Forum Hacked

[OldSchoolGamer]

What do yous think the Muslim reference was all about that was underneath the picture of the red devil? It said "Greets to all Muslims" or something like that. Smh.

[ReyVGM]

How does someone even hack the forum? Did he know a password or something? Was it an inside job?

[Helder]

Apparently it was a VB exploit which has been fixed.

[ReyVGM]

Ok, thanks.

[olala]

as i said before, gsc not the responsible of all this madness lol:P, its seems like this naughty dood founds news method to hijacked via int<?lol, its happened at the same date, several vb forums get jacked by this dood at the same times:P
also if i recall coretly i dunt see any word like this before(Greets to all Muslims), all i remmeber is only redd bad dood pic and said somethin like this site are owned by dzxx2x:P, he also even can declarated his self as an adminsis lol, hope he dunt have any idea how to become supadmins:P
dood

[OldSchoolGamer]

Mi dear gently olala, Those damn bad guys you've been talking about this whole time... they finally struck . I hope you didn't talk to them! Because after all, olala dunt talk to bad guys... unless your hands was sliped, and in that case, don't worry dood, mi hands sometimes was sliped too.

[rimsky82]

I never thought it was gsc. Just somebody exploiting vbulletin again. All they wanted to do was deface the forum, they could have been destructive but weren't.

[final kaoss]

Try this to help prevent some mysql injection & htaccess viewing and it does a pretty good job at caching & gzipping.

# Author: Final Kaoss (aka: Extreme-Gaming)
# Version 3.0
# Special Thanks Goes to W3Total Cache for much of the htaccess rules
RewriteEngine on

# This file is only needed if you have set the Forum Component URL in your admincp and you are
# using the mod_rewrite option for friendly urls.  If this is the case, copy this file
# to your forum component stub directory.

# If you are having problems or are using VirtualDocumentRoot, uncomment this line and set it to your forum component directory.
# RewriteBase /vbtest/

# If you are having problems with the rewrite from content/ to content.php, uncomment this line to turn MultiViews off.
 Options -MultiViews
#add your friendly url rewrite rules below.

#stop adding your friendly url rewrite rules here.


#Deny attempts to view the Htaccess file.
<Files .htaccess>
Order allow,deny
Deny from all
</Files>


# BEGIN W3TC Browser Cache
<IfModule mod_mime.c>
    AddType text/css .css
    AddType application/javascript .js
    AddType application/x-javascript .js
    AddType text/html .html .htm
    AddType text/richtext .rtf .rtx
    AddType image/svg+xml .svg .svgz
    AddType text/plain .txt
    AddType text/xsd .xsd
    AddType text/xsl .xsl
    AddType text/xml .xml
    AddType video/asf .asf .asx .wax .wmv .wmx
    AddType video/avi .avi
    AddType image/bmp .bmp
    AddType application/java .class
    AddType video/divx .divx
    AddType application/msword .doc .docx
    AddType application/x-msdownload .exe
    AddType image/gif .gif
    AddType application/x-gzip .gz .gzip
    AddType image/x-icon .ico
    AddType image/jpeg .jpg .jpeg .jpe
    AddType application/vnd.ms-access .mdb
    AddType audio/midi .mid .midi
    AddType video/quicktime .mov .qt
    AddType audio/mpeg .mp3 .m4a
    AddType video/mp4 .mp4 .m4v
    AddType video/mpeg .mpeg .mpg .mpe
    AddType application/vnd.ms-project .mpp
    AddType application/vnd.oasis.opendocument.database .odb
    AddType application/vnd.oasis.opendocument.chart .odc
    AddType application/vnd.oasis.opendocument.formula .odf
    AddType application/vnd.oasis.opendocument.graphics .odg
    AddType application/vnd.oasis.opendocument.presentation .odp
    AddType application/vnd.oasis.opendocument.spreadsheet .ods
    AddType application/vnd.oasis.opendocument.text .odt
    AddType audio/ogg .ogg
    AddType application/pdf .pdf
    AddType image/png .png
    AddType application/vnd.ms-powerpoint .pot .pps .ppt .pptx
    AddType audio/x-realaudio .ra .ram
    AddType application/x-shockwave-flash .swf
    AddType application/x-tar .tar
    AddType image/tiff .tif .tiff
    AddType audio/wav .wav
    AddType audio/wma .wma
    AddType application/vnd.ms-write .wri
    AddType application/vnd.ms-excel .xla .xls .xlsx .xlt .xlw
    AddType application/zip .zip
</IfModule>
<IfModule mod_expires.c>
    ExpiresActive On
    ExpiresByType text/css A31536000
    ExpiresByType application/x-javascript A31536000
    ExpiresByType text/html A3600
    ExpiresByType text/richtext A3600
    ExpiresByType image/svg+xml A3600
    ExpiresByType text/plain A3600
    ExpiresByType text/xsd A3600
    ExpiresByType text/xsl A3600
    ExpiresByType text/xml A3600
    ExpiresByType video/asf A31536000
    ExpiresByType video/avi A31536000
    ExpiresByType image/bmp A31536000
    ExpiresByType application/java A31536000
    ExpiresByType video/divx A31536000
    ExpiresByType application/msword A31536000
    ExpiresByType application/x-msdownload A31536000
    ExpiresByType image/gif A31536000
    ExpiresByType application/x-gzip A31536000
    ExpiresByType image/x-icon A31536000
    ExpiresByType image/jpeg A31536000
    ExpiresByType application/vnd.ms-access A31536000
    ExpiresByType audio/midi A31536000
    ExpiresByType video/quicktime A31536000
    ExpiresByType audio/mpeg A31536000
    ExpiresByType video/mp4 A31536000
    ExpiresByType video/mpeg A31536000
    ExpiresByType application/vnd.ms-project A31536000
    ExpiresByType application/vnd.oasis.opendocument.database A31536000
    ExpiresByType application/vnd.oasis.opendocument.chart A31536000
    ExpiresByType application/vnd.oasis.opendocument.formula A31536000
    ExpiresByType application/vnd.oasis.opendocument.graphics A31536000
    ExpiresByType application/vnd.oasis.opendocument.presentation A31536000
    ExpiresByType application/vnd.oasis.opendocument.spreadsheet A31536000
    ExpiresByType application/vnd.oasis.opendocument.text A31536000
    ExpiresByType audio/ogg A31536000
    ExpiresByType application/pdf A31536000
    ExpiresByType image/png A31536000
    ExpiresByType application/vnd.ms-powerpoint A31536000
    ExpiresByType audio/x-realaudio A31536000
    ExpiresByType application/x-shockwave-flash A31536000
    ExpiresByType application/x-tar A31536000
    ExpiresByType image/tiff A31536000
    ExpiresByType audio/wav A31536000
    ExpiresByType audio/wma A31536000
    ExpiresByType application/vnd.ms-write A31536000
    ExpiresByType application/vnd.ms-excel A31536000
    ExpiresByType application/zip A31536000
</IfModule>


