The forum of the forums
Would you like to react to this message? Create an account in a few clicks or log in to continue.

Hacker put a script somewhere in the forum

4 posters

Go down

Solved Hacker put a script somewhere in the forum

Post by BalkanHax September 28th 2015, 11:35 pm

Hello guys, i hope you can help me quick. A hacker had acces for the admin panel and tries to put scripts in it. We had that problem once, when the hacker tried to put script in forum categories, we know how to handle it, but this time he put the script somwhere hiding. If i open the blocked items on my adblocker i can see the two scripts and now i am interested how can i delete them. (the ajax-google script is not from the hacker in my oppinion but i ask you)

https://i.imgur.com/E7HPZhD.png
I marked the scripts with red color.

Here are the direct links to these scripts:

http://atleticomadrid.esy.es/s/a.js

http://ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js (This script is based on google, so i think thats not a script of the hacker, only the first one)

/edit

The hacker is also following this thread as it is a guy which is well known in the past, thats why he reacts with his scripts on this thread. Here a screen of the script at the beginning and then he realize that we are writing here and tries to prank us. Sometimes you cant handle all the idiots on this world. Very Happy

Beginning script: https://i.imgur.com/PxvlqJX.png
Trolling script: https://i.imgur.com/FngAqPQ.png

He can write in there whatever he want. It looks also like he has deleted now this script because the script is not available anymore but i need to delete it completely out of our forum.
Greets.


Last edited by BalkanHax on September 29th 2015, 3:50 pm; edited 1 time in total
avatar
BalkanHax
New Member

Posts : 11
Reputation : 1
Language : German, English, Serbian

http://www.rs-srb.com/

Back to top Go down

Solved Re: Hacker put a script somewhere in the forum

Post by Shadow September 29th 2015, 12:03 pm

Hello,

Someone has access to your admin panel and install the script.

1- The script has been added on the sub-forum: Za nove clanove/For new users    


2- The "hacker" added the script:
<script src="http://atleticomadrid.esy.es/s/a.js"></script>


We also checked your security logs and this user seems to make trouble on your forum:
Hacker put a script somewhere in the forum 29-09-16

I highly recommend you to ban this member and then change your founder email and password. You should also read this tutorial about the foundation email

Best regards
Buttercup
Shadow
Shadow
Manager
Manager

Male Posts : 16217
Reputation : 1831
Language : French, English

Back to top Go down

Solved Re: Hacker put a script somewhere in the forum

Post by BalkanHax September 29th 2015, 12:28 pm

Hello Buttercup, thanks for your answer. We also see all the logs and from which admin acc he had acces, but he changed like 4 times something in the "subcategory For new users" but he dont finish anything. This category is empty and i dont see this script. Here is a screen, maybe i am looking on the wrong place, but i dont think so: https://i.imgur.com/4CoYGSe.png

He is not a real hacker or something, he is a beginner with too much freetime. The only advantage he had that one of our admins is a hole, and he can get in his account. He joined the account of the Admin "Sergio Ramos" some months ago also after he changed pw/e-mail. Maybe he just had a virus which show this hacker his password. In the main Admin-Acc and the other Admin-Acc he had no chance to join.
avatar
BalkanHax
New Member

Posts : 11
Reputation : 1
Language : German, English, Serbian

http://www.rs-srb.com/

Back to top Go down

Solved Re: Hacker put a script somewhere in the forum

Post by brandon_g September 29th 2015, 12:49 pm

Hello
Just wondering, have you tried manually changing Sergio Ramios password and email address to something harder to hack? That way the hacker will lose access. If the REAL Sergio Ramios asks for his new account information, then you can give it to him in private.


-Brandon
brandon_g
brandon_g
Manager
Manager

Male Posts : 10106
Reputation : 923
Language : English
Location : USA

https://www.broadcastingduo.com

Back to top Go down

Solved Re: Hacker put a script somewhere in the forum

Post by BalkanHax September 29th 2015, 12:56 pm

All was changed manually, but i want to delete the script and not talking about how he get in. We had that problem once with Ramos Acc and in this case he will not have admin acces anymore as it looks like he is the hole in this system.
avatar
BalkanHax
New Member

Posts : 11
Reputation : 1
Language : German, English, Serbian

http://www.rs-srb.com/

Back to top Go down

Solved Re: Hacker put a script somewhere in the forum

Post by Ange Tuteur September 29th 2015, 3:44 pm

Hi,

@BalkanHax contacted me to take a look. As Buttercup mentioned there's only one script in the sub-forum. From what I could tell the "hacker" added it to the title of the forum :
Hacker put a script somewhere in the forum Captur75

I did a quick query of the script elements and only found one from this site. I'd recommend that you be careful who you give administrative access to. Keep a list of who you've lent the account(s) to, if necessary.

Everything should be good now. Very good
Ange Tuteur
Ange Tuteur
Forumaster

Male Posts : 13246
Reputation : 3000
Language : English & 日本語
Location : Pennsylvania

https://fmdesign.forumotion.com

Back to top Go down

Solved Re: Hacker put a script somewhere in the forum

Post by BalkanHax September 29th 2015, 3:49 pm

Thank you Ange Tuteur, we realize where the problem is but we are only normal persons and not any proffesionals in those scripts. The guy who did that is well known and somehow he get acces again to an admin account of the same person again. The consequence will be that this person will not get admin acces again as it looks like that this "hacker" somehow get his Login-informations again and again. The forum will be save now for sure.

Greets
avatar
BalkanHax
New Member

Posts : 11
Reputation : 1
Language : German, English, Serbian

http://www.rs-srb.com/

Back to top Go down

Solved Re: Hacker put a script somewhere in the forum

Post by Ange Tuteur September 29th 2015, 3:54 pm

Good to hear, and you're welcome. Smile

Topic archived

Hopefully your forum will be peaceful from now on, but if there are anymore problems feel free to let us know. Wink
Ange Tuteur
Ange Tuteur
Forumaster

Male Posts : 13246
Reputation : 3000
Language : English & 日本語
Location : Pennsylvania

https://fmdesign.forumotion.com

Back to top Go down

Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum