Paid Advertising
web application security lab

Someone Wants to Hack All Big SEO Sites.

Someone named Fuckingpirate posted a very new blog today stating that he intended to hack a lot of the biggest SEO sites out there. Funny that I am somehow considered one of the biggest SEO sites since I rarely post about SEO (yes this is the second post today on it, but today has been the first in months).

Edit: Site is already down… so much for that game!

Edit: Site has moved to blogspot and there is a copy of the old site here. Additionally wolf-howl has been compromised.

20 Responses to “Someone Wants to Hack All Big SEO Sites.”

  1. SEO bloggers hacked through Wordpress exploit at Claus Heinrich Personal Blog Says:

    […] More information on this can be found at: Digital Point Ha.ckers […]

  2. Mark B Says:

    Looks like he got Matt Cutts also.

  3. Jungsonn Says:

    Wierd stuff happens while i’m away RSnake! i’m missing all the good stuff. I don’t understand this guy’s attitude with SEO sites, and yeah what’s up with you on that list?cause you run wordpress? strange folks.

  4. Hacker Crime Spree in the SEO Space Says:

    […] Here is the Coverage on threadwatch.org and ha.ckers.org. […]

  5. Anonymous Says:

    SEO blogs hacked by whitehat seo pirate…

    This is crazy, someone is going after SEO blogs… I’m amazed, I’m thrilled, I’m happy it’s all coming down. Who’s next, Matt Cutts?…

  6. Vote for this story at TagNe.ws Says:

    I’ve tagged this story at TagNe.ws
    http://www.tagne.ws/InternetTrends/SEO-blogs-hacked-by-whitehat-seo-pirate/

  7. Jungsonn Says:

    This guy get’s too much attention IMHO. another headliner for someone who isn’t sure about himself. ’sokay these are desparet days…

  8. RSnake Says:

    I didn’t see Matt Cutts go down… did he really go down or was he upgrading. I think the same thing happened with SEOPedia. Here’s the full list of sites he is going after (these are his words, not mine):

    www.mattcutts.com – Mess with the best, die like the rest? He scares me… Just typing his site in this list makes me tremble

    www.spamhuntress.com – That bitch needs some AdultFriendFinder love ASAP!

    www.shoemoney.com – A bald “guru”, he is like the Buda of the SEO “gurus” (See eliteretreat.info)

    www.pronetadvertising.com

    www.forumtrends.com

    www.askdavetaylor.com

    ha.ckers.org – The hardest one of the list. Hats off to RSnake and iD!

    www.v7n.com - Actually I’m just going to target blog.v7n.com and their forums

    forums.digitalpoint.com – Hard

    www.webmasterworld.com – They have the ugliest backend (and forum!) I’ve seen in my life

    www.seoblackhat.com – The blog and the private forums (I help out n00bs over there once in a while)

    www.boogybonbon.com

    www.syndk8.com

    www.stuntdubl.com

    www.wolf-howl.com

    www.seopedia.com

    www.digg.com – I’m not aiming for a deface; rather I will find & release ways to game their “democratic” system (This will make happy some webmasters out there)

    www.techcrunch.com – Had access to their server until they updated their stuff. This is the biggest target on the list…

    www.johnchow.com – Dude wtf?! You came out of the blur and now your blog is everywhere

    www.seobook.com – Your book is not that good anyways so get lost…

    www.pearsonified.com

    Don’t feel unimportant if your site is not listed here, more and more sites will be added gradually ;)

  9. RSnake Says:

    He was attempting to use this exploit: http://www.milw0rm.com/exploits/3095

    I only found one person who tried to use this exploit against us:

    155.97.203.200 - - [11/Jan/2007:11:47:02 -0800] “GET /blog/wp-trackback.php?p=1 HTTP/1.1″ 302 - “-” “Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.9) Gecko/20061206 Firefox/1.5.0.9″
    155.97.203.200 - - [11/Jan/2007:11:50:10 -0800] “POST /blog//wp-trackback.php?p=1 HTTP/1.0″ 200 78 “-” “Python-urllib/1.17″

    Meanwhile he also hacked http://www.stuntdubl.com/ as well.

  10. RSnake Says:

    http://www.boogybonbon.com/2007/01/15/boogybonbon-hacked/ was also hacked.

  11. Luny Says:

    it’s to bad he didnt actually code that WP exploit, or else i’d consider writing about it.

    I wonder if he knows blogspot is vulnerable to xss too :P

  12. RSnake Says:

    I’m sure he knows - he reads this blog apparently.

  13. Keith Says:

    In my opinion, he seems to have stopped after people upgraded to WordPress 2.0.7. He must be finding tough to get through into this version, but still not totally relying on that to secure the sites that I have.

  14. RSnake Says:

    Me neither… There are a number of things I have done to protect wordpress from itself. I’ll continue to do so as I have time, and eventually we’ll put it on a more hardened server. Right now the server is far too overwhelmed for any more security systems.

  15. mat Says:

    if u wanna be patched by this upgrade or turn registrer globals of with htacess i think or block the data from the exploit with htaccess in post fortmat

  16. desi Says:

    Do anyone have guts or can hack www.desihackerz.com Please hack this site i wnt to see them crying…..So anyone have that much knowledge>>>>>>>>>

  17. Desihackerz.com Says:

    Fuck u bitch @ desi
    DOnt u dare ask anyone to hack our site … and nobody will hack for u and for stUpid shit reasons … u n00b punK

  18. kefka Says:

    I would hazard a guess that he visits (and maybe posts) on your forum also.

  19. RSnake Says:

    Are you him, kefka?

  20. kefkasucksdesihackerz Says:

    HAHAHAHAHAHA

Respond here or Discuss On the Forums