My Joomla! Website is Hacked! Now what?

My talk Introduction Mind of the Hacker How to Hack a Joomla! website Live Demo

Introduction

Mind of the Hacker

How to Hack a Joomla! website

Live Demo

Bio Ray Bogman Jira ICT co-founder Yireo co-founder Senior Security Specialist (Certified) Ethical Hacker

Jira ICT co-founder

Yireo co-founder

Senior Security Specialist

(Certified) Ethical Hacker

H4ck3rs are People Too

Hacking Technologies Operating System Applications Shrink-wrap code Misconfigurations

Operating System

Applications

Shrink-wrap code

Misconfigurations

Different Phases of Hacking Passive and Active Reconnaissance Scanning Gaining Access Maintaining Access Covering Tracks

Passive and Active Reconnaissance

Scanning

Gaining Access

Maintaining Access

Covering Tracks

Type of Hacker Classes Black Hat Grey Hat White Hat

Black Hat

Grey Hat

White Hat

Definitions Hacker = A person exploring the details of programmable systems .... Cracker = A malicious hacker

Hacker = A person exploring the details of programmable systems ....

Cracker = A malicious hacker

Types of Hacks Remote network Remote dial-up network Local network Stolen equipment Social engineering Physical entry

Remote network

Remote dial-up network

Local network

Stolen equipment

Social engineering

Physical entry

How to hack a Joomla! website

Defacement

Gaining info Google hacking database Fingerprinting Joomla! Info (xml, htaccess.txt, components links) Exploit database phpinfo()

Google hacking database

Fingerprinting

Joomla! Info (xml, htaccess.txt, components links)

Exploit database

phpinfo()

Live Demo

Questions?