are.

cactus · 2005-05-20 23:40:13

Humerous picture of Allastair Cookie. Small consolation I would imagine...

I wonder what version of phpbb usercb was running..

Anyway, I am testing out punBB. It is damn fast, but a bit light on the features side. Works fine for my needs, but might not for the arch community. Damn fast though...damn fast. (prespawn php-fcgi with eaccelerator helps too.).

Did I mention fast?

EDIT: Yikes. Looks like all of usercb pages are fooked. Wonder if it was a phpbb vuln, or something else (I would still bet on phpbb being the hole).

iphitus · 2005-05-21 01:43:32

if you look at the google i did on the dude, 90% of his targets have been phpbb's.

either way, not *everything* is buggered.

http://user-contributions.org/forums/us … d=newposts

i can still search new posts, cant view them though. looks like its just the index page.

iphitus · 2005-05-21 03:33:57

yay, seems like it's back up

dtw · 2005-05-21 04:11:57

ah - backups - you can get far if you keep 'em

iphitus · 2005-05-21 04:42:59

wiki is down tho

rasat · 2005-05-21 10:21:26

My host's hosting usercb, server got hacked. All index.php and index.html were changed. They say the problem was with a phpbb vulnerability. As it was the hacker was only able to modify the website files and not anything else on the servers.

Its fixed now.

iphitus · 2005-05-21 10:55:04

yay fixed

Gullible Jones · 2005-05-21 17:57:15

You know, I think phpBB forums need some sort of defence against script kiddies... Some way to find who the hack came from and send something nasty their way. For Windows, I'm thinking c:auxaux on startup...

i3839 · 2005-05-21 18:47:32

The thing is that if some stupid script kiddy can already hack you, you're doing something wrong. Be glad he didn't do any real damage, and start fixing the security before a malicious cracker chooses your server.

rasat · 2005-05-21 19:12:27

Same I told to my host:
> Luckily it was a "harmless" hacker just proving he/she is able to hack.
> He/she could have deleted everything.

Fortunately I have a copy of all installed php web systems e.g. phpBB and PostNuke, in my local and could easily replace the hacked index files. They were many, it became a full day job.
The good side, got an opportunity to remove lot of old stuff. And a first hand experience in the importance of security.

Arch Linux

#1 2005-05-20 21:57:18

UCB Forums have been 'hacked'

#2 2005-05-20 22:16:01

Re: UCB Forums have been 'hacked'

#3 2005-05-20 22:42:45

Re: UCB Forums have been 'hacked'

#4 2005-05-20 23:40:13

Re: UCB Forums have been 'hacked'

#5 2005-05-21 01:43:32

Re: UCB Forums have been 'hacked'

#6 2005-05-21 03:33:57

Re: UCB Forums have been 'hacked'

#7 2005-05-21 04:11:57

Re: UCB Forums have been 'hacked'

#8 2005-05-21 04:42:59

Re: UCB Forums have been 'hacked'

#9 2005-05-21 10:21:26

Re: UCB Forums have been 'hacked'

#10 2005-05-21 10:55:04

Re: UCB Forums have been 'hacked'

#11 2005-05-21 17:57:15

Re: UCB Forums have been 'hacked'

#12 2005-05-21 18:47:32

Re: UCB Forums have been 'hacked'

#13 2005-05-21 19:12:27

Re: UCB Forums have been 'hacked'

Board footer