Hacking - GoFuckYourself.com

kenny · 09-05-2002, 09:17 PM

Somebody showed me how they could connect by public FTP to a server download a password file and crack it with a DOS program. They told me this wasnt nothing compared to what some people can do with a shell or the people that can find security flaws in a script and hack thourgh it by a form on the website.
Is it true can anyone that knows their shit can hack anything?

The Machine · 09-05-2002, 09:19 PM

but of course.

Snazzy · 09-05-2002, 09:19 PM

Nothing is 100% secure....

EscortBiz · 09-05-2002, 09:23 PM

nothing is secure in these days

kenny · 09-05-2002, 09:27 PM

I dont understand why they would do it, what advantages can one obtain by taking over someone else's server

fnet · 09-05-2002, 09:29 PM

Quote:

Originally posted by kenny
... and crack it with a DOS program. ... Is it true can anyone that knows their shit can hack anything?

Check out <a href="http://www.atstake.com/">@stake</a> if you really wanna scare yourself. (Biz end of cult of the dead cow.)

faytl · 09-05-2002, 11:09 PM

It's really not that hard to secure a server reasonably. You should do your best to have your own dedicated machine, close off everything that you don't need in inetd (or turn off inetd completely). If you have apache, then you have port 80 open for webpages, thats fine. If you have ftp, like proftpd that opens port 21, make sure that you turn off anonymous logins, and even then limit users to their own home directory as root. Use SSH, not something like telnet, etc, if your really paranoid only allow SSH connections from your IP. Any user account you add, restrict it to only what they need (preferrably not SSH (take away their shell)) only allow them access to ftp, the list goes on but it's all common sense really. Restrict those who aren't you to the bare minimum they need, keep strong passwords (esp. root), close all ports that you don't have a use for, and keep up to date on exploits for services your running...

pipp · 09-05-2002, 11:54 PM

As long as data is being transffered bethwen two places. It will never be 100% secure.

bunky · 09-06-2002, 12:07 AM

nothing is secure, look at the preist they are so holy but even that was 'penetrated'

bunky

primo DM · 09-06-2002, 01:40 AM

yes, kenny that is perfectly true and a very simple thing to do, and no server is secure, look at microsoft in the last year, or all the .gov's that have been hacked. i think there was some 30,000+ boxs hacked in 2001, just a little something to think about.

if you want some help securing your box hit me on icq 82667356, and ill tell you a few things that i know that may help.

eXperienZ · 09-06-2002, 02:59 AM

If you want to find out what boxes that are hacked when, you
can check this site:
Zone-H.Org

09-05-2002, 09:17 PM	#1
kenny Confirmed User Industry Role: Join Date: Mar 2002 Posts: 7,245	Hacking Somebody showed me how they could connect by public FTP to a server download a password file and crack it with a DOS program. They told me this wasnt nothing compared to what some people can do with a shell or the people that can find security flaws in a script and hack thourgh it by a form on the website. Is it true can anyone that knows their shit can hack anything? Last edited by kenny; 09-05-2002 at 09:18 PM..

09-05-2002, 09:19 PM	#3
Snazzy Confirmed User Join Date: Dec 2001 Location: Vancouver, Canada Posts: 480	Nothing is 100% secure.... __________________ Snazzy <font size="1"> SnazzyTGP.com Visit this site now or I'll kill you</font>

09-05-2002, 09:23 PM	#4
EscortBiz Fuck Checks, CASH only! Join Date: May 2002 Location: New York City Posts: 19,422	nothing is secure in these days __________________ Spanking, Medical Fetish, Sleeping, Strap-on Anal Lesbians, Girls Fucking Guys, Handjob site REAL HOT, Shemales, Anal and Ass Licking sites 100% Real EXCLUSIVE with amazing retention, ccbill payouts, lots of content FREE FTP HOSTING Promote the largest and oldest member paid escort site, Converts 10 times better then any dating site, CCBill payouts ICQ# 158802076

09-06-2002, 12:07 AM	#9
bunky Confirmed User Join Date: Aug 2001 Location: Charlotte NC USA Posts: 902	nothing is secure, look at the preist they are so holy but even that was 'penetrated' bunky __________________ BoneProne 4 Life - BoneProne Family [insert title here]

09-06-2002, 01:40 AM	#10
primo DM Confirmed User Join Date: Aug 2002 Location: Seattle, Wa Posts: 159	yes, kenny that is perfectly true and a very simple thing to do, and no server is secure, look at microsoft in the last year, or all the .gov's that have been hacked. i think there was some 30,000+ boxs hacked in 2001, just a little something to think about. if you want some help securing your box hit me on icq 82667356, and ill tell you a few things that i know that may help. __________________ This Space for Rent. CF4L!

09-05-2002, 09:19 PM	#2
The Machine Confirmed User Join Date: May 2002 Posts: 859	but of course.

09-05-2002, 09:27 PM	#5
kenny Confirmed User Industry Role: Join Date: Mar 2002 Posts: 7,245	I dont understand why they would do it, what advantages can one obtain by taking over someone else's server

09-05-2002, 11:09 PM	#7
faytl Confirmed User Join Date: Jul 2002 Location: Australia Posts: 121	It's really not that hard to secure a server reasonably. You should do your best to have your own dedicated machine, close off everything that you don't need in inetd (or turn off inetd completely). If you have apache, then you have port 80 open for webpages, thats fine. If you have ftp, like proftpd that opens port 21, make sure that you turn off anonymous logins, and even then limit users to their own home directory as root. Use SSH, not something like telnet, etc, if your really paranoid only allow SSH connections from your IP. Any user account you add, restrict it to only what they need (preferrably not SSH (take away their shell)) only allow them access to ftp, the list goes on but it's all common sense really. Restrict those who aren't you to the bare minimum they need, keep strong passwords (esp. root), close all ports that you don't have a use for, and keep up to date on exploits for services your running...

09-05-2002, 11:54 PM	#8
pipp Confirmed User Join Date: Oct 2001 Location: Where the sun don't shine Posts: 1,185	As long as data is being transffered bethwen two places. It will never be 100% secure.

09-06-2002, 02:59 AM	#11
eXperienZ Confirmed User Industry Role: Join Date: Mar 2002 Location: Norway Posts: 272	If you want to find out what boxes that are hacked when, you can check this site: Zone-H.Org