STLHondas.com was hacked

Waffles · Post by **Waffles** » Fri Aug 31, 2012 2:33 pm

Fuck it, I am out. If anyone needs me i will be on FB. Feel free to delete my account rick.

Post by **stolle** » Fri Aug 31, 2012 3:09 pm

the exploits have been taken care of, as for passwords he has the md5 hash of 9 users, it took him all day to get in to claytons account. having the md5 hash isnt that big a deal hes not gonna sit for four hours trying to hack your account just to get your email. he was more after our google ads, to steal the revenue from our page loads.

these are the users that i know he has your md5 hash, if you dont know what that is its your encrypted password that vbulletin uses to identify you. i didnt get this inofrmation until late last night. even though he has md5 hash it doesnt mean he can hijack your account, it is still recommended you change your password.

rickles8099
stolle
sharpie
Clayton
Redcivicsi
siced9
Redline
Diget
crxbrad
Edison Carasio

my apologies for not handling things better, its not like we get hacked everyday.

twkdcd595 · Post by **twkdcd595** » Fri Aug 31, 2012 3:12 pm

Members who are concerned, change your password here and any site using the same passwords.

crimsoncivic · Post by **crimsoncivic** » Fri Aug 31, 2012 4:40 pm

Ok look rick is handling it best he can as is anyone else who is in that chain of command for the forum so i dont think we all need to freak out or jump down anyones throat....i got a friend who is real good with computers and all that hacking shit ...rick if i want me to ask him if he can trace everything to where it started i can ask him to and since personal info is invokved u can sue and get the board some funds

Through and through dont shut down stlhondas its something that alot of ppl or atleast. a select group enjoy....i dont wana have to always get on gay-tech for car info etc...

Phate · Post by **Phate** » Fri Aug 31, 2012 5:01 pm

crimsoncivic;300858 wrote:Ok look rick is handling it best he can as is anyone else who is in that chain of command for the forum so i dont think we all need to freak out or jump down anyones throat....i got a friend who is real good with computers and all that hacking shit ...rick if i want me to ask him if he can trace everything to where it started i can ask him to and since personal info is invokved u can sue and get the board some funds

Through and through dont shut down stlhondas its something that alot of ppl or atleast. a select group enjoy....i dont wana have to always get on gay-tech for car info etc...

We already did all of that. Change your passwords, don't worry about anything else.

/thread

Post by **stolle** » Fri Aug 31, 2012 8:07 pm

I was on TeamViewer with him and he didn't get anything. The file he had open is what he gave to me.

Code: Select all

rickles8099			1 = cfb2137b569deb661465c30688d90370:dz
5thgen				43	= bd5279ad2dd76d6454dd30b5bbd37206:2tk greddy1
54a7fdbf46874819eaac809f593a014d:9012
50e7e05201e4c725af5f3a6d715db204:5466959
f037a26ad492e5babd74cd56d28e0b94:police
5094085eb1e36d9546db4e149356f817:no
67f6705a4bbaf150495c19c5efaaef73:brighter
292c949f7d8d878f6a89dd740dcf9989:budman
cfb2137b569deb661465c30688d90370:009women
9593df6b663f09725571f7c1dbc9a21e:hottgirl
d36fe78ba4d67ce42d29de94198d1215:95civic

Code: Select all

f037a26ad492e5babd74cd56d28e0b94:police
67f6705a4bbaf150495c19c5efaaef73:brighter
9f0686ad59e259d63e7c4b12c92c20e8:bologna1
f6b9d23ab7ec4650a7924096d92aa543:jettas
a5e83693d4f89cd53f71634612c41ce6:K|C
e429d81aad8e167c50a1c313bac04297:0<T
28c57a89e131ef1282418b59111d0ecc:Sw0rdfish
4ffb5b8b49c26c9808a9100cbf3bc0e4:flash69
43f4b71e6ffbb62b74629e35fe0ba679:cobra5
cfb2137b569deb661465c30688d90370:009women
8dec1437562f61acec447bf1f4d534d1:fucking7
191560a416a0657445bcd4bbe23be1b1:pissflaps
## Users may not be correct, there are some from different forums/sites.

Code: Select all

1 = cfb2137b569deb661465c30688d90370:d<1
2 = 67f6705a4bbaf150495c19c5efaaef73:j7%1
3 = f037a26ad492e5babd74cd56d28e0b94:p+^1
4 = d7911bec8662bc0b779def565e497dc5:g.?1
5 = f6b9d23ab7ec4650a7924096d92aa543:]Vd1

No personal information was out. He's able to be contacted on skype as well. It will be disclosed in PMs for the time being.

Actions taken:

HTAccess your ACP to the admins you want ... allow only IPs you trust and read up on it.

Read it.

Post by **stolle** » Fri Aug 31, 2012 11:45 pm

the last of the known exploits have been removed they were shell plugins installed by someone to grant easy access to the forums file structure. they have been disabled and deleted. other measures have been taken to only allow myself access to the admincp, this is not based on user name or password even if someone gets an admin password they still will not be able to access the admincp. so this type of thing shouldnt happen again.

Phate · Post by **Phate** » Sat Sep 01, 2012 12:34 am

stolle;300871 wrote:the last of the known exploits have been removed they were shell plugins installed by someone to grant easy access to the forums file structure. they have been disabled and deleted. other measures have been taken to only allow myself access to the admincp, this is not based on user name or password even if someone gets an admin password they still will not be able to access the admincp. so this type of thing shouldnt happen again.

Cool dude, good work!

ymisoqt · Post by **ymisoqt** » Sat Sep 01, 2012 12:40 am

I have no idea wtf i just read lol

Post by **stolle** » Sat Sep 01, 2012 12:50 am

Phate;300874 wrote:Cool dude, good work!

thanks, makes things a little harder for us, as far as changing stuff on the site, but its worth it.

ymisoqt;300875 wrote:I have no idea wtf i just read lol

site got hacked, hacker fixed site or secured it.