Printable View
Hi,
I'm new here... I was browsing around to look for article that show how to increase website security. One of my friend's website is being hacked and all "functioinality" has been suspended by the hacker. Has anyone have any idea on how the hacker might do this or how to recover from this? Do you know any tips to prevent this from happening again? here is the website: www.umich.edu/~permias
Thanks guys!
It's a php based BBS. Search Google for the exploits against the particular board and you will most likely find the way (s)he gets in.
Recovery is easy:
Backup your important data
Reinstall the server using original media
Update everything.
Prevention is also rather easy:
Update your system on a regular basis!
(this includes php-nuke!).
How'd "they" came in?
They probably exploited a recent sql-injection bug in php-nuke.
what kind of os you running? make sure when you backup you dont update some backdoor with it or some infected file b/c after a break-in nothing in the system can be trusted so be careful where you tread, also review the logs if its *nix, and get one of those forensic anazlyzers, its meant for something in your position, just google it, there are plenty of free ones out there, updates, security and watchful eye are all needed, watch the logs for something that may be devolping again, get some more security, ids (snort), and do some pen tests from home such as after your done locking down the server scan it (nmap, gfi lan guard)
Thanks guys for all your great response. I need to learn alot! :p It's been a while I havent "updated" my security knowledge... thanks for all your help. :)
Why do I get the horrible feeling he will backup his site, reinstall the OS, put the site back there as it was and then wonder why the cracker comes straight back in?.....
Because that's why your the Tiger Shark, and that's what you sit and wait for, each and every day. :DQuote:
Why do I get the horrible feeling
Unless of course AngelK is giving you a lesson in debating / arguments :eek:
Also.. dont and never trust people who wants to "help" you. Just trust only yourself. Never leave backup discs unattended. Never throw old backup disks in the bin without first destroying them.