PDA

View Full Version : Solo SE hacked?



mlc1967
10-05-16, 14:41
Hi All, I have a friend who has recently purchased a solo se from the sponsor, he had a message pop up on his screen (attached in photo)
It now appears he can only get free to air channels, as soon as he switches to subscription channel, (any satellite) signal immediately goes to zero
I have reflashed the box with latest VIX re-installed cccam and fresh bouquet but I think something has been screwed with in the boot sector, is it fixable?


EDIT: Screenshot removed as it had reference to another site

TK4|2|1
10-05-16, 14:45
Solo2 se is a clone, you'll get no help here. Purchased from the sponsor? I doubt it.

mlc1967
10-05-16, 14:52
100% purchased from sponsor, it is the new solo se not solo 2, apologies for the typo! now edited

TK4|2|1
10-05-16, 14:55
100% purchased from sponsor, it is the new solo se not solo 2, apologies for the typo! now edited

That makes more sense. Lol.
A fresh flash without restoring any backups should get this running, but I fear the problem may have arisen because your friend is using a "server" for his pay channels, and again if he is you'll get no help here. Can you confirm he has his own viewing card in the box.

judge
10-05-16, 14:57
someone with WebIF access?

joysleep1
10-05-16, 15:00
someone with WebIF access?

yh exactly. It is more likely that someone has access to openWEBIF which can allow you to post messages to the receiver. Nothing to do with the server

mlc1967
10-05-16, 15:05
Hadn't changed his setting in webif but has now, how would all the subscription channels have zero per cent signal but free very strong? I

TK4|2|1
10-05-16, 15:11
someone with WebIF access?

Yeah that makes more sense. Has he opened any ports on his router to allow viewing over the interwebs?

mlc1967
10-05-16, 15:19
no access over internet at all now and message has not re-appeared

willieone
10-05-16, 16:30
Same happened to me but the message only appeared for 30 seconds.
I had to get the ports on router password protected.
Mate helped me as I know nothing about this field.
CS World are bad news.

abu baniaz
10-05-16, 16:57
no access over internet at all now and message has not re-appeared
I take it you had access over the internet before so that you could stream from it. Do not do it again without securing your receiver.

There is a thread by Pembo regarding how to setup SSH keys.
http://www.world-of-satellite.com/showthread.php?46802-Guide-Setting-up-SSH-with-public-private-keys

manicscrewdriver
10-05-16, 16:58
Its not hacked you just haven't closed port 80 on your router. Its just a normal function of the WebIF send message service that they have used.

48100

If you really must have port 80 open just go into the webif plugin and tick Enable HTTP authentication.

48098

By doing that they have to know the username and password of your box to get into it.

They are just trying to panic people and advertise their forum. Its not the first time i have seen this.

willieone
10-05-16, 19:10
They had me in a panic. Didn't know what was going on.

Why do they do this ?
I was told it's a forum of people banned from other forums.

Wonder why????????????

manicscrewdriver
10-05-16, 21:13
The people who are doing this obviously have very little to do in their lives. Naming a forum in the message could however be somebody trying to discredit the forum, as its obviously not teh way to get new members, maybe an ex-admin with a grudge, its hard to tell :confused:

blacknight
11-05-16, 20:50
seriously guys this has happened to me same as you willieone XXXXXX news wanted me to buy line from XXXXXX on XXXX totally wiped my box that site has alot to answer to messages and volume messing and turning box to different channel guys secure your box with good password

abu baniaz
11-05-16, 21:11
@blacknight,
1. I have edited your post, I've removed reference to the site as that gives them advertising

2. We do not condone CS nor support it. We can only assist people with their legitimate cards.

manicscrewdriver
11-05-16, 21:34
As i said before just Enable HTTP authentication on the webif plugin that is in most images and close port 80 and port 21. Also hange root password on the box by telnet to something else, if you leave the root password blank or the same as the one installed with the image you are going to be asking for trouble.

