Linux dir and dates
It only occured to me now, but why is it that date listings are not consistent? ex:
Code:
4 drwxr-xr-x 2 iceteks iceteks 4096 Mar 26 2010 fonts One of my sites got hacked and I'm just trying to figure out what the hacker got into and trying to figure how he got in so I can fix the exploit. |
Try
Code:
ls --full-time |
Looking up info on ls or using man will give you more info, but the basic answer is if the file was modified recently (I believe within the last 6 months) then the time is shown instead of the year. So if the time is shown, you know the date is within the last months, and from there can easily determine the year.
If you want to get a more consistent or specific date format, check the man for ls. Depending you version of you may be able to specify the date format. |
Oh ok, so it's time based, so last 6 months it shows differently. That's good to know. I don't see any files that were modified so I'm thinking the attack was SQL injection and they modified the templates in the database. I never use FTP so my password is never sent in clear text.
I just need to find this injection exploit and fix it. |
All times are GMT -5. The time now is 08:11 AM. |