Hacking Incident #020: Daffodil School Nepal Website Defaced by 5TUP1D-BOY

Date: August 31, 2018

The website for Daffodil School Nepal has been defaced by the hacker known as 5TUP1D-BOY. The incident occurred on August 31st, 2018, at 10:55:01 WIB, exposing critical vulnerabilities in the site’s security.

Hacker Details:

  • Hacker Name: 5TUP1D-BOY
  • Hacker Group: Troll Hack Team

Website Details:

Incident Details:

Summary: On August 31st, 2018, the website for Daffodil School Nepal was defaced by 5TUP1D-BOY, a member of the Troll Hack Team. The defacement involved unauthorized changes to the site’s content via a file inclusion vulnerability. The attacker’s stated reason for the defacement was “just for fun,” reflecting a recreational motivation.

Proof of Concept Explanation: The attack exploited a file inclusion vulnerability, which allows unauthorized files to be included and executed on the server. This type of vulnerability can be used to manipulate the website’s content or gain unauthorized access to server resources.

Reason Explanation: The attacker’s motivation was “just for fun,” indicating that the defacement was driven by personal amusement rather than any specific agenda or grievance.

For further details and to view the defacement, please visit the provided archive and cyber attack report links.