Questions tagged [hacking]

Questions about defence or recovery from malicious hacking. We do not support hacking, so questions about performing such hacks are not allowed here.

Filter by
Sorted by
Tagged with
1 vote
1 answer
101 views

Can my Ubuntu laptop be hacked [closed]

Today I got Ubuntu 21.10 installed on my laptop. By my oversight the technician who installed it has got my username and password and my mobile number. Can he remotely hack my laptop on which Ubuntu ...
user avatar
-2 votes
1 answer
55 views

Torrent malware [closed]

After I downloaded some courses from a 3rd party website I found that there is some of the data had uploaded automatically . how can I know which data has been uploaded. is that some kind of malware ...
user avatar
-2 votes
1 answer
97 views

I believe I was hacked over night [closed]

I believe I was hacked last night. I am a little bit new to the Linux world so I don't know if this is normal or not, but there were a lot of random things in my command line history. Here a Google ...
user avatar
  • 1
0 votes
0 answers
45 views

How to solve getting repeatedly "hacked" on basic 18.04 VPS setup

I have VPS with clean installation of Ubuntu 18.04 (provided by hosting) to host my private testing website. I set it up (Apache, MySQL...) three times, but I always get shut down by host provider ...
user avatar
0 votes
1 answer
466 views

Somebody trying to access my index.php file on ubuntu apache2 server (Laravel)

One of my project someone trying to access my index.php file in laravel. Logs:- { "ip":"45.155.205.108","url":"/index.php?s=/Index/\\think\\app/invokefunction&...
user avatar
0 votes
2 answers
146 views

What steps should I take to prevent these apparent hacking attempts? [duplicate]

I'm running an Ubuntu 20.04 server, and when I look at the logs, I constantly see strings of entries like this: Jan 14 23:04:51 dell-server sshd[578861]: Invalid user carlos from 14.232.160.213 port ...
user avatar
0 votes
0 answers
2k views

bash: cannot set terminal process group (-1): Inappropriate ioctl for device

Just received this error >> bash: cannot set terminal process group (-1): Inappropriate ioctl for device then the disk partition went into READ-Only mode ; also noticed gnome-software was ...
user avatar
0 votes
1 answer
401 views

Ubuntu OS on Laptop has been hacked & remotely monitored

I'm using Ubuntu 18.04 LTS, accidentally discovered some screenshots that I didn't take in "Pictures" folder. The screenshots are taken within a limited time period of 1 minute. I'm ...
user avatar
0 votes
1 answer
117 views

Is this a sign I got hacked?

I was doing some important stuff on VirtualBox. I reinstalled my Mac brand new, installed VirtualBox from VirtualBox.org, and installed Ubuntu Server 20.04. After finishing my work I typed poweroff (I ...
user avatar
0 votes
0 answers
62 views

Strange iptables rules redirecting traffic to host I don't recognize

I never really managed my iptables config and went with the defaults. Today I had internet connection errors and in my attempts to fix this issue I checked my ipconfigs table. I found these strange ...
user avatar
  • 41
0 votes
0 answers
86 views

Found a folder named '~' in my home dir. Should I be worried?

I just found a folder named: ~ in my home directory. It had a little red cross on its bottom right corner,like root folder have. It was empty. When I deleted it, I was prompted to enter my login ...
user avatar
  • 15
0 votes
2 answers
845 views

Ubuntu 20.04 being hacked

please give me some advice on how to handle the illegal invasion into my pc (UBuntu20.04) ? I went back home and saw someone remotely accessing my pc browsing my documents, closing my browsers and ...
user avatar
2 votes
1 answer
114 views

Strange path or folder on hacked vps

My vps was confirmed hacked, Ubuntu 16.04 LTS (Thanks for answering in my post My previous post). Now I have created new vps and move my site to new VPS. But I don't delete my hacked vps, i preserve ...
user avatar
0 votes
1 answer
91 views

How to check who opened files on UBUNTU 18.4

I use Ubuntu 18.04 Today, I left the computer on and no one used it. And when I came back home, I saw a lot of directories, files, and images opened. I wonder if anyone hacked into my computer?
user avatar
  • 101
1 vote
2 answers
102 views

My username, password and i.p. were public. Was I hacked?

Through a series of poor choices, the username, root password, and i.p. address to my Ubuntu machine were pushed to a public repository. Now, I've changed my password and purged the repo of the ...
user avatar
  • 113
1 vote
0 answers
342 views

Fluxion doesn't start capitive portal in Ubuntu 19.10 VM

I have installed Ubuntu 19.10 in VirtualBox with host Windows 7. I tried to hack my Wi-Fi with Fluxion tool. Everything worked till I tried to open capitive portal. First I didn't get any errors, it ...
user avatar
  • 11
1 vote
2 answers
247 views

Do I need Bios update for remote access on my HP EliteBook laptop, or should I remove it if I'm worried about being hacked?

