Sign up with Google
This is how Anonymous hacked over 200 South African websites
Hackers have defaced hundreds of South African websites hosted with Webafrica.
Hackers have defaced hundreds of South African websites hosted with Webafrica.
-
Join the MyBroadband community
Ask a question and get free supportUnlock new privileges and see hidden discussionsWin prizes and earn reputationReduced ads -
Question of the Day: Is it acceptable for adults to walk around barefoot in public?
How Anonymous hacked over 200 South African websites
- Thread starter Jan
- Start date
Chris.Geerdts
Expert Member
Anonymous - if you're going to hack, please put relevant messages, like "corruption must fall"
DrJohnZoidberg
Honorary Master
Yep, blame your clients - that's what I would do 
koeksGHT
Dealer
Well at least they admitted they knew they would be vulnerable.
MagicDude4Eva
Banned
Me thinks http://www.fpb.org.za/ will be next due to their censorship endeavours
gregmcc
Honorary Master
So what vulnerability was exploited?
wizardofid
Honorary Master
- Joined
- Jul 25, 2007
- Messages
- 10,671
- Reaction score
- 4,791
Title is misleading again, at no point does it mention how it was hack, mere mention of vulnerability and at that the possibility of it, doesn't constituted as a how....
gregmcc
Honorary Master
Another clickbait article we are all falling for.
kilos
Expert Member
- Joined
- Jun 28, 2005
- Messages
- 2,810
- Reaction score
- 38
All Parliamentary members email adresses
http://www.parliament.gov.za/live/content.php?Category_ID=97
http://www.parliament.gov.za/live/content.php?Category_ID=97
Kelerei
Expert Member
- Joined
- Jun 29, 2009
- Messages
- 1,560
- Reaction score
- 837
Yet another reason not to give Webafrica a cent of your money.
Yep, blame your clients - that's what I would do
Yep, just like when Mweb nuked their hosting & blamed the clients for loss of data
More useful PUBLICLY available list than the anonymous one which took all that hacking effort
deweyzeph
Honorary Master
You can have the most secure server in the world, but if your hosting client runs insecure software like a vulnerable Wordpress installation, for example, then there's nothing you can do to prevent it. It's like blaming your security company for a break-in when you leave your alarm off and your keys in the lock.
ActivateD
Expert Member
I am sure its a SQL injection. There is a SQL injection on one of WebAfrica's client that shows all the data on the shared SQL cluster. After the whole COJ incident I am too scared to disclose.
Coj?
City of Johannesburg
What is the COJ incident?
koeksGHT
Dealer
Magicdude changed the URL and was l33t hax0r
deweyzeph
Honorary Master
If I remember correctly when you looked at your invoice on their website it had the invoice number as a parameter in the url. But there was no checking in the code to check that the currently logged in user had permission to view the invoice, so you could easily look at other people's invoices by just changing the invoice number in the url. Classic amateur mistake.