Statistics

73485 Users

52 Donations

Top 10 Players

Last 20 Activities

Online within 1d

WeChall->Warchall Box

Security Breach

Free WebhostingWeChall - OTW - Scoreboard Error

gizmore

Global Rank: 198

Totalscore: 110647

Posts: 1795

Thanks: 1390

UpVotes: 961

Registered: 18y 258d

Last Seen: 64d 14h

The User is Offline

Send EMail to gizmore

Security Breach
Aug 23, 2021 - 14:38:04 (5y 68d) Google/translate7Thank You!4Good Post!0Bad Post! link

Dear challengers,

ogon found out that /etc/.git is world readable on the warchall box.
We use git to track changes to the machine config.

Any warchall user password might be affected by that read. (No time to investigate)

If you re-use your warchall password somewhere else, f.e. on wechall.net, it is a good idea to change it.

Thanks go out to ogon for letting us know!

Happy Challenging!

- gizmore

The geeks shall inherit the properties and methods of object earth.

occasus

Global Rank: 135

Totalscore: 143258

Posts: 128

Thanks: 109

UpVotes: 127

Registered: 12y 47d

Last Seen: 113d 18h

The User is Offline

RE: Security Breach
Aug 23, 2021 - 16:49:04 (5y 68d) Google/translate1Thank You!1Good Post!0Bad Post! link

Congratz ogon... and thank you...

Thank you Gizmore, too

endpoint

Global Rank: 8404

Totalscore: 1164

Posts: 1

Thanks: 1

UpVotes: 1

Registered: 5y 70d

Last Seen: 5y 68d

The User is Offline

RE: Security Breach
Aug 24, 2021 - 04:24:15 (5y 68d) Google/translate1Thank You!1Good Post!0Bad Post! link

Is it a good idea to change our password now? Or are you still working on fixing it?

F_Marks

Global Rank: 10929

Totalscore: 454

Posts: 1

Thanks: 1

UpVotes: 1

Registered: 5y 80d

Last Seen: 1y 111d

The User is Offline

RE: Security Breach
Sep 01, 2021 - 04:12:58 (5y 60d) Google/translate1Thank You!1Good Post!0Bad Post! link

Congratz ogon! Thanks!!!

Thank you Gizmore!!

gizmore

Global Rank: 198

Totalscore: 110647

Posts: 1795

Thanks: 1390

UpVotes: 961

Registered: 18y 258d

Last Seen: 64d 14h

The User is Offline

Send EMail to gizmore

RE: Security Breach
Sep 03, 2021 - 08:47:15 (5y 58d) Google/translate0Thank You!0Good Post!0Bad Post! link

Quote from endpoint
Aug 24, 2021 - 04:24:15

Is it a good idea to change our password now? Or are you still working on fixing it?

I had set the /etc/.git permissions to be not world readable anymore.
So you can change your password.
Also note that this only affects your warchall password, not the wechall one.

The geeks shall inherit the properties and methods of object earth.

endpoint, quangntenemy, TheHiveMind, Z, balicocat, Ge0, arraez, jcquinterov, hophuocthinh, alfamen2, burhanudinn123, Ben_Dover, stephanduran89, braddie0, fpombal, csuquvq have subscribed to this thread and receive emails on new posts.
1 people are watching the thread at the moment.
This thread has been viewed 6114 times.