Icy Phoenix

Old Support Topics - 0day - IcePhoenix

PTKTheBest [ Wed 02 May, 2007 21:21 ]
Post subject: 0day - IcePhoenix

========= ENGLISH =========

Hi,
Sorry but i don't speak english
My forum (link) is hacked to the control pannel (acp -- forum -- generale).
It is a bug, correct it, Please! >.<

Look this image: http://www.ptkweb.it/uploader_s1/forum.png

========= ITALIANO =========

Ciao,
Scusatemi ma mi hanno hackerato il forum (link) nel pannello admin (acp -- forum -- generale)
E' possibile correggere il bug o quello che è, perfavore >.<

Guardare l'immagine: http://www.ptkweb.it/uploader_s1/forum.png

tonyf12 [ Wed 02 May, 2007 21:30 ]
Post subject: Re: 0day - IcePhoenix

Try reupload your whole admin folder. And change your ftp password.

PTKTheBest [ Wed 02 May, 2007 21:31 ]
Post subject: Re: 0day - IcePhoenix

tonyf12 wrote: [View Post]
Try reupload your whole admin folder. And change your ftp password.

i know, i did it

tonyf12 [ Wed 02 May, 2007 21:34 ]
Post subject: Re: 0day - IcePhoenix

Does it work afterwards?

If it doesn't work afterwards, Seph1roth is a very common virus for forums so I would ask at a forum that has a larger support community like phpbb.com or vbulletin.com because from what I can gather it affects every forum software that has an ACP

Vortex [ Wed 02 May, 2007 21:40 ]
Post subject: Re: 0day - IcePhoenix

PTKTheBest wrote: [View Post]
tonyf12 wrote: [View Post]
Try reupload your whole admin folder. And change your ftp password.

i know, i did it

And still doesn't work?

If you didn't modify anything by yourself, try to backup config.php and includes/def_*.php and then reupload folders till you get it working again...

PS: In attesa che qualcuno più competente di me possa aiutarti... Se per te non è un problema credo che faresti bene a salvare tutti i file così come sono (con il forum hackato) e sentire se puoi inviarli a Mighty, può servirgli per scoprire cosa ti hanno modificato e magari patchare il problema ;)

I think you should save your forum as it is and send it to Mighty in order to patch the security issue...

PTKTheBest [ Wed 02 May, 2007 21:45 ]
Post subject: Re: 0day - IcePhoenix

They have stolen our admin password yesterday ( now the password has been changed ).
Today is ok ;-)

Sorry :cry:

Mighty Gorgon [ Sun 06 May, 2007 17:48 ]
Post subject: Re: 0day - IcePhoenix

If it was stolen the password it is not an Icy Phoenix issue... but if it happens again, please keep us informed.

Seph1roth [ Wed 06 Jun, 2007 14:21 ]
Post subject: Re: 0day - IcePhoenix

Big big big => LOL !!

ReadMe Please => Hi all , i'm Seph1roth , i'm not a virus but Human :)

PTKThebest u got Hacked coz u don't have respect of all people ... u think that u are the best of all :) then u got pwned by Italian Black Hats Hackers ...

Its better that u start to listing peoples who tells to you that ur site have flaw ... and not responding "tell me where is the bug that i fix it by myself " :S

keep your eyes open and be friendly with Seph1roth and the other Black Hats ... :))

Bye All !

KugeLSichA [ Wed 06 Jun, 2007 17:47 ]
Post subject: Re: 0day - IcePhoenix

Hello Seph1roth,

did you got access to PTKThebest´s ACP because of an security hole in IcyPhoenix?

If so, can you tell us where it is?

thx

Seph1roth [ Wed 06 Jun, 2007 22:08 ]
Post subject: Re: 0day - IcePhoenix

Hello bro ... there is no bug in icy phoenix at the moment ... the admin was stupid and i've bypassed his security throug privilege escalation...
if in the future i found some bug i report to you ;)

Seph1roth //

Italian Black Hat //