I bought a used laptop that runs bios update for remote access on every restart. Could the person I bought it from have installed that to hack me? Do I need it? Should I remove it? I have no interest ...
user avatar
1 vote
2 answers
391 views

Netwox tool#78: Error 4081

I am trying to run Netwox tool 78 on Ubuntu 18.04 and also tried on Ubuntu Osboxes image; but, I am getting following errors: $ sudo netwox 78 --filter 10.161.25.252 Error 4081 : error in ...
user avatar
2 votes
1 answer
427 views

Will installing wine will allow the hackers to hack into my Ubuntu computer just like what happens in Windows? [duplicate]

What if I installed an .exe game with a trojan using wine on my Ubuntu? Would this allow the hackers to hack into my device just like what happens usually on Windows? What about the viruses that work ...
user avatar
  • 111
2 votes
1 answer
133 views

VLC Security Flaw with Potential for RCE! Should Ubuntu Users Worry?

A security flaw, potentially serious has been found in VLC: The vulnerability allows for RCE (remote code execution) which potentially allows bad actors attackers to install, modify, or run ...
user avatar
0 votes
1 answer
112 views

2 suspicious «non existent» tasks named 0000:06:00.0_di and 0000:06:00.0_ev. What are they?

In an UBUNTU 18.04 installation here are two suspicious «non existent» tasks named 0000:06:00.0_di and 0000:06:00.0_ev. Log indicates that a problematic pci 0000:06:00.0 exists, but still there is no ...
user avatar
0 votes
0 answers
292 views

I was hacked? (am I a slave?)

I'm a newbie to Ubuntu Few days back, I noticed a text file named pwn3d.txt on my home folder. The following text was in it: You are (fully) pwn3d due to a homobraphic error on your software ...
user avatar
-1 votes
1 answer
2k views

Has my laptop running Ubuntu 18.04 been Hacked? [closed]

I live with someone whom I don't trust. So today I was browsing Youtube as usual, then suddenly VLC did open randomly! I convinced my self that it was just a bug and that I'm safe using Ubuntu. Fast ...
user avatar
1 vote
0 answers
321 views

Tp-link tl-wn722n v3 modo monitor

estuve mirando en Youtube tutoriales, entré a muchos lugares que no supieron resolver mí problema, es más, instalando un drivers que vi en Youtube hizo que mí Ubuntu se cuelgue cada vez que conectaba ...
user avatar
1 vote
1 answer
2k views

Is someone trying to hack my server?

So I typed journalctl after ssh(ing) into the server and got the following output: (so is someone trying to hack system or is it from my side?) (Also note the timing says 5am? but most likely none of ...
user avatar
0 votes
1 answer
196 views

How to make .htaccess to unhide the directory [closed]

I'm creating a VM for my students to hack into, however the directory containing .htaccess is hiding the directory they need to access to CTF. The only way you can find this directory is if you ...
user avatar
12 votes
3 answers
3k views

Is it dangerous to install hacking tools on my private linux machine?

I use my Ubuntu for private and business purposes. Can I also install tools on my computer that are actually there to perform penetration tests? Or is it harmless?
user avatar
  • 121
0 votes
0 answers
208 views

Is Kubenetes related software automatically installed on Ubuntu?

I have since yesterday noticed that the top command has been showing kubelet, kube-apiserver, kube-controller and other Kubernetes related processes running on my computer. This is alarming me and ...
user avatar
0 votes
0 answers
114 views

Ssh login success but it is not me

I receive ssh login alert from two different ip on my server Time: Fri Mar 22 05:50:37 2019 +0300 IP: 92.184.99.172 (FR/France/-) Account: root Method: password authentication second ip: ...
user avatar
  • 1
1 vote
2 answers
372 views

Can an ISO and live-usb be infected or compromised? [duplicate]

If yes, how and what are the signs? What should one do? Will the OS be compromised as well?
user avatar
  • 27
0 votes
0 answers
112 views

How to tell if the ISO used to install Ubuntu is compromised?

I just want to know if there's any way to know if the ISO I installed was compromised. Is there any way I could tell by looking for it in Ubuntu right now? If so, how and what should I do? Also, may ...
user avatar
  • 27
3 votes
1 answer
795 views

Ubuntu server hacked. Recovering

I was cyber-attacked by someone from China and they managed to install Yam (crypto mining) on my Ubuntu 14.04 server. I managed to close their ssh access through the public IP. and I have remedied ...
user avatar
  • 61
5 votes
2 answers
2k views

Strange new rules added to my iptables config... Was my server hacked?

