server hacked into
- Thread starter davids355
- Start date
steelballs
BANNED
- Dec 5, 2008
- 1,831
- 4,585
Yes
ä¸å›½æ–‡å—
It is a bitch...
ä¸å›½æ–‡å—
It is a bitch...
- Apr 25, 2011
- 19,849
- 28,315
Yea, cleanup time already changed password to something more obscure, looked for any other accounts created or weak accounts.
Exported all security logs so I can check through all successful logins.
Also discovered when they first got in and how - rdp by the looks of it.
And also found their dictionary file- and low and behold, it contained my (now changed) password
Posted via Topify using iPhone/iPad
already changed password to something more obscure, looked for any other accounts created or weak accounts.Exported all security logs so I can check through all successful logins.
Also discovered when they first got in and how - rdp by the looks of it.
And also found their dictionary file- and low and behold, it contained my (now changed) password
Posted via Topify using iPhone/iPad
QuantumBlue Bulgaria
Junior Member
- Jul 1, 2013
- 196
- 31
Welp, it's a good thing you know what you needed to do right away. Others are not fortunate enough and all they can do for several minutes, even hours, is panic.
Wilson Grant Fisk
Elite Member
- Nov 10, 2012
- 15,677
- 46,847
Yea, cleanup time
Exported all security logs so I can check through all successful logins.
Also discovered when they first got in and how - rdp by the looks of it.
And also found their dictionary file- and low and behold, it contained my (now changed) password
Posted via Topify using iPhone/iPad
If you feel like sharing the dictionary file let me know, I would like to add it to my collection.
Before anybody asks, no I am using them for nefarious purposes, I have an interest in computer security.
For those worried about their password security, here are some interesting articles:
http://uwnthesis.wordpress.com/2012/08/30/top-10000-passwords-are-used-by-98-8-of-all-users/
http://digitaljournal.com/article/335497
http://xato.net/passwords/more-top-worst-passwords/
http://www.visualizing.org/visualizations/top-1000-passwords
http://dazzlepod.com/disclosure/
http://www.skullsecurity.org/wiki/index.php/Passwords
Edit : The line above should read "Before anybody asks, no I am NOT using them for nefarious purposes, I have an interest in computer security.
Last edited:
- Mar 21, 2013
- 24,780
- 31,561
Is it a cloud based server? If so, I would dump it and start a new instance. You will never fully clean a hacked Windows OS. It's just swiss cheese with its undeletable files, unstoppable services, infinitely complicated registry and you name it....my worst nightmare was to work in a Microsoft server rack years ago.
- Apr 25, 2011
- 19,849
- 28,315
Yes it is. But it is also production environment, so hard to take down
i will be monitoring everything for a few weeks - auditing logins etc, and looking for any back doors left open.
antichrist
Elite Member
- Aug 21, 2012
- 1,954
- 2,632
Maybe this is a sign to learn chinese XD
Not sure if this is still the case, but up until Windows 7 (maybe on Windows 7 as well...), just naming any .exe 'lsass.exe' meant that it was completely unable to be terminated - regardless of the checksum of the file.
If that doesn't make you want to shoot the Windows developers in the face, I don't know what does...
If that doesn't make you want to shoot the Windows developers in the face, I don't know what does...
TheRealRazzy
Supreme Member
- Mar 2, 2011
- 1,485
- 1,784
Last edited:
TheRealRazzy
Supreme Member
- Mar 2, 2011
- 1,485
- 1,784
Whoops, I guess I could have just edited my previous post. Mods/Admin you can delete this if you see it.
Sorry about that.
Sorry about that.
dome.d0nkss
BANNED
- Jul 4, 2013
- 331
- 78
Few days ago I`m was hacked by a "terorist" Algerian...I forgot his nickname, but he leaved a photo with 1 terrorist xD