Skip to main content

Questions tagged [hacking]

Questions about defence or recovery from malicious hacking. We do not support hacking, so questions about performing such hacks are not allowed here.

Filter by
Sorted by
Tagged with
1 vote
1 answer
148 views

Multiple connections on random high port numbers

Having some issues with my laptop slowing down Ubuntu 20.04. Checking netstat shows multiple Established keepalive connections on random high ports, originating from port 443 on foreign computer. CPU ...
Allan's user avatar
  • 390
0 votes
0 answers
35 views

When I type a specifc word, it gets replaced with a random address

I have been having a weird issue with that when I type the letters "adr", it gets auto replaced with the text 22 Avenue StreetBrisbaneQLD4000. This is beyond weird. It is annoying because I ...
Jedidiah Thompson's user avatar
-4 votes
2 answers
103 views

What is going on with the lslogins instruction

The lslogins instructions lists down the user info of all users however isnt this unsafe? For example suppose a hacker pretends to like you and ends up spending the night with you just to access your ...
Root Groves's user avatar
-4 votes
1 answer
2k views

How do I know if I've been hacked or not? [closed]

I hear a ringtone while working on my laptop and I think I've been hacked or something. I checked netstat -ano and some connections are established. Now googling this out I learned that established ...
Loic0855's user avatar
0 votes
0 answers
82 views

WiFi SSIDs with 2 almost identical names - OS glitch or security consern

I noticed that in the last few days my computer connects to the network automatically (i unset the autoconnect). Today i opened the wifi network settings and noticed that i am connected to "...
Kar19's user avatar
  • 461
2 votes
1 answer
781 views

Who is snap_daemon & snapd-range-524288-root and Ubuntu.com?

Snap_daemon & snapd-range-524288-root hacked into my computer as users, and messed it up not giving me access to change multiple programs to fix them. I deleted them as users along with their ...
MaryT's user avatar
  • 21
0 votes
0 answers
27 views

How To Reset Ubuntu Password? [duplicate]

I am using Ubuntu 22.04. today i tried to change my ubuntu password and then i tried to unlock it and when i tried i got to know that i forgot the password . i tried to find solution and i got https://...
Donex Noob's user avatar
1 vote
1 answer
149 views

Compromised Ubuntu? Weird unauthorised iso file downloads and download attempts

I noticed 2 failed attempts at downloading an iso file in my Downloads, that were attempted without my knowing. It happened while I was using the computer (attempt time 10:06, screenshot 1). The ...
Grace Pine's user avatar
10 votes
2 answers
5k views

Is it secure that Linux have default users?

Someone tried to hack my root user. It was interesting to me to find all users in my system. I don't remember I create any of them. Can hacker use any of other default users to enter the system (with ...
Egor's user avatar
  • 211
1 vote
1 answer
889 views

Can my Ubuntu laptop be hacked [closed]

Today I got Ubuntu 21.10 installed on my laptop. By my oversight the technician who installed it has got my username and password and my mobile number. Can he remotely hack my laptop on which Ubuntu ...
Amitabh Kumar's user avatar
-2 votes
1 answer
120 views

Torrent malware [closed]

After I downloaded some courses from a 3rd party website I found that there is some of the data had uploaded automatically . how can I know which data has been uploaded. is that some kind of malware ...
Fares Naoui's user avatar
-2 votes
1 answer
130 views

I believe I was hacked over night [closed]

I believe I was hacked last night. I am a little bit new to the Linux world so I don't know if this is normal or not, but there were a lot of random things in my command line history. Here a Google ...
Arion's user avatar
  • 1
0 votes
0 answers
75 views

How to solve getting repeatedly "hacked" on basic 18.04 VPS setup

I have VPS with clean installation of Ubuntu 18.04 (provided by hosting) to host my private testing website. I set it up (Apache, MySQL...) three times, but I always get shut down by host provider ...
AndyAsksUbuntu's user avatar
0 votes
1 answer
857 views

Somebody trying to access my index.php file on ubuntu apache2 server (Laravel)

One of my project someone trying to access my index.php file in laravel. Logs:- { "ip":"45.155.205.108","url":"/index.php?s=/Index/\\think\\app/invokefunction&...
Akash Kumar Verma's user avatar
0 votes
2 answers
365 views

What steps should I take to prevent these apparent hacking attempts? [duplicate]

I'm running an Ubuntu 20.04 server, and when I look at the logs, I constantly see strings of entries like this: Jan 14 23:04:51 dell-server sshd[578861]: Invalid user carlos from 14.232.160.213 port ...
JmaJeremy's user avatar
1 vote
0 answers
6k views

bash: cannot set terminal process group (-1): Inappropriate ioctl for device

Just received this error >> bash: cannot set terminal process group (-1): Inappropriate ioctl for device then the disk partition went into READ-Only mode ; also noticed gnome-software was ...
Marc Cox's user avatar
0 votes
1 answer
816 views

Ubuntu OS on Laptop has been hacked & remotely monitored

I'm using Ubuntu 18.04 LTS, accidentally discovered some screenshots that I didn't take in "Pictures" folder. The screenshots are taken within a limited time period of 1 minute. I'm ...
SevenSea's user avatar
0 votes
1 answer
204 views

Is this a sign I got hacked?

