Questions tagged [hacking]
Questions about defence or recovery from malicious hacking. We do not support hacking, so questions about performing such hacks are not allowed here.
79
questions
0
votes
0
answers
32
views
WiFi SSIDs with 2 almost identical names - OS glitch or security consern
I noticed that in the last few days my computer connects to the network automatically (i unset the autoconnect).
Today i opened the wifi network settings and noticed that i am connected to "...
- 451
1
vote
1
answer
123
views
Who is snap_daemon & snapd-range-524288-root and Ubuntu.com?
Snap_daemon & snapd-range-524288-root hacked into my computer as users, and messed it up not giving me access to change multiple programs to fix them. I deleted them as users along with their ...
- 11
0
votes
0
answers
25
views
How To Reset Ubuntu Password? [duplicate]
I am using Ubuntu 22.04. today i tried to change my ubuntu password and then i tried to unlock it and when i tried i got to know that i forgot the password . i tried to find solution and i got https://...
- 101
1
vote
1
answer
67
views
Compromised Ubuntu? Weird unauthorised iso file downloads and download attempts
I noticed 2 failed attempts at downloading an iso file in my Downloads, that were attempted without my knowing. It happened while I was using the computer (attempt time 10:06, screenshot 1). The ...
- 11
9
votes
2
answers
4k
views
Is it secure that Linux have default users?
Someone tried to hack my root user. It was interesting to me to find all users in my system. I don't remember I create any of them. Can hacker use any of other default users to enter the system (with ...
- 201
1
vote
1
answer
613
views
Can my Ubuntu laptop be hacked [closed]
Today I got Ubuntu 21.10 installed on my laptop. By my oversight the technician who installed it has got my username and password and my mobile number. Can he remotely hack my laptop on which Ubuntu ...
-2
votes
1
answer
85
views
Torrent malware [closed]
After I downloaded some courses from a 3rd party website I found that there is some of the data had uploaded automatically .
how can I know which data has been uploaded.
is that some kind of malware ...
-2
votes
1
answer
114
views
I believe I was hacked over night [closed]
I believe I was hacked last night. I am a little bit new to the Linux world so I don't know if this is normal or not, but there were a lot of random things in my command line history. Here a Google ...
- 1
0
votes
0
answers
67
views
How to solve getting repeatedly "hacked" on basic 18.04 VPS setup
I have VPS with clean installation of Ubuntu 18.04 (provided by hosting) to host my private testing website. I set it up (Apache, MySQL...) three times, but I always get shut down by host provider ...
0
votes
1
answer
738
views
Somebody trying to access my index.php file on ubuntu apache2 server (Laravel)
One of my project someone trying to access my index.php file in laravel.
Logs:-
{
"ip":"45.155.205.108","url":"/index.php?s=/Index/\\think\\app/invokefunction&...
0
votes
2
answers
279
views
What steps should I take to prevent these apparent hacking attempts? [duplicate]
I'm running an Ubuntu 20.04 server, and when I look at the logs, I constantly see strings of entries like this:
Jan 14 23:04:51 dell-server sshd[578861]: Invalid user carlos from 14.232.160.213 port ...
0
votes
0
answers
5k
views
bash: cannot set terminal process group (-1): Inappropriate ioctl for device
Just received this error >>
bash: cannot set terminal process group (-1): Inappropriate ioctl for device
then the disk partition went into READ-Only mode ; also noticed gnome-software was ...
- 21
0
votes
1
answer
617
views
Ubuntu OS on Laptop has been hacked & remotely monitored
I'm using Ubuntu 18.04 LTS, accidentally discovered some screenshots that I didn't take in "Pictures" folder. The screenshots are taken within a limited time period of 1 minute. I'm ...
- 1
0
votes
1
answer
174
views
Is this a sign I got hacked?
I was doing some important stuff on VirtualBox. I reinstalled my Mac brand new, installed VirtualBox from VirtualBox.org, and installed Ubuntu Server 20.04.
After finishing my work I typed poweroff (I ...
0
votes
0
answers
112
views
Strange iptables rules redirecting traffic to host I don't recognize
I never really managed my iptables config and went with the defaults. Today I had internet connection errors and in my attempts to fix this issue I checked my ipconfigs table. I found these strange ...
- 51
0
votes
0
answers
154
views
Found a folder named '~' in my home dir. Should I be worried?
I just found a folder named: ~ in my home directory. It had a little red cross on its bottom right corner,like root folder have. It was empty. When I deleted it, I was prompted to enter my login ...
- 15
0
votes
2
answers
2k
views
Ubuntu 20.04 being hacked
please give me some advice on how to handle the illegal invasion into my pc (UBuntu20.04) ? I went back home and saw someone remotely accessing my pc browsing my documents, closing my browsers and ...
