You are missing our premiere tool bar navigation system! Register and use it for FREE!

NukeCops  
•  Home •  Downloads •  Gallery •  Your Account •  Forums • 
Readme First
- Readme First! -

Read and follow the rules, otherwise your posts will be closed
Modules
· Home
· FAQ
· Buy a Theme
· Advertising
· AvantGo
· Bookmarks
· Columbia
· Community
· Donations
· Downloads
· Feedback
· Forums
· PHP-Nuke HOWTO
· Private Messages
· Search
· Statistics
· Stories Archive
· Submit News
· Surveys
· Theme Gallery
· Top
· Topics
· Your Account
Who's Online
There are currently, 243 guest(s) and 0 member(s) that are online.

You are Anonymous user. You can register for free by clicking here
Nuke Cops :: View topic - [Idea] PHP-Nuke hack recovery script [ ]
 Forum FAQ  •  Search  •   •  Memberlist  •  Usergroups   •  Register  •  Profile •    •  Log in to check your private messages  •  Log in

 
Post new topic  Reply to topicprinter-friendly view
View previous topic Log in to check your private messages View next topic
Author Message
MGCJerry
Elite Nuker
Elite Nuker


Joined: Jun 16, 2003
Posts: 220


PostPosted: Thu Sep 23, 2004 2:15 pm Reply with quoteBack to top

I was browsing this forum and it appears that some people have difficulty with recovering from a hacked nuke site, and sometimes it means going into the database and fixing it, then undoing all the damage left by the "leet hacker".

After all the time that has passed, I've decided to start writing a recovery script that will "help" restore control in your nuke site.

Thoughts?
Ideas?
Comments?

_________________
Original creator of
* Fetch Mod
* RPG Races Module
* 2 The Xtreme Theme
Find all posts by MGCJerryView user's profileSend private message
genoxide
Sergeant
Sergeant


Joined: Jun 19, 2003
Posts: 80


PostPosted: Mon Sep 27, 2004 3:49 pm Reply with quoteBack to top

98 views and no reply? shame..
I think thats a great idea, but it will be a lot of work, because the attacker might cause many things at the website such,
- #1 created a god account
- #2 posted some tags in the public messages that causes site to redirect etc.
- #3 changed lot of the news with tags (see #2)
- #4 changed footer or title or anything else with tags (see #2)

Still a great idea, it would help _many_ people.

_________________
Image
Find all posts by genoxideView user's profileSend private messageVisit poster's website
edogs
Lieutenant
Lieutenant


Joined: Sep 10, 2003
Posts: 172

Location: Russia

PostPosted: Mon Sep 27, 2004 4:20 pm Reply with quoteBack to top

Can't understand the problem.
Quote:
but it will be a lot of work

There are nothing to do.
Just call your hoster and restore backup from previous day. Then add another protection.
Find all posts by edogsView user's profileSend private messageVisit poster's websiteICQ Number
genoxide
Sergeant
Sergeant


Joined: Jun 19, 2003
Posts: 80


PostPosted: Mon Sep 27, 2004 4:34 pm Reply with quoteBack to top

MGCJerry suggested for a script.
What if the attacker managed to change files? u just roll back the restore file? what if the host keeps weekly backups, one weeks work gone?

_________________
Image
Find all posts by genoxideView user's profileSend private messageVisit poster's website
edogs
Lieutenant
Lieutenant


Joined: Sep 10, 2003
Posts: 172

Location: Russia

PostPosted: Mon Sep 27, 2004 4:44 pm Reply with quoteBack to top

genoxide wrote:
MGCJerry suggested for a script.

We can't believe in AI script which can guess that changes were made. Even one changing 0 to 1 somethere in nuke could affect many things.
You can't track ALL changes until you don't SAVE all changes. But if you save them all, then it's only one good way to do it - backup.
Quote:
What if the attacker managed to change files? u just roll back the restore file?

