Hack3d by " Muslim Cyb3r Sh3ll'z " Any idea how to undo this?

Discussion in 'BlackHat Lounge' started by Bostoncab, Sep 6, 2012.

Thread Status:
Not open for further replies.
Page 1 of 2
  1. Sep 6, 2012
    #1
    Bostoncab

    Bostoncab Elite Member

    Joined:
    Dec 31, 2009
    Messages:
    2,256
    Likes Received:
    514
    Occupation:
    pain in the ass cabbie
    Location:
    Boston,Ma.
    Hack3d by " Muslim Cyb3r Sh3ll'z " Any idea how to undo this?

    I am convinced this is because I bought a service on fiverr that was done poorly and I left negative review for it. GF hacker scum. Like hacking My WP site will make President Obama stop drone strikes? Duh.. ok I will let him know the next time we have a beer.
     
    • Thanks Thanks x 2
  2. Sep 6, 2012
    #2
    jbarrett

    jbarrett Registered Member

    Joined:
    Jul 21, 2011
    Messages:
    99
    Likes Received:
    40
    do you know how they hacked your site? you can take a look at your access logs to see how they got in.

    Can you restore from a previous back and then upgrade to the latest version of wp ?
     
  3. Sep 6, 2012
    #3
    spenzo

    spenzo Senior Member

    Joined:
    Oct 20, 2009
    Messages:
    967
    Likes Received:
    553
    mine was hacked two times..wordpress sites.. :(

    always have updated version of wordpress..
     
  4. Sep 6, 2012
    #4
    mrtwister_65

    mrtwister_65 Regular Member

    Joined:
    Dec 30, 2009
    Messages:
    462
    Likes Received:
    534
    There was a thread about security here for wordpress sites.

    First take a look at files in your wp directory and delete backgate page. Read about "timthumb exploit". Most likely you've been hacked with that exploit.
     
  5. Sep 6, 2012
    #5
    Bostoncab

    Bostoncab Elite Member

    Joined:
    Dec 31, 2009
    Messages:
    2,256
    Likes Received:
    514
    Occupation:
    pain in the ass cabbie
    Location:
    Boston,Ma.
    This is strange because I already was running the latest version of wordpress. The guy actually managed to change my wordpress password also. I have since logged into phpmyadmin and reset the password. Now I am at least back into wordpress but the hack page is still there.

    I know it is just a .html index page somewhere in the webspace but I can't find it in the root folder....

    Anyone have an idea where to look for this?
     
  6. Sep 6, 2012
    #6
    JimmyWong

    JimmyWong Registered Member

    Joined:
    Feb 24, 2012
    Messages:
    91
    Likes Received:
    169
    - Login to your FTP
    - Copy everything into a folder on your hard drive.
    - Open your HTML editor
    - Click "Ctrl + F" for Search. Search the entire directory for 'Cyb3r'
    - Bingo.
     
    • Thanks Thanks x 1
  7. Sep 6, 2012
    #7
    marvic

    marvic Regular Member

    Joined:
    Mar 8, 2009
    Messages:
    316
    Likes Received:
    156
    Location:
    Bali Island of God
    Have a back up? Just upload and replace your index.php to root..
     
  8. Sep 6, 2012
    #8
    Bostoncab

    Bostoncab Elite Member

    Joined:
    Dec 31, 2009
    Messages:
    2,256
    Likes Received:
    514
    Occupation:
    pain in the ass cabbie
    Location:
    Boston,Ma.
    No backup yet.. I just built this site last week..
     
  9. Sep 6, 2012
    #9
    ofuture

    ofuture Jr. VIP Jr. VIP Premium Member

    Joined:
    Jul 25, 2011
    Messages:
    3,233
    Likes Received:
    308
    Gender:
    Male
    Occupation:
    Fulfill clients demand!
    Location:
    Clients Heart!
    Home Page:
    you may use backup buddy WordPress plugin and some security plugin!
     
