#Panel was breached
22 messages · Page 1 of 1 (latest)
Sounds like you used a simple password for your wings server, also do you not have a backup?
For someone who is essentially an MSP I'd expect things of simple backups and the basics of being able to lockdown a server.
We didn't use a simple password for the wings. We used a long (132 size) password
and what has my website have to do with anything. I'm not a MSP
Ask yourself how your panel got breached. Were you on the latest version or not? If you were, it’s best to make a security report with your findings, I guess. IF it is related to pterodactyl
Unless you actually know how your system got breached there isn't any point in reporting it.
That's what I'm trying to find out
I've been looking at logs, system logs, bin logs, kernal logs, everything I can get my hands on to find out how
One of my admin can be root on my server because of a security breach in the panel and he doesn't want to tell me wich one, but he said months ago that he told the breach to ptero team^^
He often uses that breach to change things he normally can't, he respects the server and everything so I'm not afraid, but... just saying ptero could have some existing breaches^^
I don't always get to hear everything, But if there was an exploit like that actually reported to the team I doubt it would still exist
Well I hope so 🥲
Don't password protect via ssh and don't provide every soingle person root. each user account should have customized permissions
Dude, that is nuts. Nobody does that. If you have root access you don't need to have "breaches" bruh
Check the ssh login logs at the time the server got nuked. it'll have an IP
He does not have root access^^ basically, you can only login to user debian with my ssh key
Well, will do
does debian have sudo
yes?
Yes^^ but it still need my ssh key