Thursday, June 5. 2008
PENGGODAM MENGGODAM WEB PEJABAT PERDANA MENTERI
I got this on my instant messenger early this morning (Dubai time). Anyways - the site is down right now. But you can read all about it here. I was surprised that the attacker only supply a link to a static page instead of using a page that is capable of running Lotus Domino command. I guess he's showing his frustrations regarding the petrol hike.
Ayoi, a blogger contributer to security.org.my questions the ethics of the attacker.
Related: Still Vulnerable?
Trackbacks
Trackback specific URI for this entry
No Trackbacks
Comments
Display comments as
(Linear | Threaded)
hi anonymous,
it was file inclusion. xss was another one, which i blogged and reported to them, and was never fixed.
it was file inclusion. xss was another one, which i blogged and reported to them, and was never fixed.
salam tumpang lalu.. 
pelik gak mcmane website kjaan buleh kene mcmni.pttnya security levelnya musti la tinggi. bajet juta2 takkan le tak bleh nak kasi up security&fasiliti it sume. hahaha
pelik gak mcmane website kjaan buleh kene mcmni.pttnya security levelnya musti la tinggi. bajet juta2 takkan le tak bleh nak kasi up security&fasiliti it sume. hahaha
This was just a 5 minutes job, imagine if they spend another few hours they might be able to take full control of the server but that besides the point, and the intension was to deliver the message and i guess the message was heard (within few hours).
RM2.70 = Second Tsunami
RM2.70 = Second Tsunami
http://www.nst.com.my/Current_News/NST/Friday/Frontpage/2260134/Article/index_html
"A special officer to Datuk Seri Abdullah Ahmad Badawi confirmed the incident and said it was an "unsuccessful hacking attempt".
Special officer my ass.
The intention was not to deface but to the delivery the message and to point out to the lazy admins that the site is vulnerable to remote file inclusion (PoC only). This action was harmless and not against the law at all.
I think next time, let them just tapau the whole thing and see what excuse the "Special Officer" will have to say.
"A special officer to Datuk Seri Abdullah Ahmad Badawi confirmed the incident and said it was an "unsuccessful hacking attempt".
Special officer my ass.
The intention was not to deface but to the delivery the message and to point out to the lazy admins that the site is vulnerable to remote file inclusion (PoC only). This action was harmless and not against the law at all.
I think next time, let them just tapau the whole thing and see what excuse the "Special Officer" will have to say.
i Was wondering, why i haven't heard of that form file that being use for redirection?
How did the RFI got there in the first place. It's been there for long time? or does it really have vulnerable file?
whatever it is, it sure a simple and very CLear message..
Hacking is nothing thou, simple exploit the media and mislead a video or blog by it's content and post a lot of banner also work to send the message... for example.. namwe case
meta word and misleading add-url for SEO also fill the traffic..
How did the RFI got there in the first place. It's been there for long time? or does it really have vulnerable file?
whatever it is, it sure a simple and very CLear message..
Hacking is nothing thou, simple exploit the media and mislead a video or blog by it's content and post a lot of banner also work to send the message... for example.. namwe case
meta word and misleading add-url for SEO also fill the traffic..
Fixing?? Admin just closed "the shop", duh. Way to go. Well done.
Laman Web ini ditutup buat sementara waktu kerana kerja-kerja penyelenggaraan.
Pejabat ini memohon maaf di atas segala kesulitan yang dihadapi.
This site is currently under maintenance. Sorry for the inconvenience.
Laman Web ini ditutup buat sementara waktu kerana kerja-kerja penyelenggaraan.
Pejabat ini memohon maaf di atas segala kesulitan yang dihadapi.
This site is currently under maintenance. Sorry for the inconvenience.
itu lah si Pak Loh ni bodo sangat... apesal dia upah budak2 wannabe programmer p buat website dia... dah tu pakai joomla lagi.. hampeh...
Add Comment
Before you post a comment, please take note of the following guidelines:
- Commenting is provided as a courtesy only.
- Please be brief and relevant to the post.
- Please be polite even in disagreement with us or others.
- Support claims you wish to make using sources and links.
- No personal attacks, name calling, or commercial commenting.
- Anyone creating false or multiple identities will be banned.
- If you don't have a cogent argument, you will be censored.
- If you are purposefully deceptive, you will be censored.
- No spamming or flooding.
Comment policy copied and modified from Spin Hunters.
DISCLAIMER
All data and information provided on this site is for informational purposes and on an *as-is* basis.
This weblog does not represent the thoughts, intentions, plans or strategies of our employers. It is solely our opinion and views as security professionals.
Feel free to challenge us, disagree with us, or even tell us that we are a complete mindless and brainless monkeys in the comment section of the blog entry.
This weblog does not represent the thoughts, intentions, plans or strategies of our employers. It is solely our opinion and views as security professionals.
Feel free to challenge us, disagree with us, or even tell us that we are a complete mindless and brainless monkeys in the comment section of the blog entry.
Report Defacements of Malaysian Website
Tags
watchlist gcert worm exploit strong password harimau outbreak how to create password cybersecurity malaysia virus dubai myhack niser security analysis apple hitbsecconf2008 kuala lumpur pink rabbit vnsecurity leopard downadup password python edu.my conficker hitbsecconf2008 cimb phishing hackinthebox comment spam ctf mycert bank wireless lubuntu network analysis hacked hitbsecconf2008 dubai conference xss personal data privacy honeynet my-honeynet cyber terrorism scam general os x cuciotak scamming hex phishing site spam news information disclosure maybank2u hacking maybank phishing impact bro-ids sql injection malware events nsm alien_005 tools stupidity hackermalaysia joomla! hitbsecconf hitb web vulnerability defaced malaysia defacement
Recent Entries
Defaced - http://www.masjidannur.com.my
Defaced - http://orogenic.com.my/ - http://orogenicgroup.com/
Defaced - http://www.kedairakyat.com
Defaced - http://andamansetipengantin.com
Defaced - http://klse.info/.~x/
Defaced - http://{www,ict,akademik}.kedah.edu.my/
www.mampu.gov.my - hacked or misconfigured?
UMNO spends RM300 million hiring hackers to stop PKR for the next general election
Defaced - http://www.politeknik.edu.my
Defaced - http://ncer.com.my
March 24 2010
Defaced - http://orogenic.com.my/ - http://orogenicgroup.com/
March 24 2010
Defaced - http://www.kedairakyat.com
March 24 2010
Defaced - http://andamansetipengantin.com
March 24 2010
Defaced - http://klse.info/.~x/
March 24 2010
Defaced - http://{www,ict,akademik}.kedah.edu.my/
March 24 2010
www.mampu.gov.my - hacked or misconfigured?
March 12 2010
UMNO spends RM300 million hiring hackers to stop PKR for the next general election
March 12 2010
Defaced - http://www.politeknik.edu.my
March 4 2010
Defaced - http://ncer.com.my
March 4 2010
