The DMZ

« first day (3954 days earlier) ← previous day next day → last day (1224 days later) »

MechMK1

11:52

@ThoriumBR More is always better

1 hour later…

Journeyman Geek

13:22

@ThoriumBR ow

ThoriumBR

the researchers are being sued by the equivalent of attorney general, the health ministry said they violated almost every principle on the research contract, and UNESCO says it's one the worst outcomes ever for a health research, ethically and practically...

ThoriumBR

13:36

people started dying and the researches kept the trials running and recruiting more volunteers, changed the approved parameters without notifying the health ministry, the science committee were coordinated by people related to the farma lab making the drug, they choose people not compatible with the approved guidelines, recruited 3 times more people than allowed, and mis-recorded the death count at least 3 times

and what they said in their defense? "It all was a tendentious declaration based on unlawful leaks that we will prosecute"

MechMK1

"You can trust the government. They would never do anything against your best interests."

ThoriumBR

14:05

but now the government is the side complaining

MechMK1

Of course they are

Polynomial

So this is intriguing.

Q: How to secure Laravel website

My laravel website is under attack. Only index.php file changes, I mean every one line of code is inserted above the laravel code. So this code runs before laravel code. It is harming my SEO.

Q: My Website Hacked! Needs Possible Reasons and Solutions

My website is built in Laravel 8. After some time multiple fake pages were created by someone. How he got access I don't know. pages like (example.com/free-dating-site). These are all pages indexed by Google. There are many pages but when check it on the server is not present. On my website, all ...

web-application php breach incident-analysis laravel

Both within an hour of each other, both Laravel, both mentioning index.php being modified, both mentioning SEO.

MechMK1

Could be related

Polynomial

my first guess is mass scanning for exposed config files, given what the second linked question mentioned.

but could be a new Laravel vuln

Fire Quacker

-5

Q: How To prevent Laravel Project from hacking

Hackers Access my index.php File and added the following lines of Code at the the Top. include_once $_SERVER['DOCUMENT_ROOT'].'/vendor/voku/portable-ascii/src/voku/helper/data/functions.php';

laravel web

Polynomial

14:18

I poked the Laravel folks on Twitter, just in case.

MechMK1

Could be a 0 day

Polynomial

Could be.

The admission of having config stuff exposed on the site makes me think it's perhaps not an 0day, and instead just mass exploitation of bad configs.

Fire Quacker

Why's it always have to do with voku/portable-ascii though?

Polynomial

Unsure. There's no /helper/data/functions.php in that package.

MechMK1

Yeah, just checked that

Maybe it's just a popular package and that name doesn't seem suspicious?

Fire Quacker

14:26

Right, the attacker could have arbitrarily chosen that path to use in every attack

MechMK1

At least, it wouldn't strike me as odd when looking at it

Polynomial

Yeah, exactly.

Hide it in some innocuous filename, include it from index.php

MechMK1

14:39

Good thing I don't use any PHP

3 hours later…

Fire Quacker

17:14

Oh cool. When I pause the message queue that this application uses, it doesn't send events back to the server, and consequently there is no log of what actions I do with the client...

3 hours later…