hacked by a hacker

Discussion regarding Joomla! 1.5 security issues.
Joomla! Vulnerable Extensions: http://feeds.joomla.org/JoomlaSecurityV ... Extensions

Moderator: General Support Moderators

Forum rules
Forum Rules
Absolute Beginner's Guide to Joomla! <-- please read before posting, this means YOU.
Security Checklist
Forum Post Assistant - If you are serious about wanting help, you will use this tool to help you post.
Locked
theknowledge
Joomla! Apprentice
Joomla! Apprentice
Posts: 9
Joined: Wed Jun 14, 2006 9:36 am

hacked by a hacker

Post by theknowledge » Fri Aug 15, 2008 11:24 pm

did anyone else get hacked by <hacker name removed>? I went to my joomla site and this came up (link is not my site, but some other poor guy who seems to have been hacked):
Last edited by Gergo Erdosi on Sat Aug 16, 2008 1:14 pm, edited 1 time in total.
Reason: Hacker reference removed

calisto
Joomla! Fledgling
Joomla! Fledgling
Posts: 2
Joined: Sat Aug 16, 2008 2:52 am

Re: hacked by a hacker

Post by calisto » Sat Aug 16, 2008 3:04 am

I have been hacked by this guy,too.
He deleted my admin backend and (I guess) got access via the password vulnerability.
For security reasons I deleted all and made a new installation with a clean database
and changed all passwords. I am running now 1.5.6 and before 1.5.4 .

So, we see it is very important to keep an eye on updates and security warnings.

All the best from Germany,
Andreas

tommedema
Joomla! Apprentice
Joomla! Apprentice
Posts: 19
Joined: Sat Aug 11, 2007 1:13 pm

Re: hacked by a hacker

Post by tommedema » Sat Aug 16, 2008 10:51 am

Theknowledge,

what version were you using?

calisto
Joomla! Fledgling
Joomla! Fledgling
Posts: 2
Joined: Sat Aug 16, 2008 2:52 am

Re: hacked by a hacker

Post by calisto » Sat Aug 16, 2008 11:07 am

Hello,
I had version 1.5.4 but look here to get more information.
http://developer.joomla.org/security/ne ... ality.html

theknowledge
Joomla! Apprentice
Joomla! Apprentice
Posts: 9
Joined: Wed Jun 14, 2006 9:36 am

Re: hacked by a hacker

Post by theknowledge » Sat Aug 16, 2008 11:53 am

tommedema wrote:Theknowledge,

what version were you using?
1.5.5

Gergo Erdosi
Joomla! Virtuoso
Joomla! Virtuoso
Posts: 4031
Joined: Sat Nov 11, 2006 9:34 pm
Location: Hungary

Re: hacked by a hacker

Post by Gergo Erdosi » Sat Aug 16, 2008 1:15 pm

Moderator note: Hacker reference removed. Topic moved from 1.5 General Questions to 1.5 Security.

theknowledge
Joomla! Apprentice
Joomla! Apprentice
Posts: 9
Joined: Wed Jun 14, 2006 9:36 am

Re: hacked by a hacker

Post by theknowledge » Sun Aug 17, 2008 5:33 pm

why was hacker reference removed?

Gergo Erdosi
Joomla! Virtuoso
Joomla! Virtuoso
Posts: 4031
Joined: Sat Nov 11, 2006 9:34 pm
Location: Hungary

Re: hacked by a hacker

Post by Gergo Erdosi » Sun Aug 17, 2008 7:52 pm

Advertisement is not allowed, even for a hacker. :)

en-ig-m4
Joomla! Apprentice
Joomla! Apprentice
Posts: 21
Joined: Tue Jan 16, 2007 8:18 pm

Re: hacked by a hacker

Post by en-ig-m4 » Mon Aug 18, 2008 8:32 pm

erdsiger wrote:Advertisement is not allowed, even for a hacker. :)
I think it'd be better said if it were termed " *especially* for a hacker ".... LOL

Gergo Erdosi
Joomla! Virtuoso
Joomla! Virtuoso
Posts: 4031
Joined: Sat Nov 11, 2006 9:34 pm
Location: Hungary

Re: hacked by a hacker

Post by Gergo Erdosi » Mon Aug 18, 2008 9:08 pm

Yes, that sounds better. :)

sonnybunny
Joomla! Fledgling
Joomla! Fledgling
Posts: 1
Joined: Wed Sep 03, 2008 11:06 am

Re: hacked by a hacker

Post by sonnybunny » Wed Sep 03, 2008 11:11 am

My site www.sonnybunny.com has just been hacked by some ****! named sniper***. Does any one know if this wil delete all my data or any thing like that. Can I restore my site some how? Could I hack back into it like he did? I really need help as I dont want to loose all my info :(

thanks

dazza_dog
Joomla! Enthusiast
Joomla! Enthusiast
Posts: 109
Joined: Thu Jan 24, 2008 1:54 pm
Location: Staffs, UK

Re: hacked by a hacker

Post by dazza_dog » Wed Sep 03, 2008 11:25 am

sonnybunny wrote:Does any one know if this wil delete all my data or any thing like that.
Probably not
Can I restore my site some how?
Delete all you files and restore your backup ???
Could I hack back into it like he did?
WHY ??? It will be easier to upgrade to 1.5.6 and reset your admin password (Search the postings here for more info as I don't know the posting off the top of my head)

If you search the postings here you will find a lot of information and detail about recovering your site
"The answer my friend is blowing in the wind" (Bob Dylan) - not necessarily correct, but the search feature will probably find it ;-) .

marcreidy
Joomla! Fledgling
Joomla! Fledgling
Posts: 1
Joined: Wed Sep 03, 2008 11:21 am

Re: hacked by a hacker

Post by marcreidy » Wed Sep 03, 2008 11:27 am

I had a few sites hacked by this guy...an amateur I think...if you look in the document that he inserted it is built using msword. MSWord inserts invisible metadata and this one has this info

<o:DocumentProperties>
[removed]
<o:Revision>3</o:Revision>
<o:TotalTime>20</o:TotalTime>
<o:Created>2008-08-24T05:58:00Z</o:Created>
<o:LastSaved>2008-08-24T06:18:00Z</o:LastSaved>
<o:Pages>1</o:Pages>
<o:Words>83</o:Words>
<o:Characters>476</o:Characters>
<o:Company>TOSHIBA</o:Company>
<o:Lines>3</o:Lines>
<o:Paragraphs>1</o:Paragraphs>
<o:CharactersWithSpaces>558</o:CharactersWithSpaces>
<o:Version>12.00</o:Version>
</o:DocumentProperties>

[removed]

I emailed his provider also with this info...dunno if it will do anything but sure we'll see.
Last edited by pe7er on Thu Sep 04, 2008 12:25 am, edited 1 time in total.
Reason: hacker text removed. No need to credit them... Please do not suggest certain IP ranges to block as normal users are affected by that.


Locked

Return to “Security in Joomla! 1.5”