Greenguy's Board


Go Back   Greenguy's Board > Link Lists & Getting Listed
Register FAQ Calendar Today's Posts

Reply
 
Thread Tools Search this Thread Rate Thread Display Modes
Old 2006-02-08, 07:38 PM   #1
Xeno
Do you want the job done right, or do you want it done fast?
 
Xeno's Avatar
 
Join Date: Jun 2005
Location: Canada
Posts: 494
Nothing worse than getting hacked, as well, nothing worse to have to change scripts when you've been up and running for a long time.

However, have you not given more consideration to upgrading to the Gossamer Links version from your links 2.0? As for being hacked, if you know how it was done or have an idea, perhaps take this issue to the Gossamer people and see if there is a vulnerability. Take note too, that it really doesn't matter what link script you are using, if a site is going to be hacked, it'll be hacked...even a web host where your site is can be as well.

I would at least follow-up with gossamer on this problem first before y ou go through the hassles of changing over to a totally different script. IF you do though, it appears the Dragonlist is mentioned here often but I would give serious consideration to xpowerlinks as well.

Good luck though...hope all works out.
__________________
Why I never sleep anymore...
Web Designing

Last edited by Xeno; 2006-02-08 at 07:41 PM..
Xeno is offline   Reply With Quote
Old 2006-02-08, 09:16 PM   #2
RedCherry
Of all the things I've lost, I miss my mind the most.
 
RedCherry's Avatar
 
Join Date: Apr 2004
Location: Middle of the Desert, Pahrump, NV
Posts: 3,187
Send a message via ICQ to RedCherry
Since I look at my LL domains the most, I thought the hack was just limited to those domains. Unfortunately, it unfolded today when I got a message from a person who purchased some templates that I sell on a non-adult site who couldn't download his purchase, and I went to check out what as wrong and I got hit with trojans and viri, I realized my problem was MUCH bigger.

Phatservers, God BLESS THEM! ran a check for all files written or modified on the date of the hack, and this is after already deleing, oh 1,000 files off my server, we found about that many more.

They apparently uploaded a program in tar file, untarred it, then got to work dropping 3 or 4 files in almost every subfolder in about 50% of the domains on my box. They also defaced some pages, saying this was hacked by a balenese crew (something like that) and on the pages they defaced, they had auto downloaders for the trojans and viruses.

As far as the link list, they altered the link.html file so that they added a link to a w@rez board on EVERY site I was linking to on both redcherry and porntastic, so like 10k links on each, altered my header and footer files too and added a few more nasty links just for the fucking hell of it.

Fortunately, we found this within hours of the hack, and got those right off. We just didn't realize how much more extensive they were in trashing the server until today.

I should have dropped a note today when I realized there was the possibility of peeps hitting a page with trojans on it, but frankly, I was so damn busy trying to check every folder and delete files, I didn't think about it.
RedCherry is offline   Reply With Quote
Old 2006-02-08, 09:22 PM   #3
RedCherry
Of all the things I've lost, I miss my mind the most.
 
RedCherry's Avatar
 
Join Date: Apr 2004
Location: Middle of the Desert, Pahrump, NV
Posts: 3,187
Send a message via ICQ to RedCherry
Quote:
Originally Posted by NetGoonie
Nothing worse than getting hacked, as well, nothing worse to have to change scripts when you've been up and running for a long time.

However, have you not given more consideration to upgrading to the Gossamer Links version from your links 2.0? As for being hacked, if you know how it was done or have an idea, perhaps take this issue to the Gossamer people and see if there is a vulnerability. Take note too, that it really doesn't matter what link script you are using, if a site is going to be hacked, it'll be hacked...even a web host where your site is can be as well.

I would at least follow-up with gossamer on this problem first before y ou go through the hassles of changing over to a totally different script. IF you do though, it appears the Dragonlist is mentioned here often but I would give serious consideration to xpowerlinks as well.

Good luck though...hope all works out.
I actually have been wanting to switch from links 2.0 for awhile now, because it starts choking when you get to 10k links, I just kept putting it off.

After what I found today, I don't think that is how they got into my box, but regardless, they sure made themselves at home with the script after they got in.

I really want to do this to the

hackers
RedCherry is offline   Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -4. The time now is 03:41 AM.


Mark Read
Powered by vBulletin® Version 3.8.1
Copyright ©2000 - 2025, Jelsoft Enterprises Ltd.
© Greenguy Marketing Inc