Questions tagged [hacking]

Questions about defence or recovery from malicious hacking. We do not support hacking, so questions about performing such hacks are not allowed here.

Filter by
Sorted by
Tagged with
0
votes
1answer
42 views

How to check who opened files on UBUNTU 18.4

I use Ubuntu 18.04 Today, I left the computer on and no one used it. And when I came back home, I saw a lot of directories, files, and images opened. I wonder if anyone hacked into my computer?
-3
votes
0answers
17 views

Problems with airodump in monitor mode…? [closed]

Basically I can't for the life of me get the interface wlan0mon or mon0. I tried airmon-ng start wlan0 airmon-ng start wlan0 But I see '10', which I tried using in airodump-ng 10 to sniff but that ...
0
votes
0answers
22 views

how to fix this problem i am stuck

The following packages have unmet dependencies: libruby1.8 : Depends: libgdbm3 (>= 1.8.3) but it is not going to be installed
0
votes
0answers
29 views

Unable to unstall hcxdumptool 18.04

I'm trying to install hcxdumptool in Ubuntu 18.04 LTS from https://github.com/ZerBea/hcxdumptool but I'm unable to do so. It is showing "OS not supported" PS: I had made changes to my ...
1
vote
2answers
73 views

My username, password and i.p. were public. Was I hacked?

Through a series of poor choices, the username, root password, and i.p. address to my Ubuntu machine were pushed to a public repository. Now, I've changed my password and purged the repo of the ...
0
votes
0answers
25 views

Redirect output to the terminal screen AND to a file without tee?

I am currently using a tool called probequest for pentesting. I want to see the realtime output as wel as writing it away to a log file realtime. Sadly the output from probequest stops showing if i ...
0
votes
0answers
48 views

Fluxion doesn't start capitive portal in Ubuntu 19.10

have installed Ubuntu 19.10 in VirtualBox with host Windows 7. I tried to hack my Wi-Fi with Fluxion tool. Everything worked till I tried to open capitive portal. First I didn't get any errors, it ...
1
vote
0answers
56 views

Fluxion doesn't start capitive portal in Ubuntu 19.10 VM

I have installed Ubuntu 19.10 in VirtualBox with host Windows 7. I tried to hack my Wi-Fi with Fluxion tool. Everything worked till I tried to open capitive portal. First I didn't get any errors, it ...
1
vote
2answers
153 views

Do I need Bios update for remote access on my HP EliteBook laptop, or should I remove it if I'm worried about being hacked?

I bought a used laptop that runs bios update for remote access on every restart. Could the person I bought it from have installed that to hack me? Do I need it? Should I remove it? I have no interest ...
1
vote
1answer
124 views

Netwox tool#78: Error 4081

I am trying to run Netwox tool 78 on Ubuntu 18.04 and also tried on Ubuntu Osboxes image; but, I am getting following errors: $ sudo netwox 78 --filter 10.161.25.252 Error 4081 : error in ...
2
votes
1answer
141 views

Will installing wine will allow the hackers to hack into my Ubuntu computer just like what happens in Windows? [duplicate]

What if I installed an .exe game with a trojan using wine on my Ubuntu? Would this allow the hackers to hack into my device just like what happens usually on Windows? What about the viruses that work ...
2
votes
1answer
104 views

VLC Security Flaw with Potential for RCE! Should Ubuntu Users Worry?

A security flaw, potentially serious has been found in VLC: The vulnerability allows for RCE (remote code execution) which potentially allows bad actors attackers to install, modify, or run ...
0
votes
0answers
32 views

How to know if a root user has installed a keylogger/malicious package?

I have my friend root user access few months ago. He has ssh access since I needed help with fixing a ci/cd issue. Recently, I noticed him trying to go through my other friend's computer like he was ...
0
votes
1answer
103 views

2 suspicious «non existent» tasks named 0000:06:00.0_di and 0000:06:00.0_ev. What are they?

In an UBUNTU 18.04 installation here are two suspicious «non existent» tasks named 0000:06:00.0_di and 0000:06:00.0_ev. Log indicates that a problematic pci 0000:06:00.0 exists, but still there is no ...
0
votes
0answers
190 views

I was hacked? (am I a slave?)

