SkyHorse.Org

WordPress is hacked: All Upgrade to 2.1.2

WordPress, the software powering thousands of weblogs on the web, has recently seen it’s download files modified by an unknown “cracker” who changed the code to include code enabling those in the know to gain access to the websites running such software.

Only version 2.1.1 was affected.

WordPress › Blog » WordPress 2.1.1 dangerous, Upgrade to 2.1.2

Related posts:

• Web Host Company hacks into their own client’s accounts
• The Definite Guide of Obscure Tweaks to Install and Maintain cPanel / WHM (version 10)
• Auto update modsecurity rules - modsec.sh

Posted in hacking, hosting | No Comments »

Web Host Company hacks into their own client’s accounts

This has to be the most disgusting marketing strategy since the dawn of forehead tattoos:
Dedicated Hosting Companies » Blog Archive » Hacked by my host! Be Careful!

Who’s watching the watchers?

Related posts:

• Fixing open DNS servers
• modsec.sh updated
• WordPress is hacked: All Upgrade to 2.1.2

Posted in hacking, hosting | No Comments »

Fixing open DNS servers

Ok, there seems to be a *lot* of posts and threads about this issue and I think a simple page is appropriate.

Lets start with the problem. Check the report for your domain here: http://www.dnsreport.com/tools/dnsreport.ch?domain=YOUR_DOMAIN_HERE.COM

An open DNS server is one that replies to a query about a domain it is not responsible for, to anyone who asks for it. For starters, that is just a waste of processing time, but it can be worse if it is used for flooding. See, since a DNS query is (much!) smaller in number of bytes than a DNS response, if it is spoofed it can be used to perform a DoS attack on a computer with several times the bandwidth of the perpretator.

I’ve posted a solution to my obscure cPanel guide, have a look if your interested:
Fixing Open DNS servers

Related posts:

• Major flaw on the DNS Internet architecture discovered
• The Definite Guide of Obscure Tweaks to Install and Maintain cPanel / WHM (version 10)
• modsec.sh updated

Posted in GNU/Linux, WHM, hosting | No Comments »

modsec.sh updated

I’ve updated the modsec.sh script to include some new rules from gotroot.com.

Check out its new permanent page at http://www.skyhorse.org/web-server-administration/auto-update-modsecurity-rules-modsecsh/

Related posts:

• Auto update modsecurity rules - modsec.sh
• The Definite Guide of Obscure Tweaks to Install and Maintain cPanel / WHM (version 10)
• Server-side redirection (a.k.a. tunneling) with PHP

Posted in WHM, cPanel, hacking | No Comments »

Auto update modsecurity rules - modsec.sh

Based on an existing script (which didn’t work very well for me) I have come up with one that should cater for everyone’s needs with minimal changes.
Modsecurity’s main website is http://www.gotroot.com

Click here to download modsec.sh

Related posts:

• modsec.sh updated
• The Definite Guide of Obscure Tweaks to Install and Maintain cPanel / WHM (version 10)
• WordPress is hacked: All Upgrade to 2.1.2

Posted in Downloads, hacking, hosting | No Comments »