Yes.
Quote:
what if the host keeps weekly backups, one weeks work gone?

Our hosting makes everyday backup. We don't see reason why not schedule cron for example for making backup everyday even if hoster didn't make backups.
Find all posts by edogsView user's profileSend private messageVisit poster's websiteICQ Number
genoxide
Sergeant
Sergeant


Joined: Jun 19, 2003
Posts: 80


PostPosted: Mon Sep 27, 2004 5:11 pm Reply with quoteBack to top

Maybe for you all this are easy, but as u can read in this forums and several other people don't know so much about nuke and such.

_________________
Image
Find all posts by genoxideView user's profileSend private messageVisit poster's website
edogs
Lieutenant
Lieutenant


Joined: Sep 10, 2003
Posts: 172

Location: Russia

PostPosted: Mon Sep 27, 2004 5:50 pm Reply with quoteBack to top

genoxide wrote:
Maybe for you all this are easy, but as u can read in this forums and several other people don't know so much about nuke and such.

Ok.
We will describe how we restoring after problems at site (though we didn't have it a long time).
We click button "restore backup" and point the date of backup.

If you think that you can make script which will work more easy, you are awesome then:-)
Find all posts by edogsView user's profileSend private messageVisit poster's websiteICQ Number
genoxide
Sergeant
Sergeant


Joined: Jun 19, 2003
Posts: 80


PostPosted: Tue Sep 28, 2004 3:28 am Reply with quoteBack to top

edogs wrote:
genoxide wrote:
Maybe for you all this are easy, but as u can read in this forums and several other people don't know so much about nuke and such.

Ok.
We will describe how we restoring after problems at site (though we didn't have it a long time).
We click button "restore backup" and point the date of backup.

If you think that you can make script which will work more easy, you are awesome then:-)

Just search the forums and answer all those questions with the 'answer' you just gave. Laughing

_________________
Image
Find all posts by genoxideView user's profileSend private messageVisit poster's website
edogs
Lieutenant
Lieutenant


Joined: Sep 10, 2003
Posts: 172

Location: Russia

PostPosted: Tue Sep 28, 2004 3:35 am Reply with quoteBack to top

genoxide wrote:

Just search the forums and answer all those questions with the 'answer' you just gave. Laughing

Very Happy We understand.
The problem is that peoples rarely use solution if they don't know about it.
Generally, if here would be some FAQ about restoring, then it's good idea to post there some "simple" and "obvious" things.
It's really a lot of things which are not well known, though can be very useful:-(
Find all posts by edogsView user's profileSend private messageVisit poster's websiteICQ Number
genoxide
Sergeant
Sergeant


Joined: Jun 19, 2003
Posts: 80


PostPosted: Tue Sep 28, 2004 4:24 am Reply with quoteBack to top

there is @ http://www.nukecops.com/postt32206.html Wink

_________________
Image
Find all posts by genoxideView user's profileSend private messageVisit poster's website
Display posts from previous:      
Post new topic  Reply to topicprinter-friendly view
View previous topic Log in to check your private messages View next topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



Powered by phpBB © 2001, 2005 phpBB Group

Ported by Nuke Cops © 2003 www.nukecops.com
:: FI Theme :: PHP-Nuke theme by coldblooded (www.nukemods.com) ::
Powered by TOGETHER TEAM srl ITALY http://www.togetherteam.it - DONDELEO E-COMMERCE http://www.DonDeLeo.com - TUTTISU E-COMMERCE http://www.tuttisu.it
Web site engine's code is Copyright © 2002 by PHP-Nuke. All Rights Reserved. PHP-Nuke is Free Software released under the GNU/GPL license.
Page Generation: 0.388 Seconds - 125 pages served in past 5 minutes. Nuke Cops Founded by Paul Laudanski (Zhen-Xjell)
:: FI Theme :: PHP-Nuke theme by coldblooded (www.nukemods.com) ::