I'm a newbie to Ubuntu Few days back, I noticed a text file named pwn3d.txt on my home folder. The following text was in it: You are (fully) pwn3d due to a homobraphic error on your software ...
0
votes
0answers
47 views

Set the hollywood package output as Ubuntu 18.04 desktop wallpaper

Are you fimilar with the package 'hollywood', which mimics hollywood movies hacker monitor on your terminal session... I want it to be set as my desktop wallpaper... you know? i think it would be fun. ...
-1
votes
1answer
566 views

Has my laptop running Ubuntu 18.04 been Hacked? [closed]

I live with someone whom I don't trust. So today I was browsing Youtube as usual, then suddenly VLC did open randomly! I convinced my self that it was just a bug and that I'm safe using Ubuntu. Fast ...
1
vote
0answers
243 views

Tp-link tl-wn722n v3 modo monitor

estuve mirando en Youtube tutoriales, entré a muchos lugares que no supieron resolver mí problema, es más, instalando un drivers que vi en Youtube hizo que mí Ubuntu se cuelgue cada vez que conectaba ...
0
votes
0answers
52 views

database deleted by malware right after powering on machine!

My VPS servers are hosted on linode. Ubuntu 16.04, LAMP and I use webmin/virtualmin to manage my websites. I noticed something wrong with one of my websites on 4/8, at that time the website was still ...
1
vote
1answer
950 views

Is someone trying to hack my server?

So I typed journalctl after ssh(ing) into the server and got the following output: (so is someone trying to hack system or is it from my side?) (Also note the timing says 5am? but most likely none of ...
0
votes
1answer
115 views

How to make .htaccess to unhide the directory [closed]

I'm creating a VM for my students to hack into, however the directory containing .htaccess is hiding the directory they need to access to CTF. The only way you can find this directory is if you ...
12
votes
3answers
2k views

Is it dangerous to install hacking tools on my private linux machine?

I use my Ubuntu for private and business purposes. Can I also install tools on my computer that are actually there to perform penetration tests? Or is it harmless?
0
votes
0answers
130 views

Is Kubenetes related software automatically installed on Ubuntu?

I have since yesterday noticed that the top command has been showing kubelet, kube-apiserver, kube-controller and other Kubernetes related processes running on my computer. This is alarming me and ...
0
votes
0answers
56 views

Ssh login success but it is not me

I receive ssh login alert from two different ip on my server Time: Fri Mar 22 05:50:37 2019 +0300 IP: 92.184.99.172 (FR/France/-) Account: root Method: password authentication second ip: ...
1
vote
2answers
124 views

Can an ISO and live-usb be infected or compromised? [duplicate]

If yes, how and what are the signs? What should one do? Will the OS be compromised as well?
0
votes
0answers
55 views

How to tell if the ISO used to install Ubuntu is compromised?

I just want to know if there's any way to know if the ISO I installed was compromised. Is there any way I could tell by looking for it in Ubuntu right now? If so, how and what should I do? Also, may ...
0
votes
0answers
41 views

Is there any way I can tell if my Ubuntu has a key logger/screen logger installed? [duplicate]

How can I tell if my Ubuntu is hacked or been compromised? I'm starting to think it is because I keep overhearing my neighbors talked about something I just posted on a site. They've said many details ...
3
votes
1answer
461 views

Ubuntu server hacked. Recovering

I was cyber-attacked by someone from China and they managed to install Yam (crypto mining) on my Ubuntu 14.04 server. I managed to close their ssh access through the public IP. and I have remedied ...
1
vote
2answers
501 views

Strange new rules added to my iptables config… Was my server hacked?

Today, I listed my iptables for a routine check -- and discovered two strange UFW rules that I don't remember setting up myself, referring to two specific IP addresses that I can't identify: -A ufw-...
2
votes
1answer
193 views

Can hackers inject anything to the server outside /var/www/html

We got hack because of a bad security on our server. The hacker got access of the database probably from a php file holding database credentials in the html folder. The /var/www/html folder had root ...
0
votes
0answers
683 views

while decompiling i got an issue of “ failed to locate smali file to hook” how to solve it?

[*] Running backdoor-apk.sh v0.2.4a on Sun Dec 23 01:00:00 IST 2018 [+] Android payload options: 1) meterpreter/reverse_http 4) shell/reverse_http 2) meterpreter/reverse_https 5) shell/...
1
vote
0answers
673 views

what does this logged text means, some ip tried hack my server

I'm using Ubuntu 16.04 and running a small server on it. When I checked log files with grep -r 'ip-address' /var/log/ command, it returned this log /var/log/auth.log:Dec 19 00:26:00 ip-10-xx-xx-xx ...
6
votes
1answer
2k views

Ubuntu encrypted hard drive - possible to crack? [closed]

I'm using Ubuntu 18.04 on my laptop. If someone would steal my laptop, would it be possible for them to access my data stored on the laptop? Could any of them access my data, not just random people ...
0
votes
2answers
124 views

I am trying to find out if someone is running a server on my Ubuntu without my knowledge

I know this sounds a bit odd. But I have been having hacking done on my computer and I am locked out of my "su" user now for some reason. My computer cpu is running abnormally high and I think there ...
2
votes
1answer
303 views

How can I find the origin of a process and stop it permanently?