Today, I listed my iptables for a routine check -- and discovered two strange UFW rules that I don't remember setting up myself, referring to two specific IP addresses that I can't identify: -A ufw-...
user avatar
2 votes
1 answer
1k views

Can hackers inject anything to the server outside /var/www/html

We got hack because of a bad security on our server. The hacker got access of the database probably from a php file holding database credentials in the html folder. The /var/www/html folder had root ...
user avatar
  • 35
1 vote
0 answers
1k views

what does this logged text means, some ip tried hack my server

I'm using Ubuntu 16.04 and running a small server on it. When I checked log files with grep -r 'ip-address' /var/log/ command, it returned this log /var/log/auth.log:Dec 19 00:26:00 ip-10-xx-xx-xx ...
user avatar
6 votes
1 answer
3k views

Ubuntu encrypted hard drive - possible to crack? [closed]

I'm using Ubuntu 18.04 on my laptop. If someone would steal my laptop, would it be possible for them to access my data stored on the laptop? Could any of them access my data, not just random people ...
user avatar
0 votes
2 answers
237 views

I am trying to find out if someone is running a server on my Ubuntu without my knowledge

I know this sounds a bit odd. But I have been having hacking done on my computer and I am locked out of my "su" user now for some reason. My computer cpu is running abnormally high and I think there ...
user avatar
3 votes
1 answer
1k views

How can I find the origin of a process and stop it permanently?

I have an Ubuntu system running an apache server. I have found a process cache.sh which I think might be a crypto-mining process and which is running all the time on my server consuming up to 98% CPU. ...
user avatar
  • 131
0 votes
1 answer
4k views

(Got no data packets from target network!) error in aircrack-ng ubuntu

I try to hack WPA2 wifi so this is what i do: airmon-ng start wlan0 airodump-ng wlan0mon airodump-ng --bssid (bssid) -c (channel) --write wpa2 wlan0mon aireplay-ng --deauth 100 -a (bssid) wlan0mon ...
user avatar
  • 113
0 votes
0 answers
2k views

TypeError: coercing to Unicode: need string or buffer, NoneType found (PyPhisher)

I'm running Ubuntu 18.04. I cloned PyPhisher from GitHub - git clone https://github.com/sneakerhax/PyPhisher then I ran PyPhisher.py file by executing - python PyPhisher.py So I got this output ...
user avatar
  • 113
0 votes
1 answer
228 views

server compromised - ./sysd -c apache.cf -t 1 eating all memmory

My server was most certainly compromised. Now I want to find where hackers enter the server. Before attack I can see in syslog: May 13 01:28:23 eee crontab[10680]: (www-data) DELETE (www-data) May ...
user avatar
5 votes
5 answers
34k views

How can I reverse my wifi from monitor mode to normal mode?

In a course named ethical Hacking for beginners , I learned that wifi has some modes in which we can switch between but I don't know that what was the normal mode and how to switch on it I used ...
user avatar
1 vote
0 answers
84 views

Have I opened myself to a hack from posting terminal output here?

So, yesterday I posed a question where I supplied two dmesg | tail outputs, plus uname -a and ls -a /boot. It disclosed my system time and my username, (plus my VPN provider and other software). I ...
user avatar
1 vote
1 answer
750 views

My server potentially hacked . How to clean a server from rogue processes [duplicate]

I am a newbie and my first server seems to have been hacked. I am not sure how to clean it. There are processes hogging the CPU that am not the owner of. All the 12 CPUs are almost all running at 100%....
user avatar
  • 11
1 vote
2 answers
2k views

/dev/disk-by-uuid/* permissions = lrwxrwxrwx... Is this a security risk?

ls -l /dev/disk/by-uuid Output: lrwxrwxrwx 1 root root 10 sep 15 11:34 49e9738d-627e-... -> ../../sdb5 lrwxrwxrwx 1 root root 10 sep 15 11:34 7ad390da-d1a2-... -> ../../sda6 lrwxrwxrwx 1 root ...
user avatar
  • 954
-3 votes
2 answers
1k views

How linux is secure when you can easily hack? [duplicate]

Passwords can be easily hacked using this technique: How do I reset a lost administrative password? .
user avatar
2 votes
0 answers
71 views

Wine: is my system secure to use again?

I installed wine latest version ,on my 16.04 .then I installed an untrusted exe which could have been a virus as it might have caused the registry error on my windows 10 earlier today So I uninstalled ...
user avatar
0 votes
1 answer
867 views

AWS ubuntu machine infected with some kind of miner-gate. How do i diagnose it or get rid of it?

I know I can always nuke the instance and start a fresh one. Luckily this is just a test machine. But i'd like to use this opportunity to learn how to diagnose these issues. In case in matters - I ...
user avatar
0 votes
1 answer
1k views

I think I got hacked 16.04 LTS

I'm running ubuntu on my laptop and while i was watching some videos, someone logged into my computer and started using it. I saw the mouse pointer starting to move and they started clicking things. I ...
user avatar
  • 9
1 vote
0 answers
872 views

Firefox is connecting to sites that I haven't opened

I started playing with Wireshark and I have seen that firefox is connecting to some IPs even when I'm not connected to any site lsof -i -a -p 'firefox_pid' COMMAND PID USER FD TYPE DEVICE ...
user avatar
  • 371