I was doing some important stuff on VirtualBox. I reinstalled my Mac brand new, installed VirtualBox from VirtualBox.org, and installed Ubuntu Server 20.04. After finishing my work I typed poweroff (I ...
thomas boisson's user avatar
0 votes
0 answers
227 views

Strange iptables rules redirecting traffic to host I don't recognize

I never really managed my iptables config and went with the defaults. Today I had internet connection errors and in my attempts to fix this issue I checked my ipconfigs table. I found these strange ...
kachink's user avatar
  • 51
0 votes
0 answers
245 views

Found a folder named '~' in my home dir. Should I be worried?

I just found a folder named: ~ in my home directory. It had a little red cross on its bottom right corner,like root folder have. It was empty. When I deleted it, I was prompted to enter my login ...
prateek's user avatar
  • 15
1 vote
2 answers
2k views

Ubuntu 20.04 being hacked

please give me some advice on how to handle the illegal invasion into my pc (UBuntu20.04) ? I went back home and saw someone remotely accessing my pc browsing my documents, closing my browsers and ...
Albert G Lieu's user avatar
2 votes
1 answer
180 views

Strange path or folder on hacked vps

My vps was confirmed hacked, Ubuntu 16.04 LTS (Thanks for answering in my post My previous post). Now I have created new vps and move my site to new VPS. But I don't delete my hacked vps, i preserve ...
Nanang Arema's user avatar
0 votes
1 answer
150 views

How to check who opened files on UBUNTU 18.4

I use Ubuntu 18.04 Today, I left the computer on and no one used it. And when I came back home, I saw a lot of directories, files, and images opened. I wonder if anyone hacked into my computer?
Goku's user avatar
  • 101
1 vote
2 answers
120 views

My username, password and i.p. were public. Was I hacked?

Through a series of poor choices, the username, root password, and i.p. address to my Ubuntu machine were pushed to a public repository. Now, I've changed my password and purged the repo of the ...
Ian's user avatar
  • 113
1 vote
0 answers
922 views

Fluxion doesn't start capitive portal in Ubuntu 19.10 VM

I have installed Ubuntu 19.10 in VirtualBox with host Windows 7. I tried to hack my Wi-Fi with Fluxion tool. Everything worked till I tried to open capitive portal. First I didn't get any errors, it ...
ador007's user avatar
  • 11
1 vote
2 answers
295 views

Do I need Bios update for remote access on my HP EliteBook laptop, or should I remove it if I'm worried about being hacked?

I bought a used laptop that runs bios update for remote access on every restart. Could the person I bought it from have installed that to hack me? Do I need it? Should I remove it? I have no interest ...
chris styler's user avatar
1 vote
2 answers
721 views

Netwox tool#78: Error 4081

I am trying to run Netwox tool 78 on Ubuntu 18.04 and also tried on Ubuntu Osboxes image; but, I am getting following errors: $ sudo netwox 78 --filter 10.161.25.252 Error 4081 : error in ...
user2994783's user avatar
2 votes
1 answer
679 views

Will installing wine will allow the hackers to hack into my Ubuntu computer just like what happens in Windows? [duplicate]

What if I installed an .exe game with a trojan using wine on my Ubuntu? Would this allow the hackers to hack into my device just like what happens usually on Windows? What about the viruses that work ...
sam islam's user avatar
  • 111
2 votes
1 answer
187 views

VLC Security Flaw with Potential for RCE! Should Ubuntu Users Worry?

A security flaw, potentially serious has been found in VLC: The vulnerability allows for RCE (remote code execution) which potentially allows bad actors attackers to install, modify, or run ...
Joshua Besneatte's user avatar
0 votes
1 answer
141 views

2 suspicious «non existent» tasks named 0000:06:00.0_di and 0000:06:00.0_ev. What are they?

In an UBUNTU 18.04 installation here are two suspicious «non existent» tasks named 0000:06:00.0_di and 0000:06:00.0_ev. Log indicates that a problematic pci 0000:06:00.0 exists, but still there is no ...
ilias iliadis's user avatar
0 votes
0 answers
377 views

I was hacked? (am I a slave?)

I'm a newbie to Ubuntu Few days back, I noticed a text file named pwn3d.txt on my home folder. The following text was in it: You are (fully) pwn3d due to a homobraphic error on your software ...
eq3wv1rk's user avatar
0 votes
1 answer
2k views

Has my laptop running Ubuntu 18.04 been Hacked? [closed]

I live with someone whom I don't trust. So today I was browsing Youtube as usual, then suddenly VLC did open randomly! I convinced my self that it was just a bug and that I'm safe using Ubuntu. Fast ...
self descipline's user avatar
1 vote
0 answers
354 views

Tp-link tl-wn722n v3 modo monitor

estuve mirando en Youtube tutoriales, entré a muchos lugares que no supieron resolver mí problema, es más, instalando un drivers que vi en Youtube hizo que mí Ubuntu se cuelgue cada vez que conectaba ...
GabboAlarcon's user avatar
1 vote
1 answer
2k views

Is someone trying to hack my server?