I have an Ubuntu system running an apache server. I have found a process cache.sh which I think might be a crypto-mining process and which is running all the time on my server consuming up to 98% CPU. ...
0
votes
1answer
3k views

(Got no data packets from target network!) error in aircrack-ng ubuntu

I try to hack WPA2 wifi so this is what i do: airmon-ng start wlan0 airodump-ng wlan0mon airodump-ng --bssid (bssid) -c (channel) --write wpa2 wlan0mon aireplay-ng --deauth 100 -a (bssid) wlan0mon ...
0
votes
0answers
2k views

TypeError: coercing to Unicode: need string or buffer, NoneType found (PyPhisher)

I'm running Ubuntu 18.04. I cloned PyPhisher from GitHub - git clone https://github.com/sneakerhax/PyPhisher then I ran PyPhisher.py file by executing - python PyPhisher.py So I got this output ...
0
votes
1answer
208 views

server compromised - ./sysd -c apache.cf -t 1 eating all memmory

My server was most certainly compromised. Now I want to find where hackers enter the server. Before attack I can see in syslog: May 13 01:28:23 eee crontab[10680]: (www-data) DELETE (www-data) May ...
3
votes
2answers
7k views

How can I reverse my wifi from monitor mode to normal mode?

In a course named ethical Hacking for beginners , I learned that wifi has some modes in which we can switch between but I don't know that what was the normal mode and how to switch on it I used ...
1
vote
0answers
74 views

Have I opened myself to a hack from posting terminal output here?

So, yesterday I posed a question where I supplied two dmesg | tail outputs, plus uname -a and ls -a /boot. It disclosed my system time and my username, (plus my VPN provider and other software). I ...
1
vote
1answer
564 views

My server potentially hacked . How to clean a server from rogue processes [duplicate]

I am a newbie and my first server seems to have been hacked. I am not sure how to clean it. There are processes hogging the CPU that am not the owner of. All the 12 CPUs are almost all running at 100%....
1
vote
2answers
757 views

/dev/disk-by-uuid/* permissions = lrwxrwxrwx… Is this a security risk?

ls -l /dev/disk/by-uuid Output: lrwxrwxrwx 1 root root 10 sep 15 11:34 49e9738d-627e-... -> ../../sdb5 lrwxrwxrwx 1 root root 10 sep 15 11:34 7ad390da-d1a2-... -> ../../sda6 lrwxrwxrwx 1 root ...
-3
votes
2answers
1k views

How linux is secure when you can easily hack? [duplicate]

Passwords can be easily hacked using this technique: How do I reset a lost administrative password? .
2
votes
0answers
59 views

Wine: is my system secure to use again?

I installed wine latest version ,on my 16.04 .then I installed an untrusted exe which could have been a virus as it might have caused the registry error on my windows 10 earlier today So I uninstalled ...
0
votes
1answer
613 views

AWS ubuntu machine infected with some kind of miner-gate. How do i diagnose it or get rid of it?

I know I can always nuke the instance and start a fresh one. Luckily this is just a test machine. But i'd like to use this opportunity to learn how to diagnose these issues. In case in matters - I ...
0
votes
1answer
1k views

I think I got hacked 16.04 LTS

I'm running ubuntu on my laptop and while i was watching some videos, someone logged into my computer and started using it. I saw the mouse pointer starting to move and they started clicking things. I ...
1
vote
0answers
778 views

Firefox is connecting to sites that I haven't opened

I started playing with Wireshark and I have seen that firefox is connecting to some IPs even when I'm not connected to any site lsof -i -a -p 'firefox_pid' COMMAND PID USER FD TYPE DEVICE ...
0
votes
2answers
401 views

Has my Ubuntu laptop been hacked through Facebook with Firefox?

Since two days everytime I log into facebook with Firefox with my 16.04 Ubuntu laptop I have several adwares webpages (such as macOS, for instance) that adds themselves in new tabs. I didn't thought ...
1
vote
1answer
59 views

How can I find out how my VPS was penetrated? [closed]

I have a VPS, running Ubuntu. Recently I found out that the VPS was hacked and someone put a script on all the websites hosted on the VPS. Sucuri says it is a MW:SPAM:SEO. I cleaned up the VPS, but I ...
1
vote
0answers
568 views

GRUB mk-standalone usage

I've managed to generate some custom version of GRUB using mk-standalone, with different module availability and the final efi files are in fact different in size, but when I check the memdisk content ...