Topic: Your opinion, this site has been hijacked! (Page 1 of 1)

http://www.oda.no/

How does this happen? My mom wants to know. She knows the lady who owns this site; it is a fashion site for womens clothing (I think).

Karl..

Yadda-yadda-yadda... I've ranted for *too many posts about the topic in the server side forum.

The most probable cause is some poor php appealing to script kiddies.
And then... there is all the rest, eg. the hosting.
The website logs can help you trackback the attacker (and find them, even, if they haven't removed all traces of their visit).

Find them... how about just prevent them? Should I search the Server Side forumns for this topic?

Just hack around in google, read through some lists of published/known exploits for popular scripts like phpBB, postnuke, moveable type, wordpress, gallery, whatever...

http://www.google.com/search?q=phpbb+exploit
http://www.google.com/search?q=phpbb+security+mailing+list
http://www.google.com/search?q=xml-rpc+exploit
http://www.google.com/search?q=shared+linux+php+script+exploit
http://www.google.com/search?q=sql+injection

then hack around in google some more looking for sites sporting the unpatched vulnerable software, follow exploit details from articles to do up the vulnerable website, or shared server that the vulnerable script resides on, and voila, you're a script kiddie.

They're good for reminding you to keep your software patched =]



(Edited by JKMabry on 03-23-2006 04:44)