Jokes over, WhoDunit

[dorris]

k guys, very funny one, who is "the hulk", come forward...
I seriously doubt it was anyone on this forum, probably just some kid going through all of the 7host.com sites, or a marketing ploy of theirs to try get one to go for the more secure payed hosting.
but If you want to see something funny go to
http://dorris.hopto.org
I'll let the punk have his glory for a day or 2.
Thankfully all he did was change the homepage, and the site is still intact.



<center>Log your info at MyWireless Survey</center>

 

[guest2013-1]

question, where is your site hosted?

could have something to do with frontpage extensions (seeing as the page was generated in frontpage, perhaps thats how he got in)

if you do find out how he did this let us know, i'm always interested in such vulnerabilities, being a web developer myself.

Help save the bandwidth. Decent download speeds for TheRodent! Stop downloading now!!!

 

[dorris]

No, frontpage extensions were not used, believe it or not, the meta tags you are seeing is our <i>"Hackers"</i> page, which apparently was generated in frontpage and simply copied over my index.html .
It was hosted on a free asp hosting server called 7host.com, they don't allow the free pages ftp access, rather have one of those dodgy upload file forms.
I found a piece of a tool he left behind in my folder, heres a line out of it, to know who I'm dealing with
(Zehir abi seninle gurur duyuyorum)zehir3 --&gt; powered by zehir &lt;[email protected]&gt;

from a quick glance over, it looks like an asp script used to mimic their upload process, I think he's got a fetish with their sites.
If you really interested, I can put his file up for download
I really don't have the time or the energy to try figure it out.


<center>Log your info at MyWireless Survey</center>

 

[Donovan]

OMG 1337 H4X0RZ ABOUND!!

 

[sorCrer]

Post it Dorris, Always interested...

'There are none so blind as those that will not see'