# BEGIN Compress text files
<ifModule mod_deflate.c>
  AddOutputFilterByType DEFLATE text/html text/xml text/css text/plain
  AddOutputFilterByType DEFLATE image/svg+xml application/xhtml+xml application/xml
  AddOutputFilterByType DEFLATE application/rdf+xml application/rss+xml application/atom+xml
  AddOutputFilterByType DEFLATE text/javascript application/javascript application/x-javascript application/json
  AddOutputFilterByType DEFLATE application/x-font-ttf application/x-font-otf
  AddOutputFilterByType DEFLATE font/truetype font/opentype


  BrowserMatch ^Mozilla/4 gzip-only-text/html
BrowserMatch ^Mozilla/4\.0[678] no-gzip
BrowserMatch \bMSIE !no-gzip !gzip-only-text/html
</ifModule>
# END Compress text files
 
 
# BEGIN Cache-Control Headers
<ifModule mod_headers.c>
  <filesMatch "\.(ico|jpe?g|png|gif|swf)$">
    Header set Cache-Control "public"
  </filesMatch>
  <filesMatch "\.(css)$">
    Header set Cache-Control "public"
  </filesMatch>
  <filesMatch "\.(js)$">
    Header set Cache-Control "private"
  </filesMatch>
  <filesMatch "\.(x?html?|php)$">
    Header set Cache-Control "private, must-revalidate"
  </filesMatch>
</ifModule>
# END Cache-Control Headers
 
# BEGIN Turn ETags Off
FileETag None
# END Turn ETags Off




# proc/self/environ? no way!
RewriteCond %{QUERY_STRING} proc/self/environ [OR]
# Block out any script trying to set a mosConfig value through the URL
RewriteCond %{QUERY_STRING} mosConfig_[a-zA-Z_]{1,21}(=|\%3D) [OR]
# Block out any script trying to base64_encode crap to send via URL
RewriteCond %{QUERY_STRING} base64_encode.*(.*) [OR]
# Block out any script that includes a <script> tag in URL
RewriteCond %{QUERY_STRING} (<|%3C).*script.*(>|%3E) [NC,OR]
# Block out any script trying to set a PHP GLOBALS variable via URL
RewriteCond %{QUERY_STRING} GLOBALS(=|[|\%[0-9A-Z]{0,2}) [OR]
# Block out any script trying to modify a _REQUEST variable via URL
RewriteCond %{QUERY_STRING} _REQUEST(=|[|\%[0-9A-Z]{0,2})

[olala]

how about this

# by somedood pretty tricky:P
RewriteRule ^/url /url?
RewriteEngine On
RewriteCond %{HTTPS} !^on$
RewriteRule (.*) https://somedood.org/$1 [R,L]

#completly prevent bad spidey:P
<Files ~ "^.ht">
Order allow,deny
Deny from all
</Files>

dood

[olala]

Mi dear gently olala, Those damn bad guys you've been talking about this whole time... they finally struck . I hope you didn't talk to them! Because after all, olala dunt talk to bad guys... unless your hands was sliped, and in that case, don't worry dood, mi hands sometimes was sliped too.

i dunt dopin such useless conversation dood:P, anyhoo yae i dunt talkin to bad dood, but not an naughty dood:P
dood

[orcanaoftime]

Whoever did it probably makes lame ass viruses and spreads them all over the net too....loser.

[KAGE-008]

I'm sorry to hear the main index got hacked. Just noticed it.

BTW, is it fully fixed?

[AsPika2219]

Just keep visit this forum every hours just quit and enter back to make sure this forum is OK right now! I hope no more stupid hacked again just likes what happened on GBATemp forum website before.

[orcanaoftime]

Another site I'm a member of was hacked also: crosstowntorrents.org Stupid hackers.

[Helder]

I can see defacing certain sites to garner attention or to cause some trouble for some good reason but to disrupt a community like ours and other (AssemblerGames.com also got hacked) is just stupid. Our site as well as others like my previously mentioned site are here to help and pass along any info so others can learn and be informed of the gaming technologies and hacks and whatnot. I see no one here doing anything that would warrant a destructive attack unless they want to be douche bags and ruin peoples day and disrupt a community.