The only people who are going to get caught out is people that leave their box wide open to the internet with either no password or one installed with the image.

blacknight
11-05-16, 21:41
i agree i have had messages my self and box has been played with volume up and down i have put security up my self i had the XXXXX message my self on screen couldn't get it off had to reboot box i agree willieone beware of XXXXXXXXX protect your box is there anybody out there that might know this person or were these originate from PROTECT YOUR BOX WITH PASSOWRD

abu baniaz
11-05-16, 21:47
I have edited your post again. Do not do it again.

willieone
11-05-16, 22:01
I got my box turned over a few times as well.
From BBC1 to the Adult channels.

13 year old daughter sitting in the room at the time.
It may sound funny but hey whatever amuses the simple.

manicscrewdriver
11-05-16, 22:22
Its just sad little individuals who have nothing else to do and nothing more. Like anybody is going to buy a line from somebody who has just tried to hijack their box.

To be totally honest if you buy a line from anybody as in the words of Keith Lemon "Your a total mung bean"

judge
11-05-16, 22:28
It's actually quite easy for anyone to find boxes open to the internet.
You're just asking for trouble doing this.

notlikebo88y
14-05-16, 10:54
holy shat this is happenning to me i wonder if your getting same messages as me bo88y messages and a link can we post links or show screens this is wrong i got ransom not on my screen and every single day same stuff i have family and they dont need to see what channels there switching on. i am struggling as i dont know how to stop this i have gone to the website and asked for this to be stopped and get abuse from them and denied any wrong doing slung abuse at me and banned me.please HELP guyz

judge
14-05-16, 10:57
Close the ports on your router. Simple.

notlikebo88y
14-05-16, 11:01
now my email is is getting links posted to screens shots i have put in spam folder the last link this morning i have here
if possible to stop this bo88y any help would very much be appreciated :nono:

thanks
notlikebobby



EDIT:
Link to picture removed. It provides an advert for them.

notlikebo88y
14-05-16, 11:03
judge you still about what ports on router do i close matey i can access my router but never done anything with ports
i also cant log into box it has some sorta password on it

notlikebo88y
14-05-16, 11:10
i get the same as you willie i think that World is 100% sending me these how would buy anything from them after spamming your viewing and messing with your box THERE IDIOTS and they now have my email

ronand
14-05-16, 11:31
i get the same as you willie i think that World is 100% sending me these how would buy anything from them after spamming your viewing and messing with your box THERE IDIOTS and they now have my email

You wont last long here making stupid allegations.

abu baniaz
14-05-16, 11:52
You wont last long here making stupid allegations.
He is not referring to "world of satellite"

I have deleted the screenshots as they provide advertising

judge
14-05-16, 11:57
Nobody in this thread has been hacked.
Some fool with too much time on their hands is just taking advantage of people who don't secure their boxes.
You can probably track them down by checking IPs connected to your box.

notlikebo88y
14-05-16, 12:30
no nothing todo with world of satelitte at all world of satallite is helping others who have been affected by this nonsense bo88y is the doing this sorry if i posted looked like here

abu baniaz
14-05-16, 12:32
Whey are you using two accounts on the forum?

notlikebo88y
14-05-16, 12:34
judge i have tracked them down there idiots posting to save your box buy from them there a cardsharing service which is illegal so they are playing a dangerouse game them CS world there crazy it will come back to them some how but if you sign up to them then they have ur email

notlikebo88y
14-05-16, 12:43
i got new email so its not on public forums please delete my other account please would really appreciate it

notlikebo88y
14-05-16, 12:44
i also use vpn is that allowed aswell

judge
14-05-16, 14:10
judge i have tracked them down there idiots posting to save your box buy from them there a cardsharing service which is illegal so they are playing a dangerouse game them CS world there crazy it will come back to them some how but if you sign up to them then they have ur email

If you're going to leave your box open to the internet, it could be anyone.
Use
netstat in telnet to see what IP is connecting.