What's this goofball trying to prove?

Worker Joined: Oct 07, 2003 Posts: 211

I don't know if anyone else has seen this, but this goofball tried to inject this file into my coppermine gallery. It didn't work and Sentinel caught it, but someone needs to shut this dude down.

Look here at the files in this directory, then open the inject.txt

http://www.geocities.com/hendra_juzt/

Don't worry, I have already looked at the file and no alarms on the spyware or the AV. It is a script for hacking a site. It doesn't work, but it may on someone else.

Just a heads up. I also banned the IP Range:

202.52.192.0 thru 202.52.223.255

The actual IP used was 202.52.200.132

Posted: Mon May 09, 2005 5:21 pm

Here is his Yahoo! profile (yahoo and geocities are combined).

http://profiles.yahoo.com/hendra_juzt

I have reported him to both.

Posted: Mon May 09, 2005 5:29 pm

Also reported to the FBI Internet crimes division.

registered · Posted: Mon May 09, 2005 6:31 pm

I was concerned when I was reviewing the blog at your site and I happened to run across Coppermine... definitely a "problem" module for getting hacked... glad you caught the numscal!

montego

Posted: Mon May 09, 2005 6:35 pm

Dauthus wrote:

I don't know if anyone else has seen this, but this goofball tried to inject this file into my coppermine gallery. It didn't work and Sentinel caught it, but someone needs to shut this dude down.

Look here at the files in this directory, then open the inject.txt

http://www.geocities.com/hendra_juzt/

Don't worry, I have already looked at the file and no alarms on the spyware or the AV. It is a script for hacking a site. It doesn't work, but it may on someone else.

Just a heads up. I also banned the IP Range:

202.52.192.0 thru 202.52.223.255

The actual IP used was 202.52.200.132

Did you look at the other scripts in there?? This guy has an arsenal...

Posted: Mon May 09, 2005 7:06 pm

Yea, I was looking at the eggdrop for servers. I had a server that got this script "loaded" onto it and I had a heck of a time trying to get rid of it.

As far as coppermine being a "problem" module, I honestly haven't had anyone able to hack any of the modules since Sentinel. But not for want of trying. I am using the 2.8 Chatserv patch, but since my site is so highly modified, I haven't had the heart (for lack of a better word) to go in and do a step by step update. I can't just drop the files in and overwrite them.

Oh yea. I forgot...as far as him having an arsenal....I think the first four letters of arsenal fits him to a tee.

Posted: Mon May 09, 2005 10:50 pm

and

Go get 'em!!!