It is currently 16 Feb 2020, 23:12




 Page 1 of 1 [ 6 posts ] 
Author Message
 Post subject: HACK ATTEMPT on LDDb.com
PostPosted: 02 Jan 2020, 05:08 
Site Admin
Site Admin
User avatar

Joined: 07 Aug 2002, 23:37
Posts: 2689
Location: Tokyo
Has thanked: 89 times
Been thanked: 225 times
Thanks to blam1 for pointing out that the Global Shop sub-categories was sending back "Wrong country code, sorry"

The country code itself (ALL) was correct, it's what came after that wasn't!

Ex: %20%27-6863%20union%20all%20select%201,CONCAT(0x3a6f79753a,IFnull(CAST(COUNT(*)%20AS%20CHAR),0x20),0x3a70687a3a)%20FROM%20lddb_search._search_2008#&cat=video&key=3

Google for the first CONCAT Hex code and you'll see that quite many websites have also been infected:

https://www.google.com/search?client=firefox-b-d&q=0x3a6f79753a

It's not the database, admin account hasn't been compromised but somehow they found a way to poison/compromise the memcached data.

I invalidated all data to start from fresh again, but will monitor if they ever try again.

Julien
_________________
LDDb on Facebook!
HLD-X0/X9 | LG-1 RFD-1 MSC-4000 | Lumagen 2144
DHS-8.8 | Oppo 205 | SL-1200G
Offline
 Profile  
 
 Post subject: Re: HACK ATTEMPT on LDDb.com
PostPosted: 02 Jan 2020, 05:46 
Serious fan
Serious fan
User avatar

Joined: 26 Jun 2019, 06:17
Posts: 152
Location: New Zealand
Has thanked: 17 times
Been thanked: 13 times
b*****ds!
Good on ya for reporting blam1
_________________
Down In QuakeCity New Zealand.
Offline
 Profile  
 
 Post subject: Re: HACK ATTEMPT on LDDb.com
PostPosted: 02 Jan 2020, 08:25 
Hardcore fan
Hardcore fan
User avatar

Joined: 11 Jun 2008, 06:10
Posts: 1349
Location: Milky Way-Sol System-Terra-USA-North Carlolina.
Has thanked: 112 times
Been thanked: 65 times
Hat is off to blam1....
Cheers mate...

Repel borders !
_________________
Acta Non Verba .....
Si Vis Pacem Para Bellum ....
Si Gorgiamus Allos Subjectatos Nunc ......
Online
 Profile  
 
 Post subject: Re: HACK ATTEMPT on LDDb.com
PostPosted: 02 Jan 2020, 13:56 
Absolute fan
Absolute fan
User avatar

Joined: 02 Apr 2006, 21:20
Posts: 1677
Location: United States
Has thanked: 13 times
Been thanked: 26 times
great job on blam1's part and Julien for this to be an attempt only.
_________________
INSTAGRAM | Poetry Blog | youtube
Offline
 Profile  
 
 Post subject: Re: HACK ATTEMPT on LDDb.com
PostPosted: 04 Jan 2020, 23:18 
Advanced fan
Advanced fan
User avatar

Joined: 20 Feb 2011, 19:23
Posts: 1015
Location: United Kingdom
Has thanked: 12 times
Been thanked: 19 times
Excellent work both of you for fixing this.

Interestingly Google notified me that an account I used had been compromised but didn't tell me which. I changed all my passwords but I guess it was probably LDDB.

Well done spotting and sorting it : )
_________________
Pioneer DVL-919E, Onkyo TX-NR626, LG C8 OLED.
My Collection
Offline
 Profile  
 
 Post subject: Re: HACK ATTEMPT on LDDb.com
PostPosted: 10 Feb 2020, 13:15 
Site Admin
Site Admin
User avatar

Joined: 07 Aug 2002, 23:37
Posts: 2689
Location: Tokyo
Has thanked: 89 times
Been thanked: 225 times
hippiedalek wrote:
Interestingly Google notified me that an account I used had been compromised but didn't tell me which. I changed all my passwords but I guess it was probably LDDB.


Google would only notify of major websites, not LDDb. And the passwords here are encrypted one-way, there's no way I can guess it even if I wanted to.

blam1 saw another round of attacks (from a Russian IP) so today I beefed up the firewall rules to try to catch these script kiddies before they make any damage.

Already caught 5 more, keeping them out for a month.
Should make them give up pretty quickly.

Julien
_________________
LDDb on Facebook!
HLD-X0/X9 | LG-1 RFD-1 MSC-4000 | Lumagen 2144
DHS-8.8 | Oppo 205 | SL-1200G
Offline
 Profile  
 
Display posts from previous:  Sort by  
 Page 1 of 1 [ 6 posts ] 


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to: