Kako se zastititi od Kosovski hakera....?????

Recently discovered, a Joomla exploit allows visitors, not even members, to change the admin password

Relevant to all 1.5 Joomla websites, a flaw in the controller.php and reset.php files allows any visitor to head to a certain URL and enter a single character, which then takes them to a page where they can change the password for the lowest userID (admin).
There is a fix for this, and a patch already on the joomla webpage, which is to be expected. Many of these sort of exploits are discovered and published each day, however what is special about this one is the shear devastation that a simple visitor could cause, as once the admin account is breached, the would be attacker could install new components, upload malicious re-directs and harvest user email addresses.
This has increased concerns over the 'stability' and 'reliability' of the 1.5 versions of Joomla, yet the speed at which the patch was released, and the flaw published, displays how beneficial open source communities are to large software applications.
It is urged that all 1.5 Joomla user's update and patch IMMEDIATELY

-Sources
http://www.joomla.org/content/view/5235/1/
milw0rm.com

izvor: http://www.whiteravendesign.net/joomlaexploit.html

...da, greska je bila nadjena i popravljena, i to dosta pre, nego sto je dostlo do tih provala i defaceovanja. Admin nije updateovao, znaci admin kriv. To je isto kao da te obaveste da ceo grad ima kljuceve od tvojih ulaznih vrata, a ti ne zamenis brave.

Potpis

Bolje ispasti glup nego iz aviona
http://www.mulaz.org/

griva, hvala za link, mnogo mi je pomogao!

Nema na cemu

Kako je moguce da se moja IP adresa vodi pod KOSOVO???

Potpis

#include <music.h>
#include <beer.h>
#include <girls.h>
main(){ run(partytime);}

www.vrnjackabanjacaffe.com

>



Ova baza IP adresa prema zemljama je prilicno netacna.
Po njima se ceo SBB opseg IP adresa nalazi na Kosovu?!

Potpis

Slika govori više od 128K reči.

Bacite pogleda na sledeću temu => http://www.elitesecurity.org/t321035-Raspon-IP-adresa-po-drzavama

Ima malo više cimanja ali se preko linkova iz te teme može doći do kompletnog opsega za Kosovo.

