Welcome to HBH! If you have tried to register and didn't get a verification email, please using the following link to resend the verification email.

securitydot hacked?


ghost's Avatar
0 0

has anyone else noticed how easy it is to get root passwords in securitydot at the moment? and sql errors on the PoC search? and the admin panel not working? i think they were hacked :P

yep they were, copy of a segment of bash_history:

ls
cd pepper/
ls
cd nathankunicki/
ls
cd xxxstrongmint/
ls
pico +694 class.php 
less READ\ ME.txt 
ls -l
cd
cd mint.dev
ls -l
cd config
ls -l
rm brainiac.daemonette.org.db.php 
cat 1.db.php 
ls
mysqladmin -u itti -pkrasi123 mintbrainiac > mintbrainiac.sql
mysqldump --opt -u itti -pkrasi123 mintbrainiac > mintbrainiac.sql
less mintbrainiac.sql
cd ..
ls
find . -name "*install*"
cd ./app/paths/install
ls
pico index.php 
ls
grep -i include -r .
grep -i require -r .
ls
cat configuration.php 
ls
cd ../..
ls
cd ..
ls
find . -name "*.SQL"
find . -name "*.sql"
cd config```

ghost's Avatar
0 0

I noticed it was a bit weird, kind of annoying for me because I'm using it all over the place atm :(