- 128
2
votes
1
answer
153
views
Strange path or folder on hacked vps
My vps was confirmed hacked, Ubuntu 16.04 LTS (Thanks for answering in my post My previous post).
Now I have created new vps and move my site to new VPS.
But I don't delete my hacked vps, i preserve ...
- 25
0
votes
1
answer
139
views
How to check who opened files on UBUNTU 18.4
I use Ubuntu 18.04
Today, I left the computer on and no one used it. And when I came back home, I saw a lot of directories, files, and images opened.
I wonder if anyone hacked into my computer?
- 101
1
vote
2
answers
111
views
My username, password and i.p. were public. Was I hacked?
Through a series of poor choices, the username, root password, and i.p. address to my Ubuntu machine were pushed to a public repository.
Now, I've changed my password and purged the repo of the ...
- 113
1
vote
0
answers
732
views
Fluxion doesn't start capitive portal in Ubuntu 19.10 VM
I have installed Ubuntu 19.10 in VirtualBox with host Windows 7. I tried to hack my Wi-Fi with Fluxion tool. Everything worked till I tried to open capitive portal. First I didn't get any errors, it ...
- 11
1
vote
2
answers
268
views
Do I need Bios update for remote access on my HP EliteBook laptop, or should I remove it if I'm worried about being hacked?
I bought a used laptop that runs bios update for remote access on every restart. Could the person I bought it from have installed that to hack me? Do I need it? Should I remove it? I have no interest ...
- 11
1
vote
2
answers
566
views
Netwox tool#78: Error 4081
I am trying to run Netwox tool 78 on Ubuntu 18.04 and also tried on Ubuntu Osboxes image; but, I am getting following errors:
$ sudo netwox 78 --filter 10.161.25.252 Error 4081 :
error in ...
- 215
2
votes
1
answer
578
views
Will installing wine will allow the hackers to hack into my Ubuntu computer just like what happens in Windows? [duplicate]
What if I installed an .exe game with a trojan using wine on my Ubuntu? Would this allow the hackers to hack into my device just like what happens usually on Windows?
What about the viruses that work ...
- 111
2
votes
1
answer
174
views
VLC Security Flaw with Potential for RCE! Should Ubuntu Users Worry?
A security flaw, potentially serious has been found in VLC:
The vulnerability allows for RCE (remote code execution) which
potentially allows bad actors attackers to install, modify, or run
...
- 4,653
0
votes
1
answer
130
views
2 suspicious «non existent» tasks named 0000:06:00.0_di and 0000:06:00.0_ev. What are they?
In an UBUNTU 18.04 installation here are two suspicious «non existent» tasks named 0000:06:00.0_di and 0000:06:00.0_ev. Log indicates that a problematic pci 0000:06:00.0 exists, but still there is no ...
- 361
0
votes
0
answers
339
views
I was hacked? (am I a slave?)
I'm a newbie to Ubuntu
Few days back, I noticed a text file named pwn3d.txt on my home folder. The following text was in it:
You are (fully) pwn3d due to a homobraphic error on your software ...
- 11
0
votes
1
answer
2k
views
Has my laptop running Ubuntu 18.04 been Hacked? [closed]
I live with someone whom I don't trust.
So today I was browsing Youtube as usual, then suddenly VLC did open randomly! I convinced my self that it was just a bug and that I'm safe using Ubuntu.
Fast ...
1
vote
0
answers
345
views
Tp-link tl-wn722n v3 modo monitor
estuve mirando en Youtube tutoriales, entré a muchos lugares que no supieron resolver mí problema, es más, instalando un drivers que vi en Youtube hizo que mí Ubuntu se cuelgue cada vez que conectaba ...
- 11
1
vote
1
answer
2k
views
Is someone trying to hack my server?
So I typed journalctl after ssh(ing) into the server and got the following output: (so is someone trying to hack system or is it from my side?)
(Also note the timing says 5am? but most likely none of ...
- 113
0
votes
1
answer
255
views
How to make .htaccess to unhide the directory [closed]
I'm creating a VM for my students to hack into, however the directory containing .htaccess is hiding the directory they need to access to CTF. The only way you can find this directory is if you ...
12
votes
3
answers
3k
views
Is it dangerous to install hacking tools on my private linux machine?
I use my Ubuntu for private and business purposes. Can I also install tools on my computer that are actually there to perform penetration tests? Or is it harmless?
- 121
0
votes
0
answers
234
views
Is Kubenetes related software automatically installed on Ubuntu?
I have since yesterday noticed that the top command has been showing kubelet, kube-apiserver, kube-controller and other Kubernetes related processes running on my computer. This is alarming me and ...
