www.phpbb.com defaced - GoFuckYourself.com

SmokeyTheBear · 02-06-2005, 01:45 PM

ouch , i think its the same group who got darkjedi

Manowar · 02-06-2005, 01:47 PM

i couldnt connect to it earlier today, still not loading either

SmokeyTheBear · 02-06-2005, 01:50 PM

They shut it down..

They are using a php exploit..

borked · 02-06-2005, 02:18 PM

ANOTHER one? There was a vulnerability affecting versions up to 2.0.11 announced some time early December...woulda thought they might have patched their own website....now ANOTHER ONE?!! lol

SmokeyTheBear · 02-06-2005, 03:16 PM

they have the page back up with a message..

the hacker was siemens from kosovo hackers group i think

kernelpanic · 02-06-2005, 03:19 PM

Damn, this is like the sixth time in the past few months. That says something about their software, since only one of those breaches has been due to an exploit in the PHP module itself.

SmokeyTheBear · 02-06-2005, 03:19 PM

while looking into the group that got darkjedi's website , i noticed this group of hackers arguing with another group about some sort of political hacking contest..

kind of like russia against usa. only its albania

fris · 02-06-2005, 03:20 PM

who cares. if people would learn to secure their shit it wouldnt happen.

move on.

SmokeyTheBear · 02-06-2005, 03:21 PM

Quote:

Originally Posted by kernelpanic

Damn, this is like the sixth time in the past few months. That says something about their software, since only one of those breaches has been due to an exploit in the PHP module itself.

on the site it says that its not phpbb but a fault in another piece of software, but it also says they havent heard of any phpbb sites hacked in months , and we know this is not true. Im pretty sure thehun got taken down this way on a fairly new exploit for phpbb

SmokeyTheBear · 02-06-2005, 03:23 PM

btw you have to go to http://phpbb.com not www.phpbb.com

www.phpbb.com
Creating Communities

At present www.phpbb.com is offline due to a group of politically motivated hackers wishing to use an opensource project to push their agenda ... shame on them.

I will take this opportunity to note that given currently available information this hacking episode does not appear to be due to phpBB itself. Instead a third party application looks to have been the problem. Other sites were attacked at the same time as www.phpbb.com by the same group displaying the same information and in these cases the same third party application has been suggested as the common factor (thus far). Equally we are not aware of any other phpBB boards being attacked and we have not been notified of any valid security issues recently. Obviously we will have more details when we've reviewed just what happened.

We are working to recover the server but this may take some time. Meanwhile users can visit our development board, area51.phpbb.com where they can receive support for phpBB 2.0.x. Of course you can also view the next version of phpBB, 3.0 "Olympus" in the process (minus the new style of course!)

We are also maintaining our IRC support channel, #phpbb on the irc.freenode.net network

We apologise for any problems this may cause our userbase. We obviously take the huge support our community gives phpBB very seriously. And we will do our best to return to "normal operations" just as soon as we can.

psoTFX - phpBB Group

kernelpanic · 02-06-2005, 03:24 PM

Quote:

Originally Posted by SmokeyTheBear

on the site it says that its not phpbb but a fault in another piece of software, but it also says they havent heard of any phpbb sites hacked in months , and we know this is not true. Im pretty sure thehun got taken down this way on a fairly new exploit for phpbb

Thats what they said initially concerning a previous exploit back during the summer, yet it later was revealed that the routines for checking input were faulty, allowing arbitrary SQL statement execution.

I'm skeptical of them passing the buck to another software application - if their sysadmin knew what he was doing, they wouldn't be running anything else on a high-traffic production server, especially one that has been targeted frequently.

Rui · 02-07-2005, 07:28 AM

I really hope newer exploits for phpBB don't show up...

goBigtime · 02-07-2005, 07:31 AM

From the site:

Quote:

I will take this opportunity to note that given currently available information this hacking episode does not appear to be due to phpBB itself. Instead a third party application looks to have been the problem.

