Eurocardsharing

Go Back   Eurocardsharing > Sharing receivers > DreamBox > Chat

Chat Discussion, help - I was hacked at DreamBox forum; I believe I was hacked. I cannot access my dreambox (password changed) , cccam.cfg was changed, cannot access cccam Info ...

Reply
 
LinkBack Thread Tools Display Modes
help - I was hacked
Old
  (#1)
nelgo
Member
 
nelgo's Avatar
 
Offline
Posts: 57

Level: 6 [♥ Bé-Yêu ♥♥ Bé-Yêu ♥♥ Bé-Yêu ♥♥ Bé-Yêu ♥]
Life: 0 / 135
Magic: 19 / 3390
Experience: 41%

Thanks: 18
Thanked 1 Time in 1 Post
Join Date: Jul 2009
help - I was hacked - 19-September-2009, 13:54

I believe I was hacked. I cannot access my dreambox (password changed) , cccam.cfg was changed, cannot access cccam Info etc.

Can someone please tell me how to start over again and take control over my box and set up every thing again? I feel it is not going to be an easy weekend.
Your help is much appreciated.
   
Reply With Quote
Old
  (#2)
morte
Guest
 
morte's Avatar
 
Offline
Posts: 10,804

Level: 66 [♥ Bé-Yêu ♥♥ Bé-Yêu ♥♥ Bé-Yêu ♥♥ Bé-Yêu ♥♥ Bé-Yêu ♥]
Life: 492 / 1640
Magic: 3601 / 51616
Experience: 62%

Thanks: 4,388
Thanked 6,243 Times in 2,101 Posts
Join Date: May 2007
19-September-2009, 14:05

close port 80 + 16000 + cccam port, they cant use all your shares anymore
You were silly having everything open

Download a plugin.... someone needs to say the name, it will enable you to browse your files with the remote and open cccam.cfg to find the password

(19-September-2009 13:09)
Oh sent me your cccam.cfg the way it is, so I have something to track down the one who did this.
Most likely a payserver.

All your peers you have you need to warn.
You need to have new c&f-lines since your passwords are known and change your cccam listening port


Hardware: DM500S, MaximumTorodial T90
Sat positions: 4.8,13.0,19.2,28.2
Software: Pli Jade 3 with X-line Skin
CAM: Cccam 2.1.3
NOT LOOKING FOR SHARES
ECS irc Chatroom
Cccam Collection topic
http://virusscan.jotti.org/en



Use the ====>>>><<<<==== when you are happy with a post instead of replying to a post (rule #11 and gets you even banned)

Last edited by morte; 19-September-2009 at 14:09.. Reason: Automerged Doublepost
   
Reply With Quote
Sponsored Links
Old
  (#3)
nelgo
Member
 
nelgo's Avatar
 
Offline
Posts: 57

Level: 6 [♥ Bé-Yêu ♥♥ Bé-Yêu ♥♥ Bé-Yêu ♥♥ Bé-Yêu ♥]
Life: 0 / 135
Magic: 19 / 3390
Experience: 41%

Thanks: 18
Thanked 1 Time in 1 Post
Join Date: Jul 2009
19-September-2009, 14:12

Ok I would appreciate some further instructions on how to close the ports.

I cannot access my cccam.cfg file from my pc either !!

pls help
   
Reply With Quote
Old
  (#4)
morte
Guest
 
morte's Avatar
 
Offline
Posts: 10,804

Level: 66 [♥ Bé-Yêu ♥♥ Bé-Yêu ♥♥ Bé-Yêu ♥♥ Bé-Yêu ♥♥ Bé-Yêu ♥]
Life: 492 / 1640
Magic: 3601 / 51616
Experience: 62%

Thanks: 4,388
Thanked 6,243 Times in 2,101 Posts
Join Date: May 2007
19-September-2009, 14:16

The ports are in your router, remove all the forwardings to your dreambox

(19-September-2009 13:17)
You first need to do this "Download a plugin.... someone needs to say the name, it will enable you to browse your files with the remote and open cccam.cfg to find the password"
You do all with the remote, no ftp or whatsoever


Hardware: DM500S, MaximumTorodial T90
Sat positions: 4.8,13.0,19.2,28.2
Software: Pli Jade 3 with X-line Skin
CAM: Cccam 2.1.3
NOT LOOKING FOR SHARES
ECS irc Chatroom
Cccam Collection topic
http://virusscan.jotti.org/en



Use the ====>>>><<<<==== when you are happy with a post instead of replying to a post (rule #11 and gets you even banned)

Last edited by morte; 19-September-2009 at 14:17.. Reason: Automerged Doublepost
   
Reply With Quote
Old
  (#5)
nelgo
Member
 
nelgo's Avatar
 
Offline
Posts: 57

Level: 6 [♥ Bé-Yêu ♥♥ Bé-Yêu ♥♥ Bé-Yêu ♥♥ Bé-Yêu ♥]
Life: 0 / 135
Magic: 19 / 3390
Experience: 41%

Thanks: 18
Thanked 1 Time in 1 Post
Join Date: Jul 2009
19-September-2009, 14:25

how do I get my cccam.cfg file onto the pc?
   
