What happened to ENXF in 2020?

[coolguy76]

So I was browsing the archive and I wanted to see how ENXF looked before, and I saw this:

What happened? Why did this happen?

 

[ENXF NET]

It was just 1 incident, nothing more

 

[cthctc]

It was just 1 incident, nothing more

ENXF NETHow can we protect our sites from such "hacking" activities? Are there any exploits in XenForo that we need to fix?

 

[cthctc]

Are there any authorized people who can access your server or host.
Using XenForo software, but is this software and plugins "Null"? If it's null, are you sure they're not open?

If you think there is no problem with these two options, the problem is with the server or hosting. If you can't find a solution with the company you bought the server or hosting from, change your company.

xauUULThank you for the information you provided, but thank God my site has not been hacked yet. I just use a lot of empty plugins so I'm wondering how to find them and turn them off if they explain.

 

[cthctc]

please use only english

xauUULsorry my english is not good i use google translate and i copied wrong place!

 

[cthctc]

no problem, enjoy the forum, if you need any help please ask.

xauUULyes, actually, I have edited the article that I wrote in Turkish by mistake, now in English, do you have any idea about the question I mentioned?

 

[cthctc]

"I just use a lot of empty plugins" you should not use a lot of empty or not-used plugins, make sure to disable and erase in your FTP, if you are not using it. You can find in addons section in FTP

xauUULI actually don't have many plugins and the ones I use are essential for me, but I still want to check if they have any vulnerabilities. I don't even remember from which sites I downloaded some of them.

 

[DareSec]

All info here how its hacked in news website

https://siberbasin.net/hack-haber/enxf-net-warez-xenforo-sitesi-hacklendi/

 

[xauUUL]

All info here how its hacked in news website

https://siberbasin.net/hack-haber/enxf-net-warez-xenforo-sitesi-hacklendi/

DareDevil@DareDevil Can you send me a pm, i have a question about upgrade.

 

[BattleKing]

@DareDevil Can you send me a pm, i have a question about upgrade.

xauUULRaise your question in a separate thread, so that all users are aware of. Thx

 

[xauUUL]

Raise your question in a separate thread, so that all users are aware of. Thx

BattleKingactually its not a problem but, i would like to ask personally

 

[BattleKing]

All info here how its hacked in news website

https://siberbasin.net/hack-haber/enxf-net-warez-xenforo-sitesi-hacklendi/

DareDevilThere is not much information, it is more nothing then everything else.

 

[BattleKing]

There is not much information, it is more nothing then everything else.

BattleKingand so far as I know this was caused by a vulnerability in the shoutbox of Siropu, but this is only what I've heard about it.

 

[Loki]

ENXF.NET was not HACKED. an administrator made bad decisions. in rebellion

 

[xauUUL]

ENXF.NET was not HACKED. an administrator made bad decisions. in rebellion

Lokican you please elaborate this?

 

[Loki]

can you please elaborate this?

xauUULIt is a very complicated topic, there is a dedicated forum
to the discussion of what happened
https://enxf.net/threads/important-notification.3588/

 

[TrickyRicky]

Quite simple all forums are open to hacking there are backdoors on all platforms. So you can just do all you can to keep your site safe. Nulled forms of sites are always on a hit list From other such like sites.

 

[xauUUL]

yes, keeping up to date addons are really important.

xauUULAnd all installed addons should be scanned or the code reviewed from time to time, also take care of the server logs, the best if they will be redirected to another system

 

[BattleKing]

yes, keeping up to date addons are really important.

xauUULAnd all installed addons should be scanned or the code reviewed from time to time, also take care of the server logs, the best if they will be redirected to another system

 

[xauUUL]

And all installed addons should be scanned or the code reviewed from time to time, also take care of the server logs, the best if they will be redirected to another system

BattleKingwhere can we scan addons? like virustotal?

 

[TrickyRicky]

where can we scan addons? like virustotal?

xauUULYou can use Virus scanner works well

 

[BattleKing]

where can we scan addons? like virustotal?

xauUULyes for example, there are also some other pages which scans for PHP backdoors, but could not remember the name of them.

 

[xauUUL]

yes for example, there are also some other pages which scans for PHP backdoors, but could not remember the name of them.

BattleKingsounds good let me take a look