Hacked site

[mission]

Hi guys, just discovered a clients Wordpress site has been hacked I've managed to get access again to the dashboard and all the files and theme is still there thou when i go to the site url all i get is a blank page with hacked by hacker on it any of you guys shed some light on where to look to correct this as I've been thru some of the directory's and can't see how or what they've done i've noticed in the traffic logs intelium_bot and also wp_login attempts from an IP in Tunisia.

can anyone help point me in the right direction on where to look


p.s what they stand to gain from such things i don't no

 

[taslayer]

ok first off you shouldnt be managing client if you dont know security. i will help you out, lol so yeah dude if you need lemme know because we do not know where this guy has been as of now, server could be rooted, bots runnin, all sorts of things. also i know this is my first post ive been lurking for a while lol that n havnt been able to access a computer. send me a email my username is at gmail lol but ye email me ill be more than willing to help you bro just email me. ill respond to you asap because this could be a bigger security issue than you are aware of.

 

[imprint]

ok first off you shouldnt be managing client if you dont know security. i will help you out, lol so yeah dude if you need lemme know because we do not know where this guy has been as of now, server could be rooted, bots runnin, all sorts of things. also i know this is my first post ive been lurking for a while lol that n havnt been able to access a computer. send me a email my username is at gmail lol but ye email me ill be more than willing to help you bro just email me. ill respond to you asap because this could be a bigger security issue than you are aware of.

Da fuq? You supposedly just got "out of court" ( I'm assuming you weren't representing anyone ) for accessing some type of U.S. government computer without authorization and you decide to make your belated intro post by offering to just randomly help some guy? Did the judge ask you to turn over a new leaf and you're starting here? Something seems off about the post, and I'm not talking about the small font in-between the lines.

 

[mission]

lol agreed thankyou for your offering your help thou taslayer but given your lack of post and such i'll pass

 

[mission]

ok i've managed to fix it and its back up they changed the header.php file within the theme folder gits!!!! can anyone give us advice in stopping this in future from happening

 

[NX_NULL]

if you are managing ur server with WHM, they have an inbuilt virus scan that checks your server with any known c99-100 shell or other variation of it that gives hacker access to server...

I tried to upload different shell to my updated WHM server, and even with encoding them multiply, WHM still detects them...

and also dont forget to update ur Wordpress.
It can also come from a plugin or theme that hacker insert a backdoor inside it, no body checks the codes of those plugins and themes

 

[V]

ok i've managed to fix it and its back up they changed the header.php file within the theme folder gits!!!! can anyone give us advice in stopping this in future from happening

there's a plugin "BulletProof Security" mate, install it and customize the security of your WP site. Hope it helps

 

[ice41]

scan your site here:

http://sucuri.net/

Make sure it's totally clean, so you won't have any headaches later.

 

[WrightWilliams]

Uh, this thread is bonkers.
I get the strange feeling the first reply to this guy is somehow related to the original post and it feels like he is going to try and sell his services to other people who have been hacked.
But I am probably wrong and he is just an idiot.

 

[mission]

Uh, this thread is bonkers.
I get the strange feeling the first reply to this guy is somehow related to the original post and it feels like he is going to try and sell his services to other people who have been hacked.
But I am probably wrong and he is just an idiot.

lol no its not related but feel free to think what you want and there was me thinking this was a place to learn and share but thanks for the positive input

cheers guys appreciate the help