Welcome Guest ( Log In | Register )

Outline · [ Standard ] · Linear+

> /k/, open google.com.my now

views
     
TSLord Tiki Mick
post Oct 11 2013, 12:35 AM, updated 13y ago

Regular
******
Senior Member
1,020 posts

Joined: Jul 2012
You see this ka hmm.gif
CODE

Index of /

   cgi-bin/

Apache/2.2.25 (Unix) mod_ssl/2.2.25 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 Server at www.google.com.my Port 80


*EDIT*
Let clear things up. google.com.my was not hacked, according to buysellaccount, it was DNS poisoning. The thing you see was not hosted on google's server but attacker's server. The attacker poisoned a DNS so that www.google.com.my would be redirected to his/her own IP instead of google's IP.

This post has been edited by Lord Tiki Mick: Oct 11 2013, 02:08 AM
TSLord Tiki Mick
post Oct 11 2013, 12:42 AM

Regular
******
Senior Member
1,020 posts

Joined: Jul 2012
QUOTE(roimekoi @ Oct 11 2013, 12:36 AM)
no, youusing google dns?
*
Not sure. 8.8.8.8 ka?

QUOTE(win7 @ Oct 11 2013, 12:36 AM)
Google Malaysia is roask now... sofmoded by johnkor
*
Ini semua salah...

QUOTE(fazil0610 @ Oct 11 2013, 12:38 AM)
no, kenot open

only google.com can
*
what happen ah. Nothing in / except for cgi-bin. Sudah kena hack. notworthy.gif
TSLord Tiki Mick
post Oct 11 2013, 12:45 AM

Regular
******
Senior Member
1,020 posts

Joined: Jul 2012
QUOTE(,Oct 11 2013, 12:42 AM)
Index of /

cgi-bin/
Apache/2.2.25 (Unix) mod_ssl/2.2.25 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 Server at www.google.com.my Port 80
*
Means you can see la?

IP is 142.4.211.288. That in Malaysia ka? laugh.gif
TSLord Tiki Mick
post Oct 11 2013, 12:49 AM

Regular
******
Senior Member
1,020 posts

Joined: Jul 2012
Btw, my DNS is my router. Dunno router use what DNS. biggrin.gif
TSLord Tiki Mick
post Oct 11 2013, 01:07 AM

Regular
******
Senior Member
1,020 posts

Joined: Jul 2012
QUOTE(,Oct 11 2013, 12:51 AM)
how u got my ip unsure.gif
*
yawn.gif

QUOTE(Atomars @ Oct 11 2013, 12:51 AM)
When I opened google.com.my, it shows "Hacked by 1337" "Google Malaysia STAMPED by PAKISTANI LEETS".
*
QUOTE(fazil0610 @ Oct 11 2013, 12:54 AM)
user posted image
*
Pakis balas dendam laugh.gif

QUOTE(Boy96 @ Oct 11 2013, 12:57 AM)
How can google be hacked
*
Google Malaysia mah. Most of their workers are for marketing only. laugh.gif
TSLord Tiki Mick
post Oct 11 2013, 01:08 AM

Regular
******
Senior Member
1,020 posts

Joined: Jul 2012
Tomorrow masuk berita one! biggrin.gif
TSLord Tiki Mick
post Oct 11 2013, 01:10 AM

Regular
******
Senior Member
1,020 posts

Joined: Jul 2012
QUOTE(poad @ Oct 11 2013, 01:09 AM)
sure ke?tv3 only siar politik je..haha
*
No. Masuk bbc, google news, wikinews liddat... biggrin.gif
TSLord Tiki Mick
post Oct 11 2013, 01:19 AM

Regular
******
Senior Member
1,020 posts

Joined: Jul 2012
QUOTE(alien3d @ Oct 11 2013, 01:17 AM)
lol use la https://ww.google.com.my spdy yoo.
*
Not working la. The turn off apache d
TSLord Tiki Mick
post Oct 11 2013, 01:24 AM

Regular
******
Senior Member
1,020 posts

Joined: Jul 2012
QUOTE(Xploit Machine @ Oct 11 2013, 01:21 AM)
nod.gif  kebodohan terlampau nod.gif
*
You think Malaysian punya kerja ka? laugh.gif
TSLord Tiki Mick
post Oct 11 2013, 01:37 AM