  10. Sep 6, 2012
    #10
    michael8t6

    michael8t6 Regular Member

    Joined:
    Apr 28, 2012
    Messages:
    287
    Likes Received:
    229
    Location:
    somewhere on this god forsaken planet
  11. Sep 6, 2012
    #11
    Bostoncab

    Bostoncab Elite Member

    Joined:
    Dec 31, 2009
    Messages:
    2,256
    Likes Received:
    514
    Occupation:
    pain in the ass cabbie
    Location:
    Boston,Ma.
    i did this but its not in there and I even looked at all .html files individually (there were only like 6) could this be something he did to the .httaccess files?
     
  12. Sep 6, 2012
    #12
    lietuvis002

    lietuvis002 BANNED BANNED

    Joined:
    Aug 3, 2012
    Messages:
    2,389
    Likes Received:
    2,581
    Hehe, Muslims knows how to hack? LOL
     
    • Thanks Thanks x 1
  13. Sep 6, 2012
    #13
    G-S-T

    G-S-T Executive VIP Jr. VIP

    Joined:
    Jan 20, 2011
    Messages:
    1,926
    Likes Received:
    8,938
    Occupation:
    Full time IM
    Location:
    Heavy in the game
     
    • Thanks Thanks x 2
    Last edited by a moderator: May 18, 2016
  14. Sep 6, 2012
    #14
    lietuvis002

    lietuvis002 BANNED BANNED

    Joined:
    Aug 3, 2012
    Messages:
    2,389
    Likes Received:
    2,581
    You changed my mind from 0:30 second. :p But I still don't very like them..
     
    • Thanks Thanks x 1
    Last edited by a moderator: May 18, 2016
  15. Sep 6, 2012
    #15
    G-S-T

    G-S-T Executive VIP Jr. VIP

    Joined:
    Jan 20, 2011
    Messages:
    1,926
    Likes Received:
    8,938
    Occupation:
    Full time IM
    Location:
    Heavy in the game
    Teach that kid JS and PHP and he will take over the world
     
    • Thanks Thanks x 2
  16. Sep 6, 2012
    #16
    Bostoncab

    Bostoncab Elite Member

    Joined:
    Dec 31, 2009
    Messages:
    2,256
    Likes Received:
    514
    Occupation:
    pain in the ass cabbie
    Location:
    Boston,Ma.
    You guys arguing about this on this thread is as dumb as the guy who hacked me thinking hacking me will stop America from launching drone strikes all over the middle east. Can we focus here?
     
    • Thanks Thanks x 2
    Last edited by a moderator: May 18, 2016
  17. Sep 6, 2012
    #17
    G-S-T

    G-S-T Executive VIP Jr. VIP

    Joined:
    Jan 20, 2011
    Messages:
    1,926
    Likes Received:
    8,938
    Occupation:
    Full time IM
    Location:
    Heavy in the game

    Whos arguing?

    Have a coke and a smile :)
     
    • Thanks Thanks x 1
    Last edited by a moderator: May 18, 2016
  18. Sep 6, 2012
    #18
    toptoptop

    toptoptop BANNED BANNED

    Joined:
    Dec 24, 2011
    Messages:
    567
    Likes Received:
    157
    What type of service did you order?
     
  19. Sep 6, 2012
    #19
    Bostoncab

    Bostoncab Elite Member

    Joined:
    Dec 31, 2009
    Messages:
    2,256
    Likes Received:
    514
    Occupation:
    pain in the ass cabbie
    Location:
    Boston,Ma.
    Citations. I am only thinking it is related because I know the service provider is in Pakistan. I know it may be a stretch but it is a weird coincidence that I am hacked from Pakistan hours after leaving a negative review for a pakistani.
     
  20. Sep 6, 2012
    #20
    HerbaL

    HerbaL BANNED BANNED

    Joined:
    Sep 6, 2012
    Messages:
    26
    Likes Received:
    6
    Why are these muslims so bent on hacking? Turks also hacked my blogs. As if its going to get them anywhere politically. Next time NATO is having talks they will say "but what about the wordpress blogs that are being hacked"
     
    • Thanks Thanks x 1
Page 1 of 2
Thread Status:
Not open for further replies.