Have I been hacked?

My index page reads the following:

WHICH FILE EXTENSION ARE YOU?

You are .cgi
Your life seems a bit too scripted, and sometimes you are exploited. Still a workhorse though.


Tell me what your thoughts are.

Lamp

Sounds like you were defaced so yes you were hacked.

That is no default page that I know of....so you where defaced.

That's a BBSpot quiz: http://www.bbspot.com/News/2004/10/extension_quiz.php

I'm also .cgi :cool:

yay im a .doc file!!

Originally posted by picoyak
That's a BBSpot quiz: http://www.bbspot.com/News/2004/10/extension_quiz.php

I'm also .cgi :cool:

Ok...

So what does all of this mean?


How can I figure out how they got in and how do I get them out?

Lamp

Does anyone have a clue as to how these people can get in?

/tmp is secured (noexec and the whole works) and /var/tmp points to /tmp.

Your help is REALLY appreciated.

Lamp

Originally posted by picoyak
That's a BBSpot quiz: http://www.bbspot.com/News/2004/10/extension_quiz.php

I'm also .cgi :cool:

I wonder how that quiz came into his index page..

Originally posted by fac3less
Greetings:

In order to be fully secure you must use internet explorer.
The first step in securing your server would be install microsoft windows 98, special edition.


This is the most useless post I've EVER read on these boards.

I'm a .dll :)

I'm a .* (Wildcard) :clap: Yay!

im .dll as well

Wow, I'm an .swf!! Flashy, yet sometimes annoying. My wife would probably agree...

:D

Originally posted by USWEB-Darren
Wow, I'm an .swf!! Flashy, yet sometimes annoying. My wife would probably agree...

:D

Same here :)

Contact rack911.com and get them to secure your server. It seems people have hijacked your thread.

You are .gif
Sometimes you are animated,
but usually you just sit there and look pretty.

Originally posted by RHChristian
Contact rack911.com and get them to secure your server. It seems people have hijacked your thread.

No, just easily amused :)

Didn't mean to hijack the thread. I don't believe the original poster is hacked or defaced. I believe that someone tried to post their quiz results and the markup got kludged. I've seen it happen before with those quiz results depending upon the cms used and how it interprets and renders things that are copied/pasted from those funny quizzes such as Quizilla or BBSpot.

But now since we haven't actually seen his site (or at least I haven't), we don't really know.

So, yeah, I guess someone will have to look at it, and you know it can't hurt if while that someone looks they also give the server a once-over security-wise.