Regular
******
Senior Member
1,020 posts

Joined: Jul 2012
QUOTE(alien3d @ Oct 11 2013, 01:24 AM)
apache ? dono when google use apache
*
For www.google.com.my. See my first post. Not apache ka? sweat.gif
TSLord Tiki Mick
post Oct 11 2013, 01:37 AM

Regular
******
Senior Member
1,020 posts

Joined: Jul 2012
QUOTE(Xploit Machine @ Oct 11 2013, 01:35 AM)
brows.gif

user posted image
*
notworthy.gif
TSLord Tiki Mick
post Oct 11 2013, 01:52 AM

Regular
******
Senior Member
1,020 posts

Joined: Jul 2012
QUOTE(buysellaccount @ Oct 11 2013, 01:36 AM)
malunya. dns poisoning.

semalam oso dah slowdown. not sure if kena dos.
*
So it's not actually google, but hacker's IP? hmm.gif
TSLord Tiki Mick
post Oct 11 2013, 01:59 AM

Regular
******
Senior Member
1,020 posts

Joined: Jul 2012
QUOTE(buysellaccount @ Oct 11 2013, 01:55 AM)
yea, mostly the page also is hosted on another hacked server.

that apache line when you view the root directory most probably the hacked server, not google's.
*
Not google's DNS yang kena poisoned right?
TSLord Tiki Mick
post Oct 11 2013, 02:10 AM

Regular
******
Senior Member
1,020 posts

Joined: Jul 2012
QUOTE(buysellaccount @ Oct 11 2013, 02:06 AM)
our country handle .my, poison our dns, the new ip will be updated to all other dns. i'm using 8.8.8.8 also.
*
so it is Malaysian fault right? Vulnerable DNS!
TSLord Tiki Mick
post Oct 11 2013, 02:14 AM

Regular
******
Senior Member
1,020 posts

Joined: Jul 2012
QUOTE(ketnave @ Oct 11 2013, 02:12 AM)
laugh.gif selamat pagi ... (petang)
hmm.gif really ar ?! I don't see it from the US side ...
*
Different DNS. They poisoned local DNS, say TM's, so all use TM's DNS will be affected. Right? sweat.gif
TSLord Tiki Mick
post Oct 11 2013, 02:21 AM

Regular
******
Senior Member
1,020 posts

Joined: Jul 2012
QUOTE(xDragonZ @ Oct 11 2013, 02:15 AM)
They actually modified the mynic records
*
How?

QUOTE(ketnave @ Oct 11 2013, 02:17 AM)
eh, no idea on how it will propagate or it's effect ...

I only know that this seems to be the hacking trend now ... laugh.gif

it's like messing up windows hosts file to redirect the request to another IP instead of the legit one, the actual site isn't actually hacked or anything, but the user will not see the actual site, but instead, a defaced one.
*
Actually I also don't know. laugh.gif
TSLord Tiki Mick
post Oct 11 2013, 02:26 AM

Regular
******
Senior Member
1,020 posts

Joined: Jul 2012
QUOTE(ketnave @ Oct 11 2013, 02:24 AM)
Maybe http://mynic.my/en/index.php got compromised ... if that's the case ... then ... potential for all .my DNS records to be updated would be DAMN HIGH ...  shocking.gif
*
Habislah! cry.gif
TSLord Tiki Mick
post Oct 11 2013, 02:30 AM

Regular
******
Senior Member
1,020 posts

Joined: Jul 2012
QUOTE(ketnave @ Oct 11 2013, 02:29 AM)
why habis pulak ?!

If all they did was just defacing the website, then not much harm lar ... other than bruised ego laugh.gif

If they are setting up to phish ... diff story all together ...  shocking.gif
*
habislah mynic. rclxms.gif

cimbclicks got .my shakehead.gif

This post has been edited by Lord Tiki Mick: Oct 11 2013, 02:31 AM

Bump Topic Add ReplyOptions New Topic
 

Change to:
| Lo-Fi Version
0.0206sec    0.59    6 queries    GZIP Disabled
Time is now: 16th December 2025 - 04:07 PM