Hi,
somebody hacked a cpanel account (but thankfully not root access to whm), which is surprising considering the password was 9 characters long with 2 numbers and 2 capital letters and I had it set to brute force protection but I guess that failed.

user got in to cpanel, deleted all files then made a new index.html which has now been deleted.


Anyway, I was hoping for some advice on how to undelete the files.
as the files havent been rewritten over.

I need to undelete all files in home/gt6/ folder

If somebody could give me a list of commands to run from SSH then I would be very vrery appreciative


This forumrocks.

please help i'm stuck

shared server -> not a chance! you may not have overwritten the files, but others may have used the space. Restore from the backup you should have handy.

dedicated server -> you might have a small chance -> http://www.cyberciti.biz/tips/linuxu...ted-files.html

its not a shared server. its a dedicated whm. Their are no other accounts on the server except gt6 so no other person could have overwritten them.

how do I recover all, that tutorial didnt include anything for folders etc.

with difficulty is the answer to that.

http://www.xs4all.nl/~carlo17/howto/undelete_ext3.html

Never tried it personally.

i dont really get why its impossible when its so easy in windows.

Ah well. thanks anywy.

The *nix filing system is more secure than FAT/FAT32 or NTFS and was not really intended to be used by <ahem> non-experts. So accidental/malicious file deletion is not considered a "concern".