Thanks for sharing what 3rd party application that was

02-06-2005, 01:45 PM	#1
SmokeyTheBear ►SouthOfHeaven Join Date: Jun 2004 Location: PlanetEarth MyBoardRank: GerbilMaster My-Penis-Size: extralarge MyWeapon: Computer Posts: 28,609	www.phpbb.com defaced ouch , i think its the same group who got darkjedi __________________ hatisblack at yahoo.com

02-06-2005, 01:50 PM	#3
SmokeyTheBear ►SouthOfHeaven Join Date: Jun 2004 Location: PlanetEarth MyBoardRank: GerbilMaster My-Penis-Size: extralarge MyWeapon: Computer Posts: 28,609	They shut it down.. They are using a php exploit.. __________________ hatisblack at yahoo.com

02-06-2005, 02:18 PM	#4
borked Totally Borked Industry Role: Join Date: Feb 2005 Posts: 6,284	ANOTHER one? There was a vulnerability affecting versions up to 2.0.11 announced some time early December...woulda thought they might have patched their own website....now ANOTHER ONE?!! lol __________________ For coding work - hit me up on andy // borkedcoder // com (consider figuring out the email as test #1) All models are wrong, but some are useful. George E.P. Box. p202

02-06-2005, 03:16 PM	#5
SmokeyTheBear ►SouthOfHeaven Join Date: Jun 2004 Location: PlanetEarth MyBoardRank: GerbilMaster My-Penis-Size: extralarge MyWeapon: Computer Posts: 28,609	they have the page back up with a message.. the hacker was siemens from kosovo hackers group i think __________________ hatisblack at yahoo.com

02-06-2005, 03:19 PM	#7
SmokeyTheBear ►SouthOfHeaven Join Date: Jun 2004 Location: PlanetEarth MyBoardRank: GerbilMaster My-Penis-Size: extralarge MyWeapon: Computer Posts: 28,609	while looking into the group that got darkjedi's website , i noticed this group of hackers arguing with another group about some sort of political hacking contest.. kind of like russia against usa. only its albania __________________ hatisblack at yahoo.com

02-06-2005, 01:47 PM	#2
Manowar jellyfish Join Date: Dec 2003 Posts: 71,528	i couldnt connect to it earlier today, still not loading either

02-06-2005, 03:19 PM	#6
kernelpanic Too lazy to set a custom title Join Date: Jan 2005 Posts: 2,961	Damn, this is like the sixth time in the past few months. That says something about their software, since only one of those breaches has been due to an exploit in the PHP module itself.

02-06-2005, 03:20 PM	#8
fris Too lazy to set a custom title Industry Role: Join Date: Aug 2002 Posts: 55,372	who cares. if people would learn to secure their shit it wouldnt happen. move on. __________________ Since 1999: 69 Adult Industry awards for Best Hosting Company and professional excellence. WP Stuff

02-06-2005, 03:23 PM	#10
SmokeyTheBear ►SouthOfHeaven Join Date: Jun 2004 Location: PlanetEarth MyBoardRank: GerbilMaster My-Penis-Size: extralarge MyWeapon: Computer Posts: 28,609	btw you have to go to http://phpbb.com not www.phpbb.com www.phpbb.com Creating Communities At present www.phpbb.com is offline due to a group of politically motivated hackers wishing to use an opensource project to push their agenda ... shame on them. I will take this opportunity to note that given currently available information this hacking episode does not appear to be due to phpBB itself. Instead a third party application looks to have been the problem. Other sites were attacked at the same time as www.phpbb.com by the same group displaying the same information and in these cases the same third party application has been suggested as the common factor (thus far). Equally we are not aware of any other phpBB boards being attacked and we have not been notified of any valid security issues recently. Obviously we will have more details when we've reviewed just what happened. We are working to recover the server but this may take some time. Meanwhile users can visit our development board, area51.phpbb.com where they can receive support for phpBB 2.0.x. Of course you can also view the next version of phpBB, 3.0 "Olympus" in the process (minus the new style of course!) We are also maintaining our IRC support channel, #phpbb on the irc.freenode.net network We apologise for any problems this may cause our userbase. We obviously take the huge support our community gives phpBB very seriously. And we will do our best to return to "normal operations" just as soon as we can. psoTFX - phpBB Group __________________ hatisblack at yahoo.com

02-07-2005, 07:28 AM	#12
Rui web Join Date: Dec 2001 Location: On icq: 85-483-060 Posts: 9,533	I really hope newer exploits for phpBB don't show up...