Site got hacked

moneymachine01

moneymachine01

Regular Member
Joined
Sep 2, 2009
Messages
341
Reaction score
76
I noticed that one of my wordpress sites got hacked the other day. The hacker added a few links to each of my posts each with it's unique anchor text totally unrelated to my posts. It's a good thing it's not a big site as it only has about 7 posts so far. He also reduced many of the articles to about 1/2 the size they were originally. That really pissed me off. Now I gotta go back and redo em all. :-(

I did a whois on some of them but they all seemed to have different info. How did this a-hole manage to break in to my site ? :(
 
Advertise on BHW
Were you updated to the most update version of wordpress? I think we are on 3.2.1 or something like that..
 
billbobi said:
Were you updated to the most update version of wordpress? I think we are on 3.2.1 or something like that..
Click to expand...

Yep, it's the newest one, however I just updated it this week and may not have notice the hack if it happened earlier.

P.S. - You have an amazing avatar :-p
 
I highly suggest you install WP-DB manager plugin, and set it to take backups everyday. Very handy in critical situations.
 
Properly some well known exploits - remember to keep it all updated.
 
Are your all plugins trusted ? Check them first and if you don't found a solution contact with you host. May be they can give you a solution.
 
the most common reason is as mentioned above an untrusted or outdated plugin that makes such a site vulnerable.
A good way to prevent hackers from finding those is by just changing the names of your plugins because they will search for specific pattern.
Usually this happens when somebody can look up your internal folders because they are indexed in google, but somebody could search your blog directly for specific folders of plugins etc..

Another good layer of security is phpids in my opinion, even if your plugins whould be vulnerable it whould still prevent your site from beeing hacked, you can check it out at phpids.org
 
Last edited:
Check google cache you might be able to recover your original posts.
 
You may deactivate temporary some plugins to check, I have ever got this problems there before when I installed some untrusted plugins

Kevin
 
Its givnt an exploit for the new wordpress versions. The only thing is, that you are infected with an password stealer.
Or check your site for untrusted plugins.
 
just some brute forcing and you get into the house :) for advanced hackers it's easy
 
PlayInStyle said:
just some brute forcing and you get into the house :) for advanced hackers it's easy
Click to expand...
Aha... and you are an advanced hacker??? I dont want to be rude but bruteforcing does work only on simple passwords and takes a lot of time... it whould be rather easier to grab the needed cookie or access the md5 hash through a kind of sql injection. decrypting the admin md5 hash.
Also if cookies are enabled bruteforcing wont work at all on WP and if the user whould just change its username from admin to something else and choose just a bit difficult pass it will get almost impossible to bruteforce it, just my 2 cents.
 
jason2009 said:
Are your all plugins trusted ? Check them first and if you don't found a solution contact with you host. May be they can give you a solution.
Click to expand...

No sometimes they can't. You just need to be prepared!

Some trusted plugins are also vulnerable, and can easily let people mess with your site.
 
Sorry to hear about your site. I hope something like this does not happen to me. I have a few wp sites myslef that I am working on I will be sure to take advice from above thanks for the tips.
 
malicious said:
Aha... and you are an advanced hacker??? I dont want to be rude but bruteforcing does work only on simple passwords and takes a lot of time... it whould be rather easier to grab the needed cookie or access the md5 hash through a kind of sql injection. decrypting the admin md5 hash.
Also if cookies are enabled bruteforcing wont work at all on WP and if the user whould just change its username from admin to something else and choose just a bit difficult pass it will get almost impossible to bruteforce it, just my 2 cents.
Click to expand...

If you have enough upstream, bruteforcing can be rather effective, and is certainly a whole lot easier to perform than either of the two other methods you mentioned.
 
Drink More Tea said:
If you have enough upstream, bruteforcing can be rather effective, and is certainly a whole lot easier to perform than either of the two other methods you mentioned.
Click to expand...
I wil give you right in this, but you have to give me also right that if the pass is changed or the admin to any other name that its quite impossible to get through no matter the upstream you have. Just lets say you will use one special or ascii character in it, will you set that up in your bruteforce machine?
Sure you can include some signs but if the password exceeds 6 counts you will have to generate enormous lists to try on and such an attack and still it is luck if you get in.
I agree that many blogs may be insecure due to certain reasons like this but if somebody cares just a little bit about security you wont be able to just bruteforce his blog, what do you want to use to crack that wordpress blog an xbox360 super cracking computer which is faster then the fbi ones? Sorry but i dont have such a thing and i think most people dont. Bruteforcing works well with simple patterns, once it gets too advanced some days or weeks cracking will get years and it will make no more sense to do it....
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top