Challenge No3 - Defaced

Details on the challenge:

Deface - Easy

Welcome back to Altea's Challenges!

This time, you are a well known websites hosting company.

On a sunday morning, all the websites hosted on a specific server has been defaced .

Here are the evidences:


Download :

CAUTION this file can be blocked by your antivirus because it contains some well known codes. Please be aware of it before downloading it.

Download the evidence files


Questions :

- What techniques are used (give the details step by step)?

- Give the exact date and time when the attack has begun?

- Give the exact date and time when the defaced has been done?

- What are/is the source address(es) in play?

- What is special in these address(es)?

- What can you do to fix this server?

Please send your answers by email to defis@altea.ca

Again a nice Hamack for the winner!