Hacking Incident #096: Indonesian Child Protection Commission (KPAI) Website Defaced by 4nzeL4

On November 19th, 2018, at 21:02:16 WIB, the official website of the Indonesian Child Protection Commission (KPAI) was hacked and defaced by a hacker going by the name 4nzeL4. The hacker targeted a vulnerable part of the site, using an SQL Injection to deface the webpage.

Hacker Details

  • Hacker Name: 4nzeL4
  • Hacker Group: Newbie Security

Website Details

  • URL of Defaced Page: http://kpai.go.id/art.php
  • System: Linux
  • Web Server: Apache
  • IP Address: 180.250.62.75
  • Location: Indonesia

Incident Details

  • Date and Time: November 19th, 2018, 21:02:16 WIB

Additional Resources

Method of Attack

The website was breached using an SQL Injection, allowing the hacker to access and modify the database, resulting in the defacement of the page.

Reason for Attack

The hacker’s motivation for the defacement was to prove their skill, with the stated reason being: “I just want to be the best defacer.”