We got Pwned!! Our website was down for about 4 hours today after the audacious Turks tagged and baggeed us.

For all you non geeks, to get 'owned' means someone else hijacking your site/computer. Add a little Web Speak and it becomes 'Pwned'.

For the record, we are amongst a select group of website who have been hacked using a Joomla exploit. If you're a joomla 1.5 user, check this link and make sure you're patched:

http://developer.joomla.org/security/news/241-20080801-core-password-remind-functionality.html

Thanks to our awesome friends at Joomlabear, (www.joomlabear.com)  we were up and running pretty quick (Thanks Lachlan, Happy Weddings!). Joomlabear did the template for this site. They're also good guys to call in a crisis. 

To our Hackers:

Thank you for being kind - in all seriousness, you could have done lots of damage, but you generously chose to do some graffiti and run. Thats cheeky, but not utterly evil.

So to SL1pKnot and Audores, we acknowledge your 37337 Skilz, you are mad hax0rs and totally Pwned our box.  We bow. BTW - the music clip you put up was pretty good.

To our mates at Joomlabear, thanks, you went beyond the call of duty for an unsupported open source template.

So...if you see anything on the site thats unusual (LOL) ...from now on...is it us? Or is it.....The Mad Hackers!!!! HAHAHA We Ownzored joo! Hee hee!