- 103
0
votes
0
answers
131
views
Ssh login success but it is not me
I receive ssh login alert from two different ip on my server
Time: Fri Mar 22 05:50:37 2019 +0300
IP: 92.184.99.172 (FR/France/-)
Account: root
Method: password authentication
second ip:
...
- 1
1
vote
2
answers
545
views
Can an ISO and live-usb be infected or compromised? [duplicate]
If yes, how and what are the signs? What should one do? Will the OS be compromised as well?
- 27
0
votes
0
answers
144
views
How to tell if the ISO used to install Ubuntu is compromised?
I just want to know if there's any way to know if the ISO I installed was compromised. Is there any way I could tell by looking for it in Ubuntu right now? If so, how and what should I do?
Also, may ...
- 27
3
votes
1
answer
870
views
Ubuntu server hacked. Recovering
I was cyber-attacked by someone from China and they managed to install Yam (crypto mining) on my Ubuntu 14.04 server.
I managed to close their ssh access through the public IP. and I have remedied ...
- 61
5
votes
2
answers
2k
views
Strange new rules added to my iptables config... Was my server hacked?
Today, I listed my iptables for a routine check -- and discovered two strange UFW rules that I don't remember setting up myself, referring to two specific IP addresses that I can't identify:
-A ufw-...
2
votes
1
answer
1k
views
Can hackers inject anything to the server outside /var/www/html
We got hack because of a bad security on our server. The hacker got access of the database probably from a php file holding database credentials in the html folder. The /var/www/html folder had root ...
- 35
1
vote
0
answers
1k
views
what does this logged text means, some ip tried hack my server
I'm using Ubuntu 16.04 and running a small server on it.
When I checked log files with grep -r 'ip-address' /var/log/ command, it returned this log
/var/log/auth.log:Dec 19 00:26:00 ip-10-xx-xx-xx ...
user630621
6
votes
1
answer
3k
views
Ubuntu encrypted hard drive - possible to crack? [closed]
I'm using Ubuntu 18.04 on my laptop. If someone would steal my laptop, would it be possible for them to access my data stored on the laptop? Could any of them access my data, not just random people ...
- 77
0
votes
2
answers
264
views
I am trying to find out if someone is running a server on my Ubuntu without my knowledge
I know this sounds a bit odd. But I have been having hacking done on my computer and I am locked out of my "su" user now for some reason. My computer cpu is running abnormally high and I think there ...
- 198
3
votes
1
answer
2k
views
How can I find the origin of a process and stop it permanently?
I have an Ubuntu system running an apache server. I have found a process cache.sh which I think might be a crypto-mining process and which is running all the time on my server consuming up to 98% CPU. ...
- 131
0
votes
1
answer
4k
views
(Got no data packets from target network!) error in aircrack-ng ubuntu
I try to hack WPA2 wifi so this is what i do:
airmon-ng start wlan0
airodump-ng wlan0mon
airodump-ng --bssid (bssid) -c (channel) --write wpa2 wlan0mon
aireplay-ng --deauth 100 -a (bssid) wlan0mon
...
user869145
0
votes
1
answer
235
views
server compromised - ./sysd -c apache.cf -t 1 eating all memmory
My server was most certainly compromised. Now I want to find where hackers enter the server. Before attack I can see in syslog:
May 13 01:28:23 eee crontab[10680]: (www-data) DELETE (www-data)
May ...
- 103
5
votes
5
answers
49k
views
How can I reverse my wifi from monitor mode to normal mode?
In a course named ethical Hacking for beginners , I learned that wifi has some modes in which we can switch between but I don't know that what was the normal mode and how to switch on it
I used ...
1
vote
0
answers
99
views
Have I opened myself to a hack from posting terminal output here?
So, yesterday I posed a question where I supplied two dmesg | tail outputs, plus uname -a and ls -a /boot. It disclosed my system time and my username, (plus my VPN provider and other software).
I ...
1
vote
1
answer
803
views
My server potentially hacked . How to clean a server from rogue processes [duplicate]
I am a newbie and my first server seems to have been hacked. I am not sure how to clean it. There are processes hogging the CPU that am not the owner of. All the 12 CPUs are almost all running at 100%....
- 11
1
vote
2
answers
2k
views
/dev/disk-by-uuid/* permissions = lrwxrwxrwx... Is this a security risk?
ls -l /dev/disk/by-uuid
Output:
lrwxrwxrwx 1 root root 10 sep 15 11:34 49e9738d-627e-... -> ../../sdb5
lrwxrwxrwx 1 root root 10 sep 15 11:34 7ad390da-d1a2-... -> ../../sda6
lrwxrwxrwx 1 root ...
- 1,012
-3
votes
2
answers
2k
views
How linux is secure when you can easily hack? [duplicate]
Passwords can be easily hacked using this technique:
How do I reset a lost administrative password?
.
- 129