Super Soaker Central forums

Ben · 09-13-2011, 07:45 PM

A week and a half ago someone uploaded a new index.html file to our images subdomain. I believe this was due to the permissions of the public_html directory being too permissive as there is no indication that the hacker knows any of SSC's passwords. I have changed the appropriate passwords regardless and have removed the file.

Firefox and other browsers may report that images.sscentral.org is an attack site because of this hack. I'm working on fixing that. Edit: This was fixed rather quickly.

Marlon28 · 11-23-2011, 07:02 AM

It seems that your hosting allows wildcard subdomains. You can enter anything in and it would be accepted. The solution would be to stop your hosting answering for these queries and redirect /delete from there.

Ben · 11-24-2011, 10:38 PM

How are the wildcard subdomains related to this problem? It seems that someone used a script to upload a file to a subdomain that was in use.

09-13-2011, 07:45 PM	#1
Ben Founder Join Date: Mar 2003 Location: Maryland Posts: 6,449 UserID: 1	SSC images subdomain hacked A week and a half ago someone uploaded a new index.html file to our images subdomain. I believe this was due to the permissions of the public_html directory being too permissive as there is no indication that the hacker knows any of SSC's passwords. I have changed the appropriate passwords regardless and have removed the file. Firefox and other browsers may report that images.sscentral.org is an attack site because of this hack. I'm working on fixing that. Edit: This was fixed rather quickly. __________________ / Please read this before emailing or PMing me Do not ask me water gun questions by email or PM. Please post the question at the forum. Private questions and suggestions are welcome by PM and email. Also, I do not sell or buy water guns online. Last edited by Ben : 09-18-2011 at 10:33 PM.

11-23-2011, 07:02 AM	#2
Marlon28 Junior member Join Date: Nov 2011 Posts: 3 UserID: 2579	Re: SSC images subdomain hacked It seems that your hosting allows wildcard subdomains. You can enter anything in and it would be accepted. The solution would be to stop your hosting answering for these queries and redirect /delete from there.

11-24-2011, 10:38 PM	#3
Ben Founder Join Date: Mar 2003 Location: Maryland Posts: 6,449 UserID: 1	Re: SSC images subdomain hacked How are the wildcard subdomains related to this problem? It seems that someone used a script to upload a file to a subdomain that was in use. __________________ / Please read this before emailing or PMing me Do not ask me water gun questions by email or PM. Please post the question at the forum. Private questions and suggestions are welcome by PM and email. Also, I do not sell or buy water guns online.

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)