Who knows how the hackers did this?

D

digitalmaphia

BANNED
Joined
Apr 19, 2007
Messages
33
Reaction score
14
Hey guys,

I found a file named httaccess.php in a folder that I didn't put there, it gave access to everything and permissions to everything. How did they get it in there and how can I prevent that?

I'm curious as to how it got uploaded?

DM
 
Advertise on BHW
That file usually shows up in the directory when you set up the hosting account.
 
the .htaccess is the right file

he's talking about somebody uploaded php sh*t to his hosting

there are a bizillion ways this could have happened man, contact your hosting and see if they have an access log or some kind of clue
 
This is possible if you are using a CMS like Drupal. Often they will troll an IP address looking for old, maybe unused Drupal installations, where there are known vulnerabilities, and use it to upload a search script. This will enable them to browse your directories and upload the htaccess.php script to give them more complete access.

Check your hosting account, and remove any sites/scripts you are no longer using. Also, whatever script you have been using for CMS-make sure it is updated! You should also talk to your provider-they can help you with IP addresses and such, if you want to block a range or something like that.
 
Could be much more than just Drupal. If you are using Cpanel or WHM there are vulnerabilities there. It may be your password, it could have been brute-forced but thats less likely. Check your directory for any file with 777 permissions. Or if you are using a template there are a ton of other vulnerabilities.
 
I believe it had something to do with having 777 file permissions being exploited, it's sorted now and hopefully they didn't leave another backdoor as I have multiple domains under one server.

Thanks.

DM
 
permissions scripts telnets expolites
there are many way a hacker can gain access
dam those hacker one of my website was haked by a Turkish hacker due to the wrong permission to image folder lol
 
What are webshells?

I had a case where a hacker went in and screwed my entire database up and I lost 16,000 subscribers that took me weeks to recover as they get in the mailing system and sent out allsorts of cra*.

There are quite a few vulnerabilities in Wordpress as well I believe?
 
i had two wordpress blog hacked and i'am done with that.

so contact your host they must have a connetion log and
see how that happend.

your host is your answer.
 
You probably were a victim of some kiddy's wild RFI vuln scan... "patch your system".
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top