Help | Contact Us
NukeWorker.com
NukeWorker Menu Redirected honeypot
« previous next »
Pages: 1 [2]  All   Go Down

Author Topic: Redirected  (Read 39107 times)

0 Members and 1 Guest are viewing this topic.

drayer54

  • Guest
Re: Redirected
« Reply #25 on: Mar 13, 2011, 05:09 »
How bout we get redirected to a NCAA tourney pool?
Logged

Online Marlin

  • Forum Staff
  • *
  • Posts: 18415
  • Karma: 5147
  • Gender: Male
  • Stop Global Whining!!!
Re: Redirected
« Reply #26 on: Mar 13, 2011, 05:12 »
Spell check seems to be working again and I have not been directed away from the site for a while.
Logged

Offline Rennhack

  • Forum Administrator
  • *
  • Posts: 9057
  • Karma: 4685
  • Gender: Male
Re: Redirected
« Reply #27 on: Mar 13, 2011, 05:29 »
I'm replacing some files that i suspect have been compromised, but I have not found the source of their ability to compromise them... so the investigation continues.

I also just deleted any attachments posted since 2/14/11, so don't freak out when all of your clever political satire is gone.  I'm just cleaning house, to try to stop this from getting worse.
Logged

Offline OldHP

  • Very Heavy User
  • *****
  • Posts: 502
  • Karma: 276
  • Gender: Male
  • Tell Recruiters to use NukeWorker.com
Re: Redirected
« Reply #28 on: Mar 13, 2011, 08:12 »
Since about noon today I keep getting dumped to windows media player!
Logged
Humor is a wonderful way to prevent hardening of the attitudes! unknown
The government is like a baby's alimentary canal, with a happy appetite at one end and no responsibility at the other. Regan

Offline Rennhack

  • Forum Administrator
  • *
  • Posts: 9057
  • Karma: 4685
  • Gender: Male
Re: Redirected
« Reply #29 on: Mar 14, 2011, 01:42 »
This seems to be an active bunch of hackers.  As I 'fix' issues, they reinfect files.  They 'somehow' are appending a script onto the end of files that add the redirection.

I'm cleaning files as fast as I can, and looking for how they are doing it.  I had the forum software clean last night, and tonight its re-infected.

It's going to be a long week.
Logged

JustinHEMI05

  • Guest
Re: Redirected
« Reply #30 on: Mar 14, 2011, 02:00 »
Quote from: Rennhack on Mar 14, 2011, 01:42
This seems to be an active bunch of hackers.  As I 'fix' issues, they reinfect files.  They 'somehow' are appending a script onto the end of files that add the redirection.

I'm cleaning files as fast as I can, and looking for how they are doing it.  I had the forum software clean last night, and tonight its re-infected.

It's going to be a long week.

I know you have attemtped to go to 2.0 RC before, but you might want to revisit that plan. I had to upgrade a gaming site I run to 2.0 RC4 because of a similar issue. We might have to give up some things for a while, but site security is a higher priority.
Logged

Offline Rennhack

  • Forum Administrator
  • *
  • Posts: 9057
  • Karma: 4685
  • Gender: Male
Re: Redirected
« Reply #31 on: Mar 14, 2011, 03:04 »
Quote from: JustinHEMI on Mar 14, 2011, 02:00
I know you have attemtped to go to 2.0 RC before, but you might want to revisit that plan. I had to upgrade a gaming site I run to 2.0 RC4 because of a similar issue. We might have to give up some things for a while, but site security is a higher priority.

If it wouldn't break the home page, the forum, the quiz section, the picture section, the facility rating section....
Logged

Offline Rennhack

  • Forum Administrator
  • *
  • Posts: 9057
  • Karma: 4685
  • Gender: Male
Re: Redirected
« Reply #32 on: Mar 14, 2011, 03:24 »
Every time it starts up again, let me know again....
Logged

Offline Rennhack

  • Forum Administrator
  • *
  • Posts: 9057
  • Karma: 4685
  • Gender: Male
Re: Redirected
« Reply #33 on: Mar 14, 2011, 04:40 »
It seems that there was a breach of security in the online store, I may close it down.

The photo gallery also seems to have had issues. -- It's currently deleted entirely, while I scrub it.

The forum software was compromised, using who knows what, replacing the .js files (controls the spell checker, and the BB code, etc)

I've uploaded an older version of  the forum, while I work on the rest of the site.

The job board seems untouched, it does not use open source like the others do.
« Last Edit: Mar 15, 2011, 05:32 by Rennhack »
Logged

JustinHEMI05

  • Guest
Re: Redirected
« Reply #34 on: Mar 14, 2011, 04:41 »
Quote from: Rennhack on Mar 14, 2011, 03:04
If it wouldn't break the home page, the forum, the quiz section, the picture section, the facility rating section....

