Autor
Tengo contratado un servidor dedicado al cual le puse la siguiente web:
http://www.megaupload.com/?d=Z88VZJIF
Son todos los archivos, con las correspondientes modificaciones hechas por mi.
Pues ayer mismo me la hackearon, según parece entró al dedicado desde un exploit en la web...
El código que dejó fue el siguiente (más que nada como curiosidad):
Código:
<html>
<head>
<title>Hacked by Mica</title>
<head>
<body onLoad="type_text()" ; bgColor=#000000 text=#00FFFF>
<style type="text/css">
BODY {
SCROLLBAR-FACE-COLOR: #000000; SCROLLBAR-HIGHLIGHT-COLOR: #000000; SCROLLBAR-SHADOW-COLOR: #000000; SCROLLBAR-3DLIGHT-COLOR: #ffffff; SCROLLBAR-ARROW-COLOR: #ffffff; SCROLLBAR-TRACK-COLOR: #000000; SCROLLBAR-DARKSHADOW-COLOR: #ffffff
}
BODY {
CURSOR: crosshair
}
</style>
<div align="center"><img src="http://4.bp.blogspot.com/_4MuJZNRInCM/TM1qMpZcZCI/AAAAAAAABL0/X3b4Qu5Jh7M/s1600/website-hacked.jpg" width="350" height="250"><br>
<script language="javascript">
<!--
var tl=new Array(
"That Nab kid, (sotryme) or whatever, was fucking with me to much. This is what happens when I get serious.",
"Security of your site is bad, so was a few things. Cold, I'll be back later We'll talkabout this.",
"",
"*** Hacked By Mica ***",
"",
"-----------------------------------",
"",
"",
"",
"",
"*** Mica***"
);
var speed=30;
var index=0; text_pos=0;
var str_length=tl[0].length;
var contents, row;
function type_text()
{
contents='';
row=Math.max(0,index-20);
while(row<index)
contents += tl[row++] + '\r\n';
document.forms[0].elements[0].value = contents + tl[index].substring(0,text_pos) + "_";
if(text_pos++==str_length)
{
text_pos=0;
index++;
if(index!=tl.length)
{
str_length=tl[index].length;
setTimeout("type_text()",1500);
}
} else
setTimeout("type_text()",speed);
}
//-->
</script>
<p align="center">
<form><textarea style="background-color:#000000;color:#00FFFF;" name="about" readonly="readonly" rows="12" cols="37"
wrap="soft"></textarea></form></p>
<div align="center"> THIS SITE WAS HACKED BY Mica <br>
<div align="center"> Contact: mica_iflyff@live.com<br>
<div align="center"> -------------------------------- <br>
<div align="center"> Your chat is still available. <br>
<div align="center"> flyforfenix.net/chat.php Buh bye. <br>
<embed src="http://www.youtube.com/v/70DYc511Ek8&autoplay=1" type="application/x-shockwave-flash" wmode="transparent" width="1" height="1"></embed>
</body>
</html>
<head>
<title>Hacked by Mica</title>
<head>
<body onLoad="type_text()" ; bgColor=#000000 text=#00FFFF>
<style type="text/css">
BODY {
SCROLLBAR-FACE-COLOR: #000000; SCROLLBAR-HIGHLIGHT-COLOR: #000000; SCROLLBAR-SHADOW-COLOR: #000000; SCROLLBAR-3DLIGHT-COLOR: #ffffff; SCROLLBAR-ARROW-COLOR: #ffffff; SCROLLBAR-TRACK-COLOR: #000000; SCROLLBAR-DARKSHADOW-COLOR: #ffffff
}
BODY {
CURSOR: crosshair
}
</style>
<div align="center"><img src="http://4.bp.blogspot.com/_4MuJZNRInCM/TM1qMpZcZCI/AAAAAAAABL0/X3b4Qu5Jh7M/s1600/website-hacked.jpg" width="350" height="250"><br>
<script language="javascript">
<!--
var tl=new Array(
"That Nab kid, (sotryme) or whatever, was fucking with me to much. This is what happens when I get serious.",
"Security of your site is bad, so was a few things. Cold, I'll be back later We'll talkabout this.",
"",
"*** Hacked By Mica ***",
"",
"-----------------------------------",
"",
"",
"",
"",
"*** Mica***"
);
var speed=30;
var index=0; text_pos=0;
var str_length=tl[0].length;
var contents, row;
function type_text()
{
contents='';
row=Math.max(0,index-20);
while(row<index)
contents += tl[row++] + '\r\n';
document.forms[0].elements[0].value = contents + tl[index].substring(0,text_pos) + "_";
if(text_pos++==str_length)
{
text_pos=0;
index++;
if(index!=tl.length)
{
str_length=tl[index].length;
setTimeout("type_text()",1500);
}
} else
setTimeout("type_text()",speed);
}
//-->
</script>
<p align="center">
<form><textarea style="background-color:#000000;color:#00FFFF;" name="about" readonly="readonly" rows="12" cols="37"
wrap="soft"></textarea></form></p>
<div align="center"> THIS SITE WAS HACKED BY Mica <br>
<div align="center"> Contact: mica_iflyff@live.com<br>
<div align="center"> -------------------------------- <br>
<div align="center"> Your chat is still available. <br>
<div align="center"> flyforfenix.net/chat.php Buh bye. <br>
<embed src="http://www.youtube.com/v/70DYc511Ek8&autoplay=1" type="application/x-shockwave-flash" wmode="transparent" width="1" height="1"></embed>
</body>
</html>
Para más detalles:
Usamos Xampp para controlar Apache y MySQL en su vesrión 1.6.8 y nos encargamos de borrar la carpeta webdav para que no se puedece acceder al servidor desde ahí...
¿Alguna idea de cómo ha podido entrar y cómo evitar nuevas entradas?
Gracias de antemano.
En línea
)