So I typed journalctl after ssh(ing) into the server and got the following output: (so is someone trying to hack system or is it from my side?) (Also note the timing says 5am? but most likely none of ...
Muhammad Usman's user avatar
0 votes
1 answer
291 views

How to make .htaccess to unhide the directory [closed]

I'm creating a VM for my students to hack into, however the directory containing .htaccess is hiding the directory they need to access to CTF. The only way you can find this directory is if you ...
jmeacham7's user avatar
12 votes
3 answers
3k views

Is it dangerous to install hacking tools on my private linux machine?

I use my Ubuntu for private and business purposes. Can I also install tools on my computer that are actually there to perform penetration tests? Or is it harmless?
Yannick's user avatar
  • 121
0 votes
0 answers
242 views

Is Kubenetes related software automatically installed on Ubuntu?

I have since yesterday noticed that the top command has been showing kubelet, kube-apiserver, kube-controller and other Kubernetes related processes running on my computer. This is alarming me and ...
earth2jason's user avatar
0 votes
0 answers
151 views

Ssh login success but it is not me

I receive ssh login alert from two different ip on my server Time: Fri Mar 22 05:50:37 2019 +0300 IP: 92.184.99.172 (FR/France/-) Account: root Method: password authentication second ip: ...
mckm's user avatar
  • 1
1 vote
2 answers
695 views

Can an ISO and live-usb be infected or compromised? [duplicate]

If yes, how and what are the signs? What should one do? Will the OS be compromised as well?
Godfrey's user avatar
  • 27
0 votes
0 answers
172 views

How to tell if the ISO used to install Ubuntu is compromised?

I just want to know if there's any way to know if the ISO I installed was compromised. Is there any way I could tell by looking for it in Ubuntu right now? If so, how and what should I do? Also, may ...
Godfrey's user avatar
  • 27
3 votes
1 answer
928 views

Ubuntu server hacked. Recovering

I was cyber-attacked by someone from China and they managed to install Yam (crypto mining) on my Ubuntu 14.04 server. I managed to close their ssh access through the public IP. and I have remedied ...
Sam's user avatar
  • 61
5 votes
2 answers
2k views

Strange new rules added to my iptables config... Was my server hacked?

Today, I listed my iptables for a routine check -- and discovered two strange UFW rules that I don't remember setting up myself, referring to two specific IP addresses that I can't identify: -A ufw-...
killer_rabbit's user avatar
3 votes
1 answer
2k views

Can hackers inject anything to the server outside /var/www/html

We got hack because of a bad security on our server. The hacker got access of the database probably from a php file holding database credentials in the html folder. The /var/www/html folder had root ...
Cayenne's user avatar
  • 45
1 vote
0 answers
1k views

what does this logged text means, some ip tried hack my server

I'm using Ubuntu 16.04 and running a small server on it. When I checked log files with grep -r 'ip-address' /var/log/ command, it returned this log /var/log/auth.log:Dec 19 00:26:00 ip-10-xx-xx-xx ...
user avatar
6 votes
1 answer
3k views

Ubuntu encrypted hard drive - possible to crack? [closed]

I'm using Ubuntu 18.04 on my laptop. If someone would steal my laptop, would it be possible for them to access my data stored on the laptop? Could any of them access my data, not just random people ...
wimdewild's user avatar
0 votes
2 answers
285 views

I am trying to find out if someone is running a server on my Ubuntu without my knowledge

I know this sounds a bit odd. But I have been having hacking done on my computer and I am locked out of my "su" user now for some reason. My computer cpu is running abnormally high and I think there ...
JayCouture.com's user avatar
3 votes
1 answer
2k views

How can I find the origin of a process and stop it permanently?

I have an Ubuntu system running an apache server. I have found a process cache.sh which I think might be a crypto-mining process and which is running all the time on my server consuming up to 98% CPU. ...
Deepak's user avatar
  • 131
0 votes
1 answer
4k views

(Got no data packets from target network!) error in aircrack-ng ubuntu

I try to hack WPA2 wifi so this is what i do: airmon-ng start wlan0 airodump-ng wlan0mon airodump-ng --bssid (bssid) -c (channel) --write wpa2 wlan0mon aireplay-ng --deauth 100 -a (bssid) wlan0mon ...
user avatar
0 votes
1 answer
237 views

server compromised - ./sysd -c apache.cf -t 1 eating all memmory

My server was most certainly compromised. Now I want to find where hackers enter the server. Before attack I can see in syslog: May 13 01:28:23 eee crontab[10680]: (www-data) DELETE (www-data) May ...
user1031742's user avatar
5 votes
5 answers
61k views

How can I reverse my wifi from monitor mode to normal mode?

In a course named ethical Hacking for beginners , I learned that wifi has some modes in which we can switch between but I don't know that what was the normal mode and how to switch on it I used ...
Ritanshu Singh's user avatar