Ljudi pa ovo je nemoguće..i moja adresa na Kosovu...pih

Hm, nasao sam na jednom sajtu iz prethodnog posta IP adrese za SRBIJU...
62.108.96.0 62.108.127.255
62.193.128.0 62.193.159.255
62.240.0.0 62.240.31.255
65.110.39.110 65.110.39.119
77.46.128.0 77.46.255.255
77.74.248.0 77.74.255.255
77.105.0.0 77.105.63.255
77.243.16.0 77.243.31.255
77.247.200.0 77.247.207.255
77.247.248.0 77.247.255.255
78.24.104.0 78.24.111.255
78.30.128.0 78.30.191.255
78.109.96.0 78.109.111.255
78.155.32.0 78.155.63.255
79.101.0.0 79.101.255.255
79.175.64.0 79.175.127.255
80.70.240.0 80.70.255.255
80.74.160.0 80.74.175.255
80.80.160.0 80.80.175.255
80.85.27.184 80.85.27.191
80.93.224.0 80.93.255.255
80.190.209.148 80.190.209.151
80.240.144.0 80.240.159.255
81.17.230.0 81.17.231.255
81.18.48.0 81.18.63.255
81.31.193.168 81.31.193.171
81.31.194.176 81.31.194.179
82.114.64.0 82.114.74.255
82.114.77.0 82.114.77.255
82.114.79.0 82.114.95.255
82.117.192.0 82.117.223.255
82.208.192.0 82.208.255.255
82.214.126.0 82.214.126.255
83.136.176.0 83.136.183.255
84.22.32.0 84.22.63.255
85.94.96.0 85.94.111.255
85.94.119.0 85.94.119.255
85.118.185.0 85.118.185.15
85.222.128.0 85.222.255.255
87.116.128.0 87.116.191.255
87.237.200.0 87.237.207.255
87.238.208.0 87.238.215.255
87.250.32.0 87.250.63.255
88.150.128.0 88.150.255.255
89.110.192.0 89.110.255.255
89.188.48.0 89.188.63.255
89.216.0.0 89.216.33.255
89.216.38.0 89.216.244.255
89.216.248.0 89.216.255.255
91.102.168.0 91.102.175.255
91.102.224.0 91.102.231.255
91.103.8.0 91.103.15.255
91.143.208.0 91.143.223.255
91.148.64.0 91.148.127.255
91.150.64.0 91.150.127.255
91.185.96.0 91.185.127.255
91.187.96.0 91.187.159.255
91.193.24.0 91.193.27.255
91.194.82.0 91.194.83.255
91.194.216.0 91.194.217.255
91.195.38.0 91.195.39.255
91.195.176.0 91.195.177.255
91.199.17.0 91.199.17.255
91.201.136.0 91.201.139.255
91.208.89.0 91.208.89.255
92.42.248.0 92.42.249.255
92.42.250.4 92.42.255.255
92.48.94.160 92.48.94.175
92.48.114.80 92.48.114.87
92.48.122.0 92.48.122.63
92.48.124.64 92.48.124.95
92.48.124.112 92.48.124.127
92.60.224.0 92.60.239.255
92.244.128.0 92.244.159.255
93.86.0.0 93.87.255.255
93.92.248.0 93.92.255.255
93.93.192.0 93.93.199.255
93.184.80.0 93.184.95.255
93.186.64.0 93.186.79.255
93.187.240.0 93.187.247.255
93.188.64.0 93.188.71.255
93.190.160.0 93.190.167.255
94.100.48.0 94.100.63.255
147.91.0.0 147.91.255.255
160.99.0.0 160.99.255.255
193.34.64.0 193.34.67.255
193.34.142.0 193.34.143.255
193.203.2.0 193.203.3.255
193.203.6.0 193.203.7.255
193.203.18.0 193.203.19.255
193.203.22.0 193.203.22.255
193.203.24.0 193.203.25.255
193.203.28.0 193.203.29.255
194.54.180.0 194.54.183.255
194.79.40.0 194.79.43.255
194.106.160.0 194.106.191.255
194.110.216.0 194.110.216.255
194.117.126.172 194.117.126.172
194.145.153.0 194.145.153.255
194.194.158.0 194.194.158.191
194.247.192.0 194.247.214.255
194.247.215.128 194.247.223.63
194.247.223.68 194.247.223.255
195.46.52.0 195.46.55.255
195.64.170.0 195.64.171.255
195.66.160.0 195.66.163.95
195.66.163.128 195.66.168.255
195.66.169.16 195.66.169.191
195.66.170.0 195.66.171.31
195.66.171.64 195.66.171.159
195.66.171.192 195.66.176.191
195.66.177.0 195.66.177.255
195.66.179.0 195.66.179.31
195.66.179.64 195.66.179.223
195.66.179.240 195.66.181.15
195.66.181.32 195.66.181.47
195.66.181.96 195.66.181.119
195.66.181.128 195.66.181.191
195.66.181.224 195.66.182.127
195.66.182.208 195.66.183.15
195.66.183.72 195.66.183.79
195.66.183.128 195.66.183.143
195.66.183.152 195.66.183.191
195.66.184.0 195.66.184.63
195.66.184.96 195.66.184.191
195.66.185.0 195.66.185.63
195.66.185.80 195.66.185.127
195.66.185.160 195.66.185.167
195.66.185.192 195.66.185.255
195.66.186.16 195.66.186.31
195.66.186.128 195.66.186.191
195.66.186.224 195.66.187.255
195.66.188.172 195.66.188.175
195.66.190.184 195.66.190.191
195.140.164.0 195.140.167.255
195.170.183.0 195.170.183.255
195.178.32.0 195.178.63.255
195.222.96.0 195.222.99.255
195.242.76.0 195.242.77.255
195.250.96.0 195.250.127.255
195.252.64.0 195.252.118.143
195.252.118.152 195.252.127.255
212.62.32.0 212.62.63.255
212.69.0.0 212.69.31.255
212.102.128.0 212.102.159.255
212.124.160.0 212.124.191.255
212.200.0.0 212.200.255.255
213.137.96.0 213.137.127.255
213.149.96.0 213.149.99.255
213.149.100.16 213.149.100.255
213.149.102.0 213.149.102.15
213.149.102.32 213.149.102.39
213.149.102.48 213.149.102.191
213.149.103.0 213.149.103.15
213.149.104.0 213.149.104.255
213.149.106.0 213.149.107.255
213.149.111.0 213.149.111.15
213.149.112.0 213.149.113.31
213.149.113.64 213.149.113.127
213.149.116.0 213.149.116.15
213.149.116.160 213.149.116.191
213.149.119.0 213.149.120.15
213.149.121.0 213.149.121.15
213.149.122.128 213.149.122.255
213.149.125.0 213.149.125.127
213.163.96.0 213.163.127.255
213.184.96.0 213.184.127.255
213.198.192.0 213.198.255.255
213.240.0.0 213.240.63.255
213.244.192.0 213.244.255.255
213.253.114.240 213.253.114.255
213.253.116.0 213.253.116.31
213.253.116.128 213.253.116.143
213.253.116.160 213.253.116.255
213.253.117.64 213.253.117.95
213.253.117.128 213.253.117.167
213.253.117.176 213.253.117.183
213.253.117.192 213.253.117.207
213.253.118.0 213.253.118.7
213.253.118.24 213.253.118.127
213.253.118.192 213.253.120.7
213.253.120.72 213.253.120.103
213.253.120.120 213.253.120.143
213.253.120.168 213.253.120.175
213.253.121.0 213.253.123.255
213.255.227.0 213.255.227.255
216.236.216.0 216.236.219.255
217.17.96.0 217.17.111.255
217.24.16.0 217.24.31.255
217.26.64.0 217.26.79.255
217.26.208.0 217.26.213.255
217.65.192.0 217.65.207.255
217.77.241.65 217.77.241.65
217.119.240.0 217.119.255.255
217.169.208.0 217.169.223.255
217.170.240.0 217.170.240.255
217.170.242.0 217.170.255.255
217.194.133.224 217.194.133.231