Reply With Quote
Old
  (#6)
sakisf
ECS Expert
 
sakisf's Avatar
 
Offline
Posts: 318

Level: 16 [♥ Bé-Yêu ♥]
Life: 0 / 391
Magic: 106 / 10560
Experience: 67%

Thanks: 63
Thanked 147 Times in 101 Posts
Join Date: Dec 2008
Location: Turkey
Age: 39
19-September-2009, 14:31

install tuxbox commander from blue panel, then go edit /etc/passwd and delete the scrambled word between root:scrambled:0:0. open your router firewall and disable ports 23/80/16000/16001. telnet into your box with username root and no password and cp /var/etc/CCcam.cfg to /tmp/CCcam.cfg, then rm /var/etc/CCcam.cfg. Use dcc to connect to your box and download /tmp/CCcam.cfg to your computer and see what was changed/removed - send it to morte. find a new dyndns name (to avoid attacks), add a strong password to your root (type passwd in telnet), add WEBINFO USERNAME : & WEBINFO PASSWORD : into your cccam.cfg, add TELNETINFO USERNAME : & TELNETINFO PASSWORD : into your config and use user/pass other than root and the password you are using for telnet. Contact your old peers and give them new clines with your new dyndns and stronger passwords.
   
Reply With Quote
The Following 2 Users Say Thank You to sakisf For This Useful Post:
morte (19-September-2009), RoYaL KiD (19-September-2009)
Old
  (#7)
tomslick
Senior Member
 
tomslick's Avatar
 
Offline
Posts: 100

Level: 9 [♥ Bé-Yêu ♥]
Life: 0 / 200
Magic: 33 / 5773
Experience: 0%

Thanks: 44
Thanked 49 Times in 30 Posts
Join Date: Apr 2008
19-September-2009, 14:47

If you can download Hacksat Key Downloader from you plugin section on your STB you can reset your password to " dreambox ". It has the option in the menu.
   
Reply With Quote
The Following 2 Users Say Thank You to tomslick For This Useful Post:
morte (19-September-2009), RoYaL KiD (19-September-2009)
Old
  (#8)
nelgo
Member
 
nelgo's Avatar
 
Offline
Posts: 57

Level: 6 [♥ Bé-Yêu ♥♥ Bé-Yêu ♥♥ Bé-Yêu ♥♥ Bé-Yêu ♥]
Life: 0 / 135
Magic: 19 / 3390
Experience: 41%

Thanks: 18
Thanked 1 Time in 1 Post
Join Date: Jul 2009
19-September-2009, 15:53

dear Sakisf,

excuse my ignorance but what is dcc. I managed to copy the cccam.cfg into tmp but now i need to download it to my pc?

many thanks
   
Reply With Quote
Old
  (#9)
sakisf
ECS Expert
 
sakisf's Avatar
 
Offline
Posts: 318

Level: 16 [♥ Bé-Yêu ♥]
Life: 0 / 391
Magic: 106 / 10560
Experience: 67%

Thanks: 63
Thanked 147 Times in 101 Posts
Join Date: Dec 2008
Location: Turkey
Age: 39
19-September-2009, 16:31

dcc is Dreambox Control Center, just a useful utility to use from the pc as it has telnet/ftp and other nice utilities. You don't necessarily need to get CCcam.cfg from the dreambox, but it would help identify the source of the attack if you get it and submit it to Morte.
   
Reply With Quote
Old
  (#10)
RoYaL KiD
Senior Member
 
RoYaL KiD's Avatar
 
Offline
Posts: 120

Level: 9 [♥ Bé-Yêu ♥]
Life: 0 / 224
Magic: 40 / 6059
Experience: 96%

Thanks: 54
Thanked 18 Times in 15 Posts
Join Date: Nov 2008
19-September-2009, 16:37

Maybe we can sticky sakisfs post as a guide for thos who get hacked? Im only saying as it does seem very informative and i would also guess helpful...
   
Reply With Quote
Reply

Bookmarks

Tags
hacked


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off

Forum Jump



ECS on RSS ECS on Twitter ECS on Facebook ECS on Youtube
Follow us on:

Powered by vBulletin
Copyright 2002 - 2010, Jelsoft Enterprises Ltd.
SEO by vBSEO ©2011, Crawlability, Inc.
Dreambox