Red Hackers keep coming to my hotel.

[Perk]

Current I have the group known as Red Hackers showing up at my hotel constantly...

I talked to "redboot" and he said he is using backtrack 5 to hack me. I have no idea what he is talking about. Is he just bullshitting me and exploiting me somewhere? Help.




Link: blabhotel.com


Note:
I removed the seckey exploit.

[MentaL]

[mome5]

I Don't think "redboot" is bullshiting because with back track 5 u can do anything.So I don't think the cms has exploits I checked it.

[Perk]

I Don't think "redboot" is bullshiting because with back track 5 u can do anything.So I don't think the cms has exploits I checked it.

Lol you really came here to reply?

Cute.

[mome5]

Wait what?I tried to help you and that's how you reply me?I'm not redboot or whatever his name was

[Diddy]

Damn you must of pissed off the wrong people.

[The General]

Enable MySQL logs. If you are running IIS, logs are already stored. Feel free to post them here so we can take a look at it for you.

They are probably using some shitty exploit so don't worry too much about the software they use. They are just lazy.

[Perk]

Enable MySQL logs. If you are running IIS, logs are already stored. Feel free to post them here so we can take a look at it for you.

They are probably using some shitty exploit so don't worry too much about the software they use. They are just lazy.

Are these what the logs look like?

2014-06-28 00:01:02 IPREMOVED GET /me - 80 - 108.162.250.54 Mozilla/5.0+(Windows+NT+6.1;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/35.0.1916.153+Safari/537.36 200 0 0 500
2014-06-28 00:01:03 IPREMOVED  GET /app/tpl/skins/Habbo/styles/common.css - 80 - 108.162.249.53 Mozilla/5.0+(Windows+NT+6.1;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/35.0.1916.153+Safari/537.36 304 0 0 156
2014-06-28 00:01:03 IPREMOVED  GET /app/tpl/skins/Habbo/js/visual.js - 80 - 108.162.250.54 Mozilla/5.0+(Windows+NT+6.1;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/35.0.1916.153+Safari/537.36 304 0 0 156
2014-06-28 00:01:03 IPREMOVED  GET /app/tpl/skins/Habbo/js/libs.js - 80 - 108.162.250.53 Mozilla/5.0+(Windows+NT+6.1;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/35.0.1916.153+Safari/537.36 304 0 0 140

[The General]

Yes. All POST and GET requests are stored. If you know about what time the hack happened you can browse through there. If you want you can upload the logs from that time so we can check it out.

[Perk]

Yes. All POST and GET requests are stored. If you know about what time the hack happened you can browse through there. If you want you can upload the logs from that time so we can check it out.

I dont have the time. So I will wait for another attack before I try and search through them.

[Lewi$]

How is this guy hacking you? Is he dropping tables? etc..

[bugme]

Skids always use Backtrack and what not thinking that their all hard stuff.

I think that the General made loads of sense here, I've had the same problem and enabling IIS logs would help but there needs to be something else that makes this happen. Anyway good luck brother.

[Perk]

How is this guy hacking you? Is he dropping tables? etc..

He usually makes everyone staff. Recently we have been good though. We might have patched the problem.

Skids always use Backtrack and what not thinking that their all hard stuff.

I think that the General made loads of sense here, I've had the same problem and enabling IIS logs would help but there needs to be something else that makes this happen. Anyway good luck brother.

Yeah logs are enabled so I will be sure to make note of the time of the attack. (If there is another).


Also thank you everyone for all the help.