Rgds

MJEB

Settings6.139MBMemory Usage260msRequest Duration
Theme
Open Button Position
Hide Empty Tabs
Autoshow
Reset to defaults
Joomla! Version5.3.0
PHP Version8.2.26
Identityguest
Response200
Templatet3_bs3_blank
Database
Server
mysql
Version
8.0.36-0ubuntu0.22.04.1
Collation
utf8mb3_unicode_ci
Conn Collation
utf8mb4_0900_ai_ci
$_GET
array:3 [ "catid" => "67" "id" => "109:sitehacked200808" "view" => "article" ]
$_POST
[]
$_SESSION
array:1 [ "joomla" => "***redacted***" ]
$_COOKIE
[]
$_SERVER
array:59 [ "PATH" => "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" "CONTENT_LEN...
session
array:3 [ "counter" => 1 "timer" => array:3 [ "start" => 1746569379 "last" => 1746569379...
registry
array:3 [ "data" => [] "initialized" => false "separator" => "." ]
user
array:21 [ "id" => 0 "name" => null "username" => null "email" => null "password" => "***r...
  • afterLoad (105.38KB) (6.43ms)
  • afterInitialise (1.16MB) (46.01ms)
  • afterRoute (534.38KB) (2.37ms)
  • beforeRenderComponent com_content (54.78KB) (1.5ms)
  • Before Access::preloadComponents (all components) (104.77KB) (4.28ms)
  • After Access::preloadComponents (all components) (137.83KB) (2.24ms)
  • Before Access::preloadPermissions (com_content) (1.85KB) (17μs)
  • After Access::preloadPermissions (com_content) (2.09MB) (8.2ms)
  • Before Access::getAssetRules (id:160 name:com_content.article.109) (66.65KB) (85μs)
  • After Access::getAssetRules (id:160 name:com_content.article.109) (7.38KB) (134μs)
  • afterRenderComponent com_content (987.46KB) (83.82ms)
  • afterDispatch (3.03KB) (355μs)
  • Before Access::preloadPermissions (com_dpcalendar) (251.82KB) (21.56ms)
  • After Access::preloadPermissions (com_dpcalendar) (6.91KB) (2.34ms)
  • Before Access::getAssetRules (id:3131 name:com_dpcalendar.category.90) (440B) (258μs)
  • After Access::getAssetRules (id:3131 name:com_dpcalendar.category.90) (6.03KB) (28μs)
  • afterRender (164.26KB) (79.31ms)
  • 1 x afterRenderComponent com_content (987.46KB) (32.28%)
    83.82ms
    1 x afterRender (164.26KB) (30.54%)
    79.31ms
    1 x afterInitialise (1.16MB) (17.72%)
    46.01ms
    1 x Before Access::preloadPermissions (com_dpcalendar) (251.82KB) (8.3%)
    21.56ms
    1 x After Access::preloadPermissions (com_content) (2.09MB) (3.16%)
    8.20ms
    1 x afterLoad (105.38KB) (2.48%)
    6.43ms
    1 x Before Access::preloadComponents (all components) (104.77KB) (1.65%)
    4.28ms
    1 x afterRoute (534.38KB) (0.91%)
    2.37ms
    1 x After Access::preloadPermissions (com_dpcalendar) (6.91KB) (0.9%)
    2.34ms
    1 x After Access::preloadComponents (all components) (137.83KB) (0.86%)
    2.24ms
    1 x beforeRenderComponent com_content (54.78KB) (0.58%)
    1.50ms
    1 x afterDispatch (3.03KB) (0.14%)
    355μs
    1 x Before Access::getAssetRules (id:3131 name:com_dpcalendar.category.90) (440B) (0.1%)
    258μs
    1 x After Access::getAssetRules (id:160 name:com_content.article.109) (7.38KB) (0.05%)
    134μs
    1 x Before Access::getAssetRules (id:160 name:com_content.article.109) (66.65KB) (0.03%)
    85μs
    1 x After Access::getAssetRules (id:3131 name:com_dpcalendar.category.90) (6.03KB) (0.01%)
    28μs
    1 x Before Access::preloadPermissions (com_content) (1.85KB) (0.01%)
    17μs
24 statements were executed, 6 of which were duplicates, 18 unique43.62ms408.53KB
  • SELECT @@SESSION.sql_mode;200μs968B/libraries/vendor/joomla/database/src/Mysqli/MysqliDriver.php:259Copy
  • SELECT `data` FROM `vm53n_session` WHERE `session_id` = ?367μs1008BParams/libraries/vendor/joomla/session/src/Handler/DatabaseHandler.php:250Copy
  • SELECT `session_id` FROM `vm53n_session` WHERE `session_id` = :session_id LIMIT 1284μs1.3KBParams/libraries/src/Session/MetadataManager.php:187Copy
  • INSERT INTO `vm53n_session` (`session_id`,`guest`,`time`,`userid`,`username`,`client_id`) VALUES (:session_id, :guest, :time, :user_id, :username, :client_id)20.44ms944BParams/libraries/src/Session/MetadataManager.php:260Copy
  • SELECT `id`,`rules` FROM `vm53n_viewlevels`404μs992B/libraries/src/Access/Access.php:955Copy
  • SELECT `b`.`id` FROM `vm53n_usergroups` AS `a` LEFT JOIN `vm53n_usergroups` AS `b` ON `b`.`lft` <= `a`.`lft` AND `b`.`rgt` >= `a`.`rgt` WHERE `a`.`id` = :guest393μs1.33KBParams/libraries/src/Access/Access.php:868Copy
  • SELECT `id`,`name`,`rules`,`parent_id` FROM `vm53n_assets` WHERE `name` IN (:preparedArray1,:preparedArray2,:preparedArray3,:preparedArray4,:preparedArray5,:preparedArray6,:preparedArray7,:preparedArray8,:preparedArray9,:preparedArray10,:preparedArray11,:preparedArray12,:preparedArray13,:preparedArray14,:preparedArray15,:preparedArray16,:preparedArray17,:preparedArray18,:preparedArray19,:preparedArray20,:preparedArray21,:preparedArray22,:preparedArray23,:preparedArray24,:preparedArray25,:preparedArray26,:preparedArray27,:preparedArray28,:preparedArray29,:preparedArray30,:preparedArray31,:preparedArray32,:preparedArray33,:preparedArray34,:preparedArray35,:preparedArray36,:preparedArray37,:preparedArray38,:preparedArray39,:preparedArray40,:preparedArray41,:preparedArray42,:preparedArray43,:preparedArray44,:preparedArray45,:preparedArray46,:preparedArray47,:preparedArray48)1.44ms7.81KBParams/libraries/src/Access/Access.php:357Copy
  • SELECT `id`,`name`,`rules`,`parent_id` FROM `vm53n_assets` WHERE `name` LIKE :asset OR `name` = :extension OR `parent_id` = 04.67ms341.48KBParams/libraries/src/Access/Access.php:301Copy
  • SHOW FULL COLUMNS FROM `vm53n_content`1.09ms2.39KB/libraries/vendor/joomla/database/src/Mysqli/MysqliDriver.php:539Copy
  • UPDATE `vm53n_content` SET `hits` = (`hits` + 1) WHERE `id` = '109'488μs48B/libraries/src/Table/Table.php:1348Copy
  • SELECT `a`.`id`,`a`.`asset_id`,`a`.`title`,`a`.`alias`,`a`.`introtext`,`a`.`fulltext`,`a`.`state`,`a`.`catid`,`a`.`created`,`a`.`created_by`,`a`.`created_by_alias`,`a`.`modified`,`a`.`modified_by`,`a`.`checked_out`,`a`.`checked_out_time`,`a`.`publish_up`,`a`.`publish_down`,`a`.`images`,`a`.`urls`,`a`.`attribs`,`a`.`version`,`a`.`ordering`,`a`.`metakey`,`a`.`metadesc`,`a`.`access`,`a`.`hits`,`a`.`metadata`,`a`.`featured`,`a`.`language`,`fp`.`featured_up`,`fp`.`featured_down`,`c`.`title` AS `category_title`,`c`.`alias` AS `category_alias`,`c`.`access` AS `category_access`,`c`.`language` AS `category_language`,`fp`.`ordering`,`u`.`name` AS `author`,`parent`.`title` AS `parent_title`,`parent`.`id` AS `parent_id`,`parent`.`path` AS `parent_route`,`parent`.`alias` AS `parent_alias`,`parent`.`language` AS `parent_language`,ROUND(`v`.`rating_sum` / `v`.`rating_count`, 1) AS `rating`,`v`.`rating_count` AS `rating_count` FROM `vm53n_content` AS `a` INNER JOIN `vm53n_categories` AS `c` ON `c`.`id` = `a`.`catid` LEFT JOIN `vm53n_content_frontpage` AS `fp` ON `fp`.`content_id` = `a`.`id` LEFT JOIN `vm53n_users` AS `u` ON `u`.`id` = `a`.`created_by` LEFT JOIN `vm53n_categories` AS `parent` ON `parent`.`id` = `c`.`parent_id` LEFT JOIN `vm53n_content_rating` AS `v` ON `a`.`id` = `v`.`content_id` WHERE ( (`a`.`id` = :pk AND `c`.`published` > 0) AND (`a`.`publish_up` IS NULL OR `a`.`publish_up` <= :publishUp)) AND (`a`.`publish_down` IS NULL OR `a`.`publish_down` >= :publishDown) AND `a`.`state` IN (:preparedArray1,:preparedArray2)639μs6.12KBParams/components/com_content/src/Model/ArticleModel.php:215Copy
  • SELECT `c`.`id`,`c`.`asset_id`,`c`.`access`,`c`.`alias`,`c`.`checked_out`,`c`.`checked_out_time`,`c`.`created_time`,`c`.`created_user_id`,`c`.`description`,`c`.`extension`,`c`.`hits`,`c`.`language`,`c`.`level`,`c`.`lft`,`c`.`metadata`,`c`.`metadesc`,`c`.`metakey`,`c`.`modified_time`,`c`.`note`,`c`.`params`,`c`.`parent_id`,`c`.`path`,`c`.`published`,`c`.`rgt`,`c`.`title`,`c`.`modified_user_id`,`c`.`version`, CASE WHEN CHAR_LENGTH(`c`.`alias`) != 0 THEN CONCAT_WS(':', `c`.`id`, `c`.`alias`) ELSE `c`.`id` END as `slug` FROM `vm53n_categories` AS `s` INNER JOIN `vm53n_categories` AS `c` ON (`s`.`lft` <= `c`.`lft` AND `c`.`lft` < `s`.`rgt`) OR (`c`.`lft` < `s`.`lft` AND `s`.`rgt` < `c`.`rgt`) WHERE (`c`.`extension` = :extension OR `c`.`extension` = 'system') AND `c`.`access` IN (:preparedArray1,:preparedArray2,:preparedArray3) AND `c`.`published` = 1 AND `s`.`id` = :id ORDER BY `c`.`lft`672μs3.95KBParams/libraries/src/Categories/Categories.php:375Copy
  • SELECT `m`.`tag_id`,`t`.* FROM `vm53n_contentitem_tag_map` AS `m` INNER JOIN `vm53n_tags` AS `t` ON `m`.`tag_id` = `t`.`id` WHERE `m`.`type_alias` = :contentType AND `m`.`content_item_id` = :id AND `t`.`published` = 1 AND `t`.`access` IN (:preparedArray1,:preparedArray2,:preparedArray3)689μs4KBParams/libraries/src/Helper/TagsHelper.php:388Copy
  • SELECT `c`.`id`,`c`.`asset_id`,`c`.`access`,`c`.`alias`,`c`.`checked_out`,`c`.`checked_out_time`,`c`.`created_time`,`c`.`created_user_id`,`c`.`description`,`c`.`extension`,`c`.`hits`,`c`.`language`,`c`.`level`,`c`.`lft`,`c`.`metadata`,`c`.`metadesc`,`c`.`metakey`,`c`.`modified_time`,`c`.`note`,`c`.`params`,`c`.`parent_id`,`c`.`path`,`c`.`published`,`c`.`rgt`,`c`.`title`,`c`.`modified_user_id`,`c`.`version`, CASE WHEN CHAR_LENGTH(`c`.`alias`) != 0 THEN CONCAT_WS(':', `c`.`id`, `c`.`alias`) ELSE `c`.`id` END as `slug` FROM `vm53n_categories` AS `s` INNER JOIN `vm53n_categories` AS `c` ON (`s`.`lft` <= `c`.`lft` AND `c`.`lft` < `s`.`rgt`) OR (`c`.`lft` < `s`.`lft` AND `s`.`rgt` < `c`.`rgt`) WHERE (`c`.`extension` = :extension OR `c`.`extension` = 'system') AND `c`.`access` IN (:preparedArray1,:preparedArray2,:preparedArray3) AND `c`.`published` = 1 AND `s`.`id` = :id ORDER BY `c`.`lft`876μs3.95KBParams/libraries/src/Categories/Categories.php:375Copy
  • SELECT DISTINCT a.id, a.title, a.name, a.checked_out, a.checked_out_time, a.note, a.state, a.access, a.created_time, a.created_user_id, a.ordering, a.language, a.fieldparams, a.params, a.type, a.default_value, a.context, a.group_id, a.label, a.description, a.required, a.only_use_in_subform,l.title AS language_title, l.image AS language_image,uc.name AS editor,ag.title AS access_level,ua.name AS author_name,g.title AS group_title, g.access as group_access, g.state AS group_state, g.note as group_note FROM vm53n_fields AS a LEFT JOIN `vm53n_languages` AS l ON l.lang_code = a.language LEFT JOIN vm53n_users AS uc ON uc.id=a.checked_out LEFT JOIN vm53n_viewlevels AS ag ON ag.id = a.access LEFT JOIN vm53n_users AS ua ON ua.id = a.created_user_id LEFT JOIN vm53n_fields_groups AS g ON g.id = a.group_id LEFT JOIN `vm53n_fields_categories` AS fc ON fc.field_id = a.id WHERE ( (`a`.`context` = :context AND (`fc`.`category_id` IS NULL OR `fc`.`category_id` IN (:preparedArray1,:preparedArray2,:preparedArray3)) AND `a`.`access` IN (:preparedArray4,:preparedArray5,:preparedArray6)) AND (`a`.`group_id` = 0 OR `g`.`access` IN (:preparedArray7,:preparedArray8,:preparedArray9)) AND `a`.`state` = :state) AND (`a`.`group_id` = 0 OR `g`.`state` = :gstate) AND `a`.`only_use_in_subform` = :only_use_in_subform ORDER BY a.ordering ASC875μs4.81KBParams/libraries/src/MVC/Model/BaseDatabaseModel.php:164Copy
  • SELECT `c`.`id`,`c`.`asset_id`,`c`.`access`,`c`.`alias`,`c`.`checked_out`,`c`.`checked_out_time`,`c`.`created_time`,`c`.`created_user_id`,`c`.`description`,`c`.`extension`,`c`.`hits`,`c`.`language`,`c`.`level`,`c`.`lft`,`c`.`metadata`,`c`.`metadesc`,`c`.`metakey`,`c`.`modified_time`,`c`.`note`,`c`.`params`,`c`.`parent_id`,`c`.`path`,`c`.`published`,`c`.`rgt`,`c`.`title`,`c`.`modified_user_id`,`c`.`version`, CASE WHEN CHAR_LENGTH(`c`.`alias`) != 0 THEN CONCAT_WS(':', `c`.`id`, `c`.`alias`) ELSE `c`.`id` END as `slug` FROM `vm53n_categories` AS `s` INNER JOIN `vm53n_categories` AS `c` ON (`s`.`lft` <= `c`.`lft` AND `c`.`lft` < `s`.`rgt`) OR (`c`.`lft` < `s`.`lft` AND `s`.`rgt` < `c`.`rgt`) WHERE (`c`.`extension` = :extension OR `c`.`extension` = 'system') AND `c`.`access` IN (:preparedArray1,:preparedArray2,:preparedArray3) AND `c`.`published` = 1 AND `s`.`id` = :id ORDER BY `c`.`lft`2.15ms3.95KBParams/libraries/src/Categories/Categories.php:375Copy
  • SELECT `c`.`id`,`c`.`asset_id`,`c`.`access`,`c`.`alias`,`c`.`checked_out`,`c`.`checked_out_time`,`c`.`created_time`,`c`.`created_user_id`,`c`.`description`,`c`.`extension`,`c`.`hits`,`c`.`language`,`c`.`level`,`c`.`lft`,`c`.`metadata`,`c`.`metadesc`,`c`.`metakey`,`c`.`modified_time`,`c`.`note`,`c`.`params`,`c`.`parent_id`,`c`.`path`,`c`.`published`,`c`.`rgt`,`c`.`title`,`c`.`modified_user_id`,`c`.`version`, CASE WHEN CHAR_LENGTH(`c`.`alias`) != 0 THEN CONCAT_WS(':', `c`.`id`, `c`.`alias`) ELSE `c`.`id` END as `slug` FROM `vm53n_categories` AS `s` INNER JOIN `vm53n_categories` AS `c` ON (`s`.`lft` <= `c`.`lft` AND `c`.`lft` < `s`.`rgt`) OR (`c`.`lft` < `s`.`lft` AND `s`.`rgt` < `c`.`rgt`) WHERE (`c`.`extension` = :extension OR `c`.`extension` = 'system') AND `c`.`access` IN (:preparedArray1,:preparedArray2,:preparedArray3) AND `c`.`published` = 1 AND `s`.`id` = :id ORDER BY `c`.`lft`620μs5.19KBParams/libraries/src/Categories/Categories.php:375Copy
  • SELECT `id`,`name`,`rules`,`parent_id` FROM `vm53n_assets` WHERE `name` LIKE :asset OR `name` = :extension OR `parent_id` = 02.05ms1.53KBParams/libraries/src/Access/Access.php:301Copy
  • SELECT * FROM `vm53n_schemaorg` WHERE `itemId` = :itemId AND `context` = :context355μs1.55KBParams/plugins/system/schemaorg/src/Extension/Schemaorg.php:406Copy
  • SELECT `a`.`id`,`a`.`asset_id`,`a`.`title`,`a`.`alias`,`a`.`introtext`,`a`.`fulltext`,`a`.`state`,`a`.`catid`,`a`.`created`,`a`.`created_by`,`a`.`created_by_alias`,`a`.`modified`,`a`.`modified_by`,`a`.`checked_out`,`a`.`checked_out_time`,`a`.`publish_up`,`a`.`publish_down`,`a`.`images`,`a`.`urls`,`a`.`attribs`,`a`.`version`,`a`.`ordering`,`a`.`metakey`,`a`.`metadesc`,`a`.`access`,`a`.`hits`,`a`.`metadata`,`a`.`featured`,`a`.`language`,`fp`.`featured_up`,`fp`.`featured_down`,`c`.`title` AS `category_title`,`c`.`alias` AS `category_alias`,`c`.`access` AS `category_access`,`c`.`language` AS `category_language`,`fp`.`ordering`,`u`.`name` AS `author`,`parent`.`title` AS `parent_title`,`parent`.`id` AS `parent_id`,`parent`.`path` AS `parent_route`,`parent`.`alias` AS `parent_alias`,`parent`.`language` AS `parent_language`,ROUND(`v`.`rating_sum` / `v`.`rating_count`, 1) AS `rating`,`v`.`rating_count` AS `rating_count` FROM `vm53n_content` AS `a` INNER JOIN `vm53n_categories` AS `c` ON `c`.`id` = `a`.`catid` LEFT JOIN `vm53n_content_frontpage` AS `fp` ON `fp`.`content_id` = `a`.`id` LEFT JOIN `vm53n_users` AS `u` ON `u`.`id` = `a`.`created_by` LEFT JOIN `vm53n_categories` AS `parent` ON `parent`.`id` = `c`.`parent_id` LEFT JOIN `vm53n_content_rating` AS `v` ON `a`.`id` = `v`.`content_id` WHERE ( (`a`.`id` = :pk AND `c`.`published` > 0) AND (`a`.`publish_up` IS NULL OR `a`.`publish_up` <= :publishUp)) AND (`a`.`publish_down` IS NULL OR `a`.`publish_down` >= :publishDown) AND `a`.`state` IN (:preparedArray1,:preparedArray2)1.28ms6.17KBParams/components/com_content/src/Model/ArticleModel.php:215Copy
  • SELECT `a`.`id`,`a`.`asset_id`,`a`.`title`,`a`.`alias`,`a`.`introtext`,`a`.`fulltext`,`a`.`state`,`a`.`catid`,`a`.`created`,`a`.`created_by`,`a`.`created_by_alias`,`a`.`modified`,`a`.`modified_by`,`a`.`checked_out`,`a`.`checked_out_time`,`a`.`publish_up`,`a`.`publish_down`,`a`.`images`,`a`.`urls`,`a`.`attribs`,`a`.`version`,`a`.`ordering`,`a`.`metakey`,`a`.`metadesc`,`a`.`access`,`a`.`hits`,`a`.`metadata`,`a`.`featured`,`a`.`language`,`fp`.`featured_up`,`fp`.`featured_down`,`c`.`title` AS `category_title`,`c`.`alias` AS `category_alias`,`c`.`access` AS `category_access`,`c`.`language` AS `category_language`,`fp`.`ordering`,`u`.`name` AS `author`,`parent`.`title` AS `parent_title`,`parent`.`id` AS `parent_id`,`parent`.`path` AS `parent_route`,`parent`.`alias` AS `parent_alias`,`parent`.`language` AS `parent_language`,ROUND(`v`.`rating_sum` / `v`.`rating_count`, 1) AS `rating`,`v`.`rating_count` AS `rating_count` FROM `vm53n_content` AS `a` INNER JOIN `vm53n_categories` AS `c` ON `c`.`id` = `a`.`catid` LEFT JOIN `vm53n_content_frontpage` AS `fp` ON `fp`.`content_id` = `a`.`id` LEFT JOIN `vm53n_users` AS `u` ON `u`.`id` = `a`.`created_by` LEFT JOIN `vm53n_categories` AS `parent` ON `parent`.`id` = `c`.`parent_id` LEFT JOIN `vm53n_content_rating` AS `v` ON `a`.`id` = `v`.`content_id` WHERE ( (`a`.`id` = :pk AND `c`.`published` > 0) AND (`a`.`publish_up` IS NULL OR `a`.`publish_up` <= :publishUp)) AND (`a`.`publish_down` IS NULL OR `a`.`publish_down` >= :publishDown) AND `a`.`state` IN (:preparedArray1,:preparedArray2)767μs6.17KBParams/components/com_content/src/Model/ArticleModel.php:215Copy
  • SELECT SUM(CASE WHEN `a`.`next_execution` <= :now THEN 1 ELSE 0 END) AS due_count,SUM(CASE WHEN `a`.`locked` IS NULL THEN 0 ELSE 1 END) AS locked_count FROM `vm53n_scheduler_tasks` AS `a` WHERE `a`.`state` = 1376μs1.37KBParams/administrator/components/com_scheduler/src/Model/TasksModel.php:517Copy
  • SELECT `session_id` FROM `vm53n_session` WHERE `session_id` = ?263μs1KBParams/libraries/vendor/joomla/session/src/Handler/DatabaseHandler.php:277Copy
  • UPDATE `vm53n_session` SET `data` = ? , `time` = ? WHERE `session_id` = ?2.23ms592BParams/libraries/vendor/joomla/session/src/Handler/DatabaseHandler.php:301Copy