1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

My site was hacked please help!!

Discussion in 'BlackHat Lounge' started by mandude, Nov 18, 2010.

  1. mandude

    mandude Jr. VIP Jr. VIP Premium Member

    Joined:
    Feb 18, 2008
    Messages:
    797
    Likes Received:
    306
    Location:
    Tampa FL
    Guys I hope one of you can help a fellow blackhatter out. If I cant get support to do it, I need someone here. I will do anything. SOme dickhead prick hacked my site its GONE. they corrupted the database or something. my entire site is wordpress, and its telling me there is no config file and so i think its gone.

    If anyone could help, or perhaps know how to fuck this asshole, maybe you know who it is or know about it or what. Goes by name "TeaM KuWaiT HaCkErS

    By

    HaCkErS eV!L"

    here is my site only giving it for people to help me. Please!

    Thank you

    Code:
    http://blogcontentwriter.com
     
  2. proxified

    proxified Jr. VIP Jr. VIP Premium Member

    Joined:
    Aug 16, 2009
    Messages:
    183
    Likes Received:
    388
    Occupation:
    still exploring
    Location:
    India
    Are the rest of the files there in your hosting account? if yes first thing to do is backup your wordpress sitefiles. Now check the error_log at your hosting and probably you'll be able to knw what all changes have been made and what was causing its vulnerability
     
  3. coxie

    coxie Registered Member

    Joined:
    Oct 18, 2010
    Messages:
    74
    Likes Received:
    11
    if you didn't back up your site then contact your host and see if they have any back ups, they should have back ups for you and maybe their support team can then restore your site.
     
  4. sidddd

    sidddd Power Member

    Joined:
    May 15, 2008
    Messages:
    749
    Likes Received:
    460
    That hurts.

    Visit that page--click on the url link (Directory fast change : /home/blogcont/public_html/)--your site is still alive. They have definitely shifted those wordpress files into another directory.

    Download every file from the hosting and request the hosting support to take a back-up as well. Haven't seen such brutal hacking exploits on Wordpress... keep me updated.
     
  5. trafficsource

    trafficsource Jr. VIP Jr. VIP Premium Member

    Joined:
    May 22, 2009
    Messages:
    793
    Likes Received:
    1,130
    Occupation:
    IM
    Location:
    Baltic States
  6. mandude

    mandude Jr. VIP Jr. VIP Premium Member

    Joined:
    Feb 18, 2008
    Messages:
    797
    Likes Received:
    306
    Location:
    Tampa FL
    thanks for the info guys. ok so heres an update

    I manged to create a new wp-config, reset my admin pw (they changed it) and got back in to wordpress. wordpress is still there. seemed ok. realized half of the posts and pages are gone. its like an old version of the database or something. Makes my site totally useless as everything has changed in the last few months. PRaying my hosting has at least a 2 day old backup.

    So the index i changed back, its my blog again. I manged to track it down to one theme, somehow the theme had code injected into it and they got in. I traced it back to a guy and a site: http://www.soqor.net/ goes by "Hackers Pal"

    dickhead.

    If anyone wants to see the page it was, i saved it so i can upload here or something. basically just said what I mentioned in the first post, and some weird words.
     
  7. coxie

    coxie Registered Member

    Joined:
    Oct 18, 2010
    Messages:
    74
    Likes Received:
    11
    these people are scumbags mate, hope you can get it all back to normal
     
  8. proxified

    proxified Jr. VIP Jr. VIP Premium Member

    Joined:
    Aug 16, 2009
    Messages:
    183
    Likes Received:
    388
    Occupation:
    still exploring
    Location:
    India
    If in case your hosting fails to provide the backups which I wish it don't fails you can start grabbing your content as much as you can from google cache.
     
  9. mandude

    mandude Jr. VIP Jr. VIP Premium Member

    Joined:
    Feb 18, 2008
    Messages:
    797
    Likes Received:
    306
    Location:
    Tampa FL
    thanks coxie. Yeah, I managed to get the important pages from google and yahoo cache. Didnt get all the blog posts back but they are less important.
     
  10. ebby895

    ebby895 Newbie

    Joined:
    Apr 6, 2008
    Messages:
    29
    Likes Received:
    6
    what's the name of the theme they injected and where did you get it from? so the community will know what to watch out for. Sorry for what happend to you.. i know how you feel cuz all my sites in one server got hacked too and i just got so fed up and just rebuilded. I hate them hackers who have nothing else to do but try to destroy someone's life.. sick! but karma is a bitch i just wish i could see what theirs will be...
     
  11. polocolto

    polocolto Regular Member

    Joined:
    Apr 26, 2009
    Messages:
    241
    Likes Received:
    28
    You should point the theme to us so that we can avoid it
     
  12. mccullum

    mccullum Power Member

    Joined:
    Aug 21, 2009
    Messages:
    509
    Likes Received:
    92
    why do these scumbags hack sites?i mean what on earth do they get by that?f**g recognition???get a life.
     
  13. ShadeDream

    ShadeDream Elite Member

    Joined:
    Nov 27, 2008
    Messages:
    2,209
    Likes Received:
    5,230
    Location:
    He who laughs last, laughs longest.
    Script kiddies...