+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Computing (https://hackforums.net/forumdisplay.php?fid=88)
+---- Forum: Linux (https://hackforums.net/forumdisplay.php?fid=85)
+---- Thread: [Ubuntu] Rogue Developer disabled SSH / Private Key (/showthread.php?tid=5714838)
Rogue Developer disabled SSH / Private Key - Bαker - Sep 10, 2017
Anything I can do? I had a developer go rogue and disable Private Key SSH and use Password. It's hosted on Digital Ocean so idk if I can contact them.
* - Targus - Sep 10, 2017
Do you have your DigitalOcean account secured? Or is that gone too?
* - Charger - Sep 10, 2017
DO should have a vps panel where you can VNC into the server. That's a root account that can do everything.?
* - Targus - Sep 10, 2017
(Sep 10, 2017 09:24 AM)Charger Wrote: DO should have a vps panel where you can VNC into the server. That's a root account that can do everything.?
I believe the server would still ask for the username/password, regardless of how you are accessing it.
* - Vana - Sep 10, 2017
(Sep 10, 2017 09:27 AM)Targus Wrote: I believe the server would still ask for the username/password, regardless of how you are accessing it.
You can reset the root password from DO's panel.
OP, it's very likely that your developer installed a rootkit for persistence so I advise that you transfer all important files out and launch a clean instance.
* - Charger - Sep 10, 2017
(Sep 10, 2017 09:27 AM)Targus Wrote: I believe the server would still ask for the username/password, regardless of how you are accessing it.
VNC on vps managers normally connects via the host machine that is running he vps.
If it's unmanaged to dedicated (shouldn't be) then op is sol.
* - Targus - Sep 10, 2017
(Sep 10, 2017 09:28 AM)Charger Wrote: VNC on vps managers normally connects via the host machine that is running he vps.
If it's unmanaged to dedicated (shouldn't be) then op is sol.
![[Image: jThlzM0.png]](https://i.imgur.com/jThlzM0.png)
Nope, still asks for login details. DigitalOcean provides unmanaged cloud servers.
(Sep 10, 2017 09:28 AM)Vana Wrote: You can reset the root password from DO's panel.
OP, it's very likely that your developer installed a rootkit for persistence so I advise that you transfer all important files out and launch a clean instance.
Yep, I second this user's statement if you still have access to your DO account.
* - Charger - Sep 10, 2017
(Sep 10, 2017 09:40 AM)Targus Wrote:
Nope, still asks for login details. DigitalOcean provides unmanaged cloud servers.
Yep, I second this user's statement if you still have access to your DO account.
Right, but you can reset the root password.
* - Bαker - Sep 10, 2017
I do have access to the DO, so I'll reset root tomorrow and get my SMM panel woot lmao
* - Charger - Sep 11, 2017
(Sep 10, 2017 08:19 PM)๖ۣۜMrDark Wrote: I do have access to the DO, so I'll reset root tomorrow and get my SMM panel woot lmao
Good, in the future, nobody but you should have root, like, EVER. Next time create proper user account roles for your developer.
It might be smart to scan your server for malicious code while you're at it.