*SIGH* Script Kiddies...

<RANT>
Well I don't guess they were technically "script kiddies" but it does
bring up the image that I'm thinking.


My boss had to have me open an FTP site the other day so someone
could upload a file. Well I made one, locked everything down above it
but took the easy way out and left it open for anonymous uploads..

Well, we forgot to close it for about a week. The other day I realized
it was still open, so I closed it.

Last night I was performing some maintenance on the server when I
noticed the defrag log had some funny characters under the FTP root
folder. So I opened it up and they had 3 folders, about 15 levels deep
in each, with special characters, profanity, tags for who uploaded, etc.
In the lowest level was about 1.82GB of pirated games !

Well, I had already closed the FTP site and port, so that was taken care
of. But the little bastards used special characters in all the folder names.
So no delete from in windows. They thought it would be difficult in the
command prompt as well (b/c I would need to know what control codes
to use) Well, about 5 seconds went by and I said to myself, "This ain't
my first rodeo", and I opened a command prompt. Then I typed:
"rm FTP /S /Q"

"Goodbye files, and **** you Script Kiddies !"


Anyway
</RANT>

Hey!, those kids are the future man, leave them alone. ;) :D

those kids keep me in business!

What you should have done is left the account open and disabled downloading. I used to run an FTP server off my desktop and occationaly had people like this. I just disabled downloading from anon and let them waste their time. I also added a message to the MOTD telling them they had been pwnd. :lol:

I bet they were ****ed when they realised their buddies couldnt get anything they uploaded.

Quote:

---

Originally Posted by fluffy2097

What you should have done is left the account open and disabled downloading. I used to run an FTP server off my desktop and occationaly had people like this. I just disabled downloading from anon and let them waste their time. I also added a message to the MOTD telling them they had been pwnd. :lol:

I bet they were ****ed when they realised their buddies couldnt get anything they uploaded.

---

I had already disabled it a week before I noticed, and I needed the space anyway.

I feel your pain. I had the same thing happen to me! I ran an anonymous FTP basically to just get files to and from work, I had only a semi static IP that changed once in a while, so I didn't think it would be a problem, then one day after a couple months of having it up. I notice my connection is real slow so I check my ftp server and somebody started a warez site on my computer! I got like 30,000 hits over 2 days, I'm assuming mostly from hammering. It wouldn't be bad cept the only thing they uploaded was half finished anime crap. I did a little reseach, put my IP address in google and it comes up on a warez forum.

Damn Script Kiddies!

Quote:

---

Originally Posted by frodobaggins

<RANT>
Well I don't guess they were technically "script kiddies" but it does
bring up the image that I'm thinking.


My boss had to have me open an FTP site the other day so someone
could upload a file. Well I made one, locked everything down above it
but took the easy way out and left it open for anonymous uploads..

Well, we forgot to close it for about a week. The other day I realized
it was still open, so I closed it.

Last night I was performing some maintenance on the server when I
noticed the defrag log had some funny characters under the FTP root
folder. So I opened it up and they had 3 folders, about 15 levels deep
in each, with special characters, profanity, tags for who uploaded, etc.
In the lowest level was about 1.82GB of pirated games !

Well, I had already closed the FTP site and port, so that was taken care
of. But the little bastards used special characters in all the folder names.
So no delete from in windows. They thought it would be difficult in the
command prompt as well (b/c I would need to know what control codes
to use) Well, about 5 seconds went by and I said to myself, "This ain't
my first rodeo", and I opened a command prompt. Then I typed:
"rm FTP /S /Q"

"Goodbye files, and **** you Script Kiddies !"


Anyway
</RANT>

---

what game(s) did they leave thats the big question :)

HaHa, sounds funny.
Lots of corporations have this done to them, lots of .EDU's too. In my opinion the people who set up the account should know that running any internet service with no password is dying for attention. Also with weak passwords such as 'password' You don't know how many "bots" or "Viri" are scanning for this type of thing, I had just reformatted my computer and set my Internet up. I forgot that I was DMZ on the router and 20 minutes later I had been "hacked" by the WINNT weak password / no password. Just so happens that some one was running a bot that scans a range of IP's and auto hacks / installs an IRC XDCC Server bot. They did it quite well because they managed to put the .exe's in my C:\WINNT\Fonts folder so I couldn't see them in explorer. But good ole dos got them out.
Just next time you do something, take the initiative to atleast halfway secure it.

Quote:

---

Originally Posted by hijinks21

what game(s) did they leave thats the big question :)

---

I can't remember, but there was a leaked copy of doom3.

I deleted it all though.

Quote:

---

Originally Posted by frodobaggins

I can't remember, but there was a leaked copy of doom3.

I deleted it all though.

---

I know you didn't delete a leaked copy of Doom 3. Give it up.

:p