Medjutim, za kosovo nisam uspeo da nadjem...

Potpis

#include <music.h>
#include <beer.h>
#include <girls.h>
main(){ run(partytime);}

www.vrnjackabanjacaffe.com

I sad svaku IP adresu uneseš na recimo http://www.db.ripe.net/whois i vidiš da li je sa Kosova ili nije

Pazite sta su ti " hakeri " stavili kao comment u html-u... Ovo me podseca na one iz filma HAKERI :)

Potpis

#include <music.h>
#include <beer.h>
#include <girls.h>
main(){ run(partytime);}

www.vrnjackabanjacaffe.com

OT: Verovatno nije problem srušiti i neke kosovske sajtove ali je veći problem prvo ih pronaći.

Potpis

_{"The quieter you become, the more you are able to hear."}
Blog | PowerCMS

Ma srushili bi imm kad bi ih bilo :)
Imaju mnogo malo sajtova i svi su na stranu hostirani tipa godady.com
Inace sve shto su do sada srushili srushili su zbog greshki administratora shto odrzavaju sve to i ne redovnog update-a!
p0z svima!

Potpis

Master, I am here to serve you!!!

http://forum.yu3ma.net/

He, i oni sebe nazivaju hakerima, a nasli propust gde je javno objavljen na internetu i krenuli sve redom, pa gde prodje, prodje...

Potpis

#include <music.h>
#include <beer.h>
#include <girls.h>
main(){ run(partytime);}

www.vrnjackabanjacaffe.com

izvinite za offtopic ali sad da ta siptarska gamad napadne sajt vlade Srbije dali bi nasa vlada mogla da pohapse njih?

Pa pravi hakeri se tesko mogu locirati, mogu da maskiraju IP adrese... Bar koliko sam ja upucen, hakeri uglavnom bivaju "uhvaceni" tek kada se negde potpisu, ali ne slucajno, nego namerno...

Potpis

#include <music.h>
#include <beer.h>
#include <girls.h>
main(){ run(partytime);}

www.vrnjackabanjacaffe.com

meni se sve cini da oni vama cine uslugu.... kad se zna da firme kod nas administratore placaju kao spremacice
nije ni cudno da su nasi sajtovi ocajno azurirani.....

U poslednjih mesec dana napadi su prilično učestali. Stradao je sajt ministarstva poljoprivrede, pravoslavne crkve, kao i sajt skupštine Crne Gore.

Prelistaj malo B92 ili sajtove nekih novina...

A i ovi admini sebe nazivaju adminima ;)

Potpis

Nebojsa Milanovic:
-Trumpa smatram vrhunskim predsednikom i voleo bih da živim u državi na čijem je on čelu
-Rusija ne laže, ne vodi osvajačke ratove
-Trump je svetla tačka u USA blatu
-Elon Musk, možda najpametniji i najtrezveniji Amerikanac

Sad sam probao ovaj exploit na jednom poddomenu a na njemu Joomla 1.5.4, trebalo je 5 sekundi da promenim password superadministratora. STRAŠNO!!! Ovakav bug je katastrofalna greška, baš sam se razočarao u Joomla zbog ovoga.
Međutim kao što neko već reče postoji nepisano i pisano pravilo da username "admin", "administrator" i sl nikako ne treba koristiti. U tom slučaju onaj ko napadne može da promeni pass ali ne zna username i sajt ostaje kakav jeste. Jedino vam ostaje da ponovo promenite pass administratora a o tome je već pisano 1000 puta.

Potpis

Nije loše biti banovan, dobiješ pravo na j****i potpis, to je jednako uzbudljivo kao pisanje grafita na zabranjenom mestu! A ja baš sad ostao bez kreativnih ideja, setiću se valjda pre nego li me ponovo banuju !