Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Ubuntu 

Rogue Developer disabled SSH / Private Key

Anything I can do? I had a developer go rogue and disable Private Key SSH and use Password. It's hosted on Digital Ocean so idk if I can contact them.
Do you have your DigitalOcean account secured? Or is that gone too?
DO should have a vps panel where you can VNC into the server. That's a root account that can do everything.?
(Sep 10, 2017 09:24 AM)Charger Wrote:  DO should have a vps panel where you can VNC into the server. That's a root account that can do everything.?

I believe the server would still ask for the username/password, regardless of how you are accessing it.
(Sep 10, 2017 09:27 AM)Targus Wrote:  I believe the server would still ask for the username/password, regardless of how you are accessing it.

You can reset the root password from DO's panel.

OP, it's very likely that your developer installed a rootkit for persistence so I advise that you transfer all important files out and launch a clean instance.
(Sep 10, 2017 09:27 AM)Targus Wrote:  I believe the server would still ask for the username/password, regardless of how you are accessing it.

VNC on vps managers normally connects via the host machine that is running he vps.
If it's unmanaged to dedicated (shouldn't be) then op is sol.
(Sep 10, 2017 09:28 AM)Charger Wrote:  VNC on vps managers normally connects via the host machine that is running he vps.
If it's unmanaged to dedicated (shouldn't be) then op is sol.

[Image: jThlzM0.png]

Nope, still asks for login details. DigitalOcean provides unmanaged cloud servers.

(Sep 10, 2017 09:28 AM)Vana Wrote:  You can reset the root password from DO's panel.

OP, it's very likely that your developer installed a rootkit for persistence so I advise that you transfer all important files out and launch a clean instance.

Yep, I second this user's statement if you still have access to your DO account.
(Sep 10, 2017 09:40 AM)Targus Wrote:  [Image: jThlzM0.png]

Nope, still asks for login details. DigitalOcean provides unmanaged cloud servers.


Yep, I second this user's statement if you still have access to your DO account.

Right, but you can reset the root password.
I do have access to the DO, so I'll reset root tomorrow and get my SMM panel woot lmao
(Sep 10, 2017 08:19 PM)Bαker Wrote:  I do have access to the DO, so I'll reset root tomorrow and get my SMM panel woot lmao

Good, in the future, nobody but you should have root, like, EVER. Next time create proper user account roles for your developer.
It might be smart to scan your server for malicious code while you're at it.


Possibly Related Threads...
Thread / Author Replies Views Last Post
by trogneMay 19, 2017 09:36 AM 3 176 May 19, 2017 09:36 AM
Last Post: trogne
by BLOW.Aug 25, 2016 08:30 AM 9 325 Aug 25, 2016 08:30 AM
Last Post: BLOW.
by LorenzonJun 25, 2015 10:21 AM 4 136 Jun 25, 2015 10:21 AM
Last Post: xkox