Yeah I hear ya, this site is much more complicated than the one I run. Good luck!
Logged

Offline OldHP

  • Very Heavy User
  • *****
  • Posts: 502
  • Karma: 276
  • Gender: Male
  • Tell Recruiters to use NukeWorker.com
Re: Redirected
« Reply #35 on: Mar 14, 2011, 06:24 »
Quote from: Rennhack on Mar 14, 2011, 04:40
The forum software was compromised, using who knows what, replacing the .js files (controls the spell checker, and the BB code, etc)
I've uploaded an older version of  the forum, while I work on the rest of the site.
The job board seems untouched, it us not open source like the others are.

Mike:

 [salute] [salute] [salute]
First time since this all started that I've been able to use the "Quote" function and have been able to use my back function.
Logged
Humor is a wonderful way to prevent hardening of the attitudes! unknown
The government is like a baby's alimentary canal, with a happy appetite at one end and no responsibility at the other. Regan

MacGyver

  • Guest
Re: Redirected
« Reply #36 on: Mar 15, 2011, 10:33 »
Quote from: Rennhack on Mar 14, 2011, 04:40
It seems that there was a breach of security in the online store, I may close it down.

The photo gallery also seems to have had issues. -- It's currently deleted entirely, while I scrub it.

The forum software was compromised, using who knows what, replacing the .js files (controls the spell checker, and the BB code, etc)

I've uploaded an older version of  the forum, while I work on the rest of the site.

The job board seems untouched, it us not open source like the others are.

We appreciate the effort of you and your technical staff Mike  +K


NukeWorker.com support tech at work  ;) :P
« Last Edit: Mar 15, 2011, 12:28 by MacGyver »
Logged

Offline Rennhack

  • Forum Administrator
  • *
  • Posts: 9057
  • Karma: 4685
  • Gender: Male
Re: Redirected
« Reply #37 on: Mar 15, 2011, 04:57 »
I've deleted the shop and photo gallery, The shop will likely stay gone, It's just not worth the risk.  The photo gallery will be back as soon as I can get all of the security updates in place.  I've finished manually scrubbing the site.  I think I've found all of the exploits.
Logged

Offline Rennhack

  • Forum Administrator
  • *
  • Posts: 9057
  • Karma: 4685
  • Gender: Male
Re: Redirected
« Reply #38 on: Mar 20, 2011, 08:25 »
Quote from: Marssim on Mar 20, 2011, 08:22
Someone's been busy today (3/20/2011),...

What's up?!?!?! Not a college hoops fan?!?!?!?

I don't watch sports on TV, except the the super bowel, or Mike Tyson..

Yes, I've been busy... trying to get the site back to pre-FUBAR days.  It's getting better.

When we are (I am) done, the site should be better than ever.
« Last Edit: Mar 20, 2011, 08:26 by Rennhack »
Logged

Offline Rennhack

  • Forum Administrator
  • *
  • Posts: 9057
  • Karma: 4685
  • Gender: Male
Re: Redirected
« Reply #39 on: Mar 21, 2011, 01:21 »
And just so you know, I am aware that there are still some problems, like the "<img src=" title=" +K" /> <img src=" title=" -K" />" formatting issue.
Logged

Offline Rennhack

  • Forum Administrator
  • *
  • Posts: 9057
  • Karma: 4685
  • Gender: Male
Re: Redirected
« Reply #40 on: Mar 21, 2011, 03:11 »

I think I have the karma (description) log hack working again...

I also have registration working again... it was not working for a whole week!  That's around 300 people we turned away!

http://www.nukeworker.com/forum/index.php?action=stats;expand=201103#201103
Logged

Offline Rennhack

  • Forum Administrator
  • *
  • Posts: 9057
  • Karma: 4685
  • Gender: Male
Re: Redirected
« Reply #41 on: Mar 21, 2011, 07:14 »
Quote from: Rennhack on Mar 21, 2011, 03:11
I also have registration working again... it was not working for a whole week!  That's around 300 people we turned away!

It seems the registration isn't working again... ;(
Logged

Offline Rennhack

  • Forum Administrator
  • *
  • Posts: 9057
  • Karma: 4685
  • Gender: Male
Re: Redirected
« Reply #42 on: Mar 23, 2011, 02:51 »
Quote from: Rennhack on Mar 21, 2011, 07:14
It seems the registration isn't working again... ;(

And... now they are... I verified it this time.

I also noticed the karma buttons in the PM section was fubar, and fixed that.

We HAVE to be getting close to getting the forum working again.
Logged

01changeup

  • Guest
Re: Redirected
« Reply #43 on: Mar 23, 2011, 10:11 »
Quote from: Rennhack on Mar 23, 2011, 02:51
And... now they are... I verified it this time.

I also noticed the karma buttons in the PM section was fubar, and fixed that.

We HAVE to be getting close to getting the forum working again.

Good luck my friend. I would offer my help, but I am afraid that I would be worse than useless! My advise would always be to just kick the darn thing! But in all seriousness, good luck.

V/R
01changeup
Logged

Offline Rennhack

  • Forum Administrator
  • *
  • Posts: 9057
  • Karma: 4685
  • Gender: Male
Re: Redirected
« Reply #44 on: Mar 24, 2011, 12:10 »
Quote from: Rennhack on Mar 15, 2011, 04:57
I've deleted the shop and photo gallery, The shop will likely stay gone, It's just not worth the risk.  The photo gallery will be back as soon as I can get all of the security updates in place.  I've finished manually scrubbing the site.  I think I've found all of the exploits.


The photo gallery is back online.  New and improved too!  Great new up-loader.

We are missing some pictures from the "cleaning" that occurred recently, but those files should be restored soon.

We were able to take this opportunity to update the software while it was down.  It has a new look, and a fantastic new picture up-loader.
Logged

Offline Rennhack

  • Forum Administrator
  • *
  • Posts: 9057
  • Karma: 4685
  • Gender: Male
Re: Redirected
« Reply #45 on: Mar 28, 2011, 01:50 »
Quote from: Rennhack on Mar 24, 2011, 12:10
We are missing some pictures from the "cleaning" that occurred recently, but those files should be restored soon.

The 'missing' pictures have been restored.  The photo gallery should be at 100% now.


The shop... something has to be done about that.
Logged

Offline Rennhack

  • Forum Administrator
  • *
  • Posts: 9057
  • Karma: 4685
  • Gender: Male
Re: Redirected
« Reply #46 on: May 21, 2013, 02:55 »
Woot, 2 months without an issue.  That's a lot better than two hours.
Logged

Offline RDTroja

  • Site Heretic
  • Gold Member
  • *
  • Posts: 4015
  • Karma: 4558
  • Gender: Male
  • I knew I got into IT for a reason!
Re: Redirected
« Reply #47 on: May 21, 2013, 03:02 »
I guess that means you are not superstitious.
Logged
"I won't eat anything that has intelligent life, but I'd gladly eat a network executive or a politician."

                                  -Marty Feldman

"Politics is supposed to be the second-oldest profession. I have come to understand that it bears a very close resemblance to the first."
                                  -Ronald Reagan

I have never made but one prayer to God, a very short one: 'O Lord, make my enemies ridiculous.' And God granted it.

                                  - Voltaire

cedugger

  • Guest
Re: Redirected
« Reply #48 on: May 21, 2013, 03:44 »
I never saw this thread when it was still fresh.

About two months ago, nukeworker.com started getting blocked on my DoD computer. I get the "Website Blocked" from US Cyber Command. It was still blocked as of last week (I'm not at work this week). Not sure why it's being blocked.
Logged

Offline Rennhack

  • Forum Administrator
  • *
  • Posts: 9057
  • Karma: 4685
  • Gender: Male
Re: Redirected
« Reply #49 on: May 21, 2013, 05:10 »
Quote from: slavutich on May 21, 2013, 03:44
I never saw this thread when it was still fresh.

About two months ago, nukeworker.com started getting blocked on my DoD computer. I get the "Website Blocked" from US Cyber Command. It was still blocked as of last week (I'm not at work this week). Not sure why it's being blocked.

Two months ago, there was some malicious code injected into the site.  As far as I know, it has been removed.  The DoD block, as well as any companies block isn't lifted automatically.  You have to request that it be re-evaluated.

If you ask them to re-evaluate it, please let me know of the outcome.
« Last Edit: May 21, 2013, 05:11 by Rennhack »
Logged
Pages: 1 [2]  All   Go Up
« previous next »
 


NukeWorker ™ is a registered trademark of NukeWorker.com ™, LLC © 1996-2025 All rights reserved.
All material on this Web Site, including text, photographs, graphics, code and/or software, are protected by international copyright/trademark laws and treaties. Unauthorized use is not permitted. You may not modify, copy, reproduce, republish, upload, post, transmit or distribute, in any manner, the material on this web site or any portion of it. Doing so will result in severe civil and criminal penalties, and will be prosecuted to the maximum extent possible under the law.
Privacy Statement | Terms of Use | Code of Conduct | Spam Policy | Advertising Info | Contact Us | Forum Rules | Password Problem?