Being Hacked Web sites being defaced?

Last post 03-11-2010 11:03 PM by SimonT. 2 replies.

Page 1 of 1 (3 items)
	Sort Posts: Previous Next

03-05-2010 4:35 AM

SimonT
Joined on 03-05-2010
Posts 2

Being Hacked Web sites being defaced?

Reply Contact

Hi,

The issue is user is replacing default files into index.html (hacked files) on some domains. He is doing it everyday... almost on 20 - 30 Domains.

I have searched .vbs and .bat files in domains directory but haven't found any such.

The C:\ Drive have only Administrator and System permission.

Previously HostingSpace folder have read, write and modify Network Services permission. I have converted it to read and write but still hacker is able to replace the file.

Can you give me some idea how he is able to do it on other domains.

03-11-2010 7:32 AM In reply to

Rubal
Joined on 03-16-2006
India
Posts 838

Re: Being Hacked Web sites being defaced?

Reply Contact

If you have write then hacker will be able to replace file or add a new default document. Its better to run ASP.Net in medium trust and each website on its dedication pool along with identity impersonation forced to true.

Rubal Jain // Email - Rubal @ Rubal [dot] Net

Windows Server Setup, Configuration, Troubleshooting, Basic Security & Hardening
DotNetPanel - Helm Control Panel Setup, Installation, Configuration, Troubleshooting

Authorised DNP Reseller. Get 20% Discount on all DNP Licenses.
Authorised SmarterTools, Declude, SimpleDNS (JHSoft), Gene6 FTP, Helicon, Kayako, Icewarp Merak, MailEnable, Deerfield Reseller.

DotNetPanel & SmarterTools Monthly Leased Licenses available.

DotNetPanel Professional Server setup includes installation of PHP, Perl, Python, ASP.Net Frameworks, SQL Express, MySQL, SmarterMail, Stats etc and complete integration with control panel just $199/server. Contact for further details.

03-11-2010 11:03 PM In reply to

SimonT
Joined on 03-05-2010
Posts 2

Re: Being Hacked Web sites being defaced?

Reply Contact

Hi,

Sever is already running in medium trust level. IIS have almost 1000 of sites so Its not possible for me to run each and every website in dedicated Application pool. With write permission I don't think user can delete the already exist default file from domains and create his new one.

Page 1 of 1 (3 items)

Dotnetpanel Forums