Users browsing this thread: 14 Guest(s)
tSR hacked
#26
It was a MyBB vulnerability (color me unimpressed, why is MyBB so shitty).

The guy used a public MyBB 1.4.6 exploit, gained admin privileges on the forum (strangely enough, the account he used didn't have admin privileges anymore when I checked), dropped some php exploits into the forums cache folder because he couldn't write anywhere else (he didn't get root, couldn't escalate privileges. He could only run things with the same permissions as the webserver. He also failed to backdoor the forum's code for the same reason)

Then he overwrote index.html, which is a cached file generated by tSR's update system (so the webserver must have permissions to write to it), which was promptly regenerated by Dazz when he hit the "Regenerate index" button.

Then I just had to clean up the exploits he dropped and upgraded the forums so this wouldn't happen again.
Thanked by:


Messages In This Thread
tSR hacked - by Mecha the Slag - 06-29-2009, 10:44 AM
RE: tSR hacked - by Brain Games - 06-29-2009, 10:44 AM
RE: tSR hacked - by Jordan - 06-29-2009, 10:46 AM
RE: tSR hacked - by A.J. Nitro - 06-29-2009, 10:46 AM
RE: tSR hacked - by Brain Games - 06-29-2009, 10:47 AM
RE: tSR hacked - by Mecha the Slag - 06-29-2009, 10:49 AM
RE: tSR hacked - by DragNaut - 06-29-2009, 10:58 AM
RE: tSR hacked - by A.J. Nitro - 06-29-2009, 10:49 AM
RE: tSR hacked - by Brain Games - 06-29-2009, 10:50 AM
RE: tSR hacked - by DragNaut - 06-29-2009, 10:53 AM
RE: tSR hacked - by Ridge Troopa - 06-29-2009, 10:56 AM
RE: tSR hacked - by killme - 06-29-2009, 11:01 AM
RE: tSR hacked - by DragNaut - 06-29-2009, 11:02 AM
RE: tSR hacked - by Ridge Troopa - 06-29-2009, 11:03 AM
RE: tSR hacked - by killme - 06-29-2009, 11:04 AM
RE: tSR hacked - by DragNaut - 06-29-2009, 11:04 AM
RE: tSR hacked - by Ridge Troopa - 06-29-2009, 11:07 AM
RE: tSR hacked - by Dazz - 06-29-2009, 11:09 AM
RE: tSR hacked - by DragNaut - 06-29-2009, 11:14 AM
RE: tSR hacked - by Cobalt Blue - 06-29-2009, 06:03 PM
RE: tSR hacked - by Ridge Troopa - 06-29-2009, 11:11 AM
RE: tSR hacked - by Dazz - 06-29-2009, 11:17 AM
RE: tSR hacked - by Ton - 06-29-2009, 11:17 AM
RE: tSR hacked - by Adam - 06-29-2009, 11:22 AM
RE: tSR hacked - by GaryASPG - 06-29-2009, 02:36 PM
RE: tSR hacked - by Dark Ultima - 06-29-2009, 02:56 PM
RE: tSR hacked - by K.D. - 06-29-2009, 03:17 PM
RE: tSR hacked - by killme - 06-29-2009, 03:55 PM
RE: tSR hacked - by FRET - 06-29-2009, 03:55 PM
RE: tSR hacked - by CeeY - 06-29-2009, 04:56 PM
RE: tSR hacked - by uxiefan102 - 06-29-2009, 05:01 PM
RE: tSR hacked - by (TSON) - 06-30-2009, 12:13 AM
RE: tSR hacked - by khodam2 - 06-30-2009, 07:41 AM
RE: tSR hacked - by KoA - 06-30-2009, 12:05 PM
RE: tSR hacked - by Cobalt Blue - 06-30-2009, 02:01 PM
RE: tSR hacked - by khodam2 - 07-01-2009, 12:28 AM
RE: tSR hacked - by khodam2 - 07-01-2009, 05:54 AM
RE: tSR hacked - by LilGrim1991 - 07-01-2009, 08:14 AM
RE: tSR hacked - by K.D. - 07-01-2009, 11:05 AM
RE: tSR hacked - by khodam2 - 07-04-2009, 01:00 AM
RE: tSR hacked - by SleepyHarry - 07-01-2009, 07:40 AM
RE: tSR hacked - by Dazz - 07-01-2009, 07:53 AM
RE: tSR hacked - by WWakerFAN - 07-01-2009, 08:49 AM
RE: tSR hacked - by Ultimecia - 07-01-2009, 06:12 PM
RE: tSR hacked - by Maxpphire - 07-02-2009, 12:58 AM
RE: tSR hacked - by LeleleleMAXIMUM - 07-02-2009, 01:40 AM
RE: tSR hacked - by Maxpphire - 07-02-2009, 01:47 AM
RE: tSR hacked - by Vyro - 07-02-2009, 06:41 PM
RE: tSR hacked - by LeleleleMAXIMUM - 07-03-2009, 06:20 AM
RE: tSR hacked - by Vyro - 07-03-2009, 11:37 AM
RE: tSR hacked - by Ngamer01 - 07-03-2009, 11:54 AM
RE: tSR hacked - by Dazz - 07-03-2009, 11:57 AM
RE: tSR hacked - by Vipershark - 07-04-2009, 01:15 AM
RE: tSR hacked - by FRET - 07-04-2009, 02:24 AM
RE: tSR hacked - by Dazz - 07-04-2009, 06:02 AM
RE: tSR hacked - by Techokami - 07-04-2009, 08:13 AM
RE: tSR hacked - by Deathbringer - 07-04-2009, 09:04 AM
RE: tSR hacked - by K.D. - 07-04-2009, 01:40 PM

Forum Jump: