Discuz!6.1（DZ6.1)惊现漏洞！官方论坛被黑hacked!

DZ6.1漏洞利用工具出炉（？）几乎所有将惨遭秧．

今天17点不到的时候，笔者试着访问DZ官方论坛时，

就只能看到这两句话：
Hacked by ring04h & sunwear
just for fun

Discuz!6.1官方论坛地址：http://www.discuz.net/

转贴：http://www.kaloye.cn/bbs/thread-4568-1-1.html


5月4号下午17：00左右，Discuz!6.1官方论坛被黑后，Discuz!进行了紧急维护！各位使用了Discuz!6.1论坛系统的站长请及时关闭自己的论坛，希望给自己带来最少的损失。

谁黑的。。。。。

这黑客真牛啊  这样dz进步的更快

...................o888888o.o88888888o.
.................8888888888888888888888888o.
...............888::::888888888888888888888888o.
.............88::::::::88888888888888888888888888o.
...........o8:::::::::888::顶88888888888888888888888.
..........8888:8::::::8:::::::::顶888888888888888888888.
.........8888::::8888::::::::::::::::顶88888888888 　 '88
........8888:::888888888::::::::::::::::顶888888888 　　8
.......88.88888888888888888:::::::::::::顶88888888888
......88..888888888888888888:::::::::::顶88888888888888
......88.888888888888888888888::::::::顶88888888888888888
......8..8888888888888888888888::::::顶88888888888888888888
........8888888888888888::88888:::::顶8888888888888888888888
......88888888888888888::::8888::::顶8888888888888888　 '8888
.....88888888888888888::::8888::::顶:8::***::888888888 　　 888
....88888888888888888::::888:::::顶::::*EYE*::888888888　 　 88
..888888888888888888::::88::::::顶::::::::::::::::::888888888 88
.8888888888888888888::::8::::::顶:::::::::::::::::::顶888888888 88
888...8888888888::::88::::8:::::顶:::8oo8::::::::::88888888888888 8
88...88888888888:::::8:::::::::顶::::::::::::::::::::::88888888888888888
.8..8888888888888::::::::::::顶::"8888888"::::::顶88888888888888888
..8888888888::888:::::::::::顶:::::::"8a8"::::::::::顶88888888888888888888
.888888888:::::88::::::::::顶88::::::::::::::::::::顶88888888888888888888888
8888888888:::::8:::::::::顶88888::::::::::::::顶88888888888888888888888888
888888888:::::8:::::::::顶8888888ooooo顶88888888888888888888888888888
888888.顶::::::::::::::顶8888888888::::::顶8888888888888888　 '888888888
8888..顶:::::::::::::::顶88888888888::::::顶8888888888888888　　 88888888
.888..顶::::::::::::::顶8888888888888:::::::顶888888888888888　　　 888888
..888.顶:::::::::::::顶88888888888888888::::::顶8888888888888　　　 88888
...88.顶:::::::::::::8888:88888888888888888:::::顶顶888888888　　 8888
...88.顶:::::::::::8888顶::88888::888888888888:::::顶顶88888　　 888
...8...顶::::::::::8888顶:::8888:::::88888888888:::::::顶顶88　　 888
.......8顶:::::::8888顶:::::888:::::::::88:::8888888:::::::::顶顶　 88
......88顶:::::::8888顶::::::88:::::::::::8:::::888888::::::::::::顶顶 88
.....8888顶:::::888顶:::::::::88:::::::::::::顶::::8888::::::::::::::顶 8
....88888:顶::::888顶::::::::::8:::::::::::::::顶::::888:::::::::::::::::顶
...88.888:顶:::888:顶::::::::::8:::::::::::::::::顶::888::::::::::::::::::::顶
...8.88888顶:::88::顶::::::::::::::::::::::::::::::顶:88::::::::::::::::::::::::顶
.....88888顶:::88::顶:::::::::::::::::::::::::::::::::顶88:::::::::::::::::::::::::顶
.....88888顶:::88::顶:::::::::::::::::::::::::::::::::顶:8::::::::::::::::::::::::::::顶
....888888顶::::8::顶:::::::::::::8888::::::::::::::顶8::::::::::::8888::::::::::顶
....88888..顶:::8::顶顶:::::::::888888::::::::::::顶::::::::::::888888:::::::::顶
....8888...顶顶:::::顶顶::::::::888888::::::::::::顶顶::::::::::888888:::::::::顶
....8888....顶:::::::顶顶::::::::::8888::::::::::::顶顶顶::::::::::8888::::::::::顶'
.....888....顶顶::::::顶顶顶:::::::::::::::::::::::顶顶::顶:::::::::::::::::::::::::顶'
......88.....顶::::::::顶顶顶顶::::::::::::::::顶顶顶::::顶顶::::::::::::::::::::顶'
.......88....顶顶:::::::::顶顶顶顶顶顶顶顶顶顶:::::::::顶顶顶顶顶顶顶顶'
........88....顶顶::::::::::::::顶顶顶顶顶顶顶:::::::::::::::顶顶顶顶顶o'
.........88...8顶顶:::::::::::::::::::::::::::::::::::::::::::::::::::::顶
..........8...88顶顶::::::::::::::::::::::::::::顶:::顶::::::::::::::顶
..............888顶顶::::::::::::::::::::::顶顶::::::顶顶:::::::::顶
.............88888顶顶::::::::::::::::顶顶顶:::::::顶顶:::::::顶
.............888888顶顶::::::::::::::顶顶顶:::::::::顶顶::::顶
............88888888顶顶:::::::::::顶顶顶:::::::::::顶::::顶
...........88.8888888.顶::::::::顶顶顶::::::::::::::顶:::顶
...........8..888888..顶::::::顶顶:::::::::::::::::::顶:::顶
..............888888..顶:::::顶:::::::::::::::::::::顶::顶顶
.............888888...顶::::顶::::::::::::::::::::::::::顶顶
.............888888...顶::::顶:::::::::::::::::::::::::顶:顶
.............88888...顶::::::::::::::8::::::::::::::::::顶::顶
............88888...顶:::::::::::::::88:::::::::::::::::顶::顶
...........88888...顶::::::::::::::::8::::::::::::::::::::顶::顶
..........88888...顶:::::顶:::::::::::::::::::::顶::::::::顶::顶
..........8888...顶:::::顶:::::::::::::::::::::::顶顶::::::顶::顶
.........8888...顶:::::顶:::::::::::::::::::::::顶顶顶:::::::顶:顶
........888....顶:::::顶顶::::::::::::::::::::::顶顶顶::::::::顶:顶
......8888....顶::::::顶顶:::::::::::::::::::::顶顶顶::::::::: 顶:顶
.....888......顶:::::顶:::::::::::::::::::::::::顶顶::::::::::::::顶:顶
..8888......顶:::::::::::::::::::::::::::::::::顶::::::::::::::::::顶:顶
.............顶:::::::::::::::::::::::::::::::::::::::::::::::::::::顶:顶
............顶::::::::顶:::::::::::::::::::::::::::::::::::::::::::::顶:顶
............顶::::::::顶::::::::::::::::::::::顶:::::::::::::::::::::顶:顶
...........顶::::::::::顶::::::::::::::::::::顶::::::::::::::::::::::顶:顶
...........顶:::::::::::顶8:::::::::::::8:顶:::::::::::::::::::::::::顶:顶p
...........顶::::::::::::888hole888顶::::::::::::::::::::::::::::::::顶:顶o
...........顶:::::::::::::88888888顶::::::::::::::::::::::::::::::::顶:顶p
...........顶::::::::::::::888888顶:::::::::::::::::::::::::::::::::顶:顶
...........顶:::::::::::::::88888顶::::::::::::::::::::::::::::::::顶:顶
...........顶:::::::::::::::::88顶:::::::::::::::::::::::::::::::::顶顶
...........顶:::::::::::::::::::顶::::::::::::::::::::::::::::::::顶顶
...........顶:::::::::::::::::::顶:::::::::::::::::::::::::::::::顶顶
............顶:::::::::::::::::顶::::::::::::::::::::::::::::::顶顶
............顶:::::::::::::::::顶::::::::::::::::::::::::::::::顶
.............顶:::::::::::::::顶:::::::::::::::::::::::::::::顶
.............顶:::::::::::::::顶::::::::::::::::::::::::::::顶
..............顶:::::::::::::顶::::::::::::::::::::::::::::顶
..............顶:::::::::::::顶:::::::::::::::::::::::::::顶
...............顶:::::::::::顶:::::::::::::::::::::::::::顶
...............顶:::::::::::顶::::::::::::::::::::::::::顶
................顶:::::::::顶::::::::::::::::::::::::::顶
................顶:::::::::顶:::::::::::::::::::::::::顶
.................顶:::::::顶:::::::::::::::::::::::::顶
..................顶::::::顶::::::::::::::::::::::::顶
..................顶:::::顶::::::::::::::::::::::::顶
...................顶:::顶::::::::::::::::::::::::顶
...................顶::顶::::::::::::::::::::::::顶
....................顶:顶:::::::::::::::::::::::顶
....................顶顶:::::::::::::::::::::::顶
....................顶顶::::::::::::::::::::::顶
....................顶顶:::::::::::::::::::::顶
....................顶顶:::::顶:::::::::顶顶
....................顶顶::::顶顶:::::::顶顶
....................顶顶::::::顶顶:::::顶顶
.....................顶顶:::::::::::::::::顶顶
.....................顶顶::::顶:::::::::::顶顶
......................顶顶::顶顶顶:::::::顶顶
......................顶顶::顶顶顶:::::::顶顶
......................顶顶:::顶顶:::::::::::::顶
.......................顶顶::顶顶:::::::::::::顶
.......................顶顶::顶顶:::::::::::::顶
.......................顶顶:::顶:::::::::::::::顶
.......................顶顶::::::::::::::::::::顶
.......................顶顶::::::::::::::::::::顶
.......................顶顶:::::::::::::::::::顶
.......................顶顶:::::::::::::::::::顶
.......................顶顶::::::::::::::::::顶
........................顶顶:::::::::::::::::顶
........................顶顶:::::::::::::::::顶
........................顶顶:::::::::::::::::顶
........................顶顶:::::::::::::::::顶
........................顶顶:::::::::::::::::顶
.........................顶顶:::::::::::::::顶
.........................顶顶:::::::::::::::顶
.........................顶顶:::::::::::::::顶
.........................顶顶::::::::::::::顶
..........................顶顶:::::::::::::顶
..........................顶顶:::::::::::::顶
..........................顶顶:::::::::::::顶
..........................顶顶::::::::::::顶
..........................顶顶::::::::::::顶
...........................顶顶:::::::::::顶
...........................顶顶::::::::::顶
...........................顶顶::::::::::顶
............................顶顶::::::::顶
............................顶顶::::::::顶
............................顶顶::::::::顶
.............................顶顶:::::::顶
.............................顶顶:::::::顶
..............................顶顶::::::顶
..............................顶顶::::::顶
..............................顶顶::::::顶
..............................顶顶::::::顶
..............................顶顶::::::顶
..............................顶顶::::::顶
.............................顶顶:::::::顶
............................顶:顶::::::::顶
............................顶:顶:::::::::顶
............................顶:顶::::::::::顶
............................顶:顶:::::::::::顶


sunwear 是sunwear 是E.S.T核心成员
中国顶级黑客高手档案：之sunwear （今天黑DZ的其中一位）
网名：sunwear
联系方法：[email]shellcoder@163.com[ ]
QQ:625185
个人主页：http://blog.csdn.net/sunwear

是邪恶八进制的核心成员。踏入技术领域时间不短，99年就出现在绿盟论坛。在安全焦点上有他的作品。熟悉windows系统内核与windows编程。早年对渗透入侵及漏洞利用也颇有研究。《再谈进程PID相同的深入探究》《浅析本机API》就出自他的手下。活跃于安全焦点论坛。

[ 本帖最后由 10000 于 2008-5-4 21:32 编辑 ]

大家小心哦

还有这事，还有这人

DZ恢复还是挺快的，看来是查到漏洞已经修复了。

关于5月4日 Discuz! 官方站点暂停访问的说明
5月4日 17:00 时，我们接到用户报告，反映官方站点页面被修改。

Comsenz 安全部立即进行了安全排查，在系统部的支持下，调取了最近几天的访问日志，并暂停站点访问。在暂停期间，服务器的管理端口和ftp端口持续受到 flood 攻击，但很快被工程师处理掉。18:00 时，在问题基本明确的前提下，站点恢复访问。

通过日志分析，我们对问题产生原因进行了快速定位：论坛内有两位管理员由于密码简单，造成身份被盗用，“修改者”利用管理帐号在论坛头部信息当中添加了HTML代码。之后通过与“修改者”进行沟通，最终确认论坛程序自身无安全问题。

Discuz! 在发展过程中经历过无数次的磨练，得到了数十万站长的认可，我们的成长离不开大家的支持。在此，我们衷心感谢关爱 Discuz! 的每一位朋友！Discuz! Team 定不负众望，将更安全、高效、强大的社区程序奉献给大家。