Welcome to Geeklog, Anonymous Friday, April 25 2025 @ 07:44 am EDT

Comments for So-called Geeklog "exploit" posted

So-called Geeklog "exploit" posted | 9 comments | Create New Account

The following comments are owned by whomever posted them. This site is not responsible for what they say.

So-called Geeklog "exploit" posted

Authored by: andyofne on Friday, June 30 2006 @ 12:34 am EDT

Okay, well, it's not a so-called Geeklog exploit. I was hit with it today.

Unfortunately, my host doesn't allow me to create directories outside of the htdocs directory. I didn't think to protect the directories surrounding geeklog.

Fortunately, my database was not touched but I have no doubt that my passwords have been compromised as, according to my web server logs, ever file on the website was accessed and searched for passwords.

My index.php file was replaced with one of those ubiquitous 'you've been hacked' pages.

A file was placed on the system that searches for passwords and when I downloaded it Symantec A/V got pissed and tagged it as a trojan.

Only a few files were edited / created and the person wasn't sophisticated enough to destroy the logs so I'm assuming it was a 'script kiddie" though his 'hacked by' page warned me not to under estimate his skillz.

Whatever.

Search

Resources

About

Getting started

Support

Development

Topics

User Functions

What's New

Articles last 4 weeks

Comments last 4 weeks

Pages last 4 weeks

Links last 4 weeks

Downloads last 4 weeks