Land of Karchan

Server Troubles
Published Date 2018-10-14T16:49:06

The server, as you may have noticed, was behaving erratically today. That is because I was working on it.

So, I've got some good news, and some bad news.

The Bad News

I noticed an application was deployed in my application server that I did not put there. It is called Sarketsdr, and its purpose is to disclose the filesystem by deploying a Java/JavaScript/Web Filebrowser and starting shells to run commands.

So far I have not been able to find any information on it or how it got there. I have removed the offending application and closed the administration console of the application server for remote administration.

I know I've been running a slightly old application server. I will remedy this soon. I hope the current measures will at least buy me some time.

The Good News

The server seems to be up, and I have installed a new valid SSL security certificate from Let's Encrypt. You can use https://www.karchan.org again without the nasty warnings.

Matters are ongoing.


By Karn.