PDA

View Full Version : How do you delete the Default channel


rage
02-02-2005, 02:35
some guy came in my ts server and he told me the right click on my name bullshit...which i didnt no then but i do now..but when he got sa he deleted my Default channel...how did he do it?...i wanna kno how to do that incase that shit happens agin..plz help..ty

guldi
02-02-2005, 09:34
which i didnt no then but i do now..but when he got sa he deleted my Default channel...how did he do it?
you have given him the right to deleted channels ?

I wouldn't know of a way to deleted the default channel (or does the "default flag" then jumps over to the next channel ??)

Brain
02-02-2005, 09:48
If you try to delete the default channel you get an error message. You must assign the default attribute to another channel first before you can delete the old default channel.

If you now have a server without a default channel I'd say there is a realistic chance there is somehow a way to manipulate Teamspeak's db file remotely, for example by injecting SQL statements, especially since the TCPQuery interface doesn't allow creating or deleting channels.
However this is not the only theory because theoretically the attacker could've gotten direct access to the server.dbs itself by compromising the server computer.

My personal guesstimation is that chances are 60/40 for SQL injection since injecting a SQL statement is far easier than compromising the server, getting shell access and editing the server.dbs. Besides, if you already have access to the server you can do far worse things than delete channels and that's what cyber vandals are usually after.

rage
02-02-2005, 22:08
if you have acess to the ftp...how would you get to those files (server.dbs)??

Brain
02-02-2005, 22:22
Oh, FTP access? That's luxurious. You change to the directory that contains the server.dbs, usually /usr/local/tss2 but ymmv, download it, use a tool that reads (and writes) SQLite files, search for the default channel, delete it from the file, then upload it again. And there we go, default channel is gone.

rage
03-02-2005, 02:44
hey dude i really dont understand...do you think you can hop on my ts and walk me through it...heres the ip

69.93.210.114:8777

thx much!

Brain
03-02-2005, 08:56
No, I won't.


Edited by Guldi: I hope you do not have open ftp access to your TS folder ? FTP is not encrypted (per default) so it may be an easy thing to get your password and then do what Brain described.

PS: there are good books about IT Security, you should probably make yourself a little bit familar with it ?

rage
04-02-2005, 05:03
i have no idea what teamspeak is about tho..

Brain
04-02-2005, 09:44
i have no idea what teamspeak is about tho..
In regards to your earlier post it is good to know where you're coming from. Since your only objective seems to be wasting our time I have no more